Edit tour

Windows Analysis Report
http://www.traininng.com

Overview

General Information

Sample URL:	http://www.traininng.com
Analysis ID:	1428291
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Html Dropper

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2644 --field-trial-handle=2180,i,3619218562620070957,7726421293079254978,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4496 --field-trial-handle=2180,i,3619218562620070957,7726421293079254978,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.traininng.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_211	JoeSecurity_HtmlDropper	Yara detected Html Dropper	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://www.traininng.com/	HTTP Parser: Title: Online Professional Trainings Provider \| Professional Courses does not match URL
Source: https://www.traininng.com/live-webinars	HTTP Parser: Title: Live Webinars \| Professional Webinars Online \| Courses Online does not match URL
Source: https://www.traininng.com/recorded-webinars	HTTP Parser: Title: Recorded Webinars\|Professional Recorded Webinars \| Courses does not match URL
Source: https://www.traininng.com/registration	HTTP Parser: Title: Online Professional Training Registration - Traininng.com does not match URL
Source: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live	HTTP Parser: Title: Managing Termination of Employment in the Canadian Workplace: New Developments and Best Practices does not match URL
Source: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live	HTTP Parser: Title: Power of Perspective and Attitude: How to Transform your Life does not match URL
Source: https://www.traininng.com/webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live	HTTP Parser: Title: 5 Key Strategies to Leverage Positive Psychology for Better Leadership does not match URL
Source: https://www.traininng.com/webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live	HTTP Parser: Title: 3-Hour Virtual Seminar on Business Communication: Grammar, Better Writing, Email, And Other Common Communication in The Workplace does not match URL
Source: https://www.traininng.com/webinar/growth:-transforming-issues-into-performance--206515live	HTTP Parser: Title: Growth: Transforming issues into Performance does not match URL
Source: https://www.traininng.com/webinar/telling-stories-with-excel-data--206451live	HTTP Parser: Title: Telling stories with Excel data does not match URL

Source: https://www.traininng.com/registration

HTTP Parser: <input type="password" .../> found

Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://www.traininng.com/control/webinar-packhttps://www.traininng.com/newlogin	HTTP Parser: No favicon

Source: https://www.traininng.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/aboutus	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/aboutus	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/live-webinars	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/live-webinars	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/recorded-webinars	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=34674	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=34674	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/registration	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/registration	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=61834	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=61834	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63240	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63240	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63494	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63494	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63494	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=34496	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=34496	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=60403	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=60403	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/growth:-transforming-issues-into-performance--206515live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/growth:-transforming-issues-into-performance--206515live	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=62614	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=62614	HTTP Parser: No <meta name="author".. found
Source: https://www.traininng.com/webinar/telling-stories-with-excel-data--206451live	HTTP Parser: No <meta name="author".. found

Source: https://www.traininng.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/aboutus	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/aboutus	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/live-webinars	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/live-webinars	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/recorded-webinars	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=34674	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=34674	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/registration	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/registration	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=61834	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=61834	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63240	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63240	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63494	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63494	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=63494	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=34496	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=34496	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=60403	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=60403	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/growth:-transforming-issues-into-performance--206515live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/growth:-transforming-issues-into-performance--206515live	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=62614	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/speakerprofile?speaker_id=62614	HTTP Parser: No <meta name="copyright".. found
Source: https://www.traininng.com/webinar/telling-stories-with-excel-data--206451live	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.traininng.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/css/extra.MIN.css HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/css/style.min.css HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/fonts/css/font-awesome.min.css HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/js/jquery.min.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/js/jquery.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/traininng/js/xFunctions.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/prototypejs/prototype.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/prototypejs/validation.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/prototypejs/effects.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/fieldlookup.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/selectall.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/string_util.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/calendar_date_select.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/prototypejs/popup.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/js/bootstrap.min.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B76E871C0DD8127C7FC0005A59B95D7D.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/hrci-thr-new.png HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B76E871C0DD8127C7FC0005A59B95D7D.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/download-training-catalogue.png HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/js/owl.carousel.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/slider1.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/slider2.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/logoicon.png HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/slider3.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/hrci-thr-new.png HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/speakers/61834/Ben%20Currie_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/speakers/63240/Amy%20Brice_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/download-training-catalogue.png HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/logoicon.png HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/products/detail/206534rec.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/defaultWebinarImg.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/speakers/63494/ryan%20Lavarnway_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/speakers/34496/emq_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/speakers/60403/Remi%20Vogel_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/speakers/62614/Terry%20Winship_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fonts/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.traininng.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.traininng.com/images/fonts/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
Source: global traffic	HTTP traffic detected: GET /images/speakers/34362/Carl%20Patterson_Large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/59184/Soundarya%20J_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/60019/Jacob%20Kelley_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/60042/Stephen%20Abramson_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/secure-payment-stripe.png HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=819939597&_u=IGBAgAABAAAAAGAAI~&z=822565831 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/slider3.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/slider2.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/slider1.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/61834/Ben%20Currie_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/63240/Amy%20Brice_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/why-choose.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/images/css/style.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/63494/ryan%20Lavarnway_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /ekr/asset_composer.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=819939597&gjid=1855838004&_gid=253988120.1713460940&_u=IGBAgAABAAAAAGAAI~&z=1007773124 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=819939597&_u=IGBAgAABAAAAAGAAI~&z=822565831 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/speakers/34496/emq_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/defaultWebinarImg.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/60403/Remi%20Vogel_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/62614/Terry%20Winship_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/products/detail/206534rec.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/34362/Carl%20Patterson_Large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/59184/Soundarya%20J_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.0.1713460941.60.0.0
Source: global traffic	HTTP traffic detected: GET /compose/zopim_chat/5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: ekr.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.traininng.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/speakers/60042/Stephen%20Abramson_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/speakers/60019/Jacob%20Kelley_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/secure-payment-stripe.png HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/why-choose.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.0.1713460941.60.0.0
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.0.1713460941.60.0.0
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-main-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/zopim_chat/5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: ekr.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.traininng.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-chat-sdk-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/FUXgax5OwuSIBv-r/c/1713460946358 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: aX0+lUbvp5ZlozSQ0eDaRQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/c/1713460947052 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aboutus HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.0.1713460941.60.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460947645/1713460947645%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Online%20Professional%20Trainings%20Provider%20%7C%20Professional%20Courses%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2F%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Irg0bRDVpHT4MiKe7m+54PtmCJsAnojpKHZMKDbTPs3x4INDD4EjSyc2HoY2FuG3Kun599zt8b4gH+PvRoU9b9unsxj8IXxHn2/RCpeKRuhOK2pmHaoE2op+11Lz
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713460947648 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Irg0bRDVpHT4MiKe7m+54PtmCJsAnojpKHZMKDbTPs3x4INDD4EjSyc2HoY2FuG3Kun599zt8b4gH+PvRoU9b9unsxj8IXxHn2/RCpeKRuhOK2pmHaoE2op+11Lz
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713460948144 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=MvlFFXkQYHiDURZCV6nFa7HjXa+VplRqhibNuspYlAaHTKPQya5raiCnlW71JnnCN0NvguIxU+FkdBKxhJr0QZn+lyho3ihwHNI5cmBYDmjJustcEv4S1ygHj8s9
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713460948677 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2TlxsKizWJD8A8n/kY8tMuoHuXRBUSLRu8+nYEIGG6a40PDaDapRXIPt0Daub8Pe1JRdReWSzq/hM57a0I8Bd3SfIKgXCZU2FJxOBB+c1O0+R/yAZZGc/kUzdOGe
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460948791/1713460948791%0A-432.47619198505527%0A2%0A3%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460946359%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2TlxsKizWJD8A8n/kY8tMuoHuXRBUSLRu8+nYEIGG6a40PDaDapRXIPt0Daub8Pe1JRdReWSzq/hM57a0I8Bd3SfIKgXCZU2FJxOBB+c1O0+R/yAZZGc/kUzdOGe
Source: global traffic	HTTP traffic detected: GET /widget/images/gallery/badge/custom/everyday/05.png HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /s/W/ws/DyrSvFruBUrXMaS9/c/1713460949334 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=C2ExBQNT2ez7g9xfY4hfv3unyyJ7Tv08P+biNRk+QSt3iK2AQMe8Xbomjd88SoELf6yLt04iwd/4Zl6ttKoEtza/9w1O1olnFOy8jUI6TfcFJqN5dByWZnlAgXImSec-WebSocket-Key: st3htm4kSM27fwN7vBhMag==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /widget/images/gallery/badge/custom/everyday/05.png HTTP/1.1Host: v2.zopim.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live-webinars HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/c/1713460949911 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=C2ExBQNT2ez7g9xfY4hfv3unyyJ7Tv08P+biNRk+QSt3iK2AQMe8Xbomjd88SoELf6yLt04iwd/4Zl6ttKoEtza/9w1O1olnFOy8jUI6TfcFJqN5dByWZnlAgXIm
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/p/1713460950481 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=CwgAzMprAC6P7G/wfg0bidj0xciS4b9nvCgnpSpUoJVK8F9Wn9fsl6TAg/Wa9aFTdyphaPEPI/ADTyd//yfQi6lm0T8OlQDQKkDJhrIeEfyz66mLPoDF+4ITXATM
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713460950480/1713460950479%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22World%20Class%20Online%20Professional%20Training%20%7C%20Courses%20%7C%20Traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Faboutus%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=CwgAzMprAC6P7G/wfg0bidj0xciS4b9nvCgnpSpUoJVK8F9Wn9fsl6TAg/Wa9aFTdyphaPEPI/ADTyd//yfQi6lm0T8OlQDQKkDJhrIeEfyz66mLPoDF+4ITXATM
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /images/js/jquery-1.12.4.min.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/p/1713460951025 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=BvGbgifBn3AP9NnBFZZ7FdMSTz95MFRItbf5BOcLQk249aF6SR1VfjoNT8iGUIoyy4BkcW0IkF/G/Xo7QINKZqrPRus1IygJ4spNu8FQ9aKP2n89cr9C+yrmWoMa
Source: global traffic	HTTP traffic detected: GET /images/products/detail/206588.png HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/select-img.png HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/images/css/style.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/33911/Christopher%20Faulkner_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/62638/Manish%20Gupta_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/62984/Brian_Anderson_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/40562/Jason_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/p/1713460951555 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=SBAdojpagsTWs4Tku3v7ejzaaTI8z+xZCkkSpVzd86ZlnJmBcOQPPiid3iNzPiRVY5dQJPqdH0TTw8OAVAz36w9AfK+ZIi0J3hBmrt/nLv9pVjZ6ai7sBIcjOxln
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713460951604/1713460951604%0A-501.5023837035554%0A2%0A3%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460949336%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=SBAdojpagsTWs4Tku3v7ejzaaTI8z+xZCkkSpVzd86ZlnJmBcOQPPiid3iNzPiRVY5dQJPqdH0TTw8OAVAz36w9AfK+ZIi0J3hBmrt/nLv9pVjZ6ai7sBIcjOxln
Source: global traffic	HTTP traffic detected: GET /images/speakers/52087/Racquel%20Harris_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
Source: global traffic	HTTP traffic detected: GET /images/select-img.png HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/61837/Jared%20Garrett%20-%20Large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/38472/Mathew_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/33911/Christopher%20Faulkner_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/40562/Jason_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/62638/Manish%20Gupta_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/62480/Kenneth%20user_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/61394/Peter%20Christian_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/62984/Brian_Anderson_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/ws/vASWZvCWfxsRirPH/c/1713460952085 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=jt80erKDH+qJtp9rPrgEXg9nJOrC6K3HYKStbq+kSl+4lr2M0sH5HhgWsVnD4sTkPh6kIJTXhJRD8GCDrSlmppzmPXB5Mgt9fPmVH1wkdgZrCxnd68wWWpsvtA9tSec-WebSocket-Key: 4Y15N7JBDUkvn+XHOi1sPQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /images/products/detail/205981.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/206588.png HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/52087/Racquel%20Harris_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/206118.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/205915.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/live-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/61837/Jared%20Garrett%20-%20Large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/c/1713460952569 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=jt80erKDH+qJtp9rPrgEXg9nJOrC6K3HYKStbq+kSl+4lr2M0sH5HhgWsVnD4sTkPh6kIJTXhJRD8GCDrSlmppzmPXB5Mgt9fPmVH1wkdgZrCxnd68wWWpsvtA9t
Source: global traffic	HTTP traffic detected: GET /images/speakers/38472/Mathew_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/62480/Kenneth%20user_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/61394/Peter%20Christian_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/205981.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713460953050/1713460953050%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Live%20Webinars%20%7C%20Professional%20Webinars%20Online%20%7C%20Courses%20Online%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Flive-webinars%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=cKd77/rrhSUB3VXYGzhWh0/SSD0i+tTjbygJpUJ/VqfO7WHt0+j14AkM+Ol/TaPqQnz4P0x08ZAz1mG+4FHT3VFHJtZcVONTwPsEuCG7RW+qxB49EXQOa7fp1QeH
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/p/1713460953051 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=cKd77/rrhSUB3VXYGzhWh0/SSD0i+tTjbygJpUJ/VqfO7WHt0+j14AkM+Ol/TaPqQnz4P0x08ZAz1mG+4FHT3VFHJtZcVONTwPsEuCG7RW+qxB49EXQOa7fp1QeH
Source: global traffic	HTTP traffic detected: GET /images/products/detail/206118.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /images/products/detail/205915.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/p/1713460953590 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=SPAuhBeGX29kQZYCFhgHUrH6+R0tKH5hGdxAbejY+LWoF+A+N0UaUCZGiOMvnv1SpSB0BKL2tXvdo791AIP3XAo2+s81G4FSH2DN27t+8v7wqYwV4Fwr84hNAS+m
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713460953768/1713460953768%0A-500%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460952086%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=SPAuhBeGX29kQZYCFhgHUrH6+R0tKH5hGdxAbejY+LWoF+A+N0UaUCZGiOMvnv1SpSB0BKL2tXvdo791AIP3XAo2+s81G4FSH2DN27t+8v7wqYwV4Fwr84hNAS+m
Source: global traffic	HTTP traffic detected: GET /recorded-webinars HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/37730/Cox_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/207034.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/207042.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/207031.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/34674/Ryan_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/55398/Howard%20Levitt_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/speakers/39361/W_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/37730/Cox_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/35245/U_Large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/207034.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/63495/Payson%20Hall_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/34674/Ryan_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/207042.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/207028.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/ws/qOxiKg+ulwNG3te1/c/1713460960972 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=0oEGvm14nlRzfxq/ISeSQQpEcUWBa9iynRySZoDfVF/Tui6avy4HAv/OkTUuVwBBLw6ojzUWpR91tSsrimkeGOQGvEEWhgW/ET1Tl0XEfTHVc7GiMZYjfVR/fT2zSec-WebSocket-Key: iZgCPuvM0/sn1ztBILLKyA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /images/speakers/36875/Andy_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/207031.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/63517/Michael%20Gozzo_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/55398/Howard%20Levitt_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/60119/Sherrine%20Washington_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/39361/W_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/35245/U_Large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/qOxiKg+ulwNG3te1/c/1713460961553 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=0oEGvm14nlRzfxq/ISeSQQpEcUWBa9iynRySZoDfVF/Tui6avy4HAv/OkTUuVwBBLw6ojzUWpR91tSsrimkeGOQGvEEWhgW/ET1Tl0XEfTHVc7GiMZYjfVR/fT2z
Source: global traffic	HTTP traffic detected: GET /images/speakers/63495/Payson%20Hall_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/36875/Andy_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/63517/Michael%20Gozzo_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/speakers/60119/Sherrine%20Washington_large.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /images/products/detail/207028.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /speakerprofile?speaker_id=34674 HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.traininng.com/recorded-webinarsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/qOxiKg+ulwNG3te1/d/1713460962073/1713460962073%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Recorded%20Webinars%7CProfessional%20Recorded%20Webinars%20%7C%20Courses%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Frecorded-webinars%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Wlhqi80+L39ng/lgN9dGvAlplyW0sZKJOgUsYRAMtcDuPAaVJOXNeLwsndlKvnrjuE4BsRoK4SSkIQ3JzZaSbp66+U9ZmFIm1/Tkgmu1zGV2Y0irryu2HOwhpxLr
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/qOxiKg+ulwNG3te1/p/1713460962075 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Wlhqi80+L39ng/lgN9dGvAlplyW0sZKJOgUsYRAMtcDuPAaVJOXNeLwsndlKvnrjuE4BsRoK4SSkIQ3JzZaSbp66+U9ZmFIm1/Tkgmu1zGV2Y0irryu2HOwhpxLr
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/qOxiKg+ulwNG3te1/p/1713460962596 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/qOxiKg+ulwNG3te1/d/1713460962661/1713460962661%0A-471.3580993425537%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460960973%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/WTE2hHegr+qWqYT3/c/1713460963712 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODaSec-WebSocket-Key: 11rWpoOjqur2cbamdzOxDw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/c/1713460964283 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713460964807/1713460964807%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Compliance%20Experts%20%E2%80%93%20traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D34674%22%2C%22ref%22%3A%22https%3A%2F%2Fwww.traininng.com%2Frecorded-webinars%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Pxx+MZbpVXu4caiGMGMnXFHgk+tHsJQSwurREewMlMdisXV+IQ5ztwMhKstYPJN9mtkNavdGSqrxWIjItBWjad+HtNOlqiYg7vXnjCLb+5bTF8SL+D2SMxB0JiTN
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/p/1713460964808 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Pxx+MZbpVXu4caiGMGMnXFHgk+tHsJQSwurREewMlMdisXV+IQ5ztwMhKstYPJN9mtkNavdGSqrxWIjItBWjad+HtNOlqiYg7vXnjCLb+5bTF8SL+D2SMxB0JiTN
Source: global traffic	HTTP traffic detected: GET /control/webinar-packhttps://www.traininng.com/newlogin HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/p/1713460965375 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=IhqMv6Dfu1jqH/2RIFjpvkm5kSZjujGL3Fxiog6zFSaY1D0bEtR4N91l/R1kn4lGeks1m2tTj7hBnZiz3jGivEpZmsVKRb0URoCnsjtaVskRQEqJ6x3nTRRuQ1sK
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713460965381/1713460965381%0A-503.0315317296275%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460963713%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=IhqMv6Dfu1jqH/2RIFjpvkm5kSZjujGL3Fxiog6zFSaY1D0bEtR4N91l/R1kn4lGeks1m2tTj7hBnZiz3jGivEpZmsVKRb0URoCnsjtaVskRQEqJ6x3nTRRuQ1sK
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/control/webinar-packhttps://www.traininng.com/newloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460965611/1713460965611%0A-432.47619198505527%0A3%0A3%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=IhqMv6Dfu1jqH/2RIFjpvkm5kSZjujGL3Fxiog6zFSaY1D0bEtR4N91l/R1kn4lGeks1m2tTj7hBnZiz3jGivEpZmsVKRb0URoCnsjtaVskRQEqJ6x3nTRRuQ1sK
Source: global traffic	HTTP traffic detected: GET /control/main HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/control/webinar-packhttps://www.traininng.com/newloginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /registration HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
Source: global traffic	HTTP traffic detected: GET /control/main HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713460967617/1713460967617%0A-501.5023837035554%0A3%0A3%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=VFnFiEUIsDBZPpekt2JIzEZ8ZbAqw1535qX3YidR+jB9yeJjr/30sMNO0wk260gA87p5OPLjNJoT8puTq53YpN8GBkl/27rC0sOal3gZlzFmOMdUYkDR/dLDf5aq
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/SKukINt-UGvOK5QK/c/1713460969192 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=7v/Q/EscEpP4Ha9uBQooyZbNa+ZlEuoYXHL25HZpKmina8tdwZseTVKXIOIZWcPJ/CwyibvNbSsuBgN7f0LQzRBxAO1EwSXu8opcn6+kycDdcVBOUqoGinPOwsQiSec-WebSocket-Key: nmGx+04HlYaRXJstZadbuQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/SKukINt-UGvOK5QK/c/1713460969705 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=7v/Q/EscEpP4Ha9uBQooyZbNa+ZlEuoYXHL25HZpKmina8tdwZseTVKXIOIZWcPJ/CwyibvNbSsuBgN7f0LQzRBxAO1EwSXu8opcn6+kycDdcVBOUqoGinPOwsQi
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/SKukINt-UGvOK5QK/d/1713460970236/1713460970236%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Online%20Professional%20Training%20Registration%20-%20Traininng.com%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fregistration%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=eS2ElzwZuWUXirOAWzpY0AHrwD8xFNpAc61ibbbyZ6NSX/wIg1jttqp0mKcAgEt5xigEZHbURddCkiII8DO6LLAx9xzOU8gNdE/rbEsl/oRpy3CNUuJRLT4Cj33O
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/SKukINt-UGvOK5QK/p/1713460970237 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=eS2ElzwZuWUXirOAWzpY0AHrwD8xFNpAc61ibbbyZ6NSX/wIg1jttqp0mKcAgEt5xigEZHbURddCkiII8DO6LLAx9xzOU8gNdE/rbEsl/oRpy3CNUuJRLT4Cj33O
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713460970626/1713460970626%0A-500%0A3%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=eS2ElzwZuWUXirOAWzpY0AHrwD8xFNpAc61ibbbyZ6NSX/wIg1jttqp0mKcAgEt5xigEZHbURddCkiII8DO6LLAx9xzOU8gNdE/rbEsl/oRpy3CNUuJRLT4Cj33O
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/SKukINt-UGvOK5QK/p/1713460970807 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=cP5ZJvUH4iiwK7a30Y6Zq04DUX192M6RiuD1SkUU6NkD6JxGZxbUYc8eSFSvfKfq7F/TvFZdAHjOtdMlwgmA6fjM/V0VUcgNWVqygLwqLRPAM6Eizx6xry5Cz9sf
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/SKukINt-UGvOK5QK/d/1713460970866/1713460970866%0A-502.02323793626044%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460969193%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=cP5ZJvUH4iiwK7a30Y6Zq04DUX192M6RiuD1SkUU6NkD6JxGZxbUYc8eSFSvfKfq7F/TvFZdAHjOtdMlwgmA6fjM/V0VUcgNWVqygLwqLRPAM6Eizx6xry5Cz9sf
Source: global traffic	HTTP traffic detected: GET /speakerprofile?speaker_id=61834 HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460968.33.0.0
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/18ll0A0MviQGtcZI/c/1713460973622 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=iO5mOXIeW4b3FO8Qy3EZlTUsFGlG0R77YN7CZBQHsujzYT7nW9pDah6bX/GYfB9H/Up3MOiB8FIH8Qv1zq0acdnIeMs+l3dJsBnqcSJCFvl5b2ASWSnhnxqr/6DVSec-WebSocket-Key: m3y6akyKJQ4T4xq3bT2eCA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/18ll0A0MviQGtcZI/c/1713460974139 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=iO5mOXIeW4b3FO8Qy3EZlTUsFGlG0R77YN7CZBQHsujzYT7nW9pDah6bX/GYfB9H/Up3MOiB8FIH8Qv1zq0acdnIeMs+l3dJsBnqcSJCFvl5b2ASWSnhnxqr/6DV
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/18ll0A0MviQGtcZI/d/1713460974763/1713460974763%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Compliance%20Experts%20%E2%80%93%20traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D61834%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=TgyGB1E7jG1aSWPAdwzgCrhQ7oeu1HFev4Nc2lKMUZgo2G7yh7W47oB6JiS8Fm+sr6kh8dPxJV2JoSvxAqqsX4Idn5Aa2ESC/NRAyvEdtVEW+qqmfdQkmNEzh0xb
Source: global traffic	HTTP traffic detected: GET /webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/18ll0A0MviQGtcZI/p/1713460974764 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=TgyGB1E7jG1aSWPAdwzgCrhQ7oeu1HFev4Nc2lKMUZgo2G7yh7W47oB6JiS8Fm+sr6kh8dPxJV2JoSvxAqqsX4Idn5Aa2ESC/NRAyvEdtVEW+qqmfdQkmNEzh0xb
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /images/hrci_approved_seal_new.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529liveAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/18ll0A0MviQGtcZI/p/1713460975892 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /images/SHRM-Recertification-Provider_new.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529liveAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
Source: global traffic	HTTP traffic detected: GET /images/js/convertPdf/pdfCanvas.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529liveAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
Source: global traffic	HTTP traffic detected: GET /images/js/convertPdf/pdfJs.js HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529liveAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
Source: global traffic	HTTP traffic detected: GET /images/hrci_approved_seal_new.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1
Source: global traffic	HTTP traffic detected: GET /images/SHRM-Recertification-Provider_new.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460977.24.0.0
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/tIyNfGcQ0b8hQ-eV/c/1713460978367 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SSSec-WebSocket-Key: iI7lWB30maAqF5b9mfHlxw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /speakerprofile?speaker_id=63240 HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460977.24.0.0; titleName1234=titleName123
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/Pv1-K-G1h93dn68m/c/1713460981052 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SSSec-WebSocket-Key: am6pbKvNvsIK77zQLozPEQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1; titleName1234=titleName123; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460980.21.0.0
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /images/detailpage_webinar_img/206534.jpg HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534liveAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1; titleName1234=titleName123; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460980.21.0.0
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/detailpage_webinar_img/206534.jpg HTTP/1.1Host: www.traininng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460980.21.0.0; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=2
Source: global traffic	HTTP traffic detected: GET /s/W/ws/yK5ZszCXro6Sjjxj/c/1713460984847 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SSSec-WebSocket-Key: lf9GANZ9lxs+Lsr6ZfW4gw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /speakerprofile?speaker_id=63494 HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=2; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460984.17.0.0
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/6UGvo4Q26W1iBuza/c/1713460987110 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SSSec-WebSocket-Key: gqh/CHMK1svYTwllf7PYGA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/ws/tIyNfGcQ0b8hQ-eV/c/1713460988623 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SSSec-WebSocket-Key: 0P8gBn5HnpMc8Xu+PrL6Gw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=2; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460986.15.0.0
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/18ll0A0MviQGtcZI/d/1713460975961/1713460975961%0A-463.70264686052326%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460973622%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /s/W/ws/8PIe6s1e1u7FhoTN/c/1713460990972 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2+jOQc3M5vz/itoO+8BLhHnpsaZZPRu4z3HT57Fo6B3DWyKu8iErSAN6dWguo14/kIIRoabunNSao9MbvsUVSKdvTIndJsMOfm9cr63DzQ6LrslkwfjIgn09aThtSec-WebSocket-Key: APFI9M6H5wg6vYYgqFmqfg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713460980612/1713460980612%0A-503.0315317296275%0A3%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /speakerprofile?speaker_id=34496 HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=3; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460990.11.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Pv1-K-G1h93dn68m/c/1713460981569 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460982611/1713460982611%0A-432.47619198505527%0A4%0A3%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713460984611/1713460984611%0A-501.5023837035554%0A4%0A3%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /s/W/ws/Pv1-K-G1h93dn68m/c/1713460991619 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=a40g/VRpFaTptIPCLuvsRYqFQu0G5AAopOTpt2X2Ag+B/WCD+7yW33GilGvYpvPq6O3sLySJ2hDxHmKGY/uwzD2MLhWiRkxanxeB6GdnO+CYUx9w7gph72Ewrp07Sec-WebSocket-Key: llQkYx9fJSy91N6QZx1BQg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/yK5ZszCXro6Sjjxj/c/1713460985382 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/6UGvo4Q26W1iBuza/c/1713460987624 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713460987635/1713460987634%0A-500%0A4%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/SKukINt-UGvOK5QK/d/1713460987642/1713460987642%0A-502.02323793626044%0A3%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
Source: global traffic	HTTP traffic detected: GET /s/W/ws/mag4xmOOxKAnhFKT/c/1713460992848 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMlSec-WebSocket-Key: /nHEbvHWtJhWCCBjnUTv/A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/p/1713460990884 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2+jOQc3M5vz/itoO+8BLhHnpsaZZPRu4z3HT57Fo6B3DWyKu8iErSAN6dWguo14/kIIRoabunNSao9MbvsUVSKdvTIndJsMOfm9cr63DzQ6LrslkwfjIgn09aTht
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713460991107 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=RzvkDQ1DE/rCFVl3lfMSiqeZu0xnmBGGMhuGSiqJd6zzcbScyMruTv+yVvyki9RYAlgvMLo00wtLEheXMsIYOapl1cLkmjNtgwQyaOSoHYevqk5Sd5MP04vfXUiQ
Source: global traffic	HTTP traffic detected: GET /webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=3; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460992.9.0.0
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/i0fuREjk14N6dcnn/c/1713460996905 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: JIJCk2AGj1pME7fT26vA3A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /speakerprofile?speaker_id=60403 HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; title4=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace; product_Id4=206018live; instructor4=Melissa%A0Esquibel; duration4=3%20Hours; price4=%24250.00; date4=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=4; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460996.5.0.0
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=1415927296&gjid=368065177&_gid=253988120.1713460940&_u=ACCAgAABAAAAAGAAI~&z=1194558989 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=1415927296&_u=ACCAgAABAAAAAGAAI~&z=1818446972 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/eNOo9DO5rrWfw+Xw/c/1713461000918 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: E6xZz1ZUAmToq4oTTpsF4A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=1415927296&_u=ACCAgAABAAAAAGAAI~&z=1818446972 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webinar/growth:-transforming-issues-into-performance--206515live HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; title4=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace; product_Id4=206018live; instructor4=Melissa%A0Esquibel; duration4=3%20Hours; price4=%24250.00; date4=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=4; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713461000.1.0.0
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /s/W/ws/mag4xmOOxKAnhFKT/c/1713461001621 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: UHrxO88azMmDKGXMo+gdSA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/ws/8PIe6s1e1u7FhoTN/c/1713461001640 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: CnfHEQfmWTZw1zm1dZmUTQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/owIuyBn+KNjNOoT2/c/1713461002981 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: rQGs4UK1R4jGCy5WwLDM6g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /speakerprofile?speaker_id=62614 HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; title4=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace; product_Id4=206018live; instructor4=Melissa%A0Esquibel; duration4=3%20Hours; price4=%24250.00; date4=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; _gat=1; title5=Growth%3A%20Transforming%20issues%20into%20Performance%20; product_Id5=206515live; instructor5=Remi%20Vogel%A0; duration5=60%20Minutes; price5=%24110.00; date5=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=5; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713461002.60.0.0
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947If-Modified-Since: Thu, 18 Apr 2024 17:22:25 GMT
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.traininng.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 18 Apr 2024 16:41:04 GMT
Source: global traffic	HTTP traffic detected: GET /s/W/ws/K-Q-O2MIjscWk9Ze/c/1713461005028 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: bF3uQnv4w1N5oEWYUkVVJw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /webinar/telling-stories-with-excel-data--206451live HTTP/1.1Host: www.traininng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; title4=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace; product_Id4=206018live; instructor4=Melissa%A0Esquibel; duration4=3%20Hours; price4=%24250.00; date4=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; _gat=1; title5=Growth%3A%20Transforming%20issues%20into%20Performance%20; product_Id5=206515live; instructor5=Remi%20Vogel%A0; duration5=60%20Minutes; price5=%24110.00; date5=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=5; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713461005.57.0.0
Source: global traffic	HTTP traffic detected: GET /s/W/ws/i0fuREjk14N6dcnn/c/1713461007666 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: VQ9WGiJvgs+iYp7XqxnSHQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1Host: v2.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.traininng.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/ws/H9bADLiKEfRxPT7i/c/1713461009603 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: rqoWSO4BT6Lg6NN0y8SKVQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/ws/eNOo9DO5rrWfw+Xw/c/1713461010935 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzWSec-WebSocket-Key: xveScBzR9kiaA2/5QkYhSw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1Host: traininngllc.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713460991579/1713460991579%0A-494.31798249005976%0A4%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=a40g/VRpFaTptIPCLuvsRYqFQu0G5AAopOTpt2X2Ag+B/WCD+7yW33GilGvYpvPq6O3sLySJ2hDxHmKGY/uwzD2MLhWiRkxanxeB6GdnO+CYUx9w7gph72Ewrp07
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460992146/1713460992146%0A-459.43869685220204%0A5%0A3%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=riRh/EqIdC6xY8jUVCyz+FIrCoihZi43/bCO77U1Orbn4MF+kEU86F3JqDpqkxx5SF+xClNCP5BGIFXU8YPtgJJmqdg01FCDMEQ2kS+nFjWp2c96qD657WNBP3yc
Source: global traffic	HTTP traffic detected: GET /s/W/ws/owIuyBn+KNjNOoT2/c/1713461012631 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=eLEBfh+jIiYhGT0bEaqVy8XqRLxxxU4b43T0rSW3rvUCJN7XGjlGPZDXIkagC/mRpfM6EQcwUERN+D/L19QUr9818xYu7XGoHtqYh6HilDagvVpzdsX6FtQFxszYSec-WebSocket-Key: GPTZWH4WjHuit+i7pkV5gg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/yK5ZszCXro6Sjjxj/d/1713460992548/1713460992548%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fpower-of-perspective-and-attitude%3A-how-to-transform-your-life--206534live%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=+00oyDxJmtCFrGyS9LAtJ9/27PUpU0Tk2VHhnzjABBe+i3pimuO23xv5FrFtp7KYKThizhJnNLDQw02/XuViG4X8QkYLJbOL7FFkwC+1+s6JEvkZfSuxF2wdCAQM
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/yK5ZszCXro6Sjjxj/p/1713460992550 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=+00oyDxJmtCFrGyS9LAtJ9/27PUpU0Tk2VHhnzjABBe+i3pimuO23xv5FrFtp7KYKThizhJnNLDQw02/XuViG4X8QkYLJbOL7FFkwC+1+s6JEvkZfSuxF2wdCAQM
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/18ll0A0MviQGtcZI/d/1713460992741/1713460992741%0A-463.70264686052326%0A3%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/6UGvo4Q26W1iBuza/d/1713460992863/1713460992863%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Compliance%20Experts%20%E2%80%93%20traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D63494%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/6UGvo4Q26W1iBuza/p/1713460992881 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713461001623/1713461001623%0A-501.5023837035554%0A5%0A3%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/tIyNfGcQ0b8hQ-eV/c/1713461003661 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713461004609/1713461004609%0A-500%0A5%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/SKukINt-UGvOK5QK/d/1713461004612/1713461004612%0A-502.02323793626044%0A4%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
Source: global traffic	HTTP traffic detected: GET /s/W/ws/K-Q-O2MIjscWk9Ze/c/1713461015654 HTTP/1.1Host: widget-mediator.zopim.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.traininng.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3VSec-WebSocket-Key: K6hNKlcfnnqlhRL89M6EIA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Pv1-K-G1h93dn68m/c/1713461005669 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/H9bADLiKEfRxPT7i/c/1713461010893 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/DyrSvFruBUrXMaS9/p/1713461012033 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=9xW9uDHcw3WFxuOWUWW3KbrQ0zHWhgd2mm9PhUYU0LenPXPDPD1rIuCyT8xAAb/pytYmoXBzhf8OdcVoRg3W6hSJj5kURO8NsoiMvxLlJVOtHAq5YzJLN+ZNIQJ6
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713461012510/1713461012510%0A-494.31798249005976%0A5%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=eLEBfh+jIiYhGT0bEaqVy8XqRLxxxU4b43T0rSW3rvUCJN7XGjlGPZDXIkagC/mRpfM6EQcwUERN+D/L19QUr9818xYu7XGoHtqYh6HilDagvVpzdsX6FtQFxszY
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713461012985/1713461012985%0A-459.43869685220204%0A6%0A3%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=+WuDdCtk5PcZpJNWY+Rw0NhuRAlSvuKH7p6hwfygEGlXYXiSaGBinUEPL+hZQ+Y97QvpG27lJNYl8JxtudWp5LOXD8RNL6H+ZncafQZMvhe4TTU4lbQ3KMk2+wkO
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/yK5ZszCXro6Sjjxj/d/1713461013464/1713461013464%0A-495%0A2%0A1%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=L+rREeisidqEGpLiDmWcY9J8rGShH2TcLSjCccSjMuWS7Iu53+WE3zRSpRJPdfViPzVxvjJ/nR3YpO1NtvIIQCdXFhik7zUx2UTMTLx/417J+GCU7q4Nucq/bvSu
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/yK5ZszCXro6Sjjxj/p/1713461013981 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=TOcduYQG38EBftmYScJv/qfBP/Z8kSI5PGkcdH7El6PhXwR0+eTIXHQwjUKuZg2U4O7Vb8173AEe4DqjTEybgVUy4vN7Z9Ue20dXTdTUKRIEGe+XLa2OqWU/4SZy
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/vASWZvCWfxsRirPH/p/1713461014263 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=ZTJ/5h91VuavkrkF0s1BKOeQAbIJ9juy5STe7yGDXS4ZOOwFs2PUycUIATUsgIkQdmh2VErF7NupQcTZeTm0z5HNtqQbrEoKsdQdTfoTTVt60D7RtKaVq++SRF/V
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/18ll0A0MviQGtcZI/d/1713461014410/1713461014410%0A-463.70264686052326%0A4%0A2%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=klA9ajdguSt4VSQbwHpEq/atvkL1gy1zinC9UtM4j66LFMXtJlzfu28UC+f4aOZ5wVffi/Lf8dHzq44vNf/jN5Bf7rpMUokPzeLP1OTSm30HhpKllfz646+CTgUv
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/6UGvo4Q26W1iBuza/d/1713461014744/1713461014744%0A-189%0A2%0A1%0Ad%0Anull HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=sBU/YJ2FpNtIcvrowM8aYDaImTi2oh1pBlWQk4Aqs8MadgKtnISte6sKfCGaxzhrw34mKe0JcF2uPhsmc3mSYgwGVrOWbA9O8f5IcfvcCbmk61ZDRykZuB30Ey7E
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/6UGvo4Q26W1iBuza/p/1713461014949 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=MMi005mU/CUAcvpBtPHobD4zuRGBVhOZqhYUVtNnVE7TfVN+THSJ6kgg82cxNmQzQOg73kMer3/h6Fu4JNu6vqx9G1ruh2+EF3oGlN7jsjtUShVy1Q/yLsRLyv0G
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/tIyNfGcQ0b8hQ-eV/d/1713461015365/1713461015365%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fmanaging-termination-of-employment-in-the-canadian-workplace%3A-new-developments-and-best-practices-206529live%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/tIyNfGcQ0b8hQ-eV/p/1713461015367 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/mag4xmOOxKAnhFKT/c/1713461015638 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Pv1-K-G1h93dn68m/d/1713461016179/1713461016179%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Compliance%20Experts%20%E2%80%93%20traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D63240%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=qYA5omZFemXTRbi49iVhxZcNWcv2GHtElU6t1el1ysSSBBqfI81OnMplNRPT/HoJN3ib97VgAYfU5pIQtFy0MfLoz8XhkMwtNX/PLwCMsItu6omH4vD/DYhC8g8v
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/Pv1-K-G1h93dn68m/p/1713461016181 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=qYA5omZFemXTRbi49iVhxZcNWcv2GHtElU6t1el1ysSSBBqfI81OnMplNRPT/HoJN3ib97VgAYfU5pIQtFy0MfLoz8XhkMwtNX/PLwCMsItu6omH4vD/DYhC8g8v
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-4261-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-lazy/embeds-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/H9bADLiKEfRxPT7i/d/1713461016318/1713461016318%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Telling%20stories%20with%20Excel%20data%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Ftelling-stories-with-excel-data--206451live%22%2C%22ref%22%3A%22%22%7D HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DnbmMof92mH+g5bvhZDXGHxWXg9lLXKl2pR+8FyI552OFssU7bXdU7EKi9rOh8jwSwkXosPxHb+s0RX1Pkc9TjmA8GbaMjVsuSNhVihPXFwUxYeFbHDOws8pIv3Q
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/H9bADLiKEfRxPT7i/p/1713461016320 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DnbmMof92mH+g5bvhZDXGHxWXg9lLXKl2pR+8FyI552OFssU7bXdU7EKi9rOh8jwSwkXosPxHb+s0RX1Pkc9TjmA8GbaMjVsuSNhVihPXFwUxYeFbHDOws8pIv3Q
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/18ll0A0MviQGtcZI/p/1713461017053 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=29UOwmAdaSDcsjnnGeT0RaYmwAQq/zs9LlQLaWO8s5J5QdMP0IDb2OrTJIJw9QEIiAjbqDl6v9KaS8M6DVse8ATFPskvhRsS6U0ztMDwB03sHlGko1zZNYSgwCpG
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713461017123 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=29UOwmAdaSDcsjnnGeT0RaYmwAQq/zs9LlQLaWO8s5J5QdMP0IDb2OrTJIJw9QEIiAjbqDl6v9KaS8M6DVse8ATFPskvhRsS6U0ztMDwB03sHlGko1zZNYSgwCpG
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/WTE2hHegr+qWqYT3/p/1713461017291 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=khmORQBpRjNwye27p8/tJwgd3+gizYX/kNLGUG6eX0pTfHnNkeDcE8dHO1OnuLnCrjsbL5BxCKUUFVI76a2fkmpCZjM3hMDdrjx3/GW3sXQZJGxv1yL0bRLF+fkQ
Source: global traffic	HTTP traffic detected: GET /s/W/xdds/SKukINt-UGvOK5QK/p/1713461017395 HTTP/1.1Host: widget-mediator.zopim.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=khmORQBpRjNwye27p8/tJwgd3+gizYX/kNLGUG6eX0pTfHnNkeDcE8dHO1OnuLnCrjsbL5BxCKUUFVI76a2fkmpCZjM3hMDdrjx3/GW3sXQZJGxv1yL0bRLF+fkQ
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.traininng.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_231.2.dr	String found in binary or memory: . Follow her on LinkedIn and book her for your next corporate event (https://www.linkedin.com/in/dramylbrice/). equals www.linkedin.com (Linkedin)
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr	String found in binary or memory: <li class="list-inline-item"><a href="https://www.linkedin.com/company/traininngsdotcom/" target="_blank"><i class="fa fa-linkedin"></i></a></li> equals www.linkedin.com (Linkedin)
Source: chromecache_334.2.dr	String found in binary or memory: return b}oC.H="internal.enableAutoEventOnTimer";var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_319.2.dr	String found in binary or memory: this._core.enter('playing');this._core.trigger('play',null,'video');item=this._core.items(this._core.relative(item.index()));this._core.reset(item.index());if(video.type==='youtube'){html='<iframe width="'+width+'" height="'+height+'" src="//www.youtube.com/embed/'+video.id+'?autoplay=1&rel=0&v='+video.id+'" frameborder="0" allowfullscreen></iframe>';}else if(video.type==='vimeo'){html='<iframe src="//player.vimeo.com/video/'+video.id+'?autoplay=1" width="'+width+'" height="'+height+'" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>';}else if(video.type==='vzaar'){html='<iframe frameborder="0"'+'height="'+height+'"'+'width="'+width+'" allowfullscreen mozallowfullscreen webkitAllowFullScreen '+'src="//view.vzaar.com/'+video.id+'/player?autoplay=true"></iframe>';} equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.traininng.com

Source: unknown

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=819939597&gjid=1855838004&_gid=253988120.1713460940&_u=IGBAgAABAAAAAGAAI~&z=1007773124 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.traininng.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.traininng.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_211.2.dr	String found in binary or memory: http://bit.ly/1kZffRI
Source: chromecache_238.2.dr	String found in binary or memory: http://blog.innerewut.de/pages/tooltip
Source: chromecache_211.2.dr	String found in binary or memory: http://code.google.com/p/chromium/issues/detail?id=91158
Source: chromecache_327.2.dr	String found in binary or memory: http://diveintomark.org/)
Source: chromecache_258.2.dr	String found in binary or memory: http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6
Source: chromecache_211.2.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_327.2.dr	String found in binary or memory: http://encytemedia.com/)
Source: chromecache_270.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_313.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_313.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_270.2.dr	String found in binary or memory: http://html2canvas.hertzen.com
Source: chromecache_270.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_270.2.dr	String found in binary or memory: http://jsfiddle.net/niklasvh/2e48b/
Source: chromecache_211.2.dr	String found in binary or memory: http://jsperf.com/encoding-xhr-image-data/31
Source: chromecache_327.2.dr	String found in binary or memory: http://mir.aculo.us)
Source: chromecache_190.2.dr, chromecache_280.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_211.2.dr	String found in binary or memory: http://opensource.org/licenses/mit-license
Source: chromecache_238.2.dr	String found in binary or memory: http://particletree.com/features/lightbox-gone-wild/
Source: chromecache_211.2.dr	String found in binary or memory: http://phpjs.org/functions/base64_decode/
Source: chromecache_211.2.dr	String found in binary or memory: http://phpjs.org/functions/base64_encode/
Source: chromecache_270.2.dr	String found in binary or memory: http://probablyprogramming.com/2009/03/15/the-tiniest-gif-ever
Source: chromecache_211.2.dr	String found in binary or memory: http://purl.eligrey.com/github/Blob.js/blob/master/Blob.js
Source: chromecache_211.2.dr	String found in binary or memory: http://purl.eligrey.com/github/FileSaver.js/blob/master/FileSaver.js
Source: chromecache_327.2.dr	String found in binary or memory: http://script.aculo.us
Source: chromecache_238.2.dr, chromecache_327.2.dr	String found in binary or memory: http://script.aculo.us/
Source: chromecache_211.2.dr	String found in binary or memory: http://stackoverflow.com/questions/6965107/converting-between-strings-and-arraybuffers
Source: chromecache_204.2.dr	String found in binary or memory: http://tetlaw.id.au/view/javascript/really-easy-field-validation
Source: chromecache_211.2.dr	String found in binary or memory: http://www.64lines.com/jpeg-width-height
Source: chromecache_328.2.dr, chromecache_203.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_238.2.dr	String found in binary or memory: http://www.huddletogether.com/projects/lightbox2/
Source: chromecache_238.2.dr	String found in binary or memory: http://www.huddletogether.com/projects/lightbox2/).
Source: chromecache_211.2.dr	String found in binary or memory: http://www.ietf.org/rfc/rfc1950.txt
Source: chromecache_211.2.dr	String found in binary or memory: http://www.libpng.org/pub/png/book/chapter09.html
Source: chromecache_258.2.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_238.2.dr, chromecache_244.2.dr	String found in binary or memory: http://www.prototypejs.org/
Source: chromecache_206.2.dr	String found in binary or memory: http://www.traininng.com
Source: chromecache_244.2.dr	String found in binary or memory: http://www.yui-ext.com/
Source: chromecache_334.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_334.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_271.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_211.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=65440
Source: chromecache_334.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_211.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=375297#c7
Source: chromecache_211.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=389642
Source: chromecache_211.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/Code_snippets/StringView
Source: chromecache_270.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Guide/CSS/Understanding_z_index/The_stacking_context
Source: chromecache_297.2.dr, chromecache_193.2.dr	String found in binary or memory: https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal
Source: chromecache_201.2.dr, chromecache_277.2.dr	String found in binary or memory: https://ekr.zendesk.com/compose_product/web_widget/7bc1c0f290501106fa41dc515076261e2325fb83?features
Source: chromecache_228.2.dr	String found in binary or memory: https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=5
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/burnburnrocket
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/cburgmer/rasterizeHTML.js
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/danielhusar
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/diegocr
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/dsamarin
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/eaparango
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/eligrey/Blob.js/blob/master/LICENSE.md
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/eligrey/FileSaver.js/blob/master/LICENSE.md
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/gildas-lormeau/zip.js
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/gingerchris
Source: chromecache_176.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/ineedfat
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/jamesbrobb
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/juanpgaviria
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/lsdriscoll
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/niklasvh/html2canvas
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/siefkenj/
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/woolfg
Source: chromecache_334.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_334.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://plus.google.com/u/1/110604754039819913606
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://seal.godaddy.com/getSeal?sealID=GPUkssSXRaGWqrGSIHp2lJWSv2pV3WYLSTI2iZtKcZbWWPd31kT1DsV6lsyW
Source: chromecache_201.2.dr, chromecache_277.2.dr	String found in binary or memory: https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js
Source: chromecache_334.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_334.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_271.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_271.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_334.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://twitter.com/Traininngdotcom
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://v2.zopim.com/?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt
Source: chromecache_201.2.dr, chromecache_283.2.dr, chromecache_277.2.dr	String found in binary or memory: https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png
Source: chromecache_271.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_271.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_271.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_334.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_271.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_334.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_334.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_271.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.linkedin.com/company/traininngsdotcom/
Source: chromecache_229.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.linkedin.com/in/dramylbrice/).
Source: chromecache_228.2.dr	String found in binary or memory: https://www.macromedia.com/go/getflashplayer
Source: chromecache_334.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/aboutus
Source: chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/control/addOutlook?productId=206018
Source: chromecache_337.2.dr	String found in binary or memory: https://www.traininng.com/control/addOutlook?productId=206451
Source: chromecache_303.2.dr	String found in binary or memory: https://www.traininng.com/control/addOutlook?productId=206515
Source: chromecache_189.2.dr	String found in binary or memory: https://www.traininng.com/control/addOutlook?productId=206529
Source: chromecache_229.2.dr	String found in binary or memory: https://www.traininng.com/control/addOutlook?productId=206534
Source: chromecache_191.2.dr	String found in binary or memory: https://www.traininng.com/control/addOutlook?productId=206623
Source: chromecache_303.2.dr, chromecache_337.2.dr, chromecache_191.2.dr, chromecache_189.2.dr, chromecache_229.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/control/addWebItems
Source: chromecache_332.2.dr	String found in binary or memory: https://www.traininng.com/control/createcustomer
Source: chromecache_303.2.dr, chromecache_337.2.dr, chromecache_191.2.dr, chromecache_189.2.dr, chromecache_229.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/control/detailImage?detail=
Source: chromecache_259.2.dr, chromecache_317.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.traininng.com/control/mysearch
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/control/privacy
Source: chromecache_259.2.dr, chromecache_317.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.traininng.com/control/report.pdf
Source: chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/control/tellafriend?productId=206018live
Source: chromecache_337.2.dr	String found in binary or memory: https://www.traininng.com/control/tellafriend?productId=206451live
Source: chromecache_303.2.dr	String found in binary or memory: https://www.traininng.com/control/tellafriend?productId=206515live
Source: chromecache_189.2.dr	String found in binary or memory: https://www.traininng.com/control/tellafriend?productId=206529live
Source: chromecache_229.2.dr	String found in binary or memory: https://www.traininng.com/control/tellafriend?productId=206534live
Source: chromecache_191.2.dr	String found in binary or memory: https://www.traininng.com/control/tellafriend?productId=206623live
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/control/webinar-pack
Source: chromecache_189.2.dr	String found in binary or memory: https://www.traininng.com/images/SHRM-Recertification-Provider_new.jpg
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/calendar_date_select.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/css/extra.MIN.css
Source: chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/css/specific-ie.css
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/css/specific-ie8.css
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/css/style.min.css
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/favicon.ico
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/fieldlookup.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/fonts/css/font-awesome.min.css
Source: chromecache_259.2.dr, chromecache_317.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.traininng.com/images/hrci-thr-new.png
Source: chromecache_189.2.dr	String found in binary or memory: https://www.traininng.com/images/hrci_approved_seal_new.jpg
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/js/bootstrap.min.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/js/html5shiv.js
Source: chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/js/jquery.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/js/jquery.min.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/js/respond.min.js
Source: chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/logo.png
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/logoicon.png
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/prototypejs/effects.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/prototypejs/popup.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/prototypejs/prototype.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/prototypejs/validation.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/secure-payment-stripe.png
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/selectall.js
Source: chromecache_259.2.dr, chromecache_317.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.traininng.com/images/slider1.jpg
Source: chromecache_259.2.dr, chromecache_317.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.traininng.com/images/slider2.jpg
Source: chromecache_259.2.dr, chromecache_317.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.traininng.com/images/slider3.jpg
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/string_util.js
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/images/traininng/js/xFunctions.js
Source: chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/live-webinars
Source: chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.traininng.com/recorded-webinars
Source: chromecache_259.2.dr, chromecache_317.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.traininng.com/speakerlist

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: classification engine

Classification label: mal48.troj.win@36/278@48/20

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2644 --field-trial-handle=2180,i,3619218562620070957,7726421293079254978,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.traininng.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4496 --field-trial-handle=2180,i,3619218562620070957,7726421293079254978,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2644 --field-trial-handle=2180,i,3619218562620070957,7726421293079254978,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4496 --field-trial-handle=2180,i,3619218562620070957,7726421293079254978,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

Yara detected Html Dropper

Source: Yara match

File source: dropped/chromecache_211, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://ns.attribution.com/ads/1.0/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
traininng.com	199.119.121.23	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
static.zdassets.com	104.18.70.113	true	false	high
analytics-alv.google.com	216.239.34.181	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
widget-mediator.zopim.com	3.216.21.64	true	false	high
ekr.zdassets.com	104.18.70.113	true	false	high
traininngllc.zendesk.com	104.16.51.111	true	false	high
www.google.com	64.233.177.106	true	false	high
v2.zopim.com	104.17.98.195	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	108.177.122.155	true	false	high
www.traininng.com	unknown	unknown	false	unknown
seal.godaddy.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.traininng.com/images/hrci-thr-new.png	false	unknown
https://widget-mediator.zopim.com/s/W/ws/eNOo9DO5rrWfw+Xw/c/1713461010935	false	high
https://widget-mediator.zopim.com/s/W/xdds/vASWZvCWfxsRirPH/d/1713460970626/1713460970626%0A-500%0A3%0A2%0Ad%0Anull	false	high
https://widget-mediator.zopim.com/s/W/xdds/18ll0A0MviQGtcZI/p/1713461017053	false	high
https://www.traininng.com/images/speakers/63495/Payson%20Hall_large.jpg	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/Pv1-K-G1h93dn68m/c/1713461005669	false	high
https://analytics.google.com/g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460977180&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fmanaging-termination-of-employment-in-the-canadian-workplace%3A-new-developments-and-best-practices-206529live&dt=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7211	false	high
https://v2.zopim.com/?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt	false	high
https://www.traininng.com/images/speakers/61837/Jared%20Garrett%20-%20Large.jpg	false	unknown
https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js	false	high
https://www.traininng.com/speakerprofile?speaker_id=63240	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/vASWZvCWfxsRirPH/d/1713460953768/1713460953768%0A-500%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460952086%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D	false	high
https://www.traininng.com/images/prototypejs/prototype.js	false	unknown
https://www.traininng.com/images/products/detail/207031.jpg	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/qOxiKg+ulwNG3te1/p/1713460962075	false	high
https://www.traininng.com/images/speakers/40562/Jason_large.jpg	false	unknown
about:blank	false	low
https://widget-mediator.zopim.com/s/W/xdds/WTE2hHegr+qWqYT3/p/1713461017291	false	high
https://www.traininng.com/aboutus	false	unknown
https://widget-mediator.zopim.com/s/W/ws/SKukINt-UGvOK5QK/c/1713460969192	false	high
https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/tIyNfGcQ0b8hQ-eV/d/1713461015365/1713461015365%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fmanaging-termination-of-employment-in-the-canadian-workplace%3A-new-developments-and-best-practices-206529live%22%2C%22ref%22%3A%22%22%7D	false	high
https://www.traininng.com/webinar/growth:-transforming-issues-into-performance--206515live	false	unknown
https://widget-mediator.zopim.com/s/W/ws/i0fuREjk14N6dcnn/c/1713461007666	false	high
https://www.traininng.com/speakerprofile?speaker_id=60403	false	unknown
https://www.traininng.com/control/main	false	unknown
https://www.traininng.com/favicon.ico	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/18ll0A0MviQGtcZI/p/1713460974764	false	high
https://www.traininng.com/images/speakers/60119/Sherrine%20Washington_large.jpg	false	unknown
https://www.traininng.com/images/speakers/62480/Kenneth%20user_large.jpg	false	unknown
https://www.traininng.com/images/prototypejs/validation.js	false	unknown
https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png	false	high
https://www.traininng.com/images/products/detail/206118.jpg	false	unknown
https://www.traininng.com/images/detailpage_webinar_img/206534.jpg	false	unknown
https://www.traininng.com/images/js/jquery.min.js	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/yK5ZszCXro6Sjjxj/d/1713460992548/1713460992548%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fpower-of-perspective-and-attitude%3A-how-to-transform-your-life--206534live%22%2C%22ref%22%3A%22%22%7D	false	high
https://www.traininng.com/	false	unknown
https://www.traininng.com/speakerprofile?speaker_id=62614	false	unknown
https://www.traininng.com/images/calendar_date_select.js	false	unknown
https://www.traininng.com/images/speakers/34362/Carl%20Patterson_Large.jpg	false	unknown
https://static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js	false	high
https://widget-mediator.zopim.com/s/W/xdds/DyrSvFruBUrXMaS9/c/1713460949911	false	high
https://a.nel.cloudflare.com/report/v4?s=YZtO37In5Sy%2Fu5KsLaROLGDG8%2F80vTcAvZLki8xKk4SZjxn4tYSjuwXteNLxyhhH2FdCdsq9KP0f1tRMjCfKdE0srf88q4MduHbzc%2B6CeAimdHbVEiouDn%2ByqKUrL3Rtek2Hwhc%2BgNsdBg%3D%3D	false	high
https://www.traininng.com/images/speakers/61834/Ben%20Currie_large.jpg	false	unknown
https://analytics.google.com/g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460951387&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Flive-webinars&dt=Live%20Webinars%20%7C%20Professional%20Webinars%20Online%20%7C%20Courses%20Online&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=6846	false	high
https://www.traininng.com/images/products/detail/206588.png	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/DyrSvFruBUrXMaS9/d/1713460984611/1713460984611%0A-501.5023837035554%0A4%0A3%0Ad%0Anull	false	high
https://widget-mediator.zopim.com/s/W/xdds/FUXgax5OwuSIBv-r/d/1713460992146/1713460992146%0A-459.43869685220204%0A5%0A3%0Ad%0Anull	false	high
http://www.traininng.com/	false	unknown
https://www.traininng.com/images/slider2.jpg	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/SKukINt-UGvOK5QK/c/1713460969705	false	high
https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live	false	unknown
https://www.traininng.com/speakerprofile?speaker_id=63494	false	unknown
https://analytics.google.com/g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460996503&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fwebinar%2F3-hour-virtual-seminar-on-business-communication%3A-grammar%2C-better-writing%2C-email%2C-and-other-common-communication-in-the-workplace-206018live&dt=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=6211	false	high
https://widget-mediator.zopim.com/s/W/xdds/DyrSvFruBUrXMaS9/d/1713461001623/1713461001623%0A-501.5023837035554%0A5%0A3%0Ad%0Anull	false	high
https://www.traininng.com/images/speakers/34496/emq_large.jpg	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/WTE2hHegr+qWqYT3/p/1713460965375	false	high
https://www.traininng.com/images/products/detail/207042.jpg	false	unknown
https://traininngllc.zendesk.com/frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088	false	high
https://widget-mediator.zopim.com/s/W/xdds/DyrSvFruBUrXMaS9/p/1713460950481	false	high
https://www.traininng.com/images/fonts/css/font-awesome.min.css	false	unknown
https://www.traininng.com/images/js/bootstrap.min.js	false	unknown
https://widget-mediator.zopim.com/s/W/xdds/FUXgax5OwuSIBv-r/p/1713460991107	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.traininng.com/control/tellafriend?productId=206623live	chromecache_191.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_334.2.dr	false		high
http://www.huddletogether.com/projects/lightbox2/	chromecache_238.2.dr	false		unknown
https://www.traininng.com/control/tellafriend?productId=206534live	chromecache_229.2.dr	false		unknown
http://bit.ly/1kZffRI	chromecache_211.2.dr	false		high
https://github.com/niklasvh/html2canvas	chromecache_211.2.dr	false		high
http://purl.eligrey.com/github/Blob.js/blob/master/Blob.js	chromecache_211.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_271.2.dr	false		high
https://github.com/cburgmer/rasterizeHTML.js	chromecache_211.2.dr	false		high
https://github.com/dsamarin	chromecache_211.2.dr	false		high
https://www.traininng.com/control/addOutlook?productId=206451	chromecache_337.2.dr	false		unknown
http://www.traininng.com	chromecache_206.2.dr	false		unknown
https://github.com/jamesbrobb	chromecache_211.2.dr	false		high
http://ns.attribution.com/ads/1.0/	chromecache_190.2.dr, chromecache_280.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_271.2.dr	false		high
https://www.traininng.com/control/tellafriend?productId=206018live	chromecache_215.2.dr	false		unknown
https://github.com/diegocr	chromecache_211.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=389642	chromecache_211.2.dr	false		high
http://html2canvas.hertzen.com	chromecache_270.2.dr	false		high
http://purl.eligrey.com/github/FileSaver.js/blob/master/FileSaver.js	chromecache_211.2.dr	false		high
http://www.libpng.org/pub/png/book/chapter09.html	chromecache_211.2.dr	false		high
https://github.com/burnburnrocket	chromecache_211.2.dr	false		high
https://github.com/eaparango	chromecache_211.2.dr	false		high
http://tetlaw.id.au/view/javascript/really-easy-field-validation	chromecache_204.2.dr	false		unknown
https://bugs.webkit.org/show_bug.cgi?id=65440	chromecache_211.2.dr	false		high
http://code.google.com/p/chromium/issues/detail?id=91158	chromecache_211.2.dr	false		high
http://www.macromedia.com/go/getflashplayer	chromecache_258.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=375297#c7	chromecache_211.2.dr	false		high
http://www.yui-ext.com/	chromecache_244.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_334.2.dr	false		high
https://www.traininng.com/images/js/html5shiv.js	chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	false		unknown
http://stackoverflow.com/questions/6965107/converting-between-strings-and-arraybuffers	chromecache_211.2.dr	false		high
https://github.com/danielhusar	chromecache_211.2.dr	false		high
https://github.com/woolfg	chromecache_211.2.dr	false		high
https://www.macromedia.com/go/getflashplayer	chromecache_228.2.dr	false		high
https://twitter.com/Traininngdotcom	chromecache_303.2.dr, chromecache_311.2.dr, chromecache_177.2.dr, chromecache_272.2.dr, chromecache_337.2.dr, chromecache_293.2.dr, chromecache_282.2.dr, chromecache_219.2.dr, chromecache_259.2.dr, chromecache_332.2.dr, chromecache_191.2.dr, chromecache_340.2.dr, chromecache_317.2.dr, chromecache_199.2.dr, chromecache_342.2.dr, chromecache_189.2.dr, chromecache_324.2.dr, chromecache_229.2.dr, chromecache_231.2.dr, chromecache_215.2.dr	false		high
https://github.com/gingerchris	chromecache_211.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
104.17.97.195	unknown	United States	13335	CLOUDFLARENETUS	false
199.119.121.23	traininng.com	United States	1610	CONTE-25-ASNUS	false
104.16.51.111	traininngllc.zendesk.com	United States	13335	CLOUDFLARENETUS	false
108.177.122.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.72.113	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
3.216.21.64	widget-mediator.zopim.com	United States	14618	AMAZON-AESUS	false
104.17.98.195	v2.zopim.com	United States	13335	CLOUDFLARENETUS	false
108.177.122.157	unknown	United States	15169	GOOGLEUS	false
34.230.250.51	unknown	United States	14618	AMAZON-AESUS	false
104.16.53.111	unknown	United States	13335	CLOUDFLARENETUS	false
216.239.32.181	unknown	United States	15169	GOOGLEUS	false
142.250.105.104	unknown	United States	15169	GOOGLEUS	false
172.253.124.157	unknown	United States	15169	GOOGLEUS	false
64.233.177.106	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.70.113	static.zdassets.com	United States	13335	CLOUDFLARENETUS	false
64.233.185.147	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428291
Start date and time:	2024-04-18 19:21:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.traininng.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.troj.win@36/278@48/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.traininng.com/aboutus Browse: https://www.traininng.com/live-webinars Browse: https://www.traininng.com/recorded-webinars Browse: https://www.traininng.com/control/webinar-pack Browse: https://www.traininng.com/newlogin Browse: https://www.traininng.com/registration Browse: https://www.traininng.com/speakerprofile?speaker_id=61834 Browse: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live Browse: https://www.traininng.com/speakerprofile?speaker_id=63240 Browse: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live Browse: https://www.traininng.com/speakerprofile?speaker_id=63494 Browse: https://www.traininng.com/webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live Browse: https://www.traininng.com/speakerprofile?speaker_id=34496 Browse: https://www.traininng.com/webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live Browse: https://www.traininng.com/speakerprofile?speaker_id=60403 Browse: https://www.traininng.com/webinar/growth:-transforming-issues-into-performance--206515live Browse: https://www.traininng.com/speakerprofile?speaker_id=62614 Browse: https://www.traininng.com/webinar/telling-stories-with-excel-data--206451live

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 142.250.9.84, 173.194.219.102, 173.194.219.138, 173.194.219.113, 173.194.219.139, 173.194.219.100, 173.194.219.101, 34.104.35.123, 64.233.185.139, 64.233.185.113, 64.233.185.100, 64.233.185.102, 64.233.185.101, 64.233.185.138, 173.201.201.4, 172.253.124.95, 142.250.9.95, 108.177.122.95, 64.233.177.95, 74.125.138.95, 172.217.215.95, 142.250.105.95, 64.233.185.95, 64.233.176.95, 142.251.15.95, 173.194.219.95, 74.125.136.95, 172.217.215.97, 142.250.105.139, 142.250.105.113, 142.250.105.138, 142.250.105.101, 142.250.105.100, 142.250.105.102, 13.85.23.86, 199.232.214.172, 20.3.187.198, 192.229.211.108, 172.253.124.94, 74.125.136.102, 74.125.136.138, 74.125.136.113, 74.125.136.100, 74.125.136.101, 74.125.136.139
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, seal-gd.prod.starfieldtech.com.akadns.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://www.traininng.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540)
Category:	downloaded
Size (bytes):	196943
Entropy (8bit):	5.064565480721057
Encrypted:	false
SSDEEP:	6144:4UN4nsZ7gqhIu1xc/JP9IZp9xJ23EBcHg5WZy1P:4UN4nsZ7gqhIu1xc/JP9IZp9xJ23EBc6
MD5:	C38480973120283063F05CAE0435A00F
SHA1:	9129B2AE195FFF2A5E67D37E49CA89A033B63E86
SHA-256:	31B903B1B20341F64DC893881457FDAFF7F75215ACEEC05B5507497A1AD0DFC3
SHA-512:	20458661836855BE4ED98F90A51A4A9C64946E8100C5D4261360E2E95092F1E00E6DBF51684F4F713E050BC9C440668D6E2309B112A685C4B1552AF499DE52B2
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/css/style.min.css
Preview:	html {. font-family: sans-serif;. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;.}.body {. margin: 0; bakground:#f2f2f2; outline: 0;.}.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.main,.menu,.nav,.section,.summary {. display: block;.}.audio,.canvas,.progress,.video {. display: inline-block;. vertical-align: baseline;.}.audio:not([controls]) {. display: none;. height: 0;.}.[hidden],.template {. display: none;.}.a {. background-color: transparent;.}.a:active,.a:hover {. outline: 0;.}.abbr[title] {. border-bottom: 1px dotted;.}.b,.strong {. font-weight: bold;.}.dfn {. font-style: italic;.}.h1 {. margin: .67em 0;. font-size: 2em;.}.mark {. color: #000;. background: #ff0;.}.small {. font-size: 80%;.}.sub,.sup {. position: relative;. font-size: 75%;. line-height: 0;. vertical-align: baseline;.}.sup {. top: -.5em;.}.sub {. bottom: -.25em;.}.img {. border: 0;.}.svg:not(:root) {. overflow: hidden;.}.figure {. margin: 1em 40p

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	19657
Entropy (8bit):	5.28960483729829
Encrypted:	false
SSDEEP:	192:nlzfn3QfpI8AlFV32KEEoYgSTX09fLjpgHgEr0gTj39p8VcWtsSXvsiD9:lzypDqF2KEZ7PjjpgHgXgn/vWtdUix
MD5:	1B20E76539B1CD4D0F02ABAB5022717C
SHA1:	A144CC433180BA64359238DF91A1E3F0BBF6C418
SHA-256:	310A310F10745AF902D899562567EE7F82AE927D1FF6728DCFE8B06B0FB0AA68
SHA-512:	E5AF11E418834ABF84A7916FC2DBB438054AAB85B784685985F2472894E1FE0FB67E60F78A066D0D8EB6E7519CAA24761C2A3544BB04CF60629032FEE17A5597
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/speakerprofile?speaker_id=61834
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Compliance Experts – traininng </title>..<meta name="description" content="More than 100 Compliance experts across industry and across the globe"/>..<meta name="keywords" content="Compliance Experts, Medical Devices, Pharmaceutical, Clinical, CAPA GMP/cGMP Compliance, ISO 13485, OSHA, Consultant, Consulting, Quality, Food Safety, Risk Management, 21 CFR Part 11"/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/j

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=343, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 600x343, components 3
Category:	dropped
Size (bytes):	39547
Entropy (8bit):	7.691866483286014
Encrypted:	false
SSDEEP:	768:QCXyc74Xyqq9djz/gBBQT4aeMHAL/RKx40VQpcp6HLIFi6YWIu:USqq9djzgK8sAL/RKOCQpcpgL+pBv
MD5:	E2567C8525A165095F95F321D4B156A1
SHA1:	5E6F1CCA51AF4C32CFF8854A47847D531FF5E0F9
SHA-256:	53F6DB84F52F871BEABE8BC07C2699888D1E3561578A2A0CB34F4897C828988D
SHA-512:	7A92A21508D1B5623796B23A7F61EF3612ED1F7F5AC09C3F5436F5A9CDFC09EC549E25E657DBE472D6F5AB2147F740E4893BDD4C3E831F06977D11C54CC221E9
Malicious:	false
Reputation:	low
Preview:	.....NExif..II*...............X...........W...........................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2021:06:18 19:26:24.............0221....................X...........W...............................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..)JGri..).d.....1.Q.....p.$.+4[.k.ES........QCo'-..5..I.A65.5.2.AY.Z...S...&

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:03:07 00:51:55], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	24192
Entropy (8bit):	7.331830363978246
Encrypted:	false
SSDEEP:	384:7fhCQ+y7iHhCQ+CvnMRiAYNg7YD5hVWEleDUoeOnz0mYkjgmFyF17U8:7fhC67IhCKveYyihgKojYmYkju48
MD5:	81B75C217F1907FA4EFD2611F012389D
SHA1:	86CCE5F7AC6622312A875DA13814F8AC8330CD2E
SHA-256:	FCCB5877FCB8134933D69AA98267A32DC4D21EECF6360D9EE7D6130B1413556B
SHA-512:	88A72B62B4C1B15461B34A6BA87C5CC37163BBFA1296CE44ABEF3FADCF49393FD00369ECD78D4EF46E1B0751823DDCAEF9920B6D31B5070C2DAE450B70554A39
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/63517/Michael%20Gozzo_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:03:07 00:51:55..........................Z...........p...........................................&.(.................................L.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..c.BD.....D.I.1...5Y0.:5>.y.Q\..O.h..asY6..n.d....6.>....'...@[&.G$.g.......:8}(.g.c...^.ww"`.......-.n.+..U.g...9\P.[..b_M{..T.....,l....X..n.~!wUaT....

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 328, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	25358
Entropy (8bit):	7.965637161072627
Encrypted:	false
SSDEEP:	384:PhkNNMNp/x2BzNk8oZ2S9ILSlmvVvrxWwwKiynfFQn5As4ILhs6DmY4gT8ohVelT:5qNGIYZ4Limv8Ki+tQAs4Yh/sgT8g4T
MD5:	535D0AC8BA86D81CCBCAD0EE8A71B984
SHA1:	B8C5DC273775BB3359A6C92DFCF6D83EFA309E42
SHA-256:	8ADA890F94EBF96DA6DF4F70D6DF267A0F8AA3943D91B9D857F740C396AF01D8
SHA-512:	6EC67B1FCC3B78580D602C2FD89485DBF8993B255CBAA0E6D676BF516253E5F82E1E5F191B0BFFA2216566831BF83A1C69FBFF52BF141DBD3C578C285C083414
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H........A..b.IDATx..mn.0..}..%M.v.....t.F...j@.nh..lw{~..>....TQ....bV.....u.m......1.........@]7q..........Oiat..slm....s..P3ND.. .=g1....".F....@DcLT....9b.z.....T.k..."...>V..S.1.Ny...Rp.l...].E...D$....Y_.....Dt:=.z.v.......BXk.Q.Q../9~...jH..d..<.c.bI...3:S~L...:...u..-.@..$ 3.`gO....r...=....K.U..\|'...1f+..N,.....i.c..y.K..J5..P_..i...\|.u.s. ........bX0[....v{f`.PH......\..?=..(.."..WL......".r]...E.1..[...@...D....w....%.6Ho.80.......r.....w.....v..C.y-rQ...8<}Pvg.]"2....B.......?R..'..K.T.Y..<...k.Dw^e..A..I....E.J.V....Z..},...j.u......cRk...9....^...n...M8.;!.g.'.$...(-..)...^P...R1+.....3">.T2.o..V..4&..N.RM...q.Q."..&Z.&.#B\.h`.B(..Bb.0..N.......~..Z......n...^E.B..5...<$.U.R.w.....M.=.....Jk.W...9..B_x..3...H.....:U.. ..J...oG..0...../J..jP.t.......-/.Y.../..(.....>-.h^y..=A..z..w+. v..!.HV..u.RU.G...5.{F.!.......3.../.L....@.F../@f.....J...z..II.N.3..Y............,......D...._^."..`5

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:07:02 15:37:01], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	23523
Entropy (8bit):	7.431439432071464
Encrypted:	false
SSDEEP:	384:QwpLJIyQ17iG/pLJIyQuvn5/i+Vkx6Xl7ttjuvRHJZOZjMNvFCKcpaZK9z:Qa1Iy87NB1IyjvFLSuZjM5gJpaZKR
MD5:	E607A3990DE37FE32F7068CBC84D187A
SHA1:	EF8BA78CA7C3462263D649D57D881F5FD9150791
SHA-256:	DB67D31FEE200BF3EA7695471C1290CB8D07B3495BA3D26B1E2695EB005033F3
SHA-512:	3DDC4B2EDC64C025591AD7744C04D0CBC83051DF65653C286A2D9CBFF62BB66A144C90F7C8F472AD0F17113A2F87FCB8F6F8684E37E2A4D90F1157EA5F491432
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2018:07:02 15:37:01..........................Z...........p...........................................&.(................................._.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...{.4.'I.~.M....71.D...AX.Iq..<~hon...7Q.L..+.U.SH..;lI.$\|.j....sXI......Tls.eA.hl....F...t.....x...S,......$..Nh%...j..6..,>.....,..g.ux.Z....@.@'gp9.d.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 6, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1067
Entropy (8bit):	6.261540777064249
Encrypted:	false
SSDEEP:	24:1y1he91Wwjx82lY2T3ouVSnzntnXLyJ3Von6nMnabGih4s:1wqQNn2xInLtnWJ3ynMMnsJ5
MD5:	1A09A034EF21272964205446C66C7418
SHA1:	A601F031100F98095525F016955CB6BAD1857924
SHA-256:	F2816727F77A18C88D0E7A62479F45D8F6A0B8FE79FEE6E5872EFAC7A90AF898
SHA-512:	639E8BC1313AC1998394852D999F235B1A21DB4EF1B0D38A00115CBFD17BDE2B89255945AF385A51EC13692595E5A2D836CD67AF14EE0E2116EB0A72608A6D5E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(.......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:9D7A3579FF9211E48FBBFCDAE6E1FAA2" xmpMM:DocumentID="xmp.did:9D7A357AFF9211E48FBBFCDAE6E1FAA2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9D7A3577FF9211E48FBBFCDAE6E1FAA2" stRef:documentID="xmp.did:9D7A3578FF9211E48FBBFCDAE6E1FAA2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..YI....IDATx.b<~..._..0.....ktttB...Lrrr.?~.x.....t..o$%%....L..........Q$XYY....2...6.D......._...Y.......}........

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:10:27 18:01:53], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	24721
Entropy (8bit):	7.343496031303343
Encrypted:	false
SSDEEP:	768:sb3fmE7z3fmav1sF8GYyiOPfLTzajQqyuDvQ4/:Dxav1sFTt7yye/
MD5:	E9602F2C76A6837EF6CBC7A5BA7441A0
SHA1:	904B15481EC09A3D37B71C52850F770949FF93D3
SHA-256:	7BBB5A4A235051882CE610A7B1B935B7FD32DAB5B164398EAF96AF439EDA997A
SHA-512:	26DFC751AA7DE987DAD420B9956AC2855EFBFAD2255D1CD625B3CC6DF4089B5B0DD47A0DE835AB50B0AC5E07B715806F193D2C7539B8BC8CE81A367AD849D00B
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/52087/Racquel%20Harris_large.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2022:10:27 18:01:53..........................Z...........p...........................................&.(.................................u.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..d....Mm....a.V... %Vl..s.c.\|p.R..........k.......2m&O..F4x5....]..fm..>...b...U...Ys.K.n.y..b,..H.kbed6..........a...o........w..p..1.....<.6,...k.qi

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x343, components 3
Category:	downloaded
Size (bytes):	45119
Entropy (8bit):	7.934795277551721
Encrypted:	false
SSDEEP:	768:lIzzfY6fheHqkR8gp5LvJR4ijvSv3hMwewQ9GJfxByGB6S9XPV:lIAzbp5LfvmewQsuG0O/V
MD5:	5E0C4616CC5B0A72863660934E97BFDC
SHA1:	04B7BFD70C2A570B0A196E5A68FE55FD9A4F35CC
SHA-256:	8453750E972E3117488EF05477C0C22690A32F597F683CB295EFC5E7ED602EE5
SHA-512:	D92B3AF8D42097DB344C1328BEB06AADB379637CDBF58425F83003EA21919FF65C3BFE37605B89A816BB2F190977689A054ABCB58CB8238D5CBAD8B691AB0446
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/207042.jpg
Preview:	......Exif..II*.................Ducky.......F.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:19AE3C5B296211EBABF78283BFDCB859" xmpMM:DocumentID="xmp.did:19AE3C5C296211EBABF78283BFDCB859"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:19AE3C59296211EBABF78283BFDCB859" stRef:documentID="xmp.did:19AE3C5A296211EBABF78283BFDCB859"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17852
Entropy (8bit):	7.960418610692212
Encrypted:	false
SSDEEP:	384:u0wAZRmwWQLZ/3iNR4mYiJermBEbiaLwysQbx6kS8Xh:usSQdSf41rm+9HZIL8Xh
MD5:	EE9DAB08802DCB6C8F538E242558925A
SHA1:	69AA4BFE47B1F9B1F004E2DC0936DD5D92A00E8B
SHA-256:	680EB0BC6A57B460C09468C37ECC863F476B4D604EE368129E2EB24694B98727
SHA-512:	C91E8EB1FDF777832C4D845622AB65F5AD0B929608B08D55CF5F0C645DAD133CA3BBEEDDECC4A137FD823ACE0F68A1A539CFC014D57F1F13F5AAA89548FA01C0
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/download-training-catalogue.png
Preview:	.PNG........IHDR.............<.q.....pHYs...#...#.x.?v...MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:03:08 16:46:22], progressive, precision 8, 600x343, components 3
Category:	downloaded
Size (bytes):	65098
Entropy (8bit):	7.853765543059107
Encrypted:	false
SSDEEP:	1536:xNoNAvwGlJrWmhgISPrBgVmi4mKjscK+T:xCkJrFgISjBgr4mAj/
MD5:	C21E8064FF6F65E242F5E1833AA8A3AE
SHA1:	851587DE817C8A3DA6C85C9A578A0EF9FE0498E9
SHA-256:	3FA1CC3F01A6228DE964A3278F2838EDE1A8F4AA00F20E47E1AD4239048F0E49
SHA-512:	981C171D16F7BE18068AAFD63113476FFA97E609FFB73A0235C92FD883331B99DBB2EFA088F57AE49E5C2CA8443F28A5252B88122867CA43611F90E13CF7A1DE
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/205915.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i................B@..'...B@..'.Adobe Photoshop CS6 (Windows).2022:03:08 16:46:22..........................X...........W...........................................&.(.................................^.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...K.\....]r.(..~.H:.Q..E....>....dH>Jw....?x...4>]...X...!0.9.JdW..$.Sg...........Yq..iw.Oc....}...@O..o.=9.b...a.N]......?......-.~...U.j.~.A.`.<..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:02:18 17:19:24], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	20838
Entropy (8bit):	7.322123164397766
Encrypted:	false
SSDEEP:	384:ugWT8L57iaWT8LhvnHBis2MP3vVWZCO+e6v7FWUaXgCuh:uhe57CehvK23vVWZd76zeQCuh
MD5:	C8FC37E09A4F3CB30386B76BCA1974FA
SHA1:	DA4E5A968F3BC04247EB70F4C6BB05E7A227E97A
SHA-256:	99023D7643846210151DEF14361D62800E52101ED6EF4C4852ABF7E45E210031
SHA-512:	D608B3DAF9A911699087BD2F8D7118E718A076965683B4D7B5714B373EA88B6A3FEA28812F0626AFBF2E5415BD6F1AD70A47171F9C0168F479F3C93B282B3D2D
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2019:02:18 17:19:24..........................Z...........p...........................................&.(.................................x.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Y'.?.l...r.-.`..r/....&h..SW..g`Q@.%...aC.g;..i..V.^3N..~s.._.r.c..e....qk...d..s.h......b..X.2..0x...C..8a..Q..J....._...o......QS.et..'l.Yuz.6..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	43743
Entropy (8bit):	7.873215654163492
Encrypted:	false
SSDEEP:	768:GKqv4gDR6fAvZc9h50kckWegZfYWqVOnHjCdE1x2ClU/zUx6Y:GZv46Mfgcv5hc0gZJHjlPGzUx6Y
MD5:	C25A3618B63BE6E923D4B13B617B7103
SHA1:	F9AFD42B16992DC47A28D9C94B056C8789AEE466
SHA-256:	993CDAD20E33CDECA49E68C6683C52BDE9374A5D286BC37C7D94BDC2E3A69B73
SHA-512:	4B2F30884706E12AA76D3ED4A4F4247DD11178D86DE1BCDBC56535967FC5DF35C81AB4CCA58A09ABFA5F3B0E418B3FE704BA171C040C3EAAE98BC1100EA109D7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................Q.X.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..W4..=.S..z3Z.....DN..sR..V..k5...=?.....=.<d~.(......(...7...........~.q.I...k.'....u.o..m.0..,.w. ......l.;.k..2i......T.s....gi........y....J.U....g8...+..N.S../z.c..D.....Y.<.......c>..*.:.......i....h....P...T......k.......H....,..%e....._.....?L.z.XWM....tfj+..?....-.5.7..@.=?_.^}\|.......Qk.. ...s.r+..:.%.q....e....._s=l....).}.#..........;+...^.[...

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1043), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	36203
Entropy (8bit):	5.390104917058935
Encrypted:	false
SSDEEP:	768:lz1FqT1Ei/bG2NynQu9LVbVR3SwVitL3yBtKA+874NUdUix:lz1FE1Ei/bG2NaxLVc3yBtKA+874NGUs
MD5:	85B6F53F9BA58A23966274DB16C12356
SHA1:	4BA769FFC640F3BB2EE6CC69FFFD9FD3630D61F6
SHA-256:	CEAFDC74781FB197326A2A1108A508DC8856196A49D15707FE1754866C017B35
SHA-512:	5C6E4BF347AC29557A88B573BAEA4BDF4FBEBE4841E3EC4B0BDC69A2DAFDCFAF4F6C77869C5D0C5FE7AE01B5FDDEB838AD0FA460BCDA02C80224EE3D88053338
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Managing Termination of Employment in the Canadian Workplace: New Developments and Best Practices..</title>..<meta name="description" content="Managing termination of employment in Canada is complex, especially for employers used to dealing with United States employment law, or for Canadian employers who have limited experience in the area. "/>..<meta name="keywords" content=""/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/i

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 350, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	81012
Entropy (8bit):	7.9718012593996725
Encrypted:	false
SSDEEP:	1536:dzQ9GrwnCmPoPAD5jyKrA5ssVnlRm7d+7Y7TNGcgfBZiVEFUVIOUi:29GrwnDD5jfAfl4pNJSZkEFUzn
MD5:	A7F7807F582B3879262A71BF0013F375
SHA1:	9950B684B9631EFE26F6D6C03F52AF7C77F11B9A
SHA-256:	6DCC91C42C60F7CEA9CA85E44ED44CDA4C8C08FCB03ED818B268513F4A803528
SHA-512:	2A7727CF1442A938CD27B697AE3135FC70C52F65F7FB406A92A6381CDF38512B5CC2474F17A3F3A49F9F00F5DFD55EC8837DF037D0E48C1385058160C7315BE6
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/206588.png
Preview:	.PNG........IHDR...X...^.....n..n...uiTXtXML:com.adobe.xmp.....<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2023-02-01</Attrib:Created>. <Attrib:ExtId>ef4ea7f8-868a-4388-855a-ccf20e5101e0</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Chat GPT and HR - 4</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:pdf='http://ns.adobe.com/pdf/1.3/'>. <pdf:Author>Radhika Sharma</pdf:Author>. </rdf:Description>.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (944), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35015
Entropy (8bit):	5.374775667759112
Encrypted:	false
SSDEEP:	768:lzXFqT1Ei/bG2NynQuBLSzcgR39wVHtLKRNzmg7PNUdUix:lzXFE1Ei/bG2NajLSzgKbig7PNGUs
MD5:	816852F92F773F92AB724AB8E0498238
SHA1:	436F4B0D865A25AC56DF1269284A8F029E08DECC
SHA-256:	398DA20CE4D5DA202035D4FD51EC38EAC4FDBB0F482ED0C90D78914EA3362890
SHA-512:	8B75A1861A47601F592D744EB28235C0D7C97DF3E37B3943A637D05295C0F41450695C8355ED112560AD9FD99C1A44BC62A39C884CECDA7CBFE73D095E2B58D5
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> 5 Key Strategies to Leverage Positive Psychology for Better Leadership </title>..<meta name="description" content="In a rapidly evolving world, leaders are grappling with unprecedented challenges."/>..<meta name="keywords" content=""/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/jquery.min.js"></script> <script type="text/javascript" src="https://www.traininng.com/images/js/jquery.js"></script>..<script type="text/java

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.538909765557392
Encrypted:	false
SSDEEP:	3:Ho/BthrNQRY:iNNQ+
MD5:	81A3B69E9856C365954590B6E5A98ACD
SHA1:	4108A5EA5C85138E27FEB043DD4C788C9AC38152
SHA-256:	97FBE74BD1228399D6A27D280014EE355CF74813D35FC975AE9EC11858062C8A
SHA-512:	962E057A696C8F7C9AD8084751F41A57D338E40573D930D7017FD025291E3102A65D0805907967E00DBCF1EA8985B7024AE02628C80558C4582E3D61C2B8C0DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmjIfMZffahlhIFDRV2MuQSEAnK9opVVJZmzBIFDZFhlU4=?alt=proto
Preview:	CgkKBw0VdjLkGgAKCQoHDZFhlU4aAA==

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	206903
Entropy (8bit):	5.378855086321751
Encrypted:	false
SSDEEP:	1536:AI33Y96b+S+n8pCA+Qgoi1j6JK0A0Ws6+pY8laT+a4kzFPbe4uSw03RSupFMHdFw:26KSSVQWYBcFMjclJK0p24x7lRbg2J
MD5:	B8284A4B45E40625C2B90A641EBE4A68
SHA1:	8285EA200E6679B92B07818033EE54199CCC13D5
SHA-256:	965CBA95C928E95003CE37271090406EAA7D5C2D955230A785B2B3BE8A9A17F5
SHA-512:	BA9BEFB2DCCDEF7FC088C927DD8C123BFA70989618552B644D229420B3F97F665FCBC16B0DEC39E2A1191A99ACF0C265BA9CA7E83AB2B22C128BD5BE4FE34E7B
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-7bc1c0f.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[8876],{65532:e=>{var t;window,t=function(){return function(e){var t={};function r(o){if(t[o])return t[o].exports;var n=t[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,r),n.l=!0,n.exports}return r.m=e,r.c=t,r.d=function(e,t,o){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(r.r(o),Object.defineProperty(o,"default",{enume

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:01:16 12:20:00], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	18401
Entropy (8bit):	7.208151498383707
Encrypted:	false
SSDEEP:	384:O0yIy7ijyIavn6niFV1LzGzZrIpYPZR5VXBO6qxaG682vbUoTwL:O0w7u4vpzGtNBRqxaG9+bU7L
MD5:	8DFEF7D0284932BA2073349856F1D0D2
SHA1:	115CC336868FE25961AE0C067285A034E7F86299
SHA-256:	023CF4584979E366B67EDA1ECC69A470D4F105A6C944C3D87DFEC492AD8EF7DC
SHA-512:	570CE337F78DC12C53B8A8E053901845BBF43FCC7FAF6AFC2A6AB33ED6D9AD6B63872311C8623776C0B2B0C09EA5C07F4E00EF9BCCB893660EA9B5E8EF27551A
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/33911/Christopher%20Faulkner_large.jpg
Preview:	.....{Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2018:01:16 12:20:00..........................Z...........p...........................................&.(.................................E.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...Te'..U..HRk.AT..Y..8.".u........o.".]..K..{k`.. ..V...I...?...:.X..y..=..X.......@...;....9.^....Y..!.....n...E.+.F..~.p...:._..X..e.V..I..;....:.&I5+.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 600x300, components 3
Category:	downloaded
Size (bytes):	35878
Entropy (8bit):	7.7508170545698105
Encrypted:	false
SSDEEP:	768:OK8sueDogKIM7JqmCW4HKYaH8XtRfdbB+7FY2WfIpCdD:OTHaogjM7f49aH8Z1QWfHD
MD5:	746D6CE908459AA1CD0ECE4DB4B7CBAC
SHA1:	A9F613F3E0FF258900A734FBC80960E85CCB9562
SHA-256:	92536CDB63E93E98F6AC9693579C86D59DDBCD7E2D78EA4B29BA0CF6766DAAEA
SHA-512:	3ED09C8565C2F3520513C93916CDA2F8B6DB05D512D58472A582D3E27889C4A3BFBA66A26459B4E3FB90C4B39C73528D599A606B83A79084FA03719881EB8913
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/206118.jpg
Preview:	......JFIF.....`.`......Exif..MM.*..............Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 ">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e39e227d-071c-4a33-8574-43d5bd1b13eb" xmpMM:DocumentID="xmp.did:AB5BDC349D4211ECB890807EA6750C6B" xmpMM:InstanceID="xmp.iid:AB5BDC339D4211ECB890807EA6750C6B" xmp:CreatorTool="Adobe Photoshop 23.1 (Macintosh)">.....<xmpMM:DerivedFrom stRef:instanceID="xmp.iid:bdbd437e-2728-4b21-9bfa-3d8e99dd4543" stRef:documentID="xmp.did:e39e227d-071c-4a33-8574-43d5bd1b13eb"/>....</rdf:Description>...</rdf:RDF>..</x:xmpmeta>..<?xpacket end='w'?>...C.................

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 115, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11264
Entropy (8bit):	7.965578861365895
Encrypted:	false
SSDEEP:	192:yIIHUCD4waQi5rg/rUNY662/uv8f9HgIhB1EibXuCz1soOQ34WiOeLgM:c0w7qrg/wNYsC8N31syQnEM
MD5:	D19E5A5FB468397E1C460B7B2B5E5F3A
SHA1:	9A6B3578C58588E3D182003E350F41F3FBE3851D
SHA-256:	A78FA2820480E07E7D0C8711F9AAFC1EEC2A5BE86EC65CB631DB18CE7A45E1DD
SHA-512:	427D80BA9489AB6A8E62E6DD01531A8AC7B09CFD93FD15D8E4CF6367252F836C59E0518633C15882A66FE420A92C2576DCDCF039F0E3E17DADD58697927F4833
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...s.....".?.....pHYs...#...#.x.?v...MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 114x114, components 3
Category:	downloaded
Size (bytes):	7243
Entropy (8bit):	7.906223025011612
Encrypted:	false
SSDEEP:	96:mEeh2R5ICOBdooQoNGoarAUSlcoouaB2KbEVV5GP7fNrMAZuV5JRiYd/3bpVK+YY:m34DI/oD/OYuQ2hXirp8V5JRd/3lYE
MD5:	3002EDF01883FB59408B44FCB1277930
SHA1:	306096C20FEB35E487BD302A404D29337E129E15
SHA-256:	59055F27423383458966A208F1AE39188E522D68983C1B5AFF871471FC93EEB2
SHA-512:	4E368ABB4A368CB7FF358CF76C085EA39506C50457627FB0B835666EDE496F8E8CB830E04C8E3BB7F877F0C0E94801B50D0E90D3EB2A2CFBA973E9F4F92E75EF
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/61837/Jared%20Garrett%20-%20Large.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................r.r.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...I.Z._7.eW\.....M.b>Y.G..2...%\h...../...k.....g2L.........J...z..yjw...mo...>.inS..k..>..$....N7r..W....q..<;....kv.0..3..6.3.&.n.K....=...o...........Z.4..G%....a.).D{...py..=....p...-k....,..m...>.....!,V7W..Acgb.[..}...I$........\|...l<3.mrmB..e....i.o$...*.....?.)....o......b..k..{}i.k.".q..`.......8%...0..QF".M.\...........{o..iz..t}...[.=.=...

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HDnY:s
MD5:	1368E927BDF9CDD10C7C6EAA606F5401
SHA1:	39D7DBEF69F00F82DE147C8A1BD6EA7AB81CFAE7
SHA-256:	7C4BDD6994CA8DC0F95B46C85DBB79E14FDE90A0F5EFAAEFFD88D603C70A9002
SHA-512:	ACBD9AE51E7DADF1FAED18A07F5ED0B79DDBB945E8AA22240A0A468B8DC521C5DD98B4EE0264ECB152F50F6D800F28174B550B9ABA44F7930F71E7D32C02E3DE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAndp1U6M3_x6hIFDUVpDEQ=?alt=proto
Preview:	CgkKBw1FaQxEGgA=

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	18216
Entropy (8bit):	5.300321186844651
Encrypted:	false
SSDEEP:	384:lzypDq8Fd52KEkauLhjo4g1gZgyJvWtdUix:lzyFq8hhEkHdo4g1gZgywdUix
MD5:	56357AEADF63F2801CA72348B032F2AB
SHA1:	15A96D09E0D8AD13312CD9606942EBD9D6EC0352
SHA-256:	9B439ECFF87CEAC9B6BC1AEC4FC0C354F8ECC2D2714DE539FC35CDF9DD26A72C
SHA-512:	6BFECA20422D32FF7485D959526AE76071868CC146CB5C5216146F9A67B6181B283D57D239450A238CB101C964F00D0F330D9294D0AE95040003B4687A5DBEAC
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/speakerprofile?speaker_id=34496
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Compliance Experts – traininng </title>..<meta name="description" content="More than 100 Compliance experts across industry and across the globe"/>..<meta name="keywords" content="Compliance Experts, Medical Devices, Pharmaceutical, Clinical, CAPA GMP/cGMP Compliance, ISO 13485, OSHA, Consultant, Consulting, Quality, Food Safety, Risk Management, 21 CFR Part 11"/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/j

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=343, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 600x343, components 3
Category:	downloaded
Size (bytes):	39547
Entropy (8bit):	7.691866483286014
Encrypted:	false
SSDEEP:	768:QCXyc74Xyqq9djz/gBBQT4aeMHAL/RKx40VQpcp6HLIFi6YWIu:USqq9djzgK8sAL/RKOCQpcpgL+pBv
MD5:	E2567C8525A165095F95F321D4B156A1
SHA1:	5E6F1CCA51AF4C32CFF8854A47847D531FF5E0F9
SHA-256:	53F6DB84F52F871BEABE8BC07C2699888D1E3561578A2A0CB34F4897C828988D
SHA-512:	7A92A21508D1B5623796B23A7F61EF3612ED1F7F5AC09C3F5436F5A9CDFC09EC549E25E657DBE472D6F5AB2147F740E4893BDD4C3E831F06977D11C54CC221E9
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/defaultWebinarImg.jpg
Preview:	.....NExif..II*...............X...........W...........................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2021:06:18 19:26:24.............0221....................X...........W...............................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..)JGri..).d.....1.Q.....p.$.+4[.k.ES........QCo'-..5..I.A65.5.2.AY.Z...S...&

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	971
Entropy (8bit):	5.094951330992702
Encrypted:	false
SSDEEP:	24:Y+evSuFYklQSq772WIh0eRJs5EvK79szKt9ZktwWyZ:Y/KmjGHTIel5/azuPkG
MD5:	5D1DA307E14FDE3DA8482BBC8B84ECA7
SHA1:	06E43EC020A62B5781C5C766F8175DD6AAFC0E81
SHA-256:	D1EE0FAF67078C58DB5AFAC96FBF63503035165E56F66DA8D49D204A782F8512
SHA-512:	EDBCFFCE4A4ADAC8748E4215364EAD578C663DDC7F7EAA3E58F8D1EBBA7A1A1EB20482D0E7C1CFECE09B71D1B2EE7987B3F8C82F86ECBAD720C257EEABC064A7
Malicious:	false
Reputation:	low
URL:	https://ekr.zdassets.com/compose/zopim_chat/5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt
Preview:	{"products":[{"name":"web_widget","id":"traininngllc.zendesk.com","bootstrap":{"config":{"features":{"prechatFormVisibleDepartments":true,"fastLoad":true},"color":"#6db578","cp4":true,"brandCount":0.0,"position":"left","brand":"Traininng LLC","embeds":{"chat":{"embed":"chat","props":{"badge":{"layout":"image_only","text":"Chat with us","color":"#2b9a25","enabled":true,"imagePath":"https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png"},"color":"#6db578","zopimId":"5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt","standalone":true,"position":"left","mediatorHost":"widget-mediator.zopim.com","forms":{"offlineEnabled":true}}},"launcher":{"embed":"launcher","props":{"color":"#6db578","position":"left"}}}}},"features":["chat"],"url":"https://ekr.zendesk.com/compose_product/web_widget/7bc1c0f290501106fa41dc515076261e2325fb83?features%5B%5D=chat","assets":{"scripts":[{"src":"https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js"}]}}]}

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3
Category:	downloaded
Size (bytes):	9653
Entropy (8bit):	7.94418166686397
Encrypted:	false
SSDEEP:	192:k7hx+Asr0IuvGk/LwABk6qEzUw+v/PRv9mo8VP298ib5Q5uAwibs:k7/+r0Iuvp/LRCEzWvXRFmo8VU3b5QfK
MD5:	BBD9459B0DFAB463DDBFA6ACB4542D88
SHA1:	6F5298C6C11E4A523D769815EB7D0B09F05582B2
SHA-256:	D78F17BD6907969548A80FD123D91C842143EB7985CA22B39F4B3D7606C1D15D
SHA-512:	53EEA7993C61AE064ECD65305FDB6E38F96E0DB0D2CF5243767E09103E2885A5CEA370A77EBBFAB35DF01B4FE76E37C8AA04CAB6127BCC573E9F981A184AFF98
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/207034.jpg
Preview:	......JFIF.................................................. ,#..)...$6$)-/333."8>80=,23/...........2)""22222222222222222222222222222222222222222222222222..........."........................................@........................!1.AQ.."aq2....BRb....#3....Ccr.S..s.$.............................."......................!1.AQaq..2............?.........]..........c...e.. ..rz...O...4.}#.....h...........`m.M../i...dF..D......O{.<.z..N..-.m..<y.R...!>.$rwg&..........%{....1-d..h....K\.8n=..(..+.\|.....Zn..&"c.v..I9.....5.;k..?..9e.x.gQ..,c1,..QA...y$.[\.......e?.......t..:...2.\.(........".(...\...?.....&y....uC....k..F~..F....F2.....&8P~.BV(....rK}DQ.9..2.z.yvr..U.y>?.cc=.b.W>..(..HC._7.....iS..YrJ...[r....9w..ip.n4.....Z....5<.T.p.M;......;.(%..5..5.\|Eg.e1.k.n...2..W...t.Q...Tv.1.[.O..]`.9.. .k.,E....F..I/..^...>..ki.g.F:-NZ..J.....s>.]@....2.N`r.jy.\|........vP?...P.7.....^f..u..3Q._.>F.....{A.P.U....m.p.BK."...._.A..<0....V8..t......<L..kso...@Q......6bY

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4527
Entropy (8bit):	5.081481990685914
Encrypted:	false
SSDEEP:	96:5Q0N75/dHfiNhRNzShRwOApuIzApC27+ACuBAcuz17tsthttDcRiGTtQthttDC:771dHo/A/PApuICC2yuRuzPM/1kiGxoQ
MD5:	37C9961C8531A82482ED5DC13800AF25
SHA1:	190B81272086A56BF5EB24A2B12AD65787BCD2BE
SHA-256:	702DED0B90132081FDB5E3557FBA06235EE4D86BDC2B9E0FA8D09D92A6074BF0
SHA-512:	855E26053A861CFD754EC19D609430D8C98D5151D4C8B9662F2BA18CECA3BDBA5E49DDCCE6E857E3487C15EDC83E37091EA0CC1893CE4BE18C57C5A3C0C37194
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/fieldlookup.js
Preview:	/. Licensed to the Apache Software Foundation (ASF) under one. * or more contributor license agreements. See the NOTICE file. * distributed with this work for additional information. * regarding copyright ownership. The ASF licenses this file. * to you under the Apache License, Version 2.0 (the. * "License"); you may not use this file except in compliance. * with the License. You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing,. * software distributed under the License is distributed on an. * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY. * KIND, either express or implied. See the License for the. * specific language governing permissions and limitations. * under the License.. */..// ================= FIELD LOOKUP METHODS ============================.var NS4 = (navigator.appName.indexOf("Netscape")>=0 && !document.getElementById)? true : false;.var IE4 = (document.all &&

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10721
Entropy (8bit):	5.361301615323826
Encrypted:	false
SSDEEP:	192:8QHpltEYVaWNRSHXu7+XlXQuXZXbXk1dXkI4XNX1XFX3XkfgZAyBqh3ol8X8JXbz:80sYcWNRSH+7+VAupL0n0F9F1n0fgZAU
MD5:	0B35581EBCA2CC3B65BFF8D939D100C3
SHA1:	84B39A092C3DF401F181654BC86114B757A0AB85
SHA-256:	6C58C4BE88AFB6A649FC8ED45F6529A235B2320720930F8FEA6C48478D509BDB
SHA-512:	C6E34876756F9211BD2CA990A813B976C6157B0727183E836069100EF97C2B25C188B0CDE0BF7864E33222557218C136A94D764911349404242D13716B7BAF46
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/prototypejs/validation.js
Preview:	/.. Really easy field validation with Prototype..* http://tetlaw.id.au/view/javascript/really-easy-field-validation..* Andrew Tetlaw..* Version 1.5.4.1 (2007-01-05).... Copyright (c) 2007 Andrew Tetlaw..* Permission is hereby granted, free of charge, to any person..* obtaining a copy of this software and associated documentation..* files (the "Software"), to deal in the Software without..* restriction, including without limitation the rights to use, copy,..* modify, merge, publish, distribute, sublicense, and/or sell copies..* of the Software, and to permit persons to whom the Software is..* furnished to do so, subject to the following conditions:.... The above copyright notice and this permission notice shall be..* included in all copies or substantial portions of the Software..... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..* NONI

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=482, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=600], progressive, precision 8, 600x343, components 3
Category:	dropped
Size (bytes):	84323
Entropy (8bit):	7.879741136341872
Encrypted:	false
SSDEEP:	1536:CuBo1uBogznB8IqbyFtaFWJHC/ZoX37eQgEcYxSNbTLX6XGvmn63r/6eNqY:CEo1EoauIqbyzrJ4ZIaQgEcHVTLX6XfU
MD5:	CA27B5C8C782DF1C9A3645E63DC8CAFB
SHA1:	02CA63619348E98ACDD903EF1AF1B8329EC94350
SHA-256:	A6A55C924AB6C6BD70D9FE20822C9A941F7E507A9C4DC9B0341C9A4B5CE78437
SHA-512:	0D9B66A61D715351EE3F51D512AB8FD95068A65419D75789813A507181D68827AB563D7EB8D0C25C0D80A38DEC903A6410CF914763625BB49992D1F1AB12EED4
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*...............X.......................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop CS6 (Windows).2019:02:25 10:32:51.............0221.......................X...........W...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..d.IH.RPJK...,.2..".6..$~..'...[....J.'..um.O..._o..K./.=?.'......ci....q.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (493)
Category:	downloaded
Size (bytes):	7847
Entropy (8bit):	5.231665164782722
Encrypted:	false
SSDEEP:	96:T+sFYH7Hg+MkQbNuLnvv4bwDm6aJ8i1euY177hz:ZYDg+FTmNeF
MD5:	B67955DBB5328B75CB8803A8ADB4D95F
SHA1:	340B1EC8DF7B37B6ADB3648E2004099DB82C5E40
SHA-256:	5E83620A9D17C71B2864EFEF577FA5BFBCD866897836A33AB0A1C104B5C25235
SHA-512:	8FE3E002A08099F5EE37D46F4FB6BA853B51846074D7916FA71E9DE372F73C41BD1424F3AE084DF2586539A069E773FC65F43B841E19B73134CA5178585DFD6D
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/control/webinar-packhttps://www.traininng.com/newlogin
Preview:	.<!DOCTYPE html>.<html lang="en">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<meta name="viewport" content="width=device-width, initial-scale=1.0" />.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>error</title>.<style>.html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,dl,dt,dd,ol,nav ul,nav li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline;}..a{text-decoration: none;}.body {..font-family: 'Roboto Condensed', sans-serif;. width: 100%;. background: #0C0334;..text-align:center; padding:30px 0px;.}..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32180), with CRLF line terminators
Category:	downloaded
Size (bytes):	64304
Entropy (8bit):	5.3745745673908045
Encrypted:	false
SSDEEP:	1536:vP1vk7i6GUHdXXeyQazBu+4HhiO2wd3uJO1z6/A4fGAub0A:S4Ud/Jiz6UAc
MD5:	E2685268AA3F9853AF23FFE6DF22E8D9
SHA1:	D5C6CB257F98F7746C33775ABDC0B87547277BF9
SHA-256:	C915C5B15BC22DD93130B5F9EB33200FEDCC09D5475F733E7023C08A06DE8E12
SHA-512:	C42028DC991797B58EBCFFB7DBC8AE5E3CB086550D7E5404F3256BC3D6887BA14FCCE54540DD03ABFD9B576C871CF9DCF2583921355019450379A058E0740FE5
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/js/jquery.min.js
Preview:	/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /..!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,funct

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3
Category:	dropped
Size (bytes):	9653
Entropy (8bit):	7.94418166686397
Encrypted:	false
SSDEEP:	192:k7hx+Asr0IuvGk/LwABk6qEzUw+v/PRv9mo8VP298ib5Q5uAwibs:k7/+r0Iuvp/LRCEzWvXRFmo8VU3b5QfK
MD5:	BBD9459B0DFAB463DDBFA6ACB4542D88
SHA1:	6F5298C6C11E4A523D769815EB7D0B09F05582B2
SHA-256:	D78F17BD6907969548A80FD123D91C842143EB7985CA22B39F4B3D7606C1D15D
SHA-512:	53EEA7993C61AE064ECD65305FDB6E38F96E0DB0D2CF5243767E09103E2885A5CEA370A77EBBFAB35DF01B4FE76E37C8AA04CAB6127BCC573E9F981A184AFF98
Malicious:	false
Reputation:	low
Preview:	......JFIF.................................................. ,#..)...$6$)-/333."8>80=,23/...........2)""22222222222222222222222222222222222222222222222222..........."........................................@........................!1.AQ.."aq2....BRb....#3....Ccr.S..s.$.............................."......................!1.AQaq..2............?.........]..........c...e.. ..rz...O...4.}#.....h...........`m.M../i...dF..D......O{.<.z..N..-.m..<y.R...!>.$rwg&..........%{....1-d..h....K\.8n=..(..+.\|.....Zn..&"c.v..I9.....5.;k..?..9e.x.gQ..,c1,..QA...y$.[\.......e?.......t..:...2.\.(........".(...\...?.....&y....uC....k..F~..F....F2.....&8P~.BV(....rK}DQ.9..2.z.yvr..U.y>?.cc=.b.W>..(..HC._7.....iS..YrJ...[r....9w..ip.n4.....Z....5<.T.p.M;......;.(%..5..5.\|Eg.e1.k.n...2..W...t.Q...Tv.1.[.O..]`.9.. .k.,E....F..I/..^...>..ki.g.F:-NZ..J.....s>.]@....2.N`r.jy.\|........vP?...P.7.....^f..u..3Q._.>F.....{A.P.U....m.p.BK."...._.A..<0....V8..t......<L..kso...@Q......6bY

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:02:09 16:04:33], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	27157
Entropy (8bit):	7.4303343824217825
Encrypted:	false
SSDEEP:	384:DN1XjCLs7iv1XjCLHvnHxiLYNg7YZJ7UgGWm+fGt8mey2LNZp1:DTYs78YHvEYyWJJG3+fmZeyMrp1
MD5:	DFD940262B18903D4D4DE477712CF4E1
SHA1:	90C5E191584B1B1AED4CB8485F117B37DB384497
SHA-256:	112FBA6DFA96E9D14918A7746CD7A5F076A08661450B5A0EA152BBC9C082D5E9
SHA-512:	B5900CE189CF2DB7BFE3C8E98C19CDB4AE11FBCF9F0EABEE9B39CD79DAE931E1980884C24563793C33D5C19A701EBD28492AC2C54336F8B6D02B247DF8208D33
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/62984/Brian_Anderson_large.jpg
Preview:	.....oExif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:02:09 16:04:33..........................Z...........p...........................................&.(.................................9.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..vF.Z...E-.v....Z.a.W.on.k...k.#..Q..#.........Kmhu`.Ho.W..W}.........:(L.....@T....uu..6..O.h\|.Q...;..m.1...i.^......k....PD.t.p0NSNE.4...........NE.U.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 78, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13472
Entropy (8bit):	7.968977396799311
Encrypted:	false
SSDEEP:	384:/IDUYjYNOD5ZycMIYcTHsGTxyHaw1RzxG1QuxY0P:/uSOP3bqawHzxwQAP
MD5:	94E754D5FA2762591663C594FCAB49CB
SHA1:	12630FD79424F646A33AABC14ADD1D622B00A020
SHA-256:	D989B811FA3BD9936296F1E2FFB318F6A02764368C323AC3E6D2116F0E847F42
SHA-512:	FC8D18FD2A4B6125A28B2D59678387162878684A431C6ACD3390843EB07C1AD49AF7B6305BF59631D8C6AEE28AC98FF2AD6F7554555B7E33D902F69CB411FDD0
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/secure-payment-stripe.png
Preview:	.PNG........IHDR.......N.......<M....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID="xmp.iid:E655690389A711E89ED2FF6EEB81D7D2" xmpMM:DocumentID="xmp.did:E655690489A711E89ED2FF6EEB81D7D2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E655690189A711E89ED2FF6EEB81D7D2" stRef:documentID="xmp.did:E655690289A711E89ED2FF6EEB81D7D2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....1.IDATx..}.\|\.....E]..Y....n..`.K..aK6\|......&.../_>.d.f.M..fIX....H(6..\...K...F....s.#?..I.....zf^...=

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (369)
Category:	downloaded
Size (bytes):	297043
Entropy (8bit):	5.363529358042203
Encrypted:	false
SSDEEP:	6144:VVSQrbvTyLyR7jUecxmBjkUYJZj+s34Cx:zSmvvjUvgBjkUzs34Cx
MD5:	EDA7057AE30F963805DD572B0B7EF22A
SHA1:	5FB51FF4289B4AC9F29C5AC35FA3A57B3636D1F1
SHA-256:	F3276C0FDF66DBF8B5D55348BFF5E49BFA7AF193469B7717B3FEDEC4699FB642
SHA-512:	2A5B85B13EE544790BE77D8473C4043C5572A1C41BB680ABA88D53E292676767FA6F02B5BA418AC1FE023AF0EA865267B58B52DDE8E52748BEEBB4C62408CC62
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/js/convertPdf/pdfJs.js
Preview:	/** @preserve. * jsPDF - PDF Document creation from JavaScript. * Version 1.0.272-git Built on 2014-09-29T15:09.. * @name jsPDF. */. ..var jsPDF = (function(global) {...'use strict';..var pdfVersion = '1.3',...pageFormats = { // Size in pt of various paper formats....'a0' : [2383.94, 3370.39], 'a1' : [1683.78, 2383.94],....'a2' : [1190.55, 1683.78], 'a3' : [ 841.89, 1190.55],....'a4' : [ 595.28, 841.89], 'a5' : [ 419.53, 595.28],....'a6' : [ 297.64, 419.53], 'a7' : [ 209.76, 297.64],....'a8' : [ 147.40, 209.76], 'a9' : [ 104.88, 147.40],....'a10' : [ 73.70, 104.88], 'b0' : [2834.65, 4008.19],....'b1' : [2004.09, 2834.65], 'b2' : [1417.32, 2004.09],....'b3' : [1000.63, 1417.32], 'b4' : [ 708.66, 1000.63],....'b5' : [ 498.90, 708.66], 'b6' : [ 354.33, 498.90],....'b7' : [ 249.45, 354.33], 'b8' : [ 175.75, 249.45],....'b9' : [ 124.72, 175.75], 'b10' : [ 87.87, 124.72],....'c0' : [2599.37, 3676.54], 'c1' : [1836.85, 2599.37],....'c2' : [1298.27, 1836.8

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:05 12:33:58], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	24225
Entropy (8bit):	7.332945290283182
Encrypted:	false
SSDEEP:	384:iiA/eCWQ6S7i3/eCWQ64vnNci8JYNg7yUbxBMF6L/IHHwJmU4iP:iiBQ6S7PQ64vuJYyJbxO67uHwJmU7P
MD5:	8F5846B247E38CDBA27B11F296289BD3
SHA1:	77E521367E3B7F1EB5B27472F73AE5CFF2CDDFBC
SHA-256:	5AEA072E154F6BBCD66D592BBF75D5DA64AFD5EC4141E96A55F5297279A5355B
SHA-512:	4BAB99FB939E770E36D65C31EC119F172D7568921450EFB93B9C29DAB62DFA4843E6D3AC1567CD6B17177E67E41D20D003C05394984EB5E9CB0BE87185F28E20
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:10:05 12:33:58..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...H..$.I)I.$..\|.......e5..i...lb}^.:}....8....../:.=.I....+...]J.\.)v.9...".Y$..F@.@.p.)..).T....N......N..t...I.S..V1.....+...\..+f.=.C...]^.....m,kk"d..d

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo
Category:	downloaded
Size (bytes):	19698
Entropy (8bit):	6.207687719996166
Encrypted:	false
SSDEEP:	384:2kWVjAhqGJp3T9RYGJWbv9+5OQHPIoyOgos:23MJJ0Gwb2uOvs
MD5:	F11CE9E8F40A392830217253FE75D6DE
SHA1:	89BA57FCC360DA34756C127ACBA15A8B23267FC6
SHA-256:	05069CC62B394B6ECC2DAF3C51B4B2BA7F6CC8735988E8234487234AF47ECEEE
SHA-512:	00AAEE50939AD1D95B52F4A51FA3E357BB561AAA19817AD24AC174D699080539A75D84BA6EE26D59BDAF45C201EE4D41BD4683A9484C78575D76B67CE65037BA
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3:2f74f87fda7e1c:0
Preview:	ID3.....3iPRIV......XMP.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmp:MetadataDate="2013-04-04T11:02:01+08:00". xmp:ModifyDate="2013-04-04T11:02:01+08:00". xmpMM:InstanceID="xmp.iid:078011740720681192B0A0F504EAEAA8". xmpMM:DocumentID="xmp.did:078011740720681192B0A0F504EAEAA8". xmpMM:OriginalDocumentID="xmp.did:018011740720681192B0A0F504EAEAA8". dc:format="audio/mpeg">. <xmpMM:History>. <rdf:Seq>. <rdf:li. stEvt:ac

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	5.288571114461417
Encrypted:	false
SSDEEP:	6:oMjYzi6Ac1MjYzi6A7crmWrQkj9HOvGRFVVe2Nxd2pn:XDbDkm+/ZBRF/e2Nb2p
MD5:	77BB07CA171E3FF2B72A7DAFA7822BC8
SHA1:	2FBD32C0E434F7F2C355A92CE29C35F29EFA9A9F
SHA-256:	A29E4AF6AA6A95982D1092A20F0068173B9A9D5DF0A89BC99DA556AEBEC3CE54
SHA-512:	C86D851298EAD9DA81837465F1BA608DB05F00F0E2282C58FCC24F32CBC78116C1E9380C31DCA1B6F6C731B3227ACA463586D4C75BE595EBE4B74B1E8CECDAC9
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-chat-incoming-message-notification-7bc1c0f.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[5376],{62677:(e,s,d)=>{d.r(s),d.d(s,{default:()=>c});const c=d.p+"fda6cd35495c75f83508d9d2e77ee33d.mp3"}}]);

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1240), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35775
Entropy (8bit):	5.3777576541479455
Encrypted:	false
SSDEEP:	768:lz+FqT1Ei/bG2NynQW9LAR/8R35IVvOtL5Hfv7gsUdUix:lz+FE1Ei/bG2NaVLKV85/v7gsGUs
MD5:	58FE576B68FBB0D5A8EA2F2CA126907F
SHA1:	4B69B05EF31B431CF9E2ACDE55C173415A6CFB6C
SHA-256:	F589C8A51F42CB72A9DA8D82555AFDD9613E3168BBC59EB45D772055C52DEEF9
SHA-512:	58CA34064FD6E159EC86C01DAEF7A85B884DFF64E35E8C574540D948416C52F95E3B1385C72BE0AC5C185D398F6524FB47B8C87D274FB4C63282F8B97A45ACD5
Malicious:	false
Reputation:	low
URL:	"https://www.traininng.com/webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live"
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> 3-Hour Virtual Seminar on Business Communication: Grammar, Better Writing, Email, And Other Common Communication in The Workplace </title>..<meta name="description" content="In this session, you'll learn the core skills of communicating in business, including correspondence, reports, presentations, both virtual and live."/>..<meta name="keywords" content=""/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/jquery.m

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:07:02 15:37:01], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	23523
Entropy (8bit):	7.431439432071464
Encrypted:	false
SSDEEP:	384:QwpLJIyQ17iG/pLJIyQuvn5/i+Vkx6Xl7ttjuvRHJZOZjMNvFCKcpaZK9z:Qa1Iy87NB1IyjvFLSuZjM5gJpaZKR
MD5:	E607A3990DE37FE32F7068CBC84D187A
SHA1:	EF8BA78CA7C3462263D649D57D881F5FD9150791
SHA-256:	DB67D31FEE200BF3EA7695471C1290CB8D07B3495BA3D26B1E2695EB005033F3
SHA-512:	3DDC4B2EDC64C025591AD7744C04D0CBC83051DF65653C286A2D9CBFF62BB66A144C90F7C8F472AD0F17113A2F87FCB8F6F8684E37E2A4D90F1157EA5F491432
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/34362/Carl%20Patterson_Large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2018:07:02 15:37:01..........................Z...........p...........................................&.(................................._.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...{.4.'I.~.M....71.D...AX.Iq..<~hon...7Q.L..+.U.SH..;lI.$\|.j....sXI......Tls.eA.hl....F...t.....x...S,......$..Nh%...j..6..,>.....,..g.ux.Z....@.@'gp9.d.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25709), with no line terminators
Category:	downloaded
Size (bytes):	25711
Entropy (8bit):	4.76122248133975
Encrypted:	false
SSDEEP:	384:3dq+te24z8VEB4yCSVYC+tQ52PX2NT91z:Fe24z8V24R+3z52PXyz
MD5:	6EB45E96A7CBB4B8CA10897F3CF09981
SHA1:	2A12B20D1CA65377448DCE30519C629AA4273346
SHA-256:	A48FD35C61908D912B5AC9E1FACE12E0962A0D9ECC8679E87DB4031697CEC54E
SHA-512:	71C0B51DA71EAD8652A3858B0A42AEE0A6E4CD1B1FE2752458716951110D57FE1DCFE9C9C5EE535400E3D01487E8D3E194BDDE9CC9A998C9649AC3B2253ADA19
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[6950],{43255:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framework.answerBot.article.feedback.no.reason.title":"Please tell us why.","embeddable_framework.answerBot.article.feedback.no.reason.unrelated":"It\'s not related to my question","embeddable_framework.answerBot.article.feedback.title":"Does this article answer your question?","embeddable_framework.answerBot.article.feedback.yes":"Yes","embeddable_framework.answerBot.bot.name":"Answer Bot","embeddable_framework.answerBot.button.get_in_touch":"Get in touch","embeddable_framework.answerBot.contextualResults.intro.many_articles":"Here are some top suggestions f

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:02:18 17:19:24], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	20838
Entropy (8bit):	7.322123164397766
Encrypted:	false
SSDEEP:	384:ugWT8L57iaWT8LhvnHBis2MP3vVWZCO+e6v7FWUaXgCuh:uhe57CehvK23vVWZd76zeQCuh
MD5:	C8FC37E09A4F3CB30386B76BCA1974FA
SHA1:	DA4E5A968F3BC04247EB70F4C6BB05E7A227E97A
SHA-256:	99023D7643846210151DEF14361D62800E52101ED6EF4C4852ABF7E45E210031
SHA-512:	D608B3DAF9A911699087BD2F8D7118E718A076965683B4D7B5714B373EA88B6A3FEA28812F0626AFBF2E5415BD6F1AD70A47171F9C0168F479F3C93B282B3D2D
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/35245/U_Large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2019:02:18 17:19:24..........................Z...........p...........................................&.(.................................x.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Y'.?.l...r.-.`..r/....&h..SW..g`Q@.%...aC.g;..i..V.^3N..~s.._.r.c..e....qk...d..s.h......b..X.2..0x...C..8a..Q..J....._...o......QS.et..'l.Yuz.6..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	16329
Entropy (8bit):	5.305183033506622
Encrypted:	false
SSDEEP:	192:nlzfn3QfpI8AlF0xq3/DcPFU2KEEKdqSf/jdglYft8VcWtsSXvsiD9:lzypDq0x4/+U2KEx7XjdgCFvWtdUix
MD5:	15768FD72A14B9288ACA2990223AD715
SHA1:	13A49FC1C2571450D4B8F2480BDE414869C1DD08
SHA-256:	D6363F7C853D8F973597301E10F72118C91727B41BDA0C80492C7E1E96E68A91
SHA-512:	C73C62F825F36F7E09BFECB7667573F3D4F972DA326D66E8F828EB23673D8471930161526DC01918315C39021A4749DEA723CD4EF081F8D96D071A933FA49997
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/speakerprofile?speaker_id=63494
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Compliance Experts – traininng </title>..<meta name="description" content="More than 100 Compliance experts across industry and across the globe"/>..<meta name="keywords" content="Compliance Experts, Medical Devices, Pharmaceutical, Clinical, CAPA GMP/cGMP Compliance, ISO 13485, OSHA, Consultant, Consulting, Quality, Food Safety, Risk Management, 21 CFR Part 11"/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/j

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (415)
Category:	downloaded
Size (bytes):	45012
Entropy (8bit):	5.0938683547474
Encrypted:	false
SSDEEP:	768:rakimxNaanpwk46X7duYeMwyMmqgdt+JIEaYrPlE41:HlDBadOX+JHPz
MD5:	451FB68004AA99A0C9E1CC352B1619BB
SHA1:	7790FEB61246B3B7619E6FD0742741F7747F3ADD
SHA-256:	C3B61033364C68F9142A53E8F9D941378A5D9F234079A5C9D49F9AA98FB0171F
SHA-512:	4D837A54EBE8EA0A01A7F79E9B523E66580F847B75DE5EFF80AABA84966A9D1272B5CFFD02444E151462E74213AF143D4FA38454F22BEE3A7055F7F337ADCE64
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/js/bootstrap.min.js
Preview:	if(typeof jQuery==='undefined'){throw new Error('Bootstrap\'s JavaScript requires jQuery')}.+function($){'use strict';var version=$.fn.jquery.split(' ')[0].split('.').if((version[0]<2&&version[1]<9)\|\|(version[0]==1&&version[1]==9&&version[2]<1)){throw new Error('Bootstrap\'s JavaScript requires jQuery version 1.9.1 or higher')}}(jQuery);+function($){'use strict';function transitionEnd(){var el=document.createElement('bootstrap').var transEndEventNames={WebkitTransition:'webkitTransitionEnd',MozTransition:'transitionend',OTransition:'oTransitionEnd otransitionend',transition:'transitionend'}.for(var name in transEndEventNames){if(el.style[name]!==undefined){return{end:transEndEventNames[name]}}}.return false}.$.fn.emulateTransitionEnd=function(duration){var called=false.var $el=this.$(this).one('bsTransitionEnd',function(){called=true}).var callback=function(){if(!called)$($el).trigger($.support.transition.end)}.setTimeout(callback,duration).return this}.$(function(){$.support.transitio

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:12 12:02:26], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	25713
Entropy (8bit):	7.388367097956342
Encrypted:	false
SSDEEP:	384:I6cwh/06Yz7iFcwh/06YzvnzoiNYNg70VNi9oNHsG9W4QL9f3tBv+HVsx+MnEQbf:IzwFYz7vwFYzvBYygaoqGDytB8o+af
MD5:	6F87DF9CCC7D621302E6BBBD2EC71EAB
SHA1:	1EAC82FA122ACC088391AFE149C9B3036599D33C
SHA-256:	FEA132D71D270C2853B6FF9E26B00FBB7933B9CE39D130CA0224AB1DFB73DFB0
SHA-512:	294B1B23F5FC130B934E9553E3D52E5579242474832C388280A178FF0EA052B18B88FE3E5968958522748C5535262009EC3D9D05B2095012872091F99E6D2E97
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:10:12 12:02:26..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...8.rqQ..#1.O..`..vQ.5. ....z.q.u...a.R.uju\..P.s...)\.L.^.?.O....H......^..Z.%T.......-0D.?.......q.n....?...e._........q...o.a...E..<.z..6F.>5.6....

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:01:26 19:25:26], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	22928
Entropy (8bit):	7.288786640552533
Encrypted:	false
SSDEEP:	384:cd0+G0S7ik0+Gyvn/WiMtYNg70V9MJumICQ5vikRVXd:c2Z7IyvStYyyMJumIDNi4Xd
MD5:	541333C1BF8B2CEF44280895C687E616
SHA1:	FA607935AC163F1A1622E651B30072F7D9B88E8B
SHA-256:	1EA89EFD98F57BAC3D74757D3E2DAFCC67CBB6A42954D133895EB2021AB9EB72
SHA-512:	D1FF4BB4AA6F456DAEABEFDD6767F0CB33836AD1615D6F8B3FE2220DDF2A21A9FB3F3029E2C63F3559ED6E917FA7A50AD2639BAF8D6A86C2F10B0EA0071F9A88
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/62638/Manish%20Gupta_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:01:26 19:25:26..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..%)L.z...$..)Y._./O.d..n...D.4......n.=].j....Z]..V.,..+..^.....^......?...].&n6m..[.......sO..H..lJI.EK.R.$......I$..Y?X..zV....y...;G.....E.:.._..x.3

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x375, components 3
Category:	dropped
Size (bytes):	52422
Entropy (8bit):	7.970980283836979
Encrypted:	false
SSDEEP:	1536:lsG+YSHKm1DLxmt+Vw76T7iDMrI+SIe2icS:CYSH/k6v//e7
MD5:	77C7E8B0CCFB365E89F16403A0C68D4B
SHA1:	5F254CE294A5192E9D62EFA79C2D0E5EC1613F89
SHA-256:	804661ACC9FDAB9F58D93D58DF1370F943233A383C0E9154FCD19F8DB776411C
SHA-512:	848076752B967517B6624995CA8DF75A8C3BE253F68EF7C3B83199743021CC3A83C837B05CC0645A6BA6B4148C8820E6A511918C926AFB02CFAAE5DD56639416
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Preview" xmpMM:InstanceID="xmp.iid:F6D795CCD4B911EEAA82DF6AF9FCAEF7" xmpMM:DocumentID="xmp.did:F6D795CDD4B911EEAA82DF6AF9FCAEF7"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">5.jpg</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F6D795CAD4B911EEAA82DF6AF9FCAEF7" stRef:documentID="xmp.did:F6D795CBD4B911EEAA82DF6AF9FCAEF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM........

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	43743
Entropy (8bit):	7.873215654163492
Encrypted:	false
SSDEEP:	768:GKqv4gDR6fAvZc9h50kckWegZfYWqVOnHjCdE1x2ClU/zUx6Y:GZv46Mfgcv5hc0gZJHjlPGzUx6Y
MD5:	C25A3618B63BE6E923D4B13B617B7103
SHA1:	F9AFD42B16992DC47A28D9C94B056C8789AEE466
SHA-256:	993CDAD20E33CDECA49E68C6683C52BDE9374A5D286BC37C7D94BDC2E3A69B73
SHA-512:	4B2F30884706E12AA76D3ED4A4F4247DD11178D86DE1BCDBC56535967FC5DF35C81AB4CCA58A09ABFA5F3B0E418B3FE704BA171C040C3EAAE98BC1100EA109D7
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/205981.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................Q.X.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..W4..=.S..z3Z.....DN..sR..V..k5...=?.....=.<d~.(......(...7...........~.q.I...k.'....u.o..m.0..,.w. ......l.;.k..2i......T.s....gi........y....J.U....g8...+..N.S../z.c..D.....Y.<.......c>..*.:.......i....h....P...T......k.......H....,..%e....._.....?L.z.XWM....tfj+..?....-.5.7..@.=?_.^}\|.......Qk.. ...s.r+..:.%.q....e....._s=l....).}.#..........;+...^.[...

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:03:06 14:29:09], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	29483
Entropy (8bit):	7.501661592427519
Encrypted:	false
SSDEEP:	768:WFXFLy/7RXFLyYvgYy3UYQlUcVGLJWeuE1d0ZPss:SlyllyYvg7XQrGVWeb10ss
MD5:	337BEE90FC1C51DF13179184B77B9C0A
SHA1:	8266B2A447187E3772E81CEAD9D0CA9FEB0FFAA7
SHA-256:	C8959D3508E7B9EEDFC675EFA0794C6471B0F0A818E1E721B28A383A1682C4D8
SHA-512:	D2990AB5A6D3C35422735929B4EB4E676D4DCB8418FD796612C52D55F7F1BF4F8B19794C5DE6E5E3488F47CB70656E5D2CA9DA904CB64EC83A98F302A3DD1F42
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/63495/Payson%20Hall_large.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:03:06 14:29:09..........................Z...........p...........................................&.(.................................J.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.>`.J......t.z..Ihw... ...K.....P.Ws.v8..c.p.6W.[Y.2...@Z....H..8e..>..X..l.d.............2.pj`...v...G.D...u[\..!. "..Y.y..k...52Wb......X........\|.k..v..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2020:01:14 17:56:10], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	17180
Entropy (8bit):	7.124041184282008
Encrypted:	false
SSDEEP:	192:J6/K8XK8TrQy4l8UL/K8XK89cknK5qidtq+Ra3cW2p4HZVKPSx+:J8KMvv7i3KMv9vnKkibscPeqKx+
MD5:	C4AEAE741C04CBB0F8FFE08B0BD14FF7
SHA1:	46B0729D54AC9E3F2681FF799068E7A54FB92261
SHA-256:	979D24230832755A7F94E21D443D5DF0E2D8FAB8ECF0BD48AF32B7D4640F6FAA
SHA-512:	FDA89D00F398661F193DB29A8D82CF6799E911F053720A621213EAF40E5142231D8C998EFFA21A9176CB4AF7207AA641E7CFDCFB315444732EF993B5A2E3DB70
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/37730/Cox_large.jpg
Preview:	.....KExif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2020:01:14 17:56:10..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..4...D..T,.=.r.X......Tr.mm..4O$.EM.Xc.....{......s..u.W...S..4..i5T.................ncz.c..5...^.....5$....c.quL...3h.G.R..\|W>.W[S.a$6.'......E...V

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:02:09 16:04:33], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	27157
Entropy (8bit):	7.4303343824217825
Encrypted:	false
SSDEEP:	384:DN1XjCLs7iv1XjCLHvnHxiLYNg7YZJ7UgGWm+fGt8mey2LNZp1:DTYs78YHvEYyWJJG3+fmZeyMrp1
MD5:	DFD940262B18903D4D4DE477712CF4E1
SHA1:	90C5E191584B1B1AED4CB8485F117B37DB384497
SHA-256:	112FBA6DFA96E9D14918A7746CD7A5F076A08661450B5A0EA152BBC9C082D5E9
SHA-512:	B5900CE189CF2DB7BFE3C8E98C19CDB4AE11FBCF9F0EABEE9B39CD79DAE931E1980884C24563793C33D5C19A701EBD28492AC2C54336F8B6D02B247DF8208D33
Malicious:	false
Reputation:	low
Preview:	.....oExif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:02:09 16:04:33..........................Z...........p...........................................&.(.................................9.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..vF.Z...E-.v....Z.a.W.on.k...k.#..Q..#.........Kmhu`.Ho.W..W}.........:(L.....@T....uu..6..O.h\|.Q...;..m.1...i.^......k....PD.t.p0NSNE.4...........NE.U.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	4304
Entropy (8bit):	5.342776004604894
Encrypted:	false
SSDEEP:	96:7eJ/w90QianF0tWs38PN/7Lw6bgvcm6bv0Bh4ym7wXwiiXD:Cwd20PVw6bgvcm6bv0BVmMgPD
MD5:	32A892015E222E75430DC0434331F029
SHA1:	3DA01C3EBBABE4F7421FD89AE22DBB9D4B4418FD
SHA-256:	FAC73E29932DC62F4666D7EB4581D30C55BAB4BDB5FA2F996DE00594B5CA5A2E
SHA-512:	915D39679F2E9FAEF90CB699FFDEC6ACBBD6E28EB01B9D4428032C65966073DA81B646A4F275B75BDADDED9DF9265625DD74E00A01DB031F3990BD3D9FD8DA8A
Malicious:	false
Reputation:	low
URL:	https://seal.godaddy.com/getSeal?sealID=GPUkssSXRaGWqrGSIHp2lJWSv2pV3WYLSTI2iZtKcZbWWPd31kT1DsV6lsyW
Preview:	...seal_installSeal();....function seal_getFlashVersion() {...var version = 0;...if (navigator.plugins && navigator.mimeTypes.length) {....var plugin = navigator.plugins["Shockwave Flash"];....if (plugin && plugin.description) {.....version = parseInt(plugin.description.replace(/([a-zA-Z]\|\s)+/, "").replace(/(\s+r\|\s+b[0-9]+)/, ".").split(".")[0]);....}...}...else {....try {.....var flashObj = new ActiveXObject("ShockwaveFlash.ShockwaveFlash.7");....}....catch (e) {.....try {......var flashObj = new ActiveXObject("ShockwaveFlash.ShockwaveFlash.6");......version = 6;......flashObj.AllowScriptAccess = "always";.....}.....catch (e) {......if (version == 6) {.......return version;......}.....}.....try {......flashObj = new ActiveXObject("ShockwaveFlash.ShockwaveFlash");.....}.....catch (e) {}....}....if (flashObj != null) {.....version = parseInt(flashObj.GetVariable("$version").split(" ")[1].split(",")[0]);....}...}...return version;..}....function seal_useFlash() {...var minVersion =

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (900), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	34633
Entropy (8bit):	5.39813575262216
Encrypted:	false
SSDEEP:	768:lzRFqT1Ei/XG2NynQzpLBbF/R3wwVMtLpuPv7kIUdUix:lzRFE1Ei/XG2Na0LBbMpy7kIGUs
MD5:	A9426C28A98BC18C163FA313DBF1F231
SHA1:	DA346F798CA946FF25C20D933A7478EF3CA8AADC
SHA-256:	786C108F4F5358A34279BDE98939151E4E7754544D032E7DA08EA33B25310416
SHA-512:	A83D0707EE7E1FF7A8C96025FCA264DD4E5EEF75D8040589837FF05CD27BE256F60BE32B10E9A6A40BB9FE09FB2471B78FD5628E48BD226FB05E3127A4820361
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Power of Perspective and Attitude: How to Transform your Life </title>..<meta name="description" content="Unlock the transformative potential within you with this interactive webinar. "/>..<meta name="keywords" content=""/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/jquery.min.js"></script> <script type="text/javascript" src="https://www.traininng.com/images/js/jquery.js"></script>..<script type="text/javascript"

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:01:25 13:38:33], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	24052
Entropy (8bit):	7.3223332355771245
Encrypted:	false
SSDEEP:	384:o0qztZHC7iUqztZHCvnpliwYNg70VXJpULCLpadq1LtxRCW8rKKPC/zwN2q1qzc/:o0AtZi7DAtZiv5YykX+CVr5t3zi5a/c1
MD5:	887F15904EB2C8EB8B0FE97B05637BD6
SHA1:	0A3D5A80714F3EE26CFDBB548D99E1A9B76E2C76
SHA-256:	47BBB8246FF6B6D7A702EFB22C0330C91D614DA7C111ADD4477B6C5855A47AEC
SHA-512:	9A81E98ED14EC32895D8FC20A7ECE8D477032DE5C4527C2AFA103DBBC387C69F881C78428FBF06D37954A30B4EFB7C165685A3B9549378EA189F8A1EC3943E51
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:01:25 13:38:33..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...{.5.......(....h.~.tV...Ope..7.!..Y.].-....KK.4 ....c....Q...7h\|....zj/pku%n.'............R^@hWk..O...#.N....G........J.....W..*,.........gY1vE..8...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	20604
Entropy (8bit):	5.314104962150855
Encrypted:	false
SSDEEP:	384:lzypDq0/jf2KEWUoGSRUjngVUgag2RGvWtdUix:lzyFq0/DhEDoGigngWgagGLdUix
MD5:	F283C250A67800E0B267E9DBCDCCC7C9
SHA1:	327BFE7C39127977A6DD445BE0B3DC321CD55E87
SHA-256:	DF13ED2DED2BE2DE4C48E7C641437F54ACBFE16716985C9B088A3A7C5ED34F99
SHA-512:	DD4AE98BA27CAF35EE70906E3D8912D66B3FC90C131179383A89E078E9DC2B5658CDB14F50185C3AF407E44AE67564605788FF71DEACEDB8216D886B0F548CDC
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/speakerprofile?speaker_id=63240
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Compliance Experts – traininng </title>..<meta name="description" content="More than 100 Compliance experts across industry and across the globe"/>..<meta name="keywords" content="Compliance Experts, Medical Devices, Pharmaceutical, Clinical, CAPA GMP/cGMP Compliance, ISO 13485, OSHA, Consultant, Consulting, Quality, Food Safety, Risk Management, 21 CFR Part 11"/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/j

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x902, components 3
Category:	dropped
Size (bytes):	84352
Entropy (8bit):	7.657210107151014
Encrypted:	false
SSDEEP:	1536:nOuF2OJFkUDFP6yV+X/gjnBrliHZx69Y2VkZLTeG7J3N2jLBWu9wPH89:Om2KkU56yQojBr8UYuKLT15ojAu9wPU
MD5:	F4A90D581C5AF754DA4055598941FD8B
SHA1:	B44158836D86C3F24480D425899E77CCCD4454BD
SHA-256:	B49804106862C1E6C4D1F05ED021490694BC2FCBEDA255353D5C9BF7AE26360D
SHA-512:	A1D7398817D3D294998D9B14AF132CE76B3B99060E0BE197A15A9841B6E53FDE8C950A3DFB875C8DD169E199CCD30B9AF6E8937D485B7109C0FAC3306C075AE6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C0748420FCD77D4CC7BE9109CE8409AA" xmpMM:DocumentID="xmp.did:E9C36F8482C411ED96F780B93B70D540" xmpMM:InstanceID="xmp.iid:E9C36F8382C411ED96F780B93B70D540" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E7A30CB1BC82ED11B267EC77AA4826E0" stRef:documentID="xmp.did:105DE80EB482ED11B267EC77AA4826E0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 56780, version 4.197
Category:	downloaded
Size (bytes):	56780
Entropy (8bit):	7.995500466415841
Encrypted:	true
SSDEEP:	1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE
MD5:	97493D3F11C0A3BD5CBD959F5D19B699
SHA1:	1075231650F579955905BB2F6527148A8E2B4B16
SHA-256:	AADC3580D2B64FF5A7E6F1425587DB4E8B033EFCBF8F5C332CA52A5ED580C87C
SHA-512:	BFE4679BBE5D1DB21F6ECB2D6C2810DD02D3B698EFDD50004CC355C1D0BC51DE8DD102707C796B26E8250C600B4B64DB88B67D3F28157777B68E36AD7930BFC0
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/fonts/fonts/fontawesome-webfont.woff2?v=4.3.0
Preview:	wOF2...................l........................?FFTM....`..B.....d..Z.6.$....\.. ......?webf.[..q.q{!Q.P.........DA..n..\|1.......... Y.....G@Tu:K[U3....,...G.^.c(p.6b.l.f-k.n...G5..T+3..i...Lp&..el'...\|.&...D!.^fivM3\S).Q..L..N_.+[.!.S...mQ.}..V.o..k.....(.....1AR.]A..P.m.......bN.sEP..7d\|8~E.x..i..k......._.)..j.PK.:t.....=z.&.wd.....-..S..k-{=.....<..@..<....R...>......"..6bc.1..._..Q!.BRZ.$Z%%.@.lTT...(g..uf.7.?..g?..1<......V .w.J.s..]..j]7nj....}.2.......J\|..j."...>t!.1.. 9.c...y...../+..S..$.I...i..`.PJ...I....:....I.I.IJ.,.....6...Q.e..1.w..^.T~oJ..&.....-.....Z.,K.b..b..J..g...9.1...C.I....3.j.H...@t_d..;.'~..9.....9.~%$.H..h..).~.......v...$....G.NL.B .R.J9..<.k..k......2D....i.V.~...P...!..+.i.r.{wOh.+.j..p..I'..{.......I.ZPt....s.....oY..s..#zT........V...`cc.`Do....&.'ST<1P....4.N.P...f..1.bzBz....o..x.V.......xw._.3..Lms..C....1.:..h.x..%....[.*[/.t..p..>..g73..#......K..7.Vs..8....u....x-.nkJ.U...z...........h.[ll4..S...E..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:25 11:15:02], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	25451
Entropy (8bit):	7.375957745436799
Encrypted:	false
SSDEEP:	384:hifCJ7ivfCSvn4oni0YNg70VxQw0lNyiKpIzBBQRF9QkZ2+1MattXPDG:hiC7C5v5YyMp0HyiKcBQykZ2r2X7G
MD5:	9EFEE9A0DFEC2A3941FDC71853FCF187
SHA1:	C168A7B9504D23DB1F55D903935677407AD39F31
SHA-256:	86901C9E2A6246744C6B8CD7EE8E999924CB0C39FB495F12D7767112EAC3B790
SHA-512:	3AAC919F46E1FDB8BD90F75ACFCA0B526CD619089C32CA6AEB4098BF825F62BC98754CB3EC678D9D07BD4F47F7C48001604C6ABEBED9C80D3FC54FD0C2F14BF5
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/60403/Remi%20Vogel_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:10:25 11:15:02..........................Z...........p...........................................&.(.................................m.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....:.]xX..#"..........k.....k2..n_#...3...!..........}Q.Vp..V..6.....{..o.T.RS.1......h......@U..R.....v..>...+NsX...kD....u~.gY....4.vT.......<...%

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:03:08 16:46:22], progressive, precision 8, 600x343, components 3
Category:	dropped
Size (bytes):	65098
Entropy (8bit):	7.853765543059107
Encrypted:	false
SSDEEP:	1536:xNoNAvwGlJrWmhgISPrBgVmi4mKjscK+T:xCkJrFgISjBgr4mAj/
MD5:	C21E8064FF6F65E242F5E1833AA8A3AE
SHA1:	851587DE817C8A3DA6C85C9A578A0EF9FE0498E9
SHA-256:	3FA1CC3F01A6228DE964A3278F2838EDE1A8F4AA00F20E47E1AD4239048F0E49
SHA-512:	981C171D16F7BE18068AAFD63113476FFA97E609FFB73A0235C92FD883331B99DBB2EFA088F57AE49E5C2CA8443F28A5252B88122867CA43611F90E13CF7A1DE
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i................B@..'...B@..'.Adobe Photoshop CS6 (Windows).2022:03:08 16:46:22..........................X...........W...........................................&.(.................................^.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...K.\....]r.(..~.H:.Q..E....>....dH>Jw....?x...4>]...X...!0.9.JdW..$.Sg...........Yq..iw.Oc....}...@O..o.=9.b...a.N]......?......-.~...U.j.~.A.`.<..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x902, components 3
Category:	downloaded
Size (bytes):	74871
Entropy (8bit):	7.569209062836834
Encrypted:	false
SSDEEP:	1536:nHDNanbl8aurFGL1JNkbS90c2zI0B7s4fItPNzY9xM5f2aNA:HDNIblYQLrNk+Kc2zl9stxNYx822A
MD5:	F850A1DC3356498450F51F89CC2D155E
SHA1:	64DCCC89C6E5E598BD516B24448884F8085FDC6E
SHA-256:	60A5CAC6A3D66C07F72835C65DB4C142B1F76A44FB7565DBA19173F8351BCE66
SHA-512:	6DBAC08418D2D13EBD7948826900D6458F97DF179AFCA82F96E97333CB0827504647ED8F631FE60E7BE8EC816A481B62A2F308C75C1C0C72AB0657243978BD26
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/slider3.jpg
Preview:	......Exif..II*.................Ducky.......<.....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C0748420FCD77D4CC7BE9109CE8409AA" xmpMM:DocumentID="xmp.did:C16FABD982B411EDB6FFAFA003DD7D21" xmpMM:InstanceID="xmp.iid:C16FABD882B411EDB6FFAFA003DD7D21" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7CE826EFC50C11E7BFC2E780B8556F2E" stRef:documentID="xmp.did:7CE826F0C50C11E7BFC2E780B8556F2E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:01:16 12:20:00], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	18401
Entropy (8bit):	7.208151498383707
Encrypted:	false
SSDEEP:	384:O0yIy7ijyIavn6niFV1LzGzZrIpYPZR5VXBO6qxaG682vbUoTwL:O0w7u4vpzGtNBRqxaG9+bU7L
MD5:	8DFEF7D0284932BA2073349856F1D0D2
SHA1:	115CC336868FE25961AE0C067285A034E7F86299
SHA-256:	023CF4584979E366B67EDA1ECC69A470D4F105A6C944C3D87DFEC492AD8EF7DC
SHA-512:	570CE337F78DC12C53B8A8E053901845BBF43FCC7FAF6AFC2A6AB33ED6D9AD6B63872311C8623776C0B2B0C09EA5C07F4E00EF9BCCB893660EA9B5E8EF27551A
Malicious:	false
Reputation:	low
Preview:	.....{Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2018:01:16 12:20:00..........................Z...........p...........................................&.(.................................E.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...Te'..U..HRk.AT..Y..8.".u........o.".]..K..{k`.. ..V...I...?...:.X..y..=..X.......@...;....9.^....Y..!.....n...E.+.F..~.p...:._..X..e.V..I..;....:.&I5+.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14720
Entropy (8bit):	4.774680773296922
Encrypted:	false
SSDEEP:	192:FrWWXKaOABNGHMZZeoW/xixbRIivwAqAiax+dWEilnc3t0ufSrGEjRaTEJiQAT8p:D6aOABNGsZZepgLhMMR8As7KXCxU
MD5:	AD2B2A14D132C31E1D477F46CEF0AAF1
SHA1:	685681823EE5F8EB99CB33D73A8CACBE51966EAB
SHA-256:	A04710AE8874C2F6E4B16DDCB1296210B73B0775CB6318DF629E3100ACD78FC3
SHA-512:	66F473CC9CFCDBA1F89457282DA212D81A4663559F7D6DD303839A7B75D2E4AD6441E299A90D4D26AC3DD389E5116367D97AD0F3F504E607B6CF52301CA96824
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/prototypejs/popup.js
Preview:	/. popup.js.. A lightweight general purpose JavaScript DOM element popup class... Webpage:. http;//www.methods.co.nz/popup/popup.html.. Inspired by:. Lightbox2: http://www.huddletogether.com/projects/lightbox2/. Lightbox Gone Wild: http://particletree.com/features/lightbox-gone-wild/. Tooltip: http://blog.innerewut.de/pages/tooltip. Prototype library: http://www.prototypejs.org/. Scriptaculous library: http://script.aculo.us/.. Attributions:. - Uses the getPageSize() function from Lightbox v2.02 by Lokesh Dhakar. (http://www.huddletogether.com/projects/lightbox2/).. - Adapted the the modal overlay technique used in Lightbox v2.02 by Lokesh. Dhakar (http://www.huddletogether.com/projects/lightbox2/)... Version: 1.0.1.. Author: Stuart Rackham <srackham@methods.co.nz>. License: This source code is released under the MIT license... Copyright (c) Stuart Rackham 2007../..var Popup = Class.create();.Popup.zIndex = 1000; // z-index of first po

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4818
Entropy (8bit):	7.929412248828883
Encrypted:	false
SSDEEP:	96:ASDZ/I09Da01l+gmkyTt6Hk8nT6aLfxCVxf2+tpnBdQc:ASDS0tKg9E05T6iu12Udl
MD5:	F04DE6C4630BB6D2FC380BAC2A8201EA
SHA1:	BA400C9DDBEC99E2A28C57DEF00AE6F0CD124219
SHA-256:	96308392426E54F3D0017AB84DA82D633CBD88927849A7F68AA85A2B99C5D2D6
SHA-512:	7CD42D231D2E4780F5B9E8762CC1CFC912446867346F7858BFDE4DD05C837BCDE3F8DA2D1703A9690F2BC7C35A7EA973AAEEF271FECE5980581B0E6095BBB608
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/logoicon.png
Preview:	.PNG........IHDR...8...8.......;.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=523, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=460], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	21478
Entropy (8bit):	7.2260121983548915
Encrypted:	false
SSDEEP:	384:CdVyuC/7SRudVyuCAsnjubPGZkya9hRnB9EIlqKOQYBvjnqg5RFyYq1:s8ui7R8uFsj/KJn8IlqOYL5RcYq1
MD5:	AE217142082B81AA210F67B0445E5B27
SHA1:	5F8E8D77F5F4E8AD17493E460FB6323834BF1151
SHA-256:	46A9C5FEE45D4CC3C3DCB18E51CFF471E4B63F310C51A1667605F24A1EC652D9
SHA-512:	F952A87BAE4AEEBA41E6DF572801DAB1BDBC48C1D5583F5040E4C70AA359510076D38DB3578D539F32F418E89A07884B7850C43B9DD66C7A199AE2E4C84FD6B4
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/61834/Ben%20Currie_large.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2...........;.................................4.i.........@................'.......'.Adobe Photoshop CS6 (Windows).2024:01:03 18:30:04.Varsha Mishra.V.a.r.s.h.a. .M.i.s.h.r.a.........................................................................................................................................................................................................................................................................................0221...............................11..........11.........................Z...........p................2024:01:03 18:28:15.2024:01:03 18:28:15...................................................................................................................................................................................................................................................................

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:10:27 18:01:53], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	24721
Entropy (8bit):	7.343496031303343
Encrypted:	false
SSDEEP:	768:sb3fmE7z3fmav1sF8GYyiOPfLTzajQqyuDvQ4/:Dxav1sFTt7yye/
MD5:	E9602F2C76A6837EF6CBC7A5BA7441A0
SHA1:	904B15481EC09A3D37B71C52850F770949FF93D3
SHA-256:	7BBB5A4A235051882CE610A7B1B935B7FD32DAB5B164398EAF96AF439EDA997A
SHA-512:	26DFC751AA7DE987DAD420B9956AC2855EFBFAD2255D1CD625B3CC6DF4089B5B0DD47A0DE835AB50B0AC5E07B715806F193D2C7539B8BC8CE81A367AD849D00B
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2022:10:27 18:01:53..........................Z...........p...........................................&.(.................................u.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..d....Mm....a.V... %Vl..s.c.\|p.R..........k.......2m&O..F4x5....]..fm..>...b...U...Ys.K.n.y..b,..H.kbed6..........a...o........w..p..1.....<.6,...k.qi

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:08:30 15:24:32], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	22375
Entropy (8bit):	7.244489485739072
Encrypted:	false
SSDEEP:	384:bk+Bq7bS7iP+Bq7YvncxiqYNg7yUagI6kV4pbFesUQad:bk+BMm7++BMYvQYyJagIgLE
MD5:	F3F92E34A0ED54CD4D03104F7E432DDB
SHA1:	43E53C5A6FB0703F6595E8EFBA231A2247F24CCE
SHA-256:	07473B1586573BA163F894A25E4841D0F142ECF6781F1F375F8C1557EE8A4BB8
SHA-512:	F2DB03E8737DE808312A0CD6F6CD250B04316A81CD4A50BBE9F0F4BC0B470F057F8CC955CB1E79C903B0C5BC9195E7D82808AD9FD2BDDEB081EECB6F30D9AFF3
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:08:30 15:24:32..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)E.k.^...s..../;.........O..4.{.9..A....F".)?\...6....p....8Iq.........d.:..{<..-Y.6.2l..K.g..{Y.o...'....[$0.B...]o..[o.k...3..\...@._Xpz.....3..

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:06 14:15:28], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	22167
Entropy (8bit):	7.240323584002904
Encrypted:	false
SSDEEP:	384:3kaaPH7iZaaPVvn0WpSiPYNg7yUZS2Q8ILHAKBhk9ZjGdTV:3mH7yVv0WPYyJo2Q8EHAKkRGdTV
MD5:	0FC7657D16D93A0CA1777F806250AEAC
SHA1:	C25F32E1A66D89E52D6A60AF661F4298A2F66F20
SHA-256:	F16037F5014A448C5B3361147FBE085BBC296643F6F298E133A4A1AA337F3189
SHA-512:	68DE5183100EA4C3C3AA41D1603BFDADFB770FF04E63CBDC07C781F92EA49A09C5CE06E1F24A842110B51513D2539BF94D085EE91140D6537BA7F46B81DBE0AE
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:10:06 14:15:28..........................Z...........p...........................................&.(.................................o.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...[+:.a..gf.....9.G.i?...~..d.L.I2O$.h...C&.zl.....s...Y.v&.....g..3._Z.^...`....u.?.\.Kd...9d.$a...U...\.Zh..6.H.....VK_5....$..3.v.=.=....+.X.y...

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	137093
Entropy (8bit):	4.926376969404363
Encrypted:	false
SSDEEP:	3072:SS/nmZQx4FbsxP8MlI9Q+lVxjC11/NXM3Ds2Eoc:TnmKx4FkGLEoc
MD5:	18A6ECD0F669C705B2065C8D25E469C6
SHA1:	5E0D0898A1C568B329033D45ADB6A4A5A18B4AD5
SHA-256:	E7AB20B24EC819EF37D3879C16093F4765B3AA1A122A8BAF7D3E9ED1713D238F
SHA-512:	A6EAE28035C1C813216256D4A0F5765A085F806A47811229F533F0E10BA7B0FA3F564548F014587865D1CD2547E7605C911310D1608A8012D22B60C243D34AE1
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/prototypejs/prototype.js
Preview:	/* Prototype JavaScript framework, version 1.6.0.2. * (c) 2005-2008 Sam Stephenson. . Prototype is freely distributable under the terms of an MIT-style license.. * For details, see the Prototype web site: http://www.prototypejs.org/. . --------------------------------------------------------------------------/..var Prototype = {. Version: '1.6.0.2',.. Browser: {. IE: !!(window.attachEvent && !window.opera),. Opera: !!window.opera,. WebKit: navigator.userAgent.indexOf('AppleWebKit/') > -1,. Gecko: navigator.userAgent.indexOf('Gecko') > -1 && navigator.userAgent.indexOf('KHTML') == -1,. MobileSafari: !!navigator.userAgent.match(/Apple.Mobile.*Safari/). },.. BrowserFeatures: {. XPath: !!document.evaluate,. ElementExtensions: !!window.HTMLElement,. SpecificElementExtensions:. document.createElement('div').__proto__ &&. document.createElement('div').__proto__ !==. document.createElement('form').__proto__. },.. ScriptFragment: '

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:25 11:15:02], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	25451
Entropy (8bit):	7.375957745436799
Encrypted:	false
SSDEEP:	384:hifCJ7ivfCSvn4oni0YNg70VxQw0lNyiKpIzBBQRF9QkZ2+1MattXPDG:hiC7C5v5YyMp0HyiKcBQykZ2r2X7G
MD5:	9EFEE9A0DFEC2A3941FDC71853FCF187
SHA1:	C168A7B9504D23DB1F55D903935677407AD39F31
SHA-256:	86901C9E2A6246744C6B8CD7EE8E999924CB0C39FB495F12D7767112EAC3B790
SHA-512:	3AAC919F46E1FDB8BD90F75ACFCA0B526CD619089C32CA6AEB4098BF825F62BC98754CB3EC678D9D07BD4F47F7C48001604C6ABEBED9C80D3FC54FD0C2F14BF5
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:10:25 11:15:02..........................Z...........p...........................................&.(.................................m.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....:.]xX..#"..........k.....k2..n_#...3...!..........}Q.Vp..V..6.....{..o.T.RS.1......h......@U..R.....v..>...+NsX...kD....u~.gY....4.vT.......<...%

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x343, components 3
Category:	downloaded
Size (bytes):	48929
Entropy (8bit):	7.972635043206935
Encrypted:	false
SSDEEP:	768:jFC1ZkAiiiNpRCC06MvR9IYH5/g+AvfWJflDXDxQa52aqcI9aPCV0yyXVUv+D6u/:jA1aARACG29HH5/BAuvx5PCV5y2xuUoJ
MD5:	245404F90B7A732286EB1C7702B5DD51
SHA1:	89BC6BF1814E4590EF5356D58767B83E584B26D6
SHA-256:	6B6840A1C27ABA9A1C59DB80DCDA449BF3D96B4DA853B20EB04933ECAD147885
SHA-512:	310D318F2353E9482F42FDE12B139A1CAEC5840E504BFB0F3144DDBCA013992291CB127E0BB21C3DC6FF83BDBE3B839A4266AB08E6DDD934CF875D74134A1B50
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/207031.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:FBC37D181F4611EB83A3A76A5AB8BC70" xmpMM:InstanceID="xmp.iid:FBC37D171F4611EB83A3A76A5AB8BC70" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="2B0F19367759B1F3AE544E437EFEB41E" stRef:documentID="2B0F19367759B1F3AE544E437EFEB41E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................W.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 600x300, components 3
Category:	dropped
Size (bytes):	35878
Entropy (8bit):	7.7508170545698105
Encrypted:	false
SSDEEP:	768:OK8sueDogKIM7JqmCW4HKYaH8XtRfdbB+7FY2WfIpCdD:OTHaogjM7f49aH8Z1QWfHD
MD5:	746D6CE908459AA1CD0ECE4DB4B7CBAC
SHA1:	A9F613F3E0FF258900A734FBC80960E85CCB9562
SHA-256:	92536CDB63E93E98F6AC9693579C86D59DDBCD7E2D78EA4B29BA0CF6766DAAEA
SHA-512:	3ED09C8565C2F3520513C93916CDA2F8B6DB05D512D58472A582D3E27889C4A3BFBA66A26459B4E3FB90C4B39C73528D599A606B83A79084FA03719881EB8913
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......Exif..MM.*..............Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 ">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e39e227d-071c-4a33-8574-43d5bd1b13eb" xmpMM:DocumentID="xmp.did:AB5BDC349D4211ECB890807EA6750C6B" xmpMM:InstanceID="xmp.iid:AB5BDC339D4211ECB890807EA6750C6B" xmp:CreatorTool="Adobe Photoshop 23.1 (Macintosh)">.....<xmpMM:DerivedFrom stRef:instanceID="xmp.iid:bdbd437e-2728-4b21-9bfa-3d8e99dd4543" stRef:documentID="xmp.did:e39e227d-071c-4a33-8574-43d5bd1b13eb"/>....</rdf:Description>...</rdf:RDF>..</x:xmpmeta>..<?xpacket end='w'?>...C.................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.701318838740554
Encrypted:	false
SSDEEP:	3:HkPSiCkc6hNk2h1A4tI6N4721Gib:E1rXxXzFnMib
MD5:	FA40D60AF67198BF9B6A26274347E58A
SHA1:	9922B5E39C9EB9DD3E1BE093A35C9186F23C44A1
SHA-256:	BDB36232B7F2EA724EA08514DB9D1A2AA699553B26FBE144714141F68059805D
SHA-512:	537DC96D9601F225D517956D2AACD67B926ABD499AC70E38A63B87EF0E6230540354D06F05FA09A8F1EC61E2475717949EC837E54FFBEE7FEBA9797CBDC85862
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnFNaij2oThhxIFDYeN4HgSJQmTIJqcOdfHWBIFDRV2MuQSBQ0u1t2CEgUNzzmA4BIFDVeJcTcSEAnK9opVVJZmzBIFDZFhlU4=?alt=proto
Preview:	CgkKBw2HjeB4GgAKJAoHDRV2MuQaAAoHDS7W3YIaAAoHDc85gOAaAAoHDVeJcTcaAAoJCgcNkWGVThoA

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	4192
Entropy (8bit):	7.769794473416577
Encrypted:	false
SSDEEP:	48:8qQNn2xqAiJ3srQacXwbBXVQTnuQ113/rOrpulvX12h+Sjye6CO7tm8AxsZwk2Ht:lY2waJpVQ111D0pKvi2P7tTA+XS/f
MD5:	53163C06730843499A80E55DE62522BE
SHA1:	2B608553EEF651D515ED49564473F3C2007597E1
SHA-256:	62D5E802D9CF3C1B0CDA7B634670ABF479432DE301C28DDEB3B8DB38E55D373F
SHA-512:	0BF4CC16DA2F2919B74ADD80EF5D5FE01A60C5534F080170F31038A8912EBC20649DFDA08D1394B16543D0DC2E4BCC35E59A7D6DA904C2304E40B6B195445753
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/39361/W_large.jpg
Preview:	......Exif..II*.................Ducky.......F.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:9E9204CEB5FA11EA900D8E61462B9E33" xmpMM:DocumentID="xmp.did:9E9204CFB5FA11EA900D8E61462B9E33"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9E9204CCB5FA11EA900D8E61462B9E33" stRef:documentID="xmp.did:9E9204CDB5FA11EA900D8E61462B9E33"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=151, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=200], progressive, precision 8, 200x151, components 3
Category:	dropped
Size (bytes):	47147
Entropy (8bit):	7.750542654207478
Encrypted:	false
SSDEEP:	768:f5BFrkO7OBFrkpqJzgi6fkBegHVAAxq5pw+Jl/UNesvJzr0Gnw8Pbp:BBFrKBFriqJzgioYg++P/i/vJzrAsp
MD5:	A88DCC6AFA78CEECFB509EA8945B4245
SHA1:	1FF907156815F9FBFBAFF3881FB0371F7D55BEEC
SHA-256:	95CB9F896C83AB0B9FD9906263A72E6AC0246969553089DCE773741F78FC56C2
SHA-512:	325494C01D623EB8D66B81AE4878BDB7034D11EE90923B6C2F3070784AFBA7E569E0964A3F2D302A76CD2DB65FEAC2798CC6F25DDBE15E6291BFBC397DD5F905
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.......................................................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2023:03:03 12:07:10.............0221................................................................n...........v...(...................~........... .......H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................y...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.U3..mc.3.e...M.....I....]x..Ckm..?f.....?..W...7........j..;.?.#..?..o......

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:08:30 15:24:32], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	22375
Entropy (8bit):	7.244489485739072
Encrypted:	false
SSDEEP:	384:bk+Bq7bS7iP+Bq7YvncxiqYNg7yUagI6kV4pbFesUQad:bk+BMm7++BMYvQYyJagIgLE
MD5:	F3F92E34A0ED54CD4D03104F7E432DDB
SHA1:	43E53C5A6FB0703F6595E8EFBA231A2247F24CCE
SHA-256:	07473B1586573BA163F894A25E4841D0F142ECF6781F1F375F8C1557EE8A4BB8
SHA-512:	F2DB03E8737DE808312A0CD6F6CD250B04316A81CD4A50BBE9F0F4BC0B470F057F8CC955CB1E79C903B0C5BC9195E7D82808AD9FD2BDDEB081EECB6F30D9AFF3
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/59184/Soundarya%20J_large.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:08:30 15:24:32..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)E.k.^...s..../;.........O..4.{.9..A....F".)?\...6....p....8Iq.........d.:..{<..-Y.6.2l..K.g..{Y.o...'....[$0.B...]o..[o.k...3..\...@._Xpz.....3..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	4192
Entropy (8bit):	7.769794473416577
Encrypted:	false
SSDEEP:	48:8qQNn2xqAiJ3srQacXwbBXVQTnuQ113/rOrpulvX12h+Sjye6CO7tm8AxsZwk2Ht:lY2waJpVQ111D0pKvi2P7tTA+XS/f
MD5:	53163C06730843499A80E55DE62522BE
SHA1:	2B608553EEF651D515ED49564473F3C2007597E1
SHA-256:	62D5E802D9CF3C1B0CDA7B634670ABF479432DE301C28DDEB3B8DB38E55D373F
SHA-512:	0BF4CC16DA2F2919B74ADD80EF5D5FE01A60C5534F080170F31038A8912EBC20649DFDA08D1394B16543D0DC2E4BCC35E59A7D6DA904C2304E40B6B195445753
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:9E9204CEB5FA11EA900D8E61462B9E33" xmpMM:DocumentID="xmp.did:9E9204CFB5FA11EA900D8E61462B9E33"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9E9204CCB5FA11EA900D8E61462B9E33" stRef:documentID="xmp.did:9E9204CDB5FA11EA900D8E61462B9E33"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1091x714, components 3
Category:	downloaded
Size (bytes):	105821
Entropy (8bit):	7.960160706483247
Encrypted:	false
SSDEEP:	3072:B6og0JOz6m9PN7267vlT7qdFsTB0q2hgdMhpWb63:U30JXG3792HGdMDWb63
MD5:	4A7F85B7A3DF98A1699E7EE93864A580
SHA1:	49A4DE39349DE2949ECBA3A9118C4DD1A6D59852
SHA-256:	99C86889B15AD8E24ED1FF7243ADAAD8C2699B0B2ED79C865BA3FDAD9CA9E932
SHA-512:	BBE0DF20EE7C6418F3F37F48C71F0441ABDED66FA50464B392B6189C5CE62C586EFA8E9E97C69E3AD5740D505D88FAA37463121DBA31A4B686E66ADFFD7867E4
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/why-choose.jpg
Preview:	......Exif..II*.................Ducky.......<.....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C69FC34898C3D953316364BF1A0493D1" xmpMM:DocumentID="xmp.did:96F72F6582C511ED801594BA67ED98BF" xmpMM:InstanceID="xmp.iid:96F72F6482C511ED801594BA67ED98BF" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3D2569FDC50C11E7AA3AA434C63B504F" stRef:documentID="xmp.did:3D2569FEC50C11E7AA3AA434C63B504F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=482, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=600], progressive, precision 8, 600x343, components 3
Category:	downloaded
Size (bytes):	84323
Entropy (8bit):	7.879741136341872
Encrypted:	false
SSDEEP:	1536:CuBo1uBogznB8IqbyFtaFWJHC/ZoX37eQgEcYxSNbTLX6XGvmn63r/6eNqY:CEo1EoauIqbyzrJ4ZIaQgEcHVTLX6XfU
MD5:	CA27B5C8C782DF1C9A3645E63DC8CAFB
SHA1:	02CA63619348E98ACDD903EF1AF1B8329EC94350
SHA-256:	A6A55C924AB6C6BD70D9FE20822C9A941F7E507A9C4DC9B0341C9A4B5CE78437
SHA-512:	0D9B66A61D715351EE3F51D512AB8FD95068A65419D75789813A507181D68827AB563D7EB8D0C25C0D80A38DEC903A6410CF914763625BB49992D1F1AB12EED4
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/207028.jpg
Preview:	......Exif..MM.*...............X.......................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop CS6 (Windows).2019:02:25 10:32:51.............0221.......................X...........W...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................[...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..d.IH.RPJK...,.2..".6..$~..'...[....J.'..um.O..._o..K./.=?.'......ci....q.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:09:12 14:28:37], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	18999
Entropy (8bit):	7.223327720319124
Encrypted:	false
SSDEEP:	384:03Ir07iAIrBvnI5iIupY081dPIeUmB+BDYmhl2S:04g7+tvbW0idfsY6Z
MD5:	6ABF0E1D118C5FF63DD46EA55E61CB9F
SHA1:	3F8FC3D24983C10297D035174F62E59317D82614
SHA-256:	040A430686B7022D00BB3E884568DB71097054B315651112E3A057D08DCDCAA2
SHA-512:	CB7504884EFE796572018218004C85D075507DAE66A354B6F86807380395EC4821A8E6C00A2C962FAF8164FFEC49272EF893EF0C7389160D3829302E00E43603
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/34674/Ryan_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2018:09:12 14:28:37..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.L..X}O.OL....n.;[Su{.?.Z.}f..p.~.Nh.%.Ygf....k....fC...\l..q....E..)L........<.Z.C;........[v.).\|.4E....4...K9....+.\|H.E.#..S.....\c....9.h]WB.......s

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=216, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=144], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	29360
Entropy (8bit):	7.480814010037215
Encrypted:	false
SSDEEP:	768:nq5Z7sq5JbNYyUZ0PO7tgKXKVk9E0E7pr:nE+EJbNIZ0POFXKVk9Et7pr
MD5:	252BD2E8D7EE6C513D170B6776A92148
SHA1:	D50899AA019D2F444A9F2A4FD8E77E659F0F06B5
SHA-256:	D0BFA4F92D7667A47EFDEB4039ED179B168D4B24AD8B371F10DE7FCED15FF1C1
SHA-512:	5AE608E18B2E4F5D7EEF0D3C4DD299FD24824A7165BDD40E0317375EAC8F24E8465F1CBAAD7925E631E94EB5F5EF1935F7AC5293DD5EC8B0DC38EAB66836DD9C
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop CS6 (Windows).2024:01:18 17:47:36.............0221.......................Z...........p...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....c....\|..x..7.............?..J.3.....:...s=...m..>..a.s./.hk....s]...@..5

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=216, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=144], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	29360
Entropy (8bit):	7.480814010037215
Encrypted:	false
SSDEEP:	768:nq5Z7sq5JbNYyUZ0PO7tgKXKVk9E0E7pr:nE+EJbNIZ0POFXKVk9Et7pr
MD5:	252BD2E8D7EE6C513D170B6776A92148
SHA1:	D50899AA019D2F444A9F2A4FD8E77E659F0F06B5
SHA-256:	D0BFA4F92D7667A47EFDEB4039ED179B168D4B24AD8B371F10DE7FCED15FF1C1
SHA-512:	5AE608E18B2E4F5D7EEF0D3C4DD299FD24824A7165BDD40E0317375EAC8F24E8465F1CBAAD7925E631E94EB5F5EF1935F7AC5293DD5EC8B0DC38EAB66836DD9C
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/62480/Kenneth%20user_large.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop CS6 (Windows).2024:01:18 17:47:36.............0221.......................Z...........p...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....c....\|..x..7.............?..J.3.....:...s=...m..>..a.s./.hk....s]...@..5

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (617), with CRLF line terminators
Category:	downloaded
Size (bytes):	19038
Entropy (8bit):	5.272478812245861
Encrypted:	false
SSDEEP:	192:bl3v8CEpU6EXoOR2QE0yUCoNOAsFOLD1Od+faWh6mFuGFCMl0maLL2MMG7PcaxmO:bl3UCp0jp0yHoNOqhKmoqGIjikLLPC
MD5:	059413EB02070C9FB76388A2920C75F9
SHA1:	566CA661CBCC917E1874063A493A58D62C366D46
SHA-256:	FDB9760F09561894AF5CD267159DBBACC073C65C159DF04C4481647BBC4EAEBD
SHA-512:	4AE6A38CFB825992AC9E1DF3A7D811D71DCF0FEFE0BC69A66D77FD17318FE25F16FDDA39AEA9F4134B885BB62319D69FC0633C9A5554B0CC8D6766A575223098
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/traininng/js/xFunctions.js
Preview:	/*...This is a commmon java script file which has common functions used across applications for validation purpose....It also has utility methods used for validation.../....//variable declared for handling inline error message focus settings..var isFieldFocusSet = false;..//variable decalared to handle actions for inline confrimation window..var actionURL = '';..//variable declared to use for handling div object..var divwin = '';....function addLoadEvent(func) {.. var oldonload = window.onload;.. if (typeof window.onload != 'function') {.. window.onload = func;.. } else {.. window.onload = function() {.. if (oldonload) {.. oldonload();.. }.. func();.. }.. }..}....//Phone number regular expression validation - as per the US number format..//phoneRe = /^((\+\d{1,3}(-\| )?$?\d$?(-\| )?\d{1,5})\|($?\d{2,6}$?))(-\| )?(\d{3,4})(-\| )?(\d{4})(( x\| ext)\d{1,5}){0,1}$/..//us format - /^$?(\d{3})$?[- ]?(\d{3})[- ]?(\d{4})$/..//indian formats +91..., +91-...,

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	25219
Entropy (8bit):	5.383440815641362
Encrypted:	false
SSDEEP:	384:lzP3pDqmAY31izru/+jwb9cs7fBvWtdUix:lzfFqyUru/+jwb9cxdUix
MD5:	654883F90BA5CB4767038DC5A1B5BB44
SHA1:	CFAB60CBE998CD0E3E2989D94D530AD95DED9808
SHA-256:	F8EE623ED2415BBFCD61F5DBF2D0CF15BC906E4EECFFF1268ECE3A25C6FB6277
SHA-512:	12EB1738F38F09C4ECC73A26A9189B1724D731F0AC78D6A93DD2D3FBAB2DCD8A4A201D8735F9D6AB3C0F3A22F6D3680FB7D10A8F932FAEF421E18B47B50ECB07
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/control/main
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Online Professional Trainings Provider \| Professional Courses </title>..<meta name="description" content="Traininng.com is best Learning destination for professionals courses and world class professionals trainings at affordable cost to achieve your goals in all areas."/>..<meta name="keywords" content="Learning destination for professionals courses, world class professionals trainings, professionals training courses, webinars, seminars, training course Online"/>..<link rel="shortcut icon" href="https://www.traininng.com/i

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10187), with no line terminators
Category:	downloaded
Size (bytes):	10187
Entropy (8bit):	5.17908949611252
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCx37YoLlHn:KFSk/OROk5u4QK0kTOkcISh2DjkoxrpN
MD5:	C0053B411B753138AF468DB1BD3B19F3
SHA1:	7C3A187AA58F2B9E5446EDB761B3D4D2BA506FE7
SHA-256:	CE337EC7DDA4B3A741363A2673C7EDCE5C736F1660E2AA908131ECFD9DD1343F
SHA-512:	E0EAF480CC88817BCE216614F9813C10D7FC3930A8899F4C7C68B442E90846AABE0B5A536D9B273570671B7E8DDE614B347891839BD6699EDA355EC8B5FB1852
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/ekr/asset_composer.js
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	5851
Entropy (8bit):	7.869416459307453
Encrypted:	false
SSDEEP:	96:lY2/WEJFLBynXUZbAjpAUs4XRwmIh4TnmAJC0cEMJY1xwBIEbwjKr:l2sDGa0pnJC0lMJAlU7
MD5:	B3E575EDA1E82736E311DCD80D128438
SHA1:	119780571E4EB73209803AF35B4860FA639AD1EB
SHA-256:	22CA455F9B3C3634C77EBCD18A46D97AC86C6CE050C340DF6F2C3FD5CFC5C0E9
SHA-512:	25768256CBF08B5A7818B75D054C3E384B08B0A118E7483759A9D5B4F671BE3C00AEDDC0346A7DA2BF919BF701C1AE3820BD7FFA5CAF86FB67470FAE7E5A2BD7
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:0673499B143111EB9073C3F52031D721" xmpMM:DocumentID="xmp.did:0673499C143111EB9073C3F52031D721"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06734999143111EB9073C3F52031D721" stRef:documentID="xmp.did:0673499A143111EB9073C3F52031D721"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:05 12:33:58], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	24225
Entropy (8bit):	7.332945290283182
Encrypted:	false
SSDEEP:	384:iiA/eCWQ6S7i3/eCWQ64vnNci8JYNg7yUbxBMF6L/IHHwJmU4iP:iiBQ6S7PQ64vuJYyJbxO67uHwJmU7P
MD5:	8F5846B247E38CDBA27B11F296289BD3
SHA1:	77E521367E3B7F1EB5B27472F73AE5CFF2CDDFBC
SHA-256:	5AEA072E154F6BBCD66D592BBF75D5DA64AFD5EC4141E96A55F5297279A5355B
SHA-512:	4BAB99FB939E770E36D65C31EC119F172D7568921450EFB93B9C29DAB62DFA4843E6D3AC1567CD6B17177E67E41D20D003C05394984EB5E9CB0BE87185F28E20
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/60019/Jacob%20Kelley_large.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:10:05 12:33:58..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...H..$.I)I.$..\|.......e5..i...lb}^.:}....8....../:.=.I....+...]J.\.)v.9...".Y$..F@.@.p.)..).T....N......N..t...I.S..V1.....+...\..+f.=.C...]^.....m,kk"d..d

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4705
Entropy (8bit):	5.282603485231769
Encrypted:	false
SSDEEP:	96:76kuDwXuFDwAgU9mX0VC8SoY43MX0kgcltFfYCflkgINYkg+qkgyOY5S:7LAp93VCih3I0kgcltFYykgISkg+qkgR
MD5:	215BBB8EBCFB666FEAD55724AE26E54A
SHA1:	F7D1D89C6E592E6B45A87B40CF8CBF6CF148BBBC
SHA-256:	0416E023F348DF96FAAC4204203D74DF82D14741EB9391B4AC438D73D7C1088F
SHA-512:	DC2823778345BAE5ED0D1497BA193122F7E52EC5D6667C7C01D9ABECA364FAC94C4E795D7B3A7F780A2F9F81597001B29D7D2E59A762DEC18AFC248C47B51BF1
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/string_util.js
Preview:	function Trim(TRIM_VALUE){..if(TRIM_VALUE.length < 1){...return"";..}..TRIM_VALUE = RTrim(TRIM_VALUE);..TRIM_VALUE = LTrim(TRIM_VALUE);..if(TRIM_VALUE==""){...return "";..}..else{...return TRIM_VALUE;..}.} //End Function..function RTrim(VALUE){..var w_space = String.fromCharCode(32);..var v_length = VALUE.length;..var strTemp = "";..if(v_length < 0){...return"";..}..var iTemp = v_length -1;...while(iTemp > -1){...if(VALUE.charAt(iTemp) == w_space){...}...else{....strTemp = VALUE.substring(0,iTemp +1);....break;...}...iTemp = iTemp-1;...} //End While..return strTemp;..} //End Function..function LTrim(VALUE){..var w_space = String.fromCharCode(32);..if(v_length < 1){...return"";..}..var v_length = VALUE.length;..var strTemp = "";...var iTemp = 0;...while(iTemp < v_length){...if(VALUE.charAt(iTemp) == w_space){...}...else{....strTemp = VALUE.substring(iTemp,v_length);....break;...}...iTemp = iTemp + 1;..} //End While..return strTemp;.} //End Function...function countWords(textInput).{..te

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:10:23 15:17:57], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	20911
Entropy (8bit):	7.348365596625108
Encrypted:	false
SSDEEP:	384:Yxa0zlT7i/a0zlYvnlYiTz/hjJ5oaoTcNsfxPwabEPMhJqbv:YxaMR7KaMyvd/hjJ0ThfSohav
MD5:	35000CBFB8C646CE250B5EDC83A1D5DD
SHA1:	92EE076F2319CE14CA01090727B51A4426812E4B
SHA-256:	EFB58044E08994ECEEB70A3A12780B0890C4EF4070DCF859F441B4E72F8BFB9A
SHA-512:	99D3E078F15313143D2B0E083A379FF0C9E2B878710DE5D376F132CB607F22A9C8310C8EF6D951C74381F3A6C7FF81611EB7CA1460654C970CB508E3B691E729
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/36875/Andy_large.jpg
Preview:	.....\|Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2019:10:23 15:17:57..........................Z...........p...........................................&.(.................................F.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T..r.+..&.+........RSC..`....S)..>}.........Z.n.....a.-.V..ZwV...na.c....I.F.gR.qslt5.D..4.4...5K4>.......v....Q.].]L3:.Ve.h..Z.7?.!.cG..,.M.[.D~cu?.r.~

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:08:03 14:22:28], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	27543
Entropy (8bit):	7.5186958922058285
Encrypted:	false
SSDEEP:	384:N/E8ERFN7iiE8ERFysnWl7l2QkTtbe44HlQd5mCPrCrOpBQ1Egeyw5BusXCSyx:N/BgN7RBgysMstyRC596OpBcw5w7rx
MD5:	6C998A0F73F491065BE03B99438223A8
SHA1:	8FCB1AEDE5B6EC551F66D3D693C53BC5105682BA
SHA-256:	4BFFC13B9E8D3570C96C95C1D83020D369D72E45B27616ED4BA17EB10C669DFB
SHA-512:	6E0545D912BBA8242F2FA31F2165694CABC89D1557C696C50DE45201344B23F9285E912285C11C058A89BCD58F87916F95E381665F7DD56BC7EEB0E865ED6B26
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/34496/emq_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2018:08:03 14:22:28..........................Z...........p...........................................&.(.................................r.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...in.....xh....c...m...+Qo.c.....k.o.v.....G......Q/'s.s.....op..J........Y..?...k....2...y....Kd....;..hs..`.....7c..v?W..Q.F.uj..V6.q..........M.F-u..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x375, components 3
Category:	downloaded
Size (bytes):	52307
Entropy (8bit):	7.971246294593585
Encrypted:	false
SSDEEP:	1536:lsG+YSHKm1DLxmt+Vw76T7iDMrI+SIe2icA:CYSH/k6v//ef
MD5:	70E14104FBD00B068CB194A7AC3D7AA3
SHA1:	B1084EC65E4C1DC376DB973698583E6AD6EF380B
SHA-256:	5AF1C9AA9F94A17E88B2FC1C94C1BC0D4F9A7F89E52FECC624D2A93042311781
SHA-512:	BF8BD3BCD39EB7FA1295468C7C9CDBCDD38FE1F1A9D24734C970B3A3C65DBA418BBD6DF19819E662B88B886C9252A7A11578CC7017DB0B1B4039C9FE5A104EF1
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/detailpage_webinar_img/206534.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Preview" xmpMM:InstanceID="xmp.iid:F6D795CCD4B911EEAA82DF6AF9FCAEF7" xmpMM:DocumentID="xmp.did:F6D795CDD4B911EEAA82DF6AF9FCAEF7"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">5.jpg</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F6D795CAD4B911EEAA82DF6AF9FCAEF7" stRef:documentID="xmp.did:F6D795CBD4B911EEAA82DF6AF9FCAEF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM........

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x375, components 3
Category:	downloaded
Size (bytes):	52422
Entropy (8bit):	7.970980283836979
Encrypted:	false
SSDEEP:	1536:lsG+YSHKm1DLxmt+Vw76T7iDMrI+SIe2icS:CYSH/k6v//e7
MD5:	77C7E8B0CCFB365E89F16403A0C68D4B
SHA1:	5F254CE294A5192E9D62EFA79C2D0E5EC1613F89
SHA-256:	804661ACC9FDAB9F58D93D58DF1370F943233A383C0E9154FCD19F8DB776411C
SHA-512:	848076752B967517B6624995CA8DF75A8C3BE253F68EF7C3B83199743021CC3A83C837B05CC0645A6BA6B4148C8820E6A511918C926AFB02CFAAE5DD56639416
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/products/detail/206534rec.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Preview" xmpMM:InstanceID="xmp.iid:F6D795CCD4B911EEAA82DF6AF9FCAEF7" xmpMM:DocumentID="xmp.did:F6D795CDD4B911EEAA82DF6AF9FCAEF7"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">5.jpg</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F6D795CAD4B911EEAA82DF6AF9FCAEF7" stRef:documentID="xmp.did:F6D795CBD4B911EEAA82DF6AF9FCAEF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM........

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	4790
Entropy (8bit):	7.812383381214546
Encrypted:	false
SSDEEP:	96:lY2MNoe7/On1zkR1oLvC0NCarXQqHW2f1qEN3QqYovmhEg:lH1QrWvvN9Tz22f1qAAhb
MD5:	DCF4CF2478A13E1EF8FD6B3E81CEAB3C
SHA1:	B0C2FEDE6220F9F83741C98D1055D3755B87D14F
SHA-256:	4D4BC2B2B5569D33BC5441BBF2A2DE007A3A2DD3F90D5F99DD4756F4910D4D15
SHA-512:	6D479EE78377E39E2B365D1E6B10E17B77042EDAA4155D05A68CCFF4F91120BF0D3A7AFD2E3C5109D4782A2453B42B688E06B251735D19B1D12D455B93F7BF90
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:208289B362DC11EA8CFEF0F5A4CE459C" xmpMM:DocumentID="xmp.did:208289B462DC11EA8CFEF0F5A4CE459C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:208289B162DC11EA8CFEF0F5A4CE459C" stRef:documentID="xmp.did:208289B262DC11EA8CFEF0F5A4CE459C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:03:06 14:12:24], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	27260
Entropy (8bit):	7.433047027989082
Encrypted:	false
SSDEEP:	768:mDWnfFZ7SWnfFdvwYy1rqFuDjPP44qui46/:oP2vwTDjn4uiL/
MD5:	867B62B32B93A1D764B9709EFF2EAA66
SHA1:	D5141FBA0A30FEF6936E66D7D67279F83E289B7E
SHA-256:	F8AD5D8DDF176CF28347299F0B6EE5CA8773566801E10A545F02AB4864D5D1BE
SHA-512:	1E8DE8F27ADD948535A71F1D62F475F47179DEECE254F157C9FD716875C2A50368BC94D2EA2C64E4B0ABF6E736332F846D3FEBED0218425C86530C3589CA5724
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/63494/ryan%20Lavarnway_large.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:03:06 14:12:24..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....`d.....^.. ....}.".x...5...c.v..'e....$t..............y...?....'...\F.....R.]S2.W..Z.........v.lJ...n`.[..z..H...t0...S?/...t.6dg.pvE..y..;.YE.vSw...

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	88624
Entropy (8bit):	4.78172128229116
Encrypted:	false
SSDEEP:	1536:Gtsg2ASKR+XWEamr0ko7tKg1GPn2hWlxhHbrEnGCV+9MnqVqpsq2dGg20:pg2AzmwkoZKg1GPr5V6u
MD5:	711076D6723CFBA1FA32CDA946C9E675
SHA1:	3BDC9CD34D24012F9D5DA22CD71620968389F48B
SHA-256:	96F9C38CBAFAFDCC79A639B22904D5E3BBF5A10DE75F8023DF527601963C1EB1
SHA-512:	7E936656A3633B874EA0F21BE56E0AF6E1874F1B3DF8FD055E7FA1757F0A84213661B96308C6AD84943E7ED37F6A982E2A25519778D8CF0B3291908642C4BE91
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/js/convertPdf/pdfCanvas.js
Preview:	/. html2canvas 0.4.1 <http://html2canvas.hertzen.com>. Copyright (c) 2013 Niklas von Hertzen.. Released under MIT License./..(function(window, document, undefined){.."use strict";..var _html2canvas = {},.previousElement,.computedCSS,.html2canvas;.._html2canvas.Util = {};.._html2canvas.Util.log = function(a) {. if (_html2canvas.logging && window.console && window.console.log) {. window.console.log(a);. }.};.._html2canvas.Util.trimText = (function(isNative){. return function(input) {. return isNative ? isNative.apply(input) : ((input \|\| '') + '').replace( /^\s+\|\s+$/g , '' );. };.})(String.prototype.trim);.._html2canvas.Util.asFloat = function(v) {. return parseFloat(v);.};..(function() { . // TODO: support all possible length values. var TEXT_SHADOW_PROPERTY = /((rgba\|rgb)$[^$]+\)(\s-?\d+px){0,})/g;. var TEXT_SHADOW_VALUES = /(-?\d+px)\|(#.+)\|(rgb$.+$)\|(rgba$.+$)/g;. _html2canvas.Util.parseTextShadows = function (value) {. if (!value \|\| value === 'none') {.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15224), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	57604
Entropy (8bit):	5.385908596963681
Encrypted:	false
SSDEEP:	1536:lzvFOG958Li0W5mzyVJeu/ojlCl8RLPeBHF8S8BnUs:l5B8LX8HVJeC2lCl8RLPeBHbYh
MD5:	DA16FD9475ED7CD90CBAFEF76300F7A6
SHA1:	2EBEECDB3418DC79FAE4257414C511FF98FD4251
SHA-256:	4A1AC395F3B2FACFE5BFC9397BA75DB22E25205B604D0E4063E094050EF8B423
SHA-512:	DE92DEB59D0F8FEB62ACBF4CDA4AA4D2A158768FA34B94723C8A149018850694E4049F6E35BE9A6E4BC525289A67B5CE6E177709544D1DFAEFF556BF32C093E2
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/live-webinars
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Live Webinars \| Professional Webinars Online \| Courses Online </title>..<meta name="description" content="Traininng.com has been training health and regulatory professionals by Live Webinars, Professional Webinars Online and Courses Online by best way of learning of traininng team."/>..<meta name="keywords" content="training in health and regulatory professionals, Live Webinars, Professional Webinars Online, Courses Online for healthcare professionals, training for compliance professionals"/>..<link rel="shortcut icon

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	downloaded
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/js/jquery-1.12.4.min.js
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 322 x 140, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	53790
Entropy (8bit):	7.99008935109019
Encrypted:	true
SSDEEP:	768:zq0tpzUfWl7CjpjPbqA9vYJp8EwcvAp+t9hxvNNnAoOnETnip:D4fWlmjJbTtYJbwc13fmoOn1p
MD5:	D908CE2B4C3DBDF5023AA98D9755F80D
SHA1:	A7B5F09EC597A65944F91D50BE3439C68F972CEB
SHA-256:	D2044FD775EC7C3708D12F45B83FEFAF4A8505FB533609B41D11CC8DEE554156
SHA-512:	5087B48F77D2BF9C2ED1ABF1D96F405E841FCC2408687AED39E95C31EE8B55A67C1908CF84C46B679B1776F2D71EBA1E509CAE3E550FAB6780F93C355E7A0AED
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/hrci-thr-new.png
Preview:	.PNG........IHDR...B..........8......pHYs................ cHRM..z%..............u0...`..:....o._.F...IDATx..w..E..?3....Knz/..{o.ADPA..YP@.T.)".(]....{........s{=.....=.$$(.?E..<....:..~_a.a.l..Y.........'>....q.@f.l..F..r=m...D$...^..H.P.&=O\|..... .F....XFi...p.^.....8.....z..r..d.....5d,......S[..}.....L.;J.....E\|...'.J.!.A6]...+M^W..v....."......y..j.].(..%L...Pr.g$Rj.U..H..fT2.+...;.k'.k..+W..... .l.;d.v,.....sorK.*.+..r=.n....e..d......].....x.Q..yr..Q.\|.X...p+p.1Z....:Ij.m0.>.5.h{.u...4.{<}.N#6n..#..F.e%.!../\Fnm3....7.#=.=.5...s.~.n.=......E....8.D,I.c`..y'..w......m....J.J...>..)o`0.@ . %H.....}..`.H#1..@HP...NO..9.!...3...e...;2.Y#.'M^\|b..,.e.l...(*.A....b0.d..._v...W.+.jK......0....B..XI.?_DH.b.....)...Bj.\|.e[h/..\|T<...1~..]L.,..U....8......Ve....[7M......f..GV..l..7.f......g....E..L}o..5_H.^........Nd .c.v .FB}.......+.wn....[...m....YM....4.....i....5Dc..~.H.=.g.!...<0.w.A........(.F&..<V."X......f..4.O...JKr...[....=I..m.7~_

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:02:23 16:11:38], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	27419
Entropy (8bit):	7.430320188226922
Encrypted:	false
SSDEEP:	384:A8s918LO7iUs918LRvndGiVYNg7YuXCsWL5AicSc8WnZGIvGb2Ry7N2jc:Ar18LO7O18LRvlYy3p0AiEcIvU0I
MD5:	33D0CE4727EAB18B1665C8CE90ECDD8C
SHA1:	E73980321ADCE6B1B46B60461420AA292B05215F
SHA-256:	7F653F5D0CB1650DDD0365D28765BCBFC0D21B2DE20DF1E28DD48A433FD3D658
SHA-512:	14A68444A54128D5D794980FEBB53B22CF7C29903DDBD6C88AAE18750F1B07D273BEBB7621A7E39D98CEF8244B8EC88D43041E11DF4B339A42BCB346BD1BE474
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:02:23 16:11:38..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...kc]5.I...m;..N..{$;.A..S9.h;yNbY.kI$.9=.NG.<,{6...x..7W63......y.cW.w".z.27.9.G.ti..! N..N......XL4D.>K`..-.u\.......at]9...h.u<.c..NlB"..}.P<Jv.<.t

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x343, components 3
Category:	dropped
Size (bytes):	45119
Entropy (8bit):	7.934795277551721
Encrypted:	false
SSDEEP:	768:lIzzfY6fheHqkR8gp5LvJR4ijvSv3hMwewQ9GJfxByGB6S9XPV:lIAzbp5LfvmewQsuG0O/V
MD5:	5E0C4616CC5B0A72863660934E97BFDC
SHA1:	04B7BFD70C2A570B0A196E5A68FE55FD9A4F35CC
SHA-256:	8453750E972E3117488EF05477C0C22690A32F597F683CB295EFC5E7ED602EE5
SHA-512:	D92B3AF8D42097DB344C1328BEB06AADB379637CDBF58425F83003EA21919FF65C3BFE37605B89A816BB2F190977689A054ABCB58CB8238D5CBAD8B691AB0446
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:19AE3C5B296211EBABF78283BFDCB859" xmpMM:DocumentID="xmp.did:19AE3C5C296211EBABF78283BFDCB859"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:19AE3C59296211EBABF78283BFDCB859" stRef:documentID="xmp.did:19AE3C5A296211EBABF78283BFDCB859"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	971
Entropy (8bit):	5.094951330992702
Encrypted:	false
SSDEEP:	24:Y+evSuFYklQSq772WIh0eRJs5EvK79szKt9ZktwWyZ:Y/KmjGHTIel5/azuPkG
MD5:	5D1DA307E14FDE3DA8482BBC8B84ECA7
SHA1:	06E43EC020A62B5781C5C766F8175DD6AAFC0E81
SHA-256:	D1EE0FAF67078C58DB5AFAC96FBF63503035165E56F66DA8D49D204A782F8512
SHA-512:	EDBCFFCE4A4ADAC8748E4215364EAD578C663DDC7F7EAA3E58F8D1EBBA7A1A1EB20482D0E7C1CFECE09B71D1B2EE7987B3F8C82F86ECBAD720C257EEABC064A7
Malicious:	false
Reputation:	low
Preview:	{"products":[{"name":"web_widget","id":"traininngllc.zendesk.com","bootstrap":{"config":{"features":{"prechatFormVisibleDepartments":true,"fastLoad":true},"color":"#6db578","cp4":true,"brandCount":0.0,"position":"left","brand":"Traininng LLC","embeds":{"chat":{"embed":"chat","props":{"badge":{"layout":"image_only","text":"Chat with us","color":"#2b9a25","enabled":true,"imagePath":"https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png"},"color":"#6db578","zopimId":"5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt","standalone":true,"position":"left","mediatorHost":"widget-mediator.zopim.com","forms":{"offlineEnabled":true}}},"launcher":{"embed":"launcher","props":{"color":"#6db578","position":"left"}}}}},"features":["chat"],"url":"https://ekr.zendesk.com/compose_product/web_widget/7bc1c0f290501106fa41dc515076261e2325fb83?features%5B%5D=chat","assets":{"scripts":[{"src":"https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js"}]}}]}

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x902, components 3
Category:	downloaded
Size (bytes):	84352
Entropy (8bit):	7.657210107151014
Encrypted:	false
SSDEEP:	1536:nOuF2OJFkUDFP6yV+X/gjnBrliHZx69Y2VkZLTeG7J3N2jLBWu9wPH89:Om2KkU56yQojBr8UYuKLT15ojAu9wPU
MD5:	F4A90D581C5AF754DA4055598941FD8B
SHA1:	B44158836D86C3F24480D425899E77CCCD4454BD
SHA-256:	B49804106862C1E6C4D1F05ED021490694BC2FCBEDA255353D5C9BF7AE26360D
SHA-512:	A1D7398817D3D294998D9B14AF132CE76B3B99060E0BE197A15A9841B6E53FDE8C950A3DFB875C8DD169E199CCD30B9AF6E8937D485B7109C0FAC3306C075AE6
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/slider1.jpg
Preview:	......Exif..II*.................Ducky.......<.....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C0748420FCD77D4CC7BE9109CE8409AA" xmpMM:DocumentID="xmp.did:E9C36F8482C411ED96F780B93B70D540" xmpMM:InstanceID="xmp.iid:E9C36F8382C411ED96F780B93B70D540" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E7A30CB1BC82ED11B267EC77AA4826E0" stRef:documentID="xmp.did:105DE80EB482ED11B267EC77AA4826E0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:03:06 14:29:09], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	29483
Entropy (8bit):	7.501661592427519
Encrypted:	false
SSDEEP:	768:WFXFLy/7RXFLyYvgYy3UYQlUcVGLJWeuE1d0ZPss:SlyllyYvg7XQrGVWeb10ss
MD5:	337BEE90FC1C51DF13179184B77B9C0A
SHA1:	8266B2A447187E3772E81CEAD9D0CA9FEB0FFAA7
SHA-256:	C8959D3508E7B9EEDFC675EFA0794C6471B0F0A818E1E721B28A383A1682C4D8
SHA-512:	D2990AB5A6D3C35422735929B4EB4E676D4DCB8418FD796612C52D55F7F1BF4F8B19794C5DE6E5E3488F47CB70656E5D2CA9DA904CB64EC83A98F302A3DD1F42
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:03:06 14:29:09..........................Z...........p...........................................&.(.................................J.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.>`.J......t.z..Ihw... ...K.....P.Ws.v8..c.p.6W.[Y.2...@Z....H..8e..>..X..l.d.............2.pj`...v...G.D...u[\..!. "..Y.y..k...52Wb......X........\|.k..v..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 350, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	81012
Entropy (8bit):	7.9718012593996725
Encrypted:	false
SSDEEP:	1536:dzQ9GrwnCmPoPAD5jyKrA5ssVnlRm7d+7Y7TNGcgfBZiVEFUVIOUi:29GrwnDD5jfAfl4pNJSZkEFUzn
MD5:	A7F7807F582B3879262A71BF0013F375
SHA1:	9950B684B9631EFE26F6D6C03F52AF7C77F11B9A
SHA-256:	6DCC91C42C60F7CEA9CA85E44ED44CDA4C8C08FCB03ED818B268513F4A803528
SHA-512:	2A7727CF1442A938CD27B697AE3135FC70C52F65F7FB406A92A6381CDF38512B5CC2474F17A3F3A49F9F00F5DFD55EC8837DF037D0E48C1385058160C7315BE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...^.....n..n...uiTXtXML:com.adobe.xmp.....<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2023-02-01</Attrib:Created>. <Attrib:ExtId>ef4ea7f8-868a-4388-855a-ccf20e5101e0</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Chat GPT and HR - 4</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:pdf='http://ns.adobe.com/pdf/1.3/'>. <pdf:Author>Radhika Sharma</pdf:Author>. </rdf:Description>.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 6, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1067
Entropy (8bit):	6.261540777064249
Encrypted:	false
SSDEEP:	24:1y1he91Wwjx82lY2T3ouVSnzntnXLyJ3Von6nMnabGih4s:1wqQNn2xInLtnWJ3ynMMnsJ5
MD5:	1A09A034EF21272964205446C66C7418
SHA1:	A601F031100F98095525F016955CB6BAD1857924
SHA-256:	F2816727F77A18C88D0E7A62479F45D8F6A0B8FE79FEE6E5872EFAC7A90AF898
SHA-512:	639E8BC1313AC1998394852D999F235B1A21DB4EF1B0D38A00115CBFD17BDE2B89255945AF385A51EC13692595E5A2D836CD67AF14EE0E2116EB0A72608A6D5E
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/select-img.png
Preview:	.PNG........IHDR.............(.......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:9D7A3579FF9211E48FBBFCDAE6E1FAA2" xmpMM:DocumentID="xmp.did:9D7A357AFF9211E48FBBFCDAE6E1FAA2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9D7A3577FF9211E48FBBFCDAE6E1FAA2" stRef:documentID="xmp.did:9D7A3578FF9211E48FBBFCDAE6E1FAA2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..YI....IDATx.b<~..._..0.....ktttB...Lrrr.?~.x.....t..o$%%....L..........Q$XYY....2...6.D......._...Y.......}........

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (974), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	19918
Entropy (8bit):	5.270780190512807
Encrypted:	false
SSDEEP:	384:lzypDqBx2KEG0lt5VrjCJ0geJ0gdgWt3vWtdUix:lzyFqBxhEnn7XdgpgdgyedUix
MD5:	2911F502255EC80CA3AAF19F313A63A3
SHA1:	530473D11C9587EAA3343FE43E7E47B1799350F9
SHA-256:	909928BC4DE31DAFA91F0DDF6D2D926F834375055383C8E5F938E7C9B925841D
SHA-512:	9EA4A31AE893F79E7EE92D87D6EAE1A832A5BF7F0E20BC4B2A1EC1FD4036F93EB919580B3A3057922E0A8270DA2F5A86DCCC327A1873A15283E003C2D917B245
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/speakerprofile?speaker_id=34674
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Compliance Experts – traininng </title>..<meta name="description" content="More than 100 Compliance experts across industry and across the globe"/>..<meta name="keywords" content="Compliance Experts, Medical Devices, Pharmaceutical, Clinical, CAPA GMP/cGMP Compliance, ISO 13485, OSHA, Consultant, Consulting, Quality, Food Safety, Risk Management, 21 CFR Part 11"/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/j

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	623
Entropy (8bit):	4.929917159795532
Encrypted:	false
SSDEEP:	12:YjGidIAHAiYacddHXOUdGrXJjr+30LgONAEvKddHQkUWQXFb:YjyYAiW7Xvd0d95vK7QklQB
MD5:	975622DC99CAD218425DC754FE2B08D2
SHA1:	9B1831D8DC01A714DD8E07ABA38DA89DE8A21C1F
SHA-256:	0B025724FA90E0DE659C5674FE0A655CDE1C372ED7DA284197439EFD147CCF0B
SHA-512:	A59EB7A0784451EF26B4FAE7482877FDC19B321A9A841358304AB584C08D3B7BE25374D626FFA1C61A5DA695063C9BA936DC3AB988D940C8EADF45E5B7FC3718
Malicious:	false
Reputation:	low
URL:	https://traininngllc.zendesk.com/embeddable/config
Preview:	{"brand":"Traininng LLC","brandCount":0,"color":"#6db578","position":"left","cp4":true,"embeds":{"chat":{"embed":"chat","props":{"color":"#6db578","position":"left","zopimId":"5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt","standalone":true,"badge":{"color":"#2b9a25","enabled":true,"imagePath":"https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png","layout":"image_only","text":"Chat with us"},"forms":{"offlineEnabled":true},"mediatorHost":"widget-mediator.zopim.com"}},"launcher":{"embed":"launcher","props":{"color":"#6db578","position":"left"}}},"features":{"prechatFormVisibleDepartments":true,"fastLoad":true}}

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x902, components 3
Category:	dropped
Size (bytes):	71972
Entropy (8bit):	7.512291866224791
Encrypted:	false
SSDEEP:	1536:n8hWM9uQ7pKFCXDtWS0mnV3wWWj9/LHq+GM7aECk0c9q:8puQ7sIz3wBj9/W+GM7r0c9q
MD5:	C2F4410B135D41A42F6F6E27075E5D72
SHA1:	220312DBC350FE436277B121C350B5661ADC0C04
SHA-256:	7D8D5B0D2F0A9C1F0EA89A56B6A6C98C85A68793D27DB266A3FFCD0CB7892D78
SHA-512:	95A82AE9B36D61DF1BE3B6B6530C4C05F5A1141A503B8BD60677078A6A266C018686DE1E8EAACC31BC47F4F0DEBB4532BEBEF837CC72E2C8739DD1DAEBEFED91
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C0748420FCD77D4CC7BE9109CE8409AA" xmpMM:DocumentID="xmp.did:2722BB0382C211ED809CDBB326140FDD" xmpMM:InstanceID="xmp.iid:2722BB0282C211ED809CDBB326140FDD" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:155DE80EB482ED11B267EC77AA4826E0" stRef:documentID="xmp.did:105DE80EB482ED11B267EC77AA4826E0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x902, components 3
Category:	dropped
Size (bytes):	74871
Entropy (8bit):	7.569209062836834
Encrypted:	false
SSDEEP:	1536:nHDNanbl8aurFGL1JNkbS90c2zI0B7s4fItPNzY9xM5f2aNA:HDNIblYQLrNk+Kc2zl9stxNYx822A
MD5:	F850A1DC3356498450F51F89CC2D155E
SHA1:	64DCCC89C6E5E598BD516B24448884F8085FDC6E
SHA-256:	60A5CAC6A3D66C07F72835C65DB4C142B1F76A44FB7565DBA19173F8351BCE66
SHA-512:	6DBAC08418D2D13EBD7948826900D6458F97DF179AFCA82F96E97333CB0827504647ED8F631FE60E7BE8EC816A481B62A2F308C75C1C0C72AB0657243978BD26
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C0748420FCD77D4CC7BE9109CE8409AA" xmpMM:DocumentID="xmp.did:C16FABD982B411EDB6FFAFA003DD7D21" xmpMM:InstanceID="xmp.iid:C16FABD882B411EDB6FFAFA003DD7D21" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7CE826EFC50C11E7BFC2E780B8556F2E" stRef:documentID="xmp.did:7CE826F0C50C11E7BFC2E780B8556F2E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1091x714, components 3
Category:	dropped
Size (bytes):	105821
Entropy (8bit):	7.960160706483247
Encrypted:	false
SSDEEP:	3072:B6og0JOz6m9PN7267vlT7qdFsTB0q2hgdMhpWb63:U30JXG3792HGdMDWb63
MD5:	4A7F85B7A3DF98A1699E7EE93864A580
SHA1:	49A4DE39349DE2949ECBA3A9118C4DD1A6D59852
SHA-256:	99C86889B15AD8E24ED1FF7243ADAAD8C2699B0B2ED79C865BA3FDAD9CA9E932
SHA-512:	BBE0DF20EE7C6418F3F37F48C71F0441ABDED66FA50464B392B6189C5CE62C586EFA8E9E97C69E3AD5740D505D88FAA37463121DBA31A4B686E66ADFFD7867E4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C69FC34898C3D953316364BF1A0493D1" xmpMM:DocumentID="xmp.did:96F72F6582C511ED801594BA67ED98BF" xmpMM:InstanceID="xmp.iid:96F72F6482C511ED801594BA67ED98BF" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3D2569FDC50C11E7AA3AA434C63B504F" stRef:documentID="xmp.did:3D2569FEC50C11E7AA3AA434C63B504F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:01:26 19:25:26], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	22928
Entropy (8bit):	7.288786640552533
Encrypted:	false
SSDEEP:	384:cd0+G0S7ik0+Gyvn/WiMtYNg70V9MJumICQ5vikRVXd:c2Z7IyvStYyyMJumIDNi4Xd
MD5:	541333C1BF8B2CEF44280895C687E616
SHA1:	FA607935AC163F1A1622E651B30072F7D9B88E8B
SHA-256:	1EA89EFD98F57BAC3D74757D3E2DAFCC67CBB6A42954D133895EB2021AB9EB72
SHA-512:	D1FF4BB4AA6F456DAEABEFDD6767F0CB33836AD1615D6F8B3FE2220DDF2A21A9FB3F3029E2C63F3559ED6E917FA7A50AD2639BAF8D6A86C2F10B0EA0071F9A88
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:01:26 19:25:26..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..%)L.z...$..)Y._./O.d..n...D.4......n.=].j....Z]..V.,..+..^.....^......?...].&n6m..[.......sO..H..lJI.EK.R.$......I$..Y?X..zV....y...;G.....E.:.._..x.3

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:08:03 14:22:28], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	27543
Entropy (8bit):	7.5186958922058285
Encrypted:	false
SSDEEP:	384:N/E8ERFN7iiE8ERFysnWl7l2QkTtbe44HlQd5mCPrCrOpBQ1Egeyw5BusXCSyx:N/BgN7RBgysMstyRC596OpBcw5w7rx
MD5:	6C998A0F73F491065BE03B99438223A8
SHA1:	8FCB1AEDE5B6EC551F66D3D693C53BC5105682BA
SHA-256:	4BFFC13B9E8D3570C96C95C1D83020D369D72E45B27616ED4BA17EB10C669DFB
SHA-512:	6E0545D912BBA8242F2FA31F2165694CABC89D1557C696C50DE45201344B23F9285E912285C11C058A89BCD58F87916F95E381665F7DD56BC7EEB0E865ED6B26
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2018:08:03 14:22:28..........................Z...........p...........................................&.(.................................r.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...in.....xh....c...m...+Qo.c.....k.o.v.....G......Q/'s.s.....op..J........Y..?...k....2...y....Kd....;..hs..`.....7c..v?W..Q.F.uj..V6.q..........M.F-u..

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	4790
Entropy (8bit):	7.812383381214546
Encrypted:	false
SSDEEP:	96:lY2MNoe7/On1zkR1oLvC0NCarXQqHW2f1qEN3QqYovmhEg:lH1QrWvvN9Tz22f1qAAhb
MD5:	DCF4CF2478A13E1EF8FD6B3E81CEAB3C
SHA1:	B0C2FEDE6220F9F83741C98D1055D3755B87D14F
SHA-256:	4D4BC2B2B5569D33BC5441BBF2A2DE007A3A2DD3F90D5F99DD4756F4910D4D15
SHA-512:	6D479EE78377E39E2B365D1E6B10E17B77042EDAA4155D05A68CCFF4F91120BF0D3A7AFD2E3C5109D4782A2453B42B688E06B251735D19B1D12D455B93F7BF90
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/38472/Mathew_large.jpg
Preview:	......Exif..II*.................Ducky.......F.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:208289B362DC11EA8CFEF0F5A4CE459C" xmpMM:DocumentID="xmp.did:208289B462DC11EA8CFEF0F5A4CE459C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:208289B162DC11EA8CFEF0F5A4CE459C" stRef:documentID="xmp.did:208289B262DC11EA8CFEF0F5A4CE459C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 131 x 32
Category:	dropped
Size (bytes):	3827
Entropy (8bit):	7.796275135006173
Encrypted:	false
SSDEEP:	96:a4x/isCzzSevsh+RiBDC6f7HSbokPGWOO:aqKsCz+D+RiBDxjybokNOO
MD5:	966145B89F41DE3EE21476A8CFD7C7FC
SHA1:	0BCA107221D908CC4ED81D75EDF47F8EC46008F3
SHA-256:	1449346947BA3D2266F702CC5488E1A0FB75EF67CDB105D5DBE178EFF0AF14B2
SHA-512:	E35226EABC6E043EECC4D2F6188790457456FA621014240956754696A316BD9C4E6EAE9EE1AC139ABFDEB2006AC337EDF0F09BDABF9BC0F8C605B85A46292BCF
Malicious:	false
Reputation:	low
Preview:	GIF89a.. ..........\........///..s...}.............................F..9........'{...............d..S..{....j.................................../..%.....+...ls\|......................A......8..........*..N................_...............................FNX...u.........LT_...\eqq\|...&T\hcnzkv.............k.....DDD.................................B..............UUU...X_g...sy...}..........www.....qz.y.......................................dku........inu..x...\|.........fff....X....]dm...........................?......0...x\|....................................................................................j.............Q..m.....b....o..\|..m......7....................................s\|.............!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.717267977745945
Encrypted:	false
SSDEEP:	24:7HXU7YeNGoYcd1XY71YysxNDSSLmsamKpDA//////XNgz3e8/RuesN:7yf5powAng
MD5:	4DB389B09A6C39899EFC47C67010D7C4
SHA1:	F8B3D61052ACC4B6975BF61567BA30A54062DA94
SHA-256:	F16C92D84C9623894F577D7A57D97C02672D9884DF417F7B72BCD60F644C5D76
SHA-512:	CABECD2AA3A25EC0542BB99FD81BE990A27B4A0A7F783B753AF785B7FEABA5C5B021AA7414CF4CBD1E64478A66F3510A9EC2FE56B70478392702128035FC2D1B
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/favicon.ico
Preview:	............ .h.......(....... ..... .....@...........................................D...D..+D..#........................................D...D..YD...D...D...D.......j,3Ej,3.j+3aj,3.................D...D...D...D...D..]D...D.......j,3Aj,3.j,3.i+3.j,31........D...D...D...D..-....D...D...D.......j,3'j,3.j,3.j,3.............D..oD...D...........D...D...D.......j,3.j,3.j,3=j,3.j,3A....D...D...D..=............D...D...D...........j,3.....i+3kj,3.....D..5D...................D...D...D...................j,3.j,3.j,3.D..[D...................D...D...D.......................j,3.i+2+D..]D..s........D...D...D...D...D...D...D...D...........j,2.j,3-D..?D.......D..OD...D...C...D...D...D...D...D...C..!....j,3.i,2.D...D.......D..!D..gD..gD..gD..gD..gD..gD..gD..gD...i+3.j,2.........D...D..9........................................j,3gi,3[........D...D...D...................................j,3'j,3.j,3.............D..!D...D..)........................j,3Aj,3.j,3.....................D...D...D...D..SF..1j*35j+3_j,

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:01:25 13:38:33], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	24052
Entropy (8bit):	7.3223332355771245
Encrypted:	false
SSDEEP:	384:o0qztZHC7iUqztZHCvnpliwYNg70VXJpULCLpadq1LtxRCW8rKKPC/zwN2q1qzc/:o0AtZi7DAtZiv5YykX+CVr5t3zi5a/c1
MD5:	887F15904EB2C8EB8B0FE97B05637BD6
SHA1:	0A3D5A80714F3EE26CFDBB548D99E1A9B76E2C76
SHA-256:	47BBB8246FF6B6D7A702EFB22C0330C91D614DA7C111ADD4477B6C5855A47AEC
SHA-512:	9A81E98ED14EC32895D8FC20A7ECE8D477032DE5C4527C2AFA103DBBC387C69F881C78428FBF06D37954A30B4EFB7C165685A3B9549378EA189F8A1EC3943E51
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/62614/Terry%20Winship_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:01:25 13:38:33..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...{.5.......(....h.~.tV...Ope..7.!..Y.].-....KK.4 ....c....Q...7h\|....zj/pku%n.'............R^@hWk..O...#.N....G........J.....W..*,.........gY1vE..8...

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15224), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	56728
Entropy (8bit):	5.37979750178288
Encrypted:	false
SSDEEP:	1536:lzrFOJ958Li0W5mzyBelpiL7JPSUGU9UQUPG9GIj/nUs:lFW8LX8HBelpiL7JZd+TPGQIjh
MD5:	0C4AA95E33665CAF279056B4AE931D15
SHA1:	CC1E3065F0D81ECFF83CDD4B5BA1EBD86440B0D6
SHA-256:	E5FFA092FCF7CB6BC252F451FC2A397ACA5EB4772F826FB9928420318AF43DF6
SHA-512:	1437D75996E9A708B64688CB73759A739394A359986D9CDB8365A11F16F7C440C618D97B81C7715980907BE60C905048F37204D1BF7EE2B516E4774AB6CE1DB6
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/recorded-webinars
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Recorded Webinars\|Professional Recorded Webinars \| Courses </title>..<meta name="description" content="Traininng.com is a provider of world class professional training provider are offered recorded Webinars, professional recorded webinars and courses recorded session."/>..<meta name="keywords" content="world class professional training provider, recorded Webinars for professionals, online sessions of professional courses, recorded webinars and courses recorded session"/>..<link rel="shortcut icon" href="https://www.tr

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.787409488398751
Encrypted:	false
SSDEEP:	3:HkPSiCkgKT3shNk2h1A4tI6N49Gib:E1QXxXzFLib
MD5:	756D083AEB8C0C4B0FB2685E325F321E
SHA1:	2473C99814E5C1C205DCE1A31E03B07F8C5731D9
SHA-256:	68455DDA4E90C92D0DFA7EEB6B9C7AD4871468820D0BDB9FE32428FFE8C72556
SHA-512:	373103B61400F1DC7A42295894A7A6DAF8968AF412AD31A2CDB48AD379157D8EA079E83D17FCC186FA7B92659F97B21B1DD3BABDC67808E8A9C2DEFACBC38A1D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnFNaij2oThhxIFDYeN4HgSHgnTvDDFwlVXrxIFDRV2MuQSBQ0u1t2CEgUNzzmA4BIQCcr2ilVUlmbMEgUNkWGVTg==?alt=proto
Preview:	CgkKBw2HjeB4GgAKGwoHDRV2MuQaAAoHDS7W3YIaAAoHDc85gOAaAAoJCgcNkWGVThoA

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:03:06 10:29:49], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	23610
Entropy (8bit):	7.299100101525218
Encrypted:	false
SSDEEP:	384:3T0cmk/2y5J7iU0cmk/2y5DvnwrWjNJUrJiEYNg7YIhMtWQfu4aoDMHTnpWzENs2:3zmk+y5J7xmk+y5DvmYyV0XuxoDmnphJ
MD5:	5136AB760A8B12F40427974A9ABA3D26
SHA1:	525995CCDDC0A53DF7C349FA23983A2C5941E585
SHA-256:	0AE1A3805C1AB69A26514D10EC8C0D3A3A0901F492592AB6A065667338955C20
SHA-512:	3DE6F17B38148F6C09535FD215C18FFC42387361D798E06EF5BCA8F499FC1CB0F35E26D3AA272DCE7E266207391F22446242AA24FE1B72B3A3397C2770BCEB32
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:03:06 10:29:49..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..$.,...k.GN63......?.5....X.h/...{t}.....#'.u.o.fM.....?&'..G.^[Q....{Z.u.......;...xB....?.....}."..6..xo...=#.cul6.Q-.en.Lw.9y..A.......V..u..u6..N.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:03:07 00:51:55], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	24192
Entropy (8bit):	7.331830363978246
Encrypted:	false
SSDEEP:	384:7fhCQ+y7iHhCQ+CvnMRiAYNg7YD5hVWEleDUoeOnz0mYkjgmFyF17U8:7fhC67IhCKveYyihgKojYmYkju48
MD5:	81B75C217F1907FA4EFD2611F012389D
SHA1:	86CCE5F7AC6622312A875DA13814F8AC8330CD2E
SHA-256:	FCCB5877FCB8134933D69AA98267A32DC4D21EECF6360D9EE7D6130B1413556B
SHA-512:	88A72B62B4C1B15461B34A6BA87C5CC37163BBFA1296CE44ABEF3FADCF49393FD00369ECD78D4EF46E1B0751823DDCAEF9920B6D31B5070C2DAE450B70554A39
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:03:07 00:51:55..........................Z...........p...........................................&.(.................................L.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..c.BD.....D.I.1...5Y0.:5>.y.Q\..O.h..asY6..n.d....6.>....'...@[&.G$.g.......:8}(.g.c...^.ww"`.......-.n.+..U.g...9\P.[..b_M{..T.....,l....X..n.~!wUaT....

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	992059
Entropy (8bit):	5.51512413886698
Encrypted:	false
SSDEEP:	6144:+MjOm+cvh9e8/4qAhVStRiX0xpVCrg+6GbC2BDtNMGDGWdwD6TwFfy9MOQaTgU5G:7VUktyeG4be1chePwAG3bmFy+fo
MD5:	3784CF5E1DDD3A68E335F3BB4A5E2FCD
SHA1:	617BEBEE8C2ACFFF41763B25AA8E2B65BDEBC1D3
SHA-256:	7F4AC95D1AB40C0D78D98ACF1DA862B901CE896B43F738C7B1731C986A612BF4
SHA-512:	A53D86A35C099EC66735015D479ABA8865D1AB318AF49E88636CF608CEE12677781EE38CCD09CC890F70EDEEABA545591377D7318225196CD9A20DAD3FE0E3DA
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={20916:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(15826);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(this,arguments)}const i=e=>{let{title:t,titleId:n,...i}=e;return o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,focusable:"false",viewBox:"0 0 12 12","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:1.25,d:"M3 6l2 2 4-4"})))}},18266:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:06 14:15:28], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	22167
Entropy (8bit):	7.240323584002904
Encrypted:	false
SSDEEP:	384:3kaaPH7iZaaPVvn0WpSiPYNg7yUZS2Q8ILHAKBhk9ZjGdTV:3mH7yVv0WPYyJo2Q8EHAKkRGdTV
MD5:	0FC7657D16D93A0CA1777F806250AEAC
SHA1:	C25F32E1A66D89E52D6A60AF661F4298A2F66F20
SHA-256:	F16037F5014A448C5B3361147FBE085BBC296643F6F298E133A4A1AA337F3189
SHA-512:	68DE5183100EA4C3C3AA41D1603BFDADFB770FF04E63CBDC07C781F92EA49A09C5CE06E1F24A842110B51513D2539BF94D085EE91140D6537BA7F46B81DBE0AE
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/60042/Stephen%20Abramson_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:10:06 14:15:28..........................Z...........p...........................................&.(.................................o.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...[+:.a..gf.....9.G.i?...~..d.L.I2O$.h...C&.zl.....s...Y.v&.....g..3._Z.^...`....u.?.\.Kd...9d.$a...U...\.Zh..6.H.....VK_5....$..3.v.=.=....+.X.y...

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 114x114, components 3
Category:	dropped
Size (bytes):	7243
Entropy (8bit):	7.906223025011612
Encrypted:	false
SSDEEP:	96:mEeh2R5ICOBdooQoNGoarAUSlcoouaB2KbEVV5GP7fNrMAZuV5JRiYd/3bpVK+YY:m34DI/oD/OYuQ2hXirp8V5JRd/3lYE
MD5:	3002EDF01883FB59408B44FCB1277930
SHA1:	306096C20FEB35E487BD302A404D29337E129E15
SHA-256:	59055F27423383458966A208F1AE39188E522D68983C1B5AFF871471FC93EEB2
SHA-512:	4E368ABB4A368CB7FF358CF76C085EA39506C50457627FB0B835666EDE496F8E8CB830E04C8E3BB7F877F0C0E94801B50D0E90D3EB2A2CFBA973E9F4F92E75EF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................r.r.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...I.Z._7.eW\.....M.b>Y.G..2...%\h...../...k.....g2L.........J...z..yjw...mo...>.inS..k..>..$....N7r..W....q..<;....kv.0..3..6.3.&.n.K....=...o...........Z.4..G%....a.).D{...py..=....p...-k....,..m...>.....!,V7W..Acgb.[..}...I$........\|...l<3.mrmB..e....i.o$...*.....?.)....o......b..k..{}i.k.".q..`.......8%...0..QF".M.\...........{o..iz..t}...[.=.=...

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=507, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=606], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	25279
Entropy (8bit):	7.381767379849093
Encrypted:	false
SSDEEP:	384:RLT7bEpjc7SOLT7bEpj79snyFPrP06fw6M5EfG62t6t32WNqX2KVcJz20PL9qo7p:R3Epjc793Epjps+D6Efpt7rJBqo7p
MD5:	092CFFEBCF1687E3977449E6D114A49C
SHA1:	E291DF3078D9E7B97807E8820463F8D6F3BFC049
SHA-256:	366D63370751481BD2E88D56D4D9389B076DE85DFEBF3798C301AE66037DBBD1
SHA-512:	363F4E80B41CC28366FA3C8638F704051082107C26BFE28C749795EC46A1B9E55B285CEF24F033B6998286CA40CC00B23886BBF834083B07F2EFFC8FFC1BFE2C
Malicious:	false
Reputation:	low
Preview:	.....=Exif..MM.*...............^.......................................................................................(...........1...........2...........;.................................4.i.........@................'.......'.Adobe Photoshop CS6 (Windows).2023:12:06 18:05:00.Varsha Mishra.V.a.r.s.h.a. .M.i.s.h.r.a.........................................................................................................................................................................................................................................................................................0221...............................60..........60.........................Z...........p................2023:12:06 17:38:57.2023:12:06 17:38:57...................................................................................................................................................................................................................................................................

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:02:23 16:11:38], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	27419
Entropy (8bit):	7.430320188226922
Encrypted:	false
SSDEEP:	384:A8s918LO7iUs918LRvndGiVYNg7YuXCsWL5AicSc8WnZGIvGb2Ry7N2jc:Ar18LO7O18LRvlYy3p0AiEcIvU0I
MD5:	33D0CE4727EAB18B1665C8CE90ECDD8C
SHA1:	E73980321ADCE6B1B46B60461420AA292B05215F
SHA-256:	7F653F5D0CB1650DDD0365D28765BCBFC0D21B2DE20DF1E28DD48A433FD3D658
SHA-512:	14A68444A54128D5D794980FEBB53B22CF7C29903DDBD6C88AAE18750F1B07D273BEBB7621A7E39D98CEF8244B8EC88D43041E11DF4B339A42BCB346BD1BE474
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/63240/Amy%20Brice_large.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:02:23 16:11:38..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...kc]5.I...m;..N..{$;.A..S9.h;yNbY.kI$.9=.NG.<,{6...x..7W63......y.cW.w".z.27.9.G.ti..! N..N......XL4D.>K`..-.u\.......at]9...h.u<.c..NlB"..}.P<Jv.<.t

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnK9opVVJZmzBIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1725), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35188
Entropy (8bit):	5.387437662928214
Encrypted:	false
SSDEEP:	768:lzfdFqT1Ei/bG2NynQ3VLjgoR39wVjtLRDO07ea7TNUdUix:lzFFE1Ei/bG2Na6LjApea7TNGUs
MD5:	BC65CC35FD64066B20E4749FEC21C3C4
SHA1:	076E47B2DDF38476E75A51FC6DFF8FA0F552C849
SHA-256:	7C15B79D96EB0771AF82C67635155E2DD6494498D76FB712589973CA1FFD33B8
SHA-512:	2D676B22F6F385721D8E08C00890FBB7A38D8C6F6A3DE8779F21FE0CA46B22A0FD8F339D9C7CE58ABD320B3D5C1CA00FDBDBEFE6FC259A4FBD4FC7055E104ECA
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/webinar/growth:-transforming-issues-into-performance--206515live
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Growth: Transforming issues into Performance </title>..<meta name="description" content="Have you asked yourself why you have been appointed manager of your team? Your boss probably wants you to ensure that your team is going to perform to its best continuously."/>..<meta name="keywords" content=""/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/jquery.min.js"></script> <script type="text/javascript" src="https:/

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x902, components 3
Category:	downloaded
Size (bytes):	71972
Entropy (8bit):	7.512291866224791
Encrypted:	false
SSDEEP:	1536:n8hWM9uQ7pKFCXDtWS0mnV3wWWj9/LHq+GM7aECk0c9q:8puQ7sIz3wBj9/W+GM7r0c9q
MD5:	C2F4410B135D41A42F6F6E27075E5D72
SHA1:	220312DBC350FE436277B121C350B5661ADC0C04
SHA-256:	7D8D5B0D2F0A9C1F0EA89A56B6A6C98C85A68793D27DB266A3FFCD0CB7892D78
SHA-512:	95A82AE9B36D61DF1BE3B6B6530C4C05F5A1141A503B8BD60677078A6A266C018686DE1E8EAACC31BC47F4F0DEBB4532BEBEF837CC72E2C8739DD1DAEBEFED91
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/slider2.jpg
Preview:	......Exif..II*.................Ducky.......<.....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C0748420FCD77D4CC7BE9109CE8409AA" xmpMM:DocumentID="xmp.did:2722BB0382C211ED809CDBB326140FDD" xmpMM:InstanceID="xmp.iid:2722BB0282C211ED809CDBB326140FDD" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:155DE80EB482ED11B267EC77AA4826E0" stRef:documentID="xmp.did:105DE80EB482ED11B267EC77AA4826E0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13551), with CRLF line terminators
Category:	downloaded
Size (bytes):	74744
Entropy (8bit):	5.148881689350775
Encrypted:	false
SSDEEP:	768:P+81RH9S78H9S79lGm6zp9oaW80V5tjBiPfANZ86Cjy77GHGLieQBG5smtBVUs0s:PnRH9S78H9S7WMaccQeeQBcUNKzB
MD5:	D5A463F228DBC1CF7D6B6DC4B73594B1
SHA1:	6699F0D4C3612D1CB011678FCDA076574CE18629
SHA-256:	84E639DEAF8A08CBCA9FEF0E5BB8729E9E7B7EDB67EDCFA6CCFD837A1EAA94AC
SHA-512:	FC8319199A937F9751C6BF826006407848E80F4DFDE16D9704F9BFF08DE880C94EB69D10E93DC9CED60379A3551B847E3EB9D321822E8BD8A91CC92755EFDE5F
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/css/extra.MIN.css
Preview:	.bootstrap-select{width:100% \0}.bootstrap-select>.btn{width:100%;padding-right:25px}.error .bootstrap-select .btn{border:1px solid #b94a48}.control-group.error .bootstrap-select .dropdown-toggle{border-color:#b94a48}.bootstrap-select.fit-width{width:auto!important}.bootstrap-select:not([class=span]):not([class=col-]):not([class=form-control]):not(.input-group-btn){width:100%}.bootstrap-select .btn:focus{outline:thin dotted #fff!important;outline:5px auto -webkit-focus-ring-color!important;outline-offset:-2px}.bootstrap-select.form-control{margin-bottom:0;padding:0;border:none}.bootstrap-select.form-control:not([class=span]):not([class=col-]){width:100%}.bootstrap-select.btn-group:not(.input-group-btn),.bootstrap-select.btn-group[class=span],.bootstrap-select.btn-group[class=col-]{float:none;display:inline-block;margin-bottom:10px;margin-left:0}.bootstrap-select.btn-group.pull-right,.bootstrap-select.btn-group[class=span].pull-right,.bootstrap-select.btn-group[class*=col-].pull

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=523, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=460], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	21478
Entropy (8bit):	7.2260121983548915
Encrypted:	false
SSDEEP:	384:CdVyuC/7SRudVyuCAsnjubPGZkya9hRnB9EIlqKOQYBvjnqg5RFyYq1:s8ui7R8uFsj/KJn8IlqOYL5RcYq1
MD5:	AE217142082B81AA210F67B0445E5B27
SHA1:	5F8E8D77F5F4E8AD17493E460FB6323834BF1151
SHA-256:	46A9C5FEE45D4CC3C3DCB18E51CFF471E4B63F310C51A1667605F24A1EC652D9
SHA-512:	F952A87BAE4AEEBA41E6DF572801DAB1BDBC48C1D5583F5040E4C70AA359510076D38DB3578D539F32F418E89A07884B7850C43B9DD66C7A199AE2E4C84FD6B4
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2...........;.................................4.i.........@................'.......'.Adobe Photoshop CS6 (Windows).2024:01:03 18:30:04.Varsha Mishra.V.a.r.s.h.a. .M.i.s.h.r.a.........................................................................................................................................................................................................................................................................................0221...............................11..........11.........................Z...........p................2024:01:03 18:28:15.2024:01:03 18:28:15...................................................................................................................................................................................................................................................................

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=151, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=200], progressive, precision 8, 200x151, components 3
Category:	downloaded
Size (bytes):	47147
Entropy (8bit):	7.750542654207478
Encrypted:	false
SSDEEP:	768:f5BFrkO7OBFrkpqJzgi6fkBegHVAAxq5pw+Jl/UNesvJzr0Gnw8Pbp:BBFrKBFriqJzgioYg++P/i/vJzrAsp
MD5:	A88DCC6AFA78CEECFB509EA8945B4245
SHA1:	1FF907156815F9FBFBAFF3881FB0371F7D55BEEC
SHA-256:	95CB9F896C83AB0B9FD9906263A72E6AC0246969553089DCE773741F78FC56C2
SHA-512:	325494C01D623EB8D66B81AE4878BDB7034D11EE90923B6C2F3070784AFBA7E569E0964A3F2D302A76CD2DB65FEAC2798CC6F25DDBE15E6291BFBC397DD5F905
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/SHRM-Recertification-Provider_new.jpg
Preview:	......Exif..II*.......................................................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2023:03:03 12:07:10.............0221................................................................n...........v...(...................~........... .......H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................y...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.U3..mc.3.e...M.....I....]x..Ckm..?f.....?..W...7........j..;.?.#..?..o......

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=104, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=104], progressive, precision 8, 104x104, components 3
Category:	dropped
Size (bytes):	30802
Entropy (8bit):	7.592645388211117
Encrypted:	false
SSDEEP:	768:iinhZ7WinhqsNR3AtrkmzKdHecrh6CcXJ7phgcpMZU:HnhZnhqsN230HbrhvGpSU
MD5:	F89B3801AFCD2F151F62B6E9C4C5F395
SHA1:	C5766C04B3CBED717F15F478EB77ED552C782C5E
SHA-256:	F8F0C0E2B688B4660B7EB7772B1346E9D45D39BEDAC0C1C788931EAE2F3AB96A
SHA-512:	6F9F553A3C7F1795CE61B8D23EEAD334D469F1BD8EF3D7A8474002E3AEF7CE5A71A27D5ADF6BE2694E4278D54E2E0D78D7100953FF8DE98D1D8D5D2E89BB07EA
Malicious:	false
Reputation:	low
Preview:	.....VExif..MM.*...............h...........h...........................................................................(...........1...........2..........i............. .......-....'..-....'.Adobe Photoshop CS6 (Windows).2023:03:03 12:03:09.............0221.......................h...........h...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................h.h.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.L.5./y.kD..@..RR....j.]-..r2..=>.....~.....o...KrK.z]..Q..[".\|[.....u..c..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17852
Entropy (8bit):	7.960418610692212
Encrypted:	false
SSDEEP:	384:u0wAZRmwWQLZ/3iNR4mYiJermBEbiaLwysQbx6kS8Xh:usSQdSf41rm+9HZIL8Xh
MD5:	EE9DAB08802DCB6C8F538E242558925A
SHA1:	69AA4BFE47B1F9B1F004E2DC0936DD5D92A00E8B
SHA-256:	680EB0BC6A57B460C09468C37ECC863F476B4D604EE368129E2EB24694B98727
SHA-512:	C91E8EB1FDF777832C4D845622AB65F5AD0B929608B08D55CF5F0C645DAD133CA3BBEEDDECC4A137FD823ACE0F68A1A539CFC014D57F1F13F5AAA89548FA01C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....pHYs...#...#.x.?v...MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2020:01:14 17:56:10], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	17180
Entropy (8bit):	7.124041184282008
Encrypted:	false
SSDEEP:	192:J6/K8XK8TrQy4l8UL/K8XK89cknK5qidtq+Ra3cW2p4HZVKPSx+:J8KMvv7i3KMv9vnKkibscPeqKx+
MD5:	C4AEAE741C04CBB0F8FFE08B0BD14FF7
SHA1:	46B0729D54AC9E3F2681FF799068E7A54FB92261
SHA-256:	979D24230832755A7F94E21D443D5DF0E2D8FAB8ECF0BD48AF32B7D4640F6FAA
SHA-512:	FDA89D00F398661F193DB29A8D82CF6799E911F053720A621213EAF40E5142231D8C998EFFA21A9176CB4AF7207AA641E7CFDCFB315444732EF993B5A2E3DB70
Malicious:	false
Reputation:	low
Preview:	.....KExif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2020:01:14 17:56:10..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..4...D..T,.=.r.X......Tr.mm..4O$.EM.Xc.....{......s..u.W...S..4..i5T.................ncz.c..5...^.....5$....c.quL...3h.G.R..\|W>.W[S.a$6.'......E...V

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	21494
Entropy (8bit):	5.2845423719217095
Encrypted:	false
SSDEEP:	384:lzypDqlh/qhvf2KE3inK9Mj7gGigRguOvWtdUix:lzyFqlhyhvfhE3inK9o7gGigRguDdUix
MD5:	66205E51780488127C2934A61C43D65A
SHA1:	E9C4CED4C76FD183144DF437C7445902754641BE
SHA-256:	10772720F5211872305D0EBB5143F61ACEBC6E7A3C45E7061C21CB5D9D833C1B
SHA-512:	B0A58FB061DF70BFDFB89E606D6139CDDE7A7000DB70A7F2A5AF3EA7352E2EE4EB2C1821FD7E99A3DDF5CE1F03E5BAAF2501B91DA66F936AE56D15FA6E3B7246
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/speakerprofile?speaker_id=62614
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Compliance Experts – traininng </title>..<meta name="description" content="More than 100 Compliance experts across industry and across the globe"/>..<meta name="keywords" content="Compliance Experts, Medical Devices, Pharmaceutical, Clinical, CAPA GMP/cGMP Compliance, ISO 13485, OSHA, Consultant, Consulting, Quality, Food Safety, Risk Management, 21 CFR Part 11"/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/j

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=104, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=104], progressive, precision 8, 104x104, components 3
Category:	downloaded
Size (bytes):	30802
Entropy (8bit):	7.592645388211117
Encrypted:	false
SSDEEP:	768:iinhZ7WinhqsNR3AtrkmzKdHecrh6CcXJ7phgcpMZU:HnhZnhqsN230HbrhvGpSU
MD5:	F89B3801AFCD2F151F62B6E9C4C5F395
SHA1:	C5766C04B3CBED717F15F478EB77ED552C782C5E
SHA-256:	F8F0C0E2B688B4660B7EB7772B1346E9D45D39BEDAC0C1C788931EAE2F3AB96A
SHA-512:	6F9F553A3C7F1795CE61B8D23EEAD334D469F1BD8EF3D7A8474002E3AEF7CE5A71A27D5ADF6BE2694E4278D54E2E0D78D7100953FF8DE98D1D8D5D2E89BB07EA
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/hrci_approved_seal_new.jpg
Preview:	.....VExif..MM.*...............h...........h...........................................................................(...........1...........2..........i............. .......-....'..-....'.Adobe Photoshop CS6 (Windows).2023:03:03 12:03:09.............0221.......................h...........h...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................h.h.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.L.5./y.kD..@..RR....j.]-..r2..=>.....~.....o...KrK.z]..Q..[".\|[.....u..c..

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23643)
Category:	downloaded
Size (bytes):	23805
Entropy (8bit):	4.76012461649921
Encrypted:	false
SSDEEP:	192:nqhHZX8W+ab2edrKeTUKuErArKlcZJVrJ3ee+cR6waYm215bvfhf5DrkHUasT:qs5yWeTUKb+KlkJ5de2UYmyTfhYUasT
MD5:	EE9FB8A8E48B55417C3029082014F70F
SHA1:	D6C12AC5EE41F82F8C920113ED2346DEDFAC142B
SHA-256:	CB185F35A94987448C5018D5B137362D4B264163B7761E7AEBF4AAFC2EAC1AA6
SHA-512:	3175601B92CA295302E663FF041609C24DC266EAA7B349E9EE4B5D17F7C727B0FA32FAE304379A32EA86375D643106C37965396A9275E70203DAEEB5F91A9661
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/fonts/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('/images/fonts/fonts/fontawesome-webfont.eot?v=4.3.0');src:url('/images/fonts/fonts/fontawesome-webfont.eot?#iefix&v=4.3.0') format('embedded-opentype'),url('/images/fonts/fonts/fontawesome-webfont.woff2?v=4.3.0') format('woff2'),url('/images/fonts/fonts/fontawesome-webfont.woff?v=4.3.0') format('woff'),url('/images/fonts/fonts/fontawesome-webfont.ttf?v=4.3.0') format('truetype'),url('/images/fonts/fonts/fontawesome-webfont.svg?v=4.3.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;transform:translate(0, 0)}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=507, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=606], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	25279
Entropy (8bit):	7.381767379849093
Encrypted:	false
SSDEEP:	384:RLT7bEpjc7SOLT7bEpj79snyFPrP06fw6M5EfG62t6t32WNqX2KVcJz20PL9qo7p:R3Epjc793Epjps+D6Efpt7rJBqo7p
MD5:	092CFFEBCF1687E3977449E6D114A49C
SHA1:	E291DF3078D9E7B97807E8820463F8D6F3BFC049
SHA-256:	366D63370751481BD2E88D56D4D9389B076DE85DFEBF3798C301AE66037DBBD1
SHA-512:	363F4E80B41CC28366FA3C8638F704051082107C26BFE28C749795EC46A1B9E55B285CEF24F033B6998286CA40CC00B23886BBF834083B07F2EFFC8FFC1BFE2C
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/61394/Peter%20Christian_large.jpg
Preview:	.....=Exif..MM.*...............^.......................................................................................(...........1...........2...........;.................................4.i.........@................'.......'.Adobe Photoshop CS6 (Windows).2023:12:06 18:05:00.Varsha Mishra.V.a.r.s.h.a. .M.i.s.h.r.a.........................................................................................................................................................................................................................................................................................0221...............................60..........60.........................Z...........p................2023:12:06 17:38:57.2023:12:06 17:38:57...................................................................................................................................................................................................................................................................

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 78, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13472
Entropy (8bit):	7.968977396799311
Encrypted:	false
SSDEEP:	384:/IDUYjYNOD5ZycMIYcTHsGTxyHaw1RzxG1QuxY0P:/uSOP3bqawHzxwQAP
MD5:	94E754D5FA2762591663C594FCAB49CB
SHA1:	12630FD79424F646A33AABC14ADD1D622B00A020
SHA-256:	D989B811FA3BD9936296F1E2FFB318F6A02764368C323AC3E6D2116F0E847F42
SHA-512:	FC8D18FD2A4B6125A28B2D59678387162878684A431C6ACD3390843EB07C1AD49AF7B6305BF59631D8C6AEE28AC98FF2AD6F7554555B7E33D902F69CB411FDD0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......N.......<M....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID="xmp.iid:E655690389A711E89ED2FF6EEB81D7D2" xmpMM:DocumentID="xmp.did:E655690489A711E89ED2FF6EEB81D7D2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E655690189A711E89ED2FF6EEB81D7D2" stRef:documentID="xmp.did:E655690289A711E89ED2FF6EEB81D7D2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....1.IDATx..}.\|\.....E]..Y....n..`.K..aK6\|......&.../_>.d.f.M..fIX....H(6..\...K...F....s.#?..I.....zf^...=

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 328, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	25358
Entropy (8bit):	7.965637161072627
Encrypted:	false
SSDEEP:	384:PhkNNMNp/x2BzNk8oZ2S9ILSlmvVvrxWwwKiynfFQn5As4ILhs6DmY4gT8ohVelT:5qNGIYZ4Limv8Ki+tQAs4Yh/sgT8g4T
MD5:	535D0AC8BA86D81CCBCAD0EE8A71B984
SHA1:	B8C5DC273775BB3359A6C92DFCF6D83EFA309E42
SHA-256:	8ADA890F94EBF96DA6DF4F70D6DF267A0F8AA3943D91B9D857F740C396AF01D8
SHA-512:	6EC67B1FCC3B78580D602C2FD89485DBF8993B255CBAA0E6D676BF516253E5F82E1E5F191B0BFFA2216566831BF83A1C69FBFF52BF141DBD3C578C285C083414
Malicious:	false
Reputation:	low
URL:	https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png
Preview:	.PNG........IHDR.......H........A..b.IDATx..mn.0..}..%M.v.....t.F...j@.nh..lw{~..>....TQ....bV.....u.m......1.........@]7q..........Oiat..slm....s..P3ND.. .=g1....".F....@DcLT....9b.z.....T.k..."...>V..S.1.Ny...Rp.l...].E...D$....Y_.....Dt:=.z.v.......BXk.Q.Q../9~...jH..d..<.c.bI...3:S~L...:...u..-.@..$ 3.`gO....r...=....K.U..\|'...1f+..N,.....i.c..y.K..J5..P_..i...\|.u.s. ........bX0[....v{f`.PH......\..?=..(.."..WL......".r]...E.1..[...@...D....w....%.6Ho.80.......r.....w.....v..C.y-rQ...8<}Pvg.]"2....B.......?R..'..K.T.Y..<...k.Dw^e..A..I....E.J.V....Z..},...j.u......cRk...9....^...n...M8.;!.g.'.$...(-..)...^P...R1+.....3">.T2.o..V..4&..N.RM...q.Q."..&Z.&.#B\.h`.B(..Bb.0..N.......~..Z......n...^E.B..5...<$.U.R.w.....M.=.....Jk.W...9..B_x..3...H.....:U.. ..J...oG..0...../J..jP.t.......-/.Y.../..(.....>-.h^y..=A..z..w+. v..!.HV..u.RU.G...5.{F.!.......3.../.L....@.F../@f.....J...z..II.N.3..Y............,......D...._^."..`5

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	dropped
Size (bytes):	25260
Entropy (8bit):	5.385459491165897
Encrypted:	false
SSDEEP:	384:lzP3pDqmAY31izru/+jwb9cs7jvWtdUix:lzfFqyUru/+jwb9cNdUix
MD5:	FBED7271A9B61BB85262F16094BABF87
SHA1:	38D287EDC5A10C204C8D1F5C586C3145DF90D626
SHA-256:	B0F42259E32E23A00CCC280563C7DD7F78B43DCF51708D0ACD333611B608C27F
SHA-512:	74E4D1B698088B868C7D6EEB7F573A58A363DEE591D82C649FC073F1EED85A39F1E3B64471BC16612CA8A659EC59969E33882EAA6ACD28D2238661FE2B9E3C6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Online Professional Trainings Provider \| Professional Courses </title>..<meta name="description" content="Traininng.com is best Learning destination for professionals courses and world class professionals trainings at affordable cost to achieve your goals in all areas."/>..<meta name="keywords" content="Learning destination for professionals courses, world class professionals trainings, professionals training courses, webinars, seminars, training course Online"/>..<link rel="shortcut icon" href="https://www.traininng.com/i

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:03:06 10:29:49], progressive, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	23610
Entropy (8bit):	7.299100101525218
Encrypted:	false
SSDEEP:	384:3T0cmk/2y5J7iU0cmk/2y5DvnwrWjNJUrJiEYNg7YIhMtWQfu4aoDMHTnpWzENs2:3zmk+y5J7xmk+y5DvmYyV0XuxoDmnphJ
MD5:	5136AB760A8B12F40427974A9ABA3D26
SHA1:	525995CCDDC0A53DF7C349FA23983A2C5941E585
SHA-256:	0AE1A3805C1AB69A26514D10EC8C0D3A3A0901F492592AB6A065667338955C20
SHA-512:	3DE6F17B38148F6C09535FD215C18FFC42387361D798E06EF5BCA8F499FC1CB0F35E26D3AA272DCE7E266207391F22446242AA24FE1B72B3A3397C2770BCEB32
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/55398/Howard%20Levitt_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:03:06 10:29:49..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..$.,...k.GN63......?.5....X.h/...{t}.....#'.u.o.fM.....?&'..G.^[Q....{Z.u.......;...xB....?.....}."..6..xo...=#.cul6.Q-.en.Lw.9y..A.......V..u..u6..N.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2849)
Category:	downloaded
Size (bytes):	52303
Entropy (8bit):	5.021817460352398
Encrypted:	false
SSDEEP:	768:nAzJAMo9RyOp6U3dvayiRvaDpBcmY3UY8Lc5m:nAKMo936U3xWaDpqPl8LH
MD5:	216628A349F305BAD1D825F9F5B0974D
SHA1:	714EC7D4E15AEBFC2CD69215A1C9835B1ED99532
SHA-256:	893C5DDA2D1412FD70290B7E64B2EE63E261F10FB073A3D25301A150913BA9FD
SHA-512:	F1A2FC9B4B9BCE2CDCFBF8CFD7C99BF72D6BFE6A8020A62A1023479576FBEA764026C66180128616AA1CA299816BA9DD50552C437C1845B226A3BD3AFE878302
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/js/owl.carousel.js
Preview:	;(function($,window,document,undefined){function Owl(element,options){this.settings=null;this.options=$.extend({},Owl.Defaults,options);this.$element=$(element);this._handlers={};this._plugins={};this._supress={};this._current=null;this._speed=null;this._coordinates=[];this._breakpoint=null;this._width=null;this._items=[];this._clones=[];this._mergers=[];this._widths=[];this._invalidated={};this._pipe=[];this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null};this._states={current:{},tags:{'initializing':['busy'],'animating':['busy'],'dragging':['interacting']}};$.each(['onResize','onThrottledResize'],$.proxy(function(i,handler){this._handlers[handler]=$.proxy(this[handler],this);},this));$.each(Owl.Plugins,$.proxy(function(key,plugin){this._plugins[key.charAt(0).toLowerCase()+key.slice(1)]=new plugin(this);},this));$.each(Owl.Workers,$.proxy(function(priority,worker){this._pipe.push({'filter':worker.filter,'run':$.proxy(worker.run,this)});},this)

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 131 x 32
Category:	downloaded
Size (bytes):	3827
Entropy (8bit):	7.796275135006173
Encrypted:	false
SSDEEP:	96:a4x/isCzzSevsh+RiBDC6f7HSbokPGWOO:aqKsCz+D+RiBDxjybokNOO
MD5:	966145B89F41DE3EE21476A8CFD7C7FC
SHA1:	0BCA107221D908CC4ED81D75EDF47F8EC46008F3
SHA-256:	1449346947BA3D2266F702CC5488E1A0FB75EF67CDB105D5DBE178EFF0AF14B2
SHA-512:	E35226EABC6E043EECC4D2F6188790457456FA621014240956754696A316BD9C4E6EAE9EE1AC139ABFDEB2006AC337EDF0F09BDABF9BC0F8C605B85A46292BCF
Malicious:	false
Reputation:	low
URL:	https://seal.godaddy.com/images/3/en/siteseal_gd_3_h_l_m.gif
Preview:	GIF89a.. ..........\........///..s...}.............................F..9........'{...............d..S..{....j.................................../..%.....+...ls\|......................A......8..........*..N................_...............................FNX...u.........LT_...\eqq\|...&T\hcnzkv.............k.....DDD.................................B..............UUU...X_g...sy...}..........www.....qz.y.......................................dku........inu..x...\|.........fff....X....]dm...........................?......0...x\|....................................................................................j.............Q..m.....b....o..\|..m......7....................................s\|.............!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.717267977745945
Encrypted:	false
SSDEEP:	24:7HXU7YeNGoYcd1XY71YysxNDSSLmsamKpDA//////XNgz3e8/RuesN:7yf5powAng
MD5:	4DB389B09A6C39899EFC47C67010D7C4
SHA1:	F8B3D61052ACC4B6975BF61567BA30A54062DA94
SHA-256:	F16C92D84C9623894F577D7A57D97C02672D9884DF417F7B72BCD60F644C5D76
SHA-512:	CABECD2AA3A25EC0542BB99FD81BE990A27B4A0A7F783B753AF785B7FEABA5C5B021AA7414CF4CBD1E64478A66F3510A9EC2FE56B70478392702128035FC2D1B
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@...........................................D...D..+D..#........................................D...D..YD...D...D...D.......j,3Ej,3.j+3aj,3.................D...D...D...D...D..]D...D.......j,3Aj,3.j,3.i+3.j,31........D...D...D...D..-....D...D...D.......j,3'j,3.j,3.j,3.............D..oD...D...........D...D...D.......j,3.j,3.j,3=j,3.j,3A....D...D...D..=............D...D...D...........j,3.....i+3kj,3.....D..5D...................D...D...D...................j,3.j,3.j,3.D..[D...................D...D...D.......................j,3.i+2+D..]D..s........D...D...D...D...D...D...D...D...........j,2.j,3-D..?D.......D..OD...D...C...D...D...D...D...D...C..!....j,3.i,2.D...D.......D..!D..gD..gD..gD..gD..gD..gD..gD..gD...i+3.j,2.........D...D..9........................................j,3gi,3[........D...D...D...................................j,3'j,3.j,3.............D..!D...D..)........................j,3Aj,3.j,3.....................D...D...D...D..SF..1j*35j+3_j,

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (307)
Category:	downloaded
Size (bytes):	22678
Entropy (8bit):	4.953647323512718
Encrypted:	false
SSDEEP:	384:Pv255q531JBZORCTn+jzaEz6G+9oruRF+X2Yz16IpHTeXFi3mI7wblZ8fm4xl6wu:3EsZyRCb+jzamYorqkXJpzpHTeZI+4fO
MD5:	2C874470C91B34CECA6379299B0B36C8
SHA1:	BAB20296CED590E8E73C461661C412D91ADCF16C
SHA-256:	C4BB2068985C2A2AA2997CBDD4E3D407BCED93AD8D9AB25D9F48716827F1BF9B
SHA-512:	E103FFF4E3DA426227EBF70A2B3BE31EF57E332B2B37EC1539491EFE95379F5F3E7D69FCA18DAB18E46CDAB32873829D0E31677DD0DC0D9535CC7B553E2DE5F0
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/calendar_date_select.js
Preview:	// CalendarDateSelect version 1.10.2 - a prototype based date picker.// Questions, comments, bugs? - email the Author - Tim Harper <"timseeharper@gmail.seeom".gsub("see", "c")>.if (typeof Prototype == 'undefined') alert("CalendarDateSelect Error: Prototype could not be found. Please make sure that your application's layout includes prototype.js (.g. <%= javascript_include_tag :defaults %>) before it includes calendar_date_select.js (.g. <%= calendar_date_select_includes %>).");.if (Prototype.Version < "1.6") alert("Prototype 1.6.0 is required. If using earlier version of prototype, please use calendar_date_select version 1.8.3");..Element.addMethods({. purgeChildren: function(element) { $A(element.childNodes).each(function(e){$(e).remove();}); },. build: function(element, type, options, style) {. var newElement = Element.build(type, options, style);. element.appendChild(newElement);. return newElement;. }.});..Element.build = function(type, options, style).{. var e = $(

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:12 12:02:26], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	25713
Entropy (8bit):	7.388367097956342
Encrypted:	false
SSDEEP:	384:I6cwh/06Yz7iFcwh/06YzvnzoiNYNg70VNi9oNHsG9W4QL9f3tBv+HVsx+MnEQbf:IzwFYz7vwFYzvBYygaoqGDytB8o+af
MD5:	6F87DF9CCC7D621302E6BBBD2EC71EAB
SHA1:	1EAC82FA122ACC088391AFE149C9B3036599D33C
SHA-256:	FEA132D71D270C2853B6FF9E26B00FBB7933B9CE39D130CA0224AB1DFB73DFB0
SHA-512:	294B1B23F5FC130B934E9553E3D52E5579242474832C388280A178FF0EA052B18B88FE3E5968958522748C5535262009EC3D9D05B2095012872091F99E6D2E97
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/60119/Sherrine%20Washington_large.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2023:10:12 12:02:26..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...8.rqQ..#1.O..`..vQ.5. ....z.q.u...a.R.uju\..P.s...)\.L.^.?.O....H......^..Z.%T.......-0D.?.......q.n....?...e._........q...o.a...E..<.z..6F.>5.6....

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	25170
Entropy (8bit):	5.381685271271364
Encrypted:	false
SSDEEP:	384:lzP3pDqmAY31izru/+jwb9cs7PvWtdUix:lzfFqyUru/+jwb9cNdUix
MD5:	DAA2DC271625F67C75F4026359A81998
SHA1:	33C7966C767EF2A1CB3FFB140A6138352EDEA206
SHA-256:	311BE93AD7CB66CFA4B9666860EBB1503F8731D85AF6B3BA89AE423B0D492670
SHA-512:	6B8206B83C7E459BE4A8CE9C21361C141CD3E479E525A1F84B04FE889C0089C2A401A17ADDA4129B9C35C62AB89316E2D5E2354E8768D2AA6D1F9C3810684AD5
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Online Professional Trainings Provider \| Professional Courses </title>..<meta name="description" content="Traininng.com is best Learning destination for professionals courses and world class professionals trainings at affordable cost to achieve your goals in all areas."/>..<meta name="keywords" content="Learning destination for professionals courses, world class professionals trainings, professionals training courses, webinars, seminars, training course Online"/>..<link rel="shortcut icon" href="https://www.traininng.com/i

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x343, components 3
Category:	dropped
Size (bytes):	48929
Entropy (8bit):	7.972635043206935
Encrypted:	false
SSDEEP:	768:jFC1ZkAiiiNpRCC06MvR9IYH5/g+AvfWJflDXDxQa52aqcI9aPCV0yyXVUv+D6u/:jA1aARACG29HH5/BAuvx5PCV5y2xuUoJ
MD5:	245404F90B7A732286EB1C7702B5DD51
SHA1:	89BC6BF1814E4590EF5356D58767B83E584B26D6
SHA-256:	6B6840A1C27ABA9A1C59DB80DCDA449BF3D96B4DA853B20EB04933ECAD147885
SHA-512:	310D318F2353E9482F42FDE12B139A1CAEC5840E504BFB0F3144DDBCA013992291CB127E0BB21C3DC6FF83BDBE3B839A4266AB08E6DDD934CF875D74134A1B50
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:FBC37D181F4611EB83A3A76A5AB8BC70" xmpMM:InstanceID="xmp.iid:FBC37D171F4611EB83A3A76A5AB8BC70" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="2B0F19367759B1F3AE544E437EFEB41E" stRef:documentID="2B0F19367759B1F3AE544E437EFEB41E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................W.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:03:06 14:12:24], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	27260
Entropy (8bit):	7.433047027989082
Encrypted:	false
SSDEEP:	768:mDWnfFZ7SWnfFdvwYy1rqFuDjPP44qui46/:oP2vwTDjn4uiL/
MD5:	867B62B32B93A1D764B9709EFF2EAA66
SHA1:	D5141FBA0A30FEF6936E66D7D67279F83E289B7E
SHA-256:	F8AD5D8DDF176CF28347299F0B6EE5CA8773566801E10A545F02AB4864D5D1BE
SHA-512:	1E8DE8F27ADD948535A71F1D62F475F47179DEECE254F157C9FD716875C2A50368BC94D2EA2C64E4B0ABF6E736332F846D3FEBED0218425C86530C3589CA5724
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2024:03:06 14:12:24..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....`d.....^.. ....}.".x...5...c.v..'e....$t..............y...?....'...\F.....R.]S2.W..Z.........v.lJ...n`.[..z..H...t0...S?/...t.6dg.pvE..y..;.YE.vSw...

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	38760
Entropy (8bit):	4.879766484797547
Encrypted:	false
SSDEEP:	768:Rm8egKDmxwWulIZwb4Clh2Z4yrAWXKR4+89eqIGgVrw:Rm/gKDmElGRqhSNrLX64h9CGgV0
MD5:	51FA036404D3DEFFBFCD2B4A9E8A4E35
SHA1:	4C1F3E858F2A1732659CF715D758520AB8589B7C
SHA-256:	F4E4B382E0D010220DD211E220F44F7F4A02E97A7226EAFF0BBE6D709227978F
SHA-512:	C17EB9EB141AB77967BA9F8EEA96C9AE1970C509B1A3A823A99AD5989574DE87D294903A500A6754F2BD6F7377FBBC51B86A243BC2EFFD9077DB498EFE4FF9DA
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/prototypejs/effects.js
Preview:	// script.aculo.us effects.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008..// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us).// Contributors:.// Justin Palmer (http://encytemedia.com/).// Mark Pilgrim (http://diveintomark.org/).// Martin Bialasinki.//.// script.aculo.us is freely distributable under the terms of an MIT-style license..// For details, see the script.aculo.us web site: http://script.aculo.us/..// converts rgb() and #xxx to #xxxxxx format,.// returns self (or first argument) if not convertable.String.prototype.parseColor = function() {. var color = '#';. if (this.slice(0,4) == 'rgb(') {. var cols = this.slice(4,this.length-1).split(',');. var i=0; do { color += parseInt(cols[i]).toColorPart() } while (++i<3);. } else {. if (this.slice(0,1) == '#') {. if (this.length==4) for(var i=1;i<4;i++) color += (this.charAt(i) + this.charAt(i)).toLowerCase();. if (this.length==7) color = this.toLowerCase();. }. }. return (co

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (364)
Category:	downloaded
Size (bytes):	18273
Entropy (8bit):	4.9030730049235745
Encrypted:	false
SSDEEP:	384:f1BCSDo4BtnBCEx1B+VrYB40074Ymh5oxbEJ2FJfJ8J4tJnJ2PJfJXJBJKtJ9WiC:frCSDo4BtnBp1B+VrYB40074Ymh5oxGV
MD5:	5D456018F8813416B669FFB535D84A73
SHA1:	072A074578FF851064DCEB6C37BF5D272B72F224
SHA-256:	E9B13AA049C6CEC2606025410265CD50A60B4DC2E50BEDFA14D5A9432A0BD307
SHA-512:	AD6E01CA93E825C18E3631B0126775C27703490832010796860DD6DE37C6EB628B4E791B2581309842F992B0BE6B10969FD3A9B37B2859621F0B63657F74BE26
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/selectall.js
Preview:	/. Licensed to the Apache Software Foundation (ASF) under one. * or more contributor license agreements. See the NOTICE file. * distributed with this work for additional information. * regarding copyright ownership. The ASF licenses this file. * to you under the Apache License, Version 2.0 (the. * "License"); you may not use this file except in compliance. * with the License. You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing,. * software distributed under the License is distributed on an. * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY. * KIND, either express or implied. See the License for the. * specific language governing permissions and limitations. * under the License.. */..// Check Box Select/Toggle Functions for Select/Toggle All..function toggle(e) {. e.checked = !e.checked;.}..function checkToggleDefault(e) {. checkToggle(e, "selectAllForm");.}.function

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 322 x 140, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	53790
Entropy (8bit):	7.99008935109019
Encrypted:	true
SSDEEP:	768:zq0tpzUfWl7CjpjPbqA9vYJp8EwcvAp+t9hxvNNnAoOnETnip:D4fWlmjJbTtYJbwc13fmoOn1p
MD5:	D908CE2B4C3DBDF5023AA98D9755F80D
SHA1:	A7B5F09EC597A65944F91D50BE3439C68F972CEB
SHA-256:	D2044FD775EC7C3708D12F45B83FEFAF4A8505FB533609B41D11CC8DEE554156
SHA-512:	5087B48F77D2BF9C2ED1ABF1D96F405E841FCC2408687AED39E95C31EE8B55A67C1908CF84C46B679B1776F2D71EBA1E509CAE3E550FAB6780F93C355E7A0AED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B..........8......pHYs................ cHRM..z%..............u0...`..:....o._.F...IDATx..w..E..?3....Knz/..{o.ADPA..YP@.T.)".(]....{........s{=.....=.$$(.?E..<....:..~_a.a.l..Y.........'>....q.@f.l..F..r=m...D$...^..H.P.&=O\|..... .F....XFi...p.^.....8.....z..r..d.....5d,......S[..}.....L.;J.....E\|...'.J.!.A6]...+M^W..v....."......y..j.].(..%L...Pr.g$Rj.U..H..fT2.+...;.k'.k..+W..... .l.;d.v,.....sorK.*.+..r=.n....e..d......].....x.Q..yr..Q.\|.X...p+p.1Z....:Ij.m0.>.5.h{.u...4.{<}.N#6n..#..F.e%.!../\Fnm3....7.#=.=.5...s.~.n.=......E....8.D,I.c`..y'..w......m....J.J...>..)o`0.@ . %H.....}..`.H#1..@HP...NO..9.!...3...e...;2.Y#.'M^\|b..,.e.l...(*.A....b0.d..._v...W.+.jK......0....B..XI.?_DH.b.....)...Bj.\|.e[h/..\|T<...1~..]L.,..U....8......Ve....[7M......f..GV..l..7.f......g....E..L}o..5_H.^........Nd .c.v .FB}.......+.wn....[...m....YM....4.....i....5Dc..~.H.=.g.!...<0.w.A........(.F&..<V."X......f..4.O...JKr...[....=I..m.7~_

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32180)
Category:	downloaded
Size (bytes):	84320
Entropy (8bit):	5.370493917084567
Encrypted:	false
SSDEEP:	1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb
MD5:	32015DD42E9582A80A84736F5D9A44D7
SHA1:	41B4BFBAA96BE6D1440DB6E78004ADE1C134E276
SHA-256:	8AF93BD675E1CFD9ECC850E862819FDAC6E3AD1F5D761F970E409C7D9C63BDC3
SHA-512:	EDA31B5C7D371D4B3ACCED51FA92F27A417515317CF437AAE09A47C3ACC8A36BDBB5A5E70F0FBFD82D3725EDF45850DDE8CA52C20F9A2D6E038B8EAACEEE3CF1
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/js/jquery.js
Preview:	/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 90x112, components 3
Category:	downloaded
Size (bytes):	5851
Entropy (8bit):	7.869416459307453
Encrypted:	false
SSDEEP:	96:lY2/WEJFLBynXUZbAjpAUs4XRwmIh4TnmAJC0cEMJY1xwBIEbwjKr:l2sDGa0pnJC0lMJAlU7
MD5:	B3E575EDA1E82736E311DCD80D128438
SHA1:	119780571E4EB73209803AF35B4860FA639AD1EB
SHA-256:	22CA455F9B3C3634C77EBCD18A46D97AC86C6CE050C340DF6F2C3FD5CFC5C0E9
SHA-512:	25768256CBF08B5A7818B75D054C3E384B08B0A118E7483759A9D5B4F671BE3C00AEDDC0346A7DA2BF919BF701C1AE3820BD7FFA5CAF86FB67470FAE7E5A2BD7
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/speakers/40562/Jason_large.jpg
Preview:	......Exif..II*.................Ducky.......F.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:0673499B143111EB9073C3F52031D721" xmpMM:DocumentID="xmp.did:0673499C143111EB9073C3F52031D721"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06734999143111EB9073C3F52031D721" stRef:documentID="xmp.did:0673499A143111EB9073C3F52031D721"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	26944
Entropy (8bit):	5.382116226406519
Encrypted:	false
SSDEEP:	384:lz4pDqmETtJt9ZutLmVU9mNbMEub/VVvWtdUix:lz4FqmET5rSKVU9sbMEBdUix
MD5:	4363D19FEAE59931916C90C22D32C07E
SHA1:	DD901914E0CF5D46829702D807768FA2726836C0
SHA-256:	3213BA396189B94C1DA10ABA7119E92F84B82133EEDBE2DC549761812F72A09C
SHA-512:	D375833B346DCE9CF82AE274CF3D5EB7C8BADEB72FBFB2713B08D0105D4C208F4D430A9A63366BCC93B6337F5BAB658B5EE6621BAF1D717DFE1D8BCB2DAA4652
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/registration
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Online Professional Training Registration - Traininng.com </title>..<meta name="description" content="Please register for professionals training courses - enter name, password, more details to contact you."/>..<meta name="keywords" content="Online Professional Training Registration, Online Course Registration Form"/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/jquery.min.js"></script> <script type="text/javascript" src

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4818
Entropy (8bit):	7.929412248828883
Encrypted:	false
SSDEEP:	96:ASDZ/I09Da01l+gmkyTt6Hk8nT6aLfxCVxf2+tpnBdQc:ASDS0tKg9E05T6iu12Udl
MD5:	F04DE6C4630BB6D2FC380BAC2A8201EA
SHA1:	BA400C9DDBEC99E2A28C57DEF00AE6F0CD124219
SHA-256:	96308392426E54F3D0017AB84DA82D633CBD88927849A7F68AA85A2B99C5D2D6
SHA-512:	7CD42D231D2E4780F5B9E8762CC1CFC912446867346F7858BFDE4DD05C837BCDE3F8DA2D1703A9690F2BC7C35A7EA973AAEEF271FECE5980581B0E6095BBB608
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...8.......;.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	267849
Entropy (8bit):	5.57457237337514
Encrypted:	false
SSDEEP:	3072:duOwq+71vbzwHn239w38Ivp2LUF1eFn+MCv522gY8pv1HzMkonLP/w22b7/cL:Arq8wH2tWKVK522v8pNHFeLn2bS
MD5:	0F5921A15B490278AF8959903BB2FE5B
SHA1:	10EF791D2B16185EB2212D65CD7CC1718FC2C23E
SHA-256:	69B392FC0A0245E926DADA98E947936B80F19AF58099F4E7E51A7305854628F3
SHA-512:	8D820847C694C418C620273597EDC51494A4BACEBD2606E443BF02701DF641AF3FC0855A4F935DE924D5264E470D40B8974048AAE5CAD2F23F18B0A1D8E3D565
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-MRX28K3N0M&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":2,"function":"__c","vtp_value":2},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":2,"function":"__c","vtp_value":2},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":9,"vtp_value":true,"tag_id":17},{"function":"__ogt_ip_mark","priority":9,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":9,"vtp_includeConditions":["list","traininng\\.com"],"tag_id":20},{"function":"__ogt_session_timeout","priority":9,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":21},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","ex

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:09:12 14:28:37], progressive, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	18999
Entropy (8bit):	7.223327720319124
Encrypted:	false
SSDEEP:	384:03Ir07iAIrBvnI5iIupY081dPIeUmB+BDYmhl2S:04g7+tvbW0idfsY6Z
MD5:	6ABF0E1D118C5FF63DD46EA55E61CB9F
SHA1:	3F8FC3D24983C10297D035174F62E59317D82614
SHA-256:	040A430686B7022D00BB3E884568DB71097054B315651112E3A057D08DCDCAA2
SHA-512:	CB7504884EFE796572018218004C85D075507DAE66A354B6F86807380395EC4821A8E6C00A2C962FAF8164FFEC49272EF893EF0C7389160D3829302E00E43603
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2018:09:12 14:28:37..........................Z...........p...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.L..X}O.OL....n.;[Su{.?.Z.}f..p.~.Nh.%.Ygf....k....fC...\l..q....E..)L........<.Z.C;........[v.).\|.4E....4...K9....+.\|H.E.#..S.....\c....9.h]WB.......s

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x375, components 3
Category:	dropped
Size (bytes):	52307
Entropy (8bit):	7.971246294593585
Encrypted:	false
SSDEEP:	1536:lsG+YSHKm1DLxmt+Vw76T7iDMrI+SIe2icA:CYSH/k6v//ef
MD5:	70E14104FBD00B068CB194A7AC3D7AA3
SHA1:	B1084EC65E4C1DC376DB973698583E6AD6EF380B
SHA-256:	5AF1C9AA9F94A17E88B2FC1C94C1BC0D4F9A7F89E52FECC624D2A93042311781
SHA-512:	BF8BD3BCD39EB7FA1295468C7C9CDBCDD38FE1F1A9D24734C970B3A3C65DBA418BBD6DF19819E662B88B886C9252A7A11578CC7017DB0B1B4039C9FE5A104EF1
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Preview" xmpMM:InstanceID="xmp.iid:F6D795CCD4B911EEAA82DF6AF9FCAEF7" xmpMM:DocumentID="xmp.did:F6D795CDD4B911EEAA82DF6AF9FCAEF7"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">5.jpg</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F6D795CAD4B911EEAA82DF6AF9FCAEF7" stRef:documentID="xmp.did:F6D795CBD4B911EEAA82DF6AF9FCAEF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM........

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35451
Entropy (8bit):	5.374752622527186
Encrypted:	false
SSDEEP:	768:lzP9FqT1Ei/bG2NynQCxLs3VR3KwVOtLi86Khyhv77UnUdUix:lzP9FE1Ei/bG2NanLsUiJuyhv77UnGUs
MD5:	865373F35AE41A99A398EFC09146E5F1
SHA1:	D0C4E1A489D873E658735A743B1C151A77EA0C5E
SHA-256:	9E71D3696507663AF3C4836B0058A8C30D93CE1F20E50A3FB6881772FC430B4E
SHA-512:	8D436FD89024E58CC6175DF07B47CC3AB8B7624C58D1A0C66AD45DDE0D8C6FCD82ABC88862A653DFD48085AF3128159BCFB1897C762765D1674F31C416B5F77F
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/webinar/telling-stories-with-excel-data--206451live
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Telling stories with Excel data </title>..<meta name="description" content="Incorporating the power of storytelling into your data presentations can transform dry statistics into compelling narratives."/>..<meta name="keywords" content=""/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/jquery.min.js"></script> <script type="text/javascript" src="https://www.traininng.com/images/js/jquery.js"></script>..<script type="text

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	168
Entropy (8bit):	5.147389612996831
Encrypted:	false
SSDEEP:	3:1umOWa1s8RnKjAIdmWOkqs+sn2PIRKQ6/c9dlps3ikIy1zgdh0BX/vC0nuZYn:1uiwsAizhO2nGc9DpsSTesay0nuZYn
MD5:	65FD2BA323F45BA30DCBB939D7620CC1
SHA1:	4F134354B63C4FF8F1DC4C804254F897D0A991BB
SHA-256:	9CC6E573BB0ED5B6CFE271BF475C48E9BBCCF1C5451242CAE325AAF625F28C8A
SHA-512:	F0C12FCAF55553802F93780AADF7B5A39C46270E4580F53ED4F2C4BABF4E7CCC98CCC4C187D4F62BE543841054512F90974E00A6EC7D67E52CAA4E7A0D06FBA6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgmMI0U88GPEKRIFDSKj9jcSBQ2W_Qi0EgUNWJ686xIFDfiHfowSBQ3ndP8hEgUNxqQzdBIFDTwNB1kSEAnK9opVVJZmzBIFDZFhlU4=?alt=proto
Preview:	CnAKCw0io/Y3GgQIBxgBCgsNlv0ItBoECFYYAgogDVievOsaBAhMGAIqEwgKUg8KBSFAIyQqEAEY/////w8KCw34h36MGgQIXxgCCgsN53T/IRoECA0YAQoLDcakM3QaBAg8GAEKCw08DQdZGgQIJBgBCgkKBw2RYZVOGgA=

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 115, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11264
Entropy (8bit):	7.965578861365895
Encrypted:	false
SSDEEP:	192:yIIHUCD4waQi5rg/rUNY662/uv8f9HgIhB1EibXuCz1soOQ34WiOeLgM:c0w7qrg/wNYsC8N31syQnEM
MD5:	D19E5A5FB468397E1C460B7B2B5E5F3A
SHA1:	9A6B3578C58588E3D182003E350F41F3FBE3851D
SHA-256:	A78FA2820480E07E7D0C8711F9AAFC1EEC2A5BE86EC65CB631DB18CE7A45E1DD
SHA-512:	427D80BA9489AB6A8E62E6DD01531A8AC7B09CFD93FD15D8E4CF6367252F836C59E0518633C15882A66FE420A92C2576DCDCF039F0E3E17DADD58697927F4833
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/images/logo.png
Preview:	.PNG........IHDR...,...s.....".?.....pHYs...#...#.x.?v...MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	14357
Entropy (8bit):	5.203357351469714
Encrypted:	false
SSDEEP:	192:nlzpFpI8AlFimzK38JkdjsDUT/e0F8eZ8VcWtsSXvsiD9:lzpFpDqiF8Wdjsym2tZvWtdUix
MD5:	08F579AABF5B3445BFD647ABC8FFDBE8
SHA1:	7888FCD579CA3E51AB6C897C8A0248A4C45D711E
SHA-256:	B8121009ABB585ECBB62ED40798660FAFF75FC67349026B717AFA0DAC8B28E5E
SHA-512:	3EBF0230DD4DC0F775BB71854D7841216C595AEDCCE5C08BFE63E5B7AB8496766E090E868D6C7DADB578C1C919ADC05AA0F548FF971120F7E735B5E4CA27775C
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/aboutus
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> World Class Online Professional Training \| Courses \| Traininng </title>..<meta name="description" content="Traininng.com is a provider of world class online professional training in the areas of regulatory compliance and healthcare and learning destination for professionals from around the world."/>..<meta name="keywords" content="world class online professional training, professional courses online, professional training, online professional training, training courses for professionals"/>..<link rel="shortcut icon" h

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:10:23 15:17:57], baseline, precision 8, 90x112, components 3
Category:	dropped
Size (bytes):	20911
Entropy (8bit):	7.348365596625108
Encrypted:	false
SSDEEP:	384:Yxa0zlT7i/a0zlYvnlYiTz/hjJ5oaoTcNsfxPwabEPMhJqbv:YxaMR7KaMyvd/hjJ0ThfSohav
MD5:	35000CBFB8C646CE250B5EDC83A1D5DD
SHA1:	92EE076F2319CE14CA01090727B51A4426812E4B
SHA-256:	EFB58044E08994ECEEB70A3A12780B0890C4EF4070DCF859F441B4E72F8BFB9A
SHA-512:	99D3E078F15313143D2B0E083A379FF0C9E2B878710DE5D376F132CB607F22A9C8310C8EF6D951C74381F3A6C7FF81611EB7CA1460654C970CB508E3B691E729
Malicious:	false
Reputation:	low
Preview:	.....\|Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2019:10:23 15:17:57..........................Z...........p...........................................&.(.................................F.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p.Z.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T..r.+..&.+........RSC..`....S)..>}.........Z.n.....a.-.V..ZwV...na.c....I.F.gR.qslt5.D..4.4...5K4>.......v....Q.].]L3:.Ve.h..Z.7?.!.cG..,.M.[.D~cu?.r.~

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	19758
Entropy (8bit):	5.315408253453218
Encrypted:	false
SSDEEP:	384:lzypDqnK2KEicU7q15NfcU74jYcU7g2RgKNgdcU7CvWtdUix:lzyFqKhE/Cy5NUCUlCg8gKNgKCfdUix
MD5:	9614BA4474430B8D28D446306DBE23D0
SHA1:	B43EC712D5A5E1A51ADDED1D57160D6B2A5255EE
SHA-256:	648DA48E7E992B4772DAA528B1B4913892B3257FD94DC93253F7DF547C134A6B
SHA-512:	915E8B1F2B826465A1B53EF81687F82DCEB9230516B2AAB5B939A20F3BF6B390E164DC233FA5F47B487548388A884C59CA0E1DC1AB0DC887E69818960B53BF2C
Malicious:	false
Reputation:	low
URL:	https://www.traininng.com/speakerprofile?speaker_id=60403
Preview:	<!DOCTYPE html>..<html lang="en">..<head>..<meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" content="width=device-width, initial-scale=1"><meta name="google-site-verification" content="9ubUEJenuhAuP-Mz8BDq_p1r5z8ECGW5S_xqPt0MTsM" /><meta name="msvalidate.01" content="ED1D9D56499CFA7C24F50A0E958CD8F5" />..<title> Compliance Experts – traininng </title>..<meta name="description" content="More than 100 Compliance experts across industry and across the globe"/>..<meta name="keywords" content="Compliance Experts, Medical Devices, Pharmaceutical, Clinical, CAPA GMP/cGMP Compliance, ISO 13485, OSHA, Consultant, Consulting, Quality, Food Safety, Risk Management, 21 CFR Part 11"/>..<link rel="shortcut icon" href="https://www.traininng.com/images/favicon.ico" />..<script type="text/javascript" src="https://www.traininng.com/images/js/j

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 19:22:07.647737980 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 19:22:15.083698988 CEST	49735	80	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.084052086 CEST	49736	80	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.207575083 CEST	80	49735	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.207632065 CEST	80	49736	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.207782030 CEST	49735	80	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.207801104 CEST	49736	80	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.207892895 CEST	49735	80	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.330806971 CEST	80	49735	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.331037998 CEST	80	49735	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.382252932 CEST	49735	80	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.508024931 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.508111000 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.508209944 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.508403063 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.508424044 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.775594950 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.775897026 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.775930882 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.777610064 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.777704000 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.779726982 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.779831886 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.779966116 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:15.779979944 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:15.819824934 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.800486088 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:16.800565004 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:16.800709963 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:16.800899029 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:16.800925016 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:16.861310959 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.861366987 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.861387014 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.861437082 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.861493111 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.861526012 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.912782907 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.912873030 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.912950993 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.913167953 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.913192034 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.913335085 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.913372040 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.913391113 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.913424969 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.913741112 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.913775921 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.913839102 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.913873911 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.913897038 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.913942099 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.914725065 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.916209936 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.916244984 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.916615963 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.916632891 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.917203903 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.917277098 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.917660952 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.917691946 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.918276072 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.918287992 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.984659910 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.984730959 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.984762907 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.984785080 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.984822989 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.984888077 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.984935045 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.984988928 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.985006094 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.985043049 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.985081911 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.985093117 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.985110998 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.985152006 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.985158920 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.985378027 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.985423088 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.985897064 CEST	49737	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.985910892 CEST	443	49737	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.987240076 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.987274885 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:16.987341881 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.988023996 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:16.988050938 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.021986961 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:17.022332907 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:17.022391081 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:17.024041891 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:17.024203062 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:17.027268887 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:17.027404070 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:17.068099022 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:17.068156004 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:17.114886045 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:17.173528910 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.180241108 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.185506105 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.185637951 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.185673952 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.185692072 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.185988903 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.186047077 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.186134100 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.186151028 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.186228037 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.186280966 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.186289072 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.186932087 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.186995029 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.187024117 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.187208891 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.187654018 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.187741041 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.187750101 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.187762976 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.187824965 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.187834024 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.187860966 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.187918901 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.188338041 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.188466072 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.188656092 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.188672066 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.189160109 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.189239979 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.189378023 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.189393044 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.189496040 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.189502001 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.189753056 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.189826965 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.190304995 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.190377951 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.190447092 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.190462112 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.228121996 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.228142023 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.242486954 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.242486954 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.242904902 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.247889042 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.248224974 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.248243093 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.249664068 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.249742985 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.250252008 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.250333071 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.250509977 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.250524998 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.257708073 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 19:22:17.303814888 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.422096014 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.422130108 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.422208071 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.422241926 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.429186106 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.429255009 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.429272890 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.429354906 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.429356098 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.429420948 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.429450989 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.429483891 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.436000109 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.436064959 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.436135054 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.436153889 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.439443111 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.439476013 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.439501047 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.439567089 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.439618111 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.439618111 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.439618111 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.439639091 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.446844101 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.446861982 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.446868896 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.446990967 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.447051048 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.447089911 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.447119951 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.473895073 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.474009037 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.474066019 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.489273071 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.489274979 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.489274979 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.489294052 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.489300013 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.489305973 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.498311996 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.498367071 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.498389006 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.498405933 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.498425007 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.498452902 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.498528957 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.524266958 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.536849976 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.536863089 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.537745953 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.541127920 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.541145086 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.545166016 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.545186043 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.545223951 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.545272112 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.545277119 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.545289040 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.545319080 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.545330048 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.545363903 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.545389891 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.545402050 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.545427084 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.545442104 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.552294970 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552318096 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552364111 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.552422047 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552464962 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.552493095 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.552496910 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552516937 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552544117 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.552545071 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552562952 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552577019 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.552602053 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.552618027 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552725077 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.552776098 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.559056044 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559079885 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559113026 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559130907 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.559171915 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.559184074 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559248924 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559312105 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559351921 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.559362888 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559376001 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.559426069 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559463024 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559489012 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.559497118 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.559519053 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.560041904 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.560316086 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.560323954 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562454939 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562488079 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562519073 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.562525034 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562551975 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.562572002 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.562642097 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562661886 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562700033 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.562709093 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562721968 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.562751055 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.562800884 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562819958 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.562850952 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.562869072 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.562872887 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.566257000 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.566279888 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.566319942 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.566325903 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.566354990 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.569900990 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.569927931 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570065975 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.570065975 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.570089102 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570108891 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570137978 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570139885 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.570168018 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.570172071 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570183992 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.570226908 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.570259094 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570312023 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570369005 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570398092 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.570414066 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.570441008 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.575211048 CEST	49743	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.575238943 CEST	443	49743	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.575723886 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.575797081 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.575865030 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.577472925 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.577507973 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.583832026 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.586756945 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.586829901 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.586843967 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.598886967 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.598967075 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.599025011 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.602477074 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.617755890 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.621498108 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.621515989 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.621532917 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.621556997 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.621576071 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.621598959 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.621613026 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.621654034 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.621670008 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.621714115 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.622181892 CEST	49746	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.622209072 CEST	443	49746	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.622649908 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.622726917 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.622787952 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.623713017 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.623744011 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.630620003 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.648958921 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.668148994 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668164015 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668198109 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.668215990 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668236971 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.668252945 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668270111 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668292999 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.668312073 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.668355942 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668402910 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.668412924 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668519974 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668557882 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.668562889 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668576002 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668605089 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.668615103 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.668661118 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.669027090 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.670450926 CEST	49741	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.670468092 CEST	443	49741	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.671190023 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.671255112 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.671381950 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.673125029 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.673156977 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682466030 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682498932 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682534933 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.682575941 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.682581902 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682631016 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682666063 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682683945 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.682692051 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682713985 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.682807922 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682854891 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.682862043 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.682952881 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.683022022 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.683029890 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.683105946 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.683161020 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.683168888 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.683300972 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.683351040 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.683357954 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.683413029 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.683465958 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.683473110 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685348034 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685369015 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685388088 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685414076 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.685446024 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.685458899 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685468912 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685513020 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.685528040 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.685530901 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685540915 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685589075 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.685594082 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685614109 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.685630083 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.685652971 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.692662001 CEST	49745	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.692667961 CEST	443	49745	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.692866087 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.692888975 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.692919970 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.692929029 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.692987919 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.692987919 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693043947 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693062067 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693089962 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693120003 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693142891 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693198919 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693245888 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693276882 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693289042 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693295002 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693317890 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693373919 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693424940 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693434954 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693496943 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693510056 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693568945 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693612099 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693629980 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.693847895 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.693885088 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.695827961 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.695880890 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.695899010 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.695970058 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.696022034 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.710402012 CEST	49744	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.710428953 CEST	443	49744	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.710933924 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.710964918 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.711018085 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.712212086 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.712225914 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.722628117 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.722697020 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.722703934 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.722764015 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.722804070 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.722820997 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.722830057 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.722842932 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.770659924 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.805752039 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.805783987 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.805800915 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.805809021 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.805840969 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.805860043 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.805870056 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.805947065 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.805984020 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.805994034 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.806008101 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.806022882 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.806369066 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.806411982 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.806420088 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.806442022 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.806648016 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.806704044 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.806710958 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.806889057 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.806936026 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.806943893 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807024002 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807080030 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.807086945 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807231903 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807276964 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.807284117 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807504892 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807553053 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.807559967 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807661057 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807708025 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.807715893 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807885885 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807934999 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.807936907 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807949066 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.807985067 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.807991028 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.808027983 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.808069944 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.809387922 CEST	49742	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.809392929 CEST	443	49742	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.810271978 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.810316086 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.810385942 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.811944008 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.811969995 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.837445021 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.838690042 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.838732958 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.839226961 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.840053082 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.840157986 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.840640068 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.883446932 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.884130001 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.889322042 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.889363050 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.890559912 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.892702103 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.892877102 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.893249035 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.926980019 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.927299023 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.927359104 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.928858042 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.928926945 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.929184914 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.929270029 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.929306984 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.936141968 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.951145887 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.951373100 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.951415062 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.952871084 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.952929020 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.953459024 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.953545094 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.953691006 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.953707933 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.966444969 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.966720104 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.966732979 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.967617989 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.967669010 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.968077898 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.968135118 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.968225956 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.968234062 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.976115942 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:17.982882977 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:17.982939959 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.008784056 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.008802891 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.025106907 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.068902969 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.069116116 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.069149971 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.070616961 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.070678949 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.071049929 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.071135998 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.071166039 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.087608099 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.087662935 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.087790966 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.087836027 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.116113901 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.121649981 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.121670961 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.130893946 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.130923986 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.130968094 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.131035089 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.131069899 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.131361008 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.131407976 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.131422997 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.131464005 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.131510019 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.131558895 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.133580923 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.133599043 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.137882948 CEST	49748	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.137913942 CEST	443	49748	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.138160944 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.138219118 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.138279915 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.139489889 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.139527082 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.175728083 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.175791025 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.175816059 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.175834894 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.175873041 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.175873995 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.175914049 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.175955057 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.176588058 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.176702023 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.200747967 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.200944901 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.200968027 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.201008081 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.201049089 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.201076984 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.201108932 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.201155901 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.204380035 CEST	49750	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.204406023 CEST	443	49750	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.204840899 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.204916954 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.205127001 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.205467939 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.205496073 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.210824013 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.210855961 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.210871935 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.210901022 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.210933924 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.210951090 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.211045980 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.211067915 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.211121082 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.211122036 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.211139917 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.211208105 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.211234093 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.211271048 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.211291075 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.211314917 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.211668968 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.211731911 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.211745977 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.214968920 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.215023994 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.215044022 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.215066910 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.215081930 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.215104103 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.233556986 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.233629942 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.258825064 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.258853912 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.258867979 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.274070978 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.298677921 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.298701048 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.298733950 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.298881054 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.298881054 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299000978 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299020052 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299036026 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299061060 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299088955 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299088955 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299118042 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299190998 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299207926 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299226999 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299242020 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299261093 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299268007 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299278021 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299381018 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299442053 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299455881 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299500942 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299540997 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299588919 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299628973 CEST	49749	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299657106 CEST	443	49749	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299892902 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.299925089 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.299998045 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.300293922 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.300312042 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.305068016 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.322304964 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.322362900 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.322385073 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.322427988 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.322460890 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.322487116 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.322535992 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.322603941 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.322973967 CEST	49752	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.323000908 CEST	443	49752	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.324656010 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.324678898 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.324738979 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.324873924 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.324888945 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334146023 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334177017 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334225893 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.334276915 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.334296942 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334372044 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334422112 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334443092 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.334460020 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334489107 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.334530115 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334588051 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.334603071 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334692955 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334753990 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.334768057 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334847927 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334908009 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.334923029 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.334996939 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.335055113 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.335068941 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.335130930 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.335196972 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.335211039 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.338099957 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.338124990 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.338140011 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.338197947 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.338231087 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.338237047 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.338253975 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.338352919 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.338359118 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.338388920 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.338469028 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.338561058 CEST	49751	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.338574886 CEST	443	49751	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.341022968 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.341044903 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.341089010 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.341310024 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.341321945 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.364057064 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.364151001 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.364240885 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.367135048 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.367172956 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.370033026 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.370132923 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.370155096 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.398891926 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.401302099 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.401359081 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.401861906 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.402313948 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.402410030 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.402615070 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.414422035 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.444120884 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.457535028 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.457566977 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.457582951 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.457622051 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.457683086 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.457710028 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.457753897 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.457772970 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.457808971 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.457829952 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.457856894 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.458424091 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.458458900 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.458487988 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.458506107 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.458530903 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.458586931 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.458643913 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.458657026 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.458705902 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.458734035 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.458791971 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.461642981 CEST	49747	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.461668968 CEST	443	49747	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.466820002 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.488768101 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.488821983 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.490175009 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.493659973 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.493848085 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.494163990 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.536185980 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.560230970 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.560487032 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.560508966 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.564009905 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.564142942 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.565056086 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.565228939 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.565665007 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.565671921 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.584808111 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.593930960 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.594016075 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.594577074 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.594610929 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.596090078 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.596149921 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.597830057 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.600752115 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.600790024 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.601171017 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.614907980 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.615051031 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.615061998 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.615107059 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.615412951 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.615444899 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.618741035 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.618832111 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.619513035 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.619687080 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.619920015 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.619926929 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.620026112 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.652038097 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.657625914 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.657691002 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.657756090 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.657777071 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.668179989 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.668593884 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.700089931 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.700167894 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.715152979 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.715219021 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.715296984 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.715353012 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.719122887 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.747248888 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.755812883 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.755888939 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.755911112 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.755964994 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.756022930 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.756655931 CEST	49754	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.756683111 CEST	443	49754	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.760129929 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.780770063 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.780793905 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.780823946 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.780838966 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.780878067 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.780972958 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.780991077 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.781030893 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.781091928 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.781119108 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.781172037 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.781198025 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.781259060 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.782150030 CEST	49753	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.782176971 CEST	443	49753	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.808851957 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.808919907 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.808943033 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.808962107 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.808974981 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.808988094 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.809011936 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.825140953 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.825300932 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.825356960 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.825517893 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.825536966 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.825562954 CEST	49758	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.825576067 CEST	443	49758	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.833173037 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.833239079 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.833268881 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.833293915 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.833304882 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.833364010 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.833401918 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.833401918 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.833563089 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.833619118 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.833633900 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.833707094 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.833761930 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.835391998 CEST	49756	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.835417032 CEST	443	49756	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.847136974 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.847220898 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.847378969 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.847636938 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.847672939 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.849406958 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.849431038 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.849437952 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.849468946 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.849499941 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.849549055 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.849562883 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.849562883 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.851867914 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.851875067 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.893297911 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.893373013 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.893456936 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.893763065 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:18.893799067 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:18.899414062 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.899415970 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.899425983 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932460070 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932491064 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932511091 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932522058 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.932571888 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.932578087 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932668924 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932691097 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932712078 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932718992 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.932737112 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932744026 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.932754993 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.932909966 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932933092 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.932970047 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.932977915 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.933000088 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.933049917 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.933084965 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.933104038 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.933111906 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.933123112 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.946592093 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.971404076 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.971501112 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.971510887 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.971549034 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.971613884 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972043037 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.972362995 CEST	49755	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.972371101 CEST	443	49755	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972624063 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972639084 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972707987 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972733021 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972735882 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.972742081 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972759008 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972774029 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.972774029 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.972790003 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972804070 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972810984 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972825050 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.972825050 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.972834110 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.972870111 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.972887993 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.973937035 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:18.974035978 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:18.974041939 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.012948036 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.012996912 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.013319969 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.014350891 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.014389038 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.017970085 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.018024921 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.018090963 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.026479006 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.033310890 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.033341885 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.034024954 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.034049034 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.034106016 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.055233955 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.055298090 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.055367947 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.055915117 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.055927038 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.056550980 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.056633949 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.056657076 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.057699919 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.057732105 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.058067083 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.058083057 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.095803976 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.095815897 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.095875978 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.095889091 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.095901966 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.095913887 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.095942974 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.095942974 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.095968008 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.096383095 CEST	49757	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.096398115 CEST	443	49757	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.105360031 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.105438948 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.105550051 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.105916977 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.105947971 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.107558966 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.107853889 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.107903004 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.107976913 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.108154058 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.108212948 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.108350992 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.108381987 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.108742952 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.109649897 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.109739065 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.109921932 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.110609055 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:19.110678911 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:19.112246990 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:19.112257957 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:19.112596989 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:19.114702940 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:19.152192116 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.156147957 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:19.273864031 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.287347078 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.287406921 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.290550947 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.290623903 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.291410923 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.291613102 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.291939020 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.291955948 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.293791056 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.294097900 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.294156075 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.295283079 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.295689106 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.295795918 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.295809031 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.295866966 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.316025972 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.316240072 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.316261053 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.317295074 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.317348957 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.317783117 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.317892075 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.318058014 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.318068027 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.318366051 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:19.318526030 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:19.318675041 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:19.319884062 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.320276976 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.320312023 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:19.320312977 CEST	49760	443	192.168.2.4	23.201.212.130
Apr 18, 2024 19:22:19.320343018 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.320352077 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:19.320374966 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.320394039 CEST	443	49760	23.201.212.130	192.168.2.4
Apr 18, 2024 19:22:19.320518970 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.320538998 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.321964025 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.322027922 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.322348118 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.322426081 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.322468996 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.322660923 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.322726965 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.323049068 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.323113918 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.323215961 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.323234081 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.332014084 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.347899914 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.355537891 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.355598927 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.355701923 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.355760098 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.358390093 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.358575106 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.358633995 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.359507084 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.359575987 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.359801054 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.359862089 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.359896898 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.363898993 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.363917112 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.363935947 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.363945007 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.368077993 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.368257046 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.368269920 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.369743109 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.369797945 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.370079041 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.370158911 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.370176077 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.395989895 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.396004915 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.400122881 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.411988974 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.411998034 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.412009001 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.412014008 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.412072897 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.444170952 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.460045099 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.460163116 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.478698969 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.478717089 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.478848934 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.478849888 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.478908062 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.478949070 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.478996038 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.478996992 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.479163885 CEST	49759	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.479193926 CEST	443	49759	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.481249094 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.481328964 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.481405973 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.481606007 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.481626034 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.521533966 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.521594048 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.521615028 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.521682978 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.521742105 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.522459030 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.522525072 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.522542000 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.522602081 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.522627115 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.522654057 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.522790909 CEST	49761	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.522816896 CEST	443	49761	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.541677952 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.541729927 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.541749954 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.541768074 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.541785955 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.541825056 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.541857004 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.564291000 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.564306021 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.564311981 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.564351082 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.564361095 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.569216013 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.569233894 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.569279909 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.569283009 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.569338083 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.569817066 CEST	49764	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.569853067 CEST	443	49764	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.571178913 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.571255922 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.571343899 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.571500063 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.571527958 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.572088957 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.572154999 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.572175980 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.572206974 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.572237968 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.572247028 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.572261095 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.588159084 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.588175058 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.607717037 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.607743025 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.607749939 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.607819080 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.607857943 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.607897997 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.607947111 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.615624905 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.615658045 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.615669966 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.615717888 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.615740061 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.615767002 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.615792990 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.620152950 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.620160103 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.620165110 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.620172977 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.636158943 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.664798021 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.664827108 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.664876938 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.664910078 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.664910078 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.664935112 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.664944887 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665026903 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665046930 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665071964 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.665079117 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665103912 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.665103912 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665138006 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.665265083 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665282965 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665321112 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.665332079 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665378094 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.665400028 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665456057 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665484905 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.665498018 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.665524960 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.668148041 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.668150902 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.668162107 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.668195009 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.687212944 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687221050 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687268972 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.687273979 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687318087 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.687454939 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687460899 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687505960 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.687522888 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687582016 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.687603951 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687611103 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687654018 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.687661886 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687880993 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687889099 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.687933922 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.687942028 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695301056 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695332050 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695367098 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695391893 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695391893 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695503950 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695523977 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695544958 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695552111 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695552111 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695571899 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695574999 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695626974 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695633888 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695723057 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695744038 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695801020 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695801020 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695808887 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695864916 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695915937 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.695965052 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.695971966 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.696013927 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.716206074 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.716207981 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.730151892 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.730176926 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.730214119 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.730268002 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.730293989 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.730428934 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.730482101 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.730514050 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.730526924 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.730566978 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.731136084 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.731209993 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.731221914 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.731287003 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.731343985 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.731354952 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.732201099 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.738512993 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.738533974 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.738576889 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.738601923 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.738626957 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.738667965 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.738843918 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.738862038 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.738892078 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.738902092 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.738926888 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.738970995 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.739033937 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.739052057 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.739089966 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.739116907 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.739159107 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.739185095 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.739195108 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.739206076 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.739242077 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.739248037 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.739248037 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.739309072 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.741364002 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.741561890 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.741597891 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.742700100 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.742990017 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.743103027 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.743114948 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.743168116 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.748269081 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.772121906 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.782013893 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.782069921 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.782553911 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.783032894 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.783061981 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.784940958 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.784985065 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.785190105 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.785445929 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.785475969 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.787214041 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.787703037 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.787725925 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.787755966 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.787774086 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.787806034 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.787856102 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.787939072 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.787951946 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.788038015 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.788093090 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.800332069 CEST	49762	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.800363064 CEST	443	49762	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811019897 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811028004 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811088085 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811099052 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.811140060 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.811197996 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811204910 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811260939 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.811268091 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811419010 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811425924 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811475992 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.811484098 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811599016 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811625957 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811647892 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.811654091 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811664104 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.811799049 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811841965 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811861038 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.811867952 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.811878920 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.811897993 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.812060118 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.818231106 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818264961 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818300962 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818337917 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.818337917 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.818368912 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.818459034 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818483114 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818523884 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.818540096 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818598986 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818664074 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.818671942 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818730116 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818878889 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.818905115 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.819627047 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.831305027 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853245974 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853269100 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853311062 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.853337049 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.853348970 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853404999 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853440046 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853451967 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.853457928 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853492975 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.853691101 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853709936 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.853746891 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.854324102 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.854396105 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.854408026 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.854552984 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.854605913 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.861536980 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.861618996 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.861651897 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.861675024 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.861712933 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.861749887 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.876893044 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.957444906 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.957462072 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.958801031 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.967390060 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.967565060 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.967590094 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.989922047 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.989979982 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.990009069 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.990057945 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:19.990092039 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:19.990117073 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.008135080 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.019695997 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.035044909 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.035068035 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.038676023 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.040368080 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.078315973 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.082464933 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.092211008 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.093822956 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.093910933 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.093933105 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.093964100 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.093976021 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.094017029 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.094043970 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.094072104 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.112865925 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.112895966 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.112982035 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.112983942 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.112982035 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.112996101 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.113024950 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.113043070 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.113051891 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.113073111 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.113085032 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.113121986 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.137286901 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.137306929 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.139188051 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.139203072 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.139319897 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.139345884 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.139837980 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.140604019 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.164091110 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.164196968 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.164429903 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.164611101 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.164652109 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.164675951 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.177499056 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.180425882 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.180505037 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.180593967 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.180841923 CEST	49767	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.180871964 CEST	443	49767	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.181396008 CEST	49766	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.181420088 CEST	443	49766	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.181654930 CEST	49763	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.181679964 CEST	443	49763	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.181865931 CEST	49765	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.181878090 CEST	443	49765	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.184488058 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.184501886 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.184731960 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.185480118 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.185487032 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.185554028 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.186197042 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.186233997 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.188088894 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.188103914 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.188905954 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.188916922 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.205554962 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.205630064 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.205698967 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.206027985 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.206063986 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.207814932 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.207833052 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.208157063 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.213824987 CEST	49770	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.213886023 CEST	443	49770	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217236042 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217258930 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217293024 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217299938 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.217341900 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.217365026 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.217432022 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217451096 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217479944 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.217489958 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217535019 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.217535019 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.217554092 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217628002 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217784882 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.217819929 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.217848063 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.219361067 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.219436884 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.219521046 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.220012903 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.220050097 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.220520020 CEST	49771	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.220532894 CEST	443	49771	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.223743916 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.223772049 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.223855019 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.224081993 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.224109888 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.291464090 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.291512012 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.291532040 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.291575909 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.291613102 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.291629076 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.291671038 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.291718960 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.293023109 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.293044090 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.293050051 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.293098927 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.293116093 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.293128967 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.293139935 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.331271887 CEST	80	49735	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.331340075 CEST	49735	80	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.338432074 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.338455915 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.385000944 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.416219950 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.416228056 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.416264057 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.416270971 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.416289091 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.416343927 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.416373014 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.416429996 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.444150925 CEST	49735	80	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.446760893 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.447792053 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.449696064 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.450412989 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.450433016 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.450731993 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.450738907 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.450771093 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.450828075 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.450898886 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.451319933 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.451639891 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.451692104 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.452121019 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.452214003 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.452912092 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.453058004 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.453103065 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.453202963 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.454065084 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.454123020 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.454519033 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.454525948 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.460886955 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.461141109 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.461158991 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.462591887 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.462656975 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.463330984 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.463411093 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.463745117 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.463762045 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.476543903 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.476727009 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.476769924 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.477663040 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.477756023 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.478542089 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.478604078 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.478981018 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.478997946 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.479870081 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.480351925 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.480380058 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.483900070 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.483987093 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.484724998 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.484899044 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.484908104 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.496145964 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.500114918 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.508166075 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.508235931 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.512527943 CEST	49772	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.512540102 CEST	443	49772	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.513505936 CEST	49773	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.513535023 CEST	443	49773	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.518307924 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.532118082 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.534785032 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.534799099 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.558480978 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:20.558496952 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.558618069 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:20.558902025 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:20.558914900 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.566989899 CEST	80	49735	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.575614929 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.615406990 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:20.615446091 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:20.615524054 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:20.615959883 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:20.615984917 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:20.699888945 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.699954987 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.700145006 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.700206041 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.704719067 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.704740047 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.704746962 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.704808950 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.704849958 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.704879045 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.704891920 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.712043047 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.712140083 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.712162971 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.712203979 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.712229967 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.712259054 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.715538025 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.715599060 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.715658903 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.715670109 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.725095034 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.725111961 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.725117922 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.725195885 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.725212097 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.728657007 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.728722095 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.728744030 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.728765011 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.728802919 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.728847027 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.728883028 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.744442940 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.744457960 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.759440899 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.759449959 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.759473085 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.759479046 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.759566069 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.759623051 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.775449038 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.775454044 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.775466919 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.775474072 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.784616947 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.784955025 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:20.784961939 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.787121058 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.787214994 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:20.788702011 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:20.788909912 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.789127111 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:20.789134979 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.791452885 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.807435036 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.807452917 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.807589054 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.822921991 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.822947979 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.822978020 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.823008060 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.823041916 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.823148966 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.823168039 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.823210001 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.823235035 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.823260069 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.823309898 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.823363066 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.823369980 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.823409081 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.823441982 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.823447943 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.823448896 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.825448990 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.825524092 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.825540066 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.827723026 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.827733040 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.827789068 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.827805042 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.827847958 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.829262972 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.829271078 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.829309940 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.829339027 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.829364061 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.829482079 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.829519033 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.829529047 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.829541922 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.829587936 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.833822966 CEST	49776	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.833832026 CEST	443	49776	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.834700108 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.834755898 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.834861040 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.835020065 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835048914 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835088015 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.835103989 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835133076 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.835155010 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.835191965 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835216045 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835249901 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.835278988 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835329056 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.835349083 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.835352898 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835381031 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835402966 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.835529089 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.835587025 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.837763071 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.837791920 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838526964 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838551998 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838567972 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838598967 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.838638067 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.838644981 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838715076 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838735104 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838759899 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.838777065 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838783979 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.838921070 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838956118 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.838985920 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.838993073 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.839006901 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.839169025 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.839225054 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.839231968 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.839276075 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.839309931 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.839441061 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:20.839454889 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.845657110 CEST	49777	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.845685005 CEST	443	49777	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848284960 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848294973 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848332882 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848345995 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.848371029 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848391056 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.848397017 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848404884 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848434925 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.848457098 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848483086 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.848522902 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.848542929 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.848567009 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.851574898 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851604939 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851622105 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851660013 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.851721048 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.851748943 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851785898 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851804018 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851838112 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851844072 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.851871014 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851897001 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.851917982 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.851931095 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.851994991 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.852006912 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.852274895 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.862159967 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.862179995 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.862443924 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.862863064 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.862876892 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.863275051 CEST	49775	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.863281012 CEST	443	49775	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.865068913 CEST	49779	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.865092993 CEST	443	49779	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.870702982 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.883271933 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.883332014 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.883507013 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.883985043 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.884020090 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.894227982 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.894248962 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.894321918 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.894747972 CEST	49778	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.894804955 CEST	443	49778	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.896183968 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.896194935 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.908457041 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.908508062 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.908587933 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.908797026 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.908830881 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.945882082 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.945898056 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.945916891 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:20.945962906 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.945981979 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.946048021 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.946130037 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.946144104 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.946177959 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.946440935 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:20.946501970 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:20.947307110 CEST	49774	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:20.947335005 CEST	443	49774	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:20.947962999 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:20.948046923 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:20.992749929 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.992950916 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:20.993029118 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:21.021579981 CEST	49782	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:21.021588087 CEST	443	49782	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:21.023715019 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:21.023865938 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:21.027771950 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:21.027800083 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:21.034635067 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.034656048 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.034832001 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.035793066 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.035816908 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.076906919 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:21.096834898 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.097363949 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.097429991 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.097894907 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.098490000 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.098583937 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.098712921 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.123349905 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.123717070 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.123727083 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.124912024 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.125308037 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.125453949 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.125459909 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.125478029 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.140145063 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.140861034 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.140872002 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.140944004 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.141448021 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.141459942 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.143400908 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.143687010 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.143740892 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.147327900 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.147408009 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.147912979 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.148000002 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.148179054 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.148195982 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.148930073 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:21.149087906 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:21.149146080 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:21.155787945 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.155987024 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.155998945 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.159471035 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.159565926 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.160218000 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.160300970 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.160361052 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.168876886 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.169229031 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.169251919 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.170685053 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.170752048 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.171248913 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.171334982 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.171448946 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.171463966 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.172952890 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.188920021 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.203902006 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.203907967 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.219901085 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.251914978 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.288363934 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.315391064 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.315469027 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.316678047 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.316739082 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.317351103 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.317420006 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.317517996 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.317537069 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.344202995 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.344269037 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.344351053 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.344381094 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.358081102 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.358318090 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.358339071 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.361835957 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.361913919 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.362420082 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.362586021 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.362592936 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.363914013 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.371109009 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.371170998 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.371191978 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.371223927 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.371233940 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.371253967 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.390861034 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.390917063 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.390935898 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.391087055 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.391088009 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.391151905 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.396019936 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.396079063 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.403491974 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.403578043 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.403603077 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.403620958 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.403624058 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.403646946 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.403657913 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.408117056 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.411895037 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.411895037 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.411901951 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.411911964 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.417546034 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.417607069 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.417629004 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.417675018 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.417740107 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.417778969 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.443028927 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.443048954 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.443085909 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.458992004 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.458992004 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.458992958 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.459002018 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.459144115 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.459202051 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467334032 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467366934 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467384100 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467480898 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.467480898 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.467480898 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.467516899 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467540026 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467559099 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467592955 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.467601061 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467617989 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.467705011 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467756987 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.467765093 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467844009 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.467902899 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.467911005 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.483617067 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.483668089 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.483735085 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.484021902 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.484051943 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.485304117 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.492764950 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.492779016 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.492826939 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.493078947 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.493093014 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494445086 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494477987 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494503975 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.494512081 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494539022 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.494548082 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.494550943 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494625092 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494643927 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494663000 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.494676113 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494685888 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.494710922 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.494714022 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494803905 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.494846106 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.495829105 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.495887041 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.495949984 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.496206045 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.496239901 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.496747971 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.496763945 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.496805906 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.497617006 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.497617960 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.497622967 CEST	443	49786	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.497628927 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.497648954 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.497692108 CEST	49786	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.498363972 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.498402119 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.498462915 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.499870062 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.499886036 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.500382900 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.500382900 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.513665915 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.513720036 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.513777971 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.513931990 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.513957024 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.513973951 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.513999939 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.514031887 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.514048100 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.514125109 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.514142990 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.514153004 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.514177084 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.514180899 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.514195919 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.514221907 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.514240026 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.514273882 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.514327049 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.515687943 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:21.515703917 CEST	443	49784	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:21.515716076 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:21.515747070 CEST	49784	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:21.516338110 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.518367052 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.518388987 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.518451929 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.518759966 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.518785954 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526427031 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526448011 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526463032 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526479959 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.526521921 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.526526928 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526603937 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526621103 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526638031 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526642084 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.526659012 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526667118 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.526680946 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.526794910 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.526835918 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.532979012 CEST	49787	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.532999039 CEST	443	49787	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.537461042 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.537477970 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.537484884 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.537527084 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.537535906 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.537550926 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.537574053 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.537841082 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.537888050 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.537914991 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.537942886 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.540786982 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.540818930 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.540838003 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.540860891 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.540921926 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.540939093 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.540975094 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.540996075 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.541029930 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.541044950 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.541071892 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.541143894 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.541188955 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.551176071 CEST	49789	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.551192045 CEST	443	49789	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.554856062 CEST	49788	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.554867029 CEST	443	49788	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.574275970 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.574359894 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.574404001 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.579026937 CEST	49792	443	192.168.2.4	142.250.105.104
Apr 18, 2024 19:22:21.579031944 CEST	443	49792	142.250.105.104	192.168.2.4
Apr 18, 2024 19:22:21.590456009 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.590488911 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.590532064 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.590620041 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.590636969 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.590640068 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.590665102 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.590676069 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.590698957 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.590723991 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.590760946 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.590816975 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.590867043 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.591782093 CEST	49791	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.591790915 CEST	443	49791	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.593230009 CEST	49785	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.593255997 CEST	443	49785	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.695902109 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:21.695955038 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:21.696017981 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:21.698841095 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:21.698868990 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:21.735002995 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.735621929 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.735681057 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.736047029 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.736697912 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.736767054 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.736953020 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.754812956 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.755002975 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.755023003 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.756370068 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.756798983 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.756942987 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.757236004 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.759663105 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.760488987 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.763437986 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.765321016 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.774003983 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.774022102 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.774104118 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.774121046 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.774188995 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.774195910 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.774372101 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.774429083 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.774952888 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.775012016 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.775367975 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.775432110 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.775664091 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.775677919 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.775723934 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.775778055 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.776277065 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.776369095 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.776530981 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.776545048 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.777815104 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.778002977 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.778062105 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.778069019 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.778130054 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.778238058 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.778322935 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.778538942 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.778614998 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.778785944 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.779002905 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.779190063 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.779397964 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.779486895 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.779665947 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.779671907 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.779797077 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.779817104 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.779891014 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.780112028 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.804315090 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.820156097 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.820317984 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.820322990 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.820324898 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.821050882 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.856161118 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:21.856236935 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:21.856339931 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:21.857027054 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:21.857094049 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:21.857346058 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:21.857419014 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:21.857451916 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:21.857779026 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:21.857808113 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:21.920051098 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:21.920567036 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:21.920583010 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:21.922295094 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:21.922359943 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:21.923652887 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:21.923738956 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:21.923928976 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:21.923942089 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:21.978580952 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:21.984441042 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.984498024 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:21.984585047 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:21.984631062 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.001969099 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.002038956 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.002058983 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.002087116 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.002108097 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.002120972 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.011316061 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.011382103 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.011404991 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.011457920 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.011518002 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.011595964 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.011640072 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.011640072 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.011992931 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.012048006 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.012068987 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.012098074 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.012111902 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.012130022 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.013997078 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.014041901 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.014064074 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.014101028 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.014120102 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.014152050 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.017735958 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.017756939 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.017764091 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.017816067 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.017832041 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.025957108 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.026010036 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.026070118 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.026091099 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.026575089 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.042574883 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.042582989 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.058563948 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.058571100 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.058569908 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.058584929 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.058605909 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.058617115 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.058609962 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.058645010 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.073851109 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.073865891 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.075289965 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:22.075666904 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:22.075901985 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:22.075928926 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:22.076205015 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:22.076221943 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:22.079297066 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:22.079349041 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:22.079359055 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:22.079457045 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:22.088922024 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.104834080 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.104840040 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.104947090 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.105472088 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.107292891 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.107315063 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.107475042 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.107475042 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.107507944 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.107534885 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.107573032 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.107606888 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.107631922 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.107742071 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.107800007 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.107815027 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.107880116 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.107935905 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.107949018 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.120853901 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125279903 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125319004 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125483990 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125529051 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125541925 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125541925 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125541925 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125555038 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125581026 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125582933 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125610113 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125612020 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125660896 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125673056 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125754118 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125804901 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125813007 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125823021 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.125852108 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.125999928 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.126070023 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.126075983 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.134691954 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.134721994 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.134828091 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.134875059 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.134895086 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.134902000 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.134896040 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.134896040 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.134927988 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.134955883 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.134955883 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.134960890 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135020971 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135056019 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135097027 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135107040 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135149956 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135181904 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135189056 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135198116 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135225058 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135241985 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135277033 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135296106 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135319948 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135324955 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135338068 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135360003 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135364056 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135380983 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135380983 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135459900 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135497093 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.135503054 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135644913 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.135684967 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.136868954 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.136893034 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.136920929 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.136939049 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.136967897 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.136981010 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.137037992 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.137057066 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.137087107 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.137104988 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.137126923 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.137192965 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.137253046 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.141027927 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.141036034 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.141060114 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.141098022 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.141158104 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.141304970 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.141310930 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.141330004 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.141366005 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.141366005 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.141504049 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.141510963 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.141561985 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.141588926 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.142868996 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.142898083 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.142930031 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.142952919 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.142981052 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149044991 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149066925 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149097919 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149214029 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149214983 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149214983 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149298906 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149317026 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149353027 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149354935 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149373055 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149404049 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149465084 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149523973 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149552107 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149667025 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.149724007 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.149741888 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.152853012 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.168905973 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.184943914 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.193891048 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194013119 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194071054 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:22.194096088 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194181919 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194232941 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:22.194243908 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194329023 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194391012 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:22.194401979 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194509983 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194555044 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:22.194566011 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194693089 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.194739103 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:22.200957060 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.225310087 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:22.225660086 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:22.226294994 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:22.226619959 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:22.229810953 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:22.229824066 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:22.230070114 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:22.230113983 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:22.230607986 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.230631113 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.230669022 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.230699062 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.230710983 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.230793953 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.230846882 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.230854988 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.231103897 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.231157064 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.231163979 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.231530905 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.231585979 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.231591940 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.231741905 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.231782913 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.241211891 CEST	49797	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.241242886 CEST	443	49797	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.241862059 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.241902113 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.241975069 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.246912003 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.246938944 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.247206926 CEST	49796	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.247221947 CEST	443	49796	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.248473883 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.248503923 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.248541117 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.248577118 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.248585939 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.248639107 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.248694897 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.248702049 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.248823881 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.248876095 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.248883009 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.248935938 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.249000072 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.249011993 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.249078989 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.249084949 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.249145985 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265129089 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265199900 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265371084 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265371084 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265428066 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265448093 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265480042 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265496016 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265521049 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265544891 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265571117 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265618086 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265681028 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265696049 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265769005 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265814066 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265829086 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265841961 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265872002 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265934944 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.265971899 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.265984058 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.266002893 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.266042948 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.272432089 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.272453070 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.272617102 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.272618055 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.272655964 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.272672892 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.272697926 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.272823095 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.272886992 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.272955894 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.273003101 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.273005962 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.273024082 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.273041964 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.273073912 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.273099899 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.273116112 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.273173094 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.273294926 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.273356915 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.273356915 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.273418903 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.273457050 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.273518085 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.273538113 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.279845953 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:22.283006907 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:22.318517923 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.318681955 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.318766117 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.323045015 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.336163998 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:22.336380005 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:22.336457968 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:22.341037035 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:22.341495037 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:22.342900038 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:22.354250908 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.354293108 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.354357004 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.358156919 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.358182907 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.361526012 CEST	49804	443	192.168.2.4	64.233.185.147
Apr 18, 2024 19:22:22.361582994 CEST	443	49804	64.233.185.147	192.168.2.4
Apr 18, 2024 19:22:22.362097025 CEST	49806	443	192.168.2.4	172.253.124.157
Apr 18, 2024 19:22:22.362124920 CEST	443	49806	172.253.124.157	192.168.2.4
Apr 18, 2024 19:22:22.420612097 CEST	49795	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.420670986 CEST	443	49795	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.421009064 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.421041012 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.421088934 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.421704054 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.421715021 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.506767988 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.548023939 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.548049927 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.549294949 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.551006079 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.551187992 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.552078962 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.600138903 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.617872000 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.640449047 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.640472889 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.641639948 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.642246962 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.642424107 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.681771040 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.690975904 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.738270998 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.754054070 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.754110098 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.754169941 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.754198074 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.754214048 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.754256964 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.754400015 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.754477978 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.755669117 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.755974054 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.755981922 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.759598970 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.759618998 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.759661913 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.781447887 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:22.781537056 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:22.781610012 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:22.782445908 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.782738924 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:22.782773972 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:22.782795906 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.783380032 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.783396959 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.792186975 CEST	49801	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.792216063 CEST	443	49801	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.794322968 CEST	49799	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.794398069 CEST	443	49799	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.794995070 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.795028925 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.795078039 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.796118975 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.797496080 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.797511101 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.801192045 CEST	49794	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.801204920 CEST	443	49794	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.801729918 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.801753044 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.801816940 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.802202940 CEST	49793	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.802225113 CEST	443	49793	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.815530062 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.815608025 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.815718889 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.816457987 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.816492081 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.817568064 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.817605972 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.823620081 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.848423958 CEST	49802	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:22.848453999 CEST	443	49802	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:22.876879930 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:22.876960039 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:22.876966000 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.877019882 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:22.877058983 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.877074957 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.877142906 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.877202034 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.877213001 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.877247095 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.877294064 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.877305031 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.877365112 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.877401114 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.877446890 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.879333973 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:22.879369020 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:22.881748915 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.881809950 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.881839037 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.881860018 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.881861925 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.881894112 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.881901026 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.881917000 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.894608974 CEST	49807	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.894622087 CEST	443	49807	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.894907951 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.894922018 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.895026922 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.895559072 CEST	49816	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.895569086 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.895777941 CEST	49816	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.910717964 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.910732031 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.921497107 CEST	49816	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.921509981 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.929698944 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.929822922 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.929841995 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.929872990 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.929882050 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.929909945 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.929913998 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.929925919 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.935339928 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.935354948 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:22.984950066 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.984950066 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:22.984958887 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.001365900 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:23.003874063 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.003948927 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.004846096 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.004882097 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.004915953 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.004952908 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.005042076 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.005042076 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.005064011 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005083084 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005105019 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005119085 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.005132914 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005136013 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.005258083 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005276918 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005315065 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.005346060 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005371094 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.005388021 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005389929 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.005410910 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005444050 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.005558968 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.005942106 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.006262064 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:23.006320953 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:23.006712914 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.006757975 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.007874012 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:23.038467884 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.052546024 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.052812099 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.052841902 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.052875996 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.052896976 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.052928925 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.052977085 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.052995920 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.053021908 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.053025961 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.053039074 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.053071022 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.053153038 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.053303957 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.053443909 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.054084063 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:23.059345961 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.059385061 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.059576988 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:23.059703112 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:23.059727907 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:23.059789896 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:23.059881926 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.060257912 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.060342073 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.060347080 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.060921907 CEST	49808	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.060983896 CEST	443	49808	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.061299086 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.061347008 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.061464071 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.062304974 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.062340021 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.062868118 CEST	49809	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.062880039 CEST	443	49809	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.063170910 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.063186884 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.063366890 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.064835072 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.064851046 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.076263905 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.076504946 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.076525927 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.077634096 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.077950001 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.078239918 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.078367949 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.078376055 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.078425884 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.078473091 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.079922915 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.080008984 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.080305099 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.080393076 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.080394983 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.091743946 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.091955900 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:23.091984987 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.092375994 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.092454910 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:23.093086958 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.093148947 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:23.093966007 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:23.094026089 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.094198942 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:23.094213009 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.099797964 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:23.101095915 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.101111889 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.120117903 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.124119997 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.132215023 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.132318020 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.132337093 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.138937950 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:23.173500061 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.173702955 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.173722982 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.177423954 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.177479029 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.179778099 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.179892063 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.179892063 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.179900885 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.179904938 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.179974079 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.180413961 CEST	49816	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.180428982 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.181545973 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.186515093 CEST	49816	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.186697960 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.187235117 CEST	49816	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.214104891 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:23.214281082 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:23.214478970 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:23.214565992 CEST	49810	443	192.168.2.4	108.177.122.155
Apr 18, 2024 19:22:23.214605093 CEST	443	49810	108.177.122.155	192.168.2.4
Apr 18, 2024 19:22:23.221963882 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.222250938 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.222312927 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.223757029 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.223860979 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.223885059 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.223892927 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.224818945 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.224910021 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.225070000 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.225087881 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.228147030 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.270828009 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.270917892 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.302480936 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.302515984 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.302525043 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.302582979 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.302601099 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.302614927 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.319876909 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.320333004 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.320394039 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.321449041 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.321798086 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.321966887 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.321979046 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.322000980 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.324948072 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.325006008 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.325026989 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.325043917 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.325073004 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.325138092 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.325171947 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.328210115 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.328464031 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.328475952 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.328896999 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.328963995 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.329032898 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:23.329281092 CEST	49814	443	192.168.2.4	216.239.34.181
Apr 18, 2024 19:22:23.329315901 CEST	443	49814	216.239.34.181	192.168.2.4
Apr 18, 2024 19:22:23.329452038 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.329505920 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.329530001 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.329547882 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.329572916 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.329598904 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.329634905 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.329930067 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.329988003 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.330606937 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.330682039 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.330744982 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.330753088 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.347451925 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.347490072 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.363464117 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.382325888 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.382354975 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.382385969 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.382401943 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.382417917 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.397974968 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.423942089 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.424016953 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.424036980 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.424069881 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.424082994 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.424123049 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.424137115 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.424146891 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.425120115 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.425134897 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.425168991 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.425205946 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.425246000 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.425463915 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.425472975 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.425502062 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.425534010 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.425534964 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.425564051 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.425564051 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.425621986 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.425831079 CEST	49811	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.425851107 CEST	443	49811	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.426312923 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.426389933 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.426472902 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.426970959 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.427007914 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.428050995 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.428265095 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.428334951 CEST	49816	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.433125973 CEST	49816	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.433151960 CEST	443	49816	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.436281919 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.436285973 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.447567940 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.447590113 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.447606087 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.447650909 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.447715998 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.447745085 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.447777987 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.447794914 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.447813988 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.447830915 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.447856903 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.447885036 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.447976112 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.448000908 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.448019981 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.448040009 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.448065042 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.448072910 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.448801041 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.448818922 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.448858976 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.448873997 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.448903084 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.451963902 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.451987982 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.452003956 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.452044010 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.452069998 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.452084064 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.452289104 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.452307940 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.452347040 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.452364922 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.452392101 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.452450991 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.452457905 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.452542067 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.452702999 CEST	49813	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.452728987 CEST	443	49813	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.453017950 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.453032970 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.453080893 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.453510046 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.453522921 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.466644049 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.466650009 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.490298986 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.521544933 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549068928 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549103022 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549128056 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549137115 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549169064 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549176931 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549180984 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549292088 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549320936 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549348116 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549355984 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549374104 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549395084 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549400091 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549489975 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.549540043 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549787998 CEST	49815	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.549793959 CEST	443	49815	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.550112963 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.550173044 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.550235987 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.550729990 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.550757885 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.570080042 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.570135117 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.570154905 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.570321083 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.570321083 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.570386887 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.572534084 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.572556973 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.572580099 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.572601080 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.572638035 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.572653055 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.572685003 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.572735071 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.572748899 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.572796106 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.572839975 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.572966099 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.573160887 CEST	49812	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.573182106 CEST	443	49812	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.577589035 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.577650070 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.577668905 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.577687025 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.577693939 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.577713013 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.577728987 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.587393045 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.587626934 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.587832928 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.588902950 CEST	49817	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.588939905 CEST	443	49817	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.609904051 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.609951019 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.610037088 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.610209942 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.610228062 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.619256973 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.619260073 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.619265079 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.619271994 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.660545111 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.662367105 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.688841105 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.692879915 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.692903996 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.693079948 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.693094969 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.693094969 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.693171978 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.693272114 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.693294048 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.693336964 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.693336964 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.693371058 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.693435907 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.693510056 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.700961113 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.700984001 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701008081 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701016903 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.701044083 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.701064110 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.701066971 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701128960 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701145887 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701164007 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701185942 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.701191902 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701193094 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.701210976 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.701251030 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701314926 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.701363087 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.701523066 CEST	49818	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.701554060 CEST	443	49818	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.702620029 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.703219891 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.703450918 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.703670025 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.704235077 CEST	49819	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.704250097 CEST	443	49819	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.710453033 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.710932016 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.710956097 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.712039948 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.713040113 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.713124990 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.713354111 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.718081951 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:23.718153000 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:23.718220949 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:23.718535900 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:23.718568087 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:23.744148016 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.756125927 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.812565088 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.812870026 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.812928915 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.816508055 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.816586971 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.816848993 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.816971064 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.816983938 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.817038059 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.827805042 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.827991962 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.828038931 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.828499079 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.828880072 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.828880072 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.829015017 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:23.865503073 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.865561962 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.881165028 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:23.911941051 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.936579943 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:23.936794996 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:23.936817884 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.936837912 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:23.936889887 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.936969042 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.937026978 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.937163115 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.937218904 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.937242031 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.937299013 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.937460899 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.937674046 CEST	49820	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.937699080 CEST	443	49820	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.938595057 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:23.938653946 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:23.938946009 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:23.939028978 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:23.939068079 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:23.958622932 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.958655119 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.958709002 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:23.958719969 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:23.984112024 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:23.989614010 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:23.989634991 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:24.004965067 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.004971027 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.037345886 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:24.053141117 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.059942961 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.060174942 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.060352087 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.060617924 CEST	49822	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.060661077 CEST	443	49822	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.081765890 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.081780910 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.081820965 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.081830978 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.081886053 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.081892014 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.081898928 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.081945896 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.082118034 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.082127094 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.082168102 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.082184076 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.082187891 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.082722902 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.082779884 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.082787037 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.099262953 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.099405050 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.099514961 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.099598885 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.099663973 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.099663973 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.099689007 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.099721909 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.099838972 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.099877119 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.099983931 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100085974 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100138903 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.100157022 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100236893 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.100254059 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100413084 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100501060 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100552082 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.100568056 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100661039 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.100673914 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100768089 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100821972 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.100836039 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100929976 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.100980043 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.100995064 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.101090908 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.101140022 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.101152897 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.101618052 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.101687908 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.101701021 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.101795912 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.101850986 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.101864100 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.102468967 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.102540016 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.102551937 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.102642059 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.102694035 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.102708101 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.102816105 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.102866888 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.102880955 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.103439093 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.103506088 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.103518963 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.103619099 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.103669882 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.103687048 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.103773117 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.103852987 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.103866100 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.104322910 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.104373932 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.104387999 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.104492903 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.104547977 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.104562044 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.105329037 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.105391979 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.105405092 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.135101080 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.150316000 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.203177929 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.203263998 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.203826904 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.203882933 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.203927040 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.203983068 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.204627037 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.204703093 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.204720020 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.204782009 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.205194950 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205235004 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205260992 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.205272913 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205286026 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.205404997 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.205414057 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205435038 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205465078 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205470085 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.205492973 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.205502033 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.205508947 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205518961 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.205569983 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205575943 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.205620050 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.205624104 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.205631971 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205661058 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205682993 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.205710888 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.205718994 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.205986977 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.206043959 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.206053972 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.206094980 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.206154108 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.206161022 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.206232071 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.206288099 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.206295013 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.206377983 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.206433058 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.206464052 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.206517935 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.207391977 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.207469940 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.207485914 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.207539082 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.208182096 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.208266020 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.208277941 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.208306074 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.208338976 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.209044933 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.209106922 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.209131002 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.209213018 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.209270954 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.209285975 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.210066080 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.210134983 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.210148096 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.210171938 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.210222960 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.210242033 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.210269928 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.245846987 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.245924950 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.245935917 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.245949984 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.245996952 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.246193886 CEST	49821	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:24.246206045 CEST	443	49821	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:24.256127119 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.307218075 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.307300091 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.307343960 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.307404041 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.308254004 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.308337927 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.308389902 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.308450937 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.308497906 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.308557034 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.308594942 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.308648109 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.309298992 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.309361935 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.309387922 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.309453011 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.310606956 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.310678005 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.310708046 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.310770035 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.311108112 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.311171055 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.311203003 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.311266899 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.312056065 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.312135935 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.312856913 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.312922001 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.313113928 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.313184023 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.313218117 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.313275099 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.313977957 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.314038992 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.314086914 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.314145088 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.314914942 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.314981937 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.315798044 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.315862894 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.315891981 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.315953970 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.316823959 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.316898108 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.317846060 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.317867994 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.317909956 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.317914009 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.317939043 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.317971945 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.318006039 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.319664001 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.319710016 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.319736958 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.319751978 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.319782972 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.321429014 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.321475029 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.321527004 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.321547985 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.321576118 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.323942900 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.323985100 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.324008942 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.324022055 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.324048042 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.325701952 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.325745106 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.325795889 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.325815916 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.325839043 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.327591896 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.327641964 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.327656984 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.327677011 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.327712059 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.329382896 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.329425097 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.329467058 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.329483032 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.329513073 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.331520081 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.331561089 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.331595898 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.331613064 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.331640005 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.381104946 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.411653042 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.411715984 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.411744118 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.411791086 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.411807060 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.411863089 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.413254976 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.413316011 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.413353920 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.413369894 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.413399935 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.413423061 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.415069103 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.415121078 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.415146112 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.415159941 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.415186882 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.415570974 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.416965008 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.417011976 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.417037010 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.417057037 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.417082071 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.417099953 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.419162035 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.419214010 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.419234037 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.419245958 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.419286013 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.419286013 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.420953989 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.421001911 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.421039104 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.421052933 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.421082973 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.421103954 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.422708035 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.422754049 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.422781944 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.422799110 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.422825098 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.422868967 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.424503088 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.424554110 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.424578905 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.424591064 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.424616098 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.424637079 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.426851988 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.426922083 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.426949024 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.426965952 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.426991940 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.427104950 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.428524971 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.428572893 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.428596020 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.428608894 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.428643942 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.428664923 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.430394888 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.430449009 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.430478096 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.430490971 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.430517912 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.430540085 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.432168007 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.432214975 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.432240963 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.432252884 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.432277918 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.432296991 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.434736967 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.434781075 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.434808016 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.434824944 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.434851885 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.434897900 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.436189890 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.436234951 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.436271906 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.436291933 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.436317921 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.436348915 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.437952042 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.438004017 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.438020945 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.438034058 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.438064098 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.438086033 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.439857960 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.439903021 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.439934969 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.439946890 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.439982891 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.439982891 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.442368984 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.442425013 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.442455053 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.442480087 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.442504883 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.442552090 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.444251060 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.444294930 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.444359064 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.444423914 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.444463015 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.444485903 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.445593119 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.445632935 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.445672989 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.445692062 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.445714951 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.445743084 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.448229074 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.448270082 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.448296070 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.448309898 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.448340893 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.448612928 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.450006008 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.450047016 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.450095892 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.450109005 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.450139046 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.450161934 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.451831102 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.451872110 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.451906919 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.451920033 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.451961040 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.451961040 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.453619003 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.453660965 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.453711987 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.453725100 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.453753948 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.453819036 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.455907106 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.455950022 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.455979109 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.455991983 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.456022978 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.456579924 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.457621098 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.457664013 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.457691908 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.457705021 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.457734108 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.457756042 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.459630013 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.459671974 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.459712029 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.459726095 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.459758997 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.459780931 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.461374998 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.461415052 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.461446047 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.461458921 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.461486101 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.461507082 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.478442907 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:24.478722095 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:24.478791952 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:24.487216949 CEST	49827	443	192.168.2.4	104.18.72.113
Apr 18, 2024 19:22:24.487257957 CEST	443	49827	104.18.72.113	192.168.2.4
Apr 18, 2024 19:22:24.515656948 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.515739918 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.516479969 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.516552925 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.516566992 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.516694069 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.518251896 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.518297911 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.518311024 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.518326044 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.518352032 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.518373966 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.519151926 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.519224882 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.520935059 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.520986080 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.521013021 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.521025896 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.521089077 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.521089077 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.522763014 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.522816896 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.522830009 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.522866964 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.522912979 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.524988890 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.525047064 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.525058031 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.525074959 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.525274038 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.526758909 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.526810884 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.526822090 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.526835918 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.526887894 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.528615952 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.528660059 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.528691053 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.528707981 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.528740883 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.530412912 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.530463934 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.530483961 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.530498028 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.530527115 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.532593012 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.532634974 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.532648087 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.532665968 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.532700062 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.534364939 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.534415007 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.534435987 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.534451008 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.534481049 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.536256075 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.536314011 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.536328077 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.536345959 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.536379099 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.538007975 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.538062096 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.538074970 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.538089991 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.538125992 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.538747072 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.538813114 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.538834095 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.538906097 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.538898945 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.539020061 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.539366007 CEST	49825	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.539393902 CEST	443	49825	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.797919035 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.797996044 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.798124075 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.798718929 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:24.798748970 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:24.905678988 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:24.905774117 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:24.905865908 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:24.906080961 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:24.906116962 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:25.020740032 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.068846941 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.133719921 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:25.176052094 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:25.181227922 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:25.181253910 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:25.181350946 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.181385994 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.182636976 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.184402943 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:25.184495926 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:25.188328028 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.188523054 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.189434052 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:25.189541101 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:25.189946890 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.189995050 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:25.190005064 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:25.232158899 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.233959913 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:25.326313019 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.326436043 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.326555014 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.326613903 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.326641083 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.326669931 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.326699972 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.326849937 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.326910019 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.326941013 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327044010 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327091932 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.327106953 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327188969 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327231884 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.327240944 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327328920 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327375889 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.327387094 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327470064 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327516079 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.327526093 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327614069 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327655077 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.327662945 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327779055 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327822924 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.327831984 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327922106 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.327965021 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.327972889 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.328058004 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.328114986 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.330776930 CEST	49828	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:25.330789089 CEST	443	49828	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:25.505839109 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:25.505973101 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:25.506056070 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:26.128638029 CEST	49829	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:26.128709078 CEST	443	49829	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:26.183955908 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.183995008 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.184047937 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.184407949 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.184428930 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.406265020 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.451700926 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.514683008 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.514708042 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.515971899 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.521131992 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.521276951 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.521327972 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.567428112 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.673793077 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:26.673823118 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:26.674086094 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:26.674384117 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:26.674463987 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:26.679053068 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679184914 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679231882 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.679251909 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679341078 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679445028 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.679452896 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679505110 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.679512024 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679594994 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679650068 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.679660082 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679904938 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.679950953 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.679959059 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.680042982 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.680140972 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.680197954 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.680207014 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.680259943 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.680267096 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.680773973 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.680818081 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.680829048 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.680953979 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.681030989 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.681058884 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.681068897 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.681107998 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.681114912 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.681725025 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.681776047 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.681783915 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.681871891 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.681915998 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.681924105 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.682547092 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.682595968 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.682605982 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.682672024 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.682714939 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.682723045 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.682800055 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.682873011 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.682893991 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.682903051 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.682948112 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.683341980 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.683476925 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.683553934 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.683600903 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.683609009 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.683650017 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.683657885 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.684495926 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.684549093 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.684556961 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.684694052 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.684767962 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.684868097 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.684878111 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.684948921 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.685336113 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.685389042 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.784277916 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.784334898 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.784410954 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.784454107 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.784482956 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.784527063 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.785300016 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.785375118 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.785489082 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.785536051 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.786401033 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.786457062 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.786493063 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.786545038 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.786603928 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.786653042 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.786679983 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.786731005 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.787326097 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.787396908 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.787412882 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.787463903 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.790402889 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.790584087 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.790596962 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.790654898 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.791304111 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.791376114 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.791424036 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.791474104 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.791513920 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.791584969 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.887211084 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.887284040 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.887300014 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.887345076 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.888386011 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.888438940 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.888474941 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.888523102 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.888856888 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.888909101 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.888942003 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.888991117 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.889698029 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.889748096 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.890280962 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.890331984 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.890379906 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.890429974 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.891259909 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.891319990 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.891345978 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.891391993 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.892055035 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.892108917 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.892163992 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.892214060 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.892875910 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:26.892963886 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.893012047 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.893071890 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:26.893127918 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:26.893785954 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.893836975 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.894069910 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.894120932 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.894190073 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.894237041 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.894902945 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.894954920 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.894984961 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.895034075 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.895733118 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.895788908 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.895824909 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.895870924 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.895879030 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.895972013 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.895981073 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.896089077 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.896218061 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.896225929 CEST	443	49830	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:26.896234989 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.896271944 CEST	49830	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:26.896780968 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:26.896861076 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:26.897669077 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:26.897763968 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:26.897919893 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:26.897938013 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:26.943623066 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:27.013669968 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:27.013732910 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:27.013904095 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:27.036314011 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.036391020 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.036487103 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.036791086 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.036827087 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.165618896 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:27.165977955 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:27.166047096 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:27.168273926 CEST	49831	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:27.168312073 CEST	443	49831	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:27.411226034 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.451190948 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.451224089 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.455121040 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.455209017 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.456221104 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.456422091 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.456650019 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.456665993 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.501832008 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.595412970 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.595577002 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.595654011 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.596261024 CEST	49832	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.596290112 CEST	443	49832	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.661230087 CEST	49740	443	192.168.2.4	64.233.177.106
Apr 18, 2024 19:22:27.661246061 CEST	443	49740	64.233.177.106	192.168.2.4
Apr 18, 2024 19:22:27.661801100 CEST	49833	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.661880970 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.661945105 CEST	49833	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.662283897 CEST	49833	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.662317038 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.903192997 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.906009912 CEST	49833	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.906048059 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.907246113 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.907629013 CEST	49833	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.907805920 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:27.907964945 CEST	49833	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:27.952145100 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.069524050 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.069551945 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.069761038 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.072215080 CEST	49835	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.072293043 CEST	443	49835	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.072372913 CEST	49835	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.072434902 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.072496891 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.072554111 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.072572947 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.072582006 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.072740078 CEST	49835	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.072781086 CEST	443	49835	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.073223114 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.073260069 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.138725042 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.138987064 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.142945051 CEST	49833	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.159250021 CEST	49833	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.159290075 CEST	443	49833	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.214740992 CEST	49837	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.214782000 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.214896917 CEST	49837	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.215094090 CEST	49837	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.215105057 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.217310905 CEST	49838	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.217364073 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.217434883 CEST	49838	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.217691898 CEST	49838	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.217709064 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.288567066 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.288990021 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.289002895 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.289455891 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.289777994 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.289860010 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.290273905 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.331695080 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.331943989 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.331973076 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.332535028 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.332874060 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.332951069 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.332995892 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.333595037 CEST	443	49835	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.333895922 CEST	49835	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.333925962 CEST	443	49835	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.335014105 CEST	443	49835	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.335325003 CEST	49835	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.335505009 CEST	443	49835	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.336121082 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.380136967 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.388479948 CEST	49835	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.434705973 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.454700947 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.456495047 CEST	49837	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.456540108 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.457741022 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.457927942 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.458781958 CEST	49838	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.458842039 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.459249020 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.459784031 CEST	49837	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.459970951 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.460306883 CEST	49838	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.460385084 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.460536003 CEST	49837	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.460562944 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.460659981 CEST	49838	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.508116007 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.671073914 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.671155930 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.671235085 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.671716928 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.671716928 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.671756029 CEST	443	49834	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.671861887 CEST	49834	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.672614098 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.672665119 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.672786951 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.673111916 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.673126936 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.687366962 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.687643051 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.687772036 CEST	49837	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.688316107 CEST	49837	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.688352108 CEST	443	49837	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.692912102 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.693173885 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.693228960 CEST	49838	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.693730116 CEST	49838	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.693742037 CEST	443	49838	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.713531017 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.713603020 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.713687897 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.713860989 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.713896036 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.891129971 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.891587973 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.891649961 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.892183065 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.892573118 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.892664909 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.892781019 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:28.919353962 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.919387102 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.919395924 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.919459105 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.919538975 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.919538975 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.919538975 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.919579029 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.922344923 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.922424078 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:28.922435999 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:28.936161995 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:28.951240063 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.951689959 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.951721907 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.952879906 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.953378916 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.953547001 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:28.954472065 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:28.996149063 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.042273998 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:29.042387962 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:29.042454004 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:29.042530060 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:29.042531967 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:29.042597055 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:29.042792082 CEST	49836	443	192.168.2.4	199.119.121.23
Apr 18, 2024 19:22:29.042809010 CEST	443	49836	199.119.121.23	192.168.2.4
Apr 18, 2024 19:22:29.098018885 CEST	49841	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.098095894 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.098181009 CEST	49841	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.099854946 CEST	49841	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.099899054 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.184058905 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.184148073 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.184258938 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.184293985 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.184389114 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.184437990 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.184763908 CEST	49840	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.184788942 CEST	443	49840	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.286381006 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:29.286461115 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:29.286535025 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:29.286818981 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:29.286869049 CEST	443	49839	104.16.51.111	192.168.2.4
Apr 18, 2024 19:22:29.286900997 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:29.286945105 CEST	49839	443	192.168.2.4	104.16.51.111
Apr 18, 2024 19:22:29.306148052 CEST	49844	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.306219101 CEST	443	49844	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.306314945 CEST	49844	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.306500912 CEST	49844	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.306534052 CEST	443	49844	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.306914091 CEST	49845	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.306942940 CEST	443	49845	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.307102919 CEST	49845	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.307243109 CEST	49845	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.307254076 CEST	443	49845	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.332747936 CEST	49846	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:29.332801104 CEST	443	49846	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:29.333025932 CEST	49846	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:29.333133936 CEST	49846	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:29.333163023 CEST	443	49846	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:29.361341000 CEST	49847	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.361398935 CEST	443	49847	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.361474037 CEST	49847	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.361907005 CEST	49847	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.361939907 CEST	443	49847	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.423410892 CEST	49849	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:29.423433065 CEST	443	49849	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:29.423489094 CEST	49849	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:29.423976898 CEST	49849	443	192.168.2.4	104.16.53.111
Apr 18, 2024 19:22:29.423990965 CEST	443	49849	104.16.53.111	192.168.2.4
Apr 18, 2024 19:22:29.425080061 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.425941944 CEST	49841	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.425965071 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.426332951 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.426615000 CEST	49841	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.426687956 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.426721096 CEST	49841	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.468148947 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.544572115 CEST	443	49844	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.544806004 CEST	49844	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.544836044 CEST	443	49844	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.546040058 CEST	443	49844	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.546956062 CEST	49844	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.547138929 CEST	443	49844	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.547802925 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.547862053 CEST	49844	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.547934055 CEST	49841	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.550715923 CEST	49841	443	192.168.2.4	104.17.98.195
Apr 18, 2024 19:22:29.550738096 CEST	443	49841	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.554403067 CEST	443	49846	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:29.554661989 CEST	49846	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:29.554678917 CEST	443	49846	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:29.556152105 CEST	443	49846	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:29.556528091 CEST	49846	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:29.556638956 CEST	49846	443	192.168.2.4	104.18.70.113
Apr 18, 2024 19:22:29.556715965 CEST	443	49846	104.18.70.113	192.168.2.4
Apr 18, 2024 19:22:29.588145971 CEST	443	49844	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.600354910 CEST	443	49847	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.600567102 CEST	49847	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.600588083 CEST	443	49847	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.601696014 CEST	443	49847	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.601991892 CEST	49847	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.602137089 CEST	49847	443	192.168.2.4	3.216.21.64
Apr 18, 2024 19:22:29.602148056 CEST	443	49847	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.602169991 CEST	443	49847	3.216.21.64	192.168.2.4
Apr 18, 2024 19:22:29.630754948 CEST	443	49845	104.17.98.195	192.168.2.4
Apr 18, 2024 19:22:29.630959034 CEST	49845	443	192.168.2.4	104.17.98.195

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 19:22:14.940615892 CEST	192.168.2.4	1.1.1.1	0x231c	Standard query (0)	www.traininng.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:14.940617085 CEST	192.168.2.4	1.1.1.1	0x9f8b	Standard query (0)	www.traininng.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:15.332942009 CEST	192.168.2.4	1.1.1.1	0x7d82	Standard query (0)	www.traininng.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:15.333055973 CEST	192.168.2.4	1.1.1.1	0xa1d8	Standard query (0)	www.traininng.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:16.694385052 CEST	192.168.2.4	1.1.1.1	0xea5a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:16.694547892 CEST	192.168.2.4	1.1.1.1	0x8c10	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:18.868690968 CEST	192.168.2.4	1.1.1.1	0x757f	Standard query (0)	www.traininng.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:18.869071007 CEST	192.168.2.4	1.1.1.1	0x89d5	Standard query (0)	www.traininng.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:19.060074091 CEST	192.168.2.4	1.1.1.1	0x667c	Standard query (0)	seal.godaddy.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:19.060209990 CEST	192.168.2.4	1.1.1.1	0x31c1	Standard query (0)	seal.godaddy.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:20.448914051 CEST	192.168.2.4	1.1.1.1	0x252e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.449248075 CEST	192.168.2.4	1.1.1.1	0xd32c	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:22:20.506578922 CEST	192.168.2.4	1.1.1.1	0x4ebc	Standard query (0)	v2.zopim.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.507123947 CEST	192.168.2.4	1.1.1.1	0x8b30	Standard query (0)	v2.zopim.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:21.035300970 CEST	192.168.2.4	1.1.1.1	0xd986	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.035599947 CEST	192.168.2.4	1.1.1.1	0x2ea8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:21.536999941 CEST	192.168.2.4	1.1.1.1	0x201a	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.537904978 CEST	192.168.2.4	1.1.1.1	0x60e	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:21.705424070 CEST	192.168.2.4	1.1.1.1	0xa4ac	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.706052065 CEST	192.168.2.4	1.1.1.1	0x3c50	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:22:21.721987963 CEST	192.168.2.4	1.1.1.1	0xb43e	Standard query (0)	seal.godaddy.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.722126007 CEST	192.168.2.4	1.1.1.1	0x4d80	Standard query (0)	seal.godaddy.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:21.747750998 CEST	192.168.2.4	1.1.1.1	0x6c9a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.748189926 CEST	192.168.2.4	1.1.1.1	0x2361	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:22.755265951 CEST	192.168.2.4	1.1.1.1	0x28a1	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:22.755491018 CEST	192.168.2.4	1.1.1.1	0xb1d1	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:22.894270897 CEST	192.168.2.4	1.1.1.1	0x9db1	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:22.894429922 CEST	192.168.2.4	1.1.1.1	0x2167	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:23.612632990 CEST	192.168.2.4	1.1.1.1	0xee2e	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:23.612761974 CEST	192.168.2.4	1.1.1.1	0x320b	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:24.798343897 CEST	192.168.2.4	1.1.1.1	0xb8af	Standard query (0)	traininngllc.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:24.798518896 CEST	192.168.2.4	1.1.1.1	0xd235	Standard query (0)	traininngllc.zendesk.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:26.539956093 CEST	192.168.2.4	1.1.1.1	0x30cd	Standard query (0)	traininngllc.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:26.540323973 CEST	192.168.2.4	1.1.1.1	0x57fb	Standard query (0)	traininngllc.zendesk.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:26.930022955 CEST	192.168.2.4	1.1.1.1	0x3d38	Standard query (0)	widget-mediator.zopim.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:26.930434942 CEST	192.168.2.4	1.1.1.1	0x8dd0	Standard query (0)	widget-mediator.zopim.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:29.769077063 CEST	192.168.2.4	1.1.1.1	0x18f	Standard query (0)	v2.zopim.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:29.769136906 CEST	192.168.2.4	1.1.1.1	0x766	Standard query (0)	v2.zopim.com	65	IN (0x0001)	false
Apr 18, 2024 19:22:30.033417940 CEST	192.168.2.4	1.1.1.1	0xc1d4	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:30.033677101 CEST	192.168.2.4	1.1.1.1	0x2e8b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 19:23:20.623051882 CEST	192.168.2.4	1.1.1.1	0x242f	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:20.623200893 CEST	192.168.2.4	1.1.1.1	0xb6e3	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:23:23.130045891 CEST	192.168.2.4	1.1.1.1	0x2398	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:23.130196095 CEST	192.168.2.4	1.1.1.1	0xa25c	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:23:28.235640049 CEST	192.168.2.4	1.1.1.1	0x211f	Standard query (0)	widget-mediator.zopim.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.235747099 CEST	192.168.2.4	1.1.1.1	0x9ad2	Standard query (0)	widget-mediator.zopim.com	65	IN (0x0001)	false
Apr 18, 2024 19:23:30.065937042 CEST	192.168.2.4	1.1.1.1	0xb509	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:30.066150904 CEST	192.168.2.4	1.1.1.1	0xc9ff	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 19:22:15.082851887 CEST	1.1.1.1	192.168.2.4	0x231c	No error (0)	www.traininng.com	traininng.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:15.082851887 CEST	1.1.1.1	192.168.2.4	0x231c	No error (0)	traininng.com		199.119.121.23	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:15.082890987 CEST	1.1.1.1	192.168.2.4	0x9f8b	No error (0)	www.traininng.com	traininng.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:15.466381073 CEST	1.1.1.1	192.168.2.4	0x7d82	No error (0)	www.traininng.com	traininng.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:15.466381073 CEST	1.1.1.1	192.168.2.4	0x7d82	No error (0)	traininng.com		199.119.121.23	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:15.521337986 CEST	1.1.1.1	192.168.2.4	0xa1d8	No error (0)	www.traininng.com	traininng.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:16.799479961 CEST	1.1.1.1	192.168.2.4	0xea5a	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:16.799479961 CEST	1.1.1.1	192.168.2.4	0xea5a	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:16.799479961 CEST	1.1.1.1	192.168.2.4	0xea5a	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:16.799479961 CEST	1.1.1.1	192.168.2.4	0xea5a	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:16.799479961 CEST	1.1.1.1	192.168.2.4	0xea5a	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:16.799479961 CEST	1.1.1.1	192.168.2.4	0xea5a	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:16.799546003 CEST	1.1.1.1	192.168.2.4	0x8c10	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:22:19.001327038 CEST	1.1.1.1	192.168.2.4	0x89d5	No error (0)	www.traininng.com	traininng.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:19.003395081 CEST	1.1.1.1	192.168.2.4	0x757f	No error (0)	www.traininng.com	traininng.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:19.003395081 CEST	1.1.1.1	192.168.2.4	0x757f	No error (0)	traininng.com		199.119.121.23	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:19.165056944 CEST	1.1.1.1	192.168.2.4	0x31c1	No error (0)	seal.godaddy.com	seal-gd.prod.starfieldtech.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:19.225850105 CEST	1.1.1.1	192.168.2.4	0x667c	No error (0)	seal.godaddy.com	seal-gd.prod.starfieldtech.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:20.554133892 CEST	1.1.1.1	192.168.2.4	0x252e	No error (0)	stats.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.554133892 CEST	1.1.1.1	192.168.2.4	0x252e	No error (0)	stats.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.554133892 CEST	1.1.1.1	192.168.2.4	0x252e	No error (0)	stats.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.554133892 CEST	1.1.1.1	192.168.2.4	0x252e	No error (0)	stats.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.612037897 CEST	1.1.1.1	192.168.2.4	0x4ebc	No error (0)	v2.zopim.com		104.17.98.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.612037897 CEST	1.1.1.1	192.168.2.4	0x4ebc	No error (0)	v2.zopim.com		104.17.97.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.612037897 CEST	1.1.1.1	192.168.2.4	0x4ebc	No error (0)	v2.zopim.com		104.17.95.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.612037897 CEST	1.1.1.1	192.168.2.4	0x4ebc	No error (0)	v2.zopim.com		104.17.99.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.612037897 CEST	1.1.1.1	192.168.2.4	0x4ebc	No error (0)	v2.zopim.com		104.17.96.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:20.613341093 CEST	1.1.1.1	192.168.2.4	0x8b30	No error (0)	v2.zopim.com			65	IN (0x0001)	false
Apr 18, 2024 19:22:21.139801025 CEST	1.1.1.1	192.168.2.4	0xd986	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.139801025 CEST	1.1.1.1	192.168.2.4	0xd986	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.139801025 CEST	1.1.1.1	192.168.2.4	0xd986	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.139801025 CEST	1.1.1.1	192.168.2.4	0xd986	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.139801025 CEST	1.1.1.1	192.168.2.4	0xd986	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.139801025 CEST	1.1.1.1	192.168.2.4	0xd986	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.140284061 CEST	1.1.1.1	192.168.2.4	0x2ea8	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:22:21.641624928 CEST	1.1.1.1	192.168.2.4	0x201a	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.641624928 CEST	1.1.1.1	192.168.2.4	0x201a	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.809835911 CEST	1.1.1.1	192.168.2.4	0xa4ac	No error (0)	stats.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.809835911 CEST	1.1.1.1	192.168.2.4	0xa4ac	No error (0)	stats.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.809835911 CEST	1.1.1.1	192.168.2.4	0xa4ac	No error (0)	stats.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.809835911 CEST	1.1.1.1	192.168.2.4	0xa4ac	No error (0)	stats.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.827182055 CEST	1.1.1.1	192.168.2.4	0x4d80	No error (0)	seal.godaddy.com	seal-gd.prod.starfieldtech.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:21.827308893 CEST	1.1.1.1	192.168.2.4	0xb43e	No error (0)	seal.godaddy.com	seal-gd.prod.starfieldtech.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:21.852864981 CEST	1.1.1.1	192.168.2.4	0x6c9a	No error (0)	www.google.com		64.233.185.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.852864981 CEST	1.1.1.1	192.168.2.4	0x6c9a	No error (0)	www.google.com		64.233.185.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.852864981 CEST	1.1.1.1	192.168.2.4	0x6c9a	No error (0)	www.google.com		64.233.185.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.852864981 CEST	1.1.1.1	192.168.2.4	0x6c9a	No error (0)	www.google.com		64.233.185.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.852864981 CEST	1.1.1.1	192.168.2.4	0x6c9a	No error (0)	www.google.com		64.233.185.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.852864981 CEST	1.1.1.1	192.168.2.4	0x6c9a	No error (0)	www.google.com		64.233.185.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:21.852926016 CEST	1.1.1.1	192.168.2.4	0x2361	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:22:22.860054016 CEST	1.1.1.1	192.168.2.4	0x28a1	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:22.860054016 CEST	1.1.1.1	192.168.2.4	0x28a1	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:22.860054016 CEST	1.1.1.1	192.168.2.4	0x28a1	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:22.860054016 CEST	1.1.1.1	192.168.2.4	0x28a1	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:22.860054016 CEST	1.1.1.1	192.168.2.4	0x28a1	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:23.001020908 CEST	1.1.1.1	192.168.2.4	0x9db1	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:23.001020908 CEST	1.1.1.1	192.168.2.4	0x9db1	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:23.717015982 CEST	1.1.1.1	192.168.2.4	0xee2e	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:23.717015982 CEST	1.1.1.1	192.168.2.4	0xee2e	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:24.904978037 CEST	1.1.1.1	192.168.2.4	0xb8af	No error (0)	traininngllc.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:24.904978037 CEST	1.1.1.1	192.168.2.4	0xb8af	No error (0)	traininngllc.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:26.647104025 CEST	1.1.1.1	192.168.2.4	0x30cd	No error (0)	traininngllc.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:26.647104025 CEST	1.1.1.1	192.168.2.4	0x30cd	No error (0)	traininngllc.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:27.035681963 CEST	1.1.1.1	192.168.2.4	0x3d38	No error (0)	widget-mediator.zopim.com		3.216.21.64	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:27.035681963 CEST	1.1.1.1	192.168.2.4	0x3d38	No error (0)	widget-mediator.zopim.com		54.88.2.146	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:27.035681963 CEST	1.1.1.1	192.168.2.4	0x3d38	No error (0)	widget-mediator.zopim.com		3.227.120.65	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:27.035681963 CEST	1.1.1.1	192.168.2.4	0x3d38	No error (0)	widget-mediator.zopim.com		52.2.130.131	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:27.035681963 CEST	1.1.1.1	192.168.2.4	0x3d38	No error (0)	widget-mediator.zopim.com		54.208.69.233	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:27.035681963 CEST	1.1.1.1	192.168.2.4	0x3d38	No error (0)	widget-mediator.zopim.com		3.223.240.9	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:27.035681963 CEST	1.1.1.1	192.168.2.4	0x3d38	No error (0)	widget-mediator.zopim.com		3.220.215.198	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:27.035681963 CEST	1.1.1.1	192.168.2.4	0x3d38	No error (0)	widget-mediator.zopim.com		54.226.98.214	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:29.874907017 CEST	1.1.1.1	192.168.2.4	0x18f	No error (0)	v2.zopim.com		104.17.97.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:29.874907017 CEST	1.1.1.1	192.168.2.4	0x18f	No error (0)	v2.zopim.com		104.17.96.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:29.874907017 CEST	1.1.1.1	192.168.2.4	0x18f	No error (0)	v2.zopim.com		104.17.98.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:29.874907017 CEST	1.1.1.1	192.168.2.4	0x18f	No error (0)	v2.zopim.com		104.17.99.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:29.874907017 CEST	1.1.1.1	192.168.2.4	0x18f	No error (0)	v2.zopim.com		104.17.95.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:29.874950886 CEST	1.1.1.1	192.168.2.4	0x766	No error (0)	v2.zopim.com			65	IN (0x0001)	false
Apr 18, 2024 19:22:30.138906956 CEST	1.1.1.1	192.168.2.4	0xc1d4	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:31.042370081 CEST	1.1.1.1	192.168.2.4	0x390a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:31.042370081 CEST	1.1.1.1	192.168.2.4	0x390a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:31.979022026 CEST	1.1.1.1	192.168.2.4	0xed62	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:31.979022026 CEST	1.1.1.1	192.168.2.4	0xed62	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:22:46.504024982 CEST	1.1.1.1	192.168.2.4	0xf86d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:22:46.504024982 CEST	1.1.1.1	192.168.2.4	0xf86d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:05.277146101 CEST	1.1.1.1	192.168.2.4	0xad40	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:23:05.277146101 CEST	1.1.1.1	192.168.2.4	0xad40	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:20.727118015 CEST	1.1.1.1	192.168.2.4	0x242f	No error (0)	stats.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:20.727118015 CEST	1.1.1.1	192.168.2.4	0x242f	No error (0)	stats.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:20.727118015 CEST	1.1.1.1	192.168.2.4	0x242f	No error (0)	stats.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:20.727118015 CEST	1.1.1.1	192.168.2.4	0x242f	No error (0)	stats.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:23.235481024 CEST	1.1.1.1	192.168.2.4	0x2398	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:23:23.235481024 CEST	1.1.1.1	192.168.2.4	0x2398	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:23.235481024 CEST	1.1.1.1	192.168.2.4	0x2398	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:23.235481024 CEST	1.1.1.1	192.168.2.4	0x2398	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:23.235481024 CEST	1.1.1.1	192.168.2.4	0x2398	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:23.235709906 CEST	1.1.1.1	192.168.2.4	0xa25c	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:23:25.664351940 CEST	1.1.1.1	192.168.2.4	0x15e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:23:25.664351940 CEST	1.1.1.1	192.168.2.4	0x15e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.340233088 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	widget-mediator.zopim.com		34.230.250.51	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.340233088 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	widget-mediator.zopim.com		3.220.215.198	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.340233088 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	widget-mediator.zopim.com		52.0.45.90	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.340233088 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	widget-mediator.zopim.com		3.218.77.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.340233088 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	widget-mediator.zopim.com		44.196.49.37	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.340233088 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	widget-mediator.zopim.com		54.88.2.146	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.340233088 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	widget-mediator.zopim.com		54.226.98.214	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:28.340233088 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	widget-mediator.zopim.com		52.22.251.6	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:23:30.170465946 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	199.119.121.23	80	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 19:22:15.207892895 CEST	432	OUT	GET / HTTP/1.1 Host: www.traininng.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 19:22:15.331037998 CEST	530	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 18 Apr 2024 17:33:20 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Location: https://www.traininng.com/ Content-Length: 234 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.traininng.com/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	199.119.121.23	80	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 19:23:00.214257956 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:15 UTC	660	OUT	GET / HTTP/1.1 Host: www.traininng.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:16 UTC	414	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:20 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; Domain=.traininng.com; Path=/; Secure X-Powered-By: JSP/2.1 Set-Cookie: OFBiz.Visitor=25733335; Expires=Fri, 18-Apr-2025 17:33:20 GMT; Path=/ Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:16 UTC	7778	IN	Data Raw: 31 30 39 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1098<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:16 UTC	7148	IN	Data Raw: 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 53 48 52 4d 2d 74 65 78 74 22 3e 54 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 20 4c 4c 43 20 69 73 20 72 65 63 6f 67 6e 69 7a 65 64 20 62 79 20 3c 62 72 3e 53 48 52 4d 20 74 6f 20 6f 66 66 65 72 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 3c 62 72 3e 43 72 65 64 69 74 73 20 28 50 44 43 73 29 20 66 6f 72 20 74 68 65 20 53 48 52 4d 2d 43 50 3c 73 75 70 3e 26 23 31 37 34 3b 3c 2f 73 75 70 3e 20 3c 62 72 3e 6f 72 20 53 48 52 4d 2d 53 43 50 3c 73 75 70 3e 26 23 31 37 34 3b 3c 2f 73 75 70 3e 2e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 2f 63 6f 6e 74 72 6f 6c 2f 72 65 70 6f 72 74 2e 70 64 66 22 Data Ascii: <div class="SHRM-text">Traininng.com LLC is recognized by <br>SHRM to offer Professional Development <br>Credits (PDCs) for the SHRM-CP<sup>®</sup> <br>or SHRM-SCP<sup>®</sup>.</div><div><a href="https://www.traininng.com/control/report.pdf"
2024-04-18 17:22:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:16 UTC	8192	IN	Data Raw: 31 39 36 35 0d 0a 61 72 2f 33 2d 68 6f 75 72 2d 76 69 72 74 75 61 6c 2d 73 65 6d 69 6e 61 72 2d 6f 6e 2d 62 75 73 69 6e 65 73 73 2d 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 26 23 35 38 3b 2d 67 72 61 6d 6d 61 72 2c 2d 62 65 74 74 65 72 2d 77 72 69 74 69 6e 67 2c 2d 65 6d 61 69 6c 2c 2d 61 6e 64 2d 6f 74 68 65 72 2d 63 6f 6d 6d 6f 6e 2d 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2d 69 6e 2d 74 68 65 2d 77 6f 72 6b 70 6c 61 63 65 2d 32 30 36 30 31 38 6c 69 76 65 27 3e 33 2d 48 6f 75 72 20 56 69 72 74 75 61 6c 20 53 65 6d 69 6e 61 72 20 6f 6e 20 42 75 73 69 6e 65 73 73 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 26 23 35 38 3b 20 47 2e 2e 2e 3c 2f 61 3e 3c 2f 68 31 3e 0d 0a 3c 75 6c 3e 0d 0a 3c 6c 69 3e 3c 73 74 72 6f 6e 67 3e 41 70 72 69 6c 20 31 38 2c 20 32 30 32 Data Ascii: 1965ar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live'>3-Hour Virtual Seminar on Business Communication: G...</a></h1><ul><li><strong>April 18, 202
2024-04-18 17:22:16 UTC	2092	IN	Data Raw: 73 63 72 69 62 65 66 6f 72 6d 22 3e 53 75 62 73 63 72 69 62 65 20 4e 65 77 73 6c 65 74 74 65 72 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 63 6f 6e 74 72 6f 6c 2f 75 6e 73 75 62 73 63 72 69 62 65 6d 65 22 3e 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 65 77 73 6c 65 74 74 65 72 22 3e 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 6f 6e 74 72 6f 6c 2f 73 75 62 73 63 72 69 62 65 66 6f 72 6d 22 20 6e 61 6d 65 3d 22 73 65 61 72 63 68 66 6f 6f 74 65 72 22 3e 0a 3c 69 6e 70 75 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 22 20 76 61 6c 75 65 3d 22 22 20 63 6c 61 73 73 3d 22 6e 65 77 73 2d 69 6e 70 75 74 22 Data Ascii: scribeform">Subscribe Newsletter</a></li><li><a href="/control/unsubscribeme">Unsubscribe</a></li></ul><div class="newsletter"><form action="/control/subscribeform" name="searchfooter"><input placeholder="Enter your email" value="" class="news-input"
2024-04-18 17:22:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	639	OUT	GET /images/css/extra.MIN.css HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:17 UTC	371	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:22 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=9EE621528ED666B8617092A0C29FDA1A.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"74744-1516706792000" Last-Modified: Tue, 23 Jan 2018 11:26:32 GMT Content-Type: text/css Content-Length: 74744 Connection: close
2024-04-18 17:22:17 UTC	7821	IN	Data Raw: 2e 62 6f 6f 74 73 74 72 61 70 2d 73 65 6c 65 63 74 7b 77 69 64 74 68 3a 31 30 30 25 20 5c 30 7d 2e 62 6f 6f 74 73 74 72 61 70 2d 73 65 6c 65 63 74 3e 2e 62 74 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 35 70 78 7d 2e 65 72 72 6f 72 20 2e 62 6f 6f 74 73 74 72 61 70 2d 73 65 6c 65 63 74 20 2e 62 74 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 39 34 61 34 38 7d 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 2e 65 72 72 6f 72 20 2e 62 6f 6f 74 73 74 72 61 70 2d 73 65 6c 65 63 74 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 39 34 61 34 38 7d 2e 62 6f 6f 74 73 74 72 61 70 2d 73 65 6c 65 63 74 2e 66 69 74 2d 77 69 64 74 68 7b 77 69 64 74 68 3a 61 75 74 6f Data Ascii: .bootstrap-select{width:100% \0}.bootstrap-select>.btn{width:100%;padding-right:25px}.error .bootstrap-select .btn{border:1px solid #b94a48}.control-group.error .bootstrap-select .dropdown-toggle{border-color:#b94a48}.bootstrap-select.fit-width{width:auto
2024-04-18 17:22:17 UTC	363	IN	Data Raw: 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 20 2e 69 74 65 6d 2e 61 63 74 69 76 65 20 2e 68 65 72 6f 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 32 73 20 61 6c 6c 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 73 3b 0d 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 32 73 20 61 6c 6c 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 73 3b 20 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 32 73 20 61 6c 6c 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 73 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 32 73 20 61 6c 6c 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 73 3b 20 0d 0a Data Ascii: .carousel-inner .item.active .hero { opacity: 1; -webkit-transition: 2s all ease-in-out .1s; -moz-transition: 2s all ease-in-out .1s; -ms-transition: 2s all ease-in-out .1s; -o-transition: 2s all ease-in-out .1s;
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 4f 76 65 72 6c 61 79 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2e 6f 76 65 72 6c 61 79 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0d 0a 20 20 20 2f 2a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 38 30 64 31 35 3b 2a 2f 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 37 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 2d 62 6f 78 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 3b 6d 61 72 67 69 Data Ascii: Overlay //******************************/.overlay { position: absolute; width: 100%; height: 100%; z-index: 2; / background-color: #080d15;*/ opacity: .7;}.header-box{float:right;margin-right:20px;margi
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 65 61 74 75 72 65 2d 62 6f 78 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 35 70 78 20 35 70 78 20 39 30 70 78 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 46 33 46 33 46 33 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 37 42 37 42 37 42 3b 0d 0a 7d 0d 0a 2e 66 65 61 74 75 72 65 2d 62 6f 78 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 20 68 33 20 7b Data Ascii: rgin-bottom: 0px; margin-top: 10px; padding-bottom: 15px;}.feature-box { margin-bottom: 20px; padding: 0px 5px 5px 90px; position: relative; border: 2px solid #F3F3F3;color:#7B7B7B;}.feature-box .description h3 {
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 6f 6e 3a 20 77 69 64 74 68 20 34 2e 32 35 73 20 6c 69 6e 65 61 72 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 63 61 74 65 67 6f 72 69 65 73 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 61 20 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6c 65 61 72 3a 6e 6f 6e 65 3b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 35 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 7d 0d 0a 0d 0a 2e 66 6f 6c 6c 6f 77 2d 75 73 20 2e 66 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 7d 0d 0a 2e 66 6f 6c 6c 6f 77 2d 75 73 20 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 6f 66 66 69 Data Ascii: on: width 4.25s linear;}.dropdown-categories .dropdown-menu > li > a {float: left !important; clear:none; padding:10px 15px; line-height:24px;}.follow-us .fa{font-size:24px; margin-right:10px; line-height:30px;}.follow-us .fa-facebook-offi
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 74 69 6d 65 6c 69 6e 65 2d 65 6e 74 72 79 2e 62 65 67 69 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 74 69 6d 65 6c 69 6e 65 2d 63 65 6e 74 65 72 65 64 20 2e 74 69 6d 65 6c 69 6e 65 2d 65 6e 74 72 79 2e 6c 65 66 74 2d 61 6c 69 67 6e 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 69 6d 65 6c 69 6e 65 2d 63 65 6e 74 65 72 65 64 20 2e 74 69 6d 65 6c 69 6e 65 2d 65 6e 74 72 79 2e 6c 65 66 74 2d 61 6c 69 67 6e 65 64 20 2e 74 69 6d 65 6c 69 6e 65 2d 65 6e 74 72 79 2d 69 6e 6e 65 72 20 7b 0d 0a 20 20 20 20 Data Ascii: timeline-entry.begin { margin-bottom: 0; } .timeline-centered .timeline-entry.left-aligned { float: left; } .timeline-centered .timeline-entry.left-aligned .timeline-entry-inner {
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 64 69 73 63 6f 76 65 72 79 5f 62 6f 78 7b 70 61 64 64 69 6e 67 3a 33 34 70 78 20 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 64 69 73 63 6f 76 65 72 79 7b 77 69 64 74 68 3a 31 30 31 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 66 6f 6e 74 3a 34 30 30 20 31 33 70 78 2f 32 30 70 78 20 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 64 69 73 63 6f 76 65 72 79 20 70 2c 2e 64 69 73 63 6f 76 65 72 79 20 6c 69 7b 66 6f 6e 74 3a 34 30 30 20 31 33 70 78 2f 32 30 70 78 20 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 48 65 Data Ascii: a{color:#fff}.discovery_box{padding:34px 0;min-height:300px;position:relative}.discovery{width:1010px;margin:0 auto;font:400 13px/20px 'Helvetica Neue',Helvetica,Arial,sans-serif;color:#fff}.discovery p,.discovery li{font:400 13px/20px 'Helvetica Neue',He
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 68 65 69 67 68 74 3a 31 30 70 78 7d 2e 70 6f 70 6f 76 65 72 20 2e 70 72 6f 67 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 62 61 30 30 7d 2e 70 6f 70 6f 76 65 72 5f 61 63 74 69 6f 6e 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 73 70 61 6e 2e 70 6f 70 6f 76 65 72 5f 61 63 74 69 6f 6e 73 7b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 7d 2e 69 6e 66 6f 5f 62 61 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 35 70 78 20 73 6f 6c 69 64 20 23 66 66 63 30 30 30 7d 2e 68 65 61 64 6c 69 6e 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 66 6f 6e 74 3a 34 30 30 20 32 34 70 78 2f 32 34 70 78 20 27 48 65 6c 76 65 74 Data Ascii: ;width:auto;margin:0 0 10px;height:10px}.popover .progbar{background-color:#ffba00}.popover_actions{float:left}span.popover_actions{padding:0 12px}.info_bar{margin-bottom:12px;border-bottom:5px solid #ffc000}.headline{float:left;font:400 24px/24px 'Helvet
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 33 39 70 78 7d 2e 64 72 6f 70 63 61 70 20 2e 73 75 62 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 70 78 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 23 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 32 70 78 7d 2e 68 65 72 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 69 6d 61 67 65 73 2f 4c 61 79 6f 75 74 4e 4d 48 50 2f 68 65 72 6f 2d 69 6d 61 67 65 2d 74 61 62 6c 65 74 2d 63 6f 75 63 68 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 20 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 35 70 78 20 73 6f 6c 69 64 20 23 61 30 61 30 61 30 3b 70 61 64 64 69 6e Data Ascii: 39px}.dropcap .subtext{font-size:16px;line-height:11px}.carousel-content{margin-bottom:30px}#call_to_action{margin-top:32px}.hero{background:#000 url(../../images/LayoutNMHP/hero-image-tablet-couch.jpg) no-repeat 0 0;border-bottom:5px solid #a0a0a0;paddin
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6d 79 6d 6f 76 65 20 35 73 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6d 79 6d 6f 76 65 0d 0a 7b 0d 0a 66 72 6f 6d 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 45 31 37 39 42 3b 7d 0d 0a 74 6f 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 45 38 39 30 30 3b 7d 0d 0a 7d 0d 0a 0d 0a 2f 2a 53 61 66 61 72 69 20 61 6e 64 20 43 68 72 6f 6d 65 3a 2a 2f 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6d 79 6d 6f 76 65 0d 0a 7b 0d 0a 66 72 6f 6d 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 45 31 37 39 42 3b 7d 0d 0a 74 6f 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 45 38 39 30 30 3b 7d 0d 0a 7d 0d Data Ascii: t-animation:mymove 5s infinite;}@keyframes mymove{from {background-color:#3E179B;}to {background-color:#4E8900;}}/Safari and Chrome:/@-webkit-keyframes mymove{from {background-color:#3E179B;}to {background-color:#4E8900;}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	639	OUT	GET /images/css/style.min.css HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:17 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:22 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=39F4A24741BE0EC8155903B179B4EA92.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"196943-1615896405000" Last-Modified: Tue, 16 Mar 2021 12:06:45 GMT Content-Type: text/css Content-Length: 196943 Connection: close
2024-04-18 17:22:17 UTC	7819	IN	Data Raw: 68 74 6d 6c 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 20 62 61 6b 67 72 6f 75 6e 64 3a 23 66 32 66 32 66 32 3b 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 61 72 74 69 63 6c 65 2c 0a 61 73 69 64 65 2c 0a 64 65 74 61 69 6c 73 2c 0a 66 69 67 63 61 70 74 69 6f 6e 2c 0a 66 69 67 75 72 65 2c 0a 66 6f 6f 74 65 72 2c 0a 68 65 61 64 65 72 2c 0a 68 67 72 6f 75 70 2c 0a 6d 61 69 6e 2c 0a 6d 65 6e 75 2c 0a 6e 61 76 2c 0a 73 65 63 74 69 6f 6e 2c 0a 73 75 6d Data Ascii: html { font-family: sans-serif; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%;}body { margin: 0; bakground:#f2f2f2; outline: 0;}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,sum
2024-04-18 17:22:17 UTC	365	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 33 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 34 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 36 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 37 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 Data Ascii: content: "\e013";}.glyphicon-remove:before { content: "\e014";}.glyphicon-zoom-in:before { content: "\e015";}.glyphicon-zoom-out:before { content: "\e016";}.glyphicon-off:before { content: "\e017";}.glyphicon-signal:before { content:
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 68 69 63 6f 6e 2d 68 6f 6d 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 31 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 69 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 32 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 69 6d 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 33 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 6f 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 34 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 64 6f 77 6e 6c 6f 61 64 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 64 6f 77 6e 6c 6f Data Ascii: hicon-home:before { content: "\e021";}.glyphicon-file:before { content: "\e022";}.glyphicon-time:before { content: "\e023";}.glyphicon-road:before { content: "\e024";}.glyphicon-download-alt:before { content: "\e025";}.glyphicon-downlo
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 74 65 6e 74 3a 20 22 5c 65 31 38 34 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 74 61 74 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 38 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 64 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 38 36 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 64 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 38 37 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 75 62 74 69 74 6c 65 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 38 38 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 75 6e 64 2d 73 74 65 72 65 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 Data Ascii: tent: "\e184";}.glyphicon-stats:before { content: "\e185";}.glyphicon-sd-video:before { content: "\e186";}.glyphicon-hd-video:before { content: "\e187";}.glyphicon-subtitles:before { content: "\e188";}.glyphicon-sound-stereo:before { c
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 32 38 36 30 39 30 3b 0a 7d 0a 2e 62 67 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 66 66 30 64 38 3b 0a 7d 0a 61 2e 62 67 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 31 65 32 62 33 3b 0a 7d 0a 2e 62 67 2d 69 6e 66 6f 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 39 65 64 66 37 3b 0a 7d 0a 61 2e 62 67 2d 69 6e 66 6f 3a 68 6f 76 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 66 64 39 65 65 3b 0a 7d 0a 2e 62 67 2d 77 61 72 6e 69 6e 67 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 63 66 38 65 33 3b 0a 7d 0a 61 2e 62 67 2d 77 61 72 6e 69 6e 67 Data Ascii: 286090;}.bg-success { background-color: #dff0d8;}a.bg-success:hover { background-color: #c1e2b3;}.bg-info { background-color: #d9edf7;}a.bg-info:hover { background-color: #afd9ee;}.bg-warning { background-color: #fcf8e3;}a.bg-warning
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 6d 2d 70 75 6c 6c 2d 33 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 31 32 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 31 31 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 Data Ascii: m-pull-3 { right: 25%; } .col-sm-pull-2 { right: 16.66666667%; } .col-sm-pull-1 { right: 8.33333333%; } .col-sm-pull-0 { right: auto; } .col-sm-push-12 { left: 100%; } .col-sm-push-11 { left: 91.66666667%; }
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 6f 72 3a 20 23 66 35 66 35 66 35 3b 0a 7d 0a 74 61 62 6c 65 20 63 6f 6c 5b 63 6c 61 73 73 2a 3d 22 63 6f 6c 2d 22 5d 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 63 6f 6c 75 6d 6e 3b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 74 61 62 6c 65 20 74 64 5b 63 6c 61 73 73 2a 3d 22 63 6f 6c 2d 22 5d 2c 0a 74 61 62 6c 65 20 74 68 5b 63 6c 61 73 73 2a 3d 22 63 6f 6c 2d 22 5d 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 63 65 6c 6c 3b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 64 2e 61 63 74 69 76 65 2c 0a 2e 74 61 62 6c 65 20 Data Ascii: or: #f5f5f5;}table col[class="col-"] { position: static; display: table-column; float: none;}table td[class="col-"],table th[class*="col-"] { position: static; display: table-cell; float: none;}.table > thead > tr > td.active,.table
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 5b 74 79 70 65 3d 22 6d 6f 6e 74 68 22 5d 2e 69 6e 70 75 74 2d 73 6d 2c 0a 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 22 5d 2c 0a 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 69 6d 65 22 5d 2c 0a 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 2c 0a 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6d 6f 6e 74 68 22 5d 20 7b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 7d 0a 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 22 5d 2e 69 6e 70 75 74 2d 6c 67 2c 0a 20 20 69 6e 70 75 74 5b Data Ascii: [type="month"].input-sm, .input-group-sm input[type="date"], .input-group-sm input[type="time"], .input-group-sm input[type="datetime-local"], .input-group-sm input[type="month"] { line-height: 30px; } input[type="date"].input-lg, input[
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 69 67 68 74 3a 20 32 37 70 78 3b 0a 7d 0a 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 31 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 35 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 37 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 7d 0a 7d 0a 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 68 61 73 2d 66 65 65 64 Data Ascii: ight: 27px;}.form-horizontal .form-group { margin-right: -15px; margin-left: -15px;}@media (min-width: 768px) { .form-horizontal .control-label { padding-top: 7px; margin-bottom: 0; text-align: right; }}.form-horizontal .has-feed
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 2e 62 74 6e 2d 6c 69 6e 6b 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 37 61 62 37 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 7d 0a 2e 62 74 6e 2d 6c 69 6e 6b 2c 0a 2e 62 74 6e 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 6c 69 6e 6b 2e 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 6c 69 6e 6b 5b 64 69 73 61 62 6c 65 64 5d 2c 0a 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 6c 69 6e 6b 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 Data Ascii: ground-color: #fff;}.btn-link { font-weight: normal; color: #337ab7; border-radius: 0;}.btn-link,.btn-link:active,.btn-link.active,.btn-link[disabled],fieldset[disabled] .btn-link { background-color: transparent; -webkit-box-shadow: none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	652	OUT	GET /images/fonts/css/font-awesome.min.css HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:17 UTC	371	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:22 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=60B21001953A68E63ED11F6CB8BE75DB.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"23805-1428347279000" Last-Modified: Mon, 06 Apr 2015 19:07:59 GMT Content-Type: text/css Content-Length: 23805 Connection: close
2024-04-18 17:22:17 UTC	7821	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 33 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2f 69 6d 61 67 65 73 2f 66 6f 6e 74 73 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f Data Ascii: /! Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('/images/fonts/fonts/fontawesome-webfont.eot?
2024-04-18 17:22:17 UTC	363	IN	Data Raw: 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 31 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 32 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 33 22 7d 2e 66 61 2d 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 34 22 7d 2e 66 61 2d 67 65 61 72 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 35 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 36 22 7d 2e 66 61 Data Ascii: nt:"\f080"}.fa-twitter-square:before{content:"\f081"}.fa-facebook-square:before{content:"\f082"}.fa-camera-retro:before{content:"\f083"}.fa-key:before{content:"\f084"}.fa-gears:before,.fa-cogs:before{content:"\f085"}.fa-comments:before{content:"\f086"}.fa
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 66 30 38 39 22 7d 2e 66 61 2d 68 65 61 72 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 61 22 7d 2e 66 61 2d 73 69 67 6e 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 62 22 7d 2e 66 61 2d 6c 69 6e 6b 65 64 69 6e 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 63 22 7d 2e 66 61 2d 74 68 75 6d 62 2d 74 61 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 64 22 7d 2e 66 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 65 22 7d 2e 66 61 2d 73 69 67 6e 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 30 22 7d 2e 66 61 2d 74 72 6f 70 68 79 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: f089"}.fa-heart-o:before{content:"\f08a"}.fa-sign-out:before{content:"\f08b"}.fa-linkedin-square:before{content:"\f08c"}.fa-thumb-tack:before{content:"\f08d"}.fa-external-link:before{content:"\f08e"}.fa-sign-in:before{content:"\f090"}.fa-trophy:before{con
2024-04-18 17:22:17 UTC	7429	IN	Data Raw: 30 22 7d 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 31 22 7d 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 32 22 7d 2e 66 61 2d 74 75 6d 62 6c 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 33 22 7d 2e 66 61 2d 74 75 6d 62 6c 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 34 22 7d 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 35 22 7d 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 36 22 7d 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 Data Ascii: 0"}.fa-bitbucket:before{content:"\f171"}.fa-bitbucket-square:before{content:"\f172"}.fa-tumblr:before{content:"\f173"}.fa-tumblr-square:before{content:"\f174"}.fa-long-arrow-down:before{content:"\f175"}.fa-long-arrow-up:before{content:"\f176"}.fa-long-arr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	624	OUT	GET /images/js/jquery.min.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:17 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:22 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=AB80A2B22B4CFEBEE4905238859D6548.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"64304-1508368046000" Last-Modified: Wed, 18 Oct 2017 23:07:26 GMT Content-Type: text/javascript Content-Length: 64304 Connection: close
2024-04-18 17:22:17 UTC	7814	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-04-18 17:22:17 UTC	370	IN	Data Raw: 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 62 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 62 28 61 29 7b 72 65 74 75 72 6e 20 69 62 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 62 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d Data Ascii: ;return"input"===c&&b.type===a}}function nb(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function ob(a){return ib(function(b){return b=+b,ib(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 70 6f 72 74 3d 7b 7d 2c 66 3d 67 62 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 3f 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 3a 21 31 7d 2c 6d 3d 67 62 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 65 2c 67 3d 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 76 3b 72 65 74 75 72 6e 20 67 21 3d 3d 6e 26 26 39 3d 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 6e 3d 67 2c 6f 3d 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 65 3d 67 2e 64 65 66 61 75 6c Data Ascii: port={},f=gb.isXML=function(a){var b=a&&(a.ownerDocument\|\|a).documentElement;return b?"HTML"!==b.nodeName:!1},m=gb.setDocument=function(a){var b,e,g=a?a.ownerDocument\|\|a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=g.documentElement,e=g.defaul
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 3d 3d 61 7c 7c 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 61 2b 22 2d 22 29 3b 77 68 69 6c 65 28 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 74 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 2e 6c 6f 63 61 74 69 6f 6e 26 26 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 73 6c 69 63 65 28 31 29 3d 3d 3d 62 2e 69 64 7d 2c 72 6f 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 6f 7d 2c 66 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 26 26 28 21 6e 2e 68 61 73 46 6f 63 75 73 7c 7c 6e 2e 68 61 Data Ascii: ==a\|\|0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.hash;return c&&c.slice(1)===b.id},root:function(a){return a===o},focus:function(a){return a===n.activeElement&&(!n.hasFocus\|\|n.ha
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 74 6f 72 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 61 2e 63 6f 6e 74 65 78 74 29 2c 6e 2e 6d 61 6b 65 41 72 72 61 79 28 61 2c 74 68 69 73 29 29 7d 3b 41 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 2e 66 6e 2c 79 3d 6e 28 6c 29 3b 76 61 72 20 42 3d 2f 5e 28 3f 3a 70 61 72 65 6e 74 73 7c 70 72 65 76 28 3f 3a 55 6e 74 69 6c 7c 41 6c 6c 29 29 2f 2c 43 3d 7b 63 68 69 6c 64 72 65 6e 3a 21 30 2c 63 6f 6e 74 65 6e 74 73 3a 21 30 2c 6e 65 78 74 3a 21 30 2c 70 72 65 76 3a 21 30 7d 3b 6e 2e 65 78 74 65 6e 64 28 7b 64 69 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3d 76 6f 69 64 20 30 21 3d 3d 63 3b 77 68 69 6c 65 28 28 61 3d 61 5b 62 5d 29 26 26 39 21 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 Data Ascii: tor,this.context=a.context),n.makeArray(a,this))};A.prototype=n.fn,y=n(l);var B=/^(?:parents\|prev(?:Until\|All))/,C={children:!0,contents:!0,next:!0,prev:!0};n.extend({dir:function(a,b,c){var d=[],e=void 0!==c;while((a=a[b])&&9!==a.nodeType)if(1===a.nodeTy
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 76 6f 69 64 20 30 21 3d 3d 63 29 72 65 74 75 72 6e 20 63 7d 65 6c 73 65 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 4d 2e 67 65 74 28 74 68 69 73 2c 64 29 3b 4d 2e 73 65 74 28 74 68 69 73 2c 64 2c 62 29 2c 2d 31 21 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 26 26 4d 2e 73 65 74 28 74 68 69 73 2c 61 2c 62 29 7d 29 7d 2c 6e 75 6c 6c 2c 62 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 61 29 7d 29 7d 7d 29 2c 6e 2e 65 78 74 65 6e 64 28 7b 71 75 Data Ascii: void 0!==c)return c}else this.each(function(){var c=M.get(this,d);M.set(this,d,b),-1!==a.indexOf("-")&&void 0!==c&&M.set(this,a,b)})},null,b,arguments.length>1,null,!0)},removeData:function(a){return this.each(function(){M.remove(this,a)})}}),n.extend({qu
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 6c 45 76 65 6e 74 3a 7b 7d 7d 29 3b 64 3f 6e 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 65 2c 6e 75 6c 6c 2c 62 29 3a 6e 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 62 2c 65 29 2c 65 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 2c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 2c 6e 2e 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 2e 45 76 65 6e 74 3f 28 61 26 26 61 2e Data Ascii: lEvent:{}});d?n.event.trigger(e,null,b):n.event.dispatch.call(b,e),e.isDefaultPrevented()&&c.preventDefault()}},n.removeEvent=function(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)},n.Event=function(a,b){return this instanceof n.Event?(a&&a.
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 5b 6a 5d 2c 68 2c 6a 29 3b 69 66 28 67 29 66 6f 72 28 69 3d 66 5b 66 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 6e 2e 6d 61 70 28 66 2c 6c 62 29 2c 6a 3d 30 3b 67 3e 6a 3b 6a 2b 2b 29 68 3d 66 5b 6a 5d 2c 66 62 2e 74 65 73 74 28 68 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 4c 2e 61 63 63 65 73 73 28 68 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 6e 2e 63 6f 6e 74 61 69 6e 73 28 69 2c 68 29 26 26 28 68 2e 73 72 63 3f 6e 2e 5f 65 76 61 6c 55 72 6c 26 26 6e 2e 5f 65 76 61 6c 55 72 6c 28 68 2e 73 72 63 29 3a 6e 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 68 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 68 62 2c 22 22 29 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 2c 6e 2e 65 61 63 Data Ascii: .call(this[j],h,j);if(g)for(i=f[f.length-1].ownerDocument,n.map(f,lb),j=0;g>j;j++)h=f[j],fb.test(h.type\|\|"")&&!L.access(h,"globalEval")&&n.contains(i,h)&&(h.src?n._evalUrl&&n._evalUrl(h.src):n.globalEval(h.textContent.replace(hb,"")))}return this}}),n.eac
2024-04-18 17:22:17 UTC	7016	IN	Data Raw: 62 5d 2c 52 62 3d 7b 22 2a 22 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 63 72 65 61 74 65 54 77 65 65 6e 28 61 2c 62 29 2c 64 3d 63 2e 63 75 72 28 29 2c 65 3d 4f 62 2e 65 78 65 63 28 62 29 2c 66 3d 65 26 26 65 5b 33 5d 7c 7c 28 6e 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 3f 22 22 3a 22 70 78 22 29 2c 67 3d 28 6e 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 7c 7c 22 70 78 22 21 3d 3d 66 26 26 2b 64 29 26 26 4f 62 2e 65 78 65 63 28 6e 2e 63 73 73 28 63 2e 65 6c 65 6d 2c 61 29 29 2c 68 3d 31 2c 69 3d 32 30 3b 69 66 28 67 26 26 67 5b 33 5d 21 3d 3d 66 29 7b 66 3d 66 7c 7c 67 5b 33 5d 2c 65 3d 65 7c 7c 5b 5d 2c 67 3d 2b 64 7c 7c 31 3b 64 6f 20 68 3d 68 7c 7c 22 2e 35 22 2c 67 2f 3d 68 2c 6e 2e 73 74 79 6c 65 28 63 2e 65 6c 65 6d Data Ascii: b],Rb={"*":[function(a,b){var c=this.createTween(a,b),d=c.cur(),e=Ob.exec(b),f=e&&e[3]\|\|(n.cssNumber[a]?"":"px"),g=(n.cssNumber[a]\|\|"px"!==f&&+d)&&Ob.exec(n.css(c.elem,a)),h=1,i=20;if(g&&g[3]!==f){f=f\|\|g[3],e=e\|\|[],g=+d\|\|1;do h=h\|\|".5",g/=h,n.style(c.elem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	620	OUT	GET /images/js/jquery.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:17 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:22 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=578493A84CC777DA960157AC5C847674.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"84320-1429212315000" Last-Modified: Thu, 16 Apr 2015 19:25:15 GMT Content-Type: text/javascript Content-Length: 84320 Connection: close
2024-04-18 17:22:17 UTC	7814	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 Data Ascii: /! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a wind
2024-04-18 17:22:17 UTC	370	IN	Data Raw: 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 62 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 62 28 61 29 7b 72 65 74 75 72 6e 20 69 62 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 62 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 Data Ascii: return"input"===c&&b.type===a}}function nb(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function ob(a){return ib(function(b){return b=+b,ib(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 6f 72 74 3d 7b 7d 2c 66 3d 67 62 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 3f 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 3a 21 31 7d 2c 6d 3d 67 62 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 65 2c 67 3d 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 76 3b 72 65 74 75 72 6e 20 67 21 3d 3d 6e 26 26 39 3d 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 6e 3d 67 2c 6f 3d 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 65 3d 67 2e 64 65 66 61 75 6c 74 Data Ascii: ort={},f=gb.isXML=function(a){var b=a&&(a.ownerDocument\|\|a).documentElement;return b?"HTML"!==b.nodeName:!1},m=gb.setDocument=function(a){var b,e,g=a?a.ownerDocument\|\|a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=g.documentElement,e=g.default
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 3d 61 7c 7c 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 61 2b 22 2d 22 29 3b 77 68 69 6c 65 28 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 74 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 2e 6c 6f 63 61 74 69 6f 6e 26 26 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 73 6c 69 63 65 28 31 29 3d 3d 3d 62 2e 69 64 7d 2c 72 6f 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 6f 7d 2c 66 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 26 26 28 21 6e 2e 68 61 73 46 6f 63 75 73 7c 7c 6e 2e 68 61 73 Data Ascii: =a\|\|0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.hash;return c&&c.slice(1)===b.id},root:function(a){return a===o},focus:function(a){return a===n.activeElement&&(!n.hasFocus\|\|n.has
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 6f 72 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 61 2e 63 6f 6e 74 65 78 74 29 2c 6e 2e 6d 61 6b 65 41 72 72 61 79 28 61 2c 74 68 69 73 29 29 7d 3b 41 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 2e 66 6e 2c 79 3d 6e 28 6c 29 3b 76 61 72 20 42 3d 2f 5e 28 3f 3a 70 61 72 65 6e 74 73 7c 70 72 65 76 28 3f 3a 55 6e 74 69 6c 7c 41 6c 6c 29 29 2f 2c 43 3d 7b 63 68 69 6c 64 72 65 6e 3a 21 30 2c 63 6f 6e 74 65 6e 74 73 3a 21 30 2c 6e 65 78 74 3a 21 30 2c 70 72 65 76 3a 21 30 7d 3b 6e 2e 65 78 74 65 6e 64 28 7b 64 69 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3d 76 6f 69 64 20 30 21 3d 3d 63 3b 77 68 69 6c 65 28 28 61 3d 61 5b 62 5d 29 26 26 39 21 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 Data Ascii: or,this.context=a.context),n.makeArray(a,this))};A.prototype=n.fn,y=n(l);var B=/^(?:parents\|prev(?:Until\|All))/,C={children:!0,contents:!0,next:!0,prev:!0};n.extend({dir:function(a,b,c){var d=[],e=void 0!==c;while((a=a[b])&&9!==a.nodeType)if(1===a.nodeTyp
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 69 64 20 30 21 3d 3d 63 29 72 65 74 75 72 6e 20 63 7d 65 6c 73 65 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 4d 2e 67 65 74 28 74 68 69 73 2c 64 29 3b 4d 2e 73 65 74 28 74 68 69 73 2c 64 2c 62 29 2c 2d 31 21 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 26 26 4d 2e 73 65 74 28 74 68 69 73 2c 61 2c 62 29 7d 29 7d 2c 6e 75 6c 6c 2c 62 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 61 29 7d 29 7d 7d 29 2c 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 Data Ascii: id 0!==c)return c}else this.each(function(){var c=M.get(this,d);M.set(this,d,b),-1!==a.indexOf("-")&&void 0!==c&&M.set(this,a,b)})},null,b,arguments.length>1,null,!0)},removeData:function(a){return this.each(function(){M.remove(this,a)})}}),n.extend({queu
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 76 65 6e 74 3a 7b 7d 7d 29 3b 64 3f 6e 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 65 2c 6e 75 6c 6c 2c 62 29 3a 6e 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 62 2c 65 29 2c 65 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 2c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 2c 6e 2e 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 2e 45 76 65 6e 74 3f 28 61 26 26 61 2e 74 79 Data Ascii: vent:{}});d?n.event.trigger(e,null,b):n.event.dispatch.call(b,e),e.isDefaultPrevented()&&c.preventDefault()}},n.removeEvent=function(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)},n.Event=function(a,b){return this instanceof n.Event?(a&&a.ty
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 61 6c 6c 28 74 68 69 73 5b 6a 5d 2c 68 2c 6a 29 3b 69 66 28 67 29 66 6f 72 28 69 3d 66 5b 66 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 6e 2e 6d 61 70 28 66 2c 6c 62 29 2c 6a 3d 30 3b 67 3e 6a 3b 6a 2b 2b 29 68 3d 66 5b 6a 5d 2c 66 62 2e 74 65 73 74 28 68 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 4c 2e 61 63 63 65 73 73 28 68 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 6e 2e 63 6f 6e 74 61 69 6e 73 28 69 2c 68 29 26 26 28 68 2e 73 72 63 3f 6e 2e 5f 65 76 61 6c 55 72 6c 26 26 6e 2e 5f 65 76 61 6c 55 72 6c 28 68 2e 73 72 63 29 3a 6e 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 68 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 68 62 2c 22 22 29 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 2c 6e 2e 65 61 63 68 28 Data Ascii: all(this[j],h,j);if(g)for(i=f[f.length-1].ownerDocument,n.map(f,lb),j=0;g>j;j++)h=f[j],fb.test(h.type\|\|"")&&!L.access(h,"globalEval")&&n.contains(i,h)&&(h.src?n._evalUrl&&n._evalUrl(h.src):n.globalEval(h.textContent.replace(hb,"")))}return this}}),n.each(
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 2c 52 62 3d 7b 22 2a 22 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 63 72 65 61 74 65 54 77 65 65 6e 28 61 2c 62 29 2c 64 3d 63 2e 63 75 72 28 29 2c 65 3d 4f 62 2e 65 78 65 63 28 62 29 2c 66 3d 65 26 26 65 5b 33 5d 7c 7c 28 6e 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 3f 22 22 3a 22 70 78 22 29 2c 67 3d 28 6e 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 7c 7c 22 70 78 22 21 3d 3d 66 26 26 2b 64 29 26 26 4f 62 2e 65 78 65 63 28 6e 2e 63 73 73 28 63 2e 65 6c 65 6d 2c 61 29 29 2c 68 3d 31 2c 69 3d 32 30 3b 69 66 28 67 26 26 67 5b 33 5d 21 3d 3d 66 29 7b 66 3d 66 7c 7c 67 5b 33 5d 2c 65 3d 65 7c 7c 5b 5d 2c 67 3d 2b 64 7c 7c 31 3b 64 6f 20 68 3d 68 7c 7c 22 2e 35 22 2c 67 2f 3d 68 2c 6e 2e 73 74 79 6c 65 28 63 2e 65 6c 65 6d 2c 61 Data Ascii: ,Rb={"*":[function(a,b){var c=this.createTween(a,b),d=c.cur(),e=Ob.exec(b),f=e&&e[3]\|\|(n.cssNumber[a]?"":"px"),g=(n.cssNumber[a]\|\|"px"!==f&&+d)&&Ob.exec(n.css(c.elem,a)),h=1,i=20;if(g&&g[3]!==f){f=f\|\|g[3],e=e\|\|[],g=+d\|\|1;do h=h\|\|".5",g/=h,n.style(c.elem,a
2024-04-18 17:22:17 UTC	8176	IN	Data Raw: 65 29 7c 7c 61 2e 68 72 65 66 3f 61 2e 74 61 62 49 6e 64 65 78 3a 2d 31 7d 7d 7d 7d 29 2c 6b 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 6e 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 7d 29 2c 6e 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 22 72 6f 77 53 70 61 6e 22 2c 22 63 6f 6c 53 70 61 6e 22 2c 22 75 73 Data Ascii: e)\|\|a.href?a.tabIndex:-1}}}}),k.optSelected\|\|(n.propHooks.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null}}),n.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	634	OUT	GET /images/traininng/js/xFunctions.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:17 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:22 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=F4618C1C670F638D005CC1F81FD1D9FA.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"19038-1383849779000" Last-Modified: Thu, 07 Nov 2013 18:42:59 GMT Content-Type: text/javascript Content-Length: 19038 Connection: close
2024-04-18 17:22:17 UTC	7814	IN	Data Raw: 2f 2a 2a 0d 0a 09 54 68 69 73 20 69 73 20 61 20 63 6f 6d 6d 6d 6f 6e 20 6a 61 76 61 20 73 63 72 69 70 74 20 66 69 6c 65 20 77 68 69 63 68 20 68 61 73 20 63 6f 6d 6d 6f 6e 20 66 75 6e 63 74 69 6f 6e 73 20 75 73 65 64 20 61 63 72 6f 73 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 66 6f 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 70 75 72 70 6f 73 65 2e 0d 0a 09 49 74 20 61 6c 73 6f 20 68 61 73 20 75 74 69 6c 69 74 79 20 6d 65 74 68 6f 64 73 20 75 73 65 64 20 66 6f 72 20 76 61 6c 69 64 61 74 69 6f 6e 2e 0d 0a 2a 2f 0d 0a 0d 0a 2f 2f 76 61 72 69 61 62 6c 65 20 64 65 63 6c 61 72 65 64 20 66 6f 72 20 68 61 6e 64 6c 69 6e 67 20 69 6e 6c 69 6e 65 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 6f 63 75 73 20 73 65 74 74 69 6e 67 73 0d 0a 76 61 72 20 69 73 46 69 65 6c Data Ascii: /*This is a commmon java script file which has common functions used across applications for validation purpose.It also has utility methods used for validation.///variable declared for handling inline error message focus settingsvar isFiel
2024-04-18 17:22:17 UTC	370	IN	Data Raw: 61 74 2d 31 2c 6c 61 74 29 3d 3d 64 6f 74 20 7c 7c 20 73 74 72 2e 73 75 62 73 74 72 69 6e 67 28 6c 61 74 2b 31 2c 6c 61 74 2b 32 29 3d 3d 64 6f 74 29 7b 0d 0a 09 09 20 20 20 20 2f 2f 61 6c 65 72 74 28 22 49 6e 76 61 6c 69 64 20 45 2d 6d 61 69 6c 20 49 44 22 29 0d 0a 09 09 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0d 0a 09 09 20 7d 0d 0a 0d 0a 09 09 20 69 66 20 28 73 74 72 2e 69 6e 64 65 78 4f 66 28 64 6f 74 2c 28 6c 61 74 2b 32 29 29 3d 3d 2d 31 29 7b 0d 0a 09 09 20 20 20 20 2f 2f 61 6c 65 72 74 28 22 49 6e 76 61 6c 69 64 20 45 2d 6d 61 69 6c 20 49 44 22 29 0d 0a 09 09 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0d 0a 09 09 20 7d 0d 0a 09 09 0d 0a 09 09 20 69 66 20 28 73 74 72 2e 69 6e 64 65 78 4f 66 28 22 20 22 29 21 3d 2d 31 29 7b 0d 0a 09 09 Data Ascii: at-1,lat)==dot \|\| str.substring(lat+1,lat+2)==dot){ //alert("Invalid E-mail ID") return false } if (str.indexOf(dot,(lat+2))==-1){ //alert("Invalid E-mail ID") return false } if (str.indexOf(" ")!=-1){
2024-04-18 17:22:17 UTC	8192	IN	Data Raw: 20 77 68 65 72 65 20 75 70 70 65 72 20 41 53 43 49 49 20 63 68 61 72 61 63 74 65 72 73 20 28 69 2e 65 2e 20 61 63 63 65 6e 74 65 64 20 6c 65 74 74 65 72 73 0d 0a 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 63 68 61 72 61 63 74 65 72 73 29 20 77 65 72 65 20 61 6c 6c 6f 77 65 64 2e 0d 0a 0d 0a 31 2e 31 2e 33 3a 20 41 64 64 65 64 20 74 68 65 20 72 65 73 74 72 69 63 74 69 6f 6e 20 74 6f 20 6f 6e 6c 79 20 61 63 63 65 70 74 20 61 64 64 72 65 73 73 65 73 20 65 6e 64 69 6e 67 20 69 6e 20 74 77 6f 0d 0a 6c 65 74 74 65 72 73 20 28 69 6e 74 65 72 70 72 65 74 65 64 20 74 6f 20 62 65 20 61 20 63 6f 75 6e 74 72 79 20 63 6f 64 65 29 20 6f 72 20 6f 6e 65 20 6f 66 20 74 68 65 20 6b 6e 6f 77 6e 0d 0a 54 4c 44 73 20 28 63 6f 6d 2c 20 6e 65 74 2c 20 6f 72 67 2c 20 65 64 75 2c Data Ascii: where upper ASCII characters (i.e. accented lettersinternational characters) were allowed.1.1.3: Added the restriction to only accept addresses ending in twoletters (interpreted to be a country code) or one of the knownTLDs (com, net, org, edu,
2024-04-18 17:22:17 UTC	2662	IN	Data Raw: 20 3a 20 65 76 65 6e 74 2e 77 68 69 63 68 20 3f 20 65 76 65 6e 74 2e 77 68 69 63 68 20 3a 20 65 76 65 6e 74 2e 63 68 61 72 43 6f 64 65 3b 0d 0a 09 69 66 28 6b 65 79 3d 3d 38 20 7c 7c 20 6b 65 79 20 3d 3d 20 34 36 20 7c 7c 20 6b 65 79 20 3d 3d 20 33 37 29 7b 0d 0a 09 09 69 66 28 74 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 3c 3d 39 39 39 29 0d 0a 09 09 09 78 41 6c 65 72 74 28 27 27 2c 65 72 72 6f 72 44 69 76 29 3b 0d 0a 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 09 7d 0d 0a 09 69 66 28 76 61 6c 75 65 2e 6c 65 6e 67 74 68 3e 39 39 39 29 7b 0d 0a 09 09 78 41 6c 65 72 74 28 27 53 68 6f 75 6c 64 20 6e 6f 74 20 65 78 63 65 65 64 20 31 30 30 30 20 63 68 61 72 61 63 74 65 72 73 27 2c 65 72 72 6f 72 44 69 76 29 3b 0d 0a 09 09 72 65 74 75 72 6e 20 66 Data Ascii: : event.which ? event.which : event.charCode;if(key==8 \|\| key == 46 \|\| key == 37){if(trim(value).length<=999)xAlert('',errorDiv);return true;}if(value.length>999){xAlert('Should not exceed 1000 characters',errorDiv);return f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	632	OUT	GET /images/prototypejs/prototype.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	380	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=DEA5E66585001991E6CE9ED83EC2CF65.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"137093-1512129852000" Last-Modified: Fri, 01 Dec 2017 12:04:12 GMT Content-Type: text/javascript Content-Length: 137093 Connection: close
2024-04-18 17:22:18 UTC	7812	IN	Data Raw: 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 36 2e 30 2e 32 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 30 38 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0a 20 2a 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0a 20 2a 0a 20 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: /* Prototype JavaScript framework, version 1.6.0.2 * (c) 2005-2008 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ * *----------
2024-04-18 17:22:18 UTC	372	IN	Data Raw: 72 65 6e 74 6c 79 45 78 65 63 75 74 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 20 20 74 68 69 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 29 3b 0a 20 20 7d 2c 0a 0a 20 20 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 74 69 6d 65 72 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 6f 6e 54 69 6d 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 74 68 69 73 2e 66 72 65 71 75 65 6e 63 79 20 2a 20 31 30 30 30 29 3b 0a 20 20 7d 2c 0a 0a 20 20 65 78 65 63 75 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 28 74 68 69 73 29 3b 0a 20 20 7d 2c 0a 0a 20 20 73 74 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: rentlyExecuting = false; this.registerCallback(); }, registerCallback: function() { this.timer = setInterval(this.onTimerEvent.bind(this), this.frequency * 1000); }, execute: function() { this.callback(this); }, stop: function(
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 28 29 20 7b 0a 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 63 75 72 72 65 6e 74 6c 79 45 78 65 63 75 74 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 75 72 72 65 6e 74 6c 79 45 78 65 63 75 74 69 6e 67 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 78 65 63 75 74 65 28 29 3b 0a 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 75 72 72 65 6e 74 6c 79 45 78 65 63 75 74 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d 29 3b 0a 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 53 74 72 69 6e 67 2c 20 7b 0a 20 20 69 6e 74 65 72 70 72 65 74 3a 20 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 20 7b 0a 20 20 Data Ascii: () { if (!this.currentlyExecuting) { try { this.currentlyExecuting = true; this.execute(); } finally { this.currentlyExecuting = false; } } }});Object.extend(String, { interpret: function(value) {
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: 74 29 20 3a 20 50 72 6f 74 6f 74 79 70 65 2e 4b 3b 0a 20 20 20 20 76 61 72 20 69 6e 64 65 78 20 3d 20 2d 6e 75 6d 62 65 72 2c 20 73 6c 69 63 65 73 20 3d 20 5b 5d 2c 20 61 72 72 61 79 20 3d 20 74 68 69 73 2e 74 6f 41 72 72 61 79 28 29 3b 0a 20 20 20 20 77 68 69 6c 65 20 28 28 69 6e 64 65 78 20 2b 3d 20 6e 75 6d 62 65 72 29 20 3c 20 61 72 72 61 79 2e 6c 65 6e 67 74 68 29 0a 20 20 20 20 20 20 73 6c 69 63 65 73 2e 70 75 73 68 28 61 72 72 61 79 2e 73 6c 69 63 65 28 69 6e 64 65 78 2c 20 69 6e 64 65 78 2b 6e 75 6d 62 65 72 29 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 6c 69 63 65 73 2e 63 6f 6c 6c 65 63 74 28 69 74 65 72 61 74 6f 72 2c 20 63 6f 6e 74 65 78 74 29 3b 0a 20 20 7d 2c 0a 0a 20 20 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 69 74 65 72 61 74 6f 72 2c Data Ascii: t) : Prototype.K; var index = -number, slices = [], array = this.toArray(); while ((index += number) < array.length) slices.push(array.slice(index, index+number)); return slices.collect(iterator, context); }, all: function(iterator,
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 20 3f 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 3a 20 28 69 20 3c 20 30 20 3f 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 2b 20 69 20 3a 20 69 29 20 2b 20 31 3b 0a 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2e 73 6c 69 63 65 28 30 2c 20 69 29 2e 72 65 76 65 72 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 69 74 65 6d 29 3b 0a 20 20 72 65 74 75 72 6e 20 28 6e 20 3c 20 30 29 20 3f 20 6e 20 3a 20 69 20 2d 20 6e 20 2d 20 31 3b 0a 7d 3b 0a 0a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 41 72 72 61 79 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 24 77 28 73 74 72 69 6e 67 29 20 7b 0a 20 20 69 66 20 28 21 4f 62 6a 65 63 74 2e 69 73 53 74 72 69 6e 67 28 73 74 72 69 6e 67 29 29 20 72 65 74 75 72 6e 20 5b 5d Data Ascii: ? this.length : (i < 0 ? this.length + i : i) + 1; var n = this.slice(0, i).reverse().indexOf(item); return (n < 0) ? n : i - n - 1;};Array.prototype.toArray = Array.prototype.clone;function $w(string) { if (!Object.isString(string)) return []
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: 6f 73 74 27 29 20 7b 0a 20 20 20 20 20 20 68 65 61 64 65 72 73 5b 27 43 6f 6e 74 65 6e 74 2d 74 79 70 65 27 5d 20 3d 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 65 6e 74 54 79 70 65 20 2b 0a 20 20 20 20 20 20 20 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 6e 63 6f 64 69 6e 67 20 3f 20 27 3b 20 63 68 61 72 73 65 74 3d 27 20 2b 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 6e 63 6f 64 69 6e 67 20 3a 20 27 27 29 3b 0a 0a 20 20 20 20 20 20 2f 2a 20 46 6f 72 63 65 20 22 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 22 20 66 6f 72 20 6f 6c 64 65 72 20 4d 6f 7a 69 6c 6c 61 20 62 72 6f 77 73 65 72 73 20 74 6f 20 77 6f 72 6b 0a 20 20 20 20 20 20 20 2a 20 61 72 6f 75 6e 64 20 61 20 62 75 67 20 77 68 65 72 65 20 58 4d 4c 48 74 74 70 52 65 71 75 65 Data Ascii: ost') { headers['Content-type'] = this.options.contentType + (this.options.encoding ? '; charset=' + this.options.encoding : ''); /* Force "Connection: close" for older Mozilla browsers to work * around a bug where XMLHttpReque
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 75 65 72 79 2e 73 6e 61 70 73 68 6f 74 4c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 45 6c 65 6d 65 6e 74 2e 65 78 74 65 6e 64 28 71 75 65 72 79 2e 73 6e 61 70 73 68 6f 74 49 74 65 6d 28 69 29 29 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 20 20 7d 3b 0a 7d 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 4e 6f 64 65 29 20 76 61 72 20 4e 6f 64 65 20 3d 20 7b 20 7d 3b 0a 0a 69 66 20 28 21 4e 6f 64 65 2e 45 4c 45 4d 45 Data Ascii: uery.snapshotLength; i < length; i++) results.push(Element.extend(query.snapshotItem(i))); return results; };}/--------------------------------------------------------------------------/if (!window.Node) var Node = { };if (!Node.ELEME
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: 75 72 6e 20 74 2e 76 61 6c 75 65 73 5b 6e 61 6d 65 5d 28 65 6c 65 6d 65 6e 74 2c 20 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 69 66 20 28 74 2e 6e 61 6d 65 73 5b 6e 61 6d 65 5d 29 20 6e 61 6d 65 20 3d 20 74 2e 6e 61 6d 65 73 5b 6e 61 6d 65 5d 3b 0a 20 20 20 20 20 20 69 66 20 28 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 28 27 3a 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 21 65 6c 65 6d 65 6e 74 2e 61 74 74 72 69 62 75 74 65 73 20 7c 7c 20 21 65 6c 65 6d 65 6e 74 2e 61 74 74 72 69 62 75 74 65 73 5b 6e 61 6d 65 5d 29 20 3f 20 6e 75 6c 6c 20 3a 0a 20 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 61 74 74 72 69 62 75 74 65 73 5b 6e 61 6d 65 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 Data Ascii: urn t.values[name](element, name); if (t.names[name]) name = t.names[name]; if (name.include(':')) { return (!element.attributes \|\| !element.attributes[name]) ? null : element.attributes[name].value; } } return e
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 3b 0a 20 20 20 20 76 61 72 20 6c 65 66 74 20 20 20 20 3d 20 6f 66 66 73 65 74 73 5b 30 5d 3b 0a 20 20 20 20 76 61 72 20 77 69 64 74 68 20 20 20 3d 20 65 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 0a 20 20 20 20 76 61 72 20 68 65 69 67 68 74 20 20 3d 20 65 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 0a 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2e 5f 6f 72 69 67 69 6e 61 6c 4c 65 66 74 20 20 20 3d 20 6c 65 66 74 20 2d 20 70 61 72 73 65 46 6c 6f 61 74 28 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 6c 65 66 74 20 20 7c 7c 20 30 29 3b 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2e 5f 6f 72 69 67 69 6e 61 6c 54 6f 70 20 20 20 20 3d 20 74 6f 70 20 20 2d 20 70 61 72 73 65 46 6c 6f 61 74 28 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 74 6f 70 20 7c 7c Data Ascii: ; var left = offsets[0]; var width = element.clientWidth; var height = element.clientHeight; element._originalLeft = left - parseFloat(element.style.left \|\| 0); element._originalTop = top - parseFloat(element.style.top \|\|
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: 72 20 66 69 6c 74 65 72 20 3d 20 65 6c 65 6d 65 6e 74 2e 67 65 74 53 74 79 6c 65 28 27 66 69 6c 74 65 72 27 29 2c 20 73 74 79 6c 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 3b 0a 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3d 3d 20 31 20 7c 7c 20 76 61 6c 75 65 20 3d 3d 3d 20 27 27 29 20 7b 0a 20 20 20 20 20 20 28 66 69 6c 74 65 72 20 3d 20 73 74 72 69 70 41 6c 70 68 61 28 66 69 6c 74 65 72 29 29 20 3f 0a 20 20 20 20 20 20 20 20 73 74 79 6c 65 2e 66 69 6c 74 65 72 20 3d 20 66 69 6c 74 65 72 20 3a 20 73 74 79 6c 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 27 66 69 6c 74 65 72 27 29 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 76 61 6c 75 65 20 3c 20 30 2e 30 30 30 30 31 Data Ascii: r filter = element.getStyle('filter'), style = element.style; if (value == 1 \|\| value === '') { (filter = stripAlpha(filter)) ? style.filter = filter : style.removeAttribute('filter'); return element; } else if (value < 0.00001

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	633	OUT	GET /images/prototypejs/validation.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=00CB8DFA1AC6A953003566DFAD6CB183.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"10721-1383849768000" Last-Modified: Thu, 07 Nov 2013 18:42:48 GMT Content-Type: text/javascript Content-Length: 10721 Connection: close
2024-04-18 17:22:18 UTC	7814	IN	Data Raw: 2f 2a 0d 0a 2a 20 52 65 61 6c 6c 79 20 65 61 73 79 20 66 69 65 6c 64 20 76 61 6c 69 64 61 74 69 6f 6e 20 77 69 74 68 20 50 72 6f 74 6f 74 79 70 65 0d 0a 2a 20 68 74 74 70 3a 2f 2f 74 65 74 6c 61 77 2e 69 64 2e 61 75 2f 76 69 65 77 2f 6a 61 76 61 73 63 72 69 70 74 2f 72 65 61 6c 6c 79 2d 65 61 73 79 2d 66 69 65 6c 64 2d 76 61 6c 69 64 61 74 69 6f 6e 0d 0a 2a 20 41 6e 64 72 65 77 20 54 65 74 6c 61 77 0d 0a 2a 20 56 65 72 73 69 6f 6e 20 31 2e 35 2e 34 2e 31 20 28 32 30 30 37 2d 30 31 2d 30 35 29 0d 0a 2a 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 20 41 6e 64 72 65 77 20 54 65 74 6c 61 77 0d 0a 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 Data Ascii: /** Really easy field validation with Prototype* http://tetlaw.id.au/view/javascript/really-easy-field-validation* Andrew Tetlaw* Version 1.5.4.1 (2007-01-05)** Copyright (c) 2007 Andrew Tetlaw* Permission is hereby granted, free of charge,
2024-04-18 17:22:18 UTC	370	IN	Data Raw: 74 79 27 2c 20 27 27 2c 20 66 75 6e 63 74 69 6f 6e 28 76 29 20 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 20 28 28 76 20 3d 3d 20 6e 75 6c 6c 29 20 7c 7c 20 28 76 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 29 3b 20 2f 2f 20 7c 7c 20 2f 5e 5c 73 2b 24 2f 2e 74 65 73 74 28 76 29 29 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 0d 0a 56 61 6c 69 64 61 74 69 6f 6e 2e 61 64 64 41 6c 6c 54 68 65 73 65 28 5b 0d 0a 09 5b 27 72 65 71 75 69 72 65 64 27 2c 20 27 54 68 69 73 20 69 73 20 61 20 72 65 71 75 69 72 65 64 20 66 69 65 6c 64 2e 27 2c 20 66 75 6e 63 74 69 6f 6e 28 76 29 20 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 21 56 61 6c 69 64 61 74 69 6f 6e 2e 67 65 74 28 27 49 73 45 6d 70 74 79 27 29 2e 74 65 73 74 28 76 29 3b 0d 0a 09 09 09 7d 5d 2c 0d 0a 09 5b 27 76 61 6c 69 64 61 74 Data Ascii: ty', '', function(v) {return ((v == null) \|\| (v.length == 0)); // \|\| /^\s+$/.test(v));});Validation.addAllThese([['required', 'This is a required field.', function(v) {return !Validation.get('IsEmpty').test(v);}],['validat
2024-04-18 17:22:18 UTC	2537	IN	Data Raw: 29 20 7c 7c 20 28 21 69 73 4e 61 4e 28 76 29 20 26 26 20 21 2f 5e 5c 73 2b 24 2f 2e 74 65 73 74 28 76 29 29 3b 0d 0a 09 09 09 7d 5d 2c 0d 0a 09 5b 27 76 61 6c 69 64 61 74 65 2d 64 69 67 69 74 73 27 2c 20 27 50 6c 65 61 73 65 20 75 73 65 20 6e 75 6d 62 65 72 73 20 6f 6e 6c 79 20 69 6e 20 74 68 69 73 20 66 69 65 6c 64 2e 20 70 6c 65 61 73 65 20 61 76 6f 69 64 20 73 70 61 63 65 73 20 6f 72 20 6f 74 68 65 72 20 63 68 61 72 61 63 74 65 72 73 20 73 75 63 68 20 61 73 20 64 6f 74 73 20 6f 72 20 63 6f 6d 6d 61 73 2e 27 2c 20 66 75 6e 63 74 69 6f 6e 28 76 29 20 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 56 61 6c 69 64 61 74 69 6f 6e 2e 67 65 74 28 27 49 73 45 6d 70 74 79 27 29 2e 74 65 73 74 28 76 29 20 7c 7c 20 20 21 2f 5b 5e 5c 64 5d 2f 2e 74 65 73 74 28 76 29 3b Data Ascii: ) \|\| (!isNaN(v) && !/^\s+$/.test(v));}],['validate-digits', 'Please use numbers only in this field. please avoid spaces or other characters such as dots or commas.', function(v) {return Validation.get('IsEmpty').test(v) \|\| !/[^\d]/.test(v);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	630	OUT	GET /images/prototypejs/effects.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=9F2BB1609B9C9AB8DCE4D9286AF83746.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"38760-1383849768000" Last-Modified: Thu, 07 Nov 2013 18:42:48 GMT Content-Type: text/javascript Content-Length: 38760 Connection: close
2024-04-18 17:22:18 UTC	7814	IN	Data Raw: 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 65 66 66 65 63 74 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0a 2f 2f 20 43 6f 6e 74 72 69 62 75 74 6f 72 73 3a 0a 2f 2f 20 20 4a 75 73 74 69 6e 20 50 61 6c 6d 65 72 20 28 68 74 74 70 3a 2f 2f 65 6e 63 79 74 65 6d 65 64 69 61 2e 63 6f 6d 2f 29 0a 2f 2f 20 20 4d 61 72 6b 20 50 69 6c 67 72 69 6d 20 28 68 74 74 70 3a 2f 2f 64 69 76 65 69 6e 74 6f 6d 61 72 6b 2e Data Ascii: // script.aculo.us effects.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// Contributors:// Justin Palmer (http://encytemedia.com/)// Mark Pilgrim (http://diveintomark.
2024-04-18 17:22:18 UTC	370	IN	Data Raw: 73 74 61 74 65 20 20 20 20 20 20 20 20 3d 20 27 69 64 6c 65 27 3b 0a 20 20 20 20 74 68 69 73 2e 73 74 61 72 74 4f 6e 20 20 20 20 20 20 3d 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 61 79 2a 31 30 30 30 3b 0a 20 20 20 20 74 68 69 73 2e 66 69 6e 69 73 68 4f 6e 20 20 20 20 20 3d 20 74 68 69 73 2e 73 74 61 72 74 4f 6e 2b 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2a 31 30 30 30 29 3b 0a 20 20 20 20 74 68 69 73 2e 66 72 6f 6d 54 6f 44 65 6c 74 61 20 20 3d 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 2d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 6f 6d 3b 0a 20 20 20 20 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 20 20 20 20 3d 20 74 68 69 73 2e 66 69 6e 69 73 68 4f 6e 2d 74 68 69 73 2e 73 74 61 72 74 4f 6e 3b 0a 20 20 20 20 74 Data Ascii: state = 'idle'; this.startOn = this.options.delay1000; this.finishOn = this.startOn+(this.options.duration1000); this.fromToDelta = this.options.to-this.options.from; this.totalTime = this.finishOn-this.startOn; t
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 69 73 2e 73 74 61 74 65 3d 3d 22 69 64 6c 65 22 29 7b 74 68 69 73 2e 73 74 61 74 65 3d 22 72 75 6e 6e 69 6e 67 22 3b 27 2b 0a 20 20 20 20 20 20 63 6f 64 65 46 6f 72 45 76 65 6e 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 27 62 65 66 6f 72 65 53 65 74 75 70 27 29 2b 0a 20 20 20 20 20 20 28 74 68 69 73 2e 73 65 74 75 70 20 3f 20 27 74 68 69 73 2e 73 65 74 75 70 28 29 3b 27 3a 27 27 29 2b 0a 20 20 20 20 20 20 63 6f 64 65 46 6f 72 45 76 65 6e 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 27 61 66 74 65 72 53 65 74 75 70 27 29 2b 0a 20 20 20 20 20 20 27 7d 3b 69 66 20 28 74 68 69 73 2e 73 74 61 74 65 3d 3d 22 72 75 6e 6e 69 6e 67 22 29 7b 27 2b 0a 20 20 20 20 20 20 27 70 6f 73 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 72 61 6e 73 69 74 69 6f 6e 28 70 6f 73 Data Ascii: is.state=="idle"){this.state="running";'+ codeForEvent(this.options,'beforeSetup')+ (this.setup ? 'this.setup();':'')+ codeForEvent(this.options,'afterSetup')+ '};if (this.state=="running"){'+ 'pos=this.options.transition(pos
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 53 74 79 6c 65 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 27 29 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 20 27 6e 6f 6e 65 27 7d 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 6e 64 63 6f 6c 6f 72 29 0a 20 20 20 20 20 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 6e 64 63 6f 6c 6f 72 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 53 74 79 6c 65 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 27 29 2e 70 61 72 73 65 43 6f 6c 6f 72 28 27 23 66 66 66 66 66 66 27 29 3b 0a 20 20 20 20 69 66 Data Ascii: ackgroundImage = this.element.getStyle('background-image'); this.element.setStyle({backgroundImage: 'none'}); } if (!this.options.endcolor) this.options.endcolor = this.element.getStyle('background-color').parseColor('#ffffff'); if
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 74 2e 64 6f 77 6e 28 29 2e 67 65 74 53 74 79 6c 65 28 27 62 6f 74 74 6f 6d 27 29 3b 0a 20 20 76 61 72 20 65 6c 65 6d 65 6e 74 44 69 6d 65 6e 73 69 6f 6e 73 20 3d 20 65 6c 65 6d 65 6e 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 45 66 66 65 63 74 2e 53 63 61 6c 65 28 65 6c 65 6d 65 6e 74 2c 20 77 69 6e 64 6f 77 2e 6f 70 65 72 61 20 3f 20 30 20 3a 20 31 2c 0a 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 73 63 61 6c 65 43 6f 6e 74 65 6e 74 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 73 63 61 6c 65 58 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 73 63 61 6c 65 4d 6f 64 65 3a 20 27 62 6f 78 27 2c 0a 20 20 20 20 73 63 61 6c 65 46 72 6f 6d 3a 20 31 30 30 2c 0a 20 20 20 20 73 63 61 6c 65 4d 6f 64 65 3a 20 7b 6f Data Ascii: t.down().getStyle('bottom'); var elementDimensions = element.getDimensions(); return new Effect.Scale(element, window.opera ? 0 : 1, Object.extend({ scaleContent: false, scaleX: false, scaleMode: 'box', scaleFrom: 100, scaleMode: {o
2024-04-18 17:22:18 UTC	6016	IN	Data Raw: 20 76 61 6c 75 65 20 3d 20 76 61 6c 75 65 2e 70 61 72 73 65 43 6f 6c 6f 72 28 29 3b 0a 20 20 20 20 20 20 20 20 75 6e 69 74 20 20 3d 20 27 63 6f 6c 6f 72 27 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 70 72 6f 70 65 72 74 79 20 3d 3d 20 27 6f 70 61 63 69 74 79 27 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 70 61 72 73 65 46 6c 6f 61 74 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 50 72 6f 74 6f 74 79 70 65 2e 42 72 6f 77 73 65 72 2e 49 45 20 26 26 20 28 21 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2e 68 61 73 4c 61 79 6f 75 74 29 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 7a 6f 6f 6d 3a 20 31 7d 29 3b 0a 20 20 20 20 Data Ascii: value = value.parseColor(); unit = 'color'; } else if (property == 'opacity') { value = parseFloat(value); if (Prototype.Browser.IE && (!this.element.currentStyle.hasLayout)) this.element.setStyle({zoom: 1});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	622	OUT	GET /images/fieldlookup.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	376	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=9EA875EFAA92E13E9DDC11222765A5F7.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"4527-1508359763000" Last-Modified: Wed, 18 Oct 2017 20:49:23 GMT Content-Type: text/javascript Content-Length: 4527 Connection: close
2024-04-18 17:22:18 UTC	4527	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 74 6f 20 74 68 65 20 41 70 61 63 68 65 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 28 41 53 46 29 20 75 6e 64 65 72 20 6f 6e 65 0a 20 2a 20 6f 72 20 6d 6f 72 65 20 63 6f 6e 74 72 69 62 75 74 6f 72 20 6c 69 63 65 6e 73 65 20 61 67 72 65 65 6d 65 6e 74 73 2e 20 20 53 65 65 20 74 68 65 20 4e 4f 54 49 43 45 20 66 69 6c 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 77 69 74 68 20 74 68 69 73 20 77 6f 72 6b 20 66 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 20 2a 20 72 65 67 61 72 64 69 6e 67 20 63 6f 70 79 72 69 67 68 74 20 6f 77 6e 65 72 73 68 69 70 2e 20 20 54 68 65 20 41 53 46 20 6c 69 63 65 6e 73 65 73 20 74 68 69 73 20 66 69 6c 65 0a 20 2a 20 74 6f 20 79 Data Ascii: /* * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:17 UTC	620	OUT	GET /images/selectall.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=54347AE4187188D7E91A8B9C9959E6DA.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"18273-1383849792000" Last-Modified: Thu, 07 Nov 2013 18:43:12 GMT Content-Type: text/javascript Content-Length: 18273 Connection: close
2024-04-18 17:22:18 UTC	7814	IN	Data Raw: 2f 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 74 6f 20 74 68 65 20 41 70 61 63 68 65 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 28 41 53 46 29 20 75 6e 64 65 72 20 6f 6e 65 0a 20 2a 20 6f 72 20 6d 6f 72 65 20 63 6f 6e 74 72 69 62 75 74 6f 72 20 6c 69 63 65 6e 73 65 20 61 67 72 65 65 6d 65 6e 74 73 2e 20 20 53 65 65 20 74 68 65 20 4e 4f 54 49 43 45 20 66 69 6c 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 77 69 74 68 20 74 68 69 73 20 77 6f 72 6b 20 66 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 20 2a 20 72 65 67 61 72 64 69 6e 67 20 63 6f 70 79 72 69 67 68 74 20 6f 77 6e 65 72 73 68 69 70 2e 20 20 54 68 65 20 41 53 46 20 6c 69 63 65 6e 73 65 73 20 74 68 69 73 20 66 69 6c 65 0a 20 2a 20 74 6f 20 79 Data Ascii: /* * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to y
2024-04-18 17:22:18 UTC	370	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 55 6e 63 6f 6d 6d 65 6e 74 20 74 68 65 20 6e 65 78 74 20 74 77 6f 20 6c 69 6e 65 73 20 74 6f 20 73 65 65 20 74 68 65 20 48 54 54 50 20 72 65 73 70 6f 6e 73 65 73 0a 20 20 20 20 20 20 20 20 2f 2f 76 61 72 20 72 65 73 70 6f 6e 73 65 20 3d 20 74 72 61 6e 73 70 6f 72 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 20 7c 7c 20 22 6e 6f 20 72 65 73 70 6f 6e 73 65 20 74 65 78 74 22 3b 0a 20 20 20 20 20 20 20 20 2f 2f 61 6c 65 72 74 28 22 52 65 73 70 6f 6e 73 65 3a 20 5c 6e 5c 6e 22 20 2b 20 72 65 73 70 6f 6e 73 65 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 61 72 65 61 41 72 72 61 79 20 3d 20 61 72 65 61 43 73 76 53 74 72 69 6e 67 2e 73 70 6c 69 74 28 22 2c 22 29 3b 0a 20 20 20 20 76 61 72 20 6e 75 6d 41 72 65 61 73 Data Ascii: ) { // Uncomment the next two lines to see the HTTP responses //var response = transport.responseText \|\| "no response text"; //alert("Response: \n\n" + response); } var areaArray = areaCsvString.split(","); var numAreas
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 41 72 72 61 79 5b 69 5d 2c 20 61 72 65 61 41 72 72 61 79 5b 69 20 2b 20 31 5d 2c 20 7b 70 61 72 61 6d 65 74 65 72 73 3a 20 61 72 65 61 41 72 72 61 79 5b 69 20 2b 20 32 5d 2c 20 6f 6e 43 6f 6d 70 6c 65 74 65 3a 20 72 65 73 70 6f 6e 73 65 46 75 6e 63 74 69 6f 6e 2c 65 76 61 6c 53 63 72 69 70 74 73 3a 20 74 72 75 65 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 2f 2a 2a 20 55 70 64 61 74 65 20 61 6e 20 61 72 65 61 20 28 48 54 4d 4c 20 63 6f 6e 74 61 69 6e 65 72 20 65 6c 65 6d 65 6e 74 29 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 2e 0a 20 20 2a 20 40 70 61 72 61 6d 20 61 72 65 61 49 64 20 54 68 65 20 69 64 20 6f 66 20 74 68 65 20 48 54 4d 4c 20 63 6f 6e 74 61 69 6e 65 72 20 74 6f 20 75 70 64 61 74 65 0a 20 20 2a 20 40 70 61 72 61 6d 20 74 61 72 67 65 74 20 54 68 65 Data Ascii: Array[i], areaArray[i + 1], {parameters: areaArray[i + 2], onComplete: responseFunction,evalScripts: true }); }}/** Update an area (HTML container element) periodically. * @param areaId The id of the HTML container to update * @param target The
2024-04-18 17:22:18 UTC	1897	IN	Data Raw: 75 62 6d 69 74 46 6f 72 6d 44 69 73 61 62 6c 65 53 75 62 6d 69 74 73 28 66 6f 72 6d 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 69 3c 66 6f 72 6d 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 65 6c 20 3d 20 66 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 6f 72 6d 65 6c 2e 74 79 70 65 20 3d 3d 20 22 73 75 62 6d 69 74 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 75 62 6d 69 74 46 6f 72 6d 44 69 73 61 62 6c 65 42 75 74 74 6f 6e 28 66 6f 72 6d 65 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 4e 61 6d 65 20 3d 20 66 6f 72 6d 2e 6e 61 6d 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 65 6c 4e 61 Data Ascii: ubmitFormDisableSubmits(form) { for (var i=0;i<form.length;i++) { var formel = form.elements[i]; if (formel.type == "submit") { submitFormDisableButton(formel); var formName = form.name; var formelNa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:18 UTC	622	OUT	GET /images/string_util.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	376	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=B76E871C0DD8127C7FC0005A59B95D7D.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"4705-1383849793000" Last-Modified: Thu, 07 Nov 2013 18:43:13 GMT Content-Type: text/javascript Content-Length: 4705 Connection: close
2024-04-18 17:22:18 UTC	4705	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 54 72 69 6d 28 54 52 49 4d 5f 56 41 4c 55 45 29 7b 0a 09 69 66 28 54 52 49 4d 5f 56 41 4c 55 45 2e 6c 65 6e 67 74 68 20 3c 20 31 29 7b 0a 09 09 72 65 74 75 72 6e 22 22 3b 0a 09 7d 0a 09 54 52 49 4d 5f 56 41 4c 55 45 20 3d 20 52 54 72 69 6d 28 54 52 49 4d 5f 56 41 4c 55 45 29 3b 0a 09 54 52 49 4d 5f 56 41 4c 55 45 20 3d 20 4c 54 72 69 6d 28 54 52 49 4d 5f 56 41 4c 55 45 29 3b 0a 09 69 66 28 54 52 49 4d 5f 56 41 4c 55 45 3d 3d 22 22 29 7b 0a 09 09 72 65 74 75 72 6e 20 22 22 3b 0a 09 7d 0a 09 65 6c 73 65 7b 0a 09 09 72 65 74 75 72 6e 20 54 52 49 4d 5f 56 41 4c 55 45 3b 0a 09 7d 0a 7d 20 2f 2f 45 6e 64 20 46 75 6e 63 74 69 6f 6e 0a 0a 66 75 6e 63 74 69 6f 6e 20 52 54 72 69 6d 28 56 41 4c 55 45 29 7b 0a 09 76 61 72 20 77 5f 73 70 61 Data Ascii: function Trim(TRIM_VALUE){if(TRIM_VALUE.length < 1){return"";}TRIM_VALUE = RTrim(TRIM_VALUE);TRIM_VALUE = LTrim(TRIM_VALUE);if(TRIM_VALUE==""){return "";}else{return TRIM_VALUE;}} //End Functionfunction RTrim(VALUE){var w_spa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:18 UTC	631	OUT	GET /images/calendar_date_select.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=E888588D4D7425CF13458E442DC2272B.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"22678-1383849793000" Last-Modified: Thu, 07 Nov 2013 18:43:13 GMT Content-Type: text/javascript Content-Length: 22678 Connection: close
2024-04-18 17:22:18 UTC	7814	IN	Data Raw: 2f 2f 20 43 61 6c 65 6e 64 61 72 44 61 74 65 53 65 6c 65 63 74 20 76 65 72 73 69 6f 6e 20 31 2e 31 30 2e 32 20 2d 20 61 20 70 72 6f 74 6f 74 79 70 65 20 62 61 73 65 64 20 64 61 74 65 20 70 69 63 6b 65 72 0a 2f 2f 20 51 75 65 73 74 69 6f 6e 73 2c 20 63 6f 6d 6d 65 6e 74 73 2c 20 62 75 67 73 3f 20 2d 20 65 6d 61 69 6c 20 74 68 65 20 41 75 74 68 6f 72 20 2d 20 54 69 6d 20 48 61 72 70 65 72 20 3c 22 74 69 6d 73 65 65 68 61 72 70 65 72 40 67 6d 61 69 6c 2e 73 65 65 6f 6d 22 2e 67 73 75 62 28 22 73 65 65 22 2c 20 22 63 22 29 3e 0a 69 66 20 28 74 79 70 65 6f 66 20 50 72 6f 74 6f 74 79 70 65 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 61 6c 65 72 74 28 22 43 61 6c 65 6e 64 61 72 44 61 74 65 53 65 6c 65 63 74 20 45 72 72 6f 72 3a 20 50 72 6f 74 6f 74 79 70 Data Ascii: // CalendarDateSelect version 1.10.2 - a prototype based date picker// Questions, comments, bugs? - email the Author - Tim Harper <"timseeharper@gmail.seeom".gsub("see", "c")>if (typeof Prototype == 'undefined') alert("CalendarDateSelect Error: Prototyp
2024-04-18 17:22:18 UTC	370	IN	Data Raw: 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 7d 2e 62 69 6e 64 41 73 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 29 2c 20 63 6c 61 73 73 4e 61 6d 65 3a 20 22 6e 65 78 74 22 20 7d 29 3b 0a 20 20 20 20 74 68 69 73 2e 70 72 65 76 5f 6d 6f 6e 74 68 5f 62 75 74 74 6f 6e 20 3d 20 68 65 61 64 65 72 5f 64 69 76 2e 62 75 69 6c 64 28 22 61 22 2c 20 7b 20 69 6e 6e 65 72 48 54 4d 4c 3a 20 22 26 6c 74 3b 22 2c 20 68 72 65 66 3a 22 23 22 2c 20 6f 6e 63 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 74 68 69 73 2e 6e 61 76 4d 6f 6e 74 68 28 74 68 69 73 2e 64 61 74 65 2e 67 65 74 4d 6f 6e 74 68 28 29 20 2d 20 31 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 7d 2e 62 69 6e 64 41 73 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 29 2c 20 63 Data Ascii: return false; }.bindAsEventListener(this), className: "next" }); this.prev_month_button = header_div.build("a", { innerHTML: "<", href:"#", onclick:function () { this.navMonth(this.date.getMonth() - 1 ); return false; }.bindAsEventListener(this), c
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 78 28 68 65 61 64 65 72 5f 64 69 76 2c 20 24 52 28 30 2c 31 31 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 72 65 74 75 72 6e 20 5b 44 61 74 65 2e 6d 6f 6e 74 68 73 5b 6d 5d 2c 20 6d 5d 7d 29 2c 20 7b 63 6c 61 73 73 4e 61 6d 65 3a 20 22 6d 6f 6e 74 68 22 2c 20 6f 6e 63 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 74 68 69 73 2e 6e 61 76 4d 6f 6e 74 68 28 74 68 69 73 2e 6d 6f 6e 74 68 5f 73 65 6c 65 63 74 2e 67 65 74 56 61 6c 75 65 28 29 29 20 7d 2e 62 69 6e 64 41 73 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 29 7d 29 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 79 65 61 72 5f 73 65 6c 65 63 74 20 3d 20 6e 65 77 20 53 65 6c 65 63 74 42 6f 78 28 68 65 61 64 65 72 5f 64 69 76 2c 20 5b 5d 2c 20 7b 63 6c 61 73 73 4e 61 6d 65 3a Data Ascii: x(header_div, $R(0,11).map(function(m){return [Date.months[m], m]}), {className: "month", onchange: function () { this.navMonth(this.month_select.getValue()) }.bindAsEventListener(this)}); this.year_select = new SelectBox(header_div, [], {className:
2024-04-18 17:22:18 UTC	6302	IN	Data Raw: 64 29 3b 0a 20 20 20 20 74 68 69 73 2e 73 65 6c 65 63 74 65 64 5f 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 74 68 69 73 2e 64 61 74 65 29 3b 0a 20 20 20 20 74 68 69 73 2e 75 73 65 5f 74 69 6d 65 20 3d 20 2f 5b 30 2d 39 5d 3a 5b 30 2d 39 5d 7b 32 7d 2f 2e 65 78 65 63 28 76 61 6c 75 65 29 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 3b 0a 20 20 20 20 74 68 69 73 2e 64 61 74 65 2e 73 65 74 44 61 74 65 28 31 29 3b 0a 20 20 7d 2c 0a 20 20 75 70 64 61 74 65 46 6f 6f 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 65 78 74 29 20 7b 20 69 66 20 28 21 74 65 78 74 29 20 74 65 78 74 20 3d 20 74 68 69 73 2e 64 61 74 65 53 74 72 69 6e 67 28 29 3b 20 74 68 69 73 2e 66 6f 6f 74 65 72 5f 64 69 76 2e 70 75 72 67 65 43 68 69 6c 64 72 65 6e 28 29 3b 20 74 68 69 73 2e 66 6f Data Ascii: d); this.selected_date = new Date(this.date); this.use_time = /[0-9]:[0-9]{2}/.exec(value) ? true : false; this.date.setDate(1); }, updateFooter:function(text) { if (!text) text = this.dateString(); this.footer_div.purgeChildren(); this.fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:18 UTC	628	OUT	GET /images/prototypejs/popup.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=E8B077A3BDADF620EB20DF91FC1B73D7.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"14720-1383849768000" Last-Modified: Thu, 07 Nov 2013 18:42:48 GMT Content-Type: text/javascript Content-Length: 14720 Connection: close
2024-04-18 17:22:18 UTC	7814	IN	Data Raw: 2f 2a 0a 20 20 70 6f 70 75 70 2e 6a 73 0a 0a 20 20 41 20 6c 69 67 68 74 77 65 69 67 68 74 20 67 65 6e 65 72 61 6c 20 70 75 72 70 6f 73 65 20 4a 61 76 61 53 63 72 69 70 74 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 20 70 6f 70 75 70 20 63 6c 61 73 73 2e 0a 0a 20 20 57 65 62 70 61 67 65 3a 0a 20 20 20 20 68 74 74 70 3b 2f 2f 77 77 77 2e 6d 65 74 68 6f 64 73 2e 63 6f 2e 6e 7a 2f 70 6f 70 75 70 2f 70 6f 70 75 70 2e 68 74 6d 6c 0a 0a 20 20 49 6e 73 70 69 72 65 64 20 62 79 3a 0a 20 20 20 20 4c 69 67 68 74 62 6f 78 32 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 64 64 6c 65 74 6f 67 65 74 68 65 72 2e 63 6f 6d 2f 70 72 6f 6a 65 63 74 73 2f 6c 69 67 68 74 62 6f 78 32 2f 0a 20 20 20 20 4c 69 67 68 74 62 6f 78 20 47 6f 6e 65 20 57 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 70 61 Data Ascii: /* popup.js A lightweight general purpose JavaScript DOM element popup class. Webpage: http;//www.methods.co.nz/popup/popup.html Inspired by: Lightbox2: http://www.huddletogether.com/projects/lightbox2/ Lightbox Gone Wild: http://pa
2024-04-18 17:22:18 UTC	370	IN	Data Raw: 6c 61 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 0a 20 20 20 20 20 20 6f 76 65 72 6c 61 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 69 64 27 2c 27 70 6f 70 75 70 5f 6f 76 65 72 6c 61 79 27 29 3b 0a 20 20 20 20 20 20 6f 76 65 72 6c 61 79 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 76 65 72 6c 61 79 29 3b 0a 20 20 20 20 20 20 50 6f 70 75 70 2e 6f 76 65 72 6c 61 79 20 3d 20 6f 76 65 72 6c 61 79 3b 0a 20 20 20 20 20 20 50 6f 70 75 70 2e 6f 76 65 72 6c 61 79 5f 6c 65 76 65 6c 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 7d 0a 20 20 20 20 50 6f 70 75 70 2e 6f 76 65 72 6c 61 79 2e Data Ascii: lay = document.createElement('div'); overlay.setAttribute('id','popup_overlay'); overlay.style.display = 'none'; document.body.appendChild(overlay); Popup.overlay = overlay; Popup.overlay_levels = []; } Popup.overlay.
2024-04-18 17:22:18 UTC	6536	IN	Data Raw: 20 3d 20 7a 3b 0a 20 20 20 20 50 6f 70 75 70 2e 6f 76 65 72 6c 61 79 5f 6c 65 76 65 6c 73 2e 70 75 73 68 28 7a 29 3b 0a 20 20 20 20 69 66 20 28 20 50 6f 70 75 70 2e 6f 76 65 72 6c 61 79 5f 6c 65 76 65 6c 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 31 29 20 7b 20 2f 2f 20 4f 70 65 6e 69 6e 67 20 74 68 65 20 66 69 72 73 74 20 6d 6f 64 61 6c 20 70 6f 70 75 70 2e 0a 20 20 20 20 20 20 2f 2f 20 51 75 65 75 65 20 74 68 65 20 67 6c 6f 62 61 6c 20 6f 76 65 72 6c 61 79 20 65 66 66 65 63 74 20 74 6f 20 65 6e 73 75 72 65 20 63 6f 72 72 65 63 74 20 65 78 65 63 75 74 69 6f 6e 20 6f 72 64 65 72 2e 0a 20 20 20 20 20 20 6e 65 77 20 45 66 66 65 63 74 2e 41 70 70 65 61 72 28 50 6f 70 75 70 2e 6f 76 65 72 6c 61 79 2c 0a 20 20 20 20 20 20 20 20 7b 20 64 75 72 61 74 69 6f 6e 3a 20 74 Data Ascii: = z; Popup.overlay_levels.push(z); if ( Popup.overlay_levels.length == 1) { // Opening the first modal popup. // Queue the global overlay effect to ensure correct execution order. new Effect.Appear(Popup.overlay, { duration: t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:18 UTC	627	OUT	GET /images/js/bootstrap.min.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	378	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Set-Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; Domain=.traininng.com; Path=/images; Secure ETag: W/"45012-1528109692000" Last-Modified: Mon, 04 Jun 2018 10:54:52 GMT Content-Type: text/javascript Content-Length: 45012 Connection: close
2024-04-18 17:22:18 UTC	7814	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 6a 51 75 65 72 79 3d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 42 6f 6f 74 73 74 72 61 70 5c 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 27 29 7d 0a 2b 66 75 6e 63 74 69 6f 6e 28 24 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 76 65 72 73 69 6f 6e 3d 24 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 27 20 27 29 5b 30 5d 2e 73 70 6c 69 74 28 27 2e 27 29 0a 69 66 28 28 76 65 72 73 69 6f 6e 5b 30 5d 3c 32 26 26 76 65 72 73 69 6f 6e 5b 31 5d 3c 39 29 7c 7c 28 76 65 72 73 69 6f 6e 5b 30 5d 3d 3d 31 26 26 76 65 72 73 69 6f 6e 5b 31 5d 3d 3d 39 26 26 76 65 72 73 69 6f 6e 5b 32 5d 3c 31 29 29 7b 74 68 72 6f 77 20 6e 65 77 Data Ascii: if(typeof jQuery==='undefined'){throw new Error('Bootstrap\'s JavaScript requires jQuery')}+function($){'use strict';var version=$.fn.jquery.split(' ')[0].split('.')if((version[0]<2&&version[1]<9)\|\|(version[0]==1&&version[1]==9&&version[2]<1)){throw new
2024-04-18 17:22:18 UTC	370	IN	Data Raw: 6c 69 64 65 27 29 29 7b 24 6e 65 78 74 2e 61 64 64 43 6c 61 73 73 28 74 79 70 65 29 0a 24 6e 65 78 74 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 0a 24 61 63 74 69 76 65 2e 61 64 64 43 6c 61 73 73 28 64 69 72 65 63 74 69 6f 6e 29 0a 24 6e 65 78 74 2e 61 64 64 43 6c 61 73 73 28 64 69 72 65 63 74 69 6f 6e 29 0a 24 61 63 74 69 76 65 2e 6f 6e 65 28 27 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 6e 65 78 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5b 74 79 70 65 2c 64 69 72 65 63 74 69 6f 6e 5d 2e 6a 6f 69 6e 28 27 20 27 29 29 2e 61 64 64 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 0a 24 61 63 74 69 76 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5b 27 61 63 74 69 76 65 27 2c 64 69 72 65 63 74 69 6f 6e 5d 2e 6a 6f 69 6e Data Ascii: lide')){$next.addClass(type)$next[0].offsetWidth$active.addClass(direction)$next.addClass(direction)$active.one('bsTransitionEnd',function(){$next.removeClass([type,direction].join(' ')).addClass('active')$active.removeClass(['active',direction].join
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 7d 65 6c 73 65 7b 24 61 63 74 69 76 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 0a 24 6e 65 78 74 2e 61 64 64 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 0a 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 66 61 6c 73 65 0a 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 73 6c 69 64 45 76 65 6e 74 29 7d 0a 69 73 43 79 63 6c 69 6e 67 26 26 74 68 69 73 2e 63 79 63 6c 65 28 29 0a 72 65 74 75 72 6e 20 74 68 69 73 7d 0a 66 75 6e 63 74 69 6f 6e 20 50 6c 75 67 69 6e 28 6f 70 74 69 6f 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 24 74 68 69 73 3d 24 28 74 68 69 73 29 0a 76 61 72 20 64 61 74 61 3d 24 74 68 Data Ascii: l.TRANSITION_DURATION)}else{$active.removeClass('active')$next.addClass('active')this.sliding=falsethis.$element.trigger(slidEvent)}isCycling&&this.cycle()return this}function Plugin(option){return this.each(function(){var $this=$(this)var data=$th
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: 73 2e 24 64 69 61 6c 6f 67 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 27 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 27 29 0a 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 3d 6e 75 6c 6c 0a 74 68 69 73 2e 69 73 53 68 6f 77 6e 3d 6e 75 6c 6c 0a 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 42 6f 64 79 50 61 64 3d 6e 75 6c 6c 0a 74 68 69 73 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3d 30 0a 74 68 69 73 2e 69 67 6e 6f 72 65 42 61 63 6b 64 72 6f 70 43 6c 69 63 6b 3d 66 61 6c 73 65 0a 69 66 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 29 7b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 27 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 27 29 2e 6c 6f 61 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 2c 24 2e 70 72 6f 78 Data Ascii: s.$dialog=this.$element.find('.modal-dialog')this.$backdrop=nullthis.isShown=nullthis.originalBodyPad=nullthis.scrollbarWidth=0this.ignoreBackdropClick=falseif(this.options.remote){this.$element.find('.modal-content').load(this.options.remote,$.prox
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 74 72 69 67 67 65 72 3d 3d 27 68 6f 76 65 72 27 3f 27 6d 6f 75 73 65 65 6e 74 65 72 27 3a 27 66 6f 63 75 73 69 6e 27 0a 76 61 72 20 65 76 65 6e 74 4f 75 74 3d 74 72 69 67 67 65 72 3d 3d 27 68 6f 76 65 72 27 3f 27 6d 6f 75 73 65 6c 65 61 76 65 27 3a 27 66 6f 63 75 73 6f 75 74 27 0a 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 65 76 65 6e 74 49 6e 2b 27 2e 27 2b 74 68 69 73 2e 74 79 70 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 65 6c 65 63 74 6f 72 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 65 6e 74 65 72 2c 74 68 69 73 29 29 0a 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 65 76 65 6e 74 4f 75 74 2b 27 2e 27 2b 74 68 69 73 2e 74 79 70 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 65 6c 65 63 74 6f 72 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 Data Ascii: trigger=='hover'?'mouseenter':'focusin'var eventOut=trigger=='hover'?'mouseleave':'focusout'this.$element.on(eventIn+'.'+this.type,this.options.selector,$.proxy(this.enter,this))this.$element.on(eventOut+'.'+this.type,this.options.selector,$.proxy(this
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: 72 74 44 69 6d 65 6e 73 69 6f 6e 73 2e 77 69 64 74 68 2d 72 69 67 68 74 45 64 67 65 4f 66 66 73 65 74 7d 7d 0a 72 65 74 75 72 6e 20 64 65 6c 74 61 7d 0a 54 6f 6f 6c 74 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 69 74 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 69 74 6c 65 0a 76 61 72 20 24 65 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 0a 76 61 72 20 6f 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 0a 74 69 74 6c 65 3d 24 65 2e 61 74 74 72 28 27 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 2d 74 69 74 6c 65 27 29 7c 7c 28 74 79 70 65 6f 66 20 6f 2e 74 69 74 6c 65 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 3f 6f 2e 74 69 74 6c 65 2e 63 61 6c 6c 28 24 65 5b 30 5d 29 3a 6f 2e 74 69 74 6c 65 29 0a 72 65 74 75 72 6e 20 74 69 74 6c 65 7d 0a 54 6f 6f 6c 74 69 70 Data Ascii: rtDimensions.width-rightEdgeOffset}}return delta}Tooltip.prototype.getTitle=function(){var titlevar $e=this.$elementvar o=this.optionstitle=$e.attr('data-original-title')\|\|(typeof o.title=='function'?o.title.call($e[0]):o.title)return title}Tooltip
2024-04-18 17:22:18 UTC	4092	IN	Data Raw: 73 74 28 27 6c 69 2e 64 72 6f 70 64 6f 77 6e 27 29 2e 61 64 64 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 2e 65 6e 64 28 29 2e 66 69 6e 64 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 61 62 22 5d 27 29 2e 61 74 74 72 28 27 61 72 69 61 2d 65 78 70 61 6e 64 65 64 27 2c 74 72 75 65 29 7d 0a 63 61 6c 6c 62 61 63 6b 26 26 63 61 6c 6c 62 61 63 6b 28 29 7d 0a 24 61 63 74 69 76 65 2e 6c 65 6e 67 74 68 26 26 74 72 61 6e 73 69 74 69 6f 6e 3f 24 61 63 74 69 76 65 2e 6f 6e 65 28 27 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 27 2c 6e 65 78 74 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 54 61 62 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 6e 65 78 74 28 29 0a 24 61 63 74 69 76 65 2e 72 65 6d 6f 76 65 43 6c 61 73 Data Ascii: st('li.dropdown').addClass('active').end().find('[data-toggle="tab"]').attr('aria-expanded',true)}callback&&callback()}$active.length&&transition?$active.one('bsTransitionEnd',next).emulateTransitionEnd(Tab.TRANSITION_DURATION):next()$active.removeClas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:18 UTC	726	OUT	GET /images/logo.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B76E871C0DD8127C7FC0005A59B95D7D.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"11264-1516619438000" Last-Modified: Mon, 22 Jan 2018 11:10:38 GMT Content-Type: image/png Content-Length: 11264 Connection: close
2024-04-18 17:22:18 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 73 08 06 00 00 00 22 d2 3f e3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDR,s"?pHYs.#.#x?vMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-04-18 17:22:18 UTC	257	IN	Data Raw: fe de 5e 77 b3 4f 4b e5 6f 99 43 78 2d 2d 9f bb fb 9c c4 79 ee 8d 34 e0 64 97 23 dd d0 e7 be b9 ac a7 b7 8a 26 1c 5c 91 7d 0a ef 49 b2 d2 80 da ba 06 7e dc b1 8f e5 cb d6 ff 64 7f da b4 61 87 ca 93 ae a0 08 4b 21 34 74 34 1c e8 b4 d3 dd 86 52 52 8e de 40 ae c7 cd 6e 2d 8d 9b 32 87 31 33 a5 37 77 d6 ad 62 48 d3 8f e8 38 d8 e1 c8 a0 11 87 74 56 d0 c9 f3 d6 91 4a 13 df 38 db f1 60 c6 09 7c 90 72 04 f9 9e 03 3f 23 b3 31 25 f7 a8 8e 57 b0 96 b0 be 5c fd 8c ea 29 85 a0 d0 08 9c 2e f4 18 60 ba ea 22 05 25 61 29 28 28 28 c2 52 50 50 50 48 60 c2 ba 19 b1 43 89 9d d6 50 11 b1 21 b6 98 aa 0b 71 ec b9 88 c0 5b bd 85 f7 f1 22 02 73 37 02 cb 88 30 5b a5 05 c8 45 04 09 db 1d 43 72 39 22 ef 94 ee d3 17 e5 c0 82 10 e7 f5 92 cf e4 47 8b eb 73 1e 22 eb 43 f3 32 a0 03 91 62 Data Ascii: ^wOKoCx--y4d#&\}I~daK!4t4RR@n-2137wbH8tVJ8`\|r?#1%W\).`"%a)(((RPPPH`CP!q["s70[ECr9"Gs"C2b
2024-04-18 17:22:18 UTC	3080	IN	Data Raw: 13 e7 de 80 c8 62 ea db 96 85 88 94 34 c1 70 14 22 65 8d d5 de a5 97 c9 31 e9 db 96 55 c0 8c 10 e7 75 91 c7 6e b5 b8 3e bf 06 4e e3 50 96 0c 07 b0 0b 78 82 d0 b9 c9 c2 45 17 d9 f6 3e 72 2c 3b e4 5c de 05 7c 03 ac 05 aa a2 49 58 4f 44 71 f2 4e 33 41 58 b7 02 27 5b 74 3f 1d b1 9d d5 93 88 4c 96 b1 c0 02 e0 11 e0 0d 9b ef f3 10 d0 d5 af ec df 26 08 ab 1f 22 a1 df 19 72 12 5a 85 f1 c0 99 7e 65 3f 98 24 ac a7 0d ca b2 4d 10 d6 49 c0 7d 72 fc 54 5a d8 96 3f 20 72 e3 fb e2 0b 13 84 d5 06 91 45 f5 0a 60 ae 85 f5 39 1b b8 c5 af cc 8b d8 20 d7 0a c2 6a 87 d8 bb f2 1c 44 7e ff 60 5c b2 1b 91 80 f1 0d e0 ad 68 10 d6 56 a0 5b 14 26 6e 9d c9 ce b4 72 a0 69 f2 4d 74 1a 62 73 d1 df c9 b7 43 b4 30 02 18 0c dc 18 05 c2 da 6c 40 58 66 a4 a6 2d f2 bc 25 f2 cd 5d 6e 51 7d b6 Data Ascii: b4p"e1Uun>NPxE>r,;\\|IXODqN3AX'[t?L&"rZ~e?$MI}rTZ? rE`9 jD~`\hV[&nriMtbsC0l@Xf-%]nQ}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:18 UTC	734	OUT	GET /images/hrci-thr-new.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B76E871C0DD8127C7FC0005A59B95D7D.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:18 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:23 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"53790-1677826338000" Last-Modified: Fri, 03 Mar 2023 06:52:18 GMT Content-Type: image/png Content-Length: 53790 Connection: close
2024-04-18 17:22:18 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 42 00 00 00 8c 08 06 00 00 00 09 38 a0 ec 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 d1 a4 49 44 41 54 78 da ec 9d 77 b8 1d 45 f9 c7 3f 33 b3 e5 f4 db 4b 6e 7a 2f 84 de 7b 6f d2 41 44 50 41 14 a5 59 50 40 8a 54 01 29 22 82 28 5d b0 82 88 d2 7b 0f 10 08 90 90 84 f4 de 73 7b 3d fd ec ee cc ef 8f 3d b9 24 24 28 02 3f 45 cd fb 3c fb 10 ee d9 3a bb f3 9d b7 7e 5f 61 8c 61 b3 6c 96 cd b2 59 fe 97 c5 da d4 1f 8b 85 fc 27 3e a1 94 12 db 71 d1 40 66 c9 6c ec da 46 9c 8a 2a 72 3d 6d b8 91 0a 44 24 06 f9 1c 5e a6 9d 48 dd 50 da 26 3d 4f 7c e4 18 a2 83 86 Data Ascii: PNGIHDRB8pHYs cHRMz%u0`:o_FIDATxwE?3Knz/{oADPAYP@T)"(]{s{==$$(?E<:~_aalY'>q@flF*r=mD$^HP&=O\|
2024-04-18 17:22:18 UTC	257	IN	Data Raw: 77 da d1 74 3e f8 02 7e 7b 1f ca 8d 62 5c 2b 04 43 63 90 5a 60 12 2e 81 25 31 2d 7d 14 57 b5 43 b1 84 8a c6 21 8f db fb da 5b bb c7 77 1e 3b 4d 2a b5 c2 14 bc d0 b4 fe 04 5b 72 c4 98 8f f3 39 5c 04 1f a1 ee 6c 96 cd f2 f9 91 e2 26 35 c2 75 cc 17 ff f4 a6 14 b9 96 e5 a3 17 9c 7e ee 1d 1d f7 bf 31 d0 6e ac 44 2b 4d c5 d5 c7 90 d8 66 18 dd 37 3d 85 ee cc 61 a2 0a 59 d2 68 25 d0 d2 20 3c a0 2f 43 e3 79 c7 32 f6 a5 df d1 78 d8 17 e8 7d ef 5d 7a 26 cd 40 35 56 53 7a 75 15 8b ce ba 84 c6 af 1e 4f f5 97 f7 64 c1 f7 6f c0 aa aa 62 d0 39 27 60 72 19 84 01 a1 24 0a 07 cb 72 08 22 02 81 c4 04 01 5a 68 8c 25 f0 94 41 18 89 d4 20 8c 07 f9 1c 2a 1e 25 72 f4 f6 f8 7e 11 7b eb 46 aa 7f 74 28 64 fb 88 6c 3f 8c f8 be a3 09 b2 79 ec dd 46 a2 46 55 e1 95 02 e2 07 8f 47 34 24 Data Ascii: wt>~{b\+CcZ`.%1-}WC![w;M[r9\l&5u~1nD+Mf7=aYh% </Cy2x}]z&@5VSzuOdob9'`r$r"Zh%A %r~{Ft(dl?yFFUG4$
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 16 35 57 1e 83 a8 71 88 0f af 66 e0 ed 67 e0 29 0f 86 56 11 19 d9 00 d9 12 ba bb 88 5f 08 79 0a 8d 50 18 15 80 d4 68 a1 71 a4 0b 55 31 74 10 90 bd fb 35 82 82 87 49 ba 88 5c 1e 55 9b 22 b9 e5 b6 2c bd e8 46 f4 82 2c 41 b6 97 8e 97 5f a1 ea c4 c3 70 22 29 9a af ff 1b ad d7 dd 4b 64 ec 40 9a 7e fe 2d 02 c7 40 4f 16 89 21 70 25 d8 02 cb 80 cc f8 a4 1f 9b 8a 53 5f 41 e3 1d a7 62 22 1e 26 66 a3 d7 e4 07 2e 39 f9 ca 3b f2 4b 96 8d 96 11 1b 2b 91 40 7d 82 6d b3 6c 96 ff fa 60 c9 27 36 87 75 be 66 de 05 97 fe ad ef ae d7 f6 76 07 d4 a1 33 39 24 36 ee fe 23 28 2d e9 45 af e9 45 59 02 63 85 04 04 28 30 1e f8 e9 1c ee 98 0a 46 bf 78 3b 6b 6f fd 13 d9 85 0b d9 ea ae 3b 58 7c d5 15 f4 dc f2 12 22 51 89 df dd c6 d0 df fe 88 ca 7d 77 65 de 41 df 42 d6 57 63 6c 9b 60 c6 Data Ascii: 5Wqfg)V_yPhqU1t5I\U",F,A_p")Kd@~-@O!p%S_Ab"&f.9;K+@}ml`'6ufv39$6#(-EEYc(0Fx;ko;X\|"Q}weABWcl`
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: c1 c7 de 76 10 c5 95 1d f8 85 12 76 c4 09 fd 83 96 0e cb c4 f2 3e d6 a0 2a 84 ef d3 f1 d4 64 9c 58 0a 2a 2c 4c 41 53 b4 b3 8c ba e6 47 28 aa 99 73 c8 29 44 9a 86 21 92 71 74 31 cc 67 b2 02 01 d2 60 ef 3d 86 e2 bc b5 e4 ff 30 15 bf 36 8a ee c8 10 d9 b2 86 b1 b7 5c 46 ac 6a 08 45 2f c0 96 72 93 a6 93 41 23 85 28 d7 9b ae cb 0c 94 9b f8 60 fa 5f 4f ff af da 7c e2 36 1e 9f 8d a3 47 1b 9c 68 92 91 17 9d cb bc 65 cd f4 fd 76 3a f6 98 5a b4 f6 f0 9d 80 52 d4 10 64 3c 1c db c1 ac a3 34 13 0a ab a1 92 40 68 64 77 86 81 77 5f 86 ac ac 65 d6 89 a7 92 7d 76 3e 32 56 85 55 a9 f0 d2 69 4c 63 04 95 b3 f0 5d 11 26 81 07 1a bb 24 30 f9 22 41 cb 1a 12 db 0c a3 b4 bc 15 11 b3 f1 e6 77 7c 29 5a 57 fb 2b 77 e0 80 e5 c6 0b fe 85 0b 82 c1 0b 34 56 20 f8 67 3d 1c 7e 60 3e e2 ef Data Ascii: vv>dX,LASG(s)D!qt1g`=06\FjE/rA#(`_O\|6Ghev:ZRd<4@hdww_e}v>2VUiLc]&$0"Aw\|)ZW+w4V g=~`>
2024-04-18 17:22:18 UTC	8192	IN	Data Raw: 7f 7b 84 62 b1 c0 2b af be ca c9 5f fb ea ff 93 53 c4 10 fd 90 1f f0 ef de a7 ef 93 4a a5 18 37 6e 1c 93 df 98 4c d0 17 f0 db fb 7e c7 0f cf 3d 67 a3 7d ef b8 f3 2e ba ba bb f8 ea 49 27 31 68 d0 20 66 4c 9f 41 73 6b 0b 95 15 95 f8 be cf 5d 77 df 43 50 8e 6a 2b a5 a8 aa aa c2 75 5d 9a 5b 9b 79 e7 dd a9 1b 45 86 ff 59 99 30 7e 3c 4d 4d 4d 34 37 37 33 67 ce 1c 9e 7c f2 29 8e 2c 6b a1 eb cb 7d bf fd 3d e9 74 1a df f7 d9 71 fb ed 51 4a f5 47 f3 3f 2c 47 1f 7d 24 ef 4d 7f 8f e9 d3 67 90 4a 55 e0 fb fe 47 62 cb a6 81 30 5b 68 30 80 6a 48 d0 f5 bb d7 c0 b1 50 49 17 59 f2 c0 93 e1 32 6d 34 c2 0f 70 e3 71 b4 8c 23 3c 10 9e 21 fb da 4a d2 2f 2f a1 fb e6 c7 91 89 04 aa 3a 8e ca 05 61 97 bb 74 00 83 a2 34 5c ff 4d 3a af 7d 91 60 4d 1b 04 92 e8 e8 31 e5 3e 23 1a 21 04 Data Ascii: {b+_SJ7nL~=g}.I'1h fLAsk]wCPj+u][yEY0~<MMM4773g\|),k}=tqQJG?,G}$MgJUGb0[h0jHPIY2m4pq#<!J//:at4\M:}`M1>#!
2024-04-18 17:22:18 UTC	8176	IN	Data Raw: ee 26 12 53 d6 da 36 73 ac 82 cd d8 c9 03 19 3e b6 9a 97 9e d8 88 a1 1b de d4 81 a2 90 cf 15 18 74 5c 8c 6f fe fa 1a ac a2 45 ac 22 cc 4f fe e7 39 9c a2 cd 45 d7 4c c5 08 e8 b8 8e eb ed 88 4f 62 2a 85 20 56 19 e0 b1 3f ad 24 9b c9 13 0e 87 d1 5c 8b ae 8e 1e 52 89 02 e1 48 00 84 8d e0 18 d3 d3 61 33 63 a9 20 04 a4 52 79 d6 2f 6f c6 08 ea e4 32 79 2e ff d0 74 92 f1 34 cf fc 6d 2b 46 35 08 57 29 ad 75 85 62 9e a1 63 ea 09 86 05 8b 9e db ce ac f3 c7 71 d9 b5 d3 78 f6 81 75 7c f0 73 b3 d0 82 0a 8f ff 69 35 a1 50 c8 03 54 0b 97 6c b2 c8 c9 e7 8c 22 5a 19 e2 f9 47 36 a0 69 50 74 0a 6b 37 ac da fd b6 1d cb 1b 75 48 97 2c 59 4a 63 63 63 e9 01 ea 17 01 1f 31 72 e4 61 fa 48 f2 0d b7 39 7f fe 0b 6c dd ba 95 ca ca 4a a4 94 d8 b6 4d 45 45 45 a9 3e d8 b8 7b b7 ef 68 fc Data Ascii: &S6s>t\oE"O9ELOb* V?$\RHa3c Ry/o2y.t4m+F5W)ubcqxu\|si5PTl"ZG6iPtk7uH,YJccc1raH9lJMEEE>{h
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 5c 78 dd 64 b6 ac 69 66 ed e2 26 c2 91 30 8a 22 90 c2 83 06 79 da ee 2e 02 15 c7 01 33 6a 30 eb 82 e3 99 75 c1 f1 44 a2 01 3a da e2 ac 5f d9 c2 05 57 4f 63 e9 0b 3b 88 77 e6 08 04 05 d2 55 fc c1 6a 40 d8 14 0b 0e 23 c6 55 93 cf 17 b0 32 0e c9 44 86 41 a3 2b ee 1e 33 79 c8 46 c7 72 df b6 b9 e2 63 76 cc de c9 76 c8 1a e1 d6 8d 87 17 29 53 55 41 26 65 35 fc f0 4b 4f 2d 48 f6 64 8e 0b 04 15 8a 79 89 50 1d 54 c5 40 51 3c 71 1d d7 15 28 ba 24 d1 5b 60 d2 49 83 f8 c8 97 ce e4 91 3f 2f a7 a6 ae 82 0f 7e 66 16 bf f8 9f a7 79 ec 2f ab 38 f3 92 71 f4 76 24 68 de 99 c4 08 a8 fb 05 70 b2 44 42 20 5d 49 2e 6d d3 30 3c c6 45 d7 4d e5 af bf 5a 44 21 6d 13 30 35 d2 e9 02 c9 64 96 0f 7c f6 74 6e f8 d4 e9 04 82 06 ff 2e 02 fd 37 e1 06 4b fb b7 e0 99 8d fc ef ad 8f 62 17 15 Data Ascii: \xdif&0"y.3j0uD:_WOc;wUj@#U2DA+3yFrcvv)SUA&e5KO-HdyPT@Q<q($[`I?/~fy/8qv$hpDB ]I.m0<EMZD!m05d\|tn.7Kb
2024-04-18 17:22:19 UTC	4678	IN	Data Raw: 44 da ae 64 f3 de 04 ab 76 f6 02 a2 94 e6 d5 57 98 0c ad 09 51 5f 69 32 65 58 05 c7 35 44 89 04 35 ea 2b 82 ff b2 07 f9 1f b1 de 54 81 de b4 45 77 22 cf 9a dd 71 76 b5 67 e8 ec cb b3 ab 23 4d a6 e0 50 b0 5c 8a b6 83 ae 7a a9 6d 38 a0 11 0d ee 17 5c ef a3 df a4 9f d5 dc 76 25 b9 a2 43 36 6f 7b cd c5 90 4e d4 d4 29 0f eb 8c 6e 88 32 76 50 19 23 ea c3 0c ad 09 53 19 0d 50 1e fe f7 de a4 ff 52 64 aa ef 0c 17 cc 9c 33 f2 b2 d7 e6 6d f9 4d 38 18 3a 2b 12 35 58 f5 e2 1e 16 cf db c5 90 91 55 0c 19 55 c9 e6 55 ad 58 96 8d aa 0a ef e6 04 84 e2 69 15 bf 1e 49 a9 20 51 34 15 cd 76 f8 e9 d7 e7 72 f6 a5 c7 d3 be 37 c5 a6 e5 6d 44 c2 41 af ee e0 7a 2b 7f b1 e8 d0 be 27 ce a5 ef 9f c6 f9 ef 99 42 e3 96 4e 5e 7e 7a 13 b3 2f 9d 48 6d 43 19 4f dc bb 82 e6 2d 71 a2 41 93 85 Data Ascii: DdvWQ_i2eX5D5+TEw"qvg#MP\zm8\v%C6o{N)n2vP#SPRd3mM8:+5XUUUXiI Q4vr7mDAz+'BN^~z/HmCO-qA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 17:22:18 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=222061 Date: Thu, 18 Apr 2024 17:22:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	749	OUT	GET /images/download-training-catalogue.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"17852-1529667940000" Last-Modified: Fri, 22 Jun 2018 11:45:40 GMT Content-Type: image/png Content-Length: 17852 Connection: close
2024-04-18 17:22:19 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDR<qpHYs.#.#x?vMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-04-18 17:22:19 UTC	257	IN	Data Raw: 05 c8 37 33 c4 74 64 8a bd ce cb 37 0c 90 35 5d eb 9b 22 64 dc 4c cb 8b ff 6f 9b 6f e9 86 3d c1 ad 47 e8 a4 6b 54 ab a4 d2 07 5b 0a 60 15 80 5d 94 6d 4e 96 54 d3 6b 05 35 b1 03 29 35 73 02 c8 1e 40 37 d5 62 6c 87 f4 bd 89 b3 d6 36 44 ab fe b0 b8 e5 d3 77 4f 75 5c b4 fd 6f 7d df f6 86 d4 00 00 7c 5e 15 da f5 fb 6f 1b 5f 43 58 8b c0 c2 59 df 9e 99 79 dd 55 fd cd 63 00 60 62 a6 98 ff 8e ac 45 12 24 52 39 fa cc 27 80 54 41 94 76 36 b0 2e a1 5f 92 f8 36 2d 06 0c bc 4a 73 61 96 d4 eb d2 22 f3 70 ab 00 69 79 43 b4 f2 fb 92 c0 3a 34 46 ab e7 37 44 2a a6 65 49 85 65 57 10 26 fa e9 2d de c5 f7 fd dc 42 c2 6a f6 00 6e 27 7e 40 09 94 12 f1 d3 07 bc 96 02 aa ab 25 48 fd 93 8d 20 8d e1 c6 80 b4 0f c8 03 d9 4c 12 49 78 3e 75 e8 b0 f3 e9 ff db e8 59 28 2b 5a f4 c3 d3 d3 Data Ascii: 73td75]"dLoo=GkT[`]mNTk5)5s@7bl6DwOu\o}\|^o_CXYyUc`bE$R9'TAv6._6-Jsa"piyC:4F7D*eIeW&-Bjn'~@%H LIx>uY(+Z
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 85 77 7c 5f 13 de 7d e1 77 8d b3 e1 55 dc 7d fb 99 86 bd 35 25 ed b2 53 33 a5 de 00 f0 fe 2f 81 cd d7 7d d5 f0 2a 32 c4 5e 09 e6 13 81 7d 0d e3 2e 05 f0 24 e2 d8 94 11 2f b0 86 d3 09 d9 db 01 50 b1 70 2b ce a1 f9 86 3e 5b cf cb be b5 75 7f dd 30 e0 87 41 96 31 33 3e ad 7b ee 77 5f 37 bc f2 d1 8c 8c ab 7b 9b 78 fb 0b 3b 7c 2b df 5e eb 99 07 0b 97 0a 89 31 24 e8 a4 eb 6d 38 36 0d c0 06 00 73 b0 af 7f d6 d1 96 72 7a 2d 00 70 16 48 63 8f 34 6a 4a d5 84 e6 96 05 87 14 21 eb a3 4d de 25 65 61 2d 70 75 3f 73 f1 4d 2b 5c df a1 59 6e 18 3f c2 3a 71 f1 cc ac 1b 24 80 ad 08 2a de 54 9e 15 a7 e5 1a fa 8d 1b 68 1e bd a6 36 52 0e ba f1 23 c1 00 a7 85 9a f6 93 41 9a 91 74 0a b0 ce c4 be ca c3 c4 d0 ae e8 51 46 62 c5 39 d3 33 ae 06 03 f6 fe 0d 9e 9f 10 d5 42 8f 9f 98 3a Data Ascii: w\|_}wU}5%S3/}2^}.$/Pp+>[u0A13>{w_7{x;\|+^1$m86srz-pHc4jJ!M%ea-pu?sM+\Yn?:q$Th6R#AtQFb93B:
2024-04-18 17:22:19 UTC	1476	IN	Data Raw: f1 00 4b a1 e0 ba 0e 49 aa 43 ef 24 70 31 20 e4 ae 08 52 81 5a 4c 57 d6 dc 6e 6a 1e a7 80 54 6f 64 53 5f a5 a5 9b 6a a9 03 b5 d5 97 f1 2c d8 78 9b db ae a4 11 62 36 08 51 d9 5d 57 14 4b 17 42 15 48 73 8c 99 14 60 eb e8 e5 ec 06 14 c2 18 7a 15 51 57 23 16 f5 75 67 50 c5 72 82 8d d4 35 42 67 01 4b 03 f0 11 80 7b b1 af 21 6e 77 16 16 fb 8e 51 49 a5 4e f1 94 36 00 eb 6a 7a 22 1f 24 b1 3f 9e 9a eb 10 f6 25 92 59 f4 0c 49 a5 d4 8e bf 33 81 05 10 26 7e 39 d5 5c 7b bb f9 0a 43 1b 5f d0 47 4d b8 81 9a 9e 93 68 18 bf 07 a4 bc b8 02 f1 f6 3b 48 2c 72 2a a4 ce 78 3f fa 7f 33 1d 4b ed 01 e3 eb ee a2 81 70 86 5b 40 8a 2e d1 d9 c0 02 80 6f 40 76 f2 d8 28 72 7b ca e4 30 20 0c 71 2c 81 5b 00 52 82 2d d3 28 6c 0f 7d e0 4d d4 d4 7b 10 ff 89 b3 02 9d 8f 34 10 62 33 87 46 a7 Data Ascii: KIC$p1 RZLWnjTodS_j,xb6Q]WKBHs`zQW#ugPr5BgK{!nwQIN6jz"$?%YI3&~9\{C_GMh;H,r*x?3Kp[@.o@v(r{0 q,[R-(l}M{4b3F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 17:22:19 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=221969 Date: Thu, 18 Apr 2024 17:22:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 17:22:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49761	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	488	OUT	GET /images/logo.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"11264-1516619438000" Last-Modified: Mon, 22 Jan 2018 11:10:38 GMT Content-Type: image/png Content-Length: 11264 Connection: close
2024-04-18 17:22:19 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 73 08 06 00 00 00 22 d2 3f e3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDR,s"?pHYs.#.#x?vMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-04-18 17:22:19 UTC	257	IN	Data Raw: fe de 5e 77 b3 4f 4b e5 6f 99 43 78 2d 2d 9f bb fb 9c c4 79 ee 8d 34 e0 64 97 23 dd d0 e7 be b9 ac a7 b7 8a 26 1c 5c 91 7d 0a ef 49 b2 d2 80 da ba 06 7e dc b1 8f e5 cb d6 ff 64 7f da b4 61 87 ca 93 ae a0 08 4b 21 34 74 34 1c e8 b4 d3 dd 86 52 52 8e de 40 ae c7 cd 6e 2d 8d 9b 32 87 31 33 a5 37 77 d6 ad 62 48 d3 8f e8 38 d8 e1 c8 a0 11 87 74 56 d0 c9 f3 d6 91 4a 13 df 38 db f1 60 c6 09 7c 90 72 04 f9 9e 03 3f 23 b3 31 25 f7 a8 8e 57 b0 96 b0 be 5c fd 8c ea 29 85 a0 d0 08 9c 2e f4 18 60 ba ea 22 05 25 61 29 28 28 28 c2 52 50 50 50 48 60 c2 ba 19 b1 43 89 9d d6 50 11 b1 21 b6 98 aa 0b 71 ec b9 88 c0 5b bd 85 f7 f1 22 02 73 37 02 cb 88 30 5b a5 05 c8 45 04 09 db 1d 43 72 39 22 ef 94 ee d3 17 e5 c0 82 10 e7 f5 92 cf e4 47 8b eb 73 1e 22 eb 43 f3 32 a0 03 91 62 Data Ascii: ^wOKoCx--y4d#&\}I~daK!4t4RR@n-2137wbH8tVJ8`\|r?#1%W\).`"%a)(((RPPPH`CP!q["s70[ECr9"Gs"C2b
2024-04-18 17:22:19 UTC	3080	IN	Data Raw: 13 e7 de 80 c8 62 ea db 96 85 88 94 34 c1 70 14 22 65 8d d5 de a5 97 c9 31 e9 db 96 55 c0 8c 10 e7 75 91 c7 6e b5 b8 3e bf 06 4e e3 50 96 0c 07 b0 0b 78 82 d0 b9 c9 c2 45 17 d9 f6 3e 72 2c 3b e4 5c de 05 7c 03 ac 05 aa a2 49 58 4f 44 71 f2 4e 33 41 58 b7 02 27 5b 74 3f 1d b1 9d d5 93 88 4c 96 b1 c0 02 e0 11 e0 0d 9b ef f3 10 d0 d5 af ec df 26 08 ab 1f 22 a1 df 19 72 12 5a 85 f1 c0 99 7e 65 3f 98 24 ac a7 0d ca b2 4d 10 d6 49 c0 7d 72 fc 54 5a d8 96 3f 20 72 e3 fb e2 0b 13 84 d5 06 91 45 f5 0a 60 ae 85 f5 39 1b b8 c5 af cc 8b d8 20 d7 0a c2 6a 87 d8 bb f2 1c 44 7e ff 60 5c b2 1b 91 80 f1 0d e0 ad 68 10 d6 56 a0 5b 14 26 6e 9d c9 ce b4 72 a0 69 f2 4d 74 1a 62 73 d1 df c9 b7 43 b4 30 02 18 0c dc 18 05 c2 da 6c 40 58 66 a4 a6 2d f2 bc 25 f2 cd 5d 6e 51 7d b6 Data Ascii: b4p"e1Uun>NPxE>r,;\\|IXODqN3AX'[t?L&"rZ~e?$MI}rTZ? rE`9 jD~`\hV[&nriMtbsC0l@Xf-%]nQ}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49762	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	676	OUT	GET /images/js/owl.carousel.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	271	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"52303-1528109627000" Last-Modified: Mon, 04 Jun 2018 10:53:47 GMT Content-Type: text/javascript Content-Length: 52303 Connection: close
2024-04-18 17:22:19 UTC	7921	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 75 6e 64 65 66 69 6e 65 64 29 7b 66 75 6e 63 74 69 6f 6e 20 4f 77 6c 28 65 6c 65 6d 65 6e 74 2c 6f 70 74 69 6f 6e 73 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 4f 77 6c 2e 44 65 66 61 75 6c 74 73 2c 6f 70 74 69 6f 6e 73 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 24 28 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 5f 68 61 6e 64 6c 65 72 73 3d 7b 7d 3b 74 68 69 73 2e 5f 70 6c 75 67 69 6e 73 3d 7b 7d 3b 74 68 69 73 2e 5f 73 75 70 72 65 73 73 3d 7b 7d 3b 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 73 70 65 65 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f Data Ascii: ;(function($,window,document,undefined){function Owl(element,options){this.settings=null;this.options=$.extend({},Owl.Defaults,options);this.$element=$(element);this._handlers={};this._plugins={};this._supress={};this._current=null;this._speed=null;this._
2024-04-18 17:22:19 UTC	263	IN	Data Raw: 73 2e 69 74 65 6d 45 6c 65 6d 65 6e 74 2b 27 2f 3e 27 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 74 65 6d 43 6c 61 73 73 29 2e 61 70 70 65 6e 64 28 69 74 65 6d 29 7d 0a 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 70 72 65 70 61 72 65 64 27 2c 7b 63 6f 6e 74 65 6e 74 3a 65 76 65 6e 74 2e 64 61 74 61 7d 29 3b 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 64 61 74 61 3b 7d 3b 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 30 2c 6e 3d 74 68 69 73 2e 5f 70 69 70 65 2e 6c 65 6e 67 74 68 2c 66 69 6c 74 65 72 3d 24 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 70 5d 7d 2c 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 29 2c Data Ascii: s.itemElement+'/>').addClass(this.options.itemClass).append(item)}this.trigger('prepared',{content:event.data});return event.data;};Owl.prototype.update=function(){var i=0,n=this._pipe.length,filter=$.proxy(function(p){return this[p]},this._invalidated),
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 3b 77 68 69 6c 65 28 69 3c 6e 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 2e 61 6c 6c 7c 7c 24 2e 67 72 65 70 28 74 68 69 73 2e 5f 70 69 70 65 5b 69 5d 2e 66 69 6c 74 65 72 2c 66 69 6c 74 65 72 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 68 69 73 2e 5f 70 69 70 65 5b 69 5d 2e 72 75 6e 28 63 61 63 68 65 29 3b 7d 0a 69 2b 2b 3b 7d 0a 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 3d 7b 7d 3b 21 74 68 69 73 2e 69 73 28 27 76 61 6c 69 64 27 29 26 26 74 68 69 73 2e 65 6e 74 65 72 28 27 76 61 6c 69 64 27 29 3b 7d 3b 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 64 69 6d 65 6e 73 69 6f 6e 29 7b 64 69 6d 65 6e 73 69 6f 6e 3d 64 69 6d 65 6e 73 69 6f 6e 7c 7c 4f 77 6c 2e 57 69 64 74 68 2e 44 65 66 61 75 Data Ascii: ;while(i<n){if(this._invalidated.all\|\|$.grep(this._pipe[i].filter,filter).length>0){this._pipe[i].run(cache);}i++;}this._invalidated={};!this.is('valid')&&this.enter('valid');};Owl.prototype.width=function(dimension){dimension=dimension\|\|Owl.Width.Defau
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 72 6e 20 72 65 6c 61 74 69 76 65 3f 30 3a 74 68 69 73 2e 5f 63 6c 6f 6e 65 73 2e 6c 65 6e 67 74 68 2f 32 3b 7d 3b 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 70 6f 73 69 74 69 6f 6e 29 7b 69 66 28 70 6f 73 69 74 69 6f 6e 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 2e 73 6c 69 63 65 28 29 3b 7d 0a 70 6f 73 69 74 69 6f 6e 3d 74 68 69 73 2e 6e 6f 72 6d 61 6c 69 7a 65 28 70 6f 73 69 74 69 6f 6e 2c 74 72 75 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 5b 70 6f 73 69 74 69 6f 6e 5d 3b 7d 3b 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 72 67 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 70 6f 73 69 74 69 6f 6e 29 7b 69 66 28 70 6f 73 69 74 69 6f 6e 3d 3d Data Ascii: rn relative?0:this._clones.length/2;};Owl.prototype.items=function(position){if(position===undefined){return this._items.slice();}position=this.normalize(position,true);return this._items[position];};Owl.prototype.mergers=function(position){if(position==
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 6f 62 6a 65 63 74 2e 6e 61 6d 65 5d 2e 6f 77 6c 29 7b 76 61 72 20 5f 64 65 66 61 75 6c 74 3d 24 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6f 62 6a 65 63 74 2e 6e 61 6d 65 5d 2e 5f 64 65 66 61 75 6c 74 3b 24 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6f 62 6a 65 63 74 2e 6e 61 6d 65 5d 2e 5f 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 5f 64 65 66 61 75 6c 74 26 26 5f 64 65 66 61 75 6c 74 2e 61 70 70 6c 79 26 26 28 21 65 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 65 2e 6e 61 6d 65 73 70 61 63 65 2e 69 6e 64 65 78 4f 66 28 27 6f 77 6c 27 29 3d 3d 3d 2d 31 29 29 7b 72 65 74 75 72 6e 20 5f 64 65 66 61 75 6c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 73 70 61 63 65 Data Ascii: object.name].owl){var _default=$.event.special[object.name]._default;$.event.special[object.name]._default=function(e){if(_default&&_default.apply&&(!e.namespace\|\|e.namespace.indexOf('owl')===-1)){return _default.apply(this,arguments);}return e.namespace
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 68 28 24 65 6c 65 6d 65 6e 74 2c 24 28 65 2e 63 6f 6e 74 65 6e 74 29 29 3b 7d 7d 2c 74 68 69 73 29 7d 3b 74 68 69 73 2e 5f 63 6f 72 65 2e 6f 70 74 69 6f 6e 73 3d 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 56 69 64 65 6f 2e 44 65 66 61 75 6c 74 73 2c 74 68 69 73 2e 5f 63 6f 72 65 2e 6f 70 74 69 6f 6e 73 29 3b 74 68 69 73 2e 5f 63 6f 72 65 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 74 68 69 73 2e 5f 68 61 6e 64 6c 65 72 73 29 3b 74 68 69 73 2e 5f 63 6f 72 65 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 27 63 6c 69 63 6b 2e 6f 77 6c 2e 76 69 64 65 6f 27 2c 27 2e 6f 77 6c 2d 76 69 64 65 6f 2d 70 6c 61 79 2d 69 63 6f 6e 27 2c 24 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 6c 61 79 28 65 29 3b 7d 2c 74 68 69 73 29 29 3b 7d 3b 56 69 64 65 6f 2e 44 Data Ascii: h($element,$(e.content));}},this)};this._core.options=$.extend({},Video.Defaults,this._core.options);this._core.$element.on(this._handlers);this._core.$element.on('click.owl.video','.owl-video-play-icon',$.proxy(function(e){this.play(e);},this));};Video.D
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 61 75 6c 74 73 3d 7b 61 75 74 6f 70 6c 61 79 3a 66 61 6c 73 65 2c 61 75 74 6f 70 6c 61 79 54 69 6d 65 6f 75 74 3a 35 30 30 30 2c 61 75 74 6f 70 6c 61 79 48 6f 76 65 72 50 61 75 73 65 3a 66 61 6c 73 65 2c 61 75 74 6f 70 6c 61 79 53 70 65 65 64 3a 66 61 6c 73 65 7d 3b 41 75 74 6f 70 6c 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 69 6d 65 6f 75 74 2c 73 70 65 65 64 29 7b 74 68 69 73 2e 5f 70 61 75 73 65 64 3d 66 61 6c 73 65 3b 69 66 28 74 68 69 73 2e 5f 63 6f 72 65 2e 69 73 28 27 72 6f 74 61 74 69 6e 67 27 29 29 7b 72 65 74 75 72 6e 3b 7d 0a 74 68 69 73 2e 5f 63 6f 72 65 2e 65 6e 74 65 72 28 27 72 6f 74 61 74 69 6e 67 27 29 3b 74 68 69 73 2e 5f 73 65 74 41 75 74 6f 50 6c 61 79 49 6e 74 65 72 76 61 6c 28 29 3b 7d 3b 41 Data Ascii: aults={autoplay:false,autoplayTimeout:5000,autoplayHoverPause:false,autoplaySpeed:false};Autoplay.prototype.play=function(timeout,speed){this._paused=false;if(this._core.is('rotating')){return;}this._core.enter('rotating');this._setAutoPlayInterval();};A
2024-04-18 17:22:19 UTC	3191	IN	Data Raw: 6e 74 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 75 6e 64 65 66 69 6e 65 64 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 48 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 63 61 72 6f 75 73 65 6c 29 7b 74 68 69 73 2e 5f 63 6f 72 65 3d 63 61 72 6f 75 73 65 6c 3b 74 68 69 73 2e 5f 68 61 73 68 65 73 3d 7b 7d 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 63 6f 72 65 2e 24 65 6c 65 6d 65 6e 74 3b 74 68 69 73 2e 5f 68 61 6e 64 6c 65 72 73 3d 7b 27 69 6e 69 74 69 61 6c 69 7a 65 64 2e 6f 77 6c 2e 63 61 72 6f 75 73 65 6c 27 3a 24 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 6e 61 6d 65 73 70 61 63 65 26 26 74 68 69 73 2e 5f 63 6f 72 65 2e 73 65 74 74 69 6e 67 73 2e 73 Data Ascii: nt);;(function($,window,document,undefined){'use strict';var Hash=function(carousel){this._core=carousel;this._hashes={};this.$element=this._core.$element;this._handlers={'initialized.owl.carousel':$.proxy(function(e){if(e.namespace&&this._core.settings.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49765	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	729	OUT	GET /images/slider1.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"84352-1671801814000" Last-Modified: Fri, 23 Dec 2022 13:23:34 GMT Content-Type: image/jpeg Content-Length: 84352 Connection: close
2024-04-18 17:22:19 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 67 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:19 UTC	258	IN	Data Raw: 1d d2 c0 c3 71 e7 de fc a6 6b 86 7b 78 76 fe 63 a3 9b dc b2 32 d1 40 ac cf ca c4 4a e5 63 89 aa cc 77 a1 96 8a 00 a0 0a 00 a0 52 81 00 20 57 4b 59 99 e9 63 a9 96 df 2f 77 f3 59 d6 38 5f ae 51 45 1e fb 1e 54 66 b5 cb a4 b2 24 57 0b 7f 31 d0 d5 49 f5 e8 49 b3 0d b4 ad 73 64 d3 1a e9 c7 8e 23 57 15 24 b2 22 80 1c 92 18 9a e6 af 26 e8 8d 79 4f 4a db 64 35 92 a3 0f 33 48 a8 82 32 83 c8 0f 1e e3 26 69 cd f3 e1 e7 61 a7 74 8a 3a 2f 29 07 8f 71 f2 3d a4 ad 47 8c 8a f7 fa 3f cf 9f f4 84 fe be bd 02 a8 00 00 00 00 20 a0 0a 00 00 e7 7b ca 22 57 9e 39 9a 73 76 59 19 6d cd e6 69 87 97 70 bc 41 63 ad 95 e0 03 85 d5 e3 04 7a 2c ac 00 db 44 57 c3 61 a6 58 18 98 12 20 68 2a 01 89 e6 41 90 0b 22 8d a0 29 00 a0 00 00 06 06 00 a8 0d 00 40 38 80 00 00 00 00 00 00 00 00 04 e2 Data Ascii: qk{xvc2@JcwR WKYc/wY8_QETf$W1IIsd#W$"&yOJd53H2&iat:/)q=G? {"W9svYmipAcz,DWaX h*A")@8
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 80 a9 02 a0 2a 05 a8 54 6c 22 14 18 10 0d 2c 80 a8 0a 00 0c c7 30 8d a0 aa 05 02 b0 8c 81 50 1a 40 68 0c 4f 31 48 44 41 a4 54 50 28 15 01 a0 2a 02 a0 00 50 28 45 02 80 03 8e e6 f4 ad 46 2e 34 ab ce a4 ab 1c 56 e7 74 f2 82 27 a5 f2 aa fe f1 e5 04 3d 1e 57 ad bd fd 31 e8 c5 57 77 cf 2b 43 d1 8d 2f dc 1f fc 48 7a 3c ad 3d 43 f4 97 bc 7a 3c 9a 7d 43 f4 97 bc 7a 3c 94 df fe 8a f7 8f 47 93 56 f5 7f c2 3d 1e 4e ae ed 7f c0 3d 1e 4e be e7 8d 8f bc 7a 3c af d4 df ff 00 db fd e5 f4 9e 4f aa bb ff 00 b7 fb 58 d3 17 ea e7 ff 00 b7 fb 58 d3 0f ac 7f fb 7f b5 8d 30 fa df ff 00 cf f6 b1 a6 1f 5a bf f6 ff 00 6b 1a 61 f5 b1 fd 0f b5 8d 30 fa d8 7e 83 f7 8d 30 fa db 7f a2 fd e3 4c 3e ba d7 e8 bf 78 30 fa eb 5f a2 fd e3 4c 3e ba cf e9 4b de 34 c3 eb ac fe 94 bd e8 18 7d 75 Data Ascii: Tl",0P@hO1HDATP(P(EF.4Vt'=W1Ww+C/Hz<=Cz<}Cz<GV=N=Nz<OXX0Zka0~0L>x0_L>K4}u
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: f1 5d cb ee 31 5a 8d 34 b4 91 5d bd 2e 35 b9 37 da 07 d7 a6 06 90 20 94 01 40 14 01 40 2d 00 50 05 00 b4 0a 50 05 00 00 02 81 00 01 40 50 05 00 50 05 00 50 0a 00 05 00 a0 00 a0 00 00 02 a0 3c bb d7 f9 6c 94 7c ab 1c 48 35 76 e5 10 1e 39 c9 ca 54 03 b5 9b 60 7a d4 16 9a 01 d7 d2 e0 96 e2 5f 68 1e 5b d7 f7 4f d5 27 1d b3 d1 37 27 05 a7 97 1a 92 b5 fd 75 7d 7b 93 71 95 fb d2 a6 0d d5 c6 3e c3 2d 31 73 6f b5 82 7d 5b b2 73 e7 a9 b1 ad 63 84 56 d2 b4 8d e9 c6 99 34 c6 d4 c9 ff 00 56 ee e3 79 66 8e 17 dc ed be 2f ee 62 49 4b b1 c2 e6 fb 75 3a 56 79 72 c0 be 63 3e ea 25 15 15 39 f8 e7 2c 52 7c 10 59 3f e8 ee 4e 8d c7 c2 97 05 80 c2 d4 8d db ef 2a bf 79 72 26 d7 7b 57 a6 a9 d5 b7 58 bc a5 c4 cb 52 b7 6f 6d 19 fa 84 15 29 09 2d 6d 77 16 5f c6 6c fd 77 f5 5b 3a 1d Data Ascii: ]1Z4].57 @@-PP@PPP<l\|H5v9T`z_h[O'7'u}{q>-1so}[scV4Vyf/bIKu:Vyrc>%9,R\|Y?N*yr&{WXRom)-mw_lw[:
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 04 00 00 00 14 08 04 6c 0e 37 6e a8 84 78 ee 6f 12 79 93 57 1c 5e f8 6a e3 17 77 5a a2 b1 1a 63 cf 3b d5 26 8e 6e e0 1a 8d d0 33 3b 98 01 e7 94 aa 45 60 21 50 09 81 a0 a0 0a 81 1b 02 54 21 50 15 01 a8 0b a8 0d 29 94 69 5d 6b 26 07 d0 d9 ee 2a a8 d9 65 4a fa 36 ee 54 d2 3d 09 d5 10 00 f0 7d 74 4b 81 f5 b1 18 1f 5b 01 81 f5 90 18 2f d6 40 60 7d 5c 06 0f 35 f9 a9 cd c9 71 20 e2 c2 b4 bc ab fa 8a 8f 6c 77 11 51 49 e6 86 0b f5 30 18 69 f5 30 18 69 f5 30 18 69 f5 30 26 1a 7d 44 0b 86 af d4 40 98 69 f5 10 18 69 d7 80 c3 57 af 01 86 9d 78 0c 34 eb c3 98 c3 57 ad 0e 63 0d 3a d0 e6 30 d3 ad 0e 63 0d 3a b0 e6 30 d5 ea c3 98 c3 4e ac 39 8c 34 ea c3 98 c5 d5 ea 47 98 c3 4e a4 79 8c 34 ea 47 98 c3 57 5c 79 83 4d 71 e6 0d 35 c7 98 34 d7 10 69 ae 20 d3 5c 41 ab ae 23 0d Data Ascii: l7nxoyW^jwZc;&n3;E`!PT!P)i]k&*eJ6T=}tK[/@`}\5q lwQI0i0i0i0&}D@iiWx4Wc:0c:0N94GNy4GW\yMq54i \A#
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 5f a7 60 47 b7 01 f4 e0 3e 9c 09 f4 e0 3e 9c 07 d3 80 fa 74 05 fa 74 50 e8 00 e8 00 e8 80 e8 80 e8 80 e8 00 e8 01 3a 20 4e 80 19 e8 80 e8 a0 33 d1 44 56 6e 41 2c 82 25 88 d6 e2 03 ec d8 54 8a 25 58 f4 22 34 54 80 02 a5 10 08 01 81 02 23 03 95 c5 e1 65 47 c4 dd af cc 65 1c 12 03 54 02 a0 ad 37 81 ce b7 1e 4b af 13 2b 5c 8a 80 10 00 14 00 11 81 18 10 a8 00 20 00 00 00 00 00 20 50 01 40 00 02 00 00 3f 53 43 ab 8a d0 05 00 b4 02 a4 06 a8 41 e3 dc af cc 64 ad 47 06 83 4d a8 f8 63 fd 45 88 f6 c1 5e a7 95 d0 23 69 cd 79 93 06 34 a6 82 2e 00 15 00 69 01 a4 22 69 01 40 25 00 50 0b 40 14 01 40 14 02 d0 03 69 2a 81 f1 77 fb 97 3b 8e 31 7e 15 99 9e ab a7 31 e4 a9 86 86 e8 06 35 00 a8 19 6c 08 50 a8 0a 80 a8 16 a1 04 c0 d2 65 1a 88 1d 28 a8 07 7d a6 e2 56 2e 27 5f 03 Data Ascii: _`G>>ttP: N3DVnA,%T%X"4T#eGeT7K+\ P@?SCAdGMcE^#iy4.i"i@%P@@i*w;1~15lPe(}V.'_
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 93 42 91 ad be d2 73 7a a7 84 79 19 b5 b9 1e f8 c6 10 54 48 8a 93 71 71 75 40 78 77 11 4d 63 83 e6 21 5e 29 58 5c f1 e4 5d 65 56 de 39 37 5e c2 a3 ad bb 16 2b 8a ab 28 e8 ed 5a 58 2a 01 ca e5 88 29 51 63 da 04 76 52 c4 0e 52 b2 ff 00 0b 03 db e9 1b a8 ab dd 1b b9 3c ab cd 1a 66 be e4 2b 8a e0 b2 ee 66 47 cf f5 0b 8f 5e 9e 58 92 b7 27 e3 e3 df 92 d4 ea 07 9d dc 8a 61 1c e7 30 8e 6d 94 40 00 46 82 33 50 34 98 11 b0 a8 10 59 81 5b 02 00 00 01 66 07 45 26 15 f5 36 f6 fc 09 92 b5 1d 25 13 0d 39 4e 21 5e 5b b1 2c 66 bc d2 8b 34 ce 32 d1 51 62 88 ae d4 f0 91 a7 29 2c 4a 8e d6 15 33 33 5a 8b 7d aa 08 57 91 e6 6d cd 00 00 00 00 00 02 81 00 01 40 00 14 20 00 00 1f a4 68 75 4e 62 47 33 93 a2 cd 60 11 e6 51 f1 d4 a3 d2 b0 48 23 9d c9 d1 77 91 5e 4b f3 a2 a2 cd 81 e6 Data Ascii: BszyTHqqu@xwMc!^)X\]eV97^+(ZX*)QcvRR<f+fG^X'a0m@F3P4Y[fE&6%9N!^[,f42Qb),J33Z}Wm@ huNbG3`QH#w^K
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 02 49 50 0c aa 55 20 3d 50 d3 08 36 c0 f9 72 94 de e2 77 54 b3 78 14 7b b6 7a 69 ad 72 f1 22 2b 9d e7 a6 0d 71 9b a9 22 da f9 b7 d7 89 9d 23 97 4e 26 98 40 14 03 e9 7a 66 b9 45 c5 26 f4 e6 63 a8 df 35 ed a1 cd d1 00 c4 8a 8d d9 9d b8 d7 52 c7 99 65 4b 1c 77 77 db c2 23 49 1e 2d 2f 37 99 a1 1a 08 c4 ed e0 59 52 c7 9e 49 a6 69 80 03 48 09 50 01 00 20 50 22 80 00 01 05 7d 3f 4d ba db d1 cb 22 c4 ad ee 67 f9 86 6b 51 cb 59 15 97 20 aa 80 d2 44 15 20 ae b0 20 e8 15 ce 40 61 a0 25 00 c4 a0 98 47 09 db 2e a5 8e 32 81 a6 71 87 12 a2 34 00 20 00 01 40 0a 05 03 d5 e9 f1 52 dd 41 11 63 f5 36 6d a5 14 69 1d 74 83 1f 97 b9 99 c9 a7 19 14 72 90 1d ec ba 12 a9 76 78 08 3c ee 45 47 39 15 19 28 01 54 80 aa 44 1a d4 05 a8 50 0b 40 23 22 91 55 60 8f 4c 63 44 46 96 b5 08 c3 Data Ascii: IPU =P6rwTx{zir"+q"#N&@zfE&c5ReKww#I-/7YRIiHP P"}?M"gkQY D @a%G.2q4 @RAc6mitrvx<EG9(TDP@#"U`LcDF
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: a9 b4 5a 81 6a 11 50 1f a0 db db 51 b3 05 d8 8e 5d 5f d6 f9 9f 8d e9 44 d6 b1 25 04 59 4c 54 88 3c bb b9 d6 4a da c9 63 2f e4 6a 25 71 6e 9d e5 44 49 bc 64 50 6e bd 88 83 e7 7a 9e e5 5b b6 e8 fc 4f 08 a2 55 8f 84 db cd e6 c0 80 00 fa 1e 93 b6 d5 37 7e 4b 08 61 0e fe 7e c2 c2 be 9b cc 22 a4 51 d2 dc 00 f4 42 20 74 54 20 e7 72 ea 82 ed 03 c9 73 73 36 e8 98 1c 5d d9 f6 d4 a3 a5 a9 cd 62 c0 f4 5b bf cf 10 33 bb 9d 6d 3d 2c 95 63 e4 d9 b2 af 5c a3 58 2c d9 89 1a b7 1f 49 46 30 8d 12 cb 3e fe 06 98 65 fb e9 f6 b0 34 a1 ed fe 2c 09 2c 70 58 ff 00 16 06 9f 82 3d a0 72 56 aa f5 4b 32 8e 89 00 a0 1c 6f a2 0e 54 c0 0c c9 85 73 96 20 79 af da aa aa cc 0f 23 c1 90 00 00 59 a0 3e d6 cf c3 04 75 8c d6 af 5d a0 47 96 77 1d 42 b5 6a 75 03 b7 00 82 41 5a a0 12 80 00 55 20 Data Ascii: ZjPQ]_D%YLT<Jc/j%qnDIdPnz[OU7~Ka~"QB tT rss6]b[3m=,c\X,IF0>e4,,pX=rVK2oTs y#Y>u]GwBjuAZU
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: e5 1f 96 5f 63 23 4f 61 a6 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 01 40 80 50 00 00 00 00 00 00 00 00 10 00 00 80 50 08 00 0d da b5 3b b3 50 82 ac 9f b9 2e 6c 0f a9 6b 6f 6f 6f 0f 0a ac f8 cd e7 ec 33 6b 52 38 c2 4e 73 7d f8 81 d6 53 49 76 10 7c bf 50 dc 69 8b a3 c5 92 ab e3 37 57 5e 60 40 00 7d 3f 4c 8c 6c 6d ee 6e e7 c7 c3 02 fc 47 8e 3a b7 1b 8a cb 17 27 f6 12 2d 7d e8 c5 46 29 65 45 43 48 e7 76 5c 08 3c b3 61 5c e1 62 e5 d9 e9 86 7c 7b 3b c0 fa 1b 6d a2 b3 6e 95 f1 3c 64 c2 3a 38 af 88 a3 9c a0 de 52 4c 0e 33 8c d7 0a f7 10 79 ee 36 b3 54 0a e5 26 41 cd b0 15 03 dd e9 f1 d3 6a 77 79 e1 ee 2c 4a ce ce 2e ee e2 57 1e 49 e0 48 b5 f4 8a 88 c0 cb 60 66 b8 f7 10 71 dc 3a c5 f6 20 3c 36 5d 37 2c 45 af 6d d9 7f 06 11 21 1c 7d e0 77 4a 8a 85 19 97 Data Ascii: _c#Oa@@PP;P.lkooo3kR8Ns}SIv\|Pi7W^`@}?LlmnG:'-}F)eECHv\<a\b\|{;mn<d:8RL3y6T&Ajwy,J.WIH`fq: <6]7,Em!}wJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49763	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	729	OUT	GET /images/slider2.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"71972-1671800647000" Last-Modified: Fri, 23 Dec 2022 13:04:07 GMT Content-Type: image/jpeg Content-Length: 71972 Connection: close
2024-04-18 17:22:19 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 67 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:19 UTC	258	IN	Data Raw: 53 02 f9 40 47 85 81 97 85 80 f2 58 43 c9 60 5f 29 85 3c b6 03 63 02 6d 6b b0 0d 24 fb 80 6b dc 06 5c 81 35 02 39 01 af 70 41 2b 77 05 69 55 81 a5 56 05 da c0 aa ac 0d 2a b0 2a ab 20 d2 4c 0d 00 a9 45 02 30 37 47 00 74 59 74 03 2e d6 b5 92 5d 58 57 d5 e3 62 f2 f1 25 db da 42 b9 f2 ec ba 19 ad 47 86 d0 65 a7 3b f4 03 c5 99 75 2a 57 83 33 d4 d3 2f 3d 98 47 32 8d f6 01 8e d0 20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 2b 60 2a c0 eb 47 d8 06 a6 2c 15 e8 4e 6a 41 78 ff 00 cc 28 fa 3d 85 46 2c 07 36 04 60 42 8a 82 34 80 da 03 48 0d 20 34 80 d2 02 a0 34 80 d5 40 eb 5e 84 56 80 01 0a 83 02 01 96 06 58 19 60 65 81 92 88 04 00 00 00 1e 72 a2 48 09 01 20 24 04 80 90 12 02 40 48 09 02 c8 09 02 c8 09 02 c8 09 02 81 40 a0 00 a0 24 00 00 00 00 a0 02 a3 Data Ascii: S@GXC`_)<cmk$k\59pA+wiUV** LE07GtYt.]XWb%BGe;uW3/=G2 P+`G,NjAx(=F,6`B4H 44@^VX`erH $@H@$
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 92 04 90 12 80 68 02 50 09 01 20 34 00 03 40 12 02 40 a0 00 d2 22 a8 00 00 00 cb 41 11 22 a2 c0 54 80 86 d0 1b 46 88 d3 00 aa c2 b6 91 02 00 a1 40 00 00 a1 11 a9 40 15 60 0b 01 54 00 00 28 14 04 01 60 0b 00 20 04 01 60 04 00 02 80 80 10 02 00 40 08 01 00 20 04 00 80 10 02 00 40 08 01 00 48 40 c2 01 86 d4 03 6a 06 1b 50 30 da 81 86 d4 13 0d 88 18 9b 10 30 d8 81 86 c4 0c 36 22 18 6c 45 0d 88 18 6c 40 c3 62 06 1b 10 30 d8 81 86 c4 0c 4d 88 18 6c 40 c3 62 06 1b 10 30 d8 81 86 c4 0c 5d 88 18 6c 40 c5 d8 81 86 c4 0c 36 22 18 bb 10 30 d8 8a 61 b1 10 36 20 1b 10 30 d8 81 87 96 81 87 96 81 87 96 81 89 e5 54 18 be 5d 41 87 96 81 89 e5 20 61 e5 20 b8 79 48 26 1e 52 01 e5 20 a7 92 82 1e 4a 01 e5 20 61 e4 a0 27 92 80 79 35 06 1e 45 7b 81 87 91 5e e0 61 e4 57 b8 18 79 Data Ascii: hP 4@@"A"TF@@`T(` `@ @H@jP006"lEl@b0Ml@b0]l@6"0a6 0T]A a yH&R J a'y5E{^aWy
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 40 a8 11 40 a8 0a 80 a0 69 01 40 a8 0a 05 02 81 ba 75 03 d3 4e 84 56 c0 15 02 2a 15 10 04 80 0a 80 02 00 40 00 00 80 18 1e 60 a4 00 02 80 00 05 00 41 40 01 40 40 00 28 00 00 00 01 60 00 08 00 02 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 e3 cc ca e9 c6 b5 56 93 d7 de 58 8f 93 20 24 04 85 24 22 48 09 0a 29 6e 12 96 11 d6 bc 5e 55 fe 9c 57 7e e6 07 5a fa 57 3a dd 71 ed ff 00 93 5f 84 83 5d a9 e8 7c 87 f5 e4 a5 7d 92 ff 00 80 c3 5d a9 e8 58 ff 00 3e 5b 3f f8 a4 be fd c3 0d 77 a7 a3 f0 ab d6 b6 bf b6 cf f0 81 89 ae f4 e0 70 eb d3 0d 3d ad 27 f7 94 76 ad 2b 55 15 49 2e e5 a0 1a 80 10 05 01 00 58 00 00 04 01 60 04 10 34 02 4a 0a 6f 40 65 e4 44 d3 18 79 d2 1a ae 6f 91 dc 4d 19 79 6e c0 93 77 d5 c2 18 16 4e b1 32 e7 b1 75 2e 09 2a 25 34 94 f5 60 79 af cc Data Ascii: @@i@uNV@`A@@@(`VX $$"H)n^UW~ZW:q_]\|}]X>[?wp='v+UI.X`4Jo@eDyoMynwN2u.%4`y
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 2c 81 08 05 12 00 40 11 c9 01 01 a2 80 14 20 15 35 20 ba 94 69 04 50 05 00 00 50 00 50 28 17 40 0d 01 96 04 00 00 00 12 c1 1c 1f 52 8a 8a 28 00 3d 3c 5e 16 5c ee 7a 53 bc 2e 3e ef 1f 8d 8b 06 35 5a 28 ef 7d ac 9a 5a e7 cc be 3d 9b 5e ac cd ab cc 7c 4e 4a aa 7a 75 1c d5 b1 c0 db 0d 53 1d ae f4 5e f0 3b 2c 78 f1 a9 b6 b6 09 ae 57 e5 3b db 65 5c f8 20 b2 39 e5 e2 37 f3 5c e7 6b a4 72 ab d8 f4 30 d3 d7 87 2c 92 8f 45 6d 21 5a 48 22 c0 12 00 40 12 0a 00 46 80 c3 20 24 07 4a a0 3a 24 00 00 54 68 08 04 60 61 a0 31 60 39 b4 41 18 19 6c a1 4a 3b b8 45 93 52 d7 ab 1e 05 53 b7 3c b8 f5 d3 ac 41 b6 18 60 61 80 03 49 81 50 15 01 d6 8c 0e d4 60 7a 28 d3 d1 90 75 f2 31 b5 d0 9a d6 39 e5 e0 e0 c9 58 75 43 55 f2 39 9e 9f 7c 2e 6b ad 41 e5 e3 69 ae c2 a0 41 00 00 02 81 aa Data Ascii: ,@ 5 iPPP(@R(=<^\zS.>5Z(}Z=^\|NJzuS^;,xW;e\ 97\kr0,Em!ZH"@F $J:$Th`a1`9AlJ;ERS<A`aIP`z(u19XuCU9\|.kAiA
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 31 cf bb f4 e6 d2 55 74 ab 84 dc cf dc 6d cc cd 8d d3 8d af d4 dc d8 2c 72 e3 38 2c 2b 8f a9 e3 5f 2e 55 d2 ca 1f b5 11 1f 22 f5 d4 8d 38 db aa 87 ec 20 e9 65 6d ab 25 7f 99 4d 57 8a ed 45 1e 9b 5d 5b 12 b5 5e 96 52 8a 8f 1b b7 cc 65 5b ab f9 5a ee 7a 7b ca 33 f9 40 e7 76 41 cd be ac 09 8d 4d a4 0f 5f 1f 1e fc ca cf e9 c6 a7 da fb 0a 3a 66 7b 93 6b de 07 1c 36 8b ea 07 a9 ee 4d 5e ae 2c bb 40 d2 58 f3 ad 7e 4c 9d e9 68 fd a8 e7 78 95 9b cb 19 38 f9 68 a5 d6 6b fa 96 a8 e7 79 b1 9b 19 a4 49 23 2f 4d 19 d6 34 e8 db f6 16 d1 d3 0d 5b 7d 44 1e b5 09 1b 57 c0 f5 bc 71 cb 59 17 4c 95 52 fc 56 9f 74 12 b5 1f 38 8a fa 5e 9b 79 c5 6a 7e 97 f6 30 b1 ec 20 01 40 32 8c b2 02 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 02 20 10 00 00 00 00 00 00 05 40 68 a0 c0 cb 00 05 Data Ascii: 1Utm,r8,+_.U"8 em%MWE][^Re[Zz{3@vAM_:f{k6M^,@X~Lhx8hkyI#/M4[}DWqYLRVt8^yj~0 @2 @h
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 51 8f 9a ce 28 9b 7d c9 49 05 a7 1b 93 77 14 c5 67 df a3 fb 40 ea b8 19 16 b9 72 53 1a ee 6f 73 f8 56 40 d5 70 71 57 47 93 35 bb aa 95 57 ff 00 d9 91 5a bd a8 a9 e5 bc 58 b1 57 b6 75 ba 9f 1d 6c 07 3c 39 d6 3d f5 e3 62 dd 6c b5 74 b3 73 67 b6 dd 54 25 53 4c b7 8f d3 b9 79 1e b8 d6 25 e3 a3 f8 3d 40 f1 e4 a3 c7 92 d4 7d 6a da 7e e2 2a 55 b4 d3 5d 56 a8 83 eb a6 9a 56 5d 1a 92 34 00 02 c8 09 01 20 24 04 80 90 12 02 40 48 09 01 20 24 04 80 90 12 02 40 8d 81 35 01 2c 0b 20 24 04 80 90 12 04 6c 00 16 40 48 09 02 c8 43 70 16 40 49 43 70 17 70 16 40 48 12 40 a9 81 a4 c0 b2 04 76 40 49 02 c8 00 2a 70 07 45 aa 39 d7 48 91 04 68 90 84 84 69 30 aa c0 80 00 01 9b 32 0e 36 65 1c ac 54 66 cc 0c 49 51 50 1d 6a f4 2a 39 e4 7a 9b 8c d6 0a 80 10 80 06 58 1c f2 74 03 cc fa Data Ascii: Q(}Iwg@rSosV@pqWG5WZXWul<9=bltsgT%SLy%=@}j~U]VV]4 $@H $@5, $l@HCp@ICpp@H@v@IpE9Hhi026eTfIQPj*9zXt
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: a4 05 80 34 8a 33 64 07 1b a2 0b 46 06 ac b4 03 95 90 56 1a 80 2a 60 50 8c b0 ac b4 04 02 90 42 8a 01 38 64 1d 69 70 2d 99 46 aa f4 01 3a 81 ba b0 36 fa 01 2a e1 81 e9 c7 60 8e 8f a0 1c 6e 80 e3 74 15 d7 15 b4 80 3c de a1 5d 15 8c d5 8f 08 54 03 d6 71 74 00 00 00 00 04 00 80 28 00 00 00 00 00 00 01 40 0a 00 00 00 80 14 00 00 2c 14 00 00 00 04 61 19 0a 01 50 14 22 a0 29 45 80 20 11 81 ce c8 0c 05 02 23 60 40 34 90 14 08 d8 54 76 20 ce e0 33 25 43 d5 29 e6 70 eb 93 b6 8d 3f 73 d0 b1 9a f8 c0 00 fb 9e 76 4b fa 76 0c a9 c2 55 d9 6f 6d 74 fc 0e dc 7c b9 f7 1c f8 d5 cf 6b ce 2a da f6 5a bd aa 7e 25 ee 2f 0f a0 b8 7c ac 95 d7 16 c7 df 66 92 fe 27 29 5a b1 e3 e4 df 91 81 c5 b1 59 be cd b1 6f b9 b3 48 f1 bf ee 39 ac d5 30 5f bf a3 33 95 5e ce 27 07 d6 28 93 c7 86 Data Ascii: 43dFV`PB8dip-F:6`nt<]Tqt(@,aP")E #`@4Tv 3%C)p?svKvUomt\|k*Z~%/\|f')ZYoH90_3^'(
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 00 14 00 00 2c 81 64 0a 98 1a 4c 0b 20 24 0a 05 02 a2 0d 20 ad a0 34 05 02 00 01 20 69 01 a0 80 00 a1 40 20 40 00 00 01 54 08 00 60 46 45 2a e2 c8 a8 f5 e0 7a 35 ef 35 19 ae 8c a8 80 00 01 00 01 00 00 02 00 00 04 00 00 0a 00 08 e1 75 d1 01 8b 67 c6 bb 67 d8 4d 5c 72 b7 22 cf e9 51 ed d4 9a b8 e7 6b de df 53 6c 8b 8c c0 08 02 c0 18 75 02 40 1b 48 0b 00 20 09 00 20 04 01 52 08 b0 04 00 15 36 a0 86 d0 26 d0 a6 d0 24 20 1b 40 3a 84 4d a1 4d 80 4d a0 47 50 24 01 55 40 bb 00 6d 01 b0 22 6c 02 ec 02 ed 01 b4 06 d0 1b 40 6d 01 b4 06 d0 1b 40 6d 01 b4 06 d0 1b 40 6d 01 b4 06 d0 2a a9 45 84 06 5a 20 cb 40 66 02 90 c0 43 02 43 08 6a 02 40 92 03 70 0d c0 37 00 dc 15 db 8b 8f cd ca 93 fa 2b f3 5d f8 22 5a 49 a9 cd ce ef 91 f7 76 1c dd de 1c d6 f9 4d 44 b5 8c 79 dc 43 Data Ascii: ,dL $ 4 i@ @T`FEz55uggM\r"QkSlu@H R6&$ @:MMMGP$U@m"l@m@m@mEZ @fCCj@p7+]"ZIvMDyC
2024-04-18 17:22:19 UTC	6492	IN	Data Raw: 11 aa f5 0a f5 63 e8 11 d0 00 00 28 1c 33 5a 10 57 92 d6 d4 06 ed 00 f3 e6 c9 a1 07 8d b9 b0 1d 71 b8 2a 3d 34 6d 95 1e 8c 68 2b bd 50 1b 40 69 01 40 80 1b 20 92 04 6c a3 2d 81 96 c0 8c 08 40 82 8e 79 3a 10 70 b0 18 ab d4 0e 90 06 6e 07 2b 3d 18 1e 6b f5 22 b0 07 54 f4 02 34 06 18 19 61 5d f0 54 23 d5 b7 44 51 ab 28 41 0a 26 c2 bd 9c 75 01 1c 7d 41 7c e9 99 ad 47 ea 4c 28 00 a0 00 01 00 01 40 00 00 00 08 05 00 00 08 00 00 00 00 50 00 00 00 02 00 00 00 00 01 08 00 52 80 00 00 00 14 46 41 50 00 12 00 00 00 00 00 00 28 01 27 52 0a 80 14 47 d1 90 66 dd 09 5a 8f 36 45 a3 30 d3 69 7c a1 06 80 cb ab 80 30 e9 a0 54 75 e8 04 db ac 10 15 14 fd e5 13 cb 50 06 2d c7 a5 96 a9 3f 68 1e 6c de 93 c5 c9 ab a2 4d f6 ad 19 74 c7 9e de 93 9a 8f fe 9c d6 af 75 6d aa 2e a6 31 Data Ascii: c(3ZWq*=4mh+P@i@ l-@y:pn+=k"T4a]T#DQ(A&u}A\|GL(@PRFAP('RGfZ6E0i\|0TuP-?hlMtum.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49764	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	730	OUT	GET /images/logoicon.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	263	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"4818-1516709690000" Last-Modified: Tue, 23 Jan 2018 12:14:50 GMT Content-Type: image/png Content-Length: 4818 Connection: close
2024-04-18 17:22:19 UTC	4818	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 38 00 00 00 38 08 06 00 00 00 a8 86 3b 1e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR88;pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49766	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	729	OUT	GET /images/slider3.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"74871-1671800650000" Last-Modified: Fri, 23 Dec 2022 13:04:10 GMT Content-Type: image/jpeg Content-Length: 74871 Connection: close
2024-04-18 17:22:19 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 67 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:19 UTC	258	IN	Data Raw: 00 00 00 00 00 03 80 1f 3f bc 2a 3c a8 8d 23 0a 8c 0e dd be e1 2b dd 5d 82 34 00 00 00 00 00 01 40 80 40 20 10 00 00 28 00 28 00 a0 00 00 00 80 02 00 00 00 00 00 00 00 a8 00 0a 07 87 bc fa 85 47 00 ae 59 fd 26 6a c7 d1 fb 3f d3 b7 99 15 f4 d0 17 a6 5c 80 e9 02 a4 80 d0 09 02 48 09 00 10 02 14 08 00 00 00 82 8b d2 c8 a7 4b 1a 62 f4 a0 62 c2 00 45 50 00 00 01 00 00 00 00 0a 04 00 00 20 00 00 02 8b 20 40 2a 20 8c 0e 0e c9 6a dc 79 9b 61 40 cb bc 36 9a d1 71 02 3b ea a1 69 c4 a0 ef 78 71 0b f3 02 75 5d b8 9e 01 1a aa 69 db 97 06 15 a2 08 00 00 00 2a ad b9 0d 31 56 3b 13 57 1a f6 bc 46 af ca fb 75 26 98 74 a5 c0 6a e2 81 00 80 00 00 00 00 08 c0 01 1b 02 48 12 40 92 06 5b 2a 32 ee b9 81 50 14 8a cd b8 15 15 fa 5f 90 1f 9b cb f5 2f fd 4c cb 6c 01 50 45 2a 01 40 Data Ascii: ?<#+]4@@ ((GY&j?\HKbbEP @ jya@6q;ixqu]i1V;WFu&tjH@[2P_/LlPE*@
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 08 a0 00 14 00 a8 00 00 00 00 01 00 00 03 60 00 a0 00 a0 00 01 40 a0 0a 8a 05 00 05 08 01 50 14 0a 51 40 48 45 40 50 00 50 8a 50 02 81 50 15 04 70 ce 4a d4 73 7e 92 34 e2 45 00 f6 76 7e 93 51 8e 9e a2 b2 a1 49 02 80 02 a0 28 14 82 a0 00 00 48 09 2a 20 14 0b 00 58 22 ac 00 00 04 02 a0 34 00 00 44 02 80 0a 00 02 81 40 00 00 00 00 00 00 00 00 40 50 20 02 00 00 a0 02 a0 00 82 05 00 00 00 00 00 00 1c 00 f9 fd e1 51 e6 a9 1a 47 b8 56 5e c0 77 ed f7 09 5e da ec 11 a0 00 00 01 40 00 00 04 00 06 58 00 20 14 00 14 00 00 00 02 80 00 00 02 00 08 00 00 00 00 50 00 00 00 78 7b cf a8 54 70 0a e7 9f d2 4a b1 f4 3e cd f4 ed e6 65 5f 4d 01 64 0b 20 24 20 50 00 05 44 00 05 10 04 32 0b d2 c6 ae 2f 48 d3 15 24 05 22 80 40 00 00 01 40 00 00 04 00 00 00 14 00 10 00 40 a0 00 01 Data Ascii: `@PQ@HE@PPPPpJs~4Ev~QI(H* X"4D@@P QGV^w^@X Px{TpJ>e_Md $ PD2/H$"@@@
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 00 14 08 ef 45 bb 0b 89 5b d6 ce 10 31 a2 a3 c0 ef 79 7a 9d 7e 63 85 ef af fd 75 ed 6c fa ad 32 f4 33 d3 5f 9d fe bd 32 f9 18 75 73 79 98 6b e5 69 7b 59 b5 20 b1 b8 f3 0c 9d 2b 90 14 08 07 97 bb fa 8b fa 4e 9c 78 e3 fa 7a e0 69 cd f4 96 cb c8 e2 f5 39 77 5f 45 f9 a3 5c fa c7 e9 e3 c6 74 70 7a bb 4f a6 fc ce 7d bb 7e 7e 3b 3d 99 97 47 cd 3b 3c ae dd af d6 5e 4c cf 5e 37 f9 fa f6 1c dd dc 33 b4 af ab 8d 0d f2 c7 5e b9 3c b8 d7 13 58 c6 c7 b2 ae 69 57 cd 1c ab b4 50 04 11 94 63 5f 99 7e 00 3a 6d 00 1d 27 88 15 51 73 f8 81 a0 20 00 10 02 00 40 08 01 00 00 a0 00 80 00 01 00 00 00 00 00 00 20 00 24 81 1b 02 48 09 02 36 54 49 22 a8 11 ec 04 a9 51 f1 7e ef fe 5f ff 00 52 34 f9 e4 55 5b 95 1a 08 00 00 00 0d 22 8a 00 00 14 22 a0 00 00 00 00 14 00 04 01 ef 31 a6 2f Data Ascii: E[1yz~cul23_2usyki{Y +Nxzi9w_E\tpzO}~~;=G;<^L^73^<XiWPc_~:m'Qs @ $H6TI"Q~_R4U[""1/
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 1d 55 bd 29 8b 59 e5 29 99 35 d3 5e 1b 11 5d 2c 9d aa 54 4c 32 9c 15 2b d1 42 b3 5a dc a8 e9 50 8c da 6a db 41 1e 75 97 e7 6b 89 a9 53 ae 5a eb 65 73 3a d8 1f 3f ee 5d cf f7 6b 8e ae 1a d2 cf 86 bf ec 67 a7 4e 1e 47 5a d5 db 24 bb 42 4e f7 7c f9 2f 89 96 9c 3a 7a dd 6d 6b 6e b5 7c 74 03 a2 d1 aa 57 e6 99 51 e6 15 d3 be ad 52 c4 9b f9 ba 26 c9 7e 44 87 4f 35 69 d5 65 45 a3 7a eb c0 a8 8e ef 26 4e ad b4 84 bc 80 cd 17 cd e3 ba 08 ed 46 d6 04 9d a1 64 95 f9 f1 28 e1 65 6a b8 7a 34 f5 f3 03 a5 93 75 eb da 77 44 56 12 6e b3 c8 a8 d5 2f 68 80 23 4e 58 1d 29 8d b2 6a c8 3c 2e 76 1a b8 d2 a5 ab aa 7f 02 6a e3 52 e6 38 91 5a ac 81 a4 e1 34 07 6a ea 8c b4 eb 54 e5 05 7a f0 a8 83 51 9a f4 d5 b5 a7 03 4e 75 d5 34 d1 51 e7 cd 48 7d 5c 1e 8c bc b3 d4 73 36 e6 a0 48 03 Data Ascii: U)Y)5^],TL2+BZPjAukSZes:?]kgNGZ$BN\|/:zmkn\|tWQR&~DO5ieEz&NFd(ejz4uwDVn/h#NX)j<.vjR8Z4jTzQNu4QH}\s6H
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 47 9b 3f ad 19 ad c7 e8 fb 27 ff 00 ad 4f 22 0e f2 00 0a 00 20 05 0a 20 28 00 20 00 00 50 00 00 00 01 0c 0b 0c 04 00 80 10 05 84 14 84 40 2a 23 e0 01 01 48 00 00 00 00 00 01 40 01 00 00 00 00 00 00 03 36 f2 92 8b 5d b6 80 1c 40 20 04 02 8c 5a 93 6e ae 2b 66 04 54 69 42 85 e2 01 52 16 ff 00 80 17 a1 6b e2 a3 f0 03 51 cf 58 e2 03 a5 4c f1 02 e8 03 42 04 a2 84 80 d7 90 0d 79 01 35 01 a9 00 04 00 80 10 80 42 02 00 02 00 02 14 00 80 18 19 7b 81 e3 fb af f8 8f e0 07 c0 7b 85 42 0d ad 8d 20 00 80 00 a3 68 22 80 00 05 28 a0 00 00 00 00 00 00 04 1e d3 4c a8 14 a0 00 80 51 40 a0 50 29 00 0a 50 02 a4 41 60 0f 56 25 18 c0 af 72 a2 59 a8 03 8b 68 a8 c3 dc 08 c0 cd 80 cb 40 65 81 a4 06 a0 a2 3c 55 64 b1 65 b1 ce dd bb dd 1c ef 0e dc fe bf fa b8 d3 4e 19 ce c7 69 75 ec Data Ascii: G?'O" ( P@*#H@6]@ Zn+fTiBRkQXLBy5B{{B h"(LQ@P)PA`V%rYh@e<UdeNiu
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: db d2 c0 f6 76 da a4 19 7b ab b1 05 00 00 0a 00 00 50 22 80 02 05 40 88 00 0a 80 a1 54 20 04 0a 00 08 80 02 a0 41 85 40 01 10 08 c0 80 40 00 0a 21 00 0a 07 8b bb f5 94 70 0a a1 1c bb 8f 49 2b 51 f5 7e cb fe 3b f3 33 56 3e 92 22 a8 0b 59 56 b2 f6 2c 89 6e 15 b2 b5 53 5c 49 49 75 a0 a9 28 0b 28 07 52 00 9a 60 50 23 70 01 39 02 80 03 cf 9e d3 92 39 68 74 e7 c7 1e ef f5 cc ac ba 61 a7 5b d7 65 b9 8e 9d bf 3e bf 98 f4 ff 00 03 2d 00 79 7b de d1 65 ab c9 45 fd da ef ff 00 72 3a 71 d6 39 7e 9c 6f f5 f3 0e cf 3a 81 f5 7b 2c 9d 7d b5 1b de bf 2b f8 1c 3b 99 5e af ce ec 77 30 da 01 1e c5 41 01 48 00 00 00 00 00 00 00 00 11 45 20 01 00 00 00 00 00 06 03 88 00 00 66 db 96 15 56 c0 52 00 19 c9 5a da 8e b6 52 9e e8 b0 a9 8a 94 a2 6a 95 85 e0 2d 49 1a 23 40 18 c9 9b 16 Data Ascii: v{P"@T A@@!pI+Q~;3V>"YV,nS\IIu((R`P#p99hta[e>-y{eEr:q9~o:{,}+;^w0AHE fVRZRj-I#@
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 61 b5 00 01 ec 04 5b 22 a2 91 40 33 6d 8b 12 b2 54 00 00 00 00 08 00 08 00 08 04 00 05 02 01 40 a0 00 00 02 30 23 03 2c 21 4d c5 58 d1 15 18 19 be c2 07 f2 bf 20 8f cc df d7 6f 36 1a 60 0d d7 61 12 a9 40 00 04 06 d6 c1 02 80 14 0a 80 a0 00 00 08 05 00 80 00 01 ea ca e2 a6 99 63 07 d4 10 af 45 54 d8 d3 2e c0 4b 34 07 36 c8 30 d8 55 ae c1 16 9b 81 d1 3d 40 99 75 69 01 8c af 44 81 1d 7b 74 07 5c b7 85 00 73 4f 40 2a 60 3a 80 d2 b0 1c f2 29 03 97 4e a1 5e 9c 08 22 f7 39 7a 28 07 ca c9 77 6b 11 b9 1b c1 ea 4c 44 af 4d de c5 65 10 00 37 4a 81 d1 54 0a 02 40 c5 f2 40 1c 93 6d 85 7b 30 a8 a8 16 ec 0e 4d 81 ce ec 23 28 0e d8 d0 1e 8a 80 60 1e a8 0c 01 16 e0 74 4f 40 33 dc 62 57 c6 f9 88 8f 83 9f 13 c7 91 ae 1c 0c 75 31 d6 5d 73 23 48 01 90 40 0d 00 4f 50 35 65 2a Data Ascii: a["@3mT@0#,!MX o6`a@cET.K460U=@uiD{t\sO@`:)N^"9z(wkLDMe7JT@@m{0M#(`tO@3bWu1]s#H@OP5e
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 71 03 36 dc 8a 90 04 0a a1 1d 31 bd 42 56 b3 6c 5a 47 04 45 69 6c 00 0d 30 33 b0 14 0d 55 c3 2a 3b 2d 54 04 79 3b 8c 50 e5 12 b5 2b cd d4 d1 1a 55 69 20 8f 47 28 0e f4 bc d7 c4 a9 63 68 a8 d2 08 dd 77 28 ea 98 46 80 48 16 40 a8 0d 20 28 15 05 2c e1 01 c6 cc 23 58 ea 07 58 80 ad d1 f0 08 91 f3 04 78 3e ee f6 44 eb c6 f8 f5 f3 11 87 40 08 40 02 01 51 46 82 29 46 6f b1 2a c7 33 22 85 02 00 49 0a a9 04 6d 23 42 c8 44 00 c2 84 09 28 a9 84 74 ad 8a 33 89 ea 21 4c 8c 52 39 19 56 e8 58 95 d1 bd 1c 6e 69 1e ee d7 0f 46 34 b8 bd 5b 38 75 75 e8 e6 63 d1 8e bf 32 9e 26 5a 75 ee bb da f6 f4 e8 c7 ae 4b 69 5f 0e 6d 9a d6 73 5e 7c cb de ad 6b 9d bc 9d 3a ad 63 52 4e a9 79 95 c7 27 da 13 a2 c9 87 22 8e 15 bf fb 9d 27 5a e5 d7 38 f0 e4 c7 97 1b 5d 4b 49 84 d6 a8 d6 a6 3d Data Ascii: q61BVlZGEil03U;-Ty;P+Ui G(chw(FH@ (,#XXx>D@@QF)Fo3"Im#BD(t3!LR9VXniF4[8uuc2&ZuKi_ms^\|k:cRNy'"'Z8]KI=
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: 10 00 80 00 00 02 94 00 00 00 40 02 00 00 15 00 f5 df 12 83 78 c6 b8 d5 43 68 8d 1e dc ea 30 d5 f6 f4 18 69 8d 43 68 15 bc 7b b6 58 95 c7 23 f9 99 9a b1 82 2a 94 77 c5 a5 59 63 34 b0 19 61 50 0d 20 3a 54 ac b6 54 61 91 59 64 56 40 a0 69 00 b1 50 48 2b 69 04 68 a8 a0 49 40 3a 90 07 60 33 20 58 02 11 5c f2 05 8e 16 b4 19 56 7a c1 8d 56 ca 50 1e ba bf 94 d3 2d 54 23 a2 2a 2c 80 90 34 80 da 03 a2 0a d4 c1 07 3b 39 2a 35 8a 92 c2 bb 5b 45 04 47 97 2e e5 1a c2 06 de ac 0e f8 b4 a9 15 a8 96 05 d8 83 cd 65 39 0d 23 d0 92 e8 86 45 78 72 51 e3 c9 2b 63 4c ba 75 55 a8 b2 90 1f b6 c5 6d 51 9b cc 6e 77 58 b7 67 45 c0 e7 78 74 9f a3 1f b6 c7 3c 4c 58 e9 3a 47 da 51 e8 9c 32 63 5a e5 97 b3 c9 4d 56 a8 98 ba f3 b9 5a 01 65 80 00 02 00 a0 26 ab 76 06 5f 73 8a bc 67 c8 bf Data Ascii: @xCh0iCh{X#wYc4aP :TTaYdV@iPH+ihI@:`3 X\VzVP-T#,4;9*5[EG.e9#ExrQ+cLuUmQnwXgExt<LX:GQ2cZMVZe&v_sg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49767	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	496	OUT	GET /images/hrci-thr-new.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"53790-1677826338000" Last-Modified: Fri, 03 Mar 2023 06:52:18 GMT Content-Type: image/png Content-Length: 53790 Connection: close
2024-04-18 17:22:19 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 42 00 00 00 8c 08 06 00 00 00 09 38 a0 ec 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 d1 a4 49 44 41 54 78 da ec 9d 77 b8 1d 45 f9 c7 3f 33 b3 e5 f4 db 4b 6e 7a 2f 84 de 7b 6f d2 41 44 50 41 14 a5 59 50 40 8a 54 01 29 22 82 28 5d b0 82 88 d2 7b 0f 10 08 90 90 84 f4 de 73 7b 3d fd ec ee cc ef 8f 3d b9 24 24 28 02 3f 45 cd fb 3c fb 10 ee d9 3a bb f3 9d b7 7e 5f 61 8c 61 b3 6c 96 cd b2 59 fe 97 c5 da d4 1f 8b 85 fc 27 3e a1 94 12 db 71 d1 40 66 c9 6c ec da 46 9c 8a 2a 72 3d 6d b8 91 0a 44 24 06 f9 1c 5e a6 9d 48 dd 50 da 26 3d 4f 7c e4 18 a2 83 86 Data Ascii: PNGIHDRB8pHYs cHRMz%u0`:o_FIDATxwE?3Knz/{oADPAYP@T)"(]{s{==$$(?E<:~_aalY'>q@flF*r=mD$^HP&=O\|
2024-04-18 17:22:19 UTC	257	IN	Data Raw: 77 da d1 74 3e f8 02 7e 7b 1f ca 8d 62 5c 2b 04 43 63 90 5a 60 12 2e 81 25 31 2d 7d 14 57 b5 43 b1 84 8a c6 21 8f db fb da 5b bb c7 77 1e 3b 4d 2a b5 c2 14 bc d0 b4 fe 04 5b 72 c4 98 8f f3 39 5c 04 1f a1 ee 6c 96 cd f2 f9 91 e2 26 35 c2 75 cc 17 ff f4 a6 14 b9 96 e5 a3 17 9c 7e ee 1d 1d f7 bf 31 d0 6e ac 44 2b 4d c5 d5 c7 90 d8 66 18 dd 37 3d 85 ee cc 61 a2 0a 59 d2 68 25 d0 d2 20 3c a0 2f 43 e3 79 c7 32 f6 a5 df d1 78 d8 17 e8 7d ef 5d 7a 26 cd 40 35 56 53 7a 75 15 8b ce ba 84 c6 af 1e 4f f5 97 f7 64 c1 f7 6f c0 aa aa 62 d0 39 27 60 72 19 84 01 a1 24 0a 07 cb 72 08 22 02 81 c4 04 01 5a 68 8c 25 f0 94 41 18 89 d4 20 8c 07 f9 1c 2a 1e 25 72 f4 f6 f8 7e 11 7b eb 46 aa 7f 74 28 64 fb 88 6c 3f 8c f8 be a3 09 b2 79 ec dd 46 a2 46 55 e1 95 02 e2 07 8f 47 34 24 Data Ascii: wt>~{b\+CcZ`.%1-}WC![w;M[r9\l&5u~1nD+Mf7=aYh% </Cy2x}]z&@5VSzuOdob9'`r$r"Zh%A %r~{Ft(dl?yFFUG4$
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 16 35 57 1e 83 a8 71 88 0f af 66 e0 ed 67 e0 29 0f 86 56 11 19 d9 00 d9 12 ba bb 88 5f 08 79 0a 8d 50 18 15 80 d4 68 a1 71 a4 0b 55 31 74 10 90 bd fb 35 82 82 87 49 ba 88 5c 1e 55 9b 22 b9 e5 b6 2c bd e8 46 f4 82 2c 41 b6 97 8e 97 5f a1 ea c4 c3 70 22 29 9a af ff 1b ad d7 dd 4b 64 ec 40 9a 7e fe 2d 02 c7 40 4f 16 89 21 70 25 d8 02 cb 80 cc f8 a4 1f 9b 8a 53 5f 41 e3 1d a7 62 22 1e 26 66 a3 d7 e4 07 2e 39 f9 ca 3b f2 4b 96 8d 96 11 1b 2b 91 40 7d 82 6d b3 6c 96 ff fa 60 c9 27 36 87 75 be 66 de 05 97 fe ad ef ae d7 f6 76 07 d4 a1 33 39 24 36 ee fe 23 28 2d e9 45 af e9 45 59 02 63 85 04 04 28 30 1e f8 e9 1c ee 98 0a 46 bf 78 3b 6b 6f fd 13 d9 85 0b d9 ea ae 3b 58 7c d5 15 f4 dc f2 12 22 51 89 df dd c6 d0 df fe 88 ca 7d 77 65 de 41 df 42 d6 57 63 6c 9b 60 c6 Data Ascii: 5Wqfg)V_yPhqU1t5I\U",F,A_p")Kd@~-@O!p%S_Ab"&f.9;K+@}ml`'6ufv39$6#(-EEYc(0Fx;ko;X\|"Q}weABWcl`
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: c1 c7 de 76 10 c5 95 1d f8 85 12 76 c4 09 fd 83 96 0e cb c4 f2 3e d6 a0 2a 84 ef d3 f1 d4 64 9c 58 0a 2a 2c 4c 41 53 b4 b3 8c ba e6 47 28 aa 99 73 c8 29 44 9a 86 21 92 71 74 31 cc 67 b2 02 01 d2 60 ef 3d 86 e2 bc b5 e4 ff 30 15 bf 36 8a ee c8 10 d9 b2 86 b1 b7 5c 46 ac 6a 08 45 2f c0 96 72 93 a6 93 41 23 85 28 d7 9b ae cb 0c 94 9b f8 60 fa 5f 4f ff af da 7c e2 36 1e 9f 8d a3 47 1b 9c 68 92 91 17 9d cb bc 65 cd f4 fd 76 3a f6 98 5a b4 f6 f0 9d 80 52 d4 10 64 3c 1c db c1 ac a3 34 13 0a ab a1 92 40 68 64 77 86 81 77 5f 86 ac ac 65 d6 89 a7 92 7d 76 3e 32 56 85 55 a9 f0 d2 69 4c 63 04 95 b3 f0 5d 11 26 81 07 1a bb 24 30 f9 22 41 cb 1a 12 db 0c a3 b4 bc 15 11 b3 f1 e6 77 7c 29 5a 57 fb 2b 77 e0 80 e5 c6 0b fe 85 0b 82 c1 0b 34 56 20 f8 67 3d 1c 7e 60 3e e2 ef Data Ascii: vv>dX,LASG(s)D!qt1g`=06\FjE/rA#(`_O\|6Ghev:ZRd<4@hdww_e}v>2VUiLc]&$0"Aw\|)ZW+w4V g=~`>
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 7f 7b 84 62 b1 c0 2b af be ca c9 5f fb ea ff 93 53 c4 10 fd 90 1f f0 ef de a7 ef 93 4a a5 18 37 6e 1c 93 df 98 4c d0 17 f0 db fb 7e c7 0f cf 3d 67 a3 7d ef b8 f3 2e ba ba bb f8 ea 49 27 31 68 d0 20 66 4c 9f 41 73 6b 0b 95 15 95 f8 be cf 5d 77 df 43 50 8e 6a 2b a5 a8 aa aa c2 75 5d 9a 5b 9b 79 e7 dd a9 1b 45 86 ff 59 99 30 7e 3c 4d 4d 4d 34 37 37 33 67 ce 1c 9e 7c f2 29 8e 2c 6b a1 eb cb 7d bf fd 3d e9 74 1a df f7 d9 71 fb ed 51 4a f5 47 f3 3f 2c 47 1f 7d 24 ef 4d 7f 8f e9 d3 67 90 4a 55 e0 fb fe 47 62 cb a6 81 30 5b 68 30 80 6a 48 d0 f5 bb d7 c0 b1 50 49 17 59 f2 c0 93 e1 32 6d 34 c2 0f 70 e3 71 b4 8c 23 3c 10 9e 21 fb da 4a d2 2f 2f a1 fb e6 c7 91 89 04 aa 3a 8e ca 05 61 97 bb 74 00 83 a2 34 5c ff 4d 3a af 7d 91 60 4d 1b 04 92 e8 e8 31 e5 3e 23 1a 21 04 Data Ascii: {b+_SJ7nL~=g}.I'1h fLAsk]wCPj+u][yEY0~<MMM4773g\|),k}=tqQJG?,G}$MgJUGb0[h0jHPIY2m4pq#<!J//:at4\M:}`M1>#!
2024-04-18 17:22:19 UTC	8176	IN	Data Raw: ee 26 12 53 d6 da 36 73 ac 82 cd d8 c9 03 19 3e b6 9a 97 9e d8 88 a1 1b de d4 81 a2 90 cf 15 18 74 5c 8c 6f fe fa 1a ac a2 45 ac 22 cc 4f fe e7 39 9c a2 cd 45 d7 4c c5 08 e8 b8 8e eb ed 88 4f 62 2a 85 20 56 19 e0 b1 3f ad 24 9b c9 13 0e 87 d1 5c 8b ae 8e 1e 52 89 02 e1 48 00 84 8d e0 18 d3 d3 61 33 63 a9 20 04 a4 52 79 d6 2f 6f c6 08 ea e4 32 79 2e ff d0 74 92 f1 34 cf fc 6d 2b 46 35 08 57 29 ad 75 85 62 9e a1 63 ea 09 86 05 8b 9e db ce ac f3 c7 71 d9 b5 d3 78 f6 81 75 7c f0 73 b3 d0 82 0a 8f ff 69 35 a1 50 c8 03 54 0b 97 6c b2 c8 c9 e7 8c 22 5a 19 e2 f9 47 36 a0 69 50 74 0a 6b 37 ac da fd b6 1d cb 1b 75 48 97 2c 59 4a 63 63 63 e9 01 ea 17 01 1f 31 72 e4 61 fa 48 f2 0d b7 39 7f fe 0b 6c dd ba 95 ca ca 4a a4 94 d8 b6 4d 45 45 45 a9 3e d8 b8 7b b7 ef 68 fc Data Ascii: &S6s>t\oE"O9ELOb* V?$\RHa3c Ry/o2y.t4m+F5W)ubcqxu\|si5PTl"ZG6iPtk7uH,YJccc1raH9lJMEEE>{h
2024-04-18 17:22:19 UTC	8192	IN	Data Raw: 5c 78 dd 64 b6 ac 69 66 ed e2 26 c2 91 30 8a 22 90 c2 83 06 79 da ee 2e 02 15 c7 01 33 6a 30 eb 82 e3 99 75 c1 f1 44 a2 01 3a da e2 ac 5f d9 c2 05 57 4f 63 e9 0b 3b 88 77 e6 08 04 05 d2 55 fc c1 6a 40 d8 14 0b 0e 23 c6 55 93 cf 17 b0 32 0e c9 44 86 41 a3 2b ee 1e 33 79 c8 46 c7 72 df b6 b9 e2 63 76 cc de c9 76 c8 1a e1 d6 8d 87 17 29 53 55 41 26 65 35 fc f0 4b 4f 2d 48 f6 64 8e 0b 04 15 8a 79 89 50 1d 54 c5 40 51 3c 71 1d d7 15 28 ba 24 d1 5b 60 d2 49 83 f8 c8 97 ce e4 91 3f 2f a7 a6 ae 82 0f 7e 66 16 bf f8 9f a7 79 ec 2f ab 38 f3 92 71 f4 76 24 68 de 99 c4 08 a8 fb 05 70 b2 44 42 20 5d 49 2e 6d d3 30 3c c6 45 d7 4d e5 af bf 5a 44 21 6d 13 30 35 d2 e9 02 c9 64 96 0f 7c f6 74 6e f8 d4 e9 04 82 06 ff 2e 02 fd 37 e1 06 4b fb b7 e0 99 8d fc ef ad 8f 62 17 15 Data Ascii: \xdif&0"y.3j0uD:_WOc;wUj@#U2DA+3yFrcvv)SUA&e5KO-HdyPT@Q<q($[`I?/~fy/8qv$hpDB ]I.m0<EMZD!m05d\|tn.7Kb
2024-04-18 17:22:19 UTC	4678	IN	Data Raw: 44 da ae 64 f3 de 04 ab 76 f6 02 a2 94 e6 d5 57 98 0c ad 09 51 5f 69 32 65 58 05 c7 35 44 89 04 35 ea 2b 82 ff b2 07 f9 1f b1 de 54 81 de b4 45 77 22 cf 9a dd 71 76 b5 67 e8 ec cb b3 ab 23 4d a6 e0 50 b0 5c 8a b6 83 ae 7a a9 6d 38 a0 11 0d ee 17 5c ef a3 df a4 9f d5 dc 76 25 b9 a2 43 36 6f 7b cd c5 90 4e d4 d4 29 0f eb 8c 6e 88 32 76 50 19 23 ea c3 0c ad 09 53 19 0d 50 1e fe f7 de a4 ff 52 64 aa ef 0c 17 cc 9c 33 f2 b2 d7 e6 6d f9 4d 38 18 3a 2b 12 35 58 f5 e2 1e 16 cf db c5 90 91 55 0c 19 55 c9 e6 55 ad 58 96 8d aa 0a ef e6 04 84 e2 69 15 bf 1e 49 a9 20 51 34 15 cd 76 f8 e9 d7 e7 72 f6 a5 c7 d3 be 37 c5 a6 e5 6d 44 c2 41 af ee e0 7a 2b 7f b1 e8 d0 be 27 ce a5 ef 9f c6 f9 ef 99 42 e3 96 4e 5e 7e 7a 13 b3 2f 9d 48 6d 43 19 4f dc bb 82 e6 2d 71 a2 41 93 85 Data Ascii: DdvWQ_i2eX5D5+TEw"qvg#MP\zm8\v%C6o{N)n2vP#SPRd3mM8:+5XUUUXiI Q4vr7mDAz+'BN^~z/HmCO-qA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49770	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	755	OUT	GET /images/speakers/61834/Ben%20Currie_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:19 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:24 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"21478-1704286898000" Last-Modified: Wed, 03 Jan 2024 13:01:38 GMT Content-Type: image/jpeg Content-Length: 21478 Connection: close
2024-04-18 17:22:19 UTC	7926	IN	Data Raw: ff d8 ff e1 0d 8d 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0f 01 00 00 03 00 00 00 01 01 cc 00 00 01 01 00 03 00 00 00 01 02 0b 00 00 01 02 00 03 00 00 00 03 00 00 00 c2 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 c8 01 1b 00 05 00 00 00 01 00 00 00 d0 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 d8 01 32 00 02 00 00 00 14 00 00 00 f6 01 3b 00 02 00 00 00 0e 00 00 01 0a 9c 9d 00 01 00 00 00 1c 00 00 01 18 ea 1c 00 07 00 00 01 0c 00 00 01 34 87 69 00 04 00 00 00 01 00 00 02 40 00 00 03 e8 00 08 00 08 00 08 00 15 f9 00 00 00 27 10 00 15 f9 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 Data Ascii: ExifMM*(12;4i@''Adobe Photoshop CS6 (Window
2024-04-18 17:22:19 UTC	258	IN	Data Raw: 94 15 84 37 ba 1e 78 6e 77 a2 e2 59 5e 4b 0b 2c 68 13 0f 64 f2 b3 2e b4 5d 78 0d 33 55 03 63 0f 8c 7d 27 ff 00 69 46 d6 ec cb 6b 9a 48 90 5e 08 d3 56 88 8f ed 6e 49 8d 0d 6c 0e dc a6 1d ca 46 c1 9b 54 81 43 9e c1 3b 67 c1 25 35 73 0f eb b4 9f 16 c7 ce 55 d6 fb 80 ec f1 f8 aa 39 67 70 73 db ae c2 3e e1 ca b3 8f 6f a8 c1 b4 fb 87 2d 9d 50 89 d4 f9 a6 5d 1e 93 ea 9e 66 ce a5 e9 3b fe d4 30 d6 7f ac 3d f5 ca ec f7 7e 45 e6 f8 19 36 63 e6 d1 7c 6d 7d 6f 69 0e ec 75 82 d7 7f 59 ab d2 3d be 07 9f c1 2e 1f 5f d1 57 e9 fa bf ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 Data Ascii: 7xnwY^K,hd.]x3Uc}'iFkH^VnIlFTC;g%5sU9gps>o-P]f;0=~E6c\|m}oiuY=._W8BIM!UAdobe PhotoshopAdobe Photo
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0d f6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 Data Ascii: op CS68BIMhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="h
2024-04-18 17:22:20 UTC	5102	IN	Data Raw: c4 02 78 7d f9 53 8c 62 eb 6e 95 b7 9c 1b 31 e0 a7 2c e8 96 60 80 f2 b8 5c 73 ad 9e d4 2a 99 35 9e 8c 04 8e e5 f1 35 19 21 2e a7 f0 a4 42 84 d4 8e 25 34 b8 0e ea e0 6a 32 4a bb 48 5f 0a c2 9a 01 ba 5b c6 9b 29 04 bd 9e 93 cf 31 5e a6 0e 14 ef 4e 55 b4 0e 77 ac 0d 1f f6 dc 03 cd 2a 68 45 db 04 4d 07 c5 53 c5 0f 45 ac 02 27 df f2 a6 b7 51 37 4a 95 ee 03 e7 16 ee 34 84 a8 f3 ef a9 23 73 95 d1 b8 0e e4 b7 64 2e 4b e8 1f 01 5b a8 c0 bd 9d ce d6 c3 85 10 70 23 3a 63 5e 06 95 4e ec fc 2b 79 b7 79 26 26 81 20 39 16 75 e2 0d ab 73 3b c0 3b 8d c4 8e 91 c7 80 36 6b 7b 85 ca e7 46 dc 29 8e be 35 ba 00 7e b5 f1 14 40 b8 a1 1b b0 7b 48 b6 20 e5 dd c6 b0 a8 9a c5 d4 95 23 2e a6 27 64 97 4b 52 ba ce 4e b4 51 35 37 3a d1 fa a3 79 61 1c 5a e1 82 f0 5f 0a 2c 0d 57 60 39 2e Data Ascii: x}Sbn1,`\s55!.B%4j2JH_[)1^NUwhEMSE'Q7J4#sd.K[p#:c^N+yy&& 9us;;6k{F)5~@{H #.'dKRNQ57:yaZ_,W`9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49771	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:19 UTC	754	OUT	GET /images/speakers/63240/Amy%20Brice_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"27419-1708687105000" Last-Modified: Fri, 23 Feb 2024 11:18:25 GMT Content-Type: image/jpeg Content-Length: 27419 Connection: close
2024-04-18 17:22:20 UTC	7926	IN	Data Raw: ff d8 ff e1 0b e4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 32 3a 32 33 20 31 36 3a 31 31 3a 33 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:02:23 16:11:38Zp
2024-04-18 17:22:20 UTC	258	IN	Data Raw: 85 e6 6e e8 19 8f 2e cc 25 98 77 f3 55 2d d7 51 c3 5c 59 ed 5d 77 d5 6e aa fe a1 82 46 40 23 2f 19 db 2e 9e 4f ee b9 df ca f6 a8 cd ae 0e c3 5f 6b 89 f6 ec d6 67 be aa 50 7f 7c ff 00 b5 53 c9 ea 58 d8 a5 fe a3 a5 c0 0f 63 75 2b 37 fe 75 d3 fe 84 f8 fd 21 c7 fe 49 35 2f ff d9 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0e 5a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 Data Ascii: n.%wU-Q\Y]wnF@#/.O_kgP\|SXcu+7u!I5/8BIM!UAdobe PhotoshopAdobe Photoshop CS68BIMZhttp://ns.adobe.com/xap/1.0/<?xpacket be
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d Data Ascii: ="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp=
2024-04-18 17:22:20 UTC	8176	IN	Data Raw: 84 17 b0 c3 48 02 8e 57 82 94 63 16 ab de 02 c8 eb bd 90 da 55 49 e8 99 0a c5 56 1a b4 91 40 aa 11 3f 26 37 fb b0 1b 2e aa 88 c0 1c e7 95 8f 75 2f 67 82 d7 71 d1 73 2c 63 10 44 87 62 c0 e9 92 36 2d aa b2 45 45 cb 40 4f d4 90 89 54 c2 18 0e 1e d5 73 c7 8c 0f 88 d6 29 1f aa b1 33 50 a5 c2 9b 90 2a a8 10 aa aa 3c a5 5d 15 16 6b 09 8a 92 8b a4 50 28 ae b0 7d 60 c5 5d a2 9e 2a f1 73 e4 3a 9e e6 69 94 85 c4 cd e3 1d 38 e4 a1 d6 20 e4 83 a2 2a a8 21 c0 82 d1 34 4c 53 81 47 f7 4d 73 ff da 00 08 01 03 00 01 05 00 02 fb 0c 7f 26 c4 10 55 73 b7 d7 2e be ac b6 b7 78 06 55 05 10 5b 88 8e 18 0c 06 49 30 49 22 87 21 f8 88 7b 0f 80 98 0e 11 13 1c 28 0d 81 c5 a2 3e b4 c9 d1 17 80 4a 34 bb 05 aa 6d 6c c0 1f 98 e6 e0 b3 dc 28 8e 14 a0 05 e4 18 00 02 20 99 33 5b 36 41 4b 33 Data Ascii: HWcUIV@?&7.u/gqs,cDb6-EE@OTs)3P<]kP(}`]s:i8 *!4LSGMs&Us.xU[I0I"!{(>J4ml( 3[6AK3
2024-04-18 17:22:20 UTC	2867	IN	Data Raw: 62 92 45 b7 1c ea a0 28 78 a7 66 04 81 a7 a7 db d6 77 8e 64 b2 39 47 c1 64 b2 94 f9 05 1c 5a 64 ad d6 a0 ae f5 de ac a1 e0 ad 24 26 51 14 eb 23 26 a4 aa f9 98 0e cc 47 4b 4e 9c 61 60 7d ad e0 57 d7 7c 41 22 8b 56 59 99 e4 9b 5f 00 04 ee 24 75 c3 f1 f2 d9 8a 6b 31 f1 ac 2f bb 9a 24 78 6b 22 c7 8c ac 3c 35 e1 92 57 09 b0 00 b2 48 02 f9 9d 37 6d ef a9 fa d5 ca ea b2 b5 7e 1d 91 c1 57 96 56 b1 5e 07 86 b5 1a d8 9a b4 e5 86 bb ca 2c 59 49 6d d1 9c 93 1a b8 45 05 9f 68 23 ac 3e 22 2b 82 1c b5 9e 6b 82 44 a8 51 8b ac 29 42 f6 42 59 5b 46 f1 c6 85 50 69 a9 2a c5 80 1d fa e3 9c ce a9 85 2e e3 72 58 ec 99 9e 5b 95 91 37 51 98 48 2b c8 85 6b 4b 0c 33 21 74 62 8c 75 0e 75 1d 71 dc b6 32 48 6f 61 f9 05 5a 39 1a d2 c0 e9 34 32 d2 b5 19 9b 69 9a 22 52 43 1a 1d 8e 35 3f Data Ascii: bE(xfwd9GdZd$&Q#&GKNa`}W\|A"VY_$uk1/$xk"<5WH7m~WV^,YImEh#>"+kDQ)BBY[FPi*.rX[7QH+kK3!tbuuq2HoaZ942i"RC5?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49773	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	511	OUT	GET /images/download-training-catalogue.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"17852-1529667940000" Last-Modified: Fri, 22 Jun 2018 11:45:40 GMT Content-Type: image/png Content-Length: 17852 Connection: close
2024-04-18 17:22:20 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDR<qpHYs.#.#x?vMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-04-18 17:22:20 UTC	257	IN	Data Raw: 05 c8 37 33 c4 74 64 8a bd ce cb 37 0c 90 35 5d eb 9b 22 64 dc 4c cb 8b ff 6f 9b 6f e9 86 3d c1 ad 47 e8 a4 6b 54 ab a4 d2 07 5b 0a 60 15 80 5d 94 6d 4e 96 54 d3 6b 05 35 b1 03 29 35 73 02 c8 1e 40 37 d5 62 6c 87 f4 bd 89 b3 d6 36 44 ab fe b0 b8 e5 d3 77 4f 75 5c b4 fd 6f 7d df f6 86 d4 00 00 7c 5e 15 da f5 fb 6f 1b 5f 43 58 8b c0 c2 59 df 9e 99 79 dd 55 fd cd 63 00 60 62 a6 98 ff 8e ac 45 12 24 52 39 fa cc 27 80 54 41 94 76 36 b0 2e a1 5f 92 f8 36 2d 06 0c bc 4a 73 61 96 d4 eb d2 22 f3 70 ab 00 69 79 43 b4 f2 fb 92 c0 3a 34 46 ab e7 37 44 2a a6 65 49 85 65 57 10 26 fa e9 2d de c5 f7 fd dc 42 c2 6a f6 00 6e 27 7e 40 09 94 12 f1 d3 07 bc 96 02 aa ab 25 48 fd 93 8d 20 8d e1 c6 80 b4 0f c8 03 d9 4c 12 49 78 3e 75 e8 b0 f3 e9 ff db e8 59 28 2b 5a f4 c3 d3 d3 Data Ascii: 73td75]"dLoo=GkT[`]mNTk5)5s@7bl6DwOu\o}\|^o_CXYyUc`bE$R9'TAv6._6-Jsa"piyC:4F7D*eIeW&-Bjn'~@%H LIx>uY(+Z
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 85 77 7c 5f 13 de 7d e1 77 8d b3 e1 55 dc 7d fb 99 86 bd 35 25 ed b2 53 33 a5 de 00 f0 fe 2f 81 cd d7 7d d5 f0 2a 32 c4 5e 09 e6 13 81 7d 0d e3 2e 05 f0 24 e2 d8 94 11 2f b0 86 d3 09 d9 db 01 50 b1 70 2b ce a1 f9 86 3e 5b cf cb be b5 75 7f dd 30 e0 87 41 96 31 33 3e ad 7b ee 77 5f 37 bc f2 d1 8c 8c ab 7b 9b 78 fb 0b 3b 7c 2b df 5e eb 99 07 0b 97 0a 89 31 24 e8 a4 eb 6d 38 36 0d c0 06 00 73 b0 af 7f d6 d1 96 72 7a 2d 00 70 16 48 63 8f 34 6a 4a d5 84 e6 96 05 87 14 21 eb a3 4d de 25 65 61 2d 70 75 3f 73 f1 4d 2b 5c df a1 59 6e 18 3f c2 3a 71 f1 cc ac 1b 24 80 ad 08 2a de 54 9e 15 a7 e5 1a fa 8d 1b 68 1e bd a6 36 52 0e ba f1 23 c1 00 a7 85 9a f6 93 41 9a 91 74 0a b0 ce c4 be ca c3 c4 d0 ae e8 51 46 62 c5 39 d3 33 ae 06 03 f6 fe 0d 9e 9f 10 d5 42 8f 9f 98 3a Data Ascii: w\|_}wU}5%S3/}2^}.$/Pp+>[u0A13>{w_7{x;\|+^1$m86srz-pHc4jJ!M%ea-pu?sM+\Yn?:q$Th6R#AtQFb93B:
2024-04-18 17:22:20 UTC	1476	IN	Data Raw: f1 00 4b a1 e0 ba 0e 49 aa 43 ef 24 70 31 20 e4 ae 08 52 81 5a 4c 57 d6 dc 6e 6a 1e a7 80 54 6f 64 53 5f a5 a5 9b 6a a9 03 b5 d5 97 f1 2c d8 78 9b db ae a4 11 62 36 08 51 d9 5d 57 14 4b 17 42 15 48 73 8c 99 14 60 eb e8 e5 ec 06 14 c2 18 7a 15 51 57 23 16 f5 75 67 50 c5 72 82 8d d4 35 42 67 01 4b 03 f0 11 80 7b b1 af 21 6e 77 16 16 fb 8e 51 49 a5 4e f1 94 36 00 eb 6a 7a 22 1f 24 b1 3f 9e 9a eb 10 f6 25 92 59 f4 0c 49 a5 d4 8e bf 33 81 05 10 26 7e 39 d5 5c 7b bb f9 0a 43 1b 5f d0 47 4d b8 81 9a 9e 93 68 18 bf 07 a4 bc b8 02 f1 f6 3b 48 2c 72 2a a4 ce 78 3f fa 7f 33 1d 4b ed 01 e3 eb ee a2 81 70 86 5b 40 8a 2e d1 d9 c0 02 80 6f 40 76 f2 d8 28 72 7b ca e4 30 20 0c 71 2c 81 5b 00 52 82 2d d3 28 6c 0f 7d e0 4d d4 d4 7b 10 ff 89 b3 02 9d 8f 34 10 62 33 87 46 a7 Data Ascii: KIC$p1 RZLWnjTodS_j,xb6Q]WKBHs`zQW#ugPr5BgK{!nwQIN6jz"$?%YI3&~9\{C_GMh;H,r*x?3Kp[@.o@v(r{0 q,[R-(l}M{4b3F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49772	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	492	OUT	GET /images/logoicon.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	263	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"4818-1516709690000" Last-Modified: Tue, 23 Jan 2018 12:14:50 GMT Content-Type: image/png Content-Length: 4818 Connection: close
2024-04-18 17:22:20 UTC	4818	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 38 00 00 00 38 08 06 00 00 00 a8 86 3b 1e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR88;pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49774	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	747	OUT	GET /images/products/detail/206534rec.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"52422-1710162211000" Last-Modified: Mon, 11 Mar 2024 13:03:31 GMT Content-Type: image/jpeg Content-Length: 52422 Connection: close
2024-04-18 17:22:20 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 99 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:20 UTC	258	IN	Data Raw: d3 aa 40 26 05 22 0b ee 09 66 1e ee 61 14 ec f9 52 ba 68 e7 d8 c8 dd e2 b6 67 99 d4 ca 84 8e 10 a7 42 9f b3 5d 0e 56 b1 ca 6b 0e 48 ee df 65 a2 a1 cb dd 8a 85 d3 90 7b 45 ef 17 f4 25 79 7d dd b9 9c 3d 4e 9e bc c3 65 b4 70 8d 45 36 57 24 57 10 e9 b7 ba c6 c2 02 7c 89 57 88 43 2e 14 d8 69 99 0c 87 0d b9 95 4b 0a ac 41 55 0d 4c f3 39 70 6d e0 34 f2 21 74 57 3e da 2f a6 f9 51 66 e6 32 5d ee ba e7 87 61 8f 85 52 44 5d b8 27 6b cd 4d 2d 47 4e 88 d0 b4 48 85 8a d5 2b 25 98 56 ee 0a 0d b4 a2 89 b1 17 e6 ae 8a 4b 9b 62 bd 31 b1 35 24 4c 17 14 ec d7 7d 1e 6e ca ab ef b2 20 e1 0f 91 77 6b a2 1c 98 22 a0 aa 59 53 6d 52 0a 18 2e d4 eb a4 02 e2 be 4a 01 40 ca aa aa 7f 35 30 11 55 33 2a 8f 47 55 00 74 52 d9 59 12 c3 c8 a1 c4 79 b1 70 d4 1b 55 4d ef 25 32 76 b3 d2 fa 4a Data Ascii: @&"faRhgB]VkHe{E%y}=NepE6W$W\|WC.iKAUL9pm4!tW>/Qf2]aRD]'kM-GNH+%VKb15$L}n wk"YSmR.J@50U3*GUtRYypUM%2vJ
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 5a e3 47 82 9d b0 c5 d7 b1 15 c4 c8 44 b7 8b d6 1d ef d8 b5 d1 57 99 be 7c a7 d8 6f 04 c7 1c 57 1d d2 aa 4a 33 1e 0a 63 43 41 4f 65 00 99 2d 00 99 74 53 41 64 83 95 a4 79 36 bc d7 d2 02 2d 01 d4 5a 00 c2 8a 5d 14 02 c2 d2 27 4d 2b 60 e6 3b 0f 3a e2 34 c3 44 eb 8b d9 00 12 55 5f 76 83 2c 96 de 5c f3 02 e3 82 c2 d3 77 27 85 7b 2e 24 57 50 3f 98 43 96 b0 b8 47 df ec 57 7d 3d 72 3b 65 ea 29 42 b8 36 20 67 18 d4 73 08 ba 39 87 36 52 f4 4a 81 84 49 ba 05 b1 12 b0 61 e8 0e 5e 7c 2c db b5 1e 97 b6 6a 0b 85 f9 e6 12 e2 ca 48 18 6c 30 28 40 25 d9 1e 21 38 79 b7 7d 5a 61 85 93 58 7c 3b 72 ff 00 4a 68 6b dd e4 24 5c 26 4c 81 0d e7 63 ac 87 81 01 1d cb f8 7b ad b6 1d ec 37 68 33 47 b4 f2 4b 95 71 59 69 c6 b4 fb 2e aa 8a 1e 32 0d d7 f1 fe 63 86 34 05 3b e2 23 4d 69 bb Data Ascii: ZGDW\|oWJ3cCAOe-tSAdy6-Z]'M+`;:4DU_v,\w'{.$WP?CGW}=r;e)B6 gs96RJIa^\|,jHl0(@%!8y}ZaX\|;rJhk$\&Lc{7h3GKqYi.2c4;#Mi
2024-04-18 17:22:20 UTC	8176	IN	Data Raw: a5 46 ba 6a 39 52 63 b8 c1 04 78 a0 08 e8 10 2a 8b a6 e9 66 1c dd df c2 ac 6b d2 54 19 e1 5e 75 dc 4d de 67 6a 57 91 71 c2 6b 8c 8f fb 8c 1b fc ba 18 f5 b7 25 dc 27 39 55 a5 c9 7a 7c 0b 69 f4 77 68 0b a5 68 53 f9 c3 7c fd 13 96 3a 8e e0 85 94 d2 19 c7 69 7c 87 27 fc 3b 65 f4 9d 4a 03 c2 56 c8 87 2e e9 0e 28 f6 a4 be db 5f 48 c4 7e f5 28 7d 1d 44 c1 30 4d 88 94 c0 28 68 50 1e 6d f8 be 98 bc 7d 2f 0d 17 62 0c c7 4c 7d a2 64 47 ec ad 2d 83 cf d1 04 94 91 51 3a 2b 9e c6 4d ac 94 6d 8c 49 36 50 d7 34 a5 e2 15 b3 57 da 6e d2 c0 ce 1c 09 ac 4a 7d b6 90 54 c8 58 75 1c ca 39 88 07 bb e9 53 07 a1 6e df 15 16 a8 ec f1 20 58 1f 91 8f 67 8e f8 33 f6 45 ea 7e 45 b5 58 f7 34 f9 b3 70 e6 0c 8b 79 49 82 d4 06 6d c8 f2 30 db 6e 13 84 bc 7c 99 b3 11 64 ff 00 56 9d da 59 91 Data Ascii: Fj9Rcx*fkT^uMgjWqk%'9Uz\|iwhhS\|:i\|';eJV.(_H~(}D0M(hPm}/bL}dG-Q:+MmI6P4WnJ}TXu9Sn Xg3E~EX4pyIm0n\|dVY
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: d2 69 86 7e 87 ba 09 4b 04 99 7b a3 97 f1 7c 2e 85 d3 cc 61 82 85 ba 2e 6f 68 9a 12 2f ad 5d 15 69 f6 a4 b5 bd 76 d3 d7 3b 5b 2e 8b 0e cf 88 f4 50 78 93 14 02 7c 09 bc d9 7d 5c d4 d2 18 f4 2f 85 e8 42 c2 35 36 fe e1 e3 da 46 23 8b 7f 58 9c 3f b3 51 f8 da 26 a4 e4 5e 99 b3 46 b4 42 b5 cb 95 e3 ae 77 06 e2 71 e4 10 38 82 04 06 e3 85 c3 11 67 fd 5a 77 a9 a3 58 4e 41 f8 79 b2 b6 89 e3 2e f2 5f f4 b8 2d 83 3f 6b 8d 4f 42 cd 59 f7 c4 06 84 d3 ba 4a c9 6a 5b 5a be 53 26 c9 36 cc df 73 3f e1 34 1b db a2 20 3d a2 4a 5b 9a b0 a7 69 c7 1e 6e 00 36 29 82 aa 61 8d 72 f0 e3 2e 8b 5f 92 7d 96 63 36 19 9e 54 25 a8 f6 37 e2 14 d7 a8 49 17 f8 50 47 14 4d 95 c9 a6 93 0a 6d 98 aa 39 eb ec 0b b7 e1 aa a0 a2 d7 7c 5a 61 cd 18 b1 46 34 ad b9 c5 17 45 c2 4e bd 8b 53 af 6a 26 4d Data Ascii: i~K{\|.a.oh/]iv;[.Px\|}\/B56F#X?Q&^FBwq8gZwXNAy._-?kOBYJj[ZS&6s?4 =J[in6)ar._}c6T%7IPGMm9\|ZaF4ENSj&M
2024-04-18 17:22:20 UTC	8176	IN	Data Raw: f6 1b a7 da 7f a2 46 2c 08 51 51 52 34 76 a3 a2 f6 91 b0 10 fb 35 48 d5 08 5b b3 79 2f 4d c6 12 9d 97 90 ad c1 30 14 0f da 14 0c 40 51 96 f8 0a 19 8b 05 1c 64 fc ac 33 4d 38 e9 a3 6d 01 38 e2 f6 40 53 15 ac c8 e0 eb 2c 3c f3 c0 cb 2d 93 af 38 b9 41 b1 4c 49 4b d1 11 a3 26 f8 d3 d2 b9 7f ab a2 c2 29 af 40 54 65 b1 cc 78 18 19 a2 79 72 89 66 a8 c6 dc ba e7 eb ad c7 3e bf aa f3 a2 ec ce da f4 44 a9 a3 3e 2d be 5c e2 07 02 e2 4a 26 2d 34 68 19 41 cc d9 07 36 d2 d9 e5 54 ae 7d b7 f2 f5 fa 9a 22 9a f2 cd b5 13 ef 3f 79 92 6e cd fd 40 b3 64 f1 88 22 22 e0 88 e5 c4 44 2b b2 8f 07 b5 3e 51 d5 49 72 e7 c0 56 34 28 01 40 0a 00 50 02 80 14 00 a0 05 00 28 01 40 0a 01 8d d9 be 24 71 4c 31 c0 d1 7e a9 57 9f f6 1e cf a0 fa 18 ff 00 94 d1 96 d0 7a 52 bc 08 8c cb ee ad 38 Data Ascii: F,QQR4v5H[y/M0@Qd3M8m8@S,<-8ALIK&)@Texyrf>D>-\J&-4hA6T}"?yn@d""D+>QIrV4(@P(@$qL1~WzR8
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 97 d6 ae 05 bf c4 18 ef be b8 e6 5f 46 b9 b6 ca d4 58 35 0d c1 22 db 9c 44 d8 b8 52 c3 65 88 5d 64 2b 8f 19 2a f4 ae 35 d7 ad 19 4d f2 d6 37 1e ff 00 b5 31 40 1c 69 76 b6 aa 55 74 24 14 07 68 0e a5 01 da c6 b4 8e 4d a7 f8 8b 92 fa 8d fd a5 ae ce 9f bb e7 fe eb da 1a 8d 77 cf bb e6 27 fb 92 da 41 92 7b 54 da 41 3f f3 6c 9f ba 26 85 f7 6a 7b e7 10 eb fa fa e7 6b 63 b9 58 d5 9d 66 1a a6 74 96 98 b7 c1 8b c3 14 22 de 42 df cc 45 8e ea 0f e2 2f 7a b8 2b e6 1f 4b bb 44 46 e8 d9 eb d9 19 a5 6e f0 25 d9 b5 45 f2 60 91 42 7e 53 b9 c1 36 1a b0 2d 08 88 f6 bb 59 57 d2 a2 d0 35 6c a5 f9 5b fc 15 ad 39 2b 4f 5c 39 85 68 5b 14 22 87 09 a1 71 4c 1c 4d aa 62 d9 96 3d a3 f3 77 aa f7 89 e0 f3 74 5e b3 da f1 f8 7e 4b d5 bf 52 48 ba ea cb c5 85 d6 5b f0 51 1b 44 17 47 14 32 Data Ascii: _FX5"DRe]d+*5M71@ivUt$hMw'A{TA?l&j{kcXft"BE/z+KDFn%E`B~S6-YW5l[9+O\9h["qLMb=wt^~KRH[QDG2
2024-04-18 17:22:20 UTC	3310	IN	Data Raw: b3 91 37 06 ee 4d 39 1d d2 71 1d 61 97 91 50 c5 a2 7d ac b9 84 bb 39 89 14 bf 6d 17 89 f8 db 82 17 48 b6 9b 2e 8e b2 5e a7 d9 5e d4 13 6e 79 49 a8 b1 c8 d8 61 a2 7c 78 9b dc 31 32 c7 a3 b5 8e 62 c6 b6 ad 93 5f 88 71 b9 48 d1 16 06 96 19 c4 29 0c 18 4a 06 85 78 51 8c 81 9f c2 22 ee a6 6c 44 7e 4a 69 15 55 fe 2c 3f 50 7e 56 94 88 c1 92 83 71 1e 75 23 a2 ec 53 22 01 cd 97 cb 95 29 e6 49 10 b7 72 9d e8 ae 72 12 0b 63 68 2b b3 d1 25 38 37 2b 73 4e 1b 2e e7 f1 44 e6 7f c3 1c c5 95 b2 02 cb e4 4f 35 11 22 61 3f 32 ed 21 bd 1d 31 98 ba 6d cb 6d b1 e3 44 37 8d e5 5c a7 98 77 b8 6e 0e 6c bb a8 39 bb 38 d2 cc 9a 20 f6 d9 66 0d 35 66 8f 72 1b 7b d7 6b d4 91 cc cb 6d 36 46 0c 29 26 6d b9 47 67 6b a7 a4 ba bc b4 56 a2 d6 57 a3 4c be bb ad 2d 73 ef ec 3c c7 16 48 20 2b Data Ascii: 7M9qaP}9mH.^^nyIa\|x12b_qH)JxQ"lD~JiU,?P~Vqu#S")Irrch+%87+sN.DO5"a?2!1mmD7\wnl98 f5fr{km6F)&mGgkVWL-s<H +

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49775	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	739	OUT	GET /images/defaultWebinarImg.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"39547-1624024690000" Last-Modified: Fri, 18 Jun 2021 13:58:10 GMT Content-Type: image/jpeg Content-Length: 39547 Connection: close
2024-04-18 17:22:20 UTC	7926	IN	Data Raw: ff d8 ff e1 0b 4e 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 58 02 00 00 01 01 03 00 01 00 00 00 57 01 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1e 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d2 00 00 00 69 87 04 00 01 00 00 00 e8 00 00 00 20 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 30 36 3a 31 38 20 31 39 3a 32 36 3a 32 34 00 00 00 04 00 00 90 07 00 04 00 00 00 30 Data Ascii: NExifII*XW(12i ''Adobe Photoshop CS6 (Windows)2021:06:18 19:26:240
2024-04-18 17:22:20 UTC	258	IN	Data Raw: 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f Data Ascii: 6-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.co
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 46 44 42 41 44 42 41 42 38 33 42 37 45 45 30 36 44 37 36 38 38 30 38 32 32 44 43 32 46 32 46 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 39 Data Ascii: ap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="FDBADBAB83B7EE06D76880822DC2F2F1" xmpMM:DocumentID="xmp.did:99
2024-04-18 17:22:20 UTC	8176	IN	Data Raw: 38 2c 87 9c 7c 25 16 28 ee fc f5 4a ab 2d ad fe 21 dc ae a3 a4 ed ae c0 77 2e b1 9a bb a0 2c 41 09 e5 ad 71 04 e3 c9 67 21 b6 96 91 81 af 72 d0 9b 69 0b e7 95 b1 33 37 e6 4f 01 c5 28 bc 97 6c 6d bb 04 96 f2 b8 dc 87 37 4c 95 a6 04 80 ec 07 61 58 11 9d b5 b6 e5 a6 4b 99 24 13 97 38 09 2b 5f 00 34 65 41 40 dd 84 46 d6 e9 f0 3d c1 ee 65 28 46 44 1e 2a 52 37 96 e6 ac 58 ad 1f 58 0e 20 4c b2 c3 6d 0c 97 37 33 32 d6 de 1c 5f 3c a7 4b 1b de 4a b8 18 6d c3 ae ed da d9 3f b3 da fc db 40 21 db 95 d9 30 db 0e d6 b7 ce ff 00 a0 2b 81 cc f7 8e b4 9e eb 5b 2f 77 4b 8b e6 d7 ff 00 89 68 45 ad b0 fe 5f 13 bd a5 51 9b 87 76 dc e6 a8 da b6 c8 e0 04 e0 f6 47 ad c7 bd ee e2 ae 44 d6 ed dd 63 7c 41 74 d2 b7 56 6d f5 03 69 d9 46 04 c8 74 74 67 53 48 6a f9 dc 7b dd 2b 92 d0 87 Data Ascii: 8,\|%(J-!w.,Aqg!ri37O(lm7LaXK$8+_4eA@F=e(FD*R7XX Lm732_<KJm?@!0+[/wKhE_QvGDc\|AtVmiFttgSHj{+
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 36 6d 36 ee a5 63 da ca c9 5e 34 34 1f a5 71 9b 61 ed f5 cf 86 c6 c7 7d 01 c2 ae a3 1f 92 df ba 4e 9c b4 82 f6 1b a8 c3 8c 8d 69 a6 6b 53 6c b1 74 c5 c5 3d 05 eb 9a 03 25 7f aa da 8a 4d 9e 1d a3 8a b7 77 2d ba b9 54 6e 5b 9c 30 97 7a 45 ce 03 89 f0 85 c7 6d eb 7a 74 e5 cc b7 cd da 47 b5 ed 12 35 8d 35 ab 59 85 7d a7 15 ca ed 5e 9f 59 23 9a c1 37 ad 7d 3b c9 a4 70 b4 07 72 c4 d4 fb 80 a9 5e bf cb 2e 72 f9 df fa 17 3a 49 3c b2 3d 29 6c fd e3 ab f6 6b 38 1d 59 2f 0d cb 61 78 c7 17 09 1d a8 76 50 af 5e 72 f9 7b d7 a7 ee ed 5b b7 98 2c 59 e4 b4 8c c6 0f 3d 2f 72 cf 67 94 d7 c2 3d 2a 2a b0 d0 a9 c9 01 d0 f6 a0 19 20 43 b9 a0 64 9a 0c 50 4b b5 db b7 0b d2 05 ad 94 d3 03 f1 53 43 7f 99 d4 41 3f 74 d8 6f b6 48 6c ee 67 90 36 69 de 69 e9 92 3d 37 01 51 47 73 41 75 Data Ascii: 6m6c^44qa}NikSlt=%Mw-Tn[0zEmztG55Y}^Y#7};pr^.r:I<=)lk8Y/axvP^r{[,Y=/rg=** CdPKSCA?toHlg6ii=7QGsAu
2024-04-18 17:22:20 UTC	6803	IN	Data Raw: bd 5c 18 9b 1e e4 1b 34 e3 07 5d c2 cf 4c 3b 96 a8 ea 47 b9 71 7b 35 b5 68 c9 ad ae 6a 63 7b 49 a6 23 22 8e b3 64 39 ed 06 6c cc f0 46 b2 af 8d ce b5 98 b9 e0 fa 4e c2 41 cb b5 5d 2e 0a b5 d2 d9 59 58 dc 1c de cc 4a e9 ed 2b 18 c2 b1 f0 3a 32 75 0c 09 58 d9 de 5e 0f d8 5a be e6 e6 38 e1 65 64 90 e9 03 bb 35 c8 da f0 db ef 17 d6 9b 26 cf 27 cd 7a 52 5e bd a0 59 c2 df 30 78 c8 82 31 c1 7a 3a ba fd ab c1 bf 77 ad 52 6c bd 41 0e e4 d6 c1 31 10 df 11 e2 81 c4 51 c7 9c 64 e7 dc 9d bd 37 57 4e ae f9 b7 0b 5b 98 75 62 31 e6 57 0d 79 8f 4e a8 f6 0e f4 6e 3e 5e 5c 1b 31 ac 67 ef 72 f6 ae dd 5b 4d 78 a9 d9 a5 5e cc cf 09 d2 31 c8 9e 4b b6 de 32 e3 ad e7 0c cd d4 63 52 e3 6b d7 35 b8 44 84 47 1c 9e a3 cd 19 11 d4 e3 dd 8a e5 52 cc f0 73 a9 25 0e d8 b6 b6 3e 82 69 2f Data Ascii: \4]L;Gq{5hjc{I#"d9lFNA].YXJ+:2uX^Z8ed5&'zR^Y0x1z:wRlA1Qd7WN[ub1WyNn>^\1gr[Mx^1K2cRk5DGRs%>i/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49776	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	759	OUT	GET /images/speakers/63494/ryan%20Lavarnway_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"27260-1709715486000" Last-Modified: Wed, 06 Mar 2024 08:58:06 GMT Content-Type: image/jpeg Content-Length: 27260 Connection: close
2024-04-18 17:22:20 UTC	7926	IN	Data Raw: ff d8 ff e1 0c c7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 33 3a 30 36 20 31 34 3a 31 32 3a 32 34 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:03:06 14:12:24Zp
2024-04-18 17:22:20 UTC	258	IN	Data Raw: ed f6 59 ff 00 a3 14 13 35 0d 4f 6a 2c b0 04 9f 48 27 7b 1f ba f3 b4 bf d8 df 80 4d 6b 84 bb e2 50 ab 74 38 b0 fe 6b 88 fb 8a 0d 8f b2 db 45 75 8d cf 7b a1 a3 c4 92 ad 83 a5 b0 11 aa f5 3c 7a 8e 77 32 63 cd 59 f5 3f 24 2c bc 7b c0 0d 71 3b c1 1a 83 12 3c 75 95 6b ed 67 fd 13 b8 9f 92 8f 8c 55 a7 87 5a 7f ff d5 e4 db b9 b1 6d 63 7b 4f 23 c4 7e e9 4f 6c 9a f7 54 0b eb 3f 46 06 ad 3f ba a0 d7 3c 93 b6 c2 0f 7d 00 d7 fa a0 23 7a 17 f2 32 36 bf f3 8e c6 c4 7f 2a 16 90 db 66 b1 72 58 e7 57 7b da ef a5 32 47 31 2a f5 37 13 a2 0d dd 2f 28 da 2c ac b5 ff 00 c9 fa 25 48 63 64 d4 41 7b 08 ed 23 51 3e 1e d9 4d 8d f5 04 24 d7 44 b6 fb c1 07 50 46 ab 4f ea f6 7b ab ba 9b 1c 7f 4b 87 6b 37 79 b4 1d 1f fd a6 2c 9d e7 be 8a 38 c6 f1 9d 59 c6 69 b1 f6 cd 66 b6 ea 48 3f f9 Data Ascii: Y5Oj,H'{MkPt8kEu{<zw2cY?$,{q;<ukgUZmc{O#~OlT?F?<}#z26frXW{2G17/(,%HcdA{#Q>M$DPFO{Kk7y,8YifH?
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 88 1a 9d ba f9 26 3a 9a 1f 47 a2 06 ae a8 f6 d9 88 c1 4f 54 ac ee b2 a6 fb 59 60 9d a7 26 9f dc 7f fa 7a 57 51 4f af 4b 71 ea 0d 16 da c0 f7 5a 06 9e cd 37 6d dd fc a7 7b 58 a9 f4 3c 6a b1 2a 75 ad 6b 45 f6 9f d3 6d 07 48 fc d6 39 ff 00 46 b5 b1 43 dc e1 2d 80 1c 78 e7 f2 ac 9e 63 37 19 11 fd 18 fe 25 d6 e5 b0 9c 60 cb f4 e4 35 ec 07 67 0f a8 fd 55 c5 be bb 32 7a 70 7d 59 33 bf d1 79 f6 3a 75 73 5b bb dc c7 3b fa cb 98 e9 8d 66 2f 53 36 67 55 60 38 e0 91 50 1b 5d bc fb 5b f4 ff 00 77 dc bd 26 5f 54 9d 08 23 f3 bf f3 15 4f ab e1 d5 97 d3 ae 73 d8 0d ac ac b9 af 8d 41 68 dd ed 9f e4 84 ec 1c ec e1 51 9f a8 58 d7 f4 a2 c7 9f 94 8c ae 70 f4 f8 7e 89 78 4b 7a 7e 25 99 96 e5 53 4f a2 cb 4e ef 4a 66 0f e7 1e 3f 39 17 ec b4 fe ef 68 4f 83 92 db 59 6b 0b 83 dd 8f Data Ascii: &:GOTY`&zWQOKqZ7m{X<j*ukEmH9FC-xc7%`5gU2zp}Y3y:us[;f/S6gU`8P][w&_T#OsAhQXp~xKz~%SONJf?9hOYk
2024-04-18 17:22:20 UTC	8176	IN	Data Raw: d4 ce b4 61 be 31 42 91 81 e4 26 e0 30 45 24 d3 fc a4 38 b4 98 71 49 ac 2a d7 8f bc 28 6d da e1 fc f1 fd 1e b2 2a 9e cf 26 f1 85 19 8f d7 59 80 fd 85 fc c1 2e bf 80 ff da 00 08 01 02 00 01 05 00 99 37 29 86 a0 23 a6 63 b8 14 00 66 d8 1d 34 4a ee 41 bc a3 84 53 62 66 f8 6e fc a5 66 d0 fd 50 11 9f 57 c8 78 51 e5 1d e4 d4 a0 6f 3a d0 a0 05 6d b8 15 b8 89 df de 1e ac d6 b4 b1 94 29 d1 7a e9 23 33 b1 3c 8e 56 b7 60 52 76 a7 2c b7 3d 42 9f ff 00 2f 73 69 df ed 3a db d0 10 1f d5 b8 08 2f 78 96 70 e8 b1 8b c5 22 84 b2 ad 5b a6 fd 26 49 b5 c4 d6 b6 13 54 99 05 b6 46 b5 b9 a2 78 97 4a 8e f2 ed f7 0d 22 21 b2 45 d8 b7 28 e2 81 fe 3c 8e 55 95 60 c0 8d 15 69 e1 6f 83 a1 57 83 a4 3b 50 4e 95 44 c0 78 6d 1b f6 7e 81 b4 80 6f a0 10 00 b7 bb 45 2a fc 8d 7c 89 a2 f6 50 e0 Data Ascii: a1B&0E$8qI(m&Y.7)#cf4JASbfnfPWxQo:m)z#3<V`Rv,=B/si:/xp"[&ITFxJ"!E(<U`ioW;PNDxm~oE*\|P
2024-04-18 17:22:20 UTC	2708	IN	Data Raw: a7 c0 fb d3 c7 f8 ec 8f 91 7c 79 b9 a8 6d fd e7 4a ed 4a 37 b2 12 50 ca 66 ea b2 ee 71 2e 6e 86 63 07 b2 ed e6 6c 5d 37 d3 24 c7 3f b9 67 f7 ed 89 71 53 c8 96 5f c9 1b 53 71 6f cd c7 e4 a1 b0 9b c6 56 70 3b ab 7b 1a 56 f7 63 8d bf be 29 5d c7 c7 9e cd d4 af 55 77 0e 56 ad 0a cf 57 f1 19 21 8a cd 98 42 f7 ba e5 eb 96 46 eb 5d 7a 5f 96 9a 06 54 65 21 8a 9e ad 42 9d 7d e0 35 1f 57 21 c5 e5 d3 58 71 f2 49 14 6d cb 5d 62 63 d0 cd a0 1a 92 1b 8c fb 7c e3 c3 b6 77 0e 55 a9 6f 1a c4 b7 66 c6 d8 cd 62 30 17 24 b9 d0 a0 91 67 05 98 2f 6a 19 07 bc 04 72 20 f7 64 70 7f 30 a3 f9 e7 7f ef 51 fe 5f ff 00 d9 fc 5f 96 ff 00 8f f6 7f 5f 19 7c a4 7a b8 92 49 a6 81 4b 16 d0 a4 f2 c5 22 af 32 35 69 a1 73 af b4 9e 30 b6 0b 01 6b fd eb 6e df 8c ae 8c 97 6b 46 f9 1c 64 92 eb cd Data Ascii: \|ymJJ7Pfq.ncl]7$?gqS_SqoVp;{Vc)]UwVW!BF]z_Te!B}5W!XqIm]bc\|wUofb0$g/jr dp0Q___\|zIK"25is0knkFd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49777	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	746	OUT	GET /images/speakers/34496/emq_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"27543-1533286604000" Last-Modified: Fri, 03 Aug 2018 08:56:44 GMT Content-Type: image/jpeg Content-Length: 27543 Connection: close
2024-04-18 17:22:20 UTC	7926	IN	Data Raw: ff d8 ff e1 0e a8 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 38 3a 30 33 20 31 34 3a 32 32 3a 32 38 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2018:08:03 14:22:28Zp
2024-04-18 17:22:20 UTC	258	IN	Data Raw: 02 ee db 47 87 f9 c9 da b5 80 27 7e 8c 0d a1 b5 6b 05 df 47 71 ef e7 fd 94 17 3d c1 c5 c0 ed 9d 23 4e e0 28 64 17 bc b4 83 2c d0 b8 46 b0 20 22 56 d6 d8 e6 88 20 13 df 43 a0 4a 97 90 6a 91 3d 8f 73 e4 34 99 1d 82 5a f9 f1 b7 82 8f 6e 6b eb 22 ba 80 0d 67 24 eb 2a 3f 6f 7f ee 37 e8 c7 27 94 75 55 74 bd 5f ff d2 e7 28 2c 17 5e 49 da 1d 55 92 09 e4 8d b6 35 9f ca fa 2b 53 ea d6 61 6f 51 b5 83 56 58 cd ae 74 6a 5c 25 db dd fc ad 36 2c 66 96 3a e7 7e 6b 4d 76 34 4f d2 97 32 19 3f cb df ec 5d 07 4b a2 8a f2 fa 6b ea 0c 1e b9 f4 ed 2c 3c b8 54 f7 b9 8f 6f f5 da ab d7 a4 f9 32 c6 55 38 d7 72 ef 5d 84 d3 82 d8 9d ed 25 cd 7b 4c 10 5c 77 15 cd 75 4c 4b 72 ed 1f 6b b0 d9 04 10 e8 01 f3 3b 87 e9 1b 0e fa 4b 7e cc 9b 71 ea 35 fd 26 03 f1 21 61 67 65 be d7 ed 6f b5 80 Data Ascii: G'~kGq=#N(d,F "V CJj=s4Znk"g$*?o7'uUt_(,^IU5+SaoQVXtj\%6,f:~kMv4O2?]Kk,<To2U8r]%{L\wuLKrk;K~q5&!ageo
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 9a 2d b9 22 0c 75 af b1 87 50 b3 1f 19 a1 ac d5 94 88 24 77 3f 9d ff 00 49 73 b6 59 63 dc f7 77 b1 db b5 2b 4f 36 d6 d7 8e ec 8b 38 dc d6 34 78 4e e5 90 eb 37 3b 70 fb c1 e7 44 f8 0d 2d a9 9a 57 20 3b 25 a2 cd ae dd 61 dd b0 4b 54 0b cb 9c 5e e3 2e 3c 95 16 92 6b 7b a6 63 e9 4f 70 52 a8 8f 51 a0 8e fa a2 c6 2d 91 65 85 80 81 a0 6c fc 92 a6 c0 2d 69 3c 19 50 36 bc 12 4c ea 04 04 cf fa 4e 88 8e 74 f3 d5 14 af 66 3d a5 e7 6b 4b 81 98 23 ba 8f a3 67 fa 33 f4 3c 3b a7 fb 4d cd 80 1d a0 e2 44 a9 7d b2 ef 06 f1 e0 96 aa d1 ff d3 e4 6c ca 6d 56 0b 2b 87 16 03 27 b7 b8 6d 73 3f ad ee 5d 3f d4 4e 95 6d ef c8 eb 59 62 5e e0 ea b1 47 00 10 7f 59 b1 8d fe d7 a1 bf fe 39 72 fd 2f a6 e5 75 7e a3 47 4f c4 03 d5 b5 d0 d2 7e 8b 00 f7 59 73 ff 00 91 4b 3d ff 00 f9 da f6 1e Data Ascii: -"uP$w?IsYcw+O684xN7;pD-W ;%aKT^.<k{cOpRQ-el-i<P6LNtf=kK#g3<;MD}lmV+'ms?]?NmYb^GY9r/u~GO~YsK=
2024-04-18 17:22:20 UTC	8176	IN	Data Raw: 98 ae a4 d4 6a fc 6b 3f 9f 73 d9 1e d2 ec 69 1b 1b 2a b5 a3 d7 56 38 de d7 c8 ae a3 c9 64 63 51 96 54 7a fc 4a 8f 3f 2d d5 d9 f1 ea ea dc 9e 7e 4b bb 2d f1 c9 7f cf 16 fc c1 cb 4b 1b 31 fa da dc 12 ea bb 09 99 69 6a f9 da 53 b4 7a 9f 2a dc 19 5f 60 f2 1d 7f ac 20 64 79 15 f5 dd 8e 0f 91 fe 3e c0 d7 46 b2 b2 3d 3e 45 26 af 0e bd 14 3c 97 22 d7 99 51 ad bf 66 e4 7c ac 97 53 63 99 75 7b 07 c1 31 7d b5 91 6c 6c b3 59 e3 3b b3 6b da 66 17 3b a3 24 81 8d 60 13 2f 1d 61 3e 04 89 66 a0 c6 4c 35 c8 24 64 b7 20 35 e3 91 f6 2e d9 99 7d 58 ff 00 99 33 3e 64 5b 3e bb 11 c8 3e 89 fa b1 93 e7 f6 db be be 20 22 66 f8 89 ec ad be c2 e9 e5 54 f5 f7 0b ca e6 e3 05 c3 f3 dc 6e da 83 14 b8 f0 b2 96 ec 0c 9d 5e 0b 2f cd e4 f6 12 e3 48 9d e9 5d ce ae f5 b3 68 f7 37 b0 bd 7f eb Data Ascii: jk?siV8dcQTzJ?-~K-K1ijSz_` dy>F=>E&<"Qf\|Scu{1}llY;kf;$`/a>fL5$d 5.}X3>d[>> "fTn^/H]h7
2024-04-18 17:22:20 UTC	2991	IN	Data Raw: 56 b9 e3 54 72 31 19 3a e6 69 d6 55 b4 92 b4 92 64 a3 5e c1 0d cd 3b 88 b1 23 b1 5c 8a 20 43 88 36 a3 04 e6 e8 88 a9 fe fb 48 aa 19 b1 60 eb 12 2d 19 25 97 79 f5 90 f8 67 94 f7 0d ce 0b 1a aa f7 09 62 bf 70 f5 47 69 a2 aa 75 56 69 1b 46 13 c7 9a c7 3c ef 6b 06 33 92 29 98 16 11 ce d5 04 85 33 18 dd ca 8d f6 9c d4 55 d3 5e 8c c8 14 53 ec c0 67 cd 3c 49 f1 54 3d 89 dd 83 3d 5e 34 ee 19 bd 83 35 ae 6a 10 4b e2 d7 6a 89 aa 78 af e9 3b 7f d1 bb be 05 9f 8b 7f c5 f1 9e ff 00 f8 9e 8f b1 d5 e3 3b 4c ad a8 9d 81 f2 95 3c 33 59 86 19 2f 47 37 28 e2 d9 35 b4 32 a7 90 6d 21 0b 91 9a fa 4c 4a e0 a4 66 a3 a2 a3 77 31 e3 60 54 89 f4 55 7b 89 47 c2 20 0f 94 67 17 01 ce 27 61 d6 6a 27 5c 5e d7 7d 3e 66 39 35 c6 2f 91 52 ba 69 c2 4b 08 79 4d 41 e4 29 14 62 9a a2 19 10 cd Data Ascii: VTr1:iUd^;#\ C6H`-%ygbpGiuViF<k3)3U^Sg<IT==^45jKjx;;L<3Y/G7(52m!LJfw1`TU{G g'aj'\^}>f95/RiKyMA)b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49779	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	755	OUT	GET /images/speakers/60403/Remi%20Vogel_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"25451-1698212734000" Last-Modified: Wed, 25 Oct 2023 05:45:34 GMT Content-Type: image/jpeg Content-Length: 25451 Connection: close
2024-04-18 17:22:20 UTC	7926	IN	Data Raw: ff d8 ff e1 0b a3 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 31 30 3a 32 35 20 31 31 3a 31 35 3a 30 32 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:10:25 11:15:02Zp
2024-04-18 17:22:20 UTC	258	IN	Data Raw: 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 00 00 00 01 01 00 ff e1 0e 5a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 Data Ascii: otoshopAdobe Photoshop CS68BIMZhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 Data Ascii: -14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/Resou
2024-04-18 17:22:20 UTC	8176	IN	Data Raw: 0d 50 fb 5f af f1 75 ac c7 19 84 a7 95 a2 85 6d 2d 43 d4 d5 b4 b5 32 7b af 75 6a de fd d7 ba 83 93 c8 d1 62 31 b5 f9 6c 95 4c 74 78 fc 65 15 56 42 be ae 5b 88 a9 68 a8 a0 92 a6 aa a2 4b 02 74 43 04 4c c7 8f a0 f6 cd c5 c4 36 b0 4b 71 71 20 58 51 4b 31 3c 00 02 a4 fe ce af 1c 72 4d 22 45 12 d6 46 20 01 ea 49 a0 eb 4a ef 96 df 23 b3 df 39 7b ff 00 7d ee fc 58 c8 55 75 fe c0 af 3b 3f 60 50 57 46 63 c4 e2 b1 90 54 2c ac d1 d3 f9 d2 29 37 0e 65 24 6a 8a e9 1b 4f 8a 29 16 2d 56 fa 63 56 fb bc cd b9 de 4b ba dc 12 3c 6f ec 94 e4 a4 22 ba 47 cb 57 c4 69 92 69 5e 1d 4e fc b1 cb b1 fd 3a d9 c7 42 b1 d3 59 1f 8a 53 f1 67 fa 3f 08 f9 7c fa 06 ba cf e1 15 6f 60 e6 7f bc db bf 71 c8 94 0f 59 3c df c2 e3 9f ef 59 a1 a8 64 bc 5f 72 e8 ea b5 0a 21 b3 15 8c c6 aa 42 c7 60 Data Ascii: P_um-C2{ujb1lLtxeVB[hKtCL6Kqq XQK1<rM"EF IJ#9{}XUu;?`PWFcT,)7e$jO)-VcVK<o"GWii^N:BYSg?\|o`qY<Yd_r!B`
2024-04-18 17:22:20 UTC	899	IN	Data Raw: 9f 64 ef 4d 9d fe 8c 2a 05 1e e5 a9 ae 5a cd d0 af 0f dc 63 32 d8 aa 80 f1 53 e2 b2 b4 65 95 2a 0d 4b b3 4c d2 92 26 88 22 b2 ba df d8 ef 77 9a 6b 39 e2 36 34 f1 68 4b 57 35 1e 40 8f db f6 75 14 6d 76 f0 5c db ce 6f 12 b1 69 d2 be a0 fa 83 f2 eb e7 e7 fc c5 7b d0 7c 8a f9 a7 f2 5f b7 56 aa 39 b1 b9 ae cd ca 60 70 2d 14 ad 25 2f f0 0d 8b 05 2e c7 c6 8a 09 5d 85 e8 a4 87 00 64 8f fd 52 be a3 c9 f6 39 db b5 0b 38 19 d0 09 1d 43 10 3d 4e 7a 2c 74 54 95 a3 15 2a b8 04 fc ba ae cc 81 41 58 cf 26 97 50 b2 23 24 8a ad 1c 91 c8 a5 19 1c b0 21 b5 20 e6 dc 5b eb f5 f6 ac 9a d4 75 7a 1f 4e 93 79 1a 3a 5c 5c 34 d3 d1 15 8a 9e b6 46 48 e8 42 aa 05 f1 26 a9 a6 80 27 09 08 7b 0d 3c 01 a8 5b f3 6a 1e 9d 56 66 04 b1 e9 3b 57 58 0a 84 11 9e 18 7a 80 28 c1 4d c7 e0 b7 e9 1f Data Ascii: dMZc2SeKL&"wk964hKW5@umv\oi{\|_V9`p-%/.]dR98C=Nz,tT*AX&P#$! [uzNy:\\4FHB&'{<[jVf;WXz(M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49778	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	758	OUT	GET /images/speakers/62614/Terry%20Winship_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:20 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"24052-1706170142000" Last-Modified: Thu, 25 Jan 2024 08:09:02 GMT Content-Type: image/jpeg Content-Length: 24052 Connection: close
2024-04-18 17:22:20 UTC	7926	IN	Data Raw: ff d8 ff e1 0a 1f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 31 3a 32 35 20 31 33 3a 33 38 3a 33 33 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:01:25 13:38:33Zp
2024-04-18 17:22:20 UTC	258	IN	Data Raw: 34 2d 30 31 2d 32 35 54 31 33 3a 33 38 3a 33 33 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 42 30 30 45 41 45 45 35 38 42 42 45 45 31 31 38 44 44 34 38 43 36 35 39 41 41 30 41 33 34 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 41 30 30 45 41 45 45 35 38 42 42 45 45 31 31 38 44 44 34 38 43 36 35 39 41 41 30 41 33 34 32 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 41 30 30 45 41 45 45 35 38 42 42 45 45 31 31 38 44 44 34 38 43 36 35 39 41 41 30 41 33 34 32 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c Data Ascii: 4-01-25T13:38:33+05:30" xmpMM:InstanceID="xmp.iid:5B00EAEE58BBEE118DD48C659AA0A342" xmpMM:DocumentID="xmp.did:5A00EAEE58BBEE118DD48C659AA0A342" xmpMM:OriginalDocumentID="xmp.did:5A00EAEE58BBEE118DD48C659AA0A342" photoshop:ColorMode="3" photoshop:ICCProfil
2024-04-18 17:22:20 UTC	8192	IN	Data Raw: 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 41 30 30 45 41 45 45 35 38 42 42 45 45 31 31 38 44 44 34 38 43 36 35 39 41 41 30 41 33 34 32 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 31 2d 32 35 54 31 33 3a 33 38 3a 33 33 2b 30 35 3a 33 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 Data Ascii: sRGB IEC61966-2.1" dc:format="image/jpeg"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:5A00EAEE58BBEE118DD48C659AA0A342" stEvt:when="2024-01-25T13:38:33+05:30" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <r
2024-04-18 17:22:20 UTC	7676	IN	Data Raw: 51 4b 52 b4 c9 5f 53 13 15 12 18 17 c6 28 31 11 9b 02 25 ae ab 9a 24 71 c5 c3 91 f8 e2 de f8 7b 8f 73 bd ee f1 ec 56 72 d3 6d b5 23 50 1e 6c 7e c3 d1 3f b7 3c a7 06 d3 60 2e a5 80 1b a9 a9 93 e4 38 fa 74 6e f6 b6 36 aa 8b 6f fd c4 c4 54 65 f3 75 06 4a a9 51 41 96 a6 aa aa a3 c9 3c a0 0d 2c b1 fd c4 84 46 a0 59 22 45 00 70 3d c6 9b 5b d5 81 73 dd 4e 86 33 ab 78 cd 19 03 48 e8 7f eb de bc c6 d0 44 29 da 2f 24 70 c9 f7 35 6f c1 15 19 59 50 26 80 6f ff 00 01 a8 29 42 c2 9f 92 01 63 cb b5 d4 4d 70 49 d0 87 87 46 76 56 c2 08 7c 50 b9 e1 f9 74 61 e9 29 a2 82 14 51 06 98 91 02 a0 48 c6 84 d2 2c 01 16 36 04 7b 5b 6b 29 65 cf 0e a9 33 12 c7 c3 61 5e a0 e5 69 69 de 07 6f 10 b6 97 05 74 dc 91 a6 ff 00 43 6e 6f f4 f6 b1 4e ae 9a 46 f1 14 83 f1 75 5e 9f 25 76 75 3c 39 Data Ascii: QKR_S(1%$q{sVrm#Pl~?<`.8tn6oTeuJQA<,FY"Ep=[sN3xHD)/$p5oYP&o)BcMpIFvV\|Pta)QH,6{[k)e3a^iiotCnoNFu^%vu<9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49782	108.177.122.155	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:20 UTC	870	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=819939597&gjid=1855838004&_gid=253988120.1713460940&_u=IGBAgAABAAAAAGAAI~&z=1007773124 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:20 UTC	595	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.traininng.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 18 Apr 2024 17:22:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:22:20 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49784	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:21 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:22:21 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 87665621bdf8b04e-ATL
2024-04-18 17:22:21 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49785	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	770	OUT	GET /images/fonts/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.traininng.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.traininng.com/images/fonts/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335
2024-04-18 17:22:21 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"56780-1427724538000" Last-Modified: Mon, 30 Mar 2015 14:08:58 GMT Content-Length: 56780 Connection: close Content-Type: font/woff2
2024-04-18 17:22:21 UTC	7926	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 dd cc 00 0e 00 00 00 01 dc e4 00 00 dd 6c 00 04 00 c5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 85 42 11 08 0a 86 e3 64 85 b4 5a 01 36 02 24 03 91 2a 0b 88 5c 00 04 20 05 87 00 07 ab 1e 3f 77 65 62 66 06 5b 05 80 71 86 71 7b 21 51 d1 9d 50 ea b7 f7 d2 1b 87 19 05 ba 1d 44 41 c5 ef b7 6e 85 ec 7c 31 be a3 fd f9 a9 d9 ff ff ff bf 20 59 8c e1 ee 0f bc 47 40 54 75 3a 4b 5b 55 33 b2 9e fa 84 2c c8 e1 a6 14 47 ca 5e b3 63 28 70 d4 36 62 f2 8a 6c 0a 66 2d 6b bf 6e fe c0 2e 47 35 07 e6 9e 54 2b 33 d5 8a e3 69 8b 15 9e 4c 70 26 e8 c8 65 6c 27 e6 08 d5 7c 88 26 85 cd e2 9f 44 21 99 5e 66 69 76 4d 33 5c 53 29 bd 51 98 07 4c fc e6 8d 4e 5f e6 b6 82 2b 5b f9 21 c8 b8 53 e7 17 bb 6d 51 f8 Data Ascii: wOF2l?FFTM`BdZ6$*\ ?webf[qq{!QPDAn\|1 YG@Tu:K[U3,G^c(p6blf-kn.G5T+3iLp&el'\|&D!^fivM3\S)QLN_+[!SmQ
2024-04-18 17:22:21 UTC	258	IN	Data Raw: 4e 51 55 da c1 51 57 5a 48 a3 af 1d a5 9c 9a ab a6 50 24 78 28 00 02 0e 88 db 90 42 06 41 bb 22 d0 c7 62 81 40 da 66 ca 76 4d 10 38 af f0 54 04 69 e0 16 a3 02 63 b0 d1 a0 46 42 c3 3f e0 f1 26 ce 1b c4 25 94 2a 51 37 9c 38 0e f0 80 70 b0 cf 73 22 a5 e7 c5 a7 5a 3d 29 41 13 ad 30 56 ba 1c 1c b0 b8 c6 75 c5 d1 99 5d 12 89 a1 34 b1 64 cb da 01 3b c9 10 b4 49 4f 36 e6 0c f8 27 8d ca 56 0e 69 da a0 ca 1b 19 d4 14 a4 2c 4f d5 f7 8a 40 74 3d 40 69 56 ed b3 94 56 59 18 98 83 5b a4 66 a5 a3 6c 66 43 a7 04 35 26 d2 6b 90 b6 3a 29 51 d3 46 e3 dc c7 03 1e a9 6a f8 be a0 5f 83 84 a6 d8 61 3a 1a b0 36 50 24 0c 90 61 8e 0b ec 4b 46 34 c0 6b 68 e1 b0 4c 93 82 19 c7 c1 15 e6 48 6a da fc 95 01 0e 5a d4 a2 52 9e 00 b1 5b fe ff 38 59 71 b2 63 64 c2 03 60 ba 28 60 d9 af 6a 6b Data Ascii: NQUQWZHP$x(BA"b@fvM8TicFB?&%*Q78ps"Z=)A0Vu]4d;IO6'Vi,O@t=@iVVY[flfC5&k:)QFj_a:6P$aKF4khLHjZR[8Yqcd`(`jk
2024-04-18 17:22:21 UTC	8192	IN	Data Raw: ec 80 0d 83 04 b6 eb a5 81 bb 9c 16 12 27 86 77 89 dc e7 66 49 92 2e 4c 5e 26 6a f3 89 21 ca de b5 b2 7a c3 68 25 15 68 a8 2c 94 66 cf a9 cd c0 f1 6b 2c 23 a8 98 9a cb f7 d8 a8 00 bd 3c 80 65 24 d6 69 9d 55 db f5 1d eb 2d 36 11 19 75 44 60 2d 9e b4 b9 43 8d bc 43 8a 42 fe 2c b8 f8 59 45 01 56 64 f8 21 ea fa a8 f4 09 a0 a3 17 a0 a4 96 8b bd 01 21 6e b6 0f b9 c6 a8 a3 93 31 aa db 89 dc b0 5a 43 36 08 61 8c 41 18 67 5f c1 15 bb 75 a4 f7 79 a2 c3 96 4d c2 00 72 19 9d 2a 96 21 23 ae ff 01 8a 99 6c 0a 51 18 3a 59 9a 7e 9d 5a d9 32 12 a9 e0 80 b9 02 31 f1 10 83 0b 28 70 a9 e8 2a 0a 24 91 17 22 2a d1 a3 4c b8 31 33 01 1b 8c 07 ee ae 67 72 3b 96 3e 63 c4 50 ab 95 2d 10 29 dd 79 51 86 0d 4d 33 5e 42 81 70 a2 46 a8 72 93 4a 68 5b 1a 8d 4c c8 4c fa 99 36 fc 24 9f 13 Data Ascii: 'wfI.L^&j!zh%h,fk,#<e$iU-6uD`-CCB,YEVd!!n1ZC6aAg_uyMr!#lQ:Y~Z21(p$"*L13gr;>cP-)yQM3^BpFrJh[LL6$
2024-04-18 17:22:21 UTC	8176	IN	Data Raw: 40 a3 97 37 3b 70 25 9c 2d 8a ab 6f de a4 7a ba 6e 62 7d 02 b8 33 0f 6c 2a e0 2e a1 f4 09 bf 14 5a 8e 99 e3 22 07 bf 22 44 c9 c1 2a 38 42 b8 f3 4e 4d 20 70 80 00 f9 f0 6b e2 75 25 27 d4 a8 de ab 8f e4 10 61 fe aa 7e 5d 62 c2 7e 2d c2 b4 a4 b8 80 33 47 bb e8 77 2a d9 0b 45 53 17 d0 24 ec 34 2d 11 8c 03 10 33 cc 14 9c 66 3e e5 37 6b a6 77 a1 f7 84 61 89 49 0e 08 cd 60 f2 a8 1b e6 34 04 df 5a 65 81 03 2c a2 48 00 07 9a 87 21 62 6b 46 6b 67 76 4a 32 9f 94 21 94 40 4d 22 ee b7 4c 2b e9 5f 06 48 b6 6a 99 31 75 0d f1 c7 7e ab 2f 5b 86 a4 e5 0d e4 1b ad 44 4e 35 f7 34 28 76 1e 0a af 5b 7c 86 81 ca 8f b8 72 16 b8 f9 5c 54 08 69 b7 98 aa 03 43 2f 62 39 df 65 90 22 99 be 95 36 17 1e 81 d8 14 48 80 97 1f 6a d0 61 11 7d cf b7 eb a0 d6 38 5f 94 3c d9 22 03 4a fb 54 c3 Data Ascii: @7;p%-oznb}3l.Z""D8BNM pku%'a~]b~-3Gw*ES$4-3f>7kwaI`4Ze,H!bkFkgvJ2!@M"L+_Hj1u~/[DN54(v[\|r\TiC/b9e"6Hja}8_<"JT
2024-04-18 17:22:21 UTC	8192	IN	Data Raw: 6d 3c 59 77 9a 51 01 00 63 3a a9 d2 77 1e fe 44 fd 12 8e e0 31 71 84 f0 b8 cd 9b 85 fd 9e 3f 27 16 2b 81 2f 7f 47 2f 20 9b a4 14 84 c0 21 57 35 80 6b 82 14 4e 88 3a 5a 15 d6 14 5c 53 70 ec 58 b3 1b 18 c8 c9 d1 9b 0d 3b d2 90 1d 1f 8f 8c 42 c2 0d 5c a1 15 47 28 41 46 13 12 e2 91 38 76 ff 9a c7 8f 67 f0 e5 10 10 6d 48 c8 cd b5 f0 e2 4c 4c 08 7f 02 bb 22 80 91 0c b6 ab 45 b3 2b ae 61 d7 66 b9 ec 17 e5 93 97 a9 f5 e9 06 1f 7c bb 80 a6 6d 20 70 08 72 8a e7 2e fb f6 26 67 09 2d 71 70 4f 91 76 c2 3f 91 3b df d3 02 95 24 ba 32 28 63 24 4f 01 92 95 e4 42 1e a4 95 91 5d 83 0e 62 15 50 2c 85 53 aa 9d 28 e7 de 00 f5 5b 71 f5 7a 66 ed c8 48 7e dc 22 24 48 bb 99 b5 26 da d2 74 b8 d6 04 c7 f1 ef bf 23 9c 09 5d 7a 42 a0 ee cf 19 69 92 89 00 a0 77 5d e8 ea 1a 64 cc b4 8c Data Ascii: m<YwQc:wD1q?'+/G/ !W5kN:Z\SpX;B\G(AF8vgmHLL"E+af\|m pr.&g-qpOv?;$2(c$OB]bP,S([qzfH~"$H&t#]zBiw]d
2024-04-18 17:22:21 UTC	8176	IN	Data Raw: 88 09 53 10 a5 18 1c 0d f4 d2 62 12 e6 de 0d 2f 45 88 58 eb 66 b1 61 6a b5 4a ad 9c c9 64 1c d9 60 2a 17 30 55 cd 9c d1 b0 80 2c 0b 09 f2 eb 40 00 62 11 75 2c dd 2d de e5 70 bc 49 cc 45 0a 40 76 ca 90 16 d7 14 d7 5f a2 79 27 63 86 30 c3 98 99 9d 15 38 a1 c2 c6 9d 6a d5 d5 5d 0f 88 43 96 c4 a1 3a 3b 6b a1 8c ce 43 01 9a c3 77 1f a8 7f a7 74 cb e1 43 02 1a ff 84 fb 70 0e 6d 94 d1 79 48 60 e1 f4 ce 21 d4 2f d3 e7 0f 13 d0 1c eb 7d f1 9d 72 ca 3c 06 8a e1 2c a8 c6 a4 5f 0e eb 20 52 48 72 10 49 4c d9 7f 98 c2 83 13 fc fe 30 c3 b9 88 14 93 1e fd 8a 39 4d 01 bb 5f 5e 8f e9 a2 a8 f7 39 2b 06 b1 6b 44 91 aa 72 b5 d2 2c 2f 55 31 e2 0a 14 78 04 7e 84 1f 02 ca cc 2b 77 ad 79 78 77 3a 88 2b a5 4b 62 e0 fe a2 e2 ff 97 fe ff 41 2d 85 8e 80 18 45 23 42 29 1e 1e b1 8f 03 Data Ascii: Sb/EXfajJd`*0U,@bu,-pIE@v_y'c08j]C:;kCwtCpmyH`!/}r<,_ RHrIL09M_^9+kDr,/U1x~+wyxw:+KbA-E#B)
2024-04-18 17:22:21 UTC	8192	IN	Data Raw: 3e 39 4a 20 22 a4 3b ca d3 e8 49 69 33 d6 45 2a 29 f2 9e 8c c1 95 f9 3a e3 ed 62 fd 9c 14 0e 3e 0e ed 57 46 5d f7 a2 32 9e 06 fa ee 72 5f 32 de db 86 53 e3 da 86 8c 73 b3 7d be 1c 28 c9 eb 6a 4c 0d df 28 23 43 53 0c c0 ef 93 f8 9c bc 67 6d f9 bb 7d ce 5b 48 c1 ad 3d 16 15 6d 1b f8 e9 12 ac 4f 61 c7 5b b5 a7 a5 34 64 f2 55 7c 77 e5 1d bb 98 64 3c 61 3d 38 27 ac b4 2c 6e ec ec fa 01 0a 65 67 6a 50 1f 66 ea 9c 35 08 c1 2e 31 a8 a0 92 a7 c7 63 6b 5a d7 d5 8e 1c f0 8c 6f f0 ae 8d fd 34 93 f7 06 c7 99 cb 58 a3 fe 8d ac 03 2d b1 9b 82 6a 71 1f e0 cb a4 3b b2 39 42 69 3c 55 59 1b fc 29 ca d1 22 bf ce e0 e6 91 e3 dd 35 1e ec 5e 7e 9a 40 96 a9 21 5d 3e 58 f4 f8 14 f9 fc 92 d5 fa 1d f7 b8 6a 6f f8 2f d9 7c 15 4b a8 22 f8 bf e9 6c 32 bd d0 6c ea 78 83 23 54 11 cf d4 Data Ascii: >9J ";Ii3E*):b>WF]2r_2Ss}(jL(#CSgm}[H=mOa[4dU\|wd<a=8',negjPf5.1ckZo4X-jq;9Bi<UY)"5^~@!]>Xjo/\|K"l2lx#T
2024-04-18 17:22:21 UTC	7668	IN	Data Raw: c9 9d 5e ba 7c d2 e1 54 cb d7 bf a0 3a ed 5c 43 d4 6b 4e f8 a2 c0 c5 1a dd 18 9f 0b d3 62 69 a7 3c 9b 10 61 29 1b 62 d5 07 26 8e ef 5e 5f af fb 78 a8 31 76 d8 4f 13 b8 80 6a 47 55 a0 6a a4 91 ed 99 ac f0 94 56 d6 d2 40 6c 32 c5 2b bb 3c 2c b1 3c 31 71 20 10 bf 7f 75 cf 26 56 8f 77 d5 d8 6b bd 8d 06 32 c5 7f c7 0f 3d 0d de 55 e3 16 b6 02 bd 1f 58 3d a2 9b 9c b4 fe 28 3b bb 29 4c 7b 8e 49 a9 a4 e3 df 6e e3 67 44 73 c9 59 5a fa 4d 26 ed c6 d9 c6 17 0b 49 c9 d8 15 b5 50 38 33 33 3e 97 d4 40 ff 1d 30 73 2a 98 e4 8c d8 e0 96 4d 35 5a 65 67 df f2 94 d2 9e 28 e9 a5 1e 16 e8 f5 b8 c1 4d f9 e2 10 e0 87 98 d3 d3 bf 5d 7b 2c a9 f9 80 fb db 15 19 b4 9c b6 59 9c e5 1c 4d 04 55 70 0a 0c 66 46 2c 28 06 f6 3b 51 36 b4 15 18 2a 0f dd db ec 37 f4 fb bc 7b f6 65 d5 a6 46 84 Data Ascii: ^\|T:\CkNbi<a)b&^_x1vOjGUjV@l2+<,<1q u&Vwk2=UX=(;)L{IngDsYZM&IP833>@0sM5Zeg(M]{,YMUpfF,(;Q67{eF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49786	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	832	OUT	GET /images/speakers/34362/Carl%20Patterson_Large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:21 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"23523-1530526237000" Last-Modified: Mon, 02 Jul 2018 10:10:37 GMT Content-Type: image/jpeg Content-Length: 23523 Connection: close
2024-04-18 17:22:21 UTC	7926	IN	Data Raw: ff d8 ff e1 0c 95 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 37 3a 30 32 20 31 35 3a 33 37 3a 30 31 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2018:07:02 15:37:01Zp
2024-04-18 17:22:21 UTC	258	IN	Data Raw: 40 1e 35 f8 cc 78 14 a9 fa 76 05 0b 23 d4 6f 99 0a 74 89 36 3f c4 c0 f9 20 96 24 41 03 b2 bd d2 5c cf b7 55 bc c3 49 70 27 be 83 7f b7 f9 5e dd ad 55 1e 3b a9 62 5a 69 c8 ae c1 cd 76 35 c2 78 d0 84 46 e1 0e ff 00 4a bd b5 75 17 d0 fd 37 58 d7 8f 09 04 6e ac 7f 51 9b 16 2e 7f f4 fb bc 9e 47 dd ed 57 6e 8a f3 81 69 90 d7 18 3d c8 98 dd fd 6b 5e aa 75 26 c7 51 c9 1f f0 af fc a9 e4 dc 2b b4 96 81 ea be e1 aa fe 7e 49 13 35 94 9f f4 be ef e2 a1 3f a3 72 8d 7b e9 df 56 5d 56 5f d5 ec 2b 1a 4b 4b 6b f4 9e 1a 07 d2 a8 fa 47 dd fc ad 9b d6 97 a1 5f 83 f9 f2 58 5f e2 f7 2a 97 f4 27 e3 b8 06 bf 1a f7 02 4f 71 60 6d ac ff 00 bf b5 74 9e ab 3f 78 72 ab f0 fa eb c5 92 fd 3f 47 ff d5 f3 f6 11 03 cf 82 93 f4 09 db 59 20 f2 09 e7 4d 10 de 48 d3 9f bd 3b a2 9a f6 ba 1e 1d Data Ascii: @5xv#ot6? $A\UIp'^U;bZiv5xFJu7XnQ.GWni=k^u&Q+~I5?r{V]V_+KKkG_X_*'Oq`mt?xr?GY MH;
2024-04-18 17:22:21 UTC	8192	IN	Data Raw: 33 6b 1a de e0 6b f1 ee ab b9 8e f5 1a 4b 74 27 4e 55 a8 77 81 41 2c 5e 34 42 e4 91 e2 21 19 cd 77 81 41 da ed c7 43 a2 4a 74 72 6d 2f 0d ba 75 73 5a e2 47 1b b6 fd 1f fa d3 14 7a ac 7e d2 c9 8e 3d 47 11 f0 25 41 a0 bb 1a b0 5b 00 34 b7 e4 0f bd df db fa 09 b2 4b ec bd ef 20 cb a0 9f 8c 04 eb d0 f9 da da d5 a9 67 2e 3f 05 07 18 07 c0 a9 58 1d ae 87 52 50 dc 1d e0 53 57 3d 37 d4 8e a1 93 8f 91 95 8f 48 6b 85 d5 b6 cd af 24 00 6b 3b 64 6d fc ed 96 2e a7 f6 af 53 ff 00 47 4f 87 d2 7f 2b 84 fa bb 6d 94 75 4a 8b 41 9b 1a fa e0 09 26 5b b9 bf f4 9a ba bf b4 1f dc fc ef fa 4a 2a fd 67 d1 75 fa 3e af ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 Data Ascii: 3kkKt'NUwA,^4B!wACJtrm/usZGz~=G%A[4K g.?XRPSW=7Hk$k;dm.SGO+muJA&[J*gu>8BIM!UAdobe Photoshop
2024-04-18 17:22:21 UTC	7147	IN	Data Raw: ed d5 a7 90 bc b2 52 6e b8 a8 7e ce aa 48 41 95 21 a9 72 aa 65 08 41 d6 da f6 90 d6 49 61 24 14 c2 d4 71 a6 2b d2 ab bb 6d c2 e1 56 28 25 64 fd 5c 93 c2 95 e8 3a dd 7b 33 29 b4 fe 24 f6 37 5a a5 66 66 5d d5 bb f6 4e e6 a8 a3 a9 92 b1 ea 73 09 53 3d 2c d4 fb 7d a9 a6 96 c2 0a ca 3a 08 60 a7 85 75 34 86 60 c5 99 dc b1 28 25 8d 82 4a a1 46 96 7a 8a 79 0f 43 d0 81 6c 25 99 7e a5 a7 a3 00 00 07 35 60 38 e3 ad 7a fa 76 1e c3 97 1d d4 d8 2d e3 d8 0b b8 31 bb 7f 76 e1 f1 99 9d 8b 26 db 82 82 8e 3a 5c 4d 58 82 71 9e 99 e6 66 ae a8 cb 4c 23 9d 26 06 35 6a 7f db 3c 6a 3e dc b9 92 cd 45 a8 b4 85 be a1 68 4e 46 7a 0d 5f db ee df bb f7 84 dc a7 57 b7 68 98 00 01 04 0f 99 3d 5e b6 79 37 9c 8d 8f c5 47 80 9a b7 33 93 c7 e4 2b 31 18 ba ff 00 e1 54 b8 9c 9f d8 d4 34 53 1c Data Ascii: Rn~HA!reAIa$q+mV(%d\:{3)$7Zff]NsS=,}:`u4`(%JFzyCl%~5`8zv-1v&:\MXqfL#&5j<j>EhNFz_Wh=^y7G3+1T4S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49787	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	829	OUT	GET /images/speakers/59184/Soundarya%20J_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:21 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"22375-1693389339000" Last-Modified: Wed, 30 Aug 2023 09:55:39 GMT Content-Type: image/jpeg Content-Length: 22375 Connection: close
2024-04-18 17:22:21 UTC	7926	IN	Data Raw: ff d8 ff e1 0b f1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 38 3a 33 30 20 31 35 3a 32 34 3a 33 32 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:08:30 15:24:32Zp
2024-04-18 17:22:21 UTC	258	IN	Data Raw: 08 05 8e 0f da 4c 86 99 f8 4f c1 5a 20 92 0c 41 d3 66 9a 3f 53 ef 76 e4 13 1e a6 83 da 3c 62 67 4d dc 20 52 c8 38 0e 7b 28 1b 36 fb 47 74 ce b0 09 1d d4 eb 66 9b c8 24 18 0f fd dd 7e 87 b8 20 96 58 c6 cd db 84 c1 3c 83 a0 ec 5c f6 ab 73 4f ef 37 9d 9f 4b bf fa 5f a3 fc d2 10 b2 b0 cd 83 4f cd 78 6e 81 c0 7e 73 9c a5 e8 e4 7e eb f8 8e 0a 34 ad 1f ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 07 01 01 00 01 01 00 ff e1 0e 5a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 Data Ascii: LOZ Af?Sv<bgM R8{(6Gtf$~ X<\sO7K_Oxn~s~48BIM!UAdobe PhotoshopAdobe Photoshop CS68BIMZhttp://ns.adob
2024-04-18 17:22:21 UTC	8192	IN	Data Raw: 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 Data Ascii: om/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Descript
2024-04-18 17:22:21 UTC	5999	IN	Data Raw: 94 c3 23 40 8f b5 63 45 81 db 05 1b 2c 72 d8 7c a9 27 d4 2c a3 d5 74 b3 79 22 c3 24 cb 25 4d da 89 bf 67 1e 1b 25 d3 75 a5 1c 16 e1 e4 00 bd 20 9f 4a 7a c4 a9 09 e5 63 48 b2 6d 31 92 0d 4d 60 8d 0e 6c f7 16 51 83 92 80 99 21 0f 21 42 d4 b1 c0 13 c6 3d cf b8 a0 ea ed db b7 39 ca 67 40 d5 7d 85 93 8c ac 83 3f 52 a9 fd bc 3a 29 14 c2 8c b9 55 51 86 bd 69 1e 0d db 09 88 e9 c8 01 b6 7c b3 90 6e 50 a6 83 ea e4 82 53 f8 1d 60 2d 28 e0 c6 a0 f4 ad 65 95 83 96 cc 5c 12 c7 e8 12 e6 b1 2d 94 62 20 01 49 a9 61 76 a5 cb f4 f0 49 b8 1c b6 f0 41 c2 88 9f 1f db 4b b6 09 0d aa 28 13 20 cd 1e 49 9c df 42 52 68 75 8b f4 00 87 e9 1a 49 ad c1 ca 46 21 aa de 0e e5 5c 2c 99 07 d4 7e 85 1a 64 61 bc 92 1d 44 f8 e3 49 14 00 d3 0d ca 29 d0 fa d1 6f 41 44 0f 52 fd 06 9b ac 25 13 b9 Data Ascii: #@cE,r\|',ty"$%Mg%u JzcHm1M`lQ!!B=9g@}?R:)UQi\|nPS`-(e\-b IavIAK( IBRhuIF!\,~daDI)oADR%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49788	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	830	OUT	GET /images/speakers/60019/Jacob%20Kelley_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:21 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"24225-1696489446000" Last-Modified: Thu, 05 Oct 2023 07:04:06 GMT Content-Type: image/jpeg Content-Length: 24225 Connection: close
2024-04-18 17:22:21 UTC	7926	IN	Data Raw: ff d8 ff e1 0d b7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 31 30 3a 30 35 20 31 32 3a 33 33 3a 35 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:10:05 12:33:58Zp
2024-04-18 17:22:21 UTC	258	IN	Data Raw: ff 00 a2 ba 36 e4 55 55 91 56 1b ee 73 7e 91 71 2f fe 3e d5 0e 5a 32 a1 bd 36 b0 02 21 c4 47 a4 9a 07 fb ae ed 35 36 f7 07 e5 d7 56 f8 86 96 90 4c 73 f4 d9 b5 6b 87 b9 b8 b6 d5 56 d7 8b 5b 1b 5e 01 04 c7 b7 72 e7 28 ea 4e f5 01 18 a3 11 9d 99 f4 8f c5 69 d3 9e c8 d7 49 e6 38 50 1e 20 59 fd 24 20 ea 75 7d 9f a4 de 2d b1 95 cb 0b 3d a7 6b 1a d7 c0 76 ff 00 f0 97 3f 46 7f d7 18 b0 68 fa b3 89 6b 77 8b ed 73 3c 5a d6 f0 7e 8f b9 df 49 75 19 38 f8 7d 46 a1 55 de e6 07 07 88 f1 6e a2 54 72 ed ca c2 ac 3b 11 b5 b8 40 6b 77 80 48 3e 3b 3f 39 28 64 95 eb 2a fc 96 9c 71 a2 4c 78 cf 8e ef 1a cc 0e 9e 3a bb b1 59 ea 3a 9a 89 9f 50 89 25 bf 4a 76 7e 6e e5 d2 54 fa c0 0c 60 0d 0d d0 01 c0 0b 05 b8 d9 58 d9 f6 e4 65 54 e2 eb 09 d4 0d be e7 1d c4 ed 56 1f 97 43 18 6c 78 Data Ascii: 6UUVs~q/>Z26!G56VLskV[^r(NiI8P Y$ u}-=kv?Fhkws<Z~Iu8}FUnTr;@kwH>;?9(d*qLx:Y:P%Jv~nT`XeTVClx
2024-04-18 17:22:21 UTC	8192	IN	Data Raw: 3d 8f fe 45 0e 63 d7 31 46 c5 07 43 e1 75 8b 04 a5 21 c3 23 29 13 7b f0 8e 88 1d 85 fb 50 75 4c 86 02 eb f1 ac 6b a9 8e 48 6e e6 bd 9f e6 b3 7a cc ce ea ae ea 19 66 db 8b c3 1a d6 b0 30 1e 76 8d 5e ff 00 de 72 b7 d1 b3 19 47 4f cf be d7 db 5f a8 e6 0a de ce 4d 8d 26 c6 b7 fa ca 95 6e 7d 8d bb 29 e0 1b 1e e8 22 00 1b 89 f0 56 b1 40 99 48 11 a4 47 a7 ec 72 b2 e4 b0 24 0e b9 09 94 c7 7f 54 9d 9f ab 9f b5 71 33 4d fd 37 19 f9 b8 a5 b1 91 8e d3 ed 73 1d a6 ba fd 3f dc 5d 4f ec fe 99 ff 00 95 39 df d1 f7 fd 01 ff 00 b0 7f f1 df f0 8b 9d e9 1d 44 74 1e aa c1 8f 19 00 00 c7 86 ea c7 b8 89 7b 2b db bb e8 5b fc da d7 ff 00 9e 19 ff 00 e8 5b fd 2b ed 1f 49 df 47 fd 0f 1f cd a5 c1 2e 3e 2d 3f 6a cb 87 7d 37 ff 00 d0 5f ff d5 e6 b1 2a a3 a7 0c 96 59 6b 1f 6b 4b 43 cd Data Ascii: =Ec1FCu!#){PuLkHnzf0v^rGO_M&n})"V@HGr$Tq3M7s?]O9Dt{+[[+IG.>-?j}7_*YkkKC
2024-04-18 17:22:21 UTC	7849	IN	Data Raw: db 12 b8 6c 7d 5e 6c 01 8c 14 02 50 50 1f 07 6e 45 c5 f3 b6 a6 26 15 d5 bd 31 7b 61 a9 45 a2 32 28 55 7f 4e c2 1c 07 c0 88 17 07 01 88 e5 68 7a 53 44 bb b1 cc 45 f5 22 c3 8c b3 be 4a 47 68 bc 66 db 7a e1 ba 07 40 46 19 c3 b8 7d d6 5a 2e 98 d5 f2 d6 05 d2 7f aa 35 2a f7 c1 fe 78 9a 9b 08 e0 f9 c3 a8 77 04 21 84 09 54 77 b2 72 47 7b 35 45 bb 46 6c 2a 5a ef 7c 17 a8 85 e4 d6 da 10 7e 9e e0 dd 2f 89 e5 87 4f a2 be ce ac 01 75 2a d1 ca c8 69 0c a3 e6 4f c6 0e 3a af 8d 57 aa 1c 89 4c a5 16 96 ba a4 91 55 af 6d af a3 8f 88 7d fc 8f 6f fa 95 11 f2 d7 35 bd 85 19 e4 bc d0 f7 cc d9 39 63 6d 73 3c f9 5f 6f e9 f6 c0 2c ad dc 9d db 02 87 36 28 16 74 ba 9f cf 9f 97 bd d7 55 5c 41 56 65 5f 57 b4 5c 24 5b d2 f1 32 cb 85 5a 8e 8c 92 97 f2 57 a9 47 69 c7 23 36 e9 66 c1 ae Data Ascii: l}^lPPnE&1{aE2(UNhzSDE"JGhfz@F}Z.5xw!TwrG{5EFlZ\|~/Ou*iO:WLUm}o59cms<_o,6(tU\AVe_W\$[2ZWGi#6f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49789	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	834	OUT	GET /images/speakers/60042/Stephen%20Abramson_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:21 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"22167-1696581916000" Last-Modified: Fri, 06 Oct 2023 08:45:16 GMT Content-Type: image/jpeg Content-Length: 22167 Connection: close
2024-04-18 17:22:21 UTC	7926	IN	Data Raw: ff d8 ff e1 0b a5 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 31 30 3a 30 36 20 31 34 3a 31 35 3a 32 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:10:06 14:15:28Zp
2024-04-18 17:22:21 UTC	258	IN	Data Raw: 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 07 01 01 00 01 01 00 ff e1 0e 5a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 Data Ascii: PhotoshopAdobe Photoshop CS68BIMZhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 201
2024-04-18 17:22:21 UTC	8192	IN	Data Raw: 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 Data Ascii: 2/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/R
2024-04-18 17:22:21 UTC	5791	IN	Data Raw: ad cc aa f5 e8 9f 22 bf a6 f2 06 d7 fe 38 a5 18 0c 01 41 e3 24 e2 4c d0 f2 2d fd c2 9c 04 82 3f 4e 71 4f ad 6d 11 32 d5 38 8f 6d 15 13 31 81 db 72 1b 16 28 00 9b f1 09 b8 90 55 37 87 10 5a 4d 30 03 81 84 7d 14 fa d4 47 85 eb a1 fa 4a 89 40 1c 2e 96 0a a8 8e 2e b2 61 8e 5c 73 96 96 fe d2 d2 a9 98 a6 40 a0 25 f0 0c e0 32 a9 fb a6 aa 95 24 5d 59 92 2a a2 8f ba 9c 82 c4 c0 94 40 45 67 1c a9 65 40 16 7b b3 20 c8 c9 b1 03 8f 40 ca 9a 5c ba 3c 72 66 43 fa 73 65 56 5d a1 52 43 f8 b4 b0 f5 c4 7c c6 38 85 19 b6 a5 fb ed b0 91 41 88 fd 70 32 ac b7 8b b8 c7 58 89 c0 4f 28 e3 80 6c e7 0a bf 22 b9 c0 30 ca 7b ef f6 24 88 18 1b 93 c5 3f 46 ae 05 13 d2 2c 06 78 45 26 41 21 7f 30 65 00 96 11 4d 66 93 c9 2a 32 0b 9b c1 61 39 4e fd ea ae 17 44 38 0e 7d 69 13 46 6a e0 11 fb Data Ascii: "8A$L-?NqOm28m1r(U7ZM0}GJ@..a\s@%2$]Y@Ege@{ @\<rfCseV]RC\|8Ap2XO(l"0{$?F,xE&A!0eMf2a9ND8}iFj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49791	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	816	OUT	GET /images/secure-payment-stripe.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:21 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"13472-1531828297000" Last-Modified: Tue, 17 Jul 2018 11:51:37 GMT Content-Type: image/png Content-Length: 13472 Connection: close
2024-04-18 17:22:21 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b4 00 00 00 4e 08 06 00 00 00 89 c4 3c 4d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRN<MtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-04-18 17:22:21 UTC	257	IN	Data Raw: cd 68 8d 47 66 b8 89 37 db 78 22 fb b2 c5 8c 3d 64 2f 47 c9 15 0b 60 e1 55 bd 10 59 96 ff eb 1f 60 f1 e5 23 4b 1f 85 75 b8 1f fe b4 7c 0c 92 55 6a c9 c8 41 ce e2 4a d8 4b b3 10 2a ab 44 c0 ee 81 37 3c 46 76 77 14 21 52 d3 76 7b 29 5c 3e 0d 6d 44 05 0e ed ed 82 af 78 0e e6 2f be 15 59 0b 4a 10 18 19 c5 d8 c8 20 9c 59 f9 48 cf cc 24 fe 1c 44 66 24 13 f9 2e a2 11 9d 7f 80 32 d6 4b 86 58 19 d4 b0 89 a1 08 0f 57 d4 24 9f 15 d3 2a 97 4a 1d 9a 85 ff 8a da f1 dd d7 56 e0 ac b5 51 b4 67 75 61 db 81 36 e1 b3 bc 64 51 31 56 2d 29 43 67 db 00 7a 06 c6 04 c0 f2 33 9d 22 80 61 61 69 06 56 12 d7 db f2 46 33 6a 48 f5 7d e6 27 cf e2 a1 97 0e e3 7b 7f 77 16 56 91 54 b7 50 07 1f ac ef c1 73 04 e8 48 ef 08 ae bf 69 39 74 1a 88 96 67 0e a2 a9 cf 4f 13 71 e4 e4 bc 1c 2c 3d 49 Data Ascii: hGf7x"=d/G`UY`#Ku\|UjAJKD7<Fvw!Rv{)\>mDx/YJ YH$Df$.2KXW$JVQgua6dQ1V-)Cgz3"aaiVF3jH}'{wVTPsHi9tgOq,=I
2024-04-18 17:22:21 UTC	5288	IN	Data Raw: 07 19 0b 06 24 28 aa bd 24 5c a3 61 b8 43 41 dc 3a 37 03 ae 58 04 ed 7d 01 cc 6b 6f c2 8d 0b f3 b0 6c 71 11 ee 76 cf 46 ff fa 9f a2 cb 1a 84 33 d3 8b 03 4d 01 54 cc cc 44 17 69 c6 f6 3f 6c 81 7b 61 15 42 45 79 a8 fb d8 f5 38 fb 5b 9f c6 48 4b 27 9c 9d 3d d0 e6 ce 44 27 4d 88 ca c6 7a b4 dd f6 45 c4 c2 c3 f0 d2 98 67 92 46 f2 5b dd e3 9e 2c 45 6a 0b 0b e5 9a 90 86 63 34 c9 2f 9d 9d 4f f4 c2 4d 9c b8 07 fb 09 b8 17 cd cd 47 25 19 6a fd 44 31 78 35 97 25 e8 67 2f 98 85 74 87 8d 97 9f b1 9a 40 ee 25 ae ef 27 ad 50 90 ee c0 08 4d 9a 41 ba 76 16 dd 53 4a 86 e8 10 5d b3 99 68 44 29 51 99 19 44 1f 42 24 b9 dd 64 70 67 79 6c 38 77 56 3e f2 49 18 cd 23 70 fb 3c 76 12 20 0d 98 3f 23 17 b7 5e 30 17 c7 fa 46 c9 be b2 61 2b 69 49 5e b9 bc f3 f6 0b c9 16 b2 a1 a5 7b 04 Data Ascii: $($\aCA:7X}kolqvF3MTDi?l{aBEy8[HK'=D'MzEgF[,Ejc4/OMG%jD1x5%g/t@%'PMAvSJ]hD)QDB$dpgyl8wV>I#p<v ?#^0Fa+iI^{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49792	142.250.105.104	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	817	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=819939597&_u=IGBAgAABAAAAAGAAI~&z=822565831 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:21 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:22:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:22:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	564	OUT	GET /images/slider3.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:21 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"74871-1671800650000" Last-Modified: Fri, 23 Dec 2022 13:04:10 GMT Content-Type: image/jpeg Content-Length: 74871 Connection: close
2024-04-18 17:22:21 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 67 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:21 UTC	258	IN	Data Raw: 00 00 00 00 00 03 80 1f 3f bc 2a 3c a8 8d 23 0a 8c 0e dd be e1 2b dd 5d 82 34 00 00 00 00 00 01 40 80 40 20 10 00 00 28 00 28 00 a0 00 00 00 80 02 00 00 00 00 00 00 00 a8 00 0a 07 87 bc fa 85 47 00 ae 59 fd 26 6a c7 d1 fb 3f d3 b7 99 15 f4 d0 17 a6 5c 80 e9 02 a4 80 d0 09 02 48 09 00 10 02 14 08 00 00 00 82 8b d2 c8 a7 4b 1a 62 f4 a0 62 c2 00 45 50 00 00 01 00 00 00 00 0a 04 00 00 20 00 00 02 8b 20 40 2a 20 8c 0e 0e c9 6a dc 79 9b 61 40 cb bc 36 9a d1 71 02 3b ea a1 69 c4 a0 ef 78 71 0b f3 02 75 5d b8 9e 01 1a aa 69 db 97 06 15 a2 08 00 00 00 2a ad b9 0d 31 56 3b 13 57 1a f6 bc 46 af ca fb 75 26 98 74 a5 c0 6a e2 81 00 80 00 00 00 00 08 c0 01 1b 02 48 12 40 92 06 5b 2a 32 ee b9 81 50 14 8a cd b8 15 15 fa 5f 90 1f 9b cb f5 2f fd 4c cb 6c 01 50 45 2a 01 40 Data Ascii: ?<#+]4@@ ((GY&j?\HKbbEP @ jya@6q;ixqu]i1V;WFu&tjH@[2P_/LlPE*@
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 08 a0 00 14 00 a8 00 00 00 00 01 00 00 03 60 00 a0 00 a0 00 01 40 a0 0a 8a 05 00 05 08 01 50 14 0a 51 40 48 45 40 50 00 50 8a 50 02 81 50 15 04 70 ce 4a d4 73 7e 92 34 e2 45 00 f6 76 7e 93 51 8e 9e a2 b2 a1 49 02 80 02 a0 28 14 82 a0 00 00 48 09 2a 20 14 0b 00 58 22 ac 00 00 04 02 a0 34 00 00 44 02 80 0a 00 02 81 40 00 00 00 00 00 00 00 00 40 50 20 02 00 00 a0 02 a0 00 82 05 00 00 00 00 00 00 1c 00 f9 fd e1 51 e6 a9 1a 47 b8 56 5e c0 77 ed f7 09 5e da ec 11 a0 00 00 01 40 00 00 04 00 06 58 00 20 14 00 14 00 00 00 02 80 00 00 02 00 08 00 00 00 00 50 00 00 00 78 7b cf a8 54 70 0a e7 9f d2 4a b1 f4 3e cd f4 ed e6 65 5f 4d 01 64 0b 20 24 20 50 00 05 44 00 05 10 04 32 0b d2 c6 ae 2f 48 d3 15 24 05 22 80 40 00 00 01 40 00 00 04 00 00 00 14 00 10 00 40 a0 00 01 Data Ascii: `@PQ@HE@PPPPpJs~4Ev~QI(H* X"4D@@P QGV^w^@X Px{TpJ>e_Md $ PD2/H$"@@@
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 00 14 08 ef 45 bb 0b 89 5b d6 ce 10 31 a2 a3 c0 ef 79 7a 9d 7e 63 85 ef af fd 75 ed 6c fa ad 32 f4 33 d3 5f 9d fe bd 32 f9 18 75 73 79 98 6b e5 69 7b 59 b5 20 b1 b8 f3 0c 9d 2b 90 14 08 07 97 bb fa 8b fa 4e 9c 78 e3 fa 7a e0 69 cd f4 96 cb c8 e2 f5 39 77 5f 45 f9 a3 5c fa c7 e9 e3 c6 74 70 7a bb 4f a6 fc ce 7d bb 7e 7e 3b 3d 99 97 47 cd 3b 3c ae dd af d6 5e 4c cf 5e 37 f9 fa f6 1c dd dc 33 b4 af ab 8d 0d f2 c7 5e b9 3c b8 d7 13 58 c6 c7 b2 ae 69 57 cd 1c ab b4 50 04 11 94 63 5f 99 7e 00 3a 6d 00 1d 27 88 15 51 73 f8 81 a0 20 00 10 02 00 40 08 01 00 00 a0 00 80 00 01 00 00 00 00 00 00 20 00 24 81 1b 02 48 09 02 36 54 49 22 a8 11 ec 04 a9 51 f1 7e ef fe 5f ff 00 52 34 f9 e4 55 5b 95 1a 08 00 00 00 0d 22 8a 00 00 14 22 a0 00 00 00 00 14 00 04 01 ef 31 a6 2f Data Ascii: E[1yz~cul23_2usyki{Y +Nxzi9w_E\tpzO}~~;=G;<^L^73^<XiWPc_~:m'Qs @ $H6TI"Q~_R4U[""1/
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 1d 55 bd 29 8b 59 e5 29 99 35 d3 5e 1b 11 5d 2c 9d aa 54 4c 32 9c 15 2b d1 42 b3 5a dc a8 e9 50 8c da 6a db 41 1e 75 97 e7 6b 89 a9 53 ae 5a eb 65 73 3a d8 1f 3f ee 5d cf f7 6b 8e ae 1a d2 cf 86 bf ec 67 a7 4e 1e 47 5a d5 db 24 bb 42 4e f7 7c f9 2f 89 96 9c 3a 7a dd 6d 6b 6e b5 7c 74 03 a2 d1 aa 57 e6 99 51 e6 15 d3 be ad 52 c4 9b f9 ba 26 c9 7e 44 87 4f 35 69 d5 65 45 a3 7a eb c0 a8 8e ef 26 4e ad b4 84 bc 80 cd 17 cd e3 ba 08 ed 46 d6 04 9d a1 64 95 f9 f1 28 e1 65 6a b8 7a 34 f5 f3 03 a5 93 75 eb da 77 44 56 12 6e b3 c8 a8 d5 2f 68 80 23 4e 58 1d 29 8d b2 6a c8 3c 2e 76 1a b8 d2 a5 ab aa 7f 02 6a e3 52 e6 38 91 5a ac 81 a4 e1 34 07 6a ea 8c b4 eb 54 e5 05 7a f0 a8 83 51 9a f4 d5 b5 a7 03 4e 75 d5 34 d1 51 e7 cd 48 7d 5c 1e 8c bc b3 d4 73 36 e6 a0 48 03 Data Ascii: U)Y)5^],TL2+BZPjAukSZes:?]kgNGZ$BN\|/:zmkn\|tWQR&~DO5ieEz&NFd(ejz4uwDVn/h#NX)j<.vjR8Z4jTzQNu4QH}\s6H
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 47 9b 3f ad 19 ad c7 e8 fb 27 ff 00 ad 4f 22 0e f2 00 0a 00 20 05 0a 20 28 00 20 00 00 50 00 00 00 01 0c 0b 0c 04 00 80 10 05 84 14 84 40 2a 23 e0 01 01 48 00 00 00 00 00 01 40 01 00 00 00 00 00 00 03 36 f2 92 8b 5d b6 80 1c 40 20 04 02 8c 5a 93 6e ae 2b 66 04 54 69 42 85 e2 01 52 16 ff 00 80 17 a1 6b e2 a3 f0 03 51 cf 58 e2 03 a5 4c f1 02 e8 03 42 04 a2 84 80 d7 90 0d 79 01 35 01 a9 00 04 00 80 10 80 42 02 00 02 00 02 14 00 80 18 19 7b 81 e3 fb af f8 8f e0 07 c0 7b 85 42 0d ad 8d 20 00 80 00 a3 68 22 80 00 05 28 a0 00 00 00 00 00 00 04 1e d3 4c a8 14 a0 00 80 51 40 a0 50 29 00 0a 50 02 a4 41 60 0f 56 25 18 c0 af 72 a2 59 a8 03 8b 68 a8 c3 dc 08 c0 cd 80 cb 40 65 81 a4 06 a0 a2 3c 55 64 b1 65 b1 ce dd bb dd 1c ef 0e dc fe bf fa b8 d3 4e 19 ce c7 69 75 ec Data Ascii: G?'O" ( P@*#H@6]@ Zn+fTiBRkQXLBy5B{{B h"(LQ@P)PA`V%rYh@e<UdeNiu
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: db d2 c0 f6 76 da a4 19 7b ab b1 05 00 00 0a 00 00 50 22 80 02 05 40 88 00 0a 80 a1 54 20 04 0a 00 08 80 02 a0 41 85 40 01 10 08 c0 80 40 00 0a 21 00 0a 07 8b bb f5 94 70 0a a1 1c bb 8f 49 2b 51 f5 7e cb fe 3b f3 33 56 3e 92 22 a8 0b 59 56 b2 f6 2c 89 6e 15 b2 b5 53 5c 49 49 75 a0 a9 28 0b 28 07 52 00 9a 60 50 23 70 01 39 02 80 03 cf 9e d3 92 39 68 74 e7 c7 1e ef f5 cc ac ba 61 a7 5b d7 65 b9 8e 9d bf 3e bf 98 f4 ff 00 03 2d 00 79 7b de d1 65 ab c9 45 fd da ef ff 00 72 3a 71 d6 39 7e 9c 6f f5 f3 0e cf 3a 81 f5 7b 2c 9d 7d b5 1b de bf 2b f8 1c 3b 99 5e af ce ec 77 30 da 01 1e c5 41 01 48 00 00 00 00 00 00 00 00 11 45 20 01 00 00 00 00 00 06 03 88 00 00 66 db 96 15 56 c0 52 00 19 c9 5a da 8e b6 52 9e e8 b0 a9 8a 94 a2 6a 95 85 e0 2d 49 1a 23 40 18 c9 9b 16 Data Ascii: v{P"@T A@@!pI+Q~;3V>"YV,nS\IIu((R`P#p99hta[e>-y{eEr:q9~o:{,}+;^w0AHE fVRZRj-I#@
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 61 b5 00 01 ec 04 5b 22 a2 91 40 33 6d 8b 12 b2 54 00 00 00 00 08 00 08 00 08 04 00 05 02 01 40 a0 00 00 02 30 23 03 2c 21 4d c5 58 d1 15 18 19 be c2 07 f2 bf 20 8f cc df d7 6f 36 1a 60 0d d7 61 12 a9 40 00 04 06 d6 c1 02 80 14 0a 80 a0 00 00 08 05 00 80 00 01 ea ca e2 a6 99 63 07 d4 10 af 45 54 d8 d3 2e c0 4b 34 07 36 c8 30 d8 55 ae c1 16 9b 81 d1 3d 40 99 75 69 01 8c af 44 81 1d 7b 74 07 5c b7 85 00 73 4f 40 2a 60 3a 80 d2 b0 1c f2 29 03 97 4e a1 5e 9c 08 22 f7 39 7a 28 07 ca c9 77 6b 11 b9 1b c1 ea 4c 44 af 4d de c5 65 10 00 37 4a 81 d1 54 0a 02 40 c5 f2 40 1c 93 6d 85 7b 30 a8 a8 16 ec 0e 4d 81 ce ec 23 28 0e d8 d0 1e 8a 80 60 1e a8 0c 01 16 e0 74 4f 40 33 dc 62 57 c6 f9 88 8f 83 9f 13 c7 91 ae 1c 0c 75 31 d6 5d 73 23 48 01 90 40 0d 00 4f 50 35 65 2a Data Ascii: a["@3mT@0#,!MX o6`a@cET.K460U=@uiD{t\sO@`:)N^"9z(wkLDMe7JT@@m{0M#(`tO@3bWu1]s#H@OP5e
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 71 03 36 dc 8a 90 04 0a a1 1d 31 bd 42 56 b3 6c 5a 47 04 45 69 6c 00 0d 30 33 b0 14 0d 55 c3 2a 3b 2d 54 04 79 3b 8c 50 e5 12 b5 2b cd d4 d1 1a 55 69 20 8f 47 28 0e f4 bc d7 c4 a9 63 68 a8 d2 08 dd 77 28 ea 98 46 80 48 16 40 a8 0d 20 28 15 05 2c e1 01 c6 cc 23 58 ea 07 58 80 ad d1 f0 08 91 f3 04 78 3e ee f6 44 eb c6 f8 f5 f3 11 87 40 08 40 02 01 51 46 82 29 46 6f b1 2a c7 33 22 85 02 00 49 0a a9 04 6d 23 42 c8 44 00 c2 84 09 28 a9 84 74 ad 8a 33 89 ea 21 4c 8c 52 39 19 56 e8 58 95 d1 bd 1c 6e 69 1e ee d7 0f 46 34 b8 bd 5b 38 75 75 e8 e6 63 d1 8e bf 32 9e 26 5a 75 ee bb da f6 f4 e8 c7 ae 4b 69 5f 0e 6d 9a d6 73 5e 7c cb de ad 6b 9d bc 9d 3a ad 63 52 4e a9 79 95 c7 27 da 13 a2 c9 87 22 8e 15 bf fb 9d 27 5a e5 d7 38 f0 e4 c7 97 1b 5d 4b 49 84 d6 a8 d6 a6 3d Data Ascii: q61BVlZGEil03U;-Ty;P+Ui G(chw(FH@ (,#XXx>D@@QF)Fo3"Im#BD(t3!LR9VXniF4[8uuc2&ZuKi_ms^\|k:cRNy'"'Z8]KI=
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 10 00 80 00 00 02 94 00 00 00 40 02 00 00 15 00 f5 df 12 83 78 c6 b8 d5 43 68 8d 1e dc ea 30 d5 f6 f4 18 69 8d 43 68 15 bc 7b b6 58 95 c7 23 f9 99 9a b1 82 2a 94 77 c5 a5 59 63 34 b0 19 61 50 0d 20 3a 54 ac b6 54 61 91 59 64 56 40 a0 69 00 b1 50 48 2b 69 04 68 a8 a0 49 40 3a 90 07 60 33 20 58 02 11 5c f2 05 8e 16 b4 19 56 7a c1 8d 56 ca 50 1e ba bf 94 d3 2d 54 23 a2 2a 2c 80 90 34 80 da 03 a2 0a d4 c1 07 3b 39 2a 35 8a 92 c2 bb 5b 45 04 47 97 2e e5 1a c2 06 de ac 0e f8 b4 a9 15 a8 96 05 d8 83 cd 65 39 0d 23 d0 92 e8 86 45 78 72 51 e3 c9 2b 63 4c ba 75 55 a8 b2 90 1f b6 c5 6d 51 9b cc 6e 77 58 b7 67 45 c0 e7 78 74 9f a3 1f b6 c7 3c 4c 58 e9 3a 47 da 51 e8 9c 32 63 5a e5 97 b3 c9 4d 56 a8 98 ba f3 b9 5a 01 65 80 00 02 00 a0 26 ab 76 06 5f 73 8a bc 67 c8 bf Data Ascii: @xCh0iCh{X#wYc4aP :TTaYdV@iPH+ihI@:`3 X\VzVP-T#,4;9*5[EG.e9#ExrQ+cLuUmQnwXgExt<LX:GQ2cZMVZe&v_sg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49794	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	564	OUT	GET /images/slider2.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:21 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"71972-1671800647000" Last-Modified: Fri, 23 Dec 2022 13:04:07 GMT Content-Type: image/jpeg Content-Length: 71972 Connection: close
2024-04-18 17:22:21 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 67 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:21 UTC	258	IN	Data Raw: 53 02 f9 40 47 85 81 97 85 80 f2 58 43 c9 60 5f 29 85 3c b6 03 63 02 6d 6b b0 0d 24 fb 80 6b dc 06 5c 81 35 02 39 01 af 70 41 2b 77 05 69 55 81 a5 56 05 da c0 aa ac 0d 2a b0 2a ab 20 d2 4c 0d 00 a9 45 02 30 37 47 00 74 59 74 03 2e d6 b5 92 5d 58 57 d5 e3 62 f2 f1 25 db da 42 b9 f2 ec ba 19 ad 47 86 d0 65 a7 3b f4 03 c5 99 75 2a 57 83 33 d4 d3 2f 3d 98 47 32 8d f6 01 8e d0 20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 2b 60 2a c0 eb 47 d8 06 a6 2c 15 e8 4e 6a 41 78 ff 00 cc 28 fa 3d 85 46 2c 07 36 04 60 42 8a 82 34 80 da 03 48 0d 20 34 80 d2 02 a0 34 80 d5 40 eb 5e 84 56 80 01 0a 83 02 01 96 06 58 19 60 65 81 92 88 04 00 00 00 1e 72 a2 48 09 01 20 24 04 80 90 12 02 40 48 09 02 c8 09 02 c8 09 02 c8 09 02 81 40 a0 00 a0 24 00 00 00 00 a0 02 a3 Data Ascii: S@GXC`_)<cmk$k\59pA+wiUV** LE07GtYt.]XWb%BGe;uW3/=G2 P+`G,NjAx(=F,6`B4H 44@^VX`erH $@H@$
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 92 04 90 12 80 68 02 50 09 01 20 34 00 03 40 12 02 40 a0 00 d2 22 a8 00 00 00 cb 41 11 22 a2 c0 54 80 86 d0 1b 46 88 d3 00 aa c2 b6 91 02 00 a1 40 00 00 a1 11 a9 40 15 60 0b 01 54 00 00 28 14 04 01 60 0b 00 20 04 01 60 04 00 02 80 80 10 02 00 40 08 01 00 20 04 00 80 10 02 00 40 08 01 00 48 40 c2 01 86 d4 03 6a 06 1b 50 30 da 81 86 d4 13 0d 88 18 9b 10 30 d8 81 86 c4 0c 36 22 18 6c 45 0d 88 18 6c 40 c3 62 06 1b 10 30 d8 81 86 c4 0c 4d 88 18 6c 40 c3 62 06 1b 10 30 d8 81 86 c4 0c 5d 88 18 6c 40 c5 d8 81 86 c4 0c 36 22 18 bb 10 30 d8 8a 61 b1 10 36 20 1b 10 30 d8 81 87 96 81 87 96 81 87 96 81 89 e5 54 18 be 5d 41 87 96 81 89 e5 20 61 e5 20 b8 79 48 26 1e 52 01 e5 20 a7 92 82 1e 4a 01 e5 20 61 e4 a0 27 92 80 79 35 06 1e 45 7b 81 87 91 5e e0 61 e4 57 b8 18 79 Data Ascii: hP 4@@"A"TF@@`T(` `@ @H@jP006"lEl@b0Ml@b0]l@6"0a6 0T]A a yH&R J a'y5E{^aWy
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 40 a8 11 40 a8 0a 80 a0 69 01 40 a8 0a 05 02 81 ba 75 03 d3 4e 84 56 c0 15 02 2a 15 10 04 80 0a 80 02 00 40 00 00 80 18 1e 60 a4 00 02 80 00 05 00 41 40 01 40 40 00 28 00 00 00 01 60 00 08 00 02 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 e3 cc ca e9 c6 b5 56 93 d7 de 58 8f 93 20 24 04 85 24 22 48 09 0a 29 6e 12 96 11 d6 bc 5e 55 fe 9c 57 7e e6 07 5a fa 57 3a dd 71 ed ff 00 93 5f 84 83 5d a9 e8 7c 87 f5 e4 a5 7d 92 ff 00 80 c3 5d a9 e8 58 ff 00 3e 5b 3f f8 a4 be fd c3 0d 77 a7 a3 f0 ab d6 b6 bf b6 cf f0 81 89 ae f4 e0 70 eb d3 0d 3d ad 27 f7 94 76 ad 2b 55 15 49 2e e5 a0 1a 80 10 05 01 00 58 00 00 04 01 60 04 10 34 02 4a 0a 6f 40 65 e4 44 d3 18 79 d2 1a ae 6f 91 dc 4d 19 79 6e c0 93 77 d5 c2 18 16 4e b1 32 e7 b1 75 2e 09 2a 25 34 94 f5 60 79 af cc Data Ascii: @@i@uNV@`A@@@(`VX $$"H)n^UW~ZW:q_]\|}]X>[?wp='v+UI.X`4Jo@eDyoMynwN2u.%4`y
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 2c 81 08 05 12 00 40 11 c9 01 01 a2 80 14 20 15 35 20 ba 94 69 04 50 05 00 00 50 00 50 28 17 40 0d 01 96 04 00 00 00 12 c1 1c 1f 52 8a 8a 28 00 3d 3c 5e 16 5c ee 7a 53 bc 2e 3e ef 1f 8d 8b 06 35 5a 28 ef 7d ac 9a 5a e7 cc be 3d 9b 5e ac cd ab cc 7c 4e 4a aa 7a 75 1c d5 b1 c0 db 0d 53 1d ae f4 5e f0 3b 2c 78 f1 a9 b6 b6 09 ae 57 e5 3b db 65 5c f8 20 b2 39 e5 e2 37 f3 5c e7 6b a4 72 ab d8 f4 30 d3 d7 87 2c 92 8f 45 6d 21 5a 48 22 c0 12 00 40 12 0a 00 46 80 c3 20 24 07 4a a0 3a 24 00 00 54 68 08 04 60 61 a0 31 60 39 b4 41 18 19 6c a1 4a 3b b8 45 93 52 d7 ab 1e 05 53 b7 3c b8 f5 d3 ac 41 b6 18 60 61 80 03 49 81 50 15 01 d6 8c 0e d4 60 7a 28 d3 d1 90 75 f2 31 b5 d0 9a d6 39 e5 e0 e0 c9 58 75 43 55 f2 39 9e 9f 7c 2e 6b ad 41 e5 e3 69 ae c2 a0 41 00 00 02 81 aa Data Ascii: ,@ 5 iPPP(@R(=<^\zS.>5Z(}Z=^\|NJzuS^;,xW;e\ 97\kr0,Em!ZH"@F $J:$Th`a1`9AlJ;ERS<A`aIP`z(u19XuCU9\|.kAiA
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 31 cf bb f4 e6 d2 55 74 ab 84 dc cf dc 6d cc cd 8d d3 8d af d4 dc d8 2c 72 e3 38 2c 2b 8f a9 e3 5f 2e 55 d2 ca 1f b5 11 1f 22 f5 d4 8d 38 db aa 87 ec 20 e9 65 6d ab 25 7f 99 4d 57 8a ed 45 1e 9b 5d 5b 12 b5 5e 96 52 8a 8f 1b b7 cc 65 5b ab f9 5a ee 7a 7b ca 33 f9 40 e7 76 41 cd be ac 09 8d 4d a4 0f 5f 1f 1e fc ca cf e9 c6 a7 da fb 0a 3a 66 7b 93 6b de 07 1c 36 8b ea 07 a9 ee 4d 5e ae 2c bb 40 d2 58 f3 ad 7e 4c 9d e9 68 fd a8 e7 78 95 9b cb 19 38 f9 68 a5 d6 6b fa 96 a8 e7 79 b1 9b 19 a4 49 23 2f 4d 19 d6 34 e8 db f6 16 d1 d3 0d 5b 7d 44 1e b5 09 1b 57 c0 f5 bc 71 cb 59 17 4c 95 52 fc 56 9f 74 12 b5 1f 38 8a fa 5e 9b 79 c5 6a 7e 97 f6 30 b1 ec 20 01 40 32 8c b2 02 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 02 20 10 00 00 00 00 00 00 05 40 68 a0 c0 cb 00 05 Data Ascii: 1Utm,r8,+_.U"8 em%MWE][^Re[Zz{3@vAM_:f{k6M^,@X~Lhx8hkyI#/M4[}DWqYLRVt8^yj~0 @2 @h
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 51 8f 9a ce 28 9b 7d c9 49 05 a7 1b 93 77 14 c5 67 df a3 fb 40 ea b8 19 16 b9 72 53 1a ee 6f 73 f8 56 40 d5 70 71 57 47 93 35 bb aa 95 57 ff 00 d9 91 5a bd a8 a9 e5 bc 58 b1 57 b6 75 ba 9f 1d 6c 07 3c 39 d6 3d f5 e3 62 dd 6c b5 74 b3 73 67 b6 dd 54 25 53 4c b7 8f d3 b9 79 1e b8 d6 25 e3 a3 f8 3d 40 f1 e4 a3 c7 92 d4 7d 6a da 7e e2 2a 55 b4 d3 5d 56 a8 83 eb a6 9a 56 5d 1a 92 34 00 02 c8 09 01 20 24 04 80 90 12 02 40 48 09 01 20 24 04 80 90 12 02 40 8d 81 35 01 2c 0b 20 24 04 80 90 12 04 6c 00 16 40 48 09 02 c8 43 70 16 40 49 43 70 17 70 16 40 48 12 40 a9 81 a4 c0 b2 04 76 40 49 02 c8 00 2a 70 07 45 aa 39 d7 48 91 04 68 90 84 84 69 30 aa c0 80 00 01 9b 32 0e 36 65 1c ac 54 66 cc 0c 49 51 50 1d 6a f4 2a 39 e4 7a 9b 8c d6 0a 80 10 80 06 58 1c f2 74 03 cc fa Data Ascii: Q(}Iwg@rSosV@pqWG5WZXWul<9=bltsgT%SLy%=@}j~U]VV]4 $@H $@5, $l@HCp@ICpp@H@v@IpE9Hhi026eTfIQPj*9zXt
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: a4 05 80 34 8a 33 64 07 1b a2 0b 46 06 ac b4 03 95 90 56 1a 80 2a 60 50 8c b0 ac b4 04 02 90 42 8a 01 38 64 1d 69 70 2d 99 46 aa f4 01 3a 81 ba b0 36 fa 01 2a e1 81 e9 c7 60 8e 8f a0 1c 6e 80 e3 74 15 d7 15 b4 80 3c de a1 5d 15 8c d5 8f 08 54 03 d6 71 74 00 00 00 00 04 00 80 28 00 00 00 00 00 00 01 40 0a 00 00 00 80 14 00 00 2c 14 00 00 00 04 61 19 0a 01 50 14 22 a0 29 45 80 20 11 81 ce c8 0c 05 02 23 60 40 34 90 14 08 d8 54 76 20 ce e0 33 25 43 d5 29 e6 70 eb 93 b6 8d 3f 73 d0 b1 9a f8 c0 00 fb 9e 76 4b fa 76 0c a9 c2 55 d9 6f 6d 74 fc 0e dc 7c b9 f7 1c f8 d5 cf 6b ce 2a da f6 5a bd aa 7e 25 ee 2f 0f a0 b8 7c ac 95 d7 16 c7 df 66 92 fe 27 29 5a b1 e3 e4 df 91 81 c5 b1 59 be cd b1 6f b9 b3 48 f1 bf ee 39 ac d5 30 5f bf a3 33 95 5e ce 27 07 d6 28 93 c7 86 Data Ascii: 43dFV`PB8dip-F:6`nt<]Tqt(@,aP")E #`@4Tv 3%C)p?svKvUomt\|k*Z~%/\|f')ZYoH90_3^'(
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 00 14 00 00 2c 81 64 0a 98 1a 4c 0b 20 24 0a 05 02 a2 0d 20 ad a0 34 05 02 00 01 20 69 01 a0 80 00 a1 40 20 40 00 00 01 54 08 00 60 46 45 2a e2 c8 a8 f5 e0 7a 35 ef 35 19 ae 8c a8 80 00 01 00 01 00 00 02 00 00 04 00 00 0a 00 08 e1 75 d1 01 8b 67 c6 bb 67 d8 4d 5c 72 b7 22 cf e9 51 ed d4 9a b8 e7 6b de df 53 6c 8b 8c c0 08 02 c0 18 75 02 40 1b 48 0b 00 20 09 00 20 04 01 52 08 b0 04 00 15 36 a0 86 d0 26 d0 a6 d0 24 20 1b 40 3a 84 4d a1 4d 80 4d a0 47 50 24 01 55 40 bb 00 6d 01 b0 22 6c 02 ec 02 ed 01 b4 06 d0 1b 40 6d 01 b4 06 d0 1b 40 6d 01 b4 06 d0 1b 40 6d 01 b4 06 d0 2a a9 45 84 06 5a 20 cb 40 66 02 90 c0 43 02 43 08 6a 02 40 92 03 70 0d c0 37 00 dc 15 db 8b 8f cd ca 93 fa 2b f3 5d f8 22 5a 49 a9 cd ce ef 91 f7 76 1c dd de 1c d6 f9 4d 44 b5 8c 79 dc 43 Data Ascii: ,dL $ 4 i@ @T`FEz55uggM\r"QkSlu@H R6&$ @:MMMGP$U@m"l@m@m@mEZ @fCCj@p7+]"ZIvMDyC
2024-04-18 17:22:22 UTC	6492	IN	Data Raw: 11 aa f5 0a f5 63 e8 11 d0 00 00 28 1c 33 5a 10 57 92 d6 d4 06 ed 00 f3 e6 c9 a1 07 8d b9 b0 1d 71 b8 2a 3d 34 6d 95 1e 8c 68 2b bd 50 1b 40 69 01 40 80 1b 20 92 04 6c a3 2d 81 96 c0 8c 08 40 82 8e 79 3a 10 70 b0 18 ab d4 0e 90 06 6e 07 2b 3d 18 1e 6b f5 22 b0 07 54 f4 02 34 06 18 19 61 5d f0 54 23 d5 b7 44 51 ab 28 41 0a 26 c2 bd 9c 75 01 1c 7d 41 7c e9 99 ad 47 ea 4c 28 00 a0 00 01 00 01 40 00 00 00 08 05 00 00 08 00 00 00 00 50 00 00 00 02 00 00 00 00 01 08 00 52 80 00 00 00 14 46 41 50 00 12 00 00 00 00 00 00 28 01 27 52 0a 80 14 47 d1 90 66 dd 09 5a 8f 36 45 a3 30 d3 69 7c a1 06 80 cb ab 80 30 e9 a0 54 75 e8 04 db ac 10 15 14 fd e5 13 cb 50 06 2d c7 a5 96 a9 3f 68 1e 6c de 93 c5 c9 ab a2 4d f6 ad 19 74 c7 9e de 93 9a 8f fe 9c d6 af 75 6d aa 2e a6 31 Data Ascii: c(3ZWq*=4mh+P@i@ l-@y:pn+=k"T4a]T#DQ(A&u}A\|GL(@PRFAP('RGfZ6E0i\|0TuP-?hlMtum.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49799	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	564	OUT	GET /images/slider1.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:22 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"84352-1671801814000" Last-Modified: Fri, 23 Dec 2022 13:23:34 GMT Content-Type: image/jpeg Content-Length: 84352 Connection: close
2024-04-18 17:22:22 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 67 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:22 UTC	258	IN	Data Raw: 1d d2 c0 c3 71 e7 de fc a6 6b 86 7b 78 76 fe 63 a3 9b dc b2 32 d1 40 ac cf ca c4 4a e5 63 89 aa cc 77 a1 96 8a 00 a0 0a 00 a0 52 81 00 20 57 4b 59 99 e9 63 a9 96 df 2f 77 f3 59 d6 38 5f ae 51 45 1e fb 1e 54 66 b5 cb a4 b2 24 57 0b 7f 31 d0 d5 49 f5 e8 49 b3 0d b4 ad 73 64 d3 1a e9 c7 8e 23 57 15 24 b2 22 80 1c 92 18 9a e6 af 26 e8 8d 79 4f 4a db 64 35 92 a3 0f 33 48 a8 82 32 83 c8 0f 1e e3 26 69 cd f3 e1 e7 61 a7 74 8a 3a 2f 29 07 8f 71 f2 3d a4 ad 47 8c 8a f7 fa 3f cf 9f f4 84 fe be bd 02 a8 00 00 00 00 20 a0 0a 00 00 e7 7b ca 22 57 9e 39 9a 73 76 59 19 6d cd e6 69 87 97 70 bc 41 63 ad 95 e0 03 85 d5 e3 04 7a 2c ac 00 db 44 57 c3 61 a6 58 18 98 12 20 68 2a 01 89 e6 41 90 0b 22 8d a0 29 00 a0 00 00 06 06 00 a8 0d 00 40 38 80 00 00 00 00 00 00 00 00 04 e2 Data Ascii: qk{xvc2@JcwR WKYc/wY8_QETf$W1IIsd#W$"&yOJd53H2&iat:/)q=G? {"W9svYmipAcz,DWaX h*A")@8
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 80 a9 02 a0 2a 05 a8 54 6c 22 14 18 10 0d 2c 80 a8 0a 00 0c c7 30 8d a0 aa 05 02 b0 8c 81 50 1a 40 68 0c 4f 31 48 44 41 a4 54 50 28 15 01 a0 2a 02 a0 00 50 28 45 02 80 03 8e e6 f4 ad 46 2e 34 ab ce a4 ab 1c 56 e7 74 f2 82 27 a5 f2 aa fe f1 e5 04 3d 1e 57 ad bd fd 31 e8 c5 57 77 cf 2b 43 d1 8d 2f dc 1f fc 48 7a 3c ad 3d 43 f4 97 bc 7a 3c 9a 7d 43 f4 97 bc 7a 3c 94 df fe 8a f7 8f 47 93 56 f5 7f c2 3d 1e 4e ae ed 7f c0 3d 1e 4e be e7 8d 8f bc 7a 3c af d4 df ff 00 db fd e5 f4 9e 4f aa bb ff 00 b7 fb 58 d3 17 ea e7 ff 00 b7 fb 58 d3 0f ac 7f fb 7f b5 8d 30 fa df ff 00 cf f6 b1 a6 1f 5a bf f6 ff 00 6b 1a 61 f5 b1 fd 0f b5 8d 30 fa d8 7e 83 f7 8d 30 fa db 7f a2 fd e3 4c 3e ba d7 e8 bf 78 30 fa eb 5f a2 fd e3 4c 3e ba cf e9 4b de 34 c3 eb ac fe 94 bd e8 18 7d 75 Data Ascii: Tl",0P@hO1HDATP(P(EF.4Vt'=W1Ww+C/Hz<=Cz<}Cz<GV=N=Nz<OXX0Zka0~0L>x0_L>K4}u
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: f1 5d cb ee 31 5a 8d 34 b4 91 5d bd 2e 35 b9 37 da 07 d7 a6 06 90 20 94 01 40 14 01 40 2d 00 50 05 00 b4 0a 50 05 00 00 02 81 00 01 40 50 05 00 50 05 00 50 0a 00 05 00 a0 00 a0 00 00 02 a0 3c bb d7 f9 6c 94 7c ab 1c 48 35 76 e5 10 1e 39 c9 ca 54 03 b5 9b 60 7a d4 16 9a 01 d7 d2 e0 96 e2 5f 68 1e 5b d7 f7 4f d5 27 1d b3 d1 37 27 05 a7 97 1a 92 b5 fd 75 7d 7b 93 71 95 fb d2 a6 0d d5 c6 3e c3 2d 31 73 6f b5 82 7d 5b b2 73 e7 a9 b1 ad 63 84 56 d2 b4 8d e9 c6 99 34 c6 d4 c9 ff 00 56 ee e3 79 66 8e 17 dc ed be 2f ee 62 49 4b b1 c2 e6 fb 75 3a 56 79 72 c0 be 63 3e ea 25 15 15 39 f8 e7 2c 52 7c 10 59 3f e8 ee 4e 8d c7 c2 97 05 80 c2 d4 8d db ef 2a bf 79 72 26 d7 7b 57 a6 a9 d5 b7 58 bc a5 c4 cb 52 b7 6f 6d 19 fa 84 15 29 09 2d 6d 77 16 5f c6 6c fd 77 f5 5b 3a 1d Data Ascii: ]1Z4].57 @@-PP@PPP<l\|H5v9T`z_h[O'7'u}{q>-1so}[scV4Vyf/bIKu:Vyrc>%9,R\|Y?N*yr&{WXRom)-mw_lw[:
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 04 00 00 00 14 08 04 6c 0e 37 6e a8 84 78 ee 6f 12 79 93 57 1c 5e f8 6a e3 17 77 5a a2 b1 1a 63 cf 3b d5 26 8e 6e e0 1a 8d d0 33 3b 98 01 e7 94 aa 45 60 21 50 09 81 a0 a0 0a 81 1b 02 54 21 50 15 01 a8 0b a8 0d 29 94 69 5d 6b 26 07 d0 d9 ee 2a a8 d9 65 4a fa 36 ee 54 d2 3d 09 d5 10 00 f0 7d 74 4b 81 f5 b1 18 1f 5b 01 81 f5 90 18 2f d6 40 60 7d 5c 06 0f 35 f9 a9 cd c9 71 20 e2 c2 b4 bc ab fa 8a 8f 6c 77 11 51 49 e6 86 0b f5 30 18 69 f5 30 18 69 f5 30 18 69 f5 30 26 1a 7d 44 0b 86 af d4 40 98 69 f5 10 18 69 d7 80 c3 57 af 01 86 9d 78 0c 34 eb c3 98 c3 57 ad 0e 63 0d 3a d0 e6 30 d3 ad 0e 63 0d 3a b0 e6 30 d5 ea c3 98 c3 4e ac 39 8c 34 ea c3 98 c5 d5 ea 47 98 c3 4e a4 79 8c 34 ea 47 98 c3 57 5c 79 83 4d 71 e6 0d 35 c7 98 34 d7 10 69 ae 20 d3 5c 41 ab ae 23 0d Data Ascii: l7nxoyW^jwZc;&n3;E`!PT!P)i]k&*eJ6T=}tK[/@`}\5q lwQI0i0i0i0&}D@iiWx4Wc:0c:0N94GNy4GW\yMq54i \A#
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 5f a7 60 47 b7 01 f4 e0 3e 9c 09 f4 e0 3e 9c 07 d3 80 fa 74 05 fa 74 50 e8 00 e8 00 e8 80 e8 80 e8 80 e8 00 e8 01 3a 20 4e 80 19 e8 80 e8 a0 33 d1 44 56 6e 41 2c 82 25 88 d6 e2 03 ec d8 54 8a 25 58 f4 22 34 54 80 02 a5 10 08 01 81 02 23 03 95 c5 e1 65 47 c4 dd af cc 65 1c 12 03 54 02 a0 ad 37 81 ce b7 1e 4b af 13 2b 5c 8a 80 10 00 14 00 11 81 18 10 a8 00 20 00 00 00 00 00 20 50 01 40 00 02 00 00 3f 53 43 ab 8a d0 05 00 b4 02 a4 06 a8 41 e3 dc af cc 64 ad 47 06 83 4d a8 f8 63 fd 45 88 f6 c1 5e a7 95 d0 23 69 cd 79 93 06 34 a6 82 2e 00 15 00 69 01 a4 22 69 01 40 25 00 50 0b 40 14 01 40 14 02 d0 03 69 2a 81 f1 77 fb 97 3b 8e 31 7e 15 99 9e ab a7 31 e4 a9 86 86 e8 06 35 00 a8 19 6c 08 50 a8 0a 80 a8 16 a1 04 c0 d2 65 1a 88 1d 28 a8 07 7d a6 e2 56 2e 27 5f 03 Data Ascii: _`G>>ttP: N3DVnA,%T%X"4T#eGeT7K+\ P@?SCAdGMcE^#iy4.i"i@%P@@i*w;1~15lPe(}V.'_
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 93 42 91 ad be d2 73 7a a7 84 79 19 b5 b9 1e f8 c6 10 54 48 8a 93 71 71 75 40 78 77 11 4d 63 83 e6 21 5e 29 58 5c f1 e4 5d 65 56 de 39 37 5e c2 a3 ad bb 16 2b 8a ab 28 e8 ed 5a 58 2a 01 ca e5 88 29 51 63 da 04 76 52 c4 0e 52 b2 ff 00 0b 03 db e9 1b a8 ab dd 1b b9 3c ab cd 1a 66 be e4 2b 8a e0 b2 ee 66 47 cf f5 0b 8f 5e 9e 58 92 b7 27 e3 e3 df 92 d4 ea 07 9d dc 8a 61 1c e7 30 8e 6d 94 40 00 46 82 33 50 34 98 11 b0 a8 10 59 81 5b 02 00 00 01 66 07 45 26 15 f5 36 f6 fc 09 92 b5 1d 25 13 0d 39 4e 21 5e 5b b1 2c 66 bc d2 8b 34 ce 32 d1 51 62 88 ae d4 f0 91 a7 29 2c 4a 8e d6 15 33 33 5a 8b 7d aa 08 57 91 e6 6d cd 00 00 00 00 00 02 81 00 01 40 00 14 20 00 00 1f a4 68 75 4e 62 47 33 93 a2 cd 60 11 e6 51 f1 d4 a3 d2 b0 48 23 9d c9 d1 77 91 5e 4b f3 a2 a2 cd 81 e6 Data Ascii: BszyTHqqu@xwMc!^)X\]eV97^+(ZX*)QcvRR<f+fG^X'a0m@F3P4Y[fE&6%9N!^[,f42Qb),J33Z}Wm@ huNbG3`QH#w^K
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 02 49 50 0c aa 55 20 3d 50 d3 08 36 c0 f9 72 94 de e2 77 54 b3 78 14 7b b6 7a 69 ad 72 f1 22 2b 9d e7 a6 0d 71 9b a9 22 da f9 b7 d7 89 9d 23 97 4e 26 98 40 14 03 e9 7a 66 b9 45 c5 26 f4 e6 63 a8 df 35 ed a1 cd d1 00 c4 8a 8d d9 9d b8 d7 52 c7 99 65 4b 1c 77 77 db c2 23 49 1e 2d 2f 37 99 a1 1a 08 c4 ed e0 59 52 c7 9e 49 a6 69 80 03 48 09 50 01 00 20 50 22 80 00 01 05 7d 3f 4d ba db d1 cb 22 c4 ad ee 67 f9 86 6b 51 cb 59 15 97 20 aa 80 d2 44 15 20 ae b0 20 e8 15 ce 40 61 a0 25 00 c4 a0 98 47 09 db 2e a5 8e 32 81 a6 71 87 12 a2 34 00 20 00 01 40 0a 05 03 d5 e9 f1 52 dd 41 11 63 f5 36 6d a5 14 69 1d 74 83 1f 97 b9 99 c9 a7 19 14 72 90 1d ec ba 12 a9 76 78 08 3c ee 45 47 39 15 19 28 01 54 80 aa 44 1a d4 05 a8 50 0b 40 23 22 91 55 60 8f 4c 63 44 46 96 b5 08 c3 Data Ascii: IPU =P6rwTx{zir"+q"#N&@zfE&c5ReKww#I-/7YRIiHP P"}?M"gkQY D @a%G.2q4 @RAc6mitrvx<EG9(TDP@#"U`LcDF
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: a9 b4 5a 81 6a 11 50 1f a0 db db 51 b3 05 d8 8e 5d 5f d6 f9 9f 8d e9 44 d6 b1 25 04 59 4c 54 88 3c bb b9 d6 4a da c9 63 2f e4 6a 25 71 6e 9d e5 44 49 bc 64 50 6e bd 88 83 e7 7a 9e e5 5b b6 e8 fc 4f 08 a2 55 8f 84 db cd e6 c0 80 00 fa 1e 93 b6 d5 37 7e 4b 08 61 0e fe 7e c2 c2 be 9b cc 22 a4 51 d2 dc 00 f4 42 20 74 54 20 e7 72 ea 82 ed 03 c9 73 73 36 e8 98 1c 5d d9 f6 d4 a3 a5 a9 cd 62 c0 f4 5b bf cf 10 33 bb 9d 6d 3d 2c 95 63 e4 d9 b2 af 5c a3 58 2c d9 89 1a b7 1f 49 46 30 8d 12 cb 3e fe 06 98 65 fb e9 f6 b0 34 a1 ed fe 2c 09 2c 70 58 ff 00 16 06 9f 82 3d a0 72 56 aa f5 4b 32 8e 89 00 a0 1c 6f a2 0e 54 c0 0c c9 85 73 96 20 79 af da aa aa cc 0f 23 c1 90 00 00 59 a0 3e d6 cf c3 04 75 8c d6 af 5d a0 47 96 77 1d 42 b5 6a 75 03 b7 00 82 41 5a a0 12 80 00 55 20 Data Ascii: ZjPQ]_D%YLT<Jc/j%qnDIdPnz[OU7~Ka~"QB tT rss6]b[3m=,c\X,IF0>e4,,pX=rVK2oTs y#Y>u]GwBjuAZU
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: e5 1f 96 5f 63 23 4f 61 a6 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 01 40 80 50 00 00 00 00 00 00 00 00 10 00 00 80 50 08 00 0d da b5 3b b3 50 82 ac 9f b9 2e 6c 0f a9 6b 6f 6f 6f 0f 0a ac f8 cd e7 ec 33 6b 52 38 c2 4e 73 7d f8 81 d6 53 49 76 10 7c bf 50 dc 69 8b a3 c5 92 ab e3 37 57 5e 60 40 00 7d 3f 4c 8c 6c 6d ee 6e e7 c7 c3 02 fc 47 8e 3a b7 1b 8a cb 17 27 f6 12 2d 7d e8 c5 46 29 65 45 43 48 e7 76 5c 08 3c b3 61 5c e1 62 e5 d9 e9 86 7c 7b 3b c0 fa 1b 6d a2 b3 6e 95 f1 3c 64 c2 3a 38 af 88 a3 9c a0 de 52 4c 0e 33 8c d7 0a f7 10 79 ee 36 b3 54 0a e5 26 41 cd b0 15 03 dd e9 f1 d3 6a 77 79 e1 ee 2c 4a ce ce 2e ee e2 57 1e 49 e0 48 b5 f4 8a 88 c0 cb 60 66 b8 f7 10 71 dc 3a c5 f6 20 3c 36 5d 37 2c 45 af 6d d9 7f 06 11 21 1c 7d e0 77 4a 8a 85 19 97 Data Ascii: _c#Oa@@PP;P.lkooo3kR8Ns}SIv\|Pi7W^`@}?LlmnG:'-}F)eECHv\<a\b\|{;mn<d:8RL3y6T&Ajwy,J.WIH`fq: <6]7,Em!}wJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49797	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	590	OUT	GET /images/speakers/61834/Ben%20Currie_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:22 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"21478-1704286898000" Last-Modified: Wed, 03 Jan 2024 13:01:38 GMT Content-Type: image/jpeg Content-Length: 21478 Connection: close
2024-04-18 17:22:22 UTC	7926	IN	Data Raw: ff d8 ff e1 0d 8d 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0f 01 00 00 03 00 00 00 01 01 cc 00 00 01 01 00 03 00 00 00 01 02 0b 00 00 01 02 00 03 00 00 00 03 00 00 00 c2 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 c8 01 1b 00 05 00 00 00 01 00 00 00 d0 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 d8 01 32 00 02 00 00 00 14 00 00 00 f6 01 3b 00 02 00 00 00 0e 00 00 01 0a 9c 9d 00 01 00 00 00 1c 00 00 01 18 ea 1c 00 07 00 00 01 0c 00 00 01 34 87 69 00 04 00 00 00 01 00 00 02 40 00 00 03 e8 00 08 00 08 00 08 00 15 f9 00 00 00 27 10 00 15 f9 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 Data Ascii: ExifMM*(12;4i@''Adobe Photoshop CS6 (Window
2024-04-18 17:22:22 UTC	258	IN	Data Raw: 94 15 84 37 ba 1e 78 6e 77 a2 e2 59 5e 4b 0b 2c 68 13 0f 64 f2 b3 2e b4 5d 78 0d 33 55 03 63 0f 8c 7d 27 ff 00 69 46 d6 ec cb 6b 9a 48 90 5e 08 d3 56 88 8f ed 6e 49 8d 0d 6c 0e dc a6 1d ca 46 c1 9b 54 81 43 9e c1 3b 67 c1 25 35 73 0f eb b4 9f 16 c7 ce 55 d6 fb 80 ec f1 f8 aa 39 67 70 73 db ae c2 3e e1 ca b3 8f 6f a8 c1 b4 fb 87 2d 9d 50 89 d4 f9 a6 5d 1e 93 ea 9e 66 ce a5 e9 3b fe d4 30 d6 7f ac 3d f5 ca ec f7 7e 45 e6 f8 19 36 63 e6 d1 7c 6d 7d 6f 69 0e ec 75 82 d7 7f 59 ab d2 3d be 07 9f c1 2e 1f 5f d1 57 e9 fa bf ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 Data Ascii: 7xnwY^K,hd.]x3Uc}'iFkH^VnIlFTC;g%5sU9gps>o-P]f;0=~E6c\|m}oiuY=._W8BIM!UAdobe PhotoshopAdobe Photo
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0d f6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 Data Ascii: op CS68BIMhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="h
2024-04-18 17:22:22 UTC	5102	IN	Data Raw: c4 02 78 7d f9 53 8c 62 eb 6e 95 b7 9c 1b 31 e0 a7 2c e8 96 60 80 f2 b8 5c 73 ad 9e d4 2a 99 35 9e 8c 04 8e e5 f1 35 19 21 2e a7 f0 a4 42 84 d4 8e 25 34 b8 0e ea e0 6a 32 4a bb 48 5f 0a c2 9a 01 ba 5b c6 9b 29 04 bd 9e 93 cf 31 5e a6 0e 14 ef 4e 55 b4 0e 77 ac 0d 1f f6 dc 03 cd 2a 68 45 db 04 4d 07 c5 53 c5 0f 45 ac 02 27 df f2 a6 b7 51 37 4a 95 ee 03 e7 16 ee 34 84 a8 f3 ef a9 23 73 95 d1 b8 0e e4 b7 64 2e 4b e8 1f 01 5b a8 c0 bd 9d ce d6 c3 85 10 70 23 3a 63 5e 06 95 4e ec fc 2b 79 b7 79 26 26 81 20 39 16 75 e2 0d ab 73 3b c0 3b 8d c4 8e 91 c7 80 36 6b 7b 85 ca e7 46 dc 29 8e be 35 ba 00 7e b5 f1 14 40 b8 a1 1b b0 7b 48 b6 20 e5 dd c6 b0 a8 9a c5 d4 95 23 2e a6 27 64 97 4b 52 ba ce 4e b4 51 35 37 3a d1 fa a3 79 61 1c 5a e1 82 f0 5f 0a 2c 0d 57 60 39 2e Data Ascii: x}Sbn1,`\s55!.B%4j2JH_[)1^NUwhEMSE'Q7J4#sd.K[p#:c^N+yy&& 9us;;6k{F)5~@{H #.'dKRNQ57:yaZ_,W`9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49796	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	589	OUT	GET /images/speakers/63240/Amy%20Brice_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:22 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"27419-1708687105000" Last-Modified: Fri, 23 Feb 2024 11:18:25 GMT Content-Type: image/jpeg Content-Length: 27419 Connection: close
2024-04-18 17:22:22 UTC	7926	IN	Data Raw: ff d8 ff e1 0b e4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 32 3a 32 33 20 31 36 3a 31 31 3a 33 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:02:23 16:11:38Zp
2024-04-18 17:22:22 UTC	258	IN	Data Raw: 85 e6 6e e8 19 8f 2e cc 25 98 77 f3 55 2d d7 51 c3 5c 59 ed 5d 77 d5 6e aa fe a1 82 46 40 23 2f 19 db 2e 9e 4f ee b9 df ca f6 a8 cd ae 0e c3 5f 6b 89 f6 ec d6 67 be aa 50 7f 7c ff 00 b5 53 c9 ea 58 d8 a5 fe a3 a5 c0 0f 63 75 2b 37 fe 75 d3 fe 84 f8 fd 21 c7 fe 49 35 2f ff d9 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0e 5a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 Data Ascii: n.%wU-Q\Y]wnF@#/.O_kgP\|SXcu+7u!I5/8BIM!UAdobe PhotoshopAdobe Photoshop CS68BIMZhttp://ns.adobe.com/xap/1.0/<?xpacket be
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d Data Ascii: ="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp=
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 84 17 b0 c3 48 02 8e 57 82 94 63 16 ab de 02 c8 eb bd 90 da 55 49 e8 99 0a c5 56 1a b4 91 40 aa 11 3f 26 37 fb b0 1b 2e aa 88 c0 1c e7 95 8f 75 2f 67 82 d7 71 d1 73 2c 63 10 44 87 62 c0 e9 92 36 2d aa b2 45 45 cb 40 4f d4 90 89 54 c2 18 0e 1e d5 73 c7 8c 0f 88 d6 29 1f aa b1 33 50 a5 c2 9b 90 2a a8 10 aa aa 3c a5 5d 15 16 6b 09 8a 92 8b a4 50 28 ae b0 7d 60 c5 5d a2 9e 2a f1 73 e4 3a 9e e6 69 94 85 c4 cd e3 1d 38 e4 a1 d6 20 e4 83 a2 2a a8 21 c0 82 d1 34 4c 53 81 47 f7 4d 73 ff da 00 08 01 03 00 01 05 00 02 fb 0c 7f 26 c4 10 55 73 b7 d7 2e be ac b6 b7 78 06 55 05 10 5b 88 8e 18 0c 06 49 30 49 22 87 21 f8 88 7b 0f 80 98 0e 11 13 1c 28 0d 81 c5 a2 3e b4 c9 d1 17 80 4a 34 bb 05 aa 6d 6c c0 1f 98 e6 e0 b3 dc 28 8e 14 a0 05 e4 18 00 02 20 99 33 5b 36 41 4b 33 Data Ascii: HWcUIV@?&7.u/gqs,cDb6-EE@OTs)3P<]kP(}`]s:i8 *!4LSGMs&Us.xU[I0I"!{(>J4ml( 3[6AK3
2024-04-18 17:22:22 UTC	2867	IN	Data Raw: 62 92 45 b7 1c ea a0 28 78 a7 66 04 81 a7 a7 db d6 77 8e 64 b2 39 47 c1 64 b2 94 f9 05 1c 5a 64 ad d6 a0 ae f5 de ac a1 e0 ad 24 26 51 14 eb 23 26 a4 aa f9 98 0e cc 47 4b 4e 9c 61 60 7d ad e0 57 d7 7c 41 22 8b 56 59 99 e4 9b 5f 00 04 ee 24 75 c3 f1 f2 d9 8a 6b 31 f1 ac 2f bb 9a 24 78 6b 22 c7 8c ac 3c 35 e1 92 57 09 b0 00 b2 48 02 f9 9d 37 6d ef a9 fa d5 ca ea b2 b5 7e 1d 91 c1 57 96 56 b1 5e 07 86 b5 1a d8 9a b4 e5 86 bb ca 2c 59 49 6d d1 9c 93 1a b8 45 05 9f 68 23 ac 3e 22 2b 82 1c b5 9e 6b 82 44 a8 51 8b ac 29 42 f6 42 59 5b 46 f1 c6 85 50 69 a9 2a c5 80 1d fa e3 9c ce a9 85 2e e3 72 58 ec 99 9e 5b 95 91 37 51 98 48 2b c8 85 6b 4b 0c 33 21 74 62 8c 75 0e 75 1d 71 dc b6 32 48 6f 61 f9 05 5a 39 1a d2 c0 e9 34 32 d2 b5 19 9b 69 9a 22 52 43 1a 1d 8e 35 3f Data Ascii: bE(xfwd9GdZd$&Q#&GKNa`}W\|A"VY_$uk1/$xk"<5WH7m~WV^,YImEh#>"+kDQ)BBY[FPi*.rX[7QH+kK3!tbuuq2HoaZ942i"RC5?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49801	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	829	OUT	GET /images/why-choose.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/images/css/style.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:22 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"105821-1671802157000" Last-Modified: Fri, 23 Dec 2022 13:29:17 GMT Content-Type: image/jpeg Content-Length: 105821 Connection: close
2024-04-18 17:22:22 UTC	7924	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 67 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:22 UTC	260	IN	Data Raw: 41 69 8a e0 77 a6 04 8e 6e 59 75 e5 cb a6 84 4c 07 c7 07 cd 6d 83 15 61 fc 50 4a 35 63 c7 bd d5 43 f5 41 6c 31 cc e0 80 13 05 c6 3d b8 39 50 66 c6 cc d6 a7 1a 94 69 4a a6 80 04 e3 4c 1d 32 c3 f1 0f 2c bb d6 75 ac 64 6c 5b 6d 3a 97 72 bc af 13 2b 4b 5c 60 24 18 9a ee 34 c6 63 f9 73 ed 59 ef af 0d 7a f9 fc ba 1e a1 dd 67 2a 34 2d 29 d6 11 b3 10 f5 ae 6a 0c 25 2a b3 38 41 8f 10 b8 63 d3 ad 5d bd fc cd 29 d6 a6 34 d1 04 d1 a1 00 03 17 18 c8 9f 34 c8 39 94 b1 65 57 5e d2 ea 64 8b 69 46 ab c8 0a 95 6a 12 29 c0 8c 58 40 79 bf ea 29 2c 4b 28 11 b6 d7 2a 66 ec 55 9c 06 bb bb 89 91 1a 50 8c 79 42 00 33 64 84 c2 95 c5 f5 9d 9c b7 38 d4 95 1b 7b e9 08 6d f4 2a 36 b9 44 7f fc 4c a2 7c b1 fc 31 e3 9a b9 3e 13 6f cb 67 d2 f6 f4 3d 31 b9 dc ff 00 a6 b7 1a a7 47 50 7a 86 Data Ascii: AiwnYuLmaPJ5cCAl1=9PfiJL2,udl[m:r+K\`$4csYzg4-)j%8Ac])449eW^diFj)X@y),K(fUPyB3d8{m6DL\|1>og=1GPz
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 25 84 0a cf 7f c3 7c 4f cb 03 ac b7 99 6e 35 cd ad 2a 52 36 96 f2 8c 61 19 4d bf 32 43 51 25 b9 06 0b 5c 4c 67 af 2a b6 dd 9a 34 60 2e eb 53 78 d2 63 42 db ee 99 e6 67 27 f3 01 f7 42 cf 5d b5 cf 18 db da 9a d4 ea 42 6f 2a b5 6e ee 20 06 ac 5c 66 c4 1e c5 96 b1 a1 a7 09 c7 70 b9 b9 12 94 a5 29 4e 8d 19 cf 36 32 f1 48 bf b9 74 b7 c6 39 ce 7c ba 8b 9d 36 bb 7d 0d a2 8b 46 95 0a 7f 1d bc 56 93 b0 32 c2 94 24 7b 7f 0a e7 fe 5b ff 00 0d 35 5d cb 44 65 5e 51 26 a5 49 69 8d 39 e1 3a 84 07 66 8f 96 31 e2 ae 1a 56 c2 e6 b4 3e 26 a1 f5 a4 0c 86 19 19 06 68 c7 9e 6a 9a eb b6 9a 54 b6 9b 21 2a d5 25 3b db 91 1f 88 9d 3c 64 61 9f a5 4d fc bd bc 96 6f 93 14 6d 76 d4 6d f7 1f 8c b9 a6 2b 6f b5 ea 48 d9 d3 93 7a 36 94 c9 c6 51 01 fc 6d f7 8e 2a da 92 21 be 5e 52 a9 67 77 Data Ascii: %\|On5R6aM2CQ%\Lg4`.SxcBg'B]Bon \fp)N62Ht9\|6}FV2${[5]De^Q&Ii9:f1V>&hjT!%;<daMomvm+oHz6Qm*!^Rgw
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 00 6a a5 49 f0 f3 63 8e 0f 83 f2 4c f2 6f 86 f3 e4 d5 2a b7 1f 11 73 38 03 42 83 c6 8c b1 e3 88 c7 98 75 d3 98 e3 dd 7a 92 db 99 a0 10 08 04 0d 02 40 20 10 08 04 0d 02 40 d0 08 06 40 d0 08 04 0c 20 10 08 1a 00 20 19 00 c8 18 08 1b 28 04 0d 90 34 03 2a 1a 01 03 64 03 20 6c 80 64 0d 90 08 04 0a 63 c0 50 68 f7 2f 2c 90 71 bb c6 52 41 c4 dc 63 74 3b f0 5c ab ac 6f 36 e0 74 05 1b 6d 69 e4 82 f8 2a 2d 1c d0 4a 21 03 64 43 6e 48 00 0a 01 90 0c 81 80 81 b7 f8 a0 19 02 23 04 15 90 11 49 b0 74 12 88 c5 11 32 10 0c 81 32 04 c5 14 01 87 62 20 20 a0 5c 51 4b 86 08 84 8a 89 41 15 02 74 47 20 01 7c 38 e4 bc ef 41 b1 20 b1 6e 6f f6 95 55 1e 27 0f 62 a9 53 8c 30 ef 44 5b 1a 67 bb 9a 82 7e 98 fb 1d 03 14 8f 1f 61 41 2f 4b 1e 5d 88 18 a4 d9 8c d1 13 14 43 65 ec 43 47 a3 c5 Data Ascii: jIcLos8Buz@ @@ (4d ldcPh/,qRAct;\o6tmi*-J!dCnH#It22b \QKAtG \|8A noU'bS0D[g~aA/K]CeCG
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 90 70 32 38 e1 d8 c8 b3 a6 0d e7 51 eb 95 59 53 ac 24 70 f2 10 7b c3 a9 8d ca e6 f7 4b eb 2a d2 9c 6a 1d 7e 17 91 60 48 e2 56 a4 4b db 51 65 bd ee 5b 6d 43 2b 29 56 34 cb 98 52 2e 65 dd 17 e1 d8 56 b1 9b d3 b3 d9 3a 8e 57 5e 9d 49 40 d3 b8 1e 68 1c a5 dc 79 f6 29 8b 2b d9 ba 3b 7a a3 71 64 26 3c d0 1a 4c 78 85 be 3a c7 3f 6f 3a e9 bf 57 a1 42 da a5 7a f5 04 29 40 13 39 70 c3 bb ea 5d 7e cf 3d e5 cf 5e 75 a1 bc a1 3a 96 72 8f c3 16 11 ac 38 b6 63 f6 c5 73 eb d9 ae bc 7a 73 cd 3b 3d f6 85 51 3a 35 0c 72 04 70 01 c3 b3 f6 ac 4e 9a eb 97 13 d5 d6 a3 6f ac 77 8b 39 0c de b5 21 94 a2 ff 00 5a e7 79 77 e3 d9 e3 1d 1f 49 f5 0d 3b cb 58 54 a5 37 04 38 19 95 d3 8a c7 b3 9d f2 ec ec ee 8c e7 17 38 71 01 77 e6 bc bd c6 4f 51 93 53 69 9c 63 26 98 9d 23 12 cf 95 40 72 Data Ascii: p28QYS$p{K*j~`HVKQe[mC+)V4R.eV:W^I@hy)+;zqd&<Lx:?o:WBz)@9p]~=^u:r8cszs;=Q:5rpNow9!ZywI;XT788qwOQSic&#@r
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 81 a0 10 0d 82 06 02 80 40 d0 0c 80 64 03 04 03 7f 8a 04 ca 84 c8 02 10 0c 81 32 04 ca 04 c8 13 20 19 04 64 10 56 dd a8 63 9f 1f b1 5e 77 a0 a4 3c 25 b8 a0 c7 ac 30 74 18 f2 03 2f 7a 82 71 04 17 c7 14 13 8b 61 cd 04 b1 7e 63 92 00 77 fb 50 30 c4 bf d0 50 48 2a 89 0f f1 45 49 c7 0c f9 20 90 67 18 e0 70 41 28 f3 74 10 91 40 9f 34 12 8b 65 8b 32 22 41 b2 e0 8a 63 1c 87 b1 08 00 7c 7e 84 0c 70 e4 82 58 7e e4 40 d8 76 71 2a a9 f6 a8 0c 10 22 3e 85 44 27 91 75 06 34 c6 07 1f 6a a8 c3 ac 30 c3 1e 00 a8 35 f7 19 76 f1 55 5a 4d cc 0d 27 92 44 d7 27 59 cd fd 37 2f 8e 6b 71 cf a7 ad 74 5c 7f 2e 9b e6 cb ac 71 af 51 da c7 80 2d 32 dc fd d0 82 0d aa 71 8f e2 20 3f 7a 0f 86 3e 6e 75 6e e7 d5 5f 31 b7 7b bb c2 45 3b 0b 8a bb 7e dd 6a 09 31 a3 6f 6d 50 d3 88 8b fd e9 90 Data Ascii: @d2 dVc^w<%0t/zqa~cwP0PHEI gpA(t@4e2"Ac\|~pX~@vq">D'u4j05vUZM'D'Y7/kqt\.qQ-2q ?z>nun_1{E;~j1omP
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 20 e0 d9 e6 59 2a a1 11 16 32 2d a2 64 68 12 8e 40 86 e1 c5 d6 68 40 c8 47 27 ac c0 06 c4 03 13 88 d4 8b 8f a2 7f e3 47 cd 2d 3e 9f 41 ee d3 91 6d 72 d8 ae 26 5d b4 f8 e7 67 22 79 07 95 2e c7 8f 00 b9 7b 39 fc b5 1f 46 47 1c 57 1a 44 86 6a 2c 35 1a 78 a7 cd cf 9b 17 55 ea de 74 87 47 1a d7 37 b4 23 23 be ee 16 51 95 49 5b 52 80 fc ca 74 e5 01 2d 32 03 fa 93 ca 19 79 b2 f4 fa bd 5f 9e 9c bb eb f1 1e 11 4a ce de 95 30 6c e9 c6 93 02 75 d3 68 c8 c2 43 10 67 1c 48 3c 71 c5 7a f1 c3 58 17 14 e1 4e 9c aa 4e 30 26 39 c4 44 12 df ca 8d 36 13 b5 ba da 37 4f 4e 9d e5 ad c5 6a 02 95 7a 17 bb 75 51 5e 88 94 a2 25 0d 35 00 8b ce 07 09 06 c0 ac 4b a5 f0 da da 5f dd da 6f 56 7d 4f 42 b0 a7 be 6d e4 1a 77 b1 68 4a 51 25 e7 4a a8 80 8c 2a 42 7a 8e 61 c3 a9 d7 ae 58 4e ac Data Ascii: Y2-dh@h@G'G->Amr&]g"y.{9FGWDj,5xUtG7##QI[Rt-2y_J0luhCgH<qzXNN0&9D67ONjzuQ^%5K_oV}OBmwhJQ%JBzaXN
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 8d 6a db 4c 43 d3 aa 4c 4b c9 98 82 dc 57 6b 3c 39 cb e5 f4 27 c9 7e bb db 37 5e 9a b7 e9 f9 dc 0f d7 76 6b 7a 74 ee e8 c8 87 94 3e e5 48 73 89 18 76 15 f3 3d 9c e5 77 e6 f8 76 d7 17 62 2e e5 96 1b 6a eb ee b0 89 38 a5 18 ff 00 ad 41 f3 41 6d 2d de 9c 8f 99 06 ca de f8 16 62 9a 36 34 6b 89 05 45 d9 84 03 7b d0 30 a0 92 01 03 40 d4 02 01 14 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 83 55 b9 0f 0c 96 92 b8 ed d8 62 52 8d 15 31 fe a0 2e 75 b8 e8 2c 87 84 28 ac d0 11 52 40 d0 34 01 c9 05 72 9b 22 e0 8c d4 d4 c5 f4 98 a1 8c 98 5b 6a 19 20 9f c1 1e 4a 88 ca cb b1 90 62 56 a5 e9 a2 31 2a 5c 81 82 ba aa 4d c8 e6 a6 ae 01 5c 1e 28 62 da 73 c5 0a b5 c2 21 b2 b0 0a 81 90 08 04 09 00 a0 45 00 c9 81 14 10 65 11 e7 04 83 9a f3 3d 42 4c 00 fb 10 20 55 13 07 1c 3d Data Ascii: jLCLKWk<9'~7^vkzt>Hsv=wvb.j8AAm-b64kE{0@ @ UbR1.u,(R@4r"[j JbV1*\M\(bs!Ee=BL U=
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: cd 67 ae 36 12 b4 15 b6 ca f6 b3 35 2d 0c 5c 17 34 ce 00 fb 17 9a f1 67 c3 7b 2b 1a 77 90 f8 9f 5e 3e 09 49 a3 73 48 e0 44 ff 00 12 c5 be 5a 6e 28 d5 06 38 17 04 33 07 2b b4 ac 58 9c e9 98 87 c4 69 0e 5f 8b e1 92 d4 45 5a 65 0d 33 8e a2 35 34 4e 1a 48 19 fb 56 55 1d de 89 ad 08 ee 31 22 55 01 10 b8 8f de ec 99 fa 8a 9d f3 e3 57 9b f8 6b 06 20 3e 23 e9 75 c9 b4 c3 3b e2 39 84 11 90 e1 2f 73 20 89 89 c8 61 cd 35 19 14 6b 10 08 23 80 03 07 1f b0 5d 39 e9 2c 2a e2 15 21 38 cc 09 53 98 62 3e d5 7a f2 48 f6 ef 92 75 e3 0e 9a b0 a6 24 24 23 2a b4 e6 46 0c 44 c9 c5 7c 4f d9 99 dd 7d 9f d6 bb c4 7b 05 d4 61 42 d2 55 63 8c 99 c2 e2 e9 f9 71 9d 39 28 df 6f 97 37 d7 67 d4 a9 09 7a 54 41 c4 42 39 f8 7b d6 5a 8e f2 36 a4 98 c6 18 b7 8a 32 e6 0a d3 27 0e 9a a8 77 bb 4b Data Ascii: g65-\4g{+w^>IsHDZn(83+Xi_EZe354NHVU1"UWk >#u;9/s a5k#]9,!8Sb>zHu$$#FD\|O}{aBUcq9(o7gzTAB9{Z62'wK
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 4e a1 31 75 c7 a8 ed cd 79 15 ee d6 f2 94 00 c9 c3 f1 59 d2 f3 ad 78 d9 ea c8 9f 0b 39 cd 6b ee c5 e1 93 4b a6 aa cd 8e 9f 72 9f d8 bf 47 4b b0 f4 64 e7 52 3a a2 e5 66 f4 bf 5c 7a d7 4d 74 d8 b7 8c 22 21 80 65 24 6b 5d fe df 61 18 b7 85 74 e6 33 6b 7d 6d 43 4b 2e b2 38 da cb 11 c1 96 dc da cd ca 93 c2 58 25 74 e6 bc e7 ab f6 f9 d4 a7 36 0f 82 e5 db d3 eb af 19 bf b6 34 ee 2a 42 51 62 0e 00 ae 11 d2 ab a1 40 19 65 fc 16 9c db 4a 36 fe 1f ad 45 59 f0 a1 d8 83 cf bf b5 34 c6 4d a5 ac b5 65 9e 48 63 a7 da ed c3 0c 31 44 b1 d4 ed d6 8e 41 21 54 6e 45 31 18 a5 ae bc 72 c6 be 9c 63 43 b4 2c eb d1 cf 2f 3b ea 6b f9 03 28 c4 ab cd 75 eb 8f 0f 27 ea fd d6 a5 3f 4e 9d 33 e3 94 9c f7 05 ee f5 5f 0f 8f fb 5f 2e 76 3b 8d f9 1f d4 31 6e 4b ae d7 97 16 d3 bc dc 1c 1f 5e Data Ascii: N1uyYx9kKrGKdR:f\zMt"!e$k]at3k}mCK.8X%t64*BQb@eJ6EY4MeHc1DA!TnE1rcC,/;k(u'?N3__.v;1nK^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49795	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	594	OUT	GET /images/speakers/63494/ryan%20Lavarnway_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:22 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:26 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"27260-1709715486000" Last-Modified: Wed, 06 Mar 2024 08:58:06 GMT Content-Type: image/jpeg Content-Length: 27260 Connection: close
2024-04-18 17:22:22 UTC	7926	IN	Data Raw: ff d8 ff e1 0c c7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 33 3a 30 36 20 31 34 3a 31 32 3a 32 34 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:03:06 14:12:24Zp
2024-04-18 17:22:22 UTC	258	IN	Data Raw: ed f6 59 ff 00 a3 14 13 35 0d 4f 6a 2c b0 04 9f 48 27 7b 1f ba f3 b4 bf d8 df 80 4d 6b 84 bb e2 50 ab 74 38 b0 fe 6b 88 fb 8a 0d 8f b2 db 45 75 8d cf 7b a1 a3 c4 92 ad 83 a5 b0 11 aa f5 3c 7a 8e 77 32 63 cd 59 f5 3f 24 2c bc 7b c0 0d 71 3b c1 1a 83 12 3c 75 95 6b ed 67 fd 13 b8 9f 92 8f 8c 55 a7 87 5a 7f ff d5 e4 db b9 b1 6d 63 7b 4f 23 c4 7e e9 4f 6c 9a f7 54 0b eb 3f 46 06 ad 3f ba a0 d7 3c 93 b6 c2 0f 7d 00 d7 fa a0 23 7a 17 f2 32 36 bf f3 8e c6 c4 7f 2a 16 90 db 66 b1 72 58 e7 57 7b da ef a5 32 47 31 2a f5 37 13 a2 0d dd 2f 28 da 2c ac b5 ff 00 c9 fa 25 48 63 64 d4 41 7b 08 ed 23 51 3e 1e d9 4d 8d f5 04 24 d7 44 b6 fb c1 07 50 46 ab 4f ea f6 7b ab ba 9b 1c 7f 4b 87 6b 37 79 b4 1d 1f fd a6 2c 9d e7 be 8a 38 c6 f1 9d 59 c6 69 b1 f6 cd 66 b6 ea 48 3f f9 Data Ascii: Y5Oj,H'{MkPt8kEu{<zw2cY?$,{q;<ukgUZmc{O#~OlT?F?<}#z26frXW{2G17/(,%HcdA{#Q>M$DPFO{Kk7y,8YifH?
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 88 1a 9d ba f9 26 3a 9a 1f 47 a2 06 ae a8 f6 d9 88 c1 4f 54 ac ee b2 a6 fb 59 60 9d a7 26 9f dc 7f fa 7a 57 51 4f af 4b 71 ea 0d 16 da c0 f7 5a 06 9e cd 37 6d dd fc a7 7b 58 a9 f4 3c 6a b1 2a 75 ad 6b 45 f6 9f d3 6d 07 48 fc d6 39 ff 00 46 b5 b1 43 dc e1 2d 80 1c 78 e7 f2 ac 9e 63 37 19 11 fd 18 fe 25 d6 e5 b0 9c 60 cb f4 e4 35 ec 07 67 0f a8 fd 55 c5 be bb 32 7a 70 7d 59 33 bf d1 79 f6 3a 75 73 5b bb dc c7 3b fa cb 98 e9 8d 66 2f 53 36 67 55 60 38 e0 91 50 1b 5d bc fb 5b f4 ff 00 77 dc bd 26 5f 54 9d 08 23 f3 bf f3 15 4f ab e1 d5 97 d3 ae 73 d8 0d ac ac b9 af 8d 41 68 dd ed 9f e4 84 ec 1c ec e1 51 9f a8 58 d7 f4 a2 c7 9f 94 8c ae 70 f4 f8 7e 89 78 4b 7a 7e 25 99 96 e5 53 4f a2 cb 4e ef 4a 66 0f e7 1e 3f 39 17 ec b4 fe ef 68 4f 83 92 db 59 6b 0b 83 dd 8f Data Ascii: &:GOTY`&zWQOKqZ7m{X<j*ukEmH9FC-xc7%`5gU2zp}Y3y:us[;f/S6gU`8P][w&_T#OsAhQXp~xKz~%SONJf?9hOYk
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: d4 ce b4 61 be 31 42 91 81 e4 26 e0 30 45 24 d3 fc a4 38 b4 98 71 49 ac 2a d7 8f bc 28 6d da e1 fc f1 fd 1e b2 2a 9e cf 26 f1 85 19 8f d7 59 80 fd 85 fc c1 2e bf 80 ff da 00 08 01 02 00 01 05 00 99 37 29 86 a0 23 a6 63 b8 14 00 66 d8 1d 34 4a ee 41 bc a3 84 53 62 66 f8 6e fc a5 66 d0 fd 50 11 9f 57 c8 78 51 e5 1d e4 d4 a0 6f 3a d0 a0 05 6d b8 15 b8 89 df de 1e ac d6 b4 b1 94 29 d1 7a e9 23 33 b1 3c 8e 56 b7 60 52 76 a7 2c b7 3d 42 9f ff 00 2f 73 69 df ed 3a db d0 10 1f d5 b8 08 2f 78 96 70 e8 b1 8b c5 22 84 b2 ad 5b a6 fd 26 49 b5 c4 d6 b6 13 54 99 05 b6 46 b5 b9 a2 78 97 4a 8e f2 ed f7 0d 22 21 b2 45 d8 b7 28 e2 81 fe 3c 8e 55 95 60 c0 8d 15 69 e1 6f 83 a1 57 83 a4 3b 50 4e 95 44 c0 78 6d 1b f6 7e 81 b4 80 6f a0 10 00 b7 bb 45 2a fc 8d 7c 89 a2 f6 50 e0 Data Ascii: a1B&0E$8qI(m&Y.7)#cf4JASbfnfPWxQo:m)z#3<V`Rv,=B/si:/xp"[&ITFxJ"!E(<U`ioW;PNDxm~oE*\|P
2024-04-18 17:22:22 UTC	2708	IN	Data Raw: a7 c0 fb d3 c7 f8 ec 8f 91 7c 79 b9 a8 6d fd e7 4a ed 4a 37 b2 12 50 ca 66 ea b2 ee 71 2e 6e 86 63 07 b2 ed e6 6c 5d 37 d3 24 c7 3f b9 67 f7 ed 89 71 53 c8 96 5f c9 1b 53 71 6f cd c7 e4 a1 b0 9b c6 56 70 3b ab 7b 1a 56 f7 63 8d bf be 29 5d c7 c7 9e cd d4 af 55 77 0e 56 ad 0a cf 57 f1 19 21 8a cd 98 42 f7 ba e5 eb 96 46 eb 5d 7a 5f 96 9a 06 54 65 21 8a 9e ad 42 9d 7d e0 35 1f 57 21 c5 e5 d3 58 71 f2 49 14 6d cb 5d 62 63 d0 cd a0 1a 92 1b 8c fb 7c e3 c3 b6 77 0e 55 a9 6f 1a c4 b7 66 c6 d8 cd 62 30 17 24 b9 d0 a0 91 67 05 98 2f 6a 19 07 bc 04 72 20 f7 64 70 7f 30 a3 f9 e7 7f ef 51 fe 5f ff 00 d9 fc 5f 96 ff 00 8f f6 7f 5f 19 7c a4 7a b8 92 49 a6 81 4b 16 d0 a4 f2 c5 22 af 32 35 69 a1 73 af b4 9e 30 b6 0b 01 6b fd eb 6e df 8c ae 8c 97 6b 46 f9 1c 64 92 eb cd Data Ascii: \|ymJJ7Pfq.ncl]7$?gqS_SqoVp;{Vc)]UwVW!BF]z_Te!B}5W!XqIm]bc\|wUofb0$g/jr dp0Q___\|zIK"25is0knkFd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49802	104.18.70.113	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:21 UTC	541	OUT	GET /ekr/asset_composer.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:22 UTC	1136	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:22 GMT Content-Type: application/javascript Content-Length: 10187 Connection: close x-amz-id-2: HKcklyYw+fLm3AjrUBReIA7ZDi46rsX/93TVee1MAC10WFJ4qUROlDjJ5BFNvV4bfwZbO+a3hk8= x-amz-request-id: FGCSDCAJ1XN7DE44 x-amz-replication-status: COMPLETED Last-Modified: Mon, 15 Jan 2024 02:56:11 GMT ETag: "c0053b411b753138af468db1bd3b19f3" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: KdUtYfTvhN3NWk63zbedRawrUoa4O1MG CF-Cache-Status: HIT Age: 13 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pccbBdzd1riPyVVwuxPj7fMHZOrTaNUegCffENeux%2BVX%2B64Btm6Yk7es4CxLkKXCObbUKEL%2FTwtbgAokLk9Rgy1i2fcS%2BRQO2AZQoYUttnLZkS63RewJ%2FQUrS6CfKO%2Fmhfgy6NA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 876656282cde4566-ATL
2024-04-18 17:22:22 UTC	233	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 28 22 26 22 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((func
2024-04-18 17:22:22 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 29 7d 2c 72 2e 72 65 61 64 79 53 74 61 74 65 3f 72 2e Data Ascii: tion(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.
2024-04-18 17:22:22 UTC	1369	IN	Data Raw: 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 61 2e 70 Data Ascii: !0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r],a.parentNode&&a.p
2024-04-18 17:22:22 UTC	1369	IN	Data Raw: 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d 3b 63 6c 61 73 73 20 6f 7b 63 6f 6e 73 74 72 75 63 74 Data Ascii: bind(null,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={};class o{construct
2024-04-18 17:22:22 UTC	1369	IN	Data Raw: 63 72 65 61 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 21 30 29 Data Ascii: createIframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute("aria-hidden",!0)
2024-04-18 17:22:22 UTC	1369	IN	Data Raw: 72 75 63 74 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 57 61 72 6e 69 6e 67 28 29 29 2c 64 65 63 6f 64 Data Ascii: ructor(e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.displayWarning()),decod
2024-04-18 17:22:22 UTC	1369	IN	Data Raw: 63 28 65 2e 69 64 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 67 65 74 50 61 72 65 6e 74 57 69 6e Data Ascii: c(e.id,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return null}getParentWin
2024-04-18 17:22:22 UTC	1369	IN	Data Raw: 70 74 53 72 63 28 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 69 63 20 69 73 53 6e 69 70 70 Data Ascii: ptSrc(this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))return n}static isSnipp
2024-04-18 17:22:22 UTC	371	IN	Data Raw: 6e 64 6f 77 2e 7a 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e 74 68 65 6e 28 28 65 3d 3e 74 2e 67 65 74 50 72 6f 64 75 63 74 73 28 65 2c 72 29 29 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 69 66 28 65 26 26 Data Ascii: ndow.zEACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().then((e=>t.getProducts(e,r))).then((e=>{if(e&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49806	172.253.124.157	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:22 UTC	616	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=819939597&gjid=1855838004&_gid=253988120.1713460940&_u=IGBAgAABAAAAAGAAI~&z=1007773124 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:22 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 18 Apr 2024 17:22:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:22:22 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49804	64.233.185.147	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:22 UTC	580	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=819939597&_u=IGBAgAABAAAAAGAAI~&z=822565831 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:22 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:22:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:22:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49807	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:22 UTC	581	OUT	GET /images/speakers/34496/emq_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:22 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:27 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"27543-1533286604000" Last-Modified: Fri, 03 Aug 2018 08:56:44 GMT Content-Type: image/jpeg Content-Length: 27543 Connection: close
2024-04-18 17:22:22 UTC	7926	IN	Data Raw: ff d8 ff e1 0e a8 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 38 3a 30 33 20 31 34 3a 32 32 3a 32 38 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2018:08:03 14:22:28Zp
2024-04-18 17:22:22 UTC	258	IN	Data Raw: 02 ee db 47 87 f9 c9 da b5 80 27 7e 8c 0d a1 b5 6b 05 df 47 71 ef e7 fd 94 17 3d c1 c5 c0 ed 9d 23 4e e0 28 64 17 bc b4 83 2c d0 b8 46 b0 20 22 56 d6 d8 e6 88 20 13 df 43 a0 4a 97 90 6a 91 3d 8f 73 e4 34 99 1d 82 5a f9 f1 b7 82 8f 6e 6b eb 22 ba 80 0d 67 24 eb 2a 3f 6f 7f ee 37 e8 c7 27 94 75 55 74 bd 5f ff d2 e7 28 2c 17 5e 49 da 1d 55 92 09 e4 8d b6 35 9f ca fa 2b 53 ea d6 61 6f 51 b5 83 56 58 cd ae 74 6a 5c 25 db dd fc ad 36 2c 66 96 3a e7 7e 6b 4d 76 34 4f d2 97 32 19 3f cb df ec 5d 07 4b a2 8a f2 fa 6b ea 0c 1e b9 f4 ed 2c 3c b8 54 f7 b9 8f 6f f5 da ab d7 a4 f9 32 c6 55 38 d7 72 ef 5d 84 d3 82 d8 9d ed 25 cd 7b 4c 10 5c 77 15 cd 75 4c 4b 72 ed 1f 6b b0 d9 04 10 e8 01 f3 3b 87 e9 1b 0e fa 4b 7e cc 9b 71 ea 35 fd 26 03 f1 21 61 67 65 be d7 ed 6f b5 80 Data Ascii: G'~kGq=#N(d,F "V CJj=s4Znk"g$*?o7'uUt_(,^IU5+SaoQVXtj\%6,f:~kMv4O2?]Kk,<To2U8r]%{L\wuLKrk;K~q5&!ageo
2024-04-18 17:22:22 UTC	8192	IN	Data Raw: 9a 2d b9 22 0c 75 af b1 87 50 b3 1f 19 a1 ac d5 94 88 24 77 3f 9d ff 00 49 73 b6 59 63 dc f7 77 b1 db b5 2b 4f 36 d6 d7 8e ec 8b 38 dc d6 34 78 4e e5 90 eb 37 3b 70 fb c1 e7 44 f8 0d 2d a9 9a 57 20 3b 25 a2 cd ae dd 61 dd b0 4b 54 0b cb 9c 5e e3 2e 3c 95 16 92 6b 7b a6 63 e9 4f 70 52 a8 8f 51 a0 8e fa a2 c6 2d 91 65 85 80 81 a0 6c fc 92 a6 c0 2d 69 3c 19 50 36 bc 12 4c ea 04 04 cf fa 4e 88 8e 74 f3 d5 14 af 66 3d a5 e7 6b 4b 81 98 23 ba 8f a3 67 fa 33 f4 3c 3b a7 fb 4d cd 80 1d a0 e2 44 a9 7d b2 ef 06 f1 e0 96 aa d1 ff d3 e4 6c ca 6d 56 0b 2b 87 16 03 27 b7 b8 6d 73 3f ad ee 5d 3f d4 4e 95 6d ef c8 eb 59 62 5e e0 ea b1 47 00 10 7f 59 b1 8d fe d7 a1 bf fe 39 72 fd 2f a6 e5 75 7e a3 47 4f c4 03 d5 b5 d0 d2 7e 8b 00 f7 59 73 ff 00 91 4b 3d ff 00 f9 da f6 1e Data Ascii: -"uP$w?IsYcw+O684xN7;pD-W ;%aKT^.<k{cOpRQ-el-i<P6LNtf=kK#g3<;MD}lmV+'ms?]?NmYb^GY9r/u~GO~YsK=
2024-04-18 17:22:22 UTC	8176	IN	Data Raw: 98 ae a4 d4 6a fc 6b 3f 9f 73 d9 1e d2 ec 69 1b 1b 2a b5 a3 d7 56 38 de d7 c8 ae a3 c9 64 63 51 96 54 7a fc 4a 8f 3f 2d d5 d9 f1 ea ea dc 9e 7e 4b bb 2d f1 c9 7f cf 16 fc c1 cb 4b 1b 31 fa da dc 12 ea bb 09 99 69 6a f9 da 53 b4 7a 9f 2a dc 19 5f 60 f2 1d 7f ac 20 64 79 15 f5 dd 8e 0f 91 fe 3e c0 d7 46 b2 b2 3d 3e 45 26 af 0e bd 14 3c 97 22 d7 99 51 ad bf 66 e4 7c ac 97 53 63 99 75 7b 07 c1 31 7d b5 91 6c 6c b3 59 e3 3b b3 6b da 66 17 3b a3 24 81 8d 60 13 2f 1d 61 3e 04 89 66 a0 c6 4c 35 c8 24 64 b7 20 35 e3 91 f6 2e d9 99 7d 58 ff 00 99 33 3e 64 5b 3e bb 11 c8 3e 89 fa b1 93 e7 f6 db be be 20 22 66 f8 89 ec ad be c2 e9 e5 54 f5 f7 0b ca e6 e3 05 c3 f3 dc 6e da 83 14 b8 f0 b2 96 ec 0c 9d 5e 0b 2f cd e4 f6 12 e3 48 9d e9 5d ce ae f5 b3 68 f7 37 b0 bd 7f eb Data Ascii: jk?siV8dcQTzJ?-~K-K1ijSz_` dy>F=>E&<"Qf\|Scu{1}llY;kf;$`/a>fL5$d 5.}X3>d[>> "fTn^/H]h7
2024-04-18 17:22:22 UTC	2991	IN	Data Raw: 56 b9 e3 54 72 31 19 3a e6 69 d6 55 b4 92 b4 92 64 a3 5e c1 0d cd 3b 88 b1 23 b1 5c 8a 20 43 88 36 a3 04 e6 e8 88 a9 fe fb 48 aa 19 b1 60 eb 12 2d 19 25 97 79 f5 90 f8 67 94 f7 0d ce 0b 1a aa f7 09 62 bf 70 f5 47 69 a2 aa 75 56 69 1b 46 13 c7 9a c7 3c ef 6b 06 33 92 29 98 16 11 ce d5 04 85 33 18 dd ca 8d f6 9c d4 55 d3 5e 8c c8 14 53 ec c0 67 cd 3c 49 f1 54 3d 89 dd 83 3d 5e 34 ee 19 bd 83 35 ae 6a 10 4b e2 d7 6a 89 aa 78 af e9 3b 7f d1 bb be 05 9f 8b 7f c5 f1 9e ff 00 f8 9e 8f b1 d5 e3 3b 4c ad a8 9d 81 f2 95 3c 33 59 86 19 2f 47 37 28 e2 d9 35 b4 32 a7 90 6d 21 0b 91 9a fa 4c 4a e0 a4 66 a3 a2 a3 77 31 e3 60 54 89 f4 55 7b 89 47 c2 20 0f 94 67 17 01 ce 27 61 d6 6a 27 5c 5e d7 7d 3e 66 39 35 c6 2f 91 52 ba 69 c2 4b 08 79 4d 41 e4 29 14 62 9a a2 19 10 cd Data Ascii: VTr1:iUd^;#\ C6H`-%ygbpGiuViF<k3)3U^Sg<IT==^45jKjx;;L<3Y/G7(52m!LJfw1`TU{G g'aj'\^}>f95/RiKyMA)b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49808	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:22 UTC	574	OUT	GET /images/defaultWebinarImg.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:22 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:27 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"39547-1624024690000" Last-Modified: Fri, 18 Jun 2021 13:58:10 GMT Content-Type: image/jpeg Content-Length: 39547 Connection: close
2024-04-18 17:22:22 UTC	7926	IN	Data Raw: ff d8 ff e1 0b 4e 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 58 02 00 00 01 01 03 00 01 00 00 00 57 01 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1e 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d2 00 00 00 69 87 04 00 01 00 00 00 e8 00 00 00 20 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 30 36 3a 31 38 20 31 39 3a 32 36 3a 32 34 00 00 00 04 00 00 90 07 00 04 00 00 00 30 Data Ascii: NExifII*XW(12i ''Adobe Photoshop CS6 (Windows)2021:06:18 19:26:240
2024-04-18 17:22:22 UTC	258	IN	Data Raw: 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f Data Ascii: 6-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.co
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 46 44 42 41 44 42 41 42 38 33 42 37 45 45 30 36 44 37 36 38 38 30 38 32 32 44 43 32 46 32 46 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 39 Data Ascii: ap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="FDBADBAB83B7EE06D76880822DC2F2F1" xmpMM:DocumentID="xmp.did:99
2024-04-18 17:22:23 UTC	8176	IN	Data Raw: 38 2c 87 9c 7c 25 16 28 ee fc f5 4a ab 2d ad fe 21 dc ae a3 a4 ed ae c0 77 2e b1 9a bb a0 2c 41 09 e5 ad 71 04 e3 c9 67 21 b6 96 91 81 af 72 d0 9b 69 0b e7 95 b1 33 37 e6 4f 01 c5 28 bc 97 6c 6d bb 04 96 f2 b8 dc 87 37 4c 95 a6 04 80 ec 07 61 58 11 9d b5 b6 e5 a6 4b 99 24 13 97 38 09 2b 5f 00 34 65 41 40 dd 84 46 d6 e9 f0 3d c1 ee 65 28 46 44 1e 2a 52 37 96 e6 ac 58 ad 1f 58 0e 20 4c b2 c3 6d 0c 97 37 33 32 d6 de 1c 5f 3c a7 4b 1b de 4a b8 18 6d c3 ae ed da d9 3f b3 da fc db 40 21 db 95 d9 30 db 0e d6 b7 ce ff 00 a0 2b 81 cc f7 8e b4 9e eb 5b 2f 77 4b 8b e6 d7 ff 00 89 68 45 ad b0 fe 5f 13 bd a5 51 9b 87 76 dc e6 a8 da b6 c8 e0 04 e0 f6 47 ad c7 bd ee e2 ae 44 d6 ed dd 63 7c 41 74 d2 b7 56 6d f5 03 69 d9 46 04 c8 74 74 67 53 48 6a f9 dc 7b dd 2b 92 d0 87 Data Ascii: 8,\|%(J-!w.,Aqg!ri37O(lm7LaXK$8+_4eA@F=e(FD*R7XX Lm732_<KJm?@!0+[/wKhE_QvGDc\|AtVmiFttgSHj{+
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 36 6d 36 ee a5 63 da ca c9 5e 34 34 1f a5 71 9b 61 ed f5 cf 86 c6 c7 7d 01 c2 ae a3 1f 92 df ba 4e 9c b4 82 f6 1b a8 c3 8c 8d 69 a6 6b 53 6c b1 74 c5 c5 3d 05 eb 9a 03 25 7f aa da 8a 4d 9e 1d a3 8a b7 77 2d ba b9 54 6e 5b 9c 30 97 7a 45 ce 03 89 f0 85 c7 6d eb 7a 74 e5 cc b7 cd da 47 b5 ed 12 35 8d 35 ab 59 85 7d a7 15 ca ed 5e 9f 59 23 9a c1 37 ad 7d 3b c9 a4 70 b4 07 72 c4 d4 fb 80 a9 5e bf cb 2e 72 f9 df fa 17 3a 49 3c b2 3d 29 6c fd e3 ab f6 6b 38 1d 59 2f 0d cb 61 78 c7 17 09 1d a8 76 50 af 5e 72 f9 7b d7 a7 ee ed 5b b7 98 2c 59 e4 b4 8c c6 0f 3d 2f 72 cf 67 94 d7 c2 3d 2a 2a b0 d0 a9 c9 01 d0 f6 a0 19 20 43 b9 a0 64 9a 0c 50 4b b5 db b7 0b d2 05 ad 94 d3 03 f1 53 43 7f 99 d4 41 3f 74 d8 6f b6 48 6c ee 67 90 36 69 de 69 e9 92 3d 37 01 51 47 73 41 75 Data Ascii: 6m6c^44qa}NikSlt=%Mw-Tn[0zEmztG55Y}^Y#7};pr^.r:I<=)lk8Y/axvP^r{[,Y=/rg=** CdPKSCA?toHlg6ii=7QGsAu
2024-04-18 17:22:23 UTC	6803	IN	Data Raw: bd 5c 18 9b 1e e4 1b 34 e3 07 5d c2 cf 4c 3b 96 a8 ea 47 b9 71 7b 35 b5 68 c9 ad ae 6a 63 7b 49 a6 23 22 8e b3 64 39 ed 06 6c cc f0 46 b2 af 8d ce b5 98 b9 e0 fa 4e c2 41 cb b5 5d 2e 0a b5 d2 d9 59 58 dc 1c de cc 4a e9 ed 2b 18 c2 b1 f0 3a 32 75 0c 09 58 d9 de 5e 0f d8 5a be e6 e6 38 e1 65 64 90 e9 03 bb 35 c8 da f0 db ef 17 d6 9b 26 cf 27 cd 7a 52 5e bd a0 59 c2 df 30 78 c8 82 31 c1 7a 3a ba fd ab c1 bf 77 ad 52 6c bd 41 0e e4 d6 c1 31 10 df 11 e2 81 c4 51 c7 9c 64 e7 dc 9d bd 37 57 4e ae f9 b7 0b 5b 98 75 62 31 e6 57 0d 79 8f 4e a8 f6 0e f4 6e 3e 5e 5c 1b 31 ac 67 ef 72 f6 ae dd 5b 4d 78 a9 d9 a5 5e cc cf 09 d2 31 c8 9e 4b b6 de 32 e3 ad e7 0c cd d4 63 52 e3 6b d7 35 b8 44 84 47 1c 9e a3 cd 19 11 d4 e3 dd 8a e5 52 cc f0 73 a9 25 0e d8 b6 b6 3e 82 69 2f Data Ascii: \4]L;Gq{5hjc{I#"d9lFNA].YXJ+:2uX^Z8ed5&'zR^Y0x1z:wRlA1Qd7WN[ub1WyNn>^\1gr[Mx^1K2cRk5DGRs%>i/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49809	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:22 UTC	590	OUT	GET /images/speakers/60403/Remi%20Vogel_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:22 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:27 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"25451-1698212734000" Last-Modified: Wed, 25 Oct 2023 05:45:34 GMT Content-Type: image/jpeg Content-Length: 25451 Connection: close
2024-04-18 17:22:22 UTC	7926	IN	Data Raw: ff d8 ff e1 0b a3 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 31 30 3a 32 35 20 31 31 3a 31 35 3a 30 32 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:10:25 11:15:02Zp
2024-04-18 17:22:22 UTC	258	IN	Data Raw: 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 00 00 00 01 01 00 ff e1 0e 5a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 Data Ascii: otoshopAdobe Photoshop CS68BIMZhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 Data Ascii: -14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/Resou
2024-04-18 17:22:23 UTC	8176	IN	Data Raw: 0d 50 fb 5f af f1 75 ac c7 19 84 a7 95 a2 85 6d 2d 43 d4 d5 b4 b5 32 7b af 75 6a de fd d7 ba 83 93 c8 d1 62 31 b5 f9 6c 95 4c 74 78 fc 65 15 56 42 be ae 5b 88 a9 68 a8 a0 92 a6 aa a2 4b 02 74 43 04 4c c7 8f a0 f6 cd c5 c4 36 b0 4b 71 71 20 58 51 4b 31 3c 00 02 a4 fe ce af 1c 72 4d 22 45 12 d6 46 20 01 ea 49 a0 eb 4a ef 96 df 23 b3 df 39 7b ff 00 7d ee fc 58 c8 55 75 fe c0 af 3b 3f 60 50 57 46 63 c4 e2 b1 90 54 2c ac d1 d3 f9 d2 29 37 0e 65 24 6a 8a e9 1b 4f 8a 29 16 2d 56 fa 63 56 fb bc cd b9 de 4b ba dc 12 3c 6f ec 94 e4 a4 22 ba 47 cb 57 c4 69 92 69 5e 1d 4e fc b1 cb b1 fd 3a d9 c7 42 b1 d3 59 1f 8a 53 f1 67 fa 3f 08 f9 7c fa 06 ba cf e1 15 6f 60 e6 7f bc db bf 71 c8 94 0f 59 3c df c2 e3 9f ef 59 a1 a8 64 bc 5f 72 e8 ea b5 0a 21 b3 15 8c c6 aa 42 c7 60 Data Ascii: P_um-C2{ujb1lLtxeVB[hKtCL6Kqq XQK1<rM"EF IJ#9{}XUu;?`PWFcT,)7e$jO)-VcVK<o"GWii^N:BYSg?\|o`qY<Yd_r!B`
2024-04-18 17:22:23 UTC	899	IN	Data Raw: 9f 64 ef 4d 9d fe 8c 2a 05 1e e5 a9 ae 5a cd d0 af 0f dc 63 32 d8 aa 80 f1 53 e2 b2 b4 65 95 2a 0d 4b b3 4c d2 92 26 88 22 b2 ba df d8 ef 77 9a 6b 39 e2 36 34 f1 68 4b 57 35 1e 40 8f db f6 75 14 6d 76 f0 5c db ce 6f 12 b1 69 d2 be a0 fa 83 f2 eb e7 e7 fc c5 7b d0 7c 8a f9 a7 f2 5f b7 56 aa 39 b1 b9 ae cd ca 60 70 2d 14 ad 25 2f f0 0d 8b 05 2e c7 c6 8a 09 5d 85 e8 a4 87 00 64 8f fd 52 be a3 c9 f6 39 db b5 0b 38 19 d0 09 1d 43 10 3d 4e 7a 2c 74 54 95 a3 15 2a b8 04 fc ba ae cc 81 41 58 cf 26 97 50 b2 23 24 8a ad 1c 91 c8 a5 19 1c b0 21 b5 20 e6 dc 5b eb f5 f6 ac 9a d4 75 7a 1f 4e 93 79 1a 3a 5c 5c 34 d3 d1 15 8a 9e b6 46 48 e8 42 aa 05 f1 26 a9 a6 80 27 09 08 7b 0d 3c 01 a8 5b f3 6a 1e 9d 56 66 04 b1 e9 3b 57 58 0a 84 11 9e 18 7a 80 28 c1 4d c7 e0 b7 e9 1f Data Ascii: dMZc2SeKL&"wk964hKW5@umv\oi{\|_V9`p-%/.]dR98C=Nz,tT*AX&P#$! [uzNy:\\4FHB&'{<[jVf;WXz(M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49810	108.177.122.155	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	798	OUT	POST /g/collect?v=2&_ng=1&tid=G-MRX28K3N0M&cid=555618656.1713460940&gtm=45je44f0v9136427955za200&aip=1&dma=0&gcd=13l3l3l3l2&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:23 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:22:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49811	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	593	OUT	GET /images/speakers/62614/Terry%20Winship_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:23 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"24052-1706170142000" Last-Modified: Thu, 25 Jan 2024 08:09:02 GMT Content-Type: image/jpeg Content-Length: 24052 Connection: close
2024-04-18 17:22:23 UTC	7926	IN	Data Raw: ff d8 ff e1 0a 1f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 31 3a 32 35 20 31 33 3a 33 38 3a 33 33 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:01:25 13:38:33Zp
2024-04-18 17:22:23 UTC	258	IN	Data Raw: 34 2d 30 31 2d 32 35 54 31 33 3a 33 38 3a 33 33 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 42 30 30 45 41 45 45 35 38 42 42 45 45 31 31 38 44 44 34 38 43 36 35 39 41 41 30 41 33 34 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 41 30 30 45 41 45 45 35 38 42 42 45 45 31 31 38 44 44 34 38 43 36 35 39 41 41 30 41 33 34 32 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 41 30 30 45 41 45 45 35 38 42 42 45 45 31 31 38 44 44 34 38 43 36 35 39 41 41 30 41 33 34 32 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c Data Ascii: 4-01-25T13:38:33+05:30" xmpMM:InstanceID="xmp.iid:5B00EAEE58BBEE118DD48C659AA0A342" xmpMM:DocumentID="xmp.did:5A00EAEE58BBEE118DD48C659AA0A342" xmpMM:OriginalDocumentID="xmp.did:5A00EAEE58BBEE118DD48C659AA0A342" photoshop:ColorMode="3" photoshop:ICCProfil
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 41 30 30 45 41 45 45 35 38 42 42 45 45 31 31 38 44 44 34 38 43 36 35 39 41 41 30 41 33 34 32 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 31 2d 32 35 54 31 33 3a 33 38 3a 33 33 2b 30 35 3a 33 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 Data Ascii: sRGB IEC61966-2.1" dc:format="image/jpeg"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:5A00EAEE58BBEE118DD48C659AA0A342" stEvt:when="2024-01-25T13:38:33+05:30" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <r
2024-04-18 17:22:23 UTC	7676	IN	Data Raw: 51 4b 52 b4 c9 5f 53 13 15 12 18 17 c6 28 31 11 9b 02 25 ae ab 9a 24 71 c5 c3 91 f8 e2 de f8 7b 8f 73 bd ee f1 ec 56 72 d3 6d b5 23 50 1e 6c 7e c3 d1 3f b7 3c a7 06 d3 60 2e a5 80 1b a9 a9 93 e4 38 fa 74 6e f6 b6 36 aa 8b 6f fd c4 c4 54 65 f3 75 06 4a a9 51 41 96 a6 aa aa a3 c9 3c a0 0d 2c b1 fd c4 84 46 a0 59 22 45 00 70 3d c6 9b 5b d5 81 73 dd 4e 86 33 ab 78 cd 19 03 48 e8 7f eb de bc c6 d0 44 29 da 2f 24 70 c9 f7 35 6f c1 15 19 59 50 26 80 6f ff 00 01 a8 29 42 c2 9f 92 01 63 cb b5 d4 4d 70 49 d0 87 87 46 76 56 c2 08 7c 50 b9 e1 f9 74 61 e9 29 a2 82 14 51 06 98 91 02 a0 48 c6 84 d2 2c 01 16 36 04 7b 5b 6b 29 65 cf 0e a9 33 12 c7 c3 61 5e a0 e5 69 69 de 07 6f 10 b6 97 05 74 dc 91 a6 ff 00 43 6e 6f f4 f6 b1 4e ae 9a 46 f1 14 83 f1 75 5e 9f 25 76 75 3c 39 Data Ascii: QKR_S(1%$q{sVrm#Pl~?<`.8tn6oTeuJQA<,FY"Ep=[sN3xHD)/$p5oYP&o)BcMpIFvV\|Pta)QH,6{[k)e3a^iiotCnoNFu^%vu<9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49812	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	582	OUT	GET /images/products/detail/206534rec.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:23 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"52422-1710162211000" Last-Modified: Mon, 11 Mar 2024 13:03:31 GMT Content-Type: image/jpeg Content-Length: 52422 Connection: close
2024-04-18 17:22:23 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 99 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:23 UTC	258	IN	Data Raw: d3 aa 40 26 05 22 0b ee 09 66 1e ee 61 14 ec f9 52 ba 68 e7 d8 c8 dd e2 b6 67 99 d4 ca 84 8e 10 a7 42 9f b3 5d 0e 56 b1 ca 6b 0e 48 ee df 65 a2 a1 cb dd 8a 85 d3 90 7b 45 ef 17 f4 25 79 7d dd b9 9c 3d 4e 9e bc c3 65 b4 70 8d 45 36 57 24 57 10 e9 b7 ba c6 c2 02 7c 89 57 88 43 2e 14 d8 69 99 0c 87 0d b9 95 4b 0a ac 41 55 0d 4c f3 39 70 6d e0 34 f2 21 74 57 3e da 2f a6 f9 51 66 e6 32 5d ee ba e7 87 61 8f 85 52 44 5d b8 27 6b cd 4d 2d 47 4e 88 d0 b4 48 85 8a d5 2b 25 98 56 ee 0a 0d b4 a2 89 b1 17 e6 ae 8a 4b 9b 62 bd 31 b1 35 24 4c 17 14 ec d7 7d 1e 6e ca ab ef b2 20 e1 0f 91 77 6b a2 1c 98 22 a0 aa 59 53 6d 52 0a 18 2e d4 eb a4 02 e2 be 4a 01 40 ca aa aa 7f 35 30 11 55 33 2a 8f 47 55 00 74 52 d9 59 12 c3 c8 a1 c4 79 b1 70 d4 1b 55 4d ef 25 32 76 b3 d2 fa 4a Data Ascii: @&"faRhgB]VkHe{E%y}=NepE6W$W\|WC.iKAUL9pm4!tW>/Qf2]aRD]'kM-GNH+%VKb15$L}n wk"YSmR.J@50U3*GUtRYypUM%2vJ
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 5a e3 47 82 9d b0 c5 d7 b1 15 c4 c8 44 b7 8b d6 1d ef d8 b5 d1 57 99 be 7c a7 d8 6f 04 c7 1c 57 1d d2 aa 4a 33 1e 0a 63 43 41 4f 65 00 99 2d 00 99 74 53 41 64 83 95 a4 79 36 bc d7 d2 02 2d 01 d4 5a 00 c2 8a 5d 14 02 c2 d2 27 4d 2b 60 e6 3b 0f 3a e2 34 c3 44 eb 8b d9 00 12 55 5f 76 83 2c 96 de 5c f3 02 e3 82 c2 d3 77 27 85 7b 2e 24 57 50 3f 98 43 96 b0 b8 47 df ec 57 7d 3d 72 3b 65 ea 29 42 b8 36 20 67 18 d4 73 08 ba 39 87 36 52 f4 4a 81 84 49 ba 05 b1 12 b0 61 e8 0e 5e 7c 2c db b5 1e 97 b6 6a 0b 85 f9 e6 12 e2 ca 48 18 6c 30 28 40 25 d9 1e 21 38 79 b7 7d 5a 61 85 93 58 7c 3b 72 ff 00 4a 68 6b dd e4 24 5c 26 4c 81 0d e7 63 ac 87 81 01 1d cb f8 7b ad b6 1d ec 37 68 33 47 b4 f2 4b 95 71 59 69 c6 b4 fb 2e aa 8a 1e 32 0d d7 f1 fe 63 86 34 05 3b e2 23 4d 69 bb Data Ascii: ZGDW\|oWJ3cCAOe-tSAdy6-Z]'M+`;:4DU_v,\w'{.$WP?CGW}=r;e)B6 gs96RJIa^\|,jHl0(@%!8y}ZaX\|;rJhk$\&Lc{7h3GKqYi.2c4;#Mi
2024-04-18 17:22:23 UTC	8176	IN	Data Raw: a5 46 ba 6a 39 52 63 b8 c1 04 78 a0 08 e8 10 2a 8b a6 e9 66 1c dd df c2 ac 6b d2 54 19 e1 5e 75 dc 4d de 67 6a 57 91 71 c2 6b 8c 8f fb 8c 1b fc ba 18 f5 b7 25 dc 27 39 55 a5 c9 7a 7c 0b 69 f4 77 68 0b a5 68 53 f9 c3 7c fd 13 96 3a 8e e0 85 94 d2 19 c7 69 7c 87 27 fc 3b 65 f4 9d 4a 03 c2 56 c8 87 2e e9 0e 28 f6 a4 be db 5f 48 c4 7e f5 28 7d 1d 44 c1 30 4d 88 94 c0 28 68 50 1e 6d f8 be 98 bc 7d 2f 0d 17 62 0c c7 4c 7d a2 64 47 ec ad 2d 83 cf d1 04 94 91 51 3a 2b 9e c6 4d ac 94 6d 8c 49 36 50 d7 34 a5 e2 15 b3 57 da 6e d2 c0 ce 1c 09 ac 4a 7d b6 90 54 c8 58 75 1c ca 39 88 07 bb e9 53 07 a1 6e df 15 16 a8 ec f1 20 58 1f 91 8f 67 8e f8 33 f6 45 ea 7e 45 b5 58 f7 34 f9 b3 70 e6 0c 8b 79 49 82 d4 06 6d c8 f2 30 db 6e 13 84 bc 7c 99 b3 11 64 ff 00 56 9d da 59 91 Data Ascii: Fj9Rcx*fkT^uMgjWqk%'9Uz\|iwhhS\|:i\|';eJV.(_H~(}D0M(hPm}/bL}dG-Q:+MmI6P4WnJ}TXu9Sn Xg3E~EX4pyIm0n\|dVY
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: d2 69 86 7e 87 ba 09 4b 04 99 7b a3 97 f1 7c 2e 85 d3 cc 61 82 85 ba 2e 6f 68 9a 12 2f ad 5d 15 69 f6 a4 b5 bd 76 d3 d7 3b 5b 2e 8b 0e cf 88 f4 50 78 93 14 02 7c 09 bc d9 7d 5c d4 d2 18 f4 2f 85 e8 42 c2 35 36 fe e1 e3 da 46 23 8b 7f 58 9c 3f b3 51 f8 da 26 a4 e4 5e 99 b3 46 b4 42 b5 cb 95 e3 ae 77 06 e2 71 e4 10 38 82 04 06 e3 85 c3 11 67 fd 5a 77 a9 a3 58 4e 41 f8 79 b2 b6 89 e3 2e f2 5f f4 b8 2d 83 3f 6b 8d 4f 42 cd 59 f7 c4 06 84 d3 ba 4a c9 6a 5b 5a be 53 26 c9 36 cc df 73 3f e1 34 1b db a2 20 3d a2 4a 5b 9a b0 a7 69 c7 1e 6e 00 36 29 82 aa 61 8d 72 f0 e3 2e 8b 5f 92 7d 96 63 36 19 9e 54 25 a8 f6 37 e2 14 d7 a8 49 17 f8 50 47 14 4d 95 c9 a6 93 0a 6d 98 aa 39 eb ec 0b b7 e1 aa a0 a2 d7 7c 5a 61 cd 18 b1 46 34 ad b9 c5 17 45 c2 4e bd 8b 53 af 6a 26 4d Data Ascii: i~K{\|.a.oh/]iv;[.Px\|}\/B56F#X?Q&^FBwq8gZwXNAy._-?kOBYJj[ZS&6s?4 =J[in6)ar._}c6T%7IPGMm9\|ZaF4ENSj&M
2024-04-18 17:22:23 UTC	8176	IN	Data Raw: f6 1b a7 da 7f a2 46 2c 08 51 51 52 34 76 a3 a2 f6 91 b0 10 fb 35 48 d5 08 5b b3 79 2f 4d c6 12 9d 97 90 ad c1 30 14 0f da 14 0c 40 51 96 f8 0a 19 8b 05 1c 64 fc ac 33 4d 38 e9 a3 6d 01 38 e2 f6 40 53 15 ac c8 e0 eb 2c 3c f3 c0 cb 2d 93 af 38 b9 41 b1 4c 49 4b d1 11 a3 26 f8 d3 d2 b9 7f ab a2 c2 29 af 40 54 65 b1 cc 78 18 19 a2 79 72 89 66 a8 c6 dc ba e7 eb ad c7 3e bf aa f3 a2 ec ce da f4 44 a9 a3 3e 2d be 5c e2 07 02 e2 4a 26 2d 34 68 19 41 cc d9 07 36 d2 d9 e5 54 ae 7d b7 f2 f5 fa 9a 22 9a f2 cd b5 13 ef 3f 79 92 6e cd fd 40 b3 64 f1 88 22 22 e0 88 e5 c4 44 2b b2 8f 07 b5 3e 51 d5 49 72 e7 c0 56 34 28 01 40 0a 00 50 02 80 14 00 a0 05 00 28 01 40 0a 01 8d d9 be 24 71 4c 31 c0 d1 7e a9 57 9f f6 1e cf a0 fa 18 ff 00 94 d1 96 d0 7a 52 bc 08 8c cb ee ad 38 Data Ascii: F,QQR4v5H[y/M0@Qd3M8m8@S,<-8ALIK&)@Texyrf>D>-\J&-4hA6T}"?yn@d""D+>QIrV4(@P(@$qL1~WzR8
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 97 d6 ae 05 bf c4 18 ef be b8 e6 5f 46 b9 b6 ca d4 58 35 0d c1 22 db 9c 44 d8 b8 52 c3 65 88 5d 64 2b 8f 19 2a f4 ae 35 d7 ad 19 4d f2 d6 37 1e ff 00 b5 31 40 1c 69 76 b6 aa 55 74 24 14 07 68 0e a5 01 da c6 b4 8e 4d a7 f8 8b 92 fa 8d fd a5 ae ce 9f bb e7 fe eb da 1a 8d 77 cf bb e6 27 fb 92 da 41 92 7b 54 da 41 3f f3 6c 9f ba 26 85 f7 6a 7b e7 10 eb fa fa e7 6b 63 b9 58 d5 9d 66 1a a6 74 96 98 b7 c1 8b c3 14 22 de 42 df cc 45 8e ea 0f e2 2f 7a b8 2b e6 1f 4b bb 44 46 e8 d9 eb d9 19 a5 6e f0 25 d9 b5 45 f2 60 91 42 7e 53 b9 c1 36 1a b0 2d 08 88 f6 bb 59 57 d2 a2 d0 35 6c a5 f9 5b fc 15 ad 39 2b 4f 5c 39 85 68 5b 14 22 87 09 a1 71 4c 1c 4d aa 62 d9 96 3d a3 f3 77 aa f7 89 e0 f3 74 5e b3 da f1 f8 7e 4b d5 bf 52 48 ba ea cb c5 85 d6 5b f0 51 1b 44 17 47 14 32 Data Ascii: _FX5"DRe]d+*5M71@ivUt$hMw'A{TA?l&j{kcXft"BE/z+KDFn%E`B~S6-YW5l[9+O\9h["qLMb=wt^~KRH[QDG2
2024-04-18 17:22:23 UTC	3310	IN	Data Raw: b3 91 37 06 ee 4d 39 1d d2 71 1d 61 97 91 50 c5 a2 7d ac b9 84 bb 39 89 14 bf 6d 17 89 f8 db 82 17 48 b6 9b 2e 8e b2 5e a7 d9 5e d4 13 6e 79 49 a8 b1 c8 d8 61 a2 7c 78 9b dc 31 32 c7 a3 b5 8e 62 c6 b6 ad 93 5f 88 71 b9 48 d1 16 06 96 19 c4 29 0c 18 4a 06 85 78 51 8c 81 9f c2 22 ee a6 6c 44 7e 4a 69 15 55 fe 2c 3f 50 7e 56 94 88 c1 92 83 71 1e 75 23 a2 ec 53 22 01 cd 97 cb 95 29 e6 49 10 b7 72 9d e8 ae 72 12 0b 63 68 2b b3 d1 25 38 37 2b 73 4e 1b 2e e7 f1 44 e6 7f c3 1c c5 95 b2 02 cb e4 4f 35 11 22 61 3f 32 ed 21 bd 1d 31 98 ba 6d cb 6d b1 e3 44 37 8d e5 5c a7 98 77 b8 6e 0e 6c bb a8 39 bb 38 d2 cc 9a 20 f6 d9 66 0d 35 66 8f 72 1b 7b d7 6b d4 91 cc cb 6d 36 46 0c 29 26 6d b9 47 67 6b a7 a4 ba bc b4 56 a2 d6 57 a3 4c be bb ad 2d 73 ef ec 3c c7 16 48 20 2b Data Ascii: 7M9qaP}9mH.^^nyIa\|x12b_qH)JxQ"lD~JiU,?P~Vqu#S")Irrch+%87+sN.DO5"a?2!1mmD7\wnl98 f5fr{km6F)&mGgkVWL-s<H +

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49813	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	594	OUT	GET /images/speakers/34362/Carl%20Patterson_Large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:23 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"23523-1530526237000" Last-Modified: Mon, 02 Jul 2018 10:10:37 GMT Content-Type: image/jpeg Content-Length: 23523 Connection: close
2024-04-18 17:22:23 UTC	7926	IN	Data Raw: ff d8 ff e1 0c 95 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 37 3a 30 32 20 31 35 3a 33 37 3a 30 31 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2018:07:02 15:37:01Zp
2024-04-18 17:22:23 UTC	258	IN	Data Raw: 40 1e 35 f8 cc 78 14 a9 fa 76 05 0b 23 d4 6f 99 0a 74 89 36 3f c4 c0 f9 20 96 24 41 03 b2 bd d2 5c cf b7 55 bc c3 49 70 27 be 83 7f b7 f9 5e dd ad 55 1e 3b a9 62 5a 69 c8 ae c1 cd 76 35 c2 78 d0 84 46 e1 0e ff 00 4a bd b5 75 17 d0 fd 37 58 d7 8f 09 04 6e ac 7f 51 9b 16 2e 7f f4 fb bc 9e 47 dd ed 57 6e 8a f3 81 69 90 d7 18 3d c8 98 dd fd 6b 5e aa 75 26 c7 51 c9 1f f0 af fc a9 e4 dc 2b b4 96 81 ea be e1 aa fe 7e 49 13 35 94 9f f4 be ef e2 a1 3f a3 72 8d 7b e9 df 56 5d 56 5f d5 ec 2b 1a 4b 4b 6b f4 9e 1a 07 d2 a8 fa 47 dd fc ad 9b d6 97 a1 5f 83 f9 f2 58 5f e2 f7 2a 97 f4 27 e3 b8 06 bf 1a f7 02 4f 71 60 6d ac ff 00 bf b5 74 9e ab 3f 78 72 ab f0 fa eb c5 92 fd 3f 47 ff d5 f3 f6 11 03 cf 82 93 f4 09 db 59 20 f2 09 e7 4d 10 de 48 d3 9f bd 3b a2 9a f6 ba 1e 1d Data Ascii: @5xv#ot6? $A\UIp'^U;bZiv5xFJu7XnQ.GWni=k^u&Q+~I5?r{V]V_+KKkG_X_*'Oq`mt?xr?GY MH;
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 33 6b 1a de e0 6b f1 ee ab b9 8e f5 1a 4b 74 27 4e 55 a8 77 81 41 2c 5e 34 42 e4 91 e2 21 19 cd 77 81 41 da ed c7 43 a2 4a 74 72 6d 2f 0d ba 75 73 5a e2 47 1b b6 fd 1f fa d3 14 7a ac 7e d2 c9 8e 3d 47 11 f0 25 41 a0 bb 1a b0 5b 00 34 b7 e4 0f bd df db fa 09 b2 4b ec bd ef 20 cb a0 9f 8c 04 eb d0 f9 da da d5 a9 67 2e 3f 05 07 18 07 c0 a9 58 1d ae 87 52 50 dc 1d e0 53 57 3d 37 d4 8e a1 93 8f 91 95 8f 48 6b 85 d5 b6 cd af 24 00 6b 3b 64 6d fc ed 96 2e a7 f6 af 53 ff 00 47 4f 87 d2 7f 2b 84 fa bb 6d 94 75 4a 8b 41 9b 1a fa e0 09 26 5b b9 bf f4 9a ba bf b4 1f dc fc ef fa 4a 2a fd 67 d1 75 fa 3e af ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 Data Ascii: 3kkKt'NUwA,^4B!wACJtrm/usZGz~=G%A[4K g.?XRPSW=7Hk$k;dm.SGO+muJA&[J*gu>8BIM!UAdobe Photoshop
2024-04-18 17:22:23 UTC	7147	IN	Data Raw: ed d5 a7 90 bc b2 52 6e b8 a8 7e ce aa 48 41 95 21 a9 72 aa 65 08 41 d6 da f6 90 d6 49 61 24 14 c2 d4 71 a6 2b d2 ab bb 6d c2 e1 56 28 25 64 fd 5c 93 c2 95 e8 3a dd 7b 33 29 b4 fe 24 f6 37 5a a5 66 66 5d d5 bb f6 4e e6 a8 a3 a9 92 b1 ea 73 09 53 3d 2c d4 fb 7d a9 a6 96 c2 0a ca 3a 08 60 a7 85 75 34 86 60 c5 99 dc b1 28 25 8d 82 4a a1 46 96 7a 8a 79 0f 43 d0 81 6c 25 99 7e a5 a7 a3 00 00 07 35 60 38 e3 ad 7a fa 76 1e c3 97 1d d4 d8 2d e3 d8 0b b8 31 bb 7f 76 e1 f1 99 9d 8b 26 db 82 82 8e 3a 5c 4d 58 82 71 9e 99 e6 66 ae a8 cb 4c 23 9d 26 06 35 6a 7f db 3c 6a 3e dc b9 92 cd 45 a8 b4 85 be a1 68 4e 46 7a 0d 5f db ee df bb f7 84 dc a7 57 b7 68 98 00 01 04 0f 99 3d 5e b6 79 37 9c 8d 8f c5 47 80 9a b7 33 93 c7 e4 2b 31 18 ba ff 00 e1 54 b8 9c 9f d8 d4 34 53 1c Data Ascii: Rn~HA!reAIa$q+mV(%d\:{3)$7Zff]NsS=,}:`u4`(%JFzyCl%~5`8zv-1v&:\MXqfL#&5j<j>EhNFz_Wh=^y7G3+1T4S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49814	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	1220	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460940320&_gaz=1&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2F&dt=Online%20Professional%20Trainings%20Provider%20%7C%20Professional%20Courses&sid=1713460941&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=7721 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:23 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:22:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49815	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	591	OUT	GET /images/speakers/59184/Soundarya%20J_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:23 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"22375-1693389339000" Last-Modified: Wed, 30 Aug 2023 09:55:39 GMT Content-Type: image/jpeg Content-Length: 22375 Connection: close
2024-04-18 17:22:23 UTC	7926	IN	Data Raw: ff d8 ff e1 0b f1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 38 3a 33 30 20 31 35 3a 32 34 3a 33 32 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:08:30 15:24:32Zp
2024-04-18 17:22:23 UTC	258	IN	Data Raw: 08 05 8e 0f da 4c 86 99 f8 4f c1 5a 20 92 0c 41 d3 66 9a 3f 53 ef 76 e4 13 1e a6 83 da 3c 62 67 4d dc 20 52 c8 38 0e 7b 28 1b 36 fb 47 74 ce b0 09 1d d4 eb 66 9b c8 24 18 0f fd dd 7e 87 b8 20 96 58 c6 cd db 84 c1 3c 83 a0 ec 5c f6 ab 73 4f ef 37 9d 9f 4b bf fa 5f a3 fc d2 10 b2 b0 cd 83 4f cd 78 6e 81 c0 7e 73 9c a5 e8 e4 7e eb f8 8e 0a 34 ad 1f ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 07 01 01 00 01 01 00 ff e1 0e 5a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 Data Ascii: LOZ Af?Sv<bgM R8{(6Gtf$~ X<\sO7K_Oxn~s~48BIM!UAdobe PhotoshopAdobe Photoshop CS68BIMZhttp://ns.adob
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 Data Ascii: om/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Descript
2024-04-18 17:22:23 UTC	5999	IN	Data Raw: 94 c3 23 40 8f b5 63 45 81 db 05 1b 2c 72 d8 7c a9 27 d4 2c a3 d5 74 b3 79 22 c3 24 cb 25 4d da 89 bf 67 1e 1b 25 d3 75 a5 1c 16 e1 e4 00 bd 20 9f 4a 7a c4 a9 09 e5 63 48 b2 6d 31 92 0d 4d 60 8d 0e 6c f7 16 51 83 92 80 99 21 0f 21 42 d4 b1 c0 13 c6 3d cf b8 a0 ea ed db b7 39 ca 67 40 d5 7d 85 93 8c ac 83 3f 52 a9 fd bc 3a 29 14 c2 8c b9 55 51 86 bd 69 1e 0d db 09 88 e9 c8 01 b6 7c b3 90 6e 50 a6 83 ea e4 82 53 f8 1d 60 2d 28 e0 c6 a0 f4 ad 65 95 83 96 cc 5c 12 c7 e8 12 e6 b1 2d 94 62 20 01 49 a9 61 76 a5 cb f4 f0 49 b8 1c b6 f0 41 c2 88 9f 1f db 4b b6 09 0d aa 28 13 20 cd 1e 49 9c df 42 52 68 75 8b f4 00 87 e9 1a 49 ad c1 ca 46 21 aa de 0e e5 5c 2c 99 07 d4 7e 85 1a 64 61 bc 92 1d 44 f8 e3 49 14 00 d3 0d ca 29 d0 fa d1 6f 41 44 0f 52 fd 06 9b ac 25 13 b9 Data Ascii: #@cE,r\|',ty"$%Mg%u JzcHm1M`lQ!!B=9g@}?R:)UQi\|nPS`-(e\-b IavIAK( IBRhuIF!\,~daDI)oADR%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49816	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	857	OUT	GET /images/favicon.ico HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.0.1713460941.60.0.0
2024-04-18 17:22:23 UTC	278	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"1150-1519975029000" Last-Modified: Fri, 02 Mar 2018 07:17:09 GMT Content-Length: 1150 Connection: close Content-Type: image/vnd.microsoft.icon
2024-04-18 17:22:23 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 00 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 44 ab 00 11 44 ab 00 2b 44 ab 00 23 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 44 ab 00 03 44 ab 00 59 44 ab 00 c9 44 ab 00 fd 44 ab 00 ff 44 ab 00 c9 ff ff ff 01 6a 2c 33 45 6a 2c 33 a1 6a 2b 33 61 6a 2c 33 17 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 44 ab 00 0d 44 ab 00 b1 44 ab 00 fb 44 ab 00 a9 44 ab 00 5d 44 aa 00 f7 44 ab 00 c7 ff ff ff 01 6a 2c 33 41 6a 2c 33 ff 6a 2c 33 ff 69 2b 33 ef 6a 2c 33 31 ff ff ff 01 ff Data Ascii: h( @DD+D#DDYDDDDj,3Ej,3j+3aj,3DDDDD]DDj,3Aj,3j,3i+3j,31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49817	104.18.70.113	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	599	OUT	GET /compose/zopim_chat/5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:23 UTC	1249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-expose-headers: access-control-max-age: 7200 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"d1ee0faf67078c58db5afac96fbf6350" x-request-id: 872abf81ad341839-SEA X-Request-ID: 872abf81ad341839-SEA x-runtime: 0.013968 X-Zendesk-Zorg: yes CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2L2gT6R%2B%2BIZdduIYEbs9%2BZIZme6pg38vxD40mJ3sB8yLq5P8wHPPZ59D56o09mdSjfecNHIvUJ8gw99bqyHRBkEyMbgGcJWASIG0t7USA3dyPYfh7viarUHvVfMRAWhYXBc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 8766563059e553bb-ATL
2024-04-18 17:22:23 UTC	120	IN	Data Raw: 33 63 62 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 74 72 61 69 6e 69 6e 6e 67 6c 6c 63 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 70 72 65 63 68 61 74 46 6f 72 6d 56 69 Data Ascii: 3cb{"products":[{"name":"web_widget","id":"traininngllc.zendesk.com","bootstrap":{"config":{"features":{"prechatFormVi
2024-04-18 17:22:23 UTC	858	IN	Data Raw: 73 69 62 6c 65 44 65 70 61 72 74 6d 65 6e 74 73 22 3a 74 72 75 65 2c 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 63 70 34 22 3a 74 72 75 65 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 30 2e 30 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 6c 65 66 74 22 2c 22 62 72 61 6e 64 22 3a 22 54 72 61 69 6e 69 6e 6e 67 20 4c 4c 43 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 62 61 64 67 65 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 69 6d 61 67 65 5f 6f 6e 6c 79 22 2c 22 74 65 78 74 22 3a 22 43 68 61 74 20 77 69 74 68 20 75 73 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 62 39 61 32 35 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 Data Ascii: sibleDepartments":true,"fastLoad":true},"color":"#6db578","cp4":true,"brandCount":0.0,"position":"left","brand":"Traininng LLC","embeds":{"chat":{"embed":"chat","props":{"badge":{"layout":"image_only","text":"Chat with us","color":"#2b9a25","enabled":true
2024-04-18 17:22:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49818	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	596	OUT	GET /images/speakers/60042/Stephen%20Abramson_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:23 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"22167-1696581916000" Last-Modified: Fri, 06 Oct 2023 08:45:16 GMT Content-Type: image/jpeg Content-Length: 22167 Connection: close
2024-04-18 17:22:23 UTC	7926	IN	Data Raw: ff d8 ff e1 0b a5 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 31 30 3a 30 36 20 31 34 3a 31 35 3a 32 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:10:06 14:15:28Zp
2024-04-18 17:22:23 UTC	258	IN	Data Raw: 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 07 01 01 00 01 01 00 ff e1 0e 5a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 Data Ascii: PhotoshopAdobe Photoshop CS68BIMZhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 201
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 Data Ascii: 2/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/R
2024-04-18 17:22:23 UTC	5791	IN	Data Raw: ad cc aa f5 e8 9f 22 bf a6 f2 06 d7 fe 38 a5 18 0c 01 41 e3 24 e2 4c d0 f2 2d fd c2 9c 04 82 3f 4e 71 4f ad 6d 11 32 d5 38 8f 6d 15 13 31 81 db 72 1b 16 28 00 9b f1 09 b8 90 55 37 87 10 5a 4d 30 03 81 84 7d 14 fa d4 47 85 eb a1 fa 4a 89 40 1c 2e 96 0a a8 8e 2e b2 61 8e 5c 73 96 96 fe d2 d2 a9 98 a6 40 a0 25 f0 0c e0 32 a9 fb a6 aa 95 24 5d 59 92 2a a2 8f ba 9c 82 c4 c0 94 40 45 67 1c a9 65 40 16 7b b3 20 c8 c9 b1 03 8f 40 ca 9a 5c ba 3c 72 66 43 fa 73 65 56 5d a1 52 43 f8 b4 b0 f5 c4 7c c6 38 85 19 b6 a5 fb ed b0 91 41 88 fd 70 32 ac b7 8b b8 c7 58 89 c0 4f 28 e3 80 6c e7 0a bf 22 b9 c0 30 ca 7b ef f6 24 88 18 1b 93 c5 3f 46 ae 05 13 d2 2c 06 78 45 26 41 21 7f 30 65 00 96 11 4d 66 93 c9 2a 32 0b 9b c1 61 39 4e fd ea ae 17 44 38 0e 7d 69 13 46 6a e0 11 fb Data Ascii: "8A$L-?NqOm28m1r(U7ZM0}GJ@..a\s@%2$]Y@Ege@{ @\<rfCseV]RC\|8Ap2XO(l"0{$?F,xE&A!0eMf2a9ND8}iFj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49819	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	592	OUT	GET /images/speakers/60019/Jacob%20Kelley_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:23 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"24225-1696489446000" Last-Modified: Thu, 05 Oct 2023 07:04:06 GMT Content-Type: image/jpeg Content-Length: 24225 Connection: close
2024-04-18 17:22:23 UTC	7926	IN	Data Raw: ff d8 ff e1 0d b7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 31 30 3a 30 35 20 31 32 3a 33 33 3a 35 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:10:05 12:33:58Zp
2024-04-18 17:22:23 UTC	258	IN	Data Raw: ff 00 a2 ba 36 e4 55 55 91 56 1b ee 73 7e 91 71 2f fe 3e d5 0e 5a 32 a1 bd 36 b0 02 21 c4 47 a4 9a 07 fb ae ed 35 36 f7 07 e5 d7 56 f8 86 96 90 4c 73 f4 d9 b5 6b 87 b9 b8 b6 d5 56 d7 8b 5b 1b 5e 01 04 c7 b7 72 e7 28 ea 4e f5 01 18 a3 11 9d 99 f4 8f c5 69 d3 9e c8 d7 49 e6 38 50 1e 20 59 fd 24 20 ea 75 7d 9f a4 de 2d b1 95 cb 0b 3d a7 6b 1a d7 c0 76 ff 00 f0 97 3f 46 7f d7 18 b0 68 fa b3 89 6b 77 8b ed 73 3c 5a d6 f0 7e 8f b9 df 49 75 19 38 f8 7d 46 a1 55 de e6 07 07 88 f1 6e a2 54 72 ed ca c2 ac 3b 11 b5 b8 40 6b 77 80 48 3e 3b 3f 39 28 64 95 eb 2a fc 96 9c 71 a2 4c 78 cf 8e ef 1a cc 0e 9e 3a bb b1 59 ea 3a 9a 89 9f 50 89 25 bf 4a 76 7e 6e e5 d2 54 fa c0 0c 60 0d 0d d0 01 c0 0b 05 b8 d9 58 d9 f6 e4 65 54 e2 eb 09 d4 0d be e7 1d c4 ed 56 1f 97 43 18 6c 78 Data Ascii: 6UUVs~q/>Z26!G56VLskV[^r(NiI8P Y$ u}-=kv?Fhkws<Z~Iu8}FUnTr;@kwH>;?9(d*qLx:Y:P%Jv~nT`XeTVClx
2024-04-18 17:22:23 UTC	8192	IN	Data Raw: 3d 8f fe 45 0e 63 d7 31 46 c5 07 43 e1 75 8b 04 a5 21 c3 23 29 13 7b f0 8e 88 1d 85 fb 50 75 4c 86 02 eb f1 ac 6b a9 8e 48 6e e6 bd 9f e6 b3 7a cc ce ea ae ea 19 66 db 8b c3 1a d6 b0 30 1e 76 8d 5e ff 00 de 72 b7 d1 b3 19 47 4f cf be d7 db 5f a8 e6 0a de ce 4d 8d 26 c6 b7 fa ca 95 6e 7d 8d bb 29 e0 1b 1e e8 22 00 1b 89 f0 56 b1 40 99 48 11 a4 47 a7 ec 72 b2 e4 b0 24 0e b9 09 94 c7 7f 54 9d 9f ab 9f b5 71 33 4d fd 37 19 f9 b8 a5 b1 91 8e d3 ed 73 1d a6 ba fd 3f dc 5d 4f ec fe 99 ff 00 95 39 df d1 f7 fd 01 ff 00 b0 7f f1 df f0 8b 9d e9 1d 44 74 1e aa c1 8f 19 00 00 c7 86 ea c7 b8 89 7b 2b db bb e8 5b fc da d7 ff 00 9e 19 ff 00 e8 5b fd 2b ed 1f 49 df 47 fd 0f 1f cd a5 c1 2e 3e 2d 3f 6a cb 87 7d 37 ff 00 d0 5f ff d5 e6 b1 2a a3 a7 0c 96 59 6b 1f 6b 4b 43 cd Data Ascii: =Ec1FCu!#){PuLkHnzf0v^rGO_M&n})"V@HGr$Tq3M7s?]O9Dt{+[[+IG.>-?j}7_*YkkKC
2024-04-18 17:22:23 UTC	7849	IN	Data Raw: db 12 b8 6c 7d 5e 6c 01 8c 14 02 50 50 1f 07 6e 45 c5 f3 b6 a6 26 15 d5 bd 31 7b 61 a9 45 a2 32 28 55 7f 4e c2 1c 07 c0 88 17 07 01 88 e5 68 7a 53 44 bb b1 cc 45 f5 22 c3 8c b3 be 4a 47 68 bc 66 db 7a e1 ba 07 40 46 19 c3 b8 7d d6 5a 2e 98 d5 f2 d6 05 d2 7f aa 35 2a f7 c1 fe 78 9a 9b 08 e0 f9 c3 a8 77 04 21 84 09 54 77 b2 72 47 7b 35 45 bb 46 6c 2a 5a ef 7c 17 a8 85 e4 d6 da 10 7e 9e e0 dd 2f 89 e5 87 4f a2 be ce ac 01 75 2a d1 ca c8 69 0c a3 e6 4f c6 0e 3a af 8d 57 aa 1c 89 4c a5 16 96 ba a4 91 55 af 6d af a3 8f 88 7d fc 8f 6f fa 95 11 f2 d7 35 bd 85 19 e4 bc d0 f7 cc d9 39 63 6d 73 3c f9 5f 6f e9 f6 c0 2c ad dc 9d db 02 87 36 28 16 74 ba 9f cf 9f 97 bd d7 55 5c 41 56 65 5f 57 b4 5c 24 5b d2 f1 32 cb 85 5a 8e 8c 92 97 f2 57 a9 47 69 c7 23 36 e9 66 c1 ae Data Ascii: l}^lPPnE&1{aE2(UNhzSDE"JGhfz@F}Z.5xw!TwrG{5EFlZ\|~/Ou*iO:WLUm}o59cms<_o,6(tU\AVe_W\$[2ZWGi#6f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49820	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	578	OUT	GET /images/secure-payment-stripe.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1
2024-04-18 17:22:23 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"13472-1531828297000" Last-Modified: Tue, 17 Jul 2018 11:51:37 GMT Content-Type: image/png Content-Length: 13472 Connection: close
2024-04-18 17:22:23 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b4 00 00 00 4e 08 06 00 00 00 89 c4 3c 4d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRN<MtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-04-18 17:22:23 UTC	257	IN	Data Raw: cd 68 8d 47 66 b8 89 37 db 78 22 fb b2 c5 8c 3d 64 2f 47 c9 15 0b 60 e1 55 bd 10 59 96 ff eb 1f 60 f1 e5 23 4b 1f 85 75 b8 1f fe b4 7c 0c 92 55 6a c9 c8 41 ce e2 4a d8 4b b3 10 2a ab 44 c0 ee 81 37 3c 46 76 77 14 21 52 d3 76 7b 29 5c 3e 0d 6d 44 05 0e ed ed 82 af 78 0e e6 2f be 15 59 0b 4a 10 18 19 c5 d8 c8 20 9c 59 f9 48 cf cc 24 fe 1c 44 66 24 13 f9 2e a2 11 9d 7f 80 32 d6 4b 86 58 19 d4 b0 89 a1 08 0f 57 d4 24 9f 15 d3 2a 97 4a 1d 9a 85 ff 8a da f1 dd d7 56 e0 ac b5 51 b4 67 75 61 db 81 36 e1 b3 bc 64 51 31 56 2d 29 43 67 db 00 7a 06 c6 04 c0 f2 33 9d 22 80 61 61 69 06 56 12 d7 db f2 46 33 6a 48 f5 7d e6 27 cf e2 a1 97 0e e3 7b 7f 77 16 56 91 54 b7 50 07 1f ac ef c1 73 04 e8 48 ef 08 ae bf 69 39 74 1a 88 96 67 0e a2 a9 cf 4f 13 71 e4 e4 bc 1c 2c 3d 49 Data Ascii: hGf7x"=d/G`UY`#Ku\|UjAJKD7<Fvw!Rv{)\>mDx/YJ YH$Df$.2KXW$JVQgua6dQ1V-)Cgz3"aaiVF3jH}'{wVTPsHi9tgOq,=I
2024-04-18 17:22:23 UTC	5288	IN	Data Raw: 07 19 0b 06 24 28 aa bd 24 5c a3 61 b8 43 41 dc 3a 37 03 ae 58 04 ed 7d 01 cc 6b 6f c2 8d 0b f3 b0 6c 71 11 ee 76 cf 46 ff fa 9f a2 cb 1a 84 33 d3 8b 03 4d 01 54 cc cc 44 17 69 c6 f6 3f 6c 81 7b 61 15 42 45 79 a8 fb d8 f5 38 fb 5b 9f c6 48 4b 27 9c 9d 3d d0 e6 ce 44 27 4d 88 ca c6 7a b4 dd f6 45 c4 c2 c3 f0 d2 98 67 92 46 f2 5b dd e3 9e 2c 45 6a 0b 0b e5 9a 90 86 63 34 c9 2f 9d 9d 4f f4 c2 4d 9c b8 07 fb 09 b8 17 cd cd 47 25 19 6a fd 44 31 78 35 97 25 e8 67 2f 98 85 74 87 8d 97 9f b1 9a 40 ee 25 ae ef 27 ad 50 90 ee c0 08 4d 9a 41 ba 76 16 dd 53 4a 86 e8 10 5d b3 99 68 44 29 51 99 19 44 1f 42 24 b9 dd 64 70 67 79 6c 38 77 56 3e f2 49 18 cd 23 70 fb 3c 76 12 20 0d 98 3f 23 17 b7 5e 30 17 c7 fa 46 c9 be b2 61 2b 69 49 5e b9 bc f3 f6 0b c9 16 b2 a1 a5 7b 04 Data Ascii: $($\aCA:7X}kolqvF3MTDi?l{aBEy8[HK'=D'MzEgF[,Ejc4/OMG%jD1x5%g/t@%'PMAvSJ]hD)QDB$dpgyl8wV>I#p<v ?#^0Fa+iI^{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49821	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	622	OUT	GET /images/why-choose.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.0.1713460941.60.0.0
2024-04-18 17:22:23 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"105821-1671802157000" Last-Modified: Fri, 23 Dec 2022 13:29:17 GMT Content-Type: image/jpeg Content-Length: 105821 Connection: close
2024-04-18 17:22:23 UTC	7924	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 67 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:23 UTC	260	IN	Data Raw: 41 69 8a e0 77 a6 04 8e 6e 59 75 e5 cb a6 84 4c 07 c7 07 cd 6d 83 15 61 fc 50 4a 35 63 c7 bd d5 43 f5 41 6c 31 cc e0 80 13 05 c6 3d b8 39 50 66 c6 cc d6 a7 1a 94 69 4a a6 80 04 e3 4c 1d 32 c3 f1 0f 2c bb d6 75 ac 64 6c 5b 6d 3a 97 72 bc af 13 2b 4b 5c 60 24 18 9a ee 34 c6 63 f9 73 ed 59 ef af 0d 7a f9 fc ba 1e a1 dd 67 2a 34 2d 29 d6 11 b3 10 f5 ae 6a 0c 25 2a b3 38 41 8f 10 b8 63 d3 ad 5d bd fc cd 29 d6 a6 34 d1 04 d1 a1 00 03 17 18 c8 9f 34 c8 39 94 b1 65 57 5e d2 ea 64 8b 69 46 ab c8 0a 95 6a 12 29 c0 8c 58 40 79 bf ea 29 2c 4b 28 11 b6 d7 2a 66 ec 55 9c 06 bb bb 89 91 1a 50 8c 79 42 00 33 64 84 c2 95 c5 f5 9d 9c b7 38 d4 95 1b 7b e9 08 6d f4 2a 36 b9 44 7f fc 4c a2 7c b1 fc 31 e3 9a b9 3e 13 6f cb 67 d2 f6 f4 3d 31 b9 dc ff 00 a6 b7 1a a7 47 50 7a 86 Data Ascii: AiwnYuLmaPJ5cCAl1=9PfiJL2,udl[m:r+K\`$4csYzg4-)j%8Ac])449eW^diFj)X@y),K(fUPyB3d8{m6DL\|1>og=1GPz
2024-04-18 17:22:24 UTC	8192	IN	Data Raw: 25 84 0a cf 7f c3 7c 4f cb 03 ac b7 99 6e 35 cd ad 2a 52 36 96 f2 8c 61 19 4d bf 32 43 51 25 b9 06 0b 5c 4c 67 af 2a b6 dd 9a 34 60 2e eb 53 78 d2 63 42 db ee 99 e6 67 27 f3 01 f7 42 cf 5d b5 cf 18 db da 9a d4 ea 42 6f 2a b5 6e ee 20 06 ac 5c 66 c4 1e c5 96 b1 a1 a7 09 c7 70 b9 b9 12 94 a5 29 4e 8d 19 cf 36 32 f1 48 bf b9 74 b7 c6 39 ce 7c ba 8b 9d 36 bb 7d 0d a2 8b 46 95 0a 7f 1d bc 56 93 b0 32 c2 94 24 7b 7f 0a e7 fe 5b ff 00 0d 35 5d cb 44 65 5e 51 26 a5 49 69 8d 39 e1 3a 84 07 66 8f 96 31 e2 ae 1a 56 c2 e6 b4 3e 26 a1 f5 a4 0c 86 19 19 06 68 c7 9e 6a 9a eb b6 9a 54 b6 9b 21 2a d5 25 3b db 91 1f 88 9d 3c 64 61 9f a5 4d fc bd bc 96 6f 93 14 6d 76 d4 6d f7 1f 8c b9 a6 2b 6f b5 ea 48 d9 d3 93 7a 36 94 c9 c6 51 01 fc 6d f7 8e 2a da 92 21 be 5e 52 a9 67 77 Data Ascii: %\|On5R6aM2CQ%\Lg4`.SxcBg'B]Bon \fp)N62Ht9\|6}FV2${[5]De^Q&Ii9:f1V>&hjT!%;<daMomvm+oHz6Qm*!^Rgw
2024-04-18 17:22:24 UTC	8176	IN	Data Raw: 00 6a a5 49 f0 f3 63 8e 0f 83 f2 4c f2 6f 86 f3 e4 d5 2a b7 1f 11 73 38 03 42 83 c6 8c b1 e3 88 c7 98 75 d3 98 e3 dd 7a 92 db 99 a0 10 08 04 0d 02 40 20 10 08 04 0d 02 40 d0 08 06 40 d0 08 04 0c 20 10 08 1a 00 20 19 00 c8 18 08 1b 28 04 0d 90 34 03 2a 1a 01 03 64 03 20 6c 80 64 0d 90 08 04 0a 63 c0 50 68 f7 2f 2c 90 71 bb c6 52 41 c4 dc 63 74 3b f0 5c ab ac 6f 36 e0 74 05 1b 6d 69 e4 82 f8 2a 2d 1c d0 4a 21 03 64 43 6e 48 00 0a 01 90 0c 81 80 81 b7 f8 a0 19 02 23 04 15 90 11 49 b0 74 12 88 c5 11 32 10 0c 81 32 04 c5 14 01 87 62 20 20 a0 5c 51 4b 86 08 84 8a 89 41 15 02 74 47 20 01 7c 38 e4 bc ef 41 b1 20 b1 6e 6f f6 95 55 1e 27 0f 62 a9 53 8c 30 ef 44 5b 1a 67 bb 9a 82 7e 98 fb 1d 03 14 8f 1f 61 41 2f 4b 1e 5d 88 18 a4 d9 8c d1 13 14 43 65 ec 43 47 a3 c5 Data Ascii: jIcLos8Buz@ @@ (4d ldcPh/,qRAct;\o6tmi*-J!dCnH#It22b \QKAtG \|8A noU'bS0D[g~aA/K]CeCG
2024-04-18 17:22:24 UTC	8192	IN	Data Raw: 90 70 32 38 e1 d8 c8 b3 a6 0d e7 51 eb 95 59 53 ac 24 70 f2 10 7b c3 a9 8d ca e6 f7 4b eb 2a d2 9c 6a 1d 7e 17 91 60 48 e2 56 a4 4b db 51 65 bd ee 5b 6d 43 2b 29 56 34 cb 98 52 2e 65 dd 17 e1 d8 56 b1 9b d3 b3 d9 3a 8e 57 5e 9d 49 40 d3 b8 1e 68 1c a5 dc 79 f6 29 8b 2b d9 ba 3b 7a a3 71 64 26 3c d0 1a 4c 78 85 be 3a c7 3f 6f 3a e9 bf 57 a1 42 da a5 7a f5 04 29 40 13 39 70 c3 bb ea 5d 7e cf 3d e5 cf 5e 75 a1 bc a1 3a 96 72 8f c3 16 11 ac 38 b6 63 f6 c5 73 eb d9 ae bc 7a 73 cd 3b 3d f6 85 51 3a 35 0c 72 04 70 01 c3 b3 f6 ac 4e 9a eb 97 13 d5 d6 a3 6f ac 77 8b 39 0c de b5 21 94 a2 ff 00 5a e7 79 77 e3 d9 e3 1d 1f 49 f5 0d 3b cb 58 54 a5 37 04 38 19 95 d3 8a c7 b3 9d f2 ec ec ee 8c e7 17 38 71 01 77 e6 bc bd c6 4f 51 93 53 69 9c 63 26 98 9d 23 12 cf 95 40 72 Data Ascii: p28QYS$p{K*j~`HVKQe[mC+)V4R.eV:W^I@hy)+;zqd&<Lx:?o:WBz)@9p]~=^u:r8cszs;=Q:5rpNow9!ZywI;XT788qwOQSic&#@r
2024-04-18 17:22:24 UTC	8176	IN	Data Raw: 81 a0 10 0d 82 06 02 80 40 d0 0c 80 64 03 04 03 7f 8a 04 ca 84 c8 02 10 0c 81 32 04 ca 04 c8 13 20 19 04 64 10 56 dd a8 63 9f 1f b1 5e 77 a0 a4 3c 25 b8 a0 c7 ac 30 74 18 f2 03 2f 7a 82 71 04 17 c7 14 13 8b 61 cd 04 b1 7e 63 92 00 77 fb 50 30 c4 bf d0 50 48 2a 89 0f f1 45 49 c7 0c f9 20 90 67 18 e0 70 41 28 f3 74 10 91 40 9f 34 12 8b 65 8b 32 22 41 b2 e0 8a 63 1c 87 b1 08 00 7c 7e 84 0c 70 e4 82 58 7e e4 40 d8 76 71 2a a9 f6 a8 0c 10 22 3e 85 44 27 91 75 06 34 c6 07 1f 6a a8 c3 ac 30 c3 1e 00 a8 35 f7 19 76 f1 55 5a 4d cc 0d 27 92 44 d7 27 59 cd fd 37 2f 8e 6b 71 cf a7 ad 74 5c 7f 2e 9b e6 cb ac 71 af 51 da c7 80 2d 32 dc fd d0 82 0d aa 71 8f e2 20 3f 7a 0f 86 3e 6e 75 6e e7 d5 5f 31 b7 7b bb c2 45 3b 0b 8a bb 7e dd 6a 09 31 a3 6f 6d 50 d3 88 8b fd e9 90 Data Ascii: @d2 dVc^w<%0t/zqa~cwP0PHEI gpA(t@4e2"Ac\|~pX~@vq">D'u4j05vUZM'D'Y7/kqt\.qQ-2q ?z>nun_1{E;~j1omP
2024-04-18 17:22:24 UTC	8192	IN	Data Raw: 20 e0 d9 e6 59 2a a1 11 16 32 2d a2 64 68 12 8e 40 86 e1 c5 d6 68 40 c8 47 27 ac c0 06 c4 03 13 88 d4 8b 8f a2 7f e3 47 cd 2d 3e 9f 41 ee d3 91 6d 72 d8 ae 26 5d b4 f8 e7 67 22 79 07 95 2e c7 8f 00 b9 7b 39 fc b5 1f 46 47 1c 57 1a 44 86 6a 2c 35 1a 78 a7 cd cf 9b 17 55 ea de 74 87 47 1a d7 37 b4 23 23 be ee 16 51 95 49 5b 52 80 fc ca 74 e5 01 2d 32 03 fa 93 ca 19 79 b2 f4 fa bd 5f 9e 9c bb eb f1 1e 11 4a ce de 95 30 6c e9 c6 93 02 75 d3 68 c8 c2 43 10 67 1c 48 3c 71 c5 7a f1 c3 58 17 14 e1 4e 9c aa 4e 30 26 39 c4 44 12 df ca 8d 36 13 b5 ba da 37 4f 4e 9d e5 ad c5 6a 02 95 7a 17 bb 75 51 5e 88 94 a2 25 0d 35 00 8b ce 07 09 06 c0 ac 4b a5 f0 da da 5f dd da 6f 56 7d 4f 42 b0 a7 be 6d e4 1a 77 b1 68 4a 51 25 e7 4a a8 80 8c 2a 42 7a 8e 61 c3 a9 d7 ae 58 4e ac Data Ascii: Y2-dh@h@G'G->Amr&]g"y.{9FGWDj,5xUtG7##QI[Rt-2y_J0luhCgH<qzXNN0&9D67ONjzuQ^%5K_oV}OBmwhJQ%JBzaXN
2024-04-18 17:22:24 UTC	8176	IN	Data Raw: 8d 6a db 4c 43 d3 aa 4c 4b c9 98 82 dc 57 6b 3c 39 cb e5 f4 27 c9 7e bb db 37 5e 9a b7 e9 f9 dc 0f d7 76 6b 7a 74 ee e8 c8 87 94 3e e5 48 73 89 18 76 15 f3 3d 9c e5 77 e6 f8 76 d7 17 62 2e e5 96 1b 6a eb ee b0 89 38 a5 18 ff 00 ad 41 f3 41 6d 2d de 9c 8f 99 06 ca de f8 16 62 9a 36 34 6b 89 05 45 d9 84 03 7b d0 30 a0 92 01 03 40 d4 02 01 14 20 10 08 04 02 01 00 80 40 20 10 08 04 02 01 00 83 55 b9 0f 0c 96 92 b8 ed d8 62 52 8d 15 31 fe a0 2e 75 b8 e8 2c 87 84 28 ac d0 11 52 40 d0 34 01 c9 05 72 9b 22 e0 8c d4 d4 c5 f4 98 a1 8c 98 5b 6a 19 20 9f c1 1e 4a 88 ca cb b1 90 62 56 a5 e9 a2 31 2a 5c 81 82 ba aa 4d c8 e6 a6 ae 01 5c 1e 28 62 da 73 c5 0a b5 c2 21 b2 b0 0a 81 90 08 04 09 00 a0 45 00 c9 81 14 10 65 11 e7 04 83 9a f3 3d 42 4c 00 fb 10 20 55 13 07 1c 3d Data Ascii: jLCLKWk<9'~7^vkzt>Hsv=wvb.j8AAm-b64kE{0@ @ UbR1.u,(R@4r"[j JbV1*\M\(bs!Ee=BL U=
2024-04-18 17:22:24 UTC	8192	IN	Data Raw: cd 67 ae 36 12 b4 15 b6 ca f6 b3 35 2d 0c 5c 17 34 ce 00 fb 17 9a f1 67 c3 7b 2b 1a 77 90 f8 9f 5e 3e 09 49 a3 73 48 e0 44 ff 00 12 c5 be 5a 6e 28 d5 06 38 17 04 33 07 2b b4 ac 58 9c e9 98 87 c4 69 0e 5f 8b e1 92 d4 45 5a 65 0d 33 8e a2 35 34 4e 1a 48 19 fb 56 55 1d de 89 ad 08 ee 31 22 55 01 10 b8 8f de ec 99 fa 8a 9d f3 e3 57 9b f8 6b 06 20 3e 23 e9 75 c9 b4 c3 3b e2 39 84 11 90 e1 2f 73 20 89 89 c8 61 cd 35 19 14 6b 10 08 23 80 03 07 1f b0 5d 39 e9 2c 2a e2 15 21 38 cc 09 53 98 62 3e d5 7a f2 48 f6 ef 92 75 e3 0e 9a b0 a6 24 24 23 2a b4 e6 46 0c 44 c9 c5 7c 4f d9 99 dd 7d 9f d6 bb c4 7b 05 d4 61 42 d2 55 63 8c 99 c2 e2 e9 f9 71 9d 39 28 df 6f 97 37 d7 67 d4 a9 09 7a 54 41 c4 42 39 f8 7b d6 5a 8e f2 36 a4 98 c6 18 b7 8a 32 e6 0a d3 27 0e 9a a8 77 bb 4b Data Ascii: g65-\4g{+w^>IsHDZn(83+Xi_EZe354NHVU1"UWk >#u;9/s a5k#]9,!8Sb>zHu$$#FD\|O}{aBUcq9(o7gzTAB9{Z62'wK
2024-04-18 17:22:24 UTC	8176	IN	Data Raw: 4e a1 31 75 c7 a8 ed cd 79 15 ee d6 f2 94 00 c9 c3 f1 59 d2 f3 ad 78 d9 ea c8 9f 0b 39 cd 6b ee c5 e1 93 4b a6 aa cd 8e 9f 72 9f d8 bf 47 4b b0 f4 64 e7 52 3a a2 e5 66 f4 bf 5c 7a d7 4d 74 d8 b7 8c 22 21 80 65 24 6b 5d fe df 61 18 b7 85 74 e6 33 6b 7d 6d 43 4b 2e b2 38 da cb 11 c1 96 dc da cd ca 93 c2 58 25 74 e6 bc e7 ab f6 f9 d4 a7 36 0f 82 e5 db d3 eb af 19 bf b6 34 ee 2a 42 51 62 0e 00 ae 11 d2 ab a1 40 19 65 fc 16 9c db 4a 36 fe 1f ad 45 59 f0 a1 d8 83 cf bf b5 34 c6 4d a5 ac b5 65 9e 48 63 a7 da ed c3 0c 31 44 b1 d4 ed d6 8e 41 21 54 6e 45 31 18 a5 ae bc 72 c6 be 9c 63 43 b4 2c eb d1 cf 2f 3b ea 6b f9 03 28 c4 ab cd 75 eb 8f 0f 27 ea fd d6 a5 3f 4e 9d 33 e3 94 9c f7 05 ee f5 5f 0f 8f fb 5f 2e 76 3b 8d f9 1f d4 31 6e 4b ae d7 97 16 d3 bc dc 1c 1f 5e Data Ascii: N1uyYx9kKrGKdR:f\zMt"!e$k]at3k}mCK.8X%t64*BQb@eJ6EY4MeHc1DA!TnE1rcC,/;k(u'?N3__.v;1nK^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49822	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	619	OUT	GET /images/favicon.ico HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.0.1713460941.60.0.0
2024-04-18 17:22:24 UTC	278	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:28 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"1150-1519975029000" Last-Modified: Fri, 02 Mar 2018 07:17:09 GMT Content-Length: 1150 Connection: close Content-Type: image/vnd.microsoft.icon
2024-04-18 17:22:24 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 00 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 44 ab 00 11 44 ab 00 2b 44 ab 00 23 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 44 ab 00 03 44 ab 00 59 44 ab 00 c9 44 ab 00 fd 44 ab 00 ff 44 ab 00 c9 ff ff ff 01 6a 2c 33 45 6a 2c 33 a1 6a 2b 33 61 6a 2c 33 17 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 44 ab 00 0d 44 ab 00 b1 44 ab 00 fb 44 ab 00 a9 44 ab 00 5d 44 aa 00 f7 44 ab 00 c7 ff ff ff 01 6a 2c 33 41 6a 2c 33 ff 6a 2c 33 ff 69 2b 33 ef 6a 2c 33 31 ff ff ff 01 ff Data Ascii: h( @DD+D#DDYDDDDj,3Ej,3j+3aj,3DDDDD]DDj,3Aj,3j,3i+3j,31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49825	104.18.70.113	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	535	OUT	GET /web_widget/classic/latest/web-widget-main-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:24 UTC	1191	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 992059 Connection: close x-amz-id-2: ldH41+NY0+fYAgvbqFIJmvudIE2j/SxzaKSwKqxB3P/vSWpJ08HqoFV2mSP6KWgMbK8lgvcvTvmD4moNqUmffw== x-amz-request-id: 64S1GV9HNQKB0DVA x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "3784cf5e1ddd3a68e335f3bb4a5e2fcd" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: _IYDenNVju8wHXIpAa8FJzBqmTlghdyK CF-Cache-Status: HIT Age: 57 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q8h2C3pZooCIEcjHVc0etQejEegrPbDz7cbXUkcFj23vdAwI9WehqvmJfmm4yL91FwavZRQArwDUGL8wxV4e%2FWUNxdSVwRcCU8xBoXhMkS4FMcXFvnAH%2BzGHTY96Zd%2B1oUJy%2FB0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 876656342a801833-ATL
2024-04-18 17:22:24 UTC	178	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-we
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 62 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 32 30 39 31 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 31 35 38 32 36 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 Data Ascii: b-widget-sdks/web-widget/getting-started/legal/ */(()=>{var e,t,n,r,o={20916:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(15826);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){va
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 31 33 20 37 20 37 20 37 20 37 2d 33 2e 31 33 20 37 2d 37 2d 33 2e 31 33 2d 37 2d 37 2d 37 7a 6d 33 2e 30 39 20 35 2e 33 36 33 6c 2d 33 2e 33 20 34 2e 32 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 35 34 35 2e 32 38 36 48 36 2e 32 61 2e 37 34 38 2e 37 34 38 20 30 20 30 20 31 2d 2e 35 33 2d 2e 32 32 4c 33 2e 39 37 20 37 2e 39 33 61 2e 37 35 2e 37 35 20 30 20 31 20 31 20 31 2e 30 36 2d 31 2e 30 36 6c 31 2e 31 30 33 20 31 2e 31 30 32 4c 38 2e 39 31 20 34 2e 34 33 37 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 31 2e 31 38 2e 39 32 36 7a 22 7d 29 29 29 7d 7d 2c 38 38 33 34 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e Data Ascii: 13 7 7 7 7-3.13 7-7-3.13-7-7-7zm3.09 5.363l-3.3 4.2a.75.75 0 0 1-.545.286H6.2a.748.748 0 0 1-.53-.22L3.97 7.93a.75.75 0 1 1 1.06-1.06l1.103 1.102L8.91 4.437a.75.75 0 0 1 1.18.926z"})))}},88343:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 77 69 64 74 68 3a 31 34 2c 68 65 69 67 68 74 3a 31 34 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 20 31 34 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 Data Ascii: tp://www.w3.org/2000/svg",width:14,height:14,focusable:"false",viewBox:"0 0 14 14","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 31 31 20 31 2e 35 4c 34 2e 39 20 37 2e 36 63 2d 2e 32 2e 32 2d 2e 32 2e 35 20 30 20 2e 37 6c 36 2e 31 20 36 2e 31 22 7d 29 29 29 7d 7d 2c 35 36 34 34 36 3a 28 Data Ascii: able:"false",viewBox:"0 0 16 16","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeWidth:2,d:"M11 1.5L4.9 7.6c-.2.2-.2.5 0 .7l6.1 6.1"})))}},56446:(
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 78 3a 38 2c 63 79 3a 38 2c 72 3a 37 2e 35 7d 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 Data Ascii: ble:"false",viewBox:"0 0 16 16","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("g",{fill:"none",stroke:"currentColor"},o.createElement("circle",{cx:8,cy:8,r:7.5}),o.createElement("path",{strokeLinecap:"round",stroke
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 73 29 2c 74 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 72 65 63 74 22 2c 7b 77 69 64 74 68 3a 31 35 2c 68 65 69 67 68 74 3a 31 33 2c 78 3a 2e 35 2c 79 3a 31 2e 35 2c 72 78 3a 2e 35 2c 72 79 3a 2e 35 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 2e 35 20 31 Data Ascii: "false",viewBox:"0 0 16 16","aria-labelledby":n},s),t?a.createElement("title",{id:n},t):null,r\|\|(r=a.createElement("g",{fill:"none",stroke:"currentColor"},a.createElement("rect",{width:15,height:13,x:.5,y:1.5,rx:.5,ry:.5}),a.createElement("path",{d:"M.5 1
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 6f 6e 73 74 20 69 3d 65 3d 3e 7b 6c 65 74 7b 74 69 74 6c 65 3a 74 2c 74 69 74 6c 65 49 64 3a 6e 2c 2e 2e 2e 69 7d 3d 65 3b 72 65 Data Ascii: rn a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(this,arguments)}const i=e=>{let{title:t,titleId:n,...i}=e;re
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 70 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 33 20 32 2e 35 68 31 30 22 7d 29 29 2c 6f 7c 7c 28 6f 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 64 3a 22 4d 33 20 34 76 31 31 63 30 20 2e 35 35 2e 34 35 20 31 20 31 20 31 68 38 63 2e 35 35 20 30 20 31 2d 2e 34 35 20 31 2d 31 56 34 48 33 7a 6d 34 20 39 2e 35 63 30 20 2e 32 38 2d 2e 32 32 2e 35 2d 2e 35 2e 35 73 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 76 2d 37 63 30 2d 2e 32 38 2e 32 32 2d 2e 35 2e 35 2d 2e 35 73 2e 35 2e 32 32 2e 35 2e 35 76 37 7a 6d 33 20 30 63 30 20 2e 32 38 2d 2e 32 32 2e 35 2d 2e 35 2e 35 73 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 76 2d 37 63 30 2d 2e 32 38 2e 32 32 2d 2e 35 2e 35 2d 2e 35 73 2e 35 2e 32 Data Ascii: p:"round",d:"M3 2.5h10"})),o\|\|(o=a.createElement("path",{fill:"currentColor",d:"M3 4v11c0 .55.45 1 1 1h8c.55 0 1-.45 1-1V4H3zm4 9.5c0 .28-.22.5-.5.5s-.5-.22-.5-.5v-7c0-.28.22-.5.5-.5s.5.22.5.5v7zm3 0c0 .28-.22.5-.5.5s-.5-.22-.5-.5v-7c0-.28.22-.5.5-.5s.5.2
2024-04-18 17:22:24 UTC	1369	IN	Data Raw: 69 64 74 68 3a 32 36 2c 68 65 69 67 68 74 3a 32 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 30 20 32 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 64 3a 22 4d 31 33 2e 34 31 20 30 48 32 43 2e 39 20 30 20 30 20 2e 39 20 30 20 32 76 32 32 63 30 20 31 2e 31 2e 39 20 32 20 32 20 32 68 31 36 63 31 2e 31 20 30 20 32 2d 2e 39 20 32 2d 32 56 36 2e 35 38 4c 31 33 2e 34 31 20 30 7a 6d 32 2e 30 39 20 32 30 Data Ascii: idth:26,height:26,focusable:"false",viewBox:"0 0 20 26","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"currentColor",d:"M13.41 0H2C.9 0 0 .9 0 2v22c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V6.58L13.41 0zm2.09 20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49827	104.18.72.113	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:23 UTC	391	OUT	GET /compose/zopim_chat/5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:24 UTC	1104	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:24 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"d1ee0faf67078c58db5afac96fbf6350" x-request-id: 872ae2da484941e0-SEA X-Request-ID: 872ae2da484941e0-SEA x-runtime: 0.004126 X-Zendesk-Zorg: yes CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AqL5d2xTrMaC%2FBmE2gTppjKKCzORh%2FgVesiMwVhZcOzzN%2B8jUvTIzy%2B6W0D%2BLRotx6OtwpFsXZDxBbktlybrFKqrVoXl94dgmczBlU6SD97m0C3pcGY1pdu2lBHx%2F%2BI1GX8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 87665634d8618bb5-ATL
2024-04-18 17:22:24 UTC	265	IN	Data Raw: 33 63 62 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 74 72 61 69 6e 69 6e 6e 67 6c 6c 63 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 70 72 65 63 68 61 74 46 6f 72 6d 56 69 73 69 62 6c 65 44 65 70 61 72 74 6d 65 6e 74 73 22 3a 74 72 75 65 2c 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 63 70 34 22 3a 74 72 75 65 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 30 2e 30 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 6c 65 66 74 22 2c 22 62 72 61 6e 64 22 3a 22 54 72 61 69 6e 69 6e 6e 67 20 4c 4c 43 22 2c 22 65 6d 62 65 64 73 Data Ascii: 3cb{"products":[{"name":"web_widget","id":"traininngllc.zendesk.com","bootstrap":{"config":{"features":{"prechatFormVisibleDepartments":true,"fastLoad":true},"color":"#6db578","cp4":true,"brandCount":0.0,"position":"left","brand":"Traininng LLC","embeds
2024-04-18 17:22:24 UTC	713	IN	Data Raw: 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 62 61 64 67 65 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 69 6d 61 67 65 5f 6f 6e 6c 79 22 2c 22 74 65 78 74 22 3a 22 43 68 61 74 20 77 69 74 68 20 75 73 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 62 39 61 32 35 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 6d 61 67 65 50 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 76 32 2e 7a 6f 70 69 6d 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 69 6d 61 67 65 73 2f 67 61 6c 6c 65 72 79 2f 62 61 64 67 65 2f 63 75 73 74 6f 6d 2f 65 76 65 72 79 64 61 79 2f 30 35 2e 70 6e 67 22 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 7a 6f 70 69 6d 49 64 22 3a 22 35 56 46 34 54 79 7a 61 50 48 38 64 39 57 35 5a 70 44 43 6d 58 54 6f 76 35 57 79 57 Data Ascii: {"embed":"chat","props":{"badge":{"layout":"image_only","text":"Chat with us","color":"#2b9a25","enabled":true,"imagePath":"https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png"},"color":"#6db578","zopimId":"5VF4TyzaPH8d9W5ZpDCmXTov5WyW
2024-04-18 17:22:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49828	104.18.70.113	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:25 UTC	557	OUT	GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:25 UTC	1180	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:25 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 25711 Connection: close x-amz-id-2: W9B1SBtAeKjZ8kR3+2GgpY7yqrRwEUd74ifS+fdKkR32Prbx0bEwMeNV6dGVRlF6Cg02ybWPMLk= x-amz-request-id: DKWT4SJ3NP0VX855 x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:15 GMT ETag: "6eb45e96a7cbb4b8ca10897f3cf09981" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:13 GMT x-amz-version-id: LLNIVxZ_bojnmbOmqAvI_43_VNrKfel_ CF-Cache-Status: HIT Age: 625036 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Qb6MA8vPXcV8WnyM%2BZ8Y5TrCqbZP4a%2BPyCIk0MiBYIRQyfcGuinU8Xf7mV0pKeQ1jrtVoDpbVtAzqhK80aIHZQA7eq1%2BjsIel2belyQpgN1epPohXr5gGFkG6RqTltisX7yE9M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8766563bc8c5ad57-ATL
2024-04-18 17:22:25 UTC	189	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 35 30 5d 2c 7b 34 33 32 35 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[6950],{43255:e=>{e.exports=JSON.parse('{"locale":{"locale":"e
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 6e 2d 75 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 6e 65 65 64 5f 68 65 6c 70 22 3a 22 4e 6f 2c 20 49 20 6e 65 65 64 20 68 65 6c 70 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 72 65 61 73 6f 6e 2e 72 65 6c 61 74 65 64 22 3a 22 49 74 5c 27 73 20 72 65 6c 61 74 65 64 2c 20 62 75 74 20 69 74 20 64 69 64 6e 5c 27 74 20 61 6e 73 77 65 72 20 6d 79 20 71 75 65 73 74 69 6f 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b Data Ascii: n-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framework
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 74 5f 69 6e 5f 74 6f 75 63 68 22 3a 22 48 6f 77 20 64 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 65 74 20 69 6e 20 74 6f 75 63 68 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 72 65 71 75 65 73 74 5f 63 61 6c 6c 62 61 63 6b 5f 6f 6e 6c 79 2e 74 69 74 6c 65 22 3a 22 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 68 65 20 74 65 61 6d 20 74 6f 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 73 75 62 6d 69 74 5f 74 69 63 6b Data Ascii: t_in_touch":"How do you want to get in touch?","embeddable_framework.answerBot.msg.channel_choice.request_callback_only.title":"Would you like the team to contact you regarding your question?","embeddable_framework.answerBot.msg.channel_choice.submit_tick
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 70 72 6f 6d 70 74 5f 61 67 61 69 6e 5f 6e 6f 5f 63 68 61 6e 6e 65 6c 73 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 59 6f 75 20 63 61 6e 20 61 73 6b 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 79 65 73 5f 61 63 6b 6e 6f 77 6c 65 64 67 65 6d 65 6e 74 22 3a 22 4e 69 63 65 2e 20 4b 6e 6f 77 6c 65 64 67 65 20 69 73 20 70 6f 77 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 72 65 73 75 6c 74 73 2e 6d 61 6e 79 5f 61 72 74 69 63 6c 65 22 3a 22 48 Data Ascii: uestion.","embeddable_framework.answerBot.msg.prompt_again_no_channels_available":"You can ask another question.","embeddable_framework.answerBot.msg.yes_acknowledgement":"Nice. Knowledge is power.","embeddable_framework.answerBot.results.many_article":"H
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 6c 65 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a 22 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 74 68 65 20 63 68 61 74 20 61 6e 79 74 69 6d 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 65 6e 61 62 6c 65 22 3a 22 45 6e 61 62 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6e 64 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 72 65 65 6e 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a 22 59 Data Ascii: le Chat","embeddable_framework.chat.agreement.cookies.disable_chat_note":"You may disable the chat anytime.","embeddable_framework.chat.agreement.cookies.enable":"Enable Cookies and Chat","embeddable_framework.chat.agreement.cookies.reenable_chat_note":"Y
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 75 6e 6b 6e 6f 77 6e 5f 65 72 72 6f 72 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 50 6c 65 61 Data Ascii: ile sending is not allowed.","embeddable_framework.chat.attachments.error.not_supported":"Upload failed. File sending is not supported on this browser.","embeddable_framework.chat.attachments.error.unknown_error":"Upload failed. Something went wrong. Plea
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 20 61 72 65 20 74 79 70 69 6e 67 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 61 64 69 6e 67 49 6d 61 67 65 22 3a 22 4c 6f 61 64 69 6e 67 20 69 6d 61 67 65 20 28 25 28 61 74 74 61 63 68 6d 65 6e 74 53 69 7a 65 29 73 29 2e 2e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 67 69 6e 2e 75 70 64 61 74 65 49 6e 66 6f 22 3a 22 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 69 6e 66 6f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 71 75 65 75 65 50 6f 73 69 74 69 6f 6e 22 3a 22 51 75 65 75 65 20 70 6f 73 69 74 69 6f 6e 3a 20 25 28 76 61 6c 75 65 Data Ascii: are typing","embeddable_framework.chat.chatLog.loadingImage":"Loading image (%(attachmentSize)s)...","embeddable_framework.chat.chatLog.login.updateInfo":"Please update your info","embeddable_framework.chat.chatLog.queuePosition":"Queue position: %(value
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 25 28 65 6d 61 69 6c 29 73 20 77 68 65 6e 20 74 68 65 20 63 68 61 74 20 65 6e 64 73 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 69 74 6c 65 22 3a 22 45 6d 61 69 6c 20 63 68 61 74 20 74 72 61 6e 73 63 72 69 70 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 72 79 5f 61 67 61 69 6e 22 3a 22 54 72 79 20 61 67 61 69 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 66 65 74 63 68 69 6e 67 5f 68 69 73 74 6f 72 79 22 3a 22 4c 6f 61 64 69 6e 67 20 6d 65 73 73 61 67 65 73 2e 2e 2e 22 2c 22 65 6d Data Ascii: ll be sent to %(email)s when the chat ends.","embeddable_framework.chat.emailtranscript.title":"Email chat transcript","embeddable_framework.chat.emailtranscript.try_again":"Try again","embeddable_framework.chat.fetching_history":"Loading messages...","em
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 22 3a 22 41 74 74 61 63 68 20 66 69 6c 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 65 6e 64 43 68 61 74 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 45 6e 64 20 63 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 6d 65 6e 75 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 4f 70 74 69 6f 6e 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c 65 64 2e 66 61 69 6c 65 64 5f 74 77 69 63 65 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c Data Ascii: label":"Attach file","embeddable_framework.chat.icon.endChat.hover.label":"End chat","embeddable_framework.chat.icon.menu.hover.label":"Options","embeddable_framework.chat.messagefailed.failed_twice":"Failed to send","embeddable_framework.chat.messagefail
2024-04-18 17:22:25 UTC	1369	IN	Data Raw: 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 65 70 61 72 61 74 6f 72 2e 72 61 6e 67 65 22 3a 22 20 e2 80 94 20 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 75 6e 64 61 79 22 3a 22 53 75 6e 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 68 75 72 73 64 61 79 22 3a 22 54 68 75 72 73 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 69 6d 65 52 61 6e 67 65 22 3a 22 25 28 6f 70 65 6e 69 6e 67 54 69 6d 65 29 73 Data Ascii: operatingHours.label.separator.range":" ","embeddable_framework.chat.operatingHours.label.sunday":"Sunday","embeddable_framework.chat.operatingHours.label.thursday":"Thursday","embeddable_framework.chat.operatingHours.label.timeRange":"%(openingTime)s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49829	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:25 UTC	536	OUT	GET /embeddable/config HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:25 UTC	1094	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:25 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-7bbdf9d957-cqhbk x-runtime: 0.001936 vary: Origin X-Cached: HIT CF-Cache-Status: EXPIRED Last-Modified: Thu, 18 Apr 2024 16:41:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b99z9ixyY8VM1HThZ3dJH9vCBcskjo%2FwOz%2FZpvasCHdTla7FEbPdnM%2FrSIrmGywZA5k%2Bglgfu2wYuSr4bCZLLp9S8rIviU3WkHx0qAcUd4aroC5p7J6vjk9YEJ5WbqyBb4EEG7p7WNSbMw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=63fbabded86a226635e886b433fe8b55b74fdafa-1713460945; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8766563c4dd85080-ATL
2024-04-18 17:22:25 UTC	275	IN	Data Raw: 32 36 66 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 54 72 61 69 6e 69 6e 6e 67 20 4c 4c 43 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 6c 65 66 74 22 2c 22 63 70 34 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 22 3a 7b 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 6c 65 66 74 22 2c 22 7a 6f 70 69 6d 49 64 22 3a 22 35 56 46 34 54 79 7a 61 50 48 38 64 39 57 35 5a 70 44 43 6d 58 54 6f 76 35 57 79 57 73 4d 74 74 22 2c 22 73 74 61 6e 64 61 6c 6f 6e 65 22 3a 74 72 75 65 2c 22 62 61 64 67 65 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 62 39 Data Ascii: 26f{"brand":"Traininng LLC","brandCount":0,"color":"#6db578","position":"left","cp4":true,"embeds":{"chat":{"embed":"chat","props":{"color":"#6db578","position":"left","zopimId":"5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt","standalone":true,"badge":{"color":"#2b9
2024-04-18 17:22:25 UTC	355	IN	Data Raw: 22 69 6d 61 67 65 50 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 76 32 2e 7a 6f 70 69 6d 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 69 6d 61 67 65 73 2f 67 61 6c 6c 65 72 79 2f 62 61 64 67 65 2f 63 75 73 74 6f 6d 2f 65 76 65 72 79 64 61 79 2f 30 35 2e 70 6e 67 22 2c 22 6c 61 79 6f 75 74 22 3a 22 69 6d 61 67 65 5f 6f 6e 6c 79 22 2c 22 74 65 78 74 22 3a 22 43 68 61 74 20 77 69 74 68 20 75 73 22 7d 2c 22 66 6f 72 6d 73 22 3a 7b 22 6f 66 66 6c 69 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6d 65 64 69 61 74 6f 72 48 6f 73 74 22 3a 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 22 7d 7d 2c 22 6c 61 75 6e 63 68 65 72 22 3a 7b 22 65 6d 62 65 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 Data Ascii: "imagePath":"https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png","layout":"image_only","text":"Chat with us"},"forms":{"offlineEnabled":true},"mediatorHost":"widget-mediator.zopim.com"}},"launcher":{"embed":"launcher","props":{"color"
2024-04-18 17:22:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49830	104.18.70.113	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:26 UTC	539	OUT	GET /web_widget/classic/latest/web-widget-chat-sdk-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:26 UTC	1189	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:26 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 206903 Connection: close x-amz-id-2: XxQ8S/lBv1OtyK14Vkg8IAF2w1ME0kGwFoL/pkM7jEvNEGJZFHeFeFmAEaVODwS7Try+N51fJGM= x-amz-request-id: 7P01XWB44YSSFFP5 x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "b8284a4b45e40625c2b90a641ebe4a68" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: PnwdCuJviouphoOKkGhIayUUaC4tYXWL CF-Cache-Status: HIT Age: 625036 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sZPPrTcH01ihX1I4F%2FYHkku%2BOlVsOhCHCcVLFnzBow83xvuZtW0%2Fidr%2FpyeYWuKofrhCBFIRmo9S0fgLUajI7WZ5o2E1aniWCKx2Jk2TX9%2BgjM%2FbDiTKUvJrYvzw%2BT3NmIL4uak%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 876656444c634578-ATL
2024-04-18 17:22:26 UTC	180	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 37 36 5d 2c 7b 36 35 35 33 32 3a 65 3d 3e 7b 76 61 72 20 74 3b 77 69 6e 64 6f 77 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6f 29 7b 69 66 28 74 5b 6f Data Ascii: widget-sdks/web-widget/getting-started/legal/ */(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[8876],{65532:e=>{var t;window,t=function(){return function(e){var t={};function r(o){if(t[o
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 77 65 62 5f 73 64 6b 21 2e 2f 73 72 63 2f 77 65 62 5f 73 64 6b 2e 6a 73 22 29 7d 28 7b 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f Data Ascii: name=web_sdk!./src/web_sdk.js")}({"./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs/webpack3/lo
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 65 72 74 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 73 72 63 2f 6a 78 2f 63 6f 72 65 2f 41 73 73 65 72 74 2e 6a 73 22 29 2c 6e 3d 72 28 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 Data Ascii: ert!./vendor/jxml/src/jx/core/Assert.js"),n=r("./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js!./vendor/jxml/jxmlcjs
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 6e 64 65 78 4f 66 28 22 77 69 6e 33 32 22 29 2c 4c 3d 2d 31 21 3d 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6d 61 63 69 6e 74 6f 73 68 22 29 7c 7c 2d 31 21 3d 3d 73 2e 69 6e 64 65 78 4f 66 28 22 6d 61 63 20 6f 73 20 78 22 29 2c 43 3d 22 68 74 74 70 73 3a 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 41 3d 72 2e 6c 61 6e 67 75 61 67 65 7c 7c 72 2e 62 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 7c 7c 72 2e 73 79 73 74 65 6d 4c 61 6e 67 75 61 67 65 2c 7a 3d 7b 6e 6f 42 6f 78 53 69 7a 69 6e 67 3a 4f 3c 3d 37 2c 69 65 3a 7b 63 73 73 42 6f 74 74 6f 6d 52 69 67 68 74 3a 64 2c 63 73 73 46 69 78 65 64 3a 64 7c 7c 53 2c 62 75 67 67 79 43 53 53 3a 64 7c 7c 53 7d 7d 2c 44 3d 22 74 Data Ascii: ndexOf("win32"),L=-1!==s.indexOf("macintosh")\|\|-1!==s.indexOf("mac os x"),C="https:"===document.location.protocol,A=r.language\|\|r.browserLanguage\|\|r.userLanguage\|\|r.systemLanguage,z={noBoxSizing:O<=7,ie:{cssBottomRight:d,cssFixed:d\|\|S,buggyCSS:d\|\|S}},D="t
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 3a 43 2c 73 65 63 75 72 65 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5e 68 74 74 70 3a 2f 2c 43 3f 22 68 74 74 70 73 3a 22 3a 22 68 74 74 70 3a 22 29 7d 2c 68 61 73 46 6c 61 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 72 2e 70 6c 75 67 69 6e 73 26 26 72 2e 70 6c 75 67 69 6e 73 5b 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 28 65 3d 72 2e 6d 69 6d 65 54 79 70 65 73 26 26 72 2e 6d 69 6d 65 54 79 70 65 73 5b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 5d 29 26 26 21 65 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 3f 6e 75 6c 6c 3a 74 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 77 69 Data Ascii: :C,secureURL:function(e){return e.replace(/^http:/,C?"https:":"http:")},hasFlash:function(){var e,t=r.plugins&&r.plugins["Shockwave Flash"];if(t)return(e=r.mimeTypes&&r.mimeTypes["application/x-shockwave-flash"])&&!e.enabledPlugin?null:t.description;if(wi
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 30 7d 2c 69 73 54 65 78 74 43 6f 6e 74 65 6e 74 3a 44 2c 68 61 73 50 61 73 73 69 76 65 4c 69 73 74 65 6e 65 72 73 3a 4e 7d 7d 76 61 72 20 61 3d 73 28 29 3b 61 2e 73 6e 69 66 66 42 72 6f 77 73 65 72 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a Data Ascii: turn e.length?e[0].clientWidth:0},isTextContent:D,hasPassiveListeners:N}}var a=s();a.sniffBrowser=s,e.exports=a},"./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vendor/j
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 73 74 6f 6d 45 76 65 6e 74 3f 73 2e 64 65 74 61 69 6c 3a 73 29 26 26 28 64 3d 21 31 29 7d 63 61 74 63 68 28 65 29 7b 6e 2e 66 69 72 65 28 22 65 72 72 6f 72 22 2c 65 29 7d 69 66 28 69 2e 5f 61 63 74 69 76 65 3d 21 31 2c 69 2e 5f 64 69 72 74 79 29 7b 66 6f 72 28 61 3d 30 3b 61 3c 6c 3b 61 2b 2b 29 69 5b 61 5d 7c 7c 28 61 3d 3d 6c 2d 31 3f 69 2e 70 6f 70 28 29 3a 69 5b 61 2d 2d 5d 3d 69 2e 70 6f 70 28 29 2c 6c 2d 2d 29 3b 69 2e 5f 64 69 72 74 79 3d 21 31 7d 69 66 28 21 31 3d 3d 3d 64 29 72 65 74 75 72 6e 20 73 26 26 28 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 73 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 29 2c 21 31 7d 2c 65 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 73 5b 74 5d 29 Data Ascii: stomEvent?s.detail:s)&&(d=!1)}catch(e){n.fire("error",e)}if(i._active=!1,i._dirty){for(a=0;a<l;a++)i[a]\|\|(a==l-1?i.pop():i[a--]=i.pop(),l--);i._dirty=!1}if(!1===d)return s&&(s.preventDefault(),s.returnValue=!1),!1},e.attachEvent?e.attachEvent("on"+t,s[t])
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 6f 70 28 29 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 75 6e 65 78 74 65 6e 64 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 72 26 26 73 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 73 29 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 6c 28 65 29 3b 72 3d 73 3d 6e 75 6c 6c 7d 7d 7d 3b 69 66 28 74 29 72 65 74 75 72 6e 20 64 3b 66 6f 72 28 76 61 72 20 75 20 69 6e 20 64 29 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 26 26 28 65 5b 75 5d 3d 64 5b 75 5d 29 3b 72 65 74 75 72 6e 20 6f 2e 62 75 67 73 2e 6c 65 61 6b 73 4d 65 6d 6f 72 79 26 26 6f 2e 62 75 67 73 2e 6c 65 61 6b 73 4d 65 6d 6f 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 64 29 64 2e 68 61 73 4f 77 6e 50 72 Data Ascii: op();break}return e}},unextendEvents:function(){if(r&&s){for(var e in s)s.hasOwnProperty(e)&&l(e);r=s=null}}};if(t)return d;for(var u in d)d.hasOwnProperty(u)&&(e[u]=d[u]);return o.bugs.leaksMemory&&o.bugs.leaksMemory((function(){for(var t in d)d.hasOwnPr
2024-04-18 17:22:26 UTC	1369	IN	Data Raw: 6f 61 64 65 72 73 2f 6a 78 6d 6c 2d 6c 6f 61 64 65 72 2e 6a 73 3f 6e 61 6d 65 3d 6a 78 2f 63 6f 72 65 2f 46 75 6e 63 74 69 6f 6e 55 74 69 6c 73 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 73 72 63 2f 6a 78 2f 63 6f 72 65 2f 46 75 6e 63 74 69 6f 6e 55 74 69 6c 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6f 3d 72 28 22 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 6a 73 2d 61 73 74 2d 6c 6f 61 64 65 72 2e 6a 73 3f 61 73 74 74 6f 63 6f 64 65 3d 74 72 75 65 21 2e 2f 76 65 6e 64 6f 72 2f 6a 78 6d 6c 2f 6a 78 6d 6c 63 6a 73 2f 77 65 62 70 61 63 6b 33 2f 6c 6f 61 64 65 72 73 2f 7a 6f 70 2d 6c 69 6e 74 65 72 2d 6c 6f 61 64 65 72 2e 6a 73 21 2e 2f 76 65 6e 64 Data Ascii: oaders/jxml-loader.js?name=jx/core/FunctionUtils!./vendor/jxml/src/jx/core/FunctionUtils.js":function(e,t,r){var o=r("./vendor/jxml/jxmlcjs/webpack3/loaders/js-ast-loader.js?asttocode=true!./vendor/jxml/jxmlcjs/webpack3/loaders/zop-linter-loader.js!./vend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49831	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:26 UTC	365	OUT	GET /embeddable/config HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:27 UTC	1100	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:27 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-7bbdf9d957-cqhbk x-runtime: 0.001936 vary: Origin X-Cached: HIT CF-Cache-Status: HIT Age: 2 Last-Modified: Thu, 18 Apr 2024 17:22:25 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tJgtdyJBeK0Gq%2BLfbr%2Bpw%2B16MsmUs%2FGLjWfv73h0pzRKk7tSw7c3izaaXYZE%2FmzeDo9MQYeBwtn88l6Q1Sh5pzjcFMcazPO7EMVdGUBshsxwuuq4rxvuQ7LXDFuziV3XEQyKeBRcbJ3vhA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876656474942134d-ATL
2024-04-18 17:22:27 UTC	269	IN	Data Raw: 32 36 66 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 54 72 61 69 6e 69 6e 6e 67 20 4c 4c 43 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 6c 65 66 74 22 2c 22 63 70 34 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 22 3a 7b 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 6c 65 66 74 22 2c 22 7a 6f 70 69 6d 49 64 22 3a 22 35 56 46 34 54 79 7a 61 50 48 38 64 39 57 35 5a 70 44 43 6d 58 54 6f 76 35 57 79 57 73 4d 74 74 22 2c 22 73 74 61 6e 64 61 6c 6f 6e 65 22 3a 74 72 75 65 2c 22 62 61 64 67 65 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 62 39 Data Ascii: 26f{"brand":"Traininng LLC","brandCount":0,"color":"#6db578","position":"left","cp4":true,"embeds":{"chat":{"embed":"chat","props":{"color":"#6db578","position":"left","zopimId":"5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt","standalone":true,"badge":{"color":"#2b9
2024-04-18 17:22:27 UTC	361	IN	Data Raw: 3a 74 72 75 65 2c 22 69 6d 61 67 65 50 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 76 32 2e 7a 6f 70 69 6d 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 69 6d 61 67 65 73 2f 67 61 6c 6c 65 72 79 2f 62 61 64 67 65 2f 63 75 73 74 6f 6d 2f 65 76 65 72 79 64 61 79 2f 30 35 2e 70 6e 67 22 2c 22 6c 61 79 6f 75 74 22 3a 22 69 6d 61 67 65 5f 6f 6e 6c 79 22 2c 22 74 65 78 74 22 3a 22 43 68 61 74 20 77 69 74 68 20 75 73 22 7d 2c 22 66 6f 72 6d 73 22 3a 7b 22 6f 66 66 6c 69 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6d 65 64 69 61 74 6f 72 48 6f 73 74 22 3a 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 22 7d 7d 2c 22 6c 61 75 6e 63 68 65 72 22 3a 7b 22 65 6d 62 65 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 Data Ascii: :true,"imagePath":"https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png","layout":"image_only","text":"Chat with us"},"forms":{"offlineEnabled":true},"mediatorHost":"widget-mediator.zopim.com"}},"launcher":{"embed":"launcher","props":{"
2024-04-18 17:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49832	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:27 UTC	545	OUT	GET /s/W/ws/FUXgax5OwuSIBv-r/c/1713460946358 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: aX0+lUbvp5ZlozSQ0eDaRQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:22:27 UTC	505	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:27 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=hVf/V9tYMAbcHLJSrIHG+1LQgbFbENr1d4Onf6MvfCFcv1VF3EOY69uXCGKuc5Y2CqgWVzUvq5/dyD9wiJehPQOWp0t6YOJthV1Vp97utkTIy+Qb8HsFZ6W4TIAO; Expires=Thu, 25 Apr 2024 17:22:27 GMT; Path=/ Set-Cookie: AWSALBCORS=hVf/V9tYMAbcHLJSrIHG+1LQgbFbENr1d4Onf6MvfCFcv1VF3EOY69uXCGKuc5Y2CqgWVzUvq5/dyD9wiJehPQOWp0t6YOJthV1Vp97utkTIy+Qb8HsFZ6W4TIAO; Expires=Thu, 25 Apr 2024 17:22:27 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49833	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:27 UTC	530	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/c/1713460947052 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:28 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:28 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Irg0bRDVpHT4MiKe7m+54PtmCJsAnojpKHZMKDbTPs3x4INDD4EjSyc2HoY2FuG3Kun599zt8b4gH+PvRoU9b9unsxj8IXxHn2/RCpeKRuhOK2pmHaoE2op+11Lz; Expires=Thu, 25 Apr 2024 17:22:28 GMT; Path=/ Set-Cookie: AWSALBCORS=Irg0bRDVpHT4MiKe7m+54PtmCJsAnojpKHZMKDbTPs3x4INDD4EjSyc2HoY2FuG3Kun599zt8b4gH+PvRoU9b9unsxj8IXxHn2/RCpeKRuhOK2pmHaoE2op+11Lz; Expires=Thu, 25 Apr 2024 17:22:28 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:28 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 34 38 30 37 38 5c 6e 31 30 32 35 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713460948078\n1025\n1\n0\nn\n15000")
2024-04-18 17:22:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49834	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:28 UTC	537	OUT	OPTIONS /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.traininng.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:28 UTC	852	IN	HTTP/1.1 204 No Content Date: Thu, 18 Apr 2024 17:22:28 GMT Connection: close access-control-allow-headers: Content-Type access-control-allow-origin: * access-control-max-age: 600 cache-control: max-age=600 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876656500dae7bd6-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bL15QC8m7JPGHBcGJtgBBDEc5N7C6y38VFunL7HjWA%2FuTv6kfi7TDhTBzuuPgfwzPdgdsOjorXQvlDS8G1INZ04qJHD4GIzvS41TBfda4xYkCo0HC6IcouDu0tOv2KiCf8e%2F7AHrmh1jlw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=b6ee4b309948db6b699bc74fca04c400c6b19fbe-1713460948; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876656500dae7bd6-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49836	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:28 UTC	857	OUT	GET /aboutus HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.0.1713460941.60.0.0
2024-04-18 17:22:28 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:33 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:28 UTC	7985	IN	Data Raw: 31 30 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 10b8<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:28 UTC	2628	IN	Data Raw: 67 20 63 6f 75 72 73 65 73 20 6f 66 66 65 72 65 64 20 62 79 20 54 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 20 67 69 76 65 20 72 65 67 75 6c 61 74 6f 72 79 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 20 67 72 65 61 74 65 72 20 63 6f 6e 66 69 64 65 6e 63 65 20 69 6e 20 63 6f 6d 70 72 65 68 65 6e 64 69 6e 67 20 72 65 67 75 6c 61 74 6f 72 79 20 69 73 73 75 65 73 20 61 6e 64 20 61 64 64 72 65 73 73 69 6e 67 20 70 61 69 6e 20 61 72 65 61 73 20 72 65 6c 61 74 69 6e 67 20 74 6f 20 74 68 65 6d 2e 20 57 69 74 68 20 74 68 65 20 68 65 6c 70 20 6f 66 20 54 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 27 73 20 63 6f 75 72 73 65 73 2c 20 74 68 65 79 20 62 65 63 6f 6d 65 20 65 71 75 69 70 70 65 64 20 74 6f 20 63 72 65 61 74 65 20 68 69 67 68 20 71 75 61 6c 69 74 79 2c 20 74 72 75 73 74 Data Ascii: g courses offered by Traininng.com give regulatory professionals greater confidence in comprehending regulatory issues and addressing pain areas relating to them. With the help of Traininng.com's courses, they become equipped to create high quality, trust
2024-04-18 17:22:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:29 UTC	3782	IN	Data Raw: 65 62 61 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6e 64 63 6f 6c 75 6d 6e 73 22 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 66 6f 6f 74 65 72 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 74 6f 70 2d 61 72 65 61 20 77 6f 77 20 66 61 64 65 49 6e 55 70 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 55 70 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 37 20 63 6f 6c 2d 6d 64 2d 35 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 Data Ascii: eba</div><div class="endcolumns"></div></div><footer><div class="footer-top-area wow fadeInUp" style="visibility: visible; animation-name: fadeInUp;"><div class="container"><div class=""><div class="col-xs-12 col-sm-7 col-md-5"><div class="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49837	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:28 UTC	1466	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460947645/1713460947645%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Online%20Professional%20Trainings%20Provider%20%7C%20Professional%20Courses%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2F%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=Irg0bRDVpHT4MiKe7m+54PtmCJsAnojpKHZMKDbTPs3x4INDD4EjSyc2HoY2FuG3Kun599zt8b4gH+PvRoU9b9unsxj8IXxHn2/RCpeKRuhOK2pmHaoE2op+11Lz
2024-04-18 17:22:28 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:28 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=0Z4ehnqfGiG99O082Efpil/tkWBsJPD+pnNjLz+t/xB1dsci9zBvJQF2Bbn9cZ6ThMrIpMBHk8Y8sDffJRDCG/0+CMjK8t+RO3OX0rG60B1Z41N4x3k7bRK61qvx; Expires=Thu, 25 Apr 2024 17:22:28 GMT; Path=/ Set-Cookie: AWSALBCORS=0Z4ehnqfGiG99O082Efpil/tkWBsJPD+pnNjLz+t/xB1dsci9zBvJQF2Bbn9cZ6ThMrIpMBHk8Y8sDffJRDCG/0+CMjK8t+RO3OX0rG60B1Z41N4x3k7bRK61qvx; Expires=Thu, 25 Apr 2024 17:22:28 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:28 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49838	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:28 UTC	675	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713460947648 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=Irg0bRDVpHT4MiKe7m+54PtmCJsAnojpKHZMKDbTPs3x4INDD4EjSyc2HoY2FuG3Kun599zt8b4gH+PvRoU9b9unsxj8IXxHn2/RCpeKRuhOK2pmHaoE2op+11Lz
2024-04-18 17:22:28 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:28 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=MvlFFXkQYHiDURZCV6nFa7HjXa+VplRqhibNuspYlAaHTKPQya5raiCnlW71JnnCN0NvguIxU+FkdBKxhJr0QZn+lyho3ihwHNI5cmBYDmjJustcEv4S1ygHj8s9; Expires=Thu, 25 Apr 2024 17:22:28 GMT; Path=/ Set-Cookie: AWSALBCORS=MvlFFXkQYHiDURZCV6nFa7HjXa+VplRqhibNuspYlAaHTKPQya5raiCnlW71JnnCN0NvguIxU+FkdBKxhJr0QZn+lyho3ihwHNI5cmBYDmjJustcEv4S1ygHj8s9; Expires=Thu, 25 Apr 2024 17:22:28 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:28 UTC	414	IN	Data Raw: 31 39 37 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 34 38 36 33 32 5c 6e 31 30 32 34 2e 34 37 36 32 39 32 39 37 34 33 39 39 33 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d Data Ascii: 197$Loader && ($Loader.payload = "1713460948632\n1024.4762929743993\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-
2024-04-18 17:22:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49839	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:28 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:28 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:22:29 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:29 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 87665653cddf44e7-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yw08KueHiauePKypQcQeiF4Pps3kAI%2B6kjOmp475zAGRfOm9UNVNLaWCmTmH0Xu45vd1XcBwJrjcQ6FqqrBDAiPWnlTVuwg8xp2DcjmDOCGDubEXZdpLhLDfhWRK5OD3WnbIRgh%2Bc5fBpQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=0741f3afb6e4311c4d74c99c7a4426a20a472942-1713460949; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87665653cddf44e7-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49840	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:28 UTC	675	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713460948144 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=MvlFFXkQYHiDURZCV6nFa7HjXa+VplRqhibNuspYlAaHTKPQya5raiCnlW71JnnCN0NvguIxU+FkdBKxhJr0QZn+lyho3ihwHNI5cmBYDmjJustcEv4S1ygHj8s9
2024-04-18 17:22:29 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:29 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=2TlxsKizWJD8A8n/kY8tMuoHuXRBUSLRu8+nYEIGG6a40PDaDapRXIPt0Daub8Pe1JRdReWSzq/hM57a0I8Bd3SfIKgXCZU2FJxOBB+c1O0+R/yAZZGc/kUzdOGe; Expires=Thu, 25 Apr 2024 17:22:29 GMT; Path=/ Set-Cookie: AWSALBCORS=2TlxsKizWJD8A8n/kY8tMuoHuXRBUSLRu8+nYEIGG6a40PDaDapRXIPt0Daub8Pe1JRdReWSzq/hM57a0I8Bd3SfIKgXCZU2FJxOBB+c1O0+R/yAZZGc/kUzdOGe; Expires=Thu, 25 Apr 2024 17:22:29 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:29 UTC	4487	IN	Data Raw: 31 31 37 66 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 34 39 31 32 34 5c 6e 31 30 32 33 2e 39 39 35 32 37 37 39 33 35 36 33 36 33 5c 6e 33 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 67 61 74 65 73 5c 22 3a 7b 5c 22 5f 24 69 6e 74 5c 22 3a 31 7d 7d 2c 5c 22 73 65 71 5c 22 3a 33 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 73 79 73 74 65 6d 5c 22 3a 7b 5c 22 75 72 6c 73 5c 22 3a 7b 5c 22 73 6f 63 69 61 6c 5f 73 69 67 6e 69 6e 5f 74 65 6d 70 6c 61 74 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: 117f$Loader && ($Loader.payload = "1713460949124\n1023.9952779356363\n3\n1\nd\n{\"path\":\"livechat\",\"update\":{\"gates\":{\"_$int\":1}},\"seq\":3}\n{\"path\":\"livechat\",\"update\":{\"system\":{\"urls\":{\"social_signin_template$string\":\"https://w
2024-04-18 17:22:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49841	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:29 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:29 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:22:29 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876656563aa9add1-ATL
2024-04-18 17:22:29 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49844	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:29 UTC	675	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713460948677 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2TlxsKizWJD8A8n/kY8tMuoHuXRBUSLRu8+nYEIGG6a40PDaDapRXIPt0Daub8Pe1JRdReWSzq/hM57a0I8Bd3SfIKgXCZU2FJxOBB+c1O0+R/yAZZGc/kUzdOGe
2024-04-18 17:23:11 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:11 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=RzvkDQ1DE/rCFVl3lfMSiqeZu0xnmBGGMhuGSiqJd6zzcbScyMruTv+yVvyki9RYAlgvMLo00wtLEheXMsIYOapl1cLkmjNtgwQyaOSoHYevqk5Sd5MP04vfXUiQ; Expires=Thu, 25 Apr 2024 17:22:29 GMT; Path=/ Set-Cookie: AWSALBCORS=RzvkDQ1DE/rCFVl3lfMSiqeZu0xnmBGGMhuGSiqJd6zzcbScyMruTv+yVvyki9RYAlgvMLo00wtLEheXMsIYOapl1cLkmjNtgwQyaOSoHYevqk5Sd5MP04vfXUiQ; Expires=Thu, 25 Apr 2024 17:22:29 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:11 UTC	201	IN	Data Raw: 63 33 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 39 31 35 39 35 5c 6e 31 30 31 32 2e 39 39 31 37 35 32 39 38 36 38 32 30 32 5c 6e 34 5c 6e 33 5c 6e 65 5c 6e 7b 5c 22 6c 61 73 74 5f 66 72 61 6d 65 5f 74 69 6d 65 5c 22 3a 31 37 31 33 34 36 30 39 36 36 35 39 34 2c 5c 22 72 74 74 5c 22 3a 35 38 30 2e 35 31 35 35 36 31 30 30 31 37 36 34 39 2c 5c 22 6e 6f 5f 70 69 6e 67 5f 65 6c 61 70 73 65 64 5f 74 69 6d 65 5c 22 3a 32 35 30 30 30 2c 5c 22 64 65 73 74 72 6f 79 5f 74 69 6d 65 6f 75 74 5c 22 3a 31 32 30 30 30 7d 22 29 0d 0a Data Ascii: c3$Loader && ($Loader.payload = "1713460991595\n1012.9917529868202\n4\n3\ne\n{\"last_frame_time\":1713460966594,\"rtt\":580.5155610017649,\"no_ping_elapsed_time\":25000,\"destroy_timeout\":12000}")
2024-04-18 17:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49846	104.18.70.113	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:29 UTC	565	OUT	GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:29 UTC	1178	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:29 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 236 Connection: close x-amz-id-2: R3PecKyMJCGDs4JT2rQH8kobx+xe4PmFL3bhxKf2ufYIH8AcJNe/MKDfH2LJ2tMd1M/EVwVYdpk= x-amz-request-id: XFADR46K4TGX035H x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "77bb07ca171e3ff2b72a7dafa7822bc8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: Lm_gk05VN5DG3iiQELVQYeeCHNOGOA_r CF-Cache-Status: HIT Age: 625039 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YDDo2V%2F0E8WIWKLj7Xmb82be03ombV2Ht4MlnrGKtbsjR4rqFWssi2KGi3VeIoR%2F8rLXVBex0046ZRcspilgr%2BGEHdUQgWobRUzCFCOeAQqTN5kDjWrIIPQviq9I0DJtsDyck6g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87665657efde44ef-ATL
2024-04-18 17:22:29 UTC	191	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 37 36 5d 2c 7b 36 32 36 37 37 3a 28 65 2c 73 2c 64 29 3d 3e 7b 64 2e 72 28 73 29 2c 64 2e 64 28 73 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 63 7d 29 3b 63 6f 6e 73 74 20 63 3d 64 2e Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[5376],{62677:(e,s,d)=>{d.r(s),d.d(s,{default:()=>c});const c=d.
2024-04-18 17:22:29 UTC	45	IN	Data Raw: 70 2b 22 66 64 61 36 63 64 33 35 34 39 35 63 37 35 66 38 33 35 30 38 64 39 64 32 65 37 37 65 65 33 33 64 2e 6d 70 33 22 7d 7d 5d 29 3b Data Ascii: p+"fda6cd35495c75f83508d9d2e77ee33d.mp3"}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49847	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:29 UTC	980	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460948791/1713460948791%0A-432.47619198505527%0A2%0A3%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460946359%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2TlxsKizWJD8A8n/kY8tMuoHuXRBUSLRu8+nYEIGG6a40PDaDapRXIPt0Daub8Pe1JRdReWSzq/hM57a0I8Bd3SfIKgXCZU2FJxOBB+c1O0+R/yAZZGc/kUzdOGe
2024-04-18 17:22:29 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:29 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=C2ExBQNT2ez7g9xfY4hfv3unyyJ7Tv08P+biNRk+QSt3iK2AQMe8Xbomjd88SoELf6yLt04iwd/4Zl6ttKoEtza/9w1O1olnFOy8jUI6TfcFJqN5dByWZnlAgXIm; Expires=Thu, 25 Apr 2024 17:22:29 GMT; Path=/ Set-Cookie: AWSALBCORS=C2ExBQNT2ez7g9xfY4hfv3unyyJ7Tv08P+biNRk+QSt3iK2AQMe8Xbomjd88SoELf6yLt04iwd/4Zl6ttKoEtza/9w1O1olnFOy8jUI6TfcFJqN5dByWZnlAgXIm; Expires=Thu, 25 Apr 2024 17:22:29 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:29 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49845	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:29 UTC	586	OUT	GET /widget/images/gallery/badge/custom/everyday/05.png HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:29 UTC	430	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:29 GMT Content-Type: image/png Content-Length: 25358 Connection: close Cache-Control: public, max-age=604800 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=44837 etag: "58b8006b-af25" expires: Thu, 25 Apr 2024 17:22:29 GMT last-modified: Thu, 02 Mar 2017 11:22:19 GMT CF-Cache-Status: HIT Age: 17405 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876656578e364526-ATL
2024-04-18 17:22:29 UTC	939	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 48 08 02 00 00 00 07 f9 ba 41 00 00 62 d5 49 44 41 54 78 da ec 9b 6d 6e db 30 0c 86 7d ff ab 25 4d 96 76 15 84 c6 86 a1 08 74 09 46 d0 19 e6 6a 40 d0 99 6e 68 8f 8a 6c 77 7b 7e 1a ad 3e a9 97 14 a9 54 51 07 11 85 10 62 56 de de ce 88 18 19 75 dd b4 6d 1b bf 00 11 bd f7 31 07 de fb 97 97 9f f1 01 00 40 5d 37 71 8c 10 02 11 c5 c9 f0 7f f1 de 4f 69 61 74 bf 9c 73 6c 6d 15 b0 1e 9d 73 b9 16 50 33 4e 44 14 ff 20 97 3d 67 31 a1 e3 f1 07 22 0e 46 d8 7f 8c a5 40 44 63 4c 54 d0 b6 ed c0 e6 39 62 17 7a 0b 9c ab 00 cc 54 04 6b d1 1f 07 22 b2 d6 0e 3e 56 8f 10 53 de 31 97 4e 79 da df 91 db 52 70 eb 6c 13 b7 8f 5d d7 45 09 2e b2 44 24 0a 1c 13 0e 59 5f f4 b3 be af aa 44 74 3a 3d 0b 7a aa 76 c3 88 d8 Data Ascii: PNGIHDRHAbIDATxmn0}%MvtFj@nhlw{~>TQbVum1@]7qOiatslmsP3ND =g1"F@DcLT9bzTk">VS1NyRpl]E.D$Y_Dt:=zv
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: c0 df 95 2f 40 66 e6 1b 04 b6 ec 81 4a c9 1c 08 7a 19 ec 49 49 ee 4e aa 33 b6 88 59 18 e0 99 ae b2 2e fa 91 af ba 8a c3 9d 2c 10 9a 81 91 15 81 44 0c 95 e8 f7 5f 5e 0e 22 8a 0a 60 35 cd fc ac c1 41 87 aa b5 e2 5b a8 70 eb da 87 4d d3 ec 9c 4b eb a6 83 55 33 dc 33 6c ad 3d bd 1e a2 54 7c ca 58 5f 2b a7 c0 c6 39 17 ff 0f 71 cc 43 d7 86 23 51 b3 12 2a 41 69 09 f0 42 a5 25 14 a0 25 94 41 25 e4 b7 c3 e1 90 bb 30 00 37 82 fc aa 89 6d 4a e8 a0 c3 21 30 8e 2a 93 11 e2 3f d4 35 ef d2 cc 4a a8 04 a5 25 5c 82 4a 50 5a 02 41 4b 28 8c 4a a0 0d fb d4 cf 7a 02 71 82 11 ef 4b ac 70 05 0c 46 35 40 95 a1 33 09 e2 ca 01 4c 01 54 82 3b 59 6f b4 84 8f 51 09 4a 4b 50 4b 88 55 71 07 cd 78 2b e9 ed 36 f0 59 28 56 af 15 0e 5c 78 5c e5 eb eb eb 30 8c ab e4 a0 71 5c fc f1 7a 6f b4 Data Ascii: /@fJzIIN3Y.,D_^"`5A[pMKU33l=T\|X_+9qC#QAiB%%A%07mJ!0?5J%\JPZAK(JzqKpF5@3LT;YoQJKPKUqx+6Y(V\x\0q\zo
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: 7d 34 b7 e3 cf 7a bd ed ee 81 47 f0 20 1e c7 43 8d 96 90 95 96 20 ad c6 33 dd bd 9b d9 40 4f f3 bf 4c ff ce 50 09 59 1b fa b8 df 7f 7f 35 3b 3e 3b 7b 7b 79 f9 19 0d bd be fe 29 55 8b 61 cb 0b f9 2c 9d d0 15 da 2d ea 1f 2b 3e c3 20 61 37 5a c2 58 b4 84 c9 13 43 22 df f1 6e 2b e9 04 bd 04 1b e8 a9 9c a0 9d a1 12 46 ff f6 de dd fd a6 d4 40 02 1b ab 24 85 08 91 e3 dc 4b 72 91 ec dd ee db c5 c5 87 60 18 0c 8c e1 3d 3e fe 6f ad f5 38 9f ab d3 aa 51 ae e4 a5 d7 dc d2 9d a0 81 62 37 4d 33 7b 1b 68 89 79 79 1b 68 67 a8 84 b1 7e 6b d9 b5 43 f8 c8 61 83 52 83 a4 ae fc b4 30 2a c1 d3 12 78 34 03 60 18 41 72 bd 5e bf bf b9 f9 c1 4f 17 45 4b 10 54 42 b1 83 2b c4 33 58 53 16 20 d8 e8 74 82 5e 9a 0d b4 c4 33 d1 06 da 19 2a 21 1d 95 80 fc 91 96 06 c9 32 09 2c 59 aa 36 54 Data Ascii: }4zG C 3@OLPY5;>;{{y)Ua,-+> a7ZXC"n+F@$Kr`=>o8Qb7M3{hyyhg~kCaR0x4`Ar^OEKTB+3XS t^3!2,Y6T
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: 25 28 b8 94 74 15 12 3b f0 20 35 ab 04 35 e2 04 0b c6 17 6a cd 9f ff 34 e8 82 86 85 1f f2 09 78 32 07 b8 f0 de 36 05 b7 04 36 1c f2 2a 68 19 29 7b d9 7c f1 c5 97 88 2c 60 a2 9a 04 ed 37 98 9c c5 2f 12 14 19 59 25 f0 06 cd cd 2a 81 e8 8c 24 3a 85 e6 88 37 df 7c f7 85 17 f6 f5 f7 6f a6 5b 9e 64 01 bb 41 01 e3 05 f1 b2 35 41 84 b8 53 29 87 97 0d 21 9b 2d ac 44 40 73 39 3a 3e 7c 54 93 a0 fd 36 e5 92 9c 8c 2f f5 29 22 5b 25 c4 77 4b 60 e7 9b 1c 9d e5 56 09 a3 a3 e7 d7 ae dd d6 d9 b9 66 c6 8c 26 20 3b 77 e6 b2 f9 b3 96 f5 3c b5 b4 6f de c3 b5 a2 73 e9 ba 45 dd 0d 0b 3f 54 bf c5 d3 f0 64 fc 89 fe 3a 78 71 24 da cf 3c b3 13 ff ce 40 53 84 76 4b 20 46 23 a1 2e 8d 97 8d cd e0 4a b9 e4 1c 21 19 41 59 4d 82 96 4e 82 36 46 cc 49 d0 45 38 ab 04 b9 5b 82 dc 2a 81 48 21 Data Ascii: %(t; 55j4x266h){\|,`7/Y%$:7\|o[dA5AS)!-D@s9:>\|T6/)"[%wK`Vf& ;w<osE?Td:xq$<@SvK F#.J!AYMN6FIE8[*H!
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: 4a 5c 12 b4 2c 1b 86 c3 68 56 77 71 28 b3 f3 b2 f9 e5 ad c3 d5 5a c4 e0 c5 43 9f eb a8 43 5b b9 c7 40 eb 51 9a 49 d0 13 02 74 2e 6e 09 28 31 b1 2d c5 af 55 02 88 d7 0a 9d 75 8c 86 0d 9e df 94 81 ad 2b 38 94 d9 79 d9 c4 89 7c a9 61 ad 3a 17 3c 4a 36 09 da 04 d0 e9 bb 25 90 c1 f4 ee 88 c4 aa e0 d3 0b a7 29 b3 d1 b4 29 9c 35 43 bf 5e 36 ac 16 e2 80 e6 e5 65 93 fe 88 d2 c4 27 41 63 cf 7b 2c b1 a6 36 09 5a 7e 5c 0a b3 bc 29 71 b7 04 b8 a3 51 03 e0 c5 2d 81 6d dc d3 9c 77 36 d7 0c c9 f8 fb f2 b2 e1 d0 48 1c d0 bc bc 6c e2 e4 c5 28 5d b6 94 29 67 34 09 5a e1 a9 c3 24 e8 c4 2f 57 04 68 89 86 98 ad de a6 3c 28 59 b7 04 64 5b 34 14 f5 e8 96 b0 7b f7 a1 12 37 0a 7a 69 35 64 0f 8b 5f 2f 1b 1c ca dc 27 63 85 30 66 e3 be a5 3c 5f 80 a7 52 db e8 34 b9 e6 29 77 c5 c2 11 Data Ascii: J\,hVwq(ZCC[@QIt.n(1-Uu+8y\|a:<J6%))5C^6e'Ac{,6Z~\)qQ-mw6Hl(])g4Z$/Wh<(Yd[4{7zi5d_/'c0f<_R4)w
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: b2 d3 64 a2 d5 5e fa ed 6f 0f ca bb 93 c8 72 80 da 4a d6 cb 86 01 98 b0 ac 86 99 a5 c4 72 e4 2d c1 18 68 2d db 0d 6e 3d 2f 57 37 26 3a 93 30 82 5b 02 9b 17 38 da 4a ee 96 80 b9 4d 78 35 74 2a b7 34 f3 09 3e 4a 8f 35 79 dd 8e 65 34 33 55 62 26 34 28 8e 56 4c 48 9a 94 b4 6a fe ee e8 58 29 f7 b2 a1 8b 3f 0e 7d b2 5e 36 f5 ef a2 e1 05 b3 48 eb d2 1c 03 3d d1 1e 26 07 6b 20 8b f3 92 51 fa 04 68 16 01 e2 bf 43 0a 63 d1 c2 20 77 4b 18 1d 3d af ee 9d 5b 72 ad c3 93 e9 a6 d4 46 8c 76 1b eb 67 4c c3 81 d1 aa 30 d8 b4 17 7c f7 ca 65 c0 6e 85 e0 c0 eb d4 00 9a 7b 09 3b 59 e8 65 c3 79 b2 e8 58 49 d6 cb 66 ba 45 f0 31 d0 5a e8 63 a0 05 93 a0 05 4a 95 b8 d3 0f 18 85 83 5b 42 4d 8b a0 6e 09 a4 23 71 a2 d2 2d 41 38 d1 8a 28 69 bf 94 8f 52 f7 82 55 c4 e8 8d 4b ba 1c 30 da Data Ascii: d^orJr-h-n=/W7&:0[8JMx5t*4>J5ye43Ub&4(VLHjX)?}^6H=&k QhCc wK=[rFvgL0\|en{;YeyXIfE1ZcJ[BMn#q-A8(iRUK0
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: 6e 24 28 eb eb fa 87 87 14 28 eb eb c4 ee e7 67 b6 f7 51 e0 d1 4b e2 db 6e 7c 94 a2 a4 91 87 ba c1 34 1e a0 bd 70 6a 05 d1 d8 d5 b4 87 e6 c9 23 14 72 a4 39 c1 84 00 2d a4 32 f9 e7 0f 33 e8 84 23 90 8c 5a 30 06 3a 52 10 97 f4 b9 8e 3a ca 25 57 24 f4 ee 96 40 fe 11 34 b4 fc 65 f1 22 f6 15 c2 39 8a 11 6e ef bb f6 c9 71 03 40 ab b2 21 29 69 7d 6d 1e fc 15 19 8f 99 6d bd 83 0b ac fe 3b 68 68 95 7e e2 2b 6d fe 2d 61 9a 82 68 56 02 e3 27 d4 bc d2 f0 d8 09 bd 6c 58 87 48 c5 cb 26 8a f0 20 2f 61 af cb 18 e8 3c a3 e9 ed 51 a2 76 a3 a1 59 69 ba 70 c8 5b 74 ba ba d6 e3 a5 56 74 4e 0e 91 fd 4f 72 d8 57 76 fd da 8c ce a4 a4 49 77 e8 eb a3 23 3b fb 96 ac 26 e3 31 ab ad 17 b5 47 1b 0e 97 94 34 2e 2a f6 5d 30 2c 21 b2 ff 90 ad 2b 31 91 9a 93 d1 e1 ec 2a f1 b2 a1 92 87 8e Data Ascii: n$((gQKn\|4pj#r9-23#Z0:R:%W$@4e"9nq@!)i}mm;hh~+m-ahV'lXH& /a<QvYip[tVtNOrWvIw#;&1G4.]0,!+1
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: 0b dc 12 2c 20 5e 0e d0 94 70 3b 53 1c 5c 4c 9c af 9c 3d 1a 19 9a f5 36 71 24 d4 68 6f f1 0d d3 54 7a 40 90 97 01 c5 e1 0b a0 05 5e 36 91 82 59 f6 78 59 82 c0 9d 32 6a 37 85 69 3d 95 d6 5a de 44 b5 13 82 a7 fe 81 24 d2 6a 77 6c 0e 45 42 83 5b 82 75 c8 01 5a e2 96 70 ec d8 1f 08 5b b3 66 f6 43 e9 ac 43 73 69 90 1a 30 ad a6 d9 72 81 6a c7 bc c4 69 02 d0 89 8f aa 02 1c 4c 07 5d 73 9a a8 8d 2d d1 49 0f 1c 0e 4a f1 0c ad fc f1 c3 b5 51 85 d2 6b df a1 5f 58 cc 14 87 bd 5b 02 5e 81 d6 fb 89 2f 90 d4 60 3f 50 4e 14 82 35 fa 15 07 ba 07 d9 af a8 bc f1 40 ef 80 e4 c9 0e a0 df 79 e7 6c 64 0e 3a d0 90 11 00 41 5e b4 86 df 20 64 4f 2d af 8d 0d 18 af 0f d2 1d 89 45 a4 4e 42 81 5b 42 73 1d 34 c3 56 82 c2 14 6c c5 fa 34 41 d9 44 55 5f 38 86 86 17 cc ab 1d 3b fb df 58 44 Data Ascii: , ^p;S\L=6q$hoTz@^6YxY2j7i=ZD$jwlEB[uZp[fCCsi0rjiL]s-IJQk_X[^/`?PN5@yld:A^ dO-ENB[Bs4Vl4ADU_8;XD
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: 34 d7 d5 93 ff c8 6c 7a 64 64 0f ae e8 12 c0 95 58 25 e8 81 3c 6b bc 8a 84 03 d2 69 d0 17 6e 8a 0e dc 1b 79 f1 c4 b7 e9 4e a4 79 51 d1 50 4e d1 5e da d6 2d 41 1e 6f bc 71 8a 44 33 4e 42 9c 8a 0e 00 cd e9 a2 d8 bc 0a a0 c3 f9 ea 31 c5 16 02 34 95 9d fc bc 9a 01 9a 0b a4 07 eb 87 f5 18 ed e0 65 23 89 2a 7d ce 31 40 5f b8 55 0b a1 ae ab a9 b0 b3 70 61 e2 ab e7 04 06 05 bd 80 e2 08 40 93 93 74 56 e7 1b 6a 80 3a a7 11 94 e2 78 66 ed 26 fc 2a 85 05 51 da d9 df 1f b0 07 4d cc 1c 50 3a b6 14 16 76 23 b0 1b 5c 36 e0 9b 4b 48 71 98 d7 c5 23 ff 84 fa 04 9e bc 74 e9 7a 62 b4 63 ce c2 a0 55 42 eb 51 09 9f f3 0a a6 d2 b6 49 34 99 68 f3 8d 97 59 0e 64 66 45 ec 01 3a c4 24 37 23 b3 f1 b0 b7 18 0c 23 4f bf 68 00 8d 9f a7 b3 f6 ef 7c d1 1e a0 81 e6 49 6d bc be 85 e1 00 9a Data Ascii: 4lzddX%<kinyNyQPN^-AoqD3NB14e#}1@_Upa@tVj:xf&QMP:v#\6KHq#tzbcUBQI4hYdfE:$7##Oh\|Im
2024-04-18 17:22:29 UTC	1369	IN	Data Raw: d4 73 7e 73 ab 22 45 be 3c 85 9b 82 53 f9 2f e6 94 cf 46 73 bb c3 78 3e db 06 82 79 d1 9d fc 19 19 99 a7 ab e1 e1 19 b3 db d7 37 b5 b7 77 1c e9 db 6d 23 cd ce 5e 27 c4 92 24 b1 a9 e8 d0 a6 8b 5b 24 cc 59 d0 0e 89 d0 13 d0 0f 47 3d d7 3b dd 4c ce 3c 80 06 0d e4 47 e7 07 34 a1 25 cb 74 1a 34 08 c1 ec 22 35 40 3d b3 99 b0 94 e3 f5 98 4e 0b 48 d1 76 f9 d5 49 4f 8e 0d 68 39 6f d0 2c e7 4d bc 2c e7 b9 11 6e a7 de 79 76 69 f5 6b 28 0d a3 e5 bc 0f a0 35 60 b2 01 9a 01 c0 30 60 30 f8 3c b1 a2 b1 11 d5 62 ad 10 c6 07 34 71 e8 cd cd ad 7b 4b 92 fb 3f 04 34 df fe c3 de b9 fe da 51 9d 67 7c fe 81 7e ab fa 0f f4 4b bf 57 6d d5 aa 55 aa de d4 7b ab 56 55 95 b6 6a 54 55 55 e2 84 38 88 04 27 29 b9 d8 60 27 60 a7 09 21 71 08 49 5a 43 02 b5 8f c1 39 c1 07 1b 53 1b c2 d5 06 Data Ascii: s~s"E<S/Fsx>y7wm#^'$[$YG=;L<G4%t4"5@=NHvIOh9o,M,nyvik(5`0`0<b4q{K?4Qg\|~KWmU{VUjTUU8')`'`!qIZC9S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49849	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:29 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:22:30 UTC	591	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:22:29 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876656588d4644f7-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HPhc1LTA6CqLmfvaRoqZ2Quwo0xw2e%2FBBbv76%2BhgnKmu%2BmLfbstL7rTtgtnyoyluBiHoixyzNbG2V3HgMT2IG1bf%2BkRX6sLXw7TywzR3Sr%2FHsWAqqsOnIvLUr0IWuo7b39F%2Fa447RmMVEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876656588d4644f7-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49852	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:30 UTC	690	OUT	GET /s/W/ws/DyrSvFruBUrXMaS9/c/1713460949334 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=C2ExBQNT2ez7g9xfY4hfv3unyyJ7Tv08P+biNRk+QSt3iK2AQMe8Xbomjd88SoELf6yLt04iwd/4Zl6ttKoEtza/9w1O1olnFOy8jUI6TfcFJqN5dByWZnlAgXIm Sec-WebSocket-Key: st3htm4kSM27fwN7vBhMag== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:22:30 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:30 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=WjCT/NZbwP+d5rqhJSVrH/lEPEEyFjBXJfSdqyGU10qrgRLTAvnRTQZ6eekwLV75M3R6lXZ0TUtu/qZxb/A+5r0UCmGwfFBHGL2fERyl8EN8XoMW8tVwcmQpuL+fkvJZ6cqK2HXwCpF7PELz8d8N8c/PEieAbYrMwhI1Uwl8FCUdaocPEW/cB3vmQOEwrw==; Expires=Thu, 25 Apr 2024 17:22:30 GMT; Path=/ Set-Cookie: AWSALBCORS=WjCT/NZbwP+d5rqhJSVrH/lEPEEyFjBXJfSdqyGU10qrgRLTAvnRTQZ6eekwLV75M3R6lXZ0TUtu/qZxb/A+5r0UCmGwfFBHGL2fERyl8EN8XoMW8tVwcmQpuL+fkvJZ6cqK2HXwCpF7PELz8d8N8c/PEieAbYrMwhI1Uwl8FCUdaocPEW/cB3vmQOEwrw==; Expires=Thu, 25 Apr 2024 17:22:30 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49851	104.17.97.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:30 UTC	386	OUT	GET /widget/images/gallery/badge/custom/everyday/05.png HTTP/1.1 Host: v2.zopim.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:30 UTC	430	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:30 GMT Content-Type: image/png Content-Length: 25358 Connection: close Cache-Control: public, max-age=604800 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=44837 etag: "58b8006b-af25" expires: Thu, 25 Apr 2024 17:22:30 GMT last-modified: Thu, 02 Mar 2017 11:22:19 GMT CF-Cache-Status: HIT Age: 17406 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8766565bab13ad6b-ATL
2024-04-18 17:22:30 UTC	939	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 48 08 02 00 00 00 07 f9 ba 41 00 00 62 d5 49 44 41 54 78 da ec 9b 6d 6e db 30 0c 86 7d ff ab 25 4d 96 76 15 84 c6 86 a1 08 74 09 46 d0 19 e6 6a 40 d0 99 6e 68 8f 8a 6c 77 7b 7e 1a ad 3e a9 97 14 a9 54 51 07 11 85 10 62 56 de de ce 88 18 19 75 dd b4 6d 1b bf 00 11 bd f7 31 07 de fb 97 97 9f f1 01 00 40 5d 37 71 8c 10 02 11 c5 c9 f0 7f f1 de 4f 69 61 74 bf 9c 73 6c 6d 15 b0 1e 9d 73 b9 16 50 33 4e 44 14 ff 20 97 3d 67 31 a1 e3 f1 07 22 0e 46 d8 7f 8c a5 40 44 63 4c 54 d0 b6 ed c0 e6 39 62 17 7a 0b 9c ab 00 cc 54 04 6b d1 1f 07 22 b2 d6 0e 3e 56 8f 10 53 de 31 97 4e 79 da df 91 db 52 70 eb 6c 13 b7 8f 5d d7 45 09 2e b2 44 24 0a 1c 13 0e 59 5f f4 b3 be af aa 44 74 3a 3d 0b 7a aa 76 c3 88 d8 Data Ascii: PNGIHDRHAbIDATxmn0}%MvtFj@nhlw{~>TQbVum1@]7qOiatslmsP3ND =g1"F@DcLT9bzTk">VS1NyRpl]E.D$Y_Dt:=zv
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: c0 df 95 2f 40 66 e6 1b 04 b6 ec 81 4a c9 1c 08 7a 19 ec 49 49 ee 4e aa 33 b6 88 59 18 e0 99 ae b2 2e fa 91 af ba 8a c3 9d 2c 10 9a 81 91 15 81 44 0c 95 e8 f7 5f 5e 0e 22 8a 0a 60 35 cd fc ac c1 41 87 aa b5 e2 5b a8 70 eb da 87 4d d3 ec 9c 4b eb a6 83 55 33 dc 33 6c ad 3d bd 1e a2 54 7c ca 58 5f 2b a7 c0 c6 39 17 ff 0f 71 cc 43 d7 86 23 51 b3 12 2a 41 69 09 f0 42 a5 25 14 a0 25 94 41 25 e4 b7 c3 e1 90 bb 30 00 37 82 fc aa 89 6d 4a e8 a0 c3 21 30 8e 2a 93 11 e2 3f d4 35 ef d2 cc 4a a8 04 a5 25 5c 82 4a 50 5a 02 41 4b 28 8c 4a a0 0d fb d4 cf 7a 02 71 82 11 ef 4b ac 70 05 0c 46 35 40 95 a1 33 09 e2 ca 01 4c 01 54 82 3b 59 6f b4 84 8f 51 09 4a 4b 50 4b 88 55 71 07 cd 78 2b e9 ed 36 f0 59 28 56 af 15 0e 5c 78 5c e5 eb eb eb 30 8c ab e4 a0 71 5c fc f1 7a 6f b4 Data Ascii: /@fJzIIN3Y.,D_^"`5A[pMKU33l=T\|X_+9qC#QAiB%%A%07mJ!0?5J%\JPZAK(JzqKpF5@3LT;YoQJKPKUqx+6Y(V\x\0q\zo
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: 7d 34 b7 e3 cf 7a bd ed ee 81 47 f0 20 1e c7 43 8d 96 90 95 96 20 ad c6 33 dd bd 9b d9 40 4f f3 bf 4c ff ce 50 09 59 1b fa b8 df 7f 7f 35 3b 3e 3b 7b 7b 79 f9 19 0d bd be fe 29 55 8b 61 cb 0b f9 2c 9d d0 15 da 2d ea 1f 2b 3e c3 20 61 37 5a c2 58 b4 84 c9 13 43 22 df f1 6e 2b e9 04 bd 04 1b e8 a9 9c a0 9d a1 12 46 ff f6 de dd fd a6 d4 40 02 1b ab 24 85 08 91 e3 dc 4b 72 91 ec dd ee db c5 c5 87 60 18 0c 8c e1 3d 3e fe 6f ad f5 38 9f ab d3 aa 51 ae e4 a5 d7 dc d2 9d a0 81 62 37 4d 33 7b 1b 68 89 79 79 1b 68 67 a8 84 b1 7e 6b d9 b5 43 f8 c8 61 83 52 83 a4 ae fc b4 30 2a c1 d3 12 78 34 03 60 18 41 72 bd 5e bf bf b9 f9 c1 4f 17 45 4b 10 54 42 b1 83 2b c4 33 58 53 16 20 d8 e8 74 82 5e 9a 0d b4 c4 33 d1 06 da 19 2a 21 1d 95 80 fc 91 96 06 c9 32 09 2c 59 aa 36 54 Data Ascii: }4zG C 3@OLPY5;>;{{y)Ua,-+> a7ZXC"n+F@$Kr`=>o8Qb7M3{hyyhg~kCaR0x4`Ar^OEKTB+3XS t^3!2,Y6T
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: 25 28 b8 94 74 15 12 3b f0 20 35 ab 04 35 e2 04 0b c6 17 6a cd 9f ff 34 e8 82 86 85 1f f2 09 78 32 07 b8 f0 de 36 05 b7 04 36 1c f2 2a 68 19 29 7b d9 7c f1 c5 97 88 2c 60 a2 9a 04 ed 37 98 9c c5 2f 12 14 19 59 25 f0 06 cd cd 2a 81 e8 8c 24 3a 85 e6 88 37 df 7c f7 85 17 f6 f5 f7 6f a6 5b 9e 64 01 bb 41 01 e3 05 f1 b2 35 41 84 b8 53 29 87 97 0d 21 9b 2d ac 44 40 73 39 3a 3e 7c 54 93 a0 fd 36 e5 92 9c 8c 2f f5 29 22 5b 25 c4 77 4b 60 e7 9b 1c 9d e5 56 09 a3 a3 e7 d7 ae dd d6 d9 b9 66 c6 8c 26 20 3b 77 e6 b2 f9 b3 96 f5 3c b5 b4 6f de c3 b5 a2 73 e9 ba 45 dd 0d 0b 3f 54 bf c5 d3 f0 64 fc 89 fe 3a 78 71 24 da cf 3c b3 13 ff ce 40 53 84 76 4b 20 46 23 a1 2e 8d 97 8d cd e0 4a b9 e4 1c 21 19 41 59 4d 82 96 4e 82 36 46 cc 49 d0 45 38 ab 04 b9 5b 82 dc 2a 81 48 21 Data Ascii: %(t; 55j4x266h){\|,`7/Y%$:7\|o[dA5AS)!-D@s9:>\|T6/)"[%wK`Vf& ;w<osE?Td:xq$<@SvK F#.J!AYMN6FIE8[*H!
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: 4a 5c 12 b4 2c 1b 86 c3 68 56 77 71 28 b3 f3 b2 f9 e5 ad c3 d5 5a c4 e0 c5 43 9f eb a8 43 5b b9 c7 40 eb 51 9a 49 d0 13 02 74 2e 6e 09 28 31 b1 2d c5 af 55 02 88 d7 0a 9d 75 8c 86 0d 9e df 94 81 ad 2b 38 94 d9 79 d9 c4 89 7c a9 61 ad 3a 17 3c 4a 36 09 da 04 d0 e9 bb 25 90 c1 f4 ee 88 c4 aa e0 d3 0b a7 29 b3 d1 b4 29 9c 35 43 bf 5e 36 ac 16 e2 80 e6 e5 65 93 fe 88 d2 c4 27 41 63 cf 7b 2c b1 a6 36 09 5a 7e 5c 0a b3 bc 29 71 b7 04 b8 a3 51 03 e0 c5 2d 81 6d dc d3 9c 77 36 d7 0c c9 f8 fb f2 b2 e1 d0 48 1c d0 bc bc 6c e2 e4 c5 28 5d b6 94 29 67 34 09 5a e1 a9 c3 24 e8 c4 2f 57 04 68 89 86 98 ad de a6 3c 28 59 b7 04 64 5b 34 14 f5 e8 96 b0 7b f7 a1 12 37 0a 7a 69 35 64 0f 8b 5f 2f 1b 1c ca dc 27 63 85 30 66 e3 be a5 3c 5f 80 a7 52 db e8 34 b9 e6 29 77 c5 c2 11 Data Ascii: J\,hVwq(ZCC[@QIt.n(1-Uu+8y\|a:<J6%))5C^6e'Ac{,6Z~\)qQ-mw6Hl(])g4Z$/Wh<(Yd[4{7zi5d_/'c0f<_R4)w
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: b2 d3 64 a2 d5 5e fa ed 6f 0f ca bb 93 c8 72 80 da 4a d6 cb 86 01 98 b0 ac 86 99 a5 c4 72 e4 2d c1 18 68 2d db 0d 6e 3d 2f 57 37 26 3a 93 30 82 5b 02 9b 17 38 da 4a ee 96 80 b9 4d 78 35 74 2a b7 34 f3 09 3e 4a 8f 35 79 dd 8e 65 34 33 55 62 26 34 28 8e 56 4c 48 9a 94 b4 6a fe ee e8 58 29 f7 b2 a1 8b 3f 0e 7d b2 5e 36 f5 ef a2 e1 05 b3 48 eb d2 1c 03 3d d1 1e 26 07 6b 20 8b f3 92 51 fa 04 68 16 01 e2 bf 43 0a 63 d1 c2 20 77 4b 18 1d 3d af ee 9d 5b 72 ad c3 93 e9 a6 d4 46 8c 76 1b eb 67 4c c3 81 d1 aa 30 d8 b4 17 7c f7 ca 65 c0 6e 85 e0 c0 eb d4 00 9a 7b 09 3b 59 e8 65 c3 79 b2 e8 58 49 d6 cb 66 ba 45 f0 31 d0 5a e8 63 a0 05 93 a0 05 4a 95 b8 d3 0f 18 85 83 5b 42 4d 8b a0 6e 09 a4 23 71 a2 d2 2d 41 38 d1 8a 28 69 bf 94 8f 52 f7 82 55 c4 e8 8d 4b ba 1c 30 da Data Ascii: d^orJr-h-n=/W7&:0[8JMx5t*4>J5ye43Ub&4(VLHjX)?}^6H=&k QhCc wK=[rFvgL0\|en{;YeyXIfE1ZcJ[BMn#q-A8(iRUK0
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: 6e 24 28 eb eb fa 87 87 14 28 eb eb c4 ee e7 67 b6 f7 51 e0 d1 4b e2 db 6e 7c 94 a2 a4 91 87 ba c1 34 1e a0 bd 70 6a 05 d1 d8 d5 b4 87 e6 c9 23 14 72 a4 39 c1 84 00 2d a4 32 f9 e7 0f 33 e8 84 23 90 8c 5a 30 06 3a 52 10 97 f4 b9 8e 3a ca 25 57 24 f4 ee 96 40 fe 11 34 b4 fc 65 f1 22 f6 15 c2 39 8a 11 6e ef bb f6 c9 71 03 40 ab b2 21 29 69 7d 6d 1e fc 15 19 8f 99 6d bd 83 0b ac fe 3b 68 68 95 7e e2 2b 6d fe 2d 61 9a 82 68 56 02 e3 27 d4 bc d2 f0 d8 09 bd 6c 58 87 48 c5 cb 26 8a f0 20 2f 61 af cb 18 e8 3c a3 e9 ed 51 a2 76 a3 a1 59 69 ba 70 c8 5b 74 ba ba d6 e3 a5 56 74 4e 0e 91 fd 4f 72 d8 57 76 fd da 8c ce a4 a4 49 77 e8 eb a3 23 3b fb 96 ac 26 e3 31 ab ad 17 b5 47 1b 0e 97 94 34 2e 2a f6 5d 30 2c 21 b2 ff 90 ad 2b 31 91 9a 93 d1 e1 ec 2a f1 b2 a1 92 87 8e Data Ascii: n$((gQKn\|4pj#r9-23#Z0:R:%W$@4e"9nq@!)i}mm;hh~+m-ahV'lXH& /a<QvYip[tVtNOrWvIw#;&1G4.]0,!+1
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: 0b dc 12 2c 20 5e 0e d0 94 70 3b 53 1c 5c 4c 9c af 9c 3d 1a 19 9a f5 36 71 24 d4 68 6f f1 0d d3 54 7a 40 90 97 01 c5 e1 0b a0 05 5e 36 91 82 59 f6 78 59 82 c0 9d 32 6a 37 85 69 3d 95 d6 5a de 44 b5 13 82 a7 fe 81 24 d2 6a 77 6c 0e 45 42 83 5b 82 75 c8 01 5a e2 96 70 ec d8 1f 08 5b b3 66 f6 43 e9 ac 43 73 69 90 1a 30 ad a6 d9 72 81 6a c7 bc c4 69 02 d0 89 8f aa 02 1c 4c 07 5d 73 9a a8 8d 2d d1 49 0f 1c 0e 4a f1 0c ad fc f1 c3 b5 51 85 d2 6b df a1 5f 58 cc 14 87 bd 5b 02 5e 81 d6 fb 89 2f 90 d4 60 3f 50 4e 14 82 35 fa 15 07 ba 07 d9 af a8 bc f1 40 ef 80 e4 c9 0e a0 df 79 e7 6c 64 0e 3a d0 90 11 00 41 5e b4 86 df 20 64 4f 2d af 8d 0d 18 af 0f d2 1d 89 45 a4 4e 42 81 5b 42 73 1d 34 c3 56 82 c2 14 6c c5 fa 34 41 d9 44 55 5f 38 86 86 17 cc ab 1d 3b fb df 58 44 Data Ascii: , ^p;S\L=6q$hoTz@^6YxY2j7i=ZD$jwlEB[uZp[fCCsi0rjiL]s-IJQk_X[^/`?PN5@yld:A^ dO-ENB[Bs4Vl4ADU_8;XD
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: 34 d7 d5 93 ff c8 6c 7a 64 64 0f ae e8 12 c0 95 58 25 e8 81 3c 6b bc 8a 84 03 d2 69 d0 17 6e 8a 0e dc 1b 79 f1 c4 b7 e9 4e a4 79 51 d1 50 4e d1 5e da d6 2d 41 1e 6f bc 71 8a 44 33 4e 42 9c 8a 0e 00 cd e9 a2 d8 bc 0a a0 c3 f9 ea 31 c5 16 02 34 95 9d fc bc 9a 01 9a 0b a4 07 eb 87 f5 18 ed e0 65 23 89 2a 7d ce 31 40 5f b8 55 0b a1 ae ab a9 b0 b3 70 61 e2 ab e7 04 06 05 bd 80 e2 08 40 93 93 74 56 e7 1b 6a 80 3a a7 11 94 e2 78 66 ed 26 fc 2a 85 05 51 da d9 df 1f b0 07 4d cc 1c 50 3a b6 14 16 76 23 b0 1b 5c 36 e0 9b 4b 48 71 98 d7 c5 23 ff 84 fa 04 9e bc 74 e9 7a 62 b4 63 ce c2 a0 55 42 eb 51 09 9f f3 0a a6 d2 b6 49 34 99 68 f3 8d 97 59 0e 64 66 45 ec 01 3a c4 24 37 23 b3 f1 b0 b7 18 0c 23 4f bf 68 00 8d 9f a7 b3 f6 ef 7c d1 1e a0 81 e6 49 6d bc be 85 e1 00 9a Data Ascii: 4lzddX%<kinyNyQPN^-AoqD3NB14e#}1@_Upa@tVj:xf&QMP:v#\6KHq#tzbcUBQI4hYdfE:$7##Oh\|Im
2024-04-18 17:22:30 UTC	1369	IN	Data Raw: d4 73 7e 73 ab 22 45 be 3c 85 9b 82 53 f9 2f e6 94 cf 46 73 bb c3 78 3e db 06 82 79 d1 9d fc 19 19 99 a7 ab e1 e1 19 b3 db d7 37 b5 b7 77 1c e9 db 6d 23 cd ce 5e 27 c4 92 24 b1 a9 e8 d0 a6 8b 5b 24 cc 59 d0 0e 89 d0 13 d0 0f 47 3d d7 3b dd 4c ce 3c 80 06 0d e4 47 e7 07 34 a1 25 cb 74 1a 34 08 c1 ec 22 35 40 3d b3 99 b0 94 e3 f5 98 4e 0b 48 d1 76 f9 d5 49 4f 8e 0d 68 39 6f d0 2c e7 4d bc 2c e7 b9 11 6e a7 de 79 76 69 f5 6b 28 0d a3 e5 bc 0f a0 35 60 b2 01 9a 01 c0 30 60 30 f8 3c b1 a2 b1 11 d5 62 ad 10 c6 07 34 71 e8 cd cd ad 7b 4b 92 fb 3f 04 34 df fe c3 de b9 fe da 51 9d 67 7c fe 81 7e ab fa 0f f4 4b bf 57 6d d5 aa 55 aa de d4 7b ab 56 55 95 b6 6a 54 55 55 e2 84 38 88 04 27 29 b9 d8 60 27 60 a7 09 21 71 08 49 5a 43 02 b5 8f c1 39 c1 07 1b 53 1b c2 d5 06 Data Ascii: s~s"E<S/Fsx>y7wm#^'$[$YG=;L<G4%t4"5@=NHvIOh9o,M,nyvik(5`0`0<b4q{K?4Qg\|~KWmU{VUjTUU8')`'`!qIZC9S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49835	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:30 UTC	889	OUT	GET /live-webinars HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
2024-04-18 17:22:31 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:35 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:31 UTC	7985	IN	Data Raw: 31 30 62 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 10bb<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:31 UTC	6976	IN	Data Raw: 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 70 78 3b 68 65 69 67 68 74 3a 20 33 32 70 78 3b 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 6e 61 6d 65 3d 22 70 61 67 65 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 0d 0a 3c 2f 66 6f 72 6d 3e 20 3c 2f 6c 69 3e 0d 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 69 74 65 6d 22 3e 20 3c 61 20 68 72 65 66 3d 22 2f 6c 69 76 65 2d 77 65 62 69 6e 61 72 73 3f 70 61 67 65 3d 32 22 3e 4e 65 78 74 3c 2f 61 3e 20 3c 2f 6c 69 3e 0d 0a 3c 2f 75 6c 3e 0d 0a 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 31 70 78 3b 22 3e 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 3c 62 3e 31 20 2d 20 31 35 20 6f 66 20 34 32 32 Data Ascii: id #ddd;border-radius:0px;height: 32px;" type="text" class="form-control" name="page" value="1" /></form> </li><li class="page-item"> <a href="/live-webinars?page=2">Next</a> </li></ul><span style="margin-top: 21px;">    <b>1 - 15 of 422
2024-04-18 17:22:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 6e 2d 52 65 69 6e 73 74 65 69 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 33 39 31 27 3e 54 72 65 66 6f 72 26 6e 62 73 70 3b 4a 6f 6e 65 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 33 39 35 27 3e 4d 61 72 67 69 65 26 6e 62 73 70 3b 46 61 75 6c 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 33 39 37 27 3e 44 6f 75 67 26 6e 62 73 70 3b 4b 65 69 70 70 65 72 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 34 30 31 27 3e 4d 72 2e 20 56 69 6b 72 61 6d 26 6e 62 73 70 3b 4b 75 6c 73 68 72 65 73 68 74 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 34 30 34 27 3e 4d 2e 20 44 61 Data Ascii: 1ff8n-Reinstein</option><option value='34391'>Trefor user</option><option value='34395'>Margie Faulk</option><option value='34397'>Doug Keipper</option><option value='34401'>Mr. Vikram Kulshreshta</option><option value='34404'>M. Da
2024-04-18 17:22:31 UTC	6	IN	Data Raw: 31 32 31 37 0d 0a Data Ascii: 1217
2024-04-18 17:22:31 UTC	4631	IN	Data Raw: 61 6c 75 65 3d 27 35 31 35 30 36 27 3e 41 6d 79 20 50 2e 20 4b 65 6c 6c 79 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 31 35 30 37 27 3e 4c 6f 72 72 65 6e 65 20 43 61 73 74 65 6c 68 61 6e 6f 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 31 35 30 38 27 3e 4b 65 76 69 6e 20 52 2e 20 4d 69 6c 6c 65 72 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 32 30 38 37 27 3e 52 61 63 71 75 65 6c 20 4c 2e 20 48 61 72 72 69 73 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 33 39 34 38 27 3e 4d 69 63 68 61 65 6c 20 4d 65 6c 6e 69 6b 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 Data Ascii: alue='51506'>Amy P. Kelly </option><option value='51507'>Lorrene Castelhano </option><option value='51508'>Kevin R. Miller </option><option value='52087'>Racquel L. Harris </option><option value='53948'>Michael Melnik </option><op
2024-04-18 17:22:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 20 63 6f 6c 2d 6d 64 2d 33 22 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 20 63 6f 6c 2d 6d 64 2d 39 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 76 65 2d 77 65 62 69 6e 61 72 2d 6c 69 73 74 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 65 62 69 6e 61 72 73 2d 62 6f 78 32 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 6d 64 2d 33 20 6c 69 76 65 2d 77 65 62 69 6e 61 72 2d 69 6d 67 32 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 69 6d 61 67 65 73 2f 64 65 66 61 75 6c 74 57 65 62 69 6e Data Ascii: 1ff8</div><div class="col-sm-12 col-md-3"></div><div class="col-sm-12 col-md-9"><div class="live-webinar-list"><div class="webinars-box2"><div class="col-xs-12 col-sm-6 col-md-3 live-webinar-img2" style="background: url('/images/defaultWebin
2024-04-18 17:22:31 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-18 17:22:31 UTC	8184	IN	Data Raw: 68 6f 75 72 2d 76 69 72 74 75 61 6c 2d 73 65 6d 69 6e 61 72 2d 6f 6e 2d 62 75 73 69 6e 65 73 73 2d 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 26 23 35 38 3b 2d 67 72 61 6d 6d 61 72 2c 2d 62 65 74 74 65 72 2d 77 72 69 74 69 6e 67 2c 2d 65 6d 61 69 6c 2c 2d 61 6e 64 2d 6f 74 68 65 72 2d 63 6f 6d 6d 6f 6e 2d 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2d 69 6e 2d 74 68 65 2d 77 6f 72 6b 70 6c 61 63 65 2d 32 30 36 30 31 38 6c 69 76 65 27 3e 20 33 2d 48 6f 75 72 20 56 69 72 74 75 61 6c 20 53 65 6d 69 6e 61 72 20 6f 6e 20 42 75 73 69 6e 65 73 73 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 26 23 35 38 3b 20 47 72 61 6d 6d 61 72 2c 20 42 65 74 74 65 72 20 57 72 69 74 69 6e 67 2c 20 45 6d 61 69 6c 2c 20 41 6e 64 20 4f 74 68 65 72 20 43 6f 6d 6d 6f 6e 20 43 6f 6d 6d 75 6e 69 Data Ascii: hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live'> 3-Hour Virtual Seminar on Business Communication: Grammar, Better Writing, Email, And Other Common Communi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49853	35.190.80.1	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:30 UTC	565	OUT	OPTIONS /report/v4?s=HPhc1LTA6CqLmfvaRoqZ2Quwo0xw2e%2FBBbv76%2BhgnKmu%2BmLfbstL7rTtgtnyoyluBiHoixyzNbG2V3HgMT2IG1bf%2BkRX6sLXw7TywzR3Sr%2FHsWAqqsOnIvLUr0IWuo7b39F%2Fa447RmMVEQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://traininngllc.zendesk.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:30 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 18 Apr 2024 17:22:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49855	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:30 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:30 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:22:31 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:30 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8766565ec9631833-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LUHkh36GDp%2BPShsuY2zHkhMXUxR3y4RokIxfs14KbhSYIYU%2FV63gHnTb3aZYepwxei4%2BEDSjrCQC13OY%2BAa537RpkXoGnNJAxuMT9lGJNAT%2BpyIqBme6WSrm75dJoLTo5a1rdgSvPyKrtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=f8cd7662ff08a83217e97ab24445eef61d4b3404-1713460950; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8766565ec9631833-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49857	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:30 UTC	675	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/c/1713460949911 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=C2ExBQNT2ez7g9xfY4hfv3unyyJ7Tv08P+biNRk+QSt3iK2AQMe8Xbomjd88SoELf6yLt04iwd/4Zl6ttKoEtza/9w1O1olnFOy8jUI6TfcFJqN5dByWZnlAgXIm
2024-04-18 17:22:31 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:30 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=CwgAzMprAC6P7G/wfg0bidj0xciS4b9nvCgnpSpUoJVK8F9Wn9fsl6TAg/Wa9aFTdyphaPEPI/ADTyd//yfQi6lm0T8OlQDQKkDJhrIeEfyz66mLPoDF+4ITXATM; Expires=Thu, 25 Apr 2024 17:22:30 GMT; Path=/ Set-Cookie: AWSALBCORS=CwgAzMprAC6P7G/wfg0bidj0xciS4b9nvCgnpSpUoJVK8F9Wn9fsl6TAg/Wa9aFTdyphaPEPI/ADTyd//yfQi6lm0T8OlQDQKkDJhrIeEfyz66mLPoDF+4ITXATM; Expires=Thu, 25 Apr 2024 17:22:30 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:31 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 35 30 39 38 33 5c 6e 31 30 37 32 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713460950983\n1072\n1\n0\nn\n15000")
2024-04-18 17:22:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49858	35.190.80.1	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:30 UTC	498	OUT	POST /report/v4?s=HPhc1LTA6CqLmfvaRoqZ2Quwo0xw2e%2FBBbv76%2BhgnKmu%2BmLfbstL7rTtgtnyoyluBiHoixyzNbG2V3HgMT2IG1bf%2BkRX6sLXw7TywzR3Sr%2FHsWAqqsOnIvLUr0IWuo7b39F%2Fa447RmMVEQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 455 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:30 UTC	455	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 30 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 35 33 2e 31 31 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 61 69 6e 69 6e 6e 67 6c 6c 63 2e 7a 65 6e Data Ascii: [{"age":0,"body":{"elapsed_time":608,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.16.53.111","status_code":405,"type":"http.error"},"type":"network-error","url":"https://traininngllc.zen
2024-04-18 17:22:31 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 18 Apr 2024 17:22:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49859	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:31 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:22:31 UTC	587	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:22:31 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876656628fbe080b-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u56BqBrnAlwkmqsiT5xJpbWzGNh124LdxNOtZ4rQk0AWbOmauX267ov8%2F9B6swEtSGCGHSuWXssWuVNFCwrpJi%2FXLugbHUem32bIJi05s24LXXrnyL8hTKuiDO%2Fjd2VYUQYQ%2Bc9KHGjjgQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876656628fbe080b-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49861	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:31 UTC	675	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/p/1713460950481 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=CwgAzMprAC6P7G/wfg0bidj0xciS4b9nvCgnpSpUoJVK8F9Wn9fsl6TAg/Wa9aFTdyphaPEPI/ADTyd//yfQi6lm0T8OlQDQKkDJhrIeEfyz66mLPoDF+4ITXATM
2024-04-18 17:22:31 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:31 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=50buIZc1xny/S9XRdxoSJRZQozZWc99mbnvNmbnV3T6hA8Hs+UG/ndhQaIP9KO6kOF6Pu5iJG7tpIoO1SJE0cOP+Y3CfuhDXOX4Z+BAU2OyIeG+VMStkh2WeVKfp; Expires=Thu, 25 Apr 2024 17:22:31 GMT; Path=/ Set-Cookie: AWSALBCORS=50buIZc1xny/S9XRdxoSJRZQozZWc99mbnvNmbnV3T6hA8Hs+UG/ndhQaIP9KO6kOF6Pu5iJG7tpIoO1SJE0cOP+Y3CfuhDXOX4Z+BAU2OyIeG+VMStkh2WeVKfp; Expires=Thu, 25 Apr 2024 17:22:31 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:31 UTC	346	IN	Data Raw: 31 35 33 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 35 31 34 36 33 5c 6e 31 30 37 31 2e 30 35 30 31 33 31 39 32 36 31 32 31 34 5c 6e 32 5c 6e 30 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d Data Ascii: 153$Loader && ($Loader.payload = "1713460951463\n1071.0501319261214\n2\n0\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-
2024-04-18 17:22:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49862	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:31 UTC	1495	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713460950480/1713460950479%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22World%20Class%20Online%20Professional%20Training%20%7C%20Courses%20%7C%20Traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Faboutus%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=CwgAzMprAC6P7G/wfg0bidj0xciS4b9nvCgnpSpUoJVK8F9Wn9fsl6TAg/Wa9aFTdyphaPEPI/ADTyd//yfQi6lm0T8OlQDQKkDJhrIeEfyz66mLPoDF+4ITXATM
2024-04-18 17:22:31 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:31 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=BvGbgifBn3AP9NnBFZZ7FdMSTz95MFRItbf5BOcLQk249aF6SR1VfjoNT8iGUIoyy4BkcW0IkF/G/Xo7QINKZqrPRus1IygJ4spNu8FQ9aKP2n89cr9C+yrmWoMa; Expires=Thu, 25 Apr 2024 17:22:31 GMT; Path=/ Set-Cookie: AWSALBCORS=BvGbgifBn3AP9NnBFZZ7FdMSTz95MFRItbf5BOcLQk249aF6SR1VfjoNT8iGUIoyy4BkcW0IkF/G/Xo7QINKZqrPRus1IygJ4spNu8FQ9aKP2n89cr9C+yrmWoMa; Expires=Thu, 25 Apr 2024 17:22:31 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:31 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49863	104.18.70.113	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:31 UTC	563	OUT	GET /web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-18 17:22:31 UTC	1198	IN	HTTP/1.1 206 Partial Content Date: Thu, 18 Apr 2024 17:22:31 GMT Content-Type: audio/mpeg; charset=utf-8 Content-Length: 19698 Connection: close x-amz-id-2: LqweHRijvBdbgWotLxDeNcs9Lz6cG09nTN1pbS7TIlVP/kJbpnlLrkq/B74CU90UTxSTSp+E3xk= x-amz-request-id: KH5VE2Z70ZGQ75A2 x-amz-replication-status: COMPLETED Last-Modified: Wed, 29 Nov 2023 08:06:43 GMT ETag: "f11ce9e8f40a392830217253fe75d6de" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Thu, 28 Nov 2024 08:06:42 GMT x-amz-version-id: Kl.biZfM8rz6re2aS0glnDheA8R9Dmfl CF-Cache-Status: HIT Age: 3701459 Content-Range: bytes 0-19697/19698 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XTTmM3QaZ%2Fayja2hStaDbGJw9CIT8dOUysdHrHTlYFzahX3TDB3C8ZcYda%2FXEqg2VoJBNp0TX%2FVOfAhXd%2BgzY7JDHEYP1ueo9dvVYzE3mXJkhtFMv3YUIYKsEXVMrit3GEk2eT4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 87665663c89a138b-ATL
2024-04-18 17:22:31 UTC	171	IN	Data Raw: 49 44 33 03 00 00 00 00 33 69 50 52 49 56 00 00 11 df 00 00 58 4d 50 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 Data Ascii: ID33iPRIVXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 0a 20 20 20 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 Data Ascii: :56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: 34 30 37 32 30 36 38 31 31 39 32 42 30 41 30 46 35 30 34 45 41 45 41 41 38 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 33 2d 30 34 2d 30 34 54 31 31 3a 30 32 3a 30 31 2b 30 38 3a 30 30 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 41 75 64 69 74 69 6f 6e 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 0a 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 0a 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 Data Ascii: 40720681192B0A0F504EAEAA8" stEvt:when="2013-04-04T11:02:01+08:00" stEvt:softwareAgent="Adobe Audition CS6 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06801174072
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: cb e9 a0 9a d0 5a 2c 71 1f 56 9a d0 4e a5 f5 a3 f5 ff fe 58 4f ff ff ff ff e9 b4 04 b1 00 00 86 95 00 00 03 c9 52 11 22 46 6c 38 fa ff fb 90 40 04 00 02 11 36 d5 7f 6d a0 08 4e e6 ca af ee 34 01 47 e0 d9 53 8d ed 4b 71 56 32 2a f5 ba a9 b6 80 23 90 3c 32 fa e0 d6 9c 25 c6 c5 c2 a5 c2 02 b5 5a 22 36 07 0b 01 41 4e bc 30 48 09 61 80 a2 85 d4 6c 2e 14 92 fc 4d d6 df fe c5 bf ff ff a9 21 26 3f ff ff 36 ff fe a2 eb d4 20 88 91 92 ae fc 7d 40 11 e8 5c 32 e0 d2 30 e6 54 9e 69 36 60 12 90 20 9a 50 05 06 1c 0c 52 0a 30 98 94 fa 24 a3 16 81 8c 0a 0a 02 f4 27 a2 f1 70 79 24 f5 f0 db 24 51 6f 5e d5 d8 6e 4b ff ff e9 19 06 d1 09 ff db f6 25 bf ff a8 70 8d d5 a0 49 52 7e 72 05 2c 19 37 00 5d 82 9b 1d 48 d2 5f 0d ad a2 31 61 11 60 04 05 27 0c 90 95 b2 eb 2f f3 15 9d 9e Data Ascii: Z,qVNXOR"Fl8@6mN4GSKqV2*#<2%Z"6AN0Hal.M!&?6 }@\20Ti6` PR0$'py$$Qo^nK%pIR~r,7]H_1a`'/
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: a2 88 d6 ec 9c 02 64 ba 85 c4 d2 c0 ec c8 d6 ad 31 89 eb ed 25 36 b3 71 39 46 1c 8e b0 ff 53 fd bb 01 4c 44 1e 9f 77 f4 80 fa b0 01 77 5d ac 00 00 fc 38 6e c2 ef 67 05 cf 4e 42 6f c8 86 10 68 41 b0 22 94 94 17 ac c3 f0 23 1a 0c 66 e9 1e 99 08 e4 ff be 91 aa 48 75 7d c8 25 ed 08 42 24 7f 46 71 3a da d1 4b 0f 76 5f 0e b5 43 e4 30 ca 11 97 ad 2b 09 17 4a 45 98 33 5e be 9a d4 d4 de ff f5 c4 6b 39 7f e6 49 53 ff ff ba 80 2e a6 a4 c4 13 31 85 d4 95 ba 65 c1 1b 38 e0 9b 3c e4 38 f1 c0 b5 1c 34 a7 71 60 53 e4 9f 43 6d 34 49 34 23 39 18 a2 80 fc f9 73 a2 11 97 16 4c b4 ad 5d ea b1 eb 0c 57 70 ae f0 61 10 50 4e 44 65 fd 29 a5 2f 77 e2 6f f3 00 07 b6 db 40 00 0d ab c4 fc b8 cb 94 b4 4c a4 59 4d 38 56 07 68 f0 32 0c 13 36 4a 91 f6 ec 6b 17 99 8a 8d 0e a7 d6 ab d2 b6 Data Ascii: d1%6q9FSLDww]8ngNBohA"#fHu}%B$Fq:Kv_C0+JE3^k9IS.1e8<84q`SCm4I4#9sL]WpaPNDe)/wo@LYM8Vh26Jk
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: a9 d0 b3 9f 44 cd 54 4b 74 a1 63 3d 9d ad 9d aa 96 f7 69 c7 f8 6e 72 8e ae 57 de 2c 3d 4d 5d df 37 87 0a 22 eb 65 9d 38 0e dd 92 42 bb 5b 58 00 0a 4b b2 7a 8b 78 4d b1 61 64 ab 92 49 9a 86 3c 24 0e 86 1a 22 60 f2 2d a6 51 bb ef 43 6d 23 67 af 8a b2 25 d8 30 02 d4 3e 0a 60 e6 82 bc 2e 69 2a e2 ba cb e0 28 f4 92 c6 31 bc 63 f0 db f3 2e 88 d1 5a af 37 56 66 ec ab 96 71 ec c4 ba ae 37 b2 ff ff a0 dd 33 6f d9 04 3d f6 da 00 00 ac b8 73 08 1a 85 7d 86 a9 1f 13 b9 9b 37 16 ed ab 0d 06 53 3d 15 44 41 11 1a 40 f1 0a 0c c7 5f 84 c2 15 29 9a 2e e2 c8 a5 2c c5 b0 d9 20 66 f8 d1 3a 4e 65 2a 6d 1f d9 21 bc a2 69 77 3d a4 74 8e 9e cc fb 8a ae 96 ae ed bc de 3c e8 a8 db d6 00 57 eb ff fb 90 60 b8 80 03 21 26 d2 6b 1a 7a 5c 54 84 9a 6d 1b 0f 4b cb b0 91 43 ac 67 09 79 56 Data Ascii: DTKtc=inrW,=M]7"e8B[XKzxMadI<$"`-QCm#g%0>`.i(1c.Z7Vfq73o=s}7S=DA@_)., f:Nem!iw=t<W`!&kz\TmKCgyV
2024-04-18 17:22:31 UTC	1369	IN	Data Raw: 84 47 7f 40 b7 54 00 5b 5b 22 00 01 26 e6 76 61 f6 18 d3 c9 c9 0e 90 a5 0d b6 d1 a2 25 42 80 b7 c0 16 a0 d7 11 42 a6 10 4a a2 c0 40 90 40 0a da a4 55 11 20 15 20 eb 37 58 9b 4e 87 e5 31 b7 fe 3c e4 b9 2e 0e 10 c4 b6 ff 32 ec cd 8d 6f fe cf 85 92 24 96 ff cf ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb 90 60 dc 80 02 c9 1f 4f eb 1a c2 4e 53 84 7a 3d 63 2f 4b ca 40 7b 41 ac 65 e9 31 4a 90 69 7d ac 3d 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb b5 44 85 b5 b6 30 00 1f 12 c2 5f 3b 8b 32 fc a2 53 0d ee 1e 4c 82 b0 af 05 5d 53 97 23 f4 17 51 3d 63 96 78 b0 25 02 2f d8 42 95 81 a6 46 e6 21 f7 d5 b3 b4 e8 3e 89 92 cb e0 c9 7b c7 37 18 8b cd 52 4a e2 9f a8 84 93 2d d7 c0 8b ce cf 25 dc dd ba 12 02 ba d9 18 00 04 53 94 30 14 95 87 45 a3 Data Ascii: G@T[["&va%BBJ@@U 7XN1<.2o$`ONSz=c/K@{Ae1Ji}='D0_;2SL]S#Q=cx%/BF!>{7RJ-%S0E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49854	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:31 UTC	848	OUT	GET /images/js/jquery-1.12.4.min.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
2024-04-18 17:22:31 UTC	271	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:36 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"97163-1512554254000" Last-Modified: Wed, 06 Dec 2017 09:57:34 GMT Content-Type: text/javascript Content-Length: 97163 Connection: close
2024-04-18 17:22:31 UTC	7921	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 Data Ascii: /! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a docume
2024-04-18 17:22:31 UTC	263	IN	Data Raw: 69 66 28 63 3d 3d 3d 62 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 61 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b Data Ascii: if(c===b)return-1;return a?1:-1}function la(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function ma(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function na(a){
2024-04-18 17:22:31 UTC	8192	IN	Data Raw: 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 68 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 5d 3d 63 5b 65 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 61 7d 63 3d 66 61 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 66 3d 66 61 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 Data Ascii: a(function(b){return b=+b,ha(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function oa(a){return a&&"undefined"!=typeof a.getElementsByTagName&&a}c=fa.support={},f=fa.isXML=function(a){var b=a&&(a.ownerDocu
2024-04-18 17:22:31 UTC	8176	IN	Data Raw: 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 66 61 28 61 2c 62 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 62 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 65 28 62 29 29 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 7d 7d 29 2c 6c 61 6e 67 3a 68 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 56 2e 74 65 73 74 28 61 7c 7c 22 22 29 7c 7c 66 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 6c 61 6e 67 3a 20 22 2b 61 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 2e 74 6f 4c 6f 77 Data Ascii: ction(b){return fa(a,b).length>0}}),contains:ha(function(a){return a=a.replace(ba,ca),function(b){return(b.textContent\|\|b.innerText\|\|e(b)).indexOf(a)>-1}}),lang:ha(function(a){return V.test(a\|\|"")\|\|fa.error("unsupported lang: "+a),a=a.replace(ba,ca).toLow
2024-04-18 17:22:31 UTC	8192	IN	Data Raw: 61 2c 62 2c 63 29 7b 76 61 72 20 65 2c 66 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 63 3d 63 7c 7c 41 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 29 7b 69 66 28 65 3d 22 3c 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 26 26 22 3e 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 61 2e 6c 65 6e 67 74 68 3e 3d 33 3f 5b 6e 75 6c 6c 2c 61 2c 6e 75 6c 6c 5d 3a 42 2e 65 78 65 63 28 61 29 2c 21 65 7c 7c 21 65 5b 31 5d 26 26 62 29 72 65 74 75 72 6e 21 62 7c 7c 62 2e 6a 71 75 65 72 79 3f 28 62 7c 7c 63 29 2e 66 69 6e 64 28 61 29 3a 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 62 29 2e 66 69 6e 64 28 61 29 3b 69 66 28 65 5b 31 5d 29 7b 69 66 28 62 3d 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f Data Ascii: a,b,c){var e,f;if(!a)return this;if(c=c\|\|A,"string"==typeof a){if(e="<"===a.charAt(0)&&">"===a.charAt(a.length-1)&&a.length>=3?[null,a,null]:B.exec(a),!e\|\|!e[1]&&b)return!b\|\|b.jquery?(b\|\|c).find(a):this.constructor(b).find(a);if(e[1]){if(b=b instanceof n?
2024-04-18 17:22:31 UTC	8176	IN	Data Raw: 6e 64 6f 3b 69 66 28 67 5b 68 5d 29 7b 69 66 28 62 26 26 28 64 3d 63 3f 67 5b 68 5d 3a 67 5b 68 5d 2e 64 61 74 61 29 29 7b 6e 2e 69 73 41 72 72 61 79 28 62 29 3f 62 3d 62 2e 63 6f 6e 63 61 74 28 6e 2e 6d 61 70 28 62 2c 6e 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 62 20 69 6e 20 64 3f 62 3d 5b 62 5d 3a 28 62 3d 6e 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 2c 62 3d 62 20 69 6e 20 64 3f 5b 62 5d 3a 62 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 65 6c 65 74 65 20 64 5b 62 5b 65 5d 5d 3b 69 66 28 63 3f 21 51 28 64 29 3a 21 6e 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 72 65 74 75 72 6e 7d 28 63 7c 7c 28 64 65 6c 65 74 65 20 67 5b 68 5d 2e 64 61 74 61 2c 51 28 67 5b 68 5d 29 29 29 26 26 28 66 3f Data Ascii: ndo;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){n.isArray(b)?b=b.concat(n.map(b,n.camelCase)):b in d?b=[b]:(b=n.camelCase(b),b=b in d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!Q(d):!n.isEmptyObject(d))return}(c\|\|(delete g[h].data,Q(g[h])))&&(f?
2024-04-18 17:22:31 UTC	8192	IN	Data Raw: 6e 74 2e 61 64 64 28 74 68 69 73 2c 62 2c 65 2c 64 2c 63 29 7d 29 7d 6e 2e 65 76 65 6e 74 3d 7b 67 6c 6f 62 61 6c 3a 7b 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6f 2c 70 2c 71 2c 72 3d 6e 2e 5f 64 61 74 61 28 61 29 3b 69 66 28 72 29 7b 63 2e 68 61 6e 64 6c 65 72 26 26 28 69 3d 63 2c 63 3d 69 2e 68 61 6e 64 6c 65 72 2c 65 3d 69 2e 73 65 6c 65 63 74 6f 72 29 2c 63 2e 67 75 69 64 7c 7c 28 63 2e 67 75 69 64 3d 6e 2e 67 75 69 64 2b 2b 29 2c 28 67 3d 72 2e 65 76 65 6e 74 73 29 7c 7c 28 67 3d 72 2e 65 76 65 6e 74 73 3d 7b 7d 29 2c 28 6b 3d 72 2e 68 61 6e 64 6c 65 29 7c 7c 28 6b 3d 72 2e 68 61 6e 64 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 75 Data Ascii: nt.add(this,b,e,d,c)})}n.event={global:{},add:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n._data(a);if(r){c.handler&&(i=c,c=i.handler,e=i.selector),c.guid\|\|(c.guid=n.guid++),(g=r.events)\|\|(g=r.events={}),(k=r.handle)\|\|(k=r.handle=function(a){return"u
2024-04-18 17:22:31 UTC	8176	IN	Data Raw: 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 4e 61 6d 65 28 74 68 69 73 2c 22 66 6f 72 6d 22 29 3f 21 31 3a 76 6f 69 64 20 6e 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 22 2e 5f 73 75 62 6d 69 74 22 29 7d 7d 29 2c 6c 2e 63 68 61 6e 67 65 7c 7c 28 6e 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 63 68 61 6e 67 65 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 61 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 3f 28 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 74 68 69 73 2e 74 79 70 65 26 26 22 72 61 64 69 6f 22 21 3d 3d 74 68 69 73 2e 74 79 70 65 7c 7c 28 6e 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 2e 5f 63 68 Data Ascii: down:function(){return n.nodeName(this,"form")?!1:void n.event.remove(this,"._submit")}}),l.change\|\|(n.event.special.change={setup:function(){return ka.test(this.nodeName)?("checkbox"!==this.type&&"radio"!==this.type\|\|(n.event.add(this,"propertychange._ch
2024-04-18 17:22:31 UTC	8192	IN	Data Raw: 67 2c 68 2c 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 66 28 6a 2e 73 74 79 6c 65 29 7b 6a 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 66 6c 6f 61 74 3a 6c 65 66 74 3b 6f 70 61 63 69 74 79 3a 2e 35 22 2c 6c 2e 6f 70 61 63 69 74 79 3d 22 30 2e 35 22 3d 3d 3d 6a 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 2c 6c 2e 63 73 73 46 6c 6f 61 74 3d 21 21 6a 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 6a 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6c 69 70 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 2c 6a 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6c 69 70 3d 22 22 2c 6c 2e 63 6c 65 61 72 43 Data Ascii: g,h,i=d.createElement("div"),j=d.createElement("div");if(j.style){j.style.cssText="float:left;opacity:.5",l.opacity="0.5"===j.style.opacity,l.cssFloat=!!j.style.cssFloat,j.style.backgroundClip="content-box",j.cloneNode(!0).style.backgroundClip="",l.clearC
2024-04-18 17:22:31 UTC	8176	IN	Data Raw: 68 69 73 2e 6e 6f 77 3d 28 74 68 69 73 2e 65 6e 64 2d 74 68 69 73 2e 73 74 61 72 74 29 2a 62 2b 74 68 69 73 2e 73 74 61 72 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 2c 74 68 69 73 2e 6e 6f 77 2c 74 68 69 73 29 2c 63 26 26 63 2e 73 65 74 3f 63 2e 73 65 74 28 74 68 69 73 29 3a 67 62 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 73 65 74 28 74 68 69 73 29 2c 74 68 69 73 7d 7d 2c 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 67 62 2e 70 72 6f 74 6f 74 79 70 65 2c 67 62 2e 70 72 6f 70 48 6f 6f 6b 73 3d 7b 5f 64 65 66 61 75 6c 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 Data Ascii: his.now=(this.end-this.start)*b+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),c&&c.set?c.set(this):gb.propHooks._default.set(this),this}},gb.prototype.init.prototype=gb.prototype,gb.propHooks={_default:{get:function(a){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49866	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:31 UTC	675	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/p/1713460951025 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=BvGbgifBn3AP9NnBFZZ7FdMSTz95MFRItbf5BOcLQk249aF6SR1VfjoNT8iGUIoyy4BkcW0IkF/G/Xo7QINKZqrPRus1IygJ4spNu8FQ9aKP2n89cr9C+yrmWoMa
2024-04-18 17:22:32 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:32 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=SBAdojpagsTWs4Tku3v7ejzaaTI8z+xZCkkSpVzd86ZlnJmBcOQPPiid3iNzPiRVY5dQJPqdH0TTw8OAVAz36w9AfK+ZIi0J3hBmrt/nLv9pVjZ6ai7sBIcjOxln; Expires=Thu, 25 Apr 2024 17:22:32 GMT; Path=/ Set-Cookie: AWSALBCORS=SBAdojpagsTWs4Tku3v7ejzaaTI8z+xZCkkSpVzd86ZlnJmBcOQPPiid3iNzPiRVY5dQJPqdH0TTw8OAVAz36w9AfK+ZIi0J3hBmrt/nLv9pVjZ6ai7sBIcjOxln; Expires=Thu, 25 Apr 2024 17:22:32 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:32 UTC	3809	IN	Data Raw: 65 64 61 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 35 32 30 31 31 5c 6e 31 30 37 30 2e 30 32 36 38 37 31 33 35 39 33 34 35 33 5c 6e 33 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 67 61 74 65 73 5c 22 3a 7b 5c 22 5f 24 69 6e 74 5c 22 3a 31 7d 2c 5c 22 73 79 73 74 65 6d 5c 22 3a 7b 5c 22 75 72 6c 73 5c 22 3a 7b 5c 22 73 6f 63 69 61 6c 5f 73 69 67 6e 69 6e 5f 74 65 6d 70 6c 61 74 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 6f 70 69 6d 2e 63 6f 6d 2f 61 75 74 68 2f 24 4e 41 4d 45 2f 24 4b 45 59 2d 24 4d 49 44 3f 73 3d 74 72 61 69 6e 69 6e 6e 67 6c 6c 63 5c Data Ascii: eda$Loader && ($Loader.payload = "1713460952011\n1070.0268713593453\n3\n1\nd\n{\"path\":\"livechat\",\"update\":{\"gates\":{\"_$int\":1},\"system\":{\"urls\":{\"social_signin_template$string\":\"https://www.zopim.com/auth/$NAME/$KEY-$MID?s=traininngllc\
2024-04-18 17:22:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49867	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	911	OUT	GET /images/products/detail/206588.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:32 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:37 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"81012-1712567809000" Last-Modified: Mon, 08 Apr 2024 09:16:49 GMT Content-Type: image/png Content-Length: 81012 Connection: close
2024-04-18 17:22:32 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 5e 08 03 00 00 00 6e 09 91 6e 00 00 04 75 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 27 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 78 Data Ascii: PNGIHDRX^nnuiTXtXML:com.adobe.xmp<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x='adobe:ns:meta/'><rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Description rdf:about='' x
2024-04-18 17:22:32 UTC	257	IN	Data Raw: 11 b4 e0 f6 37 71 56 1a fe 4c c9 94 87 d2 a1 8b d6 42 d8 a1 36 e2 a0 4e 03 91 75 14 22 cb b3 97 9c 8c a4 42 29 5c 6b 37 d7 8f dd 7a f5 ea f1 e3 8f d7 7d 10 6c cc 94 d8 6c a8 6a f9 70 a9 a0 0b a4 07 d5 49 a7 c5 3c dc 8a c6 59 9b 12 00 4c 00 cb a1 c5 58 3b 48 5d 99 94 b8 a8 9e e7 86 e9 2b 9c 5b 4c 9e 7d e5 be a3 e4 90 e7 fc 39 1f 28 b7 cb e0 20 32 96 db 87 2c 90 e3 8c 51 21 fc 19 2f df 0e ff 31 7c 7f 72 f6 ed f1 14 d8 82 b5 cd 5a 7c 50 0c 3e 5f 50 ee 04 52 32 bc 3e c3 90 7a b0 2c 02 63 18 67 29 8a e3 17 f4 d0 05 ab 37 21 b0 b6 5d ed ea 08 d9 fc 6f ec 74 0b b0 10 86 76 b9 7b ee ac d1 a7 94 e0 0e 57 e3 ba d7 3f ea 75 d4 b8 8a 45 f3 23 68 50 d0 00 cb d7 47 91 1e 72 32 96 04 12 72 ff e6 e3 63 59 0e 59 d5 96 1d 3f c4 00 89 3d 0a 50 7c e9 79 99 c1 73 2f 97 a8 0e Data Ascii: 7qVLB6Nu"B)\k7z}lljpI<YLX;H]+[L}9( 2,Q!/1\|rZ\|P>_PR2>z,cg)7!]otv{W?uE#hPGr2rcYY?=P\|ys/
2024-04-18 17:22:32 UTC	8192	IN	Data Raw: 08 ac 70 38 4c 1b ad ac 85 97 c0 25 64 ad 83 04 63 05 f5 13 18 6b 43 06 9e 33 cd 34 5c 39 64 11 ce a9 0a ca 7e 90 67 71 e6 b1 bb 02 5c 61 14 1b ac 51 c7 58 c7 ef 86 c3 bf b8 76 e0 bb eb 5a 2b 01 2c f5 05 d1 87 25 ba 6a f3 69 08 1a 95 7b 60 a7 18 ec bb 3d 0e 21 10 ae 48 cf a4 8b 00 6b 1b 98 0a e9 ca e3 69 f1 0b 97 25 2e 07 2c 40 2e 7c cf ce 1e 7e 27 7d 58 1d 94 c8 0a a1 83 6d 4c eb 28 1c 18 9c 0b 41 d0 3a d4 9a 08 e9 87 fd 5a f5 e6 e2 b1 59 d7 83 41 38 7d 18 21 2b 3c 98 86 28 8b 46 13 d8 94 c6 8f 2d 3a 91 c6 38 d2 72 d6 51 d6 1c e8 18 87 95 d9 35 cc 1c 24 72 c8 9e b2 e8 70 86 6c 53 6c ee 50 66 50 c2 92 6c 3b eb a2 04 2c 73 28 03 25 64 b0 14 0e a0 e8 0f fa 97 4f 87 3f 9f 9c bd 7e 31 40 c2 02 1d c6 03 cb 9f 69 70 88 25 10 3f ad c9 cc 09 63 0a 2d 1c 1d 15 4d Data Ascii: p8L%dckC34\9d~gq\aQXvZ+,%ji{`=!Hki%.,@.\|~'}XmL(A:ZYA8}!+<(F-:8rQ5$rplSlPfPl;,s(%dO?~1@ip%?c-M
2024-04-18 17:22:32 UTC	8176	IN	Data Raw: 62 fd ab d0 ad ac ce de 7b 26 8b 6a 0e db 7e 67 26 76 eb 11 fe 96 0b 9e 1e e0 c4 be 8b 0e e8 9a c3 3a b5 81 c9 b6 ca e0 df 08 28 63 1f d7 db 5f de a2 7a 08 2d 7f fb d9 6d 34 77 10 0f 14 3c 4f 7c bd ec a0 f7 f9 f4 1e 3d aa 5e 09 50 f0 41 cb f7 e6 08 a9 05 3c 15 2e e6 f7 18 47 3b c6 c2 6a dd 53 50 6d 66 95 89 67 b7 0e 0b 3c fb 25 bb c5 07 92 74 17 86 8b 19 be c3 69 ef a2 a7 1d 43 63 17 28 58 a3 1f 7f 81 7e 8c 44 f5 55 a0 4e 3f fc eb 9f 77 2e 03 55 ff bd 76 6b c1 4d 27 37 ff e7 5f 16 0a df 8e 65 21 6f 77 bb b3 4f 9f 3e fd 7c 08 c1 6a ed 84 a7 b5 53 c8 82 78 f8 13 01 b9 76 3c 04 b4 1c 60 21 5a 1e f7 ea 9c de be 5e 2c b9 a0 f4 ab 64 9e 6d 35 36 61 7a e8 48 95 06 0b 82 21 f9 84 06 66 52 80 54 3a 12 89 a4 23 3d 48 d4 b9 f3 ed 77 e9 ca f0 fb 3b e9 30 3c c0 d6 58 Data Ascii: b{&j~g&v:(c_z-m4w<O\|=^PA<.G;jSPmfg<%tiCc(X~DUN?w.UvkM'7_e!owO>\|jSxv<`!Z^,dm56azH!fRT:#=Hw;0<X
2024-04-18 17:22:32 UTC	8192	IN	Data Raw: 5d 4e d7 d7 d0 6e 27 92 5c 01 83 d5 e9 f3 75 11 58 a3 f5 5d b4 70 a7 56 8a 48 52 de c1 91 cc e2 d6 15 a1 f4 47 ce 50 af 24 e7 63 e1 51 1e b7 3f ab 66 ee 3b 3a 9c 6b 76 3a 0c 83 55 77 51 7a 42 2d 2e 23 17 a8 32 58 e4 08 1b cc 55 39 62 a0 fe aa e2 ca 83 1b bd a6 a7 cf 00 59 86 3b 4c 25 96 93 3e 1f 7b 41 55 cd ea 4c 66 97 16 79 04 93 92 58 73 19 0c b0 88 2b d9 de 4e 9e 90 a6 a3 0e 98 c0 69 89 65 c6 83 e3 8b b1 00 c6 ec e7 b4 23 54 c9 ee c2 f6 de af 7f f3 e7 55 cb f2 fb 2d cb 7e 8e 60 3d 2f 33 58 ca 6c 49 b0 c4 05 c4 a0 d1 82 50 eb 81 a3 c2 f3 f1 03 0d 56 85 c5 d2 df 4f fb c4 e1 61 0c ab 86 fa ec 0c 66 da 23 84 96 df 65 b9 03 76 69 73 01 03 af 48 6e 2d 16 28 9f 42 ec 51 83 62 28 c4 e4 bd 59 58 64 ac 42 c1 5c e1 66 5b ab b7 ea d2 07 d7 db e2 c5 b5 70 46 ac a7 Data Ascii: ]Nn'\uX]pVHRGP$cQ?f;:kv:UwQzB-.#2XU9bY;L%>{AULfyXs+Nie#TU-~`=/3XlIPVOaf#evisHn-(BQb(YXdB\f[pF
2024-04-18 17:22:32 UTC	8176	IN	Data Raw: c3 f5 20 8a 0f e2 74 4b cc bd 20 fb 4c f9 6b e5 e8 09 b3 80 75 20 89 41 56 e2 dd c4 c5 2f 1e 04 d1 68 11 5e 10 66 d9 23 c7 12 89 5f b0 3f 73 e8 62 6b c4 3e 35 35 69 40 2a a5 87 ef a2 b6 d5 82 e1 5e 1b c3 0a 7e c1 9d 40 5d 5a b7 61 9d 06 56 b5 dc 2a 3d 98 33 48 41 00 06 57 a0 d5 96 4b aa 8c 60 b1 28 8b b8 62 61 46 e9 3c 94 07 7f b3 b0 bc 70 fa f4 d3 af 6f b4 ff 8f b2 b3 8b 89 f2 cc e2 78 61 45 12 dc 22 a2 d0 81 b4 1a 29 a3 44 11 3a f1 83 a0 10 f0 63 6c e3 44 27 ae 01 36 d9 42 05 b1 41 3e 55 50 99 41 81 90 66 e3 a4 46 c3 c5 66 83 e9 0c 21 5c 0c e8 45 37 16 c8 90 72 b1 88 98 18 0a 01 83 26 b2 17 70 b1 e5 0a 83 9b 48 43 08 84 3d 1f cf f3 bc cf 3b 33 b8 dd 17 06 92 26 12 0a 3f fe e7 3c e7 39 e7 7f 2e ca 13 fb b9 f3 17 21 ba a4 c4 92 6b a7 04 0b bd 23 4f 73 f2 Data Ascii: tK Lku AV/h^f#_?sbk>55i@^~@]ZaV=3HAWK`(baF<poxaE")D:clD'6BA>UPAfFf!\E7r&pHC=;3&?<9.!k#Os
2024-04-18 17:22:32 UTC	8192	IN	Data Raw: 08 f4 08 d2 5d e1 4e 31 88 94 04 4b 51 2c 23 58 fb 4a 8a ad c0 c2 cd 01 d4 61 6f 09 d6 41 13 58 7b f5 60 a1 62 9d 22 c5 52 c0 aa e7 a1 90 df 14 e6 39 d5 f1 45 56 60 e1 3f c2 61 1c db c0 d8 ea c1 d6 1c b7 50 ac 66 4b b0 28 16 0a eb d2 10 0a e7 44 24 bc ff 7c 66 4a b9 d2 e1 7a e5 37 41 25 cc 78 0d ac 9b 11 35 16 76 74 c8 60 68 a1 58 3a b0 9a b9 61 aa 2e c9 84 d6 42 ca d9 61 5e 21 cc f6 f3 f9 70 12 69 8d 9c cc 9d 47 db 15 9c 2a 58 39 9c 2c c0 2a 90 93 13 84 db c2 e8 22 82 35 1f 72 9d b2 03 d6 5b d6 8a 55 a0 53 2c 2d 14 4a c5 2a da 52 b1 4a 54 b0 4a 04 58 30 c1 28 0b 60 95 ef 37 2a 56 65 40 24 ef 37 ba e0 f0 9c 42 b1 70 25 21 8c fb 61 19 ee d0 00 cd 89 85 29 c4 36 14 4b 09 85 ab 2a 58 2b 8f e7 1f af dd 35 de 15 a6 af 58 3a b0 3a 74 60 55 6c 0e 16 ec 90 be 3e Data Ascii: ]N1KQ,#XJaoAX{`b"R9EV`?aPfK(D$\|fJz7A%x5vt`hX:a.Ba^!piGX9,"5r[US,-JRJTJX0(`7Ve@$7Bp%!a)6K*X+5X::t`Ul>
2024-04-18 17:22:32 UTC	8176	IN	Data Raw: c1 d7 97 98 2b e8 ec 6c 85 af 38 2a 56 14 8b 4f 5c 4b 78 0a 52 85 f5 f5 26 3e da c3 97 c2 93 27 cd 3c 10 04 ab 83 a6 36 b4 61 78 94 3c 77 79 29 94 3e 56 6f 8b 09 92 62 20 0b 8d 61 50 8f 6f 00 b0 a8 88 5e 83 55 57 d7 3d 84 bb a1 bb a1 91 63 62 6d 73 63 e3 ad fa 3d bf 5c 64 b0 e8 62 48 9d 3a 20 5a 18 6e 40 b0 92 1a 2c 1e 69 a4 8e c8 eb e0 77 2e 37 15 82 fe 8a c1 29 ec d7 29 14 56 96 a6 53 a9 8c 72 ae 0a 69 de d4 97 2e 3e 46 ae 36 de 3e da cd 66 39 fc 80 bf 96 6c 15 58 3a f2 a0 73 3b ec c5 9b f6 0a 0f 32 85 ab 25 86 aa 94 97 44 b1 86 e5 53 b2 6c 0f fe 76 c6 6d ed d2 3a 85 82 c5 55 0c 11 2f e2 c7 2a 2e 47 24 c7 45 dd a8 38 30 5c 26 bb bc 72 eb 4f bf c9 c2 a4 c8 05 5c 9e 03 b7 e2 1a b1 8e 82 ee 84 2e 58 fc bd a4 0f 52 dd 09 3f fb cf cd 7b f0 78 7a 1b 2e 85 c9 Data Ascii: +l8VO\KxR&>'<6ax<wy)>Vob aPo^UW=cbmsc=\dbH: Zn@,iw.7))VSri.>F6>f9lX:s;2%DSlvm:U/.G$E80\&rO\.XR?{xz.
2024-04-18 17:22:32 UTC	8192	IN	Data Raw: 73 9d 63 6d 9f ad ab 1b 39 9e 41 55 64 60 62 2b 96 11 57 dd 65 da 35 2c 2d 7c cf c8 fb 31 61 c9 50 c8 5b 60 7d 08 85 00 56 15 33 16 45 c1 2b 18 a5 59 a5 71 f8 32 76 f7 38 d7 98 f8 ea e5 e6 e6 ad 3f a8 6b 73 37 1e 40 92 d5 7a 2c 1e 8f af ce 2f 49 93 b0 d9 e9 95 40 80 d6 5d 24 b0 98 30 f0 d2 fa a9 12 61 bc b6 0e 61 9b 43 af 83 0f f8 f3 17 62 0c c3 31 2b 49 1c 46 f3 dc 4b 9f 63 96 2f 1b 58 1a 57 b6 9d 09 c5 c3 c4 ea 7c 84 33 ad 41 6c e6 00 58 e7 64 11 eb a8 dc f7 d2 c0 22 ba 12 ef c6 06 0e 85 00 d6 27 3b 3f ff c0 71 50 44 c2 3b f2 4c 28 80 a5 0c 4e c4 81 ca d5 69 01 0b 3d 68 a8 70 90 64 71 d1 45 7b 37 27 9f 75 92 4f cb ee b3 d6 c4 2a d1 84 95 9b bc db a5 77 07 b0 78 dc 4f 21 ab 40 4b 65 49 ad db 6e 36 5c 15 3f 32 b3 b8 b1 21 80 b5 fd 52 03 6b ed 2c 46 7a b6 Data Ascii: scm9AUd`b+We5,-\|1aP[`}V3E+Yq2v8?ks7@z,/I@]$0aaCb1+IFKc/XW\|3AlXd"';?qPD;L(Ni=hpdqE{7'uO*wxO!@KeIn6\?2!Rk,Fz
2024-04-18 17:22:32 UTC	8176	IN	Data Raw: 7a 6a 94 ea ec 57 71 c9 50 ab 66 c9 3f 40 97 a6 dd e6 d1 64 48 0b 6f 6d 3d 5b 5b 5b 79 be e0 55 96 0f dd 5e e3 6a 43 25 c5 f2 cd cd 2a b8 20 a6 f7 df 60 f3 fb 71 da 54 78 41 84 55 73 d6 47 ca a7 59 19 c0 ca f0 84 0f 77 76 d0 17 0e 18 5b a7 10 ab 37 7b 62 40 52 28 71 75 41 68 c6 f0 3d 67 56 e8 b3 cb f8 ca 4a 56 8c 2c 02 16 b8 42 53 9f c8 d0 55 e3 35 7a 97 a2 b3 59 ef 0d f7 11 5b f5 c2 8b 6f 5a af 27 f2 af 19 d6 42 0b 7f 7d 9c 4c fe e6 87 e4 fc 83 04 9d 09 01 64 95 87 02 a3 b2 f2 70 f3 8b 99 10 d6 47 2b 04 ae b8 93 63 12 16 a9 37 7e ca 33 78 c6 e2 f3 a1 4c cd 22 f2 85 86 b4 0c 03 0b 71 d5 03 66 43 58 11 b2 ac 65 52 9b e9 0c 8f 48 53 c4 d8 98 b4 72 72 52 e9 cd f5 bb 2f d2 89 34 e3 49 bc c4 e3 7b a9 8a fc 4e 74 83 a4 07 c0 d0 ea 96 f0 fa e4 9c 34 31 f2 00 1f Data Ascii: zjWqPf?@dHom=[[[yU^jC%* `qTxAUsGYwv[7{b@R(quAh=gVJV,BSU5zY[oZ'B}LdpG+c7~3xL"qfCXeRHSrrR/4I{Nt41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49868	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	910	OUT	GET /images/select-img.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/images/css/style.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:32 UTC	263	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:37 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"1067-1594305815000" Last-Modified: Thu, 09 Jul 2020 14:43:35 GMT Content-Type: image/png Content-Length: 1067 Connection: close
2024-04-18 17:22:32 UTC	1067	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 06 08 06 00 00 00 28 a0 05 9e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR(tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49869	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	932	OUT	GET /images/speakers/33911/Christopher%20Faulkner_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
2024-04-18 17:22:32 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:37 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"18401-1516701258000" Last-Modified: Tue, 23 Jan 2018 09:54:18 GMT Content-Type: image/jpeg Content-Length: 18401 Connection: close
2024-04-18 17:22:32 UTC	7926	IN	Data Raw: ff d8 ff e1 08 7b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 31 3a 31 36 20 31 32 3a 32 30 3a 30 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: {ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2018:01:16 12:20:00Zp
2024-04-18 17:22:32 UTC	258	IN	Data Raw: 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: iption> </rdf:RDF> </x:xmpmeta>
2024-04-18 17:22:32 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 17:22:32 UTC	2025	IN	Data Raw: bf cd 0c c6 e3 c8 d7 cd 25 4a a0 55 43 4e a8 2e 17 51 9a ec b6 bb 5d 9e c6 2b 08 07 e9 c7 51 52 32 4d 6a 7f 9f 58 f7 b8 ee 13 6f 17 73 5f 5d 45 a5 e4 35 d3 c6 83 cb f9 74 7b 7a 7f 05 ba 30 bd 61 b7 f6 36 e4 a9 39 2a 8d 97 83 a8 c1 e1 b2 a5 a4 7a aa 8c 05 1d 7d 54 f8 18 2b 4b 82 4d 6e 1a 96 6f b5 d7 a9 84 90 c3 19 3e ad 5e d8 91 53 c6 8c 05 14 cf f8 3a f4 59 06 bd 0a 30 61 12 a1 b5 d4 8d 09 3d 19 28 2e 18 99 44 6d 22 b2 8b 03 a9 5b fd e6 df d3 da 0c 89 69 f8 7a 56 c4 84 c3 79 75 cb 1b 8e 5a 8a 09 a9 e7 51 25 56 16 b1 a0 a9 52 2d 24 94 70 ca 92 47 23 81 72 3c 91 46 39 fa 1b 1f 6e cd 0e 99 e3 7a 7e 99 fd 9f e6 e9 32 1c 56 bd dd 0e 1d 35 bf ab 36 65 46 1f 25 51 54 5a 97 31 5c d5 19 5a 33 2e bd 38 7c 95 48 48 c4 71 9b 32 bd 32 69 97 51 17 3a 3f c6 e0 2f ce 9c Data Ascii: %JUCN.Q]+QR2MjXos_]E5t{z0a69*z}T+KMno>^S:Y0a=(.Dm"[izVyuZQ%VR-$pG#r<F9nz~2V56eF%QTZ1\Z3.8\|HHq22iQ:?/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49870	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	924	OUT	GET /images/speakers/62638/Manish%20Gupta_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
2024-04-18 17:22:32 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:37 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"22928-1706277390000" Last-Modified: Fri, 26 Jan 2024 13:56:30 GMT Content-Type: image/jpeg Content-Length: 22928 Connection: close
2024-04-18 17:22:32 UTC	7926	IN	Data Raw: ff d8 ff e1 09 f2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 31 3a 32 36 20 31 39 3a 32 35 3a 32 36 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:01:26 19:25:26Zp
2024-04-18 17:22:32 UTC	258	IN	Data Raw: 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 44 31 43 43 30 38 45 35 32 42 43 45 45 31 31 38 32 35 44 39 37 38 31 35 46 41 35 36 32 35 42 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 44 31 43 43 30 38 45 35 32 42 43 45 45 31 31 38 32 35 44 39 37 38 31 35 46 41 35 36 32 35 42 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f Data Ascii: ocumentID="xmp.did:FD1CC08E52BCEE11825D97815FA5625B" xmpMM:OriginalDocumentID="xmp.did:FD1CC08E52BCEE11825D97815FA5625B" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" dc:format="image/jpeg"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:actio
2024-04-18 17:22:32 UTC	8192	IN	Data Raw: 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 44 31 43 43 30 38 45 35 32 42 43 45 45 31 31 38 32 35 44 39 37 38 31 35 46 41 35 36 32 35 42 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 31 2d 32 36 54 31 39 3a 32 35 3a 32 36 2b 30 35 3a 33 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 45 31 43 43 30 38 45 35 32 42 43 45 45 31 31 38 32 35 44 39 37 38 31 35 46 41 35 36 32 35 42 22 20 73 74 45 76 Data Ascii: created" stEvt:instanceID="xmp.iid:FD1CC08E52BCEE11825D97815FA5625B" stEvt:when="2024-01-26T19:25:26+05:30" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:FE1CC08E52BCEE11825D97815FA5625B" stEv
2024-04-18 17:22:32 UTC	6552	IN	Data Raw: 78 87 d0 75 ef 3b ff 00 be ff 00 91 7b f7 85 f3 eb de 21 f4 1d 7b ce df ef bf e4 5e fd e1 0f 5e bd e2 1f 41 d0 61 93 ac a4 da 5b e7 3f d8 15 46 9a 30 bb 07 17 89 92 49 d8 8f 22 e3 32 99 fc 94 50 b0 5f 58 0d 35 72 a8 b7 27 5f f8 7b c5 ef 7c 1c 9e 6a e5 fb 64 15 ff 00 15 a9 ff 00 6c ed fe 6e b2 23 d9 e5 ff 00 90 fe f5 70 7e 23 74 14 0f f9 b6 33 d5 1f 77 6f f3 e8 dd 7d 23 db 53 f5 fe 53 a0 f6 be e6 c0 41 5d 1e 32 6d cb b4 77 04 12 56 53 d5 7a bc 92 d4 43 90 99 5d d9 59 95 4c 65 54 a9 43 cb 7b 41 6d b7 da 4b 63 ae d6 e3 4c c1 78 32 9a 70 e8 6b fb c6 e6 d2 ea 35 b8 b6 2f 6c 5a 95 06 94 fc ba 16 f0 5f cd 3f 19 bc b6 7c dd 95 57 d7 cd 45 15 19 96 a7 2b 4d 35 12 3c 94 d1 2a 8d 20 fd b4 52 c3 2c 92 12 07 a9 85 db 81 ec 11 31 bf 17 4c ac 14 90 7d 3a 91 6d 5e c5 ec Data Ascii: xu;{!{^^Aa[?F0I"2P_X5r'_{\|jdln#p~#t3wo}#SSA]2mwVSzC]YLeTC{AmKcLx2pk5/lZ_?\|WE+M5<* R,1L}:m^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49871	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	924	OUT	GET /images/speakers/62984/Brian_Anderson_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
2024-04-18 17:22:32 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:37 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"27157-1707474859000" Last-Modified: Fri, 09 Feb 2024 10:34:19 GMT Content-Type: image/jpeg Content-Length: 27157 Connection: close
2024-04-18 17:22:32 UTC	7926	IN	Data Raw: ff d8 ff e1 0d 6f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 32 3a 30 39 20 31 36 3a 30 34 3a 33 33 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: oExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:02:09 16:04:33Zp
2024-04-18 17:22:32 UTC	258	IN	Data Raw: 0f d3 7b 5a ab 6c b7 f7 a9 ff 00 47 f4 3f 3f f7 d3 3f ab 17 d4 e2 c0 6b 30 41 2e e2 46 9b 7f 94 ab fa 99 5f be ef a3 bf 96 fd 3f dc 4b 44 bf ff d3 ec ba 8e 06 48 b5 d2 5c 71 cb 47 a6 da cf bc b8 7d 36 35 bf ca 54 db 83 d5 3d 06 37 ec fb 5f 7c 8b 8e c6 98 64 1f d1 3b 5f 76 df 62 b2 ee b9 8d 5b 66 c7 d8 08 e2 22 56 76 67 d6 8b c9 2d c4 71 63 3f 79 f0 5c 4f fd f5 54 8e 38 9d a0 47 9b 21 31 1d 43 96 7e ae 63 74 bc d7 db 97 73 99 66 2e d7 e2 ba b2 09 b5 84 cb aa b6 b9 db 53 9b f4 14 b3 b2 4e 6b 0d cf 68 6f b8 b0 34 76 0d 40 b1 c5 ed 71 24 b9 cf d4 93 c9 3c a1 57 90 d8 34 d8 60 38 ee 69 f3 52 4b 18 02 c0 d5 38 26 38 f5 d0 1d 1a 97 64 e4 55 ed 61 05 be 07 fb d4 a8 c8 c9 b3 e9 38 00 7b 0e 51 ed a5 a0 fb d9 b8 24 c6 b3 46 d7 5c 1f 14 c3 6d c1 13 7b e8 9e 86 86 91 Data Ascii: {ZlG???k0A.F_?KDH\qG}65T=7_\|d;_vb[f"Vvg-qc?y\OT8G!1C~ctsf.SNkho4v@q$<W4`8iRK8&8dUa8{Q$F\m{
2024-04-18 17:22:32 UTC	8192	IN	Data Raw: 2b 21 d8 d9 ae 7d 04 35 ed da e0 60 1d 48 f7 68 e0 e4 6b b2 6b c5 12 61 d6 9e 1b ff 00 92 59 85 ef b6 c2 f7 99 93 2e 3e 25 3a 11 ee c3 cd 4e 34 20 37 05 d6 b3 37 17 29 ae 6d f8 b4 d6 f7 10 7d 4a 98 1a ed 3f 37 6f ee b9 bf ca 5b 38 6c e8 99 ed 23 21 cc ad c0 0a d9 bc 16 9d a3 f9 bf de 6f b3 fa eb 95 f6 11 a9 4f f6 8d be d6 c8 3e 49 c6 00 b5 04 e4 1e ac 7d 5c ab 16 eb c3 d9 f6 aa de d0 6b d2 19 a8 f7 7d 1f 6a 27 ec 0e 85 fe 85 df bb c8 e7 fe e3 ff 00 e6 6b 9d c3 eb 39 78 e7 63 5e 4b 0e 85 84 98 33 a2 d5 fd b3 87 ff 00 71 8f f3 5b 7e 91 fe 73 f7 bf f5 27 f3 89 be d0 b5 de e6 9e 2f ff d4 8d 97 ba d2 5c 4c a4 d3 30 83 4b 0e c0 4f 74 61 1b 42 62 c6 4e 25 57 b4 07 4e 92 3c 11 9c 42 13 dc 12 50 6b 9b 72 ab 1b 6b b9 cd 1f ba 75 1f 8a 1b b2 33 1d a1 b8 c7 7d a2 3f Data Ascii: +!}5`HhkkaY.>%:N4 77)m}J?7o[8l#!oO>I}\k}j'k9xc^K3q[~s'/\L0KOtaBbN%WN<BPkrku3}?
2024-04-18 17:22:32 UTC	8176	IN	Data Raw: d2 fb e5 22 bb 6d ed 70 13 ba b3 73 75 fa 42 4c 33 a1 04 fb 5f 20 75 56 0a 0d 0b e4 56 a2 3d 82 4c 5c 55 ba 7c a5 a3 4c ac 29 cc 26 df 8d 65 61 51 f4 75 18 72 bc 7c 30 a9 90 c3 77 30 2c 99 37 27 98 3c e1 5d 9a 22 f5 24 26 0e 84 96 03 8a c4 a7 df d3 a2 9f a7 e8 a1 72 77 9e a8 24 6c 60 62 42 da f9 f7 11 0b d6 5d a0 e4 9d 16 79 50 cd 6f eb 14 38 35 c8 a4 9c b4 3e 0b dc 3f 7e ce c2 f6 49 f1 a5 5a 61 f7 6a 2a fd f2 05 d4 cd 1b 49 41 9f 9a 07 3c bd 89 ac bf 21 a5 fa 4d 37 34 2e f5 00 4a 7f d0 51 54 ff 00 a5 b9 b7 32 6e 65 5d 20 d0 7e 2a 3a 70 34 9c 86 99 21 f2 74 02 8d 6d cd ed 47 37 ed 69 c9 24 72 9f 5c da a0 7d d0 5e 21 28 52 14 a3 05 b1 3e b4 fa b8 9a cf 9e 63 63 31 c4 94 3b 39 08 f3 f1 60 fe 74 1b 8e c0 76 4c 4b 0a 97 f7 89 fc c4 cf b8 06 9f 2f 4e 27 40 dd Data Ascii: "mpsuBL3_ uVV=L\U\|L)&eaQur\|0w0,7'<]"$&rw$l`bB]yPo85>?~IZajIA<!M74.JQT2ne] ~:p4!tmG7i$r\}^!(R>cc1;9`tvLK/N'@
2024-04-18 17:22:32 UTC	2605	IN	Data Raw: ce 38 b8 93 7f 84 5e 4c 60 5d 80 36 95 16 92 e1 57 bd 2b be fd 72 b3 29 7b 08 28 6a 5b 14 87 69 2d 6b 95 15 95 d2 e3 34 d6 bd b7 26 04 43 71 c5 21 f4 e5 1d fe ea 3c d3 a8 ba a8 a1 6e 1d 51 35 f0 4e 8e 55 ce 35 5b 09 e5 60 c5 b4 ef c7 9e e0 91 11 3a 86 eb 51 4d b8 f1 be db cf ec 25 55 f1 25 ea c5 b8 e4 d1 39 69 62 d1 b8 cb 68 84 cb c6 02 db 6d 02 a0 2e d4 46 55 c5 75 cd 35 14 54 44 25 d1 57 ab ea 4c 83 1c 90 bc 85 67 7f 67 90 c2 79 f1 b5 57 29 ab 86 c9 9a c8 58 a4 01 15 8f 1e da 03 14 f5 2d 12 2b 6d c8 51 b2 92 42 22 40 aa 89 65 7b 32 27 7a 6e 6e 80 f5 4c 42 b5 8c dd a5 4b 0b 78 e0 0c b5 aa 58 c2 cb 3e be 24 64 69 d6 df 06 fc 8a ae 28 0e be 58 16 97 96 37 34 f9 2d ed 5b f2 5c aa b6 92 b0 9a 85 8a 4f 95 5f 36 9a 35 44 e6 cd 3f 18 72 ea 0f d9 82 09 0a 76 dd Data Ascii: 8^L`]6W+r){(j[i-k4&Cq!<nQ5NU5[`:QM%U%9ibhm.FUu5TD%WLggyW)X-+mQB"@e{2'znnLBKxX>$di(X74-[\O_65D?rv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49874	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	915	OUT	GET /images/speakers/40562/Jason_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
2024-04-18 17:22:32 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:37 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"5851-1603348870000" Last-Modified: Thu, 22 Oct 2020 06:41:10 GMT Content-Type: image/jpeg Content-Length: 5851 Connection: close
2024-04-18 17:22:32 UTC	5851	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49877	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	675	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/p/1713460951555 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=SBAdojpagsTWs4Tku3v7ejzaaTI8z+xZCkkSpVzd86ZlnJmBcOQPPiid3iNzPiRVY5dQJPqdH0TTw8OAVAz36w9AfK+ZIi0J3hBmrt/nLv9pVjZ6ai7sBIcjOxln
2024-04-18 17:23:32 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:32 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=9xW9uDHcw3WFxuOWUWW3KbrQ0zHWhgd2mm9PhUYU0LenPXPDPD1rIuCyT8xAAb/pytYmoXBzhf8OdcVoRg3W6hSJj5kURO8NsoiMvxLlJVOtHAq5YzJLN+ZNIQJ6; Expires=Thu, 25 Apr 2024 17:22:32 GMT; Path=/ Set-Cookie: AWSALBCORS=9xW9uDHcw3WFxuOWUWW3KbrQ0zHWhgd2mm9PhUYU0LenPXPDPD1rIuCyT8xAAb/pytYmoXBzhf8OdcVoRg3W6hSJj5kURO8NsoiMvxLlJVOtHAq5YzJLN+ZNIQJ6; Expires=Thu, 25 Apr 2024 17:22:32 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:32 UTC	86	IN	Data Raw: 35 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 32 35 33 36 5c 6e 33 34 35 37 2e 36 37 31 34 32 31 36 39 35 31 32 37 5c 6e 34 5c 6e 34 5c 6e 70 5c 6e 6e 75 6c 6c 22 29 0d 0a Data Ascii: 50$Loader && ($Loader.payload = "1713461012536\n3457.671421695127\n4\n4\np\nnull")
2024-04-18 17:23:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49875	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:32 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:22:32 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 87665668b87f53c1-ATL
2024-04-18 17:22:32 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49878	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	979	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713460951604/1713460951604%0A-501.5023837035554%0A2%0A3%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460949336%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=SBAdojpagsTWs4Tku3v7ejzaaTI8z+xZCkkSpVzd86ZlnJmBcOQPPiid3iNzPiRVY5dQJPqdH0TTw8OAVAz36w9AfK+ZIi0J3hBmrt/nLv9pVjZ6ai7sBIcjOxln
2024-04-18 17:22:32 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:32 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=jt80erKDH+qJtp9rPrgEXg9nJOrC6K3HYKStbq+kSl+4lr2M0sH5HhgWsVnD4sTkPh6kIJTXhJRD8GCDrSlmppzmPXB5Mgt9fPmVH1wkdgZrCxnd68wWWpsvtA9t; Expires=Thu, 25 Apr 2024 17:22:32 GMT; Path=/ Set-Cookie: AWSALBCORS=jt80erKDH+qJtp9rPrgEXg9nJOrC6K3HYKStbq+kSl+4lr2M0sH5HhgWsVnD4sTkPh6kIJTXhJRD8GCDrSlmppzmPXB5Mgt9fPmVH1wkdgZrCxnd68wWWpsvtA9t; Expires=Thu, 25 Apr 2024 17:22:32 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:32 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49880	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	926	OUT	GET /images/speakers/52087/Racquel%20Harris_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
2024-04-18 17:22:32 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:37 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"24721-1666874029000" Last-Modified: Thu, 27 Oct 2022 12:33:49 GMT Content-Type: image/jpeg Content-Length: 24721 Connection: close
2024-04-18 17:22:32 UTC	7926	IN	Data Raw: ff d8 ff e1 0a ab 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 31 30 3a 32 37 20 31 38 3a 30 31 3a 35 33 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2022:10:27 18:01:53Zp
2024-04-18 17:22:32 UTC	258	IN	Data Raw: 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 32 2d 31 30 2d 32 37 54 31 38 3a 30 31 3a 35 33 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 32 2d 31 30 2d 32 37 54 31 38 3a 30 31 3a 35 33 2b 30 Data Ascii: p/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2022-10-27T18:01:53+05:30" xmp:MetadataDate="2022-10-27T18:01:53+0
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 32 2d 31 30 2d 32 37 54 31 38 3a 30 31 3a 35 33 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 45 35 39 41 37 33 31 45 41 35 35 45 44 31 31 38 35 46 33 39 45 33 39 32 45 32 30 36 34 30 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 44 35 39 41 37 33 31 45 41 35 35 45 44 31 31 38 35 46 33 39 45 33 39 32 45 32 30 36 34 30 31 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 44 35 39 41 37 33 31 45 41 35 35 45 44 31 31 38 35 46 33 39 45 33 39 32 45 32 30 36 34 30 31 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 Data Ascii: 0" xmp:ModifyDate="2022-10-27T18:01:53+05:30" xmpMM:InstanceID="xmp.iid:9E59A731EA55ED1185F39E392E206401" xmpMM:DocumentID="xmp.did:9D59A731EA55ED1185F39E392E206401" xmpMM:OriginalDocumentID="xmp.did:9D59A731EA55ED1185F39E392E206401" photoshop:ColorMode="
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 07 d6 3d 77 62 d6 5c d7 35 6d b3 4f fd 26 f7 ad 9e eb d0 c2 e6 03 9f 71 34 e7 cb 18 3e 57 f6 c9 ec 3b 8f 7b 3b 57 b5 cf d9 fb d3 af 2f fb 16 55 b6 a5 52 ef 61 75 37 5d fa bd a1 75 66 87 07 5e 5e a9 ef af 4e 37 2a 5f 5d 3d ba aa b9 83 73 5a 12 78 c0 91 ca fc 9c 88 ea 11 7b b5 32 f2 7f bc 5d 74 c4 30 f6 3f a0 7b cb 52 bc d0 fa bb b1 43 5d a8 67 b1 22 ef f3 3d b4 5d 9a 97 da fd 92 e9 fb 08 ff 00 a6 2f 66 3b 23 b5 b5 44 94 bc b5 2d 39 f9 89 8c cc 69 85 fd d9 75 4e 85 06 e6 bd 2c 5f b4 d7 b4 fd 8f a1 b7 ff 00 5e 7a 6b 73 d6 b7 8d ff 00 57 a1 f5 df 47 f7 87 b2 74 5e d8 f6 25 9a f8 3f 8f f5 0a ae ff 00 f5 ef ca e3 1b 93 ce 7e 75 cd e7 5e 99 ba 69 5e ee 68 9e d2 e8 57 fe 93 fa 83 b7 ef 37 5d 9b d4 54 7d ed 52 e7 ac 7e cc 75 85 8d 97 43 6e 4f 58 7b 4f eb 5d c7 45 Data Ascii: =wb\5mO&q4>W;{;W/URau7]uf^^N7*_]=sZx{2]t0?{RC]g"=]/f;#D-9iuN,_^zksWGt^%?~u^i^hW7]T}R~uCnOX{O]E
2024-04-18 17:22:33 UTC	169	IN	Data Raw: de 45 e3 fa 7b 67 80 c7 62 b3 96 00 8a 59 d9 f9 b6 3e 8e 5e da c1 e7 25 05 5a de 4a bd 8b 43 a4 9c cf 61 14 88 c4 ce 91 c0 65 37 56 e7 cd 59 88 69 ae 5a 59 13 45 70 95 f4 00 a9 56 6b d5 50 c4 4e b0 30 1a 71 84 da 3b 8f 30 87 58 dc 56 55 8c c3 65 6e 25 26 71 9a d2 e3 31 98 0b 57 24 96 4d 0b 6b 5b 22 a9 11 41 fa 82 84 c4 f7 ba 0a 6c 04 18 ad 04 b0 19 69 80 dc 16 1a 98 bb 0a 25 56 61 08 a9 48 98 13 00 89 15 04 8c f8 e1 0a 05 1b 3f fb 1e 2f f7 8e ff 00 c7 ff 00 c3 ff 00 79 f8 3f 07 fd 0f db 7f 5b 8f ff d9 Data Ascii: E{gbY>^%ZJCae7VYiZYEpVkPN0q;0XVUen%&q1W$Mk["Ali%VaH?/y?[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49881	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	648	OUT	GET /images/select-img.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:32 UTC	263	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:37 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"1067-1594305815000" Last-Modified: Thu, 09 Jul 2020 14:43:35 GMT Content-Type: image/png Content-Length: 1067 Connection: close
2024-04-18 17:22:32 UTC	1067	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 06 08 06 00 00 00 28 a0 05 9e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR(tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49882	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	931	OUT	GET /images/speakers/61837/Jared%20Garrett%20-%20Large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460949.52.0.0
2024-04-18 17:22:33 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"7243-1703566737000" Last-Modified: Tue, 26 Dec 2023 04:58:57 GMT Content-Type: image/jpeg Content-Length: 7243 Connection: close
2024-04-18 17:22:33 UTC	7243	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 72 00 72 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CCrr"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49883	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	916	OUT	GET /images/speakers/38472/Mathew_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"4790-1583850871000" Last-Modified: Tue, 10 Mar 2020 14:34:31 GMT Content-Type: image/jpeg Content-Length: 4790 Connection: close
2024-04-18 17:22:33 UTC	4790	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49884	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	681	OUT	GET /images/speakers/33911/Christopher%20Faulkner_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"18401-1516701258000" Last-Modified: Tue, 23 Jan 2018 09:54:18 GMT Content-Type: image/jpeg Content-Length: 18401 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 08 7b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 31 3a 31 36 20 31 32 3a 32 30 3a 30 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: {ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2018:01:16 12:20:00Zp
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: iption> </rdf:RDF> </x:xmpmeta>
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 17:22:33 UTC	2025	IN	Data Raw: bf cd 0c c6 e3 c8 d7 cd 25 4a a0 55 43 4e a8 2e 17 51 9a ec b6 bb 5d 9e c6 2b 08 07 e9 c7 51 52 32 4d 6a 7f 9f 58 f7 b8 ee 13 6f 17 73 5f 5d 45 a5 e4 35 d3 c6 83 cb f9 74 7b 7a 7f 05 ba 30 bd 61 b7 f6 36 e4 a9 39 2a 8d 97 83 a8 c1 e1 b2 a5 a4 7a aa 8c 05 1d 7d 54 f8 18 2b 4b 82 4d 6e 1a 96 6f b5 d7 a9 84 90 c3 19 3e ad 5e d8 91 53 c6 8c 05 14 cf f8 3a f4 59 06 bd 0a 30 61 12 a1 b5 d4 8d 09 3d 19 28 2e 18 99 44 6d 22 b2 8b 03 a9 5b fd e6 df d3 da 0c 89 69 f8 7a 56 c4 84 c3 79 75 cb 1b 8e 5a 8a 09 a9 e7 51 25 56 16 b1 a0 a9 52 2d 24 94 70 ca 92 47 23 81 72 3c 91 46 39 fa 1b 1f 6e cd 0e 99 e3 7a 7e 99 fd 9f e6 e9 32 1c 56 bd dd 0e 1d 35 bf ab 36 65 46 1f 25 51 54 5a 97 31 5c d5 19 5a 33 2e bd 38 7c 95 48 48 c4 71 9b 32 bd 32 69 97 51 17 3a 3f c6 e0 2f ce 9c Data Ascii: %JUCN.Q]+QR2MjXos_]E5t{z0a69*z}T+KMno>^S:Y0a=(.Dm"[izVyuZQ%VR-$pG#r<F9nz~2V56eF%QTZ1\Z3.8\|HHq22iQ:?/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49887	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	664	OUT	GET /images/speakers/40562/Jason_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"5851-1603348870000" Last-Modified: Thu, 22 Oct 2020 06:41:10 GMT Content-Type: image/jpeg Content-Length: 5851 Connection: close
2024-04-18 17:22:33 UTC	5851	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49886	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	673	OUT	GET /images/speakers/62638/Manish%20Gupta_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"22928-1706277390000" Last-Modified: Fri, 26 Jan 2024 13:56:30 GMT Content-Type: image/jpeg Content-Length: 22928 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 09 f2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 31 3a 32 36 20 31 39 3a 32 35 3a 32 36 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:01:26 19:25:26Zp
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 44 31 43 43 30 38 45 35 32 42 43 45 45 31 31 38 32 35 44 39 37 38 31 35 46 41 35 36 32 35 42 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 44 31 43 43 30 38 45 35 32 42 43 45 45 31 31 38 32 35 44 39 37 38 31 35 46 41 35 36 32 35 42 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f Data Ascii: ocumentID="xmp.did:FD1CC08E52BCEE11825D97815FA5625B" xmpMM:OriginalDocumentID="xmp.did:FD1CC08E52BCEE11825D97815FA5625B" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" dc:format="image/jpeg"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:actio
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 44 31 43 43 30 38 45 35 32 42 43 45 45 31 31 38 32 35 44 39 37 38 31 35 46 41 35 36 32 35 42 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 31 2d 32 36 54 31 39 3a 32 35 3a 32 36 2b 30 35 3a 33 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 45 31 43 43 30 38 45 35 32 42 43 45 45 31 31 38 32 35 44 39 37 38 31 35 46 41 35 36 32 35 42 22 20 73 74 45 76 Data Ascii: created" stEvt:instanceID="xmp.iid:FD1CC08E52BCEE11825D97815FA5625B" stEvt:when="2024-01-26T19:25:26+05:30" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:FE1CC08E52BCEE11825D97815FA5625B" stEv
2024-04-18 17:22:33 UTC	6552	IN	Data Raw: 78 87 d0 75 ef 3b ff 00 be ff 00 91 7b f7 85 f3 eb de 21 f4 1d 7b ce df ef bf e4 5e fd e1 0f 5e bd e2 1f 41 d0 61 93 ac a4 da 5b e7 3f d8 15 46 9a 30 bb 07 17 89 92 49 d8 8f 22 e3 32 99 fc 94 50 b0 5f 58 0d 35 72 a8 b7 27 5f f8 7b c5 ef 7c 1c 9e 6a e5 fb 64 15 ff 00 15 a9 ff 00 6c ed fe 6e b2 23 d9 e5 ff 00 90 fe f5 70 7e 23 74 14 0f f9 b6 33 d5 1f 77 6f f3 e8 dd 7d 23 db 53 f5 fe 53 a0 f6 be e6 c0 41 5d 1e 32 6d cb b4 77 04 12 56 53 d5 7a bc 92 d4 43 90 99 5d d9 59 95 4c 65 54 a9 43 cb 7b 41 6d b7 da 4b 63 ae d6 e3 4c c1 78 32 9a 70 e8 6b fb c6 e6 d2 ea 35 b8 b6 2f 6c 5a 95 06 94 fc ba 16 f0 5f cd 3f 19 bc b6 7c dd 95 57 d7 cd 45 15 19 96 a7 2b 4d 35 12 3c 94 d1 2a 8d 20 fd b4 52 c3 2c 92 12 07 a9 85 db 81 ec 11 31 bf 17 4c ac 14 90 7d 3a 91 6d 5e c5 ec Data Ascii: xu;{!{^^Aa[?F0I"2P_X5r'_{\|jdln#p~#t3wo}#SSA]2mwVSzC]YLeTC{AmKcLx2pk5/lZ_?\|WE+M5<* R,1L}:m^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49885	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	925	OUT	GET /images/speakers/62480/Kenneth%20user_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"29360-1705580268000" Last-Modified: Thu, 18 Jan 2024 12:17:48 GMT Content-Type: image/jpeg Content-Length: 29360 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 0d 94 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 00 90 00 00 01 01 00 03 00 00 00 01 00 d8 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 31 3a 31 38 20 31 37 3a 34 37 3a 33 36 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*(12i ''Adobe Photoshop CS6 (Windows)2024:01:18 17:47:360
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 6f 56 f5 31 c1 a7 da 5e 04 77 5a 38 b9 54 5d 4b 46 2d 82 df 49 a0 3c 03 ee 9f de 73 3e 93 52 53 7b ab 65 7a 3d 37 26 d3 1a 56 60 9f 13 ed 5c e7 d4 ee a0 68 cc 76 23 8f b6 f1 2d fe bb 7f f2 48 ff 00 59 33 da 7a 69 c7 69 97 3d ed 0e 8e 34 d5 73 58 f9 0f c7 ba bc 86 68 ea 9c 1e 3e 49 28 6e fa bb 2c 0e 1a f7 40 ca e9 b4 65 6b 25 af ec e6 98 70 f9 a8 e3 dc cb 69 66 45 7a d7 6b 43 c0 f2 21 1d d6 6d a8 d8 c3 3a 7b 4f 99 fa 28 18 f7 64 ba d8 b8 98 78 ec c0 ea 4f 39 37 1b 1a 08 68 21 b0 d1 df de 8a 72 72 f0 7a 85 f8 79 27 6b 83 bd 5a 5c 0e 8e a9 fe e6 6a a9 d7 63 af 7b eb bf 57 b5 c5 af 78 e1 d2 af f5 8a 6d c9 e9 54 e7 56 37 64 74 c8 ae e8 e5 d4 9f a0 f4 e8 fc b4 05 2c 95 93 64 da 3c 96 60 65 0f d6 71 aa be 7b 96 80 ef f3 99 b5 ca 86 47 48 e9 76 eb 43 be c8 e8 2d Data Ascii: oV1^wZ8T]KF-I<s>RS{ez=7&V`\hv#-HY3zii=4sXh>I(n,@ek%pifEzkC!m:{O(dxO97h!rrzy'kZ\jc{WxmTV7dt,d<`eq{GHvC-
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: ff 00 4b de 9a bb 4c 02 d3 2c 70 96 9f 25 5b 33 3b 65 ed 6b 06 e0 07 e9 41 ef 3f 45 22 01 e8 b1 ab 7f 43 c9 c6 65 b7 48 bf 1d 95 9f d2 54 e9 d7 f7 ac ad de f6 35 64 ec 77 87 f8 2d dc 8f f3 95 ec ae a5 7e 0d cd 7d 27 75 16 ea 1a 78 f0 b2 a7 2a db fa 7f ee 7f c3 77 e3 fe e3 ff 00 55 0e 10 a7 ff d4 e4 d9 79 f5 21 e7 40 89 80 c7 9c 81 9a e7 ba b2 e2 45 6d ac ed 7d 87 8f fb 65 aa 93 49 dc 3c cc 2b 7d 36 e6 63 e5 ba 9b c7 b5 c6 1a e1 12 d7 7f 58 fe 62 4a 6e 75 47 3b ec c1 af 00 1d f3 23 fb 96 58 2b 47 aa 6f 6d 7b 5c e0 f1 bb 47 03 2b 30 22 87 bc fa 97 9a db fa 63 b1 ec 33 66 23 b6 b4 1f dc 77 b9 8b 76 e6 8b 59 b4 68 39 d3 c5 70 3f 54 b3 46 2f 59 ad 8f 3f a3 c9 06 a7 78 4f 35 ff 00 d2 5e 84 35 11 c2 78 00 84 db 81 55 20 38 87 8e 5c 77 7c 67 95 d0 f4 37 52 ff 00 Data Ascii: KL,p%[3;ekA?E"CeHT5dw-~}'ux*wUy!@Em}eI<+}6cXbJnuG;#X+Gom{\G+0"c3f#wvYh9p?TF/Y?xO5^5xU 8\w\|g7R
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 24 c1 d1 43 72 f0 17 e1 82 34 25 92 53 18 63 44 f1 a2 b2 26 35 19 54 36 45 64 27 0a 73 83 93 46 74 c2 d2 e2 f2 55 65 75 56 37 84 85 a3 b3 c3 d3 e3 f3 29 1a 94 a4 b4 c4 d4 e4 f4 95 a5 b5 c5 d5 e5 f5 28 47 57 66 38 76 86 96 a6 b6 c6 d6 e6 f6 67 77 87 97 a7 b7 c7 d7 e7 f7 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 32 bd a9 d9 1b 83 07 0d 26 c8 c6 55 c9 bd 37 1a e5 e9 72 bb a3 23 b7 3e e4 52 e3 f1 cf 0c b4 cb b7 e9 b7 3c 14 14 5b 80 e6 d9 9d 26 15 b2 46 42 23 78 e3 52 38 30 5f 22 ec 50 73 25 cb 5e 7e eb 96 2e 55 b7 42 b0 24 aa da 2e 27 38 fa 8f a7 a9 8f c3 a5 54 21 63 a8 f7 1a 1e a0 56 2a c6 08 84 b5 d3 f1 1e 15 34 a6 91 e6 42 fa fe 5c 3a 01 b7 Data Ascii: $Cr4%ScD&5T6Ed'sFtUeuV7)(GWf8vgwHXhx9IYiy:JZjz?2&U7r#>R<[&FB#xR80_"Ps%^~.UB$.'8T!cV4B\:
2024-04-18 17:22:33 UTC	4808	IN	Data Raw: 77 47 16 98 72 a2 25 b0 32 c1 66 6b 5c a5 fd e3 86 f3 c9 33 d8 97 96 c5 4d c5 a8 c8 1f 8c 7d ab f8 be d1 4f b3 ac 92 e5 cf 73 ad ae 5e 28 b7 58 fc 0b a1 40 58 7f 64 df 32 4e 54 fd b8 e8 ac a7 5d 65 16 7a 88 ea 73 55 28 f0 31 12 47 ae 54 a8 a6 b7 01 2a 29 5d 7c d4 fa 47 00 15 1c fb 0f 47 71 0c 74 53 08 12 8c 11 e6 3f 23 d4 9d fb e6 09 14 48 94 31 9e 04 64 11 eb 51 82 3a 56 75 26 d1 da f3 f6 af 5e 61 b7 45 54 d9 7d bd 90 df bb 52 8f 77 3b c5 57 51 15 2e d9 ab ce 52 c5 96 f2 9a 15 6a f1 14 b4 22 54 63 0d dc 13 c1 bf d0 45 cb 7b 79 e6 0d f2 cf 6f f0 01 49 18 0d 23 f1 7c ab c7 3f e0 e8 29 cd 1c c6 fb 5e cd b8 de 5b b1 13 24 6d 46 34 a2 9a 1a 1c ff 00 2a f9 f5 5f 9f 26 7e 25 f6 3e c4 f9 2d dd db bf 3b d0 1d af be fa 56 b3 b2 77 57 fa 3d de 7b 4a bc e6 21 a7 da Data Ascii: wGr%2fk\3M}Os^(X@Xd2NT]ezsU(1GT)]\|GGqtS?#H1dQ:Vu&^aET}Rw;WQ.Rj"TcE{yoI#\|?)^[$mF4_&~%>-;VwW={J!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49888	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	927	OUT	GET /images/speakers/61394/Peter%20Christian_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"25279-1701866855000" Last-Modified: Wed, 06 Dec 2023 12:47:35 GMT Content-Type: image/jpeg Content-Length: 25279 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 10 3d 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0f 01 00 00 03 00 00 00 01 02 5e 00 00 01 01 00 03 00 00 00 01 01 fb 00 00 01 02 00 03 00 00 00 03 00 00 00 c2 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 c8 01 1b 00 05 00 00 00 01 00 00 00 d0 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 d8 01 32 00 02 00 00 00 14 00 00 00 f6 01 3b 00 02 00 00 00 0e 00 00 01 0a 9c 9d 00 01 00 00 00 1c 00 00 01 18 ea 1c 00 07 00 00 01 0c 00 00 01 34 87 69 00 04 00 00 00 01 00 00 02 40 00 00 03 e8 00 08 00 08 00 08 00 15 f9 00 00 00 27 10 00 15 f9 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 Data Ascii: =ExifMM*^(12;4i@''Adobe Photoshop CS6 (Window
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 6f 1b 86 e8 f0 90 4c 24 4d 02 3c 56 4e 27 42 7a 37 fa 3f d7 ae 89 87 81 8f 8b 92 cb 3d 5c 66 7a 64 b4 48 30 57 32 fe af 8e fb 2e b0 18 f5 ae 75 9f d9 71 d1 54 7d 75 6d 78 db ee 0e 99 47 c0 e9 57 67 6f fb 3b 03 bd 38 dd 3a 72 ad 11 dd a2 0a 51 d5 28 e0 3e 07 c1 2f da 54 7f a4 fc 11 ff 00 60 66 57 f4 a9 07 e0 97 ec 9b bf d0 79 21 c2 13 c4 5f ff d2 e7 7a 73 01 76 23 5f c0 7f 1e 68 bd 5f a5 51 46 2b 9e c1 2e b4 1b 0b 8f 3c c3 82 a5 83 98 1b e8 bd e2 0b 6e 82 ba 3c fc 6f 5f 15 9b 8c 35 ad 76 be 4e 51 48 e8 3b ee cd 00 01 17 b6 b1 fb 5e 46 c3 b3 01 e0 76 03 f2 ad 3f ab 3d 0f f6 a5 03 2a b7 fa 6f a6 c6 b8 ee d2 76 9d e3 fe a5 67 3a a7 5d 8e ec 76 fb 5c e2 1b 27 c8 ae d7 a1 e3 37 07 a6 62 e3 3e 0d 9b 60 b8 69 26 54 58 a6 05 8e a6 45 97 24 4e 9e 41 d9 6e 75 cc 66 Data Ascii: oL$M<VN'Bz7?=\fzdH0W2.uqT}umxGWgo;8:rQ(>/T`fWy!_zsv#_h_QF+.<n<o_5vNQH;^Fv?=*ovg:]v\'7b>`i&TXE$NAnuf
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 6d ae d9 58 1d dc e3 a2 6c ea fa ab 6b fb 2d 4f a1 b8 ee 70 f5 2e 79 25 d5 88 f7 6e 67 d1 b5 cf 72 83 29 20 1c 6b da ea cb 84 b2 65 ae da ef a2 e6 aa 87 a7 1a b1 ac c6 19 be 8b 18 43 5b b9 8c 75 c1 83 e8 7a 77 b8 6e df fb f6 58 db 13 40 ad 0e e3 bb 6a cc 80 31 aa 23 f1 6c 5d 93 61 ad f4 ee 16 86 c3 45 a0 cc 88 d2 63 f3 97 11 d4 de d7 75 37 06 f0 d8 69 f8 b5 b0 e5 d7 d3 8d 8d d3 ba 77 a7 53 76 0d a6 d7 17 19 71 71 11 ea 3f f9 6f 71 de b9 2e b5 84 ec 2e a2 c2 67 d3 cb ac 64 52 e3 df 7b 7d ed 07 f9 0f 40 c6 c1 20 68 0a dc 92 37 18 9d cf 6f 06 8d 18 9f 68 63 f6 b6 76 b8 ef f8 2e 93 ea 9d 18 d4 e7 d9 43 6b 2d 63 da 0b e7 c4 2c ce 83 51 b3 13 39 c0 c3 99 04 0f 19 5a ff 00 57 1d b7 ac 86 1d 3d 4a 65 df 22 ac 92 7a 9e a5 a8 00 e1 db a0 2f 61 f6 3c 60 d2 ed 80 82 Data Ascii: mXlk-Op.y%ngr) keC[uzwnX@j1#l]aEcu7iwSvqq?oq..gdR{}@ h7ohcv.Ck-c,Q9ZW=Je"z/a<`
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 20 22 86 37 0f e1 47 c5 c0 1d 58 9e ea 6e 47 af 13 49 68 3b 44 51 25 c6 bf 22 d3 65 8b a5 ab 08 f9 b6 31 a1 dd bf 20 b1 ab 60 80 7b 1e c1 f0 15 fc a7 fe 41 fe 6a f5 e7 c5 0d c7 2e da a9 f6 b5 4e fa 7e 47 4f 77 90 1b b5 3e 15 34 89 ab 5f e1 c3 df 4c ea 1d 49 82 4c a2 01 0c d4 34 1b 81 da 69 21 c1 8c 01 a2 01 44 1c 36 96 f6 81 53 49 16 3b 61 cf 68 56 b9 a3 52 2f e6 4e 1c 3b 6b ae 35 a5 24 7c 30 83 ec 78 fd 75 1f 5a eb 2e 6b 9c d4 64 6c 75 d5 c0 26 e2 39 70 00 84 37 34 d9 31 a6 06 03 61 b7 e5 b5 88 b0 e0 69 09 26 b4 f7 56 47 4c 94 9f c4 8c a6 3d a4 ea 51 7d c0 7c 2b 3e 09 1c 3d 56 03 bc 8d 0b 48 f7 25 4f d3 a7 71 30 46 5c 42 72 46 91 ec 53 59 52 41 23 9a e6 ca 1a 12 d6 01 3e 15 eb 19 8b b2 5e 11 8d 2b a1 fb 46 f7 bd a9 dd 44 e4 bc 38 95 d4 a0 ec e5 a7 b2 b2 Data Ascii: "7GXnGIh;DQ%"e1 `{Aj.N~GOw>4_LIL4i!D6SI;ahVR/N;k5$\|0xuZ.kdlu&9p741ai&VGL=Q}\|+>=VH%Oq0F\BrFSYRA#>^+FD8
2024-04-18 17:22:33 UTC	727	IN	Data Raw: 62 47 87 05 ad 8d 21 bd a0 25 4a 1e 93 d2 03 89 4b 9e 5a 50 ce e2 80 13 e5 b6 12 96 b6 24 00 94 36 1b 00 04 81 a2 74 d0 76 1d 7e c2 52 93 b1 0d 8d 13 aa bd 3a 7d 9d 28 ab 4d 3e 59 03 53 df 70 f3 10 a3 af a0 10 53 d4 09 32 14 96 fe f7 c5 b2 27 9f 50 50 53 7e 62 a7 cf 00 ee f0 51 43 12 c0 1a fa b4 eb 9b e1 e3 a7 ca cd f1 9a 4c 73 91 f1 7d 12 95 be 6e b0 79 68 44 b6 d4 56 0a 9b 62 7d 24 a7 c2 f4 04 e8 bd 3b f5 f8 a5 1f e1 9f 98 7e 22 bf 80 ff 00 37 ee fc 4f d7 d7 d3 d4 8a 88 85 aa ee 28 bc be e6 cc 91 f7 81 75 02 ab 06 c6 6e de 65 a0 55 a8 4c 89 d7 b6 70 da 6f 5f 05 2f d7 d3 b2 11 aa 9b 42 ae 58 52 d3 a9 21 22 c5 90 da b4 00 e8 90 46 84 f6 ef d5 2c 42 af 69 b6 a4 2d 5b bc 77 bb dd 3d b4 ec 74 57 49 4f b2 34 58 00 0f 4f 70 74 23 d5 af 52 1a 1e 2a 42 bd 5a ee Data Ascii: bG!%JKZP$6tv~R:}(M>YSpS2'PPS~bQCLs}nyhDVb}$;~"7O(uneULpo_/BXR!"F,Bi-[w=tWIO4XOpt#R*BZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49889	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	673	OUT	GET /images/speakers/62984/Brian_Anderson_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"27157-1707474859000" Last-Modified: Fri, 09 Feb 2024 10:34:19 GMT Content-Type: image/jpeg Content-Length: 27157 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 0d 6f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 32 3a 30 39 20 31 36 3a 30 34 3a 33 33 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: oExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:02:09 16:04:33Zp
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 0f d3 7b 5a ab 6c b7 f7 a9 ff 00 47 f4 3f 3f f7 d3 3f ab 17 d4 e2 c0 6b 30 41 2e e2 46 9b 7f 94 ab fa 99 5f be ef a3 bf 96 fd 3f dc 4b 44 bf ff d3 ec ba 8e 06 48 b5 d2 5c 71 cb 47 a6 da cf bc b8 7d 36 35 bf ca 54 db 83 d5 3d 06 37 ec fb 5f 7c 8b 8e c6 98 64 1f d1 3b 5f 76 df 62 b2 ee b9 8d 5b 66 c7 d8 08 e2 22 56 76 67 d6 8b c9 2d c4 71 63 3f 79 f0 5c 4f fd f5 54 8e 38 9d a0 47 9b 21 31 1d 43 96 7e ae 63 74 bc d7 db 97 73 99 66 2e d7 e2 ba b2 09 b5 84 cb aa b6 b9 db 53 9b f4 14 b3 b2 4e 6b 0d cf 68 6f b8 b0 34 76 0d 40 b1 c5 ed 71 24 b9 cf d4 93 c9 3c a1 57 90 d8 34 d8 60 38 ee 69 f3 52 4b 18 02 c0 d5 38 26 38 f5 d0 1d 1a 97 64 e4 55 ed 61 05 be 07 fb d4 a8 c8 c9 b3 e9 38 00 7b 0e 51 ed a5 a0 fb d9 b8 24 c6 b3 46 d7 5c 1f 14 c3 6d c1 13 7b e8 9e 86 86 91 Data Ascii: {ZlG???k0A.F_?KDH\qG}65T=7_\|d;_vb[f"Vvg-qc?y\OT8G!1C~ctsf.SNkho4v@q$<W4`8iRK8&8dUa8{Q$F\m{
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 2b 21 d8 d9 ae 7d 04 35 ed da e0 60 1d 48 f7 68 e0 e4 6b b2 6b c5 12 61 d6 9e 1b ff 00 92 59 85 ef b6 c2 f7 99 93 2e 3e 25 3a 11 ee c3 cd 4e 34 20 37 05 d6 b3 37 17 29 ae 6d f8 b4 d6 f7 10 7d 4a 98 1a ed 3f 37 6f ee b9 bf ca 5b 38 6c e8 99 ed 23 21 cc ad c0 0a d9 bc 16 9d a3 f9 bf de 6f b3 fa eb 95 f6 11 a9 4f f6 8d be d6 c8 3e 49 c6 00 b5 04 e4 1e ac 7d 5c ab 16 eb c3 d9 f6 aa de d0 6b d2 19 a8 f7 7d 1f 6a 27 ec 0e 85 fe 85 df bb c8 e7 fe e3 ff 00 e6 6b 9d c3 eb 39 78 e7 63 5e 4b 0e 85 84 98 33 a2 d5 fd b3 87 ff 00 71 8f f3 5b 7e 91 fe 73 f7 bf f5 27 f3 89 be d0 b5 de e6 9e 2f ff d4 8d 97 ba d2 5c 4c a4 d3 30 83 4b 0e c0 4f 74 61 1b 42 62 c6 4e 25 57 b4 07 4e 92 3c 11 9c 42 13 dc 12 50 6b 9b 72 ab 1b 6b b9 cd 1f ba 75 1f 8a 1b b2 33 1d a1 b8 c7 7d a2 3f Data Ascii: +!}5`HhkkaY.>%:N4 77)m}J?7o[8l#!oO>I}\k}j'k9xc^K3q[~s'/\L0KOtaBbN%WN<BPkrku3}?
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: d2 fb e5 22 bb 6d ed 70 13 ba b3 73 75 fa 42 4c 33 a1 04 fb 5f 20 75 56 0a 0d 0b e4 56 a2 3d 82 4c 5c 55 ba 7c a5 a3 4c ac 29 cc 26 df 8d 65 61 51 f4 75 18 72 bc 7c 30 a9 90 c3 77 30 2c 99 37 27 98 3c e1 5d 9a 22 f5 24 26 0e 84 96 03 8a c4 a7 df d3 a2 9f a7 e8 a1 72 77 9e a8 24 6c 60 62 42 da f9 f7 11 0b d6 5d a0 e4 9d 16 79 50 cd 6f eb 14 38 35 c8 a4 9c b4 3e 0b dc 3f 7e ce c2 f6 49 f1 a5 5a 61 f7 6a 2a fd f2 05 d4 cd 1b 49 41 9f 9a 07 3c bd 89 ac bf 21 a5 fa 4d 37 34 2e f5 00 4a 7f d0 51 54 ff 00 a5 b9 b7 32 6e 65 5d 20 d0 7e 2a 3a 70 34 9c 86 99 21 f2 74 02 8d 6d cd ed 47 37 ed 69 c9 24 72 9f 5c da a0 7d d0 5e 21 28 52 14 a3 05 b1 3e b4 fa b8 9a cf 9e 63 63 31 c4 94 3b 39 08 f3 f1 60 fe 74 1b 8e c0 76 4c 4b 0a 97 f7 89 fc c4 cf b8 06 9f 2f 4e 27 40 dd Data Ascii: "mpsuBL3_ uVV=L\U\|L)&eaQur\|0w0,7'<]"$&rw$l`bB]yPo85>?~IZajIA<!M74.JQT2ne] ~:p4!tmG7i$r\}^!(R>cc1;9`tvLK/N'@
2024-04-18 17:22:33 UTC	2605	IN	Data Raw: ce 38 b8 93 7f 84 5e 4c 60 5d 80 36 95 16 92 e1 57 bd 2b be fd 72 b3 29 7b 08 28 6a 5b 14 87 69 2d 6b 95 15 95 d2 e3 34 d6 bd b7 26 04 43 71 c5 21 f4 e5 1d fe ea 3c d3 a8 ba a8 a1 6e 1d 51 35 f0 4e 8e 55 ce 35 5b 09 e5 60 c5 b4 ef c7 9e e0 91 11 3a 86 eb 51 4d b8 f1 be db cf ec 25 55 f1 25 ea c5 b8 e4 d1 39 69 62 d1 b8 cb 68 84 cb c6 02 db 6d 02 a0 2e d4 46 55 c5 75 cd 35 14 54 44 25 d1 57 ab ea 4c 83 1c 90 bc 85 67 7f 67 90 c2 79 f1 b5 57 29 ab 86 c9 9a c8 58 a4 01 15 8f 1e da 03 14 f5 2d 12 2b 6d c8 51 b2 92 42 22 40 aa 89 65 7b 32 27 7a 6e 6e 80 f5 4c 42 b5 8c dd a5 4b 0b 78 e0 0c b5 aa 58 c2 cb 3e be 24 64 69 d6 df 06 fc 8a ae 28 0e be 58 16 97 96 37 34 f9 2d ed 5b f2 5c aa b6 92 b0 9a 85 8a 4f 95 5f 36 9a 35 44 e6 cd 3f 18 72 ea 0f d9 82 09 0a 76 dd Data Ascii: 8^L`]6W+r){(j[i-k4&Cq!<nQ5NU5[`:QM%U%9ibhm.FUu5TD%WLggyW)X-+mQB"@e{2'znnLBKxX>$di(X74-[\O_65D?rv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49890	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	690	OUT	GET /s/W/ws/vASWZvCWfxsRirPH/c/1713460952085 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=jt80erKDH+qJtp9rPrgEXg9nJOrC6K3HYKStbq+kSl+4lr2M0sH5HhgWsVnD4sTkPh6kIJTXhJRD8GCDrSlmppzmPXB5Mgt9fPmVH1wkdgZrCxnd68wWWpsvtA9t Sec-WebSocket-Key: 4Y15N7JBDUkvn+XHOi1sPQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:22:33 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:33 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=g8tRU3VDxWnNh0B+1547qEGR7I1JfWdtlgRosZKPkfm7sm+bCAU99Kf+8Sk7FNhnH0qkg2vrVap2Dv8K11gaJDK9OaRdx8vllWOBMxK5OPqsDFbWZ0PnFgJxbTZL4g5euIWa19XDEo7Btvx55WYQ8B1GPw4pQmRTXM1JdEw6j5FPLfZNuHYe9z2oD++SEg==; Expires=Thu, 25 Apr 2024 17:22:33 GMT; Path=/ Set-Cookie: AWSALBCORS=g8tRU3VDxWnNh0B+1547qEGR7I1JfWdtlgRosZKPkfm7sm+bCAU99Kf+8Sk7FNhnH0qkg2vrVap2Dv8K11gaJDK9OaRdx8vllWOBMxK5OPqsDFbWZ0PnFgJxbTZL4g5euIWa19XDEo7Btvx55WYQ8B1GPw4pQmRTXM1JdEw6j5FPLfZNuHYe9z2oD++SEg==; Expires=Thu, 25 Apr 2024 17:22:33 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49891	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	911	OUT	GET /images/products/detail/205981.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"43743-1704281370000" Last-Modified: Wed, 03 Jan 2024 11:29:30 GMT Content-Type: image/jpeg Content-Length: 43743 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 51 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CCQX"}!1AQa"q2
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 35 93 70 41 fb 44 aa 41 53 f7 a1 8a 7c 1c 81 5f bc 5f f0 4f af db 1f 47 fd bd bf 64 ff 00 0d fc 42 b0 4b 58 6f 2f e2 36 5a ee 9a 87 70 d3 35 18 80 5b 9b 72 09 27 6e 48 74 dd cb 45 2c 6d 8f 9a 97 f6 23 fd 83 3c 0b fb 03 78 2b c4 ba 17 81 6c e4 8a df c5 1e 20 bb d7 ae 5e 60 0b c6 25 72 20 b4 43 d7 c8 b7 84 24 51 a9 27 a3 39 f9 a4 62 7f 39 c3 e7 95 f0 98 4a b8 29 df 9a f6 4f b5 f4 97 fc 0f 53 f4 ac 4e 43 87 c6 62 e9 63 a1 6e 4b 5d ae f6 d6 3f e4 fd 0e 03 fe 0a 13 e2 2f 83 3f b0 57 ec 9d e2 6f 88 97 ff 00 0c 7e 1b dd 5f d9 44 2c b4 3d 3e 4f 0f 59 a8 d4 f5 29 41 5b 78 38 40 76 82 0b be de 56 28 a4 61 d2 bf 18 bf e0 87 5e 16 d3 7e 29 7f c1 54 7e 1e d9 f8 9b 4b d1 f5 cb 3b e1 ac 5c dc 5a 5d d8 43 25 a4 92 0d 36 ea 40 c2 02 be 58 01 fe 65 50 a0 2e 06 00 c0 ae d7 Data Ascii: 5pADAS\|__OGdBKXo/6Zp5[r'nHtE,m#<x+l ^`%r C$Q'9b9J)OSNCbcnK]?/?Wo~_D,=>OY)A[x8@vV(a^~)T~K;\Z]C%6@XeP.
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: fb 7c ff 00 c3 5c 7e d6 8f e0 af 0f de f9 de 02 f8 53 2c da 6d b9 8d f3 16 a7 aa 93 b6 f2 eb b6 e5 42 a2 dd 33 9c 79 52 ba b6 d9 ab 99 ff 00 83 7f ff 00 e5 2c 5f 0c ff 00 eb df 58 ff 00 d3 55 dd 7b f9 7e 5f 2c 36 4f 56 ad 4b f3 ce 2d fa 2b 68 bf 53 e7 f3 0c ca 18 9c ea 8d 2a 76 e4 84 92 d9 6a ee af fe 47 ea b7 fc 16 af f6 76 f8 7f e1 3f f8 25 ff 00 c5 8d 4b 4b f0 27 82 f4 bd 4a ca ce ca 4b 7b bb 3d 12 da de 78 1b fb 42 d5 72 8e 88 19 4e 09 1c 1e 84 8e 86 be 05 ff 00 83 66 3e 17 f8 6b e2 6f ed 43 f1 22 3f 12 f8 77 42 f1 14 76 5e 14 86 4b 64 d4 ec 22 bc 48 19 af 10 33 28 91 48 52 40 03 23 a8 af d2 cf f8 2e 57 fc a2 93 e3 17 fd 78 d9 7f e9 ca d2 bf 3c 3f e0 d6 2f f9 3a 8f 8a 5f f6 28 db ff 00 e9 6a d7 95 97 ca 4f 22 c4 3b bf 89 7f ed a7 ad 99 53 8a cf 70 ca Data Ascii: \|\~S,mB3yR,_XU{~_,6OVK-+hS*vjGv?%KK'JK{=xBrNf>koC"?wBv^Kd"H3(HR@#.Wx<?/:_(jO";Sp
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: df b0 06 9b 0b a9 d4 35 0b 89 bd 55 30 99 fc b3 fc eb d4 bc 0f fb 37 78 4f c0 7e 5b 5a e9 b0 b4 d1 8f f5 92 2e e7 cf d4 e4 d7 7a b6 ce fd b1 53 c5 a6 c8 ff 00 c3 f8 d7 d3 65 fe 16 e4 78 66 a5 3a 6e ab fe fb ba fb 95 91 e7 62 38 8b 1b 51 5b 9b 97 d0 af 0a c7 6d 16 d8 63 54 5e 98 55 c0 a7 45 0c 93 9e 6b 4e d3 c3 d2 49 d5 6b 5e c7 c3 de 58 e5 6b f4 1c 2e 06 9d 18 2a 74 62 a3 15 d1 2b 2f b9 1e 1d 4a f2 9b bc 9d d9 99 a5 e8 db b9 3c fd 6b a3 d3 74 ff 00 25 07 cb d6 a6 b4 d2 b6 6d c2 e2 b4 ad 2c 0a 8f c6 bb e1 05 13 29 48 75 8d b8 55 ad 08 a3 ca 8f a5 36 0b 7d a5 78 e9 da ad 43 1e 4f f7 7d ab 43 1b 9c 9f c4 3f 09 27 88 34 89 22 2b f7 85 7c 17 f1 c9 9f f6 3b f8 8d ad 78 8f 52 d1 64 f1 17 c2 9f 19 5c 42 7c 7d a2 40 7c bb 88 27 5d a9 06 b9 6a eb 86 8e ee 3c 28 69 Data Ascii: 5U07xO~[Z.zSexf:nb8Q[mcT^UEkNIk^Xk.*tb+/J<kt%m,)HuU6}xCO}C?'4"+\|;xRd\B\|}@\|']j<(i
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: d0 28 a2 8a d0 cc 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 fe ad 28 a2 8a fc 1c fe 8c 0c 66 8c 51 45 00 18 a3 14 51 40 06 29 36 83 4b 45 00 34 c5 c7 53 4c 31 60 fd dc d4 b4 50 05 77 83 07 a7 f8 d3 0a 30 3f e3 56 5d 33 cf 7a 63 26 ee b9 a0 08 0f 1d 68 a7 15 dd d7 ad 24 89 e9 55 70 17 60 c5 66 eb 7a 24 7a 8d b3 46 cb 95 6e a2 b5 37 51 b7 7b 62 84 dd c0 f8 c7 f6 e2 fd 8a f4 8f 8c de 07 bb d3 6f a1 65 b7 62 d7 16 d7 50 c7 ba 6d 2e e3 18 13 c6 3b 8e 81 d3 a3 af a1 00 8f 9f 7e 04 7c 59 d4 3c 7b a9 59 fc 13 f8 b5 aa 0f 0d fc 56 f0 48 f3 fc 01 e3 6d ff 00 2e a1 18 19 4b 79 1f 19 91 24 51 f2 9e 49 e9 8d c0 ab 7e 9d 6b fe 1f 8f 54 b5 92 39 17 70 60 78 af 8b ff 00 6e ff 00 d8 86 cf e2 d7 85 66 8e 17 fe cc d4 ad 43 4b a5 6a b1 af ef 34 d9 b3 bb 19 1c f9 2e c0 6f 03 91 80 Data Ascii: (((((fQEQ@)6KE4SL1`Pw0?V]3zc&h$Up`fz$zFn7Q{boebPm.;~\|Y<{YVHm.Ky$QI~kT9p`xnfCKj4.o
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: fc 88 3a 1f 7f fa 70 82 a9 f8 ff 00 fe 0a 5d f0 0f e1 5f 8e b5 3f 0c f8 97 e3 0f 81 b4 3f 10 68 b3 fd 96 fe c2 f3 54 58 e6 b4 97 82 51 c1 e8 70 47 5a b3 ff 00 04 eb ff 00 94 7e 7c 0d ff 00 b1 0b 44 ff 00 d2 08 2b f9 ec ff 00 82 b7 9f f8 d9 c7 c7 0f fb 1a 25 ff 00 d1 71 57 ca e5 39 4c 31 f8 ca 94 a7 27 14 ae f4 f5 b1 f5 b9 b6 71 53 2f c1 52 ab 08 a7 7b 2d 7d 2f d0 fe 8a be 26 7c 1e f8 4d fb 79 7c 20 b5 8f c4 7a 4f 83 fe 27 78 37 56 85 a5 b0 bd 56 8e f6 16 46 ca 99 ad 2e a2 3b a3 6e 30 24 85 d5 81 1c 10 45 7f 3c 5f f0 55 bf f8 27 f4 9f f0 4e af da aa e3 c2 76 77 97 3a a7 84 75 cb 45 d6 3c 37 7d 71 cc cd 6a ce c8 d6 f3 30 01 5a 68 64 52 a4 a8 f9 91 a2 72 01 72 ab fa 3f ff 00 06 af 78 c7 51 d4 7f 66 bf 8a 5a 04 f7 32 49 a5 e8 de 27 82 f2 ce 16 24 8b 77 b8 b5 Data Ascii: :p]_??hTXQpGZ~\|D+%qW9L1'qS/R{-}/&\|My\| zO'x7VVF.;n0$E<_U'Nvw:uE<7}qj0ZhdRrr?xQfZ2I'$w
2024-04-18 17:22:33 UTC	2823	IN	Data Raw: 3c 6b f6 84 fd 99 74 4f 8c 7e 18 b9 b1 d4 2c a2 b8 8e 65 c7 cc 39 07 d4 1e c7 9a fc ed f8 8f f0 73 c5 1f b1 47 89 6e 23 7b 49 35 ef 03 5f 39 59 51 86 ef 2c 74 c1 f4 c0 3d 6b f5 c6 5b 7f 38 9c e2 b8 9f 8a 1f 08 f4 df 1f e8 97 16 97 96 d1 4d 14 ca 43 23 a8 60 7e b5 cf 88 c2 c2 ba d7 73 8f 19 82 a7 88 85 a4 b5 3e 12 fd 99 ff 00 69 ed 43 f6 7d d3 a2 be f0 eb dc 78 ab e1 9d d3 ee ba d1 b7 86 bc d0 d8 9c b3 db e4 f0 3b 98 89 da dc 90 54 f3 5f 75 fc 3d f8 93 a1 fc 5d f0 75 ae bb e1 dd 42 df 54 d2 ef 01 68 e6 88 f4 23 ef 23 29 e5 1d 4f 05 58 02 0f 51 5f 9e 1f b4 17 ec 97 e2 6f d9 4b c5 57 1e 26 f0 42 cb 75 a3 31 dd 75 a7 1c b0 09 dc 63 ba fb 76 a8 7e 01 fc 74 be f0 ae b1 27 8b 7e 1a cf 1c 37 d2 90 da ef 85 ae a4 22 db 52 c7 52 07 f0 48 3f 86 45 00 8e 87 70 c8 3c Data Ascii: <ktO~,e9sGn#{I5_9YQ,t=k[8MC#`~s>iC}x;T_u=]uBTh##)OXQ_oKW&Bu1ucv~t'~7"RRH?Ep<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49892	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:32 UTC	660	OUT	GET /images/products/detail/206588.png HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	265	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"81012-1712567809000" Last-Modified: Mon, 08 Apr 2024 09:16:49 GMT Content-Type: image/png Content-Length: 81012 Connection: close
2024-04-18 17:22:33 UTC	7927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 5e 08 03 00 00 00 6e 09 91 6e 00 00 04 75 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 27 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 78 Data Ascii: PNGIHDRX^nnuiTXtXML:com.adobe.xmp<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x='adobe:ns:meta/'><rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Description rdf:about='' x
2024-04-18 17:22:33 UTC	257	IN	Data Raw: 11 b4 e0 f6 37 71 56 1a fe 4c c9 94 87 d2 a1 8b d6 42 d8 a1 36 e2 a0 4e 03 91 75 14 22 cb b3 97 9c 8c a4 42 29 5c 6b 37 d7 8f dd 7a f5 ea f1 e3 8f d7 7d 10 6c cc 94 d8 6c a8 6a f9 70 a9 a0 0b a4 07 d5 49 a7 c5 3c dc 8a c6 59 9b 12 00 4c 00 cb a1 c5 58 3b 48 5d 99 94 b8 a8 9e e7 86 e9 2b 9c 5b 4c 9e 7d e5 be a3 e4 90 e7 fc 39 1f 28 b7 cb e0 20 32 96 db 87 2c 90 e3 8c 51 21 fc 19 2f df 0e ff 31 7c 7f 72 f6 ed f1 14 d8 82 b5 cd 5a 7c 50 0c 3e 5f 50 ee 04 52 32 bc 3e c3 90 7a b0 2c 02 63 18 67 29 8a e3 17 f4 d0 05 ab 37 21 b0 b6 5d ed ea 08 d9 fc 6f ec 74 0b b0 10 86 76 b9 7b ee ac d1 a7 94 e0 0e 57 e3 ba d7 3f ea 75 d4 b8 8a 45 f3 23 68 50 d0 00 cb d7 47 91 1e 72 32 96 04 12 72 ff e6 e3 63 59 0e 59 d5 96 1d 3f c4 00 89 3d 0a 50 7c e9 79 99 c1 73 2f 97 a8 0e Data Ascii: 7qVLB6Nu"B)\k7z}lljpI<YLX;H]+[L}9( 2,Q!/1\|rZ\|P>_PR2>z,cg)7!]otv{W?uE#hPGr2rcYY?=P\|ys/
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 08 ac 70 38 4c 1b ad ac 85 97 c0 25 64 ad 83 04 63 05 f5 13 18 6b 43 06 9e 33 cd 34 5c 39 64 11 ce a9 0a ca 7e 90 67 71 e6 b1 bb 02 5c 61 14 1b ac 51 c7 58 c7 ef 86 c3 bf b8 76 e0 bb eb 5a 2b 01 2c f5 05 d1 87 25 ba 6a f3 69 08 1a 95 7b 60 a7 18 ec bb 3d 0e 21 10 ae 48 cf a4 8b 00 6b 1b 98 0a e9 ca e3 69 f1 0b 97 25 2e 07 2c 40 2e 7c cf ce 1e 7e 27 7d 58 1d 94 c8 0a a1 83 6d 4c eb 28 1c 18 9c 0b 41 d0 3a d4 9a 08 e9 87 fd 5a f5 e6 e2 b1 59 d7 83 41 38 7d 18 21 2b 3c 98 86 28 8b 46 13 d8 94 c6 8f 2d 3a 91 c6 38 d2 72 d6 51 d6 1c e8 18 87 95 d9 35 cc 1c 24 72 c8 9e b2 e8 70 86 6c 53 6c ee 50 66 50 c2 92 6c 3b eb a2 04 2c 73 28 03 25 64 b0 14 0e a0 e8 0f fa 97 4f 87 3f 9f 9c bd 7e 31 40 c2 02 1d c6 03 cb 9f 69 70 88 25 10 3f ad c9 cc 09 63 0a 2d 1c 1d 15 4d Data Ascii: p8L%dckC34\9d~gq\aQXvZ+,%ji{`=!Hki%.,@.\|~'}XmL(A:ZYA8}!+<(F-:8rQ5$rplSlPfPl;,s(%dO?~1@ip%?c-M
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 62 fd ab d0 ad ac ce de 7b 26 8b 6a 0e db 7e 67 26 76 eb 11 fe 96 0b 9e 1e e0 c4 be 8b 0e e8 9a c3 3a b5 81 c9 b6 ca e0 df 08 28 63 1f d7 db 5f de a2 7a 08 2d 7f fb d9 6d 34 77 10 0f 14 3c 4f 7c bd ec a0 f7 f9 f4 1e 3d aa 5e 09 50 f0 41 cb f7 e6 08 a9 05 3c 15 2e e6 f7 18 47 3b c6 c2 6a dd 53 50 6d 66 95 89 67 b7 0e 0b 3c fb 25 bb c5 07 92 74 17 86 8b 19 be c3 69 ef a2 a7 1d 43 63 17 28 58 a3 1f 7f 81 7e 8c 44 f5 55 a0 4e 3f fc eb 9f 77 2e 03 55 ff bd 76 6b c1 4d 27 37 ff e7 5f 16 0a df 8e 65 21 6f 77 bb b3 4f 9f 3e fd 7c 08 c1 6a ed 84 a7 b5 53 c8 82 78 f8 13 01 b9 76 3c 04 b4 1c 60 21 5a 1e f7 ea 9c de be 5e 2c b9 a0 f4 ab 64 9e 6d 35 36 61 7a e8 48 95 06 0b 82 21 f9 84 06 66 52 80 54 3a 12 89 a4 23 3d 48 d4 b9 f3 ed 77 e9 ca f0 fb 3b e9 30 3c c0 d6 58 Data Ascii: b{&j~g&v:(c_z-m4w<O\|=^PA<.G;jSPmfg<%tiCc(X~DUN?w.UvkM'7_e!owO>\|jSxv<`!Z^,dm56azH!fRT:#=Hw;0<X
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 5d 4e d7 d7 d0 6e 27 92 5c 01 83 d5 e9 f3 75 11 58 a3 f5 5d b4 70 a7 56 8a 48 52 de c1 91 cc e2 d6 15 a1 f4 47 ce 50 af 24 e7 63 e1 51 1e b7 3f ab 66 ee 3b 3a 9c 6b 76 3a 0c 83 55 77 51 7a 42 2d 2e 23 17 a8 32 58 e4 08 1b cc 55 39 62 a0 fe aa e2 ca 83 1b bd a6 a7 cf 00 59 86 3b 4c 25 96 93 3e 1f 7b 41 55 cd ea 4c 66 97 16 79 04 93 92 58 73 19 0c b0 88 2b d9 de 4e 9e 90 a6 a3 0e 98 c0 69 89 65 c6 83 e3 8b b1 00 c6 ec e7 b4 23 54 c9 ee c2 f6 de af 7f f3 e7 55 cb f2 fb 2d cb 7e 8e 60 3d 2f 33 58 ca 6c 49 b0 c4 05 c4 a0 d1 82 50 eb 81 a3 c2 f3 f1 03 0d 56 85 c5 d2 df 4f fb c4 e1 61 0c ab 86 fa ec 0c 66 da 23 84 96 df 65 b9 03 76 69 73 01 03 af 48 6e 2d 16 28 9f 42 ec 51 83 62 28 c4 e4 bd 59 58 64 ac 42 c1 5c e1 66 5b ab b7 ea d2 07 d7 db e2 c5 b5 70 46 ac a7 Data Ascii: ]Nn'\uX]pVHRGP$cQ?f;:kv:UwQzB-.#2XU9bY;L%>{AULfyXs+Nie#TU-~`=/3XlIPVOaf#evisHn-(BQb(YXdB\f[pF
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: c3 f5 20 8a 0f e2 74 4b cc bd 20 fb 4c f9 6b e5 e8 09 b3 80 75 20 89 41 56 e2 dd c4 c5 2f 1e 04 d1 68 11 5e 10 66 d9 23 c7 12 89 5f b0 3f 73 e8 62 6b c4 3e 35 35 69 40 2a a5 87 ef a2 b6 d5 82 e1 5e 1b c3 0a 7e c1 9d 40 5d 5a b7 61 9d 06 56 b5 dc 2a 3d 98 33 48 41 00 06 57 a0 d5 96 4b aa 8c 60 b1 28 8b b8 62 61 46 e9 3c 94 07 7f b3 b0 bc 70 fa f4 d3 af 6f b4 ff 8f b2 b3 8b 89 f2 cc e2 78 61 45 12 dc 22 a2 d0 81 b4 1a 29 a3 44 11 3a f1 83 a0 10 f0 63 6c e3 44 27 ae 01 36 d9 42 05 b1 41 3e 55 50 99 41 81 90 66 e3 a4 46 c3 c5 66 83 e9 0c 21 5c 0c e8 45 37 16 c8 90 72 b1 88 98 18 0a 01 83 26 b2 17 70 b1 e5 0a 83 9b 48 43 08 84 3d 1f cf f3 bc cf 3b 33 b8 dd 17 06 92 26 12 0a 3f fe e7 3c e7 39 e7 7f 2e ca 13 fb b9 f3 17 21 ba a4 c4 92 6b a7 04 0b bd 23 4f 73 f2 Data Ascii: tK Lku AV/h^f#_?sbk>55i@^~@]ZaV=3HAWK`(baF<poxaE")D:clD'6BA>UPAfFf!\E7r&pHC=;3&?<9.!k#Os
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 08 f4 08 d2 5d e1 4e 31 88 94 04 4b 51 2c 23 58 fb 4a 8a ad c0 c2 cd 01 d4 61 6f 09 d6 41 13 58 7b f5 60 a1 62 9d 22 c5 52 c0 aa e7 a1 90 df 14 e6 39 d5 f1 45 56 60 e1 3f c2 61 1c db c0 d8 ea c1 d6 1c b7 50 ac 66 4b b0 28 16 0a eb d2 10 0a e7 44 24 bc ff 7c 66 4a b9 d2 e1 7a e5 37 41 25 cc 78 0d ac 9b 11 35 16 76 74 c8 60 68 a1 58 3a b0 9a b9 61 aa 2e c9 84 d6 42 ca d9 61 5e 21 cc f6 f3 f9 70 12 69 8d 9c cc 9d 47 db 15 9c 2a 58 39 9c 2c c0 2a 90 93 13 84 db c2 e8 22 82 35 1f 72 9d b2 03 d6 5b d6 8a 55 a0 53 2c 2d 14 4a c5 2a da 52 b1 4a 54 b0 4a 04 58 30 c1 28 0b 60 95 ef 37 2a 56 65 40 24 ef 37 ba e0 f0 9c 42 b1 70 25 21 8c fb 61 19 ee d0 00 cd 89 85 29 c4 36 14 4b 09 85 ab 2a 58 2b 8f e7 1f af dd 35 de 15 a6 af 58 3a b0 3a 74 60 55 6c 0e 16 ec 90 be 3e Data Ascii: ]N1KQ,#XJaoAX{`b"R9EV`?aPfK(D$\|fJz7A%x5vt`hX:a.Ba^!piGX9,"5r[US,-JRJTJX0(`7Ve@$7Bp%!a)6K*X+5X::t`Ul>
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: c1 d7 97 98 2b e8 ec 6c 85 af 38 2a 56 14 8b 4f 5c 4b 78 0a 52 85 f5 f5 26 3e da c3 97 c2 93 27 cd 3c 10 04 ab 83 a6 36 b4 61 78 94 3c 77 79 29 94 3e 56 6f 8b 09 92 62 20 0b 8d 61 50 8f 6f 00 b0 a8 88 5e 83 55 57 d7 3d 84 bb a1 bb a1 91 63 62 6d 73 63 e3 ad fa 3d bf 5c 64 b0 e8 62 48 9d 3a 20 5a 18 6e 40 b0 92 1a 2c 1e 69 a4 8e c8 eb e0 77 2e 37 15 82 fe 8a c1 29 ec d7 29 14 56 96 a6 53 a9 8c 72 ae 0a 69 de d4 97 2e 3e 46 ae 36 de 3e da cd 66 39 fc 80 bf 96 6c 15 58 3a f2 a0 73 3b ec c5 9b f6 0a 0f 32 85 ab 25 86 aa 94 97 44 b1 86 e5 53 b2 6c 0f fe 76 c6 6d ed d2 3a 85 82 c5 55 0c 11 2f e2 c7 2a 2e 47 24 c7 45 dd a8 38 30 5c 26 bb bc 72 eb 4f bf c9 c2 a4 c8 05 5c 9e 03 b7 e2 1a b1 8e 82 ee 84 2e 58 fc bd a4 0f 52 dd 09 3f fb cf cd 7b f0 78 7a 1b 2e 85 c9 Data Ascii: +l8VO\KxR&>'<6ax<wy)>Vob aPo^UW=cbmsc=\dbH: Zn@,iw.7))VSri.>F6>f9lX:s;2%DSlvm:U/.G$E80\&rO\.XR?{xz.
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 73 9d 63 6d 9f ad ab 1b 39 9e 41 55 64 60 62 2b 96 11 57 dd 65 da 35 2c 2d 7c cf c8 fb 31 61 c9 50 c8 5b 60 7d 08 85 00 56 15 33 16 45 c1 2b 18 a5 59 a5 71 f8 32 76 f7 38 d7 98 f8 ea e5 e6 e6 ad 3f a8 6b 73 37 1e 40 92 d5 7a 2c 1e 8f af ce 2f 49 93 b0 d9 e9 95 40 80 d6 5d 24 b0 98 30 f0 d2 fa a9 12 61 bc b6 0e 61 9b 43 af 83 0f f8 f3 17 62 0c c3 31 2b 49 1c 46 f3 dc 4b 9f 63 96 2f 1b 58 1a 57 b6 9d 09 c5 c3 c4 ea 7c 84 33 ad 41 6c e6 00 58 e7 64 11 eb a8 dc f7 d2 c0 22 ba 12 ef c6 06 0e 85 00 d6 27 3b 3f ff c0 71 50 44 c2 3b f2 4c 28 80 a5 0c 4e c4 81 ca d5 69 01 0b 3d 68 a8 70 90 64 71 d1 45 7b 37 27 9f 75 92 4f cb ee b3 d6 c4 2a d1 84 95 9b bc db a5 77 07 b0 78 dc 4f 21 ab 40 4b 65 49 ad db 6e 36 5c 15 3f 32 b3 b8 b1 21 80 b5 fd 52 03 6b ed 2c 46 7a b6 Data Ascii: scm9AUd`b+We5,-\|1aP[`}V3E+Yq2v8?ks7@z,/I@]$0aaCb1+IFKc/XW\|3AlXd"';?qPD;L(Ni=hpdqE{7'uO*wxO!@KeIn6\?2!Rk,Fz
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 7a 6a 94 ea ec 57 71 c9 50 ab 66 c9 3f 40 97 a6 dd e6 d1 64 48 0b 6f 6d 3d 5b 5b 5b 79 be e0 55 96 0f dd 5e e3 6a 43 25 c5 f2 cd cd 2a b8 20 a6 f7 df 60 f3 fb 71 da 54 78 41 84 55 73 d6 47 ca a7 59 19 c0 ca f0 84 0f 77 76 d0 17 0e 18 5b a7 10 ab 37 7b 62 40 52 28 71 75 41 68 c6 f0 3d 67 56 e8 b3 cb f8 ca 4a 56 8c 2c 02 16 b8 42 53 9f c8 d0 55 e3 35 7a 97 a2 b3 59 ef 0d f7 11 5b f5 c2 8b 6f 5a af 27 f2 af 19 d6 42 0b 7f 7d 9c 4c fe e6 87 e4 fc 83 04 9d 09 01 64 95 87 02 a3 b2 f2 70 f3 8b 99 10 d6 47 2b 04 ae b8 93 63 12 16 a9 37 7e ca 33 78 c6 e2 f3 a1 4c cd 22 f2 85 86 b4 0c 03 0b 71 d5 03 66 43 58 11 b2 ac 65 52 9b e9 0c 8f 48 53 c4 d8 98 b4 72 72 52 e9 cd f5 bb 2f d2 89 34 e3 49 bc c4 e3 7b a9 8a fc 4e 74 83 a4 07 c0 d0 ea 96 f0 fa e4 9c 34 31 f2 00 1f Data Ascii: zjWqPf?@dHom=[[[yU^jC%* `qTxAUsGYwv[7{b@R(quAh=gVJV,BSU5zY[oZ'B}LdpG+c7~3xL"qfCXeRHSrrR/4I{Nt41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49894	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	675	OUT	GET /images/speakers/52087/Racquel%20Harris_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"24721-1666874029000" Last-Modified: Thu, 27 Oct 2022 12:33:49 GMT Content-Type: image/jpeg Content-Length: 24721 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 0a ab 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 31 30 3a 32 37 20 31 38 3a 30 31 3a 35 33 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2022:10:27 18:01:53Zp
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 32 2d 31 30 2d 32 37 54 31 38 3a 30 31 3a 35 33 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 32 2d 31 30 2d 32 37 54 31 38 3a 30 31 3a 35 33 2b 30 Data Ascii: p/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2022-10-27T18:01:53+05:30" xmp:MetadataDate="2022-10-27T18:01:53+0
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 32 2d 31 30 2d 32 37 54 31 38 3a 30 31 3a 35 33 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 45 35 39 41 37 33 31 45 41 35 35 45 44 31 31 38 35 46 33 39 45 33 39 32 45 32 30 36 34 30 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 44 35 39 41 37 33 31 45 41 35 35 45 44 31 31 38 35 46 33 39 45 33 39 32 45 32 30 36 34 30 31 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 44 35 39 41 37 33 31 45 41 35 35 45 44 31 31 38 35 46 33 39 45 33 39 32 45 32 30 36 34 30 31 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 Data Ascii: 0" xmp:ModifyDate="2022-10-27T18:01:53+05:30" xmpMM:InstanceID="xmp.iid:9E59A731EA55ED1185F39E392E206401" xmpMM:DocumentID="xmp.did:9D59A731EA55ED1185F39E392E206401" xmpMM:OriginalDocumentID="xmp.did:9D59A731EA55ED1185F39E392E206401" photoshop:ColorMode="
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 07 d6 3d 77 62 d6 5c d7 35 6d b3 4f fd 26 f7 ad 9e eb d0 c2 e6 03 9f 71 34 e7 cb 18 3e 57 f6 c9 ec 3b 8f 7b 3b 57 b5 cf d9 fb d3 af 2f fb 16 55 b6 a5 52 ef 61 75 37 5d fa bd a1 75 66 87 07 5e 5e a9 ef af 4e 37 2a 5f 5d 3d ba aa b9 83 73 5a 12 78 c0 91 ca fc 9c 88 ea 11 7b b5 32 f2 7f bc 5d 74 c4 30 f6 3f a0 7b cb 52 bc d0 fa bb b1 43 5d a8 67 b1 22 ef f3 3d b4 5d 9a 97 da fd 92 e9 fb 08 ff 00 a6 2f 66 3b 23 b5 b5 44 94 bc b5 2d 39 f9 89 8c cc 69 85 fd d9 75 4e 85 06 e6 bd 2c 5f b4 d7 b4 fd 8f a1 b7 ff 00 5e 7a 6b 73 d6 b7 8d ff 00 57 a1 f5 df 47 f7 87 b2 74 5e d8 f6 25 9a f8 3f 8f f5 0a ae ff 00 f5 ef ca e3 1b 93 ce 7e 75 cd e7 5e 99 ba 69 5e ee 68 9e d2 e8 57 fe 93 fa 83 b7 ef 37 5d 9b d4 54 7d ed 52 e7 ac 7e cc 75 85 8d 97 43 6e 4f 58 7b 4f eb 5d c7 45 Data Ascii: =wb\5mO&q4>W;{;W/URau7]uf^^N7*_]=sZx{2]t0?{RC]g"=]/f;#D-9iuN,_^zksWGt^%?~u^i^hW7]T}R~uCnOX{O]E
2024-04-18 17:22:33 UTC	169	IN	Data Raw: de 45 e3 fa 7b 67 80 c7 62 b3 96 00 8a 59 d9 f9 b6 3e 8e 5e da c1 e7 25 05 5a de 4a bd 8b 43 a4 9c cf 61 14 88 c4 ce 91 c0 65 37 56 e7 cd 59 88 69 ae 5a 59 13 45 70 95 f4 00 a9 56 6b d5 50 c4 4e b0 30 1a 71 84 da 3b 8f 30 87 58 dc 56 55 8c c3 65 6e 25 26 71 9a d2 e3 31 98 0b 57 24 96 4d 0b 6b 5b 22 a9 11 41 fa 82 84 c4 f7 ba 0a 6c 04 18 ad 04 b0 19 69 80 dc 16 1a 98 bb 0a 25 56 61 08 a9 48 98 13 00 89 15 04 8c f8 e1 0a 05 1b 3f fb 1e 2f f7 8e ff 00 c7 ff 00 c3 ff 00 79 f8 3f 07 fd 0f db 7f 5b 8f ff d9 Data Ascii: E{gbY>^%ZJCae7VYiZYEpVkPN0q;0XVUen%&q1W$Mk["Ali%VaH?/y?[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49893	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	911	OUT	GET /images/products/detail/206118.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"35878-1704281423000" Last-Modified: Wed, 03 Jan 2024 11:30:23 GMT Content-Type: image/jpeg Content-Length: 35878 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 16 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 92 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 Data Ascii: JFIF``ExifMM*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19
2024-04-18 17:22:33 UTC	258	IN	Data Raw: fc 53 f5 3d ac 46 d1 f4 0d c7 fb bf ad 1b 8f f7 7f 5a 30 de a2 8c 37 a8 ae e3 94 6c 87 25 78 c7 22 bc af e2 9f 3e 2c b8 ff 00 71 3f 95 7a a4 99 ca e7 d4 57 95 fc 53 3f f1 56 5c 7f b8 9f ca bc fc cf f8 3f 35 fa 9d 78 2f e2 7c 8f 48 f0 d1 23 40 b3 e3 fe 59 2f f2 ab db 8f f7 7f 5a a3 e1 ad df d8 16 78 ff 00 9e 4b fc aa f6 1b d4 57 65 1f 81 7a 1c cf 70 dc 7f bb fa d1 b8 ff 00 77 f5 a3 0d ea 28 c3 7a 8a d0 97 b1 cc fc 53 3f f1 48 7f db 64 fe 75 cc 78 33 fe 41 6d fe f9 ae 9f e2 9e 7f e1 10 ff 00 b6 c9 fc eb 98 f0 67 fc 82 db fd f3 5e 26 3f f8 bf 23 d9 cb ff 00 86 fd 4d 7a 6e 7f fd 54 ea 08 cd 71 1d e3 4a 82 79 5a 6b 47 bd 7a 71 52 05 c5 26 d1 40 89 6d 35 2b 8b 02 3c 99 99 3d 81 e3 f2 ad 8d 3f e2 14 b1 3a ad c4 6b 37 fb 48 30 df 95 61 15 c9 a5 c5 74 d2 c5 d5 a7 Data Ascii: S=FZ07l%x">,q?zWS?V\?5x/\|H#@Y/ZxKWezpw(zS?Hdux3Amg^&?#MznTqJyZkGzqR&@m5+<=?:k7H0at
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: ae 12 95 4f 89 1d 65 ef 88 6d 75 58 2d fc b9 7e 75 b9 88 95 3f 29 1f 37 bd 6f 2f 20 7a 57 96 de 1d a8 87 a1 f3 17 f9 8a d8 d3 3c 55 79 a7 1d bb fc e8 ff 00 ba fd be 87 ad 7a b8 6c d9 5e d5 be f4 79 35 f2 97 bd 26 77 5f e1 59 be 16 39 d3 bf ed b4 9f fa 11 a6 e9 3e 27 b6 d5 d5 42 37 97 29 ea 8c 70 7f 0f 5a 93 c3 47 fe 25 ff 00 f6 da 4f fd 08 d7 af 1a 91 9b 52 8b ba 3c c7 09 41 38 c9 6a 69 51 45 15 b9 88 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 01 f9 d7 ff 00 07 33 7f ca 3a 74 bf fb 1d 34 ef fd 27 bb ae fb fe 0d f5 ff 00 94 5a f8 07 fe bf 35 5f fd 2f 9e b8 1f f8 39 9b fe 51 d3 a5 ff 00 d8 e9 a7 7f e9 3d dd 77 df f0 6f af fc a2 d7 c0 3f f5 f9 aa ff 00 e9 7c f5 e9 7f cc 0f fd bd fa 1f 1f 4f fe 4a 59 ff 00 d7 a5 ff 00 a5 1f 6b 51 45 15 e6 9f 60 15 f1 5f fc Data Ascii: OemuX-~u?)7o/ zW<Uyzl^y5&w_Y9>'B7)pZG%OR<A8jiQEQEQEQEQE3:t4'Z5_/9Q=wo?\|OJYkQE`_
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 17 c5 1b f8 af 96 f5 3f f8 28 c4 d6 3f b7 cc 7f 04 3f e1 10 dc ad 7b 15 a1 d6 8e a5 83 f3 d8 2d e6 7c 8f 2b 1c 06 09 fe b3 de be 86 f1 ef 8d e1 f8 7f e0 7d 5f 5e ba 8e 69 ad 74 5b 39 6f a6 8a 10 3c d9 12 34 2e c1 43 10 37 10 0f 04 81 ef 4e b6 16 ad 27 15 35 f1 24 d7 9a 7b 19 e5 f9 f6 07 1b 1a d2 c3 4e ea 8c 9c 27 a3 5c b2 8a bb 5a ad 6d e5 74 6f 6f e2 93 cc 39 e9 5f 0d cb ff 00 05 e8 f8 5b 6f b7 cc f0 af c4 08 d9 86 40 68 6c 06 7f f2 6a bd ef f6 55 fd ba fc 0f fb 60 d9 dd 0f 0b cf 7f 6b a9 69 f1 ac 97 3a 6e a1 00 8a ea 14 6e 03 fc ac c8 eb 9e 37 2b 11 9e 2b 6a d9 66 2a 94 79 ea 41 a5 dc f3 72 de 36 c8 b3 0a eb 0d 83 c4 c6 53 7b 24 f5 76 de d7 df e4 7b 50 93 da 92 51 e6 47 8a 8b cd 2a bf fd 6a 3c d6 3d 3f 51 5c 56 3e aa e8 f9 eb f6 c2 ff 00 82 4c 7e ce bf Data Ascii: ?(??{-\|+}_^it[9o<4.C7N'5${N'\Zmtoo9_[o@hljU`ki:nn7++jfyAr6S{$v{PQGj<=?Q\V>L~
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 5c 95 1f 95 74 63 33 ec 54 2b ca 11 b5 93 6b 63 3c 26 4b 42 74 63 36 e5 aa 5d 59 f3 1f fc 30 ff 00 89 3f e8 31 a4 fe 52 7f 85 3a 2f d8 6b c4 b3 c9 e5 ff 00 6c 69 2a 5c ed e9 27 7f c2 be 9c d8 3f ba 3f 2a d7 f0 46 93 f6 dd 4f ce 64 fd d4 3c e7 df d3 f0 a9 c3 e7 98 ca b3 51 56 fb 8a c4 64 f8 5a 70 73 77 fb ce 83 c2 7e 1d 87 c3 1e 1b d3 b4 cb 7f 96 df 4d b5 8e d6 31 fe ca 28 51 fc ab 33 c7 7f 05 bc 2f f1 2e 16 fe dc d1 ac 6f 64 6e 04 c5 36 4c 3e 8e b8 6f d6 ba 85 5c 1a 4e 6b d8 eb 74 79 3d 0f 95 3e 30 fe c0 9a 7e 98 b1 dc 78 5f 58 bc b6 69 64 c3 db ea 0d e6 a2 ae 09 ca ba 8d c3 1c 0c 10 73 9e b5 c0 9f d8 87 c4 8d cf f6 b6 93 cf aa c9 fe 15 f5 c7 8f af 16 e3 52 8e 15 6f f5 2a 49 fa 9c 7f 80 ac 4e a7 ee f1 ef 5e 4e 2b 3c c4 53 a8 e1 06 ac bc 8f 5b 0b 93 d2 a9 Data Ascii: \tc3T+kc<&KBtc6]Y0?1R:/kli\'??FOd<QVdZpsw~M1(Q3/.odn6L>o\Nkty=>0~x_XidsRo*IN^N+<S[
2024-04-18 17:22:33 UTC	3134	IN	Data Raw: fa d9 1f fa 06 ab ff 00 80 7f c1 3f 6d bc c1 ef f9 51 e6 0f 7f ca bf 12 7f e1 72 7f c1 51 bf e8 1f e3 6f fc 26 b4 7f fe 33 47 fc 2e 4f f8 2a 37 fd 03 fc 6d ff 00 84 d6 8f ff 00 c6 68 fa 83 fe 78 fd e1 fe b6 47 fe 81 aa ff 00 e0 1f f0 4f db 6f 30 7b fe 54 79 83 df f2 af c4 9f f8 5c 9f f0 54 6f fa 07 f8 db ff 00 09 ad 1f ff 00 8c d1 ff 00 0b 93 fe 0a 8d ff 00 40 ff 00 1b 7f e1 35 a3 ff 00 f1 9a 3e a0 ff 00 9e 3f 78 7f ad 91 ff 00 a0 6a bf f8 07 fc 13 f6 db cc 1e ff 00 95 1e 60 f7 fc ab f1 27 fe 17 27 fc 15 1b fe 81 fe 36 ff 00 c2 6b 47 ff 00 e3 34 7f c2 e4 ff 00 82 a3 7f d0 3f c6 df f8 4d 68 ff 00 fc 66 8f a8 3f e7 8f de 1f eb 64 7f e8 1a af fe 01 ff 00 04 fd b6 f3 07 bf e5 47 98 3d ff 00 2a fc 49 ff 00 85 c9 ff 00 05 46 ff 00 a0 7f 8d bf f0 9a d1 ff 00 f8 Data Ascii: ?mQrQo&3G.O7mhxGOo0{Ty\To@5>?xj`''6kG4?Mhf?dG=IF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49895	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	911	OUT	GET /images/products/detail/205915.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/live-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"65098-1704281482000" Last-Modified: Wed, 03 Jan 2024 11:31:22 GMT Content-Type: image/jpeg Content-Length: 65098 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 16 94 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0f 42 40 00 00 27 10 00 0f 42 40 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 33 3a 30 38 20 31 36 3a 34 36 3a 32 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 57 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2iB@'B@'Adobe Photoshop CS6 (Windows)2022:03:08 16:46:22XW
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 05 38 42 49 4d 04 0c 00 00 00 00 15 7a 00 00 00 01 00 00 00 a0 00 00 00 5b 00 00 01 e0 00 00 aa a0 00 00 15 5e 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: utsetlong8BIM(?8BIM8BIM8BIMz[^Adobe_CMAdobed
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 5b 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 Data Ascii: ["?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 83 67 ee f0 9a 15 76 a2 3d 9a d4 07 42 55 87 64 c6 30 a4 7a f8 98 83 1a bb 5a b0 17 b2 05 65 65 65 65 65 65 07 2c a0 50 2b b8 27 48 02 37 5a 15 8b 8e ec 6c 32 28 6b 34 89 29 82 a5 d6 ca 56 b5 96 a2 42 49 13 49 21 65 05 ec b2 17 73 51 92 35 f2 46 8c f1 85 f9 6c 08 de 6e 3f 30 94 2e 39 7e 5b 97 e5 48 bf 21 e5 09 5c 8c a8 ca 11 95 09 0a 12 14 e7 3c ac 3d 08 de 84 0e 46 ab 8a 6d 37 21 48 af c2 4d a6 d4 2a b5 7e 2b 50 ac 11 ac 15 e6 f6 be 73 fb 9e 32 9a d5 59 61 0e af fb 4e 55 70 1c 27 fb fe 52 16 82 fc 94 2d 2f c9 28 4e e4 27 79 42 49 0a 06 44 04 88 47 22 6c 4f 5f 1b 97 c6 e4 18 8b 42 fd ab 2d 5f 23 17 ca d4 6c 35 1b 08 58 2b f2 1c 84 ce 46 57 a3 2b d7 71 5f 21 0b e4 46 46 a0 f6 95 f2 35 09 82 f9 8a 0e 72 cb 90 12 14 1a e4 23 76 44 44 af 80 e7 f1 94 75 83 97 Data Ascii: gv=BUd0zZeeeeee,P+'H7Zl2(k4)VBII!esQ5Fln?0.9~[H!\<=Fm7!HM*~+Ps2YaNUp'R-/(N'yBIDG"lO_B-_#l5X+FW+q_!FF5r#vDDu
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 68 c1 4d 4d 29 d2 18 e9 cf 21 79 67 4a cd 4f 25 d2 40 3d d8 d2 63 cf 6b 98 43 85 c8 fd 88 21 d5 24 c3 ab c9 96 6e ec f7 48 c9 03 55 4d 84 71 ba 16 6a 2e c7 53 8c 42 2c 36 ad 94 c7 3b 0f 9b d8 94 4a 25 65 65 12 8b 91 3e 99 e6 6c 51 5a b0 e9 e5 5f 74 18 70 50 21 77 35 47 18 72 75 6c a7 46 f1 f4 32 b3 eb 67 df b9 30 9e ef 18 ea 4e cf 97 d4 ae da fa 9d f6 a6 57 ec 7f b0 5b 5a 50 6b f8 f4 1b 5b 56 b8 0e c3 90 41 4f ca be 11 ab 24 fb 0e 19 ca 75 e6 4a b6 e3 20 90 98 32 88 c1 b4 e1 f8 07 ee d4 cf 74 7f 64 2d 07 30 0f dd 0b 33 1d 96 10 a1 93 06 7c 39 ae 6e 64 63 70 e8 66 2d 8a cc 86 49 bf d5 46 f7 30 d7 db 5d 84 ea f9 0d a7 98 2c b5 d1 c9 2a 25 17 22 56 56 4a ca 2b 2b 2b 2b 2b 2b 75 60 e0 75 24 f5 01 42 00 1d e3 3f 11 21 f0 30 27 44 11 6b 82 c7 d4 8f 18 50 b3 2e Data Ascii: hMM)!ygJO%@=ckC!$nHUMqj.SB,6;J%ee>lQZ_tpP!w5GrulF2g0NW[ZPk[VAO$uJ 2td-03\|9ndcpf-IF0],*%"VVJ++++++u`u$B?!0'DkP.
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: f5 12 4a 79 0d 44 cd 24 8f e4 13 69 ed 5f 22 d8 af 8e 36 93 65 af 00 ea 48 cb e1 14 4d 57 29 77 48 d1 c0 36 57 f1 9a 69 55 46 1f c7 aa 6e d0 72 96 8f e3 4f 9e 99 ea a3 78 1c 10 41 04 70 70 42 90 a7 6a 9d aa 76 9d a4 14 c1 90 7c 39 0f af 04 10 41 04 10 46 32 49 24 92 49 38 ed b1 37 5c 56 a5 64 db 7a 6c b8 aa 21 04 10 41 04 10 41 03 8a a8 8e 55 51 c8 19 2a 76 a9 d7 f8 d6 a7 fe 6a 57 69 08 42 10 84 21 08 72 c5 88 20 8c 64 92 78 08 23 80 72 2e f7 0b b2 db aa 42 9d 5b 8e 9a 9d ae 6d b9 37 5a 76 e5 92 49 1d 49 c2 08 20 8c 64 75 24 9c 63 4a 08 23 0a 26 a5 31 82 08 20 83 b4 82 32 c9 24 92 4e 10 a3 21 04 63 24 92 49 27 31 90 82 08 cb 38 4e 48 e0 17 4e 99 20 82 08 23 24 92 49 24 e3 04 10 40 c8 46 59 1f 42 49 42 48 3b 48 d0 aa 9d 30 6d bc 6d 25 2a 99 db 55 b2 ce 58 Data Ascii: JyD$i_"6eHMW)wH6WiUFnrOxAppBjv\|9AF2I$I87\Vdzl!AAUQvjWiB!r dx#r.B[m7ZvII du$cJ#&1 2$N!c$I'18NHN #$I$@FYBIBH;H0mm%UX
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 06 78 34 57 95 e4 6d d7 22 df 76 a5 a6 23 57 30 38 c5 07 b1 6d cb f6 da 53 20 c7 0d 22 45 42 58 dc be 27 c4 18 4e 27 b6 b5 0d bb 2a ce 01 ae 20 e1 d9 aa 82 5e 16 57 3c d8 92 3e 20 d5 cf b9 b4 9d ea a5 a0 7a e2 83 3e f4 92 32 84 00 47 ad 8d 05 37 ee bf 74 a8 1f 20 ab e8 a7 96 db 32 8e 39 12 2a c5 b6 bc 1a ea db bd f7 6b a8 30 1c 98 c1 50 26 b2 52 71 23 5b 09 cc f7 ad 29 e5 55 e6 92 26 32 9e c6 a2 a8 c1 80 d3 92 02 4c b1 9f 65 68 02 d7 55 a0 4a c6 9e de c6 a4 02 db 33 13 0a 08 12 49 60 00 9d 33 9f 7d 58 e8 bb 28 7e b7 bb 51 73 74 f3 05 67 32 7f ba b5 f8 6b 96 76 1f 87 61 0f 6d 94 10 c3 8c 89 e6 9e fa b3 f9 db f2 f1 1b 6e 97 b8 bc 06 eb 6b b6 91 62 d5 c6 33 00 64 a9 73 d9 fa d5 b4 fc c7 b4 b7 f7 7d 4d 43 5e b6 b9 25 f5 8f 30 7e f7 8a 86 94 d3 11 89 82 4f c6 Data Ascii: x4Wm"v#W08mS "EBX'N'* ^W<> z>2G7t 29*k0P&Rq#[)U&2LehUJ3I`3}X(~Qstg2kvamnkb3ds}MC^%0~O
2024-04-18 17:22:33 UTC	7810	IN	Data Raw: 70 c0 66 24 b1 99 27 d3 c6 83 05 c6 4a 91 86 99 12 70 26 93 5b 8b 62 e0 60 aa 64 e4 63 0d 39 57 9a 09 70 ab a9 75 09 51 18 f3 34 92 33 c3 0f ee d7 99 70 29 7d 4a 14 02 48 71 3e 13 a7 2f 8e 99 ed 59 46 0d e1 b6 ca 90 64 10 04 81 38 16 ab ec 6f 22 eb 10 55 da 4e 2b 86 64 4f ef 2d 4d ed e1 67 19 69 2d 20 63 00 0e 51 c7 81 ae 43 31 89 67 68 98 ed ff 00 e3 ad 0a eb a4 4c 04 12 4f c7 ab fb d4 74 1b 8f 3e f1 80 3d 52 d4 55 5b 40 39 85 93 f3 c8 af bc 7b 8c 9c 44 98 13 dc 30 ae 6c 0f 10 68 4a ea 3d 90 3e 93 41 42 29 68 98 21 7f 6d 5b b5 e7 3e d6 fd 96 5b 96 37 56 a1 5e d5 dc d5 d4 ae 3c a6 38 d6 eb 78 2d a5 9f cf 5d 26 d8 3d 6f 66 8a 34 ef ac 00 23 7f b7 11 8b 15 83 7d 40 e6 fe a5 1d 52 27 d9 83 13 4a 59 ad 96 79 90 6d 89 91 db 35 2a 80 ae 13 20 4f cf 95 1d 4a 88 Data Ascii: pf$'Jp&[b`dc9WpuQ43p)}JHq>/YFd8o"UN+dO-Mgi- cQC1ghLOt>=RU[@9{D0lhJ=>AB)h!m[>[7V^<8x-]&=of4#}@R'JYym5* OJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49896	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	680	OUT	GET /images/speakers/61837/Jared%20Garrett%20-%20Large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"7243-1703566737000" Last-Modified: Tue, 26 Dec 2023 04:58:57 GMT Content-Type: image/jpeg Content-Length: 7243 Connection: close
2024-04-18 17:22:33 UTC	7243	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 72 00 72 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CCrr"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49897	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	675	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/c/1713460952569 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=jt80erKDH+qJtp9rPrgEXg9nJOrC6K3HYKStbq+kSl+4lr2M0sH5HhgWsVnD4sTkPh6kIJTXhJRD8GCDrSlmppzmPXB5Mgt9fPmVH1wkdgZrCxnd68wWWpsvtA9t
2024-04-18 17:22:33 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:33 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=cKd77/rrhSUB3VXYGzhWh0/SSD0i+tTjbygJpUJ/VqfO7WHt0+j14AkM+Ol/TaPqQnz4P0x08ZAz1mG+4FHT3VFHJtZcVONTwPsEuCG7RW+qxB49EXQOa7fp1QeH; Expires=Thu, 25 Apr 2024 17:22:33 GMT; Path=/ Set-Cookie: AWSALBCORS=cKd77/rrhSUB3VXYGzhWh0/SSD0i+tTjbygJpUJ/VqfO7WHt0+j14AkM+Ol/TaPqQnz4P0x08ZAz1mG+4FHT3VFHJtZcVONTwPsEuCG7RW+qxB49EXQOa7fp1QeH; Expires=Thu, 25 Apr 2024 17:22:33 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:33 UTC	73	IN	Data Raw: 34 33 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 35 33 35 35 31 5c 6e 39 38 32 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 43$Loader && ($Loader.payload = "1713460953551\n982\n1\n0\nn\n15000")
2024-04-18 17:22:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49898	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:33 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:22:33 UTC	764	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:33 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876656707b7f7be2-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CktbbrpFQoBH1CZ8W8nowMDMVodjIXarWB%2BtVsVBJBwqiaEmgmi0GMJsrOYr6VDDGHqELp%2BCG3JKOjSlKq%2B9azZ2FQlFt7pZitnfJg0BAf69pdYrMS9Fi2SrNeLB79k6YBSsYXOsDTMiCA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=e6faade57c2fa36bcbf80aa9ee27d50ff3c4778b-1713460953; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876656707b7f7be2-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49899	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	665	OUT	GET /images/speakers/38472/Mathew_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"4790-1583850871000" Last-Modified: Tue, 10 Mar 2020 14:34:31 GMT Content-Type: image/jpeg Content-Length: 4790 Connection: close
2024-04-18 17:22:33 UTC	4790	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49901	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	674	OUT	GET /images/speakers/62480/Kenneth%20user_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"29360-1705580268000" Last-Modified: Thu, 18 Jan 2024 12:17:48 GMT Content-Type: image/jpeg Content-Length: 29360 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 0d 94 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 00 90 00 00 01 01 00 03 00 00 00 01 00 d8 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 31 3a 31 38 20 31 37 3a 34 37 3a 33 36 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*(12i ''Adobe Photoshop CS6 (Windows)2024:01:18 17:47:360
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 6f 56 f5 31 c1 a7 da 5e 04 77 5a 38 b9 54 5d 4b 46 2d 82 df 49 a0 3c 03 ee 9f de 73 3e 93 52 53 7b ab 65 7a 3d 37 26 d3 1a 56 60 9f 13 ed 5c e7 d4 ee a0 68 cc 76 23 8f b6 f1 2d fe bb 7f f2 48 ff 00 59 33 da 7a 69 c7 69 97 3d ed 0e 8e 34 d5 73 58 f9 0f c7 ba bc 86 68 ea 9c 1e 3e 49 28 6e fa bb 2c 0e 1a f7 40 ca e9 b4 65 6b 25 af ec e6 98 70 f9 a8 e3 dc cb 69 66 45 7a d7 6b 43 c0 f2 21 1d d6 6d a8 d8 c3 3a 7b 4f 99 fa 28 18 f7 64 ba d8 b8 98 78 ec c0 ea 4f 39 37 1b 1a 08 68 21 b0 d1 df de 8a 72 72 f0 7a 85 f8 79 27 6b 83 bd 5a 5c 0e 8e a9 fe e6 6a a9 d7 63 af 7b eb bf 57 b5 c5 af 78 e1 d2 af f5 8a 6d c9 e9 54 e7 56 37 64 74 c8 ae e8 e5 d4 9f a0 f4 e8 fc b4 05 2c 95 93 64 da 3c 96 60 65 0f d6 71 aa be 7b 96 80 ef f3 99 b5 ca 86 47 48 e9 76 eb 43 be c8 e8 2d Data Ascii: oV1^wZ8T]KF-I<s>RS{ez=7&V`\hv#-HY3zii=4sXh>I(n,@ek%pifEzkC!m:{O(dxO97h!rrzy'kZ\jc{WxmTV7dt,d<`eq{GHvC-
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: ff 00 4b de 9a bb 4c 02 d3 2c 70 96 9f 25 5b 33 3b 65 ed 6b 06 e0 07 e9 41 ef 3f 45 22 01 e8 b1 ab 7f 43 c9 c6 65 b7 48 bf 1d 95 9f d2 54 e9 d7 f7 ac ad de f6 35 64 ec 77 87 f8 2d dc 8f f3 95 ec ae a5 7e 0d cd 7d 27 75 16 ea 1a 78 f0 b2 a7 2a db fa 7f ee 7f c3 77 e3 fe e3 ff 00 55 0e 10 a7 ff d4 e4 d9 79 f5 21 e7 40 89 80 c7 9c 81 9a e7 ba b2 e2 45 6d ac ed 7d 87 8f fb 65 aa 93 49 dc 3c cc 2b 7d 36 e6 63 e5 ba 9b c7 b5 c6 1a e1 12 d7 7f 58 fe 62 4a 6e 75 47 3b ec c1 af 00 1d f3 23 fb 96 58 2b 47 aa 6f 6d 7b 5c e0 f1 bb 47 03 2b 30 22 87 bc fa 97 9a db fa 63 b1 ec 33 66 23 b6 b4 1f dc 77 b9 8b 76 e6 8b 59 b4 68 39 d3 c5 70 3f 54 b3 46 2f 59 ad 8f 3f a3 c9 06 a7 78 4f 35 ff 00 d2 5e 84 35 11 c2 78 00 84 db 81 55 20 38 87 8e 5c 77 7c 67 95 d0 f4 37 52 ff 00 Data Ascii: KL,p%[3;ekA?E"CeHT5dw-~}'ux*wUy!@Em}eI<+}6cXbJnuG;#X+Gom{\G+0"c3f#wvYh9p?TF/Y?xO5^5xU 8\w\|g7R
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 24 c1 d1 43 72 f0 17 e1 82 34 25 92 53 18 63 44 f1 a2 b2 26 35 19 54 36 45 64 27 0a 73 83 93 46 74 c2 d2 e2 f2 55 65 75 56 37 84 85 a3 b3 c3 d3 e3 f3 29 1a 94 a4 b4 c4 d4 e4 f4 95 a5 b5 c5 d5 e5 f5 28 47 57 66 38 76 86 96 a6 b6 c6 d6 e6 f6 67 77 87 97 a7 b7 c7 d7 e7 f7 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 32 bd a9 d9 1b 83 07 0d 26 c8 c6 55 c9 bd 37 1a e5 e9 72 bb a3 23 b7 3e e4 52 e3 f1 cf 0c b4 cb b7 e9 b7 3c 14 14 5b 80 e6 d9 9d 26 15 b2 46 42 23 78 e3 52 38 30 5f 22 ec 50 73 25 cb 5e 7e eb 96 2e 55 b7 42 b0 24 aa da 2e 27 38 fa 8f a7 a9 8f c3 a5 54 21 63 a8 f7 1a 1e a0 56 2a c6 08 84 b5 d3 f1 1e 15 34 a6 91 e6 42 fa fe 5c 3a 01 b7 Data Ascii: $Cr4%ScD&5T6Ed'sFtUeuV7)(GWf8vgwHXhx9IYiy:JZjz?2&U7r#>R<[&FB#xR80_"Ps%^~.UB$.'8T!cV4B\:
2024-04-18 17:22:33 UTC	4808	IN	Data Raw: 77 47 16 98 72 a2 25 b0 32 c1 66 6b 5c a5 fd e3 86 f3 c9 33 d8 97 96 c5 4d c5 a8 c8 1f 8c 7d ab f8 be d1 4f b3 ac 92 e5 cf 73 ad ae 5e 28 b7 58 fc 0b a1 40 58 7f 64 df 32 4e 54 fd b8 e8 ac a7 5d 65 16 7a 88 ea 73 55 28 f0 31 12 47 ae 54 a8 a6 b7 01 2a 29 5d 7c d4 fa 47 00 15 1c fb 0f 47 71 0c 74 53 08 12 8c 11 e6 3f 23 d4 9d fb e6 09 14 48 94 31 9e 04 64 11 eb 51 82 3a 56 75 26 d1 da f3 f6 af 5e 61 b7 45 54 d9 7d bd 90 df bb 52 8f 77 3b c5 57 51 15 2e d9 ab ce 52 c5 96 f2 9a 15 6a f1 14 b4 22 54 63 0d dc 13 c1 bf d0 45 cb 7b 79 e6 0d f2 cf 6f f0 01 49 18 0d 23 f1 7c ab c7 3f e0 e8 29 cd 1c c6 fb 5e cd b8 de 5b b1 13 24 6d 46 34 a2 9a 1a 1c ff 00 2a f9 f5 5f 9f 26 7e 25 f6 3e c4 f9 2d dd db bf 3b d0 1d af be fa 56 b3 b2 77 57 fa 3d de 7b 4a bc e6 21 a7 da Data Ascii: wGr%2fk\3M}Os^(X@Xd2NT]ezsU(1GT)]\|GGqtS?#H1dQ:Vu&^aET}Rw;WQ.Rj"TcE{yoI#\|?)^[$mF4_&~%>-;VwW={J!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49900	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	676	OUT	GET /images/speakers/61394/Peter%20Christian_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"25279-1701866855000" Last-Modified: Wed, 06 Dec 2023 12:47:35 GMT Content-Type: image/jpeg Content-Length: 25279 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e1 10 3d 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0f 01 00 00 03 00 00 00 01 02 5e 00 00 01 01 00 03 00 00 00 01 01 fb 00 00 01 02 00 03 00 00 00 03 00 00 00 c2 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 c8 01 1b 00 05 00 00 00 01 00 00 00 d0 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 d8 01 32 00 02 00 00 00 14 00 00 00 f6 01 3b 00 02 00 00 00 0e 00 00 01 0a 9c 9d 00 01 00 00 00 1c 00 00 01 18 ea 1c 00 07 00 00 01 0c 00 00 01 34 87 69 00 04 00 00 00 01 00 00 02 40 00 00 03 e8 00 08 00 08 00 08 00 15 f9 00 00 00 27 10 00 15 f9 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 Data Ascii: =ExifMM*^(12;4i@''Adobe Photoshop CS6 (Window
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 6f 1b 86 e8 f0 90 4c 24 4d 02 3c 56 4e 27 42 7a 37 fa 3f d7 ae 89 87 81 8f 8b 92 cb 3d 5c 66 7a 64 b4 48 30 57 32 fe af 8e fb 2e b0 18 f5 ae 75 9f d9 71 d1 54 7d 75 6d 78 db ee 0e 99 47 c0 e9 57 67 6f fb 3b 03 bd 38 dd 3a 72 ad 11 dd a2 0a 51 d5 28 e0 3e 07 c1 2f da 54 7f a4 fc 11 ff 00 60 66 57 f4 a9 07 e0 97 ec 9b bf d0 79 21 c2 13 c4 5f ff d2 e7 7a 73 01 76 23 5f c0 7f 1e 68 bd 5f a5 51 46 2b 9e c1 2e b4 1b 0b 8f 3c c3 82 a5 83 98 1b e8 bd e2 0b 6e 82 ba 3c fc 6f 5f 15 9b 8c 35 ad 76 be 4e 51 48 e8 3b ee cd 00 01 17 b6 b1 fb 5e 46 c3 b3 01 e0 76 03 f2 ad 3f ab 3d 0f f6 a5 03 2a b7 fa 6f a6 c6 b8 ee d2 76 9d e3 fe a5 67 3a a7 5d 8e ec 76 fb 5c e2 1b 27 c8 ae d7 a1 e3 37 07 a6 62 e3 3e 0d 9b 60 b8 69 26 54 58 a6 05 8e a6 45 97 24 4e 9e 41 d9 6e 75 cc 66 Data Ascii: oL$M<VN'Bz7?=\fzdH0W2.uqT}umxGWgo;8:rQ(>/T`fWy!_zsv#_h_QF+.<n<o_5vNQH;^Fv?=*ovg:]v\'7b>`i&TXE$NAnuf
2024-04-18 17:22:33 UTC	8192	IN	Data Raw: 6d ae d9 58 1d dc e3 a2 6c ea fa ab 6b fb 2d 4f a1 b8 ee 70 f5 2e 79 25 d5 88 f7 6e 67 d1 b5 cf 72 83 29 20 1c 6b da ea cb 84 b2 65 ae da ef a2 e6 aa 87 a7 1a b1 ac c6 19 be 8b 18 43 5b b9 8c 75 c1 83 e8 7a 77 b8 6e df fb f6 58 db 13 40 ad 0e e3 bb 6a cc 80 31 aa 23 f1 6c 5d 93 61 ad f4 ee 16 86 c3 45 a0 cc 88 d2 63 f3 97 11 d4 de d7 75 37 06 f0 d8 69 f8 b5 b0 e5 d7 d3 8d 8d d3 ba 77 a7 53 76 0d a6 d7 17 19 71 71 11 ea 3f f9 6f 71 de b9 2e b5 84 ec 2e a2 c2 67 d3 cb ac 64 52 e3 df 7b 7d ed 07 f9 0f 40 c6 c1 20 68 0a dc 92 37 18 9d cf 6f 06 8d 18 9f 68 63 f6 b6 76 b8 ef f8 2e 93 ea 9d 18 d4 e7 d9 43 6b 2d 63 da 0b e7 c4 2c ce 83 51 b3 13 39 c0 c3 99 04 0f 19 5a ff 00 57 1d b7 ac 86 1d 3d 4a 65 df 22 ac 92 7a 9e a5 a8 00 e1 db a0 2f 61 f6 3c 60 d2 ed 80 82 Data Ascii: mXlk-Op.y%ngr) keC[uzwnX@j1#l]aEcu7iwSvqq?oq..gdR{}@ h7ohcv.Ck-c,Q9ZW=Je"z/a<`
2024-04-18 17:22:33 UTC	8176	IN	Data Raw: 20 22 86 37 0f e1 47 c5 c0 1d 58 9e ea 6e 47 af 13 49 68 3b 44 51 25 c6 bf 22 d3 65 8b a5 ab 08 f9 b6 31 a1 dd bf 20 b1 ab 60 80 7b 1e c1 f0 15 fc a7 fe 41 fe 6a f5 e7 c5 0d c7 2e da a9 f6 b5 4e fa 7e 47 4f 77 90 1b b5 3e 15 34 89 ab 5f e1 c3 df 4c ea 1d 49 82 4c a2 01 0c d4 34 1b 81 da 69 21 c1 8c 01 a2 01 44 1c 36 96 f6 81 53 49 16 3b 61 cf 68 56 b9 a3 52 2f e6 4e 1c 3b 6b ae 35 a5 24 7c 30 83 ec 78 fd 75 1f 5a eb 2e 6b 9c d4 64 6c 75 d5 c0 26 e2 39 70 00 84 37 34 d9 31 a6 06 03 61 b7 e5 b5 88 b0 e0 69 09 26 b4 f7 56 47 4c 94 9f c4 8c a6 3d a4 ea 51 7d c0 7c 2b 3e 09 1c 3d 56 03 bc 8d 0b 48 f7 25 4f d3 a7 71 30 46 5c 42 72 46 91 ec 53 59 52 41 23 9a e6 ca 1a 12 d6 01 3e 15 eb 19 8b b2 5e 11 8d 2b a1 fb 46 f7 bd a9 dd 44 e4 bc 38 95 d4 a0 ec e5 a7 b2 b2 Data Ascii: "7GXnGIh;DQ%"e1 `{Aj.N~GOw>4_LIL4i!D6SI;ahVR/N;k5$\|0xuZ.kdlu&9p741ai&VGL=Q}\|+>=VH%Oq0F\BrFSYRA#>^+FD8
2024-04-18 17:22:33 UTC	727	IN	Data Raw: 62 47 87 05 ad 8d 21 bd a0 25 4a 1e 93 d2 03 89 4b 9e 5a 50 ce e2 80 13 e5 b6 12 96 b6 24 00 94 36 1b 00 04 81 a2 74 d0 76 1d 7e c2 52 93 b1 0d 8d 13 aa bd 3a 7d 9d 28 ab 4d 3e 59 03 53 df 70 f3 10 a3 af a0 10 53 d4 09 32 14 96 fe f7 c5 b2 27 9f 50 50 53 7e 62 a7 cf 00 ee f0 51 43 12 c0 1a fa b4 eb 9b e1 e3 a7 ca cd f1 9a 4c 73 91 f1 7d 12 95 be 6e b0 79 68 44 b6 d4 56 0a 9b 62 7d 24 a7 c2 f4 04 e8 bd 3b f5 f8 a5 1f e1 9f 98 7e 22 bf 80 ff 00 37 ee fc 4f d7 d7 d3 d4 8a 88 85 aa ee 28 bc be e6 cc 91 f7 81 75 02 ab 06 c6 6e de 65 a0 55 a8 4c 89 d7 b6 70 da 6f 5f 05 2f d7 d3 b2 11 aa 9b 42 ae 58 52 d3 a9 21 22 c5 90 da b4 00 e8 90 46 84 f6 ef d5 2c 42 af 69 b6 a4 2d 5b bc 77 bb dd 3d b4 ec 74 57 49 4f b2 34 58 00 0f 4f 70 74 23 d5 af 52 1a 1e 2a 42 bd 5a ee Data Ascii: bG!%JKZP$6tv~R:}(M>YSpS2'PPS~bQCLs}nyhDVb}$;~"7O(uneULpo_/BXR!"F,Bi-[w=tWIO4XOpt#R*BZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49902	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	660	OUT	GET /images/products/detail/205981.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:33 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:38 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"43743-1704281370000" Last-Modified: Wed, 03 Jan 2024 11:29:30 GMT Content-Type: image/jpeg Content-Length: 43743 Connection: close
2024-04-18 17:22:33 UTC	7926	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 51 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CCQX"}!1AQa"q2
2024-04-18 17:22:33 UTC	258	IN	Data Raw: 35 93 70 41 fb 44 aa 41 53 f7 a1 8a 7c 1c 81 5f bc 5f f0 4f af db 1f 47 fd bd bf 64 ff 00 0d fc 42 b0 4b 58 6f 2f e2 36 5a ee 9a 87 70 d3 35 18 80 5b 9b 72 09 27 6e 48 74 dd cb 45 2c 6d 8f 9a 97 f6 23 fd 83 3c 0b fb 03 78 2b c4 ba 17 81 6c e4 8a df c5 1e 20 bb d7 ae 5e 60 0b c6 25 72 20 b4 43 d7 c8 b7 84 24 51 a9 27 a3 39 f9 a4 62 7f 39 c3 e7 95 f0 98 4a b8 29 df 9a f6 4f b5 f4 97 fc 0f 53 f4 ac 4e 43 87 c6 62 e9 63 a1 6e 4b 5d ae f6 d6 3f e4 fd 0e 03 fe 0a 13 e2 2f 83 3f b0 57 ec 9d e2 6f 88 97 ff 00 0c 7e 1b dd 5f d9 44 2c b4 3d 3e 4f 0f 59 a8 d4 f5 29 41 5b 78 38 40 76 82 0b be de 56 28 a4 61 d2 bf 18 bf e0 87 5e 16 d3 7e 29 7f c1 54 7e 1e d9 f8 9b 4b d1 f5 cb 3b e1 ac 5c dc 5a 5d d8 43 25 a4 92 0d 36 ea 40 c2 02 be 58 01 fe 65 50 a0 2e 06 00 c0 ae d7 Data Ascii: 5pADAS\|__OGdBKXo/6Zp5[r'nHtE,m#<x+l ^`%r C$Q'9b9J)OSNCbcnK]?/?Wo~_D,=>OY)A[x8@vV(a^~)T~K;\Z]C%6@XeP.
2024-04-18 17:22:34 UTC	8192	IN	Data Raw: fb 7c ff 00 c3 5c 7e d6 8f e0 af 0f de f9 de 02 f8 53 2c da 6d b9 8d f3 16 a7 aa 93 b6 f2 eb b6 e5 42 a2 dd 33 9c 79 52 ba b6 d9 ab 99 ff 00 83 7f ff 00 e5 2c 5f 0c ff 00 eb df 58 ff 00 d3 55 dd 7b f9 7e 5f 2c 36 4f 56 ad 4b f3 ce 2d fa 2b 68 bf 53 e7 f3 0c ca 18 9c ea 8d 2a 76 e4 84 92 d9 6a ee af fe 47 ea b7 fc 16 af f6 76 f8 7f e1 3f f8 25 ff 00 c5 8d 4b 4b f0 27 82 f4 bd 4a ca ce ca 4b 7b bb 3d 12 da de 78 1b fb 42 d5 72 8e 88 19 4e 09 1c 1e 84 8e 86 be 05 ff 00 83 66 3e 17 f8 6b e2 6f ed 43 f1 22 3f 12 f8 77 42 f1 14 76 5e 14 86 4b 64 d4 ec 22 bc 48 19 af 10 33 28 91 48 52 40 03 23 a8 af d2 cf f8 2e 57 fc a2 93 e3 17 fd 78 d9 7f e9 ca d2 bf 3c 3f e0 d6 2f f9 3a 8f 8a 5f f6 28 db ff 00 e9 6a d7 95 97 ca 4f 22 c4 3b bf 89 7f ed a7 ad 99 53 8a cf 70 ca Data Ascii: \|\~S,mB3yR,_XU{~_,6OVK-+hS*vjGv?%KK'JK{=xBrNf>koC"?wBv^Kd"H3(HR@#.Wx<?/:_(jO";Sp
2024-04-18 17:22:34 UTC	8176	IN	Data Raw: df b0 06 9b 0b a9 d4 35 0b 89 bd 55 30 99 fc b3 fc eb d4 bc 0f fb 37 78 4f c0 7e 5b 5a e9 b0 b4 d1 8f f5 92 2e e7 cf d4 e4 d7 7a b6 ce fd b1 53 c5 a6 c8 ff 00 c3 f8 d7 d3 65 fe 16 e4 78 66 a5 3a 6e ab fe fb ba fb 95 91 e7 62 38 8b 1b 51 5b 9b 97 d0 af 0a c7 6d 16 d8 63 54 5e 98 55 c0 a7 45 0c 93 9e 6b 4e d3 c3 d2 49 d5 6b 5e c7 c3 de 58 e5 6b f4 1c 2e 06 9d 18 2a 74 62 a3 15 d1 2b 2f b9 1e 1d 4a f2 9b bc 9d d9 99 a5 e8 db b9 3c fd 6b a3 d3 74 ff 00 25 07 cb d6 a6 b4 d2 b6 6d c2 e2 b4 ad 2c 0a 8f c6 bb e1 05 13 29 48 75 8d b8 55 ad 08 a3 ca 8f a5 36 0b 7d a5 78 e9 da ad 43 1e 4f f7 7d ab 43 1b 9c 9f c4 3f 09 27 88 34 89 22 2b f7 85 7c 17 f1 c9 9f f6 3b f8 8d ad 78 8f 52 d1 64 f1 17 c2 9f 19 5c 42 7c 7d a2 40 7c bb 88 27 5d a9 06 b9 6a eb 86 8e ee 3c 28 69 Data Ascii: 5U07xO~[Z.zSexf:nb8Q[mcT^UEkNIk^Xk.*tb+/J<kt%m,)HuU6}xCO}C?'4"+\|;xRd\B\|}@\|']j<(i
2024-04-18 17:22:34 UTC	8192	IN	Data Raw: d0 28 a2 8a d0 cc 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 fe ad 28 a2 8a fc 1c fe 8c 0c 66 8c 51 45 00 18 a3 14 51 40 06 29 36 83 4b 45 00 34 c5 c7 53 4c 31 60 fd dc d4 b4 50 05 77 83 07 a7 f8 d3 0a 30 3f e3 56 5d 33 cf 7a 63 26 ee b9 a0 08 0f 1d 68 a7 15 dd d7 ad 24 89 e9 55 70 17 60 c5 66 eb 7a 24 7a 8d b3 46 cb 95 6e a2 b5 37 51 b7 7b 62 84 dd c0 f8 c7 f6 e2 fd 8a f4 8f 8c de 07 bb d3 6f a1 65 b7 62 d7 16 d7 50 c7 ba 6d 2e e3 18 13 c6 3b 8e 81 d3 a3 af a1 00 8f 9f 7e 04 7c 59 d4 3c 7b a9 59 fc 13 f8 b5 aa 0f 0d fc 56 f0 48 f3 fc 01 e3 6d ff 00 2e a1 18 19 4b 79 1f 19 91 24 51 f2 9e 49 e9 8d c0 ab 7e 9d 6b fe 1f 8f 54 b5 92 39 17 70 60 78 af 8b ff 00 6e ff 00 d8 86 cf e2 d7 85 66 8e 17 fe cc d4 ad 43 4b a5 6a b1 af ef 34 d9 b3 bb 19 1c f9 2e c0 6f 03 91 80 Data Ascii: (((((fQEQ@)6KE4SL1`Pw0?V]3zc&h$Up`fz$zFn7Q{boebPm.;~\|Y<{YVHm.Ky$QI~kT9p`xnfCKj4.o
2024-04-18 17:22:34 UTC	8176	IN	Data Raw: fc 88 3a 1f 7f fa 70 82 a9 f8 ff 00 fe 0a 5d f0 0f e1 5f 8e b5 3f 0c f8 97 e3 0f 81 b4 3f 10 68 b3 fd 96 fe c2 f3 54 58 e6 b4 97 82 51 c1 e8 70 47 5a b3 ff 00 04 eb ff 00 94 7e 7c 0d ff 00 b1 0b 44 ff 00 d2 08 2b f9 ec ff 00 82 b7 9f f8 d9 c7 c7 0f fb 1a 25 ff 00 d1 71 57 ca e5 39 4c 31 f8 ca 94 a7 27 14 ae f4 f5 b1 f5 b9 b6 71 53 2f c1 52 ab 08 a7 7b 2d 7d 2f d0 fe 8a be 26 7c 1e f8 4d fb 79 7c 20 b5 8f c4 7a 4f 83 fe 27 78 37 56 85 a5 b0 bd 56 8e f6 16 46 ca 99 ad 2e a2 3b a3 6e 30 24 85 d5 81 1c 10 45 7f 3c 5f f0 55 bf f8 27 f4 9f f0 4e af da aa e3 c2 76 77 97 3a a7 84 75 cb 45 d6 3c 37 7d 71 cc cd 6a ce c8 d6 f3 30 01 5a 68 64 52 a4 a8 f9 91 a2 72 01 72 ab fa 3f ff 00 06 af 78 c7 51 d4 7f 66 bf 8a 5a 04 f7 32 49 a5 e8 de 27 82 f2 ce 16 24 8b 77 b8 b5 Data Ascii: :p]_??hTXQpGZ~\|D+%qW9L1'qS/R{-}/&\|My\| zO'x7VVF.;n0$E<_U'Nvw:uE<7}qj0ZhdRrr?xQfZ2I'$w
2024-04-18 17:22:34 UTC	2823	IN	Data Raw: 3c 6b f6 84 fd 99 74 4f 8c 7e 18 b9 b1 d4 2c a2 b8 8e 65 c7 cc 39 07 d4 1e c7 9a fc ed f8 8f f0 73 c5 1f b1 47 89 6e 23 7b 49 35 ef 03 5f 39 59 51 86 ef 2c 74 c1 f4 c0 3d 6b f5 c6 5b 7f 38 9c e2 b8 9f 8a 1f 08 f4 df 1f e8 97 16 97 96 d1 4d 14 ca 43 23 a8 60 7e b5 cf 88 c2 c2 ba d7 73 8f 19 82 a7 88 85 a4 b5 3e 12 fd 99 ff 00 69 ed 43 f6 7d d3 a2 be f0 eb dc 78 ab e1 9d d3 ee ba d1 b7 86 bc d0 d8 9c b3 db e4 f0 3b 98 89 da dc 90 54 f3 5f 75 fc 3d f8 93 a1 fc 5d f0 75 ae bb e1 dd 42 df 54 d2 ef 01 68 e6 88 f4 23 ef 23 29 e5 1d 4f 05 58 02 0f 51 5f 9e 1f b4 17 ec 97 e2 6f d9 4b c5 57 1e 26 f0 42 cb 75 a3 31 dd 75 a7 1c b0 09 dc 63 ba fb 76 a8 7e 01 fc 74 be f0 ae b1 27 8b 7e 1a cf 1c 37 d2 90 da ef 85 ae a4 22 db 52 c7 52 07 f0 48 3f 86 45 00 8e 87 70 c8 3c Data Ascii: <ktO~,e9sGn#{I5_9YQ,t=k[8MC#`~s>iC}x;T_u=]uBTh##)OXQ_oKW&Bu1ucv~t'~7"RRH?Ep<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49903	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	1500	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713460953050/1713460953050%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Live%20Webinars%20%7C%20Professional%20Webinars%20Online%20%7C%20Courses%20Online%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Flive-webinars%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=cKd77/rrhSUB3VXYGzhWh0/SSD0i+tTjbygJpUJ/VqfO7WHt0+j14AkM+Ol/TaPqQnz4P0x08ZAz1mG+4FHT3VFHJtZcVONTwPsEuCG7RW+qxB49EXQOa7fp1QeH
2024-04-18 17:22:34 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=hPb9Ir2ji7Z0lWPYzouvj9MonoAmyVUPW78aeWEufFjAD9TDkjiRRWCvOtJ+t0xmR+bFAkuOo/0tahi+shmiUgpBPycxvamRtiobG0ZodPdFu6OeCEXpiZwpTHbr; Expires=Thu, 25 Apr 2024 17:22:34 GMT; Path=/ Set-Cookie: AWSALBCORS=hPb9Ir2ji7Z0lWPYzouvj9MonoAmyVUPW78aeWEufFjAD9TDkjiRRWCvOtJ+t0xmR+bFAkuOo/0tahi+shmiUgpBPycxvamRtiobG0ZodPdFu6OeCEXpiZwpTHbr; Expires=Thu, 25 Apr 2024 17:22:34 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:34 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49904	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	675	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/p/1713460953051 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=cKd77/rrhSUB3VXYGzhWh0/SSD0i+tTjbygJpUJ/VqfO7WHt0+j14AkM+Ol/TaPqQnz4P0x08ZAz1mG+4FHT3VFHJtZcVONTwPsEuCG7RW+qxB49EXQOa7fp1QeH
2024-04-18 17:22:34 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=SPAuhBeGX29kQZYCFhgHUrH6+R0tKH5hGdxAbejY+LWoF+A+N0UaUCZGiOMvnv1SpSB0BKL2tXvdo791AIP3XAo2+s81G4FSH2DN27t+8v7wqYwV4Fwr84hNAS+m; Expires=Thu, 25 Apr 2024 17:22:34 GMT; Path=/ Set-Cookie: AWSALBCORS=SPAuhBeGX29kQZYCFhgHUrH6+R0tKH5hGdxAbejY+LWoF+A+N0UaUCZGiOMvnv1SpSB0BKL2tXvdo791AIP3XAo2+s81G4FSH2DN27t+8v7wqYwV4Fwr84hNAS+m; Expires=Thu, 25 Apr 2024 17:22:34 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:34 UTC	4072	IN	Data Raw: 66 65 31 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 35 34 30 33 34 5c 6e 39 38 31 2e 39 37 39 30 32 36 30 38 36 30 32 37 37 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d 37 Data Ascii: fe1$Loader && ($Loader.payload = "1713460954034\n981.9790260860277\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-7
2024-04-18 17:22:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49905	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:33 UTC	660	OUT	GET /images/products/detail/206118.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:34 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:39 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"35878-1704281423000" Last-Modified: Wed, 03 Jan 2024 11:30:23 GMT Content-Type: image/jpeg Content-Length: 35878 Connection: close
2024-04-18 17:22:34 UTC	7926	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 16 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 92 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 Data Ascii: JFIF``ExifMM*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19
2024-04-18 17:22:34 UTC	258	IN	Data Raw: fc 53 f5 3d ac 46 d1 f4 0d c7 fb bf ad 1b 8f f7 7f 5a 30 de a2 8c 37 a8 ae e3 94 6c 87 25 78 c7 22 bc af e2 9f 3e 2c b8 ff 00 71 3f 95 7a a4 99 ca e7 d4 57 95 fc 53 3f f1 56 5c 7f b8 9f ca bc fc cf f8 3f 35 fa 9d 78 2f e2 7c 8f 48 f0 d1 23 40 b3 e3 fe 59 2f f2 ab db 8f f7 7f 5a a3 e1 ad df d8 16 78 ff 00 9e 4b fc aa f6 1b d4 57 65 1f 81 7a 1c cf 70 dc 7f bb fa d1 b8 ff 00 77 f5 a3 0d ea 28 c3 7a 8a d0 97 b1 cc fc 53 3f f1 48 7f db 64 fe 75 cc 78 33 fe 41 6d fe f9 ae 9f e2 9e 7f e1 10 ff 00 b6 c9 fc eb 98 f0 67 fc 82 db fd f3 5e 26 3f f8 bf 23 d9 cb ff 00 86 fd 4d 7a 6e 7f fd 54 ea 08 cd 71 1d e3 4a 82 79 5a 6b 47 bd 7a 71 52 05 c5 26 d1 40 89 6d 35 2b 8b 02 3c 99 99 3d 81 e3 f2 ad 8d 3f e2 14 b1 3a ad c4 6b 37 fb 48 30 df 95 61 15 c9 a5 c5 74 d2 c5 d5 a7 Data Ascii: S=FZ07l%x">,q?zWS?V\?5x/\|H#@Y/ZxKWezpw(zS?Hdux3Amg^&?#MznTqJyZkGzqR&@m5+<=?:k7H0at
2024-04-18 17:22:34 UTC	8192	IN	Data Raw: ae 12 95 4f 89 1d 65 ef 88 6d 75 58 2d fc b9 7e 75 b9 88 95 3f 29 1f 37 bd 6f 2f 20 7a 57 96 de 1d a8 87 a1 f3 17 f9 8a d8 d3 3c 55 79 a7 1d bb fc e8 ff 00 ba fd be 87 ad 7a b8 6c d9 5e d5 be f4 79 35 f2 97 bd 26 77 5f e1 59 be 16 39 d3 bf ed b4 9f fa 11 a6 e9 3e 27 b6 d5 d5 42 37 97 29 ea 8c 70 7f 0f 5a 93 c3 47 fe 25 ff 00 f6 da 4f fd 08 d7 af 1a 91 9b 52 8b ba 3c c7 09 41 38 c9 6a 69 51 45 15 b9 88 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 01 f9 d7 ff 00 07 33 7f ca 3a 74 bf fb 1d 34 ef fd 27 bb ae fb fe 0d f5 ff 00 94 5a f8 07 fe bf 35 5f fd 2f 9e b8 1f f8 39 9b fe 51 d3 a5 ff 00 d8 e9 a7 7f e9 3d dd 77 df f0 6f af fc a2 d7 c0 3f f5 f9 aa ff 00 e9 7c f5 e9 7f cc 0f fd bd fa 1f 1f 4f fe 4a 59 ff 00 d7 a5 ff 00 a5 1f 6b 51 45 15 e6 9f 60 15 f1 5f fc Data Ascii: OemuX-~u?)7o/ zW<Uyzl^y5&w_Y9>'B7)pZG%OR<A8jiQEQEQEQEQE3:t4'Z5_/9Q=wo?\|OJYkQE`_
2024-04-18 17:22:34 UTC	8176	IN	Data Raw: 17 c5 1b f8 af 96 f5 3f f8 28 c4 d6 3f b7 cc 7f 04 3f e1 10 dc ad 7b 15 a1 d6 8e a5 83 f3 d8 2d e6 7c 8f 2b 1c 06 09 fe b3 de be 86 f1 ef 8d e1 f8 7f e0 7d 5f 5e ba 8e 69 ad 74 5b 39 6f a6 8a 10 3c d9 12 34 2e c1 43 10 37 10 0f 04 81 ef 4e b6 16 ad 27 15 35 f1 24 d7 9a 7b 19 e5 f9 f6 07 1b 1a d2 c3 4e ea 8c 9c 27 a3 5c b2 8a bb 5a ad 6d e5 74 6f 6f e2 93 cc 39 e9 5f 0d cb ff 00 05 e8 f8 5b 6f b7 cc f0 af c4 08 d9 86 40 68 6c 06 7f f2 6a bd ef f6 55 fd ba fc 0f fb 60 d9 dd 0f 0b cf 7f 6b a9 69 f1 ac 97 3a 6e a1 00 8a ea 14 6e 03 fc ac c8 eb 9e 37 2b 11 9e 2b 6a d9 66 2a 94 79 ea 41 a5 dc f3 72 de 36 c8 b3 0a eb 0d 83 c4 c6 53 7b 24 f5 76 de d7 df e4 7b 50 93 da 92 51 e6 47 8a 8b cd 2a bf fd 6a 3c d6 3d 3f 51 5c 56 3e aa e8 f9 eb f6 c2 ff 00 82 4c 7e ce bf Data Ascii: ?(??{-\|+}_^it[9o<4.C7N'5${N'\Zmtoo9_[o@hljU`ki:nn7++jfyAr6S{$v{PQGj<=?Q\V>L~
2024-04-18 17:22:34 UTC	8192	IN	Data Raw: 5c 95 1f 95 74 63 33 ec 54 2b ca 11 b5 93 6b 63 3c 26 4b 42 74 63 36 e5 aa 5d 59 f3 1f fc 30 ff 00 89 3f e8 31 a4 fe 52 7f 85 3a 2f d8 6b c4 b3 c9 e5 ff 00 6c 69 2a 5c ed e9 27 7f c2 be 9c d8 3f ba 3f 2a d7 f0 46 93 f6 dd 4f ce 64 fd d4 3c e7 df d3 f0 a9 c3 e7 98 ca b3 51 56 fb 8a c4 64 f8 5a 70 73 77 fb ce 83 c2 7e 1d 87 c3 1e 1b d3 b4 cb 7f 96 df 4d b5 8e d6 31 fe ca 28 51 fc ab 33 c7 7f 05 bc 2f f1 2e 16 fe dc d1 ac 6f 64 6e 04 c5 36 4c 3e 8e b8 6f d6 ba 85 5c 1a 4e 6b d8 eb 74 79 3d 0f 95 3e 30 fe c0 9a 7e 98 b1 dc 78 5f 58 bc b6 69 64 c3 db ea 0d e6 a2 ae 09 ca ba 8d c3 1c 0c 10 73 9e b5 c0 9f d8 87 c4 8d cf f6 b6 93 cf aa c9 fe 15 f5 c7 8f af 16 e3 52 8e 15 6f f5 2a 49 fa 9c 7f 80 ac 4e a7 ee f1 ef 5e 4e 2b 3c c4 53 a8 e1 06 ac bc 8f 5b 0b 93 d2 a9 Data Ascii: \tc3T+kc<&KBtc6]Y0?1R:/kli\'??FOd<QVdZpsw~M1(Q3/.odn6L>o\Nkty=>0~x_XidsRo*IN^N+<S[
2024-04-18 17:22:34 UTC	3134	IN	Data Raw: fa d9 1f fa 06 ab ff 00 80 7f c1 3f 6d bc c1 ef f9 51 e6 0f 7f ca bf 12 7f e1 72 7f c1 51 bf e8 1f e3 6f fc 26 b4 7f fe 33 47 fc 2e 4f f8 2a 37 fd 03 fc 6d ff 00 84 d6 8f ff 00 c6 68 fa 83 fe 78 fd e1 fe b6 47 fe 81 aa ff 00 e0 1f f0 4f db 6f 30 7b fe 54 79 83 df f2 af c4 9f f8 5c 9f f0 54 6f fa 07 f8 db ff 00 09 ad 1f ff 00 8c d1 ff 00 0b 93 fe 0a 8d ff 00 40 ff 00 1b 7f e1 35 a3 ff 00 f1 9a 3e a0 ff 00 9e 3f 78 7f ad 91 ff 00 a0 6a bf f8 07 fc 13 f6 db cc 1e ff 00 95 1e 60 f7 fc ab f1 27 fe 17 27 fc 15 1b fe 81 fe 36 ff 00 c2 6b 47 ff 00 e3 34 7f c2 e4 ff 00 82 a3 7f d0 3f c6 df f8 4d 68 ff 00 fc 66 8f a8 3f e7 8f de 1f eb 64 7f e8 1a af fe 01 ff 00 04 fd b6 f3 07 bf e5 47 98 3d ff 00 2a fc 49 ff 00 85 c9 ff 00 05 46 ff 00 a0 7f 8d bf f0 9a d1 ff 00 f8 Data Ascii: ?mQrQo&3G.O7mhxGOo0{Ty\To@5>?xj`''6kG4?Mhf?dG=IF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49907	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:34 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:22:34 UTC	585	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:22:34 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876656745e6806f8-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yBYdMvjNByye97KtEbv0aQH2aMR14xtgOeQ2a61X45mFfWa8L2eftnclcn8yCfLzAQeeMqz%2BvnGmS2hZQX9%2B8tTpIOsZ1z5o1IuufvfsFJryHPQDsH0aadB9Orxdp%2B2w5CaFyfR7z7V56g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876656745e6806f8-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49906	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:34 UTC	660	OUT	GET /images/products/detail/205915.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:34 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:39 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"65098-1704281482000" Last-Modified: Wed, 03 Jan 2024 11:31:22 GMT Content-Type: image/jpeg Content-Length: 65098 Connection: close
2024-04-18 17:22:34 UTC	7926	IN	Data Raw: ff d8 ff e1 16 94 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0f 42 40 00 00 27 10 00 0f 42 40 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 33 3a 30 38 20 31 36 3a 34 36 3a 32 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 57 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2iB@'B@'Adobe Photoshop CS6 (Windows)2022:03:08 16:46:22XW
2024-04-18 17:22:34 UTC	258	IN	Data Raw: 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 05 38 42 49 4d 04 0c 00 00 00 00 15 7a 00 00 00 01 00 00 00 a0 00 00 00 5b 00 00 01 e0 00 00 aa a0 00 00 15 5e 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: utsetlong8BIM(?8BIM8BIM8BIMz[^Adobe_CMAdobed
2024-04-18 17:22:34 UTC	8192	IN	Data Raw: 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 5b 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 Data Ascii: ["?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5
2024-04-18 17:22:34 UTC	8176	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 17:22:34 UTC	8192	IN	Data Raw: 83 67 ee f0 9a 15 76 a2 3d 9a d4 07 42 55 87 64 c6 30 a4 7a f8 98 83 1a bb 5a b0 17 b2 05 65 65 65 65 65 65 07 2c a0 50 2b b8 27 48 02 37 5a 15 8b 8e ec 6c 32 28 6b 34 89 29 82 a5 d6 ca 56 b5 96 a2 42 49 13 49 21 65 05 ec b2 17 73 51 92 35 f2 46 8c f1 85 f9 6c 08 de 6e 3f 30 94 2e 39 7e 5b 97 e5 48 bf 21 e5 09 5c 8c a8 ca 11 95 09 0a 12 14 e7 3c ac 3d 08 de 84 0e 46 ab 8a 6d 37 21 48 af c2 4d a6 d4 2a b5 7e 2b 50 ac 11 ac 15 e6 f6 be 73 fb 9e 32 9a d5 59 61 0e af fb 4e 55 70 1c 27 fb fe 52 16 82 fc 94 2d 2f c9 28 4e e4 27 79 42 49 0a 06 44 04 88 47 22 6c 4f 5f 1b 97 c6 e4 18 8b 42 fd ab 2d 5f 23 17 ca d4 6c 35 1b 08 58 2b f2 1c 84 ce 46 57 a3 2b d7 71 5f 21 0b e4 46 46 a0 f6 95 f2 35 09 82 f9 8a 0e 72 cb 90 12 14 1a e4 23 76 44 44 af 80 e7 f1 94 75 83 97 Data Ascii: gv=BUd0zZeeeeee,P+'H7Zl2(k4)VBII!esQ5Fln?0.9~[H!\<=Fm7!HM*~+Ps2YaNUp'R-/(N'yBIDG"lO_B-_#l5X+FW+q_!FF5r#vDDu
2024-04-18 17:22:34 UTC	8176	IN	Data Raw: 68 c1 4d 4d 29 d2 18 e9 cf 21 79 67 4a cd 4f 25 d2 40 3d d8 d2 63 cf 6b 98 43 85 c8 fd 88 21 d5 24 c3 ab c9 96 6e ec f7 48 c9 03 55 4d 84 71 ba 16 6a 2e c7 53 8c 42 2c 36 ad 94 c7 3b 0f 9b d8 94 4a 25 65 65 12 8b 91 3e 99 e6 6c 51 5a b0 e9 e5 5f 74 18 70 50 21 77 35 47 18 72 75 6c a7 46 f1 f4 32 b3 eb 67 df b9 30 9e ef 18 ea 4e cf 97 d4 ae da fa 9d f6 a6 57 ec 7f b0 5b 5a 50 6b f8 f4 1b 5b 56 b8 0e c3 90 41 4f ca be 11 ab 24 fb 0e 19 ca 75 e6 4a b6 e3 20 90 98 32 88 c1 b4 e1 f8 07 ee d4 cf 74 7f 64 2d 07 30 0f dd 0b 33 1d 96 10 a1 93 06 7c 39 ae 6e 64 63 70 e8 66 2d 8a cc 86 49 bf d5 46 f7 30 d7 db 5d 84 ea f9 0d a7 98 2c b5 d1 c9 2a 25 17 22 56 56 4a ca 2b 2b 2b 2b 2b 2b 75 60 e0 75 24 f5 01 42 00 1d e3 3f 11 21 f0 30 27 44 11 6b 82 c7 d4 8f 18 50 b3 2e Data Ascii: hMM)!ygJO%@=ckC!$nHUMqj.SB,6;J%ee>lQZ_tpP!w5GrulF2g0NW[ZPk[VAO$uJ 2td-03\|9ndcpf-IF0],*%"VVJ++++++u`u$B?!0'DkP.
2024-04-18 17:22:34 UTC	8192	IN	Data Raw: f5 12 4a 79 0d 44 cd 24 8f e4 13 69 ed 5f 22 d8 af 8e 36 93 65 af 00 ea 48 cb e1 14 4d 57 29 77 48 d1 c0 36 57 f1 9a 69 55 46 1f c7 aa 6e d0 72 96 8f e3 4f 9e 99 ea a3 78 1c 10 41 04 70 70 42 90 a7 6a 9d aa 76 9d a4 14 c1 90 7c 39 0f af 04 10 41 04 10 46 32 49 24 92 49 38 ed b1 37 5c 56 a5 64 db 7a 6c b8 aa 21 04 10 41 04 10 41 03 8a a8 8e 55 51 c8 19 2a 76 a9 d7 f8 d6 a7 fe 6a 57 69 08 42 10 84 21 08 72 c5 88 20 8c 64 92 78 08 23 80 72 2e f7 0b b2 db aa 42 9d 5b 8e 9a 9d ae 6d b9 37 5a 76 e5 92 49 1d 49 c2 08 20 8c 64 75 24 9c 63 4a 08 23 0a 26 a5 31 82 08 20 83 b4 82 32 c9 24 92 4e 10 a3 21 04 63 24 92 49 27 31 90 82 08 cb 38 4e 48 e0 17 4e 99 20 82 08 23 24 92 49 24 e3 04 10 40 c8 46 59 1f 42 49 42 48 3b 48 d0 aa 9d 30 6d bc 6d 25 2a 99 db 55 b2 ce 58 Data Ascii: JyD$i_"6eHMW)wH6WiUFnrOxAppBjv\|9AF2I$I87\Vdzl!AAUQvjWiB!r dx#r.B[m7ZvII du$cJ#&1 2$N!c$I'18NHN #$I$@FYBIBH;H0mm%UX
2024-04-18 17:22:34 UTC	8176	IN	Data Raw: 06 78 34 57 95 e4 6d d7 22 df 76 a5 a6 23 57 30 38 c5 07 b1 6d cb f6 da 53 20 c7 0d 22 45 42 58 dc be 27 c4 18 4e 27 b6 b5 0d bb 2a ce 01 ae 20 e1 d9 aa 82 5e 16 57 3c d8 92 3e 20 d5 cf b9 b4 9d ea a5 a0 7a e2 83 3e f4 92 32 84 00 47 ad 8d 05 37 ee bf 74 a8 1f 20 ab e8 a7 96 db 32 8e 39 12 2a c5 b6 bc 1a ea db bd f7 6b a8 30 1c 98 c1 50 26 b2 52 71 23 5b 09 cc f7 ad 29 e5 55 e6 92 26 32 9e c6 a2 a8 c1 80 d3 92 02 4c b1 9f 65 68 02 d7 55 a0 4a c6 9e de c6 a4 02 db 33 13 0a 08 12 49 60 00 9d 33 9f 7d 58 e8 bb 28 7e b7 bb 51 73 74 f3 05 67 32 7f ba b5 f8 6b 96 76 1f 87 61 0f 6d 94 10 c3 8c 89 e6 9e fa b3 f9 db f2 f1 1b 6e 97 b8 bc 06 eb 6b b6 91 62 d5 c6 33 00 64 a9 73 d9 fa d5 b4 fc c7 b4 b7 f7 7d 4d 43 5e b6 b9 25 f5 8f 30 7e f7 8a 86 94 d3 11 89 82 4f c6 Data Ascii: x4Wm"v#W08mS "EBX'N'* ^W<> z>2G7t 29*k0P&Rq#[)U&2LehUJ3I`3}X(~Qstg2kvamnkb3ds}MC^%0~O
2024-04-18 17:22:34 UTC	7810	IN	Data Raw: 70 c0 66 24 b1 99 27 d3 c6 83 05 c6 4a 91 86 99 12 70 26 93 5b 8b 62 e0 60 aa 64 e4 63 0d 39 57 9a 09 70 ab a9 75 09 51 18 f3 34 92 33 c3 0f ee d7 99 70 29 7d 4a 14 02 48 71 3e 13 a7 2f 8e 99 ed 59 46 0d e1 b6 ca 90 64 10 04 81 38 16 ab ec 6f 22 eb 10 55 da 4e 2b 86 64 4f ef 2d 4d ed e1 67 19 69 2d 20 63 00 0e 51 c7 81 ae 43 31 89 67 68 98 ed ff 00 e3 ad 0a eb a4 4c 04 12 4f c7 ab fb d4 74 1b 8f 3e f1 80 3d 52 d4 55 5b 40 39 85 93 f3 c8 af bc 7b 8c 9c 44 98 13 dc 30 ae 6c 0f 10 68 4a ea 3d 90 3e 93 41 42 29 68 98 21 7f 6d 5b b5 e7 3e d6 fd 96 5b 96 37 56 a1 5e d5 dc d5 d4 ae 3c a6 38 d6 eb 78 2d a5 9f cf 5d 26 d8 3d 6f 66 8a 34 ef ac 00 23 7f b7 11 8b 15 83 7d 40 e6 fe a5 1d 52 27 d9 83 13 4a 59 ad 96 79 90 6d 89 91 db 35 2a 80 ae 13 20 4f cf 95 1d 4a 88 Data Ascii: pf$'Jp&[b`dc9WpuQ43p)}JHq>/YFd8o"UN+dO-Mgi- cQC1ghLOt>=RU[@9{D0lhJ=>AB)h!m[>[7V^<8x-]&=of4#}@R'JYym5* OJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49908	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:34 UTC	675	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/p/1713460953590 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=SPAuhBeGX29kQZYCFhgHUrH6+R0tKH5hGdxAbejY+LWoF+A+N0UaUCZGiOMvnv1SpSB0BKL2tXvdo791AIP3XAo2+s81G4FSH2DN27t+8v7wqYwV4Fwr84hNAS+m
2024-04-18 17:23:34 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=ZTJ/5h91VuavkrkF0s1BKOeQAbIJ9juy5STe7yGDXS4ZOOwFs2PUycUIATUsgIkQdmh2VErF7NupQcTZeTm0z5HNtqQbrEoKsdQdTfoTTVt60D7RtKaVq++SRF/V; Expires=Thu, 25 Apr 2024 17:22:34 GMT; Path=/ Set-Cookie: AWSALBCORS=ZTJ/5h91VuavkrkF0s1BKOeQAbIJ9juy5STe7yGDXS4ZOOwFs2PUycUIATUsgIkQdmh2VErF7NupQcTZeTm0z5HNtqQbrEoKsdQdTfoTTVt60D7RtKaVq++SRF/V; Expires=Thu, 25 Apr 2024 17:22:34 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:34 UTC	87	IN	Data Raw: 35 31 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 34 37 36 38 5c 6e 32 36 30 37 2e 39 31 36 30 39 36 38 30 33 31 37 35 36 5c 6e 33 5c 6e 34 5c 6e 70 5c 6e 6e 75 6c 6c 22 29 0d 0a Data Ascii: 51$Loader && ($Loader.payload = "1713461014768\n2607.9160968031756\n3\n4\np\nnull")
2024-04-18 17:23:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49909	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:34 UTC	965	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713460953768/1713460953768%0A-500%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460952086%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=SPAuhBeGX29kQZYCFhgHUrH6+R0tKH5hGdxAbejY+LWoF+A+N0UaUCZGiOMvnv1SpSB0BKL2tXvdo791AIP3XAo2+s81G4FSH2DN27t+8v7wqYwV4Fwr84hNAS+m
2024-04-18 17:22:34 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=0oEGvm14nlRzfxq/ISeSQQpEcUWBa9iynRySZoDfVF/Tui6avy4HAv/OkTUuVwBBLw6ojzUWpR91tSsrimkeGOQGvEEWhgW/ET1Tl0XEfTHVc7GiMZYjfVR/fT2z; Expires=Thu, 25 Apr 2024 17:22:34 GMT; Path=/ Set-Cookie: AWSALBCORS=0oEGvm14nlRzfxq/ISeSQQpEcUWBa9iynRySZoDfVF/Tui6avy4HAv/OkTUuVwBBLw6ojzUWpR91tSsrimkeGOQGvEEWhgW/ET1Tl0XEfTHVc7GiMZYjfVR/fT2z; Expires=Thu, 25 Apr 2024 17:22:34 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:34 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49910	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:35 UTC	1215	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460948980&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Faboutus&dt=World%20Class%20Online%20Professional%20Training%20%7C%20Courses%20%7C%20Traininng&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7165 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:35 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:22:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49911	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:36 UTC	893	OUT	GET /recorded-webinars HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:40 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:41 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:40 UTC	7985	IN	Data Raw: 31 30 61 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 10a5<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:40 UTC	6954	IN	Data Raw: 2d 72 61 64 69 75 73 3a 30 70 78 3b 68 65 69 67 68 74 3a 20 33 32 70 78 3b 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 6e 61 6d 65 3d 22 70 61 67 65 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 0d 0a 3c 2f 66 6f 72 6d 3e 20 3c 2f 6c 69 3e 0d 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 69 74 65 6d 22 3e 20 3c 61 20 68 72 65 66 3d 22 2f 72 65 63 6f 72 64 65 64 2d 77 65 62 69 6e 61 72 73 3f 70 61 67 65 3d 32 22 3e 4e 65 78 74 3c 2f 61 3e 20 3c 2f 6c 69 3e 0d 0a 3c 2f 75 6c 3e 0d 0a 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 31 70 78 3b 22 3e 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 3c 62 3e 31 20 2d 20 31 35 20 6f 66 20 32 37 32 30 3c 2f 62 3e 3c 2f 73 70 61 Data Ascii: -radius:0px;height: 32px;" type="text" class="form-control" name="page" value="1" /></form> </li><li class="page-item"> <a href="/recorded-webinars?page=2">Next</a> </li></ul><span style="margin-top: 21px;">    <b>1 - 15 of 2720</b></spa
2024-04-18 17:22:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:40 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 65 62 65 63 63 61 26 6e 62 73 70 3b 53 74 61 74 6f 6e 2d 52 65 69 6e 73 74 65 69 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 33 39 31 27 3e 54 72 65 66 6f 72 26 6e 62 73 70 3b 4a 6f 6e 65 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 33 39 35 27 3e 4d 61 72 67 69 65 26 6e 62 73 70 3b 46 61 75 6c 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 33 39 37 27 3e 44 6f 75 67 26 6e 62 73 70 3b 4b 65 69 70 70 65 72 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 33 34 34 30 31 27 3e 4d 72 2e 20 56 69 6b 72 61 6d 26 6e 62 73 70 3b 4b 75 6c 73 68 72 65 73 68 74 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 Data Ascii: 1ff8ebecca Staton-Reinstein</option><option value='34391'>Trefor user</option><option value='34395'>Margie Faulk</option><option value='34397'>Doug Keipper</option><option value='34401'>Mr. Vikram Kulshreshta</option><option va
2024-04-18 17:22:40 UTC	5	IN	Data Raw: 66 36 35 0d 0a Data Ascii: f65
2024-04-18 17:22:40 UTC	3941	IN	Data Raw: 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 31 35 30 36 27 3e 41 6d 79 20 50 2e 20 4b 65 6c 6c 79 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 31 35 30 37 27 3e 4c 6f 72 72 65 6e 65 20 43 61 73 74 65 6c 68 61 6e 6f 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 31 35 30 38 27 3e 4b 65 76 69 6e 20 52 2e 20 4d 69 6c 6c 65 72 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 32 30 38 37 27 3e 52 61 63 71 75 65 6c 20 4c 2e 20 48 61 72 72 69 73 26 6e 62 73 70 3b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 35 33 39 34 38 27 3e 4d 69 63 68 61 65 6c 20 4d 65 6c 6e 69 6b 26 Data Ascii: /option><option value='51506'>Amy P. Kelly </option><option value='51507'>Lorrene Castelhano </option><option value='51508'>Kevin R. Miller </option><option value='52087'>Racquel L. Harris </option><option value='53948'>Michael Melnik&
2024-04-18 17:22:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:40 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 20 63 6f 6c 2d 6d 64 2d 33 22 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 20 63 6f 6c 2d 6d 64 2d 39 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 76 65 2d 77 65 62 69 6e 61 72 2d 6c 69 73 74 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 65 62 69 6e 61 72 73 2d 62 6f 78 32 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 6d 64 2d 33 20 6c 69 76 65 2d 77 65 62 69 6e 61 72 2d 69 6d 67 32 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 69 6d 61 67 65 73 2f 64 65 66 61 75 6c 74 57 65 62 69 6e Data Ascii: 1ff8</div><div class="col-sm-12 col-md-3"></div><div class="col-sm-12 col-md-9"><div class="live-webinar-list"><div class="webinars-box2"><div class="col-xs-12 col-sm-6 col-md-3 live-webinar-img2" style="background: url('/images/defaultWebin
2024-04-18 17:22:40 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-18 17:22:40 UTC	8184	IN	Data Raw: 6e 74 73 2d 74 6f 2d 62 75 69 6c 64 2d 63 6f 68 65 73 69 76 65 2d 74 65 61 6d 73 2d 26 61 6d 70 3b 2d 73 74 72 65 6e 67 74 68 65 6e 2d 65 6d 70 6c 6f 79 65 65 2d 72 65 6c 61 74 69 6f 6e 73 2d 2d 32 30 36 38 36 34 72 65 63 27 3e 20 55 73 69 6e 67 20 43 6f 6e 73 74 72 75 63 74 69 76 65 20 44 69 73 61 67 72 65 65 6d 65 6e 74 73 20 74 6f 20 42 75 69 6c 64 20 43 6f 68 65 73 69 76 65 20 54 65 61 6d 73 20 26 61 6d 70 3b 20 53 74 72 65 6e 67 74 68 65 6e 20 45 6d 70 6c 6f 79 65 65 20 52 65 6c 61 74 69 6f 6e 73 20 3c 2f 61 3e 3c 2f 68 31 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 70 20 63 6c 61 73 73 3d 22 63 6f 6e 65 74 73 2d 73 70 61 63 65 20 68 69 64 64 65 6e 2d 78 73 20 68 69 64 64 65 6e 2d 73 6d 22 3e 44 69 73 61 67 72 65 65 6d 65 6e 74 73 20 69 6e 20 74 68 65 20 77 Data Ascii: nts-to-build-cohesive-teams-&-strengthen-employee-relations--206864rec'> Using Constructive Disagreements to Build Cohesive Teams & Strengthen Employee Relations </a></h1></div><p class="conets-space hidden-xs hidden-sm">Disagreements in the w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49913	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:37 UTC	1220	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460951387&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Flive-webinars&dt=Live%20Webinars%20%7C%20Professional%20Webinars%20Online%20%7C%20Courses%20Online&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=6846 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:37 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:22:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49912	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:40 UTC	917	OUT	GET /images/speakers/37730/Cox_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:40 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:45 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"17180-1579004945000" Last-Modified: Tue, 14 Jan 2020 12:29:05 GMT Content-Type: image/jpeg Content-Length: 17180 Connection: close
2024-04-18 17:22:40 UTC	7926	IN	Data Raw: ff d8 ff e1 0b 4b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 30 3a 30 31 3a 31 34 20 31 37 3a 35 36 3a 31 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: KExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2020:01:14 17:56:10Zp
2024-04-18 17:22:40 UTC	258	IN	Data Raw: 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d Data Ascii: 9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xm
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 Data Ascii: :xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:Cr
2024-04-18 17:22:41 UTC	804	IN	Data Raw: 6b 3b 04 28 a6 9f 67 91 15 26 95 ea 4e 52 22 22 da 4f 13 11 d4 ac 6f ac 9d 06 a0 86 39 ae 14 ba a3 37 27 a0 34 ab 6e 7b e5 91 2c 25 b2 50 c6 8c 3e 54 39 26 2b 81 dc ef 5c 55 14 27 68 63 79 a3 3f 1c 6a 5d 0f 7e 4b b8 c9 05 1c df ac ff 00 f3 99 ba da 5f fe 5a 7e 49 58 5a 33 5f da b5 ad b6 b3 33 2b 71 32 dc 6a 36 26 e5 e5 34 af 79 72 bc 92 e4 1d de 97 73 6f 39 ff 00 9c 17 d5 4e 9d ff 00 39 0d a4 59 fa 57 50 47 af f9 77 5c d3 6e 12 43 c9 1e b6 c2 e5 7b 0f db b7 14 c7 11 dd bf 50 2e 36 93 7f cf c2 a3 48 ff 00 3d 6c 18 c5 e8 ce de 51 d3 23 b9 07 a9 f4 9a 55 4a 8f 1e 34 19 70 0e 9b 53 f5 3e 08 77 00 ef d3 6e 99 27 14 b2 6f 28 c8 f1 5e b4 d1 39 8e 7b 6e 32 46 6b 4e 4a c7 8c 88 7c 41 14 fa 69 94 66 3b 36 e2 d8 bd aa c7 5d 78 9c 1e 5b 81 b9 19 84 43 94 26 43 27 ff Data Ascii: k;(g&NR""Oo97'4n{,%P>T9&+\U'hcy?j]~K_Z~IXZ3_3+q2j6&4yrso9N9YWPGw\nC{P.6H=lQ#UJ4pS>wn'o(^9{n2FkNJ\|Aif;6]x[C&C'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49917	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	915	OUT	GET /images/products/detail/207034.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:41 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"9653-1678780505000" Last-Modified: Tue, 14 Mar 2023 07:55:05 GMT Content-Type: image/jpeg Content-Length: 9653 Connection: close
2024-04-18 17:22:41 UTC	7928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 08 14 14 14 17 15 14 14 17 17 17 18 1a 17 18 17 17 18 17 17 19 1a 1c 18 18 1a 18 19 1a 1a 1a 1a 1d 20 2c 23 1a 1d 29 1e 19 18 24 36 24 29 2d 2f 33 33 33 1c 22 38 3e 38 30 3d 2c 32 33 2f 01 0b 0b 0b 0f 0e 0f 1d 12 12 1d 32 29 22 22 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 b7 01 13 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 02 07 08 ff c4 00 40 10 00 02 01 02 04 03 05 04 07 07 04 02 03 01 00 00 01 02 03 00 11 04 12 21 31 05 41 51 06 13 22 61 71 32 81 91 a1 07 42 52 62 b1 c1 f0 14 23 33 Data Ascii: JFIF ,#)$6$)-/333"8>80=,23/2)""22222222222222222222222222222222222222222222222222"@!1AQ"aq2BRb#3
2024-04-18 17:22:41 UTC	256	IN	Data Raw: 7d 65 d9 d2 07 33 c8 a3 22 36 69 57 c1 a0 5f 6f 2e b9 1b c8 12 34 f3 b0 a9 c0 06 e2 58 05 18 a8 8c 4d 20 01 c1 5d 4d bf d4 8c 1d 52 fb 8b 8d 35 f6 86 a4 97 41 43 1f 62 78 5e 2d 56 4c 2c ce b9 86 61 91 c3 d8 6c 73 2b 82 eb d0 82 45 69 7b 3b d9 a1 84 5b 3c f2 cc 79 67 77 ee d4 0d b2 c7 98 a8 3e 66 e7 a5 b6 ab 3e 19 c3 22 c3 20 8e 18 d6 35 1c 87 33 d5 8e ec 7c cd 1c 4b 89 47 87 4c d2 b5 81 36 55 00 b3 bb 1d 95 10 78 9d 8f 40 29 5b 6f 41 2c 9a a2 6e 29 2e 24 94 c1 d8 20 36 7c 5b 0b a0 ea 21 53 fc 56 fb de c0 3c da c4 57 03 03 36 2f c5 8a 06 38 37 5c 20 6f 13 79 e2 1d 4d 9b ff 00 ad 4e 5e a5 b6 ab f4 50 00 00 00 00 b0 03 40 00 d8 01 c8 51 e0 42 e1 9c 32 38 01 11 82 59 ce 69 24 73 9a 49 1b ed 3b 1d 4f 90 d8 6c 00 15 3a 8a 28 02 8a 28 a0 0a 4a 5a 4a 0c 51 45 14 Data Ascii: }e3"6iW_o.4XM ]MR5ACbx^-VL,als+Ei{;[<ygw>f>" 53\|KGL6Ux@)[oA,n).$ 6\|[!SV<W6/87\ oyMN^P@QB28Yi$sI;Ol:((JZJQE
2024-04-18 17:22:41 UTC	1469	IN	Data Raw: 51 45 14 c8 51 49 45 01 e1 1c 63 b5 72 49 74 82 f1 a6 a0 be d2 30 f2 fb 03 e7 e9 59 f5 1f e7 ce 91 16 bb 02 b6 c7 19 3c 16 ec 5a 9b 96 0b 8a 78 0a e9 6a b5 b2 77 d9 4e 3d 27 0c c4 89 54 16 89 ec b3 46 3e b2 5f 71 f7 d6 e4 8f 78 d8 9a fa 1f 03 8b 49 a3 49 23 70 e9 22 86 56 1b 10 7f 0f 4e 46 be 74 78 83 0d 6b 4f f4 79 da 73 81 93 b8 9d bf fe 59 0e 8c 76 8a 43 f5 bc 91 b9 f4 36 3f 6a f8 e5 86 8f 7b 7b 6d 14 82 96 a0 c5 2d 14 50 42 8a 28 a4 05 54 f6 96 7c 4c 78 77 7c 22 2b ca 39 35 cd 97 eb 32 a8 f6 d8 6e 16 e2 fe 66 c0 db 51 4c 31 3d a6 ec 34 78 b8 43 47 21 6c 4a ae 65 9e 46 27 bd b8 bd 9e da 05 3c b2 80 16 fa 0b 5c 1c c7 62 7b 61 26 0a 4f d8 b1 a1 92 34 6c 80 bf b5 09 fb 2d d6 3d 45 8e c0 10 47 87 6f 5d ac a7 6d 7b 21 1e 39 33 a5 93 10 82 c8 fb 06 03 5c 92 Data Ascii: QEQIEcrIt0Y<ZxjwN='TF>_qxII#p"VNFtxkOysYvC6?j{{m-PB(T\|Lxw\|"+952nfQL1=4xCG!lJeF'<\b{a&O4l-=EGo]m{!93\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49918	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	915	OUT	GET /images/products/detail/207042.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:41 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"45119-1678783461000" Last-Modified: Tue, 14 Mar 2023 08:44:21 GMT Content-Type: image/jpeg Content-Length: 45119 Connection: close
2024-04-18 17:22:41 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:41 UTC	258	IN	Data Raw: 23 fe d3 7f db 53 e5 e4 b1 68 95 33 8b aa 22 c7 cb c4 14 25 57 f2 80 39 9a f5 6e 49 ac b9 aa d3 2b 97 36 ba 70 f9 53 dd 4e 24 4b 5f 66 36 ae b8 c7 67 d6 cc c5 77 0e 78 a0 14 02 80 50 0a 01 40 74 72 59 68 38 96 4b d3 1c d0 00 25 23 4a 8d cd 89 b7 94 1f 65 01 a8 8c b4 ad df 91 46 39 b1 e9 b1 47 51 5a 7c ae 75 12 d8 51 4a f8 84 28 5c 94 f9 6f 40 6f 4d b6 86 90 10 81 64 8e 43 9f 3e 3e 34 07 d5 00 a0 35 45 9b 6e c9 86 fa 6d 8a 73 cd ce df 7f ce a9 bc ec af e5 a3 fe a2 fc 26 17 ad ff 00 94 ff 00 a4 aa 1b f9 7a 0c b6 33 2e 60 41 98 e8 3e ad f4 f4 9b 89 1a dd 2e a3 ee a8 a1 b6 f5 d8 81 ad 6a 4a 75 2b 80 e6 78 55 51 a5 7b 4f de 4e 2b e1 58 d5 ed a2 58 b7 4e 84 6b 90 f0 86 24 fc 94 36 53 d7 dd 7b 8c bf 22 77 1d 1f 0e c7 4f 50 4b 88 e2 a2 db fd 07 07 34 e9 5a fc 2c Data Ascii: #Sh3"%W9nI+6pSN$K_f6gwxP@trYh8K%#JeF9GQZ\|uQJ(\o@oMdC>>45Enms&z3.`A>.jJu+xUQ{ON+XXNk$6S{"wOPK4Z,
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: e6 ab 3c 21 27 85 ab 34 51 ff 00 32 70 d8 fe 68 e6 8f 1a a8 f5 9b fe 03 07 17 6f e3 5b 81 17 8a 80 4a a4 3b e6 1d 57 b4 25 2a 73 49 52 b4 ea d3 7d 20 d8 50 8d 6a f5 52 d4 5c 73 97 93 a1 70 32 74 35 0f 25 7e 61 77 cf ed e7 77 77 0e 71 a7 35 e1 87 a3 f8 71 b5 ad fd 46 3b 6e f3 43 6b f7 db fd 21 f5 70 a9 26 9a de 5b 69 2d a6 a5 c9 25 8b d8 75 f1 71 cc 58 0c 34 7d ed 08 2b fe 36 90 0f b7 d9 5e 75 ae bd de de 94 ba 5d 3a aa cf a1 79 36 97 f2 da 48 43 7e 58 b7 d7 95 26 76 5c 26 c9 1e 0a 50 07 ea 35 a6 8e b3 31 7b 92 39 7b 0c fa 52 6d a7 45 bf db 13 5d 7e 4f 73 2e aa 3e 5f c2 c8 af 8a f4 fd ef 2d b8 96 d5 97 f1 c4 bb 9f 23 9b e4 ee 1e d7 1d a6 fb fd 6c 86 d6 fe d5 e4 d1 6f 89 4d 9c fa 39 21 29 f7 53 e0 a5 7e 0a 92 eb ad e5 b9 55 b1 fd 47 8a c1 d5 16 86 b4 0c 82 Data Ascii: <!'4Q2pho[J;W%*sIR} PjR\sp2t5%~awwwq5qF;nCk!p&[i-%uqX4}+6^u]:y6HC~X&v\&P51{9{RmE]~Os.>_-#loM9!)S~UG
2024-04-18 17:22:41 UTC	8176	IN	Data Raw: 1e 85 c9 34 52 b3 6f 3c b6 cb d4 d2 f4 9b 5f 78 23 39 9a d9 b3 be 12 44 d7 22 2d 2d 3e cc 7b bc e0 73 d4 33 74 69 40 57 99 36 ba 81 e5 5c 6e 54 fb bb eb 3f 66 bc 70 dc cd 9e 68 bb cb 2f 2e 34 e1 d6 8a e0 c4 59 52 95 a2 24 77 64 b9 fd 1b 28 53 8a f6 f2 48 3e ca 99 b9 28 ed 74 22 0a 2d ec 55 2c ef 62 f6 16 e2 67 6b ba bf 48 e3 19 69 8f 3e e2 5a 92 db a8 43 7f ab 69 21 c4 f4 f5 26 e5 01 5f c5 37 a8 de a6 c4 b5 da 9a 5b f8 62 97 6b 77 9d 57 1e d1 23 d2 dc 8e 8a c6 6b 95 cd 26 f0 df e6 74 e0 62 fb 81 f2 91 dc fe e8 65 d3 93 dc b9 3c 0c 56 a3 28 27 1e 8c 7b f3 1b 5f 41 b7 1c 5b 5d 60 f4 47 46 bb 3a ad 7a 4d b9 5a a7 9c aa dd bd 05 bc b0 ab 6f 6d 69 b6 8a b4 d9 86 18 11 6d 76 aa 5a a9 e6 74 4b 77 56 3b 76 e3 89 1a 6e 5f 91 9e ee 62 87 5b 03 90 c2 4b 8c 05 d6 da Data Ascii: 4Ro<_x#9D"-->{s3ti@W6\nT?fph/.4YR$wd(SH>(t"-U,bgkHi>ZCi!&_7[bkwW#k&tbe<V('{_A[]`GF:zMZomimvZtKwV;vn_b[K
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: 25 3c a4 25 bf 5e f8 f6 cf 32 16 06 86 5f 2f b6 51 c8 84 47 70 83 fa 5f 6a b1 72 bb 6f 4b af ee fe ee 35 fd 24 ba 38 1b 3e 2a 94 75 9c a5 5d 8e 2b 36 65 d5 dd c9 a7 bf 89 06 d7 a3 1e 00 5a df 96 1d b3 0b 7a 9d b5 b3 e5 3a eb 31 a4 fa ee b3 cc a9 28 70 74 fd 4b e9 d2 a5 25 60 5c a2 c6 e9 af 38 e6 ba 57 a8 e6 59 1b c2 7c 3a 20 8f 77 e4 dc c5 e8 3c 3a b5 11 49 ca 1b 9e ce d5 e7 1e 2b 8f 12 69 da dd b1 dc 78 3e ef e3 70 32 22 38 e4 78 6f 05 3d 91 6d b7 55 13 4a e2 97 ae 1d 2d 24 70 be 9e 23 de e1 5c fd 37 2f bb 6f 59 18 b5 84 77 e3 4c 63 c6 87 47 98 73 fd 3d fe 4f 3b aa 49 4a 6b e1 aa cd 84 e9 b3 37 d1 1a 67 cf 26 ed 8a b9 b8 0e d6 c4 71 2a 6a 10 87 b8 24 74 94 92 3d 53 2a 9d 09 5a b4 ae d7 b7 3b b7 7f e1 78 57 ac f2 cb 3d dc 5c bc 9e a3 e7 ed 5d f7 76 6d b2 Data Ascii: %<%^2_/QGp_jroK5$8>u]+6eZz:1(ptK%`\8WY\|: w<:I+ix>p2"8xo=mUJ-$p#\7/oYwLcGs=O;IJk7g&qj$t=S*Z;xW=\]vm
2024-04-18 17:22:41 UTC	8176	IN	Data Raw: 2a 8b 6a 8f ea 23 c5 b5 d0 b7 07 9a 42 db 4f ba da cf 3f 0f aa ac 94 e3 0c 64 e8 8a d1 bd 86 eb ff 00 65 df 99 0f f1 0b fe 97 c4 ff 00 85 55 9f 98 b3 f3 7a 19 76 46 3f ec bb f3 21 fe 21 7f d2 f8 9f f0 aa 7e 62 cf cd e8 63 23 1f f6 5d f9 90 ff 00 10 bf e9 7c 4f f8 55 3f 31 67 e6 f4 31 91 8f fb 2e fc c8 7f 88 5f f4 be 27 fc 2a 9f 98 b3 f3 7a 18 c8 cc 0e ee ec c7 77 3b 7b 87 7b 70 ef ad b1 f0 7c 23 1a 7a 92 fd 7c 19 76 d6 e2 1a 1e 48 cf 38 bf 7d c4 27 dd f1 f6 5e af 8d db 73 74 8b ab ea 28 e2 d1 a4 d5 e5 a2 80 fc 20 28 58 f1 06 80 f4 ab e4 bf 79 c8 dc dd 9c c7 63 32 0b ea 65 b0 fd 7f 58 bb 04 df d5 cf 98 b6 f8 21 09 4f ba 91 ee 93 f4 d7 0f 5b 05 1b 8e 9b 3e a3 62 0f 02 63 ee 24 c4 42 d9 59 c5 28 d8 bb 06 5b 49 1e d5 2a 3b 96 1c 8d af 6a e3 6a e5 4b 52 ea 7e Data Ascii: j#BO?deUzvF?!!~bc#]\|OU?1g1._'zw;{{p\|#z\|vH8}'^st( (Xyc2eX!O[>bc$BY([I*;jjKR~
2024-04-18 17:22:41 UTC	4199	IN	Data Raw: 8b be ed 8d 29 8b 82 09 f0 1d 3c 95 bf bf 6b 17 71 22 a7 d7 fd b9 bb f3 fd cd 82 ff 00 6b c9 ff 00 87 53 b8 90 1f f6 e6 ef cf f7 36 0b fd af 27 fe 1d 4e e2 40 98 be 5e fe 60 fb ef dd 5d cb 25 59 88 d8 98 fb 5b 0f a3 e2 8e 32 8c 93 6f 2f d5 b3 23 a3 d1 2e 48 75 b3 67 1a 1a f5 db 87 2e 35 64 ad b8 60 c1 68 17 bb 32 cb 4a d0 43 5a 16 92 93 ef de ca 16 3f a7 ce b1 02 36 9e f3 aa c9 48 7f 59 0e f5 96 a0 a0 48 20 eb 27 81 e7 ce 80 9e f6 db c5 fc 06 31 6a 25 4b f4 ac 05 a9 5c 49 57 49 24 9b d0 19 4a 03 86 54 58 b3 a3 3d 0a 6b 2d c9 87 21 0a 69 f8 ef 24 38 d3 8d ac 59 49 5a 54 08 20 83 62 0d 01 03 6f 7f 94 3e d5 ee cc d4 5c fc 28 ce 60 e5 c7 94 dc c7 62 62 51 0a 14 39 0a 6d c5 ba a0 f2 13 11 65 61 65 7a 57 75 71 48 1e ca da 8e aa e4 55 2b 5e b2 d7 14 6d ae e3 32 Data Ascii: )<kq"kS6'N@^`]%Y[2o/#.Hug.5d`h2JCZ?6HYH '1j%K\IWI$JTX=k-!i$8YIZT bo>\(`bbQ9meaezWuqHU+^m2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49916	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	915	OUT	GET /images/products/detail/207031.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:41 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"48929-1678778330000" Last-Modified: Tue, 14 Mar 2023 07:18:50 GMT Content-Type: image/jpeg Content-Length: 48929 Connection: close
2024-04-18 17:22:41 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 19 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:41 UTC	258	IN	Data Raw: ed 4e 8a ab 45 7d 33 f2 2c ba c3 a9 33 d7 42 83 06 1e 35 e6 96 c4 d9 f3 7b d5 b6 88 24 d3 b3 52 ea 92 47 4f 59 5a c0 74 6f c0 0d 52 e9 f3 ac 8e 91 07 6b 2f 00 4a 41 d2 62 03 aa be 25 b8 6d 3c bf 82 54 d1 52 1d 97 fa 10 5c b7 2b b6 69 d4 8f 96 03 cb ab d5 8b 20 c5 2b 1f b4 65 16 aa 9a 0a da 62 5b 5b ca 6c 86 96 13 a4 c1 3d f0 64 df 6a ab ac a6 ab f7 dc 72 e0 ba 1a be a5 e6 56 7a 8e f1 38 32 e8 5e 20 f8 b9 e4 0e 3b ad a2 b6 e6 75 6b be e3 f5 2e 06 de ab 78 ee 71 94 93 29 8f 34 18 7a 41 8e 64 96 bc a6 d1 45 7f b1 3e 9a ab 6d 6a 52 b4 bc 83 3d 54 3a 7c 90 1e 6a 7c 61 02 39 d2 e8 b5 a7 ea c2 1b 92 87 5e 82 02 8b 6a e9 5f 68 aa fb ca d9 58 68 ae 48 d2 9a ad 26 4e 24 1e e8 32 5e ae 4b e4 02 ad a7 35 ab f1 7a 91 bc fc f0 60 0f 20 e6 37 66 5c b6 5c 72 da 8a ca 05 Data Ascii: NE}3,3B5{$RGOYZtoRk/JAb%m<TR\+i +eb[[l=djrVz82^ ;uk.xq)4zAdE>mjR=T:\|j\|a9^j_hXhH&N$2^K5z` 7f\\r
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: a5 75 47 62 ff 00 2c 03 49 09 14 ee a4 0f 57 62 bf 34 19 7a 89 f0 6b ff 00 e8 7b 10 ec 0a 77 4f 94 41 85 d1 90 5d 69 6c 16 4b 8d ee ad 61 96 69 58 71 c5 2c e9 aa 52 48 fc b0 1e 38 e6 b9 63 f9 66 6b 91 e6 35 8b 2e 26 bd e7 13 bd 5a fa ad 1d 20 cb ae fe 03 78 dc b9 66 c8 b3 8a f6 f7 53 de 10 aa 5b 7a 94 27 b5 2b 9a 55 29 c1 87 2e f3 16 16 ef 1d 72 a6 45 8a 78 72 a7 53 aa 7e 98 ab 44 2f c6 33 3a fc b0 17 e7 c0 76 7e 6c b9 65 db 03 b8 3e 7c 3b ac 97 6f 69 47 44 14 6a 76 c0 7a 17 20 55 e6 eb e5 80 36 0c 04 00 80 10 02 00 40 79 79 f1 ee 0a 39 49 87 0f ad b9 02 43 bb 41 13 45 53 fc 36 52 b5 51 cd 38 e5 2b cd 07 d9 71 c3 bd a5 6a 0c 67 ea c6 7a 3d 63 ba db b1 6a 32 8a 65 da 98 33 48 d3 68 8a d3 36 22 c9 8d bc a2 96 6d 2c a7 fd d1 f3 40 12 ed 83 1a f7 77 12 bb 4b Data Ascii: uGb,IWb4zk{wOA]ilKaiXq,RH8cfk5.&Z xfS[z'+U).rExrS~D/3:v~le>\|;oiGDjvz U6@yy9ICAES6RQ8+qjgz=cj2e3Hh6"m,@wK
2024-04-18 17:22:41 UTC	8176	IN	Data Raw: 6d dd c1 46 6a d0 c0 57 bc 83 82 59 f1 9a b6 59 a4 70 cd d2 26 14 7b e0 27 b8 af 11 e3 b5 96 96 ab 6a 37 ee 71 20 a8 83 a6 b0 0b dd e2 5c 49 97 52 86 df f5 47 79 ef 80 26 e1 c5 18 95 3b 61 e6 d6 92 e8 1d 4c 04 65 bc 2b 19 0e f8 6a 56 84 eb 01 60 e3 7c 35 87 5c 69 1e 7c 15 15 a5 a5 28 4b bc 08 0e 10 e4 8a 24 5b 73 5b b5 12 27 b1 a7 54 84 cf b8 18 94 c0 ec 1f f4 df ff 00 ac 65 9f c4 6b f3 44 47 a2 11 81 82 64 27 18 c8 29 0f 17 07 aa 36 ac 75 49 ea 22 40 c5 2a 49 99 d3 cf 01 82 54 04 c6 a3 ba 03 1e 28 0a 0d ce 6b 3d 44 05 6b c9 7c 9a bc 0e f7 8f da d0 cf 88 dd e9 c2 da dc 23 44 6b 28 0b 0b de 12 28 8d 41 04 20 35 e3 13 e4 09 dd 01 17 c2 b9 02 d1 9c aa b0 5b 1a 71 0a b7 38 5a 77 77 69 06 50 04 d8 39 32 cb 92 66 d7 ec 16 91 0a 17 5b 08 49 ab 27 a7 ad d2 02 66 Data Ascii: mFjWYYp&{'j7q \IRGy&;aLe+jV`\|5\i\|(K$[s['TekDGd')6uI"@*IT(k=Dk\|#Dk((A 5[q8ZwwiP92f[I'f
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: a9 40 c1 3d 2f c3 7e 73 54 54 16 fb 8d 10 27 3f 10 eb f9 63 19 67 8a aa ca 30 3c 96 c7 7b fb 9a a6 a9 61 d2 b0 80 4a cf 69 83 1c 53 9a 7f 87 ec 9d ca 36 6a 3d fd 72 79 21 52 dc 7b 62 58 60 be 87 e1 eb 27 42 e7 ef eb 32 fe 19 8c f1 61 cc 1c 9f c4 57 b6 73 bb 95 2d 4d 44 dc 4c 8e e3 ac e2 ae 4b 7d b4 6a 9b 86 af 75 12 4a 1d 09 1d f0 e4 7b 67 04 f0 0e 42 af fe 61 30 e4 7b 63 93 f0 f5 91 1f fe 65 30 e4 7b 6c fe 1e 72 1f ef 29 87 26 7d b0 fc 3c e4 3f de 93 0e 47 b6 33 f0 ed 7e fe f8 98 72 3d b0 fc 3b 5f bf be 27 d1 0e 47 b6 cf e1 da f9 fd f5 3e 88 af dd fd 10 e2 c7 e1 de f7 fd f5 3e 88 96 cd 9c 70 71 63 f0 f5 79 fe fc 9f 44 74 29 a3 95 73 94 b8 07 e1 ee f1 db 5c 9f 44 73 35 6e 8b e7 f4 4a 35 34 fc 3f dd 7f bf 0f 44 4b 46 d8 d9 9f a6 12 db a7 84 77 0f c3 fd d7 Data Ascii: @=/~sTT'?cg0<{aJiS6j=ry!R{bX`'B2aWs-MDLK}juJ{gBa0{ce0{lr)&}<?G3~r=;_'G>>pqcyDt)s\Ds5nJ54?DKFw
2024-04-18 17:22:41 UTC	8176	IN	Data Raw: 8f f5 ad b1 d7 30 83 bd c7 d9 ed b1 0e b3 59 63 a9 71 47 b4 20 91 21 f2 45 b4 f9 ef 13 6f ed a2 bb fc 2e ca 7a 19 ab a8 ee 94 4d 6c 7e 85 ca 62 9e d7 12 44 bf 24 74 35 ee a6 df db 0e 7e cf 12 6b dc d5 51 71 49 6d 09 69 53 7e 44 2f 43 a9 8d ef c7 bc d6 66 3d 1a b5 d3 19 76 7f 07 a1 76 ee 36 a0 5b c9 f0 ea 1d 24 b9 b7 42 41 e9 1f 08 f9 6d f9 d9 68 fd 5f 58 f1 75 7d b5 ff 00 85 82 c9 f7 b5 29 0e 6a 3b d5 1e 5b 5c f5 7a 0a 57 10 3f ee f7 10 08 f1 01 1d 80 f4 8a fc 9b f4 62 41 ba 70 db 64 2b 6a 5e ec 52 63 4f 57 5c a7 58 64 53 a8 ff 00 39 ac 5b 96 70 30 52 a8 6b e2 74 d6 50 c9 86 e1 b5 3a 5d 03 db 52 08 da 7a 8d 3b 61 2c a1 74 35 2c 25 f5 d2 36 b0 b7 1b 59 dc 47 40 67 18 c0 af 3e 25 31 aa 8b bf 1b 3f 75 a5 48 76 e1 6b 52 56 cc 84 ce d9 cc ca 2e d1 7e bd 5a 16 Data Ascii: 0YcqG !Eo.zMl~bD$t5~kQqImiS~D/Cf=vv6[$BAmh_Xu})j;[\zW?bApd+j^RcOW\XdS9[p0RktP:]Rz;a,t5,%6YG@g>%1?uHvkRV.~Z
2024-04-18 17:22:41 UTC	8009	IN	Data Raw: e8 cc 58 df c1 79 63 96 ab d5 df 05 bb 3c 02 d0 e2 97 47 bf 41 eb 1e c9 c7 1b 6c 75 59 10 bb 2e 97 2b 55 b9 0d bb 71 ad 69 0d 89 cf eb 00 8a 23 a2 51 19 40 32 4e 6a e3 7b 34 cb d7 84 ba f2 7a 30 8d 66 47 64 c4 6a 7e 56 cb 74 cb 3c 30 ab af df 16 14 d4 f3 45 9e c6 a7 1a 1a 25 f9 f5 f2 c5 79 bd d6 d6 d8 56 79 1f c4 26 71 70 4f 8a 8b 82 6d ec 3d a2 18 4e aa 91 88 7b 57 cf 66 f6 be a8 05 4d f3 24 c8 dc 50 5b d5 95 35 2a 33 4c b7 84 99 c3 85 a2 5d 1a e9 cf 5c 1d 2d 78 37 20 5d ea 1b 6d 8b 4a d2 08 97 88 e8 9f cb ac 4f d8 88 6c 4f 95 7f 57 4d f0 86 09 7e c3 69 2a 55 79 6e 65 ed 76 77 46 ce ad 78 69 6d df 6b 46 32 b7 db 5a 01 99 4e 91 d3 d7 0d 0b ec b9 5a 1f 64 0d 52 27 d9 1b 95 96 b5 ad 79 6a aa b7 40 da d6 80 fb 51 8b 6c 63 5f 8d 8e b8 56 fc bf 7d 2d 52 db ed Data Ascii: Xyc<GAluY.+Uqi#Q@2Nj{4z0fGdj~Vt<0E%yVy&qpOm=N{WfM$P[53L]\-x7 ]mJOlOWM~iUynevwFximkF2ZNZdR'yj@Qlc_V}-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49915	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	918	OUT	GET /images/speakers/34674/Ryan_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:41 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"18999-1536742939000" Last-Modified: Wed, 12 Sep 2018 09:02:19 GMT Content-Type: image/jpeg Content-Length: 18999 Connection: close
2024-04-18 17:22:41 UTC	7926	IN	Data Raw: ff d8 ff e1 0a 13 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 39 3a 31 32 20 31 34 3a 32 38 3a 33 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2018:09:12 14:28:37Zp
2024-04-18 17:22:41 UTC	258	IN	Data Raw: 3a 32 38 3a 33 37 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 41 32 45 35 32 42 34 36 39 42 36 45 38 31 31 38 43 37 33 42 30 43 45 35 41 36 32 33 31 45 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 39 32 45 35 32 42 34 36 39 42 36 45 38 31 31 38 43 37 33 42 30 43 45 35 41 36 32 33 31 45 44 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 39 32 45 35 32 42 34 36 39 42 36 45 38 31 31 38 43 37 33 42 30 43 45 35 41 36 32 33 31 45 44 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d Data Ascii: :28:37+05:30" xmpMM:InstanceID="xmp.iid:CA2E52B469B6E8118C73B0CE5A6231ED" xmpMM:DocumentID="xmp.did:C92E52B469B6E8118C73B0CE5A6231ED" xmpMM:OriginalDocumentID="xmp.did:C92E52B469B6E8118C73B0CE5A6231ED" photoshop:ColorMode="3" dc:format="image/jpeg"> <xmpM
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 39 32 45 35 32 42 34 36 39 42 36 45 38 31 31 38 43 37 33 42 30 43 45 35 41 36 32 33 31 45 44 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 38 2d 30 39 2d 31 32 54 31 34 3a 32 38 3a 33 37 2b 30 35 3a 33 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 Data Ascii: istory> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:C92E52B469B6E8118C73B0CE5A6231ED" stEvt:when="2018-09-12T14:28:37+05:30" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.ii
2024-04-18 17:22:41 UTC	2623	IN	Data Raw: 15 1a 7e 82 4b 1f 65 41 ea 78 87 6f 67 a8 d3 9a 82 c7 4e 8b 63 ed c0 2c c7 ee d3 41 06 bd ce 3b 9c 20 1c 88 e5 af 4e 0b 52 db f8 eb f8 e3 37 cf 56 81 e8 c2 6b d7 b0 3e 38 66 86 2d 15 12 c4 2d a1 57 1f 16 a3 86 b3 f2 52 5c ba cd 03 c9 33 80 d6 62 90 c8 bd b2 b3 10 5d fd b5 e4 a0 80 07 1b 56 b9 ad 2c f5 31 ad 5e 29 62 3a 48 3e 5d 62 0b fb 53 ea ca c7 53 e9 a7 14 66 b3 b6 e8 67 2b 51 c8 43 99 af 4a e1 30 0a b6 c3 06 5b 69 22 a7 63 46 0f ea 39 20 f1 6b 78 e4 f0 d4 f1 39 ab c2 1b ec 31 53 9f 6a cc 90 2e 90 bc ab 1e 95 62 ec 0a 34 03 43 d7 5e 36 de 06 9d ab 8f 57 74 64 f1 d8 39 2b 0a 65 aa 16 87 23 0c 72 49 5a 5d 0a cb 28 84 16 62 35 d1 79 f1 84 c0 41 f7 38 5c 4e 3b 13 11 1a 9d 7e 42 a4 35 95 89 3d 49 11 fe 55 56 70 19 fe c8 f5 3f d9 c6 37 23 5b 3c db 77 25 86 Data Ascii: ~KeAxogNc,A; NR7Vk>8f--WR\3b]V,1^)b:H>]bSSfg+QCJ0[i"cF9 kx91Sj.b4C^6Wtd9+e#rIZ](b5yA8\N;~B5=IUVp?7#[<w%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49920	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	929	OUT	GET /images/speakers/55398/Howard%20Levitt_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:41 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"23610-1678078923000" Last-Modified: Mon, 06 Mar 2023 05:02:03 GMT Content-Type: image/jpeg Content-Length: 23610 Connection: close
2024-04-18 17:22:41 UTC	7926	IN	Data Raw: ff d8 ff e1 0a b6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 33 3a 30 36 20 31 30 3a 32 39 3a 34 39 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:03:06 10:29:49Zp
2024-04-18 17:22:41 UTC	258	IN	Data Raw: 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 30 33 2d 30 36 54 31 30 3a 32 39 3a 34 39 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 Data Ascii: ttp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2023-03-06T10:29:49+05:30" xmp:MetadataDate="
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: 33 2d 30 33 2d 30 36 54 31 30 3a 32 39 3a 34 39 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 2d 30 33 2d 30 36 54 31 30 3a 32 39 3a 34 39 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 45 46 30 31 45 33 42 38 44 42 42 42 45 44 31 31 42 38 30 31 41 39 44 43 30 36 43 44 31 36 39 42 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 45 45 30 31 45 33 42 38 44 42 42 42 45 44 31 31 42 38 30 31 41 39 44 43 30 36 43 44 31 36 39 42 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 45 45 30 31 45 33 42 38 44 42 42 42 45 44 31 31 42 38 30 31 41 39 44 43 30 36 43 44 31 36 39 42 22 20 Data Ascii: 3-03-06T10:29:49+05:30" xmp:ModifyDate="2023-03-06T10:29:49+05:30" xmpMM:InstanceID="xmp.iid:EF01E3B8DBBBED11B801A9DC06CD169B" xmpMM:DocumentID="xmp.did:EE01E3B8DBBBED11B801A9DC06CD169B" xmpMM:OriginalDocumentID="xmp.did:EE01E3B8DBBBED11B801A9DC06CD169B"
2024-04-18 17:22:41 UTC	7234	IN	Data Raw: 05 00 32 e4 ae 2a aa 7b 14 f6 29 91 ac 29 99 17 3e f7 0e 65 cb 87 3d d2 77 f3 0e 49 ea 57 6b 31 c7 71 70 e3 e3 ba 3e 1b a3 cd a2 23 ad a2 2b 8d aa a7 05 d1 38 a8 9e ce bb a2 3d 32 eb c6 25 63 b1 3d a0 be 68 9e a2 ad f8 f4 dc eb d1 0b 0a d5 87 e9 df b0 75 be bb 76 6d d0 fb 78 34 eb 5b e9 c6 91 34 eb 5b 27 01 d1 d1 ef 57 13 de 36 26 bc 72 8e 74 ea 47 5d 2c 2c 41 68 5d 56 d4 17 e1 76 6a d8 8d 1a 67 60 2a 0f da 79 a6 9f 7c da d3 e9 32 ef 9b 45 9d 44 a8 c1 aa 47 79 37 d3 8d fd f0 4d 4a cf 4c 25 d3 ed 16 c8 7a b7 69 46 ed 46 1b c5 35 cc 85 d8 4c 75 69 e3 5c bd dd ec 87 90 6e 7e c2 59 b7 2e 5b 0e 94 d3 6d 1b f7 ae 17 be 24 c7 95 aa 27 52 2a b2 a9 f6 7a af 20 70 55 13 8e ba f1 d9 cb a5 7b 0f de 7c 79 58 cb fd 6f be b0 05 f7 7b 5b 16 ff 00 51 ad 6b 97 13 50 71 35 Data Ascii: 2{))>e=wIWk1qp>#+8=2%c=huvmx4[4['W6&rtG],,Ah]Vvjg`y\|2EDGy7MJL%ziFF5Lui\n~Y.[m$'R*z pU{\|yXo{[QkPq5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49921	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:41 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:22:41 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876656a02a5c6777-ATL
2024-04-18 17:22:41 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49923	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	915	OUT	GET /images/speakers/39361/W_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:41 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"4192-1592989974000" Last-Modified: Wed, 24 Jun 2020 09:12:54 GMT Content-Type: image/jpeg Content-Length: 4192 Connection: close
2024-04-18 17:22:41 UTC	4192	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49924	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	662	OUT	GET /images/speakers/37730/Cox_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:41 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"17180-1579004945000" Last-Modified: Tue, 14 Jan 2020 12:29:05 GMT Content-Type: image/jpeg Content-Length: 17180 Connection: close
2024-04-18 17:22:41 UTC	7926	IN	Data Raw: ff d8 ff e1 0b 4b 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 30 3a 30 31 3a 31 34 20 31 37 3a 35 36 3a 31 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: KExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2020:01:14 17:56:10Zp
2024-04-18 17:22:41 UTC	258	IN	Data Raw: 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d Data Ascii: 9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xm
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 Data Ascii: :xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:Cr
2024-04-18 17:22:41 UTC	804	IN	Data Raw: 6b 3b 04 28 a6 9f 67 91 15 26 95 ea 4e 52 22 22 da 4f 13 11 d4 ac 6f ac 9d 06 a0 86 39 ae 14 ba a3 37 27 a0 34 ab 6e 7b e5 91 2c 25 b2 50 c6 8c 3e 54 39 26 2b 81 dc ef 5c 55 14 27 68 63 79 a3 3f 1c 6a 5d 0f 7e 4b b8 c9 05 1c df ac ff 00 f3 99 ba da 5f fe 5a 7e 49 58 5a 33 5f da b5 ad b6 b3 33 2b 71 32 dc 6a 36 26 e5 e5 34 af 79 72 bc 92 e4 1d de 97 73 6f 39 ff 00 9c 17 d5 4e 9d ff 00 39 0d a4 59 fa 57 50 47 af f9 77 5c d3 6e 12 43 c9 1e b6 c2 e5 7b 0f db b7 14 c7 11 dd bf 50 2e 36 93 7f cf c2 a3 48 ff 00 3d 6c 18 c5 e8 ce de 51 d3 23 b9 07 a9 f4 9a 55 4a 8f 1e 34 19 70 0e 9b 53 f5 3e 08 77 00 ef d3 6e 99 27 14 b2 6f 28 c8 f1 5e b4 d1 39 8e 7b 6e 32 46 6b 4e 4a c7 8c 88 7c 41 14 fa 69 94 66 3b 36 e2 d8 bd aa c7 5d 78 9c 1e 5b 81 b9 19 84 43 94 26 43 27 ff Data Ascii: k;(g&NR""Oo97'4n{,%P>T9&+\U'hcy?j]~K_Z~IXZ3_3+q2j6&4yrso9N9YWPGw\nC{P.6H=lQ#UJ4pS>wn'o(^9{n2FkNJ\|Aif;6]x[C&C'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49925	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	915	OUT	GET /images/speakers/35245/U_Large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:41 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"20838-1550490670000" Last-Modified: Mon, 18 Feb 2019 11:51:10 GMT Content-Type: image/jpeg Content-Length: 20838 Connection: close
2024-04-18 17:22:41 UTC	7926	IN	Data Raw: ff d8 ff e1 0b ae 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 30 32 3a 31 38 20 31 37 3a 31 39 3a 32 34 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2019:02:18 17:19:24Zp
2024-04-18 17:22:41 UTC	258	IN	Data Raw: 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0e 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 Data Ascii: IM!UAdobe PhotoshopAdobe Photoshop CS68BIM1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe X
2024-04-18 17:22:41 UTC	8192	IN	Data Raw: 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 Data Ascii: Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http
2024-04-18 17:22:41 UTC	4462	IN	Data Raw: d0 22 a7 dd 22 8a 6a 4a 8a 9e aa 5a 77 ec bd d3 af fa 86 e5 44 db 11 2a 78 e6 57 1c f1 7d 7d ec 97 44 2b d5 8c 62 9e 35 23 8c 6a 60 02 c7 8c 6a a4 ca 7c d7 45 db 20 05 57 dd 1e a4 64 97 bc 3d 99 d8 60 e5 61 1a 1d 36 54 cc 2b 31 9f 6c c4 86 1b 56 ac a7 47 18 b2 23 57 c3 b0 90 e2 ac 36 d3 6a 83 24 3e 45 13 5e 92 5d 35 75 bd 43 71 3c 05 22 25 ed 71 41 7d e6 de 22 03 26 11 55 15 d6 9d 26 bd cd 36 ed 55 15 54 4e 87 f8 e5 9d 7d 07 cd 44 b0 92 d1 cb 74 11 52 24 1d 7e 66 49 91 29 28 8b 2c 69 aa 2a a7 bd ae dd 74 5e 9d 77 1f ca a9 ae 4d c9 72 52 34 56 6c 23 c8 93 31 e6 1a 37 1e 8d 1c 1a 25 17 64 3f e1 53 f1 aa ee 40 1d 14 7b 2e 9c 69 e2 b0 06 d9 cb 33 9c 0d ba e8 cf 80 ca 68 6d b1 6c de 1d 98 49 58 3b 55 f1 6e a9 d4 17 9e 79 b5 47 05 c3 64 17 dc 37 3a 73 70 a2 ab Data Ascii: ""jJZwDxW}}D+b5#j`j\|E Wd=`a6T+1lVG#W6j$>E^]5uCq<"%qA}"&U&6UTN}DtR$~fI)(,it^wMrR4Vl#17%d?S@{.i3hmlIX;UnyGd7:sp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49926	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	660	OUT	GET /images/products/detail/207034.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:41 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"9653-1678780505000" Last-Modified: Tue, 14 Mar 2023 07:55:05 GMT Content-Type: image/jpeg Content-Length: 9653 Connection: close
2024-04-18 17:22:41 UTC	7928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 07 08 14 14 14 17 15 14 14 17 17 17 18 1a 17 18 17 17 18 17 17 19 1a 1c 18 18 1a 18 19 1a 1a 1a 1a 1d 20 2c 23 1a 1d 29 1e 19 18 24 36 24 29 2d 2f 33 33 33 1c 22 38 3e 38 30 3d 2c 32 33 2f 01 0b 0b 0b 0f 0e 0f 1d 12 12 1d 32 29 22 22 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 b7 01 13 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 02 07 08 ff c4 00 40 10 00 02 01 02 04 03 05 04 07 07 04 02 03 01 00 00 01 02 03 00 11 04 12 21 31 05 41 51 06 13 22 61 71 32 81 91 a1 07 42 52 62 b1 c1 f0 14 23 33 Data Ascii: JFIF ,#)$6$)-/333"8>80=,23/2)""22222222222222222222222222222222222222222222222222"@!1AQ"aq2BRb#3
2024-04-18 17:22:41 UTC	256	IN	Data Raw: 7d 65 d9 d2 07 33 c8 a3 22 36 69 57 c1 a0 5f 6f 2e b9 1b c8 12 34 f3 b0 a9 c0 06 e2 58 05 18 a8 8c 4d 20 01 c1 5d 4d bf d4 8c 1d 52 fb 8b 8d 35 f6 86 a4 97 41 43 1f 62 78 5e 2d 56 4c 2c ce b9 86 61 91 c3 d8 6c 73 2b 82 eb d0 82 45 69 7b 3b d9 a1 84 5b 3c f2 cc 79 67 77 ee d4 0d b2 c7 98 a8 3e 66 e7 a5 b6 ab 3e 19 c3 22 c3 20 8e 18 d6 35 1c 87 33 d5 8e ec 7c cd 1c 4b 89 47 87 4c d2 b5 81 36 55 00 b3 bb 1d 95 10 78 9d 8f 40 29 5b 6f 41 2c 9a a2 6e 29 2e 24 94 c1 d8 20 36 7c 5b 0b a0 ea 21 53 fc 56 fb de c0 3c da c4 57 03 03 36 2f c5 8a 06 38 37 5c 20 6f 13 79 e2 1d 4d 9b ff 00 ad 4e 5e a5 b6 ab f4 50 00 00 00 00 b0 03 40 00 d8 01 c8 51 e0 42 e1 9c 32 38 01 11 82 59 ce 69 24 73 9a 49 1b ed 3b 1d 4f 90 d8 6c 00 15 3a 8a 28 02 8a 28 a0 0a 4a 5a 4a 0c 51 45 14 Data Ascii: }e3"6iW_o.4XM ]MR5ACbx^-VL,als+Ei{;[<ygw>f>" 53\|KGL6Ux@)[oA,n).$ 6\|[!SV<W6/87\ oyMN^P@QB28Yi$sI;Ol:((JZJQE
2024-04-18 17:22:41 UTC	1469	IN	Data Raw: 51 45 14 c8 51 49 45 01 e1 1c 63 b5 72 49 74 82 f1 a6 a0 be d2 30 f2 fb 03 e7 e9 59 f5 1f e7 ce 91 16 bb 02 b6 c7 19 3c 16 ec 5a 9b 96 0b 8a 78 0a e9 6a b5 b2 77 d9 4e 3d 27 0c c4 89 54 16 89 ec b3 46 3e b2 5f 71 f7 d6 e4 8f 78 d8 9a fa 1f 03 8b 49 a3 49 23 70 e9 22 86 56 1b 10 7f 0f 4e 46 be 74 78 83 0d 6b 4f f4 79 da 73 81 93 b8 9d bf fe 59 0e 8c 76 8a 43 f5 bc 91 b9 f4 36 3f 6a f8 e5 86 8f 7b 7b 6d 14 82 96 a0 c5 2d 14 50 42 8a 28 a4 05 54 f6 96 7c 4c 78 77 7c 22 2b ca 39 35 cd 97 eb 32 a8 f6 d8 6e 16 e2 fe 66 c0 db 51 4c 31 3d a6 ec 34 78 b8 43 47 21 6c 4a ae 65 9e 46 27 bd b8 bd 9e da 05 3c b2 80 16 fa 0b 5c 1c c7 62 7b 61 26 0a 4f d8 b1 a1 92 34 6c 80 bf b5 09 fb 2d d6 3d 45 8e c0 10 47 87 6f 5d ac a7 6d 7b 21 1e 39 33 a5 93 10 82 c8 fb 06 03 5c 92 Data Ascii: QEQIEcrIt0Y<ZxjwN='TF>_qxII#p"VNFtxkOysYvC6?j{{m-PB(T\|Lxw\|"+952nfQL1=4xCG!lJeF'<\b{a&O4l-=EGo]m{!93\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49927	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	927	OUT	GET /images/speakers/63495/Payson%20Hall_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460951.50.0.0
2024-04-18 17:22:41 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"29483-1709716376000" Last-Modified: Wed, 06 Mar 2024 09:12:56 GMT Content-Type: image/jpeg Content-Length: 29483 Connection: close
2024-04-18 17:22:41 UTC	7926	IN	Data Raw: ff d8 ff e1 0d 80 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 33 3a 30 36 20 31 34 3a 32 39 3a 30 39 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:03:06 14:29:09Zp
2024-04-18 17:22:41 UTC	258	IN	Data Raw: b6 ef 56 db 65 e7 d9 d9 a3 89 09 4f 97 96 49 de c2 32 8c af fb aa 8e 5e 01 e6 24 2b fb cf 1d fa c6 05 a0 db a8 0e 05 87 b1 8e cb 62 b7 5b 63 7d 76 0f 63 84 8f 08 5a fd 47 a2 d3 9b 56 ed 9b 8f 2e 60 d2 7f 94 df e5 2c 86 d5 9f 87 49 a2 98 b6 b1 a0 27 47 0d 67 ba 76 48 56 87 e8 57 63 9f 51 a8 ea 1b 18 f8 d7 d9 ee 6f 27 48 f8 7e 72 54 d5 65 9d 59 97 96 4d 74 bd b5 0f 02 e8 f7 3f fe b6 9f 0e cc db 5d e8 56 c3 50 22 0d 8e e4 03 cc 37 fa ab 7f 0b a3 be cc 6a fe ce 04 55 64 ea 60 b9 a0 3b d4 3f ca 73 9e e5 5a 7e 93 5b 93 f9 36 63 eb 8d 9b 11 1d bf 79 e6 7e b0 09 75 ba 7f 83 d3 ee 72 d1 e9 45 c3 ea fd 5b 4c 4e 3b 67 e1 b5 de 6b 3f eb 46 33 99 97 e9 58 d7 33 80 01 07 51 ff 00 99 2d 4e 9d 43 bf 62 0a f6 c9 aa 81 bb 58 03 6b 5d ee fe 56 d4 ff 00 d1 87 f2 e8 b2 aa 9e Data Ascii: VeOI2^$+b[c}vcZGV.`,I'GgvHVWcQo'H~rTeYMt?]VP"7jUd`;?sZ~[6cy~urE[LN;gk?F3X3Q-NCbXk]V
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: e9 d7 40 85 2c fd e3 fc ec 76 e7 f7 51 2b 90 f7 0f 20 aa 47 fe dd 4a 3d 57 f4 1f 5f cd ff d4 c0 ce cb ab a9 d5 f6 5c 4a 9e fc 8b 48 86 8f 29 97 7f 25 75 58 78 56 bf 17 1a ab 4f a7 e8 56 d6 3b 69 9d 43 76 7d 38 6a 17 47 e8 d4 60 d5 b2 a9 2e 3f ce 5a ef a4 ef fc c1 6d 31 81 b0 3f 04 c8 c4 c4 50 d9 90 08 ed e3 68 ff 00 67 d5 f6 51 5d 40 37 69 90 7b fc d5 2b 71 df 5d 90 e1 02 78 f3 0b 6e bf a2 54 2c a1 97 07 b1 dc 38 08 3e 04 77 52 42 66 3e 4a 9e 31 2d b4 2e 5b 34 d1 57 cc c4 6d f2 e6 7b 2d f1 ec 7f ac b4 a9 c1 7b 9a 0b 88 04 48 77 c4 68 aa 75 ee 9f 6d bd 3d d5 e3 3b 63 89 04 3e 63 73 9b ee 0d 77 fc 13 94 b2 94 48 ad ed 86 31 94 4d ed 48 ba 6f 4a b1 e5 ad b6 c6 56 d7 9e ce 05 ef 8f cd ac 2e 86 bd b4 5d 5d 4c 01 ac 6b 76 80 3c d7 9b 31 f6 9a ec f4 1a 6a ce a4 Data Ascii: @,vQ+ GJ=W_\JH)%uXxVOV;iCv}8jG`.?Zm1?PhgQ]@7i{+q]xnT,8>wRBf>J1-.[4Wm{-{Hwhum=;c>cswH1MHoJV.]]Lkv<1j
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 2b a8 3d 86 2b bb af f3 8a a6 91 03 74 f2 34 ed 46 93 72 0b 54 f6 54 3c f2 a7 90 08 44 16 11 c9 58 4b 1e e1 08 b7 e7 70 c6 4a c5 f4 f1 0c f8 46 48 90 40 45 c1 69 0f 02 c2 21 1d af 00 d1 d0 c3 5a a6 51 48 04 ae c5 45 fc 01 70 49 94 87 45 9f 9e 7a 8d ed 4f 86 6d 3a 8f 90 88 55 30 26 7b 4c ee 52 48 1b d1 60 20 29 3e bd 67 54 e5 cd a8 3a 6c 01 90 ad cc ea 85 be a6 7e 5e b1 ad d0 a9 e8 db 6a 22 ae 9d 20 a6 7e 89 08 d9 36 22 a6 ae 42 02 e7 34 25 33 d3 06 6d c5 33 24 77 f4 38 44 73 16 ea e9 ad de 3c 1a ea 88 71 98 af 24 d5 1e e7 cb c3 86 04 c0 b2 cf 21 28 45 1a 3e d3 30 ed 44 9f 98 9d 39 2f eb b5 81 24 5c 33 e5 f0 e6 17 97 83 91 c9 e8 ad d0 a6 92 06 f7 9b c7 b6 41 25 8a a5 4a 4e 9c f5 d5 32 2d 75 84 3c 16 e0 65 7a 3d 54 ec 89 88 2c ec bc 21 df 01 11 e8 a8 bd d5 Data Ascii: +=+t4FrTT<DXKpJFH@Ei!ZQHEpIEzOm:U0&{LRH` )>gT:l~^j" ~6"B4%3m3$w8Ds<q$!(E>0D9/$\3A%JN2-u<ez=T,!
2024-04-18 17:22:42 UTC	4931	IN	Data Raw: 68 9a a2 ac 8a 58 08 6a 8a a8 ab ce 30 45 4e 6b ec e0 4a d7 1a a6 92 8a be 72 69 99 8c 96 9a ae ba 23 73 d4 17 5f e4 d3 97 0e e3 01 88 d7 b2 fd 88 90 84 b5 79 f3 26 7a 2d 13 bb d1 87 a3 98 19 a2 37 e5 5d e8 a8 ab c5 08 cc 6c 5d 48 b3 67 5d ce 42 30 30 51 67 d2 b7 19 91 55 dc a4 8c b1 25 3c a5 c8 4b 5e 49 c3 70 9e 8c d4 39 6b 25 92 8d 68 4c 34 e1 57 36 88 fb 6a 4d b6 e7 37 57 63 e4 aa 8a a8 84 a5 ec d3 87 32 4b 18 4c 5f 59 bb 31 5d ae 69 d6 c1 62 40 ae 68 5a 66 14 76 db 35 52 79 f1 8e 1b 9d 75 74 42 71 d7 15 11 39 70 7d 16 9a 6c 5d 11 12 06 9b 01 e4 0d 00 36 2b a6 9a 08 02 22 27 c4 89 a7 10 32 64 86 2f 3f 88 dd 45 59 7a b2 2e 17 d5 16 f3 a0 c7 70 c9 15 10 89 98 d6 0d c6 33 d1 50 85 a4 3d 3e 2e 2c 3b 73 84 77 e6 fb 11 c3 2b 5b a3 91 59 80 d9 55 62 17 34 94 Data Ascii: hXj0ENkJri#s_y&z-7]l]Hg]B00QgU%<K^Ip9k%hL4W6jM7Wc2KL_Y1]ib@hZfv5RyutBq9p}l]6+"'2d/?EYz.p3P=>.,;sw+[YUb4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49930	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	663	OUT	GET /images/speakers/34674/Ryan_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"18999-1536742939000" Last-Modified: Wed, 12 Sep 2018 09:02:19 GMT Content-Type: image/jpeg Content-Length: 18999 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0a 13 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 39 3a 31 32 20 31 34 3a 32 38 3a 33 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2018:09:12 14:28:37Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 3a 32 38 3a 33 37 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 41 32 45 35 32 42 34 36 39 42 36 45 38 31 31 38 43 37 33 42 30 43 45 35 41 36 32 33 31 45 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 39 32 45 35 32 42 34 36 39 42 36 45 38 31 31 38 43 37 33 42 30 43 45 35 41 36 32 33 31 45 44 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 39 32 45 35 32 42 34 36 39 42 36 45 38 31 31 38 43 37 33 42 30 43 45 35 41 36 32 33 31 45 44 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d Data Ascii: :28:37+05:30" xmpMM:InstanceID="xmp.iid:CA2E52B469B6E8118C73B0CE5A6231ED" xmpMM:DocumentID="xmp.did:C92E52B469B6E8118C73B0CE5A6231ED" xmpMM:OriginalDocumentID="xmp.did:C92E52B469B6E8118C73B0CE5A6231ED" photoshop:ColorMode="3" dc:format="image/jpeg"> <xmpM
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 39 32 45 35 32 42 34 36 39 42 36 45 38 31 31 38 43 37 33 42 30 43 45 35 41 36 32 33 31 45 44 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 38 2d 30 39 2d 31 32 54 31 34 3a 32 38 3a 33 37 2b 30 35 3a 33 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 Data Ascii: istory> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:C92E52B469B6E8118C73B0CE5A6231ED" stEvt:when="2018-09-12T14:28:37+05:30" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.ii
2024-04-18 17:22:42 UTC	2623	IN	Data Raw: 15 1a 7e 82 4b 1f 65 41 ea 78 87 6f 67 a8 d3 9a 82 c7 4e 8b 63 ed c0 2c c7 ee d3 41 06 bd ce 3b 9c 20 1c 88 e5 af 4e 0b 52 db f8 eb f8 e3 37 cf 56 81 e8 c2 6b d7 b0 3e 38 66 86 2d 15 12 c4 2d a1 57 1f 16 a3 86 b3 f2 52 5c ba cd 03 c9 33 80 d6 62 90 c8 bd b2 b3 10 5d fd b5 e4 a0 80 07 1b 56 b9 ad 2c f5 31 ad 5e 29 62 3a 48 3e 5d 62 0b fb 53 ea ca c7 53 e9 a7 14 66 b3 b6 e8 67 2b 51 c8 43 99 af 4a e1 30 0a b6 c3 06 5b 69 22 a7 63 46 0f ea 39 20 f1 6b 78 e4 f0 d4 f1 39 ab c2 1b ec 31 53 9f 6a cc 90 2e 90 bc ab 1e 95 62 ec 0a 34 03 43 d7 5e 36 de 06 9d ab 8f 57 74 64 f1 d8 39 2b 0a 65 aa 16 87 23 0c 72 49 5a 5d 0a cb 28 84 16 62 35 d1 79 f1 84 c0 41 f7 38 5c 4e 3b 13 11 1a 9d 7e 42 a4 35 95 89 3d 49 11 fe 55 56 70 19 fe c8 f5 3f d9 c6 37 23 5b 3c db 77 25 86 Data Ascii: ~KeAxogNc,A; NR7Vk>8f--WR\3b]V,1^)b:H>]bSSfg+QCJ0[i"cF9 kx91Sj.b4C^6Wtd9+e#rIZ](b5yA8\N;~B5=IUVp?7#[<w%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49928	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	660	OUT	GET /images/products/detail/207042.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"45119-1678783461000" Last-Modified: Tue, 14 Mar 2023 08:44:21 GMT Content-Type: image/jpeg Content-Length: 45119 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 23 fe d3 7f db 53 e5 e4 b1 68 95 33 8b aa 22 c7 cb c4 14 25 57 f2 80 39 9a f5 6e 49 ac b9 aa d3 2b 97 36 ba 70 f9 53 dd 4e 24 4b 5f 66 36 ae b8 c7 67 d6 cc c5 77 0e 78 a0 14 02 80 50 0a 01 40 74 72 59 68 38 96 4b d3 1c d0 00 25 23 4a 8d cd 89 b7 94 1f 65 01 a8 8c b4 ad df 91 46 39 b1 e9 b1 47 51 5a 7c ae 75 12 d8 51 4a f8 84 28 5c 94 f9 6f 40 6f 4d b6 86 90 10 81 64 8e 43 9f 3e 3e 34 07 d5 00 a0 35 45 9b 6e c9 86 fa 6d 8a 73 cd ce df 7f ce a9 bc ec af e5 a3 fe a2 fc 26 17 ad ff 00 94 ff 00 a4 aa 1b f9 7a 0c b6 33 2e 60 41 98 e8 3e ad f4 f4 9b 89 1a dd 2e a3 ee a8 a1 b6 f5 d8 81 ad 6a 4a 75 2b 80 e6 78 55 51 a5 7b 4f de 4e 2b e1 58 d5 ed a2 58 b7 4e 84 6b 90 f0 86 24 fc 94 36 53 d7 dd 7b 8c bf 22 77 1d 1f 0e c7 4f 50 4b 88 e2 a2 db fd 07 07 34 e9 5a fc 2c Data Ascii: #Sh3"%W9nI+6pSN$K_f6gwxP@trYh8K%#JeF9GQZ\|uQJ(\o@oMdC>>45Enms&z3.`A>.jJu+xUQ{ON+XXNk$6S{"wOPK4Z,
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: e6 ab 3c 21 27 85 ab 34 51 ff 00 32 70 d8 fe 68 e6 8f 1a a8 f5 9b fe 03 07 17 6f e3 5b 81 17 8a 80 4a a4 3b e6 1d 57 b4 25 2a 73 49 52 b4 ea d3 7d 20 d8 50 8d 6a f5 52 d4 5c 73 97 93 a1 70 32 74 35 0f 25 7e 61 77 cf ed e7 77 77 0e 71 a7 35 e1 87 a3 f8 71 b5 ad fd 46 3b 6e f3 43 6b f7 db fd 21 f5 70 a9 26 9a de 5b 69 2d a6 a5 c9 25 8b d8 75 f1 71 cc 58 0c 34 7d ed 08 2b fe 36 90 0f b7 d9 5e 75 ae bd de de 94 ba 5d 3a aa cf a1 79 36 97 f2 da 48 43 7e 58 b7 d7 95 26 76 5c 26 c9 1e 0a 50 07 ea 35 a6 8e b3 31 7b 92 39 7b 0c fa 52 6d a7 45 bf db 13 5d 7e 4f 73 2e aa 3e 5f c2 c8 af 8a f4 fd ef 2d b8 96 d5 97 f1 c4 bb 9f 23 9b e4 ee 1e d7 1d a6 fb fd 6c 86 d6 fe d5 e4 d1 6f 89 4d 9c fa 39 21 29 f7 53 e0 a5 7e 0a 92 eb ad e5 b9 55 b1 fd 47 8a c1 d5 16 86 b4 0c 82 Data Ascii: <!'4Q2pho[J;W%*sIR} PjR\sp2t5%~awwwq5qF;nCk!p&[i-%uqX4}+6^u]:y6HC~X&v\&P51{9{RmE]~Os.>_-#loM9!)S~UG
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 1e 85 c9 34 52 b3 6f 3c b6 cb d4 d2 f4 9b 5f 78 23 39 9a d9 b3 be 12 44 d7 22 2d 2d 3e cc 7b bc e0 73 d4 33 74 69 40 57 99 36 ba 81 e5 5c 6e 54 fb bb eb 3f 66 bc 70 dc cd 9e 68 bb cb 2f 2e 34 e1 d6 8a e0 c4 59 52 95 a2 24 77 64 b9 fd 1b 28 53 8a f6 f2 48 3e ca 99 b9 28 ed 74 22 0a 2d ec 55 2c ef 62 f6 16 e2 67 6b ba bf 48 e3 19 69 8f 3e e2 5a 92 db a8 43 7f ab 69 21 c4 f4 f5 26 e5 01 5f c5 37 a8 de a6 c4 b5 da 9a 5b f8 62 97 6b 77 9d 57 1e d1 23 d2 dc 8e 8a c6 6b 95 cd 26 f0 df e6 74 e0 62 fb 81 f2 91 dc fe e8 65 d3 93 dc b9 3c 0c 56 a3 28 27 1e 8c 7b f3 1b 5f 41 b7 1c 5b 5d 60 f4 47 46 bb 3a ad 7a 4d b9 5a a7 9c aa dd bd 05 bc b0 ab 6f 6d 69 b6 8a b4 d9 86 18 11 6d 76 aa 5a a9 e6 74 4b 77 56 3b 76 e3 89 1a 6e 5f 91 9e ee 62 87 5b 03 90 c2 4b 8c 05 d6 da Data Ascii: 4Ro<_x#9D"-->{s3ti@W6\nT?fph/.4YR$wd(SH>(t"-U,bgkHi>ZCi!&_7[bkwW#k&tbe<V('{_A[]`GF:zMZomimvZtKwV;vn_b[K
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 25 3c a4 25 bf 5e f8 f6 cf 32 16 06 86 5f 2f b6 51 c8 84 47 70 83 fa 5f 6a b1 72 bb 6f 4b af ee fe ee 35 fd 24 ba 38 1b 3e 2a 94 75 9c a5 5d 8e 2b 36 65 d5 dd c9 a7 bf 89 06 d7 a3 1e 00 5a df 96 1d b3 0b 7a 9d b5 b3 e5 3a eb 31 a4 fa ee b3 cc a9 28 70 74 fd 4b e9 d2 a5 25 60 5c a2 c6 e9 af 38 e6 ba 57 a8 e6 59 1b c2 7c 3a 20 8f 77 e4 dc c5 e8 3c 3a b5 11 49 ca 1b 9e ce d5 e7 1e 2b 8f 12 69 da dd b1 dc 78 3e ef e3 70 32 22 38 e4 78 6f 05 3d 91 6d b7 55 13 4a e2 97 ae 1d 2d 24 70 be 9e 23 de e1 5c fd 37 2f bb 6f 59 18 b5 84 77 e3 4c 63 c6 87 47 98 73 fd 3d fe 4f 3b aa 49 4a 6b e1 aa cd 84 e9 b3 37 d1 1a 67 cf 26 ed 8a b9 b8 0e d6 c4 71 2a 6a 10 87 b8 24 74 94 92 3d 53 2a 9d 09 5a b4 ae d7 b7 3b b7 7f e1 78 57 ac f2 cb 3d dc 5c bc 9e a3 e7 ed 5d f7 76 6d b2 Data Ascii: %<%^2_/QGp_jroK5$8>u]+6eZz:1(ptK%`\8WY\|: w<:I+ix>p2"8xo=mUJ-$p#\7/oYwLcGs=O;IJk7g&qj$t=S*Z;xW=\]vm
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 2a 8b 6a 8f ea 23 c5 b5 d0 b7 07 9a 42 db 4f ba da cf 3f 0f aa ac 94 e3 0c 64 e8 8a d1 bd 86 eb ff 00 65 df 99 0f f1 0b fe 97 c4 ff 00 85 55 9f 98 b3 f3 7a 19 76 46 3f ec bb f3 21 fe 21 7f d2 f8 9f f0 aa 7e 62 cf cd e8 63 23 1f f6 5d f9 90 ff 00 10 bf e9 7c 4f f8 55 3f 31 67 e6 f4 31 91 8f fb 2e fc c8 7f 88 5f f4 be 27 fc 2a 9f 98 b3 f3 7a 18 c8 cc 0e ee ec c7 77 3b 7b 87 7b 70 ef ad b1 f0 7c 23 1a 7a 92 fd 7c 19 76 d6 e2 1a 1e 48 cf 38 bf 7d c4 27 dd f1 f6 5e af 8d db 73 74 8b ab ea 28 e2 d1 a4 d5 e5 a2 80 fc 20 28 58 f1 06 80 f4 ab e4 bf 79 c8 dc dd 9c c7 63 32 0b ea 65 b0 fd 7f 58 bb 04 df d5 cf 98 b6 f8 21 09 4f ba 91 ee 93 f4 d7 0f 5b 05 1b 8e 9b 3e a3 62 0f 02 63 ee 24 c4 42 d9 59 c5 28 d8 bb 06 5b 49 1e d5 2a 3b 96 1c 8d af 6a e3 6a e5 4b 52 ea 7e Data Ascii: j#BO?deUzvF?!!~bc#]\|OU?1g1._'zw;{{p\|#z\|vH8}'^st( (Xyc2eX!O[>bc$BY([I*;jjKR~
2024-04-18 17:22:42 UTC	4199	IN	Data Raw: 8b be ed 8d 29 8b 82 09 f0 1d 3c 95 bf bf 6b 17 71 22 a7 d7 fd b9 bb f3 fd cd 82 ff 00 6b c9 ff 00 87 53 b8 90 1f f6 e6 ef cf f7 36 0b fd af 27 fe 1d 4e e2 40 98 be 5e fe 60 fb ef dd 5d cb 25 59 88 d8 98 fb 5b 0f a3 e2 8e 32 8c 93 6f 2f d5 b3 23 a3 d1 2e 48 75 b3 67 1a 1a f5 db 87 2e 35 64 ad b8 60 c1 68 17 bb 32 cb 4a d0 43 5a 16 92 93 ef de ca 16 3f a7 ce b1 02 36 9e f3 aa c9 48 7f 59 0e f5 96 a0 a0 48 20 eb 27 81 e7 ce 80 9e f6 db c5 fc 06 31 6a 25 4b f4 ac 05 a9 5c 49 57 49 24 9b d0 19 4a 03 86 54 58 b3 a3 3d 0a 6b 2d c9 87 21 0a 69 f8 ef 24 38 d3 8d ac 59 49 5a 54 08 20 83 62 0d 01 03 6f 7f 94 3e d5 ee cc d4 5c fc 28 ce 60 e5 c7 94 dc c7 62 62 51 0a 14 39 0a 6d c5 ba a0 f2 13 11 65 61 65 7a 57 75 71 48 1e ca da 8e aa e4 55 2b 5e b2 d7 14 6d ae e3 32 Data Ascii: )<kq"kS6'N@^`]%Y[2o/#.Hug.5d`h2JCZ?6HYH '1j%K\IWI$JTX=k-!i$8YIZT bo>\(`bbQ9meaezWuqHU+^m2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49929	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	915	OUT	GET /images/products/detail/207028.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"84323-1678776940000" Last-Modified: Tue, 14 Mar 2023 06:55:40 GMT Content-Type: image/jpeg Content-Length: 84323 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 14 1e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 58 00 00 01 01 00 03 00 00 00 01 01 e2 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 30 32 3a 32 35 20 31 30 3a 33 32 3a 35 31 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*X(12i ''Adobe Photoshop CS6 (Windows)2019:02:25 10:32:510
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 64 92 49 48 d1 52 50 4a 4b 8b fa e2 2c bb 32 db d9 22 9c 36 d7 8e e3 24 7e 95 ed b3 27 db 1f b9 5b ab dc ef f8 4a d3 27 2e 11 75 6d 9e 4f 96 fb c6 5f 6f 8b 83 4b e2 ae 2f ea 8d 3d 3f a5 27 af ca cb c6 c3 a4 df 95 63 69 a8 10 d2 f7 71 2e 3b 5a 14 eb b2 bb 6b 6d b5 38 59 5b c0 73 1e d3 2d 20 f0 e6 b8 2e 7f eb 43 9c 7e ab b0 c9 73 9d e8 6b c9 26 01 5a 78 5d 4b a6 3a c6 f4 ea 72 18 72 29 6f a7 e9 6a 09 35 8d af 6d 45 c3 6d be 9e df 7f a4 97 17 aa b4 d8 7e 2a 97 Data Ascii: R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?dIHRPJK,2"6$~'[J'.umO_oK/=?'ciq.;Zkm8Y[s- .C~sk&Zx]K:rr)oj5mEm~*
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 92 22 52 97 1e 48 ca 85 c2 30 c5 c1 ea 3f bb fc e3 7d 25 5b 2f a9 74 fc 28 19 79 35 50 4e a1 b6 3c 07 1f ea b3 e9 28 d9 d5 ba 6d 58 43 3d f9 35 8c 47 68 cb 81 90 e3 25 bb 59 b6 5c f7 fb 5f ec 4e b1 dc 31 0c 59 08 04 42 44 48 f0 c4 88 9f 54 bf 76 3f bc db 49 52 6f 5a e9 6e c2 7e 70 c8 68 c6 a8 86 d8 f2 1c 0b 49 21 ad 6d 95 b9 be ab 37 6f 6f e6 23 e4 5f 6b 28 6d d8 d4 3b 2f 71 10 ca dc c6 cb 48 9d e1 d7 3a b6 7f d2 4a c7 43 7e 5a a8 e2 98 35 28 98 eb c3 eb fd 58 e2 1b c7 8a 69 92 5c a7 41 ca ca 1d 5b aa 5c cc 5b af 2f b3 df 53 6c ac 7a 47 7d be db 3d 6b 99 5b 9d ed d9 ba 8f 53 f9 b5 b7 6f 5f e9 58 f6 b6 8c bb 86 3e 41 00 be 97 7b 8d 73 fe 9e ca 3d 5a 29 e7 f3 ed 4d 8c c1 16 74 f3 66 cd c9 e4 86 4f 6e 1f ad 20 46 5f ab f5 4b d5 1e 33 fa b8 71 cf 86 3c 5f 3b Data Ascii: "RH0?}%[/t(y5PN<(mXC=5Gh%Y\_N1YBDHTv?IRoZn~phI!m7oo#_k(m;/qH:JC~Z5(Xi\A[\[/SlzG}=k[So_X>A{s=Z)MtfOn F_K3q<_;
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 94 de 47 6d be 60 e7 0e 76 e8 00 00 00 00 00 00 d1 9f 51 7e a2 f2 b5 92 fc fc d8 fb 37 f8 ee 00 00 00 10 e5 46 a4 32 05 5e a8 58 dd e9 60 00 00 00 00 00 00 00 00 00 00 00 01 86 3c 5d e8 c6 bb 78 63 d9 0e 26 d7 7b 0f e0 4e 41 ef 1d 4d c3 2e 31 f4 6b 02 98 6b d5 bd e1 36 cf e6 26 28 80 00 00 00 00 03 e3 42 7e 59 96 ad 69 07 aa 1f 4e f9 c8 ca fe 5b e7 cb 33 79 4d db d5 d5 c2 3d d0 00 00 0b 2f b5 b6 2f 56 cc 09 ee cd ec 5d fa c9 b4 5e 75 f0 d8 00 00 00 00 00 00 00 00 00 00 00 00 6a ff 00 80 fd ba aa 15 3b 2b 0d b8 c3 d1 cd ad 36 23 c1 8c 87 5e 1a 8b 85 2c 57 e9 36 1a 71 37 a4 7b 41 ec 77 87 52 64 95 cf 7b f7 3e ae fd 4e d9 61 d5 c3 aa 8c 49 65 0f 81 d1 57 b8 7a c6 22 84 3a b1 bf 65 6e 4c 81 4c bd 32 75 90 34 73 e3 f4 d4 ed 86 85 9b 2f 6e eb d6 6e d3 0a 38 b7 Data Ascii: Gm`vQ~7F2^X`<]xc&{NAM.1kk6&(B~YiN[3yM=//V]^uj;+6#^,W6q7{AwRd{>NaIeWz":enLL2u4s/nn8
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 39 4a 8e 52 83 ba a3 84 c3 96 71 ca 54 72 55 1c b5 28 29 4a 98 5d 96 ae 2f 05 2d 0a 5e c1 53 d1 24 9e 32 45 f5 db b5 cc be 4d 76 3c f5 f0 22 f0 fa 90 6f c8 72 96 f0 8e 4b 31 87 b9 ed 43 dd 06 31 ee 53 48 f7 46 d4 2d 92 ce a8 b9 c9 72 6b b1 6d 2b 93 da 5c 44 e4 d5 95 d9 ec 52 46 57 19 76 f0 8f cd 1f 1d 98 fe 99 f6 f8 c9 5a 57 23 64 67 c7 46 53 ac e4 e4 a5 7b d6 1e 22 ec 79 cb f0 f3 d7 da 0f 5b 4b 05 64 f2 4a 8f 3c 7c 1e 66 f0 3c d1 e0 79 eb e8 42 5d 2f 46 8d 39 0e e5 bd c5 25 28 ad 3b 03 90 aa 27 79 10 8e df a8 b6 2d 6a 50 57 14 77 0f 69 ee 87 b5 37 c3 da d7 20 e3 8e dc ac 03 76 35 bb 70 b5 f6 81 d0 7b 55 7f 51 ed 3d d0 2e 21 46 b5 b5 c6 b1 a4 eb 6c df 67 67 6b b0 9f d2 ce de 11 f9 a7 e3 b3 1f d3 3e df 18 ff 00 51 ee 6d 2d 6f 12 b9 c6 d1 d5 05 ce 2a e5 56 Data Ascii: 9JRqTrU()J]/-^S$2EMv<"orK1C1SHF-rkm+\DRFWvZW#dgFS{"y[KdJ<\|f<yB]/F9%(;'y-jPWwi7 v5p{UQ=.!Flggk>Qm-o*V
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: b8 61 e7 69 ba 70 61 fd 95 7a 69 e9 57 b9 78 66 42 f9 89 7a ce 4a 18 21 3d 17 b2 fb 85 e6 b4 6a fe 2c d5 68 87 54 2d 3d ce 13 dc c8 a6 0a ce e8 de e9 6c 45 d2 07 aa bb 1d d2 17 dc 3c 83 a6 fd 2f e7 da f3 9b 46 f8 74 d7 90 e6 49 6d a6 a7 6e bc 21 f3 51 7a 5c e4 39 24 cd 34 d2 44 9d a1 6b 52 55 ea 33 19 92 a7 69 85 30 a5 82 d6 89 20 df 6d c2 5f 93 be bd f5 ee ad 3f f9 16 94 28 ee a7 77 e1 5e ea 70 d6 94 ad 05 7e f2 9b fd c3 ee 25 4c 6a fc 3f f9 14 ea 52 be 21 7a 56 b4 a1 a9 53 57 bb ee a8 fb 8f f0 ef 37 7f 70 2f 71 6b 78 ce cc e3 71 4a 98 d4 37 e3 4e e1 45 d6 2d 4e aa ab 97 ee a5 7b a9 5a d0 c7 28 a5 c2 f4 15 a9 d5 3d 47 e1 4f c2 83 b8 16 85 a9 69 de 4a d7 84 7d d5 14 31 a9 5e 7a dd ea 7d e7 e1 fb a8 42 56 bf e9 c5 de 39 8a a7 4a 77 77 7f a7 fd a5 fc 41 52 Data Ascii: aipaziWxfBzJ!=j,hT-=lE</FtImn!Qz\9$4DkRU3i0 m_?(w^p~%Lj?R!zVSW7p/qkxqJ7NE-N{Z(=GOiJ}1^z}BV9JwwAR
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 24 2b 81 b5 da 4f 5b f0 dd f8 9f 91 6d cd 5b 5a 0a 81 17 10 5c 46 42 08 23 79 9e 94 00 77 00 1d e6 a5 40 9a 1a 33 10 f9 c2 f2 37 09 c3 bc 7e 1d 89 6b 52 4e ff 00 85 8e 83 58 dc 82 0b 5a 90 d6 16 a2 05 29 ef bd f6 bf 2e 3d ff 00 8b 57 73 e5 8d 93 93 e0 0c 8c 32 fe 28 9d 92 4c 68 68 8d 1b 19 1c 9e 3f 89 d5 42 0f 8d 89 9f 16 24 34 8f ca e2 67 49 cb 45 27 e9 24 8e 36 f7 54 7f 44 71 b7 ae 29 4b 6b 67 aa 09 4c 1c 64 0e 36 fb 2b 50 ed f8 b5 77 3e 58 d9 39 3e 00 c8 c3 2f e2 7b 9b 42 08 88 99 6d c0 ad 1c fe 16 b2 d6 b0 35 91 13 9c 7c 2e b3 2b 14 a2 63 ca 17 f0 bc 31 fb da 8b 0b d0 1c 4d ea 42 91 91 20 7c cc fa 44 b1 ce a1 df 3c 6c 75 b3 32 c7 2a 15 e0 6e ad 1e 2a 91 2f e4 a0 bc 70 5a c8 82 21 15 46 55 c9 71 2a 39 13 79 de 0d 06 04 34 e8 41 86 fd 14 e0 4e 47 fc 5a Data Ascii: $+O[m[Z\FB#yw@37~kRNXZ).=Ws2(Lhh?B$4gIE'$6TDq)KkgLd6+Pw>X9>/{Bm5\|.+c1MB \|D<lu2n/pZ!FUq*9y4ANGZ
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 72 af 5e 7c ba 47 25 47 76 23 f9 9c 2d 3b 55 8d 47 90 a8 a6 07 3a 04 aa fa c4 c9 f3 20 6a d0 55 bc 5a 1d 63 62 6b d3 94 ba f2 4f 20 88 85 13 08 dc 99 0a 09 95 9b bf 0c 31 91 a1 ec 0e d6 53 e1 c9 f6 85 0e 5b ac 2e 62 1f 2e 56 7a 18 fe d1 2e 0b 92 ad ce 55 f7 b7 50 db 89 48 52 9b 59 fd b6 0b e0 c7 3f 90 e5 77 da 95 13 68 a6 21 ea e8 fb 51 d4 66 d4 85 6b 53 06 59 ee 7a 95 c9 70 71 7b ee b0 b4 b2 e1 3d 70 a3 73 54 9b 53 be a7 d8 db 4f b4 13 51 62 2b 65 76 82 a6 66 24 a6 a0 ae 66 14 18 d0 ac b7 4c a8 e8 2c 61 0a 71 03 0d ec e8 30 d2 80 70 58 9e 06 a1 ec be cd d2 23 4d ed 1d 4d dd 5a 5d 03 4a 24 67 dd a2 03 d2 2e 3c e5 0b 9b 64 bb 3a 8d 32 05 78 4a 7d e1 3a b5 2b d6 22 67 e8 0b d4 37 6c ee 76 73 b0 72 31 86 aa 56 4f af ac 1b 34 66 78 79 2e c2 ed e6 da 1d 94 8b Data Ascii: r^\|G%Gv#-;UG: jUZcbkO 1S[.b.Vz.UPHRY?wh!QfkSYzpq{=psTSOQb+evf$fL,aq0pX#MMZ]J$g.<d:2xJ}:+"g7lvsr1VO4fxy.
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: af 19 da f1 9d af 19 da f4 e7 6b d3 9d af 4e 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 70 df ff da 00 08 01 01 01 06 3f 00 ff 00 dd 38 d0 43 2d a2 22 00 1e 68 d0 04 72 c0 77 b3 98 0d 99 44 84 32 85 1e d1 d3 03 93 cf c1 c4 a2 02 09 e6 a7 00 90 38 cc 03 41 00 ff 00 d8 41 77 22 f9 8c 73 32 af d5 ce f6 45 e3 66 0c c8 a9 bd ce 51 70 ed 44 88 22 eb d2 06 dc 10 6f ad 7b d3 1b 7d 43 e7 d5 8d 72 b3 94 76 5e c1 db 42 8c 8a a4 1c b6 08 60 a9 d8 1a e7 a6 97 3a e6 0a 83 46 97 33 36 af 87 d6 b3 93 33 15 4c 3d 8c b0 04 31 0e 99 84 2a 05 50 a6 4c c3 c3 c9 df 02 a6 6c b8 8d e4 69 f3 f8 d9 79 98 a7 a7 d4 a2 b1 51 58 69 49 18 82 ae ca a6 0e 81 63 46 bd 68 a9 a8 00 14 Data Ascii: kNvgkvgkvgkvgkvgkvgkvgkvgkvgkvgkp?8C-"hrwD28AAw"s2EfQpD"o{}Crv^B`:F363L=1*PLliyQXiIcFh
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 0a 91 ba 62 99 23 24 af d1 53 5c 86 0e 91 13 b4 fa 31 4c 00 64 f8 87 16 2d 9e d8 b0 e6 bd 74 85 81 6d 0b 96 de 70 83 17 92 b1 69 b0 de f8 1e 61 b7 58 41 77 c0 d8 72 a8 94 44 a5 1c 86 b9 63 a2 13 ae 3c 3d 5c 44 ea f0 d0 33 39 b1 35 7a 5f 33 d1 f6 ad a7 6f b3 33 d9 79 e9 85 ba ac 73 56 e5 a0 1b be 98 3b ea 80 26 0e 49 6b b7 6e 2f 5d 5a 6a ce 41 bd b3 22 fa 06 d6 b5 d2 5d 05 08 56 70 09 0d 2d 74 8c ec c0 08 b6 91 92 47 bf a6 82 86 21 81 0e 58 ee ec f2 35 9b 58 5c 20 24 78 a3 d8 7d 3f b7 9c 09 b7 52 2b 75 c4 4f 36 24 1a 00 74 28 a8 50 12 9b 30 30 e7 96 2d 7b c1 56 eb 25 07 7f e9 e4 54 53 69 3a 18 5b 39 91 82 39 fa e4 61 b2 03 12 40 52 a0 91 2a 08 9c 78 b1 a8 b0 9a b3 71 b5 b4 2d 6d 44 81 81 2c 65 c6 e9 b3 a7 71 bf 74 16 f0 0f 52 07 ee 18 a6 e1 46 2d e9 f4 41 Data Ascii: b#$S\1Ld-tmpiaXAwrDc<=\D395z_3o3ysV;&Ikn/]ZjA"]Vp-tG!X5X\ $x}?R+uO6$t(P00-{V%TSi:[99a@R*xq-mD,eqtRF-A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49933	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	690	OUT	GET /s/W/ws/qOxiKg+ulwNG3te1/c/1713460960972 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=0oEGvm14nlRzfxq/ISeSQQpEcUWBa9iynRySZoDfVF/Tui6avy4HAv/OkTUuVwBBLw6ojzUWpR91tSsrimkeGOQGvEEWhgW/ET1Tl0XEfTHVc7GiMZYjfVR/fT2z Sec-WebSocket-Key: iZgCPuvM0/sn1ztBILLKyA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:22:42 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:41 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=NweFqkkXt3euDrBoYBAPBIdIKcwNsROHlYRVnamCyf9wYo/rVZ34AYyZHqz1LIr1IZrXaDuorftWOAWQRDhNIDjyCD4iMQSeBX6wAymakoLT9I9uZXHaSdTmpwOeV/myP3BPnsM19XGFH43rml0OjbkEFG5AHYWsBlf9805HtvkhKwGAAzKYQI5dQ3cXDA==; Expires=Thu, 25 Apr 2024 17:22:41 GMT; Path=/ Set-Cookie: AWSALBCORS=NweFqkkXt3euDrBoYBAPBIdIKcwNsROHlYRVnamCyf9wYo/rVZ34AYyZHqz1LIr1IZrXaDuorftWOAWQRDhNIDjyCD4iMQSeBX6wAymakoLT9I9uZXHaSdTmpwOeV/myP3BPnsM19XGFH43rml0OjbkEFG5AHYWsBlf9805HtvkhKwGAAzKYQI5dQ3cXDA==; Expires=Thu, 25 Apr 2024 17:22:41 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49931	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	918	OUT	GET /images/speakers/36875/Andy_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"20911-1571824189000" Last-Modified: Wed, 23 Oct 2019 09:49:49 GMT Content-Type: image/jpeg Content-Length: 20911 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0b 7c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 31 30 3a 32 33 20 31 35 3a 31 37 3a 35 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: \|ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2019:10:23 15:17:57Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 04 06 00 00 00 00 00 07 00 08 00 01 00 01 01 00 ff e1 0e 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 Data Ascii: 1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 Data Ascii: /22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" x
2024-04-18 17:22:42 UTC	4535	IN	Data Raw: 6c f1 ce a1 43 a4 e3 cc fb ca 2f 10 58 f1 c7 ca cf 2b bc 61 a5 c5 3f fc 7e 11 f2 8a df 91 f8 d6 9e b6 19 b2 fb fc 17 e4 0d 14 7e 4e e1 99 75 a6 e3 aa b6 bf f8 c6 c2 c2 4d 04 82 55 2d ac 55 38 68 89 b7 44 e6 5f cb 88 5e 2b 29 6c fb 6a 21 0e 54 c8 10 04 a6 25 3a ce 60 05 12 25 55 11 b2 3a 9b f1 65 d0 cc e0 9f 61 d0 3d c4 cd 20 cc 12 aa 03 3d e2 4a 2a 48 06 66 49 06 75 88 67 c7 9a 90 c2 f9 5f 91 98 09 89 2a 3e 5d 47 45 95 d6 c9 6d 10 04 52 4d 74 59 45 18 c1 37 6c 94 c4 79 4d 03 81 ea 86 8b aa 6a 8b d5 77 91 bf fb bc 73 69 35 32 1b 3a 76 c1 8a b1 e6 d5 fe 2d 91 6a 3c 05 9c 4d c6 ad c0 a2 9b d2 e2 13 e4 52 4b e2 de 26 e1 94 75 11 15 f8 9d d8 ad ea bd 97 6e bd 46 61 6e 3d ab 94 30 aa 80 7e 33 31 bd 4c 7d c2 9c 71 29 15 f9 4a 2e 23 0d 85 8b e4 14 92 2e 18 a5 ab Data Ascii: lC/X+a?~~NuMU-U8hD_^+)lj!T%:`%U:ea= =JHfIug_>]GEmRMtYE7lyMjwsi52:v-j<MRK&unFan=0~31L}q)J.#.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49932	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	660	OUT	GET /images/products/detail/207031.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"48929-1678778330000" Last-Modified: Tue, 14 Mar 2023 07:18:50 GMT Content-Type: image/jpeg Content-Length: 48929 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 19 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:22:42 UTC	258	IN	Data Raw: ed 4e 8a ab 45 7d 33 f2 2c ba c3 a9 33 d7 42 83 06 1e 35 e6 96 c4 d9 f3 7b d5 b6 88 24 d3 b3 52 ea 92 47 4f 59 5a c0 74 6f c0 0d 52 e9 f3 ac 8e 91 07 6b 2f 00 4a 41 d2 62 03 aa be 25 b8 6d 3c bf 82 54 d1 52 1d 97 fa 10 5c b7 2b b6 69 d4 8f 96 03 cb ab d5 8b 20 c5 2b 1f b4 65 16 aa 9a 0a da 62 5b 5b ca 6c 86 96 13 a4 c1 3d f0 64 df 6a ab ac a6 ab f7 dc 72 e0 ba 1a be a5 e6 56 7a 8e f1 38 32 e8 5e 20 f8 b9 e4 0e 3b ad a2 b6 e6 75 6b be e3 f5 2e 06 de ab 78 ee 71 94 93 29 8f 34 18 7a 41 8e 64 96 bc a6 d1 45 7f b1 3e 9a ab 6d 6a 52 b4 bc 83 3d 54 3a 7c 90 1e 6a 7c 61 02 39 d2 e8 b5 a7 ea c2 1b 92 87 5e 82 02 8b 6a e9 5f 68 aa fb ca d9 58 68 ae 48 d2 9a ad 26 4e 24 1e e8 32 5e ae 4b e4 02 ad a7 35 ab f1 7a 91 bc fc f0 60 0f 20 e6 37 66 5c b6 5c 72 da 8a ca 05 Data Ascii: NE}3,3B5{$RGOYZtoRk/JAb%m<TR\+i +eb[[l=djrVz82^ ;uk.xq)4zAdE>mjR=T:\|j\|a9^j_hXhH&N$2^K5z` 7f\\r
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: a5 75 47 62 ff 00 2c 03 49 09 14 ee a4 0f 57 62 bf 34 19 7a 89 f0 6b ff 00 e8 7b 10 ec 0a 77 4f 94 41 85 d1 90 5d 69 6c 16 4b 8d ee ad 61 96 69 58 71 c5 2c e9 aa 52 48 fc b0 1e 38 e6 b9 63 f9 66 6b 91 e6 35 8b 2e 26 bd e7 13 bd 5a fa ad 1d 20 cb ae fe 03 78 dc b9 66 c8 b3 8a f6 f7 53 de 10 aa 5b 7a 94 27 b5 2b 9a 55 29 c1 87 2e f3 16 16 ef 1d 72 a6 45 8a 78 72 a7 53 aa 7e 98 ab 44 2f c6 33 3a fc b0 17 e7 c0 76 7e 6c b9 65 db 03 b8 3e 7c 3b ac 97 6f 69 47 44 14 6a 76 c0 7a 17 20 55 e6 eb e5 80 36 0c 04 00 80 10 02 00 40 79 79 f1 ee 0a 39 49 87 0f ad b9 02 43 bb 41 13 45 53 fc 36 52 b5 51 cd 38 e5 2b cd 07 d9 71 c3 bd a5 6a 0c 67 ea c6 7a 3d 63 ba db b1 6a 32 8a 65 da 98 33 48 d3 68 8a d3 36 22 c9 8d bc a2 96 6d 2c a7 fd d1 f3 40 12 ed 83 1a f7 77 12 bb 4b Data Ascii: uGb,IWb4zk{wOA]ilKaiXq,RH8cfk5.&Z xfS[z'+U).rExrS~D/3:v~le>\|;oiGDjvz U6@yy9ICAES6RQ8+qjgz=cj2e3Hh6"m,@wK
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 6d dd c1 46 6a d0 c0 57 bc 83 82 59 f1 9a b6 59 a4 70 cd d2 26 14 7b e0 27 b8 af 11 e3 b5 96 96 ab 6a 37 ee 71 20 a8 83 a6 b0 0b dd e2 5c 49 97 52 86 df f5 47 79 ef 80 26 e1 c5 18 95 3b 61 e6 d6 92 e8 1d 4c 04 65 bc 2b 19 0e f8 6a 56 84 eb 01 60 e3 7c 35 87 5c 69 1e 7c 15 15 a5 a5 28 4b bc 08 0e 10 e4 8a 24 5b 73 5b b5 12 27 b1 a7 54 84 cf b8 18 94 c0 ec 1f f4 df ff 00 ac 65 9f c4 6b f3 44 47 a2 11 81 82 64 27 18 c8 29 0f 17 07 aa 36 ac 75 49 ea 22 40 c5 2a 49 99 d3 cf 01 82 54 04 c6 a3 ba 03 1e 28 0a 0d ce 6b 3d 44 05 6b c9 7c 9a bc 0e f7 8f da d0 cf 88 dd e9 c2 da dc 23 44 6b 28 0b 0b de 12 28 8d 41 04 20 35 e3 13 e4 09 dd 01 17 c2 b9 02 d1 9c aa b0 5b 1a 71 0a b7 38 5a 77 77 69 06 50 04 d8 39 32 cb 92 66 d7 ec 16 91 0a 17 5b 08 49 ab 27 a7 ad d2 02 66 Data Ascii: mFjWYYp&{'j7q \IRGy&;aLe+jV`\|5\i\|(K$[s['TekDGd')6uI"@*IT(k=Dk\|#Dk((A 5[q8ZwwiP92f[I'f
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: a9 40 c1 3d 2f c3 7e 73 54 54 16 fb 8d 10 27 3f 10 eb f9 63 19 67 8a aa ca 30 3c 96 c7 7b fb 9a a6 a9 61 d2 b0 80 4a cf 69 83 1c 53 9a 7f 87 ec 9d ca 36 6a 3d fd 72 79 21 52 dc 7b 62 58 60 be 87 e1 eb 27 42 e7 ef eb 32 fe 19 8c f1 61 cc 1c 9f c4 57 b6 73 bb 95 2d 4d 44 dc 4c 8e e3 ac e2 ae 4b 7d b4 6a 9b 86 af 75 12 4a 1d 09 1d f0 e4 7b 67 04 f0 0e 42 af fe 61 30 e4 7b 63 93 f0 f5 91 1f fe 65 30 e4 7b 6c fe 1e 72 1f ef 29 87 26 7d b0 fc 3c e4 3f de 93 0e 47 b6 33 f0 ed 7e fe f8 98 72 3d b0 fc 3b 5f bf be 27 d1 0e 47 b6 cf e1 da f9 fd f5 3e 88 af dd fd 10 e2 c7 e1 de f7 fd f5 3e 88 96 cd 9c 70 71 63 f0 f5 79 fe fc 9f 44 74 29 a3 95 73 94 b8 07 e1 ee f1 db 5c 9f 44 73 35 6e 8b e7 f4 4a 35 34 fc 3f dd 7f bf 0f 44 4b 46 d8 d9 9f a6 12 db a7 84 77 0f c3 fd d7 Data Ascii: @=/~sTT'?cg0<{aJiS6j=ry!R{bX`'B2aWs-MDLK}juJ{gBa0{ce0{lr)&}<?G3~r=;_'G>>pqcyDt)s\Ds5nJ54?DKFw
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 8f f5 ad b1 d7 30 83 bd c7 d9 ed b1 0e b3 59 63 a9 71 47 b4 20 91 21 f2 45 b4 f9 ef 13 6f ed a2 bb fc 2e ca 7a 19 ab a8 ee 94 4d 6c 7e 85 ca 62 9e d7 12 44 bf 24 74 35 ee a6 df db 0e 7e cf 12 6b dc d5 51 71 49 6d 09 69 53 7e 44 2f 43 a9 8d ef c7 bc d6 66 3d 1a b5 d3 19 76 7f 07 a1 76 ee 36 a0 5b c9 f0 ea 1d 24 b9 b7 42 41 e9 1f 08 f9 6d f9 d9 68 fd 5f 58 f1 75 7d b5 ff 00 85 82 c9 f7 b5 29 0e 6a 3b d5 1e 5b 5c f5 7a 0a 57 10 3f ee f7 10 08 f1 01 1d 80 f4 8a fc 9b f4 62 41 ba 70 db 64 2b 6a 5e ec 52 63 4f 57 5c a7 58 64 53 a8 ff 00 39 ac 5b 96 70 30 52 a8 6b e2 74 d6 50 c9 86 e1 b5 3a 5d 03 db 52 08 da 7a 8d 3b 61 2c a1 74 35 2c 25 f5 d2 36 b0 b7 1b 59 dc 47 40 67 18 c0 af 3e 25 31 aa 8b bf 1b 3f 75 a5 48 76 e1 6b 52 56 cc 84 ce d9 cc ca 2e d1 7e bd 5a 16 Data Ascii: 0YcqG !Eo.zMl~bD$t5~kQqImiS~D/Cf=vv6[$BAmh_Xu})j;[\zW?bApd+j^RcOW\XdS9[p0RktP:]Rz;a,t5,%6YG@g>%1?uHvkRV.~Z
2024-04-18 17:22:42 UTC	8009	IN	Data Raw: e8 cc 58 df c1 79 63 96 ab d5 df 05 bb 3c 02 d0 e2 97 47 bf 41 eb 1e c9 c7 1b 6c 75 59 10 bb 2e 97 2b 55 b9 0d bb 71 ad 69 0d 89 cf eb 00 8a 23 a2 51 19 40 32 4e 6a e3 7b 34 cb d7 84 ba f2 7a 30 8d 66 47 64 c4 6a 7e 56 cb 74 cb 3c 30 ab af df 16 14 d4 f3 45 9e c6 a7 1a 1a 25 f9 f5 f2 c5 79 bd d6 d6 d8 56 79 1f c4 26 71 70 4f 8a 8b 82 6d ec 3d a2 18 4e aa 91 88 7b 57 cf 66 f6 be a8 05 4d f3 24 c8 dc 50 5b d5 95 35 2a 33 4c b7 84 99 c3 85 a2 5d 1a e9 cf 5c 1d 2d 78 37 20 5d ea 1b 6d 8b 4a d2 08 97 88 e8 9f cb ac 4f d8 88 6c 4f 95 7f 57 4d f0 86 09 7e c3 69 2a 55 79 6e 65 ed 76 77 46 ce ad 78 69 6d df 6b 46 32 b7 db 5a 01 99 4e 91 d3 d7 0d 0b ec b9 5a 1f 64 0d 52 27 d9 1b 95 96 b5 ad 79 6a aa b7 40 da d6 80 fb 51 8b 6c 63 5f 8d 8e b8 56 fc bf 7d 2d 52 db ed Data Ascii: Xyc<GAluY.+Uqi#Q@2Nj{4z0fGdj~Vt<0E%yVy&qpOm=N{WfM$P[53L]\-x7 ]mJOlOWM~iUynevwFximkF2ZNZdR'yj@Qlc_V}-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49934	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	929	OUT	GET /images/speakers/63517/Michael%20Gozzo_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"24192-1709753679000" Last-Modified: Wed, 06 Mar 2024 19:34:39 GMT Content-Type: image/jpeg Content-Length: 24192 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0a 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 33 3a 30 37 20 30 30 3a 35 31 3a 35 35 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:03:07 00:51:55Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 34 2d 30 33 2d 30 37 54 30 30 3a 35 31 3a 35 35 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 33 2d 30 37 54 30 30 3a 35 31 3a 35 35 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 33 2d 30 37 54 30 30 3a 35 31 3a 35 35 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 41 41 34 34 43 43 42 Data Ascii: lns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2024-03-07T00:51:55+05:30" xmp:MetadataDate="2024-03-07T00:51:55+05:30" xmp:ModifyDate="2024-03-07T00:51:55+05:30" xmpMM:InstanceID="xmp.iid:FAA44CCB
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 42 45 45 31 31 38 32 41 33 42 46 37 36 32 38 46 31 44 39 39 30 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 39 41 34 34 43 43 42 39 37 44 42 45 45 31 31 38 32 41 33 42 46 37 36 32 38 46 31 44 39 39 30 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 39 41 34 34 43 43 42 39 37 44 42 45 45 31 31 38 32 41 33 42 46 37 36 32 38 46 31 44 39 39 30 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e Data Ascii: BEE1182A3BF7628F1D990" xmpMM:DocumentID="xmp.did:F9A44CCB97DBEE1182A3BF7628F1D990" xmpMM:OriginalDocumentID="xmp.did:F9A44CCB97DBEE1182A3BF7628F1D990" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" dc:format="image/jpeg"> <xmpMM:History>
2024-04-18 17:22:42 UTC	7816	IN	Data Raw: 18 40 b6 4a 44 f9 a4 42 6f 71 9c 6e 62 02 43 62 71 59 d1 d9 c4 37 93 32 66 86 4d e9 99 ee a9 b2 bb cc b9 a7 83 a2 ee 75 c6 2e 8b d7 12 88 37 86 5f f2 92 75 0e 58 e8 48 b4 d0 96 6e eb 6d c8 ad 89 eb 9e 3d 66 8a 44 e6 9a e7 da 24 bb 64 f4 97 b1 1c 63 65 6a 9d 85 ed 27 63 b8 91 da bb 2a 67 60 68 6c c7 78 c8 6d 5c 1d 9c 83 7f bb ce 1c 2c fd c7 f2 81 a8 f6 47 68 c1 22 28 bb 6d fb 83 a7 93 e0 fc 7c c0 e2 df 3f 4b 48 c7 63 ba df d6 c6 37 0e 8e 3b 11 c6 86 98 c8 af 8a 34 c1 23 37 1c 16 3c c6 41 56 25 2a 4a 82 8c dd fe 3a 3a a3 5c 33 41 fb 40 37 93 26 c4 5b 67 98 8c 19 e7 b5 3e de cf b3 43 3c d0 bc 2b c8 f9 75 a8 8b 85 66 fb 97 0e 6d b4 73 f6 d9 9a 9b 63 30 c7 e6 f2 b6 ea 26 44 fc 65 76 c7 f0 aa 56 2e 99 e2 1c 30 31 9c 37 60 52 31 6b cd bc 25 79 16 c7 96 ca 72 5c Data Ascii: @JDBoqnbCbqY72fMu.7_uXHnm=fD$dcej'cg`hlxm\,Gh"(m\|?KHc7;4#7<AV%J::\3A@7&[g>C<+ufmsc0&DevV.017`R1k%yr\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49935	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	674	OUT	GET /images/speakers/55398/Howard%20Levitt_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:46 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"23610-1678078923000" Last-Modified: Mon, 06 Mar 2023 05:02:03 GMT Content-Type: image/jpeg Content-Length: 23610 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0a b6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 33 3a 30 36 20 31 30 3a 32 39 3a 34 39 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:03:06 10:29:49Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 30 33 2d 30 36 54 31 30 3a 32 39 3a 34 39 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 Data Ascii: ttp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2023-03-06T10:29:49+05:30" xmp:MetadataDate="
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 33 2d 30 33 2d 30 36 54 31 30 3a 32 39 3a 34 39 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 2d 30 33 2d 30 36 54 31 30 3a 32 39 3a 34 39 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 45 46 30 31 45 33 42 38 44 42 42 42 45 44 31 31 42 38 30 31 41 39 44 43 30 36 43 44 31 36 39 42 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 45 45 30 31 45 33 42 38 44 42 42 42 45 44 31 31 42 38 30 31 41 39 44 43 30 36 43 44 31 36 39 42 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 45 45 30 31 45 33 42 38 44 42 42 42 45 44 31 31 42 38 30 31 41 39 44 43 30 36 43 44 31 36 39 42 22 20 Data Ascii: 3-03-06T10:29:49+05:30" xmp:ModifyDate="2023-03-06T10:29:49+05:30" xmpMM:InstanceID="xmp.iid:EF01E3B8DBBBED11B801A9DC06CD169B" xmpMM:DocumentID="xmp.did:EE01E3B8DBBBED11B801A9DC06CD169B" xmpMM:OriginalDocumentID="xmp.did:EE01E3B8DBBBED11B801A9DC06CD169B"
2024-04-18 17:22:42 UTC	7234	IN	Data Raw: 05 00 32 e4 ae 2a aa 7b 14 f6 29 91 ac 29 99 17 3e f7 0e 65 cb 87 3d d2 77 f3 0e 49 ea 57 6b 31 c7 71 70 e3 e3 ba 3e 1b a3 cd a2 23 ad a2 2b 8d aa a7 05 d1 38 a8 9e ce bb a2 3d 32 eb c6 25 63 b1 3d a0 be 68 9e a2 ad f8 f4 dc eb d1 0b 0a d5 87 e9 df b0 75 be bb 76 6d d0 fb 78 34 eb 5b e9 c6 91 34 eb 5b 27 01 d1 d1 ef 57 13 de 36 26 bc 72 8e 74 ea 47 5d 2c 2c 41 68 5d 56 d4 17 e1 76 6a d8 8d 1a 67 60 2a 0f da 79 a6 9f 7c da d3 e9 32 ef 9b 45 9d 44 a8 c1 aa 47 79 37 d3 8d fd f0 4d 4a cf 4c 25 d3 ed 16 c8 7a b7 69 46 ed 46 1b c5 35 cc 85 d8 4c 75 69 e3 5c bd dd ec 87 90 6e 7e c2 59 b7 2e 5b 0e 94 d3 6d 1b f7 ae 17 be 24 c7 95 aa 27 52 2a b2 a9 f6 7a af 20 70 55 13 8e ba f1 d9 cb a5 7b 0f de 7c 79 58 cb fd 6f be b0 05 f7 7b 5b 16 ff 00 51 ad 6b 97 13 50 71 35 Data Ascii: 2{))>e=wIWk1qp>#+8=2%c=huvmx4[4['W6&rtG],,Ah]Vvjg`y\|2EDGy7MJL%ziFF5Lui\n~Y.[m$'R*z pU{\|yXo{[QkPq5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49936	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:41 UTC	935	OUT	GET /images/speakers/60119/Sherrine%20Washington_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:47 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"25713-1697092344000" Last-Modified: Thu, 12 Oct 2023 06:32:24 GMT Content-Type: image/jpeg Content-Length: 25713 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0a bf 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 31 30 3a 31 32 20 31 32 3a 30 32 3a 32 36 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:10:12 12:02:26Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 31 30 2d 31 32 54 31 32 3a 30 32 3a 32 36 2b 30 35 3a 33 30 22 Data Ascii: mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2023-10-12T12:02:26+05:30"
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 33 2d 31 30 2d 31 32 54 31 32 3a 30 32 3a 32 36 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 2d 31 30 2d 31 32 54 31 32 3a 30 32 3a 32 36 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 33 32 39 34 36 31 43 43 39 36 38 45 45 31 31 39 41 38 32 46 37 37 44 42 44 31 30 42 37 36 34 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 32 32 39 34 36 31 43 43 39 36 38 45 45 31 31 39 41 38 32 46 37 37 44 42 44 31 30 42 37 36 34 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 32 32 39 34 36 31 43 43 39 36 38 45 45 31 Data Ascii: p:MetadataDate="2023-10-12T12:02:26+05:30" xmp:ModifyDate="2023-10-12T12:02:26+05:30" xmpMM:InstanceID="xmp.iid:C329461CC968EE119A82F77DBD10B764" xmpMM:DocumentID="xmp.did:C229461CC968EE119A82F77DBD10B764" xmpMM:OriginalDocumentID="xmp.did:C229461CC968EE1
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: f0 f9 57 f3 e9 17 8c ff 00 c3 f2 ff 00 57 cf af ff d1 28 d4 f5 0d 15 04 44 2b eb 97 4c 36 95 ca ad 21 5f 48 88 c6 14 e8 5a 70 bc 82 79 22 ff 00 9f 60 ed 27 d3 1d 0d f5 79 f9 f4 fc ad 35 3d 23 fd bc 69 11 9c 0a 33 37 9b 4b b0 95 95 a6 92 ef aa 4f 23 93 fa f9 b5 bd eb 4e 3f 3e af a8 e3 aa 7a fe 6a f8 7a f0 7a 87 3f fc 5e 73 40 22 dc 38 66 db be 77 96 8e 2a 88 e4 a4 c8 43 99 86 21 a2 23 34 b1 49 f6 f2 36 92 da 63 41 70 2e 3d 99 ed 8d 46 95 34 e6 83 3f e4 e9 0e e0 19 92 22 b9 50 72 3f cb fc a9 d1 3b f8 b6 95 0d b8 76 ad 6d 4a 3c b4 ab bb 05 2a cd 22 b3 24 13 47 45 1b 53 d1 44 c5 ca 5a 54 90 97 5d 23 48 2b cf 36 f6 1d e7 49 40 b0 bc 80 1e ff 00 08 37 e5 aa 84 fe 54 c7 43 9f 6f a2 67 dc 36 c9 a4 07 4f 8e cb f6 76 d5 47 e7 53 fc ba db 7b a0 fe 22 f7 e5 66 d2 7d Data Ascii: WW(D+L6!_HZpy"`'y5=#i37KO#N?>zjzz?^s@"8fwC!#4I6cAp.=F4?"Pr?;vmJ<"$GESDZT]#H+6I@7TCog6OvGS{"f}
2024-04-18 17:22:42 UTC	1161	IN	Data Raw: 34 d2 bb 33 62 80 92 6a 4f e7 5a f4 18 6d 38 b7 8b 57 53 e2 ea bc f5 b8 f9 7f cf 65 f3 f4 90 50 e4 61 48 d1 d9 51 a2 c6 d4 cf 0e 42 a7 4a 69 0d 68 51 89 b9 6f 6a ae 6f 2f 36 db 37 99 e2 f1 55 47 16 01 4e 71 9a 54 1a 79 90 07 49 23 8d 64 90 28 34 af e7 fb 3f d9 e8 7d c7 51 45 8d a6 34 f0 b1 7f dd f2 b3 b0 0a 5a 47 27 5d 91 05 91 5b 48 b0 e7 fd 7f 71 fd f5 e4 97 f7 06 e2 45 00 d0 0a 0e 14 1c 3a 35 8a 31 12 68 07 1d 66 8e 7b 30 37 3f e6 65 b5 c8 1f 49 3f 36 3f d3 da 4e af d3 82 4f cd ed c7 96 9b 83 f4 fd 07 f3 fe 23 df b3 c3 af 57 ac be 61 fd 7f e5 2b fd f7 fb 1f f1 f7 bf f3 f5 ee bf ff d3 d7 4f 13 b7 36 d5 2a a2 43 87 a4 20 30 d1 e4 f2 48 aa 4c 88 78 46 90 a7 e4 fe 2d ec c5 f7 6d cd c5 3e b9 d5 7d 16 83 fc 03 ab 2c 10 83 5f 08 13 f3 cf 4b 8a 08 e8 69 15 7e Data Ascii: 43bjOZm8WSePaHQBJihQojo/67UGNqTyI#d(4?}QE4ZG'][HqE:51hf{07?eI?6?NO#Wa+O6*C 0HLxF-m>},_Ki~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49937	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	660	OUT	GET /images/speakers/39361/W_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:47 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"4192-1592989974000" Last-Modified: Wed, 24 Jun 2020 09:12:54 GMT Content-Type: image/jpeg Content-Length: 4192 Connection: close
2024-04-18 17:22:42 UTC	4192	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49938	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	660	OUT	GET /images/speakers/35245/U_Large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:47 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"20838-1550490670000" Last-Modified: Mon, 18 Feb 2019 11:51:10 GMT Content-Type: image/jpeg Content-Length: 20838 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0b ae 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 30 32 3a 31 38 20 31 37 3a 31 39 3a 32 34 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2019:02:18 17:19:24Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 13 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 43 00 53 00 36 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 01 01 00 ff e1 0e 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 Data Ascii: IM!UAdobe PhotoshopAdobe Photoshop CS68BIM1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe X
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 Data Ascii: Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http
2024-04-18 17:22:42 UTC	4462	IN	Data Raw: d0 22 a7 dd 22 8a 6a 4a 8a 9e aa 5a 77 ec bd d3 af fa 86 e5 44 db 11 2a 78 e6 57 1c f1 7d 7d ec 97 44 2b d5 8c 62 9e 35 23 8c 6a 60 02 c7 8c 6a a4 ca 7c d7 45 db 20 05 57 dd 1e a4 64 97 bc 3d 99 d8 60 e5 61 1a 1d 36 54 cc 2b 31 9f 6c c4 86 1b 56 ac a7 47 18 b2 23 57 c3 b0 90 e2 ac 36 d3 6a 83 24 3e 45 13 5e 92 5d 35 75 bd 43 71 3c 05 22 25 ed 71 41 7d e6 de 22 03 26 11 55 15 d6 9d 26 bd cd 36 ed 55 15 54 4e 87 f8 e5 9d 7d 07 cd 44 b0 92 d1 cb 74 11 52 24 1d 7e 66 49 91 29 28 8b 2c 69 aa 2a a7 bd ae dd 74 5e 9d 77 1f ca a9 ae 4d c9 72 52 34 56 6c 23 c8 93 31 e6 1a 37 1e 8d 1c 1a 25 17 64 3f e1 53 f1 aa ee 40 1d 14 7b 2e 9c 69 e2 b0 06 d9 cb 33 9c 0d ba e8 cf 80 ca 68 6d b1 6c de 1d 98 49 58 3b 55 f1 6e a9 d4 17 9e 79 b5 47 05 c3 64 17 dc 37 3a 73 70 a2 ab Data Ascii: ""jJZwDxW}}D+b5#j`j\|E Wd=`a6T+1lVG#W6j$>E^]5uCq<"%qA}"&U&6UTN}DtR$~fI)(,it^wMrR4Vl#17%d?S@{.i3hmlIX;UnyGd7:sp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49939	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	675	OUT	GET /s/W/xdds/qOxiKg+ulwNG3te1/c/1713460961553 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=0oEGvm14nlRzfxq/ISeSQQpEcUWBa9iynRySZoDfVF/Tui6avy4HAv/OkTUuVwBBLw6ojzUWpR91tSsrimkeGOQGvEEWhgW/ET1Tl0XEfTHVc7GiMZYjfVR/fT2z
2024-04-18 17:22:42 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:42 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Wlhqi80+L39ng/lgN9dGvAlplyW0sZKJOgUsYRAMtcDuPAaVJOXNeLwsndlKvnrjuE4BsRoK4SSkIQ3JzZaSbp66+U9ZmFIm1/Tkgmu1zGV2Y0irryu2HOwhpxLr; Expires=Thu, 25 Apr 2024 17:22:42 GMT; Path=/ Set-Cookie: AWSALBCORS=Wlhqi80+L39ng/lgN9dGvAlplyW0sZKJOgUsYRAMtcDuPAaVJOXNeLwsndlKvnrjuE4BsRoK4SSkIQ3JzZaSbp66+U9ZmFIm1/Tkgmu1zGV2Y0irryu2HOwhpxLr; Expires=Thu, 25 Apr 2024 17:22:42 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:42 UTC	73	IN	Data Raw: 34 33 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 36 32 35 34 35 5c 6e 39 39 32 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 43$Loader && ($Loader.payload = "1713460962545\n992\n1\n0\nn\n15000")
2024-04-18 17:22:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49941	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	672	OUT	GET /images/speakers/63495/Payson%20Hall_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:47 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"29483-1709716376000" Last-Modified: Wed, 06 Mar 2024 09:12:56 GMT Content-Type: image/jpeg Content-Length: 29483 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0d 80 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 33 3a 30 36 20 31 34 3a 32 39 3a 30 39 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:03:06 14:29:09Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: b6 ef 56 db 65 e7 d9 d9 a3 89 09 4f 97 96 49 de c2 32 8c af fb aa 8e 5e 01 e6 24 2b fb cf 1d fa c6 05 a0 db a8 0e 05 87 b1 8e cb 62 b7 5b 63 7d 76 0f 63 84 8f 08 5a fd 47 a2 d3 9b 56 ed 9b 8f 2e 60 d2 7f 94 df e5 2c 86 d5 9f 87 49 a2 98 b6 b1 a0 27 47 0d 67 ba 76 48 56 87 e8 57 63 9f 51 a8 ea 1b 18 f8 d7 d9 ee 6f 27 48 f8 7e 72 54 d5 65 9d 59 97 96 4d 74 bd b5 0f 02 e8 f7 3f fe b6 9f 0e cc db 5d e8 56 c3 50 22 0d 8e e4 03 cc 37 fa ab 7f 0b a3 be cc 6a fe ce 04 55 64 ea 60 b9 a0 3b d4 3f ca 73 9e e5 5a 7e 93 5b 93 f9 36 63 eb 8d 9b 11 1d bf 79 e6 7e b0 09 75 ba 7f 83 d3 ee 72 d1 e9 45 c3 ea fd 5b 4c 4e 3b 67 e1 b5 de 6b 3f eb 46 33 99 97 e9 58 d7 33 80 01 07 51 ff 00 99 2d 4e 9d 43 bf 62 0a f6 c9 aa 81 bb 58 03 6b 5d ee fe 56 d4 ff 00 d1 87 f2 e8 b2 aa 9e Data Ascii: VeOI2^$+b[c}vcZGV.`,I'GgvHVWcQo'H~rTeYMt?]VP"7jUd`;?sZ~[6cy~urE[LN;gk?F3X3Q-NCbXk]V
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: e9 d7 40 85 2c fd e3 fc ec 76 e7 f7 51 2b 90 f7 0f 20 aa 47 fe dd 4a 3d 57 f4 1f 5f cd ff d4 c0 ce cb ab a9 d5 f6 5c 4a 9e fc 8b 48 86 8f 29 97 7f 25 75 58 78 56 bf 17 1a ab 4f a7 e8 56 d6 3b 69 9d 43 76 7d 38 6a 17 47 e8 d4 60 d5 b2 a9 2e 3f ce 5a ef a4 ef fc c1 6d 31 81 b0 3f 04 c8 c4 c4 50 d9 90 08 ed e3 68 ff 00 67 d5 f6 51 5d 40 37 69 90 7b fc d5 2b 71 df 5d 90 e1 02 78 f3 0b 6e bf a2 54 2c a1 97 07 b1 dc 38 08 3e 04 77 52 42 66 3e 4a 9e 31 2d b4 2e 5b 34 d1 57 cc c4 6d f2 e6 7b 2d f1 ec 7f ac b4 a9 c1 7b 9a 0b 88 04 48 77 c4 68 aa 75 ee 9f 6d bd 3d d5 e3 3b 63 89 04 3e 63 73 9b ee 0d 77 fc 13 94 b2 94 48 ad ed 86 31 94 4d ed 48 ba 6f 4a b1 e5 ad b6 c6 56 d7 9e ce 05 ef 8f cd ac 2e 86 bd b4 5d 5d 4c 01 ac 6b 76 80 3c d7 9b 31 f6 9a ec f4 1a 6a ce a4 Data Ascii: @,vQ+ GJ=W_\JH)%uXxVOV;iCv}8jG`.?Zm1?PhgQ]@7i{+q]xnT,8>wRBf>J1-.[4Wm{-{Hwhum=;c>cswH1MHoJV.]]Lkv<1j
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 2b a8 3d 86 2b bb af f3 8a a6 91 03 74 f2 34 ed 46 93 72 0b 54 f6 54 3c f2 a7 90 08 44 16 11 c9 58 4b 1e e1 08 b7 e7 70 c6 4a c5 f4 f1 0c f8 46 48 90 40 45 c1 69 0f 02 c2 21 1d af 00 d1 d0 c3 5a a6 51 48 04 ae c5 45 fc 01 70 49 94 87 45 9f 9e 7a 8d ed 4f 86 6d 3a 8f 90 88 55 30 26 7b 4c ee 52 48 1b d1 60 20 29 3e bd 67 54 e5 cd a8 3a 6c 01 90 ad cc ea 85 be a6 7e 5e b1 ad d0 a9 e8 db 6a 22 ae 9d 20 a6 7e 89 08 d9 36 22 a6 ae 42 02 e7 34 25 33 d3 06 6d c5 33 24 77 f4 38 44 73 16 ea e9 ad de 3c 1a ea 88 71 98 af 24 d5 1e e7 cb c3 86 04 c0 b2 cf 21 28 45 1a 3e d3 30 ed 44 9f 98 9d 39 2f eb b5 81 24 5c 33 e5 f0 e6 17 97 83 91 c9 e8 ad d0 a6 92 06 f7 9b c7 b6 41 25 8a a5 4a 4e 9c f5 d5 32 2d 75 84 3c 16 e0 65 7a 3d 54 ec 89 88 2c ec bc 21 df 01 11 e8 a8 bd d5 Data Ascii: +=+t4FrTT<DXKpJFH@Ei!ZQHEpIEzOm:U0&{LRH` )>gT:l~^j" ~6"B4%3m3$w8Ds<q$!(E>0D9/$\3A%JN2-u<ez=T,!
2024-04-18 17:22:42 UTC	4931	IN	Data Raw: 68 9a a2 ac 8a 58 08 6a 8a a8 ab ce 30 45 4e 6b ec e0 4a d7 1a a6 92 8a be 72 69 99 8c 96 9a ae ba 23 73 d4 17 5f e4 d3 97 0e e3 01 88 d7 b2 fd 88 90 84 b5 79 f3 26 7a 2d 13 bb d1 87 a3 98 19 a2 37 e5 5d e8 a8 ab c5 08 cc 6c 5d 48 b3 67 5d ce 42 30 30 51 67 d2 b7 19 91 55 dc a4 8c b1 25 3c a5 c8 4b 5e 49 c3 70 9e 8c d4 39 6b 25 92 8d 68 4c 34 e1 57 36 88 fb 6a 4d b6 e7 37 57 63 e4 aa 8a a8 84 a5 ec d3 87 32 4b 18 4c 5f 59 bb 31 5d ae 69 d6 c1 62 40 ae 68 5a 66 14 76 db 35 52 79 f1 8e 1b 9d 75 74 42 71 d7 15 11 39 70 7d 16 9a 6c 5d 11 12 06 9b 01 e4 0d 00 36 2b a6 9a 08 02 22 27 c4 89 a7 10 32 64 86 2f 3f 88 dd 45 59 7a b2 2e 17 d5 16 f3 a0 c7 70 c9 15 10 89 98 d6 0d c6 33 d1 50 85 a4 3d 3e 2e 2c 3b 73 84 77 e6 fb 11 c3 2b 5b a3 91 59 80 d9 55 62 17 34 94 Data Ascii: hXj0ENkJri#s_y&z-7]l]Hg]B00QgU%<K^Ip9k%hL4W6jM7Wc2KL_Y1]ib@hZfv5RyutBq9p}l]6+"'2d/?EYz.p3P=>.,;sw+[YUb4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49942	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	663	OUT	GET /images/speakers/36875/Andy_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:47 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"20911-1571824189000" Last-Modified: Wed, 23 Oct 2019 09:49:49 GMT Content-Type: image/jpeg Content-Length: 20911 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0b 7c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 31 30 3a 32 33 20 31 35 3a 31 37 3a 35 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: \|ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2019:10:23 15:17:57Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 04 06 00 00 00 00 00 07 00 08 00 01 00 01 01 00 ff e1 0e 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 Data Ascii: 1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 Data Ascii: /22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" x
2024-04-18 17:22:42 UTC	4535	IN	Data Raw: 6c f1 ce a1 43 a4 e3 cc fb ca 2f 10 58 f1 c7 ca cf 2b bc 61 a5 c5 3f fc 7e 11 f2 8a df 91 f8 d6 9e b6 19 b2 fb fc 17 e4 0d 14 7e 4e e1 99 75 a6 e3 aa b6 bf f8 c6 c2 c2 4d 04 82 55 2d ac 55 38 68 89 b7 44 e6 5f cb 88 5e 2b 29 6c fb 6a 21 0e 54 c8 10 04 a6 25 3a ce 60 05 12 25 55 11 b2 3a 9b f1 65 d0 cc e0 9f 61 d0 3d c4 cd 20 cc 12 aa 03 3d e2 4a 2a 48 06 66 49 06 75 88 67 c7 9a 90 c2 f9 5f 91 98 09 89 2a 3e 5d 47 45 95 d6 c9 6d 10 04 52 4d 74 59 45 18 c1 37 6c 94 c4 79 4d 03 81 ea 86 8b aa 6a 8b d5 77 91 bf fb bc 73 69 35 32 1b 3a 76 c1 8a b1 e6 d5 fe 2d 91 6a 3c 05 9c 4d c6 ad c0 a2 9b d2 e2 13 e4 52 4b e2 de 26 e1 94 75 11 15 f8 9d d8 ad ea bd 97 6e bd 46 61 6e 3d ab 94 30 aa 80 7e 33 31 bd 4c 7d c2 9c 71 29 15 f9 4a 2e 23 0d 85 8b e4 14 92 2e 18 a5 ab Data Ascii: lC/X+a?~~NuMU-U8hD_^+)lj!T%:`%U:ea= =JHfIug_>]GEmRMtYE7lyMjwsi52:v-j<MRK&unFan=0~31L}q)J.#.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49940	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	674	OUT	GET /images/speakers/63517/Michael%20Gozzo_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:47 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"24192-1709753679000" Last-Modified: Wed, 06 Mar 2024 19:34:39 GMT Content-Type: image/jpeg Content-Length: 24192 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0a 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 33 3a 30 37 20 30 30 3a 35 31 3a 35 35 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2024:03:07 00:51:55Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 34 2d 30 33 2d 30 37 54 30 30 3a 35 31 3a 35 35 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 33 2d 30 37 54 30 30 3a 35 31 3a 35 35 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 33 2d 30 37 54 30 30 3a 35 31 3a 35 35 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 41 41 34 34 43 43 42 Data Ascii: lns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2024-03-07T00:51:55+05:30" xmp:MetadataDate="2024-03-07T00:51:55+05:30" xmp:ModifyDate="2024-03-07T00:51:55+05:30" xmpMM:InstanceID="xmp.iid:FAA44CCB
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 42 45 45 31 31 38 32 41 33 42 46 37 36 32 38 46 31 44 39 39 30 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 39 41 34 34 43 43 42 39 37 44 42 45 45 31 31 38 32 41 33 42 46 37 36 32 38 46 31 44 39 39 30 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 39 41 34 34 43 43 42 39 37 44 42 45 45 31 31 38 32 41 33 42 46 37 36 32 38 46 31 44 39 39 30 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e Data Ascii: BEE1182A3BF7628F1D990" xmpMM:DocumentID="xmp.did:F9A44CCB97DBEE1182A3BF7628F1D990" xmpMM:OriginalDocumentID="xmp.did:F9A44CCB97DBEE1182A3BF7628F1D990" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" dc:format="image/jpeg"> <xmpMM:History>
2024-04-18 17:22:42 UTC	7816	IN	Data Raw: 18 40 b6 4a 44 f9 a4 42 6f 71 9c 6e 62 02 43 62 71 59 d1 d9 c4 37 93 32 66 86 4d e9 99 ee a9 b2 bb cc b9 a7 83 a2 ee 75 c6 2e 8b d7 12 88 37 86 5f f2 92 75 0e 58 e8 48 b4 d0 96 6e eb 6d c8 ad 89 eb 9e 3d 66 8a 44 e6 9a e7 da 24 bb 64 f4 97 b1 1c 63 65 6a 9d 85 ed 27 63 b8 91 da bb 2a 67 60 68 6c c7 78 c8 6d 5c 1d 9c 83 7f bb ce 1c 2c fd c7 f2 81 a8 f6 47 68 c1 22 28 bb 6d fb 83 a7 93 e0 fc 7c c0 e2 df 3f 4b 48 c7 63 ba df d6 c6 37 0e 8e 3b 11 c6 86 98 c8 af 8a 34 c1 23 37 1c 16 3c c6 41 56 25 2a 4a 82 8c dd fe 3a 3a a3 5c 33 41 fb 40 37 93 26 c4 5b 67 98 8c 19 e7 b5 3e de cf b3 43 3c d0 bc 2b c8 f9 75 a8 8b 85 66 fb 97 0e 6d b4 73 f6 d9 9a 9b 63 30 c7 e6 f2 b6 ea 26 44 fc 65 76 c7 f0 aa 56 2e 99 e2 1c 30 31 9c 37 60 52 31 6b cd bc 25 79 16 c7 96 ca 72 5c Data Ascii: @JDBoqnbCbqY72fMu.7_uXHnm=fD$dcej'cg`hlxm\,Gh"(m\|?KHc7;4#7<AV%J::\3A@7&[g>C<+ufmsc0&DevV.017`R1k%yr\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49943	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	680	OUT	GET /images/speakers/60119/Sherrine%20Washington_large.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:47 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"25713-1697092344000" Last-Modified: Thu, 12 Oct 2023 06:32:24 GMT Content-Type: image/jpeg Content-Length: 25713 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 0a bf 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 31 30 3a 31 32 20 31 32 3a 30 32 3a 32 36 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 5a a0 03 00 04 00 00 00 01 00 00 00 70 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2023:10:12 12:02:26Zp
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 31 30 2d 31 32 54 31 32 3a 30 32 3a 32 36 2b 30 35 3a 33 30 22 Data Ascii: mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2023-10-12T12:02:26+05:30"
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 33 2d 31 30 2d 31 32 54 31 32 3a 30 32 3a 32 36 2b 30 35 3a 33 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 2d 31 30 2d 31 32 54 31 32 3a 30 32 3a 32 36 2b 30 35 3a 33 30 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 33 32 39 34 36 31 43 43 39 36 38 45 45 31 31 39 41 38 32 46 37 37 44 42 44 31 30 42 37 36 34 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 32 32 39 34 36 31 43 43 39 36 38 45 45 31 31 39 41 38 32 46 37 37 44 42 44 31 30 42 37 36 34 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 32 32 39 34 36 31 43 43 39 36 38 45 45 31 Data Ascii: p:MetadataDate="2023-10-12T12:02:26+05:30" xmp:ModifyDate="2023-10-12T12:02:26+05:30" xmpMM:InstanceID="xmp.iid:C329461CC968EE119A82F77DBD10B764" xmpMM:DocumentID="xmp.did:C229461CC968EE119A82F77DBD10B764" xmpMM:OriginalDocumentID="xmp.did:C229461CC968EE1
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: f0 f9 57 f3 e9 17 8c ff 00 c3 f2 ff 00 57 cf af ff d1 28 d4 f5 0d 15 04 44 2b eb 97 4c 36 95 ca ad 21 5f 48 88 c6 14 e8 5a 70 bc 82 79 22 ff 00 9f 60 ed 27 d3 1d 0d f5 79 f9 f4 fc ad 35 3d 23 fd bc 69 11 9c 0a 33 37 9b 4b b0 95 95 a6 92 ef aa 4f 23 93 fa f9 b5 bd eb 4e 3f 3e af a8 e3 aa 7a fe 6a f8 7a f0 7a 87 3f fc 5e 73 40 22 dc 38 66 db be 77 96 8e 2a 88 e4 a4 c8 43 99 86 21 a2 23 34 b1 49 f6 f2 36 92 da 63 41 70 2e 3d 99 ed 8d 46 95 34 e6 83 3f e4 e9 0e e0 19 92 22 b9 50 72 3f cb fc a9 d1 3b f8 b6 95 0d b8 76 ad 6d 4a 3c b4 ab bb 05 2a cd 22 b3 24 13 47 45 1b 53 d1 44 c5 ca 5a 54 90 97 5d 23 48 2b cf 36 f6 1d e7 49 40 b0 bc 80 1e ff 00 08 37 e5 aa 84 fe 54 c7 43 9f 6f a2 67 dc 36 c9 a4 07 4f 8e cb f6 76 d5 47 e7 53 fc ba db 7b a0 fe 22 f7 e5 66 d2 7d Data Ascii: WW(D+L6!_HZpy"`'y5=#i37KO#N?>zjzz?^s@"8fwC!#4I6cAp.=F4?"Pr?;vmJ<"$GESDZT]#H+6I@7TCog6OvGS{"f}
2024-04-18 17:22:42 UTC	1161	IN	Data Raw: 34 d2 bb 33 62 80 92 6a 4f e7 5a f4 18 6d 38 b7 8b 57 53 e2 ea bc f5 b8 f9 7f cf 65 f3 f4 90 50 e4 61 48 d1 d9 51 a2 c6 d4 cf 0e 42 a7 4a 69 0d 68 51 89 b9 6f 6a ae 6f 2f 36 db 37 99 e2 f1 55 47 16 01 4e 71 9a 54 1a 79 90 07 49 23 8d 64 90 28 34 af e7 fb 3f d9 e8 7d c7 51 45 8d a6 34 f0 b1 7f dd f2 b3 b0 0a 5a 47 27 5d 91 05 91 5b 48 b0 e7 fd 7f 71 fd f5 e4 97 f7 06 e2 45 00 d0 0a 0e 14 1c 3a 35 8a 31 12 68 07 1d 66 8e 7b 30 37 3f e6 65 b5 c8 1f 49 3f 36 3f d3 da 4e af d3 82 4f cd ed c7 96 9b 83 f4 fd 07 f3 fe 23 df b3 c3 af 57 ac be 61 fd 7f e5 2b fd f7 fb 1f f1 f7 bf f3 f5 ee bf ff d3 d7 4f 13 b7 36 d5 2a a2 43 87 a4 20 30 d1 e4 f2 48 aa 4c 88 78 46 90 a7 e4 fe 2d ec c5 f7 6d cd c5 3e b9 d5 7d 16 83 fc 03 ab 2c 10 83 5f 08 13 f3 cf 4b 8a 08 e8 69 15 7e Data Ascii: 43bjOZm8WSePaHQBJihQojo/67UGNqTyI#d(4?}QE4ZG'][HqE:51hf{07?eI?6?NO#Wa+O6*C 0HLxF-m>},_Ki~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49944	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	660	OUT	GET /images/products/detail/207028.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:42 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:47 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"84323-1678776940000" Last-Modified: Tue, 14 Mar 2023 06:55:40 GMT Content-Type: image/jpeg Content-Length: 84323 Connection: close
2024-04-18 17:22:42 UTC	7926	IN	Data Raw: ff d8 ff e1 14 1e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 58 00 00 01 01 00 03 00 00 00 01 01 e2 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 39 3a 30 32 3a 32 35 20 31 30 3a 33 32 3a 35 31 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*X(12i ''Adobe Photoshop CS6 (Windows)2019:02:25 10:32:510
2024-04-18 17:22:42 UTC	258	IN	Data Raw: 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 64 92 49 48 d1 52 50 4a 4b 8b fa e2 2c bb 32 db d9 22 9c 36 d7 8e e3 24 7e 95 ed b3 27 db 1f b9 5b ab dc ef f8 4a d3 27 2e 11 75 6d 9e 4f 96 fb c6 5f 6f 8b 83 4b e2 ae 2f ea 8d 3d 3f a5 27 af ca cb c6 c3 a4 df 95 63 69 a8 10 d2 f7 71 2e 3b 5a 14 eb b2 bb 6b 6d b5 38 59 5b c0 73 1e d3 2d 20 f0 e6 b8 2e 7f eb 43 9c 7e ab b0 c9 73 9d e8 6b c9 26 01 5a 78 5d 4b a6 3a c6 f4 ea 72 18 72 29 6f a7 e9 6a 09 35 8d af 6d 45 c3 6d be 9e df 7f a4 97 17 aa b4 d8 7e 2a 97 Data Ascii: R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?dIHRPJK,2"6$~'[J'.umO_oK/=?'ciq.;Zkm8Y[s- .C~sk&Zx]K:rr)oj5mEm~*
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 92 22 52 97 1e 48 ca 85 c2 30 c5 c1 ea 3f bb fc e3 7d 25 5b 2f a9 74 fc 28 19 79 35 50 4e a1 b6 3c 07 1f ea b3 e9 28 d9 d5 ba 6d 58 43 3d f9 35 8c 47 68 cb 81 90 e3 25 bb 59 b6 5c f7 fb 5f ec 4e b1 dc 31 0c 59 08 04 42 44 48 f0 c4 88 9f 54 bf 76 3f bc db 49 52 6f 5a e9 6e c2 7e 70 c8 68 c6 a8 86 d8 f2 1c 0b 49 21 ad 6d 95 b9 be ab 37 6f 6f e6 23 e4 5f 6b 28 6d d8 d4 3b 2f 71 10 ca dc c6 cb 48 9d e1 d7 3a b6 7f d2 4a c7 43 7e 5a a8 e2 98 35 28 98 eb c3 eb fd 58 e2 1b c7 8a 69 92 5c a7 41 ca ca 1d 5b aa 5c cc 5b af 2f b3 df 53 6c ac 7a 47 7d be db 3d 6b 99 5b 9d ed d9 ba 8f 53 f9 b5 b7 6f 5f e9 58 f6 b6 8c bb 86 3e 41 00 be 97 7b 8d 73 fe 9e ca 3d 5a 29 e7 f3 ed 4d 8c c1 16 74 f3 66 cd c9 e4 86 4f 6e 1f ad 20 46 5f ab f5 4b d5 1e 33 fa b8 71 cf 86 3c 5f 3b Data Ascii: "RH0?}%[/t(y5PN<(mXC=5Gh%Y\_N1YBDHTv?IRoZn~phI!m7oo#_k(m;/qH:JC~Z5(Xi\A[\[/SlzG}=k[So_X>A{s=Z)MtfOn F_K3q<_;
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: 94 de 47 6d be 60 e7 0e 76 e8 00 00 00 00 00 00 d1 9f 51 7e a2 f2 b5 92 fc fc d8 fb 37 f8 ee 00 00 00 10 e5 46 a4 32 05 5e a8 58 dd e9 60 00 00 00 00 00 00 00 00 00 00 00 01 86 3c 5d e8 c6 bb 78 63 d9 0e 26 d7 7b 0f e0 4e 41 ef 1d 4d c3 2e 31 f4 6b 02 98 6b d5 bd e1 36 cf e6 26 28 80 00 00 00 00 03 e3 42 7e 59 96 ad 69 07 aa 1f 4e f9 c8 ca fe 5b e7 cb 33 79 4d db d5 d5 c2 3d d0 00 00 0b 2f b5 b6 2f 56 cc 09 ee cd ec 5d fa c9 b4 5e 75 f0 d8 00 00 00 00 00 00 00 00 00 00 00 00 6a ff 00 80 fd ba aa 15 3b 2b 0d b8 c3 d1 cd ad 36 23 c1 8c 87 5e 1a 8b 85 2c 57 e9 36 1a 71 37 a4 7b 41 ec 77 87 52 64 95 cf 7b f7 3e ae fd 4e d9 61 d5 c3 aa 8c 49 65 0f 81 d1 57 b8 7a c6 22 84 3a b1 bf 65 6e 4c 81 4c bd 32 75 90 34 73 e3 f4 d4 ed 86 85 9b 2f 6e eb d6 6e d3 0a 38 b7 Data Ascii: Gm`vQ~7F2^X`<]xc&{NAM.1kk6&(B~YiN[3yM=//V]^uj;+6#^,W6q7{AwRd{>NaIeWz":enLL2u4s/nn8
2024-04-18 17:22:42 UTC	8192	IN	Data Raw: 39 4a 8e 52 83 ba a3 84 c3 96 71 ca 54 72 55 1c b5 28 29 4a 98 5d 96 ae 2f 05 2d 0a 5e c1 53 d1 24 9e 32 45 f5 db b5 cc be 4d 76 3c f5 f0 22 f0 fa 90 6f c8 72 96 f0 8e 4b 31 87 b9 ed 43 dd 06 31 ee 53 48 f7 46 d4 2d 92 ce a8 b9 c9 72 6b b1 6d 2b 93 da 5c 44 e4 d5 95 d9 ec 52 46 57 19 76 f0 8f cd 1f 1d 98 fe 99 f6 f8 c9 5a 57 23 64 67 c7 46 53 ac e4 e4 a5 7b d6 1e 22 ec 79 cb f0 f3 d7 da 0f 5b 4b 05 64 f2 4a 8f 3c 7c 1e 66 f0 3c d1 e0 79 eb e8 42 5d 2f 46 8d 39 0e e5 bd c5 25 28 ad 3b 03 90 aa 27 79 10 8e df a8 b6 2d 6a 50 57 14 77 0f 69 ee 87 b5 37 c3 da d7 20 e3 8e dc ac 03 76 35 bb 70 b5 f6 81 d0 7b 55 7f 51 ed 3d d0 2e 21 46 b5 b5 c6 b1 a4 eb 6c df 67 67 6b b0 9f d2 ce de 11 f9 a7 e3 b3 1f d3 3e df 18 ff 00 51 ee 6d 2d 6f 12 b9 c6 d1 d5 05 ce 2a e5 56 Data Ascii: 9JRqTrU()J]/-^S$2EMv<"orK1C1SHF-rkm+\DRFWvZW#dgFS{"y[KdJ<\|f<yB]/F9%(;'y-jPWwi7 v5p{UQ=.!Flggk>Qm-o*V
2024-04-18 17:22:42 UTC	8176	IN	Data Raw: b8 61 e7 69 ba 70 61 fd 95 7a 69 e9 57 b9 78 66 42 f9 89 7a ce 4a 18 21 3d 17 b2 fb 85 e6 b4 6a fe 2c d5 68 87 54 2d 3d ce 13 dc c8 a6 0a ce e8 de e9 6c 45 d2 07 aa bb 1d d2 17 dc 3c 83 a6 fd 2f e7 da f3 9b 46 f8 74 d7 90 e6 49 6d a6 a7 6e bc 21 f3 51 7a 5c e4 39 24 cd 34 d2 44 9d a1 6b 52 55 ea 33 19 92 a7 69 85 30 a5 82 d6 89 20 df 6d c2 5f 93 be bd f5 ee ad 3f f9 16 94 28 ee a7 77 e1 5e ea 70 d6 94 ad 05 7e f2 9b fd c3 ee 25 4c 6a fc 3f f9 14 ea 52 be 21 7a 56 b4 a1 a9 53 57 bb ee a8 fb 8f f0 ef 37 7f 70 2f 71 6b 78 ce cc e3 71 4a 98 d4 37 e3 4e e1 45 d6 2d 4e aa ab 97 ee a5 7b a9 5a d0 c7 28 a5 c2 f4 15 a9 d5 3d 47 e1 4f c2 83 b8 16 85 a9 69 de 4a d7 84 7d d5 14 31 a9 5e 7a dd ea 7d e7 e1 fb a8 42 56 bf e9 c5 de 39 8a a7 4a 77 77 7f a7 fd a5 fc 41 52 Data Ascii: aipaziWxfBzJ!=j,hT-=lE</FtImn!Qz\9$4DkRU3i0 m_?(w^p~%Lj?R!zVSW7p/qkxqJ7NE-N{Z(=GOiJ}1^z}BV9JwwAR
2024-04-18 17:22:43 UTC	8192	IN	Data Raw: 24 2b 81 b5 da 4f 5b f0 dd f8 9f 91 6d cd 5b 5a 0a 81 17 10 5c 46 42 08 23 79 9e 94 00 77 00 1d e6 a5 40 9a 1a 33 10 f9 c2 f2 37 09 c3 bc 7e 1d 89 6b 52 4e ff 00 85 8e 83 58 dc 82 0b 5a 90 d6 16 a2 05 29 ef bd f6 bf 2e 3d ff 00 8b 57 73 e5 8d 93 93 e0 0c 8c 32 fe 28 9d 92 4c 68 68 8d 1b 19 1c 9e 3f 89 d5 42 0f 8d 89 9f 16 24 34 8f ca e2 67 49 cb 45 27 e9 24 8e 36 f7 54 7f 44 71 b7 ae 29 4b 6b 67 aa 09 4c 1c 64 0e 36 fb 2b 50 ed f8 b5 77 3e 58 d9 39 3e 00 c8 c3 2f e2 7b 9b 42 08 88 99 6d c0 ad 1c fe 16 b2 d6 b0 35 91 13 9c 7c 2e b3 2b 14 a2 63 ca 17 f0 bc 31 fb da 8b 0b d0 1c 4d ea 42 91 91 20 7c cc fa 44 b1 ce a1 df 3c 6c 75 b3 32 c7 2a 15 e0 6e ad 1e 2a 91 2f e4 a0 bc 70 5a c8 82 21 15 46 55 c9 71 2a 39 13 79 de 0d 06 04 34 e8 41 86 fd 14 e0 4e 47 fc 5a Data Ascii: $+O[m[Z\FB#yw@37~kRNXZ).=Ws2(Lhh?B$4gIE'$6TDq)KkgLd6+Pw>X9>/{Bm5\|.+c1MB \|D<lu2n/pZ!FUq*9y4ANGZ
2024-04-18 17:22:43 UTC	8176	IN	Data Raw: 72 af 5e 7c ba 47 25 47 76 23 f9 9c 2d 3b 55 8d 47 90 a8 a6 07 3a 04 aa fa c4 c9 f3 20 6a d0 55 bc 5a 1d 63 62 6b d3 94 ba f2 4f 20 88 85 13 08 dc 99 0a 09 95 9b bf 0c 31 91 a1 ec 0e d6 53 e1 c9 f6 85 0e 5b ac 2e 62 1f 2e 56 7a 18 fe d1 2e 0b 92 ad ce 55 f7 b7 50 db 89 48 52 9b 59 fd b6 0b e0 c7 3f 90 e5 77 da 95 13 68 a6 21 ea e8 fb 51 d4 66 d4 85 6b 53 06 59 ee 7a 95 c9 70 71 7b ee b0 b4 b2 e1 3d 70 a3 73 54 9b 53 be a7 d8 db 4f b4 13 51 62 2b 65 76 82 a6 66 24 a6 a0 ae 66 14 18 d0 ac b7 4c a8 e8 2c 61 0a 71 03 0d ec e8 30 d2 80 70 58 9e 06 a1 ec be cd d2 23 4d ed 1d 4d dd 5a 5d 03 4a 24 67 dd a2 03 d2 2e 3c e5 0b 9b 64 bb 3a 8d 32 05 78 4a 7d e1 3a b5 2b d6 22 67 e8 0b d4 37 6c ee 76 73 b0 72 31 86 aa 56 4f af ac 1b 34 66 78 79 2e c2 ed e6 da 1d 94 8b Data Ascii: r^\|G%Gv#-;UG: jUZcbkO 1S[.b.Vz.UPHRY?wh!QfkSYzpq{=psTSOQb+evf$fL,aq0pX#MMZ]J$g.<d:2xJ}:+"g7lvsr1VO4fxy.
2024-04-18 17:22:43 UTC	8192	IN	Data Raw: af 19 da f1 9d af 19 da f4 e7 6b d3 9d af 4e 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 76 bc 67 6b c6 70 df ff da 00 08 01 01 01 06 3f 00 ff 00 dd 38 d0 43 2d a2 22 00 1e 68 d0 04 72 c0 77 b3 98 0d 99 44 84 32 85 1e d1 d3 03 93 cf c1 c4 a2 02 09 e6 a7 00 90 38 cc 03 41 00 ff 00 d8 41 77 22 f9 8c 73 32 af d5 ce f6 45 e3 66 0c c8 a9 bd ce 51 70 ed 44 88 22 eb d2 06 dc 10 6f ad 7b d3 1b 7d 43 e7 d5 8d 72 b3 94 76 5e c1 db 42 8c 8a a4 1c b6 08 60 a9 d8 1a e7 a6 97 3a e6 0a 83 46 97 33 36 af 87 d6 b3 93 33 15 4c 3d 8c b0 04 31 0e 99 84 2a 05 50 a6 4c c3 c3 c9 df 02 a6 6c b8 8d e4 69 f3 f8 d9 79 98 a7 a7 d4 a2 b1 51 58 69 49 18 82 ae ca a6 0e 81 63 46 bd 68 a9 a8 00 14 Data Ascii: kNvgkvgkvgkvgkvgkvgkvgkvgkvgkvgkp?8C-"hrwD28AAw"s2EfQpD"o{}Crv^B`:F363L=1*PLliyQXiIcFh
2024-04-18 17:22:43 UTC	8176	IN	Data Raw: 0a 91 ba 62 99 23 24 af d1 53 5c 86 0e 91 13 b4 fa 31 4c 00 64 f8 87 16 2d 9e d8 b0 e6 bd 74 85 81 6d 0b 96 de 70 83 17 92 b1 69 b0 de f8 1e 61 b7 58 41 77 c0 d8 72 a8 94 44 a5 1c 86 b9 63 a2 13 ae 3c 3d 5c 44 ea f0 d0 33 39 b1 35 7a 5f 33 d1 f6 ad a7 6f b3 33 d9 79 e9 85 ba ac 73 56 e5 a0 1b be 98 3b ea 80 26 0e 49 6b b7 6e 2f 5d 5a 6a ce 41 bd b3 22 fa 06 d6 b5 d2 5d 05 08 56 70 09 0d 2d 74 8c ec c0 08 b6 91 92 47 bf a6 82 86 21 81 0e 58 ee ec f2 35 9b 58 5c 20 24 78 a3 d8 7d 3f b7 9c 09 b7 52 2b 75 c4 4f 36 24 1a 00 74 28 a8 50 12 9b 30 30 e7 96 2d 7b c1 56 eb 25 07 7f e9 e4 54 53 69 3a 18 5b 39 91 82 39 fa e4 61 b2 03 12 40 52 a0 91 2a 08 9c 78 b1 a8 b0 9a b3 71 b5 b4 2d 6d 44 81 81 2c 65 c6 e9 b3 a7 71 bf 74 16 f0 0f 52 07 ee 18 a6 e1 46 2d e9 f4 41 Data Ascii: b#$S\1Ld-tmpiaXAwrDc<=\D395z_3o3ysV;&Ikn/]ZjA"]Vp-tG!X5X\ $x}?R+uO6$t(P00-{V%TSi:[99a@R*xq-mD,eqtRF-A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49946	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:42 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:22:43 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:43 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876656ab18644545-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FJzwOqMMdCABdOEiXbJRRdwD29hYYt9LvHRdMc8uxInz6kt0pBmaqv%2FtjleffZ6wpgSJTfH4TTFLcpfYnFlRCLWbmkwRreBtZpf%2BduJT4%2BZqOAsAwgN1zyM%2F6mcJfNiKyDYAKkEmD8o1Yw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=9b22150cdaeae7d7cbf84c028d93de3427c90a80-1713460963; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876656ab18644545-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49945	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	988	OUT	GET /speakerprofile?speaker_id=34674 HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.traininng.com/recorded-webinars Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460960.41.0.0
2024-04-18 17:22:43 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:48 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:43 UTC	7985	IN	Data Raw: 31 30 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1038<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:43 UTC	6845	IN	Data Raw: 68 6e 20 69 73 20 61 6e 20 69 6e 74 65 72 6e 20 70 72 65 63 65 70 74 6f 72 20 66 6f 72 20 74 68 65 20 55 6e 69 76 65 72 73 69 74 79 20 6f 66 20 41 72 69 7a 6f 6e 61 e2 80 99 73 20 49 6e 64 75 73 74 72 69 61 6c 20 48 79 67 69 65 6e 65 20 64 65 70 61 72 74 6d 65 6e 74 2e 20 3c 2f 70 3e 20 3c 62 72 20 2f 3e 20 3c 62 72 20 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 3c 73 74 79 6c 65 3e 2e 6e 61 76 2d 74 61 62 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 7d 20 61 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 74 72 75 65 22 5d 3a 3a 62 65 66 6f 72 65 20 7b 63 6f 6e 74 65 6e 74 3a 27 27 21 69 6d 70 6f 72 74 61 6e 74 7d 20 61 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 5d 3a 3a 62 65 66 6f Data Ascii: hn is an intern preceptor for the University of Arizonas Industrial Hygiene department. </p> <br /> <br /></div><style>.nav-tabs a{display:inline-block !important} a[aria-expanded="true"]::before {content:''!important} a[aria-expanded="false"]::befo
2024-04-18 17:22:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:43 UTC	5134	IN	Data Raw: 35 34 30 0d 0a 65 6e 76 69 72 6f 6e 6d 65 6e 74 61 6c 20 70 72 6f 73 70 65 63 74 69 76 65 2e 3c 2f 70 3e 0d 3c 2f 64 69 76 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 3e 0d 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 62 6f 74 68 3b 20 68 65 69 67 68 74 3a 31 70 78 3b 20 6d 61 72 67 69 6e 3a 32 30 70 78 20 31 30 70 78 3b 20 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 22 3e 3c 2f 64 69 76 3e 0d 3c 2f 64 69 76 3e 0d 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 62 6f 74 68 3b 20 68 65 69 67 68 74 3a 31 30 70 78 3b 22 3e 3c 2f 64 69 76 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 6c 67 2d Data Ascii: 540environmental prospective.</p></div><div class="col-md-12"><div style="clear:both; height:1px; margin:20px 10px; border-top:1px solid #ddd;"></div></div><div style="clear:both; height:10px;"></div><div class="col-xs-12 col-sm-6 col-md-3 col-lg-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49948	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	1495	OUT	GET /s/W/xdds/qOxiKg+ulwNG3te1/d/1713460962073/1713460962073%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Recorded%20Webinars%7CProfessional%20Recorded%20Webinars%20%7C%20Courses%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Frecorded-webinars%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=Wlhqi80+L39ng/lgN9dGvAlplyW0sZKJOgUsYRAMtcDuPAaVJOXNeLwsndlKvnrjuE4BsRoK4SSkIQ3JzZaSbp66+U9ZmFIm1/Tkgmu1zGV2Y0irryu2HOwhpxLr
2024-04-18 17:22:43 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:43 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Q1atNDz+GQsRrtG70cE9RkKvE9bwqOIVMk7/gp5Wwq2nKYVREJD4qpNEzIo8pTyhvKGXHGeuej07tUKfQZKfWuRPjTrCEBFWBPVf43mmDUR4rg91SoUO44UhrQ50; Expires=Thu, 25 Apr 2024 17:22:43 GMT; Path=/ Set-Cookie: AWSALBCORS=Q1atNDz+GQsRrtG70cE9RkKvE9bwqOIVMk7/gp5Wwq2nKYVREJD4qpNEzIo8pTyhvKGXHGeuej07tUKfQZKfWuRPjTrCEBFWBPVf43mmDUR4rg91SoUO44UhrQ50; Expires=Thu, 25 Apr 2024 17:22:43 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:43 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49949	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:42 UTC	675	OUT	GET /s/W/xdds/qOxiKg+ulwNG3te1/p/1713460962075 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=Wlhqi80+L39ng/lgN9dGvAlplyW0sZKJOgUsYRAMtcDuPAaVJOXNeLwsndlKvnrjuE4BsRoK4SSkIQ3JzZaSbp66+U9ZmFIm1/Tkgmu1zGV2Y0irryu2HOwhpxLr
2024-04-18 17:22:43 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:43 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa; Expires=Thu, 25 Apr 2024 17:22:43 GMT; Path=/ Set-Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa; Expires=Thu, 25 Apr 2024 17:22:43 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:43 UTC	4072	IN	Data Raw: 66 65 31 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 36 33 30 35 38 5c 6e 39 39 31 2e 38 37 36 31 38 30 33 39 36 38 35 37 31 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d 37 Data Ascii: fe1$Loader && ($Loader.payload = "1713460963058\n991.8761803968571\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-7
2024-04-18 17:22:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49950	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:43 UTC	675	OUT	GET /s/W/xdds/qOxiKg+ulwNG3te1/p/1713460962596 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49951	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:43 UTC	979	OUT	GET /s/W/xdds/qOxiKg+ulwNG3te1/d/1713460962661/1713460962661%0A-471.3580993425537%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460960973%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49952	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:43 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:22:43 UTC	583	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:22:43 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876656aee93eadb3-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rKpWq3fBP10mH6tBSAZOpvFWDREx1tP7QtFErMRWZEfjqBRLXOE4ObkuSD6hdEuM30tj5U%2FO4nUssuva1l9p9ML7Bj8sTi2KOOzTMmjEP4hGAj5%2BAnWpL9QHMxvqPxBbk4REUocT3Zr0SA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876656aee93eadb3-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49953	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:43 UTC	1215	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460960321&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Frecorded-webinars&dt=Recorded%20Webinars%7CProfessional%20Recorded%20Webinars%20%7C%20Courses&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7549 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:43 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:22:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49955	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:43 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:44 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:22:44 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876656b1685c44fc-ATL
2024-04-18 17:22:44 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49957	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:44 UTC	690	OUT	GET /s/W/ws/WTE2hHegr+qWqYT3/c/1713460963712 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa Sec-WebSocket-Key: 11rWpoOjqur2cbamdzOxDw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:22:44 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:44 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=s0/0TdFnSEM8EBlgK25wqGq0HMN9jIZjRXAhwxRb9VCWnAkY2cAbHjW2Ye4ru7eSppQF7/V+Vp9uazUvAaCeJj5uTouBvlKT9kPPDo7fodcKoxUDykvaZIG0eOR79UKCcvDm1ugDY767mcCm52RM2vM3aJUMRXIecEezb5YqzJKcoFE7Ngb9xA1HO65Oeg==; Expires=Thu, 25 Apr 2024 17:22:44 GMT; Path=/ Set-Cookie: AWSALBCORS=s0/0TdFnSEM8EBlgK25wqGq0HMN9jIZjRXAhwxRb9VCWnAkY2cAbHjW2Ye4ru7eSppQF7/V+Vp9uazUvAaCeJj5uTouBvlKT9kPPDo7fodcKoxUDykvaZIG0eOR79UKCcvDm1ugDY767mcCm52RM2vM3aJUMRXIecEezb5YqzJKcoFE7Ngb9xA1HO65Oeg==; Expires=Thu, 25 Apr 2024 17:22:44 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49958	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:45 UTC	675	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/c/1713460964283 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6CeZHwdqDEXtDT2d8EAiT8WffsqaTveYZKRSmwFDTEHEjt6HYv1oz39DEfbY98f2GQs8MNr5Hrv2CbfoDMZqTa16BdSZV+wjdlJ5sldQ4dHXb8eKk5PRQootzODa
2024-04-18 17:22:45 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:45 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Pxx+MZbpVXu4caiGMGMnXFHgk+tHsJQSwurREewMlMdisXV+IQ5ztwMhKstYPJN9mtkNavdGSqrxWIjItBWjad+HtNOlqiYg7vXnjCLb+5bTF8SL+D2SMxB0JiTN; Expires=Thu, 25 Apr 2024 17:22:45 GMT; Path=/ Set-Cookie: AWSALBCORS=Pxx+MZbpVXu4caiGMGMnXFHgk+tHsJQSwurREewMlMdisXV+IQ5ztwMhKstYPJN9mtkNavdGSqrxWIjItBWjad+HtNOlqiYg7vXnjCLb+5bTF8SL+D2SMxB0JiTN; Expires=Thu, 25 Apr 2024 17:22:45 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:45 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 36 35 33 31 31 5c 6e 31 30 32 38 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713460965311\n1028\n1\n0\nn\n15000")
2024-04-18 17:22:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49959	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:45 UTC	1536	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713460964807/1713460964807%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Compliance%20Experts%20%E2%80%93%20traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D34674%22%2C%22ref%22%3A%22https%3A%2F%2Fwww.traininng.com%2Frecorded-webinars%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=Pxx+MZbpVXu4caiGMGMnXFHgk+tHsJQSwurREewMlMdisXV+IQ5ztwMhKstYPJN9mtkNavdGSqrxWIjItBWjad+HtNOlqiYg7vXnjCLb+5bTF8SL+D2SMxB0JiTN
2024-04-18 17:22:45 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:45 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Ojg9AAsfhvcDSlrQOGdgZSnayEoW9xM4yUvZSNJD9+9aleY3GUiJcndHgsR2Wv87qWRVG+Zd9QBy4EcWGt8wGr2Fb6VqABQFQoDdwDAwEm4gb5e9UXGnVddwP0YQ; Expires=Thu, 25 Apr 2024 17:22:45 GMT; Path=/ Set-Cookie: AWSALBCORS=Ojg9AAsfhvcDSlrQOGdgZSnayEoW9xM4yUvZSNJD9+9aleY3GUiJcndHgsR2Wv87qWRVG+Zd9QBy4EcWGt8wGr2Fb6VqABQFQoDdwDAwEm4gb5e9UXGnVddwP0YQ; Expires=Thu, 25 Apr 2024 17:22:45 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:45 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49960	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:45 UTC	675	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/p/1713460964808 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=Pxx+MZbpVXu4caiGMGMnXFHgk+tHsJQSwurREewMlMdisXV+IQ5ztwMhKstYPJN9mtkNavdGSqrxWIjItBWjad+HtNOlqiYg7vXnjCLb+5bTF8SL+D2SMxB0JiTN
2024-04-18 17:22:45 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:45 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=IhqMv6Dfu1jqH/2RIFjpvkm5kSZjujGL3Fxiog6zFSaY1D0bEtR4N91l/R1kn4lGeks1m2tTj7hBnZiz3jGivEpZmsVKRb0URoCnsjtaVskRQEqJ6x3nTRRuQ1sK; Expires=Thu, 25 Apr 2024 17:22:45 GMT; Path=/ Set-Cookie: AWSALBCORS=IhqMv6Dfu1jqH/2RIFjpvkm5kSZjujGL3Fxiog6zFSaY1D0bEtR4N91l/R1kn4lGeks1m2tTj7hBnZiz3jGivEpZmsVKRb0URoCnsjtaVskRQEqJ6x3nTRRuQ1sK; Expires=Thu, 25 Apr 2024 17:22:45 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:45 UTC	4072	IN	Data Raw: 66 65 31 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 36 35 37 39 32 5c 6e 31 30 32 37 2e 35 30 33 31 35 38 35 38 31 39 35 39 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d 37 Data Ascii: fe1$Loader && ($Loader.payload = "1713460965792\n1027.503158581959\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-7
2024-04-18 17:22:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49947	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:46 UTC	930	OUT	GET /control/webinar-packhttps://www.traininng.com/newlogin HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
2024-04-18 17:22:46 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:51 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:46 UTC	7860	IN	Data Raw: 31 65 61 37 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 Data Ascii: 1ea7<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49961	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:46 UTC	675	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/p/1713460965375 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=IhqMv6Dfu1jqH/2RIFjpvkm5kSZjujGL3Fxiog6zFSaY1D0bEtR4N91l/R1kn4lGeks1m2tTj7hBnZiz3jGivEpZmsVKRb0URoCnsjtaVskRQEqJ6x3nTRRuQ1sK
2024-04-18 17:23:11 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:11 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=2+jOQc3M5vz/itoO+8BLhHnpsaZZPRu4z3HT57Fo6B3DWyKu8iErSAN6dWguo14/kIIRoabunNSao9MbvsUVSKdvTIndJsMOfm9cr63DzQ6LrslkwfjIgn09aTht; Expires=Thu, 25 Apr 2024 17:22:46 GMT; Path=/ Set-Cookie: AWSALBCORS=2+jOQc3M5vz/itoO+8BLhHnpsaZZPRu4z3HT57Fo6B3DWyKu8iErSAN6dWguo14/kIIRoabunNSao9MbvsUVSKdvTIndJsMOfm9cr63DzQ6LrslkwfjIgn09aTht; Expires=Thu, 25 Apr 2024 17:22:46 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:11 UTC	201	IN	Data Raw: 63 33 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 39 31 33 36 33 5c 6e 31 30 32 36 2e 39 38 32 39 32 37 37 30 38 38 34 37 37 5c 6e 33 5c 6e 32 5c 6e 65 5c 6e 7b 5c 22 6c 61 73 74 5f 66 72 61 6d 65 5f 74 69 6d 65 5c 22 3a 31 37 31 33 34 36 30 39 36 36 33 36 33 2c 5c 22 72 74 74 5c 22 3a 35 32 33 2e 39 35 31 33 39 35 39 37 39 32 32 30 33 2c 5c 22 6e 6f 5f 70 69 6e 67 5f 65 6c 61 70 73 65 64 5f 74 69 6d 65 5c 22 3a 32 35 30 30 30 2c 5c 22 64 65 73 74 72 6f 79 5f 74 69 6d 65 6f 75 74 5c 22 3a 31 32 30 30 30 7d 22 29 0d 0a Data Ascii: c3$Loader && ($Loader.payload = "1713460991363\n1026.9829277088477\n3\n2\ne\n{\"last_frame_time\":1713460966363,\"rtt\":523.9513959792203,\"no_ping_elapsed_time\":25000,\"destroy_timeout\":12000}")
2024-04-18 17:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49962	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:46 UTC	979	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713460965381/1713460965381%0A-503.0315317296275%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460963713%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=IhqMv6Dfu1jqH/2RIFjpvkm5kSZjujGL3Fxiog6zFSaY1D0bEtR4N91l/R1kn4lGeks1m2tTj7hBnZiz3jGivEpZmsVKRb0URoCnsjtaVskRQEqJ6x3nTRRuQ1sK
2024-04-18 17:22:46 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:46 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=jBU/ckY6dm/BD++0psH/uji5sXCYvZY+nvG3giR86fIKWnnRT3tln14g6sMEfjT0g9wPTlinEM0yWWj+R5kLxaYdHO83nfY4Q9liDesNJ9iAzHMH0OxU/WyDk+WT; Expires=Thu, 25 Apr 2024 17:22:46 GMT; Path=/ Set-Cookie: AWSALBCORS=jBU/ckY6dm/BD++0psH/uji5sXCYvZY+nvG3giR86fIKWnnRT3tln14g6sMEfjT0g9wPTlinEM0yWWj+R5kLxaYdHO83nfY4Q9liDesNJ9iAzHMH0OxU/WyDk+WT; Expires=Thu, 25 Apr 2024 17:22:46 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:46 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49963	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:46 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:46 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:22:46 UTC	770	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:46 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876656c0a9021d6a-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MH%2BXX1fR%2BVZP6YGI1baDvLZ0wfMOSsm%2FmeuY8t%2Bn95%2FwSvccLNkJcpAdquvoRVKo7hgpZ1lx0OBSvG6WKvDmyUf9PIqUEegmLz%2FyhgjJDBgqvgBf2EIKJ6xUrpdwex9j1TvX0i8T8vPsYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=b754eaa6f375aec39ab0922f5fc39d80e08688fd-1713460966; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876656c0a9021d6a-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49964	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:46 UTC	880	OUT	GET /favicon.ico HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/control/webinar-packhttps://www.traininng.com/newlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
2024-04-18 17:22:46 UTC	264	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:33:51 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Location: https://www.traininng.com/control/main Content-Length: 0 Connection: close Content-Type: image/vnd.microsoft.icon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49965	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:46 UTC	730	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460965611/1713460965611%0A-432.47619198505527%0A3%0A3%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=IhqMv6Dfu1jqH/2RIFjpvkm5kSZjujGL3Fxiog6zFSaY1D0bEtR4N91l/R1kn4lGeks1m2tTj7hBnZiz3jGivEpZmsVKRb0URoCnsjtaVskRQEqJ6x3nTRRuQ1sK
2024-04-18 17:22:46 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:46 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=VFnFiEUIsDBZPpekt2JIzEZ8ZbAqw1535qX3YidR+jB9yeJjr/30sMNO0wk260gA87p5OPLjNJoT8puTq53YpN8GBkl/27rC0sOal3gZlzFmOMdUYkDR/dLDf5aq; Expires=Thu, 25 Apr 2024 17:22:46 GMT; Path=/ Set-Cookie: AWSALBCORS=VFnFiEUIsDBZPpekt2JIzEZ8ZbAqw1535qX3YidR+jB9yeJjr/30sMNO0wk260gA87p5OPLjNJoT8puTq53YpN8GBkl/27rC0sOal3gZlzFmOMdUYkDR/dLDf5aq; Expires=Thu, 25 Apr 2024 17:22:46 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:46 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49966	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:46 UTC	881	OUT	GET /control/main HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/control/webinar-packhttps://www.traininng.com/newlogin Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
2024-04-18 17:22:47 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:52 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:47 UTC	7985	IN	Data Raw: 31 30 39 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1098<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:48 UTC	6941	IN	Data Raw: 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 2f 63 6f 6e 74 72 6f 6c 2f 72 65 70 6f 72 74 2e 70 64 66 22 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 30 70 78 3b 22 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 64 6f 77 6e 6c 6f 61 64 2d 74 72 61 69 6e 69 6e 67 2d 63 61 74 61 6c 6f 67 75 65 2e 70 6e 67 22 20 61 6c 74 3d 22 44 6f 77 6e 6c 6f 61 64 20 54 72 61 69 6e 69 6e 67 20 43 61 74 61 6c 6f 67 75 65 22 20 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 70 78 20 73 6f 6c 69 64 20 Data Ascii: f="https://www.traininng.com/control/report.pdf"><img style="margin-left: 30px;" src="/images/download-training-catalogue.png" alt="Download Training Catalogue" /></a></div></div></center></div></div><div class="" style="border-bottom:0px solid
2024-04-18 17:22:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:48 UTC	8192	IN	Data Raw: 31 39 39 36 0d 0a 61 72 2f 33 2d 68 6f 75 72 2d 76 69 72 74 75 61 6c 2d 73 65 6d 69 6e 61 72 2d 6f 6e 2d 62 75 73 69 6e 65 73 73 2d 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 26 23 35 38 3b 2d 67 72 61 6d 6d 61 72 2c 2d 62 65 74 74 65 72 2d 77 72 69 74 69 6e 67 2c 2d 65 6d 61 69 6c 2c 2d 61 6e 64 2d 6f 74 68 65 72 2d 63 6f 6d 6d 6f 6e 2d 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2d 69 6e 2d 74 68 65 2d 77 6f 72 6b 70 6c 61 63 65 2d 32 30 36 30 31 38 6c 69 76 65 27 3e 33 2d 48 6f 75 72 20 56 69 72 74 75 61 6c 20 53 65 6d 69 6e 61 72 20 6f 6e 20 42 75 73 69 6e 65 73 73 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 26 23 35 38 3b 20 47 2e 2e 2e 3c 2f 61 3e 3c 2f 68 31 3e 0d 0a 3c 75 6c 3e 0d 0a 3c 6c 69 3e 3c 73 74 72 6f 6e 67 3e 41 70 72 69 6c 20 31 38 2c 20 32 30 32 Data Ascii: 1996ar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live'>3-Hour Virtual Seminar on Business Communication: G...</a></h1><ul><li><strong>April 18, 202
2024-04-18 17:22:48 UTC	2141	IN	Data Raw: 65 72 3c 2f 68 33 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 6f 70 65 6e 2d 68 6f 75 72 73 22 3e 0a 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 73 75 62 73 63 72 69 62 65 66 6f 72 6d 22 3e 53 75 62 73 63 72 69 62 65 20 4e 65 77 73 6c 65 74 74 65 72 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 63 6f 6e 74 72 6f 6c 2f 75 6e 73 75 62 73 63 72 69 62 65 6d 65 22 3e 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 65 77 73 6c 65 74 74 65 72 22 3e 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 6f 6e 74 72 6f 6c 2f 73 75 62 73 63 72 69 62 65 66 6f 72 6d 22 20 6e 61 6d 65 3d 22 73 65 61 72 63 68 66 6f 6f 74 65 72 22 3e 0a 3c 69 6e 70 75 74 20 70 6c 61 63 65 68 6f 6c 64 Data Ascii: er</h3><ul class="open-hours"><li><a href="/subscribeform">Subscribe Newsletter</a></li><li><a href="/control/unsubscribeme">Unsubscribe</a></li></ul><div class="newsletter"><form action="/control/subscribeform" name="searchfooter"><input placehold
2024-04-18 17:22:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49967	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:46 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:22:47 UTC	591	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:22:47 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876656c479e17bd0-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KAysvGOzSCBpg5r8mNH9yRseimw7tl3%2By6mCsk%2BeKk%2FxgFEuPXK21P7yh5rOEZ7Jbmk7dOqtJxKlC%2B8bOTQ6dEArfr5Y71SriW05UhXWNd%2FQVvdtWIng%2BQ5WN68bmcrFYjWSdpg7d9voZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876656c479e17bd0-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49968	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:48 UTC	888	OUT	GET /registration HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
2024-04-18 17:22:48 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:53 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:48 UTC	7985	IN	Data Raw: 66 66 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 Data Ascii: ffe<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" conte
2024-04-18 17:22:49 UTC	6789	IN	Data Raw: 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 50 41 53 53 57 4f 52 44 22 20 76 61 6c 75 65 3d 22 22 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 3e 0d 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 69 6e 70 75 74 50 61 73 73 77 6f 72 64 33 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 33 20 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 22 3e 43 6f 6e 66 69 72 6d 20 50 61 73 73 77 6f 72 64 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 30 30 30 30 22 3e 2a 3c 2f 73 70 61 6e 3e 3c 2f 6c 61 62 65 6c 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 39 22 3e 0d 0a 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 69 64 3d Data Ascii: assword" name="PASSWORD" value=""></div></div><div class="form-group"><label for="inputPassword3" class="col-sm-3 control-label">Confirm Password <span style="color:#ff0000">*</span></label><div class="col-sm-9"><input class="form-control" id=
2024-04-18 17:22:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:49 UTC	8192	IN	Data Raw: 31 33 65 61 0d 0a 49 45 27 3e 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4c 54 55 27 3e 4c 69 74 68 75 61 6e 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4c 55 58 27 3e 4c 75 78 65 6d 62 6f 75 72 67 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4d 41 43 27 3e 4d 61 63 61 75 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4d 4b 44 27 3e 4d 61 63 65 64 6f 6e 69 61 2c 20 54 68 65 20 46 6f 72 6d 65 72 20 59 75 67 6f 73 6c 61 76 20 52 65 70 75 62 6c 69 63 20 4f 66 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4d 44 47 27 3e 4d 61 64 61 67 61 73 63 61 72 3c 2f 6f 70 74 69 Data Ascii: 13eaIE'>Liechtenstein</option><option value='LTU'>Lithuania</option><option value='LUX'>Luxembourg</option><option value='MAC'>Macau</option><option value='MKD'>Macedonia, The Former Yugoslav Republic Of</option><option value='MDG'>Madagascar</opti
2024-04-18 17:22:49 UTC	245	IN	Data Raw: 4e 54 52 59 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 69 66 28 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 44 65 74 61 69 6c 73 2e 61 67 72 65 65 6d 65 6e 74 2e 63 68 65 63 6b 65 64 20 3d 3d 20 66 61 6c 73 65 29 0d 0a 7b 0d 0a 61 6c 65 72 74 28 22 50 6c 65 61 73 65 20 61 63 63 65 70 74 20 74 68 65 20 61 67 72 65 65 6d 65 6e 74 2e 22 29 3b 0d 0a 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 69 73 56 61 6c 69 64 3d 66 61 6c 73 65 3b 0d 0a 7d 0d 0a 65 6c 73 65 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 44 65 74 61 69 6c 73 2e 61 63 74 69 6f 6e 20 3d 20 22 2f 63 6f 6e 74 72 6f 6c 2f 63 72 65 61 74 65 63 75 73 74 6f 6d 65 72 22 3b 0d 0a 7d 0d 0a 72 65 74 75 72 6e 20 69 73 56 61 6c 69 64 3b 0d 0a 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e Data Ascii: NTRY.focus();}if(document.formDetails.agreement.checked == false){alert("Please accept the agreement.");return false;isValid=false;}else{document.formDetails.action = "/control/createcustomer";}return isValid;}</script>
2024-04-18 17:22:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:49 UTC	3784	IN	Data Raw: 65 62 63 0d 0a 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6e 64 63 6f 6c 75 6d 6e 73 22 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 66 6f 6f 74 65 72 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 74 6f 70 2d 61 72 65 61 20 77 6f 77 20 66 61 64 65 49 6e 55 70 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 55 70 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 37 20 63 6f 6c 2d 6d 64 2d 35 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: ebc</div><div class="endcolumns"></div></div><footer><div class="footer-top-area wow fadeInUp" style="visibility: visible; animation-name: fadeInUp;"><div class="container"><div class=""><div class="col-xs-12 col-sm-7 col-md-5"><div class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49969	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:48 UTC	589	OUT	GET /control/main HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460963.38.0.0
2024-04-18 17:22:49 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:53 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:49 UTC	7985	IN	Data Raw: 31 30 39 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1098<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:49 UTC	6941	IN	Data Raw: 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 2f 63 6f 6e 74 72 6f 6c 2f 72 65 70 6f 72 74 2e 70 64 66 22 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 30 70 78 3b 22 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 64 6f 77 6e 6c 6f 61 64 2d 74 72 61 69 6e 69 6e 67 2d 63 61 74 61 6c 6f 67 75 65 2e 70 6e 67 22 20 61 6c 74 3d 22 44 6f 77 6e 6c 6f 61 64 20 54 72 61 69 6e 69 6e 67 20 43 61 74 61 6c 6f 67 75 65 22 20 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 70 78 20 73 6f 6c 69 64 20 Data Ascii: f="https://www.traininng.com/control/report.pdf"><img style="margin-left: 30px;" src="/images/download-training-catalogue.png" alt="Download Training Catalogue" /></a></div></div></center></div></div><div class="" style="border-bottom:0px solid
2024-04-18 17:22:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:49 UTC	8192	IN	Data Raw: 31 39 62 66 0d 0a 61 72 2f 33 2d 68 6f 75 72 2d 76 69 72 74 75 61 6c 2d 73 65 6d 69 6e 61 72 2d 6f 6e 2d 62 75 73 69 6e 65 73 73 2d 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 26 23 35 38 3b 2d 67 72 61 6d 6d 61 72 2c 2d 62 65 74 74 65 72 2d 77 72 69 74 69 6e 67 2c 2d 65 6d 61 69 6c 2c 2d 61 6e 64 2d 6f 74 68 65 72 2d 63 6f 6d 6d 6f 6e 2d 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2d 69 6e 2d 74 68 65 2d 77 6f 72 6b 70 6c 61 63 65 2d 32 30 36 30 31 38 6c 69 76 65 27 3e 33 2d 48 6f 75 72 20 56 69 72 74 75 61 6c 20 53 65 6d 69 6e 61 72 20 6f 6e 20 42 75 73 69 6e 65 73 73 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 26 23 35 38 3b 20 47 2e 2e 2e 3c 2f 61 3e 3c 2f 68 31 3e 0d 0a 3c 75 6c 3e 0d 0a 3c 6c 69 3e 3c 73 74 72 6f 6e 67 3e 41 70 72 69 6c 20 31 38 2c 20 32 30 32 Data Ascii: 19bfar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live'>3-Hour Virtual Seminar on Business Communication: G...</a></h1><ul><li><strong>April 18, 202
2024-04-18 17:22:49 UTC	2182	IN	Data Raw: 7a 22 3e 0a 3c 68 33 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 77 69 7a 2d 74 69 74 6c 65 22 3e 4e 65 77 73 6c 65 74 74 65 72 3c 2f 68 33 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 6f 70 65 6e 2d 68 6f 75 72 73 22 3e 0a 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 73 75 62 73 63 72 69 62 65 66 6f 72 6d 22 3e 53 75 62 73 63 72 69 62 65 20 4e 65 77 73 6c 65 74 74 65 72 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 63 6f 6e 74 72 6f 6c 2f 75 6e 73 75 62 73 63 72 69 62 65 6d 65 22 3e 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 65 77 73 6c 65 74 74 65 72 22 3e 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 6f 6e 74 72 6f 6c 2f 73 75 62 73 63 72 69 62 65 66 6f Data Ascii: z"><h3 class="footer-wiz-title">Newsletter</h3><ul class="open-hours"><li><a href="/subscribeform">Subscribe Newsletter</a></li><li><a href="/control/unsubscribeme">Unsubscribe</a></li></ul><div class="newsletter"><form action="/control/subscribefo
2024-04-18 17:22:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49970	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:48 UTC	729	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713460967617/1713460967617%0A-501.5023837035554%0A3%0A3%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=VFnFiEUIsDBZPpekt2JIzEZ8ZbAqw1535qX3YidR+jB9yeJjr/30sMNO0wk260gA87p5OPLjNJoT8puTq53YpN8GBkl/27rC0sOal3gZlzFmOMdUYkDR/dLDf5aq
2024-04-18 17:22:48 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:48 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=7v/Q/EscEpP4Ha9uBQooyZbNa+ZlEuoYXHL25HZpKmina8tdwZseTVKXIOIZWcPJ/CwyibvNbSsuBgN7f0LQzRBxAO1EwSXu8opcn6+kycDdcVBOUqoGinPOwsQi; Expires=Thu, 25 Apr 2024 17:22:48 GMT; Path=/ Set-Cookie: AWSALBCORS=7v/Q/EscEpP4Ha9uBQooyZbNa+ZlEuoYXHL25HZpKmina8tdwZseTVKXIOIZWcPJ/CwyibvNbSsuBgN7f0LQzRBxAO1EwSXu8opcn6+kycDdcVBOUqoGinPOwsQi; Expires=Thu, 25 Apr 2024 17:22:48 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:48 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49974	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:49 UTC	1205	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460963472&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D34674&dt=Compliance%20Experts%20%E2%80%93%20traininng&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=6559 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:49 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:22:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49972	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:49 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:49 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:22:49 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876656d3bd05ad8e-ATL
2024-04-18 17:22:49 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49976	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:49 UTC	690	OUT	GET /s/W/ws/SKukINt-UGvOK5QK/c/1713460969192 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=7v/Q/EscEpP4Ha9uBQooyZbNa+ZlEuoYXHL25HZpKmina8tdwZseTVKXIOIZWcPJ/CwyibvNbSsuBgN7f0LQzRBxAO1EwSXu8opcn6+kycDdcVBOUqoGinPOwsQi Sec-WebSocket-Key: nmGx+04HlYaRXJstZadbuQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:22:50 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:50 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=KK7f5Ec808aGuvLVWZFdwX9T+Q5zsIAHenxDxHUCbhQcFaFYfA9TWxQzPtUUgH+yua5db56UDMdGKy1xUglNj9dU9SDiLlHerytBPFHLKIs54MJrCCglq4yDq0i+ZfLmypAOcIARsXBlxMUpE2ZCjr7o9AD2CrY/aOtn3vUubD2SncQb6HaqjY/ooYp0gg==; Expires=Thu, 25 Apr 2024 17:22:50 GMT; Path=/ Set-Cookie: AWSALBCORS=KK7f5Ec808aGuvLVWZFdwX9T+Q5zsIAHenxDxHUCbhQcFaFYfA9TWxQzPtUUgH+yua5db56UDMdGKy1xUglNj9dU9SDiLlHerytBPFHLKIs54MJrCCglq4yDq0i+ZfLmypAOcIARsXBlxMUpE2ZCjr7o9AD2CrY/aOtn3vUubD2SncQb6HaqjY/ooYp0gg==; Expires=Thu, 25 Apr 2024 17:22:50 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49977	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:50 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:50 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:22:50 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:50 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876656daaa4653f3-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YJa%2BDmlnztnaxMUExaLZZ3jhEsxRovGI8ZGn1haDkKAwJSXd77vOyI9WCPTqJv8%2Bix48tHO260VZLQMKQHiPWTzxwtckA8dqmj9IRSqgL5ElDrMAWqFLQaxlO9Ccp9u2sDS6k5xE3P3tZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=369c6b7050abcefe7f90e5333fccb47d3eb3266a-1713460970; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876656daaa4653f3-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49978	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:50 UTC	675	OUT	GET /s/W/xdds/SKukINt-UGvOK5QK/c/1713460969705 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=7v/Q/EscEpP4Ha9uBQooyZbNa+ZlEuoYXHL25HZpKmina8tdwZseTVKXIOIZWcPJ/CwyibvNbSsuBgN7f0LQzRBxAO1EwSXu8opcn6+kycDdcVBOUqoGinPOwsQi
2024-04-18 17:22:50 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:50 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=eS2ElzwZuWUXirOAWzpY0AHrwD8xFNpAc61ibbbyZ6NSX/wIg1jttqp0mKcAgEt5xigEZHbURddCkiII8DO6LLAx9xzOU8gNdE/rbEsl/oRpy3CNUuJRLT4Cj33O; Expires=Thu, 25 Apr 2024 17:22:50 GMT; Path=/ Set-Cookie: AWSALBCORS=eS2ElzwZuWUXirOAWzpY0AHrwD8xFNpAc61ibbbyZ6NSX/wIg1jttqp0mKcAgEt5xigEZHbURddCkiII8DO6LLAx9xzOU8gNdE/rbEsl/oRpy3CNUuJRLT4Cj33O; Expires=Thu, 25 Apr 2024 17:22:50 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:50 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 37 30 37 33 39 5c 6e 31 30 33 34 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713460970739\n1034\n1\n0\nn\n15000")
2024-04-18 17:22:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49979	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:51 UTC	1485	OUT	GET /s/W/xdds/SKukINt-UGvOK5QK/d/1713460970236/1713460970236%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Online%20Professional%20Training%20Registration%20-%20Traininng.com%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fregistration%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=eS2ElzwZuWUXirOAWzpY0AHrwD8xFNpAc61ibbbyZ6NSX/wIg1jttqp0mKcAgEt5xigEZHbURddCkiII8DO6LLAx9xzOU8gNdE/rbEsl/oRpy3CNUuJRLT4Cj33O
2024-04-18 17:22:51 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:51 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=pvJAiRvWbc9NPvkVbn8noPcrPFNllo+MHvNS2f8zzqUXP+tFDzgCmjUf/uLBmhg5nVR5o1yTpki6DfGUcBj50jwkrL19eQfTjR8ERgZ1VDEx/63iOdmydIzDrsSh; Expires=Thu, 25 Apr 2024 17:22:51 GMT; Path=/ Set-Cookie: AWSALBCORS=pvJAiRvWbc9NPvkVbn8noPcrPFNllo+MHvNS2f8zzqUXP+tFDzgCmjUf/uLBmhg5nVR5o1yTpki6DfGUcBj50jwkrL19eQfTjR8ERgZ1VDEx/63iOdmydIzDrsSh; Expires=Thu, 25 Apr 2024 17:22:51 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:51 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49980	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:51 UTC	675	OUT	GET /s/W/xdds/SKukINt-UGvOK5QK/p/1713460970237 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=eS2ElzwZuWUXirOAWzpY0AHrwD8xFNpAc61ibbbyZ6NSX/wIg1jttqp0mKcAgEt5xigEZHbURddCkiII8DO6LLAx9xzOU8gNdE/rbEsl/oRpy3CNUuJRLT4Cj33O
2024-04-18 17:22:51 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:51 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=cP5ZJvUH4iiwK7a30Y6Zq04DUX192M6RiuD1SkUU6NkD6JxGZxbUYc8eSFSvfKfq7F/TvFZdAHjOtdMlwgmA6fjM/V0VUcgNWVqygLwqLRPAM6Eizx6xry5Cz9sf; Expires=Thu, 25 Apr 2024 17:22:51 GMT; Path=/ Set-Cookie: AWSALBCORS=cP5ZJvUH4iiwK7a30Y6Zq04DUX192M6RiuD1SkUU6NkD6JxGZxbUYc8eSFSvfKfq7F/TvFZdAHjOtdMlwgmA6fjM/V0VUcgNWVqygLwqLRPAM6Eizx6xry5Cz9sf; Expires=Thu, 25 Apr 2024 17:22:51 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:51 UTC	4073	IN	Data Raw: 66 65 32 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 37 31 32 37 30 5c 6e 31 30 33 33 2e 37 37 35 30 39 34 34 31 38 34 37 31 38 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d Data Ascii: fe2$Loader && ($Loader.payload = "1713460971270\n1033.7750944184718\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-
2024-04-18 17:22:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49981	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:51 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:22:51 UTC	583	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:22:51 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876656de8b08ad5f-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bj1dAQjApQq8JomrSLfW1cGjxuDEucOktOSN2ORxpj%2BWJpgGTrp7X74KjnbTmXph9uZxucRWunl07GU2vL7Wrikgxp25cbQnDSaOXthGGr1WLp7I51k7mzqQKOt9KaUobwCnMbVpLHj7Sg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876656de8b08ad5f-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49982	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:51 UTC	715	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713460970626/1713460970626%0A-500%0A3%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=eS2ElzwZuWUXirOAWzpY0AHrwD8xFNpAc61ibbbyZ6NSX/wIg1jttqp0mKcAgEt5xigEZHbURddCkiII8DO6LLAx9xzOU8gNdE/rbEsl/oRpy3CNUuJRLT4Cj33O
2024-04-18 17:22:51 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:51 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=TzfTDlZ1crEgv5DKOuCowfFW2JfFOew8pozgATZ1W8QBzc35I+AB2hRuDLjZtSWvnLIGayTdnaXoDBmYUsuhhSD5s7ltav+zJC8lDe3VwTUQp1EHLkoP1hmlEaI1; Expires=Thu, 25 Apr 2024 17:22:51 GMT; Path=/ Set-Cookie: AWSALBCORS=TzfTDlZ1crEgv5DKOuCowfFW2JfFOew8pozgATZ1W8QBzc35I+AB2hRuDLjZtSWvnLIGayTdnaXoDBmYUsuhhSD5s7ltav+zJC8lDe3VwTUQp1EHLkoP1hmlEaI1; Expires=Thu, 25 Apr 2024 17:22:51 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:51 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49983	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:51 UTC	675	OUT	GET /s/W/xdds/SKukINt-UGvOK5QK/p/1713460970807 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=cP5ZJvUH4iiwK7a30Y6Zq04DUX192M6RiuD1SkUU6NkD6JxGZxbUYc8eSFSvfKfq7F/TvFZdAHjOtdMlwgmA6fjM/V0VUcgNWVqygLwqLRPAM6Eizx6xry5Cz9sf
2024-04-18 17:23:37 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=tt37G/On8V7BcUzbPFTHQkvDeM28c8+nxE5VnXtZOWlq2lnndI17bOcbEYTbeMgKthuooJYJzbQygLpTbiKbRbZMrIe0dgrsRsorqYfoQkrn3XuhgsCN8rZJrn8k; Expires=Thu, 25 Apr 2024 17:22:51 GMT; Path=/ Set-Cookie: AWSALBCORS=tt37G/On8V7BcUzbPFTHQkvDeM28c8+nxE5VnXtZOWlq2lnndI17bOcbEYTbeMgKthuooJYJzbQygLpTbiKbRbZMrIe0dgrsRsorqYfoQkrn3XuhgsCN8rZJrn8k; Expires=Thu, 25 Apr 2024 17:22:51 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:37 UTC	1198	IN	Data Raw: 34 61 37 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 37 35 32 32 5c 6e 35 36 37 31 2e 38 30 37 32 34 34 31 30 31 38 38 31 5c 6e 33 5c 6e 34 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 7b 5c 22 6c 6f 67 5c 22 3a 7b 5c 22 31 37 31 33 34 36 31 30 31 37 34 32 31 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 24 73 74 72 69 6e 67 5c 22 3a 5c 22 23 73 75 70 70 6f 72 74 63 68 61 74 3a 31 39 31 30 35 30 31 35 2d 31 4c 4c 6d 65 64 76 73 45 78 57 48 75 7a 76 5c 22 2c 5c 22 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 31 33 34 36 31 30 31 37 34 32 31 2c 5c 22 69 6e 64 65 78 Data Ascii: 4a7$Loader && ($Loader.payload = "1713461017522\n5671.807244101881\n3\n4\nd\n{\"path\":\"livechat\",\"update\":{\"channel\":{\"log\":{\"1713461017421\":{\"channel$string\":\"#supportchat:19105015-1LLmedvsExWHuzv\",\"timestamp$int\":1713461017421,\"index
2024-04-18 17:23:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49984	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:52 UTC	980	OUT	GET /s/W/xdds/SKukINt-UGvOK5QK/d/1713460970866/1713460970866%0A-502.02323793626044%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460969193%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=cP5ZJvUH4iiwK7a30Y6Zq04DUX192M6RiuD1SkUU6NkD6JxGZxbUYc8eSFSvfKfq7F/TvFZdAHjOtdMlwgmA6fjM/V0VUcgNWVqygLwqLRPAM6Eizx6xry5Cz9sf
2024-04-18 17:22:52 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:52 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=iO5mOXIeW4b3FO8Qy3EZlTUsFGlG0R77YN7CZBQHsujzYT7nW9pDah6bX/GYfB9H/Up3MOiB8FIH8Qv1zq0acdnIeMs+l3dJsBnqcSJCFvl5b2ASWSnhnxqr/6DV; Expires=Thu, 25 Apr 2024 17:22:52 GMT; Path=/ Set-Cookie: AWSALBCORS=iO5mOXIeW4b3FO8Qy3EZlTUsFGlG0R77YN7CZBQHsujzYT7nW9pDah6bX/GYfB9H/Up3MOiB8FIH8Qv1zq0acdnIeMs+l3dJsBnqcSJCFvl5b2ASWSnhnxqr/6DV; Expires=Thu, 25 Apr 2024 17:22:52 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:52 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49986	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:52 UTC	907	OUT	GET /speakerprofile?speaker_id=61834 HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460968.33.0.0
2024-04-18 17:22:52 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:33:57 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:52 UTC	7985	IN	Data Raw: 31 30 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1038<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:52 UTC	6845	IN	Data Raw: 39 36 39 36 39 33 22 3e 0d 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 20 6e 61 76 2d 74 61 62 73 22 3e 0d 3c 6c 69 20 63 6c 61 73 73 3d 22 61 63 74 69 76 65 22 3e 0d 3c 61 20 68 72 65 66 3d 22 23 70 61 6e 65 6c 2d 31 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 61 62 22 3e 55 70 63 6f 6d 69 6e 67 20 57 65 62 69 6e 61 72 73 3c 2f 61 3e 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e 0d 3c 61 20 68 72 65 66 3d 22 23 70 61 6e 65 6c 2d 32 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 61 62 22 3e 52 65 63 6f 72 64 65 64 20 57 65 62 69 6e 61 72 73 3c 2f 61 3e 0d 3c 2f 6c 69 3e 0d 3c 2f 75 6c 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 2d 63 6f 6e 74 65 6e 74 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 Data Ascii: 969693"><ul class="nav nav-tabs"><li class="active"><a href="#panel-1" data-toggle="tab">Upcoming Webinars</a></li><li><a href="#panel-2" data-toggle="tab">Recorded Webinars</a></li></ul><div class="tab-content" style="display: inline-block;width
2024-04-18 17:22:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:52 UTC	4873	IN	Data Raw: 34 33 62 0d 0a 73 6d 2d 36 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 6c 67 2d 33 20 77 65 62 69 6e 61 72 2d 6c 69 73 74 22 3e 0d 3c 75 6c 3e 0d 3c 6c 69 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 66 69 6c 65 2d 76 69 64 65 6f 2d 6f 22 3e 3c 2f 69 3e 0d 52 65 63 6f 72 64 65 64 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 63 6c 6f 63 6b 2d 6f 22 3e 3c 2f 69 3e 0d 56 69 65 77 20 41 6e 79 74 69 6d 65 0d 3c 2f 6c 69 3e 0d 3c 21 2d 2d 3c 6c 69 3e 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e 0d 3c 2f 6c 69 3e 20 2d 2d 3e 0d 3c 6c 69 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 63 6c 6f 63 6b 2d 6f 22 3e 3c 2f 69 3e 0d 36 30 20 4d 69 6e 75 74 65 73 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e 0d 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 Data Ascii: 43bsm-6 col-md-3 col-lg-3 webinar-list"><ul><li><i class="fa fa-file-video-o"></i>Recorded</li><li><i class="fa fa-clock-o"></i>View Anytime</li>...<li></li><li></li> --><li><i class="fa fa-clock-o"></i>60 Minutes</li><li><i class="fa f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49987	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:53 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:53 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:22:53 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876656ec2d997cc6-ATL
2024-04-18 17:22:53 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49989	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:54 UTC	690	OUT	GET /s/W/ws/18ll0A0MviQGtcZI/c/1713460973622 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=iO5mOXIeW4b3FO8Qy3EZlTUsFGlG0R77YN7CZBQHsujzYT7nW9pDah6bX/GYfB9H/Up3MOiB8FIH8Qv1zq0acdnIeMs+l3dJsBnqcSJCFvl5b2ASWSnhnxqr/6DV Sec-WebSocket-Key: m3y6akyKJQ4T4xq3bT2eCA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:22:54 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:54 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=GbW/Jk9r9ROoTX4NkTDNHZndOtSr+6Zd4XOzuoUF9OQXGfMK1eOCUI8e140lJdB4Y65UXWP6jWFD6iqABBmx4TbMyK3bmK+uSmYdki1UGi0jGgeh1gdvmAkLml/dzwZMaJPCFJNFYaS11aA4aunLCQzU1CgA8I4mR9zGS+eXoL4PrTatri38F6uVS5GcvQ==; Expires=Thu, 25 Apr 2024 17:22:54 GMT; Path=/ Set-Cookie: AWSALBCORS=GbW/Jk9r9ROoTX4NkTDNHZndOtSr+6Zd4XOzuoUF9OQXGfMK1eOCUI8e140lJdB4Y65UXWP6jWFD6iqABBmx4TbMyK3bmK+uSmYdki1UGi0jGgeh1gdvmAkLml/dzwZMaJPCFJNFYaS11aA4aunLCQzU1CgA8I4mR9zGS+eXoL4PrTatri38F6uVS5GcvQ==; Expires=Thu, 25 Apr 2024 17:22:54 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49991	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:55 UTC	675	OUT	GET /s/W/xdds/18ll0A0MviQGtcZI/c/1713460974139 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=iO5mOXIeW4b3FO8Qy3EZlTUsFGlG0R77YN7CZBQHsujzYT7nW9pDah6bX/GYfB9H/Up3MOiB8FIH8Qv1zq0acdnIeMs+l3dJsBnqcSJCFvl5b2ASWSnhnxqr/6DV
2024-04-18 17:22:55 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:55 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=TgyGB1E7jG1aSWPAdwzgCrhQ7oeu1HFev4Nc2lKMUZgo2G7yh7W47oB6JiS8Fm+sr6kh8dPxJV2JoSvxAqqsX4Idn5Aa2ESC/NRAyvEdtVEW+qqmfdQkmNEzh0xb; Expires=Thu, 25 Apr 2024 17:22:55 GMT; Path=/ Set-Cookie: AWSALBCORS=TgyGB1E7jG1aSWPAdwzgCrhQ7oeu1HFev4Nc2lKMUZgo2G7yh7W47oB6JiS8Fm+sr6kh8dPxJV2JoSvxAqqsX4Idn5Aa2ESC/NRAyvEdtVEW+qqmfdQkmNEzh0xb; Expires=Thu, 25 Apr 2024 17:22:55 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:55 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 37 35 32 32 37 5c 6e 31 30 38 38 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713460975227\n1088\n1\n0\nn\n15000")
2024-04-18 17:22:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49992	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:55 UTC	1205	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460968958&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fregistration&dt=Online%20Professional%20Training%20Registration%20-%20Traininng.com&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7208 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:55 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:22:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49993	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:55 UTC	1485	OUT	GET /s/W/xdds/18ll0A0MviQGtcZI/d/1713460974763/1713460974763%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Compliance%20Experts%20%E2%80%93%20traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D61834%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=TgyGB1E7jG1aSWPAdwzgCrhQ7oeu1HFev4Nc2lKMUZgo2G7yh7W47oB6JiS8Fm+sr6kh8dPxJV2JoSvxAqqsX4Idn5Aa2ESC/NRAyvEdtVEW+qqmfdQkmNEzh0xb
2024-04-18 17:22:55 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:55 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=aoUMBrcervdpTdER/2wo2ZzTtpM/PuQQtNsiEBkXLDTBkUKJZ8kSKaIPAqWWQ5nsbhq++8PadCDtQj2AVXF2C/bkN2HJUc3iwl2AzScTMyzvGbijEDr8Jt4mg/AA; Expires=Thu, 25 Apr 2024 17:22:55 GMT; Path=/ Set-Cookie: AWSALBCORS=aoUMBrcervdpTdER/2wo2ZzTtpM/PuQQtNsiEBkXLDTBkUKJZ8kSKaIPAqWWQ5nsbhq++8PadCDtQj2AVXF2C/bkN2HJUc3iwl2AzScTMyzvGbijEDr8Jt4mg/AA; Expires=Thu, 25 Apr 2024 17:22:55 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:55 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:22:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49994	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:55 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:55 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:22:55 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:55 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876656fabe6053af-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BFaef%2FD%2BejwhBFh1SXe%2FzZlQdKPpegpcSfmlRfUioFGqyTO1TBjyiKgeC06l1aqkjPQLhXGzPZIure8U2f%2BIzSKq9%2B%2FpUYfB6m48JMqjIJ9%2BuIeABX%2BQY50yv3%2FHnym55SFTGqGcuVafmg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=4903d2282052fcb9a70ca5fa50bc97a8f95b7c25-1713460975; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876656fabe6053af-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49985	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:55 UTC	992	OUT	GET /webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
2024-04-18 17:22:56 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:01 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:22:56 UTC	7985	IN	Data Raw: 31 30 34 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1042<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:22:56 UTC	6858	IN	Data Raw: 20 22 5f 4e 4f 4e 45 5f 22 29 20 7b 0d 0a 61 6c 65 72 74 28 22 4e 6f 20 64 65 74 61 69 6c 20 69 6d 61 67 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 64 69 73 70 6c 61 79 2e 22 29 3b 0d 0a 72 65 74 75 72 6e 3b 0d 0a 7d 0d 0a 70 6f 70 55 70 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 2f 63 6f 6e 74 72 6f 6c 2f 64 65 74 61 69 6c 49 6d 61 67 65 3f 64 65 74 61 69 6c 3d 22 20 2b 20 64 65 74 61 69 6c 49 6d 61 67 65 55 72 6c 20 2b 20 22 22 2c 20 27 64 65 74 61 69 6c 49 6d 61 67 65 27 2c 20 27 34 30 30 27 2c 20 27 35 35 30 27 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 41 6d 74 28 74 6f 67 67 6c 65 29 20 7b 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 59 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a Data Ascii: "_NONE_") {alert("No detail image available to display.");return;}popUp("https://www.traininng.com/control/detailImage?detail=" + detailImageUrl + "", 'detailImage', '400', '550');}function toggleAmt(toggle) {if (toggle == 'Y') {changeObj
2024-04-18 17:22:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:56 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 74 69 5f 4c 69 76 65 22 3e 0d 0a 3c 73 74 72 6f 6e 67 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 43 31 32 36 32 43 22 3e 0d 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 57 65 62 69 6e 61 72 50 72 6f 64 75 63 74 50 72 69 63 65 22 3e 24 32 35 30 2e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 74 72 6f 6e 67 3e 0d 0a 3c 62 3e 47 72 6f 75 70 20 41 74 74 65 6e 64 65 65 73 3c 2f 62 3e 0d 0a 3c 2f 6c 61 62 65 6c 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 63 6f 72 64 65 64 2d 76 65 72 73 69 6f 6e 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 22 20 61 72 69 61 2d Data Ascii: 1ff8ti_Live"><strong style="color:#C1262C"><span class="WebinarProductPrice">$250.</span></strong><b>Group Attendees</b></label></div></div></div><div class="recorded-version1"><div class="content"><i class="fa fa-video-camera" aria-
2024-04-18 17:22:56 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-18 17:22:56 UTC	8184	IN	Data Raw: 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 22 20 63 6c 61 73 73 3d 22 6d 6f 72 65 2d 74 65 78 74 31 22 20 68 72 65 66 3d 22 23 30 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 71 75 65 73 74 69 6f 6e 22 3e 26 23 36 33 3b 3c 2f 73 70 61 6e 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 72 65 2d 74 65 78 74 22 20 73 74 79 6c 65 3d 22 72 69 67 68 74 3a 20 61 75 74 6f 3b 22 3e 3c 62 3e 31 2d 68 6f 75 72 20 65 64 75 63 61 74 69 6f 6e 61 6c 20 70 72 6f 67 72 61 6d 20 3d 20 31 20 50 44 43 2e 3c 62 72 3e 31 2d 68 6f 75 72 20 61 6e 64 20 31 35 20 6d 69 6e 75 74 65 20 63 6f 6e 63 75 72 72 65 6e 74 20 63 6f 6e 66 65 72 65 6e 63 65 20 73 65 73 73 69 6f 6e 20 3d 20 31 2e 32 35 20 50 44 43 73 2e 3c 62 72 3e 33 2d 68 6f 75 72 20 65 2d 6c 65 61 72 6e 69 6e 67 20 63 Data Ascii: inline-block;" class="more-text1" href="#0"> <span class="question">?</span><div class="more-text" style="right: auto;"><b>1-hour educational program = 1 PDC.<br>1-hour and 15 minute concurrent conference session = 1.25 PDCs.<br>3-hour e-learning c
2024-04-18 17:22:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:22:56 UTC	5038	IN	Data Raw: 34 65 31 0d 0a 6f 6b 69 65 28 64 61 74 65 2c 70 72 6f 64 75 63 74 5f 64 61 74 65 29 3b 0d 0a 73 65 74 43 6f 6f 6b 69 65 28 22 65 6d 64 69 6e 67 46 6c 61 67 22 2c 6e 65 77 45 6e 64 69 6e 67 46 6c 61 67 29 3b 0d 0a 7d 0d 0a 7d 0d 0a 65 6c 73 65 7b 0d 0a 76 61 72 20 70 72 6f 64 75 63 74 5f 69 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 61 64 64 5f 70 72 6f 64 75 63 74 5f 69 64 27 29 2e 76 61 6c 75 65 3b 0d 0a 76 61 72 20 70 72 6f 64 75 63 74 5f 69 6e 73 74 72 75 63 74 6f 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 61 64 64 5f 70 72 6f 64 75 63 74 5f 69 6e 73 74 72 75 63 74 6f 72 27 29 2e 76 61 6c 75 65 3b 0d 0a 76 61 72 20 70 72 6f 64 75 63 74 5f 64 75 72 61 74 69 6f 6e 20 Data Ascii: 4e1okie(date,product_date);setCookie("emdingFlag",newEndingFlag);}}else{var product_id = document.getElementById('add_product_id').value;var product_instructor = document.getElementById('add_product_instructor').value;var product_duration

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49995	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:56 UTC	675	OUT	GET /s/W/xdds/18ll0A0MviQGtcZI/p/1713460974764 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=TgyGB1E7jG1aSWPAdwzgCrhQ7oeu1HFev4Nc2lKMUZgo2G7yh7W47oB6JiS8Fm+sr6kh8dPxJV2JoSvxAqqsX4Idn5Aa2ESC/NRAyvEdtVEW+qqmfdQkmNEzh0xb
2024-04-18 17:22:56 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:56 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS; Expires=Thu, 25 Apr 2024 17:22:56 GMT; Path=/ Set-Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS; Expires=Thu, 25 Apr 2024 17:22:56 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:22:56 UTC	4073	IN	Data Raw: 66 65 32 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 37 36 32 33 39 5c 6e 31 30 39 31 2e 30 31 30 32 33 38 38 34 36 31 34 33 32 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d Data Ascii: fe2$Loader && ($Loader.payload = "1713460976239\n1091.0102388461432\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-
2024-04-18 17:22:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49997	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:56 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:22:56 UTC	587	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:22:56 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876656fecf68b05a-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3JPoq%2B73j0UhosQa0qLIWjVoVtHBzqzAOTf6O1fGFjSCvNSLKyitcqAKdQEQmjdT3QKuLs3Pw%2BT26IltBrpU9prQ2SiJ%2Fc3NJ%2BsvAvVdmEgBjbjWy9lKMPEn4B4wcykpd37gHWyanyCnQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876656fecf68b05a-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49996	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:56 UTC	1014	OUT	GET /images/hrci_approved_seal_new.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
2024-04-18 17:22:57 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:02 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"30802-1677826340000" Last-Modified: Fri, 03 Mar 2023 06:52:20 GMT Content-Type: image/jpeg Content-Length: 30802 Connection: close
2024-04-18 17:22:57 UTC	7926	IN	Data Raw: ff d8 ff e1 13 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 00 68 00 00 01 01 00 03 00 00 00 01 00 68 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 33 3a 30 33 20 31 32 3a 30 33 3a 30 39 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: VExifMM*hh(12i -'-'Adobe Photoshop CS6 (Windows)2023:03:03 12:03:090
2024-04-18 17:22:57 UTC	258	IN	Data Raw: dc c2 01 df 5e 53 9d 53 1c cb 5e fc 7b d8 ca bf eb be b5 8a 55 bf 07 07 12 9a fd 66 d7 d4 e9 dd 77 a9 5b 43 fd db dc cb 31 2d be b2 ff 00 e7 68 6b 76 37 67 e8 ec fc ff 00 d2 26 12 4b 7e 11 e5 f1 e9 8b 18 26 f8 7d 23 5f fb ac bc 31 fe bb 91 f6 8b 67 76 e7 ee fd ed ee 9f ca ad 51 d6 3a 85 07 75 59 59 35 91 c6 db 5c 47 e7 69 b2 cf 6f ee 2b ee ea d8 d6 65 64 3c de 43 df 76 4b b1 72 5c d7 1f 48 58 2a 6e 35 b1 05 fe c6 d6 fa 7d be fa 54 9b 6f 4e ca 3e 8d f6 b3 27 2a fa db 88 72 5e 0b 7f 48 ff 00 5a c6 e5 87 58 d6 bb f4 0e fb 2e 37 af 67 d3 f7 a4 c9 29 d8 f5 e2 35 5a ef 2f fb 96 d6 07 d7 ae b1 41 0d b9 d5 66 b0 72 2d 1e 95 84 7f c6 33 f4 5f f4 57 57 d2 7e b6 74 ae a6 f1 46 e3 8b 95 c7 d9 ef f6 b8 9f f8 37 7d 0b 3f ea d7 03 fb 26 9c bc bc a1 8a e1 55 15 da da 31 Data Ascii: ^SS^{Ufw[C1-hkv7g&K~&}#_1gvQ:uYY5\Gio+ed<CvKr\HXn5}ToN>'r^HZX.7g)5Z/Afr-3_WW~tF7}?&U1
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 11 ad d6 bd c7 fc 15 54 53 76 55 9f f5 b5 47 22 8b f1 5d b2 e1 b9 81 f6 57 5b 8c ed 26 b7 1a ec 35 7e 77 b6 c7 6e 44 48 86 b6 4e 47 95 cd a4 47 b7 92 81 f4 fa 4f a8 71 7c 9f 23 ec c9 2e 03 ea e7 d7 3b 71 0b 71 ba 93 dd 7e 21 d1 b7 bb dd 65 5d b6 dd f9 d6 d5 ff 00 0a bb d6 3d 96 31 b6 56 e0 f6 38 02 d7 34 c8 20 f0 41 52 02 0b 8f cc f2 b9 30 4b 86 63 43 f2 c8 7c b2 64 92 49 22 c0 ff 00 ff d0 f5 55 c0 fd 74 fa c6 72 6d b3 a5 e3 3b f5 4a 1d b7 25 c0 c7 ab 60 d7 d0 6e a1 de 95 7f e1 b6 ae 97 eb 5f 57 77 4b e9 4e 75 3f d2 b2 4f a3 8f 1c 87 38 19 b3 fe b6 cf 77 f5 d7 99 51 40 c9 bb d2 36 0a ea ad 8f 7b ed 82 e8 63 01 7d 96 6d 6e d7 d8 f7 7e 6a 64 cf 47 57 e1 7c a8 37 cc 4f e5 87 c9 e6 37 9f fd e3 67 a6 74 cb ba 95 86 c8 0e ae b7 06 fa 62 41 7b b6 b9 ed a7 f4 2d Data Ascii: TSvUG"]W[&5~wnDHNGGOq\|#.;qq~!e]=1V84 AR0KcC\|dI"Utrm;J%`n_WwKNu?O8wQ@6{c}mn~jdGW\|7O7gtbA{-
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 46 63 9e 70 f1 d7 d1 87 50 b9 53 e6 37 00 c0 2b c9 26 7d 45 76 0f 70 8d 9f 70 89 1c ae c2 ad 14 cb 27 30 96 63 fb 05 04 e7 e9 91 b8 42 32 ec 76 73 5f 7e f5 bb a0 10 e3 94 52 a7 b2 e4 22 b4 ef c8 08 73 1c f7 3a 03 4a 78 c6 c7 de 02 bd bd a2 be 20 d2 9b 06 32 6b bb b0 47 54 bc 55 72 6f e6 19 d0 d7 e3 70 d5 f6 da c1 45 3d 83 e8 f9 18 f2 d4 bd 53 89 d2 ea 43 b9 2b b0 f8 b1 fe 94 b1 2f 7f 67 79 df 2f a5 17 96 13 47 45 0a 2c cd 15 5c bb f9 8b f4 31 f7 d6 4f 99 f1 e7 34 e8 bb e9 19 ea 5f 1c 36 b0 75 88 0b 9e 8d e2 78 c5 2a 38 1d 97 8d db 0c 6a 9d 5b 8f c3 62 a3 98 df 45 2a 26 cc 9f 51 f4 f3 0b e8 73 f7 ad 07 33 63 be 68 31 77 d2 63 a2 3e b8 61 2b 4a 10 77 3a db dc f4 39 59 84 8d 96 91 76 52 80 d0 d0 6a e8 bb a5 24 dd 3f 7f 9f 4f 7f 4c da 86 4b 5c a4 c4 97 e2 31 Data Ascii: FcpPS7+&}Evpp'0cB2vs_~R"s:Jx 2kGTUropE=SC+/gy/GE,\1O4_6ux8j[bE&Qs3ch1wc>a+Jw:9YvRj$?OLK\1
2024-04-18 17:22:57 UTC	6250	IN	Data Raw: 91 78 2f e3 3c 4f dc 7f ff da 00 08 01 01 01 06 3f 00 fd b2 62 6c ef 6d 7a ef 62 59 1e 34 5c 7f 8f 0e 1e ab 52 09 8d 57 46 90 6a ac 3f 30 6c ee 3e 66 ca 89 ea 29 a5 32 cd ec 77 be 11 26 6a 2f d1 60 e1 2c 39 9f 8d b9 b2 d4 75 18 3c 4d 24 7d ab a9 86 1c 9f 81 23 dc 76 b7 43 28 9c f1 b2 14 01 e8 4c 29 05 78 ef 46 c7 2c 0b 2c 64 47 e8 e9 ec 76 9e 40 f9 27 ae 24 a6 88 e2 96 ef b8 e9 73 95 0c 7c d2 67 cc 30 31 73 99 19 02 aa 10 19 67 1a d4 58 d9 0b e2 47 c0 58 b3 b5 91 4c 34 91 ce db 37 5b 6b e3 b0 7a 35 1b 6e fd de eb f9 8b 88 70 ed 89 93 b0 d7 dc b2 59 08 71 32 36 74 46 fa a3 9c e4 6f b7 e3 54 45 88 ec 7f 7b f2 57 1c 58 6e 21 a3 a5 1f 73 d5 dd d5 a3 a2 9a fc a1 ab cb ce 6b 26 2e b4 81 a1 9e 7a b1 5e c9 96 46 b2 11 09 9d d1 cb 31 31 b2 01 2b f6 77 9c c3 c8 ec Data Ascii: x/<O?blmzbY4\RWFj?0l>f)2w&j/`,9u<M$}#vC(L)xF,,dGv@'$s\|g01sgXGXL47[kz5npYq26tFoTE{WXn!sk&.z^F11+w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49998	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:57 UTC	675	OUT	GET /s/W/xdds/18ll0A0MviQGtcZI/p/1713460975892 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:37 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=+AnmjwdaOpLI2K8uQ/skqjn+XjxRNO1waXiHsWGZ5ZLaY0HiO8ezfpQjYUnZwF2BhT12xbtQgmVUI142pCwWlEZF0X4hUqQBiX+9MsGhoOuPCfCVwVRthDpeYTYY; Expires=Thu, 25 Apr 2024 17:22:57 GMT; Path=/ Set-Cookie: AWSALBCORS=+AnmjwdaOpLI2K8uQ/skqjn+XjxRNO1waXiHsWGZ5ZLaY0HiO8ezfpQjYUnZwF2BhT12xbtQgmVUI142pCwWlEZF0X4hUqQBiX+9MsGhoOuPCfCVwVRthDpeYTYY; Expires=Thu, 25 Apr 2024 17:22:57 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:37 UTC	1199	IN	Data Raw: 34 61 38 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 37 35 32 32 5c 6e 31 30 36 33 31 2e 31 30 31 38 36 32 31 39 39 39 36 36 5c 6e 33 5c 6e 33 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 7b 5c 22 6c 6f 67 5c 22 3a 7b 5c 22 31 37 31 33 34 36 31 30 31 37 34 32 31 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 24 73 74 72 69 6e 67 5c 22 3a 5c 22 23 73 75 70 70 6f 72 74 63 68 61 74 3a 31 39 31 30 35 30 31 35 2d 31 4c 4c 6d 65 64 76 73 45 78 57 48 75 7a 76 5c 22 2c 5c 22 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 31 33 34 36 31 30 31 37 34 32 31 2c 5c 22 69 6e 64 65 Data Ascii: 4a8$Loader && ($Loader.payload = "1713461017522\n10631.101862199966\n3\n3\nd\n{\"path\":\"livechat\",\"update\":{\"channel\":{\"log\":{\"1713461017421\":{\"channel$string\":\"#supportchat:19105015-1LLmedvsExWHuzv\",\"timestamp$int\":1713461017421,\"inde
2024-04-18 17:23:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50001	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:57 UTC	1025	OUT	GET /images/SHRM-Recertification-Provider_new.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
2024-04-18 17:22:57 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:02 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"47147-1677826338000" Last-Modified: Fri, 03 Mar 2023 06:52:18 GMT Content-Type: image/jpeg Content-Length: 47147 Connection: close
2024-04-18 17:22:57 UTC	7926	IN	Data Raw: ff d8 ff e1 1f a6 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 c8 00 00 00 01 01 03 00 01 00 00 00 97 00 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1e 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d2 00 00 00 69 87 04 00 01 00 00 00 e8 00 00 00 20 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 33 3a 30 33 20 31 32 3a 30 37 3a 31 30 00 00 00 04 00 00 90 07 00 04 00 00 00 30 Data Ascii: ExifII*(12i ''Adobe Photoshop CS6 (Windows)2023:03:03 12:07:100
2024-04-18 17:22:57 UTC	258	IN	Data Raw: 99 a9 ac 15 fe 4c e5 1e 5a c1 e0 47 57 fa f9 d4 0f ea f4 db 53 5f c7 a7 8e da 9b af fc 2e 76 e4 df f3 57 eb 77 50 11 9d 91 b5 a7 96 e4 64 3d ff 00 f8 0d 01 d4 2e fd 24 47 1f f9 2f 64 7f 77 59 a8 f0 ff 00 94 f7 7f c2 f9 5e 2f 1b fc 5c 56 d2 0e 46 71 f3 14 54 d6 7f d3 b5 d7 b9 6a 51 f5 1b a0 57 fc eb 2d c9 3f f0 b6 bb fe a6 af 49 ab a0 49 45 93 ef 9d 78 bf c0 ff 00 d7 6c 90 fb b7 4e 1f f0 bf f4 36 96 2f 45 e9 18 64 3b 17 0a 8a 5c dd 43 db 5b 43 bf cf 8d ea ea 49 2a b2 e2 bf 55 df f5 9b 11 e1 af 4d 57 82 92 49 24 d4 a9 24 92 49 4f ff d9 ff ed 27 e0 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 86 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 Data Ascii: LZGWS_.vWwPd=.$G/dwY^/\VFqTjQW-?IIExlN6/Ed;\C[CI*UMWI$$IO'Photoshop 3.08BIMZ%GZ%GZ%GZ%GZ%GZ
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 05 00 3a 53 48 52 4d 20 52 65 63 65 72 74 69 66 69 63 61 74 69 6f 6e 20 50 72 6f 76 69 64 65 72 20 43 50 2d 53 43 50 20 53 65 61 6c 20 32 30 31 36 5f 28 c2 ae 29 20 4d 61 73 74 65 72 38 42 49 4d 04 25 00 00 00 00 00 10 04 e0 76 87 28 aa 03 15 6c de 43 6d 84 d2 4c db 38 42 49 4d 04 3a 00 00 00 00 00 e5 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 Data Ascii: Z%GZ%G:SHRM Recertification Provider CP-SCP Seal 2016_() Master8BIM%v(lCmL8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXTprintP
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: b9 ae 5d b6 3d f5 64 e3 d5 93 49 26 ab 98 db 2b 24 10 4b 5c 37 b7 da ef 73 7d a5 11 0d b4 4b e5 f5 dd 67 d4 9f ad 2e aa c7 3f ec 1a 07 f2 77 e1 bc fe 8a ed 01 df 76 03 fe 97 f8 4f d1 dd ff 00 72 17 45 f5 e3 ea dd bd 62 8a ba 9f 4e 68 c8 be aa cb 2c a5 a4 7e 9a 87 7b db e8 be 76 7a b5 39 ce 7d 5f e9 59 6d 9f f0 6b ae 49 25 3e 73 81 fe 31 b3 ba 75 03 0f a9 e3 7d a2 fa 7d 9e a5 af 38 f7 40 ff 00 b9 35 5d 5b bf 4b fb d6 7e 7f ee 2a be 9f 5e fa f1 d4 d9 69 61 a7 11 b2 c1 73 41 14 51 59 20 db e8 d9 60 1f 6a cc b2 1b fc df fc 17 a9 e9 54 bd 35 f5 55 64 6f 63 5f 1c 6e 00 fe 55 2e 34 09 29 ae fe 9d 88 ee 9c 7a 61 64 62 1a 7e cf e9 8e d5 ed f4 b6 0f ec 2f 1d c9 39 1d 38 e5 f4 cb 9c 4b aa b5 ad c8 60 69 fd 23 f1 cb fe cd 63 74 ff 00 08 db 7d 56 7f c6 55 fe 8d 7b 5a Data Ascii: ]=dI&+$K\7s}Kg.?wvOrEbNh,~{vz9}_YmkI%>s1u}}8@5][K~*^iasAQY `jT5Udoc_nU.4)zadb~/98K`i#ct}VU{Z
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 60 88 18 83 fb c5 10 8e 80 82 88 14 a5 12 8c 4b f0 38 7c dd 40 53 f4 78 98 43 91 37 07 38 87 4f ed 24 28 08 74 92 06 58 0c 10 a0 23 d0 40 81 21 78 10 10 12 92 3a 49 06 27 00 52 94 40 43 81 28 72 27 29 4a 02 52 81 48 50 10 e9 24 0c b0 8e 38 1e 82 47 49 23 82 f5 f4 10 23 a0 83 06 2f 48 cb f2 30 0f 51 00 42 0a 3c 9c e0 22 62 00 84 78 0c c9 82 21 d8 41 e4 0b e0 79 81 12 c2 0e 3c 98 df 2c bf 23 7c c4 37 02 70 f1 30 75 17 f0 cd 05 01 03 9c 04 40 85 1e 66 79 4b f2 13 f0 23 30 62 5f 98 9f a4 4c 22 00 41 e0 d3 00 7b 08 5e 00 c3 fb c3 fb c5 f9 4b 06 f9 65 f9 1b e6 21 44 44 e3 e2 61 e0 bf 88 68 28 88 9c c6 e9 00 1e 40 c2 22 24 30 00 18 79 18 20 80 09 c4 04 48 70 00 1e 39 2c c8 ea 20 41 8f c8 41 0c 00 07 30 08 40 9c a2 52 18 02 3a 89 03 30 02 39 e4 7a c9 1c cb 8e 4a Data Ascii: `K8\|@SxC78O$(tX#@!x:I'R@C(r')JRHP$8GI##/H0QB<"bx!Ay<,#\|7p0u@fyK#0b_L"A{^Ke!DDah(@"$0y Hp9, AA0@R:09zJ
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 09 36 ef d3 4a 3b 56 dd 81 97 1c e2 06 96 f2 2a 05 e5 52 a0 8b ac 8c 6f 77 16 d2 dc 75 f7 03 18 71 e2 01 7b 5c 5e de 7b 71 ae 69 1c 2a de da 9b 7f 4d 16 66 01 47 69 a0 ca c0 a9 e0 47 0a 3c 8e 0d 8d 8d 8d ec 7d c0 f4 b7 d9 f9 9f 4e fa 67 d1 b9 b9 63 f0 f9 f9 b9 6f 7f 13 9b 96 fa fc 1b db b3 f0 37 3f f4 f2 7f 80 d4 bf ed d2 7e f2 1f c3 22 ba 63 1b a4 b2 f2 db af 32 33 95 81 33 bc 8e d1 16 25 da 60 4e 91 83 a0 d0 02 81 c3 73 00 c4 75 2e c7 bf bc ad b4 ed b8 48 21 8d 5d 91 44 92 2c 6c 66 b2 91 77 06 4d 09 bf c1 50 6e 05 8e 3e 37 55 e6 e4 49 85 b5 66 ce 97 f1 9a 35 92 34 51 61 33 02 39 91 03 69 76 f5 42 8f 5a d7 07 af f6 fc 39 b2 9b a0 e5 9b c2 c5 25 db 9c d8 38 94 c2 c7 50 2d c9 62 06 be ad c7 30 7a c1 8b 65 c1 cc d9 b6 e3 88 fc f8 f9 86 55 93 29 ec e2 f1 a4 Data Ascii: 6J;VRowuq{\^{qiMfGiG<}Ngco7?~"c233%`Nsu.H!]D,lfwMPn>7UIf54Qa39ivBZ9%8P-b0zeU)
2024-04-18 17:22:57 UTC	6227	IN	Data Raw: 74 2c d9 4c 2b 98 9a 15 8e c3 22 b0 37 87 af 5d ab f2 32 12 86 a7 4a 4e ae a1 10 67 20 dd e2 f1 6e 9d 9c a9 9c 8c c5 44 c0 d6 4a 0e 37 e4 0f dd bc 47 7d a8 41 e4 1c 42 d9 e6 22 c3 33 e5 86 8f 5d b0 d7 ec f0 07 95 98 a1 3d 96 96 34 05 be 2d 65 c0 5d 2e 75 c5 a3 f4 48 63 9b 6e f1 c2 39 e9 b9 91 2c 8d f2 91 1e b5 ad 9a 3b 0a 58 ab e4 29 d6 af 5f a1 f6 11 34 48 50 8b b8 44 bd 44 82 52 14 87 4c 85 39 35 21 8a 23 9a 33 5c 43 a6 6d ee f1 55 d0 ae 63 04 df 24 d9 ca 2b e4 db 8b 94 ab 74 a5 0e c1 de a8 49 36 88 97 91 2c 8b a6 e2 06 f2 32 66 b0 6d 37 b0 64 a2 32 b6 77 52 cf 83 b1 35 09 e5 ab 23 b0 4b 13 e2 18 02 cf ce 59 0c e2 b9 8f 6b 8b 4f 56 71 fc 6c 9c 62 af 1f 23 21 2a 25 6e e1 a9 d6 24 39 88 06 14 bc a9 9a 9b 80 ec b9 cd bc 96 23 95 e5 c5 b7 18 48 54 c3 16 e2 Data Ascii: t,L+"7]2JNg nDJ7G}AB"3]=4-e].uHcn9,;X)_4HPDDRL95!#3\CmUc$+tI6,2fm7d2wR5#KYkOVqlb#!*%n$9#HT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50000	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:57 UTC	954	OUT	GET /images/js/convertPdf/pdfCanvas.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
2024-04-18 17:22:57 UTC	271	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:02 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"88624-1582199855000" Last-Modified: Thu, 20 Feb 2020 11:57:35 GMT Content-Type: text/javascript Content-Length: 88624 Connection: close
2024-04-18 17:22:57 UTC	7921	IN	Data Raw: 2f 2a 0a 20 20 68 74 6d 6c 32 63 61 6e 76 61 73 20 30 2e 34 2e 31 20 3c 68 74 74 70 3a 2f 2f 68 74 6d 6c 32 63 61 6e 76 61 73 2e 68 65 72 74 7a 65 6e 2e 63 6f 6d 3e 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 4e 69 6b 6c 61 73 20 76 6f 6e 20 48 65 72 74 7a 65 6e 0a 0a 20 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 5f 68 74 6d 6c 32 63 61 6e 76 61 73 20 3d 20 7b 7d 2c 0a 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 2c 0a 63 6f 6d 70 75 74 65 64 43 53 53 2c 0a 68 74 6d 6c 32 63 61 6e 76 61 73 3b 0a 0a 5f 68 Data Ascii: /* html2canvas 0.4.1 <http://html2canvas.hertzen.com> Copyright (c) 2013 Niklas von Hertzen Released under MIT License*/(function(window, document, undefined){"use strict";var _html2canvas = {},previousElement,computedCSS,html2canvas;_h
2024-04-18 17:22:57 UTC	263	IN	Data Raw: 65 7c 50 6f 73 69 74 69 6f 6e 29 24 2f 2e 74 65 73 74 28 61 74 74 72 69 62 75 74 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 61 72 73 65 42 61 63 6b 67 72 6f 75 6e 64 53 69 7a 65 50 6f 73 69 74 69 6f 6e 28 76 61 6c 75 65 2c 20 65 6c 65 6d 65 6e 74 2c 20 61 74 74 72 69 62 75 74 65 2c 20 69 6e 64 65 78 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 2f 62 6f 72 64 65 72 28 54 6f 70 7c 42 6f 74 74 6f 6d 29 28 4c 65 66 74 7c 52 69 67 68 74 29 52 61 64 69 75 73 2f 2e 74 65 73 74 28 61 74 74 72 69 62 75 74 65 29 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 61 72 72 20 3d 20 76 61 6c 75 65 2e 73 70 6c 69 74 28 22 20 22 29 3b 0a 20 20 20 20 20 20 69 66 20 28 61 72 72 2e 6c 65 6e 67 74 68 20 3c 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: e\|Position)$/.test(attribute)) { return parseBackgroundSizePosition(value, element, attribute, index); } else if (/border(Top\|Bottom)(Left\|Right)Radius/.test(attribute)) { var arr = value.split(" "); if (arr.length <= 1) {
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 20 3d 20 61 72 72 5b 30 5d 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 72 72 2e 6d 61 70 28 61 73 49 6e 74 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 72 65 74 75 72 6e 20 76 61 6c 75 65 3b 0a 7d 3b 0a 0a 5f 68 74 6d 6c 32 63 61 6e 76 61 73 2e 55 74 69 6c 2e 72 65 73 69 7a 65 42 6f 75 6e 64 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 75 72 72 65 6e 74 5f 77 69 64 74 68 2c 20 63 75 72 72 65 6e 74 5f 68 65 69 67 68 74 2c 20 74 61 72 67 65 74 5f 77 69 64 74 68 2c 20 74 61 72 67 65 74 5f 68 65 69 67 68 74 2c 20 73 74 72 65 74 63 68 5f 6d 6f 64 65 20 29 7b 0a 20 20 76 61 72 20 74 61 72 67 65 74 5f 72 61 74 69 6f 20 3d 20 74 61 72 67 65 74 5f 77 69 64 74 68 20 2f 20 74 61 72 67 65 74 5f 68 65 69 67 68 74 2c 0a 20 20 20 20 63 75 72 72 65 6e Data Ascii: = arr[0]; } return arr.map(asInt); } return value;};_html2canvas.Util.resizeBounds = function( current_width, current_height, target_width, target_height, stretch_mode ){ var target_ratio = target_width / target_height, curren
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 66 74 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 61 64 69 65 6e 74 2e 78 30 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 61 64 69 65 6e 74 2e 78 31 20 3d 20 62 6f 75 6e 64 73 2e 77 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 69 66 28 67 72 61 64 69 65 6e 74 2e 78 30 20 3d 3d 3d 20 6e 75 6c 6c 20 26 26 20 67 72 61 64 69 65 6e 74 2e 78 31 20 3d 3d 3d 20 6e 75 6c 6c 29 7b 20 2f 2f 20 63 65 6e 74 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 72 61 64 69 65 6e 74 2e 78 30 20 3d 20 67 72 61 64 69 65 Data Ascii: ft': gradient.x0 = 0; gradient.x1 = bounds.width; break; } } } if(gradient.x0 === null && gradient.x1 === null){ // center gradient.x0 = gradie
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 5b 30 2d 39 5c 2e 5d 2b 29 3f 5c 29 29 5c 73 2a 28 5c 64 7b 31 2c 33 7d 29 3f 28 25 7c 70 78 29 3f 2f 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6d 33 5b 32 5d 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 6f 70 20 3d 20 70 61 72 73 65 46 6c 6f 61 74 28 6d 33 5b 32 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6d 33 5b 33 5d 20 3d 3d 3d 20 27 25 27 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 6f 70 20 2f 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 20 2f 2f 20 70 78 20 2d 20 73 74 75 70 69 64 20 6f 70 65 72 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 6f 70 20 2f 3d 20 62 6f 75 6e 64 73 2e 77 69 64 74 68 3b Data Ascii: [0-9\.]+)?\))\s*(\d{1,3})?(%\|px)?/); if(m3[2]){ stop = parseFloat(m3[2]); if(m3[3] === '%'){ stop /= 100; } else { // px - stupid opera stop /= bounds.width;
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 65 78 74 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 6f 4c 65 74 74 65 72 53 70 61 63 69 6e 67 28 6c 65 74 74 65 72 5f 73 70 61 63 69 6e 67 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 28 2f 5e 28 6e 6f 72 6d 61 6c 7c 6e 6f 6e 65 7c 30 70 78 29 24 2f 2e 74 65 73 74 28 6c 65 74 74 65 72 5f 73 70 61 63 69 6e 67 29 29 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 72 61 77 54 65 78 74 28 63 75 72 72 65 6e 74 54 65 78 74 2c 20 78 2c 20 79 2c 20 63 74 78 29 7b 0a 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 74 54 65 78 74 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 55 74 69 6c 2e 74 72 69 6d Data Ascii: toUpperCase(); default: return text; } } function noLetterSpacing(letter_spacing) { return (/^(normal\|none\|0px)$/.test(letter_spacing)); } function drawText(currentText, x, y, ctx){ if (currentText !== null && Util.trim
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 6b 69 6e 67 5f 63 6f 6e 74 65 78 74 0a 20 20 20 20 2f 2f 20 57 68 65 6e 20 61 20 6e 65 77 20 73 74 61 63 6b 69 6e 67 20 63 6f 6e 74 65 78 74 20 73 68 6f 75 6c 64 20 62 65 20 63 72 65 61 74 65 64 3a 0a 20 20 20 20 2f 2f 20 74 68 65 20 72 6f 6f 74 20 65 6c 65 6d 65 6e 74 20 28 48 54 4d 4c 29 2c 0a 20 20 20 20 2f 2f 20 70 6f 73 69 74 69 6f 6e 65 64 20 28 61 62 73 6f 6c 75 74 65 6c 79 20 6f 72 20 72 65 6c 61 74 69 76 65 6c 79 29 20 77 69 74 68 20 61 20 7a 2d 69 6e 64 65 78 20 76 61 6c 75 65 20 6f 74 68 65 72 20 74 68 61 6e 20 22 61 75 74 6f 22 2c 0a 20 20 20 20 2f 2f 20 65 6c 65 6d 65 6e 74 73 20 77 69 74 68 20 61 6e 20 6f 70 61 63 69 74 79 20 76 61 6c 75 65 20 6c 65 73 73 20 74 68 61 6e 20 31 2e 20 28 53 65 65 20 74 68 65 20 73 70 65 63 69 66 69 63 61 74 69 Data Ascii: king_context // When a new stacking context should be created: // the root element (HTML), // positioned (absolutely or relatively) with a z-index value other than "auto", // elements with an opacity value less than 1. (See the specificati
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 68 74 49 6e 6e 65 72 2c 20 62 6f 72 64 65 72 50 6f 69 6e 74 73 2e 62 6f 74 74 6f 6d 52 69 67 68 74 49 6e 6e 65 72 2c 20 62 6f 75 6e 64 73 2e 6c 65 66 74 20 2b 20 62 6f 75 6e 64 73 2e 77 69 64 74 68 20 2d 20 62 6f 72 64 65 72 73 5b 31 5d 2e 77 69 64 74 68 2c 20 62 6f 75 6e 64 73 2e 74 6f 70 20 2b 20 62 6f 72 64 65 72 73 5b 30 5d 2e 77 69 64 74 68 29 3b 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 43 6f 72 6e 65 72 28 62 6f 72 64 65 72 41 72 67 73 2c 20 72 61 64 69 75 73 5b 32 5d 2c 20 72 61 64 69 75 73 5b 33 5d 2c 20 62 6f 72 64 65 72 50 6f 69 6e 74 73 2e 62 6f 74 74 6f 6d 52 69 67 68 74 49 6e 6e 65 72 2c 20 62 6f 72 64 65 72 50 6f 69 6e 74 73 2e 62 6f 74 74 6f 6d 4c 65 66 74 49 6e 6e 65 72 2c 20 62 6f 75 6e 64 73 2e 6c 65 66 74 20 2b 20 62 6f 75 6e 64 73 2e Data Ascii: htInner, borderPoints.bottomRightInner, bounds.left + bounds.width - borders[1].width, bounds.top + borders[0].width); parseCorner(borderArgs, radius[2], radius[3], borderPoints.bottomRightInner, borderPoints.bottomLeftInner, bounds.left + bounds.
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 2e 72 6f 75 6e 64 28 62 6f 75 6e 64 73 2e 6c 65 66 74 20 2b 20 62 61 63 6b 67 72 6f 75 6e 64 50 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 29 2c 0a 20 20 20 20 6f 66 66 73 65 74 59 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 28 62 6f 75 6e 64 73 2e 74 6f 70 20 2b 20 62 61 63 6b 67 72 6f 75 6e 64 50 6f 73 69 74 69 6f 6e 2e 74 6f 70 29 3b 0a 0a 20 20 20 20 63 74 78 2e 63 72 65 61 74 65 50 61 74 74 65 72 6e 28 69 6d 61 67 65 29 3b 0a 20 20 20 20 63 74 78 2e 74 72 61 6e 73 6c 61 74 65 28 6f 66 66 73 65 74 58 2c 20 6f 66 66 73 65 74 59 29 3b 0a 20 20 20 20 63 74 78 2e 66 69 6c 6c 28 29 3b 0a 20 20 20 20 63 74 78 2e 74 72 61 6e 73 6c 61 74 65 28 2d 6f 66 66 73 65 74 58 2c 20 2d 6f 66 66 73 65 74 59 29 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 62 61 63 6b 67 72 Data Ascii: .round(bounds.left + backgroundPosition.left), offsetY = Math.round(bounds.top + backgroundPosition.top); ctx.createPattern(image); ctx.translate(offsetX, offsetY); ctx.fill(); ctx.translate(-offsetX, -offsetY); } function backgr
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 22 54 45 58 54 41 52 45 41 22 3a 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 20 7c 7c 20 65 6c 65 6d 65 6e 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 7c 7c 20 22 22 29 2e 6c 65 6e 67 74 68 20 3e 20 30 29 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 6e 64 65 72 46 6f 72 6d 56 61 6c 75 65 28 65 6c 65 6d 65 6e 74 2c 20 62 6f 75 6e 64 73 2c 20 73 74 61 63 6b 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 22 53 45 4c 45 43 54 22 3a 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 65 6c 65 6d 65 6e 74 2e 6f 70 74 69 6f 6e 73 7c 7c 65 6c 65 6d 65 6e 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 7c 7c 20 22 22 Data Ascii: break; case "TEXTAREA": if ((element.value \|\| element.placeholder \|\| "").length > 0){ renderFormValue(element, bounds, stack); } break; case "SELECT": if ((element.options\|\|element.placeholder \|\| ""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	49999	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:57 UTC	950	OUT	GET /images/js/convertPdf/pdfJs.js HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/webinar/managing-termination-of-employment-in-the-canadian-workplace:-new-developments-and-best-practices-206529live Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0
2024-04-18 17:22:57 UTC	273	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:02 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"297043-1582199856000" Last-Modified: Thu, 20 Feb 2020 11:57:36 GMT Content-Type: text/javascript Content-Length: 297043 Connection: close
2024-04-18 17:22:57 UTC	7919	IN	Data Raw: 2f 2a 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 6a 73 50 44 46 20 2d 20 50 44 46 20 44 6f 63 75 6d 65 6e 74 20 63 72 65 61 74 69 6f 6e 20 66 72 6f 6d 20 4a 61 76 61 53 63 72 69 70 74 0a 20 2a 20 56 65 72 73 69 6f 6e 20 31 2e 30 2e 32 37 32 2d 67 69 74 20 42 75 69 6c 74 20 6f 6e 20 32 30 31 34 2d 30 39 2d 32 39 54 31 35 3a 30 39 0a 0a 20 2a 20 40 6e 61 6d 65 20 6a 73 50 44 46 0a 20 2a 2f 0a 20 0a 0a 76 61 72 20 6a 73 50 44 46 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 76 61 72 20 70 64 66 56 65 72 73 69 6f 6e 20 3d 20 27 31 2e 33 27 2c 0a 09 09 70 61 67 65 46 6f 72 6d 61 74 73 20 3d 20 7b 20 2f 2f 20 53 69 7a 65 20 69 6e 20 70 74 20 6f 66 20 76 61 72 69 6f 75 73 20 70 61 70 65 Data Ascii: /** @preserve * jsPDF - PDF Document creation from JavaScript * Version 1.0.272-git Built on 2014-09-29T15:09 * @name jsPDF */ var jsPDF = (function(global) {'use strict';var pdfVersion = '1.3',pageFormats = { // Size in pt of various pape
2024-04-18 17:22:57 UTC	265	IN	Data Raw: 27 29 3b 0a 0a 09 09 09 2f 2f 20 44 6f 20 74 68 69 73 20 66 6f 72 20 65 61 63 68 20 66 6f 6e 74 2c 20 74 68 65 20 27 31 27 20 62 69 74 20 69 73 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 74 68 65 20 66 6f 6e 74 0a 09 09 09 66 6f 72 20 28 76 61 72 20 66 6f 6e 74 4b 65 79 20 69 6e 20 66 6f 6e 74 73 29 20 7b 0a 09 09 09 09 69 66 20 28 66 6f 6e 74 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 6f 6e 74 4b 65 79 29 29 20 7b 0a 09 09 09 09 09 6f 75 74 28 27 2f 27 20 2b 20 66 6f 6e 74 4b 65 79 20 2b 20 27 20 27 20 2b 20 66 6f 6e 74 73 5b 66 6f 6e 74 4b 65 79 5d 2e 6f 62 6a 65 63 74 4e 75 6d 62 65 72 20 2b 20 27 20 30 20 52 27 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 6f 75 74 28 27 3e 3e 27 29 3b 0a 09 09 09 6f 75 74 28 27 2f 58 4f 62 6a 65 63 74 Data Ascii: ');// Do this for each font, the '1' bit is the index of the fontfor (var fontKey in fonts) {if (fonts.hasOwnProperty(fontKey)) {out('/' + fontKey + ' ' + fonts[fontKey].objectNumber + ' 0 R');}}out('>>');out('/XObject
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 70 75 74 58 6f 62 6a 65 63 74 44 69 63 74 28 29 3b 0a 09 09 09 6f 75 74 28 27 3e 3e 27 29 3b 0a 09 09 7d 2c 0a 09 09 70 75 74 52 65 73 6f 75 72 63 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 70 75 74 46 6f 6e 74 73 28 29 3b 0a 09 09 09 65 76 65 6e 74 73 2e 70 75 62 6c 69 73 68 28 27 70 75 74 52 65 73 6f 75 72 63 65 73 27 29 3b 0a 09 09 09 2f 2f 20 52 65 73 6f 75 72 63 65 20 64 69 63 74 69 6f 6e 61 72 79 0a 09 09 09 6f 66 66 73 65 74 73 5b 32 5d 20 3d 20 63 6f 6e 74 65 6e 74 5f 6c 65 6e 67 74 68 3b 0a 09 09 09 6f 75 74 28 27 32 20 30 20 6f 62 6a 27 29 3b 0a 09 09 09 6f 75 74 28 27 3c 3c 27 29 3b 0a 09 09 09 70 75 74 52 65 73 6f 75 72 63 65 44 69 63 74 69 6f 6e 61 72 79 28 29 3b 0a 09 09 09 6f 75 74 28 27 3e 3e 27 29 3b 0a 09 09 09 6f 75 Data Ascii: putXobjectDict();out('>>');},putResources = function() {putFonts();events.publish('putResources');// Resource dictionaryoffsets[2] = content_length;out('2 0 obj');out('<<');putResourceDictionary();out('>>');ou
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 09 09 09 6e 65 77 74 65 78 74 2e 70 75 73 68 28 0a 09 09 09 09 09 09 09 09 74 65 78 74 5b 69 5d 29 3b 0a 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 2f 2f 20 73 69 6e 63 65 20 77 65 20 61 72 65 20 6c 6f 6f 70 69 6e 67 20 6f 76 65 72 20 63 68 61 72 73 20 61 6e 79 77 61 79 2c 20 6d 69 67 68 74 20 61 73 20 77 65 6c 6c 0a 09 09 09 09 09 09 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 72 65 73 69 64 75 61 6c 20 75 6e 69 63 6f 64 65 6e 65 73 73 0a 09 09 09 09 09 09 69 66 20 28 6e 65 77 74 65 78 74 5b 69 5d 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 20 3e 3e 20 38 29 20 7b 0a 09 09 09 09 09 09 09 2f 2a 20 6d 6f 72 65 20 74 68 61 6e 20 32 35 35 20 2a 2f 0a 09 09 09 09 09 09 09 69 73 55 6e 69 63 6f 64 65 20 3d 20 74 72 75 65 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 Data Ascii: newtext.push(text[i]);}// since we are looping over chars anyway, might as well// check for residual unicodenessif (newtext[i].charCodeAt(0) >> 8) {/* more than 255 */isUnicode = true;}
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 20 28 73 74 79 6c 65 20 3d 3d 3d 20 27 66 27 20 7c 7c 20 73 74 79 6c 65 20 3d 3d 3d 20 27 66 2a 27 20 7c 7c 20 73 74 79 6c 65 20 3d 3d 3d 20 27 42 27 20 7c 7c 20 73 74 79 6c 65 20 3d 3d 3d 20 27 42 2a 27 29 20 7b 0a 09 09 09 09 2f 2a 0a 09 09 09 09 41 6c 6c 6f 77 20 64 69 72 65 63 74 20 75 73 65 20 6f 66 20 74 68 65 73 65 20 50 44 46 20 70 61 74 68 2d 70 61 69 6e 74 69 6e 67 20 6f 70 65 72 61 74 6f 72 73 3a 0a 09 09 09 09 2d 20 66 09 66 69 6c 6c 20 75 73 69 6e 67 20 6e 6f 6e 7a 65 72 6f 20 77 69 6e 64 69 6e 67 20 6e 75 6d 62 65 72 20 72 75 6c 65 0a 09 09 09 09 2d 20 66 2a 09 66 69 6c 6c 20 75 73 69 6e 67 20 65 76 65 6e 2d 6f 64 64 20 72 75 6c 65 0a 09 09 09 09 2d 20 42 09 66 69 6c 6c 20 74 68 65 6e 20 73 74 72 6f 6b 65 20 77 69 74 68 20 66 69 6c 6c 20 75 Data Ascii: (style === 'f' \|\| style === 'f' \|\| style === 'B' \|\| style === 'B') {/Allow direct use of these PDF path-painting operators:- ffill using nonzero winding number rule- ffill using even-odd rule- Bfill then stroke with fill u
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 20 6e 65 77 20 45 72 72 6f 72 28 27 54 79 70 65 20 6f 66 20 74 65 78 74 20 6d 75 73 74 20 62 65 20 73 74 72 69 6e 67 20 6f 72 20 41 72 72 61 79 2e 20 22 27 20 2b 20 74 65 78 74 20 2b 20 27 22 20 69 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 64 2e 27 29 3b 0a 09 09 09 7d 0a 09 09 09 2f 2f 20 55 73 69 6e 67 20 22 27 22 20 28 22 67 6f 20 6e 65 78 74 20 6c 69 6e 65 20 61 6e 64 20 72 65 6e 64 65 72 20 74 65 78 74 22 20 6d 61 72 6b 29 20 77 6f 75 6c 64 20 73 61 76 65 20 73 70 61 63 65 20 62 75 74 20 77 6f 75 6c 64 20 63 6f 6d 70 6c 69 63 61 74 65 20 6f 75 72 20 72 65 6e 64 65 72 69 6e 67 20 63 6f 64 65 2c 20 74 65 6d 70 6c 61 74 65 73 0a 0a 09 09 09 2f 2f 20 42 54 20 2e 2e 20 45 54 20 64 6f 65 73 20 4e 4f 54 20 68 61 76 65 20 64 65 66 61 75 6c 74 20 73 65 74 Data Ascii: new Error('Type of text must be string or Array. "' + text + '" is not recognized.');}// Using "'" ("go next line and render text" mark) would save space but would complicate our rendering code, templates// BT .. ET does NOT have default set
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 20 2f 2f 20 73 74 61 72 74 20 6f 66 20 70 61 74 68 0a 09 09 09 09 5b 31 2c 20 31 5d 2c 0a 09 09 09 09 73 74 79 6c 65 2c 0a 09 09 09 09 74 72 75 65 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 41 64 64 73 20 61 20 72 65 63 74 61 6e 67 6c 65 20 77 69 74 68 20 72 6f 75 6e 64 65 64 20 63 6f 72 6e 65 72 73 20 74 6f 20 50 44 46 0a 09 09 20 2a 0a 09 09 20 2a 20 40 70 61 72 61 6d 20 7b 4e 75 6d 62 65 72 7d 20 78 20 43 6f 6f 72 64 69 6e 61 74 65 20 28 69 6e 20 75 6e 69 74 73 20 64 65 63 6c 61 72 65 64 20 61 74 20 69 6e 63 65 70 74 69 6f 6e 20 6f 66 20 50 44 46 20 64 6f 63 75 6d 65 6e 74 29 20 61 67 61 69 6e 73 74 20 6c 65 66 74 20 65 64 67 65 20 6f 66 20 74 68 65 20 70 61 67 65 0a 09 09 20 2a 20 40 70 Data Ascii: // start of path[1, 1],style,true);return this;};/** * Adds a rectangle with rounded corners to PDF * * @param {Number} x Coordinate (in units declared at inception of PDF document) against left edge of the page * @p
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 65 20 69 73 20 69 6d 70 6c 69 65 64 20 61 6e 64 20 65 61 63 68 0a 09 09 20 2a 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 30 2e 30 30 20 28 6d 69 6e 69 6d 75 6d 20 69 6e 74 65 6e 73 69 74 79 29 20 74 6f 20 74 6f 20 31 2e 30 30 0a 09 09 20 2a 20 28 6d 61 78 20 69 6e 74 65 6e 73 69 74 79 29 20 69 66 20 76 61 6c 75 65 73 20 61 72 65 20 63 6f 6d 6d 75 6e 69 63 61 74 65 64 20 61 73 20 53 74 72 69 6e 67 20 74 79 70 65 73 2c 20 6f 72 0a 09 09 20 2a 20 66 72 6f 6d 20 30 20 28 6d 69 6e 20 69 6e 74 65 6e 73 69 74 79 29 20 74 6f 20 74 6f 20 32 35 35 20 28 6d 61 78 20 69 6e 74 65 6e 73 69 74 79 29 20 69 66 20 76 61 6c 75 65 73 20 61 72 65 20 63 6f 6d 6d 75 6e 69 63 61 74 65 64 0a 09 09 20 2a 20 61 73 20 4e 75 6d Data Ascii: e is implied and each * value must be in the range from 0.00 (minimum intensity) to to 1.00 * (max intensity) if values are communicated as String types, or * from 0 (min intensity) to to 255 (max intensity) if values are communicated * as Num
2024-04-18 17:22:57 UTC	8192	IN	Data Raw: 0a 09 09 09 09 09 09 09 09 09 74 79 70 65 6f 66 20 68 61 6e 64 6c 65 72 5f 61 6e 64 5f 61 72 67 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 3f 0a 09 09 09 09 09 09 09 09 09 09 5b 68 61 6e 64 6c 65 72 5f 61 6e 64 5f 61 72 67 73 5d 20 3a 20 68 61 6e 64 6c 65 72 5f 61 6e 64 5f 61 72 67 73 29 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 28 65 76 65 6e 74 73 2c 20 6a 73 50 44 46 2e 41 50 49 2e 65 76 65 6e 74 73 29 29 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 41 50 49 5b 70 6c 75 67 69 6e 5d 20 3d 20 6a 73 50 44 46 2e 41 50 49 5b 70 6c 75 67 69 6e 5d 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f Data Ascii: typeof handler_and_args === 'function' ?[handler_and_args] : handler_and_args));}}(events, jsPDF.API.events));} else {API[plugin] = jsPDF.API[plugin];}}}/////////////////////////////////////////
2024-04-18 17:22:57 UTC	8176	IN	Data Raw: 28 27 73 6d 61 73 6b 27 20 69 6e 20 69 6d 67 29 20 7b 0a 09 09 09 6f 75 74 28 27 2f 53 4d 61 73 6b 20 27 20 2b 20 28 6f 62 6a 65 63 74 4e 75 6d 62 65 72 20 2b 20 31 29 20 2b 20 27 20 30 20 52 27 29 3b 0a 09 09 7d 0a 09 09 6f 75 74 28 27 2f 4c 65 6e 67 74 68 20 27 20 2b 20 69 6d 67 5b 27 64 61 74 61 27 5d 2e 6c 65 6e 67 74 68 20 2b 20 27 3e 3e 27 29 3b 0a 0a 09 09 70 75 74 53 74 72 65 61 6d 28 69 6d 67 5b 27 64 61 74 61 27 5d 29 3b 0a 0a 09 09 6f 75 74 28 27 65 6e 64 6f 62 6a 27 29 3b 0a 0a 09 09 2f 2f 20 53 6f 66 74 20 6d 61 73 6b 0a 09 09 69 66 20 28 27 73 6d 61 73 6b 27 20 69 6e 20 69 6d 67 29 20 7b 0a 09 09 09 76 61 72 20 64 70 20 3d 20 27 2f 50 72 65 64 69 63 74 6f 72 20 31 35 20 2f 43 6f 6c 6f 72 73 20 31 20 2f 42 69 74 73 50 65 72 43 6f 6d 70 6f 6e Data Ascii: ('smask' in img) {out('/SMask ' + (objectNumber + 1) + ' 0 R');}out('/Length ' + img['data'].length + '>>');putStream(img['data']);out('endobj');// Soft maskif ('smask' in img) {var dp = '/Predictor 15 /Colors 1 /BitsPerCompon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50003	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:57 UTC	994	OUT	GET /images/hrci_approved_seal_new.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460973.28.0.0; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1
2024-04-18 17:22:57 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:02 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"30802-1677826340000" Last-Modified: Fri, 03 Mar 2023 06:52:20 GMT Content-Type: image/jpeg Content-Length: 30802 Connection: close
2024-04-18 17:22:57 UTC	7926	IN	Data Raw: ff d8 ff e1 13 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 00 68 00 00 01 01 00 03 00 00 00 01 00 68 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 33 3a 30 33 20 31 32 3a 30 33 3a 30 39 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: VExifMM*hh(12i -'-'Adobe Photoshop CS6 (Windows)2023:03:03 12:03:090
2024-04-18 17:22:57 UTC	258	IN	Data Raw: dc c2 01 df 5e 53 9d 53 1c cb 5e fc 7b d8 ca bf eb be b5 8a 55 bf 07 07 12 9a fd 66 d7 d4 e9 dd 77 a9 5b 43 fd db dc cb 31 2d be b2 ff 00 e7 68 6b 76 37 67 e8 ec fc ff 00 d2 26 12 4b 7e 11 e5 f1 e9 8b 18 26 f8 7d 23 5f fb ac bc 31 fe bb 91 f6 8b 67 76 e7 ee fd ed ee 9f ca ad 51 d6 3a 85 07 75 59 59 35 91 c6 db 5c 47 e7 69 b2 cf 6f ee 2b ee ea d8 d6 65 64 3c de 43 df 76 4b b1 72 5c d7 1f 48 58 2a 6e 35 b1 05 fe c6 d6 fa 7d be fa 54 9b 6f 4e ca 3e 8d f6 b3 27 2a fa db 88 72 5e 0b 7f 48 ff 00 5a c6 e5 87 58 d6 bb f4 0e fb 2e 37 af 67 d3 f7 a4 c9 29 d8 f5 e2 35 5a ef 2f fb 96 d6 07 d7 ae b1 41 0d b9 d5 66 b0 72 2d 1e 95 84 7f c6 33 f4 5f f4 57 57 d2 7e b6 74 ae a6 f1 46 e3 8b 95 c7 d9 ef f6 b8 9f f8 37 7d 0b 3f ea d7 03 fb 26 9c bc bc a1 8a e1 55 15 da da 31 Data Ascii: ^SS^{Ufw[C1-hkv7g&K~&}#_1gvQ:uYY5\Gio+ed<CvKr\HXn5}ToN>'r^HZX.7g)5Z/Afr-3_WW~tF7}?&U1
2024-04-18 17:22:58 UTC	8192	IN	Data Raw: 11 ad d6 bd c7 fc 15 54 53 76 55 9f f5 b5 47 22 8b f1 5d b2 e1 b9 81 f6 57 5b 8c ed 26 b7 1a ec 35 7e 77 b6 c7 6e 44 48 86 b6 4e 47 95 cd a4 47 b7 92 81 f4 fa 4f a8 71 7c 9f 23 ec c9 2e 03 ea e7 d7 3b 71 0b 71 ba 93 dd 7e 21 d1 b7 bb dd 65 5d b6 dd f9 d6 d5 ff 00 0a bb d6 3d 96 31 b6 56 e0 f6 38 02 d7 34 c8 20 f0 41 52 02 0b 8f cc f2 b9 30 4b 86 63 43 f2 c8 7c b2 64 92 49 22 c0 ff 00 ff d0 f5 55 c0 fd 74 fa c6 72 6d b3 a5 e3 3b f5 4a 1d b7 25 c0 c7 ab 60 d7 d0 6e a1 de 95 7f e1 b6 ae 97 eb 5f 57 77 4b e9 4e 75 3f d2 b2 4f a3 8f 1c 87 38 19 b3 fe b6 cf 77 f5 d7 99 51 40 c9 bb d2 36 0a ea ad 8f 7b ed 82 e8 63 01 7d 96 6d 6e d7 d8 f7 7e 6a 64 cf 47 57 e1 7c a8 37 cc 4f e5 87 c9 e6 37 9f fd e3 67 a6 74 cb ba 95 86 c8 0e ae b7 06 fa 62 41 7b b6 b9 ed a7 f4 2d Data Ascii: TSvUG"]W[&5~wnDHNGGOq\|#.;qq~!e]=1V84 AR0KcC\|dI"Utrm;J%`n_WwKNu?O8wQ@6{c}mn~jdGW\|7O7gtbA{-
2024-04-18 17:22:58 UTC	8176	IN	Data Raw: 46 63 9e 70 f1 d7 d1 87 50 b9 53 e6 37 00 c0 2b c9 26 7d 45 76 0f 70 8d 9f 70 89 1c ae c2 ad 14 cb 27 30 96 63 fb 05 04 e7 e9 91 b8 42 32 ec 76 73 5f 7e f5 bb a0 10 e3 94 52 a7 b2 e4 22 b4 ef c8 08 73 1c f7 3a 03 4a 78 c6 c7 de 02 bd bd a2 be 20 d2 9b 06 32 6b bb b0 47 54 bc 55 72 6f e6 19 d0 d7 e3 70 d5 f6 da c1 45 3d 83 e8 f9 18 f2 d4 bd 53 89 d2 ea 43 b9 2b b0 f8 b1 fe 94 b1 2f 7f 67 79 df 2f a5 17 96 13 47 45 0a 2c cd 15 5c bb f9 8b f4 31 f7 d6 4f 99 f1 e7 34 e8 bb e9 19 ea 5f 1c 36 b0 75 88 0b 9e 8d e2 78 c5 2a 38 1d 97 8d db 0c 6a 9d 5b 8f c3 62 a3 98 df 45 2a 26 cc 9f 51 f4 f3 0b e8 73 f7 ad 07 33 63 be 68 31 77 d2 63 a2 3e b8 61 2b 4a 10 77 3a db dc f4 39 59 84 8d 96 91 76 52 80 d0 d0 6a e8 bb a5 24 dd 3f 7f 9f 4f 7f 4c da 86 4b 5c a4 c4 97 e2 31 Data Ascii: FcpPS7+&}Evpp'0cB2vs_~R"s:Jx 2kGTUropE=SC+/gy/GE,\1O4_6ux8j[bE&Qs3ch1wc>a+Jw:9YvRj$?OLK\1
2024-04-18 17:22:58 UTC	6250	IN	Data Raw: 91 78 2f e3 3c 4f dc 7f ff da 00 08 01 01 01 06 3f 00 fd b2 62 6c ef 6d 7a ef 62 59 1e 34 5c 7f 8f 0e 1e ab 52 09 8d 57 46 90 6a ac 3f 30 6c ee 3e 66 ca 89 ea 29 a5 32 cd ec 77 be 11 26 6a 2f d1 60 e1 2c 39 9f 8d b9 b2 d4 75 18 3c 4d 24 7d ab a9 86 1c 9f 81 23 dc 76 b7 43 28 9c f1 b2 14 01 e8 4c 29 05 78 ef 46 c7 2c 0b 2c 64 47 e8 e9 ec 76 9e 40 f9 27 ae 24 a6 88 e2 96 ef b8 e9 73 95 0c 7c d2 67 cc 30 31 73 99 19 02 aa 10 19 67 1a d4 58 d9 0b e2 47 c0 58 b3 b5 91 4c 34 91 ce db 37 5b 6b e3 b0 7a 35 1b 6e fd de eb f9 8b 88 70 ed 89 93 b0 d7 dc b2 59 08 71 32 36 74 46 fa a3 9c e4 6f b7 e3 54 45 88 ec 7f 7b f2 57 1c 58 6e 21 a3 a5 1f 73 d5 dd d5 a3 a2 9a fc a1 ab cb ce 6b 26 2e b4 81 a1 9e 7a b1 5e c9 96 46 b2 11 09 9d d1 cb 31 31 b2 01 2b f6 77 9c c3 c8 ec Data Ascii: x/<O?blmzbY4\RWFj?0l>f)2w&j/`,9u<M$}#vC(L)xF,,dGv@'$s\|g01sgXGXL47[kz5npYq26tFoTE{WXn!sk&.z^F11+w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50005	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:58 UTC	1005	OUT	GET /images/SHRM-Recertification-Provider_new.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460977.24.0.0
2024-04-18 17:22:58 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:03 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"47147-1677826338000" Last-Modified: Fri, 03 Mar 2023 06:52:18 GMT Content-Type: image/jpeg Content-Length: 47147 Connection: close
2024-04-18 17:22:58 UTC	7926	IN	Data Raw: ff d8 ff e1 1f a6 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 c8 00 00 00 01 01 03 00 01 00 00 00 97 00 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1e 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d2 00 00 00 69 87 04 00 01 00 00 00 e8 00 00 00 20 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 33 3a 30 33 20 31 32 3a 30 37 3a 31 30 00 00 00 04 00 00 90 07 00 04 00 00 00 30 Data Ascii: ExifII*(12i ''Adobe Photoshop CS6 (Windows)2023:03:03 12:07:100
2024-04-18 17:22:58 UTC	258	IN	Data Raw: 99 a9 ac 15 fe 4c e5 1e 5a c1 e0 47 57 fa f9 d4 0f ea f4 db 53 5f c7 a7 8e da 9b af fc 2e 76 e4 df f3 57 eb 77 50 11 9d 91 b5 a7 96 e4 64 3d ff 00 f8 0d 01 d4 2e fd 24 47 1f f9 2f 64 7f 77 59 a8 f0 ff 00 94 f7 7f c2 f9 5e 2f 1b fc 5c 56 d2 0e 46 71 f3 14 54 d6 7f d3 b5 d7 b9 6a 51 f5 1b a0 57 fc eb 2d c9 3f f0 b6 bb fe a6 af 49 ab a0 49 45 93 ef 9d 78 bf c0 ff 00 d7 6c 90 fb b7 4e 1f f0 bf f4 36 96 2f 45 e9 18 64 3b 17 0a 8a 5c dd 43 db 5b 43 bf cf 8d ea ea 49 2a b2 e2 bf 55 df f5 9b 11 e1 af 4d 57 82 92 49 24 d4 a9 24 92 49 4f ff d9 ff ed 27 e0 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 86 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 Data Ascii: LZGWS_.vWwPd=.$G/dwY^/\VFqTjQW-?IIExlN6/Ed;\C[CI*UMWI$$IO'Photoshop 3.08BIMZ%GZ%GZ%GZ%GZ%GZ
2024-04-18 17:22:58 UTC	8192	IN	Data Raw: 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 05 00 3a 53 48 52 4d 20 52 65 63 65 72 74 69 66 69 63 61 74 69 6f 6e 20 50 72 6f 76 69 64 65 72 20 43 50 2d 53 43 50 20 53 65 61 6c 20 32 30 31 36 5f 28 c2 ae 29 20 4d 61 73 74 65 72 38 42 49 4d 04 25 00 00 00 00 00 10 04 e0 76 87 28 aa 03 15 6c de 43 6d 84 d2 4c db 38 42 49 4d 04 3a 00 00 00 00 00 e5 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 Data Ascii: Z%GZ%G:SHRM Recertification Provider CP-SCP Seal 2016_() Master8BIM%v(lCmL8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXTprintP
2024-04-18 17:22:58 UTC	8176	IN	Data Raw: b9 ae 5d b6 3d f5 64 e3 d5 93 49 26 ab 98 db 2b 24 10 4b 5c 37 b7 da ef 73 7d a5 11 0d b4 4b e5 f5 dd 67 d4 9f ad 2e aa c7 3f ec 1a 07 f2 77 e1 bc fe 8a ed 01 df 76 03 fe 97 f8 4f d1 dd ff 00 72 17 45 f5 e3 ea dd bd 62 8a ba 9f 4e 68 c8 be aa cb 2c a5 a4 7e 9a 87 7b db e8 be 76 7a b5 39 ce 7d 5f e9 59 6d 9f f0 6b ae 49 25 3e 73 81 fe 31 b3 ba 75 03 0f a9 e3 7d a2 fa 7d 9e a5 af 38 f7 40 ff 00 b9 35 5d 5b bf 4b fb d6 7e 7f ee 2a be 9f 5e fa f1 d4 d9 69 61 a7 11 b2 c1 73 41 14 51 59 20 db e8 d9 60 1f 6a cc b2 1b fc df fc 17 a9 e9 54 bd 35 f5 55 64 6f 63 5f 1c 6e 00 fe 55 2e 34 09 29 ae fe 9d 88 ee 9c 7a 61 64 62 1a 7e cf e9 8e d5 ed f4 b6 0f ec 2f 1d c9 39 1d 38 e5 f4 cb 9c 4b aa b5 ad c8 60 69 fd 23 f1 cb fe cd 63 74 ff 00 08 db 7d 56 7f c6 55 fe 8d 7b 5a Data Ascii: ]=dI&+$K\7s}Kg.?wvOrEbNh,~{vz9}_YmkI%>s1u}}8@5][K~*^iasAQY `jT5Udoc_nU.4)zadb~/98K`i#ct}VU{Z
2024-04-18 17:22:58 UTC	8192	IN	Data Raw: 60 88 18 83 fb c5 10 8e 80 82 88 14 a5 12 8c 4b f0 38 7c dd 40 53 f4 78 98 43 91 37 07 38 87 4f ed 24 28 08 74 92 06 58 0c 10 a0 23 d0 40 81 21 78 10 10 12 92 3a 49 06 27 00 52 94 40 43 81 28 72 27 29 4a 02 52 81 48 50 10 e9 24 0c b0 8e 38 1e 82 47 49 23 82 f5 f4 10 23 a0 83 06 2f 48 cb f2 30 0f 51 00 42 0a 3c 9c e0 22 62 00 84 78 0c c9 82 21 d8 41 e4 0b e0 79 81 12 c2 0e 3c 98 df 2c bf 23 7c c4 37 02 70 f1 30 75 17 f0 cd 05 01 03 9c 04 40 85 1e 66 79 4b f2 13 f0 23 30 62 5f 98 9f a4 4c 22 00 41 e0 d3 00 7b 08 5e 00 c3 fb c3 fb c5 f9 4b 06 f9 65 f9 1b e6 21 44 44 e3 e2 61 e0 bf 88 68 28 88 9c c6 e9 00 1e 40 c2 22 24 30 00 18 79 18 20 80 09 c4 04 48 70 00 1e 39 2c c8 ea 20 41 8f c8 41 0c 00 07 30 08 40 9c a2 52 18 02 3a 89 03 30 02 39 e4 7a c9 1c cb 8e 4a Data Ascii: `K8\|@SxC78O$(tX#@!x:I'R@C(r')JRHP$8GI##/H0QB<"bx!Ay<,#\|7p0u@fyK#0b_L"A{^Ke!DDah(@"$0y Hp9, AA0@R:09zJ
2024-04-18 17:22:58 UTC	8176	IN	Data Raw: 09 36 ef d3 4a 3b 56 dd 81 97 1c e2 06 96 f2 2a 05 e5 52 a0 8b ac 8c 6f 77 16 d2 dc 75 f7 03 18 71 e2 01 7b 5c 5e de 7b 71 ae 69 1c 2a de da 9b 7f 4d 16 66 01 47 69 a0 ca c0 a9 e0 47 0a 3c 8e 0d 8d 8d 8d ec 7d c0 f4 b7 d9 f9 9f 4e fa 67 d1 b9 b9 63 f0 f9 f9 b9 6f 7f 13 9b 96 fa fc 1b db b3 f0 37 3f f4 f2 7f 80 d4 bf ed d2 7e f2 1f c3 22 ba 63 1b a4 b2 f2 db af 32 33 95 81 33 bc 8e d1 16 25 da 60 4e 91 83 a0 d0 02 81 c3 73 00 c4 75 2e c7 bf bc ad b4 ed b8 48 21 8d 5d 91 44 92 2c 6c 66 b2 91 77 06 4d 09 bf c1 50 6e 05 8e 3e 37 55 e6 e4 49 85 b5 66 ce 97 f1 9a 35 92 34 51 61 33 02 39 91 03 69 76 f5 42 8f 5a d7 07 af f6 fc 39 b2 9b a0 e5 9b c2 c5 25 db 9c d8 38 94 c2 c7 50 2d c9 62 06 be ad c7 30 7a c1 8b 65 c1 cc d9 b6 e3 88 fc f8 f9 86 55 93 29 ec e2 f1 a4 Data Ascii: 6J;VRowuq{\^{qiMfGiG<}Ngco7?~"c233%`Nsu.H!]D,lfwMPn>7UIf54Qa39ivBZ9%8P-b0zeU)
2024-04-18 17:22:58 UTC	6227	IN	Data Raw: 74 2c d9 4c 2b 98 9a 15 8e c3 22 b0 37 87 af 5d ab f2 32 12 86 a7 4a 4e ae a1 10 67 20 dd e2 f1 6e 9d 9c a9 9c 8c c5 44 c0 d6 4a 0e 37 e4 0f dd bc 47 7d a8 41 e4 1c 42 d9 e6 22 c3 33 e5 86 8f 5d b0 d7 ec f0 07 95 98 a1 3d 96 96 34 05 be 2d 65 c0 5d 2e 75 c5 a3 f4 48 63 9b 6e f1 c2 39 e9 b9 91 2c 8d f2 91 1e b5 ad 9a 3b 0a 58 ab e4 29 d6 af 5f a1 f6 11 34 48 50 8b b8 44 bd 44 82 52 14 87 4c 85 39 35 21 8a 23 9a 33 5c 43 a6 6d ee f1 55 d0 ae 63 04 df 24 d9 ca 2b e4 db 8b 94 ab 74 a5 0e c1 de a8 49 36 88 97 91 2c 8b a6 e2 06 f2 32 66 b0 6d 37 b0 64 a2 32 b6 77 52 cf 83 b1 35 09 e5 ab 23 b0 4b 13 e2 18 02 cf ce 59 0c e2 b9 8f 6b 8b 4f 56 71 fc 6c 9c 62 af 1f 23 21 2a 25 6e e1 a9 d6 24 39 88 06 14 bc a9 9a 9b 80 ec b9 cd bc 96 23 95 e5 c5 b7 18 48 54 c3 16 e2 Data Ascii: t,L+"7]2JNg nDJ7G}AB"3]=4-e].uHcn9,;X)_4HPDDRL95!#3\CmUc$+tI6,2fm7d2wR5#KYkOVqlb#!*%n$9#HT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50006	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:58 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:58 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:22:58 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 8766570ceee97bd8-ATL
2024-04-18 17:22:58 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50007	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:59 UTC	690	OUT	GET /s/W/ws/tIyNfGcQ0b8hQ-eV/c/1713460978367 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS Sec-WebSocket-Key: iI7lWB30maAqF5b9mfHlxw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:22:59 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:59 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=MgIE2fzYSH1NsCblu6XmR0SN0AdF4+7ksMQ8RvU1y/AUdABTA2Tdco3rU5ReJj7LBc7AiAxzyiIrkB2zs2hm2ERj3ERzmZOnRJep1UbeJhzh8I4Uaj/dK6IVlO8CPFjtwBPkmaBZ3aGbWk/G6j8WeBob771qxQgf1spy37yHqFI5nfNOwcPCA4Ct48kQRQ==; Expires=Thu, 25 Apr 2024 17:22:59 GMT; Path=/ Set-Cookie: AWSALBCORS=MgIE2fzYSH1NsCblu6XmR0SN0AdF4+7ksMQ8RvU1y/AUdABTA2Tdco3rU5ReJj7LBc7AiAxzyiIrkB2zs2hm2ERj3ERzmZOnRJep1UbeJhzh8I4Uaj/dK6IVlO8CPFjtwBPkmaBZ3aGbWk/G6j8WeBob771qxQgf1spy37yHqFI5nfNOwcPCA4Ct48kQRQ==; Expires=Thu, 25 Apr 2024 17:22:59 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50008	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:59 UTC	1205	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460973142&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D61834&dt=Compliance%20Experts%20%E2%80%93%20traininng&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7226 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:59 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:22:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50009	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:22:59 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:22:59 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:00 UTC	770	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:22:59 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 87665712cb76b0f1-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JAMg81dIOgYryvHYA9tRB0UehfkaVPDeA6VirHr4i4NLkbQi8bpnRqa3NQ%2FlR%2FS1xgjQl%2B8t%2B8P5e6guc%2FGLzg%2Fhln2mjNVldr02uQmDSx0yByESAbhIPQf7hGw2nKZQPJnwe9jeAYRpvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=613d4e524605a6c884cc357dd8443e531c74bc72-1713460979; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87665712cb76b0f1-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50010	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:00 UTC	1269	OUT	GET /speakerprofile?speaker_id=63240 HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460977.24.0.0; titleName1234=titleName123
2024-04-18 17:23:00 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:05 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:00 UTC	7985	IN	Data Raw: 31 30 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1038<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:23:01 UTC	6845	IN	Data Raw: 6d 79 20 69 73 20 61 20 66 72 69 65 6e 64 6c 79 20 43 61 6e 61 64 69 61 6e 2c 20 50 72 65 73 69 64 65 6e 74 20 6f 66 20 68 65 72 20 6c 6f 63 61 6c 20 61 6d 61 74 65 75 72 20 74 68 65 61 74 72 65 20 67 72 6f 75 70 20 61 6e 64 20 6c 69 76 65 73 20 62 79 20 68 65 72 20 66 61 74 68 65 72 e2 80 99 73 20 73 61 79 69 6e 67 3a 20 e2 80 9c 77 6f 72 6b 20 68 61 72 64 2c 20 70 6c 61 79 20 66 61 69 72 2c 20 6c 69 76 65 20 63 6c 65 61 6e e2 80 9d 2e 20 46 6f 6c 6c 6f 77 20 68 65 72 20 6f 6e 20 4c 69 6e 6b 65 64 49 6e 20 61 6e 64 20 62 6f 6f 6b 20 68 65 72 20 66 6f 72 20 79 6f 75 72 20 6e 65 78 74 20 63 6f 72 70 6f 72 61 74 65 20 65 76 65 6e 74 20 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 69 6e 2f 64 72 61 6d 79 6c 62 72 69 63 65 2f Data Ascii: my is a friendly Canadian, President of her local amateur theatre group and lives by her fathers saying: work hard, play fair, live clean. Follow her on LinkedIn and book her for your next corporate event (https://www.linkedin.com/in/dramylbrice/
2024-04-18 17:23:01 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:01 UTC	5820	IN	Data Raw: 37 65 65 0d 0a 69 3e 0d 3c 6c 69 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 63 6c 6f 63 6b 2d 6f 22 3e 3c 2f 69 3e 0d 56 69 65 77 20 41 6e 79 74 69 6d 65 0d 3c 2f 6c 69 3e 0d 3c 21 2d 2d 3c 6c 69 3e 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e 0d 3c 2f 6c 69 3e 20 2d 2d 3e 0d 3c 6c 69 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 63 6c 6f 63 6b 2d 6f 22 3e 3c 2f 69 3e 0d 36 30 20 4d 69 6e 75 74 65 73 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e 0d 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 74 61 67 22 3e 3c 2f 69 3e 20 3c 73 74 72 6f 6e 67 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 30 30 30 30 3b 22 3e 24 31 35 30 2e 30 30 3c 2f 73 74 72 6f 6e 67 3e 0d 3c 2f 6c 69 3e 0d 3c 2f 75 6c 3e 0d 3c 2f 64 69 76 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c Data Ascii: 7eei><li><i class="fa fa-clock-o"></i>View Anytime</li>...<li></li><li></li> --><li><i class="fa fa-clock-o"></i>60 Minutes</li><li><i class="fa fa-tag"></i> <strong style="color:#ff0000;">$150.00</strong></li></ul></div><div class="col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50012	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:00 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:00 UTC	589	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:00 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 87665717e9516730-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WDGtKCUwBrjErA3PPkXEa0J2oGdqpSBjyfLNKUinvAcPvJLxSo1zquY9U9rk0D0fQXVK43y2sGmuuVBPTgimNauN6p9HGmUB%2BjDIrp1A%2BOtrblQ%2BqdOlmO%2FW%2FgE6gSBdPOg7o87XnQAlfA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87665717e9516730-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50014	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:01 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:01 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:01 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 8766571dca8a12e1-ATL
2024-04-18 17:23:01 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50016	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:01 UTC	690	OUT	GET /s/W/ws/Pv1-K-G1h93dn68m/c/1713460981052 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS Sec-WebSocket-Key: am6pbKvNvsIK77zQLozPEQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:02 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:02 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=Ik8DUrpycOivRfsE0l//1QxRDOGVBZj0ENKLvtCJcm8lto5TgitpBZwnbbaicQGa3Dui5s4TJiSuwCGUfsRD3bL9Av1AatUN/+B/vZKrZH60DCPhmr7HUxKNDPtKwRVUb6DaRH4RmSZUZDCDAvIXVi7NEAIEbiX/n5c7oSpi+L4woewZAXMbky1Ozk0+1w==; Expires=Thu, 25 Apr 2024 17:23:02 GMT; Path=/ Set-Cookie: AWSALBCORS=Ik8DUrpycOivRfsE0l//1QxRDOGVBZj0ENKLvtCJcm8lto5TgitpBZwnbbaicQGa3Dui5s4TJiSuwCGUfsRD3bL9Av1AatUN/+B/vZKrZH60DCPhmr7HUxKNDPtKwRVUb6DaRH4RmSZUZDCDAvIXVi7NEAIEbiX/n5c7oSpi+L4woewZAXMbky1Ozk0+1w==; Expires=Thu, 25 Apr 2024 17:23:02 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50017	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:03 UTC	1369	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460977180&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fmanaging-termination-of-employment-in-the-canadian-workplace%3A-new-developments-and-best-practices-206529live&dt=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7211 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:03 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50018	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:03 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:03 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:03 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:03 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8766572baf13675a-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wWup2VnASWjvsDr60%2F1FgERACQO%2FA3mdY3cyd%2Bc%2F%2FtyHNs%2FWLwAxjbjn7YVAYxeikIOZJuumPU%2F8PrAQsvUWt9rQoo2wOv9HhQ9%2FLUwcrSnsb7Iqj3rjUbD5V14GzCqI%2Fx0sxr4%2Bd7MzZw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=d94e03642135e10afa6e6e33c129f5cdc0125de3-1713460983; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8766572baf13675a-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50011	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:03 UTC	1319	OUT	GET /webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1; titleName1234=titleName123; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460980.21.0.0
2024-04-18 17:23:04 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:09 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:04 UTC	7985	IN	Data Raw: 66 61 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 Data Ascii: fa3<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" conte
2024-04-18 17:23:04 UTC	6698	IN	Data Raw: 2f 63 6f 6e 74 72 6f 6c 2f 64 65 74 61 69 6c 49 6d 61 67 65 3f 64 65 74 61 69 6c 3d 22 20 2b 20 64 65 74 61 69 6c 49 6d 61 67 65 55 72 6c 20 2b 20 22 22 2c 20 27 64 65 74 61 69 6c 49 6d 61 67 65 27 2c 20 27 34 30 30 27 2c 20 27 35 35 30 27 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 41 6d 74 28 74 6f 67 67 6c 65 29 20 7b 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 59 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 56 69 73 69 62 69 6c 69 74 79 28 22 61 64 64 5f 61 6d 6f 75 6e 74 22 2c 20 22 76 69 73 69 62 6c 65 22 29 3b 0d 0a 7d 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 4e 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 56 69 73 69 62 69 6c 69 74 79 28 22 61 64 64 5f 61 6d 6f 75 6e 74 22 2c 20 22 68 69 64 Data Ascii: /control/detailImage?detail=" + detailImageUrl + "", 'detailImage', '400', '550');}function toggleAmt(toggle) {if (toggle == 'Y') {changeObjectVisibility("add_amount", "visible");}if (toggle == 'N') {changeObjectVisibility("add_amount", "hid
2024-04-18 17:23:04 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:04 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 69 76 65 22 20 3e 0d 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 6d 75 6c 74 69 5f 4c 69 76 65 22 3e 0d 0a 3c 73 74 72 6f 6e 67 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 43 31 32 36 32 43 22 3e 0d 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 57 65 62 69 6e 61 72 50 72 6f 64 75 63 74 50 72 69 63 65 22 3e 24 32 35 30 2e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 74 72 6f 6e 67 3e 0d 0a 3c 62 3e 47 72 6f 75 70 20 41 74 74 65 6e 64 65 65 73 3c 2f 62 3e 0d 0a 3c 2f 6c 61 62 65 6c 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 63 6f 72 64 65 64 2d 76 65 72 73 69 6f 6e 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 Data Ascii: 1ff8ive" ><label for="multi_Live"><strong style="color:#C1262C"><span class="WebinarProductPrice">$250.</span></strong><b>Group Attendees</b></label></div></div></div><div class="recorded-version1"><div class="content"><i class="fa
2024-04-18 17:23:04 UTC	6	IN	Data Raw: 31 66 35 36 0d 0a Data Ascii: 1f56
2024-04-18 17:23:04 UTC	8022	IN	Data Raw: 20 74 72 61 6e 73 66 6f 72 6d 20 79 6f 75 72 20 6c 69 66 65 20 75 73 69 6e 67 20 72 65 61 6c 20 6c 69 66 65 20 73 74 6f 72 69 65 73 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 69 6e 63 6c 75 64 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 3c 62 72 20 2f 3e 3c 2f 70 3e 3c 75 6c 3e 3c 6c 69 3e 45 6d 70 6f 77 65 72 6d 65 6e 74 20 74 68 72 6f 75 67 68 20 6d 69 6e 64 73 65 74 20 6d 61 73 74 65 72 79 3c 2f 6c 69 3e 3c 6c 69 3e 43 75 6c 74 69 76 61 74 65 20 72 65 73 69 6c 69 65 6e 63 65 3c 2f 6c 69 3e 3c 6c 69 3e 41 63 68 69 65 76 65 20 67 72 65 61 74 65 72 20 66 75 6c 66 69 6c 6c 6d 65 6e 74 3c 2f 6c 69 3e 3c 6c 69 3e 54 61 6b 65 20 63 6f 6e 74 72 6f 6c 20 6f 66 20 79 6f 75 72 20 64 65 73 74 69 6e 79 3c 2f 6c 69 3e 3c 6c 69 3e 55 6e 6c 6f 63 6b 20 79 6f 75 72 20 Data Ascii: transform your life using real life stories. This would include the following:<br /></p><ul><li>Empowerment through mindset mastery</li><li>Cultivate resilience</li><li>Achieve greater fulfillment</li><li>Take control of your destiny</li><li>Unlock your
2024-04-18 17:23:04 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:04 UTC	3782	IN	Data Raw: 65 62 61 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6e 64 63 6f 6c 75 6d 6e 73 22 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 66 6f 6f 74 65 72 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 74 6f 70 2d 61 72 65 61 20 77 6f 77 20 66 61 64 65 49 6e 55 70 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 55 70 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 37 20 63 6f 6c 2d 6d 64 2d 35 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 Data Ascii: eba</div><div class="endcolumns"></div></div><footer><div class="footer-top-area wow fadeInUp" style="visibility: visible; animation-name: fadeInUp;"><div class="container"><div class=""><div class="col-xs-12 col-sm-7 col-md-5"><div class="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50019	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:04 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:04 UTC	589	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:04 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 8766572f7a75b042-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rNcH%2BylVEaXE1VpTJOiPFwRpSLU60nBYJYlJAvc6NASNMxHy%2FQ2lwYGjtUZAalqmC1EWYRuYiil1QabN2ESJu5jiLi41aQNAxFb60NrTPbe1RAxkdVVrn%2Bd%2F4%2Fr8XMfFQyDx9i6H0uSb3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8766572f7a75b042-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50020	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:04 UTC	1348	OUT	GET /images/detailpage_webinar_img/206534.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/webinar/power-of-perspective-and-attitude:-how-to-transform-your-life--206534live Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=1; titleName1234=titleName123; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460980.21.0.0
2024-04-18 17:23:04 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:09 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"52307-1708961457000" Last-Modified: Mon, 26 Feb 2024 15:30:57 GMT Content-Type: image/jpeg Content-Length: 52307 Connection: close
2024-04-18 17:23:04 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 99 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:23:04 UTC	258	IN	Data Raw: d3 aa 40 26 05 22 0b ee 09 66 1e ee 61 14 ec f9 52 ba 68 e7 d8 c8 dd e2 b6 67 99 d4 ca 84 8e 10 a7 42 9f b3 5d 0e 56 b1 ca 6b 0e 48 ee df 65 a2 a1 cb dd 8a 85 d3 90 7b 45 ef 17 f4 25 79 7d dd b9 9c 3d 4e 9e bc c3 65 b4 70 8d 45 36 57 24 57 10 e9 b7 ba c6 c2 02 7c 89 57 88 43 2e 14 d8 69 99 0c 87 0d b9 95 4b 0a ac 41 55 0d 4c f3 39 70 6d e0 34 f2 21 74 57 3e da 2f a6 f9 51 66 e6 32 5d ee ba e7 87 61 8f 85 52 44 5d b8 27 6b cd 4d 2d 47 4e 88 d0 b4 48 85 8a d5 2b 25 98 56 ee 0a 0d b4 a2 89 b1 17 e6 ae 8a 4b 9b 62 bd 31 b1 35 24 4c 17 14 ec d7 7d 1e 6e ca ab ef b2 20 e1 0f 91 77 6b a2 1c 98 22 a0 aa 59 53 6d 52 0a 18 2e d4 eb a4 02 e2 be 4a 01 40 ca aa aa 7f 35 30 11 55 33 2a 8f 47 55 00 74 52 d9 59 12 c3 c8 a1 c4 79 b1 70 d4 1b 55 4d ef 25 32 76 b3 d2 fa 4a Data Ascii: @&"faRhgB]VkHe{E%y}=NepE6W$W\|WC.iKAUL9pm4!tW>/Qf2]aRD]'kM-GNH+%VKb15$L}n wk"YSmR.J@50U3*GUtRYypUM%2vJ
2024-04-18 17:23:04 UTC	8192	IN	Data Raw: 5a e3 47 82 9d b0 c5 d7 b1 15 c4 c8 44 b7 8b d6 1d ef d8 b5 d1 57 99 be 7c a7 d8 6f 04 c7 1c 57 1d d2 aa 4a 33 1e 0a 63 43 41 4f 65 00 99 2d 00 99 74 53 41 64 83 95 a4 79 36 bc d7 d2 02 2d 01 d4 5a 00 c2 8a 5d 14 02 c2 d2 27 4d 2b 60 e6 3b 0f 3a e2 34 c3 44 eb 8b d9 00 12 55 5f 76 83 2c 96 de 5c f3 02 e3 82 c2 d3 77 27 85 7b 2e 24 57 50 3f 98 43 96 b0 b8 47 df ec 57 7d 3d 72 3b 65 ea 29 42 b8 36 20 67 18 d4 73 08 ba 39 87 36 52 f4 4a 81 84 49 ba 05 b1 12 b0 61 e8 0e 5e 7c 2c db b5 1e 97 b6 6a 0b 85 f9 e6 12 e2 ca 48 18 6c 30 28 40 25 d9 1e 21 38 79 b7 7d 5a 61 85 93 58 7c 3b 72 ff 00 4a 68 6b dd e4 24 5c 26 4c 81 0d e7 63 ac 87 81 01 1d cb f8 7b ad b6 1d ec 37 68 33 47 b4 f2 4b 95 71 59 69 c6 b4 fb 2e aa 8a 1e 32 0d d7 f1 fe 63 86 34 05 3b e2 23 4d 69 bb Data Ascii: ZGDW\|oWJ3cCAOe-tSAdy6-Z]'M+`;:4DU_v,\w'{.$WP?CGW}=r;e)B6 gs96RJIa^\|,jHl0(@%!8y}ZaX\|;rJhk$\&Lc{7h3GKqYi.2c4;#Mi
2024-04-18 17:23:04 UTC	8176	IN	Data Raw: a5 46 ba 6a 39 52 63 b8 c1 04 78 a0 08 e8 10 2a 8b a6 e9 66 1c dd df c2 ac 6b d2 54 19 e1 5e 75 dc 4d de 67 6a 57 91 71 c2 6b 8c 8f fb 8c 1b fc ba 18 f5 b7 25 dc 27 39 55 a5 c9 7a 7c 0b 69 f4 77 68 0b a5 68 53 f9 c3 7c fd 13 96 3a 8e e0 85 94 d2 19 c7 69 7c 87 27 fc 3b 65 f4 9d 4a 03 c2 56 c8 87 2e e9 0e 28 f6 a4 be db 5f 48 c4 7e f5 28 7d 1d 44 c1 30 4d 88 94 c0 28 68 50 1e 6d f8 be 98 bc 7d 2f 0d 17 62 0c c7 4c 7d a2 64 47 ec ad 2d 83 cf d1 04 94 91 51 3a 2b 9e c6 4d ac 94 6d 8c 49 36 50 d7 34 a5 e2 15 b3 57 da 6e d2 c0 ce 1c 09 ac 4a 7d b6 90 54 c8 58 75 1c ca 39 88 07 bb e9 53 07 a1 6e df 15 16 a8 ec f1 20 58 1f 91 8f 67 8e f8 33 f6 45 ea 7e 45 b5 58 f7 34 f9 b3 70 e6 0c 8b 79 49 82 d4 06 6d c8 f2 30 db 6e 13 84 bc 7c 99 b3 11 64 ff 00 56 9d da 59 91 Data Ascii: Fj9Rcx*fkT^uMgjWqk%'9Uz\|iwhhS\|:i\|';eJV.(_H~(}D0M(hPm}/bL}dG-Q:+MmI6P4WnJ}TXu9Sn Xg3E~EX4pyIm0n\|dVY
2024-04-18 17:23:04 UTC	8192	IN	Data Raw: d2 69 86 7e 87 ba 09 4b 04 99 7b a3 97 f1 7c 2e 85 d3 cc 61 82 85 ba 2e 6f 68 9a 12 2f ad 5d 15 69 f6 a4 b5 bd 76 d3 d7 3b 5b 2e 8b 0e cf 88 f4 50 78 93 14 02 7c 09 bc d9 7d 5c d4 d2 18 f4 2f 85 e8 42 c2 35 36 fe e1 e3 da 46 23 8b 7f 58 9c 3f b3 51 f8 da 26 a4 e4 5e 99 b3 46 b4 42 b5 cb 95 e3 ae 77 06 e2 71 e4 10 38 82 04 06 e3 85 c3 11 67 fd 5a 77 a9 a3 58 4e 41 f8 79 b2 b6 89 e3 2e f2 5f f4 b8 2d 83 3f 6b 8d 4f 42 cd 59 f7 c4 06 84 d3 ba 4a c9 6a 5b 5a be 53 26 c9 36 cc df 73 3f e1 34 1b db a2 20 3d a2 4a 5b 9a b0 a7 69 c7 1e 6e 00 36 29 82 aa 61 8d 72 f0 e3 2e 8b 5f 92 7d 96 63 36 19 9e 54 25 a8 f6 37 e2 14 d7 a8 49 17 f8 50 47 14 4d 95 c9 a6 93 0a 6d 98 aa 39 eb ec 0b b7 e1 aa a0 a2 d7 7c 5a 61 cd 18 b1 46 34 ad b9 c5 17 45 c2 4e bd 8b 53 af 6a 26 4d Data Ascii: i~K{\|.a.oh/]iv;[.Px\|}\/B56F#X?Q&^FBwq8gZwXNAy._-?kOBYJj[ZS&6s?4 =J[in6)ar._}c6T%7IPGMm9\|ZaF4ENSj&M
2024-04-18 17:23:04 UTC	8176	IN	Data Raw: f6 1b a7 da 7f a2 46 2c 08 51 51 52 34 76 a3 a2 f6 91 b0 10 fb 35 48 d5 08 5b b3 79 2f 4d c6 12 9d 97 90 ad c1 30 14 0f da 14 0c 40 51 96 f8 0a 19 8b 05 1c 64 fc ac 33 4d 38 e9 a3 6d 01 38 e2 f6 40 53 15 ac c8 e0 eb 2c 3c f3 c0 cb 2d 93 af 38 b9 41 b1 4c 49 4b d1 11 a3 26 f8 d3 d2 b9 7f ab a2 c2 29 af 40 54 65 b1 cc 78 18 19 a2 79 72 89 66 a8 c6 dc ba e7 eb ad c7 3e bf aa f3 a2 ec ce da f4 44 a9 a3 3e 2d be 5c e2 07 02 e2 4a 26 2d 34 68 19 41 cc d9 07 36 d2 d9 e5 54 ae 7d b7 f2 f5 fa 9a 22 9a f2 cd b5 13 ef 3f 79 92 6e cd fd 40 b3 64 f1 88 22 22 e0 88 e5 c4 44 2b b2 8f 07 b5 3e 51 d5 49 72 e7 c0 56 34 28 01 40 0a 00 50 02 80 14 00 a0 05 00 28 01 40 0a 01 8d d9 be 24 71 4c 31 c0 d1 7e a9 57 9f f6 1e cf a0 fa 18 ff 00 94 d1 96 d0 7a 52 bc 08 8c cb ee ad 38 Data Ascii: F,QQR4v5H[y/M0@Qd3M8m8@S,<-8ALIK&)@Texyrf>D>-\J&-4hA6T}"?yn@d""D+>QIrV4(@P(@$qL1~WzR8
2024-04-18 17:23:04 UTC	8192	IN	Data Raw: 97 d6 ae 05 bf c4 18 ef be b8 e6 5f 46 b9 b6 ca d4 58 35 0d c1 22 db 9c 44 d8 b8 52 c3 65 88 5d 64 2b 8f 19 2a f4 ae 35 d7 ad 19 4d f2 d6 37 1e ff 00 b5 31 40 1c 69 76 b6 aa 55 74 24 14 07 68 0e a5 01 da c6 b4 8e 4d a7 f8 8b 92 fa 8d fd a5 ae ce 9f bb e7 fe eb da 1a 8d 77 cf bb e6 27 fb 92 da 41 92 7b 54 da 41 3f f3 6c 9f ba 26 85 f7 6a 7b e7 10 eb fa fa e7 6b 63 b9 58 d5 9d 66 1a a6 74 96 98 b7 c1 8b c3 14 22 de 42 df cc 45 8e ea 0f e2 2f 7a b8 2b e6 1f 4b bb 44 46 e8 d9 eb d9 19 a5 6e f0 25 d9 b5 45 f2 60 91 42 7e 53 b9 c1 36 1a b0 2d 08 88 f6 bb 59 57 d2 a2 d0 35 6c a5 f9 5b fc 15 ad 39 2b 4f 5c 39 85 68 5b 14 22 87 09 a1 71 4c 1c 4d aa 62 d9 96 3d a3 f3 77 aa f7 89 e0 f3 74 5e b3 da f1 f8 7e 4b d5 bf 52 48 ba ea cb c5 85 d6 5b f0 51 1b 44 17 47 14 32 Data Ascii: _FX5"DRe]d+*5M71@ivUt$hMw'A{TA?l&j{kcXft"BE/z+KDFn%E`B~S6-YW5l[9+O\9h["qLMb=wt^~KRH[QDG2
2024-04-18 17:23:04 UTC	3195	IN	Data Raw: b3 91 37 06 ee 4d 39 1d d2 71 1d 61 97 91 50 c5 a2 7d ac b9 84 bb 39 89 14 bf 6d 17 89 f8 db 82 17 48 b6 9b 2e 8e b2 5e a7 d9 5e d4 13 6e 79 49 a8 b1 c8 d8 61 a2 7c 78 9b dc 31 32 c7 a3 b5 8e 62 c6 b6 ad 93 5f 88 71 b9 48 d1 16 06 96 19 c4 29 0c 18 4a 06 85 78 51 8c 81 9f c2 22 ee a6 6c 44 7e 4a 69 15 55 fe 2c 3f 50 7e 56 94 88 c1 92 83 71 1e 75 23 a2 ec 53 22 01 cd 97 cb 95 29 e6 49 10 b7 72 9d e8 ae 72 12 0b 63 68 2b b3 d1 25 38 37 2b 73 4e 1b 2e e7 f1 44 e6 7f c3 1c c5 95 b2 02 cb e4 4f 35 11 22 61 3f 32 ed 21 bd 1d 31 98 ba 6d cb 6d b1 e3 44 37 8d e5 5c a7 98 77 b8 6e 0e 6c bb a8 39 bb 38 d2 cc 9a 20 f6 d9 66 0d 35 66 8f 72 1b 7b d7 6b d4 91 cc cb 6d 36 46 0c 29 26 6d b9 47 67 6b a7 a4 ba bc b4 56 a2 d6 57 a3 4c be bb ad 2d 73 ef ec 3c c7 16 48 20 2b Data Ascii: 7M9qaP}9mH.^^nyIa\|x12b_qH)JxQ"lD~JiU,?P~Vqu#S")Irrch+%87+sN.DO5"a?2!1mmD7\wnl98 f5fr{km6F)&mGgkVWL-s<H +

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50022	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:05 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:05 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:05 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 87665734b921b0d9-ATL
2024-04-18 17:23:05 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50024	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:05 UTC	1315	OUT	GET /images/detailpage_webinar_img/206534.jpg HTTP/1.1 Host: www.traininng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=E42CCF0981ECD0C23B02BCD7EA063422.jvm1; JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460980.21.0.0; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=2
2024-04-18 17:23:05 UTC	266	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:10 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k ETag: W/"52307-1708961457000" Last-Modified: Mon, 26 Feb 2024 15:30:57 GMT Content-Type: image/jpeg Content-Length: 52307 Connection: close
2024-04-18 17:23:05 UTC	7926	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 99 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-18 17:23:05 UTC	258	IN	Data Raw: d3 aa 40 26 05 22 0b ee 09 66 1e ee 61 14 ec f9 52 ba 68 e7 d8 c8 dd e2 b6 67 99 d4 ca 84 8e 10 a7 42 9f b3 5d 0e 56 b1 ca 6b 0e 48 ee df 65 a2 a1 cb dd 8a 85 d3 90 7b 45 ef 17 f4 25 79 7d dd b9 9c 3d 4e 9e bc c3 65 b4 70 8d 45 36 57 24 57 10 e9 b7 ba c6 c2 02 7c 89 57 88 43 2e 14 d8 69 99 0c 87 0d b9 95 4b 0a ac 41 55 0d 4c f3 39 70 6d e0 34 f2 21 74 57 3e da 2f a6 f9 51 66 e6 32 5d ee ba e7 87 61 8f 85 52 44 5d b8 27 6b cd 4d 2d 47 4e 88 d0 b4 48 85 8a d5 2b 25 98 56 ee 0a 0d b4 a2 89 b1 17 e6 ae 8a 4b 9b 62 bd 31 b1 35 24 4c 17 14 ec d7 7d 1e 6e ca ab ef b2 20 e1 0f 91 77 6b a2 1c 98 22 a0 aa 59 53 6d 52 0a 18 2e d4 eb a4 02 e2 be 4a 01 40 ca aa aa 7f 35 30 11 55 33 2a 8f 47 55 00 74 52 d9 59 12 c3 c8 a1 c4 79 b1 70 d4 1b 55 4d ef 25 32 76 b3 d2 fa 4a Data Ascii: @&"faRhgB]VkHe{E%y}=NepE6W$W\|WC.iKAUL9pm4!tW>/Qf2]aRD]'kM-GNH+%VKb15$L}n wk"YSmR.J@50U3*GUtRYypUM%2vJ
2024-04-18 17:23:05 UTC	8192	IN	Data Raw: 5a e3 47 82 9d b0 c5 d7 b1 15 c4 c8 44 b7 8b d6 1d ef d8 b5 d1 57 99 be 7c a7 d8 6f 04 c7 1c 57 1d d2 aa 4a 33 1e 0a 63 43 41 4f 65 00 99 2d 00 99 74 53 41 64 83 95 a4 79 36 bc d7 d2 02 2d 01 d4 5a 00 c2 8a 5d 14 02 c2 d2 27 4d 2b 60 e6 3b 0f 3a e2 34 c3 44 eb 8b d9 00 12 55 5f 76 83 2c 96 de 5c f3 02 e3 82 c2 d3 77 27 85 7b 2e 24 57 50 3f 98 43 96 b0 b8 47 df ec 57 7d 3d 72 3b 65 ea 29 42 b8 36 20 67 18 d4 73 08 ba 39 87 36 52 f4 4a 81 84 49 ba 05 b1 12 b0 61 e8 0e 5e 7c 2c db b5 1e 97 b6 6a 0b 85 f9 e6 12 e2 ca 48 18 6c 30 28 40 25 d9 1e 21 38 79 b7 7d 5a 61 85 93 58 7c 3b 72 ff 00 4a 68 6b dd e4 24 5c 26 4c 81 0d e7 63 ac 87 81 01 1d cb f8 7b ad b6 1d ec 37 68 33 47 b4 f2 4b 95 71 59 69 c6 b4 fb 2e aa 8a 1e 32 0d d7 f1 fe 63 86 34 05 3b e2 23 4d 69 bb Data Ascii: ZGDW\|oWJ3cCAOe-tSAdy6-Z]'M+`;:4DU_v,\w'{.$WP?CGW}=r;e)B6 gs96RJIa^\|,jHl0(@%!8y}ZaX\|;rJhk$\&Lc{7h3GKqYi.2c4;#Mi
2024-04-18 17:23:05 UTC	8176	IN	Data Raw: a5 46 ba 6a 39 52 63 b8 c1 04 78 a0 08 e8 10 2a 8b a6 e9 66 1c dd df c2 ac 6b d2 54 19 e1 5e 75 dc 4d de 67 6a 57 91 71 c2 6b 8c 8f fb 8c 1b fc ba 18 f5 b7 25 dc 27 39 55 a5 c9 7a 7c 0b 69 f4 77 68 0b a5 68 53 f9 c3 7c fd 13 96 3a 8e e0 85 94 d2 19 c7 69 7c 87 27 fc 3b 65 f4 9d 4a 03 c2 56 c8 87 2e e9 0e 28 f6 a4 be db 5f 48 c4 7e f5 28 7d 1d 44 c1 30 4d 88 94 c0 28 68 50 1e 6d f8 be 98 bc 7d 2f 0d 17 62 0c c7 4c 7d a2 64 47 ec ad 2d 83 cf d1 04 94 91 51 3a 2b 9e c6 4d ac 94 6d 8c 49 36 50 d7 34 a5 e2 15 b3 57 da 6e d2 c0 ce 1c 09 ac 4a 7d b6 90 54 c8 58 75 1c ca 39 88 07 bb e9 53 07 a1 6e df 15 16 a8 ec f1 20 58 1f 91 8f 67 8e f8 33 f6 45 ea 7e 45 b5 58 f7 34 f9 b3 70 e6 0c 8b 79 49 82 d4 06 6d c8 f2 30 db 6e 13 84 bc 7c 99 b3 11 64 ff 00 56 9d da 59 91 Data Ascii: Fj9Rcx*fkT^uMgjWqk%'9Uz\|iwhhS\|:i\|';eJV.(_H~(}D0M(hPm}/bL}dG-Q:+MmI6P4WnJ}TXu9Sn Xg3E~EX4pyIm0n\|dVY
2024-04-18 17:23:05 UTC	8192	IN	Data Raw: d2 69 86 7e 87 ba 09 4b 04 99 7b a3 97 f1 7c 2e 85 d3 cc 61 82 85 ba 2e 6f 68 9a 12 2f ad 5d 15 69 f6 a4 b5 bd 76 d3 d7 3b 5b 2e 8b 0e cf 88 f4 50 78 93 14 02 7c 09 bc d9 7d 5c d4 d2 18 f4 2f 85 e8 42 c2 35 36 fe e1 e3 da 46 23 8b 7f 58 9c 3f b3 51 f8 da 26 a4 e4 5e 99 b3 46 b4 42 b5 cb 95 e3 ae 77 06 e2 71 e4 10 38 82 04 06 e3 85 c3 11 67 fd 5a 77 a9 a3 58 4e 41 f8 79 b2 b6 89 e3 2e f2 5f f4 b8 2d 83 3f 6b 8d 4f 42 cd 59 f7 c4 06 84 d3 ba 4a c9 6a 5b 5a be 53 26 c9 36 cc df 73 3f e1 34 1b db a2 20 3d a2 4a 5b 9a b0 a7 69 c7 1e 6e 00 36 29 82 aa 61 8d 72 f0 e3 2e 8b 5f 92 7d 96 63 36 19 9e 54 25 a8 f6 37 e2 14 d7 a8 49 17 f8 50 47 14 4d 95 c9 a6 93 0a 6d 98 aa 39 eb ec 0b b7 e1 aa a0 a2 d7 7c 5a 61 cd 18 b1 46 34 ad b9 c5 17 45 c2 4e bd 8b 53 af 6a 26 4d Data Ascii: i~K{\|.a.oh/]iv;[.Px\|}\/B56F#X?Q&^FBwq8gZwXNAy._-?kOBYJj[ZS&6s?4 =J[in6)ar._}c6T%7IPGMm9\|ZaF4ENSj&M
2024-04-18 17:23:05 UTC	8176	IN	Data Raw: f6 1b a7 da 7f a2 46 2c 08 51 51 52 34 76 a3 a2 f6 91 b0 10 fb 35 48 d5 08 5b b3 79 2f 4d c6 12 9d 97 90 ad c1 30 14 0f da 14 0c 40 51 96 f8 0a 19 8b 05 1c 64 fc ac 33 4d 38 e9 a3 6d 01 38 e2 f6 40 53 15 ac c8 e0 eb 2c 3c f3 c0 cb 2d 93 af 38 b9 41 b1 4c 49 4b d1 11 a3 26 f8 d3 d2 b9 7f ab a2 c2 29 af 40 54 65 b1 cc 78 18 19 a2 79 72 89 66 a8 c6 dc ba e7 eb ad c7 3e bf aa f3 a2 ec ce da f4 44 a9 a3 3e 2d be 5c e2 07 02 e2 4a 26 2d 34 68 19 41 cc d9 07 36 d2 d9 e5 54 ae 7d b7 f2 f5 fa 9a 22 9a f2 cd b5 13 ef 3f 79 92 6e cd fd 40 b3 64 f1 88 22 22 e0 88 e5 c4 44 2b b2 8f 07 b5 3e 51 d5 49 72 e7 c0 56 34 28 01 40 0a 00 50 02 80 14 00 a0 05 00 28 01 40 0a 01 8d d9 be 24 71 4c 31 c0 d1 7e a9 57 9f f6 1e cf a0 fa 18 ff 00 94 d1 96 d0 7a 52 bc 08 8c cb ee ad 38 Data Ascii: F,QQR4v5H[y/M0@Qd3M8m8@S,<-8ALIK&)@Texyrf>D>-\J&-4hA6T}"?yn@d""D+>QIrV4(@P(@$qL1~WzR8
2024-04-18 17:23:05 UTC	8192	IN	Data Raw: 97 d6 ae 05 bf c4 18 ef be b8 e6 5f 46 b9 b6 ca d4 58 35 0d c1 22 db 9c 44 d8 b8 52 c3 65 88 5d 64 2b 8f 19 2a f4 ae 35 d7 ad 19 4d f2 d6 37 1e ff 00 b5 31 40 1c 69 76 b6 aa 55 74 24 14 07 68 0e a5 01 da c6 b4 8e 4d a7 f8 8b 92 fa 8d fd a5 ae ce 9f bb e7 fe eb da 1a 8d 77 cf bb e6 27 fb 92 da 41 92 7b 54 da 41 3f f3 6c 9f ba 26 85 f7 6a 7b e7 10 eb fa fa e7 6b 63 b9 58 d5 9d 66 1a a6 74 96 98 b7 c1 8b c3 14 22 de 42 df cc 45 8e ea 0f e2 2f 7a b8 2b e6 1f 4b bb 44 46 e8 d9 eb d9 19 a5 6e f0 25 d9 b5 45 f2 60 91 42 7e 53 b9 c1 36 1a b0 2d 08 88 f6 bb 59 57 d2 a2 d0 35 6c a5 f9 5b fc 15 ad 39 2b 4f 5c 39 85 68 5b 14 22 87 09 a1 71 4c 1c 4d aa 62 d9 96 3d a3 f3 77 aa f7 89 e0 f3 74 5e b3 da f1 f8 7e 4b d5 bf 52 48 ba ea cb c5 85 d6 5b f0 51 1b 44 17 47 14 32 Data Ascii: _FX5"DRe]d+*5M71@ivUt$hMw'A{TA?l&j{kcXft"BE/z+KDFn%E`B~S6-YW5l[9+O\9h["qLMb=wt^~KRH[QDG2
2024-04-18 17:23:05 UTC	3195	IN	Data Raw: b3 91 37 06 ee 4d 39 1d d2 71 1d 61 97 91 50 c5 a2 7d ac b9 84 bb 39 89 14 bf 6d 17 89 f8 db 82 17 48 b6 9b 2e 8e b2 5e a7 d9 5e d4 13 6e 79 49 a8 b1 c8 d8 61 a2 7c 78 9b dc 31 32 c7 a3 b5 8e 62 c6 b6 ad 93 5f 88 71 b9 48 d1 16 06 96 19 c4 29 0c 18 4a 06 85 78 51 8c 81 9f c2 22 ee a6 6c 44 7e 4a 69 15 55 fe 2c 3f 50 7e 56 94 88 c1 92 83 71 1e 75 23 a2 ec 53 22 01 cd 97 cb 95 29 e6 49 10 b7 72 9d e8 ae 72 12 0b 63 68 2b b3 d1 25 38 37 2b 73 4e 1b 2e e7 f1 44 e6 7f c3 1c c5 95 b2 02 cb e4 4f 35 11 22 61 3f 32 ed 21 bd 1d 31 98 ba 6d cb 6d b1 e3 44 37 8d e5 5c a7 98 77 b8 6e 0e 6c bb a8 39 bb 38 d2 cc 9a 20 f6 d9 66 0d 35 66 8f 72 1b 7b d7 6b d4 91 cc cb 6d 36 46 0c 29 26 6d b9 47 67 6b a7 a4 ba bc b4 56 a2 d6 57 a3 4c be bb ad 2d 73 ef ec 3c c7 16 48 20 2b Data Ascii: 7M9qaP}9mH.^^nyIa\|x12b_qH)JxQ"lD~JiU,?P~Vqu#S")Irrch+%87+sN.DO5"a?2!1mmD7\wnl98 f5fr{km6F)&mGgkVWL-s<H +

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50025	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:05 UTC	690	OUT	GET /s/W/ws/yK5ZszCXro6Sjjxj/c/1713460984847 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS Sec-WebSocket-Key: lf9GANZ9lxs+Lsr6ZfW4gw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:05 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:05 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=426uiD+6v44MXYF0uVnpNR9f4XtTpwaHxaVeAxi58YCTcvwZdFfr38cOXaCpdrd1ZcDRXtpwEClVTAVsvQtzs8NYYUWfUYaBt4/tAQG7tK5hSzk8PJaL8DiXgWvkhYzmxplPWu/IxfcDMrhc4ehX6ielDeH4S8HpWrRLRC2iTevrleVUD2cwDpGbTiorGA==; Expires=Thu, 25 Apr 2024 17:23:05 GMT; Path=/ Set-Cookie: AWSALBCORS=426uiD+6v44MXYF0uVnpNR9f4XtTpwaHxaVeAxi58YCTcvwZdFfr38cOXaCpdrd1ZcDRXtpwEClVTAVsvQtzs8NYYUWfUYaBt4/tAQG7tK5hSzk8PJaL8DiXgWvkhYzmxplPWu/IxfcDMrhc4ehX6ielDeH4S8HpWrRLRC2iTevrleVUD2cwDpGbTiorGA==; Expires=Thu, 25 Apr 2024 17:23:05 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50028	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:06 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:06 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:06 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:06 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8766573d7c5953c3-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C8cb5d3IcznmE3saYlNJX2pa7KILbq6nIfkjvJkuqWKW0q4rF%2B%2FhAh%2BRDmuoQQioFuzhH5l3%2BkF8sUbq97gIqAfwX%2Fh%2FJjes0tMHQc3%2FKgSt%2BmWfQnfPJkF1xB%2B4xKJxXHTgBn4ZEEt7MQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=8ec0eeef4a3475f8730919e5d638a80edd3bd942-1713460986; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8766573d7c5953c3-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50027	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:06 UTC	1555	OUT	GET /speakerprofile?speaker_id=63494 HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=2; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460984.17.0.0
2024-04-18 17:23:06 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:11 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:06 UTC	7985	IN	Data Raw: 31 30 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1038<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:23:07 UTC	4600	IN	Data Raw: 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 7d 20 61 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 74 72 75 65 22 5d 3a 3a 62 65 66 6f 72 65 20 7b 63 6f 6e 74 65 6e 74 3a 27 27 21 69 6d 70 6f 72 74 61 6e 74 7d 20 61 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 5d 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 21 69 6d 70 6f 72 74 61 6e 74 7d 3c 2f 73 74 79 6c 65 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 62 61 62 6c 65 22 20 69 64 3d 22 74 61 62 73 2d 39 36 39 36 39 33 22 Data Ascii: display:inline-block !important} a[aria-expanded="true"]::before {content:''!important} a[aria-expanded="false"]::before{content:''!important}</style><div class="col-md-12"><div class="row"><div class="col-md-12"><div class="tabbable" id="tabs-969693"
2024-04-18 17:23:07 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:07 UTC	3783	IN	Data Raw: 65 62 62 0d 0a 0d 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6e 64 63 6f 6c 75 6d 6e 73 22 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 66 6f 6f 74 65 72 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 74 6f 70 2d 61 72 65 61 20 77 6f 77 20 66 61 64 65 49 6e 55 70 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 55 70 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 37 20 63 6f 6c 2d 6d 64 2d 35 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: ebb</div><div class="endcolumns"></div></div><footer><div class="footer-top-area wow fadeInUp" style="visibility: visible; animation-name: fadeInUp;"><div class="container"><div class=""><div class="col-xs-12 col-sm-7 col-md-5"><div class=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50029	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:06 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:07 UTC	593	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:07 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876657418a974587-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EG9Z%2BRNejArsRnzyPwvoof2QRhlFOzZdaYjxUzM9NcuIAWTvFZBOKEWOgCmknG6iJ%2FSaQk8BQAov%2FdF8NBFdcMDI0m%2FAixG3Rn1%2BnFy%2F50UyztqZjHhzrF9KbxEeapN9LQU%2BVhRvfRQKqw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876657418a974587-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50032	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:07 UTC	1205	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460980854&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D63240&dt=Compliance%20Experts%20%E2%80%93%20traininng&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7219 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:07 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50031	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:07 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:07 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:07 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 87665743bb6d673b-ATL
2024-04-18 17:23:07 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50034	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:07 UTC	690	OUT	GET /s/W/ws/6UGvo4Q26W1iBuza/c/1713460987110 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS Sec-WebSocket-Key: gqh/CHMK1svYTwllf7PYGA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:08 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:08 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=EsyUHMukxX+zUnnbfxRNcX+AV7hvwHlFAz+7AUyHJwNijgRURTRWhKQ2fgDF9hO/h1dXI8PlztLzkgQfsn9LOEIE7nz9koe3taPvbocwv8gna83W+xqYR+DDF76azU9LLXv8pnw3+T/ELXjMF4nhg6TaqvB6t0BveO0ZCZiMjBavwb6SbvoZ829kLzXb8w==; Expires=Thu, 25 Apr 2024 17:23:08 GMT; Path=/ Set-Cookie: AWSALBCORS=EsyUHMukxX+zUnnbfxRNcX+AV7hvwHlFAz+7AUyHJwNijgRURTRWhKQ2fgDF9hO/h1dXI8PlztLzkgQfsn9LOEIE7nz9koe3taPvbocwv8gna83W+xqYR+DDF76azU9LLXv8pnw3+T/ELXjMF4nhg6TaqvB6t0BveO0ZCZiMjBavwb6SbvoZ829kLzXb8w==; Expires=Thu, 25 Apr 2024 17:23:08 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50036	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:09 UTC	690	OUT	GET /s/W/ws/tIyNfGcQ0b8hQ-eV/c/1713460988623 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS Sec-WebSocket-Key: 0P8gBn5HnpMc8Xu+PrL6Gw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:09 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:09 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=hc9TugVJcmHAphcFCuLACr6e0haUeskgxJyOa9u2bRggQOr/t0uEFvPYTHJdAO1mBtit7efFexJ0ARwrPILHcM0KRjWM6x9KH21LAWy0AGBO1lzosyloWcLpqnw4lzOKw4y6DoJkpjkcM8/EQRVKZbLJb3k5GseYG/rEYvi5XXHjaE5NDC5jik08zsfpbg==; Expires=Thu, 25 Apr 2024 17:23:09 GMT; Path=/ Set-Cookie: AWSALBCORS=hc9TugVJcmHAphcFCuLACr6e0haUeskgxJyOa9u2bRggQOr/t0uEFvPYTHJdAO1mBtit7efFexJ0ARwrPILHcM0KRjWM6x9KH21LAWy0AGBO1lzosyloWcLpqnw4lzOKw4y6DoJkpjkcM8/EQRVKZbLJb3k5GseYG/rEYvi5XXHjaE5NDC5jik08zsfpbg==; Expires=Thu, 25 Apr 2024 17:23:09 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50037	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:09 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:09 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:10 UTC	764	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:09 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 87665751382bb033-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xr0msViZLounQAomCfMegzX1smKwQ2D1CbfJEwhPQEnmMl9PIwhIFHeO7GFV0QeD6RcL4hS2Xtch10wuvKINFAKeZNuM2H7yBZSD9qoFoOz0ZSh%2BUhKtKCOAUH2%2FIBmK78Kb5bg5xAYG%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=8d638dc2f555d2ab9e984b34183adf3ea4a056d5-1713460989; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87665751382bb033-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50026	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:09 UTC	1613	OUT	GET /webinar/5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=2; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460986.15.0.0
2024-04-18 17:23:10 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:15 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:10 UTC	7985	IN	Data Raw: 66 61 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 Data Ascii: fab<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" conte
2024-04-18 17:23:10 UTC	6706	IN	Data Raw: 6c 20 2b 20 22 22 2c 20 27 64 65 74 61 69 6c 49 6d 61 67 65 27 2c 20 27 34 30 30 27 2c 20 27 35 35 30 27 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 41 6d 74 28 74 6f 67 67 6c 65 29 20 7b 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 59 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 56 69 73 69 62 69 6c 69 74 79 28 22 61 64 64 5f 61 6d 6f 75 6e 74 22 2c 20 22 76 69 73 69 62 6c 65 22 29 3b 0d 0a 7d 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 4e 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 56 69 73 69 62 69 6c 69 74 79 28 22 61 64 64 5f 61 6d 6f 75 6e 74 22 2c 20 22 68 69 64 64 65 6e 22 29 3b 0d 0a 7d 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 69 6e 64 49 6e 64 65 78 28 6e 61 6d 65 29 20 7b 0d 0a 66 6f 72 Data Ascii: l + "", 'detailImage', '400', '550');}function toggleAmt(toggle) {if (toggle == 'Y') {changeObjectVisibility("add_amount", "visible");}if (toggle == 'N') {changeObjectVisibility("add_amount", "hidden");}}function findIndex(name) {for
2024-04-18 17:23:10 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:10 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 43 31 32 36 32 43 22 3e 0d 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 57 65 62 69 6e 61 72 50 72 6f 64 75 63 74 50 72 69 63 65 22 3e 24 32 35 30 2e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 74 72 6f 6e 67 3e 0d 0a 3c 62 3e 47 72 6f 75 70 20 41 74 74 65 6e 64 65 65 73 3c 2f 62 3e 0d 0a 3c 2f 6c 61 62 65 6c 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 63 6f 72 64 65 64 2d 76 65 72 73 69 6f 6e 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 3e 20 3c 73 Data Ascii: 1ff8yle="color:#C1262C"><span class="WebinarProductPrice">$250.</span></strong><b>Group Attendees</b></label></div></div></div><div class="recorded-version1"><div class="content"><i class="fa fa-video-camera" aria-hidden="true"></i> <s
2024-04-18 17:23:10 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-18 17:23:10 UTC	8184	IN	Data Raw: 77 61 72 64 73 20 6d 6f 72 65 20 61 6c 69 67 6e 65 64 20 67 6f 61 6c 73 2c 20 61 6e 64 20 68 61 72 6e 65 73 73 20 74 68 65 20 69 6e 6e 61 74 65 20 63 75 72 69 6f 73 69 74 79 20 74 68 61 74 20 66 75 65 6c 73 20 69 6e 6e 6f 76 61 74 69 6f 6e 2e 20 54 68 65 79 20 77 69 6c 6c 20 64 69 73 63 6f 76 65 72 20 68 6f 77 20 74 6f 20 63 75 6c 74 69 76 61 74 65 20 72 65 73 69 6c 69 65 6e 63 65 20 69 6e 20 74 68 65 20 66 61 63 65 20 6f 66 20 61 64 76 65 72 73 69 74 79 2c 20 61 6e 64 20 6c 65 61 64 20 77 69 74 68 20 63 6c 61 72 69 74 79 20 61 6e 64 20 70 75 72 70 6f 73 65 20 69 6e 20 64 79 6e 61 6d 69 63 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 2e 3c 2f 70 3e 3c 70 3e 4a 6f 69 6e 20 75 73 20 61 73 20 77 65 20 64 65 6c 76 65 20 69 6e 74 6f 20 74 68 65 20 61 72 74 20 61 6e Data Ascii: wards more aligned goals, and harness the innate curiosity that fuels innovation. They will discover how to cultivate resilience in the face of adversity, and lead with clarity and purpose in dynamic environments.</p><p>Join us as we delve into the art an
2024-04-18 17:23:10 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:10 UTC	4000	IN	Data Raw: 64 34 0d 0a 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 64 6f 63 2e 73 61 76 65 28 27 77 65 62 69 6e 61 72 2e 70 64 66 27 29 3b 0d 0a 7d 29 3b 0d 0a 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 74 79 6c 65 3e 2e 7a 6f 70 69 6d 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 6a 73 2f 63 6f 6e 76 65 72 74 50 64 66 2f 70 64 66 43 61 6e 76 61 73 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 6a 73 2f 63 6f 6e 76 65 72 74 50 64 66 2f 70 64 66 4a 73 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 65 62 61 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6e 64 63 6f 6c 75 6d 6e 73 22 3e Data Ascii: d4function() {doc.save('webinar.pdf');});}</script><style>.zopim{display: none;}</style><script src="/images/js/convertPdf/pdfCanvas.js"></script><script src="/images/js/convertPdf/pdfJs.js"></script>eba</div><div class="endcolumns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50039	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:10 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:10 UTC	585	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:10 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876657563b87080b-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oGNTQbr5S2Zv%2Bh8NyQSR3pcJj6t5acLWhiSYdveMwAAi8n%2FVBwqtYZekeK4sjrePXf8eCab7m6I7t5483htJaFvf787HD4z0wIQp%2B6DNpqVvj7kZOPpVK3tisn0iDq2t6E48gsah7OOZxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876657563b87080b-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50040	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:10 UTC	1292	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460984406&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fpower-of-perspective-and-attitude%3A-how-to-transform-your-life--206534live&dt=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=6210 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:10 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50042	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:11 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:11 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:11 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 8766575bbee2677f-ATL
2024-04-18 17:23:11 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50044	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:11 UTC	980	OUT	GET /s/W/xdds/18ll0A0MviQGtcZI/d/1713460975961/1713460975961%0A-463.70264686052326%0A2%0A2%0Ad%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22active%24int%22%3A1713460973622%7D%7D%0A%7B%22path%22%3A%5B%22root%22%2C%22livechat%22%2C%22profile%22%5D%2C%22value%22%3A%7B%22disconnect_timeout%24int%22%3A20%7D%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:11 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:11 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=dWrL/OgRx2N5Wu8H1N9Qp26LIBZyS9VigZPTWODzQN0MrEegQkTVEe3CsgJCQmVsCdX5th9821EiH23rjQCjp+DRc2C1nyHDwkmL7X56WXzk2YnoQvctdvPDLL9D; Expires=Thu, 25 Apr 2024 17:23:11 GMT; Path=/ Set-Cookie: AWSALBCORS=dWrL/OgRx2N5Wu8H1N9Qp26LIBZyS9VigZPTWODzQN0MrEegQkTVEe3CsgJCQmVsCdX5th9821EiH23rjQCjp+DRc2C1nyHDwkmL7X56WXzk2YnoQvctdvPDLL9D; Expires=Thu, 25 Apr 2024 17:23:11 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:11 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50045	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:11 UTC	690	OUT	GET /s/W/ws/8PIe6s1e1u7FhoTN/c/1713460990972 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2+jOQc3M5vz/itoO+8BLhHnpsaZZPRu4z3HT57Fo6B3DWyKu8iErSAN6dWguo14/kIIRoabunNSao9MbvsUVSKdvTIndJsMOfm9cr63DzQ6LrslkwfjIgn09aTht Sec-WebSocket-Key: APFI9M6H5wg6vYYgqFmqfg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:12 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:11 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=vJaxlvOaC1yp7LNJJSvsrS+YekbdLmvWpz7fy5jDB77o+ju21YLzC8p2LQi0a50mB6eIXpj/goDBy7LB4e5mFaLZPs95dDn6YNllS+Wi81CqFGN8WShwoNvcnXLjeIs45Vb1ay4Zq9PEVd6Q+MSzHfH0GNtwyDM6PwgV5KH8brQY5Q+xbdr6zW4NhgogKQ==; Expires=Thu, 25 Apr 2024 17:23:11 GMT; Path=/ Set-Cookie: AWSALBCORS=vJaxlvOaC1yp7LNJJSvsrS+YekbdLmvWpz7fy5jDB77o+ju21YLzC8p2LQi0a50mB6eIXpj/goDBy7LB4e5mFaLZPs95dDn6YNllS+Wi81CqFGN8WShwoNvcnXLjeIs45Vb1ay4Zq9PEVd6Q+MSzHfH0GNtwyDM6PwgV5KH8brQY5Q+xbdr6zW4NhgogKQ==; Expires=Thu, 25 Apr 2024 17:23:11 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50046	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:11 UTC	729	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713460980612/1713460980612%0A-503.0315317296275%0A3%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:12 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:12 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=a40g/VRpFaTptIPCLuvsRYqFQu0G5AAopOTpt2X2Ag+B/WCD+7yW33GilGvYpvPq6O3sLySJ2hDxHmKGY/uwzD2MLhWiRkxanxeB6GdnO+CYUx9w7gph72Ewrp07; Expires=Thu, 25 Apr 2024 17:23:12 GMT; Path=/ Set-Cookie: AWSALBCORS=a40g/VRpFaTptIPCLuvsRYqFQu0G5AAopOTpt2X2Ag+B/WCD+7yW33GilGvYpvPq6O3sLySJ2hDxHmKGY/uwzD2MLhWiRkxanxeB6GdnO+CYUx9w7gph72Ewrp07; Expires=Thu, 25 Apr 2024 17:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:12 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50038	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:11 UTC	1841	OUT	GET /speakerprofile?speaker_id=34496 HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=3; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460990.11.0.0
2024-04-18 17:23:12 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:17 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:12 UTC	7985	IN	Data Raw: 31 30 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1038<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:23:12 UTC	6487	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 21 69 6d 70 6f 72 74 61 6e 74 7d 3c 2f 73 74 79 6c 65 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 62 61 62 6c 65 22 20 69 64 3d 22 74 61 62 73 2d 39 36 39 36 39 33 22 3e 0d 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 20 6e 61 76 2d 74 61 62 73 22 3e 0d 3c 6c 69 20 63 6c 61 73 73 3d 22 61 63 74 69 76 65 22 3e 0d 3c 61 20 68 72 65 66 3d 22 23 70 61 6e 65 6c 2d 31 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 61 62 22 3e 55 70 63 6f 6d 69 6e 67 20 57 65 62 69 6e 61 72 73 3c 2f 61 3e 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e Data Ascii: ore{content:''!important}</style><div class="col-md-12"><div class="row"><div class="col-md-12"><div class="tabbable" id="tabs-969693"><ul class="nav nav-tabs"><li class="active"><a href="#panel-1" data-toggle="tab">Upcoming Webinars</a></li><li>
2024-04-18 17:23:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:12 UTC	3783	IN	Data Raw: 65 62 62 0d 0a 0d 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6e 64 63 6f 6c 75 6d 6e 73 22 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 66 6f 6f 74 65 72 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 74 6f 70 2d 61 72 65 61 20 77 6f 77 20 66 61 64 65 49 6e 55 70 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 55 70 3b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 37 20 63 6f 6c 2d 6d 64 2d 35 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: ebb</div><div class="endcolumns"></div></div><footer><div class="footer-top-area wow fadeInUp" style="visibility: visible; animation-name: fadeInUp;"><div class="container"><div class=""><div class="col-xs-12 col-sm-7 col-md-5"><div class=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50047	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:12 UTC	675	OUT	GET /s/W/xdds/Pv1-K-G1h93dn68m/c/1713460981569 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50048	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:12 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:12 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:12 UTC	772	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:12 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876657629b90be15-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZL3efk4%2BsmfjVaFLivrYS1L8eHsFk%2BaBzCFySmW6ay724AATSnwB7atm%2FwXC%2BK05KMWmgoRMPkaFNhFjY%2FHU4b9bXZkPE2aQCTgD%2Fk6b4gbIWToWt7XxJ3VYBKQpWMLVjgbsA%2FEeHaUwBA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=bbb616fae895995aecbd183b1accc605a4b3091a-1713460992; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876657629b90be15-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50050	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:12 UTC	730	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460982611/1713460982611%0A-432.47619198505527%0A4%0A3%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:12 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:12 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=t/B3yc1YzQfkPbjmVTYhjVowqz2TJ5svpWUKBTdhjaTnmBY9zFpKZPvp9EdY0AanxIcnIG9V6FRHx5kpVNF8i1ReVB5JYG+dAOFNY16m9CjEDnVVLuUrpWKI5DIR; Expires=Thu, 25 Apr 2024 17:23:12 GMT; Path=/ Set-Cookie: AWSALBCORS=t/B3yc1YzQfkPbjmVTYhjVowqz2TJ5svpWUKBTdhjaTnmBY9zFpKZPvp9EdY0AanxIcnIG9V6FRHx5kpVNF8i1ReVB5JYG+dAOFNY16m9CjEDnVVLuUrpWKI5DIR; Expires=Thu, 25 Apr 2024 17:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:12 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50051	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:12 UTC	729	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713460984611/1713460984611%0A-501.5023837035554%0A4%0A3%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:12 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:12 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=riRh/EqIdC6xY8jUVCyz+FIrCoihZi43/bCO77U1Orbn4MF+kEU86F3JqDpqkxx5SF+xClNCP5BGIFXU8YPtgJJmqdg01FCDMEQ2kS+nFjWp2c96qD657WNBP3yc; Expires=Thu, 25 Apr 2024 17:23:12 GMT; Path=/ Set-Cookie: AWSALBCORS=riRh/EqIdC6xY8jUVCyz+FIrCoihZi43/bCO77U1Orbn4MF+kEU86F3JqDpqkxx5SF+xClNCP5BGIFXU8YPtgJJmqdg01FCDMEQ2kS+nFjWp2c96qD657WNBP3yc; Expires=Thu, 25 Apr 2024 17:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:12 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50052	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:12 UTC	690	OUT	GET /s/W/ws/Pv1-K-G1h93dn68m/c/1713460991619 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=a40g/VRpFaTptIPCLuvsRYqFQu0G5AAopOTpt2X2Ag+B/WCD+7yW33GilGvYpvPq6O3sLySJ2hDxHmKGY/uwzD2MLhWiRkxanxeB6GdnO+CYUx9w7gph72Ewrp07 Sec-WebSocket-Key: llQkYx9fJSy91N6QZx1BQg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:12 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:12 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=ShcUO4sxCfWTDdY3Dq2HUv9YpJgcROTUuaU9q88hDxIr1PNaLO9y2CMFjZpFBomkeR7lZWVYPXWV0cK+Wi6rRPZBo6Ecy3R0wESU9dtcZFXQjLBVOz2V1XQRnpO1dsyWmSrG3hniaxT4ge733/M2qX81j538mdEPsFhj4ZebF//nAXQzPbWKsDEoTJ3LRA==; Expires=Thu, 25 Apr 2024 17:23:12 GMT; Path=/ Set-Cookie: AWSALBCORS=ShcUO4sxCfWTDdY3Dq2HUv9YpJgcROTUuaU9q88hDxIr1PNaLO9y2CMFjZpFBomkeR7lZWVYPXWV0cK+Wi6rRPZBo6Ecy3R0wESU9dtcZFXQjLBVOz2V1XQRnpO1dsyWmSrG3hniaxT4ge733/M2qX81j538mdEPsFhj4ZebF//nAXQzPbWKsDEoTJ3LRA==; Expires=Thu, 25 Apr 2024 17:23:12 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50053	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:12 UTC	675	OUT	GET /s/W/xdds/yK5ZszCXro6Sjjxj/c/1713460985382 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:13 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:13 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=+00oyDxJmtCFrGyS9LAtJ9/27PUpU0Tk2VHhnzjABBe+i3pimuO23xv5FrFtp7KYKThizhJnNLDQw02/XuViG4X8QkYLJbOL7FFkwC+1+s6JEvkZfSuxF2wdCAQM; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=+00oyDxJmtCFrGyS9LAtJ9/27PUpU0Tk2VHhnzjABBe+i3pimuO23xv5FrFtp7KYKThizhJnNLDQw02/XuViG4X8QkYLJbOL7FFkwC+1+s6JEvkZfSuxF2wdCAQM; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:13 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 39 33 30 34 34 5c 6e 37 36 36 32 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713460993044\n7662\n1\n0\nn\n15000")
2024-04-18 17:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50055	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:12 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:13 UTC	585	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:13 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 87665766cd4753b9-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7LXa8nLiOna4iI7IsrKx168GJeVJevm2bIfziRTopddikkFMT1wMDmTd0LRdVFtiC4m8yppNVzOKf%2Bh1KXeXH6LMm42ax33hjuVEEM9o%2FVEMvBBV7j7TMl5y%2Fnq6k4EMJuMpDXEstoAuMg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87665766cd4753b9-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50054	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:12 UTC	675	OUT	GET /s/W/xdds/6UGvo4Q26W1iBuza/c/1713460987624 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:13 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:13 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:13 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 30 39 39 33 30 37 30 5c 6e 35 34 34 36 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713460993070\n5446\n1\n0\nn\n15000")
2024-04-18 17:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50057	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:13 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:13 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:13 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 87665766fa3eb06f-ATL
2024-04-18 17:23:13 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50059	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:13 UTC	715	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713460987635/1713460987634%0A-500%0A4%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:13 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:13 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=axghwYGoTDLqnQ81wEnB2p2VZ7dKBOCxAbHHNyV/dT79SNMIanmU8vB0yaF8/RU9Zroa5ITQ9TXLWQPRvsROUCPtJTsO566dOLLRwNLDkimXSKGTiKeBSrusEp55; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=axghwYGoTDLqnQ81wEnB2p2VZ7dKBOCxAbHHNyV/dT79SNMIanmU8vB0yaF8/RU9Zroa5ITQ9TXLWQPRvsROUCPtJTsO566dOLLRwNLDkimXSKGTiKeBSrusEp55; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:13 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50060	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:13 UTC	730	OUT	GET /s/W/xdds/SKukINt-UGvOK5QK/d/1713460987642/1713460987642%0A-502.02323793626044%0A3%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=J7LBS7NWjfHHiZU6qngeJsqA6HAyCuYFO3D7wtgof7+VM+q1aGqeNmPXGUjRGNe6FyGszjBh46QyzIFK9J5jog1FIruydjC+q4ENLnt38ZKxaY8hJI2KGqYwf8SS
2024-04-18 17:23:13 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:13 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:13 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50061	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:13 UTC	1205	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460986925&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D63494&dt=Compliance%20Experts%20%E2%80%93%20traininng&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7312 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:13 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50063	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:13 UTC	690	OUT	GET /s/W/ws/mag4xmOOxKAnhFKT/c/1713460992848 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl Sec-WebSocket-Key: /nHEbvHWtJhWCCBjnUTv/A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:13 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:13 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=EkqmGyBwnV2Y8nXuaETthMfOAWUHIKEoDlaNneJDHzf8janQGDHFjBSipcYkmznPsPV5gofOTWjBVfyV7xjw4KdKec6ACqNKJF6NTkQRVqLNY/gZxRkE6OqDiRufIcgpz2j7iNYiY5HYqIvHFdGFlFK5fksgFa20ZVPLXiNVKMZJxc+EwA5y5qPjR7HFXQ==; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=EkqmGyBwnV2Y8nXuaETthMfOAWUHIKEoDlaNneJDHzf8janQGDHFjBSipcYkmznPsPV5gofOTWjBVfyV7xjw4KdKec6ACqNKJF6NTkQRVqLNY/gZxRkE6OqDiRufIcgpz2j7iNYiY5HYqIvHFdGFlFK5fksgFa20ZVPLXiNVKMZJxc+EwA5y5qPjR7HFXQ==; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50064	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:13 UTC	675	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/p/1713460990884 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2+jOQc3M5vz/itoO+8BLhHnpsaZZPRu4z3HT57Fo6B3DWyKu8iErSAN6dWguo14/kIIRoabunNSao9MbvsUVSKdvTIndJsMOfm9cr63DzQ6LrslkwfjIgn09aTht
2024-04-18 17:23:37 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=cJk8zYLYX5Y87rI3eX+N9q5no3Glo7jIpv/Xrtgbd1NHQipKKL6Rqthej9unBA4WAw+pMjk+5li84si1/9vDLA40zBg22C89eX5uWHv93OooJncwFW4eu8oKGLVL; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=cJk8zYLYX5Y87rI3eX+N9q5no3Glo7jIpv/Xrtgbd1NHQipKKL6Rqthej9unBA4WAw+pMjk+5li84si1/9vDLA40zBg22C89eX5uWHv93OooJncwFW4eu8oKGLVL; Expires=Thu, 25 Apr 2024 17:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:37 UTC	1198	IN	Data Raw: 34 61 37 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 37 35 32 32 5c 6e 39 32 38 31 2e 30 30 39 32 36 35 35 34 31 33 30 33 5c 6e 34 5c 6e 35 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 7b 5c 22 6c 6f 67 5c 22 3a 7b 5c 22 31 37 31 33 34 36 31 30 31 37 34 32 31 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 24 73 74 72 69 6e 67 5c 22 3a 5c 22 23 73 75 70 70 6f 72 74 63 68 61 74 3a 31 39 31 30 35 30 31 35 2d 31 4c 4c 6d 65 64 76 73 45 78 57 48 75 7a 76 5c 22 2c 5c 22 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 31 33 34 36 31 30 31 37 34 32 31 2c 5c 22 69 6e 64 65 78 Data Ascii: 4a7$Loader && ($Loader.payload = "1713461017522\n9281.009265541303\n4\n5\nd\n{\"path\":\"livechat\",\"update\":{\"channel\":{\"log\":{\"1713461017421\":{\"channel$string\":\"#supportchat:19105015-1LLmedvsExWHuzv\",\"timestamp$int\":1713461017421,\"index
2024-04-18 17:23:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50065	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:13 UTC	675	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713460991107 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=RzvkDQ1DE/rCFVl3lfMSiqeZu0xnmBGGMhuGSiqJd6zzcbScyMruTv+yVvyki9RYAlgvMLo00wtLEheXMsIYOapl1cLkmjNtgwQyaOSoHYevqk5Sd5MP04vfXUiQ
2024-04-18 17:23:37 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=P0wE+sFnKnnt2eGiHD8dfsSk/C7iYy0qMu56qbylErUgW63v5zprd+jaxVbPGNshPAcrDjaUj6dBBhP/cosS+16ZhVsiCZSZFd2FKAxKtM65S8qNAOlZ3zmbfGId; Expires=Thu, 25 Apr 2024 17:23:14 GMT; Path=/ Set-Cookie: AWSALBCORS=P0wE+sFnKnnt2eGiHD8dfsSk/C7iYy0qMu56qbylErUgW63v5zprd+jaxVbPGNshPAcrDjaUj6dBBhP/cosS+16ZhVsiCZSZFd2FKAxKtM65S8qNAOlZ3zmbfGId; Expires=Thu, 25 Apr 2024 17:23:14 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:37 UTC	1198	IN	Data Raw: 34 61 37 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 37 35 32 31 5c 6e 39 34 30 33 2e 31 35 30 36 33 32 37 39 32 39 36 34 5c 6e 35 5c 6e 35 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 7b 5c 22 6c 6f 67 5c 22 3a 7b 5c 22 31 37 31 33 34 36 31 30 31 37 34 32 31 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 24 73 74 72 69 6e 67 5c 22 3a 5c 22 23 73 75 70 70 6f 72 74 63 68 61 74 3a 31 39 31 30 35 30 31 35 2d 31 4c 4c 6d 65 64 76 73 45 78 57 48 75 7a 76 5c 22 2c 5c 22 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 31 33 34 36 31 30 31 37 34 32 31 2c 5c 22 69 6e 64 65 78 Data Ascii: 4a7$Loader && ($Loader.payload = "1713461017521\n9403.150632792964\n5\n5\nd\n{\"path\":\"livechat\",\"update\":{\"channel\":{\"log\":{\"1713461017421\":{\"channel$string\":\"#supportchat:19105015-1LLmedvsExWHuzv\",\"timestamp$int\":1713461017421,\"index
2024-04-18 17:23:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50049	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:16 UTC	1957	OUT	GET /webinar/3-hour-virtual-seminar-on-business-communication:-grammar,-better-writing,-email,-and-other-common-communication-in-the-workplace-206018live HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; _gat=1; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=3; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460992.9.0.0
2024-04-18 17:23:16 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:21 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:16 UTC	7985	IN	Data Raw: 31 30 33 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1031<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:23:16 UTC	6841	IN	Data Raw: 72 74 28 22 4e 6f 20 64 65 74 61 69 6c 20 69 6d 61 67 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 64 69 73 70 6c 61 79 2e 22 29 3b 0d 0a 72 65 74 75 72 6e 3b 0d 0a 7d 0d 0a 70 6f 70 55 70 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 2f 63 6f 6e 74 72 6f 6c 2f 64 65 74 61 69 6c 49 6d 61 67 65 3f 64 65 74 61 69 6c 3d 22 20 2b 20 64 65 74 61 69 6c 49 6d 61 67 65 55 72 6c 20 2b 20 22 22 2c 20 27 64 65 74 61 69 6c 49 6d 61 67 65 27 2c 20 27 34 30 30 27 2c 20 27 35 35 30 27 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 41 6d 74 28 74 6f 67 67 6c 65 29 20 7b 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 59 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 56 69 73 69 62 69 6c 69 74 79 28 22 61 64 Data Ascii: rt("No detail image available to display.");return;}popUp("https://www.traininng.com/control/detailImage?detail=" + detailImageUrl + "", 'detailImage', '400', '550');}function toggleAmt(toggle) {if (toggle == 'Y') {changeObjectVisibility("ad
2024-04-18 17:23:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:16 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 31 38 63 6f 72 70 6c 69 76 65 22 20 3e 0d 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 6d 75 6c 74 69 5f 4c 69 76 65 22 3e 0d 0a 3c 73 74 72 6f 6e 67 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 43 31 32 36 32 43 22 3e 0d 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 57 65 62 69 6e 61 72 50 72 6f 64 75 63 74 50 72 69 63 65 22 3e 24 34 35 30 2e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 74 72 6f 6e 67 3e 0d 0a 3c 62 3e 47 72 6f 75 70 20 41 74 74 65 6e 64 65 65 73 3c 2f 62 3e 0d 0a 3c 2f 6c 61 62 65 6c 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 63 6f 72 64 65 64 2d 76 65 72 73 69 6f 6e 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 69 20 63 6c Data Ascii: 1ff818corplive" ><label for="multi_Live"><strong style="color:#C1262C"><span class="WebinarProductPrice">$450.</span></strong><b>Group Attendees</b></label></div></div></div><div class="recorded-version1"><div class="content"><i cl
2024-04-18 17:23:16 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-18 17:23:16 UTC	8184	IN	Data Raw: 3e 3c 70 3e 3c 70 3e 57 68 61 74 20 69 6d 70 72 65 73 73 69 6f 6e 20 64 6f 20 70 65 6f 70 6c 65 20 68 61 76 65 20 61 62 6f 75 74 20 79 6f 75 20 77 68 65 6e 20 79 6f 75 20 63 6f 6d 6d 75 6e 69 63 61 74 65 3f 20 57 68 65 74 68 65 72 20 79 6f 75 27 72 65 20 69 6e 20 61 6e 20 6f 6e 6c 69 6e 65 20 6d 65 65 74 69 6e 67 2c 20 63 6f 6e 76 65 79 69 6e 67 20 69 6d 70 6f 72 74 61 6e 74 20 66 61 63 74 73 20 69 6e 20 61 6e 20 65 6d 61 69 6c 2c 20 6f 72 20 73 75 6d 6d 61 72 69 7a 69 6e 67 20 73 69 67 6e 69 66 69 63 61 6e 74 20 77 6f 72 6b 20 69 6e 20 61 20 72 65 70 6f 72 74 2c 20 70 65 6f 70 6c 65 20 77 69 74 68 20 77 68 6f 6d 20 79 6f 75 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 66 6f 72 6d 20 61 6e 20 6f 70 69 6e 69 6f 6e 20 61 62 6f 75 74 20 79 6f 75 72 20 63 72 65 64 Data Ascii: ><p><p>What impression do people have about you when you communicate? Whether you're in an online meeting, conveying important facts in an email, or summarizing significant work in a report, people with whom you communicate form an opinion about your cred
2024-04-18 17:23:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:16 UTC	4627	IN	Data Raw: 33 34 36 0d 0a 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 61 64 64 5f 70 72 6f 64 75 63 74 5f 64 61 74 65 27 29 2e 76 61 6c 75 65 3b 0d 0a 76 61 72 20 70 72 6f 64 75 63 74 5f 64 65 73 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 61 64 64 5f 70 72 6f 64 75 63 74 5f 64 65 73 63 27 29 2e 76 61 6c 75 65 3b 0d 0a 76 61 72 20 74 69 74 6c 65 3d 22 74 69 74 6c 65 22 2b 31 3b 0d 0a 76 61 72 20 70 72 6f 64 75 63 74 5f 49 64 3d 22 70 72 6f 64 75 63 74 5f 49 64 22 2b 31 3b 0d 0a 76 61 72 20 69 6e 73 74 72 75 63 74 6f 72 3d 22 69 6e 73 74 72 75 63 74 6f 72 22 2b 31 3b 0d 0a 76 61 72 20 64 75 72 61 74 69 6f 6e 3d 22 64 75 72 61 74 69 6f 6e 22 2b 31 3b 0d 0a 76 61 72 20 70 72 69 63 65 3d 22 70 72 69 63 65 22 2b 31 3b 0d 0a 76 Data Ascii: 346etElementById('add_product_date').value;var product_desc = document.getElementById('add_product_desc').value;var title="title"+1;var product_Id="product_Id"+1;var instructor="instructor"+1;var duration="duration"+1;var price="price"+1;v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50066	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:16 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:16 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:16 UTC	760	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:16 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8766577bbc961d64-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lr1WHvUUZVVeWnPqMU21Im2RoZ5k6kzvoZ0NgmxENzLjwsWCtcAd9sxYXzWnRwlg0PNwn4xykOwhvS5K%2BW6Ozpb6q04OcjKzGr3sh4WM7xZa734lHjxkIPTvp6d6ltiRAHI9nF0M3yEn0w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=9a933e353486277e9f9c8675f1e988eeefc91f7d-1713460996; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8766577bbc961d64-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50071	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:17 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:17 UTC	579	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:17 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 87665780afa86783-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=64h76MWHru2aC3RVTjrxLqxmc5tuBKSSrgD71O272nwzbABaODWRJOHSV9VilnTObSYkgYcKDAXNlIxe2MGBBltiAOcmcBWcI55gubKnY2Boqq9fJn4RxSBvPiw4yFHBp764mFXeQfieQg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87665780afa86783-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50070	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:17 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:17 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:17 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876657805c1d8bb9-ATL
2024-04-18 17:23:17 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50073	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:17 UTC	1305	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460990656&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fwebinar%2F5-key-strategies-to-leverage-positive-psychology-for-better-leadership-206623live&dt=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7221 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:17 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50074	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:17 UTC	690	OUT	GET /s/W/ws/i0fuREjk14N6dcnn/c/1713460996905 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: JIJCk2AGj1pME7fT26vA3A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:17 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:17 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=NJ+3W3cJSADSjW41WEOdM/JLh5oyL/Qf9R0ruNTLZNy5aF+eLU+m1p4U1F4/0eD5kYM8xTOyIdzDf0MItnhxYErzuk5xh9FmOJhAK9r05VALUUYFateMp9aYs+DGws4i2apoYpIs8YPPcYG91aCGgQwJXmdgehulg9rXTOPRFlNV3jjAeRaDXcbjjwBU8g==; Expires=Thu, 25 Apr 2024 17:23:17 GMT; Path=/ Set-Cookie: AWSALBCORS=NJ+3W3cJSADSjW41WEOdM/JLh5oyL/Qf9R0ruNTLZNy5aF+eLU+m1p4U1F4/0eD5kYM8xTOyIdzDf0MItnhxYErzuk5xh9FmOJhAK9r05VALUUYFateMp9aYs+DGws4i2apoYpIs8YPPcYG91aCGgQwJXmdgehulg9rXTOPRFlNV3jjAeRaDXcbjjwBU8g==; Expires=Thu, 25 Apr 2024 17:23:17 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50075	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:18 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:18 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:19 UTC	770	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:19 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 87665789fda67bd6-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uIUKQOhGD%2FcKu5tf0cpk5rWhJgEE8XYYrHgCVGK0MggI7rx8jLk%2B8I58Xc5EaNjzn4iOf%2BDCLy257eZIBw%2BM%2BOll22kmkfl8k5hpOJCbBI%2FfYJBE8Pq24d8w1WH7JEykJyCJHk2QK4oTDQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=b84d9728a8ecd2bd54069e1c8612002a84a5dda7-1713460999; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87665789fda67bd6-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50076	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:19 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:19 UTC	589	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:19 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 8766578f1b3c53f1-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N6NPJlGEad3yYLfldwCZyRPqBNUiOQCa%2F3hy3JeZD7%2F9Jl92znZPAeH6drhSVtolMD%2Bw0I3Vt3aou0mW5TtSpdrKGnG2ADheJTAoSPRlrJOWWuw2duuwKmLN%2F%2BQReJc4sObjU5ARyjivpA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8766578f1b3c53f1-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50077	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:19 UTC	1205	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460992581&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D34496&dt=Compliance%20Experts%20%E2%80%93%20traininng&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7210 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:19 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50067	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:20 UTC	2195	OUT	GET /speakerprofile?speaker_id=60403 HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; title4=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace; product_Id4=206018live; instructor4=Melissa%A0Esquibel; duration4=3%20Hours; price4=%24250.00; date4=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=4; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713460996.5.0.0
2024-04-18 17:23:20 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:25 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:20 UTC	7985	IN	Data Raw: 31 30 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1038<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:23:20 UTC	6845	IN	Data Raw: 72 6f 77 22 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 62 61 62 6c 65 22 20 69 64 3d 22 74 61 62 73 2d 39 36 39 36 39 33 22 3e 0d 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 20 6e 61 76 2d 74 61 62 73 22 3e 0d 3c 6c 69 20 63 6c 61 73 73 3d 22 61 63 74 69 76 65 22 3e 0d 3c 61 20 68 72 65 66 3d 22 23 70 61 6e 65 6c 2d 31 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 61 62 22 3e 55 70 63 6f 6d 69 6e 67 20 57 65 62 69 6e 61 72 73 3c 2f 61 3e 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e 0d 3c 61 20 68 72 65 66 3d 22 23 70 61 6e 65 6c 2d 32 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 61 62 22 3e 52 65 63 6f 72 64 65 64 20 57 65 62 69 6e 61 72 73 3c 2f 61 3e 0d 3c 2f 6c 69 3e 0d 3c 2f 75 6c Data Ascii: row"><div class="col-md-12"><div class="tabbable" id="tabs-969693"><ul class="nav nav-tabs"><li class="active"><a href="#panel-1" data-toggle="tab">Upcoming Webinars</a></li><li><a href="#panel-2" data-toggle="tab">Recorded Webinars</a></li></ul
2024-04-18 17:23:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:20 UTC	4974	IN	Data Raw: 34 61 30 0d 0a 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 22 3e 3c 2f 64 69 76 3e 0d 3c 2f 64 69 76 3e 0d 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 62 6f 74 68 3b 20 68 65 69 67 68 74 3a 31 30 70 78 3b 22 3e 3c 2f 64 69 76 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 6c 67 2d 33 20 77 65 62 69 6e 61 72 2d 6c 69 73 74 22 3e 0d 3c 75 6c 3e 0d 3c 6c 69 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 66 69 6c 65 2d 76 69 64 65 6f 2d 6f 22 3e 3c 2f 69 3e 0d 52 65 63 6f 72 64 65 64 0d 3c 2f 6c 69 3e 0d 3c 6c 69 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 63 6c 6f 63 6b 2d 6f 22 3e 3c 2f 69 3e 0d 56 69 65 77 20 41 6e 79 74 Data Ascii: 4a0der-top:1px solid #ddd;"></div></div><div style="clear:both; height:10px;"></div><div class="col-xs-12 col-sm-6 col-md-3 col-lg-3 webinar-list"><ul><li><i class="fa fa-file-video-o"></i>Recorded</li><li><i class="fa fa-clock-o"></i>View Anyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50079	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:20 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:21 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:21 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876657988b92ad88-ATL
2024-04-18 17:23:21 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50080	108.177.122.157	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:21 UTC	870	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=1415927296&gjid=368065177&_gid=253988120.1713460940&_u=ACCAgAABAAAAAGAAI~&z=1194558989 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:21 UTC	595	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.traininng.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 18 Apr 2024 17:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:23:21 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50082	172.253.124.157	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:21 UTC	616	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=1415927296&gjid=368065177&_gid=253988120.1713460940&_u=ACCAgAABAAAAAGAAI~&z=1194558989 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:21 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 18 Apr 2024 17:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:23:21 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50085	142.250.105.104	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:21 UTC	819	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=1415927296&_u=ACCAgAABAAAAAGAAI~&z=1818446972 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:21 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:23:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50084	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:21 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:21 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:21 UTC	766	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:21 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8766579ceccb7b9f-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bduPROGGGx8KbouOAkej4vkQC85bt0UPSMg2cRMEpmgrlJVjQEd4py1eCm0mJeTkLY1GRb3oWG0evWfXtFwYDEC9t%2FAL0cJO%2F2tZcPgoW1xXtwzBjTx6aC37Ijwc3JSMajR6Kmkn%2BA%2FC6g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=a861ecccc67ffc895de173db39132c2b0e24e41e-1713461001; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8766579ceccb7b9f-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50086	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:21 UTC	690	OUT	GET /s/W/ws/eNOo9DO5rrWfw+Xw/c/1713461000918 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: E6xZz1ZUAmToq4oTTpsF4A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:21 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:21 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=j82bW8RuZ9uEMVWRdIHqtuGySO1Yum920TdEvGzDpWdiQxkxBfhJfHteSHu+cPcO2gezY3BIFvemsmrLN3qIzID/ShX3YJGZmiI1dKNOs81YvMyy9/TheF3Zd4OIyqO0NqYry2beW4STFEA+5dX2MV2v3cWYvj7Pr45Y9A2cDpSS7Jz+oJXFIOwhpqrSgA==; Expires=Thu, 25 Apr 2024 17:23:21 GMT; Path=/ Set-Cookie: AWSALBCORS=j82bW8RuZ9uEMVWRdIHqtuGySO1Yum920TdEvGzDpWdiQxkxBfhJfHteSHu+cPcO2gezY3BIFvemsmrLN3qIzID/ShX3YJGZmiI1dKNOs81YvMyy9/TheF3Zd4OIyqO0NqYry2beW4STFEA+5dX2MV2v3cWYvj7Pr45Y9A2cDpSS7Jz+oJXFIOwhpqrSgA==; Expires=Thu, 25 Apr 2024 17:23:21 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50087	64.233.185.147	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:22 UTC	582	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-122104245-1&cid=555618656.1713460940&jid=1415927296&_u=ACCAgAABAAAAAGAAI~&z=1818446972 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:22 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:23:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:23:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50078	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:22 UTC	2236	OUT	GET /webinar/growth:-transforming-issues-into-performance--206515live HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; title4=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace; product_Id4=206018live; instructor4=Melissa%A0Esquibel; duration4=3%20Hours; price4=%24250.00; date4=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; emdingFlag=4; _gat=1; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713461000.1.0.0
2024-04-18 17:23:22 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:27 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:22 UTC	7985	IN	Data Raw: 66 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 Data Ascii: ff5<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" conte
2024-04-18 17:23:22 UTC	6780	IN	Data Raw: 55 70 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 61 69 6e 69 6e 6e 67 2e 63 6f 6d 2f 63 6f 6e 74 72 6f 6c 2f 64 65 74 61 69 6c 49 6d 61 67 65 3f 64 65 74 61 69 6c 3d 22 20 2b 20 64 65 74 61 69 6c 49 6d 61 67 65 55 72 6c 20 2b 20 22 22 2c 20 27 64 65 74 61 69 6c 49 6d 61 67 65 27 2c 20 27 34 30 30 27 2c 20 27 35 35 30 27 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 41 6d 74 28 74 6f 67 67 6c 65 29 20 7b 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 59 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 56 69 73 69 62 69 6c 69 74 79 28 22 61 64 64 5f 61 6d 6f 75 6e 74 22 2c 20 22 76 69 73 69 62 6c 65 22 29 3b 0d 0a 7d 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 4e 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 Data Ascii: Up("https://www.traininng.com/control/detailImage?detail=" + detailImageUrl + "", 'detailImage', '400', '550');}function toggleAmt(toggle) {if (toggle == 'Y') {changeObjectVisibility("add_amount", "visible");}if (toggle == 'N') {changeObject
2024-04-18 17:23:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:22 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 3d 22 57 65 62 69 6e 61 72 50 72 6f 64 75 63 74 50 72 69 63 65 22 3e 24 32 35 30 2e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 74 72 6f 6e 67 3e 0d 0a 3c 62 3e 47 72 6f 75 70 20 41 74 74 65 6e 64 65 65 73 3c 2f 62 3e 0d 0a 3c 2f 6c 61 62 65 6c 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 63 6f 72 64 65 64 2d 76 65 72 73 69 6f 6e 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 3e 20 3c 73 70 61 6e 3e 52 45 43 4f 52 44 45 44 20 56 45 52 53 49 4f 4e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e Data Ascii: 1ff8="WebinarProductPrice">$250.</span></strong><b>Group Attendees</b></label></div></div></div><div class="recorded-version1"><div class="content"><i class="fa fa-video-camera" aria-hidden="true"></i> <span>RECORDED VERSION</span></div>
2024-04-18 17:23:22 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-18 17:23:22 UTC	8184	IN	Data Raw: 20 73 61 6d 65 20 68 61 70 70 65 6e 73 20 77 69 74 68 20 61 20 6d 61 6e 61 67 65 72 2c 20 73 6d 61 6c 6c 20 61 64 6a 75 73 74 6d 65 6e 74 73 20 65 76 65 72 79 64 61 79 20 61 72 65 20 65 61 73 69 65 72 20 74 6f 20 64 69 67 65 73 74 20 61 6e 64 20 74 6f 20 70 75 74 20 69 6e 20 70 6c 61 63 65 20 74 68 61 6e 20 61 20 62 69 67 20 63 72 69 74 69 63 20 73 65 76 65 72 61 6c 20 6d 6f 6e 74 68 20 6c 61 74 65 72 20 64 75 72 69 6e 67 20 74 68 65 20 70 72 6f 67 72 65 73 73 20 72 65 76 69 65 77 2e 3c 2f 70 3e 3c 70 3e 54 68 69 73 20 77 65 62 69 6e 61 72 20 63 6f 76 65 72 73 20 74 68 65 20 69 6d 70 6f 72 74 61 6e 63 65 20 6f 66 20 63 6c 65 61 72 20 65 78 70 65 63 74 61 74 69 6f 6e 73 20 61 6e 64 20 74 68 65 20 77 61 79 20 74 6f 20 61 70 70 72 6f 61 63 68 20 66 65 65 64 Data Ascii: same happens with a manager, small adjustments everyday are easier to digest and to put in place than a big critic several month later during the progress review.</p><p>This webinar covers the importance of clear expectations and the way to approach feed
2024-04-18 17:23:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:22 UTC	4100	IN	Data Raw: 31 33 37 0d 0a 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 6f 75 6e 6c 6f 61 64 50 64 66 28 29 7b 0d 0a 6c 65 74 20 64 6f 63 20 3d 20 6e 65 77 20 6a 73 50 44 46 28 27 70 27 2c 27 70 74 27 2c 27 61 34 27 29 3b 0d 0a 64 6f 63 2e 61 64 64 48 54 4d 4c 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 64 6f 63 2e 73 61 76 65 28 27 77 65 62 69 6e 61 72 2e 70 64 66 27 29 3b 0d 0a 7d 29 3b 0d 0a 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 74 79 6c 65 3e 2e 7a 6f 70 69 6d 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 6a 73 2f 63 6f 6e 76 65 72 74 50 64 66 2f 70 64 66 43 61 6e 76 61 73 2e 6a 73 22 3e 3c 2f 73 63 Data Ascii: 137<script>function dounloadPdf(){let doc = new jsPDF('p','pt','a4');doc.addHTML(document.body,function() {doc.save('webinar.pdf');});}</script><style>.zopim{display: none;}</style><script src="/images/js/convertPdf/pdfCanvas.js"></sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50088	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:22 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:22 UTC	591	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:22 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876657a0bcb0ad68-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ugLQa73Ejf4ZJN%2FL1S8OHjRwRO8fpqEsq%2FEa%2FJ6TWDdMBPgBEo7IMleyCh08sX7OBE66UqGc6dUnLIjJIWX%2BgsiT4KqL7ceoiDw6RMClGkN7q0%2F52gzZsymLp7AHG1zojeDFrdEgPS%2FtAQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876657a0bcb0ad68-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50091	216.239.34.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:22 UTC	1453	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713460996503&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fwebinar%2F3-hour-virtual-seminar-on-business-communication%3A-grammar%2C-better-writing%2C-email%2C-and-other-common-communication-in-the-workplace-206018live&dt=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=6211 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:22 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50090	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:22 UTC	690	OUT	GET /s/W/ws/mag4xmOOxKAnhFKT/c/1713461001621 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: UHrxO88azMmDKGXMo+gdSA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:22 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:22 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=3qT1S4cyj0peRTAcJcRy7rLG+ToUvQ93DP+ncFc14mlGP+Am9bV+czc9jtgHDO4rfDu9uMmXOUrTeNhbjpd1wifbidBZfzyfuEvIMw4iWECvSBNYw5gBiW8lhOPXzWIKCEdI3OtuEw+FZemR4/ADSYeNjJ5CZnJXeuOsx728WIw3FxJQAdByjoEg+L7+2w==; Expires=Thu, 25 Apr 2024 17:23:22 GMT; Path=/ Set-Cookie: AWSALBCORS=3qT1S4cyj0peRTAcJcRy7rLG+ToUvQ93DP+ncFc14mlGP+Am9bV+czc9jtgHDO4rfDu9uMmXOUrTeNhbjpd1wifbidBZfzyfuEvIMw4iWECvSBNYw5gBiW8lhOPXzWIKCEdI3OtuEw+FZemR4/ADSYeNjJ5CZnJXeuOsx728WIw3FxJQAdByjoEg+L7+2w==; Expires=Thu, 25 Apr 2024 17:23:22 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50093	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:22 UTC	690	OUT	GET /s/W/ws/8PIe6s1e1u7FhoTN/c/1713461001640 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: CnfHEQfmWTZw1zm1dZmUTQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:23 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:23 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=2YUEZOLoVzw7H1ZlmkT1L9AARBIV57RpmFjTz6xl/zxhvapbzi8M6nygoEz8S/yvIkqpN71MWwb8hkx1hE/BLz7h8650rE1Le1wq20JuSyDwfvNdDFDtQ3hab0Uc3Anf3OgWUPCQ5rF/wVUsDACR4M8WX/b7IU+EY7gKZKipkXlqH6RYOYw3d/wDJrAJkQ==; Expires=Thu, 25 Apr 2024 17:23:23 GMT; Path=/ Set-Cookie: AWSALBCORS=2YUEZOLoVzw7H1ZlmkT1L9AARBIV57RpmFjTz6xl/zxhvapbzi8M6nygoEz8S/yvIkqpN71MWwb8hkx1hE/BLz7h8650rE1Le1wq20JuSyDwfvNdDFDtQ3hab0Uc3Anf3OgWUPCQ5rF/wVUsDACR4M8WX/b7IU+EY7gKZKipkXlqH6RYOYw3d/wDJrAJkQ==; Expires=Thu, 25 Apr 2024 17:23:23 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50094	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:23 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:23 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:23 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876657a6a92d44f5-ATL
2024-04-18 17:23:23 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50096	216.239.32.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:23 UTC	1255	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713461002528&_gaz=1&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fgrowth%3A-transforming-issues-into-performance--206515live&dt=Growth%3A%20Transforming%20issues%20into%20Performance&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=1146 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:23 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50097	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:23 UTC	690	OUT	GET /s/W/ws/owIuyBn+KNjNOoT2/c/1713461002981 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: rQGs4UK1R4jGCy5WwLDM6g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:24 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:23 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=6KR175zhwbCbbde53bZcEWcDqAx90QHgMkp0vcH+4L+fqZC2zXS9ZfYs/bQVnhWyGB5TfH8fP33Xl1wv2iG7+8lg36Q7dGgE6bOW7Z0SrnzVu0FQVchGH39oTr8KP0kQzPoeAmSIQVv6o+n2rYXTGWuGpIFkmSh6/5tMk59+NP2CJ3+Bb0Rb1wgaM3k3Uw==; Expires=Thu, 25 Apr 2024 17:23:23 GMT; Path=/ Set-Cookie: AWSALBCORS=6KR175zhwbCbbde53bZcEWcDqAx90QHgMkp0vcH+4L+fqZC2zXS9ZfYs/bQVnhWyGB5TfH8fP33Xl1wv2iG7+8lg36Q7dGgE6bOW7Z0SrnzVu0FQVchGH39oTr8KP0kQzPoeAmSIQVv6o+n2rYXTGWuGpIFkmSh6/5tMk59+NP2CJ3+Bb0Rb1wgaM3k3Uw==; Expires=Thu, 25 Apr 2024 17:23:23 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50089	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:23 UTC	2455	OUT	GET /speakerprofile?speaker_id=62614 HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; title4=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace; product_Id4=206018live; instructor4=Melissa%A0Esquibel; duration4=3%20Hours; price4=%24250.00; date4=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; _gat=1; title5=Growth%3A%20Transforming%20issues%20into%20Performance%20; product_Id5=206515live; instructor5=Remi%20Vogel%A0; duration5=60%20Minutes; price5=%24110.00; date5=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=5; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713461002.60.0.0
2024-04-18 17:23:24 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:29 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:24 UTC	7985	IN	Data Raw: 31 30 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 1038<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" cont
2024-04-18 17:23:24 UTC	6845	IN	Data Raw: 72 20 6f 66 20 43 6f 6d 6d 65 72 63 65 20 47 72 61 64 75 61 74 65 3a 20 54 65 72 72 79 20 68 6f 6c 64 73 20 61 20 42 61 63 68 65 6c 6f 72 20 6f 66 20 43 6f 6d 6d 65 72 63 65 20 64 65 67 72 65 65 2c 20 70 72 6f 76 69 64 69 6e 67 20 61 20 73 6f 6c 69 64 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 62 75 73 69 6e 65 73 73 20 70 72 69 6e 63 69 70 6c 65 73 20 74 68 61 74 20 75 6e 64 65 72 70 69 6e 20 65 66 66 65 63 74 69 76 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 61 6e 64 20 70 72 6f 64 75 63 74 69 76 69 74 79 2e 0d 0a 3c 62 72 3e 3c 62 72 3e 0d 0a 4d 69 63 72 6f 73 6f 66 74 20 43 65 72 74 69 66 69 65 64 20 54 72 61 69 6e 65 72 3a 20 41 73 20 61 20 4d 69 63 72 6f 73 6f 66 74 20 43 65 72 74 69 66 69 65 64 20 54 72 61 69 6e 65 72 2c 20 54 65 72 Data Ascii: r of Commerce Graduate: Terry holds a Bachelor of Commerce degree, providing a solid understanding of business principles that underpin effective communication and productivity.<br><br>Microsoft Certified Trainer: As a Microsoft Certified Trainer, Ter
2024-04-18 17:23:24 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:24 UTC	6710	IN	Data Raw: 62 36 38 0d 0a 3e 0d 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 62 6f 74 68 3b 20 68 65 69 67 68 74 3a 31 70 78 3b 20 6d 61 72 67 69 6e 3a 32 30 70 78 20 31 30 70 78 3b 20 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 22 3e 3c 2f 64 69 76 3e 0d 3c 2f 64 69 76 3e 0d 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 62 6f 74 68 3b 20 68 65 69 67 68 74 3a 31 30 70 78 3b 22 3e 3c 2f 64 69 76 3e 0d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 6c 67 2d 33 20 77 65 62 69 6e 61 72 2d 6c 69 73 74 22 3e 0d 3c 75 6c 3e 0d 3c 6c 69 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 66 69 6c 65 2d 76 69 64 65 6f 2d 6f 22 3e 3c 2f 69 3e Data Ascii: b68><div style="clear:both; height:1px; margin:20px 10px; border-top:1px solid #ddd;"></div></div><div style="clear:both; height:10px;"></div><div class="col-xs-12 col-sm-6 col-md-3 col-lg-3 webinar-list"><ul><li><i class="fa fa-file-video-o"></i>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50099	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:24 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:24 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:24 UTC	764	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:24 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876657ada8ef674d-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nc19F1hX%2FZjk2tJbGbH0uyo9V1LbrOFEGXg0baN5q2qXPTD%2FPn9hGdC6rrdGFnQn4aXPNnAflc9Vx4Rt8493hVMaxQ8cZcCP67SFLR6tTqETu1M4J9v%2FHOepTXto2cNc322FosCyU2tKHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=e54cbda3db040f5c4c5f4737576645411a0fab2e-1713461004; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876657ada8ef674d-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50100	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:25 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:25 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:25 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876657b3a9c0b050-ATL
2024-04-18 17:23:25 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50102	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:25 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:25 UTC	593	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:25 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876657b4ef508bb5-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tcd9pxG7iU2tjaKDwuiclZGqjn5gE0HCVq4%2B1ffhUXykRcFke6F1GBgJjQq0O2wfj6erHeWztP2nBnA02W2fvH%2FV6WJM%2F4l%2FggcUhFTK%2BPRCoQqLiCu%2FC4FucgqorIdHWLV%2FZ00D1UzZ2A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876657b4ef508bb5-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50103	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:25 UTC	485	OUT	GET /embeddable/config HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947 If-Modified-Since: Thu, 18 Apr 2024 17:22:25 GMT
2024-04-18 17:23:26 UTC	885	IN	HTTP/1.1 304 Not Modified Date: Thu, 18 Apr 2024 17:23:25 GMT Connection: close Last-Modified: Thu, 18 Apr 2024 17:22:25 GMT access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-7bbdf9d957-cqhbk x-runtime: 0.001936 vary: Origin X-Cached: HIT CF-Cache-Status: HIT Age: 60 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4cudAkg9%2FeBr4Q43h4Np4MgfVR1MFHF4Zkbw0lS4oWJDOmSDMkoMa76DBn42MfxxplhLA6E5bwsbfoOemT%2BqIyqaQavwxIhxsKY43LDiHnZ2JMo%2BwsVEyD60ZQ8blk1kunCtZb4rY%2FjayQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876657b73be5457e-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50104	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:25 UTC	586	OUT	GET /embeddable/config HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 18 Apr 2024 16:41:04 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50105	3.216.21.64	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:25 UTC	690	OUT	GET /s/W/ws/K-Q-O2MIjscWk9Ze/c/1713461005028 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: bF3uQnv4w1N5oEWYUkVVJw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:26 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:26 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=/XGTVtqgGZQG0HNX5Yfs4LT9PmsoqKiQDve9NbkMu+0Y2G9SAd2JtwEo24+heHusktgI1sknGvaJVxVSpl9dRR3CG48Yb2oIDlLx6Mzpb/25VFxxHjDZA28ndfqbmskHVGjgILNg0UnGcqK9Hgkba54C55tOznWjugR08vB6hHlsif+gD/AEi7YxUa0WKw==; Expires=Thu, 25 Apr 2024 17:23:26 GMT; Path=/ Set-Cookie: AWSALBCORS=/XGTVtqgGZQG0HNX5Yfs4LT9PmsoqKiQDve9NbkMu+0Y2G9SAd2JtwEo24+heHusktgI1sknGvaJVxVSpl9dRR3CG48Yb2oIDlLx6Mzpb/25VFxxHjDZA28ndfqbmskHVGjgILNg0UnGcqK9Hgkba54C55tOznWjugR08vB6hHlsif+gD/AEi7YxUa0WKw==; Expires=Thu, 25 Apr 2024 17:23:26 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50107	216.239.32.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:27 UTC	1205	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713461000757&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D60403&dt=Compliance%20Experts%20%E2%80%93%20traininng&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7229 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:27 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50098	199.119.121.23	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:27 UTC	2475	OUT	GET /webinar/telling-stories-with-excel-data--206451live HTTP/1.1 Host: www.traininng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FC3D294851E25C7671C72F37F8A3FBFF.jvm1; OFBiz.Visitor=25733335; _ga=GA1.2.555618656.1713460940; _gid=GA1.2.253988120.1713460940; __zlcmid=1LLmedvsExWHuzv; title1=Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%0A; product_Id1=206529live; instructor1=Ben%20Currie%A0; duration1=60%20Minutes; price1=%24110.00; date1=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; titleName1234=titleName123; title2=Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%20; product_Id2=206534live; instructor2=Dr%20Amy%20L%20Brice%A0; duration2=60%20Minutes; price2=%24110.00; date2=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; title3=5%20Key%20Strategies%20to%20Leverage%20Positive%20Psychology%20for%20Better%20Leadership; product_Id3=206623live; instructor3=Ryan%20Lavarnway%A0; duration3=60%20Minutes; price3=%24110.00; date3=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; title4=3-Hour%20Virtual%20Seminar%20on%20Business%20Communication%3A%20Grammar%2C%20Better%20Writing%2C%20Email%2C%20And%20Other%20Common%20Communication%20in%20The%20Workplace; product_Id4=206018live; instructor4=Melissa%A0Esquibel; duration4=3%20Hours; price4=%24250.00; date4=Thursday%2C%20April%2018%2C%202024%2008%3A00%20AM%20PDT%20%7C%2011%3A00%20AM%20EDT; _gat=1; title5=Growth%3A%20Transforming%20issues%20into%20Performance%20; product_Id5=206515live; instructor5=Remi%20Vogel%A0; duration5=60%20Minutes; price5=%24110.00; date5=Thursday%2C%20April%2018%2C%202024%2010%3A00%20AM%20PDT%20%7C%2001%3A00%20PM%20EDT; emdingFlag=5; _ga_MRX28K3N0M=GS1.2.1713460941.1.1.1713461005.57.0.0
2024-04-18 17:23:28 UTC	207	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:34:33 GMT Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Content-Type: text/html;charset=UTF-8 Connection: close Transfer-Encoding: chunked
2024-04-18 17:23:28 UTC	7985	IN	Data Raw: 66 62 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 37 22 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 Data Ascii: fb0<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta http-equiv="X-UA-Compatible" content="IE=8" /><meta http-equiv="X-UA-Compatible" content="IE=7" /> <meta name="viewport" conte
2024-04-18 17:23:28 UTC	6711	IN	Data Raw: 61 67 65 55 72 6c 20 2b 20 22 22 2c 20 27 64 65 74 61 69 6c 49 6d 61 67 65 27 2c 20 27 34 30 30 27 2c 20 27 35 35 30 27 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 41 6d 74 28 74 6f 67 67 6c 65 29 20 7b 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 59 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 56 69 73 69 62 69 6c 69 74 79 28 22 61 64 64 5f 61 6d 6f 75 6e 74 22 2c 20 22 76 69 73 69 62 6c 65 22 29 3b 0d 0a 7d 0d 0a 69 66 20 28 74 6f 67 67 6c 65 20 3d 3d 20 27 4e 27 29 20 7b 0d 0a 63 68 61 6e 67 65 4f 62 6a 65 63 74 56 69 73 69 62 69 6c 69 74 79 28 22 61 64 64 5f 61 6d 6f 75 6e 74 22 2c 20 22 68 69 64 64 65 6e 22 29 3b 0d 0a 7d 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 69 6e 64 49 6e 64 65 78 28 6e 61 6d 65 29 20 7b Data Ascii: ageUrl + "", 'detailImage', '400', '550');}function toggleAmt(toggle) {if (toggle == 'Y') {changeObjectVisibility("add_amount", "visible");}if (toggle == 'N') {changeObjectVisibility("add_amount", "hidden");}}function findIndex(name) {
2024-04-18 17:23:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:28 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 72 50 72 6f 64 75 63 74 50 72 69 63 65 22 3e 24 32 35 30 2e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 74 72 6f 6e 67 3e 0d 0a 3c 62 3e 47 72 6f 75 70 20 41 74 74 65 6e 64 65 65 73 3c 2f 62 3e 0d 0a 3c 2f 6c 61 62 65 6c 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 63 6f 72 64 65 64 2d 76 65 72 73 69 6f 6e 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 3e 20 3c 73 70 61 6e 3e 52 45 43 4f 52 44 45 44 20 56 45 52 53 49 4f 4e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 Data Ascii: 1ff8rProductPrice">$250.</span></strong><b>Group Attendees</b></label></div></div></div><div class="recorded-version1"><div class="content"><i class="fa fa-video-camera" aria-hidden="true"></i> <span>RECORDED VERSION</span></div><div i
2024-04-18 17:23:28 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-18 17:23:28 UTC	8184	IN	Data Raw: 77 68 6f 20 6e 65 65 64 73 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 61 6e 61 6c 79 73 69 73 20 66 72 6f 6d 20 45 78 63 65 6c 20 64 61 74 61 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 70 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 53 70 65 61 6b 65 72 5f 50 72 6f 66 69 6c 65 5f 6d 61 69 6e 22 3e 0d 0a 3c 68 34 3e 53 70 65 61 6b 65 72 20 50 72 6f 66 69 6c 65 3c 2f 68 34 3e 0d 0a 3c 73 70 61 6e 20 6e 61 6d 65 3d 22 36 32 36 31 34 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 6c 64 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 63 66 61 66 65 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 32 65 33 66 30 3b 22 3e Data Ascii: who needs to share the analysis from Excel data</li></ul></p><div class="Speaker_Profile_main"><h4>Speaker Profile</h4><span name="62614"><div class="bold" style="background: #ecfafe;display: inline-block;padding: 15px;border: 1px solid #c2e3f0;">
2024-04-18 17:23:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-18 17:23:28 UTC	4432	IN	Data Raw: 32 38 33 0d 0a 31 3b 0d 0a 76 61 72 20 64 75 72 61 74 69 6f 6e 3d 22 64 75 72 61 74 69 6f 6e 22 2b 31 3b 0d 0a 76 61 72 20 70 72 69 63 65 3d 22 70 72 69 63 65 22 2b 31 3b 0d 0a 76 61 72 20 64 61 74 65 3d 22 64 61 74 65 22 2b 31 3b 0d 0a 73 65 74 43 6f 6f 6b 69 65 28 74 69 74 6c 65 2c 70 72 6f 64 75 63 74 5f 64 65 73 63 29 3b 0d 0a 73 65 74 43 6f 6f 6b 69 65 28 70 72 6f 64 75 63 74 5f 49 64 2c 70 72 6f 64 75 63 74 5f 69 64 29 3b 0d 0a 73 65 74 43 6f 6f 6b 69 65 28 69 6e 73 74 72 75 63 74 6f 72 2c 70 72 6f 64 75 63 74 5f 69 6e 73 74 72 75 63 74 6f 72 29 3b 0d 0a 73 65 74 43 6f 6f 6b 69 65 28 64 75 72 61 74 69 6f 6e 2c 70 72 6f 64 75 63 74 5f 64 75 72 61 74 69 6f 6e 29 3b 0d 0a 73 65 74 43 6f 6f 6b 69 65 28 70 72 69 63 65 2c 70 72 6f 64 75 63 74 5f 61 6d 6f Data Ascii: 2831;var duration="duration"+1;var price="price"+1;var date="date"+1;setCookie(title,product_desc);setCookie(product_Id,product_id);setCookie(instructor,product_instructor);setCookie(duration,product_duration);setCookie(price,product_amo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50109	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:28 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:28 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:28 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:28 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876657c69f0212d3-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YZtO37In5Sy%2Fu5KsLaROLGDG8%2F80vTcAvZLki8xKk4SZjxn4tYSjuwXteNLxyhhH2FdCdsq9KP0f1tRMjCfKdE0srf88q4MduHbzc%2B6CeAimdHbVEiouDn%2ByqKUrL3Rtek2Hwhc%2BgNsdBg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=49db95dfd8f97a249add9648292ad51c2981d219-1713461008; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876657c69f0212d3-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50110	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:28 UTC	690	OUT	GET /s/W/ws/i0fuREjk14N6dcnn/c/1713461007666 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: VQ9WGiJvgs+iYp7XqxnSHQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:28 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:28 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=Ptjoy1JjC0jAZUBtYmaL2pNJt6HfcCkaq6eL9h5zDu9qMbpMLT61msKtBlG70Yvsv5JV7ANs/ddJJ1xPiPPrDwom9UptyimxTqkPALJV/Esrpq3Pseu6BUNXsXfDeaqa0FHjF4dsGfIyIf3/xYntloIa7m433yYWBNjp4wqba49yQLWaITxl8KahT2gNfg==; Expires=Thu, 25 Apr 2024 17:23:28 GMT; Path=/ Set-Cookie: AWSALBCORS=Ptjoy1JjC0jAZUBtYmaL2pNJt6HfcCkaq6eL9h5zDu9qMbpMLT61msKtBlG70Yvsv5JV7ANs/ddJJ1xPiPPrDwom9UptyimxTqkPALJV/Esrpq3Pseu6BUNXsXfDeaqa0FHjF4dsGfIyIf3/xYntloIa7m433yYWBNjp4wqba49yQLWaITxl8KahT2gNfg==; Expires=Thu, 25 Apr 2024 17:23:28 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50111	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:29 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:29 UTC	583	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:29 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876657cb9de8b097-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yXR2wOismouZZ0AJ0dkIAnkW5qX7G3rC33WOdxSTW8KqefLu2kJDCpzfteN07kFuSLJYLN5zF2Z185pZW8HYa0tNrnRVD%2BAjrFzaezCa%2BPIqVnKNgl4IH3Cw7nlYUXrJ9phZRsC9lLg42g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876657cb9de8b097-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50112	104.17.98.195	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:29 UTC	546	OUT	GET /?5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt HTTP/1.1 Host: v2.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:29 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 18 Apr 2024 17:23:29 GMT Content-Type: text/html Content-Length: 143 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Server: cloudflare CF-RAY: 876657cd2af707ee-ATL
2024-04-18 17:23:29 UTC	143	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50114	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:30 UTC	536	OUT	GET /embeddable/config HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:31 UTC	1094	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:31 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-7bbdf9d957-cqhbk x-runtime: 0.001936 vary: Origin X-Cached: STALE CF-Cache-Status: EXPIRED Last-Modified: Thu, 18 Apr 2024 17:22:25 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JDIcCmC85FYN%2F2ONcvfvGiLrH8PwzuBaqsSBDMsQVXVENBkLw0erUlDbHr9k2%2F%2FJeCpYlKAjZR45poLCFLpFrOY565B9sf1eP3mHX7j0SLM9ZYjffDjrtPc6Q5HK7OLTPVYdchlbaCL5CA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=1e4656467ed10a67038193ec8d566e54a5435735-1713461011; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876657d6c816677d-ATL
2024-04-18 17:23:31 UTC	275	IN	Data Raw: 32 36 66 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 54 72 61 69 6e 69 6e 6e 67 20 4c 4c 43 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 6c 65 66 74 22 2c 22 63 70 34 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 22 3a 7b 22 63 68 61 74 22 3a 7b 22 65 6d 62 65 64 22 3a 22 63 68 61 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 36 64 62 35 37 38 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 6c 65 66 74 22 2c 22 7a 6f 70 69 6d 49 64 22 3a 22 35 56 46 34 54 79 7a 61 50 48 38 64 39 57 35 5a 70 44 43 6d 58 54 6f 76 35 57 79 57 73 4d 74 74 22 2c 22 73 74 61 6e 64 61 6c 6f 6e 65 22 3a 74 72 75 65 2c 22 62 61 64 67 65 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 32 62 39 Data Ascii: 26f{"brand":"Traininng LLC","brandCount":0,"color":"#6db578","position":"left","cp4":true,"embeds":{"chat":{"embed":"chat","props":{"color":"#6db578","position":"left","zopimId":"5VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt","standalone":true,"badge":{"color":"#2b9
2024-04-18 17:23:31 UTC	355	IN	Data Raw: 22 69 6d 61 67 65 50 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 76 32 2e 7a 6f 70 69 6d 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 69 6d 61 67 65 73 2f 67 61 6c 6c 65 72 79 2f 62 61 64 67 65 2f 63 75 73 74 6f 6d 2f 65 76 65 72 79 64 61 79 2f 30 35 2e 70 6e 67 22 2c 22 6c 61 79 6f 75 74 22 3a 22 69 6d 61 67 65 5f 6f 6e 6c 79 22 2c 22 74 65 78 74 22 3a 22 43 68 61 74 20 77 69 74 68 20 75 73 22 7d 2c 22 66 6f 72 6d 73 22 3a 7b 22 6f 66 66 6c 69 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6d 65 64 69 61 74 6f 72 48 6f 73 74 22 3a 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 22 7d 7d 2c 22 6c 61 75 6e 63 68 65 72 22 3a 7b 22 65 6d 62 65 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 Data Ascii: "imagePath":"https://v2.zopim.com/widget/images/gallery/badge/custom/everyday/05.png","layout":"image_only","text":"Chat with us"},"forms":{"offlineEnabled":true},"mediatorHost":"widget-mediator.zopim.com"}},"launcher":{"embed":"launcher","props":{"color"
2024-04-18 17:23:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50115	35.190.80.1	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:30 UTC	557	OUT	OPTIONS /report/v4?s=yXR2wOismouZZ0AJ0dkIAnkW5qX7G3rC33WOdxSTW8KqefLu2kJDCpzfteN07kFuSLJYLN5zF2Z185pZW8HYa0tNrnRVD%2BAjrFzaezCa%2BPIqVnKNgl4IH3Cw7nlYUXrJ9phZRsC9lLg42g%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://traininngllc.zendesk.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 18 Apr 2024 17:23:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50117	35.190.80.1	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:31 UTC	563	OUT	OPTIONS /report/v4?s=YZtO37In5Sy%2Fu5KsLaROLGDG8%2F80vTcAvZLki8xKk4SZjxn4tYSjuwXteNLxyhhH2FdCdsq9KP0f1tRMjCfKdE0srf88q4MduHbzc%2B6CeAimdHbVEiouDn%2ByqKUrL3Rtek2Hwhc%2BgNsdBg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://traininngllc.zendesk.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 18 Apr 2024 17:23:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50116	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:31 UTC	690	OUT	GET /s/W/ws/H9bADLiKEfRxPT7i/c/1713461009603 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: rqoWSO4BT6Lg6NN0y8SKVQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:31 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:31 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=OacDVynvyYDIvU+Ps7x/7x28tUhS0A+CFABLLVQ7+qQ6ZgKgWNKA3W5lCpJoS6LwzzHXmeV5J9Iv3g43a4b77OUw2YmXCdWoVEU3WS/9FcLRspEK2/GGls5xsd2/W6Y+MJPHTn59AXN+sk1bSnga6rnHskRMrGjBC90rYWK/pQSQbKMJDZ15FZk6nRnYZw==; Expires=Thu, 25 Apr 2024 17:23:31 GMT; Path=/ Set-Cookie: AWSALBCORS=OacDVynvyYDIvU+Ps7x/7x28tUhS0A+CFABLLVQ7+qQ6ZgKgWNKA3W5lCpJoS6LwzzHXmeV5J9Iv3g43a4b77OUw2YmXCdWoVEU3WS/9FcLRspEK2/GGls5xsd2/W6Y+MJPHTn59AXN+sk1bSnga6rnHskRMrGjBC90rYWK/pQSQbKMJDZ15FZk6nRnYZw==; Expires=Thu, 25 Apr 2024 17:23:31 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50119	35.190.80.1	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:31 UTC	491	OUT	POST /report/v4?s=yXR2wOismouZZ0AJ0dkIAnkW5qX7G3rC33WOdxSTW8KqefLu2kJDCpzfteN07kFuSLJYLN5zF2Z185pZW8HYa0tNrnRVD%2BAjrFzaezCa%2BPIqVnKNgl4IH3Cw7nlYUXrJ9phZRsC9lLg42g%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 7325 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:31 UTC	7325	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 36 31 32 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 38 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 35 33 2e 31 31 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 61 69 6e 69 6e 6e 67 6c 6c 63 Data Ascii: [{"age":46126,"body":{"elapsed_time":689,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.16.53.111","status_code":405,"type":"http.error"},"type":"network-error","url":"https://traininngllc
2024-04-18 17:23:31 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 18 Apr 2024 17:23:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50120	216.239.32.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:31 UTC	1205	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713461005042&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D62614&dt=Compliance%20Experts%20%E2%80%93%20traininng&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=7284 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:31 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50122	104.16.51.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:31 UTC	634	OUT	POST /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.traininng.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:31 UTC	186	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 61 63 74 69 6f 6e 22 3a 22 75 6e 69 76 65 72 73 61 6c 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 75 73 65 64 22 7d 2c 22 62 75 69 64 22 3a 22 37 61 33 34 34 39 61 30 34 35 36 38 34 65 36 39 38 36 63 61 34 34 36 32 62 39 37 32 36 63 66 37 22 2c 22 73 75 69 64 22 3a 22 37 32 34 65 39 65 65 35 37 36 31 64 34 37 36 35 38 32 65 62 33 35 36 63 61 37 38 39 34 64 65 39 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 62 63 31 63 30 66 22 7d 5d 7d Data Ascii: {"events":[{"analytics":{"action":"universal","category":"googleanalyticsused"},"buid":"7a3449a045684e6986ca4462b9726cf7","suid":"724e9ee5761d476582eb356ca7894de9","version":"7bc1c0f"}]}
2024-04-18 17:23:31 UTC	764	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:31 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 876657dbaed906ea-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rcSs3zEQxCFOc6EANyHXthjvwHGtGd6aWykL10z%2BHQlXQKSyCiGY95GwTC7zlHnvhajiAlQdN910Lv96boy7jtKzYKFxVXmySMoXyQ%2BVTYSRR2tiw%2FbC4GwGkpwPqsIKmDlubEGCWN7dMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=1e4656467ed10a67038193ec8d566e54a5435735-1713461011; path=/; domain=.traininngllc.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876657dbaed906ea-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50123	35.190.80.1	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:31 UTC	496	OUT	POST /report/v4?s=YZtO37In5Sy%2Fu5KsLaROLGDG8%2F80vTcAvZLki8xKk4SZjxn4tYSjuwXteNLxyhhH2FdCdsq9KP0f1tRMjCfKdE0srf88q4MduHbzc%2B6CeAimdHbVEiouDn%2ByqKUrL3Rtek2Hwhc%2BgNsdBg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 411 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:31 UTC	411	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 38 33 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 35 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 35 31 2e 31 31 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 61 69 6e 69 6e 6e 67 6c 6c 63 2e 7a 65 6e Data Ascii: [{"age":3837,"body":{"elapsed_time":650,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.16.51.111","status_code":0,"type":"abandoned"},"type":"network-error","url":"https://traininngllc.zen
2024-04-18 17:23:31 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 18 Apr 2024 17:23:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50124	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:31 UTC	690	OUT	GET /s/W/ws/eNOo9DO5rrWfw+Xw/c/1713461010935 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW Sec-WebSocket-Key: xveScBzR9kiaA2/5QkYhSw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:31 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:31 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=meAACrsJUBZPxMJS2OpR4LgMke00kyoHDorhUSLq3POV4IzpELJOPirlVaba1oTNLtmTW9b1jJODx0+FcmixnCHM92Trv19DFO5iCKq79vcWoViZEw50niR/IhzKa88G3wsOEUr3BHopWnWG1qxvPXdBGWogy1t3bNOncbghazfDWH4fAhcWKtLxDWX0EQ==; Expires=Thu, 25 Apr 2024 17:23:31 GMT; Path=/ Set-Cookie: AWSALBCORS=meAACrsJUBZPxMJS2OpR4LgMke00kyoHDorhUSLq3POV4IzpELJOPirlVaba1oTNLtmTW9b1jJODx0+FcmixnCHM92Trv19DFO5iCKq79vcWoViZEw50niR/IhzKa88G3wsOEUr3BHopWnWG1qxvPXdBGWogy1t3bNOncbghazfDWH4fAhcWKtLxDWX0EQ==; Expires=Thu, 25 Apr 2024 17:23:31 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50121	104.16.53.111	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:32 UTC	479	OUT	GET /frontendevents/dl?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1 Host: traininngllc.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cfruid=c13895f46ea3730df03debc04d92f7de0af1af48-1713460947
2024-04-18 17:23:32 UTC	585	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 18 Apr 2024 17:23:32 GMT Content-Length: 0 Connection: close X-Zendesk-Zorg: yes X-Request-ID: 876657ddacabad57-ATL CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8jJ0vZOcO6zkRTGLdWnsLVFpnlLS8EGkw%2FgxX%2Fky4XtGGFxqK1ln3Itmdo8DJG7UOpGxVFFUSExoQ8W%2F9pxacqs2stslyVgrLoA0GClPxgTWHYFf7inSaC7uJ5r5mtVDcJvbn0ClOdhAfQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876657ddacabad57-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50125	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:32 UTC	730	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713460991579/1713460991579%0A-494.31798249005976%0A4%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=a40g/VRpFaTptIPCLuvsRYqFQu0G5AAopOTpt2X2Ag+B/WCD+7yW33GilGvYpvPq6O3sLySJ2hDxHmKGY/uwzD2MLhWiRkxanxeB6GdnO+CYUx9w7gph72Ewrp07
2024-04-18 17:23:33 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:33 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=eLEBfh+jIiYhGT0bEaqVy8XqRLxxxU4b43T0rSW3rvUCJN7XGjlGPZDXIkagC/mRpfM6EQcwUERN+D/L19QUr9818xYu7XGoHtqYh6HilDagvVpzdsX6FtQFxszY; Expires=Thu, 25 Apr 2024 17:23:33 GMT; Path=/ Set-Cookie: AWSALBCORS=eLEBfh+jIiYhGT0bEaqVy8XqRLxxxU4b43T0rSW3rvUCJN7XGjlGPZDXIkagC/mRpfM6EQcwUERN+D/L19QUr9818xYu7XGoHtqYh6HilDagvVpzdsX6FtQFxszY; Expires=Thu, 25 Apr 2024 17:23:33 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:33 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50126	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:33 UTC	730	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713460992146/1713460992146%0A-459.43869685220204%0A5%0A3%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=riRh/EqIdC6xY8jUVCyz+FIrCoihZi43/bCO77U1Orbn4MF+kEU86F3JqDpqkxx5SF+xClNCP5BGIFXU8YPtgJJmqdg01FCDMEQ2kS+nFjWp2c96qD657WNBP3yc
2024-04-18 17:23:33 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:33 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=+WuDdCtk5PcZpJNWY+Rw0NhuRAlSvuKH7p6hwfygEGlXYXiSaGBinUEPL+hZQ+Y97QvpG27lJNYl8JxtudWp5LOXD8RNL6H+ZncafQZMvhe4TTU4lbQ3KMk2+wkO; Expires=Thu, 25 Apr 2024 17:23:33 GMT; Path=/ Set-Cookie: AWSALBCORS=+WuDdCtk5PcZpJNWY+Rw0NhuRAlSvuKH7p6hwfygEGlXYXiSaGBinUEPL+hZQ+Y97QvpG27lJNYl8JxtudWp5LOXD8RNL6H+ZncafQZMvhe4TTU4lbQ3KMk2+wkO; Expires=Thu, 25 Apr 2024 17:23:33 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:33 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50127	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:33 UTC	690	OUT	GET /s/W/ws/owIuyBn+KNjNOoT2/c/1713461012631 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=eLEBfh+jIiYhGT0bEaqVy8XqRLxxxU4b43T0rSW3rvUCJN7XGjlGPZDXIkagC/mRpfM6EQcwUERN+D/L19QUr9818xYu7XGoHtqYh6HilDagvVpzdsX6FtQFxszY Sec-WebSocket-Key: GPTZWH4WjHuit+i7pkV5gg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:33 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:33 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=Iub6TAB4za7k3yBc2sbBArFZFH8pw44UqKfiHIefLfrNawgm3+Ve+ElQWXHlMiqEwZxmztywhsJE5GtIlgy1APD6QfI6Fk8weMDn//C1PNUC3da8EkELtRL35tsaPHGlLWasXS7RMCt7cqBzpgccGKclcLlt+85SpvVeyFv7b1+JaE6tF0/aiM4UBGdOkw==; Expires=Thu, 25 Apr 2024 17:23:33 GMT; Path=/ Set-Cookie: AWSALBCORS=Iub6TAB4za7k3yBc2sbBArFZFH8pw44UqKfiHIefLfrNawgm3+Ve+ElQWXHlMiqEwZxmztywhsJE5GtIlgy1APD6QfI6Fk8weMDn//C1PNUC3da8EkELtRL35tsaPHGlLWasXS7RMCt7cqBzpgccGKclcLlt+85SpvVeyFv7b1+JaE6tF0/aiM4UBGdOkw==; Expires=Thu, 25 Apr 2024 17:23:33 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50128	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:33 UTC	1572	OUT	GET /s/W/xdds/yK5ZszCXro6Sjjxj/d/1713460992548/1713460992548%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Power%20of%20Perspective%20and%20Attitude%3A%20How%20to%20Transform%20your%20Life%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fpower-of-perspective-and-attitude%3A-how-to-transform-your-life--206534live%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=+00oyDxJmtCFrGyS9LAtJ9/27PUpU0Tk2VHhnzjABBe+i3pimuO23xv5FrFtp7KYKThizhJnNLDQw02/XuViG4X8QkYLJbOL7FFkwC+1+s6JEvkZfSuxF2wdCAQM
2024-04-18 17:23:34 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:33 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=L+rREeisidqEGpLiDmWcY9J8rGShH2TcLSjCccSjMuWS7Iu53+WE3zRSpRJPdfViPzVxvjJ/nR3YpO1NtvIIQCdXFhik7zUx2UTMTLx/417J+GCU7q4Nucq/bvSu; Expires=Thu, 25 Apr 2024 17:23:33 GMT; Path=/ Set-Cookie: AWSALBCORS=L+rREeisidqEGpLiDmWcY9J8rGShH2TcLSjCccSjMuWS7Iu53+WE3zRSpRJPdfViPzVxvjJ/nR3YpO1NtvIIQCdXFhik7zUx2UTMTLx/417J+GCU7q4Nucq/bvSu; Expires=Thu, 25 Apr 2024 17:23:33 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:34 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50129	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:34 UTC	675	OUT	GET /s/W/xdds/yK5ZszCXro6Sjjxj/p/1713460992550 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=+00oyDxJmtCFrGyS9LAtJ9/27PUpU0Tk2VHhnzjABBe+i3pimuO23xv5FrFtp7KYKThizhJnNLDQw02/XuViG4X8QkYLJbOL7FFkwC+1+s6JEvkZfSuxF2wdCAQM
2024-04-18 17:23:34 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=TOcduYQG38EBftmYScJv/qfBP/Z8kSI5PGkcdH7El6PhXwR0+eTIXHQwjUKuZg2U4O7Vb8173AEe4DqjTEybgVUy4vN7Z9Ue20dXTdTUKRIEGe+XLa2OqWU/4SZy; Expires=Thu, 25 Apr 2024 17:23:34 GMT; Path=/ Set-Cookie: AWSALBCORS=TOcduYQG38EBftmYScJv/qfBP/Z8kSI5PGkcdH7El6PhXwR0+eTIXHQwjUKuZg2U4O7Vb8173AEe4DqjTEybgVUy4vN7Z9Ue20dXTdTUKRIEGe+XLa2OqWU/4SZy; Expires=Thu, 25 Apr 2024 17:23:34 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:34 UTC	4072	IN	Data Raw: 66 65 31 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 34 34 34 33 5c 6e 31 32 31 33 31 2e 32 38 35 37 36 36 33 39 38 31 36 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d 37 Data Ascii: fe1$Loader && ($Loader.payload = "1713461014443\n12131.28576639816\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-7
2024-04-18 17:23:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50130	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:34 UTC	730	OUT	GET /s/W/xdds/18ll0A0MviQGtcZI/d/1713460992741/1713460992741%0A-463.70264686052326%0A3%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl
2024-04-18 17:23:34 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=klA9ajdguSt4VSQbwHpEq/atvkL1gy1zinC9UtM4j66LFMXtJlzfu28UC+f4aOZ5wVffi/Lf8dHzq44vNf/jN5Bf7rpMUokPzeLP1OTSm30HhpKllfz646+CTgUv; Expires=Thu, 25 Apr 2024 17:23:34 GMT; Path=/ Set-Cookie: AWSALBCORS=klA9ajdguSt4VSQbwHpEq/atvkL1gy1zinC9UtM4j66LFMXtJlzfu28UC+f4aOZ5wVffi/Lf8dHzq44vNf/jN5Bf7rpMUokPzeLP1OTSm30HhpKllfz646+CTgUv; Expires=Thu, 25 Apr 2024 17:23:34 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:34 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50131	216.239.32.181	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:34 UTC	1218	OUT	POST /g/collect?v=2&tid=G-MRX28K3N0M&_ng=1&gtm=45je44f0v9136427955za200&_p=1713461009016&gcd=13l3l3l3l2&npa=0&dma=0&ul=en-us&sr=1280x1024&cid=555618656.1713460940&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Ftelling-stories-with-excel-data--206451live&dt=Telling%20stories%20with%20Excel%20data&sid=1713460941&sct=1&seg=1&en=page_view&_ee=1&tfd=6783 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.traininng.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.traininng.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:35 UTC	451	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.traininng.com Date: Thu, 18 Apr 2024 17:23:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50132	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:35 UTC	1485	OUT	GET /s/W/xdds/6UGvo4Q26W1iBuza/d/1713460992863/1713460992863%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Compliance%20Experts%20%E2%80%93%20traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D63494%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl
2024-04-18 17:23:35 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=sBU/YJ2FpNtIcvrowM8aYDaImTi2oh1pBlWQk4Aqs8MadgKtnISte6sKfCGaxzhrw34mKe0JcF2uPhsmc3mSYgwGVrOWbA9O8f5IcfvcCbmk61ZDRykZuB30Ey7E; Expires=Thu, 25 Apr 2024 17:23:35 GMT; Path=/ Set-Cookie: AWSALBCORS=sBU/YJ2FpNtIcvrowM8aYDaImTi2oh1pBlWQk4Aqs8MadgKtnISte6sKfCGaxzhrw34mKe0JcF2uPhsmc3mSYgwGVrOWbA9O8f5IcfvcCbmk61ZDRykZuB30Ey7E; Expires=Thu, 25 Apr 2024 17:23:35 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:35 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50133	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:35 UTC	675	OUT	GET /s/W/xdds/6UGvo4Q26W1iBuza/p/1713460992881 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=3JrlNaDO7ysD1e6YR1ctFtNW1CBXB6wIE3butB2/UAwXgagDzkY9mwwt08KJRvoh/Xl00kniU/yGdI9utq1vwEFIOJDLEKiAmqLdgnWZCMjtc24Ga9qPRwTFeUMl
2024-04-18 17:23:35 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=MMi005mU/CUAcvpBtPHobD4zuRGBVhOZqhYUVtNnVE7TfVN+THSJ6kgg82cxNmQzQOg73kMer3/h6Fu4JNu6vqx9G1ruh2+EF3oGlN7jsjtUShVy1Q/yLsRLyv0G; Expires=Thu, 25 Apr 2024 17:23:35 GMT; Path=/ Set-Cookie: AWSALBCORS=MMi005mU/CUAcvpBtPHobD4zuRGBVhOZqhYUVtNnVE7TfVN+THSJ6kgg82cxNmQzQOg73kMer3/h6Fu4JNu6vqx9G1ruh2+EF3oGlN7jsjtUShVy1Q/yLsRLyv0G; Expires=Thu, 25 Apr 2024 17:23:35 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:35 UTC	4072	IN	Data Raw: 66 65 31 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 35 33 39 31 5c 6e 31 31 30 37 34 2e 30 35 36 30 31 32 34 34 31 35 31 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d 37 Data Ascii: fe1$Loader && ($Loader.payload = "1713461015391\n11074.05601244151\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-7
2024-04-18 17:23:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50134	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:35 UTC	729	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/d/1713461001623/1713461001623%0A-501.5023837035554%0A5%0A3%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
2024-04-18 17:23:35 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=/GUrhej5vqAv4Ge6n5NfVOA1zqBljD45nRFKwf5YsoGEeuUsB6SnA5+lHZF7oVgckBtmMQ5+7W3t6X9O3T+y05bdpqN6g4SvBhXC/+6vUlfFI0yoIhNVz8wyLCIt; Expires=Thu, 25 Apr 2024 17:23:35 GMT; Path=/ Set-Cookie: AWSALBCORS=/GUrhej5vqAv4Ge6n5NfVOA1zqBljD45nRFKwf5YsoGEeuUsB6SnA5+lHZF7oVgckBtmMQ5+7W3t6X9O3T+y05bdpqN6g4SvBhXC/+6vUlfFI0yoIhNVz8wyLCIt; Expires=Thu, 25 Apr 2024 17:23:35 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:35 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50135	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:35 UTC	675	OUT	GET /s/W/xdds/tIyNfGcQ0b8hQ-eV/c/1713461003661 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
2024-04-18 17:23:35 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V; Expires=Thu, 25 Apr 2024 17:23:35 GMT; Path=/ Set-Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V; Expires=Thu, 25 Apr 2024 17:23:35 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:35 UTC	75	IN	Data Raw: 34 35 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 35 38 36 35 5c 6e 31 32 32 30 34 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 45$Loader && ($Loader.payload = "1713461015865\n12204\n1\n0\nn\n15000")
2024-04-18 17:23:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50136	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:36 UTC	715	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/d/1713461004609/1713461004609%0A-500%0A5%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
2024-04-18 17:23:36 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=d4hZVcdFU2+JQ3BVsP+8wsaGulwoPx67KDlJlUSS+/XEcmS+id6q9Z20lnZniiy56q2TFm9Oz5L4btaOsDzHmiDTb4wuTtDxpj6SVWRl0FQFJ3i8utbfN8ui3duC; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/ Set-Cookie: AWSALBCORS=d4hZVcdFU2+JQ3BVsP+8wsaGulwoPx67KDlJlUSS+/XEcmS+id6q9Z20lnZniiy56q2TFm9Oz5L4btaOsDzHmiDTb4wuTtDxpj6SVWRl0FQFJ3i8utbfN8ui3duC; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:36 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50137	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:36 UTC	730	OUT	GET /s/W/xdds/SKukINt-UGvOK5QK/d/1713461004612/1713461004612%0A-502.02323793626044%0A4%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
2024-04-18 17:23:36 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=LuEKINlzhzKR6ONuekeTjXIn0zbTeDuGcRd+9a5o3lNE77kGg2U6PiRM/VS3OmZ3OUPcWg1R/PanQbkyYYNgJ3ToBTZWvuGyh3scsKsQg2ICxE13bnrVMrGGI433; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/ Set-Cookie: AWSALBCORS=LuEKINlzhzKR6ONuekeTjXIn0zbTeDuGcRd+9a5o3lNE77kGg2U6PiRM/VS3OmZ3OUPcWg1R/PanQbkyYYNgJ3ToBTZWvuGyh3scsKsQg2ICxE13bnrVMrGGI433; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:36 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50138	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:36 UTC	690	OUT	GET /s/W/ws/K-Q-O2MIjscWk9Ze/c/1713461015654 HTTP/1.1 Host: widget-mediator.zopim.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.traininng.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V Sec-WebSocket-Key: K6hNKlcfnnqlhRL89M6EIA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-18 17:23:36 UTC	641	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:36 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=++VYLAnd4Fz07JwiMdQalxVmCFP6hBY/LrXS4JZwcZ52WhWQ7YZ+Pa8+cbl7Jy7PkNexMZPtjU2ohiBf8KWEUJPQf01F7BkVEebGuu6pW32RcuYDVMEIMXa/l0P8c+ILX6/UASm1rnzp1oGQgqSsD6u74XIG6Ssfh1ysecLng/Elq9uKdISF+jQc152uvA==; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/ Set-Cookie: AWSALBCORS=++VYLAnd4Fz07JwiMdQalxVmCFP6hBY/LrXS4JZwcZ52WhWQ7YZ+Pa8+cbl7Jy7PkNexMZPtjU2ohiBf8KWEUJPQf01F7BkVEebGuu6pW32RcuYDVMEIMXa/l0P8c+ILX6/UASm1rnzp1oGQgqSsD6u74XIG6Ssfh1ysecLng/Elq9uKdISF+jQc152uvA==; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50139	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:36 UTC	675	OUT	GET /s/W/xdds/Pv1-K-G1h93dn68m/c/1713461005669 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
2024-04-18 17:23:36 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=qYA5omZFemXTRbi49iVhxZcNWcv2GHtElU6t1el1ysSSBBqfI81OnMplNRPT/HoJN3ib97VgAYfU5pIQtFy0MfLoz8XhkMwtNX/PLwCMsItu6omH4vD/DYhC8g8v; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/ Set-Cookie: AWSALBCORS=qYA5omZFemXTRbi49iVhxZcNWcv2GHtElU6t1el1ysSSBBqfI81OnMplNRPT/HoJN3ib97VgAYfU5pIQtFy0MfLoz8XhkMwtNX/PLwCMsItu6omH4vD/DYhC8g8v; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:36 UTC	88	IN	Data Raw: 35 32 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 36 36 38 30 5c 6e 31 30 37 39 38 2e 36 39 35 38 37 37 36 32 35 30 39 38 5c 6e 32 5c 6e 30 5c 6e 70 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 52$Loader && ($Loader.payload = "1713461016680\n10798.695877625098\n2\n0\np\n15000")
2024-04-18 17:23:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50140	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:36 UTC	675	OUT	GET /s/W/xdds/H9bADLiKEfRxPT7i/c/1713461010893 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=PiBV5IZ2HCcVd+yjJCCN5Zae1HLk7OzALprCh5YcPp8+q7LB9OvNEqsKg0bddIDXZk40QqsFK1pAOhS6apNIk4DQaaeDQDfMsxJG6TPew3pW9tMxJXQfoaioQyzW
2024-04-18 17:23:36 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=DnbmMof92mH+g5bvhZDXGHxWXg9lLXKl2pR+8FyI552OFssU7bXdU7EKi9rOh8jwSwkXosPxHb+s0RX1Pkc9TjmA8GbaMjVsuSNhVihPXFwUxYeFbHDOws8pIv3Q; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/ Set-Cookie: AWSALBCORS=DnbmMof92mH+g5bvhZDXGHxWXg9lLXKl2pR+8FyI552OFssU7bXdU7EKi9rOh8jwSwkXosPxHb+s0RX1Pkc9TjmA8GbaMjVsuSNhVihPXFwUxYeFbHDOws8pIv3Q; Expires=Thu, 25 Apr 2024 17:23:36 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:36 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 36 38 31 39 5c 6e 35 39 32 36 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713461016819\n5926\n1\n0\nn\n15000")
2024-04-18 17:23:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50141	34.230.250.51	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:36 UTC	675	OUT	GET /s/W/xdds/DyrSvFruBUrXMaS9/p/1713461012033 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=9xW9uDHcw3WFxuOWUWW3KbrQ0zHWhgd2mm9PhUYU0LenPXPDPD1rIuCyT8xAAb/pytYmoXBzhf8OdcVoRg3W6hSJj5kURO8NsoiMvxLlJVOtHAq5YzJLN+ZNIQJ6
2024-04-18 17:23:37 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=29UOwmAdaSDcsjnnGeT0RaYmwAQq/zs9LlQLaWO8s5J5QdMP0IDb2OrTJIJw9QEIiAjbqDl6v9KaS8M6DVse8ATFPskvhRsS6U0ztMDwB03sHlGko1zZNYSgwCpG; Expires=Thu, 25 Apr 2024 17:23:37 GMT; Path=/ Set-Cookie: AWSALBCORS=29UOwmAdaSDcsjnnGeT0RaYmwAQq/zs9LlQLaWO8s5J5QdMP0IDb2OrTJIJw9QEIiAjbqDl6v9KaS8M6DVse8ATFPskvhRsS6U0ztMDwB03sHlGko1zZNYSgwCpG; Expires=Thu, 25 Apr 2024 17:23:37 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:37 UTC	1198	IN	Data Raw: 34 61 37 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 37 35 32 32 5c 6e 37 30 31 33 2e 30 33 30 31 30 32 33 37 30 36 36 35 5c 6e 35 5c 6e 35 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 7b 5c 22 6c 6f 67 5c 22 3a 7b 5c 22 31 37 31 33 34 36 31 30 31 37 34 32 31 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 24 73 74 72 69 6e 67 5c 22 3a 5c 22 23 73 75 70 70 6f 72 74 63 68 61 74 3a 31 39 31 30 35 30 31 35 2d 31 4c 4c 6d 65 64 76 73 45 78 57 48 75 7a 76 5c 22 2c 5c 22 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 31 33 34 36 31 30 31 37 34 32 31 2c 5c 22 69 6e 64 65 78 Data Ascii: 4a7$Loader && ($Loader.payload = "1713461017522\n7013.030102370665\n5\n5\nd\n{\"path\":\"livechat\",\"update\":{\"channel\":{\"log\":{\"1713461017421\":{\"channel$string\":\"#supportchat:19105015-1LLmedvsExWHuzv\",\"timestamp$int\":1713461017421,\"index
2024-04-18 17:23:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
341	192.168.2.4	50142	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:37 UTC	730	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/d/1713461012510/1713461012510%0A-494.31798249005976%0A5%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=eLEBfh+jIiYhGT0bEaqVy8XqRLxxxU4b43T0rSW3rvUCJN7XGjlGPZDXIkagC/mRpfM6EQcwUERN+D/L19QUr9818xYu7XGoHtqYh6HilDagvVpzdsX6FtQFxszY
2024-04-18 17:23:37 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=nhOQOPryfJenvODWD1U8JuIrfIZtUwDxAjJk7uEC2+ovR1aRbXtySorH4U4bFE+ALcZDdl3t1I0NImsCBskHG/6BBC70S3lq5JladQWQGbmiAOk6QbHOMyjPjD84; Expires=Thu, 25 Apr 2024 17:23:37 GMT; Path=/ Set-Cookie: AWSALBCORS=nhOQOPryfJenvODWD1U8JuIrfIZtUwDxAjJk7uEC2+ovR1aRbXtySorH4U4bFE+ALcZDdl3t1I0NImsCBskHG/6BBC70S3lq5JladQWQGbmiAOk6QbHOMyjPjD84; Expires=Thu, 25 Apr 2024 17:23:37 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:37 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
342	192.168.2.4	50143	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:37 UTC	730	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/d/1713461012985/1713461012985%0A-459.43869685220204%0A6%0A3%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=+WuDdCtk5PcZpJNWY+Rw0NhuRAlSvuKH7p6hwfygEGlXYXiSaGBinUEPL+hZQ+Y97QvpG27lJNYl8JxtudWp5LOXD8RNL6H+ZncafQZMvhe4TTU4lbQ3KMk2+wkO
2024-04-18 17:23:37 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=khmORQBpRjNwye27p8/tJwgd3+gizYX/kNLGUG6eX0pTfHnNkeDcE8dHO1OnuLnCrjsbL5BxCKUUFVI76a2fkmpCZjM3hMDdrjx3/GW3sXQZJGxv1yL0bRLF+fkQ; Expires=Thu, 25 Apr 2024 17:23:37 GMT; Path=/ Set-Cookie: AWSALBCORS=khmORQBpRjNwye27p8/tJwgd3+gizYX/kNLGUG6eX0pTfHnNkeDcE8dHO1OnuLnCrjsbL5BxCKUUFVI76a2fkmpCZjM3hMDdrjx3/GW3sXQZJGxv1yL0bRLF+fkQ; Expires=Thu, 25 Apr 2024 17:23:37 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:37 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
343	192.168.2.4	50145	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:37 UTC	715	OUT	GET /s/W/xdds/yK5ZszCXro6Sjjxj/d/1713461013464/1713461013464%0A-495%0A2%0A1%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=L+rREeisidqEGpLiDmWcY9J8rGShH2TcLSjCccSjMuWS7Iu53+WE3zRSpRJPdfViPzVxvjJ/nR3YpO1NtvIIQCdXFhik7zUx2UTMTLx/417J+GCU7q4Nucq/bvSu
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=nwr0XXkJAt1xzNPlzCUF5fS7VSa+ewMBzoluR7IpIxoUyjZ0yxemJo00xC+unCSIVZsVpOV5YxqG0njxsawSQwY51A/i6i3NqJHQ7kPKSvxt1I9TyYFeao/Gtxl1; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=nwr0XXkJAt1xzNPlzCUF5fS7VSa+ewMBzoluR7IpIxoUyjZ0yxemJo00xC+unCSIVZsVpOV5YxqG0njxsawSQwY51A/i6i3NqJHQ7kPKSvxt1I9TyYFeao/Gtxl1; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
344	192.168.2.4	50146	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:37 UTC	675	OUT	GET /s/W/xdds/yK5ZszCXro6Sjjxj/p/1713461013981 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=TOcduYQG38EBftmYScJv/qfBP/Z8kSI5PGkcdH7El6PhXwR0+eTIXHQwjUKuZg2U4O7Vb8173AEe4DqjTEybgVUy4vN7Z9Ue20dXTdTUKRIEGe+XLa2OqWU/4SZy
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=6CgzgxHKL2AlEWZZrlF+U6al4blAiMMGXaIgeIqrHLFoAkIFhJ5/cD3CuhZ8FDLGq5k9o1C/HHpyCGKUE7JnOrm6EjyVZfwSUGCnWazU9u46e7CK8k/6Wy7KMULH; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=6CgzgxHKL2AlEWZZrlF+U6al4blAiMMGXaIgeIqrHLFoAkIFhJ5/cD3CuhZ8FDLGq5k9o1C/HHpyCGKUE7JnOrm6EjyVZfwSUGCnWazU9u46e7CK8k/6Wy7KMULH; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	2225	IN	Data Raw: 38 61 61 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 30 30 37 5c 6e 31 31 35 37 34 2e 33 30 32 36 34 38 36 37 31 35 39 37 5c 6e 33 5c 6e 32 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 7b 5c 22 6c 6f 67 5c 22 3a 7b 5c 22 31 37 31 33 34 36 31 30 31 37 34 32 31 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 24 73 74 72 69 6e 67 5c 22 3a 5c 22 23 73 75 70 70 6f 72 74 63 68 61 74 3a 31 39 31 30 35 30 31 35 2d 31 4c 4c 6d 65 64 76 73 45 78 57 48 75 7a 76 5c 22 2c 5c 22 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 31 33 34 36 31 30 31 37 34 32 31 2c 5c 22 69 6e 64 65 Data Ascii: 8aa$Loader && ($Loader.payload = "1713461018007\n11574.302648671597\n3\n2\nd\n{\"path\":\"livechat\",\"update\":{\"channel\":{\"log\":{\"1713461017421\":{\"channel$string\":\"#supportchat:19105015-1LLmedvsExWHuzv\",\"timestamp$int\":1713461017421,\"inde
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
345	192.168.2.4	50144	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:37 UTC	675	OUT	GET /s/W/xdds/vASWZvCWfxsRirPH/p/1713461014263 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=ZTJ/5h91VuavkrkF0s1BKOeQAbIJ9juy5STe7yGDXS4ZOOwFs2PUycUIATUsgIkQdmh2VErF7NupQcTZeTm0z5HNtqQbrEoKsdQdTfoTTVt60D7RtKaVq++SRF/V
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=V6ZEVVANtjPA4e2xGWrDtjUbQr5gTeaIJ0vcEIsttiVkclEvC108KlrQo/Q842hn+yWSwUJ84YgbZWnLC3I5R6EQAnkS76KbN+DOCI4fNAhHQQ8X+2UUgU5WbmSi; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=V6ZEVVANtjPA4e2xGWrDtjUbQr5gTeaIJ0vcEIsttiVkclEvC108KlrQo/Q842hn+yWSwUJ84YgbZWnLC3I5R6EQAnkS76KbN+DOCI4fNAhHQQ8X+2UUgU5WbmSi; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	2225	IN	Data Raw: 38 61 61 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 30 30 39 5c 6e 35 35 34 36 2e 34 38 37 32 32 37 39 38 31 37 38 35 35 5c 6e 34 5c 6e 35 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 7b 5c 22 6c 6f 67 5c 22 3a 7b 5c 22 31 37 31 33 34 36 31 30 31 37 34 32 31 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 24 73 74 72 69 6e 67 5c 22 3a 5c 22 23 73 75 70 70 6f 72 74 63 68 61 74 3a 31 39 31 30 35 30 31 35 2d 31 4c 4c 6d 65 64 76 73 45 78 57 48 75 7a 76 5c 22 2c 5c 22 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 31 33 34 36 31 30 31 37 34 32 31 2c 5c 22 69 6e 64 65 Data Ascii: 8aa$Loader && ($Loader.payload = "1713461018009\n5546.4872279817855\n4\n5\nd\n{\"path\":\"livechat\",\"update\":{\"channel\":{\"log\":{\"1713461017421\":{\"channel$string\":\"#supportchat:19105015-1LLmedvsExWHuzv\",\"timestamp$int\":1713461017421,\"inde
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
346	192.168.2.4	50147	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:37 UTC	730	OUT	GET /s/W/xdds/18ll0A0MviQGtcZI/d/1713461014410/1713461014410%0A-463.70264686052326%0A4%0A2%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=klA9ajdguSt4VSQbwHpEq/atvkL1gy1zinC9UtM4j66LFMXtJlzfu28UC+f4aOZ5wVffi/Lf8dHzq44vNf/jN5Bf7rpMUokPzeLP1OTSm30HhpKllfz646+CTgUv
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=uRBZm1pdsheIG1SzrP5HYPrACa4521H4jGhXsV8Q6IEQVIi+w8hafTXrjxoiGcU2OptXOGDkhHzhHcGJbnYUHB+oOOg64Ye58lyMxfWNUuUa26EJSb0g8qG8sNnI; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=uRBZm1pdsheIG1SzrP5HYPrACa4521H4jGhXsV8Q6IEQVIi+w8hafTXrjxoiGcU2OptXOGDkhHzhHcGJbnYUHB+oOOg64Ye58lyMxfWNUuUa26EJSb0g8qG8sNnI; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
347	192.168.2.4	50148	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:37 UTC	715	OUT	GET /s/W/xdds/6UGvo4Q26W1iBuza/d/1713461014744/1713461014744%0A-189%0A2%0A1%0Ad%0Anull HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=sBU/YJ2FpNtIcvrowM8aYDaImTi2oh1pBlWQk4Aqs8MadgKtnISte6sKfCGaxzhrw34mKe0JcF2uPhsmc3mSYgwGVrOWbA9O8f5IcfvcCbmk61ZDRykZuB30Ey7E
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=cNGFr6uS25oIqznw5NFPtEHBJMpBP13HCYO3a5ZN1/8C9Iiech9vXmCeOt3OhesfLbRkFrS1GwCHhsVfPSw8RrheHTGVYZzDOsg9Pji4d3eNxOZKo7l4UNcKLi1V; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=cNGFr6uS25oIqznw5NFPtEHBJMpBP13HCYO3a5ZN1/8C9Iiech9vXmCeOt3OhesfLbRkFrS1GwCHhsVfPSw8RrheHTGVYZzDOsg9Pji4d3eNxOZKo7l4UNcKLi1V; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
348	192.168.2.4	50151	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/6UGvo4Q26W1iBuza/p/1713461014949 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=MMi005mU/CUAcvpBtPHobD4zuRGBVhOZqhYUVtNnVE7TfVN+THSJ6kgg82cxNmQzQOg73kMer3/h6Fu4JNu6vqx9G1ruh2+EF3oGlN7jsjtUShVy1Q/yLsRLyv0G
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=mDiXSj31UEYu6wwn+jGEOXkRBhdvbukrbwYPPjmQ72KmfZOjYxQDX35dGMhAfpPWZNn9l3uApP1HsXad5PT0WEbXdItwAVCnEusgivSne8E9vbS1YLyqjYjpOWBt; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=mDiXSj31UEYu6wwn+jGEOXkRBhdvbukrbwYPPjmQ72KmfZOjYxQDX35dGMhAfpPWZNn9l3uApP1HsXad5PT0WEbXdItwAVCnEusgivSne8E9vbS1YLyqjYjpOWBt; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	2225	IN	Data Raw: 38 61 61 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 32 37 31 5c 6e 31 30 36 30 32 2e 38 32 35 35 36 31 37 38 34 35 37 37 5c 6e 33 5c 6e 32 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 5c 22 3a 7b 5c 22 6c 6f 67 5c 22 3a 7b 5c 22 31 37 31 33 34 36 31 30 31 37 34 32 31 5c 22 3a 7b 5c 22 63 68 61 6e 6e 65 6c 24 73 74 72 69 6e 67 5c 22 3a 5c 22 23 73 75 70 70 6f 72 74 63 68 61 74 3a 31 39 31 30 35 30 31 35 2d 31 4c 4c 6d 65 64 76 73 45 78 57 48 75 7a 76 5c 22 2c 5c 22 74 69 6d 65 73 74 61 6d 70 24 69 6e 74 5c 22 3a 31 37 31 33 34 36 31 30 31 37 34 32 31 2c 5c 22 69 6e 64 65 Data Ascii: 8aa$Loader && ($Loader.payload = "1713461018271\n10602.825561784577\n3\n2\nd\n{\"path\":\"livechat\",\"update\":{\"channel\":{\"log\":{\"1713461017421\":{\"channel$string\":\"#supportchat:19105015-1LLmedvsExWHuzv\",\"timestamp$int\":1713461017421,\"inde
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
349	192.168.2.4	50156	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	1649	OUT	GET /s/W/xdds/tIyNfGcQ0b8hQ-eV/d/1713461015365/1713461015365%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Managing%20Termination%20of%20Employment%20in%20the%20Canadian%20Workplace%3A%20New%20Developments%20and%20Best%20Practices%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Fmanaging-termination-of-employment-in-the-canadian-workplace%3A-new-developments-and-best-practices-206529live%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=LQz3s3qLnQga2f5Xy75CmM78m/+72X6Z/iZ45H1XwGN7tZUXDtZqxxKKzEAVOakMWsn5Bf+rs9pisViZxidiA+1eANobpbzdAmvM0G/DxS3Vzu0NG07plorluqyb; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=LQz3s3qLnQga2f5Xy75CmM78m/+72X6Z/iZ45H1XwGN7tZUXDtZqxxKKzEAVOakMWsn5Bf+rs9pisViZxidiA+1eANobpbzdAmvM0G/DxS3Vzu0NG07plorluqyb; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
350	192.168.2.4	50157	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/tIyNfGcQ0b8hQ-eV/p/1713461015367 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=6Ldk7KFVC4MULboYHt1l4KPd9eGzH+G3opy7pOafkd8NtWk5BBLx76HE/XTCZ37Yc6qpYK02VsQMEBM394Ezhi591u3SZ5fGDubR2zghUBmdCSOodhFO0yUfXZDK; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=6Ldk7KFVC4MULboYHt1l4KPd9eGzH+G3opy7pOafkd8NtWk5BBLx76HE/XTCZ37Yc6qpYK02VsQMEBM394Ezhi591u3SZ5fGDubR2zghUBmdCSOodhFO0yUfXZDK; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	345	IN	Data Raw: 31 35 32 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 34 39 31 5c 6e 31 31 37 30 33 2e 33 34 37 34 31 35 32 37 37 33 37 5c 6e 32 5c 6e 30 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d 37 Data Ascii: 152$Loader && ($Loader.payload = "1713461018491\n11703.34741527737\n2\n0\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-7
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
351	192.168.2.4	50160	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/mag4xmOOxKAnhFKT/c/1713461015638 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=2uNkp+/MPscKKuAqYavvcJhTlYPvufe007edrlsluiFijG8bVwoevado13MucfYyu/TC1QVdINz7a5p4jMDL+sCYbhMBrvbSeVAeiUrBHLPxVxLGSoiN0XMSZN3V
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=PvtLH0Q2pW6B43w1EcOBF+w+wCRpNSaxa7CV3anVTW47i32oVFo8jROH8g+xxsKVl77BU5CjengMd2JqYPZ11EVEXLhsxnb/od9CjNmSTprGgeKMROuu7OztMSdI; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=PvtLH0Q2pW6B43w1EcOBF+w+wCRpNSaxa7CV3anVTW47i32oVFo8jROH8g+xxsKVl77BU5CjengMd2JqYPZ11EVEXLhsxnb/od9CjNmSTprGgeKMROuu7OztMSdI; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	74	IN	Data Raw: 34 34 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 34 39 38 5c 6e 32 38 36 30 5c 6e 31 5c 6e 30 5c 6e 6e 5c 6e 31 35 30 30 30 22 29 0d 0a Data Ascii: 44$Loader && ($Loader.payload = "1713461018498\n2860\n1\n0\nn\n15000")
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
352	192.168.2.4	50158	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	1485	OUT	GET /s/W/xdds/Pv1-K-G1h93dn68m/d/1713461016179/1713461016179%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Compliance%20Experts%20%E2%80%93%20traininng%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fspeakerprofile%3Fspeaker_id%3D63240%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=qYA5omZFemXTRbi49iVhxZcNWcv2GHtElU6t1el1ysSSBBqfI81OnMplNRPT/HoJN3ib97VgAYfU5pIQtFy0MfLoz8XhkMwtNX/PLwCMsItu6omH4vD/DYhC8g8v
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=HrD83eZ9yyubVZwoHrag0skys0u2ZCipe24NYCOzber2VcBGbHLPm+6WWa0FRt55LkGd3jeEiHpncas/SUhylftrlzqH9leJx1Ruc4sZYqBI++FXFP9su8HqbVB+; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=HrD83eZ9yyubVZwoHrag0skys0u2ZCipe24NYCOzber2VcBGbHLPm+6WWa0FRt55LkGd3jeEiHpncas/SUhylftrlzqH9leJx1Ruc4sZYqBI++FXFP9su8HqbVB+; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
353	192.168.2.4	50159	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/Pv1-K-G1h93dn68m/p/1713461016181 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=qYA5omZFemXTRbi49iVhxZcNWcv2GHtElU6t1el1ysSSBBqfI81OnMplNRPT/HoJN3ib97VgAYfU5pIQtFy0MfLoz8XhkMwtNX/PLwCMsItu6omH4vD/DYhC8g8v
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=RBXENVbzeIDpyQVG1c/2jOqC8AEsd5/hjbqOWWjKqUhxbNnGAXLBQRUc2WUzYm2oFJSAHvcPWUBn1bHDi6EzqKbL+pc5baXRupU8/ooElvbcNcz3XCt2ENBR0B6z; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=RBXENVbzeIDpyQVG1c/2jOqC8AEsd5/hjbqOWWjKqUhxbNnGAXLBQRUc2WUzYm2oFJSAHvcPWUBn1bHDi6EzqKbL+pc5baXRupU8/ooElvbcNcz3XCt2ENBR0B6z; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	5546	IN	Data Raw: 31 35 61 32 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 34 39 37 5c 6e 31 30 34 36 39 2e 30 31 34 34 36 30 39 38 31 39 37 5c 6e 33 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 2d Data Ascii: 15a2$Loader && ($Loader.payload = "1713461018497\n10469.01446098197\n3\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66-
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
354	192.168.2.4	50165	104.18.70.113	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	535	OUT	GET /web_widget/classic/latest/web-widget-4261-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:38 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 54024 Connection: close x-amz-id-2: QTA+LxTUTISBFJTumoVCnv9vlN6m3n5X0TnndqrzMPHEUl1CvTSbp+5vpM7TObtKUfuRv/8T1K/mAdX46kUtPg== x-amz-request-id: 18RTSYXFN005T20R x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "dc491080cf58a51f25e19fd8f2a357ad" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: INUx0jjxoT2h62BmXM913K6OnJVDw5PJ CF-Cache-Status: HIT Age: 625097 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ksy43z0WYsm3S%2FLJsiA64NpShXk5xOR28UTkcTkk8BkYmdWKl22dVApsgnkFccOn7WI0sf%2BYRsDlTF9SouATFBZUIgWFzHUkma8JIPIh5Z4gOjKnlPP7Q3yhnVifjfUBlfQ1EeQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 876658064f5b450d-ATL
2024-04-18 17:23:38 UTC	179	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 36 31 5d 2c 7b 34 35 33 33 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 65 5b 72 5d 3d 74 5b 72 5d 7d 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e Data Ascii: -widget-sdks/web-widget/getting-started/legal/ */(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[4261],{45335:(e,t,r)=>{!function(e,t){for(var r in t)e[r]=t[r]}(t,function(e){var t={};fun
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 2c 61 3d 72 28 33 29 2c 69 3d 72 2e 6e 28 61 29 2c 73 3d 72 28 34 29 2c 75 3d 72 2e 6e 28 73 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6e 29 7d 72 65 74 75 72 6e 20 72 7d Data Ascii: ,a=r(3),i=r.n(a),s=r(4),u=r.n(s);function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 28 29 7d 28 4f 62 6a 65 63 74 28 6e 2e 75 73 65 53 74 61 74 65 29 28 63 2e 63 75 72 72 65 6e 74 29 2c 32 29 2c 64 3d 66 5b 30 5d 2c 70 3d 66 5b 31 5d 3b 4f 62 6a 65 63 74 28 6e 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 75 72 72 65 6e 74 21 3d 3d 64 26 26 70 28 63 2e 63 75 72 72 65 6e 74 29 7d 29 29 3b 76 61 72 20 79 3d 4f 62 6a 65 63 74 28 6e 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 3f 73 28 65 29 3a 65 26 26 65 2e 66 6f 63 75 73 28 29 7d 29 2c 5b 73 5d 29 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 7c 7c 64 6f 63 75 6d 65 6e 74 2c 74 3d 75 28 29 28 65 29 2c 72 3d 64 3b Data Ascii: ture non-iterable instance")}()}(Object(n.useState)(c.current),2),d=f[0],p=f[1];Object(n.useEffect)((function(){c.current!==d&&p(c.current)}));var y=Object(n.useCallback)((function(e){s?s(e):e&&e.focus()}),[s]),m=function(){var e=a\|\|document,t=u()(e),r=d;
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 6f 6e 22 3a 22 31 2e 32 2e 32 22 7d 2c 72 29 7d 2c 66 6f 63 75 73 45 6c 65 6d 65 6e 74 3a 79 7d 7d 2c 70 3d 72 28 30 29 2c 79 3d 72 2e 6e 28 70 29 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 72 3d 65 2e 72 65 6e 64 65 72 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 74 3a 72 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 72 2c 6e 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 72 2c 6e 2c 6f 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 6e 3d 30 3b 6e 3c 61 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 72 3d 61 5b 6e 5d 2c 74 2e Data Ascii: on":"1.2.2"},r)},focusElement:y}},p=r(0),y=r.n(p);var m=function(e){var t=e.children,r=e.render,n=void 0===r?t:r,o=function(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 72 2e 72 28 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 29 72 2e 64 28 6e 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 72 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: .create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 50 41 44 5f 41 44 44 3a 31 30 37 2c 4e 55 4d 50 41 44 5f 44 45 43 49 4d 41 4c 3a 31 31 30 2c 4e 55 4d 50 41 44 5f 44 49 56 49 44 45 3a 31 31 31 2c 4e 55 4d 50 41 44 5f 45 4e 54 45 52 3a 31 30 38 2c 4e 55 4d 50 41 44 5f 4d 55 4c 54 49 50 4c 59 3a 31 30 36 2c 4e 55 4d 50 41 44 5f 53 55 42 54 52 41 43 54 3a 31 30 39 2c 50 41 47 45 5f 44 4f 57 4e 3a 33 34 2c 50 41 47 45 5f 55 50 3a 33 33 2c 50 45 52 49 4f 44 3a 31 39 30 2c 52 49 47 48 54 3a 33 39 2c 53 48 49 46 54 3a 31 36 2c 53 50 41 43 45 3a 33 32 2c 54 41 42 3a 39 2c 55 50 3a 33 38 7d 3b 72 2e 64 28 74 2c 22 63 6f 6d 70 6f 73 65 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 2c 72 2e 64 28 74 2c 22 67 65 6e 65 72 61 74 65 49 64 22 2c 28 66 Data Ascii: PAD_ADD:107,NUMPAD_DECIMAL:110,NUMPAD_DIVIDE:111,NUMPAD_ENTER:108,NUMPAD_MULTIPLY:106,NUMPAD_SUBTRACT:109,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SHIFT:16,SPACE:32,TAB:9,UP:38};r.d(t,"composeEventHandlers",(function(){return n})),r.d(t,"generateId",(f
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 2c 65 7d 2c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 7d 2c 66 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 64 3d 66 75 6e 63 74 69 Data Ascii: unction l(e,t){return l=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e},l(e,t)}function f(e){return f=Object.setPrototypeOf?Object.getPrototypeOf:function(e){return e.__proto__\|\|Object.getPrototypeOf(e)},f(e)}function d(e,t,r){return d=functi
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 74 79 6c 65 64 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 70 6f 6c 69 73 68 65 64 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 73 72 63 2f 69 6e 74 65 72 6e 61 6c 48 65 6c 70 65 72 73 2f 65 72 72 6f 72 73 2e 6d 64 23 22 2b 74 2b 22 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 29 7c 7c 74 68 69 73 29 7d 72 65 74 75 72 6e 20 72 3d 65 2c 28 74 3d 6e 29 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 2e 70 72 6f 74 6f 74 79 70 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 2c 6c 28 74 2c 72 29 2c 6e 7d 28 70 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 32 35 35 Data Ascii: ps://github.com/styled-components/polished/blob/main/src/internalHelpers/errors.md#"+t+" for more information.")\|\|this)}return r=e,(t=n).prototype=Object.create(r.prototype),t.prototype.constructor=t,l(t,r),n}(p(Error));function m(e){return Math.round(255
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 39 34 30 30 64 33 22 2c 64 65 65 70 70 69 6e 6b 3a 22 66 66 31 34 39 33 22 2c 64 65 65 70 73 6b 79 62 6c 75 65 3a 22 30 30 62 66 66 66 22 2c 64 69 6d 67 72 61 79 3a 22 36 39 36 39 36 39 22 2c 64 69 6d 67 72 65 79 3a 22 36 39 36 39 36 39 22 2c 64 6f 64 67 65 72 62 6c 75 65 3a 22 31 65 39 30 66 66 22 2c 66 69 72 65 62 72 69 63 6b 3a 22 62 32 32 32 32 32 22 2c 66 6c 6f 72 61 6c 77 68 69 74 65 3a 22 66 66 66 61 66 30 22 2c 66 6f 72 65 73 74 67 72 65 65 6e 3a 22 32 32 38 62 32 32 22 2c 66 75 63 68 73 69 61 3a 22 66 66 30 30 66 66 22 2c 67 61 69 6e 73 62 6f 72 6f 3a 22 64 63 64 63 64 63 22 2c 67 68 6f 73 74 77 68 69 74 65 3a 22 66 38 66 38 66 66 22 2c 67 6f 6c 64 3a 22 66 66 64 37 30 30 22 2c 67 6f 6c 64 65 6e 72 6f 64 3a 22 64 61 61 35 32 30 22 2c 67 72 61 79 Data Ascii: 9400d3",deeppink:"ff1493",deepskyblue:"00bfff",dimgray:"696969",dimgrey:"696969",dodgerblue:"1e90ff",firebrick:"b22222",floralwhite:"fffaf0",forestgreen:"228b22",fuchsia:"ff00ff",gainsboro:"dcdcdc",ghostwhite:"f8f8ff",gold:"ffd700",goldenrod:"daa520",gray

Session ID	Source IP	Source Port	Destination IP	Destination Port
355	192.168.2.4	50164	104.18.70.113	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	542	OUT	GET /web_widget/classic/latest/web-widget-lazy/embeds-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:23:38 UTC	1188	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 67925 Connection: close x-amz-id-2: XGkPBQ9OveNIw5qtc4knNisx6Stwtx2TFtjcxl4AMH2+Okf4EXxZoOZgutxje3J3aHc9auOSSKc= x-amz-request-id: VMMSSZBKAHRR5CQE x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "74973835a21b3a876cfcbd2147981319" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: PcG6j23zqUL8kzF3HbFp.CmkgJnL7QgM CF-Cache-Status: HIT Age: 625097 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2BhwU9tqrYySqBLGS5z%2BrE4ABuAmA5NOuS4z6a6EmwL7iDfr8oxwxSTr%2BO30nuyeqbgcRYP13h%2BctEQU2D3CiDNlmftVu%2BHZ6pkKxyt7cuyvmZkceZM%2Bj3In4N6d%2FWGzAI3i20Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 876658064e4a5084-ATL
2024-04-18 17:23:38 UTC	181	IN	Data Raw: 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 39 30 5d 2c 7b 38 37 39 31 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 71 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 6e 3d 69 28 34 39 30 37 32 Data Ascii: (globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[6890],{87914:(e,t,i)=>{"use strict";i.d(t,{q:()=>h});var n=i(49072
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 29 2c 6f 3d 69 2e 6e 28 6e 29 2c 72 3d 69 28 39 38 30 34 39 29 2c 61 3d 69 2e 6e 28 72 29 2c 6c 3d 69 28 31 35 38 32 36 29 2c 73 3d 69 28 38 35 37 39 33 29 2c 64 3d 69 28 37 33 34 33 38 29 2c 63 3d 69 28 35 35 37 38 36 29 3b 63 6c 61 73 73 20 68 20 65 78 74 65 6e 64 73 20 6c 2e 43 6f 6d 70 6f 6e 65 6e 74 7b 73 74 61 74 69 63 20 70 72 6f 70 54 79 70 65 73 3d 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 73 74 72 69 6e 67 2c 73 72 63 3a 61 28 29 2e 73 74 72 69 6e 67 2c 66 61 6c 6c 62 61 63 6b 49 63 6f 6e 3a 61 28 29 2e 73 74 72 69 6e 67 7d 3b 73 74 61 74 69 63 20 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 22 2c 73 72 63 3a 22 22 7d 3b 72 65 6e 64 65 72 43 75 73 74 6f 6d 3d 65 3d 3e 28 30 2c 63 2e 6a 73 78 29 28 22 69 6d 67 22 Data Ascii: ),o=i.n(n),r=i(98049),a=i.n(r),l=i(15826),s=i(85793),d=i(73438),c=i(55786);class h extends l.Component{static propTypes={className:a().string,src:a().string,fallbackIcon:a().string};static defaultProps={className:"",src:""};renderCustom=e=>(0,c.jsx)("img"
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 72 6f 70 73 2e 65 6e 64 50 6f 73 48 65 69 67 68 74 7d 2c 65 78 69 74 69 6e 67 3a 7b 6f 70 61 63 69 74 79 3a 30 2c 5b 69 5d 3a 74 68 69 73 2e 70 72 6f 70 73 2e 73 74 61 72 74 50 6f 73 48 65 69 67 68 74 7d 7d 3b 72 65 74 75 72 6e 28 30 2c 73 2e 6a 73 78 29 28 61 2e 5a 50 2c 7b 69 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 74 72 69 67 67 65 72 2c 61 70 70 65 61 72 3a 74 68 69 73 2e 70 72 6f 70 73 2e 74 72 61 6e 73 69 74 69 6f 6e 4f 6e 4d 6f 75 6e 74 2c 74 69 6d 65 6f 75 74 3a 65 2c 75 6e 6d 6f 75 6e 74 4f 6e 45 78 69 74 3a 21 30 2c 6d 6f 75 6e 74 4f 6e 45 6e 74 65 72 3a 21 30 2c 6f 6e 45 78 69 74 65 64 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 45 78 69 74 65 64 2c 6f 6e 45 6e 74 65 72 65 64 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 45 6e 74 65 72 65 64 2c 63 68 Data Ascii: rops.endPosHeight},exiting:{opacity:0,[i]:this.props.startPosHeight}};return(0,s.jsx)(a.ZP,{in:this.props.trigger,appear:this.props.transitionOnMount,timeout:e,unmountOnExit:!0,mountOnEnter:!0,onExited:this.props.onExited,onEntered:this.props.onEntered,ch
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 30 30 35 38 29 3b 63 6f 6e 73 74 20 67 3d 63 2e 5a 50 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 73 74 79 6c 65 73 5f 5f 43 74 61 43 6f 6e 74 61 69 6e 65 72 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 32 78 38 77 39 39 2d 30 22 7d 29 28 5b 22 22 2c 22 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 22 2c 22 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 22 5d 2c 28 65 3d 3e 65 3f 22 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 22 3a 60 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 24 7b 32 30 2f 64 2e 4b 74 7d 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: 0058);const g=c.ZP.div.withConfig({displayName:"styles__CtaContainer",componentId:"sc-2x8w99-0"})([""," padding-bottom:","rem !important;"],(e=>e?"justify-content: center !important;\n display: flex !important;":`padding-left: ${20/d.Kt}rem !important;
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 73 74 79 6c 65 73 5f 5f 43 74 61 42 75 74 74 6f 6e 52 69 67 68 74 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 32 78 38 77 39 39 2d 34 22 7d 29 28 5b 22 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 22 2c 22 72 65 6d 29 3b 22 2c 22 22 5d 2c 32 36 2f 64 2e 4b 74 2c 28 30 2c 70 2e 4b 31 29 28 29 26 26 60 5c 6e 20 20 68 65 69 67 68 74 3a 20 24 7b 33 35 2f 64 2e 4b 74 7d 72 65 6d 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 24 7b 34 2f 64 2e 4b 74 7d 72 65 6d 3b 60 29 2c 76 3d 28 30 2c 63 2e 5a 50 29 28 6d Data Ascii: styles__CtaButtonRight",componentId:"sc-2x8w99-4"})(["overflow:hidden !important;width:100% !important;text-overflow:ellipsis;max-width:calc(50% - ","rem);",""],26/d.Kt,(0,p.K1)()&&`\n height: ${35/d.Kt}rem;\n border-radius: ${4/d.Kt}rem;`),v=(0,c.ZP)(m
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 64 2e 4b 74 2c 31 30 2f 64 2e 4b 74 29 2c 49 3d 63 2e 5a 50 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 73 74 79 6c 65 73 5f 5f 43 6f 6e 74 61 69 6e 65 72 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 32 78 38 77 39 39 2d 39 22 7d 29 28 5b 22 22 2c 22 22 5d 2c 28 30 2c 70 2e 4b 31 29 28 29 26 26 60 70 61 64 64 69 6e 67 3a 20 24 7b 35 2f 64 2e 4b 74 7d 72 65 6d 3b 60 29 3b 76 61 72 20 53 3d 69 28 35 35 37 38 36 29 3b 63 6c 61 73 73 20 4e 20 65 78 74 65 6e 64 73 20 6c 2e 43 6f 6d 70 6f 6e 65 6e 74 7b 73 74 61 74 69 63 20 70 72 6f 70 54 79 70 65 73 3d 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 28 29 2e 73 74 72 69 6e 67 2c 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 65 73 3a 61 28 29 2e 73 74 72 69 6e 67 2c 73 68 Data Ascii: d.Kt,10/d.Kt),I=c.ZP.div.withConfig({displayName:"styles__Container",componentId:"sc-2x8w99-9"})(["",""],(0,p.K1)()&&`padding: ${5/d.Kt}rem;`);var S=i(55786);class N extends l.Component{static propTypes={className:a().string,containerClasses:a().string,sh
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 74 65 73 74 69 64 22 3a 64 2e 7a 37 2e 42 55 54 54 4f 4e 5f 4f 4b 2c 63 68 69 6c 64 72 65 6e 3a 6f 7d 29 3b 72 65 74 75 72 6e 28 30 2c 53 2e 6a 73 78 73 29 28 67 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 61 2c 6c 5d 7d 29 7d 3b 72 65 6e 64 65 72 43 6c 6f 73 65 49 63 6f 6e 3d 28 29 3d 3e 74 68 69 73 2e 70 72 6f 70 73 2e 69 73 44 69 73 6d 69 73 73 69 62 6c 65 3f 28 30 2c 53 2e 6a 73 78 29 28 76 2c 7b 6f 6e 43 6c 69 63 6b 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 43 6c 6f 73 65 49 63 6f 6e 43 6c 69 63 6b 7d 29 3a 6e 75 6c 6c 3b 72 65 6e 64 65 72 43 68 69 6c 64 72 65 6e 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 63 68 69 6c 64 72 65 6e 4f 6e 43 6c 69 63 6b 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 74 7d 3d 74 68 69 73 2e 70 72 6f 70 73 3b 72 65 74 75 72 6e 20 65 3f 28 30 2c 53 Data Ascii: testid":d.z7.BUTTON_OK,children:o});return(0,S.jsxs)(g,{children:[a,l]})};renderCloseIcon=()=>this.props.isDismissible?(0,S.jsx)(v,{onClick:this.props.onCloseIconClick}):null;renderChildren=()=>{const{childrenOnClick:e,children:t}=this.props;return e?(0,S
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 69 6e 65 72 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 31 67 77 7a 37 62 61 2d 30 22 7d 29 28 5b 22 63 6f 6c 6f 72 3a 22 2c 22 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 22 2c 22 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 22 2c 22 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 22 2c 22 72 65 6d 3b 22 5d 2c 28 65 3d 3e 65 2e 74 68 65 6d 65 2e 70 61 6c 65 74 74 65 2e 67 72 65 79 5b 38 30 30 5d 29 2c 28 65 3d 3e 31 30 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 29 2c 28 65 3d 3e 31 30 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 29 2c 28 65 3d 3e 31 30 2f 65 2e 74 Data Ascii: iner",componentId:"sc-1gwz7ba-0"})(["color:",";display:flex !important;align-items:center !important;padding-left:","rem;padding-right:","rem;padding-top:","rem;"],(e=>e.theme.palette.grey[800]),(e=>10/e.theme.fontSize),(e=>10/e.theme.fontSize),(e=>10/e.t
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 72 6f 61 63 74 69 76 65 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 60 24 7b 65 3d 3e 32 30 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 7d 72 65 6d 3b 60 3a 60 24 7b 65 3d 3e 31 31 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 7d 72 65 6d 3b 60 7d 29 2c 28 65 3d 3e 31 32 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 29 2c 28 65 3d 3e 31 35 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 29 2c 28 65 3d 3e 33 36 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 29 2c 28 65 3d 3e 33 36 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 29 2c 28 65 3d 3e 31 35 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 29 2c 28 65 3d 3e 31 35 2f 65 2e 74 68 65 6d 65 2e 66 6f 6e 74 53 69 7a 65 29 2c 28 65 3d 3e 31 35 2f 65 2e 74 68 65 6d 65 2e 66 Data Ascii: roactive:t}=e;return t?`${e=>20/e.theme.fontSize}rem;`:`${e=>11/e.theme.fontSize}rem;`}),(e=>12/e.theme.fontSize),(e=>15/e.theme.fontSize),(e=>36/e.theme.fontSize),(e=>36/e.theme.fontSize),(e=>15/e.theme.fontSize),(e=>15/e.theme.fontSize),(e=>15/e.theme.f
2024-04-18 17:23:38 UTC	1369	IN	Data Raw: 69 66 69 63 61 74 69 6f 6e 3a 65 2c 63 68 61 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 44 69 73 6d 69 73 73 65 64 3a 74 2c 63 68 61 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 73 70 6f 6e 64 3a 69 2c 69 73 4d 6f 62 69 6c 65 3a 6e 2c 72 65 73 75 6c 74 73 43 6f 75 6e 74 3a 72 7d 3d 74 68 69 73 2e 70 72 6f 70 73 2c 7b 70 72 6f 61 63 74 69 76 65 3a 61 7d 3d 65 2c 6c 3d 72 3e 30 2c 64 3d 6f 28 29 28 7b 5b 50 2e 6c 6f 63 61 6c 73 2e 70 72 6f 61 63 74 69 76 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4d 6f 62 69 6c 65 5d 3a 61 26 26 6e 2c 5b 50 2e 6c 6f 63 61 6c 73 2e 6f 6e 67 6f 69 6e 67 4e 6f 74 69 66 69 63 61 74 69 6f 6e 44 65 73 6b 74 6f 70 5d 3a 6c 26 26 21 61 26 26 21 6e 2c 5b 50 2e 6c 6f 63 61 6c 73 2e 6f 6e 67 6f 69 6e 67 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4d Data Ascii: ification:e,chatNotificationDismissed:t,chatNotificationRespond:i,isMobile:n,resultsCount:r}=this.props,{proactive:a}=e,l=r>0,d=o()({[P.locals.proactiveNotificationMobile]:a&&n,[P.locals.ongoingNotificationDesktop]:l&&!a&&!n,[P.locals.ongoingNotificationM

Session ID	Source IP	Source Port	Destination IP	Destination Port
356	192.168.2.4	50169	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	1498	OUT	GET /s/W/xdds/H9bADLiKEfRxPT7i/d/1713461016318/1713461016318%0A0%0A1%0A0%0Ad%0A%7B%22__type%22%3A%22register%22%2C%22accountKey%22%3A%225VF4TyzaPH8d9W5ZpDCmXTov5WyWsMtt%22%2C%22mID%22%3A%221LLmedvsExWHuzv%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22dt%22%3A%22desktop%22%2C%22theme%22%3A%22simple%22%2C%22cookie_law%22%3Afalse%2C%22rev%22%3A%22c8d189d5f071196c56f4a7ff4addec11c9f95f04%22%2C%22source%22%3A%22web_embeddable%22%2C%22source_ver%22%3A%22!ERR%22%2C%22country_code%22%3A%22geo%22%2C%22multisession%22%3Atrue%2C%22gd_compatible%22%3A1%2C%22title%22%3A%22Telling%20stories%20with%20Excel%20data%22%2C%22url%22%3A%22https%3A%2F%2Fwww.traininng.com%2Fwebinar%2Ftelling-stories-with-excel-data--206451live%22%2C%22ref%22%3A%22%22%7D HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=DnbmMof92mH+g5bvhZDXGHxWXg9lLXKl2pR+8FyI552OFssU7bXdU7EKi9rOh8jwSwkXosPxHb+s0RX1Pkc9TjmA8GbaMjVsuSNhVihPXFwUxYeFbHDOws8pIv3Q
2024-04-18 17:23:38 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=mUDwLywU3qPR5ndcIJb18ogeo09z+JSpnf6Sg3wMyBou8KPeEUx20OE31CMar0Mu5/GDUFTM+0+p80Q673ZWK9f6lxLQvaJb5Tlxio3fhDj7KZZ7c9B7DssdLwoG; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=mUDwLywU3qPR5ndcIJb18ogeo09z+JSpnf6Sg3wMyBou8KPeEUx20OE31CMar0Mu5/GDUFTM+0+p80Q673ZWK9f6lxLQvaJb5Tlxio3fhDj7KZZ7c9B7DssdLwoG; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:38 UTC	38	IN	Data Raw: 32 30 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 31 29 0d 0a Data Ascii: 20$Loader && ($Loader.payload = 1)
2024-04-18 17:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
357	192.168.2.4	50175	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/H9bADLiKEfRxPT7i/p/1713461016320 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=DnbmMof92mH+g5bvhZDXGHxWXg9lLXKl2pR+8FyI552OFssU7bXdU7EKi9rOh8jwSwkXosPxHb+s0RX1Pkc9TjmA8GbaMjVsuSNhVihPXFwUxYeFbHDOws8pIv3Q
2024-04-18 17:23:39 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=VOjhj3HvCeH/i3v0IAq0DIfYCHpmplnNJUMPJbw8pP78mr1lS4IVmHeBXZv81PbTkG/e0A+ePrIFB7Nd3uryObuJOhLyWzhxQNMkHzDdE8E/S3ACfuiaZGQPGXpm; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=VOjhj3HvCeH/i3v0IAq0DIfYCHpmplnNJUMPJbw8pP78mr1lS4IVmHeBXZv81PbTkG/e0A+ePrIFB7Nd3uryObuJOhLyWzhxQNMkHzDdE8E/S3ACfuiaZGQPGXpm; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:39 UTC	5547	IN	Data Raw: 31 35 61 33 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 39 36 35 5c 6e 35 37 36 38 2e 32 32 37 38 37 35 39 38 30 36 32 39 35 5c 6e 32 5c 6e 31 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 69 6f 6e 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 70 6f 64 5f 69 64 24 69 6e 74 5c 22 3a 6e 75 6c 6c 2c 5c 22 73 74 61 74 75 73 24 73 74 72 69 6e 67 5c 22 3a 5c 22 63 6f 6e 6e 65 63 74 65 64 5c 22 2c 5c 22 73 65 72 76 65 72 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 69 64 67 65 74 2d 6d 65 64 69 61 74 6f 72 2e 7a 6f 70 69 6d 2e 63 6f 6d 5c 22 2c 5c 22 61 77 73 5f 68 6f 73 74 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 77 2d 6d 65 64 2d 31 30 2d 36 36 Data Ascii: 15a3$Loader && ($Loader.payload = "1713461018965\n5768.2278759806295\n2\n1\nd\n{\"path\":\"connection\",\"update\":{\"pod_id$int\":null,\"status$string\":\"connected\",\"server$string\":\"widget-mediator.zopim.com\",\"aws_hostname$string\":\"w-med-10-66
2024-04-18 17:23:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
358	192.168.2.4	50174	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/18ll0A0MviQGtcZI/p/1713461017053 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=29UOwmAdaSDcsjnnGeT0RaYmwAQq/zs9LlQLaWO8s5J5QdMP0IDb2OrTJIJw9QEIiAjbqDl6v9KaS8M6DVse8ATFPskvhRsS6U0ztMDwB03sHlGko1zZNYSgwCpG
2024-04-18 17:23:39 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=iNc2w+MU2Y67QgfH7oJL7eIOuuUsdLRYvH4m0iLr8UTAi5wh1d0cTjbT+K99e+C1ipm/Fuxfx+PJP3hIYWz7yzXGD1OsVy5At5Qx8h8feBd1+7N661Q4y7TZfmNT; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=iNc2w+MU2Y67QgfH7oJL7eIOuuUsdLRYvH4m0iLr8UTAi5wh1d0cTjbT+K99e+C1ipm/Fuxfx+PJP3hIYWz7yzXGD1OsVy5At5Qx8h8feBd1+7N661Q4y7TZfmNT; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:39 UTC	1108	IN	Data Raw: 34 34 64 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 39 36 37 5c 6e 31 30 30 30 37 2e 31 36 38 33 35 38 36 31 38 38 37 32 5c 6e 34 5c 6e 34 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 61 67 65 6e 74 73 5c 22 3a 7b 5c 22 61 67 65 6e 74 3a 31 31 32 30 33 35 34 39 30 38 33 36 37 36 5c 22 3a 7b 5c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 4a 61 63 6b 20 44 61 77 73 6f 6e 5c 22 2c 5c 22 74 69 74 6c 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 5c 22 7d 7d 7d 2c 5c 22 73 65 71 5c 22 3a 32 32 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c Data Ascii: 44d$Loader && ($Loader.payload = "1713461018967\n10007.168358618872\n4\n4\nd\n{\"path\":\"livechat\",\"update\":{\"agents\":{\"agent:11203549083676\":{\"display_name$string\":\"Jack Dawson\",\"title$string\":\"\"}}},\"seq\":22}\n{\"path\":\"livechat\",\
2024-04-18 17:23:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
359	192.168.2.4	50177	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/FUXgax5OwuSIBv-r/p/1713461017123 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=29UOwmAdaSDcsjnnGeT0RaYmwAQq/zs9LlQLaWO8s5J5QdMP0IDb2OrTJIJw9QEIiAjbqDl6v9KaS8M6DVse8ATFPskvhRsS6U0ztMDwB03sHlGko1zZNYSgwCpG
2024-04-18 17:23:39 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=nn7kcdPwHxHP8BO9po3ArhxaEBVYWyv0dom4r6PAnRxBPG2V3sCjApiUdUIvRXB/b9ftIUAdOBu3FvqTj2piDspLqrabMcHT+VlGLG85Bg9IhxrKj53uEe6rDBcN; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=nn7kcdPwHxHP8BO9po3ArhxaEBVYWyv0dom4r6PAnRxBPG2V3sCjApiUdUIvRXB/b9ftIUAdOBu3FvqTj2piDspLqrabMcHT+VlGLG85Bg9IhxrKj53uEe6rDBcN; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:39 UTC	1107	IN	Data Raw: 34 34 63 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 39 36 39 5c 6e 38 38 31 37 2e 30 38 37 34 39 32 38 38 30 35 32 32 5c 6e 36 5c 6e 36 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 61 67 65 6e 74 73 5c 22 3a 7b 5c 22 61 67 65 6e 74 3a 31 31 32 30 33 35 34 39 30 38 33 36 37 36 5c 22 3a 7b 5c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 4a 61 63 6b 20 44 61 77 73 6f 6e 5c 22 2c 5c 22 74 69 74 6c 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 5c 22 7d 7d 7d 2c 5c 22 73 65 71 5c 22 3a 32 32 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 Data Ascii: 44c$Loader && ($Loader.payload = "1713461018969\n8817.087492880522\n6\n6\nd\n{\"path\":\"livechat\",\"update\":{\"agents\":{\"agent:11203549083676\":{\"display_name$string\":\"Jack Dawson\",\"title$string\":\"\"}}},\"seq\":22}\n{\"path\":\"livechat\",\"
2024-04-18 17:23:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
360	192.168.2.4	50178	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/WTE2hHegr+qWqYT3/p/1713461017291 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=khmORQBpRjNwye27p8/tJwgd3+gizYX/kNLGUG6eX0pTfHnNkeDcE8dHO1OnuLnCrjsbL5BxCKUUFVI76a2fkmpCZjM3hMDdrjx3/GW3sXQZJGxv1yL0bRLF+fkQ
2024-04-18 17:23:39 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=O6XQIBfeLAWXDwPo18OwbgT5cRyZT8T/PUSmxIi/CSQjRKdYSZ2hmFTqlZGJp3dxfmDovzXXMsbSJrgqqUgg+4ndWtaWHQHQOSZ+DyG4d1S9bDAEJX8rwJnMOrLr; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/ Set-Cookie: AWSALBCORS=O6XQIBfeLAWXDwPo18OwbgT5cRyZT8T/PUSmxIi/CSQjRKdYSZ2hmFTqlZGJp3dxfmDovzXXMsbSJrgqqUgg+4ndWtaWHQHQOSZ+DyG4d1S9bDAEJX8rwJnMOrLr; Expires=Thu, 25 Apr 2024 17:23:38 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:39 UTC	1107	IN	Data Raw: 34 34 63 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 38 39 37 36 5c 6e 39 30 30 37 2e 39 34 34 37 39 30 38 39 34 31 38 32 5c 6e 35 5c 6e 35 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 61 67 65 6e 74 73 5c 22 3a 7b 5c 22 61 67 65 6e 74 3a 31 31 32 30 33 35 34 39 30 38 33 36 37 36 5c 22 3a 7b 5c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 4a 61 63 6b 20 44 61 77 73 6f 6e 5c 22 2c 5c 22 74 69 74 6c 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 5c 22 7d 7d 7d 2c 5c 22 73 65 71 5c 22 3a 32 32 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 Data Ascii: 44c$Loader && ($Loader.payload = "1713461018976\n9007.944790894182\n5\n5\nd\n{\"path\":\"livechat\",\"update\":{\"agents\":{\"agent:11203549083676\":{\"display_name$string\":\"Jack Dawson\",\"title$string\":\"\"}}},\"seq\":22}\n{\"path\":\"livechat\",\"
2024-04-18 17:23:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
361	192.168.2.4	50181	34.230.250.51	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:23:38 UTC	675	OUT	GET /s/W/xdds/SKukINt-UGvOK5QK/p/1713461017395 HTTP/1.1 Host: widget-mediator.zopim.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=khmORQBpRjNwye27p8/tJwgd3+gizYX/kNLGUG6eX0pTfHnNkeDcE8dHO1OnuLnCrjsbL5BxCKUUFVI76a2fkmpCZjM3hMDdrjx3/GW3sXQZJGxv1yL0bRLF+fkQ
2024-04-18 17:23:39 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:23:39 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=wU0gyK1pLCFiXcMDM0E9CboR0xEITbb3QFUrTZlmDBsTYviPsi0qezpRwrZZFMH6zO9JsRquTAAl/esZah4IwZ0jh25lYNstSzv8siOLjC0TzIgaCNs6Nlc0lAr1; Expires=Thu, 25 Apr 2024 17:23:39 GMT; Path=/ Set-Cookie: AWSALBCORS=wU0gyK1pLCFiXcMDM0E9CboR0xEITbb3QFUrTZlmDBsTYviPsi0qezpRwrZZFMH6zO9JsRquTAAl/esZah4IwZ0jh25lYNstSzv8siOLjC0TzIgaCNs6Nlc0lAr1; Expires=Thu, 25 Apr 2024 17:23:39 GMT; Path=/; SameSite=None; Secure Server: nginx Vary: Accept-Encoding Cache-Control: no-cache, no-store
2024-04-18 17:23:39 UTC	1108	IN	Data Raw: 34 34 64 0d 0a 24 4c 6f 61 64 65 72 20 26 26 20 28 24 4c 6f 61 64 65 72 2e 70 61 79 6c 6f 61 64 20 3d 20 22 31 37 31 33 34 36 31 30 31 39 30 31 36 5c 6e 35 34 34 34 2e 34 34 30 30 31 31 34 32 32 36 31 35 35 5c 6e 34 5c 6e 34 5c 6e 64 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c 22 75 70 64 61 74 65 5c 22 3a 7b 5c 22 61 67 65 6e 74 73 5c 22 3a 7b 5c 22 61 67 65 6e 74 3a 31 31 32 30 33 35 34 39 30 38 33 36 37 36 5c 22 3a 7b 5c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 4a 61 63 6b 20 44 61 77 73 6f 6e 5c 22 2c 5c 22 74 69 74 6c 65 24 73 74 72 69 6e 67 5c 22 3a 5c 22 5c 22 7d 7d 7d 2c 5c 22 73 65 71 5c 22 3a 32 32 7d 5c 6e 7b 5c 22 70 61 74 68 5c 22 3a 5c 22 6c 69 76 65 63 68 61 74 5c 22 2c 5c Data Ascii: 44d$Loader && ($Loader.payload = "1713461019016\n5444.4400114226155\n4\n4\nd\n{\"path\":\"livechat\",\"update\":{\"agents\":{\"agent:11203549083676\":{\"display_name$string\":\"Jack Dawson\",\"title$string\":\"\"}}},\"seq\":22}\n{\"path\":\"livechat\",\
2024-04-18 17:23:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	19:22:10
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:22:11
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2644 --field-trial-handle=2180,i,3619218562620070957,7726421293079254978,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:22:14
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.traininng.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	19:22:31
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4496 --field-trial-handle=2180,i,3619218562620070957,7726421293079254978,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.traininng.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Windows Analysis Report
http://www.traininng.com