Edit tour

Windows Analysis Report
https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6

Overview

General Information

Sample URL:	https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6
Analysis ID:	1430396
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1964,i,13455950369934999318,5407255302200282622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6

HTTP Parser: Base64 decoded: {"Statement":[{"Resource":"https://dsr-images-us-east-1.prod.mindtickle.com/protected/organization-994/reference-116777/cover-1713870628834-ebf4ef86-c3f7-4682-be71-bb8ad0ce9afd.jpeg","Condition":{"DateLessThan":{"AWS:EpochTime":1715080232}}}]}

Source: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&co=aHR0cHM6Ly9yZWdpb25hbC1leHByZXNzLmZyOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=bhz08cuqamvl	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49764 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49764 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /room/36a8f665-0d42-4862-a524-50e3d91bade6 HTTP/1.1Host: web.enable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkBrowser.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.351922f6.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /remoteEntry.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/1670.9d769a73.chunk.css HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/8718.e048d4b0.chunk.css HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6838.fdd383a5.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/3361.51784c7a.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1226.af860636.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1670.aeebf6fc.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2791.5d87b86c.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /static/js/4164.685cb2de.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6702.603c35a5.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5043.6d69264d.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4004.3542d89f.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7875.4b63acd4.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/861.8af79939.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1660.ffbdfe6e.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6611.ecce3809.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4954.3618d4e3.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5730.10b1d522.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/8447.4979ef99.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6641.c067fe0f.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/3006.2c7dce02.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5206.5ee8d138.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4200.58d81098.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/783.df13d78d.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/3390.a8a3bb69.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7844.3d8f7ba2.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1487.b827d9dc.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4308.b6b628d8.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/360.4546c1ba.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/225.deeb4ee7.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4765.d7577677.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/390.4204c025.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1694.c976feba.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/264.7ea7137c.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/3399.7243f481.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1057.68a9f4b6.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5307.455e247e.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5852.0dff4e12.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/3143.76a8115a.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1573.3f1be132.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7234.38279feb.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4270.9958be01.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9109.67b5138b.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4660.6d63bde7.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6269.519fb7d7.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1239.da3f3802.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1965.d562d08f.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2632.a844fabe.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1807.3e4cf805.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9356.2538253e.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/8267.061962da.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/404.7a421d50.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2686.fc673267.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/3438.dccc51d0.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6022.d967874c.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4644.9e961433.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9348.cd3170fe.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6653.846fd015.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/8718.44c8171f.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/v1.0/zipy.min.umd.js HTTP/1.1Host: cdn.zipy.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.enable.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: web.enable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=1&id=77971c23-12c8-4086-ab9c-0abbc88f2e75&created=1713881130602&expire=1713882030602
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://web.enable.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/sitd2fd5 HTTP/1.1Host: widget.intercom.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/2655.20d3c4e6.chunk.css HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: web.enable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=1&id=77971c23-12c8-4086-ab9c-0abbc88f2e75&created=1713881130602&expire=1713882030602
Source: global traffic	HTTP traffic detected: GET /core/graphql HTTP/1.1Host: dsr-svc-csv.prod.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/favicon HTTP/1.1Host: dsr-svc-csv.prod-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5543.663021d7.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /protected/organization-994/favicon-1713869489.gif?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L2Zhdmljb24tMTcxMzg2OTQ4OS5naWYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTUwODAyNjB9fX1dfQ__&Signature=hqFYWRAheFJYyNn0S~v-sXDHQ5QAVnOjtInGu4qtkjkizEgPfqA8uaC~KESAmg9ivifpRnwR4WIr4kbFdj3Mskq63Pg5aXu8mvAcF5fXeg-FBzpprEdfJitgbv2VZitJBHPTkVisY3qHiHRPrGFOPkkQHNmA-kBKI5DAA4xTBPckPMLhZPczwgxnluE966DF3vGAQDdIBhdQg68RGGO1b5Tqlpi8MRlx5iAeuzq6dO07jRusCnviBPlVF9hXCgFOAcdTu1~el3kd7KI97w09GRfiiQCO7-PkSL6eLuWKD8GRm5s72lQ83pus02Gi5Y3C5q~FAUh29hetjTlsgSRJvA__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1Host: dsr-images-us-east-1.prod.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9663.4a37fca5.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7530.d631d9ac.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1885.b8d7c262.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5658.4583a995.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9778.c2571d8b.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk-session-manager/v2/enduser-info/5c9cd8a6?v=1.0.28&e=Production&o=0&ns=true HTTP/1.1Host: services.zipy.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /protected/organization-994/favicon-1713869489.gif?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L2Zhdmljb24tMTcxMzg2OTQ4OS5naWYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTUwODAyNjB9fX1dfQ__&Signature=hqFYWRAheFJYyNn0S~v-sXDHQ5QAVnOjtInGu4qtkjkizEgPfqA8uaC~KESAmg9ivifpRnwR4WIr4kbFdj3Mskq63Pg5aXu8mvAcF5fXeg-FBzpprEdfJitgbv2VZitJBHPTkVisY3qHiHRPrGFOPkkQHNmA-kBKI5DAA4xTBPckPMLhZPczwgxnluE966DF3vGAQDdIBhdQg68RGGO1b5Tqlpi8MRlx5iAeuzq6dO07jRusCnviBPlVF9hXCgFOAcdTu1~el3kd7KI97w09GRfiiQCO7-PkSL6eLuWKD8GRm5s72lQ83pus02Gi5Y3C5q~FAUh29hetjTlsgSRJvA__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1Host: dsr-images-us-east-1.prod.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1744.32cea325.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frame-modern.e91be2dc.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor-modern.07772018.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1881.21dbf1b7.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7773.1f3c061c.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2793.c92744d0.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6323.a999228a.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6927.eb3f508f.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/8700.57dbdfc1.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7982.b17092ad.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5686.0c43113a.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1947.70494fb1.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/280.a3adc45b.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/586.b709a998.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1093.7ee8aa6b.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5893.87617d4e.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1052.41310dca.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/788.ed998e8a.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9360.4bf256f8.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/8962.d30b6cd1.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5822.3b13b8ea.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9378.e150dafa.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7781.a9e99a82.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/8498.ba15fbee.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6405.f80d8117.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7207.a10606fd.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9291.5bde9037.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4866.9bc0a053.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/845.87798335.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/5782.cb349513.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9969.d56a16a9.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7898.e38af75d.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/127.d438896d.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4799.24810307.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/9687.f2dfe077.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1249.fdabb546.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4217.46f06040.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/7838.1bcca07f.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4779.d2b3c15c.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/1546.b106d597.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/mindtickle-trademarked-logo.svg HTTP/1.1Host: web.enable.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=1&id=77971c23-12c8-4086-ab9c-0abbc88f2e75&created=1713881130602&expire=1713882030602
Source: global traffic	HTTP traffic detected: GET /static/js/8311.a4a8aa60.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/graphql HTTP/1.1Host: dsr-svc-csv.prod-us.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/mindtickle-trademarked-logo.svg HTTP/1.1Host: web.enable.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _dd_s=rum=1&id=77971c23-12c8-4086-ab9c-0abbc88f2e75&created=1713881130602&expire=1713882030602
Source: global traffic	HTTP traffic detected: GET /core/graphql HTTP/1.1Host: dsr-svc-csv.prod-us.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/graphql HTTP/1.1Host: dsr-svc-csv.prod-us.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/graphql HTTP/1.1Host: dsr-svc-csv.prod-us.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/3575.51e1cad5.chunk.js HTTP/1.1Host: dsr-internal-us.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/graphql HTTP/1.1Host: dsr-svc-csv.prod-us.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1713881155778 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /protected/organization-994/organization-logo-1713869486?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L29yZ2FuaXphdGlvbi1sb2dvLTE3MTM4Njk0ODYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTY0NzMxNTZ9fX1dfQ__&Signature=d1xx2w9DUk87dEyDNqhbUC1~PTj2MakafHrcklabl1hQyyXwXYKB8U0oXMxSBZNW8Y3sIUWXhuybmAPlKKiSG66xHJ2~66UvXcNC69do9hgkaLaW3L-0SiJgkj319VripRx2cnzcdgeCEvZ~fljo4EWVit8GGanv4iLzy2XXXxiqyU0L8f8kUj90FtlBme5vKgg6rmzW9b6IHe~IMQyN16rFmnYpVa4Rtsx6StVOIE9TPW0KlNHFb-SzD2jv4xFOOA-6Ity-uDeZZNXtDgH8wMUr1JnLv5MzzxH1RKcTa04uTZhH2VYvBrGXfpIjaLqn5avluobBL5sL3Dc2EWzJaQ__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1Host: dsr-images-us-east-1.prod.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /protected/organization-994/rooms/banner-1713871695447-ba2af024-f29d-4190-8d75-d25a9e7758c4.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3Jvb21zL2Jhbm5lci0xNzEzODcxNjk1NDQ3LWJhMmFmMDI0LWYyOWQtNDE5MC04ZDc1LWQyNWE5ZTc3NThjNC5qcGVnIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNzE1MDgxNDU2fX19XX0_&Signature=UMff4RXdBkPTKTusbNilyyTncaLD6UXfs0LxknDTYW6rKIMncWGIbquJT4LPMSmptqSMTY1KCtPYO9b-i6anFsO~Wwnz2OuBVbL~TPv3JSGLhS8us4Hp4c5y2lHnUrWklY2ZhauNMWuMohgX2EgMYjC06tTgz7yV3YII5MSG6QZLqkwWiVLDV-kw9cUXS-a4eYp00PpTVTeL4WYZaB-T2hCOGpDnmCxYYnLuKALz3n-fwCVbTtLrekh45z~0XEtUztB-WuB3vYtr8V13oQ~oLcSq5A9IHf~9HZ7uJ9JIu81s1igdADO~9~WKB8PwVbwtRYjy-5i87QDHFjpGIfeuoQ__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1Host: dsr-images-us-east-1.prod.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /protected/organization-994/reference-116777/cover-1713870628834-ebf4ef86-c3f7-4682-be71-bb8ad0ce9afd.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3JlZmVyZW5jZS0xMTY3NzcvY292ZXItMTcxMzg3MDYyODgzNC1lYmY0ZWY4Ni1jM2Y3LTQ2ODItYmU3MS1iYjhhZDBjZTlhZmQuanBlZyIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTA4MDIzMn19fV19&Signature=jXGmVLn9oehpYXRFIEwC2q1fxbl7rwJX2rYtGpb~EmiDs06nzsL9X-9Yw~QYr61MPMKL2z9aycl0XMevtBd4hbC3qPzQlPf3K2jOEEG4Vulb3nTIAGfKHTO74YDEvt3HPWMK3Z05LS1Mcb8byKcbB~dCTIWNyrK0MEuL~cbEnE8pv3e8TzbKUsO5-UxLk0jMFBaXSukgZLPC7I36mu1EO4FLf5f410w8m~lwV93B~D7PnzaLXYFBYP4c7c0Lg9nTXOWrUbGjMJZ59aoRlDhJoeYfste5JE9me~4yhts-kmAe4sWHkGuA2-bFILw1d7CW1NvlpbACO7U4qTVqk~Emxg__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1Host: dsr-images-us-east-1.prod.mindtickle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /protected/organization-994/organization-logo-1713869486?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L29yZ2FuaXphdGlvbi1sb2dvLTE3MTM4Njk0ODYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTY0NzMxNTZ9fX1dfQ__&Signature=d1xx2w9DUk87dEyDNqhbUC1~PTj2MakafHrcklabl1hQyyXwXYKB8U0oXMxSBZNW8Y3sIUWXhuybmAPlKKiSG66xHJ2~66UvXcNC69do9hgkaLaW3L-0SiJgkj319VripRx2cnzcdgeCEvZ~fljo4EWVit8GGanv4iLzy2XXXxiqyU0L8f8kUj90FtlBme5vKgg6rmzW9b6IHe~IMQyN16rFmnYpVa4Rtsx6StVOIE9TPW0KlNHFb-SzD2jv4xFOOA-6Ity-uDeZZNXtDgH8wMUr1JnLv5MzzxH1RKcTa04uTZhH2VYvBrGXfpIjaLqn5avluobBL5sL3Dc2EWzJaQ__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1Host: dsr-images-us-east-1.prod.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk-session-manager/v1/register-sdk-session/5c9cd8a6?v=1.0.28 HTTP/1.1Host: services.zipy.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /protected/organization-994/reference-116777/cover-1713870628834-ebf4ef86-c3f7-4682-be71-bb8ad0ce9afd.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3JlZmVyZW5jZS0xMTY3NzcvY292ZXItMTcxMzg3MDYyODgzNC1lYmY0ZWY4Ni1jM2Y3LTQ2ODItYmU3MS1iYjhhZDBjZTlhZmQuanBlZyIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTA4MDIzMn19fV19&Signature=jXGmVLn9oehpYXRFIEwC2q1fxbl7rwJX2rYtGpb~EmiDs06nzsL9X-9Yw~QYr61MPMKL2z9aycl0XMevtBd4hbC3qPzQlPf3K2jOEEG4Vulb3nTIAGfKHTO74YDEvt3HPWMK3Z05LS1Mcb8byKcbB~dCTIWNyrK0MEuL~cbEnE8pv3e8TzbKUsO5-UxLk0jMFBaXSukgZLPC7I36mu1EO4FLf5f410w8m~lwV93B~D7PnzaLXYFBYP4c7c0Lg9nTXOWrUbGjMJZ59aoRlDhJoeYfste5JE9me~4yhts-kmAe4sWHkGuA2-bFILw1d7CW1NvlpbACO7U4qTVqk~Emxg__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1Host: dsr-images-us-east-1.prod.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /protected/organization-994/rooms/banner-1713871695447-ba2af024-f29d-4190-8d75-d25a9e7758c4.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3Jvb21zL2Jhbm5lci0xNzEzODcxNjk1NDQ3LWJhMmFmMDI0LWYyOWQtNDE5MC04ZDc1LWQyNWE5ZTc3NThjNC5qcGVnIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNzE1MDgxNDU2fX19XX0_&Signature=UMff4RXdBkPTKTusbNilyyTncaLD6UXfs0LxknDTYW6rKIMncWGIbquJT4LPMSmptqSMTY1KCtPYO9b-i6anFsO~Wwnz2OuBVbL~TPv3JSGLhS8us4Hp4c5y2lHnUrWklY2ZhauNMWuMohgX2EgMYjC06tTgz7yV3YII5MSG6QZLqkwWiVLDV-kw9cUXS-a4eYp00PpTVTeL4WYZaB-T2hCOGpDnmCxYYnLuKALz3n-fwCVbTtLrekh45z~0XEtUztB-WuB3vYtr8V13oQ~oLcSq5A9IHf~9HZ7uJ9JIu81s1igdADO~9~WKB8PwVbwtRYjy-5i87QDHFjpGIfeuoQ__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1Host: dsr-images-us-east-1.prod.mindtickle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1713881161435 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1Host: collector8.zipy.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1Host: collector8.zipy.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1Host: collector8.zipy.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.11 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.11 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.7.11 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bb-plugin/fonts/fontawesome/5.13.0/css/all.min.css?ver=2.3.2.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/bb-plugin/icons/ultimate-icons/style.css?ver=2.3.2.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=2.1.2 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=2.1.2 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/style.css?ver=5.7.11 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/pum/pum-site-styles.css?generated=1709309010&ver=1.18.1 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.3.2.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bb-theme/css/base.min.css?ver=1.7.6.3 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/bb-theme/skin-5f0f035474926.css?ver=1.7.6.3 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.0 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=2.1.2 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/logo-regionalexpress-large.png HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/close.png HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&ver=3.0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/02/HP-fd-1.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/logo-regionalexpress.png HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/logo-regionalexpress-mobile.png HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/menu.png HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-table.css?ver=2.1.2 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/close.png HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/logo-regionalexpress-large.png HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bb-plugin/js/jquery.waypoints.min.js?ver=2.3.2.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/bb-plugin/cache/10-layout.js?ver=2b670661ca547c0a2b913d09cf97d721 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/js/functions.js?ver=5.7.11 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/menu.png HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/logo-regionalexpress.png HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/logo-regionalexpress-mobile.png HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1709309010&ver=1.18.1 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/02/HP-fd-1.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bb-plugin/js/jquery.ba-throttle-debounce.min.js?ver=2.3.2.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bb-plugin/js/jquery.magnificpopup.min.js?ver=2.3.2.6 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bb-theme/js/theme.min.js?ver=1.7.6.3 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=5.7.11 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/10/VAL-tiret-bas-2.png HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/logo-footer.png HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/index-egalite.png HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/images/logo-cookieyes.svg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF1.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF1-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/10/VAL-tiret-bas-2.png HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SFbase-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF3.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/logo-footer.png HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/regionalexpress/img/index-egalite.png HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF3-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SFbase2-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/public/images/logo-cookieyes.svg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SFbase-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&co=aHR0cHM6Ly9yZWdpb25hbC1leHByZXNzLmZyOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=bhz08cuqamvl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/03/POP-labels.png HTTP/1.1Host: envoye-special.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/03/POP-ensavoir.png HTTP/1.1Host: envoye-special.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/03/POP-tiret.png HTTP/1.1Host: envoye-special.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF1.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SFbase2-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF1-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF3.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF5.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF5-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/10/VAL-fd-2.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/10/TAL-fd-2.jpg HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF3-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-distri.gif HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-tournee.gif HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/03/POP-ensavoir.png HTTP/1.1Host: envoye-special.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/03/POP-tiret.png HTTP/1.1Host: envoye-special.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/03/POP-labels.png HTTP/1.1Host: envoye-special.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-demande.gif HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-distri.gif HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&co=aHR0cHM6Ly9yZWdpb25hbC1leHByZXNzLmZyOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=bhz08cuqamvlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&co=aHR0cHM6Ly9yZWdpb25hbC1leHByZXNzLmZyOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=bhz08cuqamvlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-affret.gif HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-tournee.gif HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-urg.gif HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF5.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-temp.gif HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SF5-flip.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /index.php/wp-json/pum/v1/analytics/?event=open&pid=3631&_cache=1713881176870 HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/10/VAL-fd-2.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/10/TAL-fd-2.jpg HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-demande.gif HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-affret.gif HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AM6hZhbv0oBrGQbYvT36FhCvLRf-yDEY7lfkDRrYMZRBLjPBQ3d4CcxOo3F1DsBrMPukiqfhCxc8oRKxkO1a_yY
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-urg.gif HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/08/SOL-temp.gif HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/cropped-favicone-32x32.gif HTTP/1.1Host: regional-express.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://regional-express.fr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/cropped-favicone-32x32.gif HTTP/1.1Host: regional-express.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no

Source: chromecache_372.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Kz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Kz("fsl","nv.ids",[]):Kz("fsl","ids",[]);if(!p.length)return!0;var q=Gz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!rI(q, equals www.facebook.com (Facebook)
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: web.enable.us

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713881090938&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeDate: Tue, 23 Apr 2024 14:05:33 GMTX-Request-Id: fe49a6b2530de847fbc5bc23f2384c16X-Runtime: 0.000932vary: OriginAccess-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timingX-Request-Time: 0.002;content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .goto.com .twilio.com .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com .goto.com enablement.cribl.io .haasalert.com .bitsight.com .outreach.ioX-Cache: Error from cloudfrontVia: 1.1 23546b21bebd898e1f4c79789ae527ca.cloudfront.net (CloudFront)X-Amz-Cf-Pop: IAD79-C3X-Amz-Cf-Id: _VMNUGfzOJ6UO7theEO5Nk2D4mvOIvcmGZwDSOybmeIpGj324cmK_g==Strict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 14:05:52 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeX-Request-Id: 852bfa31806da964be90d6ff9c0a1834X-Runtime: 0.001560vary: OriginAccess-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timingX-Request-Time: 0.005;content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 14:05:54 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeX-Request-Id: d1a6bfdf4aeee6b4e484cecc19ba1993X-Runtime: 0.001054vary: OriginAccess-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timingX-Request-Time: 0.003;content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 14:05:55 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeX-Request-Id: 55cd8ea1aae9ed88c67d916a9be6e783X-Runtime: 0.000901vary: OriginAccess-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timingX-Request-Time: 0.003;content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 14:05:56 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeX-Request-Id: 92698c9db9dfa3b8a96f0264708d23eaX-Runtime: 0.000893vary: OriginAccess-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timingX-Request-Time: 0.002;content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 14:05:57 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeX-Request-Id: 412661f4e528bfc6766431e73d7fbe92X-Runtime: 0.001171vary: OriginAccess-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timingX-Request-Time: 0.003;content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Source: chromecache_322.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_275.2.dr	String found in binary or memory: http://benalman.com/about/license/
Source: chromecache_275.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-throttle-debounce-plugin/
Source: chromecache_271.2.dr	String found in binary or memory: http://css-tricks.com/inheriting-box-sizing-probably-slightly-better-best-practice/
Source: chromecache_417.2.dr	String found in binary or memory: http://dev.apollodata.com/core/fragments.html#unique-names
Source: chromecache_413.2.dr	String found in binary or memory: http://icant.co.uk/csstablegallery/
Source: chromecache_413.2.dr	String found in binary or memory: http://icant.co.uk/csstablegallery/)
Source: chromecache_322.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_322.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_375.2.dr	String found in binary or memory: http://papermashup.com/demos/css-buttons)
Source: chromecache_271.2.dr	String found in binary or memory: http://www.codika.fr/
Source: chromecache_287.2.dr	String found in binary or memory: http://www.expressdufroid.com/
Source: chromecache_413.2.dr	String found in binary or memory: http://www.klavina.com)
Source: chromecache_287.2.dr	String found in binary or memory: http://www.winfret.fr/
Source: chromecache_372.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_372.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_398.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_287.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_287.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_367.2.dr	String found in binary or memory: https://dsr-internal-us.mindtickle.com/checkBrowser.js
Source: chromecache_367.2.dr	String found in binary or memory: https://dsr-internal-us.mindtickle.com/manifest.json
Source: chromecache_367.2.dr	String found in binary or memory: https://dsr-internal-us.mindtickle.com/polyfills.js
Source: chromecache_367.2.dr	String found in binary or memory: https://dsr-internal-us.mindtickle.com/remoteEntry.js
Source: chromecache_367.2.dr	String found in binary or memory: https://dsr-internal-us.mindtickle.com/static/js/main.351922f6.js
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/Groupe-de-masques-10.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/Groupe-de-masques-11.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/Groupe-de-masques-12.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/Groupe-de-masques-7.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/Groupe-de-masques-8.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/Groupe-de-masques-9.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/POP-ensavoir.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/POP-ensavoir2.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/POP-labels.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/03/POP-tiret.png
Source: chromecache_287.2.dr	String found in binary or memory: https://envoye-special.fr/wp-content/uploads/2023/11/declaration_egapro_2024.pdf
Source: chromecache_359.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_359.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_331.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: chromecache_287.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat%3A200%2C300%2C400%2C700%2C800&display=swap&#
Source: chromecache_287.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2)
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2)
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1pL7SUc.woff2)
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa25L7SUc.woff2)
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2)
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2)
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2pL7SUc.woff2)
Source: chromecache_432.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw0aXpsog.woff2)
Source: chromecache_432.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw2aXpsog.woff2)
Source: chromecache_432.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw3aXpsog.woff2)
Source: chromecache_432.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw5aXo.woff2)
Source: chromecache_432.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw9aXpsog.woff2)
Source: chromecache_428.2.dr, chromecache_391.2.dr, chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_428.2.dr, chromecache_391.2.dr, chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_428.2.dr, chromecache_391.2.dr, chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_428.2.dr, chromecache_391.2.dr, chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_428.2.dr, chromecache_391.2.dr, chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_421.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_421.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/customize/)
Source: chromecache_421.2.dr	String found in binary or memory: https://gist.githubusercontent.com/Pross/1b159e91a33484201c9df79e90937489/raw/231a41d424d9194d73fd5f
Source: chromecache_352.2.dr	String found in binary or memory: https://github.com/hgoebl/mobile-detect.js
Source: chromecache_448.2.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blog/master/licenses.txt
Source: chromecache_372.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_421.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_475.2.dr	String found in binary or memory: https://github.com/ungap/event-target
Source: chromecache_287.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_372.2.dr	String found in binary or memory: https://google.com
Source: chromecache_372.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_278.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_278.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_288.2.dr	String found in binary or memory: https://redux.js.org/Errors?code=
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/#breadcrumb
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/#logo
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/#organization
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/#primaryimage
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/#webpage
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/#website
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/?s=
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/en/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/affretement/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/comments/feed/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/contact/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/distribution-groupage/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/feed/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/implantations/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/le-groupe/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/mentions-legales/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/offres-emploi/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/politique-de-confidentialite/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/talents/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/tournee-dediee-location/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/transport-a-la-demande/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/valeurs-engagements/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/valeurs-engagements/#ancreeng
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/vehicules/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/wp-json/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fregional-express.fr
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/index.php/wp-json/wp/v2/pages/10
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-admin/admin-ajax.php
Source: chromecache_261.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/bb-plugin/
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.3.2.
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/bb-plugin/fonts/fontawesome/5.13.0/css/all.min.css?ve
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/bb-plugin/js/jquery.ba-throttle-debounce.min.js?ver=2
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/bb-plugin/js/jquery.magnificpopup.min.js?ver=2.3.2.6
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/bb-plugin/js/jquery.waypoints.min.js?ver=2.3.2.6
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?v
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-table.css?
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/cookie-law-info/public/images/logo-cookieyes.svg
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?v
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/bb-theme/css/base.min.css?ver=1.7.6.3
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/bb-theme/js/theme.min.js?ver=1.7.6.3
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/img/close.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/img/index-egalite.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-footer.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-regionalexpress-large.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-regionalexpress-mobile.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-regionalexpress.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/img/menu.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/js/functions.js?ver=5.7.11
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/themes/regionalexpress/style.css?ver=5.7.11
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/08/SOL-affret.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/08/SOL-demande.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/08/SOL-distri.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/08/SOL-temp.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/08/SOL-tournee.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/08/SOL-urg.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/09/VAL-tiret.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/10/VAL-tiret-bas-2.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2019/10/logo-RE.png
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2020/07/cropped-favicone-180x180.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2020/07/cropped-favicone-192x192.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2020/07/cropped-favicone-270x270.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/2020/07/cropped-favicone-32x32.gif
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b9
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.js?ver=2b670661ca547c0a2b91
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/bb-plugin/icons/ultimate-icons/style.css?ver=2.3.2.6
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-content/uploads/bb-theme/skin-5f0f035474926.css?ver=1.7.6.3
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/css/dist/block-library/style.min.css?ver=5.7.11
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/css/dist/block-library/theme.min.css?ver=5.7.11
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.min.js?ver=3.42.0
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill-element-closest.min.js?ver=2.0.2
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill-fetch.min.js?ver=3.0.0
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill-formdata.min.js?ver=3.0.12
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill-node-contains.min.js?ver=3.42.0
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill-object-fit.min.js?ver=2.3.4
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill-url.min.js?ver=3.6.4
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/js/wp-embed.min.js?ver=5.7.11
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/wp-includes/wlwmanifest.xml
Source: chromecache_287.2.dr	String found in binary or memory: https://regional-express.fr/xmlrpc.php?rsd
Source: chromecache_287.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_287.2.dr	String found in binary or memory: https://schema.org/CreativeWork
Source: chromecache_287.2.dr	String found in binary or memory: https://schema.org/ImageObject
Source: chromecache_287.2.dr	String found in binary or memory: https://schema.org/WebPage
Source: chromecache_287.2.dr	String found in binary or memory: https://sirh.stsweb.fr/login
Source: chromecache_372.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_398.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_278.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_398.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_475.2.dr	String found in binary or memory: https://unpkg.com/
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_287.2.dr	String found in binary or memory: https://www.cookieyes.com/
Source: chromecache_287.2.dr	String found in binary or memory: https://www.envoye-special.fr/
Source: chromecache_287.2.dr	String found in binary or memory: https://www.exactmetrics.com/
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_398.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_398.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_398.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_398.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_287.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&ver=3.0
Source: chromecache_441.2.dr, chromecache_278.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_372.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_398.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_283.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_283.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=
Source: chromecache_441.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_332.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Source: chromecache_287.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@18/455@60/25

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1964,i,13455950369934999318,5407255302200282622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1964,i,13455950369934999318,5407255302200282622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_436.2.dr, chromecache_438.2.dr

Binary or memory string: (FQemU/B

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://redux.js.org/Errors?code=	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=80202178-e1ee-4376-b530-e98d46fe77f0&batch_time=1713881159824	0%	Avira URL Cloud	safe
https://web.enable.us/assets/mindtickle-trademarked-logo.svg	0%	Avira URL Cloud	safe
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=97db3813-1954-4112-8bf4-d749b4b4db26&batch_time=1713881141453	0%	Avira URL Cloud	safe
https://envoye-special.fr/wp-content/uploads/2023/03/Groupe-de-masques-11.png	0%	Avira URL Cloud	safe
https://services.zipy.ai/sdk-session-manager/v2/enduser-info/5c9cd8a6?v=1.0.28&e=Production&o=0&ns=true	0%	Avira URL Cloud	safe
https://cdn.zipy.ai/sdk/v1.0/zipy.min.umd.js	0%	Avira URL Cloud	safe
http://icant.co.uk/csstablegallery/	0%	Avira URL Cloud	safe
https://envoye-special.fr/wp-content/uploads/2023/03/POP-ensavoir.png	0%	Avira URL Cloud	safe
https://envoye-special.fr/wp-content/uploads/2023/03/POP-ensavoir2.png	0%	Avira URL Cloud	safe
https://www.cookieyes.com/	0%	Avira URL Cloud	safe
http://www.codika.fr/	0%	Avira URL Cloud	safe
https://www.envoye-special.fr/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dsr-svc-csv.prod.mindtickle.com	99.86.229.112	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
dsr-images-us-east-1.prod.mindtickle.com	18.165.116.102	true	false	high
api-js.mixpanel.com	35.190.25.25	true	false	high
widget.intercom.io	108.138.64.17	true	false	high
services.zipy.ai	104.26.6.49	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com	3.233.159.182	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
collector8.zipy.ai	104.26.6.49	true	false	unknown
k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com	44.195.108.183	true	false	high
regional-express.fr	145.239.37.162	true	false	unknown
www.google.com	74.125.136.104	true	false	high
envoye-special.fr	145.239.37.162	true	false	unknown
cdn.zipy.ai	104.26.6.49	true	false	unknown
s.w.org	192.0.77.48	true	false	high
dsr-internal-us.mindtickle.com	13.33.4.14	true	false	high
d1xc9ial1furyh.cloudfront.net	13.32.151.24	true	false	high
js.intercomcdn.com	3.163.101.92	true	false	high
dsr-svc-csv.prod-us.mindtickle.com	unknown	unknown	false	high
web.enable.us	unknown	unknown	false	unknown
rum.browser-intake-datadoghq.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://dsr-internal-us.mindtickle.com/static/js/264.7ea7137c.chunk.js	false		high
https://www.google.com/recaptcha/api2/reload?k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC	false		high
https://dsr-internal-us.mindtickle.com/static/js/8311.a4a8aa60.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/2632.a844fabe.chunk.js	false		high
about:blank	false	Avira URL Cloud: safe	low
https://dsr-internal-us.mindtickle.com/static/js/1670.aeebf6fc.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/6641.c067fe0f.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/9687.f2dfe077.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/4217.46f06040.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/1052.41310dca.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/7207.a10606fd.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/1660.ffbdfe6e.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/4308.b6b628d8.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/5307.455e247e.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/1885.b8d7c262.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/1965.d562d08f.chunk.js	false		high
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=80202178-e1ee-4376-b530-e98d46fe77f0&batch_time=1713881159824	false	Avira URL Cloud: safe	unknown
https://dsr-internal-us.mindtickle.com/remoteEntry.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/280.a3adc45b.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/6702.603c35a5.chunk.js	false		high
https://dsr-images-us-east-1.prod.mindtickle.com/protected/organization-994/rooms/banner-1713871695447-ba2af024-f29d-4190-8d75-d25a9e7758c4.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3Jvb21zL2Jhbm5lci0xNzEzODcxNjk1NDQ3LWJhMmFmMDI0LWYyOWQtNDE5MC04ZDc1LWQyNWE5ZTc3NThjNC5qcGVnIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNzE1MDgxNDU2fX19XX0_&Signature=UMff4RXdBkPTKTusbNilyyTncaLD6UXfs0LxknDTYW6rKIMncWGIbquJT4LPMSmptqSMTY1KCtPYO9b-i6anFsO~Wwnz2OuBVbL~TPv3JSGLhS8us4Hp4c5y2lHnUrWklY2ZhauNMWuMohgX2EgMYjC06tTgz7yV3YII5MSG6QZLqkwWiVLDV-kw9cUXS-a4eYp00PpTVTeL4WYZaB-T2hCOGpDnmCxYYnLuKALz3n-fwCVbTtLrekh45z~0XEtUztB-WuB3vYtr8V13oQ~oLcSq5A9IHf~9HZ7uJ9JIu81s1igdADO~9~WKB8PwVbwtRYjy-5i87QDHFjpGIfeuoQ__&Key-Pair-Id=KFSVSK4GDGUMB	false		high
https://dsr-internal-us.mindtickle.com/static/js/4164.685cb2de.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/586.b709a998.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/4200.58d81098.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/7234.38279feb.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/9378.e150dafa.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/4799.24810307.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/5730.10b1d522.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/5852.0dff4e12.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/7844.3d8f7ba2.chunk.js	false		high
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=97db3813-1954-4112-8bf4-d749b4b4db26&batch_time=1713881141453	false	Avira URL Cloud: safe	unknown
https://dsr-internal-us.mindtickle.com/static/js/127.d438896d.chunk.js	false		high
https://web.enable.us/assets/mindtickle-trademarked-logo.svg	false	Avira URL Cloud: safe	unknown
https://dsr-internal-us.mindtickle.com/static/js/7773.1f3c061c.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/6611.ecce3809.chunk.js	false		high
https://envoye-special.fr/wp-content/uploads/2023/03/POP-ensavoir.png	false	Avira URL Cloud: safe	unknown
https://dsr-internal-us.mindtickle.com/static/js/1093.7ee8aa6b.chunk.js	false		high
https://www.google.com/js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/9291.5bde9037.chunk.js	false		high
https://cdn.zipy.ai/sdk/v1.0/zipy.min.umd.js	false	Avira URL Cloud: safe	unknown
https://dsr-internal-us.mindtickle.com/static/js/845.87798335.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/404.7a421d50.chunk.js	false		high
https://services.zipy.ai/sdk-session-manager/v2/enduser-info/5c9cd8a6?v=1.0.28&e=Production&o=0&ns=true	false	Avira URL Cloud: safe	unknown
https://dsr-internal-us.mindtickle.com/static/js/5658.4583a995.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/9663.4a37fca5.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/4644.9e961433.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/8447.4979ef99.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/1744.32cea325.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/9778.c2571d8b.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/783.df13d78d.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/5893.87617d4e.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/css/1670.9d769a73.chunk.css	false		high
https://dsr-internal-us.mindtickle.com/static/js/3143.76a8115a.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/3575.51e1cad5.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/6323.a999228a.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/9109.67b5138b.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/861.8af79939.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/8962.d30b6cd1.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/5543.663021d7.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/1947.70494fb1.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/4866.9bc0a053.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/3006.2c7dce02.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/6927.eb3f508f.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/1249.fdabb546.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/5782.cb349513.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/5206.5ee8d138.chunk.js	false		high
https://dsr-internal-us.mindtickle.com/static/js/1226.af860636.chunk.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/Errors?code=	chromecache_288.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_441.2.dr, chromecache_278.2.dr	false		high
https://envoye-special.fr/wp-content/uploads/2023/03/Groupe-de-masques-11.png	chromecache_287.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_398.2.dr	false		high
https://fontawesome.com	chromecache_359.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_441.2.dr, chromecache_278.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_398.2.dr	false		high
https://support.google.com/recaptcha	chromecache_278.2.dr	false		high
http://icant.co.uk/csstablegallery/	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_441.2.dr, chromecache_278.2.dr	false		high
https://github.com/imakewebthings/waypoints/blog/master/licenses.txt	chromecache_448.2.dr	false		high
https://schema.org	chromecache_287.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_441.2.dr, chromecache_278.2.dr	false		high
http://dev.apollodata.com/core/fragments.html#unique-names	chromecache_417.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_421.2.dr	false		high
http://papermashup.com/demos/css-buttons)	chromecache_375.2.dr	false		high
https://yoast.com/wordpress/plugins/seo/	chromecache_287.2.dr	false		high
https://cloud.google.com/contact	chromecache_441.2.dr, chromecache_278.2.dr	false		high
https://fontawesome.com/license/free	chromecache_359.2.dr	false		high
https://envoye-special.fr/wp-content/uploads/2023/03/POP-ensavoir2.png	chromecache_287.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_441.2.dr, chromecache_278.2.dr, chromecache_411.2.dr	false		high
https://schema.org/WebPage	chromecache_287.2.dr	false		high
https://www.cookieyes.com/	chromecache_287.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_441.2.dr, chromecache_278.2.dr	false		high
https://googleads.g.doubleclick.net	chromecache_372.2.dr	false		high
https://getbootstrap.com/)	chromecache_421.2.dr	false		high
http://css-tricks.com/inheriting-box-sizing-probably-slightly-better-best-practice/	chromecache_271.2.dr	false		high
http://benalman.com/projects/jquery-throttle-debounce-plugin/	chromecache_275.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_441.2.dr, chromecache_278.2.dr	false		high
https://www.envoye-special.fr/	chromecache_287.2.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_372.2.dr, chromecache_405.2.dr	false		high
http://www.codika.fr/	chromecache_271.2.dr	false	Avira URL Cloud: safe	unknown
https://google.com	chromecache_372.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.231.6.160	unknown	United States	14618	AMAZON-AESUS	false
172.217.215.104	unknown	United States	15169	GOOGLEUS	false
74.125.136.104	www.google.com	United States	15169	GOOGLEUS	false
104.26.6.49	services.zipy.ai	United States	13335	CLOUDFLARENETUS	false
18.165.83.9	unknown	United States	3	MIT-GATEWAYSUS	false
172.67.68.84	unknown	United States	13335	CLOUDFLARENETUS	false
107.178.240.159	unknown	United States	15169	GOOGLEUS	false
44.195.108.183	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.251.15.103	unknown	United States	15169	GOOGLEUS	false
3.233.159.182	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.233.159.181	unknown	United States	14618	AMAZON-AESUS	false
99.86.229.106	unknown	United States	16509	AMAZON-02US	false
99.86.229.112	dsr-svc-csv.prod.mindtickle.com	United States	16509	AMAZON-02US	false
13.33.4.35	unknown	United States	7018	ATT-INTERNET4US	false
35.190.25.25	api-js.mixpanel.com	United States	15169	GOOGLEUS	false
13.33.4.14	dsr-internal-us.mindtickle.com	United States	7018	ATT-INTERNET4US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.138.64.17	widget.intercom.io	United States	16509	AMAZON-02US	false
145.239.37.162	regional-express.fr	France	16276	OVHFR	false
13.32.151.24	d1xc9ial1furyh.cloudfront.net	United States	16509	AMAZON-02US	false
18.165.116.102	dsr-images-us-east-1.prod.mindtickle.com	United States	3	MIT-GATEWAYSUS	false
3.163.101.92	js.intercomcdn.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430396
Start date and time:	2024-04-23 16:04:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@18/455@60/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://regional-express.fr/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 142.250.105.102, 142.250.105.100, 142.250.105.139, 142.250.105.113, 142.250.105.101, 142.250.105.138, 142.250.9.84, 34.104.35.123, 64.233.177.95, 74.125.138.94, 40.68.123.157, 23.64.117.13, 192.229.211.108, 199.232.210.172, 20.242.39.171, 64.233.176.97, 104.91.175.30, 104.91.175.23, 13.85.23.206, 142.250.9.94, 64.233.177.94, 173.194.219.95, 172.253.124.139, 172.253.124.100, 172.253.124.138, 172.253.124.102, 172.253.124.101, 172.253.124.113, 64.233.177.101, 64.233.177.113, 64.233.177.138, 64.233.177.102, 64.233.177.139, 64.233.177.100, 74.125.136.95, 64.233.185.95, 172.217.215.95, 64.233.176.95, 172.253.124.95, 74.125.138.95, 142.250.9.95, 142.250.105.95, 142.251.15.95, 108.177.122.95, 142.250.105.94, 74.125.136.94, 23.45.182.85, 23.45.182.96, 23.45.182.83, 23.45.182.95, 23.45.182.100, 23.45.182.93, 23.45.182.79, 23.45.182.70, 23.45.182.68, 64.233.185.139, 64.233.185.138, 64.233.185.101, 64.233.185.100, 64.233.185.102, 64.233.185.113
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.974045888009408
Encrypted:	false
SSDEEP:	48:8xwdsTQkvH/idAKZdA19ehwiZUklqehJy+3:8xX/JCy
MD5:	B6C431E0BC8C551A67B9A8329FF5F478
SHA1:	23BE959AFF9062B70D74A24CDF628B09F2EC51B3
SHA-256:	232D5BE87E5C0378521D1A868858F14F3806D802E56062A051F674C86F42A382
SHA-512:	58346E1DA4E1BD8DA7A922749530FA43DE5642852188F1BFA992697134694712F4FB3D90670AF18A6638CBC807E432A240E80307B62A5935029E1566756352AE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......@....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............pR......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991159642398871
Encrypted:	false
SSDEEP:	48:83wdsTQkvH/idAKZdA1weh/iZUkAQkqehyy+2:83X/b9Qjy
MD5:	AAB4191C9E6EEE0DD3668973F7F3CD35
SHA1:	B04B8D212D5BA0C6341EDA527E4701657E7B77CF
SHA-256:	CC1C28E47C7001CF6AECD062B2AD297F068A4B394D88AF8675ABC0BDDC0CE082
SHA-512:	769A8233C65A67718870E2C82666085E4D29CAC4B12C7DA88035E703692DD494DFD476FB6FFB5E1A7BE2D1EC24A270EACAF07BBBECD19223788C833ED0631134
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....B.~@....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............pR......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.002010696852787
Encrypted:	false
SSDEEP:	48:8xywdsTQksH/idAKZdA14tseh7sFiZUkmgqeh7sky+BX:8xyX/Cnmy
MD5:	BC990E1F768A73BB483D80827ACDFBF9
SHA1:	4C0C76486FBDBDAF6E90B8B073CF2E2B39A2DCBD
SHA-256:	9286E96D3CDA0562C8C0EEDA12E2D61CE87B04E8D5816A4CC726E9A5FD5141C6
SHA-512:	33F0935E9500EAE8ADA668EC4EC390479AFA8DE086D869894688CAC349662A3C5EDA945D3790EFBAB014BD2A8DE432164CB3ED12DEC083431579181CE9071BCA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............pR......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.986807856463435
Encrypted:	false
SSDEEP:	48:86wdsTQkvH/idAKZdA1vehDiZUkwqeh+y+R:86X/48y
MD5:	FED00A5DCE259D315CD04C24B991A644
SHA1:	E188EEAFEC9E2EACF5D472ECC9285001215FBA9E
SHA-256:	CB15C0B4FBA98C55C50BE852B17F098E2A381A1D5D1C9A150FBBCDF8FD645AD0
SHA-512:	9526EB5D43CA728DC2F0A65D29191D19B0D97C37094235C95B87B985F489BE1403582D728B831A10BC871E7E82BABAE885354DC21C936ED287D4612BAAA89962
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Dx@....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............pR......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9791795793023472
Encrypted:	false
SSDEEP:	48:8+wdsTQkvH/idAKZdA1hehBiZUk1W1qeh4y+C:8+X/o9Yy
MD5:	E7E124683037ED20E629C9996FA17997
SHA1:	6BBC0DB0E433378C63A78B0AB4E772D9106E0007
SHA-256:	B3C56B56ACA829AF85AEED70CFA74EF30CF9D830E26A02485C531024E7D3C379
SHA-512:	245130F557C0D7BAEFA8797049DCA323EF46612F943FD900DBB600178E194762BE73FD461212122FF15B15234C2264359A598FBCE899A00D3347CE907DE2B987
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=..@....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............pR......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 13:05:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9893765287564684
Encrypted:	false
SSDEEP:	48:8nwdsTQkvH/idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8nX/GT/TbxWOvTbmy7T
MD5:	8F1D0DA983303D30B0D3D2F890C54610
SHA1:	8831B0693D7A8B506CEE910EDB1B871885186C19
SHA-256:	2C92C5ECF1FD0AF93BF4A6E2349E2A7704F8933C64EBCE6D3219CBB51669F3FE
SHA-512:	26A479E0360F76AD512D4B196A2D1B2E7F5D9FF8C0D7726E9C5EE4315D5E36CEDDE0D7A4622EE3C2EAB05073EFA605BF1C9C7C25BE291ABCB715592B44D912FE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Z5n@....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.p....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............pR......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 233 x 97, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10040
Entropy (8bit):	7.949767405398964
Encrypted:	false
SSDEEP:	192:+IIHUCD4wa3Sx6ntpeLj9wPDZCgTD+QZGVrESnwZu:Q0wDcnPuwP0gTnUSSnwQ
MD5:	D0D6BBD0240835D70470C384782B8E6E
SHA1:	86D28B16B4769EFB36A2682060137199F5FAF1EF
SHA-256:	5F7C4CA4435F757ECE08981B81C6F31A303BBC733CE65AE8F29D141E27305BBF
SHA-512:	F91D1B6C62BE9E9BEBEDB9EB08E25DAF1145E3CE41013503A5FDC7C4FD589B01016DC4844B764660D11EDB2793CE42B59127E038696442631FC7AD5D599C44FE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....3.V....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x565, components 3
Category:	downloaded
Size (bytes):	94369
Entropy (8bit):	7.986617517966933
Encrypted:	false
SSDEEP:	1536:/uYu1C8dcljkTHI3U2/gVssTqVrKCHRr22DEPCFGvGdpfDahdWGqEXnu5tUkpmSe:/JidSIbgU2FRRx22IPCFGvGPWhdLEtUZ
MD5:	CE33CB0245C6CBF42DD5D61936E15D6A
SHA1:	F396DBFE1411ECEC715486BB03970B7F3CAC6E78
SHA-256:	BD6E72BC72EC793CD5F79E51F19C0B2DB2ECDA7388997C740DA32F604699875E
SHA-512:	19BFC8181610BADED7662AEA46435C765517D89C465AA00E3F231C48EABA652497FE612DB8C1CF140CFEA344DE8FC4386827878EBBE1DC8EF8980CDFF9B00631
Malicious:	false
Reputation:	low
URL:	https://dsr-images-us-east-1.prod.mindtickle.com/protected/organization-994/reference-116777/cover-1713870628834-ebf4ef86-c3f7-4682-be71-bb8ad0ce9afd.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3JlZmVyZW5jZS0xMTY3NzcvY292ZXItMTcxMzg3MDYyODgzNC1lYmY0ZWY4Ni1jM2Y3LTQ2ODItYmU3MS1iYjhhZDBjZTlhZmQuanBlZyIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTA4MDIzMn19fV19&Signature=jXGmVLn9oehpYXRFIEwC2q1fxbl7rwJX2rYtGpb~EmiDs06nzsL9X-9Yw~QYr61MPMKL2z9aycl0XMevtBd4hbC3qPzQlPf3K2jOEEG4Vulb3nTIAGfKHTO74YDEvt3HPWMK3Z05LS1Mcb8byKcbB~dCTIWNyrK0MEuL~cbEnE8pv3e8TzbKUsO5-UxLk0jMFBaXSukgZLPC7I36mu1EO4FLf5f410w8m~lwV93B~D7PnzaLXYFBYP4c7c0Lg9nTXOWrUbGjMJZ59aoRlDhJoeYfste5JE9me~4yhts-kmAe4sWHkGuA2-bFILw1d7CW1NvlpbACO7U4qTVqk~Emxg__&Key-Pair-Id=KFSVSK4GDGUMB
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......5. .."................................................................................1...f...z.'s'..f..(...q.g.K6......_G...\|...=..G..%....5# 9 Q!.8..S...y....$.Q5...;J).n....].r.}q..............\|f+....v5+...J..e..$....:...Y 2.X.).a J....X.(...n....Y..\|k....@.y...5Ov....=..5...._G.E.t.j.)@m.....M.6.ua...++.P.Q.Qc...6.0-.v...D..D........3LRZ.w..^_TrL^~.^.P#h... ..d.<R.Mx.!.b.hB.E5......Ee....xjG.t.$."...Z.Cw,.-)........%.y..].[S....\|..U.........q.).5O.K....f..M.z...3.$...R\.iM.....h...R..:..f.C...dD.b...8...Q.5.3t.k.}g.....K'4Vo.C.t7........BHd...Y....2=.Lks........R.v_...M.n1..T.rEd...[PW.&..q...N.,Mit.iW.L..e....Y....g6...5U.9..#...o\|%...0T..:.........8#.m.........W..%...../d...P.0..b.4.;....<h.D...H..P.........m.....7t.......5$&S.-z...r_.S:..K.B....p..V.G..[../X...GT

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11272)
Category:	downloaded
Size (bytes):	14229
Entropy (8bit):	4.959165424851354
Encrypted:	false
SSDEEP:	384:inJ5kNuPTbUUh31//bEP+XgA3FqC2effJmp3:iJ5aUUUh31//YWXgA7ffC3
MD5:	EAA8641BCDA2371F4024A71FBB67DE3B
SHA1:	0E46C39D3821683C856605A82254115F9A6A7792
SHA-256:	0C5F584D1EA2C3313DC8C55824C2A572D3CF2EAE87C5CA62A58E598AEC9DDB5C
SHA-512:	82B6B84D0A7A28D6A8B013EE41EEF27E1DF8C1FCA396DFB4ED6D01249E12479230CB2D3683A56EB80651D22046C74506D194FA34B05E2A8AD8A08AE297F79AEB
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-includes/js/wp-emoji-release.min.js?ver=5.7.11
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/13.0.1/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,b){return o(d,function(d){var u,f,c=d,e=x(d),a=b.callback(e,b);if(e&&a){for(f in c="<img ".concat('class="',b.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=b.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,n),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,a,b,t,n,r,o,i,s,l=function d(u,f){var c,e,a=u.childNodes,b=a.length;for(;b--;)c=a[b]

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	140121
Entropy (8bit):	5.2975426774302
Encrypted:	false
SSDEEP:	1536:GdLslT8airwQQkMnemmcFMhF5lzP7nMdKmnUIVIQFkc1lPvjDPAo01Omd39bIkkJ:MLiT85wUcs7MYgIQFkMrAuAAaw81du
MD5:	2B5EA5CCC0D16A6534B7347ADD63984F
SHA1:	BF33106A2610865857337BB3ABA7B31C8F45D662
SHA-256:	38299E884FFD166E3265C68324DB2B8E9BAC133E3174E2BFE91EE26102B7678D
SHA-512:	1D2A9CE73D4704993C82D08D3165AE0EEA5DAA4E31B5E6D91A4ECC62D45D772E586AC402B3C23EA915169990BEEEBCEBA2BD76AA90CF88B3754D5F2BEE7B78F0
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9109.67b5138b.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9109],{69109:function(t,e,n){n.r(e),n.d(e,{DefaultPrivacyLevel:function(){return re},datadogRum:function(){return es}});var r={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},i=function t(e){for(var n=[],i=1;i<arguments.length;i++)n[i-1]=arguments[i];Object.prototype.hasOwnProperty.call(r,e)\|\|(e=r.log),t[e].apply(t,n)};function o(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(o){i.error(e,o)}}}i.debug=console.debug.bind(console),i.log=console.log.bind(console),i.info=console.info.bind(console),i.warn=console.warn.bind(console),i.error=console.error.bind(console);var a,s=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},u=!1;function c(t){u=t}function l(t){retu

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30059)
Category:	downloaded
Size (bytes):	30106
Entropy (8bit):	5.337174795911713
Encrypted:	false
SSDEEP:	384:Ffk6qzXbmmngxHoLo7OM8ZHAoVspZSmhJyrmuv+xKIERnVZND3:3UXbmmnglqNNmZSsc/
MD5:	36BF07DF9D994D13B888CB0304CBC6AE
SHA1:	01CABD49A8E10807C05249B1E1542168EDF7276D
SHA-256:	BCEFF098A2CD97648BA1E827C56CA545259B08A8DA35948437C5237898EC2A3A
SHA-512:	D38CB5CAB307E878C41863AC95B838E1E600A2468459E74C759CBD82EF1CDCDC7075C6159C0182F23A412B43F288709F271BE73BC8BFEBDB98CF1911651F3B1B
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/280.a3adc45b.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[280],{64758:function(e,n,t){var r=t(4942),o=t(29439),i=t(93264),a=t.n(i),l=t(17711),s=t.n(l),u=t(98850),c=t(31803),d=t(7101),p=t.n(d),f=t(15999),h=t.n(f),m=t(9482),v=t(80184),b=(0,c.Z)((function(e){return{root:{padding:"".concat(e.spacing(1.25)," 0"),margin:"0 ".concat(e.spacing(.75)),width:"100%","& .country-list":{position:"fixed",zIndex:m.H+1}},input:{border:"none",outline:"none",width:"100%"}}})),x=a().forwardRef((function(e,n){var t=e.autoFocus,r=e.disabled,a=e.onBlur,l=e.onChange,u=e.onFocus,c=e.onlyCountries,d=e.value,p=(0,i.useRef)(null),m=b(),x=null!==c&&void 0!==c&&c.length?[]:["us"],g=(0,i.useState)(function(){var e,n=h()(null!==d&&void 0!==d?d:"","US");return(null===n\|\|void 0===n\|\|null===(e=n.country)\|\|void 0===e?void 0:e.toLowerCase())\|\|"us"}()),Z=(0,o.Z)(g,1)[0],y=(0,i.useState)(!1),C=(0,o.Z)(y,2),k=C[0],w=C[1],j=function(e,n,t){var r=n\|\|c&&c[0],o="TOO_LONG"===(0,f.va

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7810)
Category:	downloaded
Size (bytes):	7858
Entropy (8bit):	5.171636734310066
Encrypted:	false
SSDEEP:	96:t7YxOsyu4ZpUZ4Lk9Hq+FYUNvewCpRWpqu6s7t8lOkJMDCp0a9HqvV:t8lOxWHEoLCpq73+oCp0IH6
MD5:	82836D672CDACA6F4E15FDF3BC829E09
SHA1:	50CB44F102C799D58156D6D798528F1C5D8DC6B3
SHA-256:	460B421F7BCE6E9B109364CBB8F5CF96E23F51B77803F9C7FEB49080F7A7871A
SHA-512:	5960376C2ED3342F898B0091F9FC269356C8A47199078B93837F5AA320FFAC036AD7E7CE376A32D022EE1C4B0807B76510A6A938F89C2DA15515BF46FB7B6A2D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1881.21dbf1b7.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1881,1128],{66115:function(t){t.exports=function(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t},t.exports.__esModule=!0,t.exports.default=t.exports},56690:function(t){t.exports=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")},t.exports.__esModule=!0,t.exports.default=t.exports},89728:function(t,e,r){var n=r(64062);function o(t,e){for(var r=0;r<e.length;r++){var o=e[r];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),Object.defineProperty(t,n(o.key),o)}}t.exports=function(t,e,r){return e&&o(t.prototype,e),r&&o(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t},t.exports.__esModule=!0,t.exports.default=t.exports},26389:function(t,e,r){var n=r(73808),o=r(69617),u=r(94993);t.exports=function(t){var e=o();return function(){var r,o=n(t);if(e){var i=n(this).

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19708)
Category:	downloaded
Size (bytes):	19763
Entropy (8bit):	4.982327022753498
Encrypted:	false
SSDEEP:	384:y2L4IlP6QJVzqNxehOPRNHbqdKD7aceaFj9DLvdePVi1kdu/36RyBFhOPp+qNidm:LIo
MD5:	70E0078272329A91D2950FD9FC645A20
SHA1:	8CEB00AC55072930C7893BF891D3D808F1FFD9AA
SHA-256:	D47B12864FE1E19928C5496258ABF3B79AE529434AB960F1F8F50F0F7DF7DACD
SHA-512:	00D26834BC51ED55B638130679DF2BA77700A3A4E8E336E37F7655CC68132ACCB402C6998408EDCAA4A45145687ABA18B83E95BFA26F7467D09BFD38E3AF8A04
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/css/1670.9d769a73.chunk.css
Preview:	@charset "UTF-8";.intl-tel-input{display:inline-block;position:relative}.intl-tel-input *{box-sizing:border-box;-moz-box-sizing:border-box}.intl-tel-input .hide{display:none}.intl-tel-input .v-hide{visibility:hidden}.intl-tel-input input,.intl-tel-input input[type=tel],.intl-tel-input input[type=text]{margin-bottom:0!important;margin-right:0;margin-top:0!important;padding-right:36px;position:relative;z-index:0}.intl-tel-input .flag-container{bottom:0;padding:1px;position:absolute;right:0;top:0}.intl-tel-input .flag-container .arrow{font-size:6px;margin-left:5px}.intl-tel-input .flag-container .arrow.up:after{content:"."}.intl-tel-input .flag-container .arrow.down:after{content:"."}.intl-tel-input .selected-flag{align-items:center;display:flex;height:100%;justify-content:center;position:relative;width:36px;z-index:1}.intl-tel-input .country-list{-webkit-overflow-scrolling:touch;background-color:#fff;border:1px solid #ccc;box-shadow:1px 1px 4px rgba(0,0,0,.2);list-style:none;margin:0

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	77665
Entropy (8bit):	7.965238596022843
Encrypted:	false
SSDEEP:	1536:on9wZkG0RVt1dTBlsH0/aQaePOkAjNGW19qVSt1Z/bJq8B6StOnG:kWkjRVFBWHu+kABGWptvbc8PaG
MD5:	3369C9A931DAE1DFFD3915DA857CB074
SHA1:	6F931E2AB4364D5C70305B6049F8D9995C71131B
SHA-256:	A74F5F79BF2F40D1BBC5623C7C0D1FD0109873B8BA80F87EA7771F8097EC36D2
SHA-512:	E005D50419D6D25EE28C6C581689102795BA44786D6E8F734CA09DA76DAD92B107F929154182FD4EDE57A5AB18DA27100BD562C19DD0C3D529E36713B041C55C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:6AD9C081C04111E9B2D2A7B8FE7CD140" xmpMM:InstanceID="xmp.iid:6AD9C080C04111E9B2D2A7B8FE7CD140" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1000, components 3
Category:	downloaded
Size (bytes):	688121
Entropy (8bit):	7.981881087122165
Encrypted:	false
SSDEEP:	12288:zS3oDHhEQRN9sDRXGsXaes0fPsqYTREbLoNnT1O5MqERQkuOMdxjEpnl09Y:pBEWyRWyaes0fPsqnoNnT8KqERQkvKx2
MD5:	F9C1520B9A838F74303512049BE42FFC
SHA1:	2DE192A2E8AB27CE3380D8CF28953EE2D4FF516F
SHA-256:	CB6D83B7135AB9635DF84A24767D58E3DD1C5C605B99CE7B6854EB61FB49E8A1
SHA-512:	660146ACD7CEB0C8DE0A380A0AC72972D6C17FFEEEF822F8EFCBC10AD7E9E09336DF7C4C79C7B4D5843420D295931E78737FF44D93FAF775EA568426014F31FF
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2022/02/HP-fd-1.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:3CA13818881E11ECAFABBF2A33905101" xmpMM:InstanceID="xmp.iid:3CA13817881E11ECAFABBF2A33905101" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9E6E82DA7D2068118C14AC77749785A4" stRef:documentID="adobe:docid:photoshop:032405d1-0

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28077)
Category:	downloaded
Size (bytes):	28202
Entropy (8bit):	5.439686399730044
Encrypted:	false
SSDEEP:	768:SW6T9B5NOZvoJrcq05tV/nVMc9sX4oRDx:zKdfJrcF44oj
MD5:	0C307E898EFD90B6440F40533D788B7A
SHA1:	7C759EA825557C99E28803319643F7FE9345894C
SHA-256:	6F5610DBB1CB76AFC72B2BF2C6459A8932CBBDD0D5FC735EC1CFC5C5B3152FF3
SHA-512:	3CD55ECB3F6468CF6741FBDAFFDE9FF0BF48EAF110F3D4F9B8B620431CDB0D3EBC840CC1FD464BE0095D46B5E80A616F3FE15AAF1905743E61B7A2BAB3D8534B
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9778.c2571d8b.chunk.js
Preview:	/! For license information please see 9778.c2571d8b.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9778],{2009:function(t,r){"use strict";r.byteLength=function(t){var r=u(t),e=r[0],n=r[1];return 3(e+n)/4-n},r.toByteArray=function(t){var r,e,i=u(t),f=i[0],a=i[1],s=new o(function(t,r,e){return 3(r+e)/4-e}(0,f,a)),h=0,c=a>0?f-4:f;for(e=0;e<c;e+=4)r=n[t.charCodeAt(e)]<<18\|n[t.charCodeAt(e+1)]<<12\|n[t.charCodeAt(e+2)]<<6\|n[t.charCodeAt(e+3)],s[h++]=r>>16&255,s[h++]=r>>8&255,s[h++]=255&r;2===a&&(r=n[t.charCodeAt(e)]<<2\|n[t.charCodeAt(e+1)]>>4,s[h++]=255&r);1===a&&(r=n[t.charCodeAt(e)]<<10\|n[t.charCodeAt(e+1)]<<4\|n[t.charCodeAt(e+2)]>>2,s[h++]=r>>8&255,s[h++]=255&r);return s},r.fromByteArray=function(t){for(var r,n=t.length,o=n%3,i=[],f=16383,u=0,s=n-o;u<s;u+=f)i.push(a(t,u,u+f>s?s:u+f));1===o?(r=t[n-1],i.push(e[r>>2]+e[r<<4&63]+"==")):2===o&&(r=(t[n-2]<<8)+t[n-1],i.push(e[r>>10]+e[r>>4&63]+e[r<<2&63]+"="));return i.join

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10476)
Category:	downloaded
Size (bytes):	10601
Entropy (8bit):	5.1357675433882735
Encrypted:	false
SSDEEP:	96:Vy/tjJcSE3TPzuXCkP0twZfJ2gFk9tMqZyAt71kqZrF+BzOjSODzsc3Qr3Gc4w0N:ij2PzHjcYgpatBkKgBixQv54x5jNzB
MD5:	4EB79CDEF3D30EB1EA6E26C837EF237B
SHA1:	53EF0DC9AE6A4F9532A86DADEF9C84C6901ADCA4
SHA-256:	6E99CEAFB3292678A3EDEC34D8B3E050713C1ACCBE44391C4AA93796C8E48365
SHA-512:	17AE950D9E4E3C2178530640C0C6EB6A95A7E14729C849DDC7D379A6375534573BC276F1E4E57499777E53AC24C6294ED54B9BD64C7867A485F98A5B3F337D9D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/3438.dccc51d0.chunk.js
Preview:	/! For license information please see 3438.dccc51d0.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3438,7571],{43438:function(n,e,t){t.r(e),t.d(e,{checkFetcher:function(){return f},createSignalIfSupported:function(){return s},fallbackHttpConfig:function(){return u},parseAndCheckHttpResponse:function(){return c},selectHttpOptionsAndBody:function(){return l},selectURI:function(){return v},serializeFetchParameter:function(){return p},throwServerError:function(){return a}});var r=t(3431),i=t(12615),o=t(34105),u={http:{includeQuery:!0,includeExtensions:!1},headers:{accept:"/","content-type":"application/json"},options:{method:"POST"}},a=function(n,e,t){var r=new Error(t);throw r.name="ServerError",r.response=n,r.statusCode=n.status,r.result=e,r},c=function(n){return function(e){return e.text().then((function(n){try{return JSON.parse(n)}catch(r){var t=r;return t.name="ServerParseError",t.response=e,t.status

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	1.9266787543753818
Encrypted:	false
SSDEEP:	24:suKGtJxRUlw09dWXE3nXH4OBRhd/+PBCLDl8t0zKpj:NHUlX9dW03nXXBRhd/+PBCLBIfN
MD5:	5631EE3FE150214AB5E4FC4281F4E7F5
SHA1:	94156F400B81AEF0C6325CBBAEE6F59C3941C1E5
SHA-256:	5BFC37D7A9F9082721D0AA36141948F0E5A9CFB55292EE5C80CDD5FA623A3607
SHA-512:	EE8171422D91ACF9D2B4AB9AC1E8677763BB14D7B65AD22B632008B88C5134DE6328B872492AEB22D3AE2602F779282A4D3D5A592B1D26E79D777797BFDB89C5
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................P.~........

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9150
Entropy (8bit):	5.434960745656048
Encrypted:	false
SSDEEP:	192:ml2QhKtYSplVQy5tfS0loQTEtmS9lBQWNtjSIlUQXYtKST:yVuOaH8aaDS
MD5:	D5FC7FFEA7294BDAE2C72BD10B0D3573
SHA1:	1C7C540A95DA65B3F5307C39D86B74F6E753BFCE
SHA-256:	C773C987E61CF21886C6041814983C0594E7FD6163B9721C1F76B0CED94FC0BB
SHA-512:	BF5EE3D8E1F379B1A4AA7AE778C10D0290A94C2B4EEB41B77C10F262EAFF9974CD0819F9C872F4EBDDC5981852B65667ECA750F6068028527270156287C59D9F
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Montserrat%3A200%2C300%2C400%2C700%2C800&display=swap&ver=5.7.11
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	467629
Entropy (8bit):	5.305803104121882
Encrypted:	false
SSDEEP:	3072:EtD/+RNxZ7o1v/71o5iasEqyN7OfFbGFgv+/Oowl4KTfRgtXk:e/Y/M1nbah/SfFbx+/OowrfRgtXk
MD5:	23A699A064D7D42940B561056653E9DA
SHA1:	44EB8F64C139143D2B2A359BEE7F588361D2E437
SHA-256:	B6DC84FF30DAF82E89E8AE131116C4241A2EDCC637404A63F2458A826AE422B5
SHA-512:	F75013752364A77CBE9FC9024F214FAB92DDACB509FFDFCA3C030181901F6CBA2977F442EFD8F80FCA9F74F01DF4E4629128F89DD80E872DCCD2842441AC1AD4
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5822.3b13b8ea.chunk.js
Preview:	/! For license information please see 5822.3b13b8ea.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5822],{62560:function(module,__unused_webpack_exports,__webpack_require__){var Buffer=__webpack_require__(19778).lW,process=__webpack_require__(1426),factory;factory=function(){return function(){var __webpack_modules__=[,function(e,t,r){"use strict";function n(e){return n="function"===typeof Symbol&&"symbol"===typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"===typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},n(e)}Object.defineProperty(t,"__esModule",{value:!0}),t.StatTimer=t.RenderingCancelledException=t.PixelsPerInch=t.PageViewport=t.PDFDateString=t.LinkTarget=t.DOMStandardFontDataFactory=t.DOMSVGFactory=t.DOMCanvasFactory=t.DOMCMapReaderFactory=void 0,t.addLinkAttributes=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},r=t.ur

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89496
Entropy (8bit):	5.289738088208255
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE
MD5:	B6F7093369A0E8B83703914CE731B13C
SHA1:	D1889F5C173C2A4B20288F1F84758599AFD346EF
SHA-256:	60240D5A27EDE94FD35FEA44BD110B88C7D8CFC08127F032D13B0C622B8BE827
SHA-512:	D6AA7835D7B256B94DDD2F9D8DB84484F0413EBC502762C1BA21CBA7A392C6F550DB2418CDC8BD6D1DA6ED2CEA55BF22473C778493D416B1A1C38E6FFDB8C79D
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	86650
Entropy (8bit):	5.43137137049235
Encrypted:	false
SSDEEP:	1536:2pwH/X0iKQLzMh8Xy9l9fSUG/grpDiA0GVNyss8/hSB:Qy/X0ifvMh8YlY9m4ss8Q
MD5:	BA6BE4AA2CC494AC012590118299537C
SHA1:	6FCB5D743C3B2BBECBBE9440BB9AB98333E5E1FD
SHA-256:	83431F5329207AAB31CDF9D6A65217190FCB4D01C6D23C3172EEEDA9A60034C0
SHA-512:	53BDF2D97EF287D647221D34490BF0EE98B931B45230DD962CB24B2A51F8A30CBB065F47D2847FD19AEF56FA2AA312021273DB7FCDD73787232608D630F4E1C5
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4779.d2b3c15c.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4779],{53897:function(n,e,t){"use strict";t.d(e,{r:function(){return s}});var r,o=t(93264),i=["title","titleId"];function a(){return a=Object.assign?Object.assign.bind():function(n){for(var e=1;e<arguments.length;e++){var t=arguments[e];for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(n[r]=t[r])}return n},a.apply(this,arguments)}function u(n,e){if(null==n)return{};var t,r,o=function(n,e){if(null==n)return{};var t,r,o={},i=Object.keys(n);for(r=0;r<i.length;r++)t=i[r],e.indexOf(t)>=0\|\|(o[t]=n[t]);return o}(n,e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(n);for(r=0;r<i.length;r++)t=i[r],e.indexOf(t)>=0\|\|Object.prototype.propertyIsEnumerable.call(n,t)&&(o[t]=n[t])}return o}var c=function(n,e){var t=n.title,c=n.titleId,s=u(n,i);return o.createElement("svg",a({width:18,height:18,viewBox:"0 0 18 18",fill:"currentColor",xmlns:"http://www.w3.org/2000/svg",ref:e,"aria-l

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	10791
Entropy (8bit):	7.9681118062316765
Encrypted:	false
SSDEEP:	192:GzaCPQAnKEDFQtygETHObC9XteTk6mAP5Lv2B7cuCiGjm5AA0wq:kPf+HETHOgXgQhAPtvZiGjuAAe
MD5:	2A9B0256B9CEE811324EA810682E8A81
SHA1:	1C2CFB36261D0F5C4C46F3230C591B2AEE059553
SHA-256:	775858864004BE8C18D7FAF93805E53788347417861FB689C1F427D684EDEF03
SHA-512:	DDF4B466B7615A48D696A32B76F98046D84435018AEB01EDF131F49B72BBB1956E61415EED39780CE6D415CC191E81DBABF374C489CA8E56DF1C76EA625E0FE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............L\....).IDATx....]E.7..Uu.k...;.4YH...,.#...8.......6*#.Gd.]..P...NX.....C.t:....w..,U.~.97iBpDf..~.\|.......n...U...z...A....w.._G..<.@@.Q .(..g...3.........yF..<.@@.Q .(..g...3.........yF..<.@@.Q .(..g...3.........yF..<.@@.Q .(..g...3.........yF..<.@@.Q .(..g...3...........kG..(,".M......@...o`D@....Y..`..:Q....w...u...)..0.?..i..h.\.JP1..&.$.....&.. .....d>Y.0r.._C.[.....&%539(.....(........H.B@.. .Ly.._..............(..T.......G_.d2v..u+.OD.....1...r.......w.#o...S.'>...[. .'I..d...N......V6.v...K./j8.xD..f...~.9...-.3K.N[.. .`..7..{.._Dv..Y.. &..%,^.....l.......\.k.C.@..!.ED.&...7s}ys.?R!h.G...@@....x..`.i..[7j7.......f.))@.m.2........g....%.e....m...?:.'.I....?.].u..>....&.w....P.,.y...f..[.`\H..i.....,.RX.gG......].%...=b~7.....M}).?..7}..C....c........./.....J....M.c;..sd...pS.V.\|F\|.E.....2....e.r..8..5.M........>........r..X...K).9..h."..%c......>.....G..D.+fx....\7....[....."^.4.LI..e...Z.R..A.D.}....57.n..)

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	250052
Entropy (8bit):	7.978771925753154
Encrypted:	false
SSDEEP:	6144:C7X0+e4BpL7YLw/2RdaxR72Gz4IqizsCbkSo7Uv:OEd4Ms/2zMBJ4Iq0ASo72
MD5:	ABE114F333284511D6E67FC2DF215B24
SHA1:	302405A923FC5615FC8306795822A2F51C62A911
SHA-256:	9856BFE5B5240697C00364934004866514F2E073985B725236322DEB489F08E6
SHA-512:	A83FDD98F354FD1B2366ECA2C20B429B8E821953D50F47CA505AB73B53CE33FF74BF46D8876DA727F1579CCEEDE6AF46EDB29E3895F9ED28463B32D940371CEE
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SF3-flip.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:ABE415B1C04011E9A748EDCDC7409843" xmpMM:InstanceID="xmp.iid:ABE415B0C04011E9A748EDCDC7409843" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 6000x1161, components 3
Category:	downloaded
Size (bytes):	412642
Entropy (8bit):	7.915024023307951
Encrypted:	false
SSDEEP:	6144:c1uwD5RvZrepzcb2bcxr/8kGE/XMOdnEYUSQljJV98is:WxTYpobmk/oqMOdEYQV9G
MD5:	D049976A8D6C146E5BFBBEEC55C9F66E
SHA1:	277624CE2DAC1FD5F1B263DD527FE4D8E62ED7D6
SHA-256:	AB2D0BF9D00BA578DE4C959497E4AD3BE4622BAA2E468964C0F88F622994254E
SHA-512:	DA3CC2CE841E29090DD0C3DEEABCC58D41066C0028C8429A1993F7A0DC13E6B0A420325E6392F56FC634CBB6AD8E383CB405EB36041D3B0156622B6299046FF8
Malicious:	false
Reputation:	low
URL:	https://dsr-images-us-east-1.prod.mindtickle.com/protected/organization-994/rooms/banner-1713871695447-ba2af024-f29d-4190-8d75-d25a9e7758c4.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3Jvb21zL2Jhbm5lci0xNzEzODcxNjk1NDQ3LWJhMmFmMDI0LWYyOWQtNDE5MC04ZDc1LWQyNWE5ZTc3NThjNC5qcGVnIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNzE1MDgxNDU2fX19XX0_&Signature=UMff4RXdBkPTKTusbNilyyTncaLD6UXfs0LxknDTYW6rKIMncWGIbquJT4LPMSmptqSMTY1KCtPYO9b-i6anFsO~Wwnz2OuBVbL~TPv3JSGLhS8us4Hp4c5y2lHnUrWklY2ZhauNMWuMohgX2EgMYjC06tTgz7yV3YII5MSG6QZLqkwWiVLDV-kw9cUXS-a4eYp00PpTVTeL4WYZaB-T2hCOGpDnmCxYYnLuKALz3n-fwCVbTtLrekh45z~0XEtUztB-WuB3vYtr8V13oQ~oLcSq5A9IHf~9HZ7uJ9JIu81s1igdADO~9~WKB8PwVbwtRYjy-5i87QDHFjpGIfeuoQ__&Key-Pair-Id=KFSVSK4GDGUMB
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc...C......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc........p..".......................................P........................!1.AQ..aq."2...3BRr...#4CSb...$5Ds.%Tc........6E&Ud..t...............................*......................1.!..A."2Q.Ba.#.3R............?.......@...'KI....H.=...Y.....\|...N?o...tr..O.O..../L._...0......"...2)..".$.Dy.%...P.b`8.1Gt0...y.R....I.&.. ....j......d............C(.1...!..H..

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	347
Entropy (8bit):	5.066842434074036
Encrypted:	false
SSDEEP:	6:YsWiAtr/fgUzg73OwXcgHAZoNG8XeGPAzU/C/GVQ5XYk51AVXXUH6qKRecHB:YsDWjO3bMbuNG8OYAzUDpk5+daKL
MD5:	54A90F6C8875FB6D03444B01F53F3A56
SHA1:	67556A01BADB0EA3EAF4557835F36BD398C036E0
SHA-256:	D5E67396FFADDC493FBC98F2238010EAF8E1EF161136E4500C6DE8B4583B2058
SHA-512:	22BD5C58D9C92E30682F1A5B972A1A282132C4A69FC78056685631A16ADD096ED72F20586FBD78130C9490F56B3637FC3629A5F65CE2B3A7E15249D234B90696
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1713881161414,"status":"INTERNAL_SERVER_ERROR","responseType":null,"responseDescription":null,"service":"zipy-service-sdk-session-manager","responseObject":null,"errorFields":[{"source":"org.springframework.web.HttpRequestMethodNotSupportedException","fieldName":null,"message":"Request method 'GET' not supported"}],"otherInfo":null}

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3261)
Category:	downloaded
Size (bytes):	56962
Entropy (8bit):	5.326708374364817
Encrypted:	false
SSDEEP:	768:S4fS7Uw4M1MZE6JdBiJlZet2vSrV7dZMPC6eq9moPq9mwq9E6q95xq9eAq9i2:U6Zifgt2rr2
MD5:	2E3956074A79D2282BF20A5BCBF21385
SHA1:	A756A472137BB89852FA22A8771A46D9547E9674
SHA-256:	A6DCEED5A414F53621B38342DAE720D89CF29D5DDE3C8E09A94684FAD4A79FE1
SHA-512:	BD0BE96D59B5D72BC2CBFE2878E81EEC40EDFF9813B0D5F2F274112B424E6857C4DC93C1324541722AD2C7C9ECD9DF06FB16254905630DF4FC42DB6FB9022A94
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.js?ver=2b670661ca547c0a2b913d09cf97d721
Preview:	!function(name,definition){if(typeof module!='undefined'&&module.exports)module.exports=definition().else if(typeof define=='function'&&define.amd)define(name,definition).else this[name]=definition()}('bowser',function(){var t=true.function detect(ua){function getFirstMatch(regex){var match=ua.match(regex);return(match&&match.length>1&&match[1])\|\|'';}.function getSecondMatch(regex){var match=ua.match(regex);return(match&&match.length>1&&match[2])\|\|'';}.var iosdevice=getFirstMatch(/(ipod\|iphone\|ipad)/i).toLowerCase(),likeAndroid=/like android/i.test(ua),android=!likeAndroid&&/android/i.test(ua),nexusMobile=/nexus\s[0-6]\s/i.test(ua),nexusTablet=!nexusMobile&&/nexus\s*[0-9]+/i.test(ua),chromeos=/CrOS/.test(ua),silk=/silk/i.test(ua),sailfish=/sailfish/i.test(ua),tizen=/tizen/i.test(ua),webos=/(web\|hpw)os/i.test(ua),windowsphone=/windows phone/i.test(ua),windows=!windowsphone&&/windows/i.test(ua),mac=!iosdevice&&!silk&&/macintosh/i.test(ua),linux=!android&&!sailfish&&!tizen&&!webos&&/lin

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11174)
Category:	downloaded
Size (bytes):	11222
Entropy (8bit):	5.287820610649468
Encrypted:	false
SSDEEP:	192:PV3B2vLde9l4uGISm4m44mtCAT3JTB45qMQI4pC74wsCpKJ8FyO4Y:PV3B2v09l40SiAT3JTB4/QtYc3CIJ8IQ
MD5:	B24A7A81EC56A96F783A1654559E060B
SHA1:	D203155CBCF2DC9EB3EA98F143E4ED406C73E401
SHA-256:	2A4DE78B81D8F947C8F9D919B6D912C99BCA6BD42148B5BBFE15C8D6AF81E757
SHA-512:	727CC0ED34696F0610B760101A706C2FBA33D8B69E124DBD441A2FF98D5415EFC875062460B0BC98870596FC062CC883D45042EDFCC06412DDD66B53F57F633D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1226.af860636.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1226],{91535:function(t,e){Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var n=function(t,e){switch(t){case"P":return e.date({width:"short"});case"PP":return e.date({width:"medium"});case"PPP":return e.date({width:"long"});default:return e.date({width:"full"})}},r=function(t,e){switch(t){case"p":return e.time({width:"short"});case"pp":return e.time({width:"medium"});case"ppp":return e.time({width:"long"});default:return e.time({width:"full"})}},a={p:r,P:function(t,e){var a,i=t.match(/(P+)(p+)?/)\|\|[],o=i[1],u=i[2];if(!u)return n(t,e);switch(o){case"P":a=e.dateTime({width:"short"});break;case"PP":a=e.dateTime({width:"medium"});break;case"PPP":a=e.dateTime({width:"long"});break;default:a=e.dateTime({width:"full"})}return a.replace("{{date}}",n(o,e)).replace("{{time}}",r(u,e))}};e.default=a,t.exports=e.default},66840:function(t,e,n){function r(t){return function(){v

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	122
Entropy (8bit):	4.987371149956584
Encrypted:	false
SSDEEP:	3:XzOYNRjmKBWX6GJMupozOYNRjmKBWX6GJMuYBhRNmd4CIrQyqYf2:XzjedrM24jedrM1rm2CI4I2
MD5:	9693A362903B2265B1FFC4395C591C66
SHA1:	D1CEED60D507DF0531DA373C36CC554B23A3C900
SHA-256:	D1E886381F7C7FCB9F19A17D2EC8FFF56E0CE6E710841F82AB5BD973E768AD9F
SHA-512:	5CB05B4E8B949937D02D1DAF79C572D08DA96D01280F056CA95A359113E96B37C3A402DEE040EDABCDEDA8BC94A33BA7864BF510D1524BDF8966A8CE06301F28
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5893.87617d4e.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5893],{25893:function(){}}]);

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 233 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10040
Entropy (8bit):	7.949767405398964
Encrypted:	false
SSDEEP:	192:+IIHUCD4wa3Sx6ntpeLj9wPDZCgTD+QZGVrESnwZu:Q0wDcnPuwP0gTnUSSnwQ
MD5:	D0D6BBD0240835D70470C384782B8E6E
SHA1:	86D28B16B4769EFB36A2682060137199F5FAF1EF
SHA-256:	5F7C4CA4435F757ECE08981B81C6F31A303BBC733CE65AE8F29D141E27305BBF
SHA-512:	F91D1B6C62BE9E9BEBEDB9EB08E25DAF1145E3CE41013503A5FDC7C4FD589B01016DC4844B764660D11EDB2793CE42B59127E038696442631FC7AD5D599C44FE
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-regionalexpress-large.png
Preview:	.PNG........IHDR.......a.....3.V....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	178837
Entropy (8bit):	5.406806912744799
Encrypted:	false
SSDEEP:	3072:1MmFqZPbRf5SlPKjmcQu86xVX+0hMOZh/:1Mms5Sw7xVX+m
MD5:	92CFB310C55108E8152DE86D971BC541
SHA1:	3B9861398154F32E43810F11384BAA8119159510
SHA-256:	0BF4EFF0B48C7E5716C43DED4E4AA35984D10C3A5B967A6C575DE645E3FBF94B
SHA-512:	41610424DE36AE4BA049CBA97B3F071D1CA506C5EAEAFAAD0720000D34EC48E318B6A09AFA541EFEA114B06F1C407434E13384A0A23637C8AA8E8CC7B230AFDE
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/main.351922f6.js
Preview:	!function(){var t={67672:function(t,n,e){"use strict";e(14179);Promise.all([e.e(6838),e.e(3361),e.e(1226),e.e(1670),e.e(3264),e.e(3644),e.e(2631),e.e(8296),e.e(3987),e.e(5533),e.e(5961),e.e(7101),e.e(9348),e.e(8718)]).then(e.bind(e,6158))},66724:function(t,n,e){var r=e(39218),o=e(81772),i=TypeError;t.exports=function(t){if(r(t))return t;throw i(o(t)+" is not a function")}},10611:function(t,n,e){var r=e(51219),o=e(81772),i=TypeError;t.exports=function(t){if(r(t))return t;throw i(o(t)+" is not a constructor")}},56299:function(t,n,e){var r=e(39218),o=String,i=TypeError;t.exports=function(t){if("object"==typeof t\|\|r(t))return t;throw i("Can't set "+o(t)+" as a prototype")}},35715:function(t,n,e){var r=e(95028),o=e(4385),i=e(91592).f,u=r("unscopables"),c=Array.prototype;void 0==c[u]&&i(c,u,{configurable:!0,value:o(null)}),t.exports=function(t){c[u][t]=!0}},35466:function(t,n,e){"use strict";var r=e(18424).charAt;t.exports=function(t,n,e){return n+(e?r(t,n).length:1)}},14817:function(t,n,e){

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17923)
Category:	downloaded
Size (bytes):	17971
Entropy (8bit):	5.060093625605401
Encrypted:	false
SSDEEP:	192:LNF4D2AFCp2CygGCL1dylCL1Jy15iOjObHdhNFsoyVjU3kaC5u3:LNF4KOCjbpuVjYXd3
MD5:	12F9E627E84F8DD3C933B1BF1209A562
SHA1:	68A2AD25FE5166667EEB26F24EF922292B70C64D
SHA-256:	4D246E479511FAFDEB9704664AF3881D86A0ED3067DED372518D9113419F8371
SHA-512:	81A11D9C058CBD9AEB49284808A367639BFA3F4E89E88865B9ADEB16E3D82B5E7908B3997D0733E1E2A2253FF79515029A9F72B8967488BF971E9B6998898ACD
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9360.4bf256f8.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9360],{69360:function(t,e,i){i.r(e),i.d(e,{default:function(){return A}});var n=i(31194),s={nbsp:"\xa0"},o=/^#[xX]([A-Fa-f0-9]+)$/,a=/^#([0-9]+)$/,r=/^([A-Za-z0-9]+)$/,h=function(){function t(t){this.named=t}return t.prototype.parse=function(t){if(t){var e=t.match(o);return e?"&#x"+e[1]+";":(e=t.match(a))?"&#"+e[1]+";":(e=t.match(r))?this.named[e[1]]\|\|"&"+e[1]+";":void 0}},t}(),u=/[\t\n\f ]/,c=/[A-Za-z]/,p=/\r\n?/g;function d(t){return u.test(t)}function f(t){return c.test(t)}var l=function(){function t(t,e,i){void 0===i&&(i="precompile"),this.delegate=t,this.entityParser=e,this.mode=i,this.state="beforeData",this.line=-1,this.column=-1,this.input="",this.index=-1,this.tagNameBuffer="",this.states={beforeData:function(){var t=this.peek();if("<"!==t\|\|this.isIgnoredEndTag()){if("precompile"===this.mode&&"\n"===t){var e=this.tagNameBuffer.toLowerCase();"pre"!==e&&"textarea"!==e\|\|this.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (999), with no line terminators
Category:	downloaded
Size (bytes):	999
Entropy (8bit):	5.066722875719003
Encrypted:	false
SSDEEP:	24:1hvSlFjeIGDZPumkSdyPsPGqBvVLUd6R0b3:1ZEFKI0ZXHduhqZVLdWb
MD5:	6A0E8318D42803736D2FAFCC12238026
SHA1:	C955314A7E0A9A9871329B0F042C8F0B5DF49A78
SHA-256:	2648A1333FA24D383FD73A6BEAAC17156AE78F4267FF7407AD60E05A788DF44C
SHA-512:	CAD30D4A715A90FBF19639CC5278DB3012196CD77937CF3787D5AFD3A2839DC839784BB611336F5696AFB2859759435DDEFA237E7D2F25716FC1FF3601AACA50
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6
Preview:	document.addEventListener("DOMContentLoaded",(t=>{var e;wpcf7_recaptcha={...null!==(e=wpcf7_recaptcha)&&void 0!==e?e:{}};const c=wpcf7_recaptcha.sitekey,{homepage:n,contactform:a}=wpcf7_recaptcha.actions,o=t=>{const{action:e,func:n,params:a}=t;grecaptcha.execute(c,{action:e}).then((t=>{const c=new CustomEvent("wpcf7grecaptchaexecuted",{detail:{action:e,token:t}});document.dispatchEvent(c)})).then((()=>{"function"==typeof n&&n(...a)})).catch((t=>console.error(t)))};if(grecaptcha.ready((()=>{o({action:n})})),document.addEventListener("change",(t=>{o({action:a})})),"undefined"!=typeof wpcf7&&"function"==typeof wpcf7.submit){const t=wpcf7.submit;wpcf7.submit=function(e){let c=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};o({action:a,func:t,params:[e,c]})}}document.addEventListener("wpcf7grecaptchaexecuted",(t=>{const e=document.querySelectorAll('form.wpcf7-form input[name="_wpcf7_recaptcha_response"]');for(let c=0;c<e.length;c++)e[c].setAttribute("value",t.detail.token)}))}));

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2479)
Category:	downloaded
Size (bytes):	2527
Entropy (8bit):	5.159779873291183
Encrypted:	false
SSDEEP:	48:iL4cHlyP5XyXAYUES7cHlxcHK9d7ycyUTA6UNbUKBYD1JPUcHlCq+Q3OIc9sKqe+:bhCp5dd79yzfbNuaLr9HqzV
MD5:	2BB423CCD08028187226B6B92997A7F1
SHA1:	AC93EA15CDFC0AEF2313E1FDC86C74C2D08D2365
SHA-256:	F853A55060A932C57524AF093616398FD859F3C15BCCBC34FB3DD818F537172E
SHA-512:	15C209CB58BF29BB73119D6F5BC8EA2372131799773C410C15310FA51825507C15A5B8D6F59BBFCF7B946C1170DCE6F1043753AFA42AB5553C00DD638B653F6E
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6405.f80d8117.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6405],{4942:function(t,r,n){n.d(r,{Z:function(){return o}});var e=n(49142);function o(t,r,n){return(r=(0,e.Z)(r))in t?Object.defineProperty(t,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[r]=n,t}},87462:function(t,r,n){function e(){return e=Object.assign?Object.assign.bind():function(t){for(var r=1;r<arguments.length;r++){var n=arguments[r];for(var e in n)Object.prototype.hasOwnProperty.call(n,e)&&(t[e]=n[e])}return t},e.apply(this,arguments)}n.d(r,{Z:function(){return e}})},94578:function(t,r,n){n.d(r,{Z:function(){return o}});var e=n(89611);function o(t,r){t.prototype=Object.create(r.prototype),t.prototype.constructor=t,(0,e.Z)(t,r)}},1413:function(t,r,n){n.d(r,{Z:function(){return i}});var e=n(4942);function o(t,r){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var e=Object.getOwnPropertySymbols(t);r&&(e=e.filter((function(r){return Object.getOwnPropertyDescrip

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	969
Entropy (8bit):	5.956810590779162
Encrypted:	false
SSDEEP:	24:z1hpunQWwjx82lY2T32HEVZ34tayJ3VZRB3fGbclrst8X:5itNn2VbQhJ3d9fRsmX
MD5:	030604ED0C16A1233778E3971F595EB1
SHA1:	DCC4B07A8A2BD42574D31F3556EF8DB665438983
SHA-256:	1C998F7BEEAA032DB47AF29A4BB87CC3C9CBB9550AB553991D33DD8E9E4762EB
SHA-512:	A55B695C74F5A494CB497453C54199A7BBDB6340A88AEC94069D56DD1618587DE46C57BB2E15DE1668BBF98A3D65C8974FD5856E74965B98671547541C8038DE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:295F3FAEC67011E9BA2DE712508B318B" xmpMM:DocumentID="xmp.did:295F3FAFC67011E9BA2DE712508B318B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:295F3FACC67011E9BA2DE712508B318B" stRef:documentID="xmp.did:295F3FADC67011E9BA2DE712508B318B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9>.....?IDATx.b...?.@.&......Z<.,f..t.?......E.h..M.A=..GS.hP.Z<r,..0..M....Q.....IEND.B`.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11845)
Category:	downloaded
Size (bytes):	11970
Entropy (8bit):	5.37543573423947
Encrypted:	false
SSDEEP:	192:ARqAUDtwIkJKEXu2oivt2Pm5tw2oN0qIikYBR07RfG24/6GQyAK5f/gpJH0/Cs:RBt6BveD0lf6Nf4pGp
MD5:	A9FC30D312D339E23DE1CEEDBFBD465C
SHA1:	44AAE35B6E3C48E8525EE534BF68CF0ABF835CF0
SHA-256:	9698E015EA0DB792731445D69424DB75CD169AB0173A828B62835EC2653710CA
SHA-512:	CB41EAD10224D787B9BA2122798831C486B24649F4C8FEB0E37B573CD647F727EF6392054692AB79D707B463CD102ACFDC8EDEAA49CD30907001D04AC0930B38
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6702.603c35a5.chunk.js
Preview:	/! For license information please see 6702.603c35a5.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6702,6192],{49797:function(e,t,r){function n(e){var t=Object.create(null);return function(r){return void 0===t[r]&&(t[r]=e(r)),t[r]}}r.d(t,{Z:function(){return n}})},6702:function(e,t,r){r.r(t),r.d(t,{CacheProvider:function(){return p},ClassNames:function(){return j},Global:function(){return $},ThemeContext:function(){return g},ThemeProvider:function(){return C},__unsafe_useEmotionCache:function(){return v},createElement:function(){return E},css:function(){return k},jsx:function(){return E},keyframes:function(){return A},useTheme:function(){return b},withEmotionCache:function(){return h},withTheme:function(){return S}});var n=r(93264),o=r(83361),a=r(87462),i=function(e){var t=new WeakMap;return function(r){if(t.has(r))return t.get(r);var n=e(r);return t.set(r,n),n}},u=r(62110),c=r.n(u),s=function(e,t){retu

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	19515
Entropy (8bit):	5.140542151912963
Encrypted:	false
SSDEEP:	192:4NlxebW6sEt4t0qNsQ2gq7lN0EKtmH2nw3M2qaActho+HdNwtULhCOsWvM053gT+:MEvlt4tHNs5Wmt5HdNwt7c3YS
MD5:	E1CC5B1B1F2FAD61D35DC7BBBC54F220
SHA1:	2C198898303BA871F9AFA72C7117A1FA1B30E051
SHA-256:	7C6E8FB300BA9DA527DD28B782638F404AF8193A1D04AF42918DE572118CE86E
SHA-512:	0EF709F98C52143715C815F24E18965BE28A97509B8BFC2C54DD8510837D725050FF634C516CD3D4CD9DD78B88210DBBEA0359D3095409E72A29A7AA9F5C131A
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/style.css?ver=5.7.11
Preview:	/.Theme Name: Regional Express.Author: Audrey Del.colle.Author URI: http://www.codika.fr/.Description: Th.me Regional Express.Template: bb-theme.Version: 1.Created on : 20 ao.t 2019, 23:18:43./..html {..font-family: sans-serif;..-webkit-text-size-adjust: 100%;..-ms-text-size-adjust: 100%;.}..body {..margin: 0;.}...wpcf7 #form-emploi.{. font-family: Montserrat, sans-serif;. font-weight: 300;. font-size: 18px;..border-style: solid;. border-width: 0;. background-clip: padding-box;. border-color: #cccccc;. border-top-width: 1px;. border-right-width: 1px;. border-bottom-width: 1px;. border-left-width: 1px;..text-align: left;. color: #42424c;..display: block;..line-height: normal;. height: auto;..outline: none;. vertical-align: middle;. padding: 16px 15px;. margin: 0;.}....wpcf7 input[type="submit"].{..background: #ef7622;..border-radius: 0px;..border:0px;..font-family: Montserrat, sans-serif;. font-size: 15px;..font-weight: 700;..line-hei

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	1.9266787543753818
Encrypted:	false
SSDEEP:	24:suKGtJxRUlw09dWXE3nXH4OBRhd/+PBCLDl8t0zKpj:NHUlX9dW03nXXBRhd/+PBCLBIfN
MD5:	5631EE3FE150214AB5E4FC4281F4E7F5
SHA1:	94156F400B81AEF0C6325CBBAEE6F59C3941C1E5
SHA-256:	5BFC37D7A9F9082721D0AA36141948F0E5A9CFB55292EE5C80CDD5FA623A3607
SHA-512:	EE8171422D91ACF9D2B4AB9AC1E8677763BB14D7B65AD22B632008B88C5134DE6328B872492AEB22D3AE2602F779282A4D3D5A592B1D26E79D777797BFDB89C5
Malicious:	false
Reputation:	low
URL:	https://web.enable.us/favicon.ico
Preview:	...... .... .........(... ...@..... ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................P.~........

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5247)
Category:	downloaded
Size (bytes):	5295
Entropy (8bit):	5.379642089375999
Encrypted:	false
SSDEEP:	96:HZArcvvoa7JMUzAMCZ5QN7QUiC7zOHcyrYkhqzkv0nAQji6HhV:5kcvv77WUc3xbcOv0nrVj
MD5:	47E4FD9E3ED27CF06849B77EBBAAA911
SHA1:	45FE6BB644C57B68219B4B4CD85722F80784838B
SHA-256:	84CC9FA2F7A7B48CA4FCD71B3777A3CC087E6F1A099C91044A508F09E0557F4B
SHA-512:	3AFF69E8FA917E7052B11245AD782E33AB0DD97C6A10435AFECDBDB05676C3DF93B7BB98B7370F94C232370EF1EE79FD055FF3C92FF88FE025A1E563DDBAB629
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/3575.51e1cad5.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3575],{43575:function(n,e,i){i.r(e);var r=i(1413),o=(i(93264),i(98850)),t=i(3905),a=i(13967),s=i(7101),d=i.n(s),c=i(31803),l=i(85905),u=i(26538),m=i(18807),p=i(91693),x=i(80184),v=(0,c.Z)((function(n){return{container:{maxWidth:n.spacing(155)}}}));e.default=function(n){var e,i=v(),s=(0,a.Z)(),c=(0,o.useMediaQuery)(s.breakpoints.down("md")),h=n.disableBannerNameGrouping,f=n.disableRoomSummary,b=void 0!==f&&f,g=n.renderActionPlans,j=n.renderAppBar,C=n.renderBanner,B=n.renderBeforeContent,Z=n.renderBusinessCard,k=n.renderCommunicationActions,y=n.renderContents,w=n.renderName,N=n.renderSalesActions,G=n.renderSectionHeaders,S=n.renderSignables,D=n.renderWelcomeMessage,F=n.RoomContainerProps,P=function(){if(!b){var n=D(),e=Z();return(0,x.jsxs)(o.Box,{children:[n,!!e&&(0,x.jsx)(o.Box,{mb:2,mt:n?2:0,children:e}),N(),k()]})}};return(0,x.jsx)(p.Z,(0,r.Z)((0,r.Z)({},F),{},{appBar:j(),banner:(

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (479)
Category:	downloaded
Size (bytes):	731
Entropy (8bit):	5.325658977004964
Encrypted:	false
SSDEEP:	12:Uc6Iuvy8AaKqOxXWX/iWOaKzouLyIKRazfaK9qYPCbuEorgmvOUpSLFhbPALCaLF:+s8mDxmX/izkuucfmYKggUzSLFRYLpLF
MD5:	97669983F6540F2BADEEF6AB07E5B637
SHA1:	B6F0084F6747DA64CF24334B2C0027E57CBF7F23
SHA-256:	FA7B84BB6E37FBA06F79793937E55BAF6EBC1BEE051E350E11C7CA681A9F3DB7
SHA-512:	2594A8D21E5338D1589B22CCAA9F24E283E1BA8EB2364F661CCF85639D1A063A72A5FA1FAAD116B008110D09BDE0898B0B349A1DEA8DBD8B83F77F360849F6CF
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/bb-plugin/js/jquery.ba-throttle-debounce.min.js?ver=2.3.2.6
Preview:	/. jQuery throttle / debounce - v1.1 - 3/7/2010. * http://benalman.com/projects/jquery-throttle-debounce-plugin/. * . * Copyright (c) 2010 "Cowboy" Ben Alman. * Dual licensed under the MIT and GPL licenses.. * http://benalman.com/about/license/. */.(function(b,c){var $=b.jQuery\|\|b.Cowboy\|\|(b.Cowboy={}),a;$.throttle=a=function(e,f,j,i){var h,d=0;if(typeof f!=="boolean"){i=j;j=f;f=c}function g(){var o=this,m=+new Date()-d,n=arguments;function l(){d=+new Date();j.apply(o,n)}function k(){h=c}if(i&&!h){l()}h&&clearTimeout(h);if(i===c&&m>e){l()}else{if(f!==true){h=setTimeout(i?k:l,i===c?e-m:e)}}}if($.guid){g.guid=j.guid=j.guid\|\|$.guid++}return g};$.debounce=function(d,e,f){return f===c?a(d,e,false):a(d,f,e!==false)}})(this);

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	165379
Entropy (8bit):	7.974361631945248
Encrypted:	false
SSDEEP:	3072:5JJTj9HRrAdYfDVkuLv/GmPqLr8gRdb5FxcgQl3t:5TTrMWkuLClRlRQl3t
MD5:	35E797EACE71DB1FEBFFC5601A226EA3
SHA1:	62F2AEB3A2C8C263B7B0EF5529A076AA659602FD
SHA-256:	93956507CBC6A586CEDDD85B23979072A59E7CE1AC999B08C91D0A422A0512FB
SHA-512:	647099115F51EF98436531135C708DEE8D710902A463E2CBAB75EC5F8F83510FD48E31F68402109B3D71FDF6FF4153B4E8F08F8B6453672967C61C365A7844E8
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:A13F5BCCC04011E9941BEA58722DE251" xmpMM:InstanceID="xmp.iid:A13F5BCBC04011E9941BEA58722DE251" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 182 x 44, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1466
Entropy (8bit):	7.806820725039713
Encrypted:	false
SSDEEP:	24:gLyMlzjoLrrtQVvEe0Tr8TR6tVCdLkbIugUW4iTApo/1Uf87iuW3ntvL6idEEz:WyM1DhEj/8T0tqL9l54iT+otUflP3tv/
MD5:	1AA189565E4DA85A6DAAF8B5ECE3C65E
SHA1:	F48A9A7436B0FE632417C7C654D5CBD0FF5D8989
SHA-256:	B58D4D4CDDA4FBC0665584104F7F79C5FE0AB5E150298AF3B229A8E42C0DE9C0
SHA-512:	0B54201F12DE5149D65571C3CB4BEACC560924540556893202EEB8E849852B1DE1A7C5C1B5D1824676AEB09F2C8594A5DD9B3CD6F9C3B9A255F2BD863F64D7B2
Malicious:	false
Reputation:	low
URL:	https://envoye-special.fr/wp-content/uploads/2023/03/POP-ensavoir.png
Preview:	.PNG........IHDR.......,.......B!....sBIT....\|.d....qIDATx^.k.UU...}....f.F1T.%-.2?$....D..i.E.2A$L.{..D.Q.D/..(Q..^.0>zihV...g...Z....s.=g8.f.=.~....:{..o...:..u]U..(`..1..0..vH..[@0R...H...la.H..l#......#....t.lJ....T@.6..).[.0R...H...la.H..l#......#....t.lJ....T.)....._g..~..>.H...........}.:)..........$.4\9w..?..O.u.l_....g.....W..u...M=P9.....K....S.@\|R.e....(...6..=.6$....7_o...zq..G?..w.5.f.....z@......+.................~...=;......K.Y..T.e../...Ou..._l.....!=w..x.....<`....t........w'....#{...U.}?.U..=.B...0...F.m<.l..Z.=#s=..-.......B...@........W8......@QD/..0.!.}..\|..V.:$a......>..6....d.'..v5w. ...a........vj.B8.aF(....(.{.S$E.....k..Q....'.:.q....N~....0..R-.0...VP..s.....U.. .8.0iL.=..e.w...'.?9'....7C..m.Z...m..^>.(;.}%Ei... {...J#.W.......<.........6...............x..X.a!.]..}..H.....[VBb.lJg}.k9..W..~\|(8..Z1../..:\.QR.7..9..C...W...B...+....#.m./.....$.....B.......!S;!.q.e..F....y.j..q5erE...@.3,...0.c.C6"...

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11348
Entropy (8bit):	3.772260812272921
Encrypted:	false
SSDEEP:	192:EZA+iSNYe0t8CEmJTMby/SVcLeKrEkXuaGO91T88WsBvqSV/rRzHw9fvUSLpPBrk:EZbBWmncLeK4k0DBgC6VQzvOAOHG8ATA
MD5:	551EAD797822A89AD3E045B46393C423
SHA1:	905FE18ACD19A68B2815CCA75762952C5C37FA88
SHA-256:	1FB9C7AE67026E5346B8A7F8B6AF6A1882CB6D701B4A84C781542BFC1E4EB4F3
SHA-512:	0D3DB02B198A3F94C7C4EDA417C5F8F129FD49D8DABDCB685E2E667C4BC07EEF9E65DA3EE5C567669364B6F1BED37579D3248FEA96BA682AAAA45EFE644DEFC2
Malicious:	false
Reputation:	low
URL:	https://web.enable.us/assets/mindtickle-trademarked-logo.svg
Preview:	<svg width="77" height="20" viewBox="0 0 77 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M45.1249 7.28746C45.1246 7.28969 45.1246 7.29195 45.1249 7.29418V14.065V14.0697C45.1249 14.0785 45.1249 14.0818 45.1249 14.0906C45.1219 14.1915 45.1391 14.292 45.1756 14.3861C45.2121 14.4803 45.2672 14.5661 45.3374 14.6386C45.4077 14.7111 45.4918 14.7687 45.5847 14.808C45.6776 14.8474 45.7775 14.8676 45.8784 14.8676C45.9793 14.8676 46.0792 14.8474 46.1721 14.808C46.265 14.7687 46.3491 14.7111 46.4194 14.6386C46.4896 14.5661 46.5447 14.4803 46.5812 14.3861C46.6177 14.292 46.6349 14.1915 46.6319 14.0906C46.6319 14.0798 46.6319 14.0691 46.6286 14.0576V7.28544C46.6227 7.08931 46.5408 6.90317 46.4001 6.76651C46.2594 6.62984 46.0711 6.5534 45.875 6.5534C45.679 6.5534 45.4907 6.62984 45.35 6.76651C45.2093 6.90317 45.1274 7.08931 45.1215 7.28544L45.1249 7.28746ZM15.6071 14.1114C15.6071 14.1161 15.6071 14.1201 15.6071 14.1248C15.6062 14.2236 15.6248 14.3215 15.6618 14.413C15.6988 14.5046 15.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 6000x1161, components 3
Category:	dropped
Size (bytes):	412642
Entropy (8bit):	7.915024023307951
Encrypted:	false
SSDEEP:	6144:c1uwD5RvZrepzcb2bcxr/8kGE/XMOdnEYUSQljJV98is:WxTYpobmk/oqMOdEYQV9G
MD5:	D049976A8D6C146E5BFBBEEC55C9F66E
SHA1:	277624CE2DAC1FD5F1B263DD527FE4D8E62ED7D6
SHA-256:	AB2D0BF9D00BA578DE4C959497E4AD3BE4622BAA2E468964C0F88F622994254E
SHA-512:	DA3CC2CE841E29090DD0C3DEEABCC58D41066C0028C8429A1993F7A0DC13E6B0A420325E6392F56FC634CBB6AD8E383CB405EB36041D3B0156622B6299046FF8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc...C......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc........p..".......................................P........................!1.AQ..aq."2...3BRr...#4CSb...$5Ds.%Tc........6E&Ud..t...............................*......................1.!..A."2Q.Ba.#.3R............?.......@...'KI....H.=...Y.....\|...N?o...tr..O.O..../L._...0......"...2)..".$.Dy.%...P.b`8.1Gt0...y.R....I.&.. ....j......d............C(.1...!..H..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49822)
Category:	downloaded
Size (bytes):	49947
Entropy (8bit):	5.011356243101228
Encrypted:	false
SSDEEP:	768:Qf0/qrIzWbuqtzrAVTeSK5E6zPJYR8196pnmEVj5hA9txgeTMppQAFGMs:TeiDCxPTCVVlhAbSY
MD5:	563F25D1872EDBCF5A086B8A75681847
SHA1:	505DF7235C39F018774149FB7EAA687A1ECDDFDD
SHA-256:	22E1224A8DB7BD590BA19751F2C0A75CF6549BBAC45D75FA19E30AEA7269D82C
SHA-512:	27D76A2275F20E017DD23C53BE541FAEDF4B482F317F2E88E2A34F405B82AFBFB4234E6E6DE46DEF2C3FA5A28D72077123C84475B0B834012FAD355EBB060AD7
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5852.0dff4e12.chunk.js
Preview:	/! For license information please see 5852.0dff4e12.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5852],{65852:function(t,e,n){n.r(e),n.d(e,{ArgumentOutOfRangeError:function(){return Tt},AsyncSubject:function(){return it},BehaviorSubject:function(){return V},ConnectableObservable:function(){return A},EMPTY:function(){return H},EmptyError:function(){return It},GroupedObservable:function(){return C},NEVER:function(){return me},Notification:function(){return $},NotificationKind:function(){return G},ObjectUnsubscribedError:function(){return S},Observable:function(){return g},ReplaySubject:function(){return nt},Scheduler:function(){return M},Subject:function(){return j},Subscriber:function(){return b},Subscription:function(){return l},TimeoutError:function(){return jt},UnsubscriptionError:function(){return f},VirtualAction:function(){return gt},VirtualTimeScheduler:function(){return xt},animationFrame:funct

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2731
Entropy (8bit):	5.134326161792236
Encrypted:	false
SSDEEP:	48:HrjSTxswDB/P7LUS0BvpKkR2/HSXmpgMPnfFrYHe1rcYlX3orrkwEv4Hm6K:HC+2/Vpb/flue1pFwEv4Hmp
MD5:	E6FAE855021A88A0067FCC58121C594F
SHA1:	6299AC3987B5E81725781799DAD361D19AC3B99D
SHA-256:	E50F9CCD2D6582A58BA1879FA578E60D25FEA4C5EEDC07DEAFD14482B2403181
SHA-512:	B67D641AD4DD65063621F73420A52BFE914F25C58C42C08B0A558A429744154901E05E363A358B56F922C0059FBC3822DF063CAC76AB49E02F100666A46D3F36
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6
Preview:	.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..clip-path: inset(50%);..height: 1px;..width: 1px;..margin: -1px;..padding: 0;..border: 0;..word-wrap: normal !important;.}...wpcf7 form .wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #00a0d2; /* Blue /.}...wpcf7 form.init .wpcf7-response-output,..wpcf7 form.resetting .wpcf7-response-output,..wpcf7 form.submitting .wpcf7-response-output {..display: none;.}...wpcf7 form.sent .wpcf7-response-output {..border-color: #46b450; / Green /.}...wpcf7 form.failed .wpcf7-response-output,..wpcf7 form.aborted .wpcf7-response-output {..border-color: #dc3232; / Red /.}...wpcf7 form.spam .wpcf7-response-output {..border-color: #f56e28; / Orange /.}...wpcf7 form.invalid .wpcf7-response-output,..wpcf7 form.unaccepted .wpcf7-response-output,..wpcf7 form.payment-required .wpcf7-response-output {..border-color: #ffb900; / Yellow */.}...wpcf7-form-contro

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2546)
Category:	downloaded
Size (bytes):	2593
Entropy (8bit):	5.309529719930589
Encrypted:	false
SSDEEP:	48:iLEiq/hqEXLuUqtGwImF56L6NaGiWYrSlw2FrZYX+NxY1eXMe/rgSV:ZJqEbuztBvCLhZrBOGT0V
MD5:	EF4ADDEA9A2CEB1C49C6EAAA8B1F1234
SHA1:	3662BF96BE5F29D245FCC5E1BC0007F1CDAC0ED4
SHA-256:	EBE4779182A3FE8A3801B6F8E0C355BCA469CB8E307CD1B8382F69560746F5EA
SHA-512:	25D9AEEBCEE9B13311533BBDCDC8A809965EB3A734EFB92D59CC15F5D39E9FE5D5B893C5F5B25E681D46D91189F6CE2613E6ACBD421E32321E1A16594A71DF2C
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/264.7ea7137c.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[264],{39969:function(e,t,a){var n,r=a(59381),i=(n=r)&&n.__esModule?n:{default:n};var d={tags:function(e){var t=e.id,a=e.events,n=e.dataLayer,r=e.dataLayerName,d=e.preview,o="&gtm_auth="+e.auth,c="&gtm_preview="+d;return t\|\|(0,i.default)("GTM Id is required"),{iframe:'\n <iframe src="https://www.googletagmanager.com/ns.html?id='+t+o+c+'&gtm_cookies_win=x"\n height="0" width="0" style="display:none;visibility:hidden" id="tag-manager"></iframe>',script:"\n (function(w,d,s,l,i){w[l]=w[l]\|\|[];\n w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js', "+JSON.stringify(a).slice(1,-1)+"});\n var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';\n j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl+'"+o+c+"&gtm_cookies_win=x';\n f.parentNode.insertBefore(j,f);\n })(window,document,'scrip

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17687)
Category:	downloaded
Size (bytes):	18282
Entropy (8bit):	5.660943999253795
Encrypted:	false
SSDEEP:	384:eHqJezwxxSRS6Rua4aO8OiGa8VNUSfEeaeHOJZZ1NBjSTkQ:mirS1QavO8fGa8VF1aeHOd7xakQ
MD5:	133138DC8ED76A5E7F52FD72AEB36003
SHA1:	10C34D56309EF22C2BF88339D926EFA45F86C579
SHA-256:	177B76ACDCFB6E097A1C110E91BA676B60284B881D963CF56DC00E358957AE71
SHA-512:	06B3121679A88200E2AE49B47610DC28E60852911EF4313E1C96C09CE080654914C615A739234F952198F459C4FC7B50A2DDA3A88DE46D610DAD6225B2B86DE9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var b=function(a,y){if((a=(y=D.trustedTypes,null),!y)\|\|!y.createPolicy)return a;try{a=y.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(R){D.console&&D.console.error(R.message)}return a},P=function(a){return a},D=this\|\|self;(0,eval)(function(a,y){return(y=b())&&1===a.eval(y.createScript("1"))?function(R){return y.createScript(R)}:function(R){return""+R}}(D)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var ay=function(y,a){return C[y](C.prototype,{parent:a,length:a,prototype:a,splice:a,call:a,console:a,floor:a,stack:a,replace:a,document:a,propertyIsEnumerable:a,pop:a})},Br=function(y,a,D,P,B){if((D=a[0],D)==e)y.W=true,y.ls=25,y.P(a);else if(D==v){y.U=(P=a[1],true);try{B=y.R\|\|y.P(a)}catch(p){x(y,p),B=y.R}P(B)}else if(D==yB)a[3]&&(y.T=true),a[4]&&(y.W=true),a[5]&&(y.g=true),a[6]&&(y.U=true),y.P(a);els

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38550)
Category:	downloaded
Size (bytes):	38590
Entropy (8bit):	5.218040475893597
Encrypted:	false
SSDEEP:	768:w9eoTSDVzY39fezQIumOjq/mltpOrp7evPGpENQMf:wMoOBzYtfezQCOj2604PUO
MD5:	C3C23B6AE414B9D897AF1EE2E96C845D
SHA1:	F3556A7A44E31CB7B09A531EBEFE608FC715CFDC
SHA-256:	8208CC3CF7C28E4AEDB6A182525AF5B5A468C2D632267E4B79AEE7AACA750055
SHA-512:	FDD7788638C53337A0B6D55C20D3EF9DFD5735C454498742A5FC989FC9127667B5D0785898C4521BD18EB2C2038452179E5487EF2B30AF70A06048C419A6B640
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/remoteEntry.js
Preview:	var dsr_client;!function(){"use strict";var n={7500:function(n,e,t){var r={"./Admin":function(){return Promise.all([t.e(6838),t.e(3361),t.e(1226),t.e(1670),t.e(3264),t.e(2631),t.e(8296),t.e(3987),t.e(5533),t.e(5961),t.e(7101),t.e(9348),t.e(3890),t.e(1339),t.e(2820)]).then((function(){return function(){return t(16435)}}))},"./Learner":function(){return Promise.all([t.e(6838),t.e(3361),t.e(1226),t.e(1670),t.e(3264),t.e(2631),t.e(8296),t.e(3987),t.e(5533),t.e(5961),t.e(7101),t.e(9348),t.e(3890),t.e(1339),t.e(1416)]).then((function(){return function(){return t(61246)}}))},"./DSR":function(){return Promise.all([t.e(6838),t.e(3361),t.e(1226),t.e(1670),t.e(3264),t.e(2631),t.e(8296),t.e(3987),t.e(5533),t.e(5961),t.e(7101),t.e(9348),t.e(3890),t.e(8466)]).then((function(){return function(){return t(97231)}}))}},u=function(n,e){return t.R=e,e=t.o(r,n)?r[n]():Promise.resolve().then((function(){throw new Error('Module "'+n+'" does not exist in container.')})),t.R=void 0,e},i=function(n,e){if(t.S){v

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16714)
Category:	downloaded
Size (bytes):	16762
Entropy (8bit):	5.325126203580392
Encrypted:	false
SSDEEP:	192:jLxU5oEq6pgRkEus8YUJQUgAjFOyqigTsh0yPB+60Ij:jk3pgRkHYUGApYyBrNj
MD5:	427BF59EBECE633E4FBDB98FEA4DE82A
SHA1:	D6552D989C47814B9E243A43EDDA7411A7DE8430
SHA-256:	2910DB6AD152AB87945A9200FE2B07CCE2332EDB90066A5F95B3BBEE9148303A
SHA-512:	DDECEEA9745AF8CE583860CC93FB3CABDA2E9F2F6240835D47CF6D2C3DD1295B60E8EE6F8DE24C1374B0063FDA10693E340E70E2772F4D651C1B3FF03297F053
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6641.c067fe0f.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6641],{18060:function(e,n,t){var o=t(63366),r=t(87462),i=t(93264),a=t(28182),s=t(94419),c=t(66934),l=t(31402),u=t(60627),d=t(48677),f=t(80184),p=["children","className","component","components","componentsProps","invisible","open","slotProps","slots","TransitionComponent","transitionDuration"],v=(0,c.ZP)("div",{name:"MuiBackdrop",slot:"Root",overridesResolver:function(e,n){var t=e.ownerState;return[n.root,t.invisible&&n.invisible]}})((function(e){var n=e.ownerState;return(0,r.Z)({position:"fixed",display:"flex",alignItems:"center",justifyContent:"center",right:0,bottom:0,top:0,left:0,backgroundColor:"rgba(0, 0, 0, 0.5)",WebkitTapHighlightColor:"transparent"},n.invisible&&{backgroundColor:"transparent"})})),m=i.forwardRef((function(e,n){var t,i,c,m=(0,l.Z)({props:e,name:"MuiBackdrop"}),b=m.children,h=m.className,E=m.component,y=void 0===E?"div":E,k=m.components,Z=void 0===k?{}:k,g=m

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3801), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	111269
Entropy (8bit):	5.388585885749439
Encrypted:	false
SSDEEP:	3072:28x9jeldC8Ge0kiQuWSXkAJLkG44T2IS5SsF1bb84G:28x9ake0kiQuWSXk6v
MD5:	7D2054FA4B0CC7B769AE085D477CBA56
SHA1:	6A441AFCF2DAB09AC66BE46B81D1450B4D031EF1
SHA-256:	ED03FA95D09636DC1C781AA75F2E84CEC45FA2B53CF891BCE1F92FE08F6EB5ED
SHA-512:	65AFEBDE8812F42A0EDB700A817ABCDCC7438A5A0BC0DE588E4B84764BB96E4B296DFC42D5D5F572C571E1D195632D929B5CE051D397DDA9F987D4A232773E6B
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/
Preview:	<!DOCTYPE html>.<html lang="fr-FR">..<head>.....<meta charset="UTF-8" />...<meta name='viewport' content='width=device-width, initial-scale=1.0' />...<meta http-equiv='X-UA-Compatible' content='IE=edge' />...<link rel="profile" href="https://gmpg.org/xfn/11" />...<script>(function(html){html.className = html.className.replace(/\bno-js\b/,'js')})(document.documentElement);</script>.<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />.<link rel="alternate" hreflang="fr" href="https://regional-express.fr/" />.<link rel="alternate" hreflang="en" href="https://regional-express.fr/en/" />... This site is optimized with the Yoast SEO plugin v17.2.1 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Transporteur routier de proximit. - REGIONAL EXPRESS -</title>..<meta name="description" content="Etude et pilotage de vos flux : distribution, groupage, tourn.e d.di.e, location, transport . la demande et sur mesure, affr.temen

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3010)
Category:	downloaded
Size (bytes):	3058
Entropy (8bit):	5.205105088363744
Encrypted:	false
SSDEEP:	48:iLUr07tUuTZNWpMvh2gJW6uZOqZ5Z4qZu4sZ2g1wpZv0jl0Aqk+8kadvuZAlZ5Zn:EZA4ogUpZOqZ5Z4qZu9Zv1wpZvai1Smu
MD5:	9DAF81AE450AE5D382FDA4EECEB53FE0
SHA1:	105BA86457DF178144872E32DBFEE0B13FD98758
SHA-256:	5A74C3A4CD8B0D3662C82872B46CD30A8C6FFBA511F830A69BC1439EA9796C29
SHA-512:	C501D1C9049696C129FC25223F0EE83A205CDE2F6A271AEA55D748CA142BD92ADA4465794D4020FD3916E5626820C30C4D18D19C94A795A76BE66D7E829E839D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7781.a9e99a82.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7781],{87781:function(r,n,t){t.d(n,{DE:function(){return a},MT:function(){return p},md:function(){return y},qC:function(){return s}});var e=t(1413);function o(r){return"Minified Redux error #"+r+"; visit https://redux.js.org/Errors?code="+r+" for the full message or use the non-minified dev environment for full errors. "}var i="function"===typeof Symbol&&Symbol.observable\|\|"@@observable",u=function(){return Math.random().toString(36).substring(7).split("").join(".")},f={INIT:"@@redux/INIT"+u(),REPLACE:"@@redux/REPLACE"+u(),PROBE_UNKNOWN_ACTION:function(){return"@@redux/PROBE_UNKNOWN_ACTION"+u()}};function c(r){if("object"!==typeof r\|\|null===r)return!1;for(var n=r;null!==Object.getPrototypeOf(n);)n=Object.getPrototypeOf(n);return Object.getPrototypeOf(r)===n}function p(r,n,t){var e;if("function"===typeof n&&"function"===typeof t\|\|"function"===typeof t&&"function"===typeof arguments[

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	downloaded
Size (bytes):	4257
Entropy (8bit):	7.673457386080708
Encrypted:	false
SSDEEP:	96:+XbRB6kn7HGJAQufALccvxAAL1r7V8v2XqB02+Mj:+XbREknv8BvxA2l5XMb
MD5:	3A38D46AF08D001D2A537D37D98FD1B7
SHA1:	C4B1F94B694649A9A5A7D9270C31F7D4939568C3
SHA-256:	5DE9BE19C26254F821596A7256337FF024ADC99ECB8AE1A77C65EE51833EBE22
SHA-512:	9F534CD0A2715E3591359522788761CE8F4177F57A0BD09DE07568A79D5D9DBB56D3B827A65AC58F84CBA36F24CAC732A40A0D73623EE7FCBCBDD2BFF1D5C8A8
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SOL-affret.gif
Preview:	GIF89a..}........z..l...........t..4.Z....:.....H......XRy......3,[..a.L.x%.......~/........F............)"T...<6c......................C<h.V.......{*............ni..........#.Orm.....A....w#.....JJCm.F.....f...SMu............\|,.............D......zu..R...hb..}........O...b]...........q..0je....vq.70_..................z(}x..>......_Y.......~z....e`.....................v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (34729), with NEL line terminators
Category:	downloaded
Size (bytes):	99310
Entropy (8bit):	5.421650493683898
Encrypted:	false
SSDEEP:	1536:U9md82NBTxJ/afhwnpkwp/Y6yR2WtomNfHgcqucErHTefW6BC1dJIphOPI:Uj2NBfxWwBVTWgUzefzC1dKII
MD5:	5090BAE2C114802440412E301BDF5174
SHA1:	3850AFD52816EE686ECCD881DF06764B426CD86A
SHA-256:	D36E5D7328268D21C6941039A7B6A15C7ED7414F60DBEE72D2231D11AC9BDAF3
SHA-512:	A60C7E838FB2ACD1BF0E1504A2C37BA27B6C9E4D966B27D2B8AD459B2D86AEA362F24B54A48953A4A8FCD1D08BCA81042C0E9CEA6E68B563FD44CFE5AB951342
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
Preview:	!function r(c,a,f){function o(n,t){if(!a[n]){if(!c[n]){var e="function"==typeof require&&require;if(!t&&e)return e(n,!0);if(s)return s(n,!0);var i=new Error("Cannot find module '"+n+"'");throw i.code="MODULE_NOT_FOUND",i}var u=a[n]={exports:{}};c[n][0].call(u.exports,function(t){return o(c[n][1][t]\|\|t)},u,u.exports,r,c,a,f)}return a[n].exports}for(var s="function"==typeof require&&require,t=0;t<f.length;t++)o(f[t]);return o}({1:[function(t,n,r){"use strict";t(2);var e=function _interopRequireDefault(t){return t&&t.__esModule?t:{default:t}}(t(15));e.default._babelPolyfill&&"undefined"!=typeof console&&console.warn&&console.warn("@babel/polyfill is loaded more than once on this page. This is probably not desirable/intended and may have consequences if different versions of the polyfills are applied sequentially. If you do need to load the polyfill more than once, use @babel/polyfill/noConflict instead to bypass the warning."),e.default._babelPolyfill=!0},{15:15,2:2}],2:[function(t,n,r){"

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	dropped
Size (bytes):	4257
Entropy (8bit):	7.673457386080708
Encrypted:	false
SSDEEP:	96:+XbRB6kn7HGJAQufALccvxAAL1r7V8v2XqB02+Mj:+XbREknv8BvxA2l5XMb
MD5:	3A38D46AF08D001D2A537D37D98FD1B7
SHA1:	C4B1F94B694649A9A5A7D9270C31F7D4939568C3
SHA-256:	5DE9BE19C26254F821596A7256337FF024ADC99ECB8AE1A77C65EE51833EBE22
SHA-512:	9F534CD0A2715E3591359522788761CE8F4177F57A0BD09DE07568A79D5D9DBB56D3B827A65AC58F84CBA36F24CAC732A40A0D73623EE7FCBCBDD2BFF1D5C8A8
Malicious:	false
Reputation:	low
Preview:	GIF89a..}........z..l...........t..4.Z....:.....H......XRy......3,[..a.L.x%.......~/........F............)"T...<6c......................C<h.V.......{*............ni..........#.Orm.....A....w#.....JJCm.F.....f...SMu............\|,.............D......zu..R...hb..}........O...b]...........q..0je....vq.70_..................z(}x..>......_Y.......~z....e`.....................v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	downloaded
Size (bytes):	3624
Entropy (8bit):	7.626689100441383
Encrypted:	false
SSDEEP:	96:O1m/B6knJHGJAQuf33Pfw+Xb8XhF64Ihp5V5x:ym/Eknxndb8xsb/Rx
MD5:	13BE0E61FD2B7EB7ED179773ECDCA1E6
SHA1:	46FCA6F8B82CE2186A03BEB1716B819C99802008
SHA-256:	E482052312985FBA0C101EB79E1EE01791BA125537638D54C1837E7C08014A72
SHA-512:	1987708395164B5E774B0F4E889435A018610DB763ABD4B69C27DE05253D4BD910DD031DAEEDA288193BEAC9657F72E7F069DE2E07BBB29CC41A5AC4F4A74231
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SOL-distri.gif
Preview:	GIF89a..}..........<....x%.....F...YSz........l...ql.#.N.......~/..+$VC<g..............;4b.........3,\....Z..J...........X.<.Tuq...5........z...RLu.........{t.HBm`[.....E...ni....}....K............z)...U?[....M......X-....\|,NGq..p...mf..............{.......e`...1ic.............?..e...}x..................................pJ............k@H.......4.E......`9G..s..........v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16117)
Category:	downloaded
Size (bytes):	16165
Entropy (8bit):	4.894468277070096
Encrypted:	false
SSDEEP:	192:yLmi68TumplMWtsyGFEupD3oAJnm1SJtrDuBqA7ZLtSiuxamzjtBhhzmJm:y2VeDKLhhCJm
MD5:	9EDE34587698D98AA521C779DEA65BBC
SHA1:	1CF0EBFA8ED4C6D09260CA9BDCED6F5F8A4F1AB4
SHA-256:	477A87C19EC939697BAE86D258A52D96E828FC759EB719C3D9588394CED4EDAE
SHA-512:	FFEDFFC86AF173C377C19D1A442D4DACA55FC08A5BFF9CA65017C5A7EE78349441EE2E7ABC417D80056D43BD831C20136CE98638FF44F4C5A2764F7E2FBB18A1
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5686.0c43113a.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5686],{31934:function(n,e,t){t.d(e,{Z:function(){return j}});var r,a,u,o,s,i,c,p,l,v,f,d,h,g,Z,y,m=t(1413),C=t(74165),b=t(30168),$=t(15861),k=t(15671),w=t(43144),x=t(60136),S=t(29388),E=t(34199),M=t.n(E),I=t(72231),V=t(20210),q=t(43979),D=t(88125),j=function(n){(0,x.Z)(t,n);var e=(0,S.Z)(t);function t(){return(0,k.Z)(this,t),e.apply(this,arguments)}return(0,w.Z)(t,[{key:"createLink",value:function(){var n=(0,$.Z)((0,C.Z)().mark((function n(e){var t=this;return(0,C.Z)().wrap((function(n){for(;;)switch(n.prev=n.next){case 0:return n.abrupt("return",this.mutate((0,$.Z)((0,C.Z)().mark((function n(){var a,u,o,s,i;return(0,C.Z)().wrap((function(n){for(;;)switch(n.prev=n.next){case 0:return n.next=2,t.apolloService.executeMutation({mutation:M()(r\|\|(r=(0,b.Z)(["\n mutation createContentLink($input: CreateContentLinkInput!) {\n createContentLink(input: $input) {\n

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 52, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	1618
Entropy (8bit):	7.142173871786098
Encrypted:	false
SSDEEP:	24:xxy1he91Wwjx82lY2T3ouVesyJ3V9LGgo2/Ivotg4Z/6LclQbFbY4Fqb:xxwqQNn2xoJ3XLIvoSaOdXMb
MD5:	A037A110D0E93D062B2580C2181B41BE
SHA1:	25F02C7EA24102E9007441F9176C4DBAD4C133EE
SHA-256:	36A1D6D48F61249235E629A59CE10B21517F9C9380949E8F9362C4DECA3029FD
SHA-512:	772ECAF7D113B80E02AC26F5052FF265FD709E7F8D38EA615DA448120703CADF91E7EB1EFF70422C72CC082E316CE055BE6DDF09FB9B58EA1AF640D08ACBD451
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/10/VAL-tiret-bas-2.png
Preview:	.PNG........IHDR.......4.............tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:0B4FD037EC3111E9B619E0D1C28062C6" xmpMM:DocumentID="xmp.did:0B4FD038EC3111E9B619E0D1C28062C6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B4FD035EC3111E9B619E0D1C28062C6" stRef:documentID="xmp.did:0B4FD036EC3111E9B619E0D1C28062C6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...@....IDATx.b\|_............H....!s..9 ./.e.9......h....9..?^{Pd....... ..&.......Y@..]..X.8....(.t#T..>..B.06.c....

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68227
Entropy (8bit):	5.3379295916535705
Encrypted:	false
SSDEEP:	768:UxwaUDdEMhbComVKwhHM3xM5eUzrKlOvrf+:FhWozwiIGlOvrG
MD5:	F94075C598D765237B83CCF1DE5A07E0
SHA1:	703C6C0857606336F32032DC64B0D859106D9964
SHA-256:	C2AC5CAE922A20A398F43B2FCDE9F826373A7A9B5B813774030B337B0857347E
SHA-512:	8DC74AF9D3443327FAF8D9CFE413813ACB9DF31E50D1C2E6271BB8FAAA4D13DD25DAA5CB32C9E8A548FA38574E98FE68D2158C0871D7AA769798BAAE1CE3D2EE
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1965.d562d08f.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1965],{94189:function(t,e,n){function r(t,e){for(var n=t<0?"-":"",r=Math.abs(t).toString();r.length<e;)r="0"+r;return n+r}n.d(e,{Z:function(){return r}})},8938:function(t,e,n){function r(t,e){if(null==t)throw new TypeError("assign requires that input parameter not be null or undefined");for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n]);return t}n.d(e,{Z:function(){return r}})},38126:function(t,e,n){var r=n(62942);e.Z=r.Z},24408:function(t,e,n){n.d(e,{b:function(){return i},j:function(){return a}});var r={};function a(){return r}function i(t){r=t}},16824:function(t,e,n){var r=n(94189),a={y:function(t,e){var n=t.getUTCFullYear(),a=n>0?n:1-n;return(0,r.Z)("yy"===e?a%100:a,e.length)},M:function(t,e){var n=t.getUTCMonth();return"M"===e?String(n+1):(0,r.Z)(n+1,2)},d:function(t,e){return(0,r.Z)(t.getUTCDate(),e.length)},a:function(t,e){var n=t.getUTCHours()/12>=1?"pm":

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48139)
Category:	downloaded
Size (bytes):	48187
Entropy (8bit):	5.794552568896117
Encrypted:	false
SSDEEP:	768:GPBFNIo+aBmRmRYmtpzWdYhSSSVczNasPuW59SbnY7oV1:GPBz+G9hXJu7bZ1
MD5:	E68DCBC59565455BBE104D13DA57EB11
SHA1:	93A5D66AF5DF7B357A6948640708C72AF04457C8
SHA-256:	D35CD4D7E5F6EB9ED07BBA07AE52A9E03DFDA01CFC088C66626CB4A03B4974DD
SHA-512:	ECF46EF785E7EC0F4AC6617534C5FEDC9696AAEAFB5EB13A60A212F91828E2558D450658F9CF714A2899C2CA049F0B820C6AA86159D3035F92C214645D66CAA6
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7773.1f3c061c.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7773],{60725:function(A,e,t){t.d(e,{r:function(){return o}});var n,r,C=t(93264),a=["title","titleId"];function i(){return i=Object.assign?Object.assign.bind():function(A){for(var e=1;e<arguments.length;e++){var t=arguments[e];for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(A[n]=t[n])}return A},i.apply(this,arguments)}function l(A,e){if(null==A)return{};var t,n,r=function(A,e){if(null==A)return{};var t,n,r={},C=Object.keys(A);for(n=0;n<C.length;n++)t=C[n],e.indexOf(t)>=0\|\|(r[t]=A[t]);return r}(A,e);if(Object.getOwnPropertySymbols){var C=Object.getOwnPropertySymbols(A);for(n=0;n<C.length;n++)t=C[n],e.indexOf(t)>=0\|\|Object.prototype.propertyIsEnumerable.call(A,t)&&(r[t]=A[t])}return r}var g=function(A,e){var t=A.title,g=A.titleId,o=l(A,a);return C.createElement("svg",i({width:25,height:24,viewBox:"0 0 25 24",fill:"none",xmlns:"http://www.w3.org/2000/svg",xmlnsXlink:"http://

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	20480
Entropy (8bit):	4.753955234617673
Encrypted:	false
SSDEEP:	192:4YmYycVUQaZdCG1/T4klzSnn0yKnDRgyCXPZqiCMUS0QKF:xmYycVx2dz1/Rk0yE9gfCMUaKF
MD5:	F553FBB2B753450E2BA5D3B51F97B48C
SHA1:	5A6B027015EB8860864EA873B1BD6F5C21D0ADB8
SHA-256:	9621571F515A7DEF9C6A634317C51239EAA07C508B4CD7F00A4B64A8BB45E502
SHA-512:	C60C78287B06C7E7069EDBD00211BCFD64EC7DE4D77A0DDE202AD06300D39A5B38E981B3D37EF59244FE4574018308C51EFEB372E3996E21EB52B3785B584327
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/bb-plugin/icons/ultimate-icons/style.css?ver=2.3.2.6
Preview:	@font-face {. font-family: 'Ultimate-Icons';. src:. url('fonts/Ultimate-Icons.ttf?1ddi1j') format('truetype'),. url('fonts/Ultimate-Icons.woff?1ddi1j') format('woff'),. url('fonts/Ultimate-Icons.svg?1ddi1j#Ultimate-Icons') format('svg');. font-weight: normal;. font-style: normal;.}...ua-icon {. /* use !important to prevent issues with browser extensions that change fonts /. font-family: 'Ultimate-Icons' !important;. speak: none;. font-style: normal;. font-weight: normal;. font-variant: normal;. text-transform: none;. line-height: 1;.. / Better Font Rendering =========== */. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...ua-icon-google-plus:before {. content: "\ea82";.}..ua-icon-facebook22:before {. content: "\ea81";.}..ua-icon-basket:before {. content: "\e900";.}..ua-icon-briefcase:before {. content: "\e901";.}..ua-icon-calendar:before {. content: "\e902";.}..ua-icon-chat:before {. content: "\e903";.}..ua-icon-clock:before

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	635999
Entropy (8bit):	5.369427901345529
Encrypted:	false
SSDEEP:	6144:9EBzgurBPO8IqwlGlsRSD3DwB1mGPzfq29/9ylUkBkJlTjcAfsdkXX49vzCbDUB9:947rBPOpmsRSD3Da9tkBkJBYd6DUB9
MD5:	C93C48BB57E9D1E6A8731EC0ECF31D61
SHA1:	02427BA0506ED9DD66E9F8198E503F40A968BD63
SHA-256:	94D70735FC1129F22462102372BB3805F16380F88665F3E78C60841A4F5C0EA5
SHA-512:	B7B12F90BE3AB51CAE978B22B667C651378C760989DE581C2E8BF30FD358DCFC154A2050C033E2C648B62ECCF6D6FE9006A36032A19503A52C107E156DCCB977
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1093.7ee8aa6b.chunk.js
Preview:	/! For license information please see 1093.7ee8aa6b.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1093],{73874:function(e,t,i){"use strict";var n=i(39851);e.exports=function(e,t){return void 0===t&&(t=!1),function(i,r,a){if(i)e(i);else if(r.statusCode>=400&&r.statusCode<=599){var s=a;if(t)if(n.TextDecoder){var o=function(e){void 0===e&&(e="");return e.toLowerCase().split(";").reduce((function(e,t){var i=t.split("="),n=i[0],r=i[1];return"charset"===n.trim()?r.trim():e}),"utf-8")}(r.headers&&r.headers["content-type"]);try{s=new TextDecoder(o).decode(a)}catch(u){}}else s=String.fromCharCode.apply(null,new Uint8Array(a));e({cause:s})}else e(null,a)}}},16656:function(e,t,i){"use strict";var n=i(39851),r=i(10434),a=i(78112);u.httpHandler=i(73874);var s=function(e){var t={};return e?(e.trim().split("\n").forEach((function(e){var i=e.indexOf(":"),n=e.slice(0,i).trim().toLowerCase(),r=e.slice(i+1).trim();"undefined"===typeo

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11348
Entropy (8bit):	3.772260812272921
Encrypted:	false
SSDEEP:	192:EZA+iSNYe0t8CEmJTMby/SVcLeKrEkXuaGO91T88WsBvqSV/rRzHw9fvUSLpPBrk:EZbBWmncLeK4k0DBgC6VQzvOAOHG8ATA
MD5:	551EAD797822A89AD3E045B46393C423
SHA1:	905FE18ACD19A68B2815CCA75762952C5C37FA88
SHA-256:	1FB9C7AE67026E5346B8A7F8B6AF6A1882CB6D701B4A84C781542BFC1E4EB4F3
SHA-512:	0D3DB02B198A3F94C7C4EDA417C5F8F129FD49D8DABDCB685E2E667C4BC07EEF9E65DA3EE5C567669364B6F1BED37579D3248FEA96BA682AAAA45EFE644DEFC2
Malicious:	false
Reputation:	low
Preview:	<svg width="77" height="20" viewBox="0 0 77 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M45.1249 7.28746C45.1246 7.28969 45.1246 7.29195 45.1249 7.29418V14.065V14.0697C45.1249 14.0785 45.1249 14.0818 45.1249 14.0906C45.1219 14.1915 45.1391 14.292 45.1756 14.3861C45.2121 14.4803 45.2672 14.5661 45.3374 14.6386C45.4077 14.7111 45.4918 14.7687 45.5847 14.808C45.6776 14.8474 45.7775 14.8676 45.8784 14.8676C45.9793 14.8676 46.0792 14.8474 46.1721 14.808C46.265 14.7687 46.3491 14.7111 46.4194 14.6386C46.4896 14.5661 46.5447 14.4803 46.5812 14.3861C46.6177 14.292 46.6349 14.1915 46.6319 14.0906C46.6319 14.0798 46.6319 14.0691 46.6286 14.0576V7.28544C46.6227 7.08931 46.5408 6.90317 46.4001 6.76651C46.2594 6.62984 46.0711 6.5534 45.875 6.5534C45.679 6.5534 45.4907 6.62984 45.35 6.76651C45.2093 6.90317 45.1274 7.08931 45.1215 7.28544L45.1249 7.28746ZM15.6071 14.1114C15.6071 14.1161 15.6071 14.1201 15.6071 14.1248C15.6062 14.2236 15.6248 14.3215 15.6618 14.413C15.6988 14.5046 15.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 691 x 113, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	46042
Entropy (8bit):	7.990023439459201
Encrypted:	true
SSDEEP:	768:hhIRocnjgzkSiKN/64J4Q4B6FsTSe3s/gyJQcnJxIdmIvINcAt4IbCQ09Jnhs1e:AoBB/64+Q4ImF4gyKcnmmIvMc9IbgNh7
MD5:	E9C1B2D471D8FC21D8534BC3CE19791C
SHA1:	6636067666CA4D769192CBBAA99437668CFE022B
SHA-256:	9C90630F855EE250D096BA7E60FF668C3E54E28C59340E72FAFD74914276BB60
SHA-512:	E89A04E4ABAEA5FC3CA028BED8AD70E36C448B17A55A409050782ACFA6963C174890212D1DBAD361D469250F7760F0CB9D079986BFB914B6AB7B3264E4AE0097
Malicious:	false
Reputation:	low
URL:	https://envoye-special.fr/wp-content/uploads/2023/03/POP-labels.png
Preview:	.PNG........IHDR.......q......X+.....sBIT....\|.d... .IDATx^.].`...=.......H.."...E.?"..K..E..X@T...P.t...k.........B.R6.n..<\..y...{g.;.\...j)4......U-.Z@..j......z.hT0.._.T.T.l..joU...P-.Z@...n...>.W8M.T0[....]....T...P-.[@..O..N.=......vW..j.....T.<..P..S~.U0[....]....T........p..Q.T0[...tU......vW..j....`.......)U0[....f...W..Z@..j.\|...f......-d._.....U-.Z@.@>X@...`.B\|J........Bv....P-.Z .,...\|0z!>.S.f%......B..X...*.-.O..u....T...T0.G.VO.X...I........k11....;.q.OLDLR..u.i.k...--.jm..k...........ec..B.tU0.>...T...P-`n..`...V....O....k.?....B.z(<..BCq ....."1..y..b....usC.".....o.[.!...)...f..@..j......m.......80+ .&..{w....ld$..D#.^Ws.'zo...Q...........=..V...c.c..P-.Z@.@J..`V.......3+.V..W.c0..e,.uK..f.hXY.$...#d.Hv.....!..4i.6..I.....Wv.L..j..Y.\.m.Z..V-`...9.x[.5so...f.p.K......m......=......-agO...B.p.."7...Dm..X...D.+.]...#]!...........X..A."........<i..\..:p..aT..Z #...U-.Z.\.P.G.=q.,...;.n>.Zu.`.w..3..e.By...f...v+...\@0...veT...

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	downloaded
Size (bytes):	3205
Entropy (8bit):	7.540737384964621
Encrypted:	false
SSDEEP:	96:SauBa/B6kn8drYtUHGJAQufjzdh2BNHeeR6K:Saz/EkngrqM7zdhq9J
MD5:	F7A71DB2051370E06AE746C67462C4D3
SHA1:	7DB9F7E4209A13DA23A94078EFDC43C35116C23F
SHA-256:	C0C96921F15FD58C490290A0807E6D298DF75F4E7EDAE9CCF0418617418B9B60
SHA-512:	D250B4A81AC76D7087AB0225AE7B7D6D3227229BEA7E2A0EE115531CB62390D746C82CCDEB03D7D18C4277F717CE7CC969F5537E629D6316888A85F90AEC415E
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SOL-temp.gif
Preview:	GIF89a..}.....R......................x%.....F.:QKtC=i..2+[........z}x...2HBl.......Z....~/!.M........Iuq..A]W})"T..=7d..k...yt............NGqrm......q.....................................w.............ni.e`..~.a\..{*..s....F70_.............t...............\|,..G..................VPw.........?ic..............................{.........`Z......._Y.je..I...........XSz..e...v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7879
Entropy (8bit):	7.9572660092788405
Encrypted:	false
SSDEEP:	192:iIIHUCD4wa3SAOvSyI3doBelNr057fZ5+PG+QZ:M0wDAxyItot57fL+PNQZ
MD5:	AB5DBA51D407423EDAC7AA43C5DD5202
SHA1:	B955ED2433EA1778C6C8E325FD69AE3D120C3B92
SHA-256:	521DA3103ED3840FB2573EB15844F82FFECC39A96CD1881CD0A92F1B49ECEEFE
SHA-512:	9844AB8220437EC66F70C24881986E89935DA136269D7F4D22B8508FF4ED9A7CCEE36A94EB9E263377729C6FA69A2ACB8DA05B1F0305C0547D827F999BB9ECF0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...2.............gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 33, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6171
Entropy (8bit):	7.9300518406801785
Encrypted:	false
SSDEEP:	96:FGllcHitlIxv9vk7C1+I4wWHLihk/xZSOnMHQLx2rQarOmi6GpFT6Lbimnho7qw9:FFIIHUCD4wa3SOMHin0OFTuVXVg7
MD5:	9AD5CED7E2BEE87CAF29B9B881685D3F
SHA1:	8BF780FFB0D886C5BEDDDC208A805D91A67B36F7
SHA-256:	D6D66E6E98E55B3B9EC48279883527E4BE7F48A7F8057E6E081CCEE5EE881E6E
SHA-512:	5C7B689BE552E150F4FBB69687CD7E760DABE17BFDFA669F22BAA10BF5EA7A1CAB820F72AA09B0D457761ADA4FEED91FE59AB81603BDF6FF4F4658AA96DB545D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...!.......o.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5959)
Category:	downloaded
Size (bytes):	6007
Entropy (8bit):	5.250145554674974
Encrypted:	false
SSDEEP:	96:dcjIzGghP9AbWSuf7ZE5g6zQSMG/hPe6OjzHl+ASG8eVhwAYc0/V:dcszAxuTS+6zMye7nbaMhjYcE
MD5:	571137E364C538F567B276E0726A4702
SHA1:	B6D81CF2AAD3543800108D379A6E97B91A53747C
SHA-256:	A580042EE1C8176D48C9A238139B68593339562391D2F5EF9D7E5BDB7B8C3721
SHA-512:	FEB70C47F0B68A5F972D552E927FDF451A9D6C53BA1044691EC9C210323A361DFE8A8347285B4DA1CEFD4E0B1BAEB411D656AEBA2E20CE03320D82F2AA052690
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/2632.a844fabe.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[2632],{12632:function(t,e,n){n.r(e),n.d(e,{default:function(){return ut}});var r=n(39040),i=n(37730),u=n(61518),a=n(52074),o=n(90020),s=n(1104),c=n(75105),h=n(54361),f=n(79632),l=n(45364),d=n(30237),Z=n(53154),m=n(97073),M=n(30841),y=n(71786),g=n(19850),D=n(9365),P=n(10786),k=n(24565),p=n(54675),v=n(82222),E=n(86114),S=n(40467),H=n(92122),L=n(61537),O=n(24424),T=n(93747),w=n(52295),W=n(82599),Y=n(89420),b=n(39579),A=n(17508),C=n(54690),B=n(81750),_=n(85375),x=n(33476),I=n(19314),N=n(85231),j=n(378),q=n(12618),R=n(77227),F=n(52124),J=n(29292),U=n(45617),V=n(18347),$=n(15719),z=n(74888),G=n(13629),K=n(57235),Q=n(59831),X=n(88558),tt=n(17262),et=n(91535),nt=n.n(et),rt=n(62942),it={dayOfMonth:"d",fullDate:"PP",fullDateWithWeekday:"PPPP",fullDateTime:"PP p",fullDateTime12h:"PP hh:mm aaa",fullDateTime24h:"PP HH:mm",fullTime:"p",fullTime12h:"hh:mm aaa",fullTime24h:"HH:mm",hours12h:"hh",ho

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	160774
Entropy (8bit):	5.424764930077897
Encrypted:	false
SSDEEP:	3072:LMfO6mZ2YgJrw6xXVpOiWzwiUr0FYONplY8ZtYH:LMfOhZ2BJrRxXVpOiW+8ZtYH
MD5:	58E913E58587B96AD22228FFB41AE184
SHA1:	5A4269B3D060D74393DABE125DBCA1E89217FBCA
SHA-256:	494291A63EC2AD0A4DCB40C980492064C03191FBBB196C47626965641A1A66A7
SHA-512:	981AA9605CF252AA12EA456F6ADFE8E42F9E4BED39E63CBCA931C7EA2C5E4C7F311F3CA44D2AF8C08D35E7514198811DE65B1B831D72199F356A86ECA4D789B6
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4660.6d63bde7.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4660],{90977:function(e,t,n){"use strict";var o=n(4942),a=n(63366),r=n(87462),i=n(93264),l=n(28182),s=n(94419),c=n(12065),u=n(66934),d=n(31402),p=n(53915),m=n(14036),f=n(48647),b=n(80184),h=["edge","children","className","color","disabled","disableFocusRipple","size"],v=(0,u.ZP)(p.Z,{name:"MuiIconButton",slot:"Root",overridesResolver:function(e,t){var n=e.ownerState;return[t.root,"default"!==n.color&&t["color".concat((0,m.Z)(n.color))],n.edge&&t["edge".concat((0,m.Z)(n.edge))],t["size".concat((0,m.Z)(n.size))]]}})((function(e){var t=e.theme,n=e.ownerState;return(0,r.Z)({textAlign:"center",flex:"0 0 auto",fontSize:t.typography.pxToRem(24),padding:8,borderRadius:"50%",overflow:"visible",color:(t.vars\|\|t).palette.action.active,transition:t.transitions.create("background-color",{duration:t.transitions.duration.shortest})},!n.disableRipple&&{"&:hover":{backgroundColor:t.vars?"rgba(".concat(t.vars.pa

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23791)
Category:	downloaded
Size (bytes):	23839
Entropy (8bit):	5.108894949345516
Encrypted:	false
SSDEEP:	384:XIZUH4eEuRUSk7Ny5IsaRx7AlzNfUa8TNk60XOC2:K2bVa74aLANNfUJTNk6zC2
MD5:	CE93B89508B64B4574A1745CE8D7A012
SHA1:	F895B5F404F35FF1FA8DC5CB6567F8579C1C1288
SHA-256:	EB035D2D98AB1A36552117164379895281E1BA41AC565AD8262FE3253F05B95A
SHA-512:	BCAE7FFF564D3918084709B6E71730679114923F2E7E048DDD0D79A1C5AF5E8E5344014D8C01D2C52DCCA941BE3A84470C3BFB274B7694E9423294ADB9AA7EF8
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4644.9e961433.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4644],{44644:function(t,e,r){r.r(e),r.d(e,{HeuristicFragmentMatcher:function(){return P},InMemoryCache:function(){return dt},IntrospectionFragmentMatcher:function(){return U},ObjectCache:function(){return tt},StoreReader:function(){return X},StoreWriter:function(){return it},WriteError:function(){return rt},assertIdValue:function(){return H},defaultDataIdFromObject:function(){return ct},defaultNormalizedCacheFactory:function(){return et},enhanceErrorWithDocument:function(){return nt}});var n=r(3431),i=r(74004);function a(t){return{kind:"Document",definitions:[{kind:"OperationDefinition",operation:"query",name:{kind:"Name",value:"GeneratedClientQuery"},selectionSet:o(t)}]}}function o(t){if("number"===typeof t\|\|"boolean"===typeof t\|\|"string"===typeof t\|\|"undefined"===typeof t\|\|null===t)return null;if(Array.isArray(t))return o(t[0]);var e=[];return Object.keys(t).forEach((function(r){

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	downloaded
Size (bytes):	4440
Entropy (8bit):	7.654276623236356
Encrypted:	false
SSDEEP:	96:7f2gcZ68cKB6kndvHGJAQufnueCn8v+EMqg1pHXUN+G4vIE:SgcZjzEkntPueC8hFG3i+3
MD5:	E3BCCA7354103DD714A524B05BA3C15A
SHA1:	6BA9071F4CC4E134FE86E518FD33319FBC7C0D79
SHA-256:	012D17DC2627BAC8B1BFDCC251BEA6E1C5D80E4C420D3DBD495CD5B1F50910DF
SHA-512:	8DCF0E8BE3F08CF914FF010080705E0E8BDE0DE028B58152E780EE77E42BAC325FD8B8C4302B61768754347BDC6568AE7CB3A9A2101DE27708EB923B6B0ABBFE
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SOL-demande.gif
Preview:	GIF89a..}.....x%..........\|,....................5............I.'X.z).......m.......u.9.Z...T..F...R....A.]...........a........j.=.....L.w$........q..............f.....b]...A:g#.H...........~....2&.Q.G..z..................I.P.~/........d}x.......SMu................D......^X~.O.?.M.X.........y'....7.....x....`...~z.........uq....XSz......VPw._...ICm....\|..v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11212)
Category:	downloaded
Size (bytes):	11260
Entropy (8bit):	5.114486944912972
Encrypted:	false
SSDEEP:	192:UhstuU7sMm/yCcrDwtiHi+vybZ5yB58uPswk4:bRZCcrDlYduPF
MD5:	0854C68A688B708417D3D96AF90B2EC6
SHA1:	4635B1417E77399CD4651BA02EE03562F894A741
SHA-256:	74DC659CA05742A35C215E62B814760510934A598D2CA2A9FDF8EFFF773A7A1E
SHA-512:	EBC353BBCCDD7DE3AF0C3129B0D1C41D989F6E0A0A18438D35FF3080CC57761E5CCC20DBBFA2A6F5FA96D4576ED7D2BCAA585737959E7FAED996ECF4254FC5B7
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/2793.c92744d0.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[2793],{77380:function(n,t,r){r.d(t,{dX:function(){return f},nm:function(){return m},r:function(){return d}});var e=r(74165),a=r(15861),i=r(29439),o=r(93264),u=r(31803),c=r(49055),s=r(9482),l=500,p=25,f=3,d=(0,u.Z)((function(n){return{listbox:{overflowX:"hidden"},listboxMaxHeight:{overflowX:"hidden",maxHeight:"calc(".concat(n.spacing(10)," * 3)")},popper:{zIndex:s.H+1},textfield:{backgroundColor:n.palette.background.paper},warning:{fontSize:n.spacing(1.75),fontWeight:400,lineHeight:n.spacing(2.25)},warningBox:{"& > label":{color:"var(--warning-color-dark)"},"& .MuiOutlinedInput-notchedOutline":{borderColor:"var(--warning-color-dark)"},"& .MuiOutlinedInput-root:hover":{"& > fieldset":{borderColor:"var(--warning-color-dark)"}}}}}));function m(n){var t=n.children,r=n.debounceTimeout,u=void 0===r?l:r,s=n.initialOptions,d=n.search,m=n.searchFunction,v=n.triggerDefaultSearch,h=void 0!==v&

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43981)
Category:	downloaded
Size (bytes):	44029
Entropy (8bit):	5.245233826212441
Encrypted:	false
SSDEEP:	384:TdQXDpAEO+2IrmR9cAFEFDJCdWKFpQmUXgRE++fI1NoSndXqN88UJWB2TFvNUFkO:TuDrL2IrUyFGWaam7aSxLp6pH
MD5:	8A0BDAC83D726678ECEB6F17E4A12FE5
SHA1:	B0812079C9A4F5BF846FB06E3B7340BF07BC1111
SHA-256:	3045E9110B3E10FD163D64C02177BC6119633344636DA75F861077CA78AF5E21
SHA-512:	0B75D82323DD865C446BCC7BCAE7BB2266E916C80CADC8A9A337B437CC87F7311C986CC7F2B70459E0BB0689D756CD7EFF25750A15EE808ADC514F6AEEB651B9
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9356.2538253e.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9356],{29356:function(n,t,e){e.r(t),e.d(t,{add:function(){return c},addBusinessDays:function(){return v},addDays:function(){return u.Z},addHours:function(){return d.Z},addISOWeekYears:function(){return y},addMilliseconds:function(){return T.Z},addMinutes:function(){return O.Z},addMonths:function(){return o.Z},addQuarters:function(){return p},addSeconds:function(){return S.Z},addWeeks:function(){return k.Z},addYears:function(){return b.Z},areIntervalsOverlapping:function(){return I},clamp:function(){return W},closestIndexTo:function(){return F},closestTo:function(){return H},compareAsc:function(){return E.Z},compareDesc:function(){return R},daysInWeek:function(){return x.ju},daysInYear:function(){return x.dT},daysToWeeks:function(){return C},differenceInBusinessDays:function(){return q},differenceInCalendarDays:function(){return w.Z},differenceInCalendarISOWeekYears:function(){retur

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	939
Entropy (8bit):	7.702703412591416
Encrypted:	false
SSDEEP:	24:zAwmR1/OKVAw0LKtbFGFsJZJu1mK8VGCchN/Xwf:0l1/OardtbFT55ZVfSN/gf
MD5:	43877D64EE8BC81B815BA6A2FEE4BAFD
SHA1:	6879F28ED9D2069CDB32BB628AFE07C9A99279A0
SHA-256:	ED623F15EFC71D6BA01A90D36F4502F64F3978027A4AAC6CD99AE77B2F462C06
SHA-512:	CA54A677A73B1C1D4CA62662B7ECE64BFD2C4C4B38D1097ABAD679FFE3F2DFA4030E0E82F2427CFAD205E5D384C57B2B0A85A248D5E4CFEE57AD352028859F9D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......$.............sBIT....\|.d....bIDATHK..]H.Q...uW...L.@g......B....A..(....-......}.0."L..".^..."$.....v.@.v.......Xv....{...;8.P..`.}l/..E...E...,...r../...z.F.:.y$*..)E a?-\..+...w..F...6.%..MQ..vm2.h..n..vU...@i../.J....n-.M.h.&..N......Yd..2..\|.].J.....z.I.AD..V.4Oy...B@K...m.p.....ye...!..:..uM.T.../.g...T..r0di..?....(..0........@.v....%.n....^...m/Z..)...I.J.m.1.+Jk...E..8..W.:..p........h.B@.!N....]._......a.$Wc..= 9........L-4l.Y.d..9.V.4.8..c....[....).. .....Q..#3.kl.1.SK...x&'k.C.(O.4.^....."..Rgl.D9K..t...B@}.A...m..Z....:....-Q..../.'..V..'B..............:..k..'.d...{.... ..Q..5J.x......W.p.>J9..n.a.vHF..j'...ArF...jgs....AY.....O....5.aA.[....4.#.....#JWh`...1szSV..i1......^z..3...nI.>..........I..Wm...t4.e.-.o[....k.:.X~.....#u9.Rj.G..YXO2.....W.h.~.........~L....:....D#m ..Ja ....I.g.....i...#u.iRj.:..[....H.}.....v.C..o..2...m\|....IEND.B`.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	34179
Entropy (8bit):	5.24378984580027
Encrypted:	false
SSDEEP:	768:tjp/HdQu8hIrNjHunBoaaif2ditPu0I80qyGaagvZ8/8Lo+tn6J5jVt1PauAxlqa:tjp/HdQu8QNjHunqaHmZ8/8Lo+tnkjV8
MD5:	DFFA195B546CF1DFD52F2206955EB892
SHA1:	A3D48E8F126EB96D12191D76ED71AD2BC8651D59
SHA-256:	6C52384C7B0641DD1EAD85D079C22D39BCC6DC5F2537AFB1E6396BB619771A3F
SHA-512:	65F3B79475AED8029C10AE3770BCD0FEE4F089A967B86525A6B2C1F8AB6BBE687361C403F9B2C2CFC61322DF9AD8B1D70C0E650FC6CCDC4AD72EB5F65FB38B56
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=2.1.2
Preview:	CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');.CLI_PREFERNCE_COOKIE = (typeof CLI_PREFERNCE_COOKIE !== 'undefined' ? CLI_PREFERNCE_COOKIE : 'CookieLawInfoConsent');.CLI_ACCEPT_COOKIE_EXPIRE = (typeof CLI_ACCEPT_COOKIE_EXPIRE !== 'undefined' ? CLI_ACCEPT_COOKIE_EXPIRE : 365);.CLI_COOKIEBAR_AS_POPUP = (typeof CLI_COOKIEBAR_AS_POPUP !== 'undefined' ? CLI_COOKIEBAR_AS_POPUP : false);.var CLI_Cookie = {..set: function (name, value, days) {...var secure = "";...if (true === Boolean(Cli_Data.secure_cookies)) {....secure = ";secure";...}...if (days) {....var date = new Date();....date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000));....var expires = "; expires=" + date.toGMTString();...} else {....var expires = "";...}...document.cookie = name + "=" + value + secure + expires + "; path=/";...if (days < 1) {....host_name = window.location.hostname;....document.cookie = name + "=" + value + expires + "; path=/; d

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17426)
Category:	downloaded
Size (bytes):	17474
Entropy (8bit):	4.84333064674459
Encrypted:	false
SSDEEP:	384:A4qd9U989CW7hTe76a2lVb/Ou4w9GNpCebHYffMOh:cfU98MW762/aujGNHHYf9
MD5:	293D2B952990AA6160F7A4CF9852C864
SHA1:	0AF041E80216F250FBF3788D8F0EDE34E4A8B09A
SHA-256:	6D368376F271F7D8450E7E238754D794507A8EC84DC56809CBE13DB3882EF92F
SHA-512:	AE24E032C5D0919150758BB887F532768E78D3AD19F4164D08DE2EBDD3CE7EB3ABBAE52B6933BB130A09A916C46CFEDDF9623037C4AF9C3093C998D435B25BA4
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1052.41310dca.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1052,5657],{27950:function(e,a,t){Object.defineProperty(a,"__esModule",{value:!0});var r=function(){function e(e,a){for(var t=0;t<a.length;t++){var r=a[t];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}return function(a,t,r){return t&&e(a.prototype,t),r&&e(a,r),a}}(),o=function(e){if(e&&e.__esModule)return e;var a={};if(null!=e)for(var t in e)Object.prototype.hasOwnProperty.call(e,t)&&(a[t]=e[t]);return a.default=e,a}(t(93264)),i=c(t(23534)),n=c(t(55567)),s=c(t(68193)),l=c(t(88959));function c(e){return e&&e.__esModule?e:{default:e}}var u=function(e){function a(){return function(e,a){if(!(e instanceof a))throw new TypeError("Cannot call a class as a function")}(this,a),function(e,a){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!a\|\|"object"!==typeof a&&"function"!==ty

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	dropped
Size (bytes):	3205
Entropy (8bit):	7.540737384964621
Encrypted:	false
SSDEEP:	96:SauBa/B6kn8drYtUHGJAQufjzdh2BNHeeR6K:Saz/EkngrqM7zdhq9J
MD5:	F7A71DB2051370E06AE746C67462C4D3
SHA1:	7DB9F7E4209A13DA23A94078EFDC43C35116C23F
SHA-256:	C0C96921F15FD58C490290A0807E6D298DF75F4E7EDAE9CCF0418617418B9B60
SHA-512:	D250B4A81AC76D7087AB0225AE7B7D6D3227229BEA7E2A0EE115531CB62390D746C82CCDEB03D7D18C4277F717CE7CC969F5537E629D6316888A85F90AEC415E
Malicious:	false
Reputation:	low
Preview:	GIF89a..}.....R......................x%.....F.:QKtC=i..2+[........z}x...2HBl.......Z....~/!.M........Iuq..A]W})"T..=7d..k...yt............NGqrm......q.....................................w.............ni.e`..~.a\..{*..s....F70_.............t...............\|,..G..................VPw.........?ic..............................{.........`Z......._Y.je..I...........XSz..e...v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35944)
Category:	downloaded
Size (bytes):	35992
Entropy (8bit):	4.785527208701993
Encrypted:	false
SSDEEP:	768:aOL4LXEcCsztCFX/6yHMkCutQN0EJJrFKoUcdW1a:s1tCFhHMxuSN0AHUcE8
MD5:	E9E76C197756DD102F138C77DD026918
SHA1:	4042F22675FC13D870D9C155B918208999BA9331
SHA-256:	778AE439A71B2BBECD240C5E3D4989815EFD66ECCE35815D0C07983332203E3A
SHA-512:	6B69D956B5CFE76E3C806AAF7A5D8215B47A9A521A828E4964A77D4E45A2CBF569A7C84F793AA31BFDF440294937FA716190D622A82871B01BE193CCD72F0EE7
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/8311.a4a8aa60.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8311],{98311:function(e){e.exports={messages:JSON.parse('{"business_card.linkedin.view_profile":"View profile","business_card.show_all":["Show all (",["size"],")"],"business_card.view_details":"View details","consent.body.accept":"Accept","consent.body.description_1":"To have effective conversations with you, we would be analyzing your activity across this content.","consent.body.description_2":"We would be tracking and storing information that requires your consent to help understand your engagement better and serve you personalized interactions based on the consent your red.","consent.body.list_description":"Here is a list of items we would be tracking:","consent.body.list_items":"<ul><li>Your active time on the website</li><li>Time spent on each page of documents</li><li>Location data (country and city)</li><li>Email address</li></ul>","consent.body.reject":"Don\u2019t accept","consent.body.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	downloaded
Size (bytes):	3507
Entropy (8bit):	7.627423322601042
Encrypted:	false
SSDEEP:	96:XCVwaB6knQwHGJAQuf33PfrTzBrWPBXVn0UT3Y0y+:8nEkn/nXdr2VntU0/
MD5:	44F6F32300433121A62F873E4E731112
SHA1:	F2B28F861CCAE8BAA1ACDBB5CCA8DB935F223F95
SHA-256:	23E134AC6C0DE1F1B46906DE8B74AE0F9642FF081EADDF850317F20F56EEE9FB
SHA-512:	83BD039A20B2104D1C73A16F05A25E0F989E38A1ED57AF8B50E7324A1F2B73CB519E2E2791965AE0E59176001CCDF108C840EA6853B71AAE952BAF70A1AD1A68
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SOL-urg.gif
Preview:	GIF89a..}.........2.BB;g................S.........HBlje.3,\.....F....\....m..t,%V..b....~/........K.........x%..............WRy..;5b............=....ql.......\|.......$.O......d_..\|,.......\|w...........{*..........w$............}y........9............HQKt.z.81_.loX?X..........G.?...`Z................................7......LEo...}@5.z(........wr..Z,..0......P.X.......v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.493509560827332
Encrypted:	false
SSDEEP:	3:3vw/uEHJcBFzifFuEHJcBFpR6cPFdVK9oBPLABFdgGVVVV/pvOcmJKlGffDDPC:3vFECBFoIECBFygwr2GV/cgGTO
MD5:	35FED198901F89F5DCDEE2ABBCCD053A
SHA1:	1A032267C7C14C7E2FEE45B0ADD55B20C8EF779F
SHA-256:	6DC3B83D6635B7BE7500A2F080219E3F91C54B2DBAF867546BFF4672C60F3DD9
SHA-512:	1C301785F163639DE1C4C83E6923EC8BBFB80EA421646B9B2CE16235BFD76A4F60F9866BE2B40D622677AEFF016EC1ECCD3795E9BE867BE164F0A1409CC7C361
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/manifest.json
Preview:	{. "short_name": "Enable Us",. "name": "Enable Us",. "start_url": ".",. "display": "standalone",. "theme_color": "#000000",. "background_color": "#ffffff".}.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	127952
Entropy (8bit):	7.978789741158043
Encrypted:	false
SSDEEP:	3072:xKX/2EkBtd7gThkE3sUsoV/uvZyuUoO4Mkt:xKvYghGUnMyuWkt
MD5:	3E7B7AE58D8F64BAD856D042FC1C9C9F
SHA1:	6EDCAD6626DD2F66ADEFB6A068F55200BEC9F623
SHA-256:	859333EBB19EA8B9674DDF6AE07CD9222B39599172A7BFD78CBC32053F51B6F6
SHA-512:	7F72454F1A017CF13ABF25A67EA918739BD225ABEF893E969C2AA35B93151052BC73626861234698F399D0C2833D66FCFC7BF52FE48D2F4F445C40CEA76DEB1F
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SF5-flip.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:737A8F57C04111E99594AA8ABB09169A" xmpMM:InstanceID="xmp.iid:737A8F56C04111E99594AA8ABB09169A" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1034
Entropy (8bit):	6.195586559210653
Encrypted:	false
SSDEEP:	24:+u1hpunQWwjx82lY2T32HEVMY9yJ3V4T8G1D9AW95:+0itNn2VeLJ3K8UZv95
MD5:	4C4F5764FC2F77C630AAA6596BBC4C3E
SHA1:	F1784BE3D75F2A33CE2218D4BE2DD19693EBE183
SHA-256:	0DF9FF5CF55A0DF87CBC443CCDECE5145B73F8DEDAF3804858E189B432AC847D
SHA-512:	6EC00BF3A76EFF6586F4DE16C06A2E39C6F62265E7FFD4532A768803033C98CDCB7898C143B2980D3E3EFD4FB05F914BE08A6AE21F08DD5244D593019833865F
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/img/close.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E6D66246C67B11E99171F4B7ADA30356" xmpMM:DocumentID="xmp.did:E6D66247C67B11E99171F4B7ADA30356"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E6D66244C67B11E99171F4B7ADA30356" stRef:documentID="xmp.did:E6D66245C67B11E99171F4B7ADA30356"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..$.....IDATx..... ...,..u6]..P......E. &!"j#.a....0;u=((0..`.VA/l.......A.H.+\|.@......=.K...D....Ve7lm.3..C..6..g'e

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	347
Entropy (8bit):	5.066842434074036
Encrypted:	false
SSDEEP:	6:YsWiAtQfgUzg73OwXcgHAZoNG8XeGPAzU/C/GVQ5XYk51AVXXUH6qKRecHB:YsDxjO3bMbuNG8OYAzUDpk5+daKL
MD5:	A2DE2C4CE1990D5ED9C07F178B2B06EA
SHA1:	4797D4A37B5AB7274BC8AF9E553F95DC96332684
SHA-256:	32EC0D80F617C642CBB408D11F390CFAC4F7CBF1AD9B972EA6E131236C341F59
SHA-512:	0338B23B3DB96806F6D6DA4FAA1E73617895924D41FCE1B320B615AFAAB239319255586884001EA9DC0819FF3B69BA51CEDA57E004A6AEC18B7E84262776747F
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1713881136121,"status":"INTERNAL_SERVER_ERROR","responseType":null,"responseDescription":null,"service":"zipy-service-sdk-session-manager","responseObject":null,"errorFields":[{"source":"org.springframework.web.HttpRequestMethodNotSupportedException","fieldName":null,"message":"Request method 'GET' not supported"}],"otherInfo":null}

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7973)
Category:	downloaded
Size (bytes):	20787
Entropy (8bit):	5.301875884707572
Encrypted:	false
SSDEEP:	384:8uMSX9vEqkTVScdV/vWxcHsiW58furhDGXvhHQfww/Xc2S8mFkF50y:iScPy+hkLqkJ
MD5:	49FA677B9CD7DDF221DC06537B35E10F
SHA1:	7485F3F99C3C1A57197F2B099F3F8D68B8609D06
SHA-256:	0CD851E5B33AF0FBB354DF65506DA39807B998E07723F3D08ABA5179FA2ED97E
SHA-512:	40D50C965DB656D352C1E73BF3FF9E82B64422398974D55902B0EAAB213FF255AF9338C33D09A8B148DA37B1A13EF0377DE2B510F6B5C7C42C8F866BA3189A54
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
Preview:	/! jQuery UI - v1.12.1 - 2020-09-25. http://jqueryui.com.* Includes: data.js, disable-selection.js, escape-selector.js, focusable.js, form-reset-mixin.js, form.js, ie.js, jquery-1-7.js, keycode.js, labels.js, plugin.js, position.js, safe-active-element.js, safe-blur.js, scroll-parent.js, tabbable.js, unique-id.js, version.js, widget.js.* Copyright jQuery Foundation and other contributors; Licensed /.!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(x){var t,e,n,W,C,o,s,r,l,a,i,h;function E(t,e,i){return[parseFloat(t[0])(a.test(t[0])?e/100:1),parseFloat(t[1])(a.test(t[1])?i/100:1)]}function H(t,e){return parseInt(x.css(t,e),10)\|\|0}x.ui=x.ui\|\|{},x.ui.version="1.12.1",./!. * jQuery UI :data 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.x.extend(x.expr[":"],{data:x.expr.createPseudo?x.expr.createPseudo(function(e){return function(t){r

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11002)
Category:	downloaded
Size (bytes):	11050
Entropy (8bit):	5.617974544771098
Encrypted:	false
SSDEEP:	192:NfNe2qAOOhjn2hm5WL8w4bkvbWMANoMQVh1o9cZAMrCiQhBiCNCfWd9PYEN4YwYt:q2cOhjOmNOvbWMANoMmh1o9EkBiCNSWP
MD5:	33FE246DE1B1D177198980C71A984564
SHA1:	9FB043FA47284281EAF167778BF2BB42DD2D7F6F
SHA-256:	3075D927A31EB50621F27F6D2BA9C88FDF1796844AA4276C79E27FD6368D0E24
SHA-512:	B686920A3FC5C8844D2BDD755520A3AC5D33A00A04EBABA2F99BDA50067F72D0172E141F44629B86B2A8536B31D9E88D8D74CCB69042A6F83D17DDF9627539B7
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6927.eb3f508f.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6927],{46927:function(_,t,u){"use strict";function e(_){return Array.prototype.slice.call(arguments,1).forEach((function(t){t&&Object.keys(t).forEach((function(u){_[u]=t[u]}))})),_}function s(_){return Object.prototype.toString.call(_)}function r(_){return"[object Function]"===s(_)}function i(_){return _.replace(/[.?*+^$[\]\\(){}\|-]/g,"\\$&")}var c={fuzzyLink:!0,fuzzyEmail:!0,fuzzyIP:!1};var n={"http:":{validate:function(_,t,u){var e=_.slice(t);return u.re.http\|\|(u.re.http=new RegExp("^\\/\\/"+u.re.src_auth+u.re.src_host_port_strict+u.re.src_path,"i")),u.re.http.test(e)?e.match(u.re.http)[0].length:0}},"https:":"http:","ftp:":"http:","//":{validate:function(_,t,u){var e=_.slice(t);return u.re.no_http\|\|(u.re.no_http=new RegExp("^"+u.re.src_auth+"(?:localhost\|(?:(?:"+u.re.src_domain+")\\.)+"+u.re.src_domain_root+")"+u.re.src_port+u.re.src_host_terminator+u.re.src_path,"i")),u.re.no_http.test(e)?t

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6952
Category:	downloaded
Size (bytes):	2706
Entropy (8bit):	7.92011132497319
Encrypted:	false
SSDEEP:	48:XufiNP7mA6p33OkM/Hs/Hev88llEZqA2u/b+JDqXlLSoSy8PbNIkDU1g80WMuPmG:e6NTmfn20/n1b+JuJSof8C+UPJMbo9V
MD5:	ACA08AE00AB32F0E4B015B681282C942
SHA1:	01DB7FA92CF06B68C63C8D1C813BEF4BEC87278D
SHA-256:	8AAE7DEB4C34624EE257A48378B23B6F221704AE539A2AEAAD15304A921F255E
SHA-512:	0A533BDDEFE665D6EE371D47935A489B4EF6C3F1342395FA65859FA8534E36BF5E3EF81442163798E1FCE6AEC1BC7D6D099D66446C74FE0CFB56A503308AB016
Malicious:	false
Reputation:	low
URL:	https://widget.intercom.io/widget/sitd2fd5
Preview:	...........Y.s.8..+.wC.0.6M...e..m.m.t..&..a.Pk,.,B....G..6....v..~.~.....mM.I..H...J........~Eg.#..C...L,d.Fs....G.K:9...Mh.Gc.1,.f~..J.....d(. l...1.G)U.-.b.....M..c..R<.v.K.N.c....f........L.'.\.....=x35.m.L.8..E....n.....(K.\......~....+...}........e.e..G..j.p...7._..9..;c.,F.g.U...,.>..lGO.V1..r1.."^a.F..2.........x.....,.F..bo6.....Y.[V..<.D.n...O.{.#.....J..2.D.}g.........Y...p.K~...M...."cV.$..}..}..3..5Oi.."Z.$.pf=.i.}.\.E.$..<.k..b.c.....M..Ogj......)...I.. v&.....V-."Q.';.U...D(>.!.....6.R.-2...m9..DB..[D..7.VAN.e.2.."..~.n;.._+6w..b...=.%...=;..V....p.]).n6....8.q.{.7.zm...&......i.o. ..g.../.4f..nw...P..]O.w....u....=.R.-=.\|../TN.sX...V..^.].d.x.........o...N..yZ}.Q....<...`.$..+a.J....m;,.%0..>...T....eon...4....;...7..w.B..~..O)..:.[..!..\..n.sz..../..uO/m6......:..>.....<c.=..'..7..f.....".5..6.+..s..'../...*..m{...R2L .i..-.....G..x.C.S..).....m...Pw`.#.Y.....-.I.V.).@.}a4b..../.y...!.......E...3yzD"4..H5.b....

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9803)
Category:	downloaded
Size (bytes):	9851
Entropy (8bit):	5.473910463895704
Encrypted:	false
SSDEEP:	192:Tu3bIXWPPX7NqgQqLgWcr8g1hcRkMFyMTdUGnORUHa4P+DRg/:UNhQScIg1hcJkMxUaHa0j
MD5:	F101512A9480881F9E0FD694C74B14B0
SHA1:	CBED3349E34DA880C157F0BDCFBB31F1DACDA657
SHA-256:	3339906F3BE6D2D320671798CDD8BE648E330AA35D948AB3EC383E15D63D3586
SHA-512:	19915001969EBE5670F856BD06C34F3B10BF6BFE2B9E9174792D7034103E8261218CA7C24CFDBF4CC9059ECD43919461F9CCB32C1B72D9B683064647D2024FC2
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/3361.51784c7a.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3361],{83361:function(e,t,r){r.d(t,{Z:function(){return ae}});var n=function(){function e(e){var t=this;this._insertTag=function(e){var r;r=0===t.tags.length?t.insertionPoint?t.insertionPoint.nextSibling:t.prepend?t.container.firstChild:t.before:t.tags[t.tags.length-1].nextSibling,t.container.insertBefore(e,r),t.tags.push(e)},this.isSpeedy=void 0===e.speedy\|\|e.speedy,this.tags=[],this.ctr=0,this.nonce=e.nonce,this.key=e.key,this.container=e.container,this.prepend=e.prepend,this.insertionPoint=e.insertionPoint,this.before=null}var t=e.prototype;return t.hydrate=function(e){e.forEach(this._insertTag)},t.insert=function(e){this.ctr%(this.isSpeedy?65e3:1)===0&&this._insertTag(function(e){var t=document.createElement("style");return t.setAttribute("data-emotion",e.key),void 0!==e.nonce&&t.setAttribute("nonce",e.nonce),t.appendChild(document.createTextNode("")),t.setAttribute("data-s",""

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8097)
Category:	downloaded
Size (bytes):	8222
Entropy (8bit):	5.328689212349159
Encrypted:	false
SSDEEP:	192:QbA9pySWdlA6fWR0QpX77CpXluv0+IwDpn4LY:QbAbCtUCPuvzDp4c
MD5:	7108D0E5FF3DB1C815209D75DA42FDB4
SHA1:	C5EED2F229812771179C61BA77CE1A0A685EA8C5
SHA-256:	D527A4F9327A53598AF935B4BC95785D3AFFA6F8DBBF90B0E6A876FD9954EC76
SHA-512:	9E6A5D139CB5BBB6456A8ACDFBC280B0BB977910566060D13D41934B314F6CDD718055153AD53CAE2588994A9E64822778B6B1371D05767E14BC7CB4A298C05D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1057.68a9f4b6.chunk.js
Preview:	/! For license information please see 1057.68a9f4b6.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1057,4765,6269,7835],{31701:function(t,e,n){var r=n(63366),o=n(87462),i=n(93264),a=n(28182),l=n(94419),c=n(66934),u=n(31402),s=n(4567),f=n(63526),p=n(80184),d=["children","className"],m=(0,c.ZP)(s.Z,{shouldForwardProp:function(t){return(0,c.FO)(t)\|\|"classes"===t},name:"MuiDialogContentText",slot:"Root",overridesResolver:function(t,e){return e.root}})({}),y=i.forwardRef((function(t,e){var n=(0,u.Z)({props:t,name:"MuiDialogContentText"}),i=n.className,c=(0,r.Z)(n,d),s=function(t){var e=t.classes,n=(0,l.Z)({root:["root"]},f.i,e);return(0,o.Z)({},e,n)}(c);return(0,p.jsx)(m,(0,o.Z)({component:"p",variant:"body1",color:"text.secondary",ref:e,ownerState:c,className:(0,a.default)(s.root,i)},n,{classes:s}))}));e.Z=y},63526:function(t,e,n){n.d(e,{i:function(){return i}});var r=n(75878),o=n(21217);function i(t){retur

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	150073
Entropy (8bit):	7.977904646036672
Encrypted:	false
SSDEEP:	3072:KCXxw7DuGWCaAQSfjY1INlg/Hcnq/nciMnhY25PTxhM6bg:KCXx4wCadSkSXY4q/nGnhY2FxhM1
MD5:	630DFCE3087E9C1B15BC104150BEC417
SHA1:	EA5C9E7F8C0A962E375B8BEA59E7ECF70FC26284
SHA-256:	80F333142A75F14E0E6BA78F7FDFF43247C650394BF3E7239E0E8CDEF4CFDF20
SHA-512:	AFB327E160DAD4BE863F8B691EC1DAD86A154640EB1EA9DE7326F72378A3B999FB4732C55F0F00FDE519DA51B25B28E97BB8745ABC38500C1EB1B258CC787D1B
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:F94155B1C03911E98C3C98BBA5174242" xmpMM:InstanceID="xmp.iid:F94155B0C03911E98C3C98BBA5174242" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	dropped
Size (bytes):	3507
Entropy (8bit):	7.627423322601042
Encrypted:	false
SSDEEP:	96:XCVwaB6knQwHGJAQuf33PfrTzBrWPBXVn0UT3Y0y+:8nEkn/nXdr2VntU0/
MD5:	44F6F32300433121A62F873E4E731112
SHA1:	F2B28F861CCAE8BAA1ACDBB5CCA8DB935F223F95
SHA-256:	23E134AC6C0DE1F1B46906DE8B74AE0F9642FF081EADDF850317F20F56EEE9FB
SHA-512:	83BD039A20B2104D1C73A16F05A25E0F989E38A1ED57AF8B50E7324A1F2B73CB519E2E2791965AE0E59176001CCDF108C840EA6853B71AAE952BAF70A1AD1A68
Malicious:	false
Reputation:	low
Preview:	GIF89a..}.........2.BB;g................S.........HBlje.3,\.....F....\....m..t,%V..b....~/........K.........x%..............WRy..;5b............=....ql.......\|.......$.O......d_..\|,.......\|w...........{*..........w$............}y........9............HQKt.z.81_.loX?X..........G.?...`Z................................7......LEo...}@5.z(........wr..Z,..0......P.X.......v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4828
Entropy (8bit):	5.446482734816105
Encrypted:	false
SSDEEP:	96:aOEalhhqOEalhUFZHOEalhNOEalhL3vOEalhYOEalhSVc+uTOEalhmNaOpalhhqs:9lvNl9lslJ34ltlmDlllvEl0lVlJ3RlT
MD5:	9FD3BA1EF233287C2AAA850D5AC6D1D8
SHA1:	85B7389B86DE9A244E06768EAF95EF4111348F48
SHA-256:	3AE6E4DECD4FB974B41B2F37FA7B19C7A1C9B80127DD45BE4BC24702C7145A4C
SHA-512:	A64B8611BE968B9A6CE6C9313F4F4397D6CFD031261BB2EA66E2DD864BCDBAB85CDA117D7208C0714E5568F7E5EA1310F82DCEC43158FABCCEA0B82BABDEA726
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Inter:wght@400;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swa

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5726)
Category:	downloaded
Size (bytes):	5779
Entropy (8bit):	5.001088192645058
Encrypted:	false
SSDEEP:	96:E576P8NPIaFsMxHJzX4X7BCxwk4aSY5WcSAnsFD84Js:foPIahH1mFCx6Y5WcJb
MD5:	8BE28A18ACD3FF4D7B8EEA810CFC3305
SHA1:	8F50D7240C7DE95058F45222BC35633C1DB5C013
SHA-256:	B39C3AD22645A0375F98F3BFF4D80D20E6E488F55353E688D08327095FF0C1FC
SHA-512:	B613C6B8A620AB1C0D7E707B8560E4EBDAEC19AEC3EC685FF7A59B1882486975452656162737128B9A6E0ED1202AA96EDC2E336C0602A99E3DE57EC9EEC83654
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/css/8718.e048d4b0.chunk.css
Preview:	@import url(https://fonts.googleapis.com/css2?family=Inter:wght@400;700&display=swap);:root{--attachments-border-color:#e0e0e0;--avatar-background-blue:#234cc9;--avatar-background-default:#e0e0e0;--avatar-background-green:#7bc67e;--avatar-background-light-blue:#2196f3;--avatar-background-light:#ededed;--avatar-background-orange:#ff9800;--avatar-background-success:#3b873e;--background-box-dark:#eff1f2;--background-color-black-pastel:#212121;--background-color-black-pastel-translucent:#212121f2;--background-color-dark:#dedede;--background-color-gray:#8c8c8c;--background-color:#f1f3f4;--border-gray-light:#c5dffe;--border-play-button:#ffffff33;--chart-color-1:#2186c4;--chart-color-2:#005993;--chart-color-3:#003065;--chart-color-4:#00073a;--chart-primary-color:#64b6f7;--chart-series-color-1:#68b7f5;--chart-series-color-2:#987bec;--chart-series-color-3:#85c26f;--chart-series-color-4:#b4b4b4;--chat-bubble-background-color:#e9e9eb;--chip-hover:#21212180;--content-overlay-black:rgba(0,0,0,.6);-

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.928019308351512
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKSbtQP5mwjWaee:PLKdXNQK+QP51L
MD5:	C193745DEB63FE67F3AA6B578C40DD99
SHA1:	8A3ECC2696074E71D3B011C99B98CB25229E1A31
SHA-256:	D41E076366E4207D57A5FD1725C2024F751C43AE4A3A8E93CC46DFB8462A3E5B
SHA-512:	A2FD9573CF80C9D14F9DCEAA1940407E88F7B35BDD01B1FF34891929DC5528A134E851B29CC2205EF8CE5F81A8DFAFED5D7A6A93A304C7B8844981844BA73A8E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61856)
Category:	downloaded
Size (bytes):	61904
Entropy (8bit):	5.3502834113394355
Encrypted:	false
SSDEEP:	1536:OEbd/jKRb2VKHiqmurNiwSvaI98xE0k9qgrT:Oud/sCVKHiqmhanEf9qgn
MD5:	BA748042778F32B2CCF84A904E416B78
SHA1:	46E170284E4792427E51C2C5ED3E517B76E8510E
SHA-256:	A2108059206FE2A647CF571A13D58ECA70C90C5B1BF55C651B101670E93FAED9
SHA-512:	72BE9B52D513C457BF37BC301EEA5783341C0B2DCEFC87C1F8587B2AE54314C5DA87832EA340E5C3DB8043072509783D4B14B5C3C25D9F5186075D5265E1DAB7
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/3006.2c7dce02.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3006],{86596:function(e,t,n){var r=n(4942),o=n(93433),i=n(63366),a=n(87462),l=n(93264),s=n(82466),u=n(94419),d=n(40139),c=n(66934),p=n(31402),f=n(96285),v=n(80184),m=["disableUnderline","components","componentsProps","fullWidth","hiddenLabel","inputComponent","multiline","slotProps","slots","type"],h=(0,c.ZP)(d.Ej,{shouldForwardProp:function(e){return(0,c.FO)(e)\|\|"classes"===e},name:"MuiFilledInput",slot:"Root",overridesResolver:function(e,t){var n=e.ownerState;return[].concat((0,o.Z)((0,d.Gx)(e,t)),[!n.disableUnderline&&t.underline])}})((function(e){var t,n,o,i=e.theme,l=e.ownerState,s="light"===i.palette.mode,u=s?"rgba(0, 0, 0, 0.42)":"rgba(255, 255, 255, 0.7)",d=s?"rgba(0, 0, 0, 0.06)":"rgba(255, 255, 255, 0.09)",c=s?"rgba(0, 0, 0, 0.09)":"rgba(255, 255, 255, 0.13)",p=s?"rgba(0, 0, 0, 0.12)":"rgba(255, 255, 255, 0.12)";return(0,a.Z)((t={position:"relative",backgroundColor:i.vars

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7065)
Category:	downloaded
Size (bytes):	7190
Entropy (8bit):	5.2754825590707615
Encrypted:	false
SSDEEP:	192:s/ZAx5yL0KKKPV5vcBvz8kMHKIJmYi+0g:ORi+fUpfIKfW
MD5:	4530C2D66E0A9F6D5990D3D665D3B915
SHA1:	47418907BF5A4F84B9382D690B08CCBB944BE04D
SHA-256:	AEEACD111BC0B0EB75146F8770AB6E591E915E78AC60F35D56811B0C1A77FBC7
SHA-512:	A7C44FD4F1A7132FDC80B0CC1909840A4D0318DD712F389EF3BEB851F80BA584FB0845D62ABB3E94997672E69524DC0AAE0F66199FDEAEE3AAECB58FD98FBE37
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/2791.5d87b86c.chunk.js
Preview:	/! For license information please see 2791.5d87b86c.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[2791],{31725:function(e){var t=Object.getOwnPropertySymbols,r=Object.prototype.hasOwnProperty,n=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},r=0;r<10;r++)t["_"+String.fromCharCode(r)]=r;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var n={};return"abcdefghijklmnopqrst".split("").forEach((function(e){n[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},n)).join("")}catch(o){return!1}}()?Object.assign:function(e,o){for(var u,i,c=function(e){if(null===e\|\|void 0===e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),a=1;a<arguments.length;a++){for(var f in u=Obj

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	67160
Entropy (8bit):	5.429193110349475
Encrypted:	false
SSDEEP:	768:A751FT9Qx9PPwffTGOQceTDA/0xR/IVOPdckyk6CZuyOcpDggIyu0RURBoGTz:A7XFT9Qx93arUcXVOPyCZMqspeR9GX
MD5:	CB1A20B8DDEC78EB873DF4F10581E8C4
SHA1:	F61A4F6AB32754EB08DFEE8FD6C2A8C2AABCDF32
SHA-256:	DF1C1A5014DEB85762A2B5BB8EC55564888E931BB7443F926F1C904DB34B8266
SHA-512:	629CF3DE19BBE6C0DE621825DE0F2BA788D6C5BAF61A936390328E2027F4DCA6376DF64550F1223A6352ADBB9808374D26414E4FE73A079B41C87288C03B2127
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9969.d56a16a9.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9969],{23130:function(e,n,t){t.d(n,{Z:function(){return c}});var r=t(15671),o=t(43144),i=t(99579),a=t(52322),c=function(){function e(){(0,r.Z)(this,e)}return(0,o.Z)(e,null,[{key:"track",value:function(e,n){if(!!a.ZP.get())try{(new i.Z).create({event:e,meta:n})}catch(t){}}}]),e}()},30511:function(e,n,t){t.d(n,{Z:function(){return s}});var r=t(15671),o=t(43144),i=t(29165),a=t(19939),c=t(99579),l=t(18421),s=function(){function e(n,t,o,i){(0,r.Z)(this,e),this.contentId=void 0,this.contactId=void 0,this.roomId=void 0,this.version=void 0,this.contentId=n,this.contactId=t,this.roomId=o,this.version=i}return(0,o.Z)(e,[{key:"track",value:function(e){if(e)return this.trackGuestDownload();this.trackInternalUserDownload()}},{key:"trackInternalUserDownload",value:function(){try{(new c.Z).create({event:a.x.ContentDownloaded,meta:{contentId:this.contentId,version:this.version}})}catch(e){}}},{key

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3
Category:	downloaded
Size (bytes):	346307
Entropy (8bit):	7.957044026412137
Encrypted:	false
SSDEEP:	6144:d1iLSH5VHCrsLgIxh0kDxx+lyXgyjhsa4Qqz0J+6CSyod2tGjW9jFF6wRRlhS8m7:3sSHeALgNAqz0kXrod2tv976E3S8KT1r
MD5:	5D93275E539032409F4D1BDDBCF9C950
SHA1:	5CC9E9646FC7758B8D6DDCBED4BF48C841862752
SHA-256:	B23126AA54B1FF1170532648C17282D52BFA7E8B21E870A892EE301CE22A48F9
SHA-512:	B0FE079291158C717A387AF3BA55E27E3E217673D151C1F88C7385B9D498BAAB17FA560CDEF87CD52398C965057108DB853983A5477DA9678577CDD42E614343
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/10/TAL-fd-2.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:E62B35DDE45611E98056AEA74981DEA1" xmpMM:InstanceID="xmp.iid:E62B35DCE45611E98056AEA74981DEA1" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (698)
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	5.301970143995965
Encrypted:	false
SSDEEP:	24:QeLtLTRqycic/uWYY4e4/7BDG+l3BR1LM/V:Qe5L9qgch4em7BDtO/V
MD5:	4729E858858A9B506D9FFFF32DEAEDA1
SHA1:	B6F7452BAD09B950715D7786D26F3E1EC44A5513
SHA-256:	05E95CB24BD3C6312BF61958E470E0E53CD64365EF1EA1C121E2D589FEA950F9
SHA-512:	0060EF25098EC0F8829D2E9C22B1F7D63105BD1C8BEA4DEF6714DBC0D3AFE5E084607FB5B7E9EBCAF22396FB023DE7C254126140E938B809105D0AD48477041A
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1694.c976feba.chunk.js
Preview:	/! For license information please see 1694.c976feba.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1694],{81694:function(t,n){var r;!function(){"use strict";var e={}.hasOwnProperty;function i(){for(var t=[],n=0;n<arguments.length;n++){var r=arguments[n];if(r){var o=typeof r;if("string"===o\|\|"number"===o)t.push(r);else if(Array.isArray(r)){if(r.length){var s=i.apply(null,r);s&&t.push(s)}}else if("object"===o){if(r.toString!==Object.prototype.toString&&!r.toString.toString().includes("[native code]")){t.push(r.toString());continue}for(var u in r)e.call(r,u)&&r[u]&&t.push(u)}}}return t.join(" ")}t.exports?(i.default=i,t.exports=i):void 0===(r=function(){return i}.apply(n,[]))\|\|(t.exports=r)}()}}]);.//# sourceMappingURL=1694.c976feba.chunk.js.map

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	127952
Entropy (8bit):	7.978789741158043
Encrypted:	false
SSDEEP:	3072:xKX/2EkBtd7gThkE3sUsoV/uvZyuUoO4Mkt:xKvYghGUnMyuWkt
MD5:	3E7B7AE58D8F64BAD856D042FC1C9C9F
SHA1:	6EDCAD6626DD2F66ADEFB6A068F55200BEC9F623
SHA-256:	859333EBB19EA8B9674DDF6AE07CD9222B39599172A7BFD78CBC32053F51B6F6
SHA-512:	7F72454F1A017CF13ABF25A67EA918739BD225ABEF893E969C2AA35B93151052BC73626861234698F399D0C2833D66FCFC7BF52FE48D2F4F445C40CEA76DEB1F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:737A8F57C04111E99594AA8ABB09169A" xmpMM:InstanceID="xmp.iid:737A8F56C04111E99594AA8ABB09169A" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22982)
Category:	downloaded
Size (bytes):	23029
Entropy (8bit):	4.600351591864566
Encrypted:	false
SSDEEP:	384:dpOnNnEefHz28txKYbnc4ZneJpFETWqFsgARJeUmUd5skT7aQqKBe6XIA+:am6rtxn7lZne1QXGggmUd5Z7apKBBF+
MD5:	9924BBE6F9CE50E228C3BDEDD0481D83
SHA1:	F15070DFDA20032F5620AA76EDD906688C7AF347
SHA-256:	F6D4535DB8B5DAD824CEA71899FAF7DD2273FD782D7900E9FB1AF3D82320D636
SHA-512:	6AFE31DA3D15AFF0FE7D4299405F416D5178D1B7A8BCD504605B18B42ADF5D152310EB9FCF94DF938B345CFDF96F6FB12333B050647F1AC932BE3F0E8E020812
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/127.d438896d.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[127],{60637:function(C,e,t){t(93264);var r=t(98850),n=t(31803),a=t(7101),l=t.n(a),i=t(80184),o=(0,n.Z)((function(C){return{badge:{backgroundColor:"rgba(0, 0, 0, ".concat(.8,")"),borderTopLeftRadius:C.spacing(.5),display:"inline-block",padding:C.spacing(.25,1),zIndex:1},text:{color:"#FFFFFF",height:"100%",position:"relative",zIndex:1}}}));e.Z=function(C){var e=o(),t=C.children,n=C.classes,a=C.variant,c=void 0===a?"caption":a;return(0,i.jsx)(r.Box,{className:l()(e.badge,n),children:(0,i.jsx)(r.Typography,{className:e.text,variant:c,children:t})})}},95472:function(C,e,t){t.d(e,{Z:function(){return S}});var r,n,a,l,i,o,c,d,s,V,p,f,h,u,m,E,H,Z,M,b,g,w=t(93264),x=t(7101),v=t.n(x),L=t(98850),A=t(31803),k=["title","titleId"];function y(){return y=Object.assign?Object.assign.bind():function(C){for(var e=1;e<arguments.length;e++){var t=arguments[e];for(var r in t)Object.prototype.hasOwnPrope

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	103289
Entropy (8bit):	5.232953038355263
Encrypted:	false
SSDEEP:	1536:ipRJLImFbjUiZ2DJuNInTe6FRtCFzO+HVNIFv//UgjkhwKYAB:Q/FnUigDJjTeeQIl//k
MD5:	2B8E57AE75448CB98C32F0005F49AE0E
SHA1:	CAA931921F61487458EDBF3205C4994AA7C38101
SHA-256:	7FCE2E973172847269C27444A145A5A81DA8871E8B7A39992B1D46EFC81345E0
SHA-512:	E1E8F238B5BF557D21F0FDC7F6E1E8242A67C542F74A6BAE9BD5114A08AC30BFBCC99C1062957DC7A97352CA55DBE16D3FC53A45A9E8DB2CC4167E3899D7AE01
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/8498.ba15fbee.chunk.js
Preview:	/! For license information please see 8498.ba15fbee.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8498],{62110:function(e,r,t){var n=t(48309),i={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},o={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function u(e){return n.isMemo(e)?a:l[e.$$typeof]\|\|i}l[n.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[n.Memo]=a;var c=Object.defineProperty,s=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(r,t,n){if("string"!==typeof t){if(g){var i=f(t);i&&i!==g&&e(r,i,n)}var a=s(t);d&&(a=a

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	134006
Entropy (8bit):	5.065861911748554
Encrypted:	false
SSDEEP:	1536:2BTwEog9XMcIWzAp8Zu48rS2awv65siuynopgFiG1uEI:2NwEoK5spgFiG1uEI
MD5:	8F9A75954407CADA341EC21D1A162E9F
SHA1:	ACE40EC317F27382F09BBEFD93BD84ED1C4F5096
SHA-256:	38D0533C348E52858B4E64AAE1180353EA27FD7D7AA6656B216EC178330B5126
SHA-512:	FC48C71548FBAAF8139DC13830CFA564DEFCCC11CC7E57C0387FE1A44C7138FD5EEA9CD76535D2C12A7AC98311FD3713DB8277201D9C54CBEA30E396AF1BD7B9
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721
Preview:	.fl-builder-content ,.fl-builder-content :before,.fl-builder-content *:after {-webkit-box-sizing: border-box;-moz-box-sizing: border-box;box-sizing: border-box;}.fl-row:before,.fl-row:after,.fl-row-content:before,.fl-row-content:after,.fl-col-group:before,.fl-col-group:after,.fl-col:before,.fl-col:after,.fl-module:before,.fl-module:after,.fl-module-content:before,.fl-module-content:after {display: table;content: " ";}.fl-row:after,.fl-row-content:after,.fl-col-group:after,.fl-col:after,.fl-module:after,.fl-module-content:after {clear: both;}.fl-row,.fl-row-content,.fl-col-group,.fl-col,.fl-module,.fl-module-content {zoom:1;}.fl-clear {clear: both;}.fl-clearfix:before,.fl-clearfix:after {display: table;content: " ";}.fl-clearfix:after {clear: both;}.fl-clearfix {zoom:1;}.fl-visible-medium,.fl-visible-medium-mobile,.fl-visible-mobile,.fl-col-group .fl-visible-medium.fl-col,.fl-col-group .fl-visible-medium-mobile.fl-col,.fl-col-group .fl-visible-mobile.fl-col {display: none;}.fl-row,.fl

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	650
Entropy (8bit):	6.106700144095016
Encrypted:	false
SSDEEP:	12:3i0O4lEyQrXwJ9f9w4i5gVgkorvjflgewmorPE3nRsjlyo/8tUZ4U4eXH2tbH796:3i07eXc9Mnd7tgf43RsjlJRZBXWpH56
MD5:	17505393B9802400190F9843B0C1977E
SHA1:	A602C81228AF72DAD3DD055404327AB5FE9EBF69
SHA-256:	93172874F14FC2109DEFB549EFCD800CBAF46AE1D652F9CCF86DEAC6AEF117BA
SHA-512:	AE2FBD2EDEA9F389A478D7B8C9AB4A9D3A265B606DAB7EA5F6EB02FF346DC9027FBC535F8487E7E289E65DBEAF8C6EE5719E5A946DD3EFC25365CFA40135D7B3
Malicious:	false
Reputation:	low
URL:	https://dsr-images-us-east-1.prod.mindtickle.com/protected/organization-994/favicon-1713869489.gif?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L2Zhdmljb24tMTcxMzg2OTQ4OS5naWYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTUwODAyNjB9fX1dfQ__&Signature=hqFYWRAheFJYyNn0S~v-sXDHQ5QAVnOjtInGu4qtkjkizEgPfqA8uaC~KESAmg9ivifpRnwR4WIr4kbFdj3Mskq63Pg5aXu8mvAcF5fXeg-FBzpprEdfJitgbv2VZitJBHPTkVisY3qHiHRPrGFOPkkQHNmA-kBKI5DAA4xTBPckPMLhZPczwgxnluE966DF3vGAQDdIBhdQg68RGGO1b5Tqlpi8MRlx5iAeuzq6dO07jRusCnviBPlVF9hXCgFOAcdTu1~el3kd7KI97w09GRfiiQCO7-PkSL6eLuWKD8GRm5s72lQ83pus02Gi5Y3C5q~FAUh29hetjTlsgSRJvA__&Key-Pair-Id=KFSVSK4GDGUMB
Preview:	GIF89a . ..K.l99n98r<9w>8..F..F..F..F..G..F..G..H..H..I..I..I..H..J..K..L .E$.G/.C .L!.M#.O$.O$.P$.P%.P'.R9 A=#A( R)"T"T,%V3,\CI[4A\7F}HC.O8.P0.P2._4.f).l6.t'.t#.v".v#.v#.w#.w$.x$.x%.x&.y&.y'.z(.z).z).{).{*.}-.}..~...0.;..2..5.7.8.;...............................................................................................................................................................!.....K.,.... . ....K.............K=9?..?2............29B..9..9.B...6........#.....#.F..6......2=......6D............6..!...I.9....?F.....-&....5.........!./j.P.......&.t...."..T.....@.(D".8.....t._..+`..`.....d$.%....+\. Et..k.V.tD..X....;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35774)
Category:	downloaded
Size (bytes):	35899
Entropy (8bit):	5.411148967497641
Encrypted:	false
SSDEEP:	384:mUzr7eF520vCQgfT85O65GX6XBWzQ9bZGJ3AhyVmUTfa6ZioGAhegMab5lb3RtkK:7EvCQIL6++BQAhy1bvwdTkCMLCm
MD5:	93DB5E1613E6A39941B5D5B547AF77FC
SHA1:	A3C70E5426C6772BBE693E080EE4EBE1446F3905
SHA-256:	9A76319E6C701AB2200769E0A48F46A8D4D7025175009D34C378DC05BF4FC95F
SHA-512:	A700C1E9C0770E27AB13D66BCB3D70A7888AC6301A7D4BDCEB5D4862A979A0E911C72B6D2C8A9C88BACD773080392F14BB02BEEA3FB639D7E8CD014F0BCCBD69
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6838.fdd383a5.chunk.js
Preview:	/! For license information please see 6838.fdd383a5.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6838,1128],{50427:function(t,n){n.Z={50:"#e3f2fd",100:"#bbdefb",200:"#90caf9",300:"#64b5f6",400:"#42a5f5",500:"#2196f3",600:"#1e88e5",700:"#1976d2",800:"#1565c0",900:"#0d47a1",A100:"#82b1ff",A200:"#448aff",A400:"#2979ff",A700:"#2962ff"}},90375:function(t,n){n.Z={black:"#000",white:"#fff"}},80007:function(t,n){n.Z={50:"#e8f5e9",100:"#c8e6c9",200:"#a5d6a7",300:"#81c784",400:"#66bb6a",500:"#4caf50",600:"#43a047",700:"#388e3c",800:"#2e7d32",900:"#1b5e20",A100:"#b9f6ca",A200:"#69f0ae",A400:"#00e676",A700:"#00c853"}},5519:function(t,n){n.Z={50:"#fafafa",100:"#f5f5f5",200:"#eeeeee",300:"#e0e0e0",400:"#bdbdbd",500:"#9e9e9e",600:"#757575",700:"#616161",800:"#424242",900:"#212121",A100:"#f5f5f5",A200:"#eeeeee",A400:"#bdbdbd",A700:"#616161"}},57851:function(t,n){n.Z={50:"#e1f5fe",100:"#b3e5fc",200:"#81d4fa",300:"#4fc

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAl88glCMVDGRBIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14404)
Category:	downloaded
Size (bytes):	14452
Entropy (8bit):	5.222452667111044
Encrypted:	false
SSDEEP:	384:VCGC8ExioUQz1+pFeT1WWkvhjOadjOVT/kZz1t939OOWe2z8Dc:VCGC8Ex+8WFeT1WWkvhjOEjOdSzD939U
MD5:	0558260DD84740266C3FC8290AE4C698
SHA1:	61B03DA90D719358A66CB45709BC7A8720570AD4
SHA-256:	67FE11C7BD4C2EE8EA81BCD81247489B5F7BC076EE8CF55E39F49832E2641C38
SHA-512:	69F02B3FBE11745EE10F6F2FC9D11141E99BED3FD484E11E2D6613F6B24DB2C5F67160DEEDEEFA9ED06D4A4EDFFE0CCC76B96CF57D44AB442D86DCDD31C638C7
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1885.b8d7c262.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1885],{21885:function(e,t,r){var n,s,a;s=[r(93264)],n=function(e){"use strict";function t(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,s,a=[],i=!0,u=!1;try{for(r=r.call(e);!(i=(n=r.next()).done)&&(a.push(n.value),!t\|\|a.length!==t);i=!0);}catch(e){u=!0,s=e}finally{try{i\|\|null==r.return\|\|r.return()}finally{if(u)throw s}}return a}}(e,t)\|\|n(e,t)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function r(e,t){var r="undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(!r){if(Array.isArray(e)\|\|(r=n(e))\|\|t&&e&&"number"==typeof e.length){r&&(e=r);var s=0,a=function(){};return{s:a,n:function(){return s>=e.length?{done:!0}:{done:!1,value:e[

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 190 x 190, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13537
Entropy (8bit):	7.961344152111691
Encrypted:	false
SSDEEP:	384:stVfbTKcSfUFbQPjYgdFoB8Ji9Euea/Rbsf:stVXsfiS9dFK8NQJbsf
MD5:	5BDA2D0CA43FC88D7E4CDA093196BF74
SHA1:	348982763A988486C060054B6E59C3196D7673F6
SHA-256:	0C798F8023078774A654B77C993D7C2CC7FD0CBFB13C25540E19699A2F0564FE
SHA-512:	7C9AE77DF829791DB393EE8A847B60C84801F312D872E7025A7FE03AE03F86F8B04CBD7D687517A7C56001EFFF87DDB6AF0D0C6D93A3DC0F35ED76B951BBFEFE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............t......sBIT....\|.d... .IDATx^..x....7 .4+.v...E..TP..].6..H.)..b..].z.{.lH.DE.p.w.=....SB.}..M....ogfggg..._<..e......................e.......WR..._..k.W..+..L...l...Z.5.7...1z.g...d._.k..2k.W......&F.k.W...4;l.(+......s.._..2.&...Wa...`b.....@So...2>....9..X.....?......Q....}.B,....9..x.....~n1...=.=........~Y.dV.......N<.=...&.2..\|......u.._.0...x.{.g.he...\|..........?+@+k.x.{..5Lfe<....Y.ZY.......a2+.........Z'....e..Y.....~V.V.:..../k...x<.=........~J....)X.".o....h+.o..Io.?&....O.......+M..Y..../.....e..........<...eO_f./....&.`..X/._...L.....O....y<By..PZ......il..?....~V.D'..I.+.......3_z.g....z.g..It...R..:.2..~f..9~V.z'....../=.O.XY...2{.g..It...R..:.2..~f..u...5.N<.S.]._z.....R..?+d.........?.b.^..?u.e.K.......Y.k.x.N.$...?.be...~V...2'..~..J...~..........B..;..O.vI\|.9~...JU......?+dN....$..zU...i../=.3CW..g...w.:...s.$......Y!..~V.D'..I.+.......3_z.g..^...]S...?u.%...I.++U=.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7879
Entropy (8bit):	7.9572660092788405
Encrypted:	false
SSDEEP:	192:iIIHUCD4wa3SAOvSyI3doBelNr057fZ5+PG+QZ:M0wDAxyItot57fL+PNQZ
MD5:	AB5DBA51D407423EDAC7AA43C5DD5202
SHA1:	B955ED2433EA1778C6C8E325FD69AE3D120C3B92
SHA-256:	521DA3103ED3840FB2573EB15844F82FFECC39A96CD1881CD0A92F1B49ECEEFE
SHA-512:	9844AB8220437EC66F70C24881986E89935DA136269D7F4D22B8508FF4ED9A7CCEE36A94EB9E263377729C6FA69A2ACB8DA05B1F0305C0547D827F999BB9ECF0
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-regionalexpress.png
Preview:	.PNG........IHDR...x...2.............gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38480)
Category:	downloaded
Size (bytes):	38528
Entropy (8bit):	5.068193013769007
Encrypted:	false
SSDEEP:	768:UzYH49Ohc2Qo+H27qS0nwZqDGdpxBF0XQmXIh28F0E13GwGYg6aREwjzsN:Uh9s+H3S0n7nAEw0Eptxg6aSN
MD5:	F13D67C20BB9E6A4B5406786815EE8EE
SHA1:	3C47C7D400BCDE0429C9B654354457799F04E2E3
SHA-256:	DC4916FC6875FF7F3E1095D8D8CEACE981EE215EB0C67A2250EB3AEC14A91886
SHA-512:	18A199E1C6FB66C557DBCCDD572BC28E093DC5BD4D1C59D48B42A9E12C93499C09FC649301530601DF7DB894442D2DF6B28D6BCC26C8CD3C0D1E46A67E99BA39
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/3399.7243f481.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3399],{3399:function(e,t,r){r.r(t),r.d(t,{ApolloClient:function(){return I},ApolloError:function(){return v},FetchType:function(){return d},NetworkStatus:function(){return o},ObservableQuery:function(){return b},isApolloError:function(){return y}});var o,n=r(3431),i=r(74004),s=r(5970),a=r(58296),u=r(40151),c=r(34105),l=r(50344);function h(e){return e<7}!function(e){e[e.loading=1]="loading",e[e.setVariables=2]="setVariables",e[e.fetchMore=3]="fetchMore",e[e.refetch=4]="refetch",e[e.poll=6]="poll",e[e.ready=7]="ready",e[e.error=8]="error"}(o\|\|(o={}));var p=function(e){function t(){return null!==e&&e.apply(this,arguments)\|\|this}return(0,n.ZT)(t,e),t.prototype[u.Z]=function(){return this},t.prototype["@@observable"]=function(){return this},t}(a.Observable);function f(e){return Array.isArray(e)&&e.length>0}function y(e){return e.hasOwnProperty("graphQLErrors")}var d,v=function(e){functi

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7362)
Category:	downloaded
Size (bytes):	7410
Entropy (8bit):	5.329773870465443
Encrypted:	false
SSDEEP:	96:fU8P1XmHCQRSCYgKSlsV1NyOhHziO4KOqIoVrZhJEmJbV9EBQHtlStABOB55RNAs:86ta3SpgXlyPhNJbV6Bhv5PWq
MD5:	81B52C36B4FDF0F1AEBC4948F29A41BB
SHA1:	AB5D3419201F9BE869A43C2A68750A43AD01615F
SHA-256:	C59F8A4E5D6A6FCFD3C8EB15E7F2F702DDD7B413E527FF2484C3E70C5A4A60F6
SHA-512:	499493ADDB19201554537C72CA31CA80E4625F2CDDDE1E5C7604F957E7D3D7095FDFAEFE6E20019075F992BE936ED95544AAEA2B3624F0082F95A715524F5FC4
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4308.b6b628d8.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4308],{24308:function(n,e,r){r.d(e,{Z:function(){return T}});var t=r(29439),o=r(93433),i=r(87462),c=r(63366),a=r(93264),l=r(28182),u=r(94419),s=r(21217),f=r(78),v=r(93457),d=r(86083),p=r(30418),m=r(78519),g=r(52173),b=r(4942),w=function(n,e,r){var t,o,i=n.keys[0];if(Array.isArray(e))e.forEach((function(e,t){r((function(e,r){t<=n.keys.length-1&&(0===t?Object.assign(e,r):e[n.up(n.keys[t])]=r)}),e)}));else if(e&&"object"===typeof e){(Object.keys(e).length>n.keys.length?n.keys:(t=n.keys,o=Object.keys(e),t.filter((function(n){return o.includes(n)})))).forEach((function(t){if(-1!==n.keys.indexOf(t)){var o=e[t];void 0!==o&&r((function(e,r){i===t?Object.assign(e,r):e[n.up(t)]=r}),o)}}))}else"number"!==typeof e&&"string"!==typeof e\|\|r((function(n,e){Object.assign(n,e)}),e)};function S(n){return n?"Level".concat(n):""}function h(n){return n.unstable_level>0&&n.container}function Z(n){return

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	98
Entropy (8bit):	4.694762774326968
Encrypted:	false
SSDEEP:	3:YRM9WREaFt9ZQoXd+52ybL2ysrQaJ0SHY:YsWikEococLX4QaJ0SHY
MD5:	1494327BEDB21194EFC057DBEBAEAEBA
SHA1:	B257E0FA04D8ECC45D253ECC62BE7991711BB21E
SHA-256:	8D2490EA9E29C8D79DCCA1CDC69DC267EC12A6502BB862E3FECCE7DF34CF50F6
SHA-512:	B9DF9B0C2312C334B5555BFCCD298064AC1855DC029710F096B572507160C8BB4A0B781074E1DF8D18E918B97D3575FADB630B10A5154A7A8CE10BFDDC6DC625
Malicious:	false
Reputation:	low
Preview:	{"timestamp":"2024-04-23T14:06:05.928+00:00","status":405,"error":"Method Not Allowed","path":"/"}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	650
Entropy (8bit):	6.106700144095016
Encrypted:	false
SSDEEP:	12:3i0O4lEyQrXwJ9f9w4i5gVgkorvjflgewmorPE3nRsjlyo/8tUZ4U4eXH2tbH796:3i07eXc9Mnd7tgf43RsjlJRZBXWpH56
MD5:	17505393B9802400190F9843B0C1977E
SHA1:	A602C81228AF72DAD3DD055404327AB5FE9EBF69
SHA-256:	93172874F14FC2109DEFB549EFCD800CBAF46AE1D652F9CCF86DEAC6AEF117BA
SHA-512:	AE2FBD2EDEA9F389A478D7B8C9AB4A9D3A265B606DAB7EA5F6EB02FF346DC9027FBC535F8487E7E289E65DBEAF8C6EE5719E5A946DD3EFC25365CFA40135D7B3
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2020/07/cropped-favicone-32x32.gif
Preview:	GIF89a . ..K.l99n98r<9w>8..F..F..F..F..G..F..G..H..H..I..I..I..H..J..K..L .E$.G/.C .L!.M#.O$.O$.P$.P%.P'.R9 A=#A( R)"T"T,%V3,\CI[4A\7F}HC.O8.P0.P2._4.f).l6.t'.t#.v".v#.v#.w#.w$.x$.x%.x&.y&.y'.z(.z).z).{).{*.}-.}..~...0.;..2..5.7.8.;...............................................................................................................................................................!.....K.,.... . ....K.............K=9?..?2............29B..9..9.B...6........#.....#.F..6......2=......6D............6..!...I.9....?F.....-&....5.........!./j.P.......&.t...."..T.....@.(D".8.....t._..+`..`.....d$.%....+\. Et..k.V.tD..X....;

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33237)
Category:	downloaded
Size (bytes):	38942
Entropy (8bit):	5.781354035972313
Encrypted:	false
SSDEEP:	768:WzfO0UVJMIR56pR/Bdg4LWZtFN22979GxV/w72158h1NEac4JXJ8XnLhkxgg6oTH:WzfO0UVWIv635y4LWZtFN2297aoKC1Nr
MD5:	C7BC0490AB1B85274BD5422AA273BF6C
SHA1:	2F401F539BD0C4713EA6C3812DFC853260C49822
SHA-256:	EBD21FD785E33300AE6571194031810C2E87373FB139B681888B2423D78A562B
SHA-512:	8525721AE5C11E6672F80F8FDB50D1500B9CED44DF72A73481E89E6FF1F5666AA2240A034DFCC560838100C4DC154594FCFC0B3C4A111181BFEFB7243C1EA84B
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3
Preview:	/!@license Copyright 2013, Heinrich Goebl, License: MIT, see https://github.com/hgoebl/mobile-detect.js/.!function(a,b){a(function(){"use strict";function a(a,b){return null!=a&&null!=b&&a.toLowerCase()===b.toLowerCase()}function c(a,b){var c,d,e=a.length;if(!e\|\|!b)return!1;for(c=b.toLowerCase(),d=0;d<e;++d)if(c===a[d].toLowerCase())return!0;return!1}function d(a){for(var b in a)i.call(a,b)&&(a[b]=new RegExp(a[b],"i"))}function e(a){return(a\|\|"").substr(0,500)}function f(a,b){this.ua=e(a),this._cache={},this.maxPhoneWidth=b\|\|600}var g={};g.mobileDetectRules={phones:{iPhone:"\\biPhone\\b\|\\biPod\\b",BlackBerry:"BlackBerry\|\\bBB10\\b\|rim[0-9]+\|\\b(BBA100\|BBB100\|BBD100\|BBE100\|BBF100\|STH100)\\b-[0-9]+",HTC:"HTC\|HTC.(Sensation\|Evo\|Vision\|Explorer\|6800\|8100\|8900\|A7272\|S510e\|C110e\|Legend\|Desire\|T8282)\|APX515CKT\|Qtek9090\|APA9292KT\|HD_mini\|Sensation.Z710e\|PG86100\|Z715e\|Desire.(A8181\|HD)\|ADR6200\|ADR6400L\|ADR6425\|001HT\|Inspire 4G\|Android.\\bEVO\\b\|T-Mobile G1\|Z520m\|Android [0-9.]+; Pixel",N

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2714), with no line terminators
Category:	downloaded
Size (bytes):	2714
Entropy (8bit):	4.972379482060203
Encrypted:	false
SSDEEP:	24:zEJiJOKq3JpJ9tJitJYJhJwYhex1aNpQj5IuMNtefSfdrcCTeQKUHWWWONuoAh3N:zQi1aE5qs69S5GjAFfJpK17f2p/CE
MD5:	087102ECB9F9971D052FDDC91ECC63E9
SHA1:	7C487378BBE1F0F48DABA4B006FCF55A2D1F9033
SHA-256:	3EE638689E343730A82027D03714F274B6C665CF7E3BF60B5208A3A0CDB3581D
SHA-512:	6C286292DEC88B7FB7992305C8AD1BB3823C78CEA1F4CB0F12B5B190BA74A97ED6E08E3A9617F3EFD7B9686282EF365C613F70F91B8FB8A01E3216FF32467872
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-includes/css/dist/block-library/theme.min.css?ver=5.7.11
Preview:	#start-resizable-editor-section{display:none}.wp-block-audio figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-audio figcaption{color:hsla(0,0%,100%,.65)}.wp-block-code{font-family:Menlo,Consolas,monaco,monospace;color:#1e1e1e;padding:.8em 1em;border:1px solid #ddd;border-radius:4px}.wp-block-embed figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-embed figcaption{color:hsla(0,0%,100%,.65)}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcaption{color:hsla(0,0%,100%,.65)}.wp-block-pullquote{border-top:4px solid;border-bottom:4px solid;margin-bottom:1.75em;color:currentColor}.wp-block-pullquote__citation,.wp-block-pullquote cite,.wp-block-pullquote footer{color:currentColor;text-transform:uppercase;font-size:.8125em;font-style:normal}.wp-bloc

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Category:	downloaded
Size (bytes):	46704
Entropy (8bit):	7.994860687757006
Encrypted:	true
SSDEEP:	768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r
MD5:	30A274CD01B6EEB0B082C918B0697F1E
SHA1:	393311BDE26B99A4AD935FA55BAD1DCE7994388B
SHA-256:	88DF0B5A7BC397DBC13A26BB8B3742CC62CD1C9B0DDED57DA7832416D6F52F42
SHA-512:	C02C5894DFB5FBF47DB7E9EDA5E0843C02E667B32E6C6844262DD5DED92DD95CC72830A336450781167BD21FBFAD35D8E74943C2817BAAC1E4CA34EAAD317777
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
Preview:	wOF2.......p......................................O......^?HVAR.g.`?STAT.8..4/l.....<..6..f.0..\.6.$..H. ..\..>..[`....\|...........7o.)....C81=......g#l..PA.c.......%...$.K.....\|}}....8H.\Yd.....2c.J....0K.....I..k...F..f......,L.....P...JGwj..KM....n..,..o.....n.ck...1...%.<.....;5...9..2....=b.....("4..:.k...K_...`.5v..2@...,_.3..6..@PR.]...f!X.~..b.....-..9.....?.=:kt.'@_...N...8.i......Fo..S.C.=%.........W.@7d..%......,"h...b@.DE.]l.n..(;......E.ng].`....8..C;m....).u8.....4...%..c.A.hc]....s.{.+....J..Rq...f..I;.B..g.....j.@~.........H.........:]Dc.J.6r..].".c...8j...v. M.PXB.,.v...M..NtOO.......Z`-.i..X.....".y....c.....+..e[..(..q...u..kh.k5W..=OK{.;...7...V...I.FMTWv.Dv.[..^`......JY..:.,.. tgKhC..2-...I..S..'...IL..........p......&:..(...g..B.`......%U....-.m.D.b.m..p..26.0D.....$j.r...w..z.9.)`..n.I..B...s"es...;..vY...6.T...**..2o.....W.Lu:wx.?.7..x......C..E.^SE..F.5WcMi..a..n...X...t.........6.j.j..M.9..a.....f<J.....@.&f..'.\|.....p

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4503)
Category:	downloaded
Size (bytes):	4551
Entropy (8bit):	5.275377802028873
Encrypted:	false
SSDEEP:	96:cRhsUD0S0kCofL5viVmbIR2yJlXs6ctCNwZN1qZhTJZGBYV:IuY0JkvFHbIR2yJlXsqN6GJUB4
MD5:	AA1C484D16B3F4F6A3605246AC5B1703
SHA1:	6166DD7F7CDF0388A52A7A3B5BFA8AB3F32CEBDE
SHA-256:	F02D456493A875E94675D27876071A9D45FF701248B0388819D7C1F3B82E4F77
SHA-512:	D43F4A86AAB6EEFB91AF731379BAE6E3852F91AD13643E8D660EABAE5A7520D8DAD431313499D0DC07AB700F4AA917321DA467B952EAB144CE549B167EBC3BD0
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9291.5bde9037.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9291,2070],{59291:function(e,n,t){var r,o,u;u=function(e){"use strict";"undefined"!==typeof window&&(window.videojs_hotkeys={version:"0.2.28"}),(e.registerPlugin\|\|e.plugin)("hotkeys",(function(n){var t=this,r=t.el(),o=document,u={volumeStep:.1,seekStep:5,enableMute:!0,enableVolumeScroll:!0,enableHoverScroll:!1,enableFullscreen:!0,enableNumbers:!0,enableJogStyle:!1,alwaysCaptureHotkeys:!1,captureDocumentHotkeys:!1,documentHotkeysFocusElementFilter:function(){return!1},enableModifiersForNumbers:!0,enableInactiveFocus:!0,skipInitialFocus:!1,playPauseKey:function(e){return 32===e.which\|\|179===e.which},rewindKey:function(e){return 37===e.which\|\|177===e.which},forwardKey:function(e){return 39===e.which\|\|176===e.which},volumeUpKey:function(e){return 38===e.which},volumeDownKey:function(e){return 40===e.which},muteKey:function(e){return 77===e.which},fullscreenKey:function(e){return 70===e.which},custo

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	dropped
Size (bytes):	3624
Entropy (8bit):	7.626689100441383
Encrypted:	false
SSDEEP:	96:O1m/B6knJHGJAQuf33Pfw+Xb8XhF64Ihp5V5x:ym/Eknxndb8xsb/Rx
MD5:	13BE0E61FD2B7EB7ED179773ECDCA1E6
SHA1:	46FCA6F8B82CE2186A03BEB1716B819C99802008
SHA-256:	E482052312985FBA0C101EB79E1EE01791BA125537638D54C1837E7C08014A72
SHA-512:	1987708395164B5E774B0F4E889435A018610DB763ABD4B69C27DE05253D4BD910DD031DAEEDA288193BEAC9657F72E7F069DE2E07BBB29CC41A5AC4F4A74231
Malicious:	false
Reputation:	low
Preview:	GIF89a..}..........<....x%.....F...YSz........l...ql.#.N.......~/..+$VC<g..............;4b.........3,\....Z..J...........X.<.Tuq...5........z...RLu.........{t.HBm`[.....E...ni....}....K............z)...U?[....M......X-....\|,NGq..p...mf..............{.......e`...1ic.............?..e...}x..................................pJ............k@H.......4.E......`9G..s..........v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1443)
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	5.176533923427033
Encrypted:	false
SSDEEP:	24:Q77/qOiIoZ2LsXDenoOLysBKKI1mgihxaAPwLrOpEiLsEp9/RUc9XmC3+:Q7Wn8sXqnysBKKum7XIrGEi7pl6c92Q+
MD5:	7C5C36BAA69FCDB57BD891CDA90920B3
SHA1:	9D8B3DF7A4FA2968403290D69A60B2EAB20734F5
SHA-256:	6A482D2D94C0D1BC6937A1759389D01B475E6B28A0D9B5D7EAA3F9CC8F59F3CD
SHA-512:	904C01AD7FEA398B11ADDEE5439EAE8C35D7C5B5194BBC9DD139F6F8A4485E944EB62CCAB04B6D734B63AED9FDCA67F9B5BD7D0DE6BCCDE7A4A13DCB7B756A73
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-includes/js/wp-embed.min.js?ver=5.7.11
Preview:	/! This file is auto-generated /.!function(d,l){"use strict";var e=!1,n=!1;if(l.querySelector)if(d.addEventListener)e=!0;if(d.wp=d.wp\|\|{},!d.wp.receiveEmbedMessage)if(d.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,i,a,s=l.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=l.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=new RegExp("^https?:$","i"),c=0;c<n.length;c++)n[c].style.display="none";for(c=0;c<s.length;c++)if(r=s[c],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(a=parseInt(t.value,10)))a=1e3;else if(~~a<200)a=200;r.height=a}if("link"===t.message)if(i=l.createElement("a"),a=l.createElement("a"),i.href=r.getAttribute("src"),a.href=t.value,o.test(a.protocol))if(a.host===i.host)if(l.activeElement===r)d.top.location.href=t.value}}},e)d.addEventListener("message",d.wp.receiveEmbedMessage,!1),l.addEventListener("DOMContentLoaded",t,!1),d.a

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1571)
Category:	downloaded
Size (bytes):	11835
Entropy (8bit):	5.156764602879818
Encrypted:	false
SSDEEP:	192:TkgHsj0CRe1Z+e1ZfRBrL4kel6laHqoQW7jn8bEoQDpGY2Co9PIU8:riurL4nqa89AU8
MD5:	45F98DEC2F0965E8E879F2C7A1F4E996
SHA1:	8187DCCC170F82DF78E9BE302E5AB49E024D4D34
SHA-256:	23EB134E746F1E5C265C5D33D045AF48C444617ADAA281FB993D6070BDC04C9F
SHA-512:	AF6A71A618C1DFEF39D6FD8C1E2A2A8FFCEAC4522C8EEC0A65A1FF17A4C332F230E0C6B6F09A44B1AD37D92DCB570DDBFD81B01E7D234D395C06D9BCB5792329
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.0
Preview:	;var ExactMetrics=function(){var e=[],i='',r=!1;this.setLastClicked=function(t,n,i){t=typeof t!=='undefined'?t:[];n=typeof n!=='undefined'?n:[];i=typeof i!=='undefined'?i:!1;e.valuesArray=t;e.fieldsArray=n};this.getLastClicked=function(){return e};this.setInternalAsOutboundCategory=function(e){i=e};this.getInternalAsOutboundCategory=function(){return i};this.sendEvent=function(e,t,n){x(e,t,n,[])};function d(){if(window.exactmetrics_debug_mode){return!0}.else{return!1}};function c(e,t,n){var l={};for(var i in e){if(!e.hasOwnProperty(i)){continue};if(t&&t.indexOf(i)===-1){continue};if(n&&n.indexOf(i)>-1){continue};l[i]=e[i]};return l};function b(e,t,n){if(!exactmetrics_frontend.v4_id\|\|e!=='event'){return};var i=n.event_category\|\|'',a=['event_name','event_category','event_label','value',],l=c(n,null,a);l.action=t;l.send_to=exactmetrics_frontend.v4_id;let hitType=i.replace('-','_');if(i.indexOf('outbound-link')!==-1){hitType='click'}.else if(i==='download'){hitType='file_download'};__gtagT

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58392)
Category:	downloaded
Size (bytes):	58578
Entropy (8bit):	4.718650194585032
Encrypted:	false
SSDEEP:	768:FEC319PiyLNq4/xMoAUHJ2kEBR/MMQyYJrXjBrth5Qzl:FEkPxLE4/6mHQpBCfdj9tMB
MD5:	76CB46C10B6C0293433B371BAE2414B2
SHA1:	0038DC97C79451578B7BD48AF60BA62282B4082B
SHA-256:	876D023D9D10C97941B80C3B03E2A5B94631FF7A4AF9CEE5604A6A2D39718D84
SHA-512:	2FB31670AEC534F73036A9CB759ABCEA54C760B750A996B3E58700804FB97271A6970F094F4DD0076FA8C4BD74D14781E9197364B531086492E3FFBE98D65DC7
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/bb-plugin/fonts/fontawesome/5.13.0/css/all.min.css?ver=2.3.2.6
Preview:	/!. Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1290)
Category:	downloaded
Size (bytes):	1415
Entropy (8bit):	5.476547146763911
Encrypted:	false
SSDEEP:	24:QL4LTiA3mZPjRKofqfk6tqn4lUGb0VIBENHIgRcPHR/khcRV:QcLmA2ZPjRdfqfvs4lUGbOOENHJRcPHJ
MD5:	640529340CEAD77335334322CB58DE83
SHA1:	906D025E6B55C71D6F0EE3C8D8041B682E294A90
SHA-256:	93B49F9719D877068CDA06B232D4F1D61246A3A54922BE277F4CFC4C469E02D4
SHA-512:	1D70FAAE7DD62C3C0A0F6898185F07706C998D63DA50A19364C06387483CAD524408CA640493B675B9390E238A4ECAE0E896D30ED119F5EE38A0ABE094F0468D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4765.d7577677.chunk.js
Preview:	/! For license information please see 4765.d7577677.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4765,6269],{66374:function(e,r,n){n(31725);var t=n(93264),o=60103;if(r.Fragment=60107,"function"===typeof Symbol&&Symbol.for){var f=Symbol.for;o=f("react.element"),r.Fragment=f("react.fragment")}var i=t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED.ReactCurrentOwner,a=Object.prototype.hasOwnProperty,c={key:!0,ref:!0,__self:!0,__source:!0};function u(e,r,n){var t,f={},u=null,l=null;for(t in void 0!==n&&(u=""+n),void 0!==r.key&&(u=""+r.key),void 0!==r.ref&&(l=r.ref),r)a.call(r,t)&&!c.hasOwnProperty(t)&&(f[t]=r[t]);if(e&&e.defaultProps)for(t in r=e.defaultProps)void 0===f[t]&&(f[t]=r[t]);return{$$typeof:o,type:e,key:u,ref:l,props:f,_owner:i.current}}r.jsx=u,r.jsxs=u},15671:function(e,r,n){function t(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}n.d(r,{Z:function(){ret

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15849)
Category:	downloaded
Size (bytes):	15897
Entropy (8bit):	5.311753301560378
Encrypted:	false
SSDEEP:	384:D3g/QQHfe1S1pFeEICyoy47GLPFVZzm050X0vW8:D3YQQmCPYCk4I/eEf
MD5:	0A33B44D8C501A8378BFF7FD7E4DB4B0
SHA1:	1A48E32DD8826CEC7D44B991DDBE75EB75D05954
SHA-256:	E08B1CF81FB2FF2A8895BEEF511492DB44EF192EA1070AD13EFC5D4AF1684AE9
SHA-512:	988F28E3A42AE9B964B8A213A53CA8AA8EA988374331297A77948C8C8696A549FFD35F42402132E546D5598960616FECC04970E492105F4A8EDB05013ECD1E10
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4954.3618d4e3.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4954],{90977:function(e,t,n){var r=n(4942),o=n(63366),i=n(87462),a=n(93264),u=n(28182),l=n(94419),c=n(12065),s=n(66934),d=n(31402),f=n(53915),v=n(14036),p=n(48647),g=n(80184),b=["edge","children","className","color","disabled","disableFocusRipple","size"],h=(0,s.ZP)(f.Z,{name:"MuiIconButton",slot:"Root",overridesResolver:function(e,t){var n=e.ownerState;return[t.root,"default"!==n.color&&t["color".concat((0,v.Z)(n.color))],n.edge&&t["edge".concat((0,v.Z)(n.edge))],t["size".concat((0,v.Z)(n.size))]]}})((function(e){var t=e.theme,n=e.ownerState;return(0,i.Z)({textAlign:"center",flex:"0 0 auto",fontSize:t.typography.pxToRem(24),padding:8,borderRadius:"50%",overflow:"visible",color:(t.vars\|\|t).palette.action.active,transition:t.transitions.create("background-color",{duration:t.transitions.duration.shortest})},!n.disableRipple&&{"&:hover":{backgroundColor:t.vars?"rgba(".concat(t.vars.pa

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2938)
Category:	downloaded
Size (bytes):	2986
Entropy (8bit):	5.016769313608303
Encrypted:	false
SSDEEP:	48:iLkjvV0xowEaFh74yxgL4gU87bOVUZL7r0QPdwDSV:LVwZFDGbOVOUQlySV
MD5:	3E9D7389F1D694358145D906B35B763D
SHA1:	B5015852F3526DD1FE7ED58C53B600CA5CD44E0F
SHA-256:	4BE0ABC75CA05B3F8FC9AA2F4191E1CCBC44E8D6CD0451C2A18B7FACA163872E
SHA-512:	1CF3F3F706F6A8E8F0E66036525883E46D80185BC049E97865123AE582F90FDDC3396361848C8244D4FEA70D1BAF22DBB420EA21C08F6C3893FC536FCC8DF5C6
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5782.cb349513.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5782,2198],{65782:function(e,n,r){r.r(n),r.d(n,{FullScreen:function(){return m},useFullScreenHandle:function(){return d}});var l=r(93264),u=r.n(l),t={fullscreenEnabled:0,fullscreenElement:1,requestFullscreen:2,exitFullscreen:3,fullscreenchange:4,fullscreenerror:5,fullscreen:6},c=["webkitFullscreenEnabled","webkitFullscreenElement","webkitRequestFullscreen","webkitExitFullscreen","webkitfullscreenchange","webkitfullscreenerror","-webkit-full-screen"],s=["mozFullScreenEnabled","mozFullScreenElement","mozRequestFullScreen","mozCancelFullScreen","mozfullscreenchange","mozfullscreenerror","-moz-full-screen"],o=["msFullscreenEnabled","msFullscreenElement","msRequestFullscreen","msExitFullscreen","MSFullscreenChange","MSFullscreenError","-ms-fullscreen"],i="undefined"!==typeof window&&"undefined"!==typeof window.document?window.document:{},f="fullscreenEnabled"in i&&Object.keys(t)\|\|c[0]in

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51546)
Category:	downloaded
Size (bytes):	51594
Entropy (8bit):	5.3327042260582
Encrypted:	false
SSDEEP:	1536:9mdcTsJv94eYNknjYwVhxboOe7/BV4GjVUWGbzGYh21ZIzT7:IJNYFwVhxbACXdhQZ0
MD5:	472CD32A67E92EB48371908449EFEE9E
SHA1:	A940D13FDC18B2FE31FA5A9AE1D9A4E2A1AAAF79
SHA-256:	B387B07648D3A0786F93405F5CFFFB5951D906DBA28209C290802D9E5EBB1B0C
SHA-512:	1C4478A37202662A0DFC19341309826482821082E27D40DD3418FD6FCD693DC963DE57AA9AD74DD0C5C658F7EA075E64981289FE64D3E7DE5D2B6F597621E70A
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/3390.a8a3bb69.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3390],{16448:function(e,t,o){var n=o(87462),a=o(63366),i=o(93264),r=o(28182),c=o(94419),s=o(66934),l=o(31402),d=o(4567),u=o(41370),p=o(80184),v=["className"],f=(0,s.ZP)(d.Z,{name:"MuiAlertTitle",slot:"Root",overridesResolver:function(e,t){return t.root}})((function(e){return{fontWeight:e.theme.typography.fontWeightMedium,marginTop:-2}})),m=i.forwardRef((function(e,t){var o=(0,l.Z)({props:e,name:"MuiAlertTitle"}),i=o.className,s=(0,a.Z)(o,v),d=o,m=function(e){var t=e.classes;return(0,c.Z)({root:["root"]},u.E,t)}(d);return(0,p.jsx)(f,(0,n.Z)({gutterBottom:!0,component:"div",ownerState:d,ref:t,className:(0,r.default)(m.root,i)},s))}));t.Z=m},41370:function(e,t,o){o.d(t,{E:function(){return i}});var n=o(75878),a=o(21217);function i(e){return(0,a.Z)("MuiAlertTitle",e)}var r=(0,n.Z)("MuiAlertTitle",["root"]);t.Z=r},76348:function(e,t,o){var n=o(4942),a=o(63366),i=o(87462),r=o(93264),c=(o

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	165379
Entropy (8bit):	7.974361631945248
Encrypted:	false
SSDEEP:	3072:5JJTj9HRrAdYfDVkuLv/GmPqLr8gRdb5FxcgQl3t:5TTrMWkuLClRlRQl3t
MD5:	35E797EACE71DB1FEBFFC5601A226EA3
SHA1:	62F2AEB3A2C8C263B7B0EF5529A076AA659602FD
SHA-256:	93956507CBC6A586CEDDD85B23979072A59E7CE1AC999B08C91D0A422A0512FB
SHA-512:	647099115F51EF98436531135C708DEE8D710902A463E2CBAB75EC5F8F83510FD48E31F68402109B3D71FDF6FF4153B4E8F08F8B6453672967C61C365A7844E8
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SF3.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:A13F5BCCC04011E9941BEA58722DE251" xmpMM:InstanceID="xmp.iid:A13F5BCBC04011E9941BEA58722DE251" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1735)
Category:	downloaded
Size (bytes):	1860
Entropy (8bit):	5.433404798901548
Encrypted:	false
SSDEEP:	48:QEL2LPdgZpjzy9ANw5Ioy4GhBv5fe8nt+V:NZp3FHh5fbMV
MD5:	28F0E75E2DA5F0838B8DCD362CA7D925
SHA1:	6B1814A431DF3F54B6D758587EC658FF28EE1F26
SHA-256:	44362973DD03B3C35EF41A0B622DED4BD4E2AC93282D74227EEEEE5DD959995C
SHA-512:	4035BDFD954E51F4CB3E28B377FDA524514A2188A0FDA7349F172E5587EACBE1A2E491E5B64E26E50BD6BE847EB00A6707900F53B45285B6C4EDC02417E58A19
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/3143.76a8115a.chunk.js
Preview:	/! For license information please see 3143.76a8115a.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3143],{63143:function(e,n,t){var o,r;!function(i){if(void 0===(r="function"===typeof(o=i)?o.call(n,t,n,e):o)\|\|(e.exports=r),!0,e.exports=i(),!!0){var c=window.Cookies,u=window.Cookies=i();u.noConflict=function(){return window.Cookies=c,u}}}((function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(o){function r(){}function i(n,t,i){if("undefined"!==typeof document){"number"===typeof(i=e({path:"/"},r.defaults,i)).expires&&(i.expires=new Date(1new Date+864e5i.expires)),i.expires=i.expires?i.expires.toUTCString():"";try{var c=JSON.stringify(t);/^[\{\[]/.test(c)&&(t=c)}catch(a){}t=o.write?o.write(t,n):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (900), with no line terminators
Category:	downloaded
Size (bytes):	900
Entropy (8bit):	4.822948761162018
Encrypted:	false
SSDEEP:	12:qTEg1WuctVAeC26V1LcjYABJmIOWLcaoLcAJmIOyTcKvVLcTAVWLcmpVPG7faKju:0EgyT0RHEwWCLciwyLNqAVWHVe75j7a
MD5:	867357AA3E4428E495D1A755779D65BF
SHA1:	756563509840EBF430BA36D36175E1B81BD371A4
SHA-256:	4B77144F8BE69DEC65065CACEA3E0EE93F22DD33290B57CB045F0272370EC406
SHA-512:	C2F8672C74F279D4D3B9988CA49350FA213B6A64A1FD6D18EE34E94B2541D71E38FB5C1CAB2775CF428A83548A37878484A49C47DEDDC49408B180ED3F1CD7E1
Malicious:	false
Reputation:	low
URL:	https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6
Preview:	<!doctype html><html lang="en"><head><base href="/"/><meta charset="utf-8"/><meta name="robots" content="noindex, nofollow"/><meta name="referrer" content="no-referrer-when-downgrade"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><script src="https://dsr-internal-us.mindtickle.com/checkBrowser.js" type="text/javascript"></script><script defer="defer" src="https://dsr-internal-us.mindtickle.com/polyfills.js" type="text/javascript"></script><link rel="manifest" href="https://dsr-internal-us.mindtickle.com/manifest.json"/><script defer="defer" src="https://dsr-internal-us.mindtickle.com/static/js/main.351922f6.js"></script><script defer="defer" src="https://dsr-internal-us.mindtickle.com/remoteEntry.js"></script></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="app"></div></body></html>

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15380)
Category:	downloaded
Size (bytes):	15428
Entropy (8bit):	5.342026495423041
Encrypted:	false
SSDEEP:	192:X1maG/Kgjkw7umA+K4/rAr0WSlcFb6HdQ4P0uaPrTE/G+0FQcrwB9B5ljxgc+18I:X1mH/K7rUS4sxrY/mUB9Dljx58
MD5:	A402001BC1FE2FF9F0260BBCEB61FFE5
SHA1:	1B6647990FB9809D8ED687E047F824F7721834C3
SHA-256:	C26050A7A2A156A972A5EF308E6DDD3DE0E9BF0BFA2EBD64D89C0A27C9088126
SHA-512:	2AF832570CE7447C404AE43D7227C807D77B6931B5532910A7364349D9047D4E4F7E119B02FEDD5775EA17E45F8F0C3101E967C285A8C35D184C4B5E921F0747
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6611.ecce3809.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6611],{53915:function(e,n,t){t.d(n,{Z:function(){return U}});var o=t(29439),i=t(4942),r=t(87462),a=t(63366),u=t(93264),l=t(28182),c=t(94419),s=t(66934),p=t(31402),d=t(42071),f=t(89683),v=t(68221),h=t(93433),m=t(30168),b=t(75660),Z=t(2631),g=t(80184);var x,R,M,y,k,E,T,w,P,C=function(e){var n=e.className,t=e.classes,i=e.pulsate,r=void 0!==i&&i,a=e.rippleX,c=e.rippleY,s=e.rippleSize,p=e.in,d=e.onExited,f=e.timeout,v=u.useState(!1),h=(0,o.Z)(v,2),m=h[0],b=h[1],Z=(0,l.default)(n,t.ripple,t.rippleVisible,r&&t.ripplePulsate),x={width:s,height:s,top:-s/2+c,left:-s/2+a},R=(0,l.default)(t.child,m&&t.childLeaving,r&&t.childPulsate);return p\|\|m\|\|b(!0),u.useEffect((function(){if(!p&&null!=d){var e=setTimeout(d,f);return function(){clearTimeout(e)}}}),[d,p,f]),(0,g.jsx)("span",{className:Z,style:x,children:(0,g.jsx)("span",{className:R})})},S=t(13007),V=["center","classes","className"],j=(0,Z.ke

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29677)
Category:	downloaded
Size (bytes):	58171
Entropy (8bit):	4.952248562448469
Encrypted:	false
SSDEEP:	384:T2vicPcBZDn/KRM34XMX6cD+d+AwlVHI+LQ3R+T55GPh5IIINXTXlx:AXMX6E+d+AwlxI+LQ3RC4h5DwTVx
MD5:	B5D1E2C87B60CE71C3FD90CA27073250
SHA1:	B65E3890EF1565F98971B344B4C85866A5F33860
SHA-256:	2CD9DE3DD26246204749CFF259BC34E8E6A47AE5D6E4528B9B28C75D68D50CDE
SHA-512:	0698905368E41D22F1026DCC64F716BE70BFDE1BC05BC85918242AF9C30351166726B4DC4426898E9EF0428EF0A2F875D8FED54BBC8B925289363A39FABBA165
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-includes/css/dist/block-library/style.min.css?ver=5.7.11
Preview:	@charset "UTF-8";#start-resizable-editor-section{display:none}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{color:#fff;background-color:#32373c;border:none;border-radius:1.55em;box-shadow:none;cursor:pointer;display:inline-block;font-size:1.125em;padding:.667em 1.333em;text-align:center;text-decoration:none;overflow-wrap:break-word}.wp-block-button__link:active,.wp-block-button__link:focus,.wp-block-button__link:hover,.wp-block-button__link:visited{color:#fff}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.wp-block-button__width-25{width:calc(25% - .5em)}.wp-block-buttons>.wp-block-button.wp-block-button__width-50{width:calc(50% - .5em)}.wp-block-buttons>.wp-bl

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31957)
Category:	downloaded
Size (bytes):	32005
Entropy (8bit):	5.499631824236644
Encrypted:	false
SSDEEP:	384:VD53mU9uDtBkJLO9W+YLCDTtEjuVpzrCaYaIUcrUCFNGwp88QkL38IMkiO9H5rFe:VDcUCR9FYQua/sF+ytB1C32h0xlvpt
MD5:	EB849E426A5B56A5CB7B6A0B94D78B30
SHA1:	67E0D628B42563EA2273420F3F1602E496EA1F4B
SHA-256:	4C6170D49F08886D6F912C7B034B36D85A4C5B7F5D58D071FC9DCF179985AEEA
SHA-512:	307D3D8686592F78D3E42C6B347BA1844D468BD74FBDA43330EB1814CFCC3B32644E0F83B00A77AF7475FBA06BB6B7AA7FB3877880AD25AE894AE26281A73BA4
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/8962.d30b6cd1.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8962],{38962:function(u,D,e){function t(u){this.j={},this.jr=[],this.jd=null,this.t=u}e.r(D),e.d(D,{Options:function(){return su},find:function(){return xu},init:function(){return wu},options:function(){return cu},registerCustomProtocol:function(){return yu},registerPlugin:function(){return ku},reset:function(){return vu},test:function(){return Ou},tokenize:function(){return ju}}),t.prototype={accepts:function(){return!!this.t},tt:function(u,D){if(D&&D.j)return this.j[u]=D,D;var e=D,t=this.j[u];if(t)return e&&(t.t=e),t;t=a();var n=o(this,u);return n?(Object.assign(t.j,n.j),t.jr.append(n.jr),t.jr=n.jd,t.t=e\|\|n.t):t.t=e,this.j[u]=t,t}};var a=function(){return new t},n=function(u){return new t(u)},r=function(u,D,e){u.j[D]\|\|(u.j[D]=e)},i=function(u,D,e){u.jr.push([D,e])},o=function(u,D){var e=u.j[D];if(e)return e;for(var t=0;t<u.jr.length;t++){var a=u.jr[t][0],n=u.jr[t][1];if(a.test(D)

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3374)
Category:	downloaded
Size (bytes):	277823
Entropy (8bit):	5.547898416379787
Encrypted:	false
SSDEEP:	3072:iXdwAZVNSNcMzszbI2s8P9CBPIrTWR6cP/IRMfK6St2nBsLq+V3/2BWJl:edwAFMgzbGXo+fK6St+aq+V3/3
MD5:	C1B99077F4792EB8D4253F3A928E9F12
SHA1:	22B9AEC651509901A90C15FFCC600698E2515974
SHA-256:	DDDEEDEB0C3E105059EDD9235A2B114AD873C18F09DDFF4B618209BE9D9D4C33
SHA-512:	608EBA36454D0D5DEC12D094311F7461E7136CE016B3CDF0AE4E5653F8BE3BB516494D9F829468F2C71D30A7159E77B5A71A48418C5833052C92FD677237DCBD
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-55TFBRP&gtm_auth=&gtm_preview=&gtm_cookies_win=x
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"16",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__c","vtp_value":"316390639"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","convert_null_to":"(not set)","convert_undefined_to":"(not set)","vtp_component":"QUERY","vtp_queryKey":"gclid","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_fieldsToSet":["list",["map","fieldN

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17750)
Category:	downloaded
Size (bytes):	17798
Entropy (8bit):	5.372179284987067
Encrypted:	false
SSDEEP:	384:5Qj+1SXV+Vnuc7cmQt/tsX1HQWLFFeG4/SDhhwpPEZqtJsFe/JgZSHCyGTJXJGl3:5Qj+1SXV+VnuOQt/tsX1HQWLFFeG46DK
MD5:	452C028B018AA4ACA02A3893662DA196
SHA1:	A84D695AA4A25275D3B75FA49A616F04BBBA0709
SHA-256:	1626C913D8045C7445634DC56D0DF27A062B1BD6EA63D3F4173696DF4A6F810C
SHA-512:	7D44D7D8F80F74B3EB3729E06E6E615FB25E4DA7AFB6767B2038741DBCB793658CF3CB697EA152F2906111725933DD61792FD901AE4F2805D3D388260D5F1B8C
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9663.4a37fca5.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9663],{42419:function(t,r,n){"use strict";var e=n(64836);r.Z=void 0;var u=e(n(45649)),a=n(80184),c=(0,u.default)((0,a.jsx)("path",{d:"M19 13h-6v6h-2v-6H5v-2h6V5h2v6h6v2z"}),"Add");r.Z=c},67394:function(t,r,n){"use strict";var e=n(64836);r.Z=void 0;var u=e(n(45649)),a=n(80184),c=(0,u.default)((0,a.jsx)("path",{d:"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z"}),"ArrowBack");r.Z=c},88264:function(t,r,n){"use strict";var e=n(64836);r.Z=void 0;var u=e(n(45649)),a=n(80184),c=(0,u.default)((0,a.jsx)("path",{d:"m12 4-1.41 1.41L16.17 11H4v2h12.17l-5.58 5.59L12 20l8-8z"}),"ArrowForward");r.Z=c},4853:function(t,r,n){"use strict";var e=n(64836);r.Z=void 0;var u=e(n(45649)),a=n(80184),c=(0,u.default)((0,a.jsx)("path",{d:"M4 9h4v11H4zm12 4h4v7h-4zm-6-9h4v16h-4z"}),"BarChart");r.Z=c},30821:function(t,r,n){"use strict";var e=n(64836);r.Z=void 0;var u=e(n(45649)),a=n(80184),c=(0,u.default)((0,a.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	250052
Entropy (8bit):	7.978771925753154
Encrypted:	false
SSDEEP:	6144:C7X0+e4BpL7YLw/2RdaxR72Gz4IqizsCbkSo7Uv:OEd4Ms/2zMBJ4Iq0ASo72
MD5:	ABE114F333284511D6E67FC2DF215B24
SHA1:	302405A923FC5615FC8306795822A2F51C62A911
SHA-256:	9856BFE5B5240697C00364934004866514F2E073985B725236322DEB489F08E6
SHA-512:	A83FDD98F354FD1B2366ECA2C20B429B8E821953D50F47CA505AB73B53CE33FF74BF46D8876DA727F1579CCEEDE6AF46EDB29E3895F9ED28463B32D940371CEE
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:ABE415B1C04011E9A748EDCDC7409843" xmpMM:InstanceID="xmp.iid:ABE415B0C04011E9A748EDCDC7409843" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3106
Entropy (8bit):	5.0805450955042755
Encrypted:	false
SSDEEP:	48:EfprP714GU1LYzbW/sjSFEuMB3g9iGyIgasXljGC:epeGs6W/s4k3OgHpGC
MD5:	20E8490FAB0DCF7557A5C8B54494DB6F
SHA1:	285DB746DFC0D43B9CA42F8D65B69C908FF72CA5
SHA-256:	FBE820B6140AD28E86F34FFAE507D807CF591A22697A05B71958F2014E96A9E4
SHA-512:	2B3DA277E8DF9273F672EC262B9700090612A9EF664899C9AC689FB815C708F787FBDC0DDEFE9037ADAA9C8384DE152E53B59EE017918A2E9AD1EB7D81BF90EB
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=2.1.2
Preview:	#cookie-law-info-bar {..font-size: 15px;..margin: 0 auto;..padding: 12px 10px;..position: absolute;..text-align: center;..box-sizing: border-box;..width:100%;..z-index: 9999;../* box-shadow:rgba(0,0,0,.5) 0px 5px 50px; /..display: none;..left:0px;..font-weight:300;..box-shadow: 0 -1px 10px 0 rgba(172, 171, 171, 0.3);.}.#cookie-law-info-again {..font-size: 10pt;..margin: 0;..padding:5px 10px;..text-align: center;..z-index: 9999;..cursor: pointer;..box-shadow: #161616 2px 2px 5px 2px;.}.#cookie-law-info-bar span {..vertical-align: middle;.}../* Buttons (http://papermashup.com/demos/css-buttons) */..cli-plugin-button, .cli-plugin-button:visited {..display: inline-block;..padding: 9px 12px;..color: #fff;..text-decoration: none;..position: relative;..cursor: pointer;..margin-left: 5px;..text-decoration: none;.}..cli-plugin-main-link {..margin-left:0px;..font-weight: 550; text-decoration: underline;.}..cli-plugin-button:hover {..background-color: #111;..color: #fff;..text-decoration: none;

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8757)
Category:	downloaded
Size (bytes):	8805
Entropy (8bit):	5.448853899509552
Encrypted:	false
SSDEEP:	96:GN/9VqH3YZ9wV5lBa25VYwX3vHx3iUYHThSWouXgxYvoSW1oWwJ39/mHXji2/V:UKHIIy25VDX3vHXuNwurWwTYji4
MD5:	59A92D2552801A1A457A170200BA6A8E
SHA1:	EF8F352365FAEC3606CB979DFFEB9CCB38456CB8
SHA-256:	E4C0A66C7753FA26CBFD4068CFAE7CC18B15EF6D2099B22ECCDD805CC1C65268
SHA-512:	34E3D2FA42BCB9AEC278AE6C1B109A56AB28D48A56B07D6590C4EA96298EA13673CE5B11099356D67584E85B92B3EB127898EA28B346F7C5BAF6C9D35730DC05
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1546.b106d597.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1546],{18186:function(e,n,t){t.d(n,{Z:function(){return h}});var r=t(37762),o=t(15671),a=t(43144),i=t(99641),u=t.n(i),s=t(15071),l=t(40946),c=t(30075),d=t(6555),f=t(60677),h=function(){function e(n){var t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:s.ag.locale;(0,o.Z)(this,e),this.form=void 0,this.scrollOnInvalid=void 0;var a=s.ag.locale?{required:(0,f.SS)("validator.required",r),email:(0,f.SS)("validator.email",r)}:{};this.form=new(u())({autoForceUpdate:n\|\|this,locale:d.k$.value,validators:this.customRules(),messages:a}),this.scrollOnInvalid=t}return(0,a.Z)(e,[{key:"customRules",value:function(){return{noNumbers:{message:"The :attribute should not have numbers",rule:function(e,n,t){return t.helpers.testRegex(e,/^([^0-9]*)$/)&&-1===n.indexOf(e)}},passwordConstraint:{message:"The :attribute does not meet requiremen

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	650
Entropy (8bit):	6.106700144095016
Encrypted:	false
SSDEEP:	12:3i0O4lEyQrXwJ9f9w4i5gVgkorvjflgewmorPE3nRsjlyo/8tUZ4U4eXH2tbH796:3i07eXc9Mnd7tgf43RsjlJRZBXWpH56
MD5:	17505393B9802400190F9843B0C1977E
SHA1:	A602C81228AF72DAD3DD055404327AB5FE9EBF69
SHA-256:	93172874F14FC2109DEFB549EFCD800CBAF46AE1D652F9CCF86DEAC6AEF117BA
SHA-512:	AE2FBD2EDEA9F389A478D7B8C9AB4A9D3A265B606DAB7EA5F6EB02FF346DC9027FBC535F8487E7E289E65DBEAF8C6EE5719E5A946DD3EFC25365CFA40135D7B3
Malicious:	false
Reputation:	low
Preview:	GIF89a . ..K.l99n98r<9w>8..F..F..F..F..G..F..G..H..H..I..I..I..H..J..K..L .E$.G/.C .L!.M#.O$.O$.P$.P%.P'.R9 A=#A( R)"T"T,%V3,\CI[4A\7F}HC.O8.P0.P2._4.f).l6.t'.t#.v".v#.v#.w#.w$.x$.x%.x&.y&.y'.z(.z).z).{).{*.}-.}..~...0.;..2..5.7.8.;...............................................................................................................................................................!.....K.,.... . ....K.............K=9?..?2............29B..9..9.B...6........#.....#.F..6......2=......6D............6..!...I.9....?F.....-&....5.........!./j.P.......&.t...."..T.....@.(D".8.....t._..+`..`.....d$.%....+\. Et..k.V.tD..X....;

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1290)
Category:	downloaded
Size (bytes):	1415
Entropy (8bit):	5.477816320484218
Encrypted:	false
SSDEEP:	24:QeUN4LT4A3mZPjRKofqfk6tqn4lUGb0VIBENHIgRcPHR/khc0UlV:QKLcA2ZPjRdfqfvs4lUGbOOENHJRcPHL
MD5:	13020DE5B6B942F4719EB09B520CC483
SHA1:	6E9653C57D386810B5065B5DBA3E0905760D7090
SHA-256:	7C195673D9D1C807F3A065D498821A306331AE2284774D3B2F61A828702451E1
SHA-512:	B6B6AC57BAC9D207A8EEC405AC708FE8540905A5A67DC8D84EE6AC63CF557F51032699EE323D3027BCE4673EEE4C658D688F3CD509C19CFA05BDBCEB88DB2911
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6269.519fb7d7.chunk.js
Preview:	/! For license information please see 6269.519fb7d7.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6269,4765],{66374:function(e,r,n){n(31725);var t=n(93264),o=60103;if(r.Fragment=60107,"function"===typeof Symbol&&Symbol.for){var f=Symbol.for;o=f("react.element"),r.Fragment=f("react.fragment")}var i=t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED.ReactCurrentOwner,a=Object.prototype.hasOwnProperty,c={key:!0,ref:!0,__self:!0,__source:!0};function u(e,r,n){var t,f={},u=null,l=null;for(t in void 0!==n&&(u=""+n),void 0!==r.key&&(u=""+r.key),void 0!==r.ref&&(l=r.ref),r)a.call(r,t)&&!c.hasOwnProperty(t)&&(f[t]=r[t]);if(e&&e.defaultProps)for(t in r=e.defaultProps)void 0===f[t]&&(f[t]=r[t]);return{$$typeof:o,type:e,key:u,ref:l,props:f,_owner:i.current}}r.jsx=u,r.jsxs=u},15671:function(e,r,n){function t(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}n.d(r,{Z:function(){ret

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	27249
Entropy (8bit):	5.102725454034097
Encrypted:	false
SSDEEP:	384:/Lvzx7nLva60vui7HLvdSPkPMTkIbViSQUFatwpJpi8WJi:/LvlLvcrLv4pxVJJpi8Wc
MD5:	359ACA8A88B2331AA34AC505ACAD9911
SHA1:	800A4F56BB87049E1F0D45CF93C4E8EF79144B45
SHA-256:	655AE452D922F501B62C7028FC35E238138DE989387381CC1ED9CEA9085864DB
SHA-512:	694429B843B8BE04FFE5DEBB9DB48F45E02767F4B6AE177A5DF372F9AC26271FC0F969398AFF382DB631EDEA8547CC50F24EB470C21C750D507544D056550702
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=2.1.2
Preview:	.gdpr-container-fluid {..width: 100%;..padding-right: 15px;..padding-left: 15px;..margin-right: auto;..margin-left: auto;.}..gdpr-row {..display: -ms-flexbox;..display: flex;..-ms-flex-wrap: wrap;..flex-wrap: wrap;..margin-right: -15px;..margin-left: -15px;.}..gdpr-col-4 {..-ms-flex: 0 0 33.333333%;..flex: 0 0 33.333333%;..max-width: 33.333333%;.}..gdpr-col-8 {..-ms-flex: 0 0 66.666667%;..flex: 0 0 66.666667%;..max-width: 66.666667%;.}..gdpr-align-items-stretch {..-ms-flex-align: stretch!important;..align-items: stretch!important;.}..gdpr-d-flex {..display: -ms-flexbox!important;..display: flex!important;.}..gdpr-px-0 {..padding-left: 0;..padding-right: 0;.}..modal-backdrop.show {..opacity: .8;.}..modal-open {..overflow: hidden.}...modal-open .gdpr-modal {..overflow-x: hidden;..overflow-y: auto.}...gdpr-modal.fade .gdpr-modal-dialog {..transition: -webkit-transform .3s ease-out;..transition: transform .3s ease-out;..transition: transform .3s ease-out,-webkit-transform .3s ease-out;..-w

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3
Category:	dropped
Size (bytes):	346307
Entropy (8bit):	7.957044026412137
Encrypted:	false
SSDEEP:	6144:d1iLSH5VHCrsLgIxh0kDxx+lyXgyjhsa4Qqz0J+6CSyod2tGjW9jFF6wRRlhS8m7:3sSHeALgNAqz0kXrod2tv976E3S8KT1r
MD5:	5D93275E539032409F4D1BDDBCF9C950
SHA1:	5CC9E9646FC7758B8D6DDCBED4BF48C841862752
SHA-256:	B23126AA54B1FF1170532648C17282D52BFA7E8B21E870A892EE301CE22A48F9
SHA-512:	B0FE079291158C717A387AF3BA55E27E3E217673D151C1F88C7385B9D498BAAB17FA560CDEF87CD52398C965057108DB853983A5477DA9678577CDD42E614343
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:E62B35DDE45611E98056AEA74981DEA1" xmpMM:InstanceID="xmp.iid:E62B35DCE45611E98056AEA74981DEA1" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	650
Entropy (8bit):	6.106700144095016
Encrypted:	false
SSDEEP:	12:3i0O4lEyQrXwJ9f9w4i5gVgkorvjflgewmorPE3nRsjlyo/8tUZ4U4eXH2tbH796:3i07eXc9Mnd7tgf43RsjlJRZBXWpH56
MD5:	17505393B9802400190F9843B0C1977E
SHA1:	A602C81228AF72DAD3DD055404327AB5FE9EBF69
SHA-256:	93172874F14FC2109DEFB549EFCD800CBAF46AE1D652F9CCF86DEAC6AEF117BA
SHA-512:	AE2FBD2EDEA9F389A478D7B8C9AB4A9D3A265B606DAB7EA5F6EB02FF346DC9027FBC535F8487E7E289E65DBEAF8C6EE5719E5A946DD3EFC25365CFA40135D7B3
Malicious:	false
Reputation:	low
Preview:	GIF89a . ..K.l99n98r<9w>8..F..F..F..F..G..F..G..H..H..I..I..I..H..J..K..L .E$.G/.C .L!.M#.O$.O$.P$.P%.P'.R9 A=#A( R)"T"T,%V3,\CI[4A\7F}HC.O8.P0.P2._4.f).l6.t'.t#.v".v#.v#.w#.w$.x$.x%.x&.y&.y'.z(.z).z).{).{*.}-.}..~...0.;..2..5.7.8.;...............................................................................................................................................................!.....K.,.... . ....K.............K=9?..?2............29B..9..9.B...6........#.....#.F..6......2=......6D............6..!...I.9....?F.....-&....5.........!./j.P.......&.t...."..T.....@.(D".8.....t._..+`..`.....d$.%....+\. Et..k.V.tD..X....;

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	28682
Entropy (8bit):	7.9312654025846525
Encrypted:	false
SSDEEP:	384:onngbAnqALtBEzYqe0zV2Jr8fM6i5tIweCQuxYuyx9zFMApmrpcCwKDG9CMRbt8k:onRqAhBEziMVC1CNu8FM8pCwewfYXm
MD5:	668CFFF84E29E3715C842CADABF9E5B8
SHA1:	5F823C869EA2A4D4C68E32C8AE6E63B9F6B9DBF4
SHA-256:	89C2CF75223B7D100F581157EC0EE29943EBA0E9FF4AE824D4691D60B59F9277
SHA-512:	86B3A2FA13709130F39E5D4ACDFB941039CECBFA11B0609C794FD4E0233EAE2CCEA92E39AD278A6E3F8BF8E9F486148C6AF9063E3308DF02B096945ED73EF1DB
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:699A1B62C03C11E9ABF6D9DDD2514968" xmpMM:InstanceID="xmp.iid:699A1B61C03C11E9ABF6D9DDD2514968" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	206209
Entropy (8bit):	5.33335725991734
Encrypted:	false
SSDEEP:	6144:jMVlzA9ldSkWBknwacAuvy7c2IglGz9bX+ZCgbfiWQb9K:jMbtknwacAuvyQ2IglQ9bX+ZCgbfiWQo
MD5:	3637555820FB750DCE8B18BFFEF96A67
SHA1:	D6EAF7A32AEF4A0753A74514F6A947FCFDD4181A
SHA-256:	4948E5C17FCA46386A792444DFD07936A9425076BED99E97C6F0AE7F10AE4A48
SHA-512:	C8DE452C0EF143F5D693F051821C74041CE1C65E199E851AEA9BE57414102C58AC3C432994AC078250252B571756D8A3A74E8E9AF53FE6DCF2C90FB236793D79
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/360.4546c1ba.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[360],{63515:function(e,t,r){r.d(t,{Z:function(){return P}});var n=r(4942),o=r(63366),a=r(87462),i=r(93264),s=r(28182),c=r(94419),l=r(12065),u=r(66934),d=r(31402),f=r(14036),p=r(4841),v=r(46131),m=r(90977),g=r(74223),h=r(80184),b=(0,g.Z)((0,h.jsx)("path",{d:"M20,12A8,8 0 0,1 12,20A8,8 0 0,1 4,12A8,8 0 0,1 12,4C12.76,4 13.5,4.11 14.2, 4.31L15.77,2.74C14.61,2.26 13.34,2 12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0, 0 22,12M7.91,10.08L6.5,11.5L11,16L21,6L19.59,4.58L11,13.17L7.91,10.08Z"}),"SuccessOutlined"),Z=(0,g.Z)((0,h.jsx)("path",{d:"M12 5.99L19.53 19H4.47L12 5.99M12 2L1 21h22L12 2zm1 14h-2v2h2v-2zm0-6h-2v4h2v-4z"}),"ReportProblemOutlined"),y=(0,g.Z)((0,h.jsx)("path",{d:"M11 15h2v2h-2zm0-8h2v6h-2zm.99-5C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zM12 20c-4.42 0-8-3.58-8-8s3.58-8 8-8 8 3.58 8 8-3.58 8-8 8z"}),"ErrorOutline"),C=(0,g.Z)((0,h.jsx)("p

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 190 x 190, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13537
Entropy (8bit):	7.961344152111691
Encrypted:	false
SSDEEP:	384:stVfbTKcSfUFbQPjYgdFoB8Ji9Euea/Rbsf:stVXsfiS9dFK8NQJbsf
MD5:	5BDA2D0CA43FC88D7E4CDA093196BF74
SHA1:	348982763A988486C060054B6E59C3196D7673F6
SHA-256:	0C798F8023078774A654B77C993D7C2CC7FD0CBFB13C25540E19699A2F0564FE
SHA-512:	7C9AE77DF829791DB393EE8A847B60C84801F312D872E7025A7FE03AE03F86F8B04CBD7D687517A7C56001EFFF87DDB6AF0D0C6D93A3DC0F35ED76B951BBFEFE
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/img/index-egalite.png
Preview:	.PNG........IHDR..............t......sBIT....\|.d... .IDATx^..x....7 .4+.v...E..TP..].6..H.)..b..].z.{.lH.DE.p.w.=....SB.}..M....ogfggg..._<..e......................e.......WR..._..k.W..+..L...l...Z.5.7...1z.g...d._.k..2k.W......&F.k.W...4;l.(+......s.._..2.&...Wa...`b.....@So...2>....9..X.....?......Q....}.B,....9..x.....~n1...=.=........~Y.dV.......N<.=...&.2..\|......u.._.0...x.{.g.he...\|..........?+@+k.x.{..5Lfe<....Y.ZY.......a2+.........Z'....e..Y.....~V.V.:..../k...x<.=........~J....)X.".o....h+.o..Io.?&....O.......+M..Y..../.....e..........<...eO_f./....&.`..X/._...L.....O....y<By..PZ......il..?....~V.D'..I.+.......3_z.g....z.g..It...R..:.2..~f..9~V.z'....../=.O.XY...2{.g..It...R..:.2..~f..u...5.N<.S.]._z.....R..?+d.........?.b.^..?u.e.K.......Y.k.x.N.$...?.be...~V...2'..~..J...~..........B..;..O.vI\|.9~...JU......?+dN....$..zU...i../=.3CW..g...w.:...s.$......Y!..~V.D'..I.+.......3_z.g..^...]S...?u.%...I.++U=.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	101366
Entropy (8bit):	5.362867705501542
Encrypted:	false
SSDEEP:	1536:lhcwPREqKkBv/KzdZ6dqBI4d7q5bzuLZ5nj7Ixv4C66x6:7ZBv/wB9q5AUQ
MD5:	406BF9D8FCD8A92BE91D935A2812C71B
SHA1:	4DB7E680663AB74A8D30F152A69A5F30B4692E99
SHA-256:	C8D6510841FCAE30641A3005D2DF512CA95C0847260072364A6D7B172156842F
SHA-512:	7D702BFED6E5FA388B3DA4374319ECE2CAAEBFAAC0D5B942201D36A6BB67957A1E18428AB4F9B5595D2C32B7DBEFE71AF4BE6AE5600DE3D08F8C07B7D81BED8B
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1670.aeebf6fc.chunk.js
Preview:	/! For license information please see 1670.aeebf6fc.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1670,2058],{10937:function(e,t,n){"use strict";n.d(t,{Z:function(){return l}});var r=n(87462),i=n(63366),o=(n(93264),n(11413)),a=n(988),s=n(80184),u=["theme"];function l(e){var t=e.theme,n=(0,i.Z)(e,u),l=t[a.Z];return(0,s.jsx)(o.Z,(0,r.Z)({},n,{themeId:l?a.Z:void 0,theme:l\|\|t}))}},20919:function(e,t){"use strict";var n="function"===typeof Symbol&&Symbol.for;t.Z=n?Symbol.for("mui.nested"):"__THEME_NESTED__"},68023:function(e,t,n){"use strict";var r=n(93264),i=r.createContext(null);t.Z=i},29598:function(e,t,n){"use strict";n.d(t,{Z:function(){return o}});var r=n(93264),i=n(68023);function o(){return r.useContext(i.Z)}},11640:function(e,t,n){"use strict";n.d(t,{Z:function(){return s}});n(93264);var r,i=n(2631),o=n(83361),a=n(80184);function s(e){var t=e.injectFirst,n=e.children;return t&&r?(0,a.jsx)(i.CacheProvider,{value

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	67930
Entropy (8bit):	5.355307584625073
Encrypted:	false
SSDEEP:	768:Tjcd0Er3l9SF1EvIP/5gPEQ1quV6M7j314xLN9Hnhh:TCW5gP5qK62j3MLHn/
MD5:	5BB6B92B6B214F56FD175875E648BCFB
SHA1:	563CFBB674FC0B403FA46C6DEC6E77DB269245F1
SHA-256:	0DEE6B04CA7967380F997D2DDB76CC684CCDBEA0D7151F80BC5520325994CF3E
SHA-512:	DADDA8AA8C06DDD96838B8B8575351242DF1C5D24C0F07CBFFA873DFC7F3E32C8EE8BDC421579D01568193F88CB1BF95950CF8BF90C19682F8653E18FDD6E8EB
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6323.a999228a.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6323],{80959:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var n,r=[["Afghanistan (\u202b\u0627\u0641\u063a\u0627\u0646\u0633\u062a\u0627\u0646\u202c\u200e)","af","93"],["Albania (Shqip\xebri)","al","355"],["Algeria (\u202b\u0627\u0644\u062c\u0632\u0627\u0626\u0631\u202c\u200e)","dz","213"],["American Samoa","as","1684"],["Andorra","ad","376"],["Angola","ao","244"],["Anguilla","ai","1264"],["Antigua and Barbuda","ag","1268"],["Argentina","ar","54"],["Armenia (\u0540\u0561\u0575\u0561\u057d\u057f\u0561\u0576)","am","374"],["Aruba","aw","297"],["Australia","au","61",0],["Austria (\xd6sterreich)","at","43"],["Azerbaijan (Az\u0259rbaycan)","az","994"],["Bahamas","bs","1242"],["Bahrain (\u202b\u0627\u0644\u0628\u062d\u0631\u064a\u0646\u202c\u200e)","bh","973"],["Bangladesh (\u09ac\u09be\u0982\u09b2\u09be\u09a6\u09c7\u09b6)","bd","880"],["Barbados","bb",

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21758)
Category:	downloaded
Size (bytes):	21883
Entropy (8bit):	5.282773406060463
Encrypted:	false
SSDEEP:	384:vbb2RNOPUSG+IubJTzdDMyeVUkn7Toj4u1QRLu0Au5nZ9fs:vbb2RNsG+IubJThNETG16u0Au5nZ90
MD5:	69F5B7F8AC74FD5C21C475F322ED6796
SHA1:	C44C214252F6ED799DE370ADD8BFAB2D2FE5C765
SHA-256:	5EEBA809516C2D63DF3BB387297B10A751F210468391D3A8DA44D88A146D5539
SHA-512:	A317F9E5222B5806A61386E408251A74C138EAFDD4A5E0E1B7E1EDF30D08FF5284BE8D0DC7DBA67AF457969A5B93E1448845C3A749311B14D6F439E08D414CAC
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5730.10b1d522.chunk.js
Preview:	/! For license information please see 5730.10b1d522.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5730],{5849:function(t,n,e){var o=e(4942),r=e(63366),a=e(87462),i=e(93264),s=e(28182),l=e(35735),c=e(94419),u=e(12065),d=e(66934),p=e(31402),f=e(53915),v=e(14036),h=e(91143),m=e(91793),g=e(80184),x=["children","color","component","className","disabled","disableElevation","disableFocusRipple","endIcon","focusVisibleClassName","fullWidth","size","startIcon","type","variant"],y=function(t){return(0,a.Z)({},"small"===t.size&&{"& > :nth-of-type(1)":{fontSize:18}},"medium"===t.size&&{"& > :nth-of-type(1)":{fontSize:20}},"large"===t.size&&{"& > *:nth-of-type(1)":{fontSize:22}})},b=(0,d.ZP)(f.Z,{shouldForwardProp:function(t){return(0,d.FO)(t)\|\|"classes"===t},name:"MuiButton",slot:"Root",overridesResolver:function(t,n){var e=t.ownerState;return[n.root,n[e.variant],n["".concat(e.variant).concat((0,v.Z)(e.color))],

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 230 x 63, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9316
Entropy (8bit):	7.951176591311515
Encrypted:	false
SSDEEP:	192:TIIHUCD4wa3S5wyvBi3hvRIpDcad4M0DzspIGERsIoF6U55HCeZXv:d0wD5wyi9RI3dEUpIwxCM
MD5:	C547E9383AF4FF8E1DB46B95C4E73265
SHA1:	9F6F67142C05D9D2F4B7A2515807283B2A1BB8D7
SHA-256:	210D8F6E9A01A85B07207E34E7D873DCA72608347B21C4841133ED85FBD73443
SHA-512:	85929342F65AF9A3BD51E9844240C4EE8A12D42382770A7882A0733CAF5421175B43BED76DBFE0C4CF6F560A2B85CDF0C32575DD29FDBC7563E7D1B7E07EA27E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?......[.\....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22737)
Category:	downloaded
Size (bytes):	22862
Entropy (8bit):	5.245379130450851
Encrypted:	false
SSDEEP:	384:4X45ZYwndfQMvTblIDEZ+5ldjx7gZqyJ3cL8OqBI3fbXDc8YjYKtcIQ1AvTjti7H:fZY0fqDDZFgYyJ3cLLqBI3TqYKtcIQ1T
MD5:	385215B94EB47C9571F09D2EB9CC3060
SHA1:	99D96F127057953BA8764635CB5CE58209F95931
SHA-256:	0EE0D21F693A4D7AB6E2A18C25EF91A5A12361211C107547FBFAE2BD55FB369C
SHA-512:	AD202D9DD3EDB002E29E5A207E7215AFCDFD1A1A3F05BA1695533283178C0431E3D3FFFF43875236FEF16785B276D123DD9025EA60BE8C1C1D5AACA87334EAF9
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1947.70494fb1.chunk.js
Preview:	/! For license information please see 1947.70494fb1.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1947],{81947:function(t,e,n){n.r(e),n.d(e,{ExitContainer:function(){return ot},Flipped:function(){return rt},Flipper:function(){return nt},spring:function(){return Q}});var i=n(93264),r=n.n(i);function o(t){if(t.constructor!==Array)throw new TypeError("Expected array.");if(16===t.length)return t;if(6===t.length){var e=s();return e[0]=t[0],e[1]=t[1],e[4]=t[2],e[5]=t[3],e[12]=t[4],e[13]=t[5],e}throw new RangeError("Expected array with either 6 or 16 values.")}function s(){for(var t=[],e=0;e<16;e++)e%5==0?t.push(1):t.push(0);return t}function a(t,e){for(var n=o(t),i=o(e),r=[],s=0;s<4;s++)for(var a=[n[s],n[s+4],n[s+8],n[s+12]],l=0;l<4;l++){var p=4l,u=[i[p],i[p+1],i[p+2],i[p+3]],c=a[0]u[0]+a[1]u[1]+a[2]u[2]+a[3]*u[3];r[s+p]=c}return r}var l=function(t){return"number"==typeof t},p=function(t){return"function

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2127)
Category:	downloaded
Size (bytes):	2174
Entropy (8bit):	5.178136070930563
Encrypted:	false
SSDEEP:	48:iLzr78AEmRgAq7QsckhOWGbct0WRuj5pqZyMngV:I1nNTUOK6Ws+ATV
MD5:	144501A64A20860CA013A26711F6B3BF
SHA1:	A3DB70AD6022906484F7376B870BDB92D60EC2C4
SHA-256:	B268F7C6221E0B8F1676F677FB1405355F64BC7526A640BBB1B29747B9390825
SHA-512:	2A83220A3166891A02A21C3F184554F87C5005A0E56F6620D035F4AF745BFC0304EBE186553969889E959F9B94E0FB2E308F192EA0B4652BFD2E466D67A388CA
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/845.87798335.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[845,2764],{845:function(e,t,o){Object.defineProperty(t,"__esModule",{value:!0});var n=function(){function e(e,t){for(var o=0;o<t.length;o++){var n=t[o];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,o,n){return o&&e(t.prototype,o),n&&e(t,n),t}}(),r=function(e,t,o){for(var n=!0;n;){var r=e,l=t,i=o;n=!1,null===r&&(r=Function.prototype);var a=Object.getOwnPropertyDescriptor(r,l);if(void 0!==a){if("value"in a)return a.value;var u=a.get;if(void 0===u)return;return u.call(i)}var c=Object.getPrototypeOf(r);if(null===c)return;e=c,t=l,o=i,n=!0,a=c=void 0}};var l,i=o(36946),a=(l=i)&&l.__esModule?l:{default:l},u={beforeElement:"fullscreenToggle",textControl:"Download video",name:"downloadButton",downloadURL:null},c=function(e){function t(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a cl

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10320
Entropy (8bit):	5.433965591781685
Encrypted:	false
SSDEEP:	192:N7ld7Qo7p7tP7SQlcQjAtqS7lHQYrtNS5l9QuptXSflDQ8PtRS6lmQ1qtAST:NJdUoF15bqwrmvs6FY
MD5:	47FDF407CDC340F709D039C36466D4BF
SHA1:	9ED36968FC42A487EE8B769F27B44EC9A31350DF
SHA-256:	21D41807A34766F4905FA096BAD6F498D5E236D48B3FCD5936200A5DB1847C86
SHA-512:	C32A9F4B90CB12B6DEF5D157958DB3675E29A4104ADCF48218B9358B3C3B47F7067C158DCEA41F984A4A7DD0D89E773A84450DC7D7AE282DC3EBCDF6F1383D61
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Montserrat%3A800%2C200%2C100%2C700%2C300%2C500&ver=5.7.11
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64274)
Category:	downloaded
Size (bytes):	64322
Entropy (8bit):	5.204921089519758
Encrypted:	false
SSDEEP:	768:VaRMoB6KZuLK+Jx4SsK/oGb/FOJIfWKMonpSmZ0DxQxNDF7oMgBB3O+l5hJWWavt:VaRMonk++Jx4SvwORBb0MstfhJWBt
MD5:	27CFDB9446CC6CA8077DF3BF6AC01926
SHA1:	E9D13B46EF101E9C2E8D000BF5085E08FEE26C2B
SHA-256:	2920AA2311A67D28E2BB8C98BC2919BF0D3D2FBB71651D3D508597A3A3228D76
SHA-512:	E721FAD5E1BD63EC3CC519C6849FABD9FD502CAB5BF9CD50819EE5F6498052CDBAC915F64B9EF42568167CAECC2C03F620261DDC8F376EB1B8015FEB8D89FE24
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1807.3e4cf805.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1807],{61807:function(e){var t,r={DEBUG:!1,LIB_VERSION:"2.47.0"};if("undefined"===typeof window){var i={hostname:""};t={navigator:{userAgent:""},document:{location:i,referrer:""},screen:{width:0,height:0},location:i}}else t=window;var o=Array.prototype,n=Function.prototype,s=Object.prototype,a=o.slice,c=s.toString,p=s.hasOwnProperty,u=t.console,_=t.navigator,h=t.document,l=t.opera,f=t.screen,d=_.userAgent,g=n.bind,m=o.forEach,y=o.indexOf,v=o.map,b=Array.isArray,k={},x={trim:function(e){return e.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}},w={log:function(){if(r.DEBUG&&!x.isUndefined(u)&&u)try{u.log.apply(u,arguments)}catch(e){x.each(arguments,(function(e){u.log(e)}))}},warn:function(){if(r.DEBUG&&!x.isUndefined(u)&&u){var e=["Mixpanel warning:"].concat(x.toArray(arguments));try{u.warn.apply(u,e)}catch(t){x.each(e,(function(e){u.warn(e)}))}}},error:function(){if(r.DEBUG&&!x.is

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5038)
Category:	downloaded
Size (bytes):	5163
Entropy (8bit):	5.254605431055514
Encrypted:	false
SSDEEP:	96:snlmUuaIhPDw1EUtFbJWeZ4GGqZCJzhuqZpfdQEBdrLxHXQLV:snl4h6nVceyDJzhuofmELJQh
MD5:	203D79B1325AB9A0E5D9269702C3EAFA
SHA1:	E54CC66C5C453CC702955C21C82200D018ECCEBA
SHA-256:	B94FFDDA5445200C7417F947E373B32478035D9E3D9E9D3D997FB189F195D2A4
SHA-512:	A2D6AAFCEB7005E9DE6DB2B5533301DC0E7F1D97B13E5A028584885574D0B05C402BC19CA7F749E6BCA1617587884F68368370D1AD2960C897F675FBBC612A3E
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6022.d967874c.chunk.js
Preview:	/! For license information please see 6022.d967874c.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6022,7250],{36022:function(e,t,n){n.r(t),n.d(t,{HttpLink:function(){return c},createHttpLink:function(){return a}});var r=n(3431),o=n(58296),i=n(4173),a=function(e){void 0===e&&(e={});var t=e.uri,n=void 0===t?"/graphql":t,a=e.fetch,c=e.includeExtensions,u=e.useGETForQueries,s=(0,r._T)(e,["uri","fetch","includeExtensions","useGETForQueries"]);(0,i.checkFetcher)(a),a\|\|(a=fetch);var l={http:{includeExtensions:c},options:s.fetchOptions,credentials:s.credentials,headers:s.headers};return new o.ApolloLink((function(e){var t=(0,i.selectURI)(e,n),c=e.getContext(),s={};if(c.clientAwareness){var f=c.clientAwareness,p=f.name,h=f.version;p&&(s["apollographql-client-name"]=p),h&&(s["apollographql-client-version"]=h)}var d,y=(0,r.pi)({},s,c.headers),v={http:c.http,options:c.fetchOptions,credentials:c.credentials,headers

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22967)
Category:	downloaded
Size (bytes):	23015
Entropy (8bit):	4.760789729055638
Encrypted:	false
SSDEEP:	384:6lLkyOcWT5VR/E5w8tZ5w9305wTi5wGkCDQo2z:6lLky/WT5VR/E5w8tZ5w9305wTi5wGk/
MD5:	2979091D37B96183BE3820F40E381876
SHA1:	307F845D605BBB13360C3925916BC49C1B391600
SHA-256:	4FA00AB4E121EEB2513CECEC44B46573F8AAB2FF3B99A1BB48F016C29671F1EC
SHA-512:	7566389FAA343C7EE13D1ED6CFF4D19F5C332BAB09173AA070FB5B7EB5CEC9FF2719CB63EC55690BB070DBC133CD770EAD41947DE44EF651519DC78492F4109D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7982.b17092ad.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7982],{59320:function(n,e,t){t.d(e,{SY:function(){return i},Vi:function(){return a},gB:function(){return o}});var r=t(17926),a="\n collaborators {\n id\n collaboratorType\n email\n firstName\n lastName\n photo\n }\n",o="\n id\n lastActivityAt\n name\n updatedAt\n visibility\n collaborators {\n id\n collaboratorType\n email\n firstName\n lastName\n photo\n }\n tasks {\n ".concat(r.D,"\n }\n"),i="\n id\n name\n updatedAt\n tasks {\n dueDate\n milestone\n status\n }\n"},17926:function(n,e,t){t.d(e,{D:function(){return r}});var r="\n id\n conversationThreadsCount\n createdAt\n description\n dueDate\n milestone\n name\n parentTaskId\n previousTaskId\n revision\n status\n updatedAt\n updatedById\n updatedByType\n owners {\n ownerId\n ownerType\n }\n requester {\n email\n firstName\n lastName\n

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18965)
Category:	downloaded
Size (bytes):	19013
Entropy (8bit):	5.3367981281343155
Encrypted:	false
SSDEEP:	192:z2r0PtpgYbTIFqAZCEDYmCZiIr8r+fVIzLvvDb8wQF8vRG3j6aPKE4DWISV3HxK6:bp42isfu3vPBQ+Y+a3iPUIReB
MD5:	A8FF668002448140B68B9DAA0A34E93C
SHA1:	1C77D9CAF93D7A23F2E44DE377AB806D79E58AD1
SHA-256:	2FE3D9D21657C1EA5DC5198465BB1B901CF822A787EF5D0B5609E9D9621EA637
SHA-512:	DA2548F1CC69A9B0A01FAC34CA246EE66603165574A1755EC2777C95003B6F4D1F17C183166D59764A1B7775E0EB9006D50E80D10F40DEB360966528186888C3
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4200.58d81098.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4200],{85239:function(t,e,n){var r,o,i,l,a,c,s,u,d=n(30168),f=n(63366),v=n(87462),h=n(93264),b=n(28182),m=n(2631),p=n(94419),S=n(61572),w=n(12065),g=n(66934),Z=n(31402),x=n(88813),C=n(80184),y=["animation","className","component","height","style","variant","width"],B=(0,m.keyframes)(a\|\|(a=r\|\|(r=(0,d.Z)(["\n 0% {\n opacity: 1;\n }\n\n 50% {\n opacity: 0.4;\n }\n\n 100% {\n opacity: 1;\n }\n"])))),M=(0,m.keyframes)(c\|\|(c=o\|\|(o=(0,d.Z)(["\n 0% {\n transform: translateX(-100%);\n }\n\n 50% {\n /* +0.5s of delay between each loop */\n transform: translateX(100%);\n }\n\n 100% {\n transform: translateX(100%);\n }\n"])))),k=(0,g.ZP)("span",{name:"MuiSkeleton",slot:"Root",overridesResolver:function(t,e){var n=t.ownerState;return[e.root,e[n.variant],!1!==n.animation&&e[n.animation],n.hasChildren&&e.withChildren,n.hasChildren&&!n.width&&e.fitContent,n.hasChil

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	17266
Entropy (8bit):	7.6738918737770465
Encrypted:	false
SSDEEP:	384:onnMNJKbsUbo42ZsCm6XrrMXkNSsL7+6I2h88Qu:onFZb7Ys7nkYC+J4Ku
MD5:	01CA03CAFCBC33B7E87055B556C98593
SHA1:	8AD57F3125D20C5C47F56FB10E53F891B33B1640
SHA-256:	101867CA4FF48AB5665E81222699AB9CA8C204ECB59F4A43DDD0D61A78EB2C31
SHA-512:	6C161226E19BCAB56287906596A5768D46133AA7007038BB18FA13213A63CF89F3401AEE1AF74F37E2417AEC6EA4FAC392D5BFDFB36987CA51569A486B487FC6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:1C31EB43C04211E9BB92C1AA7AA83E4E" xmpMM:InstanceID="xmp.iid:1C31EB42C04211E9BB92C1AA7AA83E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	969
Entropy (8bit):	5.956810590779162
Encrypted:	false
SSDEEP:	24:z1hpunQWwjx82lY2T32HEVZ34tayJ3VZRB3fGbclrst8X:5itNn2VbQhJ3d9fRsmX
MD5:	030604ED0C16A1233778E3971F595EB1
SHA1:	DCC4B07A8A2BD42574D31F3556EF8DB665438983
SHA-256:	1C998F7BEEAA032DB47AF29A4BB87CC3C9CBB9550AB553991D33DD8E9E4762EB
SHA-512:	A55B695C74F5A494CB497453C54199A7BBDB6340A88AEC94069D56DD1618587DE46C57BB2E15DE1668BBF98A3D65C8974FD5856E74965B98671547541C8038DE
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/img/menu.png
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:295F3FAEC67011E9BA2DE712508B318B" xmpMM:DocumentID="xmp.did:295F3FAFC67011E9BA2DE712508B318B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:295F3FACC67011E9BA2DE712508B318B" stRef:documentID="xmp.did:295F3FADC67011E9BA2DE712508B318B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9>.....?IDATx.b...?.@.&......Z<.,f..t.?......E.h..M.A=..GS.hP.Z<r,..0..M....Q.....IEND.B`.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24282)
Category:	downloaded
Size (bytes):	24330
Entropy (8bit):	5.298933026157092
Encrypted:	false
SSDEEP:	384:BoymF5monoAlfJqAGMPOIbTR7QCKJyQEG/pQ3rXdcNBmbKVLOwoV1Nnu10BTFRYc:zmXmonNlRqhMmgTBKJVu3rXdcNU2aw41
MD5:	E8A0E38773C9055F3DDE938B1114FE0D
SHA1:	BC1D951EE7CA01FDDDAD16439E99B54D7D99268B
SHA-256:	5DC41B3397F2B1D9AD6A04A64D3935383E84728409D4D724853F5B8188B5328B
SHA-512:	420F426C324AF22AE277B85162C678F67260C1DC1544EC32948CD001E917F8E287DAB39F3F5F74C0757F36F0D0ADDE0CFFB614F17035702A8CD306DD59786F6A
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/8447.4979ef99.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8447],{41:function(e,t,n){n.d(t,{Z:function(){return Ue}});var r=n(87462),o=n(63366),i=n(29439),a=n(93264),s=n(6117),f=n(62876),p=n(84913);function c(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function l(e){return e instanceof c(e).Element\|\|e instanceof Element}function u(e){return e instanceof c(e).HTMLElement\|\|e instanceof HTMLElement}function d(e){return"undefined"!==typeof ShadowRoot&&(e instanceof c(e).ShadowRoot\|\|e instanceof ShadowRoot)}var m=Math.max,h=Math.min,v=Math.round;function y(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function b(){return!/^((?!chrome\|android).)*safari/i.test(y())}function g(e,t,n){void 0===t&&(t=!1),void 0===n&&(n=!1);var r=e.getBoundingCli

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14719)
Category:	downloaded
Size (bytes):	14767
Entropy (8bit):	5.111873348478559
Encrypted:	false
SSDEEP:	192:35pxcPrhnTWmRgUOr54IjX5B7dAaIs63ftx3sRF0do/vXaympxVJr3:3wWvUO+IFBhHg80W3Ypt3
MD5:	A293956F226F716CBC9C2327477DCCD2
SHA1:	9F24FB87E180616FE330BA017F1F388CD30995EE
SHA-256:	7FCEF2389631378BB941E8BCB958AC04D5A0EFE9E269A9A64DB83FD148633D3A
SHA-512:	275786FC40ED3E32E6A2DF16359BDD174D0CE46D6F816FEE250560FBBC92705B7E48DF3B0D405093F231B8E1AF6506DFF727B3D61E5920187BA6447040978D62
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9687.f2dfe077.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9687],{49687:function(n,e,t){"use strict";t.r(e),t.d(e,{Editor:function(){return S}});var o=t(93264),r=t(52007),i=function(){return i=Object.assign\|\|function(n){for(var e,t=1,o=arguments.length;t<o;t++)for(var r in e=arguments[t])Object.prototype.hasOwnProperty.call(e,r)&&(n[r]=e[r]);return n},i.apply(this,arguments)},a={onActivate:r.func,onAddUndo:r.func,onBeforeAddUndo:r.func,onBeforeExecCommand:r.func,onBeforeGetContent:r.func,onBeforeRenderUI:r.func,onBeforeSetContent:r.func,onBeforePaste:r.func,onBlur:r.func,onChange:r.func,onClearUndos:r.func,onClick:r.func,onContextMenu:r.func,onCommentChange:r.func,onCopy:r.func,onCut:r.func,onDblclick:r.func,onDeactivate:r.func,onDirty:r.func,onDrag:r.func,onDragDrop:r.func,onDragEnd:r.func,onDragGesture:r.func,onDragOver:r.func,onDrop:r.func,onExecCommand:r.func,onFocus:r.func,onFocusIn:r.func,onFocusOut:r.func,onGetContent:r.func,onHide:r.func,onInit

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2581
Entropy (8bit):	5.000511767650486
Encrypted:	false
SSDEEP:	48:cYAvf3ReY7LLebkVqJ4bkj9JCjwAj3RMbcIRMOPLvsMTnL5j:SvfBese4u44jD+MbcaMOPFj
MD5:	14E20D4517F51DEEEA04DB311CD027CE
SHA1:	C50AAC2F5123A7F16B71B3C286C1ECA39514B9DC
SHA-256:	FAB005DE52CE54D75F373C5A020E7DDD194CAEA5B4BF6E87886196E5D4451ADC
SHA-512:	B41502B8ADA528D4A8C28F969E8D9C789DBA6D6A2E70F755F355522ECFC2935F615EA275764F2728F53CA20A81BA031C114FCD1CD27FFA505CCC61996159E182
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 60" style="enable-background:new 0 0 300 60;" xml:space="preserve">.<style type="text/css">...st0{fill:#404041;}...st1{fill:#0056A7;}...st2{fill:#2E3191;}.</style>.<g>..<path class="st0" d="M22.3,11.5C32.2,11.5,39.6,17,42,26H30.9c-1.7-3.6-4.9-5.3-8.7-5.3c-6.2,0-10.5,4.6-10.5,12s4.3,12,10.5,12...c3.8,0,7-1.8,8.7-5.3H42c-2.4,9-9.8,14.5-19.7,14.5C10,53.8,1.4,45.1,1.4,32.6S10,11.5,22.3,11.5z"/>..<path class="st0" d="M62.2,54c-9.7,0-17-6.5-17-17s7.5-17,17.2-17c9.7,0,17.2,6.5,17.2,17S71.9,54,62.2,54z M62.2,45.2...c3.6,0,7-2.7,7-8.2c0-5.6-3.3-8.2-6.9-8.2c-3.7,0-6.9,2.6-6.9,8.2C55.5,42.5,58.5,45.2,62.2,45.2z"/>..<path class="st0" d="M99.7,54c-9.7,0-17-6.5-17-17s7.5-17,17.2-17c9.7,0,17.2,6.5,17.2,17S109.4,54,99.7,54z M99

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 33, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6171
Entropy (8bit):	7.9300518406801785
Encrypted:	false
SSDEEP:	96:FGllcHitlIxv9vk7C1+I4wWHLihk/xZSOnMHQLx2rQarOmi6GpFT6Lbimnho7qw9:FFIIHUCD4wa3SOMHin0OFTuVXVg7
MD5:	9AD5CED7E2BEE87CAF29B9B881685D3F
SHA1:	8BF780FFB0D886C5BEDDDC208A805D91A67B36F7
SHA-256:	D6D66E6E98E55B3B9EC48279883527E4BE7F48A7F8057E6E081CCEE5EE881E6E
SHA-512:	5C7B689BE552E150F4FBB69687CD7E760DABE17BFDFA669F22BAA10BF5EA7A1CAB820F72AA09B0D457761ADA4FEED91FE59AB81603BDF6FF4F4658AA96DB545D
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-regionalexpress-mobile.png
Preview:	.PNG........IHDR...x...!.......o.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	109981
Entropy (8bit):	5.487407137545899
Encrypted:	false
SSDEEP:	1536:nRdXBDzHAtHA1ouHrAfPf/y8OFH2nxhBmesufuypYB+ZM84gBkwxcesHe:7G5AGVi8kumI8H89kFes+
MD5:	0E7D35D0A16D58BC964331EBDE7080C8
SHA1:	99EB8912754E636B154361B81A88FF77D35AB27C
SHA-256:	BC82765BAA9D94ACD08885EA8226A95335308651639C0A803D0176E0F7CC8DC2
SHA-512:	0AE15421819BDDDA17BAE57E368B857DC5226303BB09EE698642CACE6B1E4209CCB9D75108B4B5E073ED93A85670471A436AFC0CE95D26CE41D69108AF4AC98B
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9348.cd3170fe.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9348],{95002:function(e,n,t){t.d(n,{Z:function(){return Pe}});var r=t(29439),i=t(93264),o=t.n(i),a=t(12408),u=t(37929),s=t(61210),c=t(28849),l=t(63914),d=t(97400),E=t(2462),f=t(1413),v=t(52809),p=t(77976),m=t(93433),h=t(83854),g=t(96750),T=t(40866),R=t(45130),_=t(80184),S=(0,i.lazy)((function(){return Promise.all([t.e(1660),t.e(2599),t.e(8912),t.e(1349),t.e(3018),t.e(7700)]).then(t.bind(t,97700))})),O=o().lazy((function(){return Promise.all([t.e(9641),t.e(1546)]).then(t.bind(t,41546))})),I=(0,i.lazy)((function(){return Promise.all([t.e(1660),t.e(2599),t.e(9641),t.e(9724),t.e(8912),t.e(1349),t.e(3018),t.e(5550),t.e(169)]).then(t.bind(t,50169))})),N=(0,i.lazy)((function(){return Promise.all([t.e(9641),t.e(736)]).then(t.bind(t,20736))})),A=o().lazy((function(){return Promise.all([t.e(1660),t.e(9641),t.e(8912),t.e(2927),t.e(5577)]).then(t.bind(t,85577))})),C=(0,i.lazy)((function(){retu

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11090)
Category:	downloaded
Size (bytes):	11138
Entropy (8bit):	5.143971226436617
Encrypted:	false
SSDEEP:	192:otPnTXW3q0MiILSa4WJWkCpD+eUOY/uqPxdtMNs:cPqjMXFZpCGOJqZdx
MD5:	6A6E40F6D8135407350FBBACFCDC1B80
SHA1:	2B1F0449B50ECE864AE1F4002304844F5D1AA80B
SHA-256:	A7E30EC92350E09D4B454DB4BBA85456976AE0503CF71AF0CDE532E1616C7463
SHA-512:	27039CB588A688DFA807F382BC4480C7D6135266FFD8CD154A7C49B369AABE7D2DA6D70A37CFDBFF115240A2D09EEDFFB013258175FC2BFCBE364E4B67F8D126
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1239.da3f3802.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1239],{41239:function(e,t,n){n.r(t),n.d(t,{BrowserRouter:function(){return q},HashRouter:function(){return z},Link:function(){return G},MemoryRouter:function(){return s},NavLink:function(){return J},Navigate:function(){return f},Outlet:function(){return v},Prompt:function(){return Q},Route:function(){return h},Router:function(){return p},Routes:function(){return d},createRoutesFromArray:function(){return R},createRoutesFromChildren:function(){return E},createSearchParams:function(){return Y},generatePath:function(){return I},matchPath:function(){return $},matchRoutes:function(){return P},resolvePath:function(){return M},useBlocker:function(){return _},useHref:function(){return W},useInRouterContext:function(){return m},useLocation:function(){return g},useMatch:function(){return B},useNavigate:function(){return y},useOutlet:function(){return b},useParams:function(){return K},useProm

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2165)
Category:	downloaded
Size (bytes):	189573
Entropy (8bit):	5.524662574527749
Encrypted:	false
SSDEEP:	3072:LIAZVNSNcMzsz5GL8T9CBPIrTW7teMfh6St2nBsLqQ1w4t:8AFMgzUhfh6St+aqQ1wK
MD5:	6C0A99210C52CD8173715EFA42FF5A5E
SHA1:	7D2595F707F388024BA1048D9610D92CB387B0AA
SHA-256:	0845F40C3636CA9E75567CA6E890C1B0E4AB2B477BA28EAB4642F7EC0D8B10AD
SHA-512:	B92A77943EDB4FE4C8AD003019579BF983F90F31F6FE1803610A1EF84CD9C88733F66377FDE45892F95D232A0028CA786E6271A373FF3B9ADB3779D3364FB61B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-150750521-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}..,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ea=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"o

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32223)
Category:	downloaded
Size (bytes):	32271
Entropy (8bit):	5.364721571691385
Encrypted:	false
SSDEEP:	768:Lfj9hJzgbszkExZ4IvNUDJl3eazYn26Ysg:DJhJz3ZBcl3Xdl
MD5:	CA16263C79259FCBAF643D5CEFEA14E2
SHA1:	D505D12508C4F48DF3B29DEC4F61C6F27E4AE7BB
SHA-256:	6CC4528A642AB96F4D334AFD4F58648CDABA6A6595F0C33E95EEF7F30406E4F0
SHA-512:	C2686AE0254CDF3F8870A0110FC9F9E2CC2CC3B3A9E23F3E6C9EC1F249E1786419E6816D3E11C8D9FE8B38E81F813EF340172F0543D2ECA561E7C8574AA77B87
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1744.32cea325.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1744],{84506:function(e,t,n){n.d(t,{Z:function(){return s}});var r=n(83878),o=n(59199),i=n(40181),a=n(25267);function s(e){return(0,r.Z)(e)\|\|(0,o.Z)(e)\|\|(0,i.Z)(e)\|\|(0,a.Z)()}},91744:function(e,t,n){n.r(t),n.d(t,{Axios:function(){return et},AxiosError:function(){return tt},AxiosHeaders:function(){return lt},Cancel:function(){return st},CancelToken:function(){return ot},CanceledError:function(){return nt},HttpStatusCode:function(){return dt},VERSION:function(){return it},all:function(){return at},default:function(){return Ye},formToJSON:function(){return pt},getAdapter:function(){return ht},isAxiosError:function(){return ut},isCancel:function(){return rt},mergeConfig:function(){return mt},spread:function(){return ct},toFormData:function(){return ft}});var r={};function o(e,t){return function(){return e.apply(t,arguments)}}n.r(r),n.d(r,{hasBrowserEnv:function(){return ue},hasStandard

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5740)
Category:	downloaded
Size (bytes):	5788
Entropy (8bit):	5.069691540790218
Encrypted:	false
SSDEEP:	96:/F3HCBXx6k4P8ummVBDl15kiGc2cwc58fGheDD+VGttkdGxXMcxLpGPGV:/VCBXx6fE8HDl15hDBDUDt+EiaMPC
MD5:	5FE5C83090D8DFB65818730A903F9073
SHA1:	A2B93CC067A83B116B04AF583716860AE4E4AEFB
SHA-256:	2E192A34B1DF020DC1E17D5439FB475CD5D8A3BD46C71A319FFD5BDD6C0EE88F
SHA-512:	630550E9165311EF201F4A83E52475E256E3A2C9FAFE37E2A4F84F67544DD5E95E1ED322F5037CBBBDD7A3D68E0C975C188E805E2AE47A54D99A7AE9589C659A
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4799.24810307.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4799],{44799:function(e){e.exports=function(){var e=[],a=[],i={},s={},r={};function o(e){return"string"===typeof e?new RegExp("^"+e+"$","i"):e}function t(e,a){return e===a?a:e===e.toLowerCase()?a.toLowerCase():e===e.toUpperCase()?a.toUpperCase():e[0]===e[0].toUpperCase()?a.charAt(0).toUpperCase()+a.substr(1).toLowerCase():a.toLowerCase()}function n(e,a){return e.replace(/\$(\d{1,2})/g,(function(e,i){return a[i]\|\|""}))}function l(e,a){return e.replace(a[0],(function(i,s){var r=n(a[1],arguments);return t(""===i?e[s-1]:i,r)}))}function u(e,a,s){if(!e.length\|\|i.hasOwnProperty(e))return a;for(var r=s.length;r--;){var o=s[r];if(o[0].test(a))return l(a,o)}return a}function c(e,a,i){return function(s){var r=s.toLowerCase();return a.hasOwnProperty(r)?t(s,r):e.hasOwnProperty(r)?t(s,e[r]):u(r,s,i)}}function h(e,a,i,s){return function(s){var r=s.toLowerCase();return!!a.hasOwnProperty(r)\|\|!e.hasOwnProperty(

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	downloaded
Size (bytes):	4784
Entropy (8bit):	7.713247981791946
Encrypted:	false
SSDEEP:	96:FwClEuB6knygHGJAQuf33PfGcYFjbsMcZS8Mj7fsQo9JWnhJnjASUQ78/QuyrE:FHl7EknyAnfYJQMUQMYHjAHQtE
MD5:	5CC79C2222FB90C001165448B0C7AD47
SHA1:	E889248DC440AB3A1132A2160D7C176F8C34FFE7
SHA-256:	9AE8ACC63F34D9136C13B10A3D81A5762CE03753B0D3A2E676C35085167FC05A
SHA-512:	304FDBC24A3ECF759F1D30FED224CAD3DEB969294073A120E03CB3EA3F0EA98031F88A75AE9648CEFCBB1E04EBE8D7DC57F648DAC72E7AD163E30203C461C9C9
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SOL-tournee.gif
Preview:	GIF89a..}.....................kf.ZSyyt.B;g....\|+.......Y....gi....:...K`Z....#.M+#T.C...2*Y...........n+.T................\|..I...........f..lHBl<5c...\|.c^....TNv..`.....3.................u.x%...YGf.........O0.kK...wXd.N..............NGq.........w$....................rm.......r'.h[....nB70^.~/...................z(...............................p.........>..............F.v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8360)
Category:	downloaded
Size (bytes):	8408
Entropy (8bit):	5.189779867827501
Encrypted:	false
SSDEEP:	96:gFN1QgB+ZKZ6TnlTlXrZrlNpAuZ55qZi8G53Z6ZIsqZEFZgqZGUM7xLb18BcU0B5:sQgSLTb5HXuwfv7tb18B2mJaMXJPM
MD5:	A31592D455BBA74D0002CDEF7D35FC1F
SHA1:	1DFE86B79242DF382B54BC8A092737C1F6DB48CF
SHA-256:	F7965DAE031A99E4243015C585F8B50CDA96CAC2355C5B7EF1646CA9B878ADEC
SHA-512:	FD86945E501716E7EE5ED760957D14D947B826D5D0C7237BE5F810903553A2B079DE739DF23C862A12979488E314A57074D9840492DC4A4A98C838AA3F7A5CBD
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5043.6d69264d.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5043],{1426:function(e){var n,t,i=e.exports={};function r(){throw new Error("setTimeout has not been defined")}function o(){throw new Error("clearTimeout has not been defined")}function u(e){if(n===setTimeout)return setTimeout(e,0);if((n===r\|\|!n)&&setTimeout)return n=setTimeout,setTimeout(e,0);try{return n(e,0)}catch(t){try{return n.call(null,e,0)}catch(t){return n.call(this,e,0)}}}!function(){try{n="function"===typeof setTimeout?setTimeout:r}catch(e){n=r}try{t="function"===typeof clearTimeout?clearTimeout:o}catch(e){t=o}}();var c,a=[],f=!1,s=-1;function l(){f&&c&&(f=!1,c.length?a=c.concat(a):s=-1,a.length&&p())}function p(){if(!f){var e=u(l);f=!0;for(var n=a.length;n;){for(c=a,a=[];++s<n;)c&&c[s].run();s=-1,n=a.length}c=null,f=!1,function(e){if(t===clearTimeout)return clearTimeout(e);if((t===o\|\|!t)&&clearTimeout)return t=clearTimeout,clearTimeout(e);try{return t(e)}catch(n){try{return t.call(n

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1000, components 3
Category:	dropped
Size (bytes):	688121
Entropy (8bit):	7.981881087122165
Encrypted:	false
SSDEEP:	12288:zS3oDHhEQRN9sDRXGsXaes0fPsqYTREbLoNnT1O5MqERQkuOMdxjEpnl09Y:pBEWyRWyaes0fPsqnoNnT8KqERQkvKx2
MD5:	F9C1520B9A838F74303512049BE42FFC
SHA1:	2DE192A2E8AB27CE3380D8CF28953EE2D4FF516F
SHA-256:	CB6D83B7135AB9635DF84A24767D58E3DD1C5C605B99CE7B6854EB61FB49E8A1
SHA-512:	660146ACD7CEB0C8DE0A380A0AC72972D6C17FFEEEF822F8EFCBC10AD7E9E09336DF7C4C79C7B4D5843420D295931E78737FF44D93FAF775EA568426014F31FF
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:3CA13818881E11ECAFABBF2A33905101" xmpMM:InstanceID="xmp.iid:3CA13817881E11ECAFABBF2A33905101" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9E6E82DA7D2068118C14AC77749785A4" stRef:documentID="adobe:docid:photoshop:032405d1-0

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.862247089271358
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAFk+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEcE3KonR3evtTA8h1mLrwUnG
MD5:	505792F973960D2D593DC92B47B13D6B
SHA1:	E04C188C9FD4D33A54D456B708E2378165487764
SHA-256:	358B4F736033AC2DEFC2B624402580DB4F8C3DEF36EB031E26ADC4D038DE40B8
SHA-512:	26911075A37BABD7F2BD5E185BB17B07E9ECBEDD2F296777785869EFF749E26CE7B604B01768F4277FA6DD2032199819656C3447944DBF6FB228A5742294DE58
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&ver=3.0
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21526)
Category:	downloaded
Size (bytes):	21573
Entropy (8bit):	5.284442060791546
Encrypted:	false
SSDEEP:	384:lFhrhAcT+AQoxht4UnkbA1YekC4rrCwBCxRYLo+h7WoAwF:JDiHoxniSYekC4rrCwBCrYhh7WoAO
MD5:	BEACB749456E7D0C3D900F45CDD53F4C
SHA1:	75344EA4113DFC7CBCFA6EE998CA0AD644E4F6DE
SHA-256:	AB090BC21E9B9BDC609B706B9EFBB540AF059DDCF09A8A448FEBEDCB17ADC9C1
SHA-512:	0ECCDA4ACC1FD308C34872FF20202971DE859003710AE7DC21434B2C3D4AA00E7877D74E97478160B2455EA6E9AB4786FE07B124259189814CDAF181664FC936
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/788.ed998e8a.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[788],{69998:function(e,n){"use strict";n.Z=function(e,n){if(e&&n){var t=Array.isArray(n)?n:n.split(","),r=e.name\|\|"",o=(e.type\|\|"").toLowerCase(),i=o.replace(/\/.$/,"");return t.some((function(e){var n=e.trim().toLowerCase();return"."===n.charAt(0)?r.toLowerCase().endsWith(n):n.endsWith("/")?i===n.replace(/\/.*$/,""):o===n}))}return!0}},80888:function(e,n,t){"use strict";var r=t(79047);function o(){}function i(){}i.resetWarningCache=o,e.exports=function(){function e(e,n,t,o,i,a){if(a!==r){var c=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw c.name="Invariant Violation",c}}function n(){return e}e.isRequired=e;var t={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:n,element:e,elementType:e,instanceOf:n,node:e,objectO

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (401)
Category:	downloaded
Size (bytes):	6113
Entropy (8bit):	5.153597475277739
Encrypted:	false
SSDEEP:	96:jORdxb29j5oNJ1diJovHyIjJOIKLCRF4USzaYq3xC:jORdxbkiuovd1vn1C
MD5:	26B4F0C3C1BCF76291FA4952FB7F04FB
SHA1:	E5F3D41D8DBE3C4A2B36CF9CB4722496E7D6797E
SHA-256:	2E2F2336B5E6698B628AFC75FA9A24C67B73D5872C1D4AF99CA436064F636EE0
SHA-512:	71344B835254337BBF46692BB5C7E0AA0E3EA1DC0CAD1737C99BE96BB4350A469F0FC0AE1E0BE510331747FE21C74E0C99F37BBBDB65ABE0AEFC3F55BB57C9BE
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-table.css?ver=2.1.2
Preview:	/*. Responsive table courtesy of Mark Wiltshire: mark@bamboorocketapps.com (thanks!).. For more styles try: http://icant.co.uk/csstablegallery/. ----. Generic styles:. Here you could e.g. customise width of column 1 and 2,. or add a generic roll-over effect on table rows./..cookielawinfo-column-1 {width: 25%;}..cookielawinfo-column-2 {width: 10%;}..cookielawinfo-column-3 {width: 15%;}..cookielawinfo-column-4 {width: 50%;}../** Simple style /..cookielawinfo-simple thead {width: 100%;}..cookielawinfo-simple td {padding: 5px 5px 5px 0;vertical-align: top;}..cookielawinfo-simple thead th {padding-right: 10px;text-align: left;}../* Modern style */..cookielawinfo-modern {border: 1px solid #e3e3e3;background-color: #f2f2f2;width: 100%;border-radius: 6px;-webkit-border-radius: 6px;-moz-border-radius: 6px;}..cookielawinfo-modern td, .cookielawinfo-modern th {padding: 5px;color: #333;}..cookielawinfo-modern thead {font-family: "Lucida Sans Unicode", "Lucida Grande", sans-serif;padding: .2em

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	dropped
Size (bytes):	4440
Entropy (8bit):	7.654276623236356
Encrypted:	false
SSDEEP:	96:7f2gcZ68cKB6kndvHGJAQufnueCn8v+EMqg1pHXUN+G4vIE:SgcZjzEkntPueC8hFG3i+3
MD5:	E3BCCA7354103DD714A524B05BA3C15A
SHA1:	6BA9071F4CC4E134FE86E518FD33319FBC7C0D79
SHA-256:	012D17DC2627BAC8B1BFDCC251BEA6E1C5D80E4C420D3DBD495CD5B1F50910DF
SHA-512:	8DCF0E8BE3F08CF914FF010080705E0E8BDE0DE028B58152E780EE77E42BAC325FD8B8C4302B61768754347BDC6568AE7CB3A9A2101DE27708EB923B6B0ABBFE
Malicious:	false
Reputation:	low
Preview:	GIF89a..}.....x%..........\|,....................5............I.'X.z).......m.......u.9.Z...T..F...R....A.]...........a........j.=.....L.w$........q..............f.....b]...A:g#.H...........~....2&.Q.G..z..................I.P.~/........d}x.......SMu................D......^X~.O.?.M.X.........y'....7.....x....`...~z.........uq....XSz......VPw._...ICm....\|..v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2581
Entropy (8bit):	5.000511767650486
Encrypted:	false
SSDEEP:	48:cYAvf3ReY7LLebkVqJ4bkj9JCjwAj3RMbcIRMOPLvsMTnL5j:SvfBese4u44jD+MbcaMOPFj
MD5:	14E20D4517F51DEEEA04DB311CD027CE
SHA1:	C50AAC2F5123A7F16B71B3C286C1ECA39514B9DC
SHA-256:	FAB005DE52CE54D75F373C5A020E7DDD194CAEA5B4BF6E87886196E5D4451ADC
SHA-512:	B41502B8ADA528D4A8C28F969E8D9C789DBA6D6A2E70F755F355522ECFC2935F615EA275764F2728F53CA20A81BA031C114FCD1CD27FFA505CCC61996159E182
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/cookie-law-info/public/images/logo-cookieyes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 60" style="enable-background:new 0 0 300 60;" xml:space="preserve">.<style type="text/css">...st0{fill:#404041;}...st1{fill:#0056A7;}...st2{fill:#2E3191;}.</style>.<g>..<path class="st0" d="M22.3,11.5C32.2,11.5,39.6,17,42,26H30.9c-1.7-3.6-4.9-5.3-8.7-5.3c-6.2,0-10.5,4.6-10.5,12s4.3,12,10.5,12...c3.8,0,7-1.8,8.7-5.3H42c-2.4,9-9.8,14.5-19.7,14.5C10,53.8,1.4,45.1,1.4,32.6S10,11.5,22.3,11.5z"/>..<path class="st0" d="M62.2,54c-9.7,0-17-6.5-17-17s7.5-17,17.2-17c9.7,0,17.2,6.5,17.2,17S71.9,54,62.2,54z M62.2,45.2...c3.6,0,7-2.7,7-8.2c0-5.6-3.3-8.2-6.9-8.2c-3.7,0-6.9,2.6-6.9,8.2C55.5,42.5,58.5,45.2,62.2,45.2z"/>..<path class="st0" d="M99.7,54c-9.7,0-17-6.5-17-17s7.5-17,17.2-17c9.7,0,17.2,6.5,17.2,17S109.4,54,99.7,54z M99

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	559
Entropy (8bit):	5.417979342229964
Encrypted:	false
SSDEEP:	12:+deFM2EeFM12h97Rj5uOtdU2YCjr1mQLKJTyr/1/pKWCKhSCIPVV:iLTs9NVLSFQLKJT2+zKINV
MD5:	02A2CAB30B552402C469524646275A13
SHA1:	E40FC16C8EC9D777921A9DBBEE8BBBCFEFF6DA43
SHA-256:	DB845A8F7647A4A843C357A65FB989EC3700206F397BAE557A42EFD48EE7933C
SHA-512:	FB51A7263EB02839AA77F93904431C31701764583FBD3221447CEE0AB500442D6C9172D151133893ACA203C227DBB1D8EA667D60468BA51C068872218B5114E2
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7207.a10606fd.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7207],{47207:function(t,e,n){function r(t){var e=(arguments.length>1&&void 0!==arguments[1]?arguments[1]:{}).https,n=void 0===e\|\|e;if("string"!==typeof t)throw new TypeError("Expected `url` to be of type `string`, got `".concat(typeof t,"`"));return t=t.trim(),/^\.*\/\|^(?!localhost)\w+?:/.test(t)?t:t.replace(/^(?!(?:\w+?:)?\/\/)/,n?"https://":"http://")}n.r(e),n.d(e,{default:function(){return r}})}}]);.//# sourceMappingURL=7207.a10606fd.chunk.js.map

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2257)
Category:	downloaded
Size (bytes):	2305
Entropy (8bit):	5.1910564817034395
Encrypted:	false
SSDEEP:	48:iL9T3dtoUWX6zEH00hniqTJGAnMGkMgx+jgud29azT6geV:ZAEH00hniwVnFQxCtHzmV
MD5:	E7E50202D381DC15D15DB5EDA2EE0459
SHA1:	DA4A30D7BFE791C5BAF59F439FB5C8916BCACFE1
SHA-256:	48C777FA97A5C5565C9BFCDCA9892DB7FB21FF4E90A8B0F6A0F97E80AF94F047
SHA-512:	F964D2B69413596026216D6DC24F31C3241493494C966529815162310AA19D36E33BA9F69EACCD2F50A04EBABF0E71F408AF2EED6929ABEB4DB9F74375C77EB9
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7234.38279feb.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7234],{77234:function(e,n,t){t.r(n),t.d(n,{default:function(){return F},disableExperimentalFragmentVariables:function(){return h},disableFragmentWarnings:function(){return g},enableExperimentalFragmentVariables:function(){return p},gql:function(){return d},resetCaches:function(){return m}});var r=function(){return r=Object.assign\|\|function(e){for(var n,t=1,r=arguments.length;t<r;t++)for(var a in n=arguments[t])Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a]);return e},r.apply(this,arguments)};Object.create;Object.create;var a=t(13070),i=new Map,o=new Map,c=!0,s=!1;function l(e){return e.replace(/[\s,]+/g," ").trim()}function u(e){var n=new Set,t=[];return e.definitions.forEach((function(e){if("FragmentDefinition"===e.kind){var r=e.name.value,a=l((s=e.loc).source.body.substring(s.start,s.end)),i=o.get(r);i&&!i.has(a)?c&&console.warn("Warning: fragment with name "+r+" already e

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 230 x 63, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9316
Entropy (8bit):	7.951176591311515
Encrypted:	false
SSDEEP:	192:TIIHUCD4wa3S5wyvBi3hvRIpDcad4M0DzspIGERsIoF6U55HCeZXv:d0wD5wyi9RI3dEUpIwxCM
MD5:	C547E9383AF4FF8E1DB46B95C4E73265
SHA1:	9F6F67142C05D9D2F4B7A2515807283B2A1BB8D7
SHA-256:	210D8F6E9A01A85B07207E34E7D873DCA72608347B21C4841133ED85FBD73443
SHA-512:	85929342F65AF9A3BD51E9844240C4EE8A12D42382770A7882A0733CAF5421175B43BED76DBFE0C4CF6F560A2B85CDF0C32575DD29FDBC7563E7D1B7E07EA27E
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-footer.png
Preview:	.PNG........IHDR.......?......[.\....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7454), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	18874
Entropy (8bit):	5.103754136683641
Encrypted:	false
SSDEEP:	384:TGawDBqnGGt3BMiv/g/zmqEIKXYNs/IUCThlwld1gMedC/DdpbdneljliCeW/D66:VdRN0u1YcDn1HTFkFdqomUqR2Vky
MD5:	1F10225CB2957B70F833AC00662AEA3D
SHA1:	4AF610F3D0E56986704F616CEFF0D47115DBF44C
SHA-256:	7243EE4F6BF71C6BD03B6C0FDE88AD51F3D7B29FC588E6B2B448B28D34D45286
SHA-512:	782FE59797AB884A4DD4B15A558BA495DCAEE7D4B11941F24800D37BB66CC51D187D3E04F3D251B56DD743BFBE2992A4FEB00D6376FD5A3FB68082D54DBD98C4
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/pum/pum-site-styles.css?generated=1709309010&ver=1.18.1
Preview:	/*. Do not touch this file! This file created by the Popup Maker plugin using PHP. * Last modified time: Mar 01 2024, 05:03:29. /.../ Popup Google Fonts */..@import url('//fonts.googleapis.com/css?family=Montserrat:100');......@keyframes rotate-forever{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}@keyframes spinner-loader{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}.pum-container,.pum-content,.pum-content+.pum-close,.pum-content+.pum-close:active,.pum-content+.pum-close:focus,.pum-content+.pum-close:hover,.pum-overlay,.pum-title{background:0 0;border:none;bottom:auto;clear:none;cursor:default;float:none;font-family:inherit;font-size:medium;font-style:normal;font-weight:400;height:auto;left:auto;letter-spacing:normal;line-height:normal;max-height:none;max-width:none;min-height:0;min-width:0;overflow:visible;position:static;right:auto;text-align:left;text-decoration:none;text-indent:0;text-transform:none;top:auto;visibility:visible;white-space:normal;width:auto;z-

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	181856
Entropy (8bit):	5.596021703839073
Encrypted:	false
SSDEEP:	3072:EOe03o4PwjcLX9TOSTDOlJ7qSB0DuIeLQRPE/:EBcL9TOOOv7UeLQRC
MD5:	730A7B3D4A1EFB86B8ACB964076F2682
SHA1:	1B957970C24977C517AFDF19BF580D537FF35DD9
SHA-256:	91A32963D07E8B2208271A8752C13A045DDD05C63DCD4037CF3C441D0572D4D4
SHA-512:	BDD6F3E2493743581851F1893EBCC1FA6D20B8710E4D1F95E695C00C00520DA73E09413E18C372C3AA847A73C7E691D152576C17213C1F6C10CC190DB48AABCB
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/6653.846fd015.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6653],{46653:function(t,e,n){n.r(e),n.d(e,{AsYouType:function(){return ad},AsYouTypeCustom:function(){return id},DIGITS:function(){return z},DIGIT_PLACEHOLDER:function(){return Cr},Metadata:function(){return sd},ParseError:function(){return C},PhoneNumberMatcher:function(){return mr},PhoneNumberSearch:function(){return Yd},PhoneNumberSearchCustom:function(){return Ud},default:function(){return je},findNumbers:function(){return rr},findPhoneNumbers:function(){return Wd},findPhoneNumbersCustom:function(){return Vd},findPhoneNumbersInText:function(){return lr},format:function(){return Od},formatCustom:function(){return Nd},formatIncompletePhoneNumber:function(){return md},formatNumber:function(){return Od},formatRFC3966:function(){return St},getCountries:function(){return $d},getCountryCallingCode:function(){return ld},getCountryCallingCodeCustom:function(){return _},getExampleNumber:

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47664)
Category:	downloaded
Size (bytes):	48426
Entropy (8bit):	5.1671514139802515
Encrypted:	false
SSDEEP:	768:pBQeIH/4UVtiy0DI62H1ecNx8bZbkHkNgDiQnNaZ:pB8GlI62H1eYpHe
MD5:	CBD0FB866214542B799F99B57B7A92FE
SHA1:	90CF6DCBED7C38E02A8B9B2C5302C294FAAEC364
SHA-256:	1E8DCAEC98F99C2B1B43FF8B8655680B69BBF150470B20ECBDD1CB45570A0587
SHA-512:	BD25C583ED9537DF3C5E8EA4C92AB582E558A45C6C187664CC13DADFB951C37982D93A9F32589010813C0FB88F6474D5664E2C6DFCB9CAC9DC73C20A02E5A445
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/bb-theme/css/base.min.css?ver=1.7.6.3
Preview:	/!. A lightweight build that only contains the CSS needed. * for the grid system and basic styling. If you need the. * full Bootstrap library, please choose Bootstrap 3 or. * Bootstrap 4 using the Framework option in the Customizer.. . Includes. * - Grid. * - Print Styles. * - Typography. * - Code. * - Tables. * - Forms. * - Navs. * - Navbar. /. /!. * Generated using the Bootstrap Customizer (https://getbootstrap.com/docs/3.4/customize/)..* https://gist.githubusercontent.com/Pross/1b159e91a33484201c9df79e90937489/raw/231a41d424d9194d73fd5f5c3a059940c5d6d905/config.json. /../!. * Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 182 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1466
Entropy (8bit):	7.806820725039713
Encrypted:	false
SSDEEP:	24:gLyMlzjoLrrtQVvEe0Tr8TR6tVCdLkbIugUW4iTApo/1Uf87iuW3ntvL6idEEz:WyM1DhEj/8T0tqL9l54iT+otUflP3tv/
MD5:	1AA189565E4DA85A6DAAF8B5ECE3C65E
SHA1:	F48A9A7436B0FE632417C7C654D5CBD0FF5D8989
SHA-256:	B58D4D4CDDA4FBC0665584104F7F79C5FE0AB5E150298AF3B229A8E42C0DE9C0
SHA-512:	0B54201F12DE5149D65571C3CB4BEACC560924540556893202EEB8E849852B1DE1A7C5C1B5D1824676AEB09F2C8594A5DD9B3CD6F9C3B9A255F2BD863F64D7B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.......B!....sBIT....\|.d....qIDATx^.k.UU...}....f.F1T.%-.2?$....D..i.E.2A$L.{..D.Q.D/..(Q..^.0>zihV...g...Z....s.=g8.f.=.~....:{..o...:..u]U..(`..1..0..vH..[@0R...H...la.H..l#......#....t.lJ....T@.6..).[.0R...H...la.H..l#......#....t.lJ....T.)....._g..~..>.H...........}.:)..........$.4\9w..?..O.u.l_....g.....W..u...M=P9.....K....S.@\|R.e....(...6..=.6$....7_o...zq..G?..w.5.f.....z@......+.................~...=;......K.Y..T.e../...Ou..._l.....!=w..x.....<`....t........w'....#{...U.}?.U..=.B...0...F.m<.l..Z.=#s=..-.......B...@........W8......@QD/..0.!.}..\|..V.:$a......>..6....d.'..v5w. ...a........vj.B8.aF(....(.{.S$E.....k..Q....'.:.q....N~....0..R-.0...VP..s.....U.. .8.0iL.=..e.w...'.?9'....7C..m.Z...m..^>.(;.}%Ei... {...J#.W.......<.........6...............x..X.a!.]..}..H.....[VBb.lJg}.k9..W..~\|(8..Z1../..:\.QR.7..9..C...W...B...+....#.m./.....$.....B.......!S;!.q.e..F....y.j..q5erE...@.3,...0.c.C6"...

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9333)
Category:	downloaded
Size (bytes):	9381
Entropy (8bit):	5.1704762266053965
Encrypted:	false
SSDEEP:	96:77YxOsyu4ZpUZ4Lk9Hq+2YUqZC813i+vewCp9Y3AZh8lOkJMDCp0a9Hq+V:78lOxWHRJCALCp9Y4+oCp0IHZ
MD5:	790C2744B6ADA6B0BCF7EDB050836CAA
SHA1:	170627805E49A311D54736A675F7887E3DA99BB0
SHA-256:	11A90CC9909543E1DDB34FD97888D3BFBBF034B6E17ECC24038A93BCFCFA4B12
SHA-512:	9E0E5FCBF3BA8547DA1E373077CB7337CE143342D88B5E68848218ACFE189110E201E3101AA4B3FC8D3E8D1BE044EAD5D8528F7AF8011CEBD0CACB171231924D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/9378.e150dafa.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9378,1128,3633],{14601:function(){},32767:function(){},28251:function(){},57677:function(){},1543:function(){},87324:function(){},66115:function(t){t.exports=function(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t},t.exports.__esModule=!0,t.exports.default=t.exports},56690:function(t){t.exports=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")},t.exports.__esModule=!0,t.exports.default=t.exports},89728:function(t,e,r){var n=r(64062);function o(t,e){for(var r=0;r<e.length;r++){var o=e[r];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),Object.defineProperty(t,n(o.key),o)}}t.exports=function(t,e,r){return e&&o(t.prototype,e),r&&o(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t},t.exports.__esModule=!0,t.exports.default=t.exports},26389:function(t,e,r){va

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3681)
Category:	downloaded
Size (bytes):	3804
Entropy (8bit):	5.163370319488592
Encrypted:	false
SSDEEP:	96:aKJDMKJfJuTIJVCKlFKHpqZiND6qZpBNgFdr/mpErV:aoYofJuUPCKjIpD6ozgX+KB
MD5:	4B3476BFCC034B39FA7392A72B21FC73
SHA1:	D3989CEEF0E9C1876307AD67818FF1091B502051
SHA-256:	2D3367EEC5B0AD88A42BEC0DB849C1AA99A3E521FD1B6F6DD37591DA16703C25
SHA-512:	DE9EF8EB68EB58D77451C0EE5BCE3696EE6D39103FAF93AD1BFF85941B88C2DCC6284A764214026DE211E529E213635F12DA0C56E4CFC2DB030EC3300F5E9B2E
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/404.7a421d50.chunk.js
Preview:	/! For license information please see 404.7a421d50.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[404,6449],{404:function(r,n,t){t.r(n),t.d(n,{ErrorLink:function(){return u},onError:function(){return i}});var e=t(3431),o=t(58296);function i(r){return new o.ApolloLink((function(n,t){return new o.Observable((function(e){var o,i,u;try{o=t(n).subscribe({next:function(o){o.errors&&(u=r({graphQLErrors:o.errors,response:o,operation:n,forward:t}))?i=u.subscribe({next:e.next.bind(e),error:e.error.bind(e),complete:e.complete.bind(e)}):e.next(o)},error:function(o){(u=r({operation:n,networkError:o,graphQLErrors:o&&o.result&&o.result.errors,forward:t}))?i=u.subscribe({next:e.next.bind(e),error:e.error.bind(e),complete:e.complete.bind(e)}):e.error(o)},complete:function(){u\|\|e.complete.bind(e)()}})}catch(c){r({networkError:c,operation:n,forward:t}),e.error(c)}return function(){o&&o.unsubscribe(),i&&o.unsubscribe()}}))

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65398)
Category:	downloaded
Size (bytes):	69803
Entropy (8bit):	5.261073987457538
Encrypted:	false
SSDEEP:	768:ThzDCGf7aI8FKN9Z8Ios4ffc5/xV+jBXkCjnLIpgGV5COhoCRPaT:TtCGf7aI8FKd8IQffc5/snLIpgGV3hTQ
MD5:	90A24BF03B2A332B09D3773B2092F588
SHA1:	0804E231C98FB35E86030244CE5C0599BDD39D63
SHA-256:	5D0955D1D68AA9C4F4CC92619CA28852CE8B8EF92B5747C54E1F6FF9205C4B4A
SHA-512:	BB16027D7DA4AA16BF2C765F3CCA28D729797CEC5D5FCA76C28A434CB95CD117F5B335235C8ECCF07D6B77412B6AE4F8D555A66F6D95E147C562F32DA89579C5
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1709309010&ver=1.18.1
Preview:	/*. Do not touch this file! This file created by the Popup Maker plugin using PHP. * Last modified time: Mar 01 2024, 05:03:30. */...var PUM,PUM_Accessibility,PUM_Analytics,pm_cookie,pm_cookie_json,pm_remove_cookie;!function(i){"use strict";void 0===i.fn.on&&(i.fn.on=function(e,o,t){return this.delegate(o,e,t)}),void 0===i.fn.off&&(i.fn.off=function(e,o,t){return this.undelegate(o,e,t)}),void 0===i.fn.bindFirst&&(i.fn.bindFirst=function(e,o){var t=i(this);t.unbind(e,o),t.bind(e,o),(t=(o=i._data(t[0]).events)[e]).unshift(t.pop()),o[e]=t}),void 0===i.fn.outerHtml&&(i.fn.outerHtml=function(){var e=i(this).clone();return i("<div/>").append(e).html()}),void 0===i.fn.isInViewport&&(i.fn.isInViewport=function(){var e=i(this).offset().top,o=e+i(this).outerHeight(),t=i(window).scrollTop(),n=t+i(window).height();return t<o&&e<n}),void 0===Date.now&&(Date.now=function(){return(new Date).getTime()})}(jQuery),function(a,r,s){"use strict";function n(e,o){function t(e,o,t){return o?e[o.slice(0,t?-

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21977), with no line terminators
Category:	downloaded
Size (bytes):	21977
Entropy (8bit):	5.103632462028111
Encrypted:	false
SSDEEP:	384:QAtP59y2TzwXp39iqaHTRj5cRgaO/YNfKc2CJoWnJV85u54CixemM6hqnYJ/6n0n:QRR9ozRdUgV/Y8WEEO38IQPap2O
MD5:	1C1C8D7B370C88A5BA8A551047DFEB3D
SHA1:	63BDFF8E79948B9E203C28AC4233F219B9808438
SHA-256:	49B428122B908C8BADE67F5824EEBEFCE093CBB78B77A2ED31D22903ED0C1270
SHA-512:	1910303BC94920F03C9053CB22D01B93ED5BD27205636F22F3C60D5C8EFD048F6D412B87C3FBF78FFA2917E90C3B7C061403A3C87AC35857914BAE2DAE0FE1FF
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/bb-theme/js/theme.min.js?ver=1.7.6.3
Preview:	!function(e){FLTheme={init:function(){this._bind()},_bind:function(){e(".fl-framework-base .navbar-toggle, .fl-framework-base-4 .navbar-toggle").on("click",this.navbarToggleClick),0!=e(".fl-page-bar-nav ul.sub-menu").length&&(this._setupDropDowns(),this._enableTopNavDropDowns()),0!=e(".fl-page-nav ul.sub-menu").length&&(e(window).on("resize.fl-page-nav-sub-menu",e.throttle(500,this._enablePageNavDropDowns)),this._setupDropDowns(),this._enablePageNavDropDowns()),0!=e(".fl-page-nav ul.menu").length&&(e(".fl-page-nav ul.menu").find(".menu-item").on("click",'> a[href*="#"]:not([href="#"])',this._setupCurrentNavItem),this._setupCurrentNavItem()),0!=e(".fl-page-nav-search").length&&e(".fl-page-nav-search a.fa-search").on("click",this._toggleNavSearch),0!=e(".fl-nav-vertical").length&&(e(window).on("resize",e.throttle(500,this._navVertical)),this._navVertical()),0!=e(".fl-fixed-width.fl-nav-vertical-right").length&&(e(window).on("resize",e.throttle(500,this._updateVerticalRightPos)),this._upd

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 52, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	1618
Entropy (8bit):	7.142173871786098
Encrypted:	false
SSDEEP:	24:xxy1he91Wwjx82lY2T3ouVesyJ3V9LGgo2/Ivotg4Z/6LclQbFbY4Fqb:xxwqQNn2xoJ3XLIvoSaOdXMb
MD5:	A037A110D0E93D062B2580C2181B41BE
SHA1:	25F02C7EA24102E9007441F9176C4DBAD4C133EE
SHA-256:	36A1D6D48F61249235E629A59CE10B21517F9C9380949E8F9362C4DECA3029FD
SHA-512:	772ECAF7D113B80E02AC26F5052FF265FD709E7F8D38EA615DA448120703CADF91E7EB1EFF70422C72CC082E316CE055BE6DDF09FB9B58EA1AF640D08ACBD451
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.............tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:0B4FD037EC3111E9B619E0D1C28062C6" xmpMM:DocumentID="xmp.did:0B4FD038EC3111E9B619E0D1C28062C6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B4FD035EC3111E9B619E0D1C28062C6" stRef:documentID="xmp.did:0B4FD036EC3111E9B619E0D1C28062C6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...@....IDATx.b\|_............H....!s..9 ./.e.9......h....9..?^{Pd....... ..&.......Y@..]..X.8....(.t#T..>..B.06.c....

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12040
Entropy (8bit):	5.433993141597593
Encrypted:	false
SSDEEP:	192:N7ld7Qo7p7tP7SQlcQjAtqS7lHQYrtNSGlaQh2tsS5l9QuptXSflDQ8PtRS6lmQY:NJdUoF15bqwqp2mvs6FY
MD5:	2566A61E320367C5442A299B13FAF28A
SHA1:	C38AD4AD3701A08FD1BCF4AA71A1661680AAAA69
SHA-256:	17300B52A5EC7E4761C9ED9D05FC6EB1AAE55DEA7CB8F4E1B6C2A2A04EFEAF84
SHA-512:	5AEC077CA44F5E54E25AE34895DF135D25F66232AE10376B80FE16767DD449A5528BA2F042B4A5ECA9DF94A195CC5C4C49A69A3D3B4BF7BBD67A4CEB9B1FC61D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Montserrat%3A800%2C200%2C100%2C700%2C300%2C500%2C400&ver=5.7.11
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	175029
Entropy (8bit):	5.297400771918478
Encrypted:	false
SSDEEP:	3072:ciL2tbfmjsANsxhDxv11ivsG8fj9j33Jond/Wycaehgf9vQkR0OUy51ykCZSqd6B:DK0QANsxpxPiE8TcZy51yM
MD5:	82003092EE82918107A8DB1FABD2FA5A
SHA1:	4E77C782670A8A61C4CBDC6686D06E5D184F1CE7
SHA-256:	44BBF43C35003D33687F697EFC302F205B228D25DF32F83AB38850B228E4F0EF
SHA-512:	FB4A691E4DDAE8FAD6AB330E32FB716A8F5BA1FB76B9746703FBA302475530F5A8E90C7ADCEF3546BF8576C21A9FEC2092BDC6454FC95704A41C83D69FAE9774
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1573.3f1be132.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1573],{61573:function(e,n,t){t.r(n),t.d(n,{BREAK:function(){return G.$_},BreakingChangeType:function(){return ya},DEFAULT_DEPRECATION_REASON:function(){return kn},DangerousChangeType:function(){return Ea},DirectiveLocation:function(){return V},ExecutableDefinitionsRule:function(){return Jt},FieldsOnCorrectTypeRule:function(){return ar},FragmentsOnCompositeTypesRule:function(){return rr},GraphQLBoolean:function(){return In},GraphQLDeprecatedDirective:function(){return Fn},GraphQLDirective:function(){return wn},GraphQLEnumType:function(){return un},GraphQLError:function(){return y},GraphQLFloat:function(){return Tn},GraphQLID:function(){return _n},GraphQLIncludeDirective:function(){return Sn},GraphQLInputObjectType:function(){return cn},GraphQLInt:function(){return En},GraphQLInterfaceType:function(){return rn},GraphQLList:function(){return je},GraphQLNonNull:function(){return Pe},Gr

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2371)
Category:	downloaded
Size (bytes):	2496
Entropy (8bit):	5.528408615247979
Encrypted:	false
SSDEEP:	48:QbLe2U3lgrojBU4VVLEuJJYGbk2F2pmHUhTJQ2kCHHNF6Z7pEfYV:o6lgsjBU4LXbtF2oITS2ku76ZeQV
MD5:	798F4D2271F4272B74C83272BDB1BDC4
SHA1:	4B12FBE3B53D762D4BCFA907F504CDBA71B8F8E2
SHA-256:	5A4F2F870B953E02F674825240CA8F761177A9FFAB1CBE9B7B27A4B48478FD92
SHA-512:	DDEACDE65F626EB0D9B94252C414F9B597355F1BE0F8F8262C66316399DC23A7F308625150ED594DA1A30366CC470CC458E2FC57FA6ECF4B1BCBF438600B327B
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7530.d631d9ac.chunk.js
Preview:	/! For license information please see 7530.d631d9ac.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7530],{27530:function(i){i.exports=function(){"use strict";var i=/^(b\|B)$/,t={iec:{bits:["bit","Kibit","Mibit","Gibit","Tibit","Pibit","Eibit","Zibit","Yibit"],bytes:["B","KiB","MiB","GiB","TiB","PiB","EiB","ZiB","YiB"]},jedec:{bits:["bit","Kbit","Mbit","Gbit","Tbit","Pbit","Ebit","Zbit","Ybit"],bytes:["B","KB","MB","GB","TB","PB","EB","ZB","YB"]}},e={iec:["","kibi","mebi","gibi","tebi","pebi","exbi","zebi","yobi"],jedec:["","kilo","mega","giga","tera","peta","exa","zetta","yotta"]},o={floor:Math.floor,ceil:Math.ceil};function n(n){var r,a,b,s,l,c,p,u,d,f,h,B,g,M,v,m,y,k,x,N,w,E=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},_=[],j=0;if(isNaN(n))throw new TypeError("Invalid number");if(b=!0===E.bits,v=!0===E.unix,B=!0===E.pad,a=E.base\|\|10,g=void 0!==E.round?E.round:v?1:2,p=void 0!==E.locale?E.locale:"",u=E.l

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1034
Entropy (8bit):	6.195586559210653
Encrypted:	false
SSDEEP:	24:+u1hpunQWwjx82lY2T32HEVMY9yJ3V4T8G1D9AW95:+0itNn2VeLJ3K8UZv95
MD5:	4C4F5764FC2F77C630AAA6596BBC4C3E
SHA1:	F1784BE3D75F2A33CE2218D4BE2DD19693EBE183
SHA-256:	0DF9FF5CF55A0DF87CBC443CCDECE5145B73F8DEDAF3804858E189B432AC847D
SHA-512:	6EC00BF3A76EFF6586F4DE16C06A2E39C6F62265E7FFD4532A768803033C98CDCB7898C143B2980D3E3EFD4FB05F914BE08A6AE21F08DD5244D593019833865F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E6D66246C67B11E99171F4B7ADA30356" xmpMM:DocumentID="xmp.did:E6D66247C67B11E99171F4B7ADA30356"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E6D66244C67B11E99171F4B7ADA30356" stRef:documentID="xmp.did:E6D66245C67B11E99171F4B7ADA30356"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..$.....IDATx..... ...,..u6]..P......E. &!"j#.a....0;u=((0..`.VA/l.......A.H.+\|.@......=.K...D....Ve7lm.3..C..6..g'e

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1809
Entropy (8bit):	5.462474988181882
Encrypted:	false
SSDEEP:	48:AOOS7qwOOS7v8FZOhOOS7P17OOS7tRVc+udOOS70N0oD:AOOS7qwOOS7v8FZOhOOS7PtOOS7HVc+A
MD5:	CEE52C3A30DE2D62B931EAC251022BEB
SHA1:	354FAE53082698AA68B7335D87573B078C62D668
SHA-256:	C55BB187432531F48BE10DF58477EB1AB34D4EC4B7AECFB4C179845A5227FCD2
SHA-512:	B1F58D6F450EFD72C5839E6CD7816918692B04125A57791C66BF6F715B72D1187501F698DC9BF26073298DF8CA58822711745AC6D06280D3FB2350BA4BD6EE38
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Montserrat:100
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw0aXpsog.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw9aXpsog.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw2aXpsog.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	939
Entropy (8bit):	7.702703412591416
Encrypted:	false
SSDEEP:	24:zAwmR1/OKVAw0LKtbFGFsJZJu1mK8VGCchN/Xwf:0l1/OardtbFT55ZVfSN/gf
MD5:	43877D64EE8BC81B815BA6A2FEE4BAFD
SHA1:	6879F28ED9D2069CDB32BB628AFE07C9A99279A0
SHA-256:	ED623F15EFC71D6BA01A90D36F4502F64F3978027A4AAC6CD99AE77B2F462C06
SHA-512:	CA54A677A73B1C1D4CA62662B7ECE64BFD2C4C4B38D1097ABAD679FFE3F2DFA4030E0E82F2427CFAD205E5D384C57B2B0A85A248D5E4CFEE57AD352028859F9D
Malicious:	false
Reputation:	low
URL:	https://envoye-special.fr/wp-content/uploads/2023/03/POP-tiret.png
Preview:	.PNG........IHDR.......$.............sBIT....\|.d....bIDATHK..]H.Q...uW...L.@g......B....A..(....-......}.0."L..".^..."$.....v.@.v.......Xv....{...;8.P..`.}l/..E...E...,...r../...z.F.:.y$*..)E a?-\..+...w..F...6.%..MQ..vm2.h..n..vU...@i../.J....n-.M.h.&..N......Yd..2..\|.].J.....z.I.AD..V.4Oy...B@K...m.p.....ye...!..:..uM.T.../.g...T..r0di..?....(..0........@.v....%.n....^...m/Z..)...I.J.m.1.+Jk...E..8..W.:..p........h.B@.!N....]._......a.$Wc..= 9........L-4l.Y.d..9.V.4.8..c....[....).. .....Q..#3.kl.1.SK...x&'k.C.(O.4.^....."..Rgl.D9K..t...B@}.A...m..Z....:....-Q..../.'..V..'B..............:..k..'.d...{.... ..Q..5J.x......W.p.>J9..n.a.vHF..j'...ArF...jgs....AY.....O....5.aA.[....4.#.....#JWh`...1szSV..i1......^z..3...nI.>..........I..Wm...t4.e.-.o[....k.:.X~.....#u9.Rj.G..YXO2.....W.h.~.........~L....:....D#m ..Ja ....I.g.....i...#u.iRj.:..[....H.}.....v.C..o..2...m\|....IEND.B`.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17093)
Category:	downloaded
Size (bytes):	17218
Entropy (8bit):	5.297193936210605
Encrypted:	false
SSDEEP:	384:R8QGGoQfBTKqcm/KGhZY5UPVf2fdJ8Vzqt103en:RlR3ZY5a2f3GYZ
MD5:	85402B302542CF77966B6AC4A582DBC9
SHA1:	1841520B106A9D093F68449336A5DEABC8B75F37
SHA-256:	3A3ECF8C5F224789E6FA967FAD03BB5530D6E491C2BBB821AF73CBC08B80C347
SHA-512:	70CE3AA883FED8EB36AAE157169A5FEAAB9119E3306CE6A62274CB08C286DCF11250E2E2B45CDEFDDE7DCF89BA11A3D2C713EB18CA771A4AD0D22EA3ABF1D8A9
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4270.9958be01.chunk.js
Preview:	/! For license information please see 4270.9958be01.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4270,7716],{31725:function(e){"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(o){return!1}}()?Object.assign:function(e,o){for(var i,a,u=function(e){if(null===e\|\|void 0===e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),c=1;c<arguments.length;c++){for(var s in

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51594), with no line terminators
Category:	downloaded
Size (bytes):	51594
Entropy (8bit):	4.938643093727985
Encrypted:	false
SSDEEP:	384:Y45n6py5fzs6+Bi7f9qFSk1pw+b9Z02WlJ0n:pT5fw6+tS6pTb9Z0rSn
MD5:	C137011E6A25D33FDED674B5B399E1B0
SHA1:	15A5199DFAFEE30450CA682787C64BDD2508E97A
SHA-256:	118BCC9C52A81E2D4183025089326C4779CC82406EC06F6B81539B5375D146DD
SHA-512:	F9C44BF8DD28C5C184F2B04FED664EDBED4ABEA32FFC9601AA4BB6094F2DC518203933065E83FA71CC3A49B897350A41F9BB2126F8F4BBBB4095FCDF372B0C7B
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/bb-theme/skin-5f0f035474926.css?ver=1.7.6.3
Preview:	body{background-color:#f2f2f2;color:#808080;font-family:"Montserrat",sans-serif;font-size:14px;font-weight:400;line-height:1.45;padding:0;word-wrap:break-word}body.modal-open .media-modal-close:hover,body.modal-open .media-modal-close:focus{background:none;border:none;padding:1px}body.modal-open .media-modal-close:focus{position:absolute}h1,h2,h3,h4,h5,h6{color:#fff;font-family:"Montserrat",sans-serif;font-weight:400;line-height:1.4;text-transform:none;font-style:normal}h1 a,h2 a,h3 a,h4 a,h5 a,h6 a{color:#fff}h1 a:hover,h2 a:hover,h3 a:hover,h4 a:hover,h5 a:hover,h6 a:hover{text-decoration:none}h1{font-size:50px;line-height:1.4;letter-spacing:0px;color:#fff;font-family:"Montserrat",sans-serif;font-weight:800;font-style:normal;text-transform:none}h1 a{color:#fff}h2{font-size:40px;line-height:1.4;letter-spacing:0px}h3{font-size:24px;line-height:1.4;letter-spacing:0px}h4{font-size:18px;line-height:1.4;letter-spacing:0px}h5{font-size:14px;line-height:1.4;letter-spacing:0px}h6{font-size:12

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	227526
Entropy (8bit):	7.976114186740539
Encrypted:	false
SSDEEP:	6144:M+zD7jFrnk4Nnc0yryQKikLY5V2EDueQH2iS:N5rnk4K0rQw8h5QI
MD5:	6BA827475F79FCBDFC092B9D29CF93A2
SHA1:	58BDC81FCC18EB9510AB49F73D8B6CC0AA81DF86
SHA-256:	6A3DB1A85AFAB4546C2658DD816A6798BE43254DB5E13573BBE481612BC2993D
SHA-512:	1311F6D1838B06F4C20896B163961F9BE59AF96AE409584A1901DC83F29040AE3853DC592C532EEC206A3AA3200FC5B2A785EB45D0BC63741B350BD4A7B3A437
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SF1-flip.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:084BC471C03A11E981AFAD07CD92D53D" xmpMM:InstanceID="xmp.iid:084BC470C03A11E981AFAD07CD92D53D" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	10791
Entropy (8bit):	7.9681118062316765
Encrypted:	false
SSDEEP:	192:GzaCPQAnKEDFQtygETHObC9XteTk6mAP5Lv2B7cuCiGjm5AA0wq:kPf+HETHOgXgQhAPtvZiGjuAAe
MD5:	2A9B0256B9CEE811324EA810682E8A81
SHA1:	1C2CFB36261D0F5C4C46F3230C591B2AEE059553
SHA-256:	775858864004BE8C18D7FAF93805E53788347417861FB689C1F427D684EDEF03
SHA-512:	DDF4B466B7615A48D696A32B76F98046D84435018AEB01EDF131F49B72BBB1956E61415EED39780CE6D415CC191E81DBABF374C489CA8E56DF1C76EA625E0FE0
Malicious:	false
Reputation:	low
URL:	https://dsr-images-us-east-1.prod.mindtickle.com/protected/organization-994/organization-logo-1713869486?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L29yZ2FuaXphdGlvbi1sb2dvLTE3MTM4Njk0ODYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTY0NzMxNTZ9fX1dfQ__&Signature=d1xx2w9DUk87dEyDNqhbUC1~PTj2MakafHrcklabl1hQyyXwXYKB8U0oXMxSBZNW8Y3sIUWXhuybmAPlKKiSG66xHJ2~66UvXcNC69do9hgkaLaW3L-0SiJgkj319VripRx2cnzcdgeCEvZ~fljo4EWVit8GGanv4iLzy2XXXxiqyU0L8f8kUj90FtlBme5vKgg6rmzW9b6IHe~IMQyN16rFmnYpVa4Rtsx6StVOIE9TPW0KlNHFb-SzD2jv4xFOOA-6Ity-uDeZZNXtDgH8wMUr1JnLv5MzzxH1RKcTa04uTZhH2VYvBrGXfpIjaLqn5avluobBL5sL3Dc2EWzJaQ__&Key-Pair-Id=KFSVSK4GDGUMB
Preview:	.PNG........IHDR.............L\....).IDATx....]E.7..Uu.k...;.4YH...,.#...8.......6*#.Gd.]..P...NX.....C.t:....w..,U.~.97iBpDf..~.\|.......n...U...z...A....w.._G..<.@@.Q .(..g...3.........yF..<.@@.Q .(..g...3.........yF..<.@@.Q .(..g...3.........yF..<.@@.Q .(..g...3.........yF..<.@@.Q .(..g...3...........kG..(,".M......@...o`D@....Y..`..:Q....w...u...)..0.?..i..h.\.JP1..&.$.....&.. .....d>Y.0r.._C.[.....&%539(.....(........H.B@.. .Ly.._..............(..T.......G_.d2v..u+.OD.....1...r.......w.#o...S.'>...[. .'I..d...N......V6.v...K./j8.xD..f...~.9...-.3K.N[.. .`..7..{.._Dv..Y.. &..%,^.....l.......\.k.C.@..!.ED.&...7s}ys.?R!h.G...@@....x..`.i..[7j7.......f.))@.m.2........g....%.e....m...?:.'.I....?.].u..>....&.w....P.,.y...f..[.`\H..i.....,.RX.gG......].%...=b~7.....M}).?..7}..C....c........./.....J....M.c;..sd...pS.V.\|F\|.E.....2....e.r..8..5.M........>........r..X...K).9..h."..%c......>.....G..D.+fx....\7....[....."^.4.LI..e...Z.R..A.D.}....57.n..)

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	dropped
Size (bytes):	227526
Entropy (8bit):	7.976114186740539
Encrypted:	false
SSDEEP:	6144:M+zD7jFrnk4Nnc0yryQKikLY5V2EDueQH2iS:N5rnk4K0rQw8h5QI
MD5:	6BA827475F79FCBDFC092B9D29CF93A2
SHA1:	58BDC81FCC18EB9510AB49F73D8B6CC0AA81DF86
SHA-256:	6A3DB1A85AFAB4546C2658DD816A6798BE43254DB5E13573BBE481612BC2993D
SHA-512:	1311F6D1838B06F4C20896B163961F9BE59AF96AE409584A1901DC83F29040AE3853DC592C532EEC206A3AA3200FC5B2A785EB45D0BC63741B350BD4A7B3A437
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:084BC471C03A11E981AFAD07CD92D53D" xmpMM:InstanceID="xmp.iid:084BC470C03A11E981AFAD07CD92D53D" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 170 x 125
Category:	dropped
Size (bytes):	4784
Entropy (8bit):	7.713247981791946
Encrypted:	false
SSDEEP:	96:FwClEuB6knygHGJAQuf33PfGcYFjbsMcZS8Mj7fsQo9JWnhJnjASUQ78/QuyrE:FHl7EknyAnfYJQMUQMYHjAHQtE
MD5:	5CC79C2222FB90C001165448B0C7AD47
SHA1:	E889248DC440AB3A1132A2160D7C176F8C34FFE7
SHA-256:	9AE8ACC63F34D9136C13B10A3D81A5762CE03753B0D3A2E676C35085167FC05A
SHA-512:	304FDBC24A3ECF759F1D30FED224CAD3DEB969294073A120E03CB3EA3F0EA98031F88A75AE9648CEFCBB1E04EBE8D7DC57F648DAC72E7AD163E30203C461C9C9
Malicious:	false
Reputation:	low
Preview:	GIF89a..}.....................kf.ZSyyt.B;g....\|+.......Y....gi....:...K`Z....#.M+#T.C...2*Y...........n+.T................\|..I...........f..lHBl<5c...\|.c^....TNv..`.....3.................u.x%...YGf.........O0.kK...wXd.N..............NGq.........w$....................rm.......r'.h[....nB70^.~/...................z(...............................p.........>..............F.v"...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x600, components 3
Category:	dropped
Size (bytes):	501716
Entropy (8bit):	7.9734989849199644
Encrypted:	false
SSDEEP:	12288:T/rBekvb3/YgPmxzvY4/7tdIY9+GqxX1I3QAJ:zrBekz3/rOxLLBWXm3ZJ
MD5:	B268CBA2A730055FD7CC73599354EC31
SHA1:	DDCD789FB1223D5DABACF218F2158721D3BE6F96
SHA-256:	7D161A13B4E4CD3F4DBD85540936125E51091F8E3D4F451DA270BC71B2B8C8BA
SHA-512:	C186306442915F961421E669484B36E2EB67B29242B90D5A1F83227066CBE703E35AEC04A692D4F8A198E8C6BA73E002CE3A3D394D8A3BDBAE19450291372BB7
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:07390BA4E45511E98A15E08E9BEB6226" xmpMM:InstanceID="xmp.iid:07390BA3E45511E98A15E08E9BEB6226" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9720), with no line terminators
Category:	downloaded
Size (bytes):	9720
Entropy (8bit):	5.190875694455323
Encrypted:	false
SSDEEP:	192:oBeHd8tGtFzGTcJXpSwGlNJOZbNXXeFttsDGvJJitlw1Dx/SsiyD1bhV41F9NtxP:oE98sH3JXpPGtSNulJicJpmNNXwpCbBf
MD5:	CFB428C02811F0CBE515D5F3DCA61DE6
SHA1:	E95F8696FBE29A706E66CCF582B36D9BD650AB9F
SHA-256:	679E44F9B4BBBC2AD0C4000C1413FD3A88627D83F1CBA8EBDAC26F81BC7EDB78
SHA-512:	B5088A7E5E42E078116D23F82BBE1F0862C029E69FB68CAD655AA73643626AF50CA3335CA64D25624A713EE83C79774949FD9AB4BF2AC598DDB0B2174D3FB326
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6
Preview:	!function(){"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t)=>{const r=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"],["submitting","submitting"],["resetting","resetting"],["payment_required","payment-required"]]);r.has(t)&&(t=r.get(t)),Array.from(r.values()).includes(t)\|\|(t=`custom-${t=(t=t.replace(/[^0-9a-z]+/i," ").trim()).replace(/\s+/,"-")}`);const n=e.getAttribute("data-status");return e.wpcf7.status=t,e.setAttribute("data-status",t),e.classList.add(t),n&&n!==t&&e.classList.remove(n),t},r=(e,t,r)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:r});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},n=e=>{const{root:t,namespace:r="contact-form-7/v1"}=wpcf7.api;return a.reduceRight(((e,t)=>r=>t(r,e)),(e=>{let n,a,{url:c,path:s,endpoint:o,headers:i,body:l,data:p,...d}=e;"string"==typeof o&&(n=r.replace(/^\/\|\/$/g,""),a=o

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41507)
Category:	downloaded
Size (bytes):	41555
Entropy (8bit):	5.338062378824941
Encrypted:	false
SSDEEP:	384:lXbox11H19dxvxsJ7VRFyGmB5SYiWdYlIHinkIHQXJS6ZMH2K1MNGpelJ6:9k1tpC3y0IHUkk2JG1MUee
MD5:	82F607A71D77A50D8D350345B5069E37
SHA1:	20EB7CA1FE6FD4419A1DC0E4A37C6561B77574DF
SHA-256:	C6DCFF4D52F948286113846DA1F67E0E63C2CE89D3B88A9AA66D2C997FD49DB7
SHA-512:	25E0E7CD2B71322D5C61DA32BCC95F31965A3006F1EB093A0A2F202E7D92B9A2D44E0ED210A05A4EA8B6F1535C69534348285884275EA0E3EEA40D95E9F1F9E9
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5206.5ee8d138.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5206],{46314:function(e,o,t){var a,n,r=t(4942),i=t(63366),c=t(87462),l=t(93264),s=t(28182),p=t(94419),d=t(91269),u=t(12065),m=t(41),v=t(19795),Z=t(4841),f=t(90977),g=t(85771),h=t(86779),b=t(55891),y=t(56059),x=t(96285),C=t(8799),S=t(89059),k=t(31402),w=t(66934),I=t(97902),P=t(14036),T=t(42071),O=t(80184),R=["autoComplete","autoHighlight","autoSelect","blurOnSelect","ChipProps","className","clearIcon","clearOnBlur","clearOnEscape","clearText","closeText","componentsProps","defaultValue","disableClearable","disableCloseOnSelect","disabled","disabledItemsFocusable","disableListWrap","disablePortal","filterOptions","filterSelectedOptions","forcePopupIcon","freeSolo","fullWidth","getLimitTagsText","getOptionDisabled","getOptionLabel","isOptionEqualToValue","groupBy","handleHomeEndKeys","id","includeInputInList","inputValue","limitTags","ListboxComponent","ListboxProps","loading","loadin

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	179894
Entropy (8bit):	5.494377680571644
Encrypted:	false
SSDEEP:	3072:eq6PGOmXWgP+7vGs5QFaNbGFhJLAylBQW6pLVFaO6pLVbUl:n6Pjge4aNicylBQW6pLVFaO6pLVbUl
MD5:	48C4A2BB288312AEF4B73BF07147F3DA
SHA1:	50D016EA0B0B0C7F4610F867744FAE198D33D5FE
SHA-256:	82C60B906FB3AB368C958D0715D22CC2F257A07D53610E5E50465DFA5F4D599C
SHA-512:	90CB2F4CADB531FCEAF4BAC84E080CDA161BC8323EE5BB463C07D9763C7D5B16E3A0E0C17B075E51D7F382E2E9F89644DED2A02E44125717DF22754E01FA521C
Malicious:	false
Reputation:	low
URL:	https://cdn.zipy.ai/sdk/v1.0/zipy.min.umd.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e\|\|self).zipy={})}(this,function(e){var t,n,r;!function(e){e[e.Mutation=0]="Mutation",e[e.MouseMove=1]="MouseMove",e[e.MouseInteraction=2]="MouseInteraction",e[e.Scroll=3]="Scroll",e[e.ViewportResize=4]="ViewportResize",e[e.Input=5]="Input",e[e.TouchMove=6]="TouchMove",e[e.MediaInteraction=7]="MediaInteraction",e[e.StyleSheetRule=8]="StyleSheetRule",e[e.CanvasMutation=9]="CanvasMutation",e[e.Font=10]="Font",e[e.ReplayerEvent=11]="ReplayerEvent",e[e.ConsoleInfo=50]="ConsoleInfo",e[e.ConsoleError=51]="ConsoleError",e[e.ConsoleWarning=52]="ConsoleWarning",e[e.ConsoleDebug=53]="ConsoleDebug",e[e.Error=70]="Error",e[e.RangeError=71]="RangeError",e[e.ReferenceError=72]="ReferenceError",e[e.TypeError=73]="TypeError",e[e.SyntaxError=74]="SyntaxError",e[e.URIError=75]="URIError",e[e.EvalError=76]="EvalError",e[e.UnhandledRejection=77]="UnhandledRejection"

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12126)
Category:	downloaded
Size (bytes):	12174
Entropy (8bit):	5.295330507599006
Encrypted:	false
SSDEEP:	192:HOpQw5F7GIZJmh89kTfJLBlqMQIEBC0QcZfCprJfwOorHX:HOpQw5FXBkTfJLBTQVQ01CtJfwxD
MD5:	C6003904D43881B45EC98D9EBE91C817
SHA1:	8E0563D35472D4D3FDB9236634F717DCC830EE5A
SHA-256:	9A891028AC6F05C74ACE69FD5503C6F99F727563E48AB03F9B52CFDF3CA4723B
SHA-512:	95E642505C29255226905FA48C2BA1BF9A2344059D9B4D1D8A9AF92E063A9FDAEE63F1D39DF9C8B1A1A4A25B7B61B1FAAE71A140B58BC63EEDDE34993D39AB4C
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/8267.061962da.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8267],{66840:function(t,n,e){function r(t){return function(){var n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},e=n.width?String(n.width):t.defaultWidth;return t.formats[e]\|\|t.formats[t.defaultWidth]}}e.d(n,{Z:function(){return r}})},17325:function(t,n,e){function r(t){return function(n,e){var r;if("formatting"===(null!==e&&void 0!==e&&e.context?String(e.context):"standalone")&&t.formattingValues){var o=t.defaultFormattingWidth\|\|t.defaultWidth,a=null!==e&&void 0!==e&&e.width?String(e.width):o;r=t.formattingValues[a]\|\|t.formattingValues[o]}else{var i=t.defaultWidth,u=null!==e&&void 0!==e&&e.width?String(e.width):t.defaultWidth;r=t.values[u]\|\|t.values[i]}return r[t.argumentCallback?t.argumentCallback(n):n]}}e.d(n,{Z:function(){return r}})},56884:function(t,n,e){function r(t){return function(n){var e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},r=e.width,o=r&

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5410), with no line terminators
Category:	downloaded
Size (bytes):	5410
Entropy (8bit):	4.9429480671468475
Encrypted:	false
SSDEEP:	96:JfIqSCOINj09d+DvX8Zig/olpAkdhLm5Mk9rCWhhTWw:JfiCOINw9d+DvMZi8o7TqMk9GWhb
MD5:	5A0387BBF00A81C01FFBB07C7944E064
SHA1:	D9CABBB43C8E411A70E53499BB7CFE9DCBCD237D
SHA-256:	E6B2AC9CF422580B321EBE06855CD6FE24BBC2DAC27AEE69FBD650559928AB0D
SHA-512:	12ED93B368A4E300238907E8E12A06856E9B6B6C69A1CCB38790B247AB0AEB226106F25BD80EB360ABE5D30794A4B1F10446DAD8369C3DAB3F2436E6069DD7B9
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.3.2.6
Preview:	.mfp-bg,.mfp-wrap{position:fixed;left:0;top:0}.mfp-bg,.mfp-container,.mfp-wrap{height:100%;width:100%}.mfp-container:before,.mfp-figure:after{content:''}.mfp-bg{z-index:1042;overflow:hidden;background:#0b0b0b;opacity:.8;filter:alpha(opacity=80)}.mfp-wrap{z-index:1043;outline:0!important;-webkit-backface-visibility:hidden}.mfp-container{text-align:center;position:absolute;left:0;top:0;padding:0 8px;box-sizing:border-box}.mfp-container:before{display:inline-block;height:100%;vertical-align:middle}.mfp-align-top .mfp-container:before{display:none}.mfp-content{position:relative;display:inline-block;vertical-align:middle;margin:0 auto;text-align:left;z-index:1045}.mfp-ajax-holder .mfp-content,.mfp-inline-holder .mfp-content{width:100%;cursor:auto}.mfp-ajax-cur{cursor:progress}.mfp-zoom-out-cur,.mfp-zoom-out-cur .mfp-image-holder .mfp-close{cursor:zoom-out}.mfp-zoom{cursor:pointer;cursor:zoom-in}.mfp-auto-cursor .mfp-content{cursor:auto}.mfp-arrow,.mfp-close,.mfp-counter,.mfp-preloader{-webk

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13540)
Category:	downloaded
Size (bytes):	13588
Entropy (8bit):	5.321517803289008
Encrypted:	false
SSDEEP:	192:1FLHSLO8l7Psbxyhfz0OYvwAVgxBQ0mlAFdshmBqlFU/2auIc9y:PmqyfYvwAVgl+mBq02TIc9y
MD5:	994E77E6644B16FBAB717F38F4235B9C
SHA1:	C750A5B0A6177BD1041DA9BA2CFAB32CC5DA1851
SHA-256:	64C7AEC5ECBC16C3BEB29343994D69E15B7168552580F921430D9F2A6070746A
SHA-512:	99FE9BF7069CFAB9D68F666A4845809C540A0739C342FE3880CAB1788A2506F0DC07E70D0AE9894D24A678C593AA9F7339588ACC4E67F125FE3D1B0F9A6CC27C
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1487.b827d9dc.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1487],{81153:function(n,e,t){t.d(e,{ZP:function(){return y}});var o=t(93433),i=t(4942),r=t(63366),a=t(87462),c=t(93264),s=t(28182),l=t(51184),u=t(78519),d=t(94419),p=t(66934),f=t(31402),v=t(13967);var m=c.createContext(),h=t(11242),b=t(80184),Z=["className","columns","columnSpacing","component","container","direction","item","rowSpacing","spacing","wrap","zeroMinWidth"];function g(n){var e=parseFloat(n);return"".concat(e).concat(String(n).replace(String(e),"")\|\|"px")}function x(n){var e=n.breakpoints,t=n.values,o="";Object.keys(t).forEach((function(n){""===o&&0!==t[n]&&(o=n)}));var i=Object.keys(e).sort((function(n,t){return e[n]-e[t]}));return i.slice(0,i.indexOf(o))}var w=(0,p.ZP)("div",{name:"MuiGrid",slot:"Root",overridesResolver:function(n,e){var t=n.ownerState,i=t.container,r=t.direction,a=t.item,c=t.spacing,s=t.wrap,l=t.zeroMinWidth,u=t.breakpoints,d=[];i&&(d=function(n,e){v

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8668)
Category:	downloaded
Size (bytes):	8833
Entropy (8bit):	5.0631314208551395
Encrypted:	false
SSDEEP:	192:5BwzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:5BQoIJDlC8CPZnvrLkYluYTUuPeGzs
MD5:	43B1AA1EA2D73E79E9D45980C7920446
SHA1:	1BEF149AEDEAFFF7A797E799CFBA168BED0D6DC6
SHA-256:	9C7BD3DADF6EDC19D3B8876A8E2B0B0AE6B54F403D7E987EC82B041128CFDD35
SHA-512:	A32D0D5CA42DDADAF3C4CA3A2570D8BC372A3494503E72F9E80043A0F742FAFB083899D4F8E2EE73740FDD32409EC34A5D45D5A62B79C5160A4E28A3DE8BFD42
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/bb-plugin/js/jquery.waypoints.min.js?ver=2.3.2.6
Preview:	/!.Waypoints - 4.0.0.Copyright . 2011-2015 Caleb Troughton.Licensed under the MIT license..https://github.com/imakewebthings/waypoints/blog/master/licenses.txt./.!function(){"use strict";function t(o){if(!o)throw new Error("No options passed to Waypoint constructor");if(!o.element)throw new Error("No element option passed to Waypoint constructor");if(!o.handler)throw new Error("No handler option passed to Waypoint constructor");this.key="waypoint-"+e,this.options=t.Adapter.extend({},t.defaults,o),this.element=this.options.element,this.adapter=new t.Adapter(this.element),this.callback=o.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=t.Group.findOrCreate({name:this.options.group,axis:this.axis}),this.context=t.Context.findOrCreateByElement(this.options.context),t.offsetAliases[this.options.offset]&&(this.options.offset=t.offsetAliases[this.options.offset]),this.group.add(this),this.context.add(this)

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11498)
Category:	downloaded
Size (bytes):	11545
Entropy (8bit):	5.364299891766076
Encrypted:	false
SSDEEP:	192:sikYBRvvJGNuapg8G89GKipX8v89xkvhRMoqlDfqT+gUyvcproB+K7nk6KfC9:LHJQZpgYOXQkuhGoqlDfCUNBID
MD5:	0699B3D721928DA8A8E34EFF3FBC3947
SHA1:	2E6E516D8325F9FC68F8F7302C1D94D77E878B5A
SHA-256:	0ED8590EC897136B9CC53D3D44269FBE20D7A8A0ED3C34482197EB48B6E93BD8
SHA-512:	273F362B6381BACB5A6DB6BB699C1F56BEDF7FC54E0CF2E8A4738204F1DA6D753BA7441B69BF55447D883A8345AA79C181C9C24009C29145C3C65E955674E853
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/225.deeb4ee7.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[225,3938],{49797:function(e,t,r){function n(e){var t=Object.create(null);return function(r){return void 0===t[r]&&(t[r]=e(r)),t[r]}}r.d(t,{Z:function(){return n}})},9140:function(e,t,r){r.d(t,{O:function(){return m}});var n={animationIterationCount:1,aspectRatio:1,borderImageOutset:1,borderImageSlice:1,borderImageWidth:1,boxFlex:1,boxFlexGroup:1,boxOrdinalGroup:1,columnCount:1,columns:1,flex:1,flexGrow:1,flexPositive:1,flexShrink:1,flexNegative:1,flexOrder:1,gridRow:1,gridRowEnd:1,gridRowSpan:1,gridRowStart:1,gridColumn:1,gridColumnEnd:1,gridColumnSpan:1,gridColumnStart:1,msGridRow:1,msGridRowSpan:1,msGridColumn:1,msGridColumnSpan:1,fontWeight:1,lineHeight:1,opacity:1,order:1,orphans:1,tabSize:1,widows:1,zIndex:1,zoom:1,WebkitLineClamp:1,fillOpacity:1,floodOpacity:1,stopOpacity:1,strokeDasharray:1,strokeDashoffset:1,strokeMiterlimit:1,strokeOpacity:1,strokeWidth:1},i=r(49797),o=/[A

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12959)
Category:	downloaded
Size (bytes):	13007
Entropy (8bit):	5.484176177980837
Encrypted:	false
SSDEEP:	384:Ikw1n/x+A+URWzppvVTv2+LgbOGSC/J8fSMcHOopJYFgxsgIb28DWd3h4dWbSglR:IDN/x+A+UczppvVTv2+cbOGSC/J8fSMs
MD5:	33EA11EE833366B34931D2CD63E3F94C
SHA1:	139F36363D70D7E4A5CE9CFB49D36863EBC7DE81
SHA-256:	6F4AB3BF56FF6BDF645F99779DD6D154474AC877C25BD870E5117EF789A50CDE
SHA-512:	886AEFE5697BB04F61B7FDC0188EC01773E3D006F23CC032543CE9C52E37BE78E22BD505FD44531C11315EB39C7801EFF412B5A9560D27675764E8F43372C6D5
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5543.663021d7.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5543],{69212:function(t,e,a){var o=a(64836);e.Z=void 0;var n=o(a(45649)),r=a(80184),l=(0,n.default)([(0,r.jsx)("path",{d:"M11.99 2C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zM12 20c-4.42 0-8-3.58-8-8s3.58-8 8-8 8 3.58 8 8-3.58 8-8 8z"},"0"),(0,r.jsx)("path",{d:"M12.5 7H11v6l5.25 3.15.75-1.23-4.5-2.67z"},"1")],"AccessTime");e.Z=l},26759:function(t,e,a){var o=a(64836);e.Z=void 0;var n=o(a(45649)),r=a(80184),l=(0,n.default)((0,r.jsx)("path",{d:"m7 10 5 5 5-5z"}),"ArrowDropDown");e.Z=l},70366:function(t,e,a){var o=a(64836);e.Z=void 0;var n=o(a(45649)),r=a(80184),l=(0,n.default)((0,r.jsx)("path",{d:"m7 14 5-5 5 5z"}),"ArrowDropUp");e.Z=l},48465:function(t,e,a){var o=a(64836);e.Z=void 0;var n=o(a(45649)),r=a(80184),l=(0,n.default)((0,r.jsx)("path",{d:"M19 2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h4l3 3 3-3h4c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm-5.12 10.88L12 17l-1

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9653)
Category:	downloaded
Size (bytes):	9701
Entropy (8bit):	4.988859601361586
Encrypted:	false
SSDEEP:	192:ZsiBCJU/U5UTh3AUla3YyG2q0CdCytx9e6h3FyulC3TGs/NY3:ZjByU/tl3Aqzz0CdCKx9e6hYlzY3
MD5:	DEAABE9E5FD715F0D852A30380115491
SHA1:	10E0F98F465DE46A57145000D22127C01BD29048
SHA-256:	85661328D5B0420D281B3F1CE12434A11388EE49B63E00689580D1A22798341E
SHA-512:	DDAAFA47A83FF96015C4992F30853FC0087046D2607C908560404439D23EE435249293E7AEDB2D8C290D7D3C2DE3279A20025EB3FCA541AE308430185B27C4B8
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7875.4b63acd4.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7875],{87875:function(e,n,t){"use strict";t.r(n),t.d(n,{ApolloLink:function(){return _},Observable:function(){return o},concat:function(){return d},createOperation:function(){return b},empty:function(){return h},execute:function(){return x},from:function(){return m},fromError:function(){return v},fromPromise:function(){return l},getOperationName:function(){return c.rY},makePromise:function(){return a},split:function(){return w},toPromise:function(){return s}});var r=t(33134),o=t.n(r)(),i=t(34105),u=t(3431),c=t(74004);!function(e){function n(n,t){var r=e.call(this,n)\|\|this;return r.link=t,r}(0,u.ZT)(n,e)}(Error);function f(e){return e.request.length<=1}function s(e){var n=!1;return new Promise((function(t,r){e.subscribe({next:function(e){n\|\|(n=!0,t(e))},error:r})}))}var a=s;function l(e){return new o((function(n){e.then((function(e){n.next(e),n.complete()})).catch(n.error.bind(n))}))}function v(

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8029)
Category:	downloaded
Size (bytes):	8076
Entropy (8bit):	5.368125190164754
Encrypted:	false
SSDEEP:	96:+Du2BazIvGE1IsZmtupsoVCzsNjDEuDXHEq6NM/6N+VZs9Y9V:Z2Bh1ZmcJVCwNXEEX8NJNh9Y3
MD5:	2B480985FE2A3EE1B98BDEFAB425857E
SHA1:	6F438E733C92BA1CED391C1EB3CC1BBDB1BD3968
SHA-256:	5B8F25F7293922CC6C6C6CD4DF99E00CF584C789DA706EEE60324D7275E78313
SHA-512:	8946579C302E1FB0092134C67C2AE23A0CEC8E2E906FF8C4F3AEDDF14233BE32CACF469CE2EFF81CE230BCBF915468F31C0F573FC3208BFDB4F6DC8AAA7A961C
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/783.df13d78d.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[783],{5574:function(e,r,n){var o=n(4942),t=n(63366),a=n(87462),i=n(93264),l=n(28182),c=n(94419),s=n(18252),d=n(14036),p=n(77362),u=n(60627),f=n(4841),v=n(31402),m=n(66934),h=n(17780),Z=n(85090),x=n(18060),g=n(13967),b=n(80184),S=["aria-describedby","aria-labelledby","BackdropComponent","BackdropProps","children","className","disableEscapeKeyDown","fullScreen","fullWidth","maxWidth","onBackdropClick","onClose","open","PaperComponent","PaperProps","scroll","TransitionComponent","transitionDuration","TransitionProps"],w=(0,m.ZP)(x.Z,{name:"MuiDialog",slot:"Backdrop",overrides:function(e,r){return r.backdrop}})({zIndex:-1}),W=(0,m.ZP)(p.Z,{name:"MuiDialog",slot:"Root",overridesResolver:function(e,r){return r.root}})({"@media print":{position:"absolute !important"}}),k=(0,m.ZP)("div",{name:"MuiDialog",slot:"Container",overridesResolver:function(e,r){var n=e.ownerState;return[r.container

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x565, components 3
Category:	dropped
Size (bytes):	94369
Entropy (8bit):	7.986617517966933
Encrypted:	false
SSDEEP:	1536:/uYu1C8dcljkTHI3U2/gVssTqVrKCHRr22DEPCFGvGdpfDahdWGqEXnu5tUkpmSe:/JidSIbgU2FRRx22IPCFGvGPWhdLEtUZ
MD5:	CE33CB0245C6CBF42DD5D61936E15D6A
SHA1:	F396DBFE1411ECEC715486BB03970B7F3CAC6E78
SHA-256:	BD6E72BC72EC793CD5F79E51F19C0B2DB2ECDA7388997C740DA32F604699875E
SHA-512:	19BFC8181610BADED7662AEA46435C765517D89C465AA00E3F231C48EABA652497FE612DB8C1CF140CFEA344DE8FC4386827878EBBE1DC8EF8980CDFF9B00631
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......5. .."................................................................................1...f...z.'s'..f..(...q.g.K6......_G...\|...=..G..%....5# 9 Q!.8..S...y....$.Q5...;J).n....].r.}q..............\|f+....v5+...J..e..$....:...Y 2.X.).a J....X.(...n....Y..\|k....@.y...5Ov....=..5...._G.E.t.j.)@m.....M.6.ua...++.P.Q.Qc...6.0-.v...D..D........3LRZ.w..^_TrL^~.^.P#h... ..d.<R.Mx.!.b.hB.E5......Ee....xjG.t.$."...Z.Cw,.-)........%.y..].[S....\|..U.........q.).5O.K....f..M.z...3.$...R\.iM.....h...R..:..f.C...dD.b...8...Q.5.3t.k.}g.....K'4Vo.C.t7........BHd...Y....2=.Lks........R.v_...M.n1..T.rEd...[PW.&..q...N.,Mit.iW.L..e....Y....g6...5U.9..#...o\|%...0T..:.........8#.m.........W..%...../d...P.0..b.4.;....<h.D...H..P.........m.....7t.......5$&S.-z...r_.S:..K.B....p..V.G..[../X...GT

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	28682
Entropy (8bit):	7.9312654025846525
Encrypted:	false
SSDEEP:	384:onngbAnqALtBEzYqe0zV2Jr8fM6i5tIweCQuxYuyx9zFMApmrpcCwKDG9CMRbt8k:onRqAhBEziMVC1CNu8FM8pCwewfYXm
MD5:	668CFFF84E29E3715C842CADABF9E5B8
SHA1:	5F823C869EA2A4D4C68E32C8AE6E63B9F6B9DBF4
SHA-256:	89C2CF75223B7D100F581157EC0EE29943EBA0E9FF4AE824D4691D60B59F9277
SHA-512:	86B3A2FA13709130F39E5D4ACDFB941039CECBFA11B0609C794FD4E0233EAE2CCEA92E39AD278A6E3F8BF8E9F486148C6AF9063E3308DF02B096945ED73EF1DB
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SFbase-flip.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:699A1B62C03C11E9ABF6D9DDD2514968" xmpMM:InstanceID="xmp.iid:699A1B61C03C11E9ABF6D9DDD2514968" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	124493
Entropy (8bit):	5.26292828646358
Encrypted:	false
SSDEEP:	1536:Tv2hKpzXMG2xma0M0qdvCEFOpaxXVANZ3BzTb5Rj:TeAt8AxIY8XVCFT/
MD5:	6822C02F2638BA877803510FBAEE9212
SHA1:	1D6F619EF1EF5E1670605FA36406627F6891870B
SHA-256:	B02195713EE3E4030C659940C11EFB657C59D0D9D961350E0DE0CCCDEB2327D3
SHA-512:	31F816D8F0AFDD6D95A17D4137F662D58BA425980DF70AEC79E70F5AB00EC233F8122DF7DE469F4733DAFFAD33CD29623AE6ADC1C6D00DF8C8D69AFEEB02781E
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4164.685cb2de.chunk.js
Preview:	/! For license information please see 4164.685cb2de.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4164],{31725:function(e){var n=Object.getOwnPropertySymbols,t=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var n={},t=0;t<10;t++)n["_"+String.fromCharCode(t)]=t;if("0123456789"!==Object.getOwnPropertyNames(n).map((function(e){return n[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(l){return!1}}()?Object.assign:function(e,l){for(var a,o,u=function(e){if(null===e\|\|void 0===e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),i=1;i<arguments.length;i++){for(var s in a=Obj

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	88581
Entropy (8bit):	5.269875145563036
Encrypted:	false
SSDEEP:	768:dHf8vexDZhPYTNA3hRejvP+Yrly1Yj4hb3PaDHLcO5CS5Tiz3n1QaPaWX5CQ//:t5TQhoIvPVy1hpaDHLjhTiz3npkO
MD5:	636CE665CD44633380D82D0D969C3746
SHA1:	46B6925F6D3F43170AF164C0D5FFD70A24AE2618
SHA-256:	2683EE94A1D880B484A864EA51A3E8090676D88CFD05A2FE2F5EBA5E7FA94FCC
SHA-512:	4DF418301B817C37E98CB4E0CE0F65C32E7919CA742D32E5093AF65AF08D8987A30AB9DBC4BBE377E3CC73DF50B1169AD84F8B8A50E34E0ABB1C1A157797DDA3
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7898.e38af75d.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7898],{95239:function(e,t,r){var n=r(4942),l=(r(93264),r(98850)),i=r(31803),o=r(7101),a=r.n(o),C=r(80184),c=(0,i.Z)((function(e){return{outlined:(0,n.Z)({border:"1px solid ".concat(e.palette.divider),display:"inline-block",maxWidth:"100%",minWidth:e.spacing(27),overflow:"hidden"},e.breakpoints.down("lg"),{display:"block",minWidth:"initial",width:"100%"}),fullWidth:{width:"100%"}}}));t.Z=function(e){var t=c(),r=e.actions,i=e.alignFlexStart,o=void 0!==i&&i,s=e.borderRadius,H=void 0===s?1:s,u=e.className,f=e.children,d=e.disablePadding,p=void 0!==d&&d,b=e.fullWidth,v=void 0!==b&&b,g=e.onClick,y=e.title,O=!!y\|\|!!r;return(0,C.jsxs)(l.Box,{className:a()(t.outlined,(0,n.Z)({},t.fullWidth,v),u),onClick:g,px:p?void 0:3,py:p?void 0:2.5,sx:function(e){return{borderRadius:e.spacing(H)}},children:[O&&(0,C.jsx)(l.Box,{mb:3,children:(0,C.jsxs)(l.Box,{alignItems:o?"flex-start":"center",display:"fl

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	5.062236977041069
Encrypted:	false
SSDEEP:	24:xrbnlPVTo9paVLno9WPJqfPFWlE/HBxlMIlnf/HBQ/H+MIms+tQBneQynn:xrbnoz8oExWFWmPzaIhfPmP+PbWQBeQo
MD5:	D0F71F1149B14614B67ED2A626B111B3
SHA1:	0EBFA43C5BF852FD3E83B2EA495902A61B1C600D
SHA-256:	8341AAB4CD4B5021AC0C25FE37F2479E15A197473BE11D32E13CFF24B0D4D4F7
SHA-512:	D1577EE52FFA02DFD1921DF9882287C0C333516F8EB4E1F9F10B2E804822AD38EE9EB6866A49B31F0BB2FE35C65E6D1D1EE4936A8C5C09B12B3FEA80C45ADEEE
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/themes/regionalexpress/js/functions.js?ver=5.7.11
Preview:	/*. Theme functions file.. . Contains handlers for navigation and widget area.. /..(function ($) {..$(document).ready(function () {.../... MENU TOGGLE... */...$('#menu-toggle').click(function (e) {....e.preventDefault();....$('#masthead').toggleClass('toggled-on');....return false;...});...$('#close-menu').click(function (e) {....e.preventDefault();....$('#masthead').removeClass('toggled-on');....return false;...});...$('.main-menu a[href="#"]').click(function (e) {....return false;...});.//..$('.main-navigation a[href="#"]').click(function () {.//...$(this).next('ul').toggleClass('toggled-on');.//...return false;.//..});....//menu on scroll...var scrollTop = $(window).scrollTop();...updateMenuDisplay();...$(window).scroll(function () {....scrollTop = $(window).scrollTop();....updateMenuDisplay();...});....function updateMenuDisplay() {....if (!$('#masthead').hasClass('small-menu-force')) {.....if (scrollTop > 10) {......$('#masthead').addClass('small-menu');.....} else {...

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12811)
Category:	downloaded
Size (bytes):	12936
Entropy (8bit):	5.311090065913894
Encrypted:	false
SSDEEP:	192:sG/2Dla7ndn2J24Pnmo6wZI8TznPbMAxZPosnJuEP2IKZdn+Y:sgUla7dn2JXPmWnyF/IKSY
MD5:	28D3FC6BA18FDC9C1CF22487FCC197B9
SHA1:	85A80889136FE7DF24E6698888D40C20E609E996
SHA-256:	C927C29A43A029AB37D8305066B26838AADFDBE5AAB4AFA3F18A412D9C3F0273
SHA-512:	BDE5D8F46F2A7D939832F7D46A63BE5918CCC21E8F40089D9994D5E9FF2639C2373C83F997F621DBE24431250E1DA0B1EB0A3C363B259569BA688DADAB0BA201
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1660.ffbdfe6e.chunk.js
Preview:	/! For license information please see 1660.ffbdfe6e.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1660,8182],{40558:function(n,e,t){var r=t(87462),o=t(63366),i=t(93264),u=t(28182),c=t(94419),a=t(14036),f=t(31402),l=t(66934),s=t(8232),d=t(80184),v=["children","className","color","component","fontSize","htmlColor","inheritViewBox","titleAccess","viewBox"],m=(0,l.ZP)("svg",{name:"MuiSvgIcon",slot:"Root",overridesResolver:function(n,e){var t=n.ownerState;return[e.root,"inherit"!==t.color&&e["color".concat((0,a.Z)(t.color))],e["fontSize".concat((0,a.Z)(t.fontSize))]]}})((function(n){var e,t,r,o,i,u,c,a,f,l,s,d,v,m,h,p,Z,y=n.theme,g=n.ownerState;return{userSelect:"none",width:"1em",height:"1em",display:"inline-block",fill:g.hasSvgAsChild?void 0:"currentColor",flexShrink:0,transition:null==(e=y.transitions)\|\|null==(t=e.create)?void 0:t.call(e,"fill",{duration:null==(r=y.transitions)\|\|null==(o=r.duration)?void

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18258)
Category:	downloaded
Size (bytes):	18383
Entropy (8bit):	5.88050537460855
Encrypted:	false
SSDEEP:	384:3ALxuC+yZhS2+INoCH+KJsV+Rw1YZ+qMk9/WWd:QFuC+ihS2+INo8+J+Rwi+qMk9/W4
MD5:	C20607CE83E01BB65686CD66A702AF6E
SHA1:	8A73D348EA86F6F67E591FBD5F8BC0AE8F3A414D
SHA-256:	E8B2C824FD83FA8EA7DC107FEB2C4ACBBC110A52BFFBA8384A52052196D17993
SHA-512:	96DD6A7A7FB417E1275E1775D581764B30BED567B78A1F1C540ACF5EE25DC23D14A04F382A4F4A40991001ACFB87F339B79C3E560E0F18CD8487294E8A7402A2
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/8718.44c8171f.chunk.js
Preview:	/! For license information please see 8718.44c8171f.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8718],{88199:function(e,t,n){n.d(t,{W:function(){return r},X:function(){return o}});var _="EnableUs.Authorization",r="".concat(_,".AccessToken"),o="".concat(_,".TokenType")},6158:function(e,t,n){n.r(t);var _=n(3644),r=n.n(_),o=n(29439),i=n(93264),A=n(36395),s=n(37929),E=n(1413),c=n(35048),a=n(72434),P={breakpoints:{values:{xs:0,sm:600,md:960,lg:1280,xl:1920}},palette:{primary:{main:"#28a745"},secondary:{dark:"#234cc9",main:"#007bff",light:"#1992fb"},error:{main:"#dc3545"},info:{main:"#dadada"},icon:{main:"#007bff"}},components:{MuiAlert:{styleOverrides:{action:{alignItems:"center",paddingTop:0}}},MuiAutocomplete:{styleOverrides:{listbox:{'& .MuiAutocomplete-option[aria-selected="true"], & .MuiAutocomplete-option[aria-selected="true"].Mui-focused':{backgroundColor:"rgba(0, 0, 0, 0.08)"}}}},MuiButton:{styleO

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34784)
Category:	downloaded
Size (bytes):	34832
Entropy (8bit):	5.367885351400145
Encrypted:	false
SSDEEP:	384:JR/lWehCKr+uXctu3QniEp+AcspKN2qPqb073K/iKQKrY3CKMKz2Zxtt4pMWBkRU:JR/lncXuVYU0ip8aC5ADBhcUvxicLceb
MD5:	C18DAE37630DADEF4DBDBDE0BDB0FCC6
SHA1:	D1DD460F1FA6DF6C5B5C184C29C95703CE945227
SHA-256:	69A659FA07FB1C4D1C8BE59B057F3E8E2A77A5EE6EE953007591FA46EDD8CDFC
SHA-512:	4FE8E1D3FBEFCEE36230211D75E20FBBB9059408B3F2EC1134DCA525D23C28168B28CE2421E43905416AB067D1D29D9425935B7722AC44C32D37DDFEA2202127
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4217.46f06040.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4217],{11097:function(e,n,o){var r=o(74165),i=o(15861),t=o(29439),a=o(93264),l=o(98850),s=o(31803),c=o(86711),d=o(40600),u=o(72231),p=o(30629),m=o(97313),h=o(38475),f=o(80826),x=o(43979),v=o(81588),g=o(75288),b=o(88125),j=o(69852),Z=o(60677),y=o(80184),C=["aol.","comcast.","gmail.","hotmail.","icloud.","live.","msn.","outlook.","yahoo."],w=(0,s.Z)((function(e){return{clearBit:{color:"var(--divider-color-light)",fontStyle:"italic",marginTop:e.spacing(1)},clientLogoWrapper:{"& .MuiMenu-list":{minWidth:e.spacing(48),padding:"0"},"& .MuiMenu-paper":{marginTop:e.spacing(1)}},divider:{margin:e.spacing(0,3)},domainItem:{color:"var(--background-color-gray)"},logo:{maxHeight:e.spacing(5),maxWidth:e.spacing(22),objectFit:"scale-down"},logoItem:{display:"block",height:"auto",width:e.spacing(3)},nameItem:{flex:"1 1 auto",margin:e.spacing(0,1),overflow:"hidden","text-overflow":"ellipsis","white

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	115408
Entropy (8bit):	5.469680359004367
Encrypted:	false
SSDEEP:	1536:BB3rWStxZlLN/FrgyM+sYbrcNRlA2uf/6FCnR5Kpav:BBlRLNrgf+n6QnRN
MD5:	F243A62705FD4D77D35CDBFB07938879
SHA1:	7D9C185CBD918112C89E16D92E7FEB422DBF6043
SHA-256:	AD36E7422B95130B3C6F5BFA10FCF22AFFB48C1726CACC3C1B4A3C80C877B702
SHA-512:	28091FA1FD69C6E67D05931C5C05B6DAA24FD53AD0F55A728902134F3FF02A506B62FA9B7D7582CA0A9C6A0CF9DA21B39FBF38E9EE003ACB1BCCC051A9E59F4D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7838.1bcca07f.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7838],{90048:function(e,n,t){t.d(n,{r:function(){return l}});var r,o=t(93264),i=["title","titleId"];function a(){return a=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var t=arguments[n];for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])}return e},a.apply(this,arguments)}function s(e,n){if(null==e)return{};var t,r,o=function(e,n){if(null==e)return{};var t,r,o={},i=Object.keys(e);for(r=0;r<i.length;r++)t=i[r],n.indexOf(t)>=0\|\|(o[t]=e[t]);return o}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)t=i[r],n.indexOf(t)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,t)&&(o[t]=e[t])}return o}var c=function(e,n){var t=e.title,c=e.titleId,l=s(e,i);return o.createElement("svg",a({width:16,height:16,viewBox:"0 0 16 16",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:n,"aria-labelledb

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 493458
Category:	downloaded
Size (bytes):	150799
Entropy (8bit):	7.998173297503546
Encrypted:	true
SSDEEP:	3072:vYrOhBH6u8nTTU6u5cnuHBSeVD1K9Mf12kF5+YPgei/v16zW:wrHucHUb5jBtVA9O2o5+UgH/EzW
MD5:	B27B573E6B04DAED0B4144A6E206BA93
SHA1:	026B3BC8B3F967D7096191718F9B999C06A090AF
SHA-256:	70371467412BCA4624E5589F75D4A2BB10581E6C4C9CE9F2520AC9DA5A60DECF
SHA-512:	E1787EE13F039FA01B01EF018B70FF38C5BC179EF3AEEA19E013C4DFD308D628FE9BDF91AD9B5BD47489BA1C061E68DFC9A03BA10CE28534516DB2FEFF9C4756
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendor-modern.07772018.js
Preview:	...........i{.8.(....6'.!#Z..2...T.v.gb...**=..I,S.BR^.....9X..r......X.....8...oo....0..(e[A4.....q.....Q)c[.,..dw..,......N.}..#m..x}....g[...?s..#/...i......l...Q.q<......Z..Vs.Lgf...........c2;.#.}.h,.oY..3.{9......&A.>&.%....p.......a?.z.9.........<>.o.Xv.....O;.-...1b..p..a...V.qP...3#...^..A'.B.N..........=.^.^.X...2..HS.Y.lg'l..I......d..Zc..}..N...=vey>z.:n........ ...1.W...Ys<..0g/3.......e.$.t"k.]....+j.8..<=q..z]...U..z.0...`..d....u....g...V......^E...Q...e....9...k..8Y3].Af..&.....z...\|i..o....Z`VL.>...0..y..V+c..F...\|.E.hv..3...;2Rb........B."<......Q...&.....s..y>.K.b..Y.p.B@.8y....f.!..^..y...5.Q...V.e.x..8.._..c.JNlS.2kNY.2...-3f...-.@c..AX.a.g....a.....@......5......Y....s%M.V.5q.A.1\Nar-sl.i..c...E.(.ys.U....c..........K....K. .0wNd.3..`6.......S...p<;..1..._;]0.?@....R.l.Y....)...<.E.....I...&.C.._...h.b...&C...W.m7.n1..J~.3.....8K....Q.r... .$!2K..X.F........h.jJ.H..P#0..........\....).@..".1......C.v.N

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43590)
Category:	downloaded
Size (bytes):	43638
Entropy (8bit):	5.341411276984212
Encrypted:	false
SSDEEP:	768:cD+vPrvZipvveTvqhVoNHHDDi+iLx9X9JJ2uvRzgbJGAQ:TrvZKoSh+VDDifLx9X9/pa9Gr
MD5:	444117A48B837224BACF8B8E87913A99
SHA1:	AC20643BC07DBCE7DB9A339566D164ABE2052D79
SHA-256:	349DE55443AAF6479AC1D66F6ABBA05C50F506EF804BA857ED85BF2529EE361B
SHA-512:	733D6DF319EF012094CDA838FA26A1928C82AEF553CB98AA2AAF0F39FBF24FB7F8F29E62D7E482D234605FA6FB7A0C431E480C57BDF34BE64C99CCEF5B215225
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/7844.3d8f7ba2.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7844],{9584:function(e,t,a){a.d(t,{Z:function(){return b}});var n=a(4942),o=a(63366),r=a(87462),i=a(93264),c=a(28182),l=a(36229),s=a(94419);var d=a(21607),u=a(66934),p=a(31402),v=a(14036),m=a(12652),g=a(80184),h=["anchorOrigin","className","classes","component","components","componentsProps","children","overlap","color","invisible","max","badgeContent","slots","slotProps","showZero","variant"],f=(0,u.ZP)("span",{name:"MuiBadge",slot:"Root",overridesResolver:function(e,t){return t.root}})({position:"relative",display:"inline-flex",verticalAlign:"middle",flexShrink:0}),Z=(0,u.ZP)("span",{name:"MuiBadge",slot:"Badge",overridesResolver:function(e,t){var a=e.ownerState;return[t.badge,t[a.variant],t["anchorOrigin".concat((0,v.Z)(a.anchorOrigin.vertical)).concat((0,v.Z)(a.anchorOrigin.horizontal)).concat((0,v.Z)(a.overlap))],"default"!==a.color&&t["color".concat((0,v.Z)(a.color))],a.invis

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41417)
Category:	downloaded
Size (bytes):	41472
Entropy (8bit):	5.355901068365035
Encrypted:	false
SSDEEP:	384:tBN3kQxNYkRm7SHeFOB8bFobZuup/TQb3N6wwJCDDVU2dg:tBN32yZ8pobZuZb3N6wwJCDDVU2W
MD5:	B4293DF02A38FB279829C078D8203A3D
SHA1:	048298C78AA31ABB19386633686BC74089BE6C99
SHA-256:	3A9A2DC9292CE610B1D3A98C47CA99F1AC1ECD495072C6B90F0E90CCA1BC6751
SHA-512:	661BA5717372AECE4D371569A91459A9FC37EFF292ABA5108D1BBAFC2F92D476A473733540B0229FBB32A708FAAC37AA13BE4D99F939510438EF7B881697800F
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/css/2655.20d3c4e6.chunk.css
Preview:	@charset "UTF-8";.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.video-js .vjs-modal-dialog,.vjs-button>.vjs-icon-placeholder:before,.vjs-modal-dialog .vjs-modal-dialog-content{height:100%;left:0;position:absolute;top:0;width:100%}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.vjs-button>.vjs-icon-placeholder:before{text-align:center}@font-face{font-family:VideoJS;font-style:normal;font-weight:400;src:url(data:application/font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20154), with no line terminators
Category:	downloaded
Size (bytes):	20154
Entropy (8bit):	5.262782054659441
Encrypted:	false
SSDEEP:	384:wruCoi8I4tOx3HRAKq39OC3BhXGSnL/2W4HG6l0r2+0NrD5OOZ+4:wiGXgNrGSnL+m6lB+0Nrcm+4
MD5:	5FC8C870192A1530EBF2858370448630
SHA1:	05178CC81180F091C9CA091949BE1AF932C93A22
SHA-256:	2C04E438B5C5B6C29C3FA3831A969F2E7134664AF8DF56ABB1FD930DBFD389DD
SHA-512:	0552906A3D7F8ADFBE24F0413E4FF137A79538B9FE58F1C79805B5CFFE1A81F0EBD2E08743AE9264A270A5140A498D185A3DE8ABBBE92B97D9FCF1C073468D92
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/plugins/bb-plugin/js/jquery.magnificpopup.min.js?ver=2.3.2.6
Preview:	!function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e("object"==typeof exports?require("jquery"):window.jQuery\|\|window.Zepto)}(function(e){var t,n,i,o,r,a,s="Close",l="BeforeClose",c="AfterClose",d="BeforeAppend",u="MarkupParse",p="Open",f="Change",m="mfp",g="."+m,v="mfp-ready",h="mfp-removing",y="mfp-prevent-close",C=function(){},w=!!window.jQuery,b=e(window),I=function(e,n){t.ev.on(m+e+g,n)},x=function(t,n,i,o){var r=document.createElement("div");return r.className="mfp-"+t,i&&(r.innerHTML=i),o?n&&n.appendChild(r):(r=e(r),n&&r.appendTo(n)),r},k=function(n,i){t.ev.triggerHandler(m+n,i),t.st.callbacks&&(n=n.charAt(0).toLowerCase()+n.slice(1),t.st.callbacks[n]&&t.st.callbacks[n].apply(t,e.isArray(i)?i:[i]))},T=function(n){return n===a&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),a=n),t.currTemplate.closeBtn},_=function(){e.magnificPopup.instance\|\|(t=new C,t.init(),e.magnificPopup.instance=t)},P=function(){var e

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	4.6278836928408245
Encrypted:	false
SSDEEP:	6:jEAFcTEvcv0tE0F/P2QFM6SVRDFM2LoIaNVLcrPZmFxA4VLY:jEgcTEvc8tE0dP06OFM2hspcrxmFG4pY
MD5:	FEE8F6D03B17E6752F0AB632A82572DE
SHA1:	CC8E4181FB774EB0EAE3839CFF561001044F7E37
SHA-256:	2AF7C1DD0B53F76364F4690490041BEEA7B5A5AE2898AA1B362B4346E856671F
SHA-512:	7F648C1F31AE3FE6321F21370A89C09C8DD7E04AC629CF57CB4BE1B1922FFFD617E75060337D8CB3C09F4CE70C79C17EAE10B02B04AF032B5B69E6D5166DD689
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/checkBrowser.js
Preview:	// Validate localStorage availability.try {. window.localStorage.key(0);.} catch {. document.write(`. <p>You're using a browser set to private or incognito mode.</p>. <p>To access this page, please open a new browser window not in private mode.</p>. `);.}.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	150073
Entropy (8bit):	7.977904646036672
Encrypted:	false
SSDEEP:	3072:KCXxw7DuGWCaAQSfjY1INlg/Hcnq/nciMnhY25PTxhM6bg:KCXx4wCadSkSXY4q/nGnhY2FxhM1
MD5:	630DFCE3087E9C1B15BC104150BEC417
SHA1:	EA5C9E7F8C0A962E375B8BEA59E7ECF70FC26284
SHA-256:	80F333142A75F14E0E6BA78F7FDFF43247C650394BF3E7239E0E8CDEF4CFDF20
SHA-512:	AFB327E160DAD4BE863F8B691EC1DAD86A154640EB1EA9DE7326F72378A3B999FB4732C55F0F00FDE519DA51B25B28E97BB8745ABC38500C1EB1B258CC787D1B
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SF1.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:F94155B1C03911E98C3C98BBA5174242" xmpMM:InstanceID="xmp.iid:F94155B0C03911E98C3C98BBA5174242" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x600, components 3
Category:	downloaded
Size (bytes):	501716
Entropy (8bit):	7.9734989849199644
Encrypted:	false
SSDEEP:	12288:T/rBekvb3/YgPmxzvY4/7tdIY9+GqxX1I3QAJ:zrBekz3/rOxLLBWXm3ZJ
MD5:	B268CBA2A730055FD7CC73599354EC31
SHA1:	DDCD789FB1223D5DABACF218F2158721D3BE6F96
SHA-256:	7D161A13B4E4CD3F4DBD85540936125E51091F8E3D4F451DA270BC71B2B8C8BA
SHA-512:	C186306442915F961421E669484B36E2EB67B29242B90D5A1F83227066CBE703E35AEC04A692D4F8A198E8C6BA73E002CE3A3D394D8A3BDBAE19450291372BB7
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/10/VAL-fd-2.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:07390BA4E45511E98A15E08E9BEB6226" xmpMM:InstanceID="xmp.iid:07390BA3E45511E98A15E08E9BEB6226" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 529834
Category:	downloaded
Size (bytes):	145451
Entropy (8bit):	7.997587454576252
Encrypted:	true
SSDEEP:	3072:HOcN+VHiWh7F3F/TSb/1DsQG/0FXSs8U0fRlFzblF4A8/:HOcN+pd4Of//rUeFfLx8/
MD5:	DBAFD06DEE91B470C42B4C00097D19C6
SHA1:	CCC1E5E40C5BFCDC55934D94231ED1323D18535D
SHA-256:	7B44B117DE1A5DACC72BAE0A360F3B76384C6656A613424F6B4119BBE8BA0EDC
SHA-512:	D245B59019FBBC297B234644085816851FC85395D8DEA7DE364748AB870D280F2760AF0CF0BFB644703FA12B3AB0E39C16CF19C287E72B4AEFEF4EF378360B8F
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/frame-modern.e91be2dc.js
Preview:	............{.H. .W(^?]`..1)...V.l%+..^.$.",....4-..9...B...{w...7.2.P....0....S;(q...y.a~.q.^.WZ..S/x...>......^n.k.u.7=?r.N.......z....1.......F.o......F......L..6Pr.nR.Q...G..+.Fd....30V..7<.M...g.. ...\|`{0.............?....,.;.0.g....}...]...u./n:./n...,Z.~./.....<l....Q>..~.....`....w...3n.c?.....~..u.j...f....=..r.K..Q.b.J....{...6.MV.77..O=.o7..Y.R...B....Y.......g.....v..aK.....Fe.mm..A?.b...l.ZC.....~0RO.j...jV....v....j.=.n<.j..h.^.s..\j.[..^<.z..Ua.[..<.......ld`..\..l7.X=~..#...-. ^.j.^o.M.lz0..P..`..X.a...vms......jlW`5.[..I....J.m.j.s..7U..........\..8...{.....b....\|....X.zS...-mU.........T.......Q.....j.mV.....l.X.!....c...`.y?..j...U.....{..y...,....g.\|.l.g.b..hm..$..NS.)..cn4..v.)z..UiT.[[..-.7...^...mn.=.]...l.V.....n.....).0.&]4..#.M.`..vc..`...~4........m....o28.b%'..j...5..OcP...W.......p..<Y.-8...fM=.....&,q.p..,.NaX......\!:..!..#&%.N$l.;.I@..iG__w2..]...uz............X..j.4M...v.{.$M.Y...@.....a.'!/.Q...

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27458)
Category:	downloaded
Size (bytes):	27505
Entropy (8bit):	5.203582541477989
Encrypted:	false
SSDEEP:	768:QpAS047NHVWpFdq1sRYmUFpadxdBUvqAHvLWocth6Njvqqf5Em:iAS047ZVWLQ1sRYmUFpa7tAHjW7th6NV
MD5:	20F5EE6DF552DC84A572E75EE1C113A3
SHA1:	D494E363399DAC2494B897D0F9F569A406145C2E
SHA-256:	25049A9243976413B3A07E3560749F284BA497A2B06532B5A395705C0D71EAC9
SHA-512:	82C21338C990005E5E4EB4F50A4E5B56C5F54A68181DE5B8685D7345E3B595DE9E77BD891C2C99F6A12DBD45FB6C27E4D4DAECFF44D9637C1B2CB1FA12812BE4
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/586.b709a998.chunk.js
Preview:	(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[586],{23165:function(e,t,n){"use strict";var i=n(55568);function r(){var e={},t=0,n=0,i=0;return{add:function(r,o){o\|\|(o=r,r=0),r>n?n=r:r<i&&(i=r),e[r]\|\|(e[r]=[]),e[r].push(o),t++},process:function(){for(var t=i;t<=n;t++)for(var r=e[t],o=0;o<r.length;o++){(0,r[o])()}},size:function(){return t}}}e.exports=function(e){var t=(e=e\|\|{}).reporter,n=i.getOption(e,"async",!0),o=i.getOption(e,"auto",!0);o&&!n&&(t&&t.warn("Invalid options combination. auto=true and async=false is invalid. Setting async=true."),n=!0);var a,l=r(),s=!1;function c(){for(s=!0;l.size();){var e=l;l=r(),e.process()}s=!1}function u(){a=function(e){return t=e,setTimeout(t,0);var t}(c)}return{add:function(e,t){!s&&o&&n&&0===l.size()&&u(),l.add(e,t)},force:function(e){s\|\|(void 0===e&&(e=n),a&&(clearTimeout(a),a=null),e?u():c())}}}},55568:function(e){"use strict";(e.exports={}).getOption=function(e,t,n){var i=e[t];if((void 0===i\|\|nul

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	2218886
Entropy (8bit):	5.457729796807486
Encrypted:	false
SSDEEP:	24576:lGXdi13PVVhLBr9iZiHMDTWcuYZ2sXe0TJfOT7a3+HXyXOa:ea3PVV5au1sO+Jfs7a3+xa
MD5:	B072EA833D897AA8C384DB3B9F40473A
SHA1:	9428AE6FF071D3D96893A75B1BC126E623611295
SHA-256:	3DC101B075AC993638314B3089E76300070221F21A55290A7AF84E3202C962CB
SHA-512:	7FF0D298EBE713AE4C6571223A5253D0013D10D4363ACD34129D94316C6F1760A68D923BB50A8488F0250687829334BA3ACDE98987F626729A48953609FA53DB
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4866.9bc0a053.chunk.js
Preview:	/! For license information please see 4866.9bc0a053.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4866],{1426:function(e){var t,n,r=e.exports={};function o(){throw new Error("setTimeout has not been defined")}function i(){throw new Error("clearTimeout has not been defined")}function a(e){if(t===setTimeout)return setTimeout(e,0);if((t===o\|\|!t)&&setTimeout)return t=setTimeout,setTimeout(e,0);try{return t(e,0)}catch(n){try{return t.call(null,e,0)}catch(n){return t.call(this,e,0)}}}!function(){try{t="function"===typeof setTimeout?setTimeout:o}catch(e){t=o}try{n="function"===typeof clearTimeout?clearTimeout:i}catch(e){n=i}}();var s,c=[],u=!1,l=-1;function d(){u&&s&&(u=!1,s.length?c=s.concat(c):l=-1,c.length&&f())}function f(){if(!u){var e=a(d);u=!0;for(var t=c.length;t;){for(s=c,c=[];++l<t;)s&&s[l].run();l=-1,t=c.length}s=null,u=!1,function(e){if(n===clearTimeout)return clearTimeout(e);if((n===i\|\|!n)&&clearTimeout)retur

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15565)
Category:	downloaded
Size (bytes):	15690
Entropy (8bit):	5.10017538120363
Encrypted:	false
SSDEEP:	192:To0CYKBea2tY3lhF4dtAJ4XSdmeI1HluY5bDhC4mnYucm2JvU7rFiNa2W+7NFIpr:To0CxOkmvJm8qt2WmA+B/Ri76fdO/
MD5:	3C07B5C1B35B6D8FF41C8E1E18A20EAA
SHA1:	9D0577AD1C44462726A612EB2659BF499837735D
SHA-256:	DCB46CD5797CB891AE3B2846287542F5A96AC17AF14CE0E263E3D87F1EDB2F38
SHA-512:	6E6BB36A94F33A8CBCA4AFC39E87DC27F9546A80BE24A389CFF39034C15BFA8180086B543FC5F9A0B4DB9B9086382CB45C73AEEE3F8DE2CC5039809470F2791D
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/4004.3542d89f.chunk.js
Preview:	/! For license information please see 4004.3542d89f.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4004],{5970:function(n,e,t){t.d(e,{D:function(){return a}});var r=Object.prototype,i=r.toString,u=r.hasOwnProperty,o=new Map;function a(n,e){try{return c(n,e)}finally{o.clear()}}function c(n,e){if(n===e)return!0;var t=i.call(n);if(t!==i.call(e))return!1;switch(t){case"[object Array]":if(n.length!==e.length)return!1;case"[object Object]":if(f(n,e))return!0;var r=Object.keys(n),o=Object.keys(e),a=r.length;if(a!==o.length)return!1;for(var l=0;l<a;++l)if(!u.call(e,r[l]))return!1;for(l=0;l<a;++l){var s=r[l];if(!c(n[s],e[s]))return!1}return!0;case"[object Error]":return n.name===e.name&&n.message===e.message;case"[object Number]":if(n!==n)return e!==e;case"[object Boolean]":case"[object Date]":return+n===+e;case"[object RegExp]":case"[object String]":return n==""+e;case"[object Map]":case"[object Set]":if(n.size

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	77665
Entropy (8bit):	7.965238596022843
Encrypted:	false
SSDEEP:	1536:on9wZkG0RVt1dTBlsH0/aQaePOkAjNGW19qVSt1Z/bJq8B6StOnG:kWkjRVFBWHu+kABGWptvbc8PaG
MD5:	3369C9A931DAE1DFFD3915DA857CB074
SHA1:	6F931E2AB4364D5C70305B6049F8D9995C71131B
SHA-256:	A74F5F79BF2F40D1BBC5623C7C0D1FD0109873B8BA80F87EA7771F8097EC36D2
SHA-512:	E005D50419D6D25EE28C6C581689102795BA44786D6E8F734CA09DA76DAD92B107F929154182FD4EDE57A5AB18DA27100BD562C19DD0C3D529E36713B041C55C
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SF5.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:6AD9C081C04111E9B2D2A7B8FE7CD140" xmpMM:InstanceID="xmp.iid:6AD9C080C04111E9B2D2A7B8FE7CD140" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1027)
Category:	downloaded
Size (bytes):	1199
Entropy (8bit):	5.029017676795669
Encrypted:	false
SSDEEP:	24:LhMtBt9rFTvFZYcy6hsRSq+Z4yM+SRCSkMKwV0QY7k7xM/1:a/V9ZAv+ZERCSkMKwaQNK
MD5:	99C8D02AF256849B6D1F2F1E20E001F9
SHA1:	E62A8695E38C3DC66B55879ED5B0649D8E592152
SHA-256:	25B3EE57DD7728B7345C5E0FDD0319614C673BA7CE4BF59782E562D7162FBE9D
SHA-512:	126571C0AE361F2AADB70D2F689C744E69C65A657C9DF40FB40A7C84887E98FA49CDB997D7C6D23EAB7084437E18C33895810F0941F0D9F047D6E0A380D19F50
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/polyfills.js
Preview:	/*. EventTarget polyfill. * @see https://github.com/ungap/event-target. * @see https://unpkg.com/@ungap/event-target@0.2.3/min.js. /./! (c) Andrea Giammarchi - ISC */.var self=this\|\|{};try{self.EventTarget=(new EventTarget).constructor}catch(t){!function(t,e){var n=t.create,r=t.defineProperty,i=s.prototype;function s(){"use strict";e.set(this,n(null))}function a(t,e,n){r(t,e,{configurable:!0,writable:!0,value:n})}function o(t){var e=t.options;return e&&e.once&&t.target.removeEventListener(this.type,t.listener),"function"==typeof t.listener?t.listener.call(t.target,this):t.listener.handleEvent(this),this._stopImmediatePropagationFlag}a(i,"addEventListener",(function(t,n,r){for(var i=e.get(this),s=i[t]\|\|(i[t]=[]),a=0,o=s.length;a<o;a++)if(s[a].listener===n)return;s.push({target:this,listener:n,options:r})})),a(i,"dispatchEvent",(function(t){var n=e.get(this)[t.type];return n&&(a(t,"target",this),a(t,"currentTarget",this),n.slice(0).some(o,t),delete t.currentTarget,delete t.target),!

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4108)
Category:	downloaded
Size (bytes):	4231
Entropy (8bit):	5.365053501493231
Encrypted:	false
SSDEEP:	96:MZ4dlphZDTk9o7GpKjG8L1tJwkfZLisw8MIhRQpAVIn9yyqxRV:Td3Trx3xtWs+QJVI9rA
MD5:	4204C4FCEAC942804DE2C30E756D839F
SHA1:	5F01D9E7DB6582404F0BFEFD567ADDAE6B65DB05
SHA-256:	6BB7066F8A1A022EFB110C83E5F3B8A1E11B66BA7AA0DD5E875932CB06C19FA4
SHA-512:	761A7ADE2323F55C18809E886F029144BC76F09A065745270AE0300EAFFA3253F1753B0B5A9A66099FD83DABEA38373123480B34A2815BE34AD07A3E753CD8A3
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/861.8af79939.chunk.js
Preview:	/! For license information please see 861.8af79939.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[861,2978],{20919:function(r,t){var e="function"===typeof Symbol&&Symbol.for;t.Z=e?Symbol.for("mui.nested"):"__THEME_NESTED__"},10861:function(r,t,e){e.r(t),e.d(t,{ThemeProvider:function(){return l},unstable_nested:function(){return c.Z},useTheme:function(){return u.Z}});var n=e(1413),o=e(93264),i=e(68023),u=e(29598),c=e(20919),f=e(80184);var l=function(r){var t=r.children,e=r.theme,l=(0,u.Z)(),a=o.useMemo((function(){var r=null===l?e:function(r,t){return"function"===typeof t?t(r):(0,n.Z)((0,n.Z)({},r),t)}(l,e);return null!=r&&(r[c.Z]=null!==l),r}),[e,l]);return(0,f.jsx)(i.Z.Provider,{value:a,children:t})}},68023:function(r,t,e){var n=e(93264),o=n.createContext(null);t.Z=o},29598:function(r,t,e){e.d(t,{Z:function(){return i}});var n=e(93264),o=e(68023);function i(){return n.useContext(o.Z)}},31725:function(r

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6195)
Category:	downloaded
Size (bytes):	6242
Entropy (8bit):	5.138538192510501
Encrypted:	false
SSDEEP:	96:OHd0YjhS3LjLjXR3TNLQxrErfUxM9oGc+EWqpFgZMjXeMFbi/skrRKZICyWrV:6ZjhcnXRDe9EDDbFqpL7vWs3qCFB
MD5:	6775DB4FC0A82A2E174B3C745E7055F6
SHA1:	24588939962E47184BF5AB0CFD816D93F4C95A7C
SHA-256:	272952F90465240C10199CCC63E965821C117305512DE0E3D85B8E828CBED925
SHA-512:	9EC92BF70A7EC420161A6E627EC2D3799C29726BD201BA016453307982BC820CA669DB0031D0B137D19BEB50ADA1A7E3A2503FA7AC82612A7D4D0C29017E3C4B
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/390.4204c025.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[390],{30390:function(n,t,e){e.r(t),e.d(t,{Action:function(){return r},createBrowserHistory:function(){return l},createHashHistory:function(){return f},createMemoryHistory:function(){return s},createPath:function(){return g},parsePath:function(){return y}});var r,a=e(87462);!function(n){n.Pop="POP",n.Push="PUSH",n.Replace="REPLACE"}(r\|\|(r={}));var i=function(n){return n};var o="beforeunload",u="hashchange",c="popstate";function l(n){void 0===n&&(n={});var t=n.window,e=void 0===t?document.defaultView:t,u=e.history;function l(){var n=e.location,t=n.pathname,r=n.search,a=n.hash,o=u.state\|\|{};return[o.idx,i({pathname:t,search:r,hash:a,state:o.usr\|\|null,key:o.key\|\|"default"})]}var f=null;e.addEventListener(c,(function(){if(f)P.call(f),f=null;else{var n=r.Pop,t=l(),e=t[0],a=t[1];if(P.length){if(null!=e){var i=m-e;i&&(f={action:n,location:a,retry:function(){L(-1*i)}},L(i))}}else H(n)}}));v

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	downloaded
Size (bytes):	11224
Entropy (8bit):	5.2603128465032745
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS
MD5:	79B4956B7EC478EC10244B5E2D33AC7D
SHA1:	A46025B9D05E3DF30D610A8AEF14F392C7058DC9
SHA-256:	029E0A2E809FD6B5DBE76ABE8B7A74936BE306C9A8C27C814C4D44AA54623300
SHA-512:	217F86FEE871FA36ECA4F25830E3917C7BF57A681140B135C508AA32F2A1E3EFF5A80661F3B5BA46747D0C305AF10B658D207F449550F3D417D9683216FEEA8F
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1179)
Category:	downloaded
Size (bytes):	1304
Entropy (8bit):	5.109250785949674
Encrypted:	false
SSDEEP:	24:Qh4LTmbiUDFj4AWRPz5hx7yRjqZkS3MGSfdCSkMDW4i01YcYzfxmaV:QmLIbBWRLRg+ZkjfdCSkMDhFxcV
MD5:	E458D1FA088DBA630153F37FED38D927
SHA1:	B935287D39EE009A10B8DE986FAAF5569D144AD0
SHA-256:	69AB2F7CA8B747B94E0520E0A88206C93584181CA654935FAE11D33B4DFAA7E5
SHA-512:	EFAF10B08D5ADC339E38E0BF6F7C9A8C883C447F0520E1DFE19E03A1F0F55D12A4B4499A3DBF6EE01310C388B576EF71FE98782B4C5AAC484A28933CDBB755E1
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5307.455e247e.chunk.js
Preview:	/! For license information please see 5307.455e247e.chunk.js.LICENSE.txt /."use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5307],{5307:function(e,t,n){n.r(t);var r={};try{r.EventTarget=(new EventTarget).constructor}catch(EventTarget){!function(e,t){var n=e.create,i=e.defineProperty,s=a.prototype;function a(){t.set(this,n(null))}function c(e,t,n){i(e,t,{configurable:!0,writable:!0,value:n})}function o(e){var t=e.options;return t&&t.once&&e.target.removeEventListener(this.type,e.listener),"function"===typeof e.listener?e.listener.call(e.target,this):e.listener.handleEvent(this),this._stopImmediatePropagationFlag}c(s,"addEventListener",(function(e,n,r){for(var i=t.get(this),s=i[e]\|\|(i[e]=[]),a=0,c=s.length;a<c;a++)if(s[a].listener===n)return;s.push({target:this,listener:n,options:r})})),c(s,"dispatchEvent",(function(e){var n=t.get(this)[e.type];return n&&(c(e,"target",this),c(e,"currentTarget",this),n.slice(0).some(o,e),delete e.

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	217246
Entropy (8bit):	5.391490538333901
Encrypted:	false
SSDEEP:	3072:maLcYrt4GAyc5oSdhEVDDJFMCqSEzy9MMNk5DiotSt:mTYryzOiEZMCqSp9M0k5motSt
MD5:	B9D67FD2F586335EA09662A29B430CEF
SHA1:	977A3BF885DEC3402E64D1E6651971DEA0D13016
SHA-256:	A38C231D07F5FA5813D2B433A440EBF3E682BD576B2A8A52E8FF6103B7E45676
SHA-512:	33CE941EB3D5953789E777A962744FE4822604A169A96306CC43A7799275701B6D3C5EFB3FD62BAE72BDAC2D7B975A7F14FFF535E34DBD32CD11FF09E64C085B
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/1249.fdabb546.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1249],{78656:function(e,n,t){t.d(n,{r:function(){return u}});var r,o,a=t(93264),i=["title","titleId"];function s(){return s=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var t=arguments[n];for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])}return e},s.apply(this,arguments)}function c(e,n){if(null==e)return{};var t,r,o=function(e,n){if(null==e)return{};var t,r,o={},a=Object.keys(e);for(r=0;r<a.length;r++)t=a[r],n.indexOf(t)>=0\|\|(o[t]=e[t]);return o}(e,n);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(r=0;r<a.length;r++)t=a[r],n.indexOf(t)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,t)&&(o[t]=e[t])}return o}var l=function(e,n){var t=e.title,l=e.titleId,u=c(e,i);return a.createElement("svg",s({width:18,height:18,viewBox:"0 0 18 18",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:n,"aria-labelle

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8218)
Category:	downloaded
Size (bytes):	8266
Entropy (8bit):	5.452627497257779
Encrypted:	false
SSDEEP:	192:hfboJLUydtWpb7qAVSCvizrM6NmMIHJE/dgy4DePAppRz9nzSS4rLnj7nm6Mml:Cf07qaOg6wem1NuS4veEl
MD5:	2471286A779D43079135781617C0BBA6
SHA1:	39A09463A1DC1E34D549DBA2297D659B12A4CE63
SHA-256:	8637D07F6CC1F6E0A9475A65ABD9F1E2B533B333E8195ECEFC01D719C76A95A4
SHA-512:	F6023E1A908219AB9DE1B119951ABDD3951B462B2A35646819FEF3118EACB47C27D875009CE0306B6B779ADBE68DAA065CDBC7F7C841D4EBA285B9E1473D35D4
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/5658.4583a995.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5658],{75658:function(r,n,t){var e;t.r(n),t.d(n,{NIL:function(){return S},parse:function(){return y},stringify:function(){return l},v1:function(){return h},v3:function(){return R},v4:function(){return E},v5:function(){return V},validate:function(){return i},version:function(){return T}});var o=new Uint8Array(16);function a(){if(!e&&!(e="undefined"!==typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!==typeof msCrypto&&"function"===typeof msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto)))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");return e(o)}var u=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\|00000000-0000-0000-0000-000000000000)$/i;for(var i=function(r){return"string"===typeof r&&u.test(r)},c=[],f=0;f<256;++f)c.push((f

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x640, components 3
Category:	downloaded
Size (bytes):	17266
Entropy (8bit):	7.6738918737770465
Encrypted:	false
SSDEEP:	384:onnMNJKbsUbo42ZsCm6XrrMXkNSsL7+6I2h88Qu:onFZb7Ys7nkYC+J4Ku
MD5:	01CA03CAFCBC33B7E87055B556C98593
SHA1:	8AD57F3125D20C5C47F56FB10E53F891B33B1640
SHA-256:	101867CA4FF48AB5665E81222699AB9CA8C204ECB59F4A43DDD0D61A78EB2C31
SHA-512:	6C161226E19BCAB56287906596A5768D46133AA7007038BB18FA13213A63CF89F3401AEE1AF74F37E2417AEC6EA4FAC392D5BFDFB36987CA51569A486B487FC6
Malicious:	false
Reputation:	low
URL:	https://regional-express.fr/wp-content/uploads/2019/08/SFbase2-flip.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpRights:WebStatement="http://mad.today" xmpMM:OriginalDocumentID="xmp.did:7dcaf85d-5a73-4104-8b4d-996f817cfe4c" xmpMM:DocumentID="xmp.did:1C31EB43C04211E9BB92C1AA7AA83E4E" xmpMM:InstanceID="xmp.iid:1C31EB42C04211E9BB92C1AA7AA83E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20EAAAC031C0E9119E5B845EAFE22884" stRef:documentID="adobe:docid:photoshop:032405d1-0bf

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 691 x 113, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	46042
Entropy (8bit):	7.990023439459201
Encrypted:	true
SSDEEP:	768:hhIRocnjgzkSiKN/64J4Q4B6FsTSe3s/gyJQcnJxIdmIvINcAt4IbCQ09Jnhs1e:AoBB/64+Q4ImF4gyKcnmmIvMc9IbgNh7
MD5:	E9C1B2D471D8FC21D8534BC3CE19791C
SHA1:	6636067666CA4D769192CBBAA99437668CFE022B
SHA-256:	9C90630F855EE250D096BA7E60FF668C3E54E28C59340E72FAFD74914276BB60
SHA-512:	E89A04E4ABAEA5FC3CA028BED8AD70E36C448B17A55A409050782ACFA6963C174890212D1DBAD361D469250F7760F0CB9D079986BFB914B6AB7B3264E4AE0097
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......q......X+.....sBIT....\|.d... .IDATx^.].`...=.......H.."...E.?"..K..E..X@T...P.t...k.........B.R6.n..<\..y...{g.;.\...j)4......U-.Z@..j......z.hT0.._.T.T.l..joU...P-.Z@...n...>.W8M.T0[....]....T...P-.[@..O..N.=......vW..j.....T.<..P..S~.U0[....]....T........p..Q.T0[...tU......vW..j....`.......)U0[....f...W..Z@..j.\|...f......-d._.....U-.Z@.@>X@...`.B\|J........Bv....P-.Z .,...\|0z!>.S.f%......B..X...*.-.O..u....T...T0.G.VO.X...I........k11....;.q.OLDLR..u.i.k...--.jm..k...........ec..B.tU0.>...T...P-`n..`...V....O....k.?....B.z(<..BCq ....."1..y..b....usC.".....o.[.!...)...f..@..j......m.......80+ .&..{w....ld$..D#.^Ws.'zo...Q...........=..V...c.c..P-.Z@.@J..`V.......3+.V..W.c0..e,.uK..f.hXY.$...#d.Hv.....!..4i.6..I.....Wv.L..j..Y.\.m.Z..V-`...9.x[.5so...f.p.K......m......=......-agO...B.p.."7...Dm..X...D.+.]...#]!...........X..A."........<i..\..:p..aT..Z #...U-.Z.\.P.G.=q.,...;.n>.Zu.`.w..3..e.By...f...v+...\@0...veT...

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11006)
Category:	downloaded
Size (bytes):	11131
Entropy (8bit):	5.336118572087364
Encrypted:	false
SSDEEP:	192:vQBoR4zg1STRS7eciblxgL3zmScpvuJmPd4pUTthbLDdi:XF1Sd+ec73dcpIihhbLDdi
MD5:	190885154BDCD7BAFA56E38B9E1D630A
SHA1:	3DA859D396632B0FF8BF195C2F9F15F65C3A21B8
SHA-256:	F02A942A63774CB4E35B3C7DAD7D7EAFB96FA3721A2767ECFF6CA180C38E5081
SHA-512:	78C7CF713B3ACA98BCB6ECA5596A7CDB9FF593DB2AD99E282F9D2545D1452039EB77D312EB8DB667FE0C4A3B9BD23386DB3617F82EDAED0BAB53EF897C9899AF
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/2686.fc673267.chunk.js
Preview:	/! For license information please see 2686.fc673267.chunk.js.LICENSE.txt /.(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[2686],{1426:function(e){var t,r,n=e.exports={};function o(){throw new Error("setTimeout has not been defined")}function c(){throw new Error("clearTimeout has not been defined")}function a(e){if(t===setTimeout)return setTimeout(e,0);if((t===o\|\|!t)&&setTimeout)return t=setTimeout,setTimeout(e,0);try{return t(e,0)}catch(r){try{return t.call(null,e,0)}catch(r){return t.call(this,e,0)}}}!function(){try{t="function"===typeof setTimeout?setTimeout:o}catch(e){t=o}try{r="function"===typeof clearTimeout?clearTimeout:c}catch(e){r=c}}();var i,u=[],l=!1,s=-1;function f(){l&&i&&(l=!1,i.length?u=i.concat(u):s=-1,u.length&&p())}function p(){if(!l){var e=a(f);l=!0;for(var t=u.length;t;){for(i=u,u=[];++s<t;)i&&i[s].run();s=-1,t=u.length}i=null,l=!1,function(e){if(r===clearTimeout)return clearTimeout(e);if((r===c\|\|!r)&&clearTimeout)retur

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15217)
Category:	downloaded
Size (bytes):	15265
Entropy (8bit):	5.218627898974882
Encrypted:	false
SSDEEP:	192:EVtlo3RHB8fJBE++kIsGxbkGkqjh/YlrlgbTyar/+pAf14YSSWGoIROgmYSSddVT:EBCHBsDEtlxoGLD+WwSWNC8SddV+q
MD5:	5DD4E8BC9116CFA9F634BE8912205DCB
SHA1:	224C10220C8B0C8EFE4F4B6E8F2BE95E1D21BAA6
SHA-256:	CD04B2C6312F4168242BAEBD9F4682807DFA829F6DF2676E9996CF58E6184F21
SHA-512:	DACE03E209604E1231348BA0EC8F26C02AE08D4E08760602B742138CAB5E5B5B2A51DD4F9297D6C7AF2279BB29DB2F5DFA6E712FABFECD1D79B6087E5779D42B
Malicious:	false
Reputation:	low
URL:	https://dsr-internal-us.mindtickle.com/static/js/8700.57dbdfc1.chunk.js
Preview:	"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8700],{88125:function(n,e,t){t.d(e,{Z:function(){return E}});var r,a=t(74165),o=t(15861),i=t(15671),u=t(43144),c=t(74441),l=t.n(c),d=t(72231),s=t(81588),p=t(43979),f=t(42657),m=t(87021),v=t(30168),g=t(60136),h=t(29388),b=t(34199),y=t.n(b),x=function(n){(0,g.Z)(t,n);var e=(0,h.Z)(t);function t(){return(0,i.Z)(this,t),e.apply(this,arguments)}return(0,u.Z)(t,[{key:"getUploadParameters",value:function(n){var e=this;return this.query((function(){return e.apolloService.executeQuery({query:y()(r\|\|(r=(0,v.Z)(["\n query getUploadParameters(\n $type: UploadableTypeEnum!\n $key: String!\n $filename: String\n ) {\n getUploadParameters(type: $type, key: $key, filename: $filename) {\n url\n }\n }\n "]))),variables:n})}),"Error loading parameters").then((function(n){return n.g

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 16:05:09.409847021 CEST	192.168.2.5	1.1.1.1	0x4fe7	Standard query (0)	web.enable.us	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:09.410089970 CEST	192.168.2.5	1.1.1.1	0xf0ae	Standard query (0)	web.enable.us	65	IN (0x0001)	false
Apr 23, 2024 16:05:10.123505116 CEST	192.168.2.5	1.1.1.1	0x7aab	Standard query (0)	dsr-internal-us.mindtickle.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.123653889 CEST	192.168.2.5	1.1.1.1	0xb627	Standard query (0)	dsr-internal-us.mindtickle.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:10.215441942 CEST	192.168.2.5	1.1.1.1	0xa9ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.215641022 CEST	192.168.2.5	1.1.1.1	0xa33c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:31.198652029 CEST	192.168.2.5	1.1.1.1	0x3432	Standard query (0)	cdn.zipy.ai	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.199193954 CEST	192.168.2.5	1.1.1.1	0x67ec	Standard query (0)	cdn.zipy.ai	65	IN (0x0001)	false
Apr 23, 2024 16:05:31.222587109 CEST	192.168.2.5	1.1.1.1	0x2947	Standard query (0)	rum.browser-intake-datadoghq.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.232847929 CEST	192.168.2.5	1.1.1.1	0x25aa	Standard query (0)	rum.browser-intake-datadoghq.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:31.257071018 CEST	192.168.2.5	1.1.1.1	0xfe9a	Standard query (0)	dsr-svc-csv.prod.mindtickle.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.257256031 CEST	192.168.2.5	1.1.1.1	0xe0e2	Standard query (0)	dsr-svc-csv.prod.mindtickle.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:32.533648014 CEST	192.168.2.5	1.1.1.1	0xd8f2	Standard query (0)	services.zipy.ai	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.534081936 CEST	192.168.2.5	1.1.1.1	0x6b75	Standard query (0)	services.zipy.ai	65	IN (0x0001)	false
Apr 23, 2024 16:05:32.630970001 CEST	192.168.2.5	1.1.1.1	0x9dcb	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.631417036 CEST	192.168.2.5	1.1.1.1	0x487c	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Apr 23, 2024 16:05:32.770339966 CEST	192.168.2.5	1.1.1.1	0x5892	Standard query (0)	web.enable.us	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.770339966 CEST	192.168.2.5	1.1.1.1	0x809b	Standard query (0)	web.enable.us	65	IN (0x0001)	false
Apr 23, 2024 16:05:33.007071018 CEST	192.168.2.5	1.1.1.1	0x8f08	Standard query (0)	dsr-svc-csv.prod-us.mindtickle.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.007600069 CEST	192.168.2.5	1.1.1.1	0xa003	Standard query (0)	dsr-svc-csv.prod-us.mindtickle.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:33.018682957 CEST	192.168.2.5	1.1.1.1	0x43fa	Standard query (0)	dsr-svc-csv.prod.mindtickle.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.019052029 CEST	192.168.2.5	1.1.1.1	0xa741	Standard query (0)	dsr-svc-csv.prod.mindtickle.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:33.648114920 CEST	192.168.2.5	1.1.1.1	0x2e0f	Standard query (0)	dsr-images-us-east-1.prod.mindtickle.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.648114920 CEST	192.168.2.5	1.1.1.1	0xc17a	Standard query (0)	dsr-images-us-east-1.prod.mindtickle.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:35.491966009 CEST	192.168.2.5	1.1.1.1	0xac7e	Standard query (0)	services.zipy.ai	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.492487907 CEST	192.168.2.5	1.1.1.1	0xd5a2	Standard query (0)	services.zipy.ai	65	IN (0x0001)	false
Apr 23, 2024 16:05:35.660804033 CEST	192.168.2.5	1.1.1.1	0xd832	Standard query (0)	dsr-images-us-east-1.prod.mindtickle.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.661050081 CEST	192.168.2.5	1.1.1.1	0xdae9	Standard query (0)	dsr-images-us-east-1.prod.mindtickle.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:35.863544941 CEST	192.168.2.5	1.1.1.1	0x1c47	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.863679886 CEST	192.168.2.5	1.1.1.1	0xa514	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:36.201059103 CEST	192.168.2.5	1.1.1.1	0x3169	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:36.201304913 CEST	192.168.2.5	1.1.1.1	0xd056	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:51.478379965 CEST	192.168.2.5	1.1.1.1	0x2622	Standard query (0)	dsr-svc-csv.prod-us.mindtickle.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:51.482409954 CEST	192.168.2.5	1.1.1.1	0x9ac4	Standard query (0)	dsr-svc-csv.prod-us.mindtickle.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:56.304336071 CEST	192.168.2.5	1.1.1.1	0x1c85	Standard query (0)	api-js.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:56.304596901 CEST	192.168.2.5	1.1.1.1	0xe4b5	Standard query (0)	api-js.mixpanel.com	65	IN (0x0001)	false
Apr 23, 2024 16:05:56.990183115 CEST	192.168.2.5	1.1.1.1	0x7ee2	Standard query (0)	api-js.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:56.990773916 CEST	192.168.2.5	1.1.1.1	0xcbd6	Standard query (0)	api-js.mixpanel.com	65	IN (0x0001)	false
Apr 23, 2024 16:06:00.802050114 CEST	192.168.2.5	1.1.1.1	0x5cb8	Standard query (0)	collector8.zipy.ai	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:00.802618980 CEST	192.168.2.5	1.1.1.1	0x7999	Standard query (0)	collector8.zipy.ai	65	IN (0x0001)	false
Apr 23, 2024 16:06:02.492063999 CEST	192.168.2.5	1.1.1.1	0xf4dd	Standard query (0)	collector8.zipy.ai	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:02.492486954 CEST	192.168.2.5	1.1.1.1	0xcdc3	Standard query (0)	collector8.zipy.ai	65	IN (0x0001)	false
Apr 23, 2024 16:06:06.153357029 CEST	192.168.2.5	1.1.1.1	0x53e3	Standard query (0)	regional-express.fr	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:06.156182051 CEST	192.168.2.5	1.1.1.1	0x6ca2	Standard query (0)	regional-express.fr	65	IN (0x0001)	false
Apr 23, 2024 16:06:08.507778883 CEST	192.168.2.5	1.1.1.1	0x29d9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.521079063 CEST	192.168.2.5	1.1.1.1	0x3b11	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 16:06:08.616837978 CEST	192.168.2.5	1.1.1.1	0xc5cb	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.617382050 CEST	192.168.2.5	1.1.1.1	0xfd81	Standard query (0)	s.w.org	65	IN (0x0001)	false
Apr 23, 2024 16:06:12.840465069 CEST	192.168.2.5	1.1.1.1	0xb642	Standard query (0)	regional-express.fr	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:12.840816975 CEST	192.168.2.5	1.1.1.1	0xc2ab	Standard query (0)	regional-express.fr	65	IN (0x0001)	false
Apr 23, 2024 16:06:17.048799992 CEST	192.168.2.5	1.1.1.1	0x801	Standard query (0)	envoye-special.fr	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.049052954 CEST	192.168.2.5	1.1.1.1	0x3b10	Standard query (0)	envoye-special.fr	65	IN (0x0001)	false
Apr 23, 2024 16:06:17.582756996 CEST	192.168.2.5	1.1.1.1	0xede0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.583204985 CEST	192.168.2.5	1.1.1.1	0xf9ea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 16:06:18.337393999 CEST	192.168.2.5	1.1.1.1	0x2481	Standard query (0)	envoye-special.fr	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:18.337544918 CEST	192.168.2.5	1.1.1.1	0xb9ff	Standard query (0)	envoye-special.fr	65	IN (0x0001)	false
Apr 23, 2024 16:06:20.833138943 CEST	192.168.2.5	1.1.1.1	0x117c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:20.833590984 CEST	192.168.2.5	1.1.1.1	0x1a29	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 16:06:31.359220982 CEST	192.168.2.5	1.1.1.1	0x6688	Standard query (0)	rum.browser-intake-datadoghq.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:31.359564066 CEST	192.168.2.5	1.1.1.1	0xdb7e	Standard query (0)	rum.browser-intake-datadoghq.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 16:05:09.558763981 CEST	1.1.1.1	192.168.2.5	0xf0ae	No error (0)	web.enable.us	d1xc9ial1furyh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:09.562921047 CEST	1.1.1.1	192.168.2.5	0x4fe7	No error (0)	web.enable.us	d1xc9ial1furyh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:09.562921047 CEST	1.1.1.1	192.168.2.5	0x4fe7	No error (0)	d1xc9ial1furyh.cloudfront.net		13.32.151.24	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:09.562921047 CEST	1.1.1.1	192.168.2.5	0x4fe7	No error (0)	d1xc9ial1furyh.cloudfront.net		13.32.151.48	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:09.562921047 CEST	1.1.1.1	192.168.2.5	0x4fe7	No error (0)	d1xc9ial1furyh.cloudfront.net		13.32.151.61	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:09.562921047 CEST	1.1.1.1	192.168.2.5	0x4fe7	No error (0)	d1xc9ial1furyh.cloudfront.net		13.32.151.77	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.320533037 CEST	1.1.1.1	192.168.2.5	0xa33c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 16:05:10.320632935 CEST	1.1.1.1	192.168.2.5	0xa9ad	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.320632935 CEST	1.1.1.1	192.168.2.5	0xa9ad	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.320632935 CEST	1.1.1.1	192.168.2.5	0xa9ad	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.320632935 CEST	1.1.1.1	192.168.2.5	0xa9ad	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.320632935 CEST	1.1.1.1	192.168.2.5	0xa9ad	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.320632935 CEST	1.1.1.1	192.168.2.5	0xa9ad	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.564785004 CEST	1.1.1.1	192.168.2.5	0x7aab	No error (0)	dsr-internal-us.mindtickle.com		13.33.4.14	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.564785004 CEST	1.1.1.1	192.168.2.5	0x7aab	No error (0)	dsr-internal-us.mindtickle.com		13.33.4.37	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.564785004 CEST	1.1.1.1	192.168.2.5	0x7aab	No error (0)	dsr-internal-us.mindtickle.com		13.33.4.35	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:10.564785004 CEST	1.1.1.1	192.168.2.5	0x7aab	No error (0)	dsr-internal-us.mindtickle.com		13.33.4.120	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:21.917890072 CEST	1.1.1.1	192.168.2.5	0x6e48	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:21.917890072 CEST	1.1.1.1	192.168.2.5	0x6e48	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:22.425749063 CEST	1.1.1.1	192.168.2.5	0x842f	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:22.425749063 CEST	1.1.1.1	192.168.2.5	0x842f	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.305707932 CEST	1.1.1.1	192.168.2.5	0x67ec	No error (0)	cdn.zipy.ai			65	IN (0x0001)	false
Apr 23, 2024 16:05:31.305728912 CEST	1.1.1.1	192.168.2.5	0x3432	No error (0)	cdn.zipy.ai		104.26.6.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.305728912 CEST	1.1.1.1	192.168.2.5	0x3432	No error (0)	cdn.zipy.ai		104.26.7.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.305728912 CEST	1.1.1.1	192.168.2.5	0x3432	No error (0)	cdn.zipy.ai		172.67.68.84	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.327481985 CEST	1.1.1.1	192.168.2.5	0x2947	No error (0)	rum.browser-intake-datadoghq.com	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:31.327481985 CEST	1.1.1.1	192.168.2.5	0x2947	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.182	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.327481985 CEST	1.1.1.1	192.168.2.5	0x2947	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.177	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.327481985 CEST	1.1.1.1	192.168.2.5	0x2947	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.181	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.327481985 CEST	1.1.1.1	192.168.2.5	0x2947	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.175	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.327481985 CEST	1.1.1.1	192.168.2.5	0x2947	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.327481985 CEST	1.1.1.1	192.168.2.5	0x2947	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.180	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.338494062 CEST	1.1.1.1	192.168.2.5	0x25aa	No error (0)	rum.browser-intake-datadoghq.com	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:31.364017963 CEST	1.1.1.1	192.168.2.5	0xfe9a	No error (0)	dsr-svc-csv.prod.mindtickle.com		99.86.229.112	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.364017963 CEST	1.1.1.1	192.168.2.5	0xfe9a	No error (0)	dsr-svc-csv.prod.mindtickle.com		99.86.229.58	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.364017963 CEST	1.1.1.1	192.168.2.5	0xfe9a	No error (0)	dsr-svc-csv.prod.mindtickle.com		99.86.229.50	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:31.364017963 CEST	1.1.1.1	192.168.2.5	0xfe9a	No error (0)	dsr-svc-csv.prod.mindtickle.com		99.86.229.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.640419960 CEST	1.1.1.1	192.168.2.5	0xd8f2	No error (0)	services.zipy.ai		104.26.6.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.640419960 CEST	1.1.1.1	192.168.2.5	0xd8f2	No error (0)	services.zipy.ai		172.67.68.84	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.640419960 CEST	1.1.1.1	192.168.2.5	0xd8f2	No error (0)	services.zipy.ai		104.26.7.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.640516996 CEST	1.1.1.1	192.168.2.5	0x6b75	No error (0)	services.zipy.ai			65	IN (0x0001)	false
Apr 23, 2024 16:05:32.736310005 CEST	1.1.1.1	192.168.2.5	0x9dcb	No error (0)	widget.intercom.io		108.138.64.17	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.736310005 CEST	1.1.1.1	192.168.2.5	0x9dcb	No error (0)	widget.intercom.io		108.138.64.56	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.736310005 CEST	1.1.1.1	192.168.2.5	0x9dcb	No error (0)	widget.intercom.io		108.138.64.83	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.736310005 CEST	1.1.1.1	192.168.2.5	0x9dcb	No error (0)	widget.intercom.io		108.138.64.81	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.934729099 CEST	1.1.1.1	192.168.2.5	0x5892	No error (0)	web.enable.us	d1xc9ial1furyh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:32.934729099 CEST	1.1.1.1	192.168.2.5	0x5892	No error (0)	d1xc9ial1furyh.cloudfront.net		13.33.4.35	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.934729099 CEST	1.1.1.1	192.168.2.5	0x5892	No error (0)	d1xc9ial1furyh.cloudfront.net		13.33.4.14	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.934729099 CEST	1.1.1.1	192.168.2.5	0x5892	No error (0)	d1xc9ial1furyh.cloudfront.net		13.33.4.37	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.934729099 CEST	1.1.1.1	192.168.2.5	0x5892	No error (0)	d1xc9ial1furyh.cloudfront.net		13.33.4.120	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:32.940833092 CEST	1.1.1.1	192.168.2.5	0x809b	No error (0)	web.enable.us	d1xc9ial1furyh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:33.119647980 CEST	1.1.1.1	192.168.2.5	0x8f08	No error (0)	dsr-svc-csv.prod-us.mindtickle.com	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:33.119647980 CEST	1.1.1.1	192.168.2.5	0x8f08	No error (0)	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com		44.195.108.183	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.119647980 CEST	1.1.1.1	192.168.2.5	0x8f08	No error (0)	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com		3.231.6.160	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.124218941 CEST	1.1.1.1	192.168.2.5	0xa003	No error (0)	dsr-svc-csv.prod-us.mindtickle.com	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:33.127427101 CEST	1.1.1.1	192.168.2.5	0x43fa	No error (0)	dsr-svc-csv.prod.mindtickle.com		99.86.229.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.127427101 CEST	1.1.1.1	192.168.2.5	0x43fa	No error (0)	dsr-svc-csv.prod.mindtickle.com		99.86.229.58	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.127427101 CEST	1.1.1.1	192.168.2.5	0x43fa	No error (0)	dsr-svc-csv.prod.mindtickle.com		99.86.229.50	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.127427101 CEST	1.1.1.1	192.168.2.5	0x43fa	No error (0)	dsr-svc-csv.prod.mindtickle.com		99.86.229.112	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.760211945 CEST	1.1.1.1	192.168.2.5	0x2e0f	No error (0)	dsr-images-us-east-1.prod.mindtickle.com		18.165.116.102	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.760211945 CEST	1.1.1.1	192.168.2.5	0x2e0f	No error (0)	dsr-images-us-east-1.prod.mindtickle.com		18.165.116.110	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.760211945 CEST	1.1.1.1	192.168.2.5	0x2e0f	No error (0)	dsr-images-us-east-1.prod.mindtickle.com		18.165.116.69	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:33.760211945 CEST	1.1.1.1	192.168.2.5	0x2e0f	No error (0)	dsr-images-us-east-1.prod.mindtickle.com		18.165.116.7	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.599235058 CEST	1.1.1.1	192.168.2.5	0xac7e	No error (0)	services.zipy.ai		172.67.68.84	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.599235058 CEST	1.1.1.1	192.168.2.5	0xac7e	No error (0)	services.zipy.ai		104.26.7.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.599235058 CEST	1.1.1.1	192.168.2.5	0xac7e	No error (0)	services.zipy.ai		104.26.6.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.599255085 CEST	1.1.1.1	192.168.2.5	0xd5a2	No error (0)	services.zipy.ai			65	IN (0x0001)	false
Apr 23, 2024 16:05:35.769202948 CEST	1.1.1.1	192.168.2.5	0xd832	No error (0)	dsr-images-us-east-1.prod.mindtickle.com		18.165.83.9	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.769202948 CEST	1.1.1.1	192.168.2.5	0xd832	No error (0)	dsr-images-us-east-1.prod.mindtickle.com		18.165.83.25	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.769202948 CEST	1.1.1.1	192.168.2.5	0xd832	No error (0)	dsr-images-us-east-1.prod.mindtickle.com		18.165.83.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.769202948 CEST	1.1.1.1	192.168.2.5	0xd832	No error (0)	dsr-images-us-east-1.prod.mindtickle.com		18.165.83.8	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.968648911 CEST	1.1.1.1	192.168.2.5	0x1c47	No error (0)	js.intercomcdn.com		3.163.101.92	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.968648911 CEST	1.1.1.1	192.168.2.5	0x1c47	No error (0)	js.intercomcdn.com		3.163.101.88	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.968648911 CEST	1.1.1.1	192.168.2.5	0x1c47	No error (0)	js.intercomcdn.com		3.163.101.21	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:35.968648911 CEST	1.1.1.1	192.168.2.5	0x1c47	No error (0)	js.intercomcdn.com		3.163.101.56	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:36.307533026 CEST	1.1.1.1	192.168.2.5	0x3169	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:51.589622021 CEST	1.1.1.1	192.168.2.5	0x2622	No error (0)	dsr-svc-csv.prod-us.mindtickle.com	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:51.589622021 CEST	1.1.1.1	192.168.2.5	0x2622	No error (0)	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com		3.231.6.160	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:51.589622021 CEST	1.1.1.1	192.168.2.5	0x2622	No error (0)	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com		44.195.108.183	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:51.591181040 CEST	1.1.1.1	192.168.2.5	0x9ac4	No error (0)	dsr-svc-csv.prod-us.mindtickle.com	k8s-alb-prod-us-skhmbf-469548802.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:05:56.409171104 CEST	1.1.1.1	192.168.2.5	0x1c85	No error (0)	api-js.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:56.409171104 CEST	1.1.1.1	192.168.2.5	0x1c85	No error (0)	api-js.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:56.409171104 CEST	1.1.1.1	192.168.2.5	0x1c85	No error (0)	api-js.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:56.409171104 CEST	1.1.1.1	192.168.2.5	0x1c85	No error (0)	api-js.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:57.094866037 CEST	1.1.1.1	192.168.2.5	0x7ee2	No error (0)	api-js.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:57.094866037 CEST	1.1.1.1	192.168.2.5	0x7ee2	No error (0)	api-js.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:57.094866037 CEST	1.1.1.1	192.168.2.5	0x7ee2	No error (0)	api-js.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:57.094866037 CEST	1.1.1.1	192.168.2.5	0x7ee2	No error (0)	api-js.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:59.950107098 CEST	1.1.1.1	192.168.2.5	0xec6d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:05:59.950107098 CEST	1.1.1.1	192.168.2.5	0xec6d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:00.910787106 CEST	1.1.1.1	192.168.2.5	0x7999	No error (0)	collector8.zipy.ai			65	IN (0x0001)	false
Apr 23, 2024 16:06:00.912061930 CEST	1.1.1.1	192.168.2.5	0x5cb8	No error (0)	collector8.zipy.ai		104.26.6.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:00.912061930 CEST	1.1.1.1	192.168.2.5	0x5cb8	No error (0)	collector8.zipy.ai		104.26.7.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:00.912061930 CEST	1.1.1.1	192.168.2.5	0x5cb8	No error (0)	collector8.zipy.ai		172.67.68.84	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:02.599045992 CEST	1.1.1.1	192.168.2.5	0xf4dd	No error (0)	collector8.zipy.ai		172.67.68.84	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:02.599045992 CEST	1.1.1.1	192.168.2.5	0xf4dd	No error (0)	collector8.zipy.ai		104.26.7.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:02.599045992 CEST	1.1.1.1	192.168.2.5	0xf4dd	No error (0)	collector8.zipy.ai		104.26.6.49	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:02.601253986 CEST	1.1.1.1	192.168.2.5	0xcdc3	No error (0)	collector8.zipy.ai			65	IN (0x0001)	false
Apr 23, 2024 16:06:06.478125095 CEST	1.1.1.1	192.168.2.5	0x53e3	No error (0)	regional-express.fr		145.239.37.162	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.615417004 CEST	1.1.1.1	192.168.2.5	0x29d9	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.615417004 CEST	1.1.1.1	192.168.2.5	0x29d9	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.615417004 CEST	1.1.1.1	192.168.2.5	0x29d9	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.615417004 CEST	1.1.1.1	192.168.2.5	0x29d9	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.615417004 CEST	1.1.1.1	192.168.2.5	0x29d9	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.615417004 CEST	1.1.1.1	192.168.2.5	0x29d9	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:08.625902891 CEST	1.1.1.1	192.168.2.5	0x3b11	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 16:06:08.721708059 CEST	1.1.1.1	192.168.2.5	0xc5cb	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:13.267231941 CEST	1.1.1.1	192.168.2.5	0xb642	No error (0)	regional-express.fr		145.239.37.162	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.453170061 CEST	1.1.1.1	192.168.2.5	0x801	No error (0)	envoye-special.fr		145.239.37.162	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.687680960 CEST	1.1.1.1	192.168.2.5	0xede0	No error (0)	www.google.com		142.251.15.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.687680960 CEST	1.1.1.1	192.168.2.5	0xede0	No error (0)	www.google.com		142.251.15.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.687680960 CEST	1.1.1.1	192.168.2.5	0xede0	No error (0)	www.google.com		142.251.15.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.687680960 CEST	1.1.1.1	192.168.2.5	0xede0	No error (0)	www.google.com		142.251.15.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.687680960 CEST	1.1.1.1	192.168.2.5	0xede0	No error (0)	www.google.com		142.251.15.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.687680960 CEST	1.1.1.1	192.168.2.5	0xede0	No error (0)	www.google.com		142.251.15.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:17.688811064 CEST	1.1.1.1	192.168.2.5	0xf9ea	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 16:06:18.747248888 CEST	1.1.1.1	192.168.2.5	0x2481	No error (0)	envoye-special.fr		145.239.37.162	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:20.938416004 CEST	1.1.1.1	192.168.2.5	0x1a29	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 16:06:20.940001011 CEST	1.1.1.1	192.168.2.5	0x117c	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:20.940001011 CEST	1.1.1.1	192.168.2.5	0x117c	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:20.940001011 CEST	1.1.1.1	192.168.2.5	0x117c	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:20.940001011 CEST	1.1.1.1	192.168.2.5	0x117c	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:20.940001011 CEST	1.1.1.1	192.168.2.5	0x117c	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:20.940001011 CEST	1.1.1.1	192.168.2.5	0x117c	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:31.466615915 CEST	1.1.1.1	192.168.2.5	0x6688	No error (0)	rum.browser-intake-datadoghq.com	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:06:31.466615915 CEST	1.1.1.1	192.168.2.5	0x6688	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.181	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:31.466615915 CEST	1.1.1.1	192.168.2.5	0x6688	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.180	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:31.466615915 CEST	1.1.1.1	192.168.2.5	0x6688	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.182	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:31.466615915 CEST	1.1.1.1	192.168.2.5	0x6688	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.175	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:31.466615915 CEST	1.1.1.1	192.168.2.5	0x6688	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:31.466615915 CEST	1.1.1.1	192.168.2.5	0x6688	No error (0)	alb-logs-http-rum-pub-s1-2063062832.us-east-1.elb.amazonaws.com		3.233.159.177	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:06:31.466635942 CEST	1.1.1.1	192.168.2.5	0xdb7e	No error (0)	rum.browser-intake-datadoghq.com	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	13.32.151.24	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:09 UTC	697	OUT	GET /room/36a8f665-0d42-4862-a524-50e3d91bade6 HTTP/1.1 Host: web.enable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:10 UTC	2080	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 900 Connection: close Date: Sat, 20 Apr 2024 01:29:58 GMT Last-Modified: Sat, 20 Apr 2024 01:29:09 GMT ETag: "867357aa3e4428e495d1a755779d65bf" x-amz-server-side-encryption: AES256 Cache-Control: max-age=0,must-revalidate Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 91edf3d46098c7786cee1900c8e34990.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lNOR86PLWd1CFQNa9L4Vlno7WYRhbWZEb46u_-rsBRHdsKm73wB9yg== Age: 304512 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:10 UTC	900	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 2f 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d Data Ascii: <!doctype html><html lang="en"><head><base href="/"/><meta charset="utf-8"/><meta name="robots" content="noindex, nofollow"/><meta name="referrer" content="no-referrer-when-downgrade"/><meta name="viewport" content="width=device-width,initial-scale=1"/><m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:10 UTC	583	OUT	GET /checkBrowser.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:11 UTC	2084	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 265 Connection: close Date: Mon, 22 Apr 2024 03:12:15 GMT Last-Modified: Sat, 20 Apr 2024 01:29:05 GMT ETag: "fee8f6d03b17e6752f0ab632a82572de" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 5f06e2c87fa9fb6c547f5739f3753dda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7ovJ3JGqgVgqSP8IFuYweitdPMeXP0ebToIOxZ0GRlDr0ZfPHpVQ-g== Age: 125575 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:11 UTC	265	IN	Data Raw: 2f 2f 20 56 61 6c 69 64 61 74 65 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 20 61 76 61 69 6c 61 62 69 6c 69 74 79 0a 74 72 79 20 7b 0a 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6b 65 79 28 30 29 3b 0a 7d 20 63 61 74 63 68 20 7b 0a 20 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 60 0a 20 20 20 20 3c 70 3e 59 6f 75 27 72 65 20 75 73 69 6e 67 20 61 20 62 72 6f 77 73 65 72 20 73 65 74 20 74 6f 20 70 72 69 76 61 74 65 20 6f 72 20 69 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 2e 3c 2f 70 3e 0a 20 20 20 20 3c 70 3e 54 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2c 20 70 6c 65 61 73 65 20 6f 70 65 6e 20 61 20 6e 65 77 20 62 72 6f 77 73 65 72 20 77 69 6e 64 6f 77 20 6e 6f 74 20 69 6e 20 70 72 69 76 61 74 65 20 6d 6f 64 65 2e 3c 2f 70 Data Ascii: // Validate localStorage availabilitytry { window.localStorage.key(0);} catch { document.write(` <p>You're using a browser set to private or incognito mode.</p> <p>To access this page, please open a new browser window not in private mode.</p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:10 UTC	580	OUT	GET /polyfills.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:11 UTC	2108	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1199 Connection: close Date: Mon, 22 Apr 2024 06:38:16 GMT Last-Modified: Sat, 20 Apr 2024 01:29:05 GMT ETag: "99c8d02af256849b6d1f2f1e20e001f9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a4294eb914e3f883aba658e8044fe4f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7W8JBI5EL42b9fLcernIqlOQtgH-nsIkRdhICq3pF26N88dj07gzZA== Age: 113215 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:11 UTC	1199	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 45 76 65 6e 74 54 61 72 67 65 74 20 70 6f 6c 79 66 69 6c 6c 0a 20 2a 20 40 73 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 75 6e 67 61 70 2f 65 76 65 6e 74 2d 74 61 72 67 65 74 0a 20 2a 20 40 73 65 65 20 68 74 74 70 73 3a 2f 2f 75 6e 70 6b 67 2e 63 6f 6d 2f 40 75 6e 67 61 70 2f 65 76 65 6e 74 2d 74 61 72 67 65 74 40 30 2e 32 2e 33 2f 6d 69 6e 2e 6a 73 0a 20 2a 2f 0a 2f 2a 21 20 28 63 29 20 41 6e 64 72 65 61 20 47 69 61 6d 6d 61 72 63 68 69 20 2d 20 49 53 43 20 2a 2f 0a 76 61 72 20 73 65 6c 66 3d 74 68 69 73 7c 7c 7b 7d 3b 74 72 79 7b 73 65 6c 66 2e 45 76 65 6e 74 54 61 72 67 65 74 3d 28 6e 65 77 20 45 76 65 6e 74 54 61 72 67 65 74 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7d 63 61 74 63 68 28 74 29 7b 21 66 75 6e 63 Data Ascii: /** * EventTarget polyfill * @see https://github.com/ungap/event-target * @see https://unpkg.com/@ungap/event-target@0.2.3/min.js //! (c) Andrea Giammarchi - ISC */var self=this\|\|{};try{self.EventTarget=(new EventTarget).constructor}catch(t){!func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:11 UTC	594	OUT	GET /static/js/main.351922f6.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:11 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 178837 Connection: close Date: Mon, 22 Apr 2024 03:16:08 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "92cfb310c55108e8152de86d971bc541" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d25b5a4b536886c15089faae019d94da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZA-dHWGLsH7eqaGYwRs3KUjyyDQ5lfNlqumKxa8b3_ZYrZSlyBZjCA== Age: 125344 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:11 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 37 36 37 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 28 31 34 31 37 39 29 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 65 2e 65 28 36 38 33 38 29 2c 65 2e 65 28 33 33 36 31 29 2c 65 2e 65 28 31 32 32 36 29 2c 65 2e 65 28 31 36 37 30 29 2c 65 2e 65 28 33 32 36 34 29 2c 65 2e 65 28 33 36 34 34 29 2c 65 2e 65 28 32 36 33 31 29 2c 65 2e 65 28 38 32 39 36 29 2c 65 2e 65 28 33 39 38 37 29 2c 65 2e 65 28 35 35 33 33 29 2c 65 2e 65 28 35 39 36 31 29 2c 65 2e 65 28 37 31 30 31 29 2c 65 2e 65 28 39 33 34 38 29 2c 65 2e 65 28 38 37 31 38 29 5d 29 2e 74 68 65 6e 28 65 2e 62 69 6e 64 28 65 2c 36 31 35 38 29 29 7d 2c 36 36 37 32 34 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: !function(){var t={67672:function(t,n,e){"use strict";e(14179);Promise.all([e.e(6838),e.e(3361),e.e(1226),e.e(1670),e.e(3264),e.e(3644),e.e(2631),e.e(8296),e.e(3987),e.e(5533),e.e(5961),e.e(7101),e.e(9348),e.e(8718)]).then(e.bind(e,6158))},66724:function(
2024-04-23 14:05:11 UTC	1514	IN	Data Raw: 37 30 29 2c 79 3d 65 28 32 31 35 32 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 6d 3d 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 4d 61 70 22 29 2c 62 3d 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 57 65 61 6b 22 29 2c 78 3d 6d 3f 22 73 65 74 22 3a 22 61 64 64 22 2c 77 3d 6f 5b 74 5d 2c 53 3d 77 26 26 77 2e 70 72 6f 74 6f 74 79 70 65 2c 4f 3d 77 2c 41 3d 7b 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 69 28 53 5b 74 5d 29 3b 63 28 53 2c 74 2c 22 61 64 64 22 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 30 3d 3d 3d 74 3f 30 3a 74 29 2c 74 68 69 73 7d 3a 22 64 65 6c 65 74 65 22 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 Data Ascii: 70),y=e(21527);t.exports=function(t,n,e){var m=-1!==t.indexOf("Map"),b=-1!==t.indexOf("Weak"),x=m?"set":"add",w=o[t],S=w&&w.prototype,O=w,A={},E=function(t){var n=i(S[t]);c(S,t,"add"==t?function(t){return n(this,0===t?0:t),this}:"delete"==t?function(t){re
2024-04-23 14:05:11 UTC	16384	IN	Data Raw: 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 7d 2c 33 35 39 32 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 2c 64 6f 6e 65 3a 6e 7d 7d 7d 2c 36 33 38 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 33 31 31 39 36 29 2c 6f 3d 65 28 39 31 35 39 32 29 2c 69 3d 65 28 37 32 30 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 20 6f 2e 66 28 74 2c 6e 2c 69 28 31 2c 65 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 20 74 5b Data Ascii: null,Object.getPrototypeOf(new t)!==t.prototype}))},35927:function(t){t.exports=function(t,n){return{value:t,done:n}}},63873:function(t,n,e){var r=e(31196),o=e(91592),i=e(72037);t.exports=r?function(t,n,e){return o.f(t,n,i(1,e))}:function(t,n,e){return t[
2024-04-23 14:05:11 UTC	16384	IN	Data Raw: 6f 74 79 70 65 3d 6f 28 72 2c 7b 6e 65 78 74 3a 69 28 2b 21 66 2c 65 29 7d 29 2c 75 28 74 2c 73 2c 21 31 2c 21 30 29 2c 63 5b 73 5d 3d 61 2c 74 7d 7d 2c 35 34 39 33 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 36 37 37 36 38 29 2c 6f 3d 65 28 39 38 35 31 33 29 2c 69 3d 65 28 32 33 36 30 38 29 2c 75 3d 65 28 32 33 32 31 31 29 2c 63 3d 65 28 33 39 32 31 38 29 2c 61 3d 65 28 31 33 33 31 29 2c 66 3d 65 28 32 34 33 30 35 29 2c 73 3d 65 28 34 33 38 31 29 2c 6c 3d 65 28 35 33 33 37 30 29 2c 68 3d 65 28 36 33 38 37 33 29 2c 70 3d 65 28 31 37 35 34 33 29 2c 64 3d 65 28 39 35 30 32 38 29 2c 76 3d 65 28 32 39 37 30 36 29 2c 67 3d 65 28 32 37 30 32 32 29 2c 79 3d 75 2e 50 52 4f 50 45 52 2c 6d 3d Data Ascii: otype=o(r,{next:i(+!f,e)}),u(t,s,!1,!0),c[s]=a,t}},54931:function(t,n,e){"use strict";var r=e(67768),o=e(98513),i=e(23608),u=e(23211),c=e(39218),a=e(1331),f=e(24305),s=e(4381),l=e(53370),h=e(63873),p=e(17543),d=e(95028),v=e(29706),g=e(27022),y=u.PROPER,m=
2024-04-23 14:05:11 UTC	13842	IN	Data Raw: 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b 2e 72 75 29 22 2c 6c 69 63 65 6e 73 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a 73 2f 62 6c 6f 62 2f 76 33 2e 33 31 2e 30 2f 4c 49 43 45 4e 53 45 22 2c 73 6f 75 72 63 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a 73 22 7d 29 7d 2c 39 31 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 34 35 38 38 34 29 2c 6f 3d 65 28 31 30 36 31 31 29 2c 69 3d 65 28 31 39 30 35 35 29 2c 75 3d 65 28 39 35 30 32 38 29 28 22 73 70 65 63 69 65 73 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 2c 63 3d 72 28 74 29 2e 63 6f Data Ascii: hkarev (zloirock.ru)",license:"https://github.com/zloirock/core-js/blob/v3.31.0/LICENSE",source:"https://github.com/zloirock/core-js"})},917:function(t,n,e){var r=e(45884),o=e(10611),i=e(19055),u=e(95028)("species");t.exports=function(t,n){var e,c=r(t).co
2024-04-23 14:05:11 UTC	16384	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 69 28 75 29 7d 2c 35 35 32 36 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 36 37 37 36 38 29 2c 6f 3d 65 28 35 38 38 30 29 2e 66 69 6e 64 2c 69 3d 65 28 33 35 37 31 35 29 2c 75 3d 22 66 69 6e 64 22 2c 63 3d 21 30 3b 75 20 69 6e 5b 5d 26 26 41 72 72 61 79 28 31 29 5b 75 5d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 21 31 7d 29 29 2c 72 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 63 7d 2c 7b 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 Data Ascii: rguments[1]:void 0)}}),i(u)},55269:function(t,n,e){"use strict";var r=e(67768),o=e(5880).find,i=e(35715),u="find",c=!0;u in[]&&Array(1)[u]((function(){c=!1})),r({target:"Array",proto:!0,forced:c},{find:function(t){return o(this,t,arguments.length>1?argume
2024-04-23 14:05:11 UTC	10463	IN	Data Raw: 38 39 29 3b 72 7c 7c 6f 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 53 74 72 69 6e 67 22 2c 69 2c 7b 75 6e 73 61 66 65 3a 21 30 7d 29 7d 2c 34 35 36 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 36 37 37 36 38 29 2c 6f 3d 65 28 31 39 37 30 30 29 2e 76 61 6c 75 65 73 3b 72 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 7d 2c 7b 76 61 6c 75 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 7d 7d 29 7d 2c 37 34 30 39 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 36 37 37 36 38 29 2c 6f 3d 65 28 39 38 30 35 36 29 3b 72 28 7b 67 6c 6f 62 61 6c 3a 21 30 2c 66 6f 72 63 65 64 3a 70 61 72 73 65 46 6c 6f 61 74 21 3d 6f 7d 2c Data Ascii: 89);r\|\|o(Object.prototype,"toString",i,{unsafe:!0})},45620:function(t,n,e){var r=e(67768),o=e(19700).values;r({target:"Object",stat:!0},{values:function(t){return o(t)}})},74093:function(t,n,e){var r=e(67768),o=e(98056);r({global:!0,forced:parseFloat!=o},
2024-04-23 14:05:11 UTC	16384	IN	Data Raw: 2c 22 52 65 67 45 78 70 22 2c 42 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 21 30 7d 29 7d 78 28 22 52 65 67 45 78 70 22 29 7d 2c 32 30 34 34 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 36 37 37 36 38 29 2c 6f 3d 65 28 39 34 30 38 37 29 3b 72 28 7b 74 61 72 67 65 74 3a 22 52 65 67 45 78 70 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 2f 2e 2f 2e 65 78 65 63 21 3d 3d 6f 7d 2c 7b 65 78 65 63 3a 6f 7d 29 7d 2c 34 30 31 38 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 36 38 34 30 29 2c 6f 3d 65 28 33 31 31 39 36 29 2c 69 3d 65 28 35 30 36 39 35 29 2c 75 3d 65 28 36 37 36 38 37 29 2c 63 3d 65 28 39 32 38 33 37 29 2c 61 3d 72 2e 52 65 67 45 78 70 2c Data Ascii: ,"RegExp",B,{constructor:!0})}x("RegExp")},20447:function(t,n,e){"use strict";var r=e(67768),o=e(94087);r({target:"RegExp",proto:!0,forced:/./.exec!==o},{exec:o})},40186:function(t,n,e){var r=e(6840),o=e(31196),i=e(50695),u=e(67687),c=e(92837),a=r.RegExp,
2024-04-23 14:05:11 UTC	16384	IN	Data Raw: 6e 28 74 2c 6e 2c 65 29 7b 65 28 32 38 35 39 29 28 22 49 6e 74 38 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 7d 2c 36 39 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 36 38 34 30 29 2c 6f 3d 65 28 39 32 38 33 37 29 2c 69 3d 65 28 37 34 39 33 32 29 2c 75 3d 65 28 39 33 38 36 36 29 2c 63 3d 65 28 31 38 38 38 37 29 2c 61 3d 65 28 39 35 30 32 38 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 66 3d 72 2e 55 69 6e 74 38 41 72 72 61 79 2c 73 3d 69 28 63 2e 76 61 6c 75 65 73 29 2c 6c 3d 69 28 63 2e 6b 65 79 73 29 2c 68 3d 69 28 63 2e 65 6e 74 72 69 65 73 29 Data Ascii: n(t,n,e){e(2859)("Int8",(function(t){return function(n,e,r){return t(this,n,e,r)}}))},697:function(t,n,e){"use strict";var r=e(6840),o=e(92837),i=e(74932),u=e(93866),c=e(18887),a=e(95028)("iterator"),f=r.Uint8Array,s=i(c.values),l=i(c.keys),h=i(c.entries)
2024-04-23 14:05:11 UTC	16384	IN	Data Raw: 2e 70 61 74 68 3d 67 28 65 2e 70 61 74 68 29 2c 66 2e 70 61 74 68 2e 6c 65 6e 67 74 68 2d 2d 2c 73 3d 4c 74 3b 63 6f 6e 74 69 6e 75 65 7d 66 2e 75 73 65 72 6e 61 6d 65 3d 65 2e 75 73 65 72 6e 61 6d 65 2c 66 2e 70 61 73 73 77 6f 72 64 3d 65 2e 70 61 73 73 77 6f 72 64 2c 66 2e 68 6f 73 74 3d 65 2e 68 6f 73 74 2c 66 2e 70 6f 72 74 3d 65 2e 70 6f 72 74 2c 66 2e 70 61 74 68 3d 67 28 65 2e 70 61 74 68 29 2c 66 2e 71 75 65 72 79 3d 65 2e 71 75 65 72 79 2c 66 2e 66 72 61 67 6d 65 6e 74 3d 22 22 2c 73 3d 43 74 7d 62 72 65 61 6b 3b 63 61 73 65 20 53 74 3a 69 66 28 21 66 2e 69 73 53 70 65 63 69 61 6c 28 29 7c 7c 22 2f 22 21 3d 69 26 26 22 5c 5c 22 21 3d 69 29 7b 69 66 28 22 2f 22 21 3d 69 29 7b 66 2e 75 73 65 72 6e 61 6d 65 3d 65 2e 75 73 65 72 6e 61 6d 65 2c 66 2e Data Ascii: .path=g(e.path),f.path.length--,s=Lt;continue}f.username=e.username,f.password=e.password,f.host=e.host,f.port=e.port,f.path=g(e.path),f.query=e.query,f.fragment="",s=Ct}break;case St:if(!f.isSpecial()\|\|"/"!=i&&"\\"!=i){if("/"!=i){f.username=e.username,f.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:11 UTC	582	OUT	GET /remoteEntry.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:12 UTC	2106	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 38590 Connection: close Date: Tue, 23 Apr 2024 14:05:13 GMT Last-Modified: Sat, 20 Apr 2024 01:29:10 GMT ETag: "c3c23b6ae414b9d897af1ee2e96c845d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=0,must-revalidate Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3d9025085ca74ec423404f8a18a7972c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: hhQQmK4N-vbOL-U1Y6S1pKj-7_3SffOsJSv6wKHFZfVUpemEWWQLPQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:12 UTC	16384	IN	Data Raw: 76 61 72 20 64 73 72 5f 63 6c 69 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 37 35 30 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 41 64 6d 69 6e 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 36 38 33 38 29 2c 74 2e 65 28 33 33 36 31 29 2c 74 2e 65 28 31 32 32 36 29 2c 74 2e 65 28 31 36 37 30 29 2c 74 2e 65 28 33 32 36 34 29 2c 74 2e 65 28 32 36 33 31 29 2c 74 2e 65 28 38 32 39 36 29 2c 74 2e 65 28 33 39 38 37 29 2c 74 2e 65 28 35 35 33 33 29 2c 74 2e 65 28 35 39 36 31 29 2c 74 2e 65 28 37 31 30 31 29 2c 74 2e 65 28 39 33 34 38 29 2c 74 2e 65 28 33 38 39 30 29 2c 74 2e 65 28 31 33 33 39 29 Data Ascii: var dsr_client;!function(){"use strict";var n={7500:function(n,e,t){var r={"./Admin":function(){return Promise.all([t.e(6838),t.e(3361),t.e(1226),t.e(1670),t.e(3264),t.e(2631),t.e(8296),t.e(3987),t.e(5533),t.e(5961),t.e(7101),t.e(9348),t.e(3890),t.e(1339)
2024-04-23 14:05:12 UTC	573	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 33 32 36 34 29 2c 74 2e 65 28 38 30 32 39 29 5d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 37 38 30 32 39 29 7d 7d 29 29 7d 29 29 2c 63 28 22 72 65 61 63 74 2d 64 6e 64 2d 68 74 6d 6c 35 2d 62 61 63 6b 65 6e 64 22 2c 22 31 36 2e 30 2e 31 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 65 28 32 33 30 30 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 38 32 33 30 30 29 7d 7d 29 29 7d 29 29 2c 63 28 22 72 65 61 63 74 2d 64 6e 64 22 2c 22 31 36 2e Data Ascii: ,(function(){return Promise.all([t.e(3264),t.e(8029)]).then((function(){return function(){return t(78029)}}))})),c("react-dnd-html5-backend","16.0.1",(function(){return t.e(2300).then((function(){return function(){return t(82300)}}))})),c("react-dnd","16.
2024-04-23 14:05:13 UTC	9481	IN	Data Raw: 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 37 38 38 29 2c 74 2e 65 28 33 32 36 34 29 5d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 38 30 37 38 38 29 7d 7d 29 29 7d 29 29 2c 63 28 22 72 65 61 63 74 2d 66 6c 69 70 2d 74 6f 6f 6c 6b 69 74 22 2c 22 37 2e 31 2e 30 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 31 39 34 37 29 2c 74 2e 65 28 33 32 36 34 29 5d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 38 31 39 34 37 29 7d 7d 29 29 7d 29 29 2c 63 28 22 72 65 61 63 74 2d 66 75 6c 6c 2d 73 63 72 65 65 Data Ascii: Promise.all([t.e(788),t.e(3264)]).then((function(){return function(){return t(80788)}}))})),c("react-flip-toolkit","7.1.0",(function(){return Promise.all([t.e(1947),t.e(3264)]).then((function(){return function(){return t(81947)}}))})),c("react-full-scree
2024-04-23 14:05:13 UTC	12152	IN	Data Raw: 29 29 7d 29 29 7d 2c 32 38 31 33 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 28 22 64 65 66 61 75 6c 74 22 2c 22 40 75 6e 67 61 70 2f 65 76 65 6e 74 2d 74 61 72 67 65 74 22 2c 5b 32 2c 30 2c 32 2c 33 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 65 28 35 33 30 37 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 35 33 30 37 29 7d 7d 29 29 7d 29 29 7d 2c 33 33 35 32 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 28 22 64 65 66 61 75 6c 74 22 2c 22 72 78 6a 73 22 2c 5b 31 2c 36 2c 36 2c 37 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 65 28 35 38 35 32 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 Data Ascii: ))}))},28139:function(){return h("default","@ungap/event-target",[2,0,2,3],(function(){return t.e(5307).then((function(){return function(){return t(5307)}}))}))},33529:function(){return h("default","rxjs",[1,6,6,7],(function(){return t.e(5852).then((funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:12 UTC	616	OUT	GET /static/css/1670.9d769a73.chunk.css HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:13 UTC	2083	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 19763 Connection: close Date: Tue, 23 Apr 2024 14:05:14 GMT Last-Modified: Sat, 20 Apr 2024 01:29:05 GMT ETag: "70e0078272329a91d2950fd9fc645a20" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 69549fdd08f6edbeec8f40a9473365d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: gmBLiHVJZBeCsWHLCalPtk8DFLORtstqcXGYhR6dE-cRUw3MQH-5fg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:13 UTC	8462	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 20 2e 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 20 2e 76 2d 68 69 64 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 20 69 6e 70 75 74 2c 2e 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 20 69 Data Ascii: @charset "UTF-8";.intl-tel-input{display:inline-block;position:relative}.intl-tel-input *{box-sizing:border-box;-moz-box-sizing:border-box}.intl-tel-input .hide{display:none}.intl-tel-input .v-hide{visibility:hidden}.intl-tel-input input,.intl-tel-input i
2024-04-23 14:05:14 UTC	11301	IN	Data Raw: 2d 66 6c 61 67 2e 64 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 33 37 39 70 78 20 30 3b 68 65 69 67 68 74 3a 31 33 70 78 7d 2e 69 74 69 2d 66 6c 61 67 2e 64 7a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 30 31 70 78 20 30 3b 68 65 69 67 68 74 3a 31 34 70 78 7d 2e 69 74 69 2d 66 6c 61 67 2e 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 32 33 70 78 20 30 3b 68 65 69 67 68 74 3a 31 34 70 78 7d 2e 69 74 69 2d 66 6c 61 67 2e 65 63 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 34 35 70 78 20 30 3b 68 65 69 67 68 74 3a 31 34 70 78 7d 2e 69 74 69 2d 66 6c 61 67 2e 65 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 36 37 70 Data Ascii: -flag.do{background-position:-1379px 0;height:13px}.iti-flag.dz{background-position:-1401px 0;height:14px}.iti-flag.ea{background-position:-1423px 0;height:14px}.iti-flag.ec{background-position:-1445px 0;height:14px}.iti-flag.ee{background-position:-1467p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:12 UTC	616	OUT	GET /static/css/8718.e048d4b0.chunk.css HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:13 UTC	2082	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 5779 Connection: close Date: Tue, 23 Apr 2024 14:05:14 GMT Last-Modified: Sat, 20 Apr 2024 01:29:05 GMT ETag: "8be28a18acd3ff4d7b8eea810cfc3305" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 20ae150f60acdff8fc384fb3233356a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BsSpGTt8ImWrWggspwGg6CxwlyCVWypqWQMOzzSA6RCVoEiucZjVlw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:13 UTC	5779	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 49 6e 74 65 72 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 3a 72 6f 6f 74 7b 2d 2d 61 74 74 61 63 68 6d 65 6e 74 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 30 65 30 3b 2d 2d 61 76 61 74 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 62 6c 75 65 3a 23 32 33 34 63 63 39 3b 2d 2d 61 76 61 74 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 65 66 61 75 6c 74 3a 23 65 30 65 30 65 30 3b 2d 2d 61 76 61 74 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 65 65 6e 3a 23 37 62 63 36 37 65 3b 2d 2d 61 76 61 74 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6c 69 67 68 74 Data Ascii: @import url(https://fonts.googleapis.com/css2?family=Inter:wght@400;700&display=swap);:root{--attachments-border-color:#e0e0e0;--avatar-background-blue:#234cc9;--avatar-background-default:#e0e0e0;--avatar-background-green:#7bc67e;--avatar-background-light

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:12 UTC	600	OUT	GET /static/js/6838.fdd383a5.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:13 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35899 Connection: close Date: Tue, 23 Apr 2024 14:05:14 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "93db5e1613e6a39941b5d5b547af77fc" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d25b5a4b536886c15089faae019d94da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Yg639uDdMM2p1yIvafwT6PIlocQg3n-Aue-GX3ZbJYRMy2uc8uWlyg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:14 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 38 33 38 2e 66 64 64 33 38 33 61 35 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 33 38 2c 31 31 32 38 5d 2c 7b 35 30 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 6e 2e 5a 3d 7b 35 30 3a 22 23 65 33 66 32 66 64 22 2c 31 30 30 3a 22 23 62 62 64 65 66 62 22 2c 32 30 30 3a 22 23 39 30 Data Ascii: /! For license information please see 6838.fdd383a5.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6838,1128],{50427:function(t,n){n.Z={50:"#e3f2fd",100:"#bbdefb",200:"#90
2024-04-23 14:05:14 UTC	16384	IN	Data Raw: 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 74 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 2e 31 35 3b 72 65 74 75 72 6e 20 64 28 74 29 3e 2e 35 3f 67 28 74 2c 6e 29 3a 79 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 74 2c 6e 2c 72 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 5a 28 74 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 74 7d 7d 7d 2c 34 39 35 37 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 76 61 72 20 65 3d 72 28 34 39 34 32 29 2c 6f Data Ascii: )}catch(e){return t}}function b(t){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:.15;return d(t)>.5?g(t,n):y(t,n)}function Z(t,n,r){try{return Z(t,n)}catch(e){return t}}},49572:function(t,n,r){r.d(n,{Z:function(){return c}});var e=r(4942),o
2024-04-23 14:05:14 UTC	3131	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 65 3d 72 28 38 39 36 31 31 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 29 7b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 2c 28 30 2c 65 2e 5a 29 28 74 2c 6e 29 7d 7d 2c 35 39 31 39 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 6e 75 6c 6c Data Ascii: nction(t,n,r){r.d(n,{Z:function(){return o}});var e=r(89611);function o(t,n){t.prototype=Object.create(n.prototype),t.prototype.constructor=t,(0,e.Z)(t,n)}},59199:function(t,n,r){function e(t){if("undefined"!==typeof Symbol&&null!=t[Symbol.iterator]\|\|null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:12 UTC	600	OUT	GET /static/js/3361.51784c7a.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:13 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9851 Connection: close Date: Tue, 23 Apr 2024 14:05:14 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "f101512a9480881f9e0fd694c74b14b0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f191d757f16dd6002ae3a0c09389b68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: IyeFGMImeDHWytufk6HgtyFWF7FO8NcT7A94eU4hThW0Qf5KWQXvog== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:13 UTC	9851	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 33 36 31 5d 2c 7b 38 33 33 36 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 65 7d 7d 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 69 6e 73 65 72 74 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3b 72 3d 30 3d 3d 3d 74 2e 74 61 67 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3361],{83361:function(e,t,r){r.d(t,{Z:function(){return ae}});var n=function(){function e(e){var t=this;this._insertTag=function(e){var r;r=0===t.tag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:12 UTC	600	OUT	GET /static/js/1226.af860636.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:12 UTC	2109	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11222 Connection: close Date: Sun, 21 Apr 2024 20:40:47 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "b24a7a81ec56a96f783a1654559e060b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 20ae150f60acdff8fc384fb3233356a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: R_kv4G4B0oBsJ6OEaxXT8I_M_cYDroJdj_Jpq1jRjT2D7xcS3u4xwg== Age: 149066 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:12 UTC	11222	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 32 32 36 5d 2c 7b 39 31 35 33 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 50 22 3a 72 65 74 75 72 6e 20 65 2e 64 61 74 65 28 7b 77 69 64 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1226],{91535:function(t,e){Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var n=function(t,e){switch(t){case"P":return e.date({wid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49724	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 14:05:13 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=61078 Date: Tue, 23 Apr 2024 14:05:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:13 UTC	600	OUT	GET /static/js/1670.aeebf6fc.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:14 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 101366 Connection: close Date: Tue, 23 Apr 2024 14:05:15 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "406bf9d8fcd8a92be91d935a2812c71b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f191d757f16dd6002ae3a0c09389b68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C48u7ERB5LxVnS3DEqUKjQpAPTx21Si922egum1kVMt_XHPpe3bURg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:14 UTC	1494	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 36 37 30 2e 61 65 65 62 66 36 66 63 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 37 30 2c 32 30 35 38 5d 2c 7b 31 30 39 33 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 76 61 72 20 72 3d Data Ascii: /! For license information please see 1670.aeebf6fc.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1670,2058],{10937:function(e,t,n){"use strict";n.d(t,{Z:function(){return l}});var r=
2024-04-23 14:05:14 UTC	16384	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 28 64 6f 63 75 6d 65 6e 74 29 29 26 26 39 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 2c 75 3d 6e 28 34 33 31 34 34 29 2c 6c 3d 6e 28 39 34 35 37 38 29 2c 63 3d 6e 28 39 37 33 32 36 29 2c 64 3d 7b 7d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 66 29 3b 69 66 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 64 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 5b 6e Data Ascii: document?"undefined":a(document))&&9===document.nodeType,u=n(43144),l=n(94578),c=n(97326),d={}.constructor;function f(e){if(null==e\|\|"object"!==typeof e)return e;if(Array.isArray(e))return e.map(f);if(e.constructor!==d)return e;var t={};for(var n in e)t[n
2024-04-23 14:05:14 UTC	1024	IN	Data Raw: 7b 7d 2c 6e 3d 74 2e 6d 65 64 69 61 2c 72 3d 74 2e 6d 65 74 61 2c 69 3d 74 2e 65 6c 65 6d 65 6e 74 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 69 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 5c 6e 22 2c 65 7d 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6a 73 73 22 2c 22 22 29 2c 6e 26 26 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 2c 6e 29 2c 72 26 26 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 65 74 61 22 2c 72 29 3b Data Ascii: {},n=t.media,r=t.meta,i=t.element;this.element=i\|\|function(){var e=document.createElement("style");return e.textContent="\n",e}(),this.element.setAttribute("data-jss",""),n&&this.element.setAttribute("media",n),r&&this.element.setAttribute("data-meta",r);
2024-04-23 14:05:14 UTC	15360	IN	Data Raw: 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 5c 6e 22 2b 65 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 5c 6e 22 29 7d 2c 74 2e 69 6e 73 65 72 74 52 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 69 6e 64 65 78 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 68 69 73 2e 69 6e 73 65 72 74 52 75 6c 65 28 65 2e 69 6e 64 65 78 5b 6e 5d 2c 6e 2c 74 29 7d 2c 74 2e 69 6e 73 65 72 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 68 65 65 74 29 2c 65 2e 72 75 6c 65 73 29 7b 76 61 72 20 72 3d 65 2c 69 3d 6e 3b 69 66 28 22 63 6f 6e 64 69 74 69 6f 6e 61 6c 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 6b Data Ascii: lement.textContent="\n"+e.toString()+"\n")},t.insertRules=function(e,t){for(var n=0;n<e.index.length;n++)this.insertRule(e.index[n],n,t)},t.insertRule=function(e,t,n){if(void 0===n&&(n=this.element.sheet),e.rules){var r=e,i=n;if("conditional"===e.type\|\|"k
2024-04-23 14:05:14 UTC	16384	IN	Data Raw: 65 78 62 6f 78 22 29 2c 48 74 2e 73 74 79 6c 65 5b 65 5d 3d 6e 2c 22 22 3d 3d 3d 48 74 2e 73 74 79 6c 65 5b 65 5d 29 29 72 65 74 75 72 6e 20 47 74 5b 72 5d 3d 21 31 2c 21 31 3b 72 65 74 75 72 6e 20 48 74 2e 73 74 79 6c 65 5b 65 5d 3d 22 22 2c 47 74 5b 72 5d 3d 6e 2c 47 74 5b 72 5d 7d 73 26 26 28 48 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 29 29 3b 76 61 72 20 59 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 69 66 28 22 66 61 6c 6c 62 61 63 6b 73 22 3d 3d 3d 6e 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 74 5b 6e 5d 3d 72 2e 6d 61 70 28 65 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 21 31 2c Data Ascii: exbox"),Ht.style[e]=n,""===Ht.style[e]))return Gt[r]=!1,!1;return Ht.style[e]="",Gt[r]=n,Gt[r]}s&&(Ht=document.createElement("p"));var Yt=function(){function e(t){for(var n in t){var r=t[n];if("fallbacks"===n&&Array.isArray(r))t[n]=r.map(e);else{var i=!1,
2024-04-23 14:05:14 UTC	1024	IN	Data Raw: 75 6c 74 57 69 64 74 68 3a 22 77 69 64 65 22 2c 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 65 29 2d 31 7d 7d 29 2c 6d 6f 6e 74 68 3a 28 30 2c 63 2e 5a 29 28 7b 76 61 6c 75 65 73 3a 7b 6e 61 72 72 6f 77 3a 5b 22 65 22 2c 22 66 22 2c 22 6d 22 2c 22 61 22 2c 22 6d 22 2c 22 6a 22 2c 22 6a 22 2c 22 61 22 2c 22 73 22 2c 22 6f 22 2c 22 6e 22 2c 22 64 22 5d 2c 61 62 62 72 65 76 69 61 74 65 64 3a 5b 22 65 6e 65 22 2c 22 66 65 62 22 2c 22 6d 61 72 22 2c 22 61 62 72 22 2c 22 6d 61 79 22 2c 22 6a 75 6e 22 2c 22 6a 75 6c 22 2c 22 61 67 6f 22 2c 22 73 65 70 22 2c 22 6f 63 74 22 2c 22 6e 6f 76 22 2c 22 64 69 63 22 5d 2c 77 69 64 65 3a 5b 22 65 6e 65 72 6f 22 2c 22 66 65 62 72 65 72 6f Data Ascii: ultWidth:"wide",argumentCallback:function(e){return Number(e)-1}}),month:(0,c.Z)({values:{narrow:["e","f","m","a","m","j","j","a","s","o","n","d"],abbreviated:["ene","feb","mar","abr","may","jun","jul","ago","sep","oct","nov","dic"],wide:["enero","febrero
2024-04-23 14:05:14 UTC	16384	IN	Data Raw: 2c 65 76 65 6e 69 6e 67 3a 22 74 61 72 64 65 22 2c 6e 69 67 68 74 3a 22 6e 6f 63 68 65 22 7d 7d 2c 64 65 66 61 75 6c 74 57 69 64 74 68 3a 22 77 69 64 65 22 2c 66 6f 72 6d 61 74 74 69 6e 67 56 61 6c 75 65 73 3a 7b 6e 61 72 72 6f 77 3a 7b 61 6d 3a 22 61 22 2c 70 6d 3a 22 70 22 2c 6d 69 64 6e 69 67 68 74 3a 22 6d 6e 22 2c 6e 6f 6f 6e 3a 22 6d 64 22 2c 6d 6f 72 6e 69 6e 67 3a 22 64 65 20 6c 61 20 6d 61 5c 78 66 31 61 6e 61 22 2c 61 66 74 65 72 6e 6f 6f 6e 3a 22 64 65 20 6c 61 20 74 61 72 64 65 22 2c 65 76 65 6e 69 6e 67 3a 22 64 65 20 6c 61 20 74 61 72 64 65 22 2c 6e 69 67 68 74 3a 22 64 65 20 6c 61 20 6e 6f 63 68 65 22 7d 2c 61 62 62 72 65 76 69 61 74 65 64 3a 7b 61 6d 3a 22 41 4d 22 2c 70 6d 3a 22 50 4d 22 2c 6d 69 64 6e 69 67 68 74 3a 22 6d 65 64 69 61 6e Data Ascii: ,evening:"tarde",night:"noche"}},defaultWidth:"wide",formattingValues:{narrow:{am:"a",pm:"p",midnight:"mn",noon:"md",morning:"de la ma\xf1ana",afternoon:"de la tarde",evening:"de la tarde",night:"de la noche"},abbreviated:{am:"AM",pm:"PM",midnight:"median
2024-04-23 14:05:14 UTC	16384	IN	Data Raw: 69 6e 65 2c 63 6f 6c 3a 74 68 69 73 2e 63 6f 6c 7d 7d 76 61 72 20 72 3d 32 2c 69 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 6c 69 6e 65 2d 72 2c 31 29 2c 6f 3d 65 2e 6c 69 6e 65 2b 72 2c 61 3d 53 74 72 69 6e 67 28 6f 29 2e 6c 65 6e 67 74 68 2c 73 3d 64 28 74 68 69 73 2e 62 75 66 66 65 72 2c 74 68 69 73 2e 6c 69 6e 65 2d 65 2e 6c 69 6e 65 2b 72 2b 31 29 2e 73 6c 69 63 65 28 30 2c 35 29 2c 75 3d 5b 5d 3b 75 2e 70 75 73 68 28 74 2b 22 20 61 74 20 6c 69 6e 65 20 22 2b 65 2e 6c 69 6e 65 2b 22 20 63 6f 6c 20 22 2b 65 2e 63 6f 6c 2b 22 3a 22 29 2c 75 2e 70 75 73 68 28 22 22 29 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 73 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 66 3d 73 5b 6c 5d 2c 68 3d 69 2b 6c 3b 75 2e 70 75 73 68 28 63 28 53 74 72 69 6e 67 28 68 29 2c Data Ascii: ine,col:this.col}}var r=2,i=Math.max(e.line-r,1),o=e.line+r,a=String(o).length,s=d(this.buffer,this.line-e.line+r+1).slice(0,5),u=[];u.push(t+" at line "+e.line+" col "+e.col+":"),u.push("");for(var l=0;l<s.length;l++){var f=s[l],h=i+l;u.push(c(String(h),
2024-04-23 14:05:14 UTC	2048	IN	Data Raw: 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 72 2e 5a 29 28 65 2c 74 2c 6e 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 69 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 34 35 39 38 37 3a 66 Data Ascii: rEach((function(t){(0,r.Z)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}},45987:f
2024-04-23 14:05:14 UTC	14880	IN	Data Raw: 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 28 65 2c 6e 2c 74 2c 72 29 7d 29 29 7d 72 65 74 75 72 6e 20 61 3d 61 3f 61 2e 74 68 65 6e 28 72 2c 72 29 3a 72 28 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 69 66 28 22 65 78 65 63 75 74 69 6e 67 22 3d 3d 3d 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 69 66 28 22 63 6f 6d 70 6c 65 74 65 64 22 3d 3d 3d 72 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 69 29 74 68 Data Ascii: ,n){function r(){return new t((function(t,r){i(e,n,t,r)}))}return a=a?a.then(r,r):r()}})}function k(e,t,n){var r="suspendedStart";return function(i,o){if("executing"===r)throw new Error("Generator is already running");if("completed"===r){if("throw"===i)th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:13 UTC	600	OUT	GET /static/js/2791.5d87b86c.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:14 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7190 Connection: close Date: Tue, 23 Apr 2024 14:05:15 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "4530c2d66e0a9f6d5990d3d665d3b915" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a873ca51d0e48914df93f772c756975c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: D2k_8eUMijrPufLLqYGmA04ajBOG9xkwbClgJ8iqXMncDRB4TGXTeg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:14 UTC	7190	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 37 39 31 2e 35 64 38 37 62 38 36 63 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 39 31 5d 2c 7b 33 31 37 32 35 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: /! For license information please see 2791.5d87b86c.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[2791],{31725:function(e){var t=Object.getOwnPropertySymbols,r=Object.pro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 14:05:13 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=43222 Date: Tue, 23 Apr 2024 14:05:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 14:05:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:14 UTC	600	OUT	GET /static/js/4164.685cb2de.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:15 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 124493 Connection: close Date: Tue, 23 Apr 2024 14:05:16 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "6822c02f2638ba877803510fbaee9212" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 20ae150f60acdff8fc384fb3233356a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Whe_AwxQih693Lgnro8vAZ_cdjbnFerJ4cBw1HQMjqGCvW54cp8yEQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:15 UTC	1495	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 31 36 34 2e 36 38 35 63 62 32 64 65 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 31 36 34 5d 2c 7b 33 31 37 32 35 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 74 3d 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: /! For license information please see 4164.685cb2de.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4164],{31725:function(e){var n=Object.getOwnPropertySymbols,t=Object.pro
2024-04-23 14:05:15 UTC	16384	IN	Data Raw: 72 6e 69 6e 67 73 2e 22 7d 69 66 28 21 72 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 32 32 37 29 29 3b 76 61 72 20 75 3d 6e 65 77 20 53 65 74 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 63 28 65 2c 6e 29 2c 63 28 65 2b 22 43 61 70 74 75 72 65 22 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 6e 29 7b 66 6f 72 28 69 5b 65 5d 3d 6e 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 75 2e 61 64 64 28 6e 5b 65 5d 29 7d 76 61 72 20 66 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e Data Ascii: rnings."}if(!r)throw Error(o(227));var u=new Set,i={};function s(e,n){c(e,n),c(e+"Capture",n)}function c(e,n){for(i[e]=n,e=0;e<n.length;e++)u.add(n[e])}var f=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.
2024-04-23 14:05:15 UTC	1024	IN	Data Raw: 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 38 38 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 69 66 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 61 6c 74 65 72 6e 61 74 65 3b 69 66 28 21 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 59 65 28 65 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 38 38 29 29 3b 72 65 74 75 72 6e 20 6e 21 3d 3d 65 3f 6e 75 6c 6c 3a 65 7d 66 6f 72 28 76 61 72 20 74 3d 65 2c 72 3d 6e 3b 3b 29 7b 76 61 72 20 6c 3d 74 2e 72 65 74 75 72 6e 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6c 29 62 72 65 61 6b 3b 76 61 72 20 61 3d 6c 2e 61 6c 74 65 72 6e 61 74 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 28 72 3d 6c 2e 72 65 74 75 72 6e 29 29 7b 74 3d 72 3b 63 6f 6e 74 69 6e 75 Data Ascii: throw Error(o(188))}function Ze(e){if(e=function(e){var n=e.alternate;if(!n){if(null===(n=Ye(e)))throw Error(o(188));return n!==e?null:e}for(var t=e,r=n;;){var l=t.return;if(null===l)break;var a=l.alternate;if(null===a){if(null!==(r=l.return)){t=r;continu
2024-04-23 14:05:15 UTC	15360	IN	Data Raw: 61 74 65 3b 6e 75 6c 6c 21 3d 3d 6e 3b 29 7b 69 66 28 6e 3d 3d 3d 65 7c 7c 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 6e 3d 6e 2e 72 65 74 75 72 6e 7d 72 65 74 75 72 6e 21 31 7d 76 61 72 20 65 6e 2c 6e 6e 2c 74 6e 2c 72 6e 2c 6c 6e 3d 21 31 2c 61 6e 3d 5b 5d 2c 6f 6e 3d 6e 75 6c 6c 2c 75 6e 3d 6e 75 6c 6c 2c 73 6e 3d 6e 75 6c 6c 2c 63 6e 3d 6e 65 77 20 4d 61 70 2c 66 6e 3d 6e 65 77 20 4d 61 70 2c 64 6e 3d 5b 5d 2c 70 6e 3d 22 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 74 6f 75 63 68 63 61 6e 63 65 6c 20 74 6f 75 63 68 65 6e 64 20 74 6f 75 63 68 73 74 61 72 74 20 61 75 78 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 20 70 6f 69 6e 74 65 72 64 6f 77 6e 20 70 6f 69 6e 74 65 72 75 70 20 64 72 61 67 65 6e 64 Data Ascii: ate;null!==n;){if(n===e\|\|n===t)return!0;n=n.return}return!1}var en,nn,tn,rn,ln=!1,an=[],on=null,un=null,sn=null,cn=new Map,fn=new Map,dn=[],pn="mousedown mouseup touchcancel touchend touchstart auxclick dblclick pointercancel pointerdown pointerup dragend
2024-04-23 14:05:15 UTC	16384	IN	Data Raw: 73 65 4f 75 74 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 4f 76 65 72 20 70 6f 69 6e 74 65 72 6d 6f 76 65 20 70 6f 69 6e 74 65 72 4d 6f 76 65 20 70 6f 69 6e 74 65 72 6f 75 74 20 70 6f 69 6e 74 65 72 4f 75 74 20 70 6f 69 6e 74 65 72 6f 76 65 72 20 70 6f 69 6e 74 65 72 4f 76 65 72 20 73 63 72 6f 6c 6c 20 73 63 72 6f 6c 6c 20 74 6f 67 67 6c 65 20 74 6f 67 67 6c 65 20 74 6f 75 63 68 6d 6f 76 65 20 74 6f 75 63 68 4d 6f 76 65 20 77 68 65 65 6c 20 77 68 65 65 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 31 29 2c 44 6e 28 52 6e 2c 32 29 3b 66 6f 72 28 76 61 72 20 53 72 3d 22 63 68 61 6e 67 65 20 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 20 74 65 78 74 49 6e 70 75 74 20 63 6f 6d 70 6f 73 69 74 69 6f 6e 73 74 61 72 74 20 63 6f 6d 70 6f 73 69 74 69 6f 6e 65 6e Data Ascii: seOut mouseover mouseOver pointermove pointerMove pointerout pointerOut pointerover pointerOver scroll scroll toggle toggle touchmove touchMove wheel wheel".split(" "),1),Dn(Rn,2);for(var Sr="change selectionchange textInput compositionstart compositionen
2024-04-23 14:05:15 UTC	7420	IN	Data Raw: 55 70 64 61 74 65 28 72 2c 61 2c 6f 29 3a 21 6e 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 21 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 75 72 65 52 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 28 21 66 72 28 74 2c 72 29 7c 7c 21 66 72 28 6c 2c 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 21 31 2c 6c 3d 66 6c 2c 61 3d 6e 2e 63 6f 6e 74 65 78 74 54 79 70 65 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 3d 61 3f 61 3d 61 61 28 61 29 3a 28 6c 3d 67 6c 28 6e 29 3f 68 6c 3a 64 6c 2e 63 75 72 72 65 6e 74 2c 61 3d 28 72 3d 6e 75 6c 6c 21 3d 3d 28 72 3d 6e 2e 63 6f 6e 74 65 78 74 54 79 70 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 29 3f 6d 6c 28 65 2c 6c 29 3a 66 6c 29 Data Ascii: Update(r,a,o):!n.prototype\|\|!n.prototype.isPureReactComponent\|\|(!fr(t,r)\|\|!fr(l,a))}function ya(e,n,t){var r=!1,l=fl,a=n.contextType;return"object"===typeof a&&null!==a?a=aa(a):(l=gl(n)?hl:dl.current,a=(r=null!==(r=n.contextTypes)&&void 0!==r)?ml(e,l):fl)
2024-04-23 14:05:15 UTC	11012	IN	Data Raw: 6e 63 74 69 6f 6e 20 4d 61 28 29 7b 73 6c 28 4e 61 29 2c 73 6c 28 54 61 29 2c 73 6c 28 7a 61 29 7d 66 75 6e 63 74 69 6f 6e 20 52 61 28 65 29 7b 4c 61 28 7a 61 2e 63 75 72 72 65 6e 74 29 3b 76 61 72 20 6e 3d 4c 61 28 4e 61 2e 63 75 72 72 65 6e 74 29 2c 74 3d 70 65 28 6e 2c 65 2e 74 79 70 65 29 3b 6e 21 3d 3d 74 26 26 28 63 6c 28 54 61 2c 65 29 2c 63 6c 28 4e 61 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 61 28 65 29 7b 54 61 2e 63 75 72 72 65 6e 74 3d 3d 3d 65 26 26 28 73 6c 28 4e 61 29 2c 73 6c 28 54 61 29 29 7d 76 61 72 20 46 61 3d 69 6c 28 30 29 3b 66 75 6e 63 74 69 6f 6e 20 49 61 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 3b 6e 75 6c 6c 21 3d 3d 6e 3b 29 7b 69 66 28 31 33 3d 3d 3d 6e 2e 74 61 67 29 7b 76 61 72 20 74 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 Data Ascii: nction Ma(){sl(Na),sl(Ta),sl(za)}function Ra(e){La(za.current);var n=La(Na.current),t=pe(n,e.type);n!==t&&(cl(Ta,e),cl(Na,t))}function Da(e){Ta.current===e&&(sl(Na),sl(Ta))}var Fa=il(0);function Ia(e){for(var n=e;null!==n;){if(13===n.tag){var t=n.memoized
2024-04-23 14:05:15 UTC	16384	IN	Data Raw: 79 70 65 3d 6f 2c 56 6f 28 65 2c 6e 2c 6f 2c 72 2c 6c 2c 61 29 29 7d 72 65 74 75 72 6e 20 6f 3d 65 2e 63 68 69 6c 64 2c 30 3d 3d 3d 28 6c 26 61 29 26 26 28 6c 3d 6f 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 28 74 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 63 6f 6d 70 61 72 65 29 3f 74 3a 66 72 29 28 6c 2c 72 29 26 26 65 2e 72 65 66 3d 3d 3d 6e 2e 72 65 66 29 3f 61 75 28 65 2c 6e 2c 61 29 3a 28 6e 2e 66 6c 61 67 73 7c 3d 31 2c 28 65 3d 24 69 28 6f 2c 72 29 29 2e 72 65 66 3d 6e 2e 72 65 66 2c 65 2e 72 65 74 75 72 6e 3d 6e 2c 6e 2e 63 68 69 6c 64 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 56 6f 28 65 2c 6e 2c 74 2c 72 2c 6c 2c 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 65 26 26 66 72 28 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 72 29 26 26 65 2e 72 65 66 3d 3d Data Ascii: ype=o,Vo(e,n,o,r,l,a))}return o=e.child,0===(l&a)&&(l=o.memoizedProps,(t=null!==(t=t.compare)?t:fr)(l,r)&&e.ref===n.ref)?au(e,n,a):(n.flags\|=1,(e=$i(o,r)).ref=n.ref,e.return=n,n.child=e)}function Vo(e,n,t,r,l,a){if(null!==e&&fr(e.memoizedProps,r)&&e.ref==
2024-04-23 14:05:15 UTC	1024	IN	Data Raw: 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 28 75 3d 75 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 2c 22 22 2b 63 29 3a 22 73 75 70 70 72 65 73 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 57 61 72 6e 69 6e 67 22 21 3d 3d 66 26 26 22 73 75 70 70 72 65 73 73 48 79 64 72 61 74 69 6f 6e 57 61 72 6e 69 6e 67 22 21 3d 3d 66 26 26 28 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 3f 28 6e 75 6c 6c 21 3d 63 26 26 22 6f 6e 53 63 72 6f 6c 6c 22 3d 3d 3d 66 26 26 54 72 28 22 73 63 72 6f 6c 6c 22 2c 65 29 2c 75 7c 7c 73 3d 3d 3d 63 7c 7c 28 75 3d 5b 5d 29 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 6e 75 6c 6c 21 3d 3d 63 26 26 63 2e 24 24 74 79 70 65 6f 66 3d 3d 3d 44 3f 63 2e 74 6f 53 74 72 69 6e 67 28 29 3a 28 75 3d 75 7c Data Ascii: mber"!==typeof c\|\|(u=u\|\|[]).push(f,""+c):"suppressContentEditableWarning"!==f&&"suppressHydrationWarning"!==f&&(i.hasOwnProperty(f)?(null!=c&&"onScroll"===f&&Tr("scroll",e),u\|\|s===c\|\|(u=[])):"object"===typeof c&&null!==c&&c.$$typeof===D?c.toString():(u=u\|
2024-04-23 14:05:16 UTC	16384	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 6d 75 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 66 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 29 74 72 79 7b 6e 28 6e 75 6c 6c 29 7d 63 61 74 63 68 28 74 29 7b 56 69 28 65 2c 74 29 7d 65 6c 73 65 20 6e 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 75 28 65 2c 6e 29 7b 73 77 69 74 63 68 28 6e 2e 74 61 67 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 31 35 3a 63 61 73 65 20 32 32 3a 63 61 73 65 20 35 3a 63 61 73 65 20 36 3a 63 61 73 65 20 34 3a 63 61 73 65 20 31 37 3a 72 65 74 75 72 6e 3b 63 61 73 65 20 31 3a 69 66 28 32 35 36 26 6e 2e 66 6c 61 67 73 26 26 6e 75 6c 6c 21 3d 3d 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 Data Ascii: ;function mu(e){var n=e.ref;if(null!==n)if("function"===typeof n)try{n(null)}catch(t){Vi(e,t)}else n.current=null}function gu(e,n){switch(n.tag){case 0:case 11:case 15:case 22:case 5:case 6:case 4:case 17:return;case 1:if(256&n.flags&&null!==e){var t=e.me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49729	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:14 UTC	600	OUT	GET /static/js/6702.603c35a5.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:15 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11970 Connection: close Date: Tue, 23 Apr 2024 14:05:16 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "a9fc30d312d339e23de1ceedbfbd465c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 340c2c816cb4d282409765e7011cd2ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rMkzWMN8v5C7AtwgeLqi3vTZ0Ascm0AdslcYO4Vzkrm5FZCQ4vzynA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:15 UTC	11970	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 37 30 32 2e 36 30 33 63 33 35 61 35 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 37 30 32 2c 36 31 39 32 5d 2c 7b 34 39 37 39 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c Data Ascii: /! For license information please see 6702.603c35a5.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6702,6192],{49797:function(e,t,r){function n(e){var t=Object.create(null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:14 UTC	600	OUT	GET /static/js/5043.6d69264d.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:15 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8408 Connection: close Date: Tue, 23 Apr 2024 14:05:16 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "a31592d455bba74d0002cdef7d35fc1f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9f7d0905153f4a5038c2d204546afd48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -IsD2e9IKMLgit8sk6xTwzIjlxGKU4h8zXvRglSpord6YhXVZ6LEiA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:15 UTC	8408	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 34 33 5d 2c 7b 31 34 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 69 3d 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 73 65 74 54 69 6d 65 6f 75 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 64 65 66 69 6e 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 20 68 61 73 20 6e 6f 74 20 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5043],{1426:function(e){var n,t,i=e.exports={};function r(){throw new Error("setTimeout has not been defined")}function o(){throw new Error("clearTimeout has not

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49732	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:14 UTC	600	OUT	GET /static/js/4004.3542d89f.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:15 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15690 Connection: close Date: Tue, 23 Apr 2024 14:05:16 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "3c07b5c1b35b6d8ff41c8e1e18a20eaa" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 18605cbe377a28a7af20e4740c13a360.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ST3lqb9Hw9UCR1grPpZbpPA9_j9t2ZAW60inwHm-f5vxA2DQ3GRF8g== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:15 UTC	7641	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 30 30 34 2e 33 35 34 32 64 38 39 66 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 30 34 5d 2c 7b 35 39 37 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 Data Ascii: /! For license information please see 4004.3542d89f.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4004],{5970:function(n,e,t){t.d(e,{D:function(){return a}});var r=Object
2024-04-23 14:05:15 UTC	8049	IN	Data Raw: 69 6f 6e 20 54 28 6e 29 7b 72 65 74 75 72 6e 20 71 28 56 28 6e 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 28 30 2c 69 2e 6b 47 29 28 22 44 6f 63 75 6d 65 6e 74 22 3d 3d 3d 6e 2e 6b 69 6e 64 2c 37 29 2c 28 30 2c 69 2e 6b 47 29 28 6e 2e 64 65 66 69 6e 69 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 3c 3d 31 2c 38 29 3b 76 61 72 20 65 3d 6e 2e 64 65 66 69 6e 69 74 69 6f 6e 73 5b 30 5d 3b 72 65 74 75 72 6e 28 30 2c 69 2e 6b 47 29 28 22 46 72 61 67 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 22 3d 3d 3d 65 2e 6b 69 6e 64 2c 39 29 2c 65 7d 28 6e 29 2c 41 28 78 28 6e 29 29 29 3f 6e 75 6c 6c 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 43 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: ion T(n){return q(V(n)\|\|function(n){(0,i.kG)("Document"===n.kind,7),(0,i.kG)(n.definitions.length<=1,8);var e=n.definitions[0];return(0,i.kG)("FragmentDefinition"===e.kind,9),e}(n),A(x(n)))?null:n}function C(n){return function(e){return n.some((function(n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49734	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:15 UTC	600	OUT	GET /static/js/7875.4b63acd4.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:16 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9701 Connection: close Date: Tue, 23 Apr 2024 14:05:17 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "deaabe9e5fd715f0d852a30380115491" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 fdf00b190a061de7e2517d80e4d54e0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: N9OY_EeuoEYhBCXcov7_w8683rmmSn4WmVi-L-JPsreiCA9IZPhp-w== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:16 UTC	9701	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 37 35 5d 2c 7b 38 37 38 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 41 70 6f 6c 6c 6f 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 4f 62 73 65 72 76 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 63 72 65 61 74 65 4f 70 65 72 61 74 69 6f Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7875],{87875:function(e,n,t){"use strict";t.r(n),t.d(n,{ApolloLink:function(){return _},Observable:function(){return o},concat:function(){return d},createOperatio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49735	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:15 UTC	599	OUT	GET /static/js/861.8af79939.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:16 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4231 Connection: close Date: Tue, 23 Apr 2024 14:05:17 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "4204c4fceac942804de2c30e756d839f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 23f80b153c334c9917e485cd3fc5f1d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: d2ibWJch9vwGuq47XcvYUwC1VB65e9r6S6-2nS9zShZQqYHQiWQ5gA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:16 UTC	4231	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 36 31 2e 38 61 66 37 39 39 33 39 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 36 31 2c 32 39 37 38 5d 2c 7b 32 30 39 31 39 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 66 Data Ascii: /! For license information please see 861.8af79939.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[861,2978],{20919:function(r,t){var e="function"===typeof Symbol&&Symbol.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49736	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:15 UTC	600	OUT	GET /static/js/1660.ffbdfe6e.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:16 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12936 Connection: close Date: Tue, 23 Apr 2024 14:05:17 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "28d3fc6ba18fdc9c1cf22487fcc197b9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a4294eb914e3f883aba658e8044fe4f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: B0BcsPY5dMqoFPvLhlFG_u_YG62h-SZh5VuJaDHZYPMxdSu9kkMHKQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:17 UTC	12936	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 36 36 30 2e 66 66 62 64 66 65 36 65 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 36 30 2c 38 31 38 32 5d 2c 7b 34 30 35 35 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 72 3d 74 28 38 37 34 36 32 29 2c 6f 3d 74 28 36 33 33 36 36 29 2c 69 3d 74 28 39 33 32 36 34 29 2c 75 Data Ascii: /! For license information please see 1660.ffbdfe6e.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1660,8182],{40558:function(n,e,t){var r=t(87462),o=t(63366),i=t(93264),u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49737	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:16 UTC	600	OUT	GET /static/js/6611.ecce3809.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:17 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15428 Connection: close Date: Tue, 23 Apr 2024 14:05:18 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "a402001bc1fe2ff9f0260bbceb61ffe5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 69549fdd08f6edbeec8f40a9473365d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ItUptWSbN7SwAui4DUABTb_8qavKF9hw-xH8wkR6ROXi8Rj9hYQpvw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:17 UTC	15428	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 31 31 5d 2c 7b 35 33 39 31 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 7d 29 3b 76 61 72 20 6f 3d 74 28 32 39 34 33 39 29 2c 69 3d 74 28 34 39 34 32 29 2c 72 3d 74 28 38 37 34 36 32 29 2c 61 3d 74 28 36 33 33 36 36 29 2c 75 3d 74 28 39 33 32 36 34 29 2c 6c 3d 74 28 32 38 31 38 32 29 2c 63 3d 74 28 39 34 34 31 39 29 2c 73 3d 74 28 36 36 39 33 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6611],{53915:function(e,n,t){t.d(n,{Z:function(){return U}});var o=t(29439),i=t(4942),r=t(87462),a=t(63366),u=t(93264),l=t(28182),c=t(94419),s=t(6693

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49738	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:16 UTC	600	OUT	GET /static/js/4954.3618d4e3.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:17 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15897 Connection: close Date: Tue, 23 Apr 2024 14:05:18 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "0a33b44d8c501a8378bff7fd7e4db4b0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 23f80b153c334c9917e485cd3fc5f1d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2rDgr6lPcTcKtynFS96dhWhcQai26yC086TsOwGr8QHWzFfGUuW0Mg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:17 UTC	8949	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 35 34 5d 2c 7b 39 30 39 37 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 39 34 32 29 2c 6f 3d 6e 28 36 33 33 36 36 29 2c 69 3d 6e 28 38 37 34 36 32 29 2c 61 3d 6e 28 39 33 32 36 34 29 2c 75 3d 6e 28 32 38 31 38 32 29 2c 6c 3d 6e 28 39 34 34 31 39 29 2c 63 3d 6e 28 31 32 30 36 35 29 2c 73 3d 6e 28 36 36 39 33 34 29 2c 64 3d 6e 28 33 31 34 30 32 29 2c 66 3d 6e 28 35 33 39 31 35 29 2c 76 3d 6e 28 31 34 30 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4954],{90977:function(e,t,n){var r=n(4942),o=n(63366),i=n(87462),a=n(93264),u=n(28182),l=n(94419),c=n(12065),s=n(66934),d=n(31402),f=n(53915),v=n(140
2024-04-23 14:05:17 UTC	6948	IN	Data Raw: 6c 65 6e 67 74 68 3e 30 26 26 77 65 2e 63 75 72 72 65 6e 74 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 28 4b 65 2e 6c 65 6e 67 74 68 2c 63 2e 6c 65 6e 67 74 68 29 7d 7d 7d 29 29 2c 76 74 3d 69 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 74 26 26 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 3b 69 66 28 2d 31 21 3d 3d 46 65 2e 63 75 72 72 65 6e 74 26 26 6c 74 2e 66 69 6c 74 65 72 65 64 4f 70 74 69 6f 6e 73 26 26 6c 74 2e 66 69 6c 74 65 72 65 64 4f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 21 3d 3d 75 74 2e 6c 65 6e 67 74 68 26 26 6c 74 2e 69 6e 70 75 74 56 61 6c 75 65 3d 3d 3d 4b 65 26 26 28 6c 65 3f 71 65 2e 6c 65 6e 67 74 68 3d 3d 3d 6c 74 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 26 26 6c 74 2e Data Ascii: length>0&&we.current.setSelectionRange(Ke.length,c.length)}}})),vt=i.useCallback((function(){if(at&&!function(){var e,n;if(-1!==Fe.current&&lt.filteredOptions&&lt.filteredOptions.length!==ut.length&&lt.inputValue===Ke&&(le?qe.length===lt.value.length&&lt.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49740	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:17 UTC	600	OUT	GET /static/js/5730.10b1d522.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:18 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21883 Connection: close Date: Tue, 23 Apr 2024 14:05:18 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "69f5b7f8ac74fd5c21c475f322ed6796" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4f00e77688d92901b5afc8b7b033ed56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qPAs2TEST3mF-NeNqc3Xc_DtPQaB_OoKT-6vAqUwbVrdDTImDk7WRg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:18 UTC	8447	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 35 37 33 30 2e 31 30 62 31 64 35 32 32 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 37 33 30 5d 2c 7b 35 38 34 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 6f 3d 65 28 34 39 34 32 29 2c 72 3d 65 28 36 33 33 36 36 29 2c 61 3d 65 28 38 37 34 36 32 29 2c 69 3d 65 28 39 33 32 36 Data Ascii: /! For license information please see 5730.10b1d522.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5730],{5849:function(t,n,e){var o=e(4942),r=e(63366),a=e(87462),i=e(9326
2024-04-23 14:05:18 UTC	13436	IN	Data Raw: 6e 74 65 72 65 64 22 2c 22 6f 6e 45 6e 74 65 72 69 6e 67 22 2c 22 6f 6e 45 78 69 74 22 2c 22 6f 6e 45 78 69 74 65 64 22 2c 22 6f 6e 45 78 69 74 69 6e 67 22 2c 22 73 74 79 6c 65 22 2c 22 74 69 6d 65 6f 75 74 22 2c 22 54 72 61 6e 73 69 74 69 6f 6e 43 6f 6d 70 6f 6e 65 6e 74 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 72 65 74 75 72 6e 22 73 63 61 6c 65 28 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2c 20 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 70 6f 77 28 74 2c 32 29 2c 22 29 22 29 7d 76 61 72 20 66 3d 7b 65 6e 74 65 72 69 6e 67 3a 7b 6f 70 61 63 69 74 79 3a 31 2c 74 72 61 6e 73 66 6f 72 6d 3a 70 28 31 29 7d 2c 65 6e 74 65 72 65 64 3a 7b 6f 70 61 63 69 74 79 3a 31 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 6e 6f 6e 65 22 7d 7d 2c 76 3d 22 75 6e 64 65 66 69 6e Data Ascii: ntered","onEntering","onExit","onExited","onExiting","style","timeout","TransitionComponent"];function p(t){return"scale(".concat(t,", ").concat(Math.pow(t,2),")")}var f={entering:{opacity:1,transform:p(1)},entered:{opacity:1,transform:"none"}},v="undefin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49741	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:17 UTC	600	OUT	GET /static/js/8447.4979ef99.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:18 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 24330 Connection: close Date: Tue, 23 Apr 2024 14:05:19 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "e8a0e38773c9055f3dde938b1114fe0d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7d22f981b2e0ccd3fbaa2d588cb84a48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CrOT3fUzLF6mVLiYM8WSVIWZYNKN8b-q8LeRaDumFtt2WLdIeBrHKg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:18 UTC	8448	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 34 37 5d 2c 7b 34 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 65 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 38 37 34 36 32 29 2c 6f 3d 6e 28 36 33 33 36 36 29 2c 69 3d 6e 28 32 39 34 33 39 29 2c 61 3d 6e 28 39 33 32 36 34 29 2c 73 3d 6e 28 36 31 31 37 29 2c 66 3d 6e 28 36 32 38 37 36 29 2c 70 3d 6e 28 38 34 39 31 33 29 3b 66 75 6e 63 74 69 6f 6e 20 63 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8447],{41:function(e,t,n){n.d(t,{Z:function(){return Ue}});var r=n(87462),o=n(63366),i=n(29439),a=n(93264),s=n(6117),f=n(62876),p=n(84913);function c
2024-04-23 14:05:18 UTC	9000	IN	Data Raw: 70 78 22 3a 22 22 2c 74 5b 78 5d 3d 67 3f 6d 2b 22 70 78 22 3a 22 22 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 22 2c 74 29 29 7d 76 61 72 20 73 65 3d 7b 6e 61 6d 65 3a 22 6f 66 66 73 65 74 22 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 70 68 61 73 65 3a 22 6d 61 69 6e 22 2c 72 65 71 75 69 72 65 73 3a 5b 22 70 6f 70 70 65 72 4f 66 66 73 65 74 73 22 5d 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 2c 72 3d 65 2e 6e 61 6d 65 2c 6f 3d 6e 2e 6f 66 66 73 65 74 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 5b 30 2c 30 5d 3a 6f 2c 61 3d 4b 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 Data Ascii: px":"",t[x]=g?m+"px":"",t.transform="",t))}var se={name:"offset",enabled:!0,phase:"main",requires:["popperOffsets"],fn:function(e){var t=e.state,n=e.options,r=e.name,o=n.offset,i=void 0===o?[0,0]:o,a=K.reduce((function(e,n){return e[n]=function(e,t,n){var
2024-04-23 14:05:18 UTC	6882	IN	Data Raw: 65 53 74 79 6c 65 73 22 5d 7d 2c 73 65 2c 7b 6e 61 6d 65 3a 22 66 6c 69 70 22 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 70 68 61 73 65 3a 22 6d 61 69 6e 22 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 2c 72 3d 65 2e 6e 61 6d 65 3b 69 66 28 21 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 5b 72 5d 2e 5f 73 6b 69 70 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6e 2e 6d 61 69 6e 41 78 69 73 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2c 61 3d 6e 2e 61 6c 74 41 78 69 73 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 61 2c 66 3d 6e 2e 66 61 6c 6c 62 61 63 6b 50 6c 61 63 65 6d 65 6e 74 73 2c 70 3d 6e 2e 70 61 64 64 69 6e 67 2c 63 3d 6e 2e 62 6f 75 6e 64 61 72 79 2c 6c 3d 6e 2e 72 6f 6f 74 42 6f 75 Data Ascii: eStyles"]},se,{name:"flip",enabled:!0,phase:"main",fn:function(e){var t=e.state,n=e.options,r=e.name;if(!t.modifiersData[r]._skip){for(var o=n.mainAxis,i=void 0===o\|\|o,a=n.altAxis,s=void 0===a\|\|a,f=n.fallbackPlacements,p=n.padding,c=n.boundary,l=n.rootBou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49742	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:18 UTC	600	OUT	GET /static/js/6641.c067fe0f.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:19 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 16762 Connection: close Date: Tue, 23 Apr 2024 14:05:20 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "427bf59ebece633e4fbdb98fea4de82a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 71c9229c52c40e2117e67076e35eb6dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Om5phP43tis1fMOCP_OQClODnh9Ek3PuNcEYGkx2nZPg9nX0IC2B2Q== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:19 UTC	8448	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 34 31 5d 2c 7b 31 38 30 36 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 3d 74 28 36 33 33 36 36 29 2c 72 3d 74 28 38 37 34 36 32 29 2c 69 3d 74 28 39 33 32 36 34 29 2c 61 3d 74 28 32 38 31 38 32 29 2c 73 3d 74 28 39 34 34 31 39 29 2c 63 3d 74 28 36 36 39 33 34 29 2c 6c 3d 74 28 33 31 34 30 32 29 2c 75 3d 74 28 36 30 36 32 37 29 2c 64 3d 74 28 34 38 36 37 37 29 2c 66 3d 74 28 38 30 31 38 34 29 2c 70 3d 5b 22 63 68 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6641],{18060:function(e,n,t){var o=t(63366),r=t(87462),i=t(93264),a=t(28182),s=t(94419),c=t(66934),l=t(31402),u=t(60627),d=t(48677),f=t(80184),p=["ch
2024-04-23 14:05:19 UTC	8314	IN	Data Raw: 2e 64 69 73 61 62 6c 65 45 6e 66 6f 72 63 65 46 6f 63 75 73 2c 4b 3d 76 6f 69 64 20 30 21 3d 3d 44 26 26 44 2c 6a 3d 70 2e 64 69 73 61 62 6c 65 45 73 63 61 70 65 4b 65 79 44 6f 77 6e 2c 55 3d 76 6f 69 64 20 30 21 3d 3d 6a 26 26 6a 2c 57 3d 70 2e 64 69 73 61 62 6c 65 50 6f 72 74 61 6c 2c 5f 3d 76 6f 69 64 20 30 21 3d 3d 57 26 26 57 2c 48 3d 70 2e 64 69 73 61 62 6c 65 52 65 73 74 6f 72 65 46 6f 63 75 73 2c 59 3d 76 6f 69 64 20 30 21 3d 3d 48 26 26 48 2c 71 3d 70 2e 64 69 73 61 62 6c 65 53 63 72 6f 6c 6c 4c 6f 63 6b 2c 7a 3d 76 6f 69 64 20 30 21 3d 3d 71 26 26 71 2c 47 3d 70 2e 68 69 64 65 42 61 63 6b 64 72 6f 70 2c 56 3d 76 6f 69 64 20 30 21 3d 3d 47 26 26 47 2c 58 3d 70 2e 6b 65 65 70 4d 6f 75 6e 74 65 64 2c 4a 3d 76 6f 69 64 20 30 21 3d 3d 58 26 26 58 2c Data Ascii: .disableEnforceFocus,K=void 0!==D&&D,j=p.disableEscapeKeyDown,U=void 0!==j&&j,W=p.disablePortal,_=void 0!==W&&W,H=p.disableRestoreFocus,Y=void 0!==H&&H,q=p.disableScrollLock,z=void 0!==q&&q,G=p.hideBackdrop,V=void 0!==G&&G,X=p.keepMounted,J=void 0!==X&&X,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49743	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:18 UTC	600	OUT	GET /static/js/3006.2c7dce02.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:19 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 61904 Connection: close Date: Tue, 23 Apr 2024 14:05:20 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "ba748042778f32b2ccf84a904e416b78" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2b98ef877819781cd86c369994bd8ba6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: E7Cg5iRH4_RlnNTZApB69_3JJh3nnHQzs36b4crGi6HAGXJmEpvx_g== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:19 UTC	471	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 30 36 5d 2c 7b 38 36 35 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 39 34 32 29 2c 6f 3d 6e 28 39 33 34 33 33 29 2c 69 3d 6e 28 36 33 33 36 36 29 2c 61 3d 6e 28 38 37 34 36 32 29 2c 6c 3d 6e 28 39 33 32 36 34 29 2c 73 3d 6e 28 38 32 34 36 36 29 2c 75 3d 6e 28 39 34 34 31 39 29 2c 64 3d 6e 28 34 30 31 33 39 29 2c 63 3d 6e 28 36 36 39 33 34 29 2c 70 3d 6e 28 33 31 34 30 32 29 2c 66 3d 6e 28 39 36 32 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3006],{86596:function(e,t,n){var r=n(4942),o=n(93433),i=n(63366),a=n(87462),l=n(93264),s=n(82466),u=n(94419),d=n(40139),c=n(66934),p=n(31402),f=n(962
2024-04-23 14:05:19 UTC	16384	IN	Data Raw: 7c 22 63 6c 61 73 73 65 73 22 3d 3d 3d 65 7d 2c 6e 61 6d 65 3a 22 4d 75 69 46 69 6c 6c 65 64 49 6e 70 75 74 22 2c 73 6c 6f 74 3a 22 52 6f 6f 74 22 2c 6f 76 65 72 72 69 64 65 73 52 65 73 6f 6c 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6f 77 6e 65 72 53 74 61 74 65 3b 72 65 74 75 72 6e 5b 5d 2e 63 6f 6e 63 61 74 28 28 30 2c 6f 2e 5a 29 28 28 30 2c 64 2e 47 78 29 28 65 2c 74 29 29 2c 5b 21 6e 2e 64 69 73 61 62 6c 65 55 6e 64 65 72 6c 69 6e 65 26 26 74 2e 75 6e 64 65 72 6c 69 6e 65 5d 29 7d 7d 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 6f 2c 69 3d 65 2e 74 68 65 6d 65 2c 6c 3d 65 2e 6f 77 6e 65 72 53 74 61 74 65 2c 73 3d 22 6c 69 67 68 74 22 3d 3d 3d 69 2e 70 61 6c 65 74 74 65 2e 6d 6f 64 65 2c 75 Data Ascii: \|"classes"===e},name:"MuiFilledInput",slot:"Root",overridesResolver:function(e,t){var n=e.ownerState;return[].concat((0,o.Z)((0,d.Gx)(e,t)),[!n.disableUnderline&&t.underline])}})((function(e){var t,n,o,i=e.theme,l=e.ownerState,s="light"===i.palette.mode,u
2024-04-23 14:05:19 UTC	16384	IN	Data Raw: 72 26 26 74 2e 65 72 72 6f 72 2c 22 73 6d 61 6c 6c 22 3d 3d 3d 6e 2e 73 69 7a 65 26 26 74 2e 73 69 7a 65 53 6d 61 6c 6c 2c 6e 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 74 2e 6d 75 6c 74 69 6c 69 6e 65 2c 6e 2e 63 6f 6c 6f 72 26 26 74 5b 22 63 6f 6c 6f 72 22 2e 63 6f 6e 63 61 74 28 28 30 2c 62 2e 5a 29 28 6e 2e 63 6f 6c 6f 72 29 29 5d 2c 6e 2e 66 75 6c 6c 57 69 64 74 68 26 26 74 2e 66 75 6c 6c 57 69 64 74 68 2c 6e 2e 68 69 64 64 65 6e 4c 61 62 65 6c 26 26 74 2e 68 69 64 64 65 6e 4c 61 62 65 6c 5d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6f 77 6e 65 72 53 74 61 74 65 3b 72 65 74 75 72 6e 5b 74 2e 69 6e 70 75 74 2c 22 73 6d 61 6c 6c 22 3d 3d 3d 6e 2e 73 69 7a 65 26 26 74 2e 69 6e 70 75 74 53 69 7a 65 53 6d 61 6c 6c 2c 6e 2e 6d Data Ascii: r&&t.error,"small"===n.size&&t.sizeSmall,n.multiline&&t.multiline,n.color&&t["color".concat((0,b.Z)(n.color))],n.fullWidth&&t.fullWidth,n.hiddenLabel&&t.hiddenLabel]},k=function(e,t){var n=e.ownerState;return[t.input,"small"===n.size&&t.inputSizeSmall,n.m
2024-04-23 14:05:19 UTC	1024	IN	Data Raw: 79 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 2e 69 73 56 61 6c 69 64 45 6c 65 6d 65 6e 74 28 65 29 3f 28 65 2e 70 72 6f 70 73 2e 64 69 73 61 62 6c 65 64 7c 7c 28 22 73 65 6c 65 63 74 65 64 4d 65 6e 75 22 3d 3d 3d 46 26 26 65 2e 70 72 6f 70 73 2e 73 65 6c 65 63 74 65 64 7c 7c 2d 31 3d 3d 3d 45 29 26 26 28 45 3d 74 29 2c 45 3d 3d 3d 74 26 26 28 65 2e 70 72 6f 70 73 2e 64 69 73 61 62 6c 65 64 7c 7c 65 2e 70 72 6f 70 73 2e 6d 75 69 53 6b 69 70 4c 69 73 74 48 69 67 68 6c 69 67 68 74 7c 7c 65 2e 74 79 70 65 2e 6d 75 69 53 6b 69 70 4c 69 73 74 48 69 67 68 6c 69 67 68 74 29 26 26 28 45 2b 3d 31 29 3e 3d 79 2e 6c 65 6e 67 74 68 26 26 28 45 3d 2d 31 29 29 3a 45 3d 3d 3d 74 26 26 28 45 2b 3d 31 29 3e 3d 79 2e 6c 65 6e 67 74 68 26 26 28 45 3d 2d 31 29 7d 29 Data Ascii: y,(function(e,t){i.isValidElement(e)?(e.props.disabled\|\|("selectedMenu"===F&&e.props.selected\|\|-1===E)&&(E=t),E===t&&(e.props.disabled\|\|e.props.muiSkipListHighlight\|\|e.type.muiSkipListHighlight)&&(E+=1)>=y.length&&(E=-1)):E===t&&(E+=1)>=y.length&&(E=-1)})
2024-04-23 14:05:20 UTC	16384	IN	Data Raw: 21 6f 2e 72 65 70 65 61 74 69 6e 67 26 26 6d 28 72 2c 6f 29 3b 6f 2e 70 72 65 76 69 6f 75 73 4b 65 79 4d 61 74 63 68 65 64 26 26 28 73 7c 7c 68 28 74 2c 72 2c 21 31 2c 50 2c 66 2c 6f 29 29 3f 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3a 6f 2e 70 72 65 76 69 6f 75 73 4b 65 79 4d 61 74 63 68 65 64 3d 21 31 7d 6b 26 26 6b 28 65 29 7d 2c 74 61 62 49 6e 64 65 78 3a 62 3f 30 3a 2d 31 7d 2c 49 2c 7b 63 68 69 6c 64 72 65 6e 3a 4e 7d 29 29 7d 29 29 7d 2c 32 39 39 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 53 4a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 77 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 34 39 34 32 29 2c 6f 3d 6e 28 36 33 33 36 Data Ascii: !o.repeating&&m(r,o);o.previousKeyMatched&&(s\|\|h(t,r,!1,P,f,o))?e.preventDefault():o.previousKeyMatched=!1}k&&k(e)},tabIndex:b?0:-1},I,{children:N}))}))},29916:function(e,t,n){n.d(t,{SJ:function(){return h},wU:function(){return v}});var r=n(4942),o=n(6336
2024-04-23 14:05:20 UTC	1514	IN	Data Raw: 79 49 64 28 4c 29 3b 69 66 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 2e 69 73 43 6f 6c 6c 61 70 73 65 64 26 26 66 65 2e 63 75 72 72 65 6e 74 2e 66 6f 63 75 73 28 29 7d 3b 72 65 74 75 72 6e 20 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 29 7d 7d 7d 7d 29 2c 5b 4c 5d 29 3b 76 61 72 20 52 65 2c 6b 65 2c 4d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3f 5f 26 26 5f 28 74 29 3a 4b 26 26 4b 28 74 29 2c 62 65 7c 7c 28 77 65 28 68 3f 6e 75 6c 6c 3a 43 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 2c 63 65 28 65 29 29 7d 2c 46 65 Data Ascii: yId(L);if(e){var t=function(){getSelection().isCollapsed&&fe.current.focus()};return e.addEventListener("click",t),function(){e.removeEventListener("click",t)}}}}),[L]);var Re,ke,Me=function(e,t){e?_&&_(t):K&&K(t),be\|\|(we(h?null:Ce.clientWidth),ce(e))},Fe
2024-04-23 14:05:20 UTC	9743	IN	Data Raw: 69 64 7c 7c 28 48 3f 22 6d 75 69 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 73 65 6c 65 63 74 2d 22 2e 63 6f 6e 63 61 74 28 48 29 3a 76 6f 69 64 20 30 29 2c 4c 65 3d 28 30 2c 6f 2e 5a 29 28 7b 7d 2c 65 2c 7b 76 61 72 69 61 6e 74 3a 6e 65 2c 76 61 6c 75 65 3a 61 65 2c 6f 70 65 6e 3a 4f 65 2c 65 72 72 6f 72 3a 4e 7d 29 2c 6a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6c 61 73 73 65 73 2c 6e 3d 65 2e 76 61 72 69 61 6e 74 2c 72 3d 65 2e 64 69 73 61 62 6c 65 64 2c 6f 3d 65 2e 6d 75 6c 74 69 70 6c 65 2c 69 3d 65 2e 6f 70 65 6e 2c 61 3d 7b 73 65 6c 65 63 74 3a 5b 22 73 65 6c 65 63 74 22 2c 6e 2c 72 26 26 22 64 69 73 61 62 6c 65 64 22 2c 6f 26 26 22 6d 75 6c 74 69 70 6c 65 22 2c 65 2e 65 72 72 6f 72 26 26 22 65 72 72 6f 72 22 5d 2c 69 63 6f 6e 3a Data Ascii: id\|\|(H?"mui-component-select-".concat(H):void 0),Le=(0,o.Z)({},e,{variant:ne,value:ae,open:Oe,error:N}),je=function(e){var t=e.classes,n=e.variant,r=e.disabled,o=e.multiple,i=e.open,a={select:["select",n,r&&"disabled",o&&"multiple",e.error&&"error"],icon:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49745	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:18 UTC	600	OUT	GET /static/js/5206.5ee8d138.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:20 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 41555 Connection: close Date: Tue, 23 Apr 2024 14:05:20 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "82f607a71d77a50d8d350345b5069e37" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 048a6c89005e16288875f5750557de68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -xrTLXVSN65XOGV6Rg3MbrykhFWk3npxEpykdONnyiTxnImrH0umSA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:20 UTC	8949	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 30 36 5d 2c 7b 34 36 33 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 29 7b 76 61 72 20 61 2c 6e 2c 72 3d 74 28 34 39 34 32 29 2c 69 3d 74 28 36 33 33 36 36 29 2c 63 3d 74 28 38 37 34 36 32 29 2c 6c 3d 74 28 39 33 32 36 34 29 2c 73 3d 74 28 32 38 31 38 32 29 2c 70 3d 74 28 39 34 34 31 39 29 2c 64 3d 74 28 39 31 32 36 39 29 2c 75 3d 74 28 31 32 30 36 35 29 2c 6d 3d 74 28 34 31 29 2c 76 3d 74 28 31 39 37 39 35 29 2c 5a 3d 74 28 34 38 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5206],{46314:function(e,o,t){var a,n,r=t(4942),i=t(63366),c=t(87462),l=t(93264),s=t(28182),p=t(94419),d=t(91269),u=t(12065),m=t(41),v=t(19795),Z=t(48
2024-04-23 14:05:20 UTC	16384	IN	Data Raw: 70 65 3d 76 6f 69 64 20 30 3d 3d 3d 73 65 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 2b 22 2e 63 6f 6e 63 61 74 28 65 29 7d 3a 73 65 2c 64 65 3d 68 2e 67 65 74 4f 70 74 69 6f 6e 4c 61 62 65 6c 2c 75 65 3d 76 6f 69 64 20 30 3d 3d 3d 64 65 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 6f 3d 65 2e 6c 61 62 65 6c 29 3f 6f 3a 65 7d 3a 64 65 2c 6d 65 3d 68 2e 67 72 6f 75 70 42 79 2c 76 65 3d 68 2e 68 61 6e 64 6c 65 48 6f 6d 65 45 6e 64 4b 65 79 73 2c 5a 65 3d 28 76 6f 69 64 20 30 3d 3d 3d 76 65 26 26 68 2e 66 72 65 65 53 6f 6c 6f 2c 68 2e 69 6e 63 6c 75 64 65 49 6e 70 75 74 49 6e 4c 69 73 74 2c 68 2e 6c 69 6d 69 74 54 61 67 73 29 2c 66 65 3d 76 6f 69 64 20 30 3d 3d 3d 5a 65 3f 2d 31 3a 5a 65 Data Ascii: pe=void 0===se?function(e){return"+".concat(e)}:se,de=h.getOptionLabel,ue=void 0===de?function(e){var o;return null!=(o=e.label)?o:e}:de,me=h.groupBy,ve=h.handleHomeEndKeys,Ze=(void 0===ve&&h.freeSolo,h.includeInputInList,h.limitTags),fe=void 0===Ze?-1:Ze
2024-04-23 14:05:20 UTC	10116	IN	Data Raw: 64 65 6c 65 74 65 49 63 6f 6e 46 69 6c 6c 65 64 43 6f 6c 6f 72 53 65 63 6f 6e 64 61 72 79 22 2c 22 66 6f 63 75 73 56 69 73 69 62 6c 65 22 5d 29 3b 6f 2e 5a 3d 69 7d 2c 37 31 35 35 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 29 7b 76 61 72 20 61 2c 6e 2c 72 2c 69 2c 63 2c 6c 2c 73 2c 70 2c 64 3d 74 28 33 30 31 36 38 29 2c 75 3d 74 28 36 33 33 36 36 29 2c 6d 3d 74 28 38 37 34 36 32 29 2c 76 3d 74 28 39 33 32 36 34 29 2c 5a 3d 74 28 32 38 31 38 32 29 2c 66 3d 74 28 39 34 34 31 39 29 2c 67 3d 74 28 32 36 33 31 29 2c 68 3d 74 28 31 34 30 33 36 29 2c 62 3d 74 28 33 31 34 30 32 29 2c 79 3d 74 28 36 36 39 33 34 29 2c 78 3d 74 28 32 36 36 32 34 29 2c 43 3d 74 28 38 30 31 38 34 29 2c 53 3d 5b 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 63 6f 6c 6f 72 22 2c 22 64 69 Data Ascii: deleteIconFilledColorSecondary","focusVisible"]);o.Z=i},71554:function(e,o,t){var a,n,r,i,c,l,s,p,d=t(30168),u=t(63366),m=t(87462),v=t(93264),Z=t(28182),f=t(94419),g=t(2631),h=t(14036),b=t(31402),y=t(66934),x=t(26624),C=t(80184),S=["className","color","di
2024-04-23 14:05:20 UTC	6106	IN	Data Raw: 6f 72 2c 62 65 3d 76 6f 69 64 20 30 21 3d 3d 68 65 26 26 68 65 2c 79 65 3d 5f 2e 69 64 2c 78 65 3d 5f 2e 6c 65 61 76 65 44 65 6c 61 79 2c 43 65 3d 76 6f 69 64 20 30 3d 3d 3d 78 65 3f 30 3a 78 65 2c 53 65 3d 5f 2e 6c 65 61 76 65 54 6f 75 63 68 44 65 6c 61 79 2c 6b 65 3d 76 6f 69 64 20 30 3d 3d 3d 53 65 3f 31 35 30 30 3a 53 65 2c 77 65 3d 5f 2e 6f 6e 43 6c 6f 73 65 2c 49 65 3d 5f 2e 6f 6e 4f 70 65 6e 2c 50 65 3d 5f 2e 6f 70 65 6e 2c 54 65 3d 5f 2e 70 6c 61 63 65 6d 65 6e 74 2c 4f 65 3d 76 6f 69 64 20 30 3d 3d 3d 54 65 3f 22 62 6f 74 74 6f 6d 22 3a 54 65 2c 52 65 3d 5f 2e 50 6f 70 70 65 72 43 6f 6d 70 6f 6e 65 6e 74 2c 4c 65 3d 5f 2e 50 6f 70 70 65 72 50 72 6f 70 73 2c 4d 65 3d 76 6f 69 64 20 30 3d 3d 3d 4c 65 3f 7b 7d 3a 4c 65 2c 7a 65 3d 5f 2e 73 6c 6f 74 Data Ascii: or,be=void 0!==he&&he,ye=_.id,xe=_.leaveDelay,Ce=void 0===xe?0:xe,Se=_.leaveTouchDelay,ke=void 0===Se?1500:Se,we=_.onClose,Ie=_.onOpen,Pe=_.open,Te=_.placement,Oe=void 0===Te?"bottom":Te,Re=_.PopperComponent,Le=_.PopperProps,Me=void 0===Le?{}:Le,ze=_.slot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49744	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:18 UTC	600	OUT	GET /static/js/4200.58d81098.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:20 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 19013 Connection: close Date: Tue, 23 Apr 2024 14:05:20 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "a8ff668002448140b68b9daa0a34e93c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 03b474db824c472de7c4629c50b35ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 58nvtDG0TGiIOepJH4a6iDcUXHmumNPO7oqsU7nESj5gN02sMawbJQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:20 UTC	8449	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 30 30 5d 2c 7b 38 35 32 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 2c 6c 2c 61 2c 63 2c 73 2c 75 2c 64 3d 6e 28 33 30 31 36 38 29 2c 66 3d 6e 28 36 33 33 36 36 29 2c 76 3d 6e 28 38 37 34 36 32 29 2c 68 3d 6e 28 39 33 32 36 34 29 2c 62 3d 6e 28 32 38 31 38 32 29 2c 6d 3d 6e 28 32 36 33 31 29 2c 70 3d 6e 28 39 34 34 31 39 29 2c 53 3d 6e 28 36 31 35 37 32 29 2c 77 3d 6e 28 31 32 30 36 35 29 2c 67 3d Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4200],{85239:function(t,e,n){var r,o,i,l,a,c,s,u,d=n(30168),f=n(63366),v=n(87462),h=n(93264),b=n(28182),m=n(2631),p=n(94419),S=n(61572),w=n(12065),g=
2024-04-23 14:05:20 UTC	10564	IN	Data Raw: 22 64 69 76 22 2c 7b 6e 61 6d 65 3a 22 4d 75 69 54 61 62 73 22 2c 73 6c 6f 74 3a 22 46 6c 65 78 43 6f 6e 74 61 69 6e 65 72 22 2c 6f 76 65 72 72 69 64 65 73 52 65 73 6f 6c 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 6f 77 6e 65 72 53 74 61 74 65 3b 72 65 74 75 72 6e 5b 65 2e 66 6c 65 78 43 6f 6e 74 61 69 6e 65 72 2c 6e 2e 76 65 72 74 69 63 61 6c 26 26 65 2e 66 6c 65 78 43 6f 6e 74 61 69 6e 65 72 56 65 72 74 69 63 61 6c 2c 6e 2e 63 65 6e 74 65 72 65 64 26 26 65 2e 63 65 6e 74 65 72 65 64 5d 7d 7d 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6f 77 6e 65 72 53 74 61 74 65 3b 72 65 74 75 72 6e 28 30 2c 61 2e 5a 29 28 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 7d 2c 65 2e 76 65 72 74 69 63 61 6c 26 26 Data Ascii: "div",{name:"MuiTabs",slot:"FlexContainer",overridesResolver:function(t,e){var n=t.ownerState;return[e.flexContainer,n.vertical&&e.flexContainerVertical,n.centered&&e.centered]}})((function(t){var e=t.ownerState;return(0,a.Z)({display:"flex"},e.vertical&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49746	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:18 UTC	599	OUT	GET /static/js/783.df13d78d.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:20 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8076 Connection: close Date: Tue, 23 Apr 2024 14:05:20 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "2b480985fe2a3ee1b98bdefab425857e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d4de91d5c279b27ea4328258b7b129ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jUEyT99V1kov02Moitq1OH0BfxSXOOpPCUykeWH6tJUTfvUKkd35sA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:20 UTC	8076	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 33 5d 2c 7b 35 35 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 34 39 34 32 29 2c 74 3d 6e 28 36 33 33 36 36 29 2c 61 3d 6e 28 38 37 34 36 32 29 2c 69 3d 6e 28 39 33 32 36 34 29 2c 6c 3d 6e 28 32 38 31 38 32 29 2c 63 3d 6e 28 39 34 34 31 39 29 2c 73 3d 6e 28 31 38 32 35 32 29 2c 64 3d 6e 28 31 34 30 33 36 29 2c 70 3d 6e 28 37 37 33 36 32 29 2c 75 3d 6e 28 36 30 36 32 37 29 2c 66 3d 6e 28 34 38 34 31 29 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[783],{5574:function(e,r,n){var o=n(4942),t=n(63366),a=n(87462),i=n(93264),l=n(28182),c=n(94419),s=n(18252),d=n(14036),p=n(77362),u=n(60627),f=n(4841)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49747	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:19 UTC	600	OUT	GET /static/js/3390.a8a3bb69.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:20 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 51594 Connection: close Date: Tue, 23 Apr 2024 14:05:21 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "472cd32a67e92eb48371908449efee9e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a873ca51d0e48914df93f772c756975c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: joYcY8qWHf2uzqtgBS5_k2nwzyhMO93DQqFNgNrPHqEeKLDjQGfLYg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:20 UTC	1496	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 33 39 30 5d 2c 7b 31 36 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 6f 28 38 37 34 36 32 29 2c 61 3d 6f 28 36 33 33 36 36 29 2c 69 3d 6f 28 39 33 32 36 34 29 2c 72 3d 6f 28 32 38 31 38 32 29 2c 63 3d 6f 28 39 34 34 31 39 29 2c 73 3d 6f 28 36 36 39 33 34 29 2c 6c 3d 6f 28 33 31 34 30 32 29 2c 64 3d 6f 28 34 35 36 37 29 2c 75 3d 6f 28 34 31 33 37 30 29 2c 70 3d 6f 28 38 30 31 38 34 29 2c 76 3d 5b 22 63 6c 61 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3390],{16448:function(e,t,o){var n=o(87462),a=o(63366),i=o(93264),r=o(28182),c=o(94419),s=o(66934),l=o(31402),d=o(4567),u=o(41370),p=o(80184),v=["cla
2024-04-23 14:05:20 UTC	16384	IN	Data Raw: 74 74 65 2e 62 61 63 6b 67 72 6f 75 6e 64 2e 64 65 66 61 75 6c 74 29 2c 62 6f 78 53 69 7a 69 6e 67 3a 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 2d 38 2c 22 26 3a 6c 61 73 74 2d 63 68 69 6c 64 22 3a 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 30 7d 7d 29 2c 28 30 2c 6e 2e 5a 29 28 74 2c 22 64 69 73 70 6c 61 79 22 2c 22 66 6c 65 78 22 29 2c 28 30 2c 6e 2e 5a 29 28 74 2c 22 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 22 2c 22 72 6f 77 2d 72 65 76 65 72 73 65 22 29 2c 74 7d 29 29 2c 5a 3d 28 30 2c 6c 2e 5a 50 29 28 70 2e 5a 2c 7b 6e 61 6d 65 3a 22 4d 75 69 41 76 61 74 61 72 47 72 6f 75 70 22 2c 73 6c 6f 74 3a 22 41 76 61 74 61 72 22 2c 6f 76 65 72 72 69 64 65 73 52 65 73 6f 6c 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 Data Ascii: tte.background.default),boxSizing:"content-box",marginLeft:-8,"&:last-child":{marginLeft:0}}),(0,n.Z)(t,"display","flex"),(0,n.Z)(t,"flexDirection","row-reverse"),t})),Z=(0,l.ZP)(p.Z,{name:"MuiAvatarGroup",slot:"Avatar",overridesResolver:function(e,t){ret
2024-04-23 14:05:20 UTC	16384	IN	Data Raw: 6c 6f 72 3a 28 74 2e 76 61 72 73 7c 7c 74 29 2e 70 61 6c 65 74 74 65 2e 61 63 74 69 6f 6e 2e 64 69 73 61 62 6c 65 64 7d 29 29 29 2c 22 6f 75 74 6c 69 6e 65 64 22 3d 3d 3d 6f 2e 76 61 72 69 61 6e 74 26 26 28 30 2c 6e 2e 5a 29 28 7b 62 6f 72 64 65 72 3a 74 2e 76 61 72 73 3f 22 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 22 2e 63 6f 6e 63 61 74 28 74 2e 76 61 72 73 2e 70 61 6c 65 74 74 65 2e 63 6f 6d 6d 6f 6e 2e 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 68 61 6e 6e 65 6c 2c 22 20 2f 20 30 2e 32 33 29 22 29 3a 22 31 70 78 20 73 6f 6c 69 64 20 22 2e 63 6f 6e 63 61 74 28 22 6c 69 67 68 74 22 3d 3d 3d 74 2e 70 61 6c 65 74 74 65 2e 6d 6f 64 65 3f 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 33 29 22 3a 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 Data Ascii: lor:(t.vars\|\|t).palette.action.disabled}))),"outlined"===o.variant&&(0,n.Z)({border:t.vars?"1px solid rgba(".concat(t.vars.palette.common.onBackgroundChannel," / 0.23)"):"1px solid ".concat("light"===t.palette.mode?"rgba(0, 0, 0, 0.23)":"rgba(255, 255, 25
2024-04-23 14:05:20 UTC	2048	IN	Data Raw: 74 3a 66 65 2e 6c 65 6e 67 74 68 2d 74 29 2c 6f 70 65 6e 3a 65 65 2c 74 6f 6f 6c 74 69 70 50 6c 61 63 65 6d 65 6e 74 3a 64 2c 69 64 3a 22 22 2e 63 6f 6e 63 61 74 28 76 65 2c 22 2d 61 63 74 69 6f 6e 2d 22 29 2e 63 6f 6e 63 61 74 28 74 29 7d 29 7d 29 29 3b 72 65 74 75 72 6e 28 30 2c 79 2e 6a 73 78 73 29 28 52 2c 28 30 2c 72 2e 5a 29 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 6e 65 2e 72 6f 6f 74 2c 4e 29 2c 72 65 66 3a 74 2c 72 6f 6c 65 3a 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 6f 6e 4b 65 79 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6a 26 26 6a 28 65 29 3b 76 61 72 20 74 2c 6f 2c 6e 2c 61 3d 65 2e 6b 65 79 2e 72 65 70 6c 61 63 65 28 22 41 72 72 6f 77 22 2c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 Data Ascii: t:fe.length-t),open:ee,tooltipPlacement:d,id:"".concat(ve,"-action-").concat(t)})}));return(0,y.jsxs)(R,(0,r.Z)({className:(0,s.default)(ne.root,N),ref:t,role:"presentation",onKeyDown:function(e){j&&j(e);var t,o,n,a=e.key.replace("Arrow","").toLowerCase()
2024-04-23 14:05:20 UTC	15282	IN	Data Raw: 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 68 65 6d 65 2c 6f 3d 65 2e 6f 77 6e 65 72 53 74 61 74 65 3b 72 65 74 75 72 6e 28 30 2c 72 2e 5a 29 28 7b 6d 61 72 67 69 6e 3a 38 2c 63 6f 6c 6f 72 3a 28 74 2e 76 61 72 73 7c 7c 74 29 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 73 65 63 6f 6e 64 61 72 79 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 28 74 2e 76 61 72 73 7c 7c 74 29 2e 70 61 6c 65 74 74 65 2e 62 61 63 6b 67 72 6f 75 6e 64 2e 70 61 70 65 72 2c 22 26 3a 68 6f 76 65 72 22 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 74 2e 76 61 72 73 3f 74 2e 76 61 72 73 2e 70 61 6c 65 74 74 65 2e 53 70 65 65 64 44 69 61 6c 41 63 74 69 6f 6e 2e 66 61 62 48 6f 76 65 72 42 67 3a 28 30 2c 64 2e 5f 34 29 28 74 2e 70 61 6c 65 74 74 65 2e 62 61 63 6b 67 72 6f 75 6e Data Ascii: (e){var t=e.theme,o=e.ownerState;return(0,r.Z)({margin:8,color:(t.vars\|\|t).palette.text.secondary,backgroundColor:(t.vars\|\|t).palette.background.paper,"&:hover":{backgroundColor:t.vars?t.vars.palette.SpeedDialAction.fabHoverBg:(0,d._4)(t.palette.backgroun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49748	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:20 UTC	600	OUT	GET /static/js/7844.3d8f7ba2.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:21 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 43638 Connection: close Date: Tue, 23 Apr 2024 14:05:22 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "444117a48b837224bacf8b8e87913a99" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0df880fcc0eaaf2d73df10e0f110cabe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Sa6I6N2BowSts7O4l8kP9vO8WKJWO59nBhIk_WpK8WBq_OYsYa6xjQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:21 UTC	6396	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 34 34 5d 2c 7b 39 35 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 6e 3d 61 28 34 39 34 32 29 2c 6f 3d 61 28 36 33 33 36 36 29 2c 72 3d 61 28 38 37 34 36 32 29 2c 69 3d 61 28 39 33 32 36 34 29 2c 63 3d 61 28 32 38 31 38 32 29 2c 6c 3d 61 28 33 36 32 32 39 29 2c 73 3d 61 28 39 34 34 31 39 29 3b 76 61 72 20 64 3d 61 28 32 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7844],{9584:function(e,t,a){a.d(t,{Z:function(){return b}});var n=a(4942),o=a(63366),r=a(87462),i=a(93264),c=a(28182),l=a(36229),s=a(94419);var d=a(2
2024-04-23 14:05:21 UTC	1244	IN	Data Raw: 29 7d 29 29 7d 2c 31 32 36 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 64 28 74 2c 7b 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 6e 3d 61 28 37 35 38 37 38 29 2c 6f 3d 61 28 32 31 32 31 37 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 5a 29 28 22 4d 75 69 42 61 64 67 65 22 2c 65 29 7d 76 61 72 20 69 3d 28 30 2c 6e 2e 5a 29 28 22 4d 75 69 42 61 64 67 65 22 2c 5b 22 72 6f 6f 74 22 2c 22 62 61 64 67 65 22 2c 22 64 6f 74 22 2c 22 73 74 61 6e 64 61 72 64 22 2c 22 61 6e 63 68 6f 72 4f 72 69 67 69 6e 54 6f 70 52 69 67 68 74 22 2c 22 61 6e 63 68 6f 72 4f 72 69 67 69 6e 42 6f 74 74 6f 6d 52 69 67 68 74 22 2c 22 61 6e 63 68 6f 72 4f 72 69 67 69 6e 54 6f 70 4c 65 66 74 Data Ascii: )}))},12652:function(e,t,a){a.d(t,{I:function(){return r}});var n=a(75878),o=a(21217);function r(e){return(0,o.Z)("MuiBadge",e)}var i=(0,n.Z)("MuiBadge",["root","badge","dot","standard","anchorOriginTopRight","anchorOriginBottomRight","anchorOriginTopLeft
2024-04-23 14:05:21 UTC	16384	IN	Data Raw: 2c 64 2e 5a 29 28 61 29 2c 6c 3d 28 30 2c 73 2e 5a 29 28 65 29 2c 76 3d 6c 2e 63 6c 61 73 73 4e 61 6d 65 2c 66 3d 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 2c 5a 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 22 64 69 76 22 3a 66 2c 62 3d 28 30 2c 6f 2e 5a 29 28 6c 2c 70 29 3b 72 65 74 75 72 6e 28 30 2c 75 2e 6a 73 78 29 28 68 2c 28 30 2c 6e 2e 5a 29 28 7b 61 73 3a 5a 2c 72 65 66 3a 72 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 76 2c 67 3f 67 28 6d 29 3a 6d 29 2c 74 68 65 6d 65 3a 74 26 26 63 5b 74 5d 7c 7c 63 7d 2c 62 29 29 7d 29 29 7d 28 7b 74 68 65 6d 65 49 64 3a 67 2e 5a 2c 64 65 66 61 75 6c 74 54 68 65 6d 65 3a 68 2c 64 65 66 61 75 6c 74 43 6c 61 73 73 4e 61 6d 65 3a 22 4d 75 69 42 6f 78 2d 72 6f 6f 74 22 2c 67 65 6e 65 72 61 74 65 43 6c Data Ascii: ,d.Z)(a),l=(0,s.Z)(e),v=l.className,f=l.component,Z=void 0===f?"div":f,b=(0,o.Z)(l,p);return(0,u.jsx)(h,(0,n.Z)({as:Z,ref:r,className:(0,i.default)(v,g?g(m):m),theme:t&&c[t]\|\|c},b))}))}({themeId:g.Z,defaultTheme:h,defaultClassName:"MuiBox-root",generateCl
2024-04-23 14:05:21 UTC	1024	IN	Data Raw: 22 2c 22 63 6f 6c 6f 72 22 2c 22 65 64 67 65 22 2c 22 73 69 7a 65 22 2c 22 73 78 22 5d 2c 66 3d 28 30 2c 76 2e 5a 50 29 28 22 73 70 61 6e 22 2c 7b 6e 61 6d 65 3a 22 4d 75 69 53 77 69 74 63 68 22 2c 73 6c 6f 74 3a 22 52 6f 6f 74 22 2c 6f 76 65 72 72 69 64 65 73 52 65 73 6f 6c 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 2e 6f 77 6e 65 72 53 74 61 74 65 3b 72 65 74 75 72 6e 5b 74 2e 72 6f 6f 74 2c 61 2e 65 64 67 65 26 26 74 5b 22 65 64 67 65 22 2e 63 6f 6e 63 61 74 28 28 30 2c 64 2e 5a 29 28 61 2e 65 64 67 65 29 29 5d 2c 74 5b 22 73 69 7a 65 22 2e 63 6f 6e 63 61 74 28 28 30 2c 64 2e 5a 29 28 61 2e 73 69 7a 65 29 29 5d 5d 7d 7d 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 3d 65 2e 6f 77 6e 65 72 53 74 61 74 Data Ascii: ","color","edge","size","sx"],f=(0,v.ZP)("span",{name:"MuiSwitch",slot:"Root",overridesResolver:function(e,t){var a=e.ownerState;return[t.root,a.edge&&t["edge".concat((0,d.Z)(a.edge))],t["size".concat((0,d.Z)(a.size))]]}})((function(e){var t,a=e.ownerStat
2024-04-23 14:05:21 UTC	10400	IN	Data Raw: 65 74 75 72 6e 20 74 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 2c 7a 49 6e 64 65 78 3a 31 2c 63 6f 6c 6f 72 3a 61 2e 76 61 72 73 3f 61 2e 76 61 72 73 2e 70 61 6c 65 74 74 65 2e 53 77 69 74 63 68 2e 64 65 66 61 75 6c 74 43 6f 6c 6f 72 3a 22 22 2e 63 6f 6e 63 61 74 28 22 6c 69 67 68 74 22 3d 3d 3d 61 2e 70 61 6c 65 74 74 65 2e 6d 6f 64 65 3f 61 2e 70 61 6c 65 74 74 65 2e 63 6f 6d 6d 6f 6e 2e 77 68 69 74 65 3a 61 2e 70 61 6c 65 74 74 65 2e 67 72 65 79 5b 33 30 30 5d 29 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 61 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e 63 72 65 61 74 65 28 5b 22 6c 65 66 74 22 2c 22 74 72 61 6e 73 66 6f 72 6d 22 5d 2c 7b 64 75 72 61 74 69 6f 6e 3a 61 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2e Data Ascii: eturn t={position:"absolute",top:0,left:0,zIndex:1,color:a.vars?a.vars.palette.Switch.defaultColor:"".concat("light"===a.palette.mode?a.palette.common.white:a.palette.grey[300]),transition:a.transitions.create(["left","transform"],{duration:a.transitions.
2024-04-23 14:05:21 UTC	8190	IN	Data Raw: 2c 62 2e 5a 50 29 28 79 2e 5a 2c 7b 6e 61 6d 65 3a 22 4d 75 69 54 61 62 6c 65 50 61 67 69 6e 61 74 69 6f 6e 22 2c 73 6c 6f 74 3a 22 4d 65 6e 75 49 74 65 6d 22 2c 6f 76 65 72 72 69 64 65 73 52 65 73 6f 6c 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 6d 65 6e 75 49 74 65 6d 7d 7d 29 28 7b 7d 29 2c 57 3d 28 30 2c 62 2e 5a 50 29 28 22 70 22 2c 7b 6e 61 6d 65 3a 22 4d 75 69 54 61 62 6c 65 50 61 67 69 6e 61 74 69 6f 6e 22 2c 73 6c 6f 74 3a 22 44 69 73 70 6c 61 79 65 64 52 6f 77 73 22 2c 6f 76 65 72 72 69 64 65 73 52 65 73 6f 6c 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 64 69 73 70 6c 61 79 65 64 52 6f 77 73 7d 7d 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 68 Data Ascii: ,b.ZP)(y.Z,{name:"MuiTablePagination",slot:"MenuItem",overridesResolver:function(e,t){return t.menuItem}})({}),W=(0,b.ZP)("p",{name:"MuiTablePagination",slot:"DisplayedRows",overridesResolver:function(e,t){return t.displayedRows}})((function(e){var t=e.th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49749	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:20 UTC	600	OUT	GET /static/js/1487.b827d9dc.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:21 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13588 Connection: close Date: Tue, 23 Apr 2024 14:05:22 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "994e77e6644b16fbab717f38f4235b9c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a4294eb914e3f883aba658e8044fe4f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WOzuUHb1FL6lLzDZISOpI0oBIwbOHzRnxOBErNz1Foa1GfAgY2UyVw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:21 UTC	13588	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 38 37 5d 2c 7b 38 31 31 35 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 5a 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 7d 29 3b 76 61 72 20 6f 3d 74 28 39 33 34 33 33 29 2c 69 3d 74 28 34 39 34 32 29 2c 72 3d 74 28 36 33 33 36 36 29 2c 61 3d 74 28 38 37 34 36 32 29 2c 63 3d 74 28 39 33 32 36 34 29 2c 73 3d 74 28 32 38 31 38 32 29 2c 6c 3d 74 28 35 31 31 38 34 29 2c 75 3d 74 28 37 38 35 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1487],{81153:function(n,e,t){t.d(e,{ZP:function(){return y}});var o=t(93433),i=t(4942),r=t(63366),a=t(87462),c=t(93264),s=t(28182),l=t(51184),u=t(785

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49750	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:20 UTC	600	OUT	GET /static/js/4308.b6b628d8.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:21 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7410 Connection: close Date: Tue, 23 Apr 2024 14:05:22 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "81b52c36b4fdf0f1aebc4948f29a41bb" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 048a6c89005e16288875f5750557de68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: eYWe-4QsmcMy6O8JNKPAKmM00DdokI06PePShBoGIJpJ_dxOsnkvgA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:21 UTC	7410	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 30 38 5d 2c 7b 32 34 33 30 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 72 29 7b 72 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 7d 29 3b 76 61 72 20 74 3d 72 28 32 39 34 33 39 29 2c 6f 3d 72 28 39 33 34 33 33 29 2c 69 3d 72 28 38 37 34 36 32 29 2c 63 3d 72 28 36 33 33 36 36 29 2c 61 3d 72 28 39 33 32 36 34 29 2c 6c 3d 72 28 32 38 31 38 32 29 2c 75 3d 72 28 39 34 34 31 39 29 2c 73 3d 72 28 32 31 32 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4308],{24308:function(n,e,r){r.d(e,{Z:function(){return T}});var t=r(29439),o=r(93433),i=r(87462),c=r(63366),a=r(93264),l=r(28182),u=r(94419),s=r(212

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49751	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:20 UTC	599	OUT	GET /static/js/360.4546c1ba.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:21 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 206209 Connection: close Date: Tue, 23 Apr 2024 14:05:22 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "3637555820fb750dce8b18bffef96a67" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 346b33648172c0201e749f9caeed0d02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 92zBC52g0FIr3vVH_Ol7QcilXtr3pqnyK9F6ESzMyR7x62WmjsfX9g== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:22 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 30 5d 2c 7b 36 33 35 31 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 7d 29 3b 76 61 72 20 6e 3d 72 28 34 39 34 32 29 2c 6f 3d 72 28 36 33 33 36 36 29 2c 61 3d 72 28 38 37 34 36 32 29 2c 69 3d 72 28 39 33 32 36 34 29 2c 73 3d 72 28 32 38 31 38 32 29 2c 63 3d 72 28 39 34 34 31 39 29 2c 6c 3d 72 28 31 32 30 36 35 29 2c 75 3d 72 28 36 36 39 33 34 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[360],{63515:function(e,t,r){r.d(t,{Z:function(){return P}});var n=r(4942),o=r(63366),a=r(87462),i=r(93264),s=r(28182),c=r(94419),l=r(12065),u=r(66934
2024-04-23 14:05:22 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 63 72 65 61 74 65 53 76 67 49 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 65 2e 63 72 65 61 74 65 53 76 67 49 63 6f 6e 7d 2c 63 72 65 61 74 65 54 68 65 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 2e 5a 7d 2c 63 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 2e 63 73 73 7d 2c 64 61 72 6b 53 63 72 6f 6c 6c 62 61 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6e 7d 2c 64 61 72 6b 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 2e 5f 6a 7d 2c 64 65 62 6f 75 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 65 2e 64 65 62 6f 75 6e 63 65 7d 2c 64 65 63 6f 6d 70 6f 73 65 43 6f 6c 6f 72 3a 66 75 Data Ascii: tion(){return O},createSvgIcon:function(){return Oe.createSvgIcon},createTheme:function(){return z.Z},css:function(){return j.css},darkScrollbar:function(){return Bn},darken:function(){return B._j},debounce:function(){return Oe.debounce},decomposeColor:fu
2024-04-23 14:05:22 UTC	470	IN	Data Raw: 72 69 63 74 4d 6f 64 65 3a 21 30 7d 2c 65 29 5d 2e 63 6f 6e 63 61 74 28 72 29 29 7d 76 61 72 20 45 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 20 45 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 5b 22 4d 55 49 3a 20 63 72 65 61 74 65 53 74 79 6c 65 73 20 66 72 6f 6d 20 40 6d 75 69 2f 6d 61 74 65 72 69 61 6c 2f 73 74 79 6c 65 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2e 22 2c 22 50 6c 65 61 73 65 20 75 73 65 20 40 6d 75 69 2f 73 74 79 6c 65 73 2f 63 72 65 61 74 65 53 74 79 6c 65 73 22 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 29 2c 45 3d 21 30 29 2c 65 7d 76 61 72 20 55 3d 72 28 36 31 35 37 32 29 3b 66 75 6e 63 74 69 6f 6e 20 57 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 Data Ascii: rictMode:!0},e)].concat(r))}var E=!1;function O(e){return E\|\|(console.warn(["MUI: createStyles from @mui/material/styles is deprecated.","Please use @mui/styles/createStyles"].join("\n")),E=!0),e}var U=r(61572);function W(e){var t=arguments.length>1&&void
2024-04-23 14:05:22 UTC	16384	IN	Data Raw: 62 74 69 74 6c 65 32 22 2c 22 62 6f 64 79 31 22 2c 22 62 6f 64 79 32 22 2c 22 63 61 70 74 69 6f 6e 22 2c 22 62 75 74 74 6f 6e 22 2c 22 6f 76 65 72 6c 69 6e 65 22 5d 3a 63 2c 75 3d 28 30 2c 4d 2e 5a 29 28 7b 7d 2c 65 29 3b 75 2e 74 79 70 6f 67 72 61 70 68 79 3d 28 30 2c 4d 2e 5a 29 28 7b 7d 2c 75 2e 74 79 70 6f 67 72 61 70 68 79 29 3b 76 61 72 20 64 3d 75 2e 74 79 70 6f 67 72 61 70 68 79 2c 66 3d 28 30 2c 55 2e 76 73 29 28 64 2e 68 74 6d 6c 46 6f 6e 74 53 69 7a 65 29 2c 70 3d 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 75 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 76 61 6c 75 65 73 5b 65 5d 7d 29 29 3b 72 65 74 75 72 6e 20 6c 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 5b 65 5d 2c 72 Data Ascii: btitle2","body1","body2","caption","button","overline"]:c,u=(0,M.Z)({},e);u.typography=(0,M.Z)({},u.typography);var d=u.typography,f=(0,U.vs)(d.htmlFontSize),p=n.map((function(e){return u.breakpoints.values[e]}));return l.forEach((function(e){var t=d[e],r
2024-04-23 14:05:22 UTC	16384	IN	Data Raw: 6e 64 2c 22 64 65 66 61 75 6c 74 22 29 2c 41 65 28 72 2e 63 6f 6d 6d 6f 6e 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 29 2c 41 65 28 72 2e 63 6f 6d 6d 6f 6e 2c 22 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 22 29 2c 41 65 28 72 2c 22 64 69 76 69 64 65 72 22 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 5b 65 5d 3b 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 2e 6d 61 69 6e 26 26 4d 65 28 72 5b 65 5d 2c 22 6d 61 69 6e 43 68 61 6e 6e 65 6c 22 2c 28 30 2c 42 2e 4c 52 29 28 74 2e 6d 61 69 6e 29 29 2c 74 2e 6c 69 67 68 74 26 26 4d 65 28 72 5b 65 5d 2c 22 6c 69 67 68 74 43 68 61 6e 6e 65 6c 22 2c 28 30 2c 42 2e 4c 52 29 28 74 2e 6c 69 67 68 74 29 29 2c Data Ascii: nd,"default"),Ae(r.common,"background"),Ae(r.common,"onBackground"),Ae(r,"divider"),Object.keys(r).forEach((function(e){var t=r[e];t&&"object"===typeof t&&(t.main&&Me(r[e],"mainChannel",(0,B.LR)(t.main)),t.light&&Me(r[e],"lightChannel",(0,B.LR)(t.light)),
2024-04-23 14:05:22 UTC	16384	IN	Data Raw: 2c 22 74 72 61 6e 73 70 61 72 65 6e 74 22 3d 3d 3d 72 2e 63 6f 6c 6f 72 26 26 28 30 2c 4d 2e 5a 29 28 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 63 6f 6c 6f 72 3a 22 69 6e 68 65 72 69 74 22 7d 2c 22 64 61 72 6b 22 3d 3d 3d 74 2e 70 61 6c 65 74 74 65 2e 6d 6f 64 65 26 26 7b 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 22 6e 6f 6e 65 22 7d 29 29 2c 74 2e 76 61 72 73 26 26 28 30 2c 4d 2e 5a 29 28 7b 7d 2c 22 64 65 66 61 75 6c 74 22 3d 3d 3d 72 2e 63 6f 6c 6f 72 26 26 7b 22 2d 2d 41 70 70 42 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 22 3a 72 2e 65 6e 61 62 6c 65 43 6f 6c 6f 72 4f 6e 44 61 72 6b 3f 74 2e 76 61 72 73 2e 70 61 6c 65 74 74 65 2e 41 70 70 42 61 72 2e 64 65 66 61 75 6c 74 42 67 3a 4d 74 28 74 2e 76 Data Ascii: ,"transparent"===r.color&&(0,M.Z)({backgroundColor:"transparent",color:"inherit"},"dark"===t.palette.mode&&{backgroundImage:"none"})),t.vars&&(0,M.Z)({},"default"===r.color&&{"--AppBar-background":r.enableColorOnDark?t.vars.palette.AppBar.defaultBg:Mt(t.v
2024-04-23 14:05:22 UTC	3072	IN	Data Raw: 77 6e 65 72 53 74 61 74 65 3b 72 65 74 75 72 6e 5b 74 2e 72 6f 6f 74 2c 21 72 2e 64 69 73 61 62 6c 65 53 70 61 63 69 6e 67 26 26 74 2e 73 70 61 63 69 6e 67 5d 7d 7d 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 53 74 61 74 65 3b 72 65 74 75 72 6e 28 30 2c 4d 2e 5a 29 28 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 61 6c 69 67 6e 49 74 65 6d 73 3a 22 63 65 6e 74 65 72 22 2c 70 61 64 64 69 6e 67 3a 38 7d 2c 21 74 2e 64 69 73 61 62 6c 65 53 70 61 63 69 6e 67 26 26 7b 22 26 20 3e 20 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 29 22 3a 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 38 7d 7d 29 7d 29 29 2c 4f 72 3d 4a 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 28 Data Ascii: wnerState;return[t.root,!r.disableSpacing&&t.spacing]}})((function(e){var t=e.ownerState;return(0,M.Z)({display:"flex",alignItems:"center",padding:8},!t.disableSpacing&&{"& > :not(:first-of-type)":{marginLeft:8}})})),Or=J.forwardRef((function(e,t){var r=(
2024-04-23 14:05:22 UTC	16384	IN	Data Raw: 29 29 29 2c 28 30 2c 72 65 2e 6a 73 78 73 29 28 58 72 2c 28 30 2c 4d 2e 5a 29 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 57 65 2e 64 65 66 61 75 6c 74 29 28 67 2e 72 6f 6f 74 2c 61 29 2c 61 73 3a 73 2c 72 65 66 3a 74 2c 6f 77 6e 65 72 53 74 61 74 65 3a 6d 7d 2c 76 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 6f 26 26 28 30 2c 72 65 2e 6a 73 78 29 28 4b 72 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 67 2e 61 76 61 74 61 72 2c 6f 77 6e 65 72 53 74 61 74 65 3a 6d 2c 63 68 69 6c 64 72 65 6e 3a 6f 7d 29 2c 28 30 2c 72 65 2e 6a 73 78 73 29 28 4a 72 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 67 2e 63 6f 6e 74 65 6e 74 2c 6f 77 6e 65 72 53 74 61 74 65 3a 6d 2c 63 68 69 6c 64 72 65 6e 3a 5b 68 2c 62 5d 7d 29 2c 6e 26 26 28 30 2c 72 65 2e 6a 73 78 29 28 24 72 2c 7b 63 6c 61 73 73 4e 61 Data Ascii: ))),(0,re.jsxs)(Xr,(0,M.Z)({className:(0,We.default)(g.root,a),as:s,ref:t,ownerState:m},v,{children:[o&&(0,re.jsx)(Kr,{className:g.avatar,ownerState:m,children:o}),(0,re.jsxs)(Jr,{className:g.content,ownerState:m,children:[h,b]}),n&&(0,re.jsx)($r,{classNa
2024-04-23 14:05:22 UTC	1024	IN	Data Raw: 72 72 61 79 28 72 29 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 3d 31 29 7b 69 66 28 6e 3d 3d 3d 72 5b 69 5d 29 7b 61 3d 21 31 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 72 26 26 6e 3d 3d 3d 72 26 26 28 61 3d 21 31 29 3b 69 66 28 61 29 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 6f 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6b 65 79 73 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 7b 76 61 72 20 63 3d 6f 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6b 65 79 73 5b 73 5d 2c 6c 3d 65 5b 22 22 2e 63 6f 6e 63 61 74 28 63 2c 22 55 70 22 29 5d 2c 75 3d 65 5b 22 22 2e 63 6f 6e 63 61 74 28 63 2c 22 44 6f 77 6e 22 29 5d 3b 69 66 28 6c 26 26 58 6f 28 63 2c 6e 29 7c 7c 75 26 26 4b 6f 28 63 2c 6e 29 29 7b 61 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 Data Ascii: rray(r))for(var i=0;i<r.length;i+=1){if(n===r[i]){a=!1;break}}else r&&n===r&&(a=!1);if(a)for(var s=0;s<o.breakpoints.keys.length;s+=1){var c=o.breakpoints.keys[s],l=e["".concat(c,"Up")],u=e["".concat(c,"Down")];if(l&&Xo(c,n)\|\|u&&Ko(c,n)){a=!1;break}}retur
2024-04-23 14:05:22 UTC	16384	IN	Data Raw: 4e 61 6d 65 2c 6e 3d 65 2e 6f 6e 6c 79 2c 6f 3d 28 30 2c 41 2e 5a 29 28 65 2c 65 61 29 2c 61 3d 28 30 2c 48 2e 5a 29 28 29 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 61 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6b 65 79 73 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 7b 76 61 72 20 63 3d 61 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 6b 65 79 73 5b 73 5d 2c 6c 3d 6f 5b 22 22 2e 63 6f 6e 63 61 74 28 63 2c 22 55 70 22 29 5d 2c 75 3d 6f 5b 22 22 2e 63 6f 6e 63 61 74 28 63 2c 22 44 6f 77 6e 22 29 5d 3b 6c 26 26 69 2e 70 75 73 68 28 7b 62 72 65 61 6b 70 6f 69 6e 74 3a 63 2c 64 69 72 3a 22 75 70 22 7d 29 2c 75 26 26 69 2e 70 75 73 68 28 7b 62 72 65 61 6b 70 6f 69 6e 74 3a 63 2c 64 69 72 3a 22 64 6f 77 6e 22 7d 29 7d 6e 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e Data Ascii: Name,n=e.only,o=(0,A.Z)(e,ea),a=(0,H.Z)(),i=[],s=0;s<a.breakpoints.keys.length;s+=1){var c=a.breakpoints.keys[s],l=o["".concat(c,"Up")],u=o["".concat(c,"Down")];l&&i.push({breakpoint:c,dir:"up"}),u&&i.push({breakpoint:c,dir:"down"})}n&&(Array.isArray(n)?n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49752	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:20 UTC	599	OUT	GET /static/js/225.deeb4ee7.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:21 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11545 Connection: close Date: Tue, 23 Apr 2024 14:05:22 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "0699b3d721928da8a8e34eff3fbc3947" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3d9025085ca74ec423404f8a18a7972c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: H0v6dX3CtFWS7Egcx6RrBTzKsleVyR6RtaALBbtJ-N3xSKu7asnOqA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:21 UTC	11545	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 35 2c 33 39 33 38 5d 2c 7b 34 39 37 39 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 5b 72 5d 26 26 28 74 5b 72 5d 3d 65 28 72 29 29 2c 74 5b 72 5d 7d 7d 72 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[225,3938],{49797:function(e,t,r){function n(e){var t=Object.create(null);return function(r){return void 0===t[r]&&(t[r]=e(r)),t[r]}}r.d(t,{Z:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49753	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:21 UTC	600	OUT	GET /static/js/4765.d7577677.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:22 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1415 Connection: close Date: Tue, 23 Apr 2024 14:05:23 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "640529340cead77335334322cb58de83" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08829bb06bccf0ab66e6bd5eaa5fcbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: miy2_T0ungZ_zbcz6ieuHm0xkxjns8OixjdCnX5oMVu9Xv43i3Nhcw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:22 UTC	1415	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 37 36 35 2e 64 37 35 37 37 36 37 37 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 36 35 2c 36 32 36 39 5d 2c 7b 36 36 33 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 6e 28 33 31 37 32 35 29 3b 76 61 72 20 74 3d 6e 28 39 33 32 36 34 29 2c 6f 3d 36 30 31 30 33 3b 69 66 28 72 2e 46 Data Ascii: /! For license information please see 4765.d7577677.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4765,6269],{66374:function(e,r,n){n(31725);var t=n(93264),o=60103;if(r.F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49755	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:21 UTC	599	OUT	GET /static/js/390.4204c025.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:23 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6242 Connection: close Date: Tue, 23 Apr 2024 14:05:23 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "6775db4fc0a82a2e174b3c745e7055f6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0df880fcc0eaaf2d73df10e0f110cabe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Yz8S92swJA5lO8d6zj-d7igTOxsArRHARRQpAynzU42bH4kp8LBAeA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:23 UTC	6242	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 39 30 5d 2c 7b 33 30 33 39 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 65 2e 72 28 74 29 2c 65 2e 64 28 74 2c 7b 41 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 63 72 65 61 74 65 42 72 6f 77 73 65 72 48 69 73 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 63 72 65 61 74 65 48 61 73 68 48 69 73 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[390],{30390:function(n,t,e){e.r(t),e.d(t,{Action:function(){return r},createBrowserHistory:function(){return l},createHashHistory:function(){return f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49756	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:21 UTC	600	OUT	GET /static/js/1694.c976feba.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:22 UTC	2084	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 823 Connection: close Date: Sun, 21 Apr 2024 20:41:22 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "4729e858858a9b506d9ffff32deaeda1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 3b990103ab5b615e2cee71bdfd65a4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: auiR0R45LG3RhcX3aSgVx1wNHfTkB1T1cV7c8pyz7Z3MWISvmH_acA== Age: 149040 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:22 UTC	823	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 36 39 34 2e 63 39 37 36 66 65 62 61 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 39 34 5d 2c 7b 38 31 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e Data Ascii: /! For license information please see 1694.c976feba.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1694],{81694:function(t,n){var r;!function(){"use strict";var e={}.hasOwnProperty;fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49757	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:22 UTC	599	OUT	GET /static/js/264.7ea7137c.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:23 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2593 Connection: close Date: Tue, 23 Apr 2024 14:05:24 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "ef4addea9a2ceb1c49c6eaaa8b1f1234" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 69549fdd08f6edbeec8f40a9473365d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: glLddcZSIogUeVGIovQQ3euvrEGQKElXuNBb7PfGLdB64fZOgycJxg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:23 UTC	2593	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 34 5d 2c 7b 33 39 39 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6e 2c 72 3d 61 28 35 39 33 38 31 29 2c 69 3d 28 6e 3d 72 29 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 3a 7b 64 65 66 61 75 6c 74 3a 6e 7d 3b 76 61 72 20 64 3d 7b 74 61 67 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 69 64 2c 61 3d 65 2e 65 76 65 6e 74 73 2c 6e 3d 65 2e 64 61 74 61 4c 61 79 65 72 2c 72 3d 65 2e 64 61 74 61 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[264],{39969:function(e,t,a){var n,r=a(59381),i=(n=r)&&n.__esModule?n:{default:n};var d={tags:function(e){var t=e.id,a=e.events,n=e.dataLayer,r=e.data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49758	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:22 UTC	600	OUT	GET /static/js/3399.7243f481.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:23 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 38528 Connection: close Date: Tue, 23 Apr 2024 14:05:24 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "f13d67c20bb9e6a4b5406786815ee8ee" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f191d757f16dd6002ae3a0c09389b68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 3MhpybggJSWrSSgCG4wvEF2rICM_Ikc-px0DXcrK1hQU02wTUQUUaw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:23 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 33 39 39 5d 2c 7b 33 33 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 41 70 6f 6c 6c 6f 43 6c 69 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 2c 41 70 6f 6c 6c 6f 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 46 65 74 63 68 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 4e 65 74 77 6f 72 6b 53 74 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3399],{3399:function(e,t,r){r.r(t),r.d(t,{ApolloClient:function(){return I},ApolloError:function(){return v},FetchType:function(){return d},NetworkSt
2024-04-23 14:05:23 UTC	16384	IN	Data Raw: 69 73 2e 66 65 74 63 68 51 75 65 72 79 52 65 6a 65 63 74 46 6e 73 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 43 61 63 68 65 3d 6e 65 77 28 69 2e 6d 72 3f 57 65 61 6b 4d 61 70 3a 4d 61 70 29 2c 74 68 69 73 2e 69 6e 46 6c 69 67 68 74 4c 69 6e 6b 4f 62 73 65 72 76 61 62 6c 65 73 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 70 6f 6c 6c 69 6e 67 49 6e 66 6f 42 79 51 75 65 72 79 49 64 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 6c 69 6e 6b 3d 74 2c 74 68 69 73 2e 71 75 65 72 79 44 65 64 75 70 6c 69 63 61 74 69 6f 6e 3d 6f 2c 74 68 69 73 2e 64 61 74 61 53 74 6f 72 65 3d 6e 2c 74 68 69 73 2e 6f 6e 42 72 6f 61 64 63 61 73 74 3d 61 2c 74 68 69 73 2e 63 6c 69 65 6e 74 41 77 61 72 65 6e 65 73 73 3d 68 2c 74 68 69 73 2e 6c 6f 63 61 6c 53 74 61 74 Data Ascii: is.fetchQueryRejectFns=new Map,this.transformCache=new(i.mr?WeakMap:Map),this.inFlightLinkObservables=new Map,this.pollingInfoByQueryId=new Map,this.link=t,this.queryDeduplication=o,this.dataStore=n,this.onBroadcast=a,this.clientAwareness=h,this.localStat
2024-04-23 14:05:23 UTC	5760	IN	Data Raw: 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 73 3d 6f 5b 6e 5d 2c 61 3d 73 2e 71 75 65 72 79 2c 75 3d 73 2e 75 70 64 61 74 65 72 2c 63 3d 74 2e 63 61 63 68 65 2e 64 69 66 66 28 7b 71 75 65 72 79 3a 61 2e 64 6f 63 75 6d 65 6e 74 2c 76 61 72 69 61 62 6c 65 73 3a 61 2e 76 61 72 69 61 62 6c 65 73 2c 72 65 74 75 72 6e 50 61 72 74 69 61 6c 44 61 74 61 3a 21 30 2c 6f 70 74 69 6d 69 73 74 69 63 3a 21 31 7d 29 2c 6c 3d 63 2e 72 65 73 75 6c 74 3b 69 66 28 63 2e 63 6f 6d 70 6c 65 74 65 29 7b 76 61 72 20 68 3d 28 30 2c 69 2e 58 59 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 6c 2c 7b 6d 75 74 61 74 69 6f 6e 52 65 73 75 6c 74 3a 65 2e 72 65 73 75 6c 74 2c 71 75 65 72 79 4e 61 6d 65 3a 28 30 2c 69 2e 72 59 29 28 61 2e 64 6f 63 Data Ascii: ach((function(n){var s=o[n],a=s.query,u=s.updater,c=t.cache.diff({query:a.document,variables:a.variables,returnPartialData:!0,optimistic:!1}),l=c.result;if(c.complete){var h=(0,i.XY)((function(){return u(l,{mutationResult:e.result,queryName:(0,i.rY)(a.doc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49760	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:22 UTC	600	OUT	GET /static/js/1057.68a9f4b6.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:23 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8222 Connection: close Date: Tue, 23 Apr 2024 14:05:24 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "7108d0e5ff3db1c815209d75da42fdb4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 26237ac13642e7ecf074b53dd73da126.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bl3xy99dTi-pbWMp66RjEXP-O1mpuRfyAjLv7RuTzUXYXuv_JENzkg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:23 UTC	8222	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 30 35 37 2e 36 38 61 39 66 34 62 36 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 35 37 2c 34 37 36 35 2c 36 32 36 39 2c 37 38 33 35 5d 2c 7b 33 31 37 30 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 33 33 36 36 29 2c 6f 3d 6e 28 38 37 34 36 32 29 2c 69 3d Data Ascii: /! For license information please see 1057.68a9f4b6.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1057,4765,6269,7835],{31701:function(t,e,n){var r=n(63366),o=n(87462),i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49762	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:22 UTC	600	OUT	GET /static/js/5307.455e247e.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:23 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1304 Connection: close Date: Tue, 23 Apr 2024 14:05:24 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "e458d1fa088dba630153f37fed38d927" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d25b5a4b536886c15089faae019d94da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: AOIdZHo-L5nAJywYL6xmksp_8HThAPcGhswUxVdFGzGzjvzTD3uIyQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:23 UTC	1304	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 35 33 30 37 2e 34 35 35 65 32 34 37 65 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 30 37 5d 2c 7b 35 33 30 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 7b 7d 3b 74 72 79 7b 72 2e 45 76 65 6e 74 54 61 72 67 65 74 3d 28 6e 65 77 20 45 76 65 6e 74 Data Ascii: /! For license information please see 5307.455e247e.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5307],{5307:function(e,t,n){n.r(t);var r={};try{r.EventTarget=(new Event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49765	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:22 UTC	600	OUT	GET /static/js/5852.0dff4e12.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:24 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 49947 Connection: close Date: Tue, 23 Apr 2024 14:05:25 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "563f25d1872edbcf5a086b8a75681847" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ffb64e712182ecebf7bbb2b7e367a4a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WbEH2CO-vj5Wp0iKszUIP-EV68AtZTjCsS-2tS7tX9cJzGRrys-nkw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:24 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 35 38 35 32 2e 30 64 66 66 34 65 31 32 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 35 32 5d 2c 7b 36 35 38 35 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 41 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 45 72 72 6f 72 3a 66 75 6e 63 74 Data Ascii: /! For license information please see 5852.0dff4e12.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5852],{65852:function(t,e,n){n.r(e),n.d(e,{ArgumentOutOfRangeError:funct
2024-04-23 14:05:24 UTC	582	IN	Data Raw: 68 69 73 2e 73 74 61 74 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 72 3d 6e 75 6c 6c 2c 2d 31 21 3d 3d 72 26 26 6e 2e 73 70 6c 69 63 65 28 72 2c 31 29 2c 6e 75 6c 6c 21 3d 74 26 26 28 74 68 69 73 2e 69 64 3d 74 68 69 73 2e 72 65 63 79 63 6c 65 41 73 79 6e 63 49 64 28 65 2c 74 2c 6e 75 6c 6c 29 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 6e 75 6c 6c 7d 2c 65 7d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 72 2e 5a 54 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 68 65 64 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: his.state=null,this.pending=!1,this.scheduler=null,-1!==r&&n.splice(r,1),null!=t&&(this.id=this.recycleAsyncId(e,t,null)),this.delay=null},e}(function(t){function e(e,n){return t.call(this)\|\|this}return r.ZT(e,t),e.prototype.schedule=function(t,e){return
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3e 30 7c 7c 74 68 69 73 2e 63 6c 6f 73 65 64 3f 74 2e 70 72 6f 74 6f 74 79 70 65 2e 65 78 65 63 75 74 65 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 6e 29 3a 74 68 69 73 2e 5f 65 78 65 63 75 74 65 28 65 2c 6e 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 41 73 79 6e 63 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 30 29 2c 6e 75 6c 6c 21 3d 3d 72 26 26 72 3e 30 7c 7c 6e 75 6c 6c 3d 3d 3d 72 26 26 74 68 69 73 2e 64 65 6c 61 79 3e 30 3f 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 41 73 79 6e 63 49 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 6e 2c 72 29 3a 65 2e 66 6c 75 73 68 28 74 68 69 73 29 7d 2c 65 7d 28 46 Data Ascii: n(e,n){return n>0\|\|this.closed?t.prototype.execute.call(this,e,n):this._execute(e,n)},e.prototype.requestAsyncId=function(e,n,r){return void 0===r&&(r=0),null!==r&&r>0\|\|null===r&&this.delay>0?t.prototype.requestAsyncId.call(this,e,n,r):e.flush(this)},e}(F
2024-04-23 14:05:25 UTC	1024	IN	Data Raw: 75 62 73 63 72 69 62 65 28 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 61 64 64 28 65 2e 73 63 68 65 64 75 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 65 78 74 28 74 29 7d 29 29 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 61 64 64 28 65 2e 73 63 68 65 64 75 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 65 72 72 6f 72 28 74 29 7d 29 29 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 64 64 28 65 2e 73 63 68 65 64 75 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 29 29 29 7d 7d 29 29 7d 29 29 29 2c 72 7d 29 29 7d 28 74 2c 65 29 3b 69 66 28 48 74 28 74 29 29 72 65 74 75 72 6e Data Ascii: ubscribe({next:function(t){r.add(e.schedule((function(){return n.next(t)})))},error:function(t){r.add(e.schedule((function(){return n.error(t)})))},complete:function(){r.add(e.schedule((function(){return n.complete()})))}}))}))),r}))}(t,e);if(Ht(t))return
2024-04-23 14:05:25 UTC	15573	IN	Data Raw: 63 68 65 64 75 6c 65 28 29 29 7d 7d 29 29 29 7d 29 29 29 2c 69 7d 29 29 7d 28 74 2c 65 29 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 28 6e 75 6c 6c 21 3d 3d 74 26 26 74 79 70 65 6f 66 20 74 7c 7c 74 29 2b 22 20 69 73 20 6e 6f 74 20 6f 62 73 65 72 76 61 62 6c 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 4b 74 28 74 2c 65 29 3a 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 3f 74 3a 6e 65 77 20 67 28 4c 74 28 74 29 29 7d 76 61 72 20 58 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 6e 3d 74 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 2e 70 61 72 65 6e 74 3d 65 2c 6e 7d 72 65 74 75 72 6e 20 72 2e 5a 54 28 65 2c 74 29 Data Ascii: chedule())}})))}))),i}))}(t,e)}throw new TypeError((null!==t&&typeof t\|\|t)+" is not observable")}function Qt(t,e){return e?Kt(t,e):t instanceof g?t:new g(Lt(t))}var Xt=function(t){function e(e){var n=t.call(this)\|\|this;return n.parent=e,n}return r.ZT(e,t)

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49764	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:22 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713881090938&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-23 14:05:22 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-23 14:05:22 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-23 14:05:23 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: AF5F3E01C025430ABA6BF2B3F510A049 Ref B: LAX311000109049 Ref C: 2024-04-23T14:05:23Z Date: Tue, 23 Apr 2024 14:05:23 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713881122.67e0518

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49768	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:23 UTC	600	OUT	GET /static/js/3143.76a8115a.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:24 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1860 Connection: close Date: Tue, 23 Apr 2024 14:05:25 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "28f0e75e2da5f0838b8dcd362ca7d925" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 fdf00b190a061de7e2517d80e4d54e0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nAcOtw_l5mAwQqUBC6H3kLLbHOqfY-U31Mwp8_Y0DOucFKzEKNnAoQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:24 UTC	1860	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 33 31 34 33 2e 37 36 61 38 31 31 35 61 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 34 33 5d 2c 7b 36 33 31 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 72 3b 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 28 Data Ascii: /! For license information please see 3143.76a8115a.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3143],{63143:function(e,n,t){var o,r;!function(i){if(void 0===(r="function"===typeof(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49769	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:23 UTC	600	OUT	GET /static/js/1573.3f1be132.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:25 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 175029 Connection: close Date: Tue, 23 Apr 2024 14:05:25 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "82003092ee82918107a8db1fabd2fa5a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 26237ac13642e7ecf074b53dd73da126.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nTPiGG6SeGHxVWYIquGe_nQY0t8RMeOU-JwgbPxZsTgAbR4bFZThTQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 37 33 5d 2c 7b 36 31 35 37 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 42 52 45 41 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 2e 24 5f 7d 2c 42 72 65 61 6b 69 6e 67 43 68 61 6e 67 65 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 61 7d 2c 44 45 46 41 55 4c 54 5f 44 45 50 52 45 43 41 54 49 4f 4e 5f 52 45 41 53 4f 4e 3a 66 75 6e 63 74 69 6f 6e Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1573],{61573:function(e,n,t){t.r(n),t.d(n,{BREAK:function(){return G.$_},BreakingChangeType:function(){return ya},DEFAULT_DEPRECATION_REASON:function
2024-04-23 14:05:25 UTC	14306	IN	Data Raw: 28 65 2c 63 2c 22 49 6e 76 61 6c 69 64 20 6e 75 6d 62 65 72 2c 20 65 78 70 65 63 74 65 64 20 64 69 67 69 74 20 62 75 74 20 67 6f 74 3a 20 22 2e 63 6f 6e 63 61 74 28 52 28 75 29 2c 22 2e 22 29 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 53 28 73 3f 4f 2e 46 4c 4f 41 54 3a 4f 2e 49 4e 54 2c 6e 2c 63 2c 72 2c 69 2c 6f 2c 61 2e 73 6c 69 63 65 28 6e 2c 63 29 29 7d 28 74 2c 6f 2c 63 2c 61 2c 75 2c 6e 29 3b 63 61 73 65 20 33 34 3a 72 65 74 75 72 6e 20 33 34 3d 3d 3d 72 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2b 31 29 26 26 33 34 3d 3d 3d 72 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2b 32 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 69 2c 6f 29 7b 76 61 72 20 61 3d 65 2e 62 6f 64 79 2c 75 3d 6e 2b 33 2c 63 3d 75 2c 73 3d 30 2c 70 3d 22 22 3b 66 6f 72 28 3b 75 Data Ascii: (e,c,"Invalid number, expected digit but got: ".concat(R(u),"."));return new S(s?O.FLOAT:O.INT,n,c,r,i,o,a.slice(n,c))}(t,o,c,a,u,n);case 34:return 34===r.charCodeAt(o+1)&&34===r.charCodeAt(o+2)?function(e,n,t,r,i,o){var a=e.body,u=n+3,c=u,s=0,p="";for(;u
2024-04-23 14:05:25 UTC	2549	IN	Data Raw: 65 44 65 73 63 72 69 70 74 69 6f 6e 28 29 2c 74 3d 74 68 69 73 2e 70 61 72 73 65 4e 61 6d 65 28 29 2c 72 3d 74 68 69 73 2e 70 61 72 73 65 44 69 72 65 63 74 69 76 65 73 28 21 30 29 3b 72 65 74 75 72 6e 7b 6b 69 6e 64 3a 67 2e 45 4e 55 4d 5f 56 41 4c 55 45 5f 44 45 46 49 4e 49 54 49 4f 4e 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 6e 2c 6e 61 6d 65 3a 74 2c 64 69 72 65 63 74 69 76 65 73 3a 72 2c 6c 6f 63 3a 74 68 69 73 2e 6c 6f 63 28 65 29 7d 7d 2c 6e 2e 70 61 72 73 65 49 6e 70 75 74 4f 62 6a 65 63 74 54 79 70 65 44 65 66 69 6e 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 6c 65 78 65 72 2e 74 6f 6b 65 6e 2c 6e 3d 74 68 69 73 2e 70 61 72 73 65 44 65 73 63 72 69 70 74 69 6f 6e 28 29 3b 74 68 69 73 2e 65 78 70 65 63 74 4b Data Ascii: eDescription(),t=this.parseName(),r=this.parseDirectives(!0);return{kind:g.ENUM_VALUE_DEFINITION,description:n,name:t,directives:r,loc:this.loc(e)}},n.parseInputObjectTypeDefinition=function(){var e=this._lexer.token,n=this.parseDescription();this.expectK
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 65 79 77 6f 72 64 28 22 75 6e 69 6f 6e 22 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 70 61 72 73 65 4e 61 6d 65 28 29 2c 74 3d 74 68 69 73 2e 70 61 72 73 65 44 69 72 65 63 74 69 76 65 73 28 21 30 29 2c 72 3d 74 68 69 73 2e 70 61 72 73 65 55 6e 69 6f 6e 4d 65 6d 62 65 72 54 79 70 65 73 28 29 3b 69 66 28 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 74 68 69 73 2e 75 6e 65 78 70 65 63 74 65 64 28 29 3b 72 65 74 75 72 6e 7b 6b 69 6e 64 3a 67 2e 55 4e 49 4f 4e 5f 54 59 50 45 5f 45 58 54 45 4e 53 49 4f 4e 2c 6e 61 6d 65 3a 6e 2c 64 69 72 65 63 74 69 76 65 73 3a 74 2c 74 79 70 65 73 3a 72 2c 6c 6f 63 3a 74 68 69 73 2e 6c 6f 63 28 65 29 7d 7d 2c 6e 2e 70 61 72 73 65 45 6e 75 6d 54 79 70 65 45 78 74 65 6e 73 69 6f Data Ascii: eyword("union");var n=this.parseName(),t=this.parseDirectives(!0),r=this.parseUnionMemberTypes();if(0===t.length&&0===r.length)throw this.unexpected();return{kind:g.UNION_TYPE_EXTENSION,name:n,directives:t,types:r,loc:this.loc(e)}},n.parseEnumTypeExtensio
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 65 28 65 2e 76 61 6c 75 65 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 76 61 6c 75 65 7d 7d 2c 6e 2e 74 6f 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 65 65 28 74 68 69 73 2e 67 65 74 56 61 6c 75 65 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 64 65 73 63 72 69 70 74 69 6f 6e 3a 65 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 2c 64 65 70 72 65 63 61 74 69 6f 6e 52 65 61 73 6f 6e 3a 65 2e 64 65 70 72 65 63 61 74 69 6f 6e 52 65 61 73 6f 6e 2c 65 78 74 65 6e 73 69 6f 6e 73 3a 65 2e 65 78 74 65 6e 73 69 6f 6e 73 2c 61 73 74 4e 6f 64 65 3a 65 2e 61 73 74 4e 6f 64 65 7d 7d 29 29 3b 72 Data Ascii: e(e.value);if(t)return t.value}},n.toConfig=function(){var e=ee(this.getValues(),(function(e){return e.name}),(function(e){return{description:e.description,value:e.value,deprecationReason:e.deprecationReason,extensions:e.extensions,astNode:e.astNode}}));r
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 3a 76 6f 69 64 20 30 7d 7d 7d 7d 7d 29 2c 6f 74 3d 6e 65 77 20 7a 65 28 7b 6e 61 6d 65 3a 22 5f 5f 46 69 65 6c 64 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 4f 62 6a 65 63 74 20 61 6e 64 20 49 6e 74 65 72 66 61 63 65 20 74 79 70 65 73 20 61 72 65 20 64 65 73 63 72 69 62 65 64 20 62 79 20 61 20 6c 69 73 74 20 6f 66 20 46 69 65 6c 64 73 2c 20 65 61 63 68 20 6f 66 20 77 68 69 63 68 20 68 61 73 20 61 20 6e 61 6d 65 2c 20 70 6f 74 65 6e 74 69 61 6c 6c 79 20 61 20 6c 69 73 74 20 6f 66 20 61 72 67 75 6d 65 6e 74 73 2c 20 61 6e 64 20 61 20 72 65 74 75 72 6e 20 74 79 70 65 2e 22 2c 66 69 65 6c 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 7b 74 79 70 65 3a 50 65 28 4e 6e 29 2c 72 65 73 6f 6c 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: :void 0}}}}}),ot=new ze({name:"__Field",description:"Object and Interface types are described by a list of Fields, each of which has a name, potentially a list of arguments, and a return type.",fields:function(){return{name:{type:Pe(Nn),resolve:function(e
2024-04-23 14:05:25 UTC	3072	IN	Data Raw: 56 74 28 6e 2c 65 2e 74 79 70 65 29 3b 74 68 69 73 2e 5f 69 6e 70 75 74 54 79 70 65 53 74 61 63 6b 2e 70 75 73 68 28 41 65 28 73 29 3f 73 3a 76 6f 69 64 20 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 67 2e 41 52 47 55 4d 45 4e 54 3a 76 61 72 20 70 2c 66 2c 6c 3d 74 68 69 73 2e 67 65 74 44 69 72 65 63 74 69 76 65 28 29 7c 7c 74 68 69 73 2e 67 65 74 46 69 65 6c 64 44 65 66 28 29 3b 6c 26 26 28 70 3d 5a 28 6c 2e 61 72 67 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 61 6d 65 3d 3d 3d 65 2e 6e 61 6d 65 2e 76 61 6c 75 65 7d 29 29 29 26 26 28 66 3d 70 2e 74 79 70 65 29 2c 74 68 69 73 2e 5f 61 72 67 75 6d 65 6e 74 3d 70 2c 74 68 69 73 2e 5f 64 65 66 61 75 6c 74 56 61 6c 75 65 53 74 61 63 6b 2e 70 75 73 68 28 70 3f 70 2e 64 65 66 61 75 Data Ascii: Vt(n,e.type);this._inputTypeStack.push(Ae(s)?s:void 0);break;case g.ARGUMENT:var p,f,l=this.getDirective()\|\|this.getFieldDef();l&&(p=Z(l.args,(function(n){return n.name===e.name.value})))&&(f=p.type),this._argument=p,this._defaultValueStack.push(p?p.defau
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 65 77 20 79 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 27 54 68 65 72 65 20 63 61 6e 20 62 65 20 6f 6e 6c 79 20 6f 6e 65 20 6f 70 65 72 61 74 69 6f 6e 20 6e 61 6d 65 64 20 22 27 2e 63 6f 6e 63 61 74 28 65 2c 27 22 2e 27 29 7d 28 72 2e 76 61 6c 75 65 29 2c 5b 6e 5b 72 2e 76 61 6c 75 65 5d 2c 72 5d 29 29 3a 6e 5b 72 2e 76 61 6c 75 65 5d 3d 72 29 2c 21 31 7d 2c 46 72 61 67 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 74 28 65 29 7b 76 61 72 20 6e 3d 30 3b 72 65 74 75 72 6e 7b 44 6f 63 75 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 65 2e 64 65 66 69 6e 69 74 69 6f 6e 73 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 Data Ascii: ew y(function(e){return'There can be only one operation named "'.concat(e,'".')}(r.value),[n[r.value],r])):n[r.value]=r),!1},FragmentDefinition:function(){return!1}}}function Xt(e){var n=0;return{Document:function(e){n=e.definitions.filter((function(e){re
2024-04-23 14:05:25 UTC	1024	IN	Data Raw: 70 65 72 61 74 69 6f 6e 44 65 66 69 6e 69 74 69 6f 6e 3a 7b 65 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 2c 6c 65 61 76 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 65 2e 67 65 74 52 65 63 75 72 73 69 76 65 56 61 72 69 61 62 6c 65 55 73 61 67 65 73 28 74 29 2c 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 72 5b 69 5d 2c 75 3d 6f 2e 6e 6f 64 65 2c 63 3d 6f 2e 74 79 70 65 2c 73 3d 6f 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 70 3d 75 2e 6e 61 6d 65 2e 76 61 6c 75 65 2c 66 3d 6e 5b 70 5d 3b 69 66 28 66 26 26 63 29 7b 76 61 72 20 6c 3d 65 2e 67 65 74 53 63 68 65 6d 61 28 29 2c 64 3d 56 74 28 6c 2c 66 2e 74 79 70 65 29 3b 64 26 26 Data Ascii: perationDefinition:{enter:function(){n=Object.create(null)},leave:function(t){for(var r=e.getRecursiveVariableUsages(t),i=0;i<r.length;i++){var o=r[i],u=o.node,c=o.type,s=o.defaultValue,p=u.name.value,f=n[p];if(f&&c){var l=e.getSchema(),d=Vt(l,f.type);d&&
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 75 3d 61 5b 6f 5d 2c 63 3d 75 5b 30 5d 2c 73 3d 75 5b 31 5d 3b 69 66 28 73 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 73 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 66 6f 72 28 76 61 72 20 66 3d 70 2b 31 3b 66 3c 73 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 6c 3d 4b 72 28 65 2c 74 2c 72 2c 21 31 2c 63 2c 73 5b 70 5d 2c 73 5b 66 5d 29 3b 6c 26 26 6e 2e 70 75 73 68 28 6c 29 7d 7d 7d 28 65 2c 6f 2c 6e 2c 74 2c 75 29 2c 30 21 3d 3d 63 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 70 3d 30 3b 70 3c 63 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 7b 51 72 28 65 2c 6f 2c 6e 2c 73 2c 74 2c 21 31 2c 75 2c 63 5b 70 5d 29 3b 66 6f 72 28 76 Data Ascii: gth;o++){var u=a[o],c=u[0],s=u[1];if(s.length>1)for(var p=0;p<s.length;p++)for(var f=p+1;f<s.length;f++){var l=Kr(e,t,r,!1,c,s[p],s[f]);l&&n.push(l)}}}(e,o,n,t,u),0!==c.length)for(var s=Object.create(null),p=0;p<c.length;p++){Qr(e,o,n,s,t,!1,u,c[p]);for(v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49770	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:24 UTC	600	OUT	GET /static/js/7234.38279feb.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:25 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2305 Connection: close Date: Tue, 23 Apr 2024 14:05:26 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "e7e50202d381dc15d15db5eda2ee0459" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a4294eb914e3f883aba658e8044fe4f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -9EHleT8GaBMFCNC4ZJ5_-Nc3lC0UkadZdqq81UMGbeDuNMuph5Rqw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:25 UTC	2305	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 32 33 34 5d 2c 7b 37 37 32 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 2c 64 69 73 61 62 6c 65 45 78 70 65 72 69 6d 65 6e 74 61 6c 46 72 61 67 6d 65 6e 74 56 61 72 69 61 62 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 64 69 73 61 62 6c 65 46 72 61 67 6d 65 6e 74 57 61 72 6e Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7234],{77234:function(e,n,t){t.r(n),t.d(n,{default:function(){return F},disableExperimentalFragmentVariables:function(){return h},disableFragmentWarn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49771	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:24 UTC	600	OUT	GET /static/js/4270.9958be01.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:25 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17218 Connection: close Date: Tue, 23 Apr 2024 14:05:26 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "85402b302542cf77966b6ac4a582dbc9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d25b5a4b536886c15089faae019d94da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xrCXK1MaQeCn_td97RluioOWY6TQAMMOvkfitMPU5ZWF_RJ86fXFpg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:25 UTC	8447	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 32 37 30 2e 39 39 35 38 62 65 30 31 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 37 30 2c 37 37 31 36 5d 2c 7b 33 31 37 32 35 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 6e 3d 4f 62 6a 65 63 Data Ascii: /! For license information please see 4270.9958be01.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4270,7716],{31725:function(e){"use strict";var t=Object.getOwnPropertySymbols,n=Objec
2024-04-23 14:05:25 UTC	8771	IN	Data Raw: 2e 74 69 74 6c 65 3d 74 65 28 65 29 29 2c 72 65 28 62 2e 54 49 54 4c 45 2c 74 29 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 5b 30 5d 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 52 29 2c 6f 3d 72 3f 72 2e 73 70 6c 69 74 28 22 2c 22 29 3a 5b 5d 2c 69 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6f 29 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2c 75 3d 30 3b 75 3c 61 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 63 3d 61 5b 75 5d 2c 73 3d 74 5b 63 5d 7c 7c 22 22 3b 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 63 29 21 3d 3d 73 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 63 Data Ascii: .title=te(e)),re(b.TITLE,t)},re=function(e,t){var n=document.getElementsByTagName(e)[0];if(n){for(var r=n.getAttribute(R),o=r?r.split(","):[],i=[].concat(o),a=Object.keys(t),u=0;u<a.length;u++){var c=a[u],s=t[c]\|\|"";n.getAttribute(c)!==s&&n.setAttribute(c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49772	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:24 UTC	600	OUT	GET /static/js/9109.67b5138b.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:25 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 140121 Connection: close Date: Tue, 23 Apr 2024 14:05:26 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "2b5ea5ccc0d16a6534b7347add63984f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d77a44384491c6a449d3e41f615d0cc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oYECCcwcbRZ0H_vVqpbNr2PWLdyZDLCkdhNPfX4f9lFaEDWZoo5HNw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 31 30 39 5d 2c 7b 36 39 31 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 44 65 66 61 75 6c 74 50 72 69 76 61 63 79 4c 65 76 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 7d 2c 64 61 74 61 64 6f 67 52 75 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 73 7d 7d 29 3b 76 61 72 20 72 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9109],{69109:function(t,e,n){n.r(e),n.d(e,{DefaultPrivacyLevel:function(){return re},datadogRum:function(){return es}});var r={log:"log",debug:"debug
2024-04-23 14:05:25 UTC	16384	IN	Data Raw: 65 6e 74 2d 69 64 22 3a 65 2e 74 6f 44 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 2c 22 78 2d 64 61 74 61 64 6f 67 2d 73 61 6d 70 6c 69 6e 67 2d 70 72 69 6f 72 69 74 79 22 3a 6e 3f 22 31 22 3a 22 30 22 2c 22 78 2d 64 61 74 61 64 6f 67 2d 74 72 61 63 65 2d 69 64 22 3a 74 2e 74 6f 44 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 72 61 63 65 63 6f 6e 74 65 78 74 22 3a 5f 28 69 2c 7b 74 72 61 63 65 70 61 72 65 6e 74 3a 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2e 63 6f 6e 63 61 74 28 74 2e 74 6f 50 61 64 64 65 64 48 65 78 61 64 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 65 2e 74 6f 50 61 64 64 65 64 48 65 78 61 64 65 63 69 6d 61 6c 53 74 72 69 6e 67 28 29 2c 22 Data Ascii: ent-id":e.toDecimalString(),"x-datadog-sampling-priority":n?"1":"0","x-datadog-trace-id":t.toDecimalString()});break;case"tracecontext":_(i,{traceparent:"00-0000000000000000".concat(t.toPaddedHexadecimalString(),"-").concat(e.toPaddedHexadecimalString(),"
2024-04-23 14:05:25 UTC	1605	IN	Data Raw: 72 29 7c 7c 28 6b 2e 75 73 72 3d 77 2e 75 73 65 72 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 6f 3b 69 66 28 65 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 56 28 74 29 2c 69 3d 6e 28 72 29 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 61 6e 28 74 2c 65 29 2c 69 3d 61 6e 28 72 2c 65 29 2c 6f 3d 71 28 6e 29 2c 61 3d 71 28 69 29 3b 61 3d 3d 3d 6f 3f 73 6e 28 74 2c 65 2c 69 29 3a 22 6f 62 6a 65 63 74 22 21 3d 3d 6f 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 61 26 26 22 6e 75 6c 6c 22 21 3d 3d 61 7c 7c 73 6e 28 74 2c 65 2c 7b 7d 29 7d 29 29 2c 69 7d 28 74 2c 22 76 69 65 77 22 3d 3d 3d 74 2e 74 79 70 65 3f 70 6e 3a 76 Data Ascii: r)\|\|(k.usr=w.user),function(t,e,n,r){var o;if(e){var a=function(t,e,n){var r=V(t),i=n(r);return e.forEach((function(e){var n=an(t,e),i=an(r,e),o=q(n),a=q(i);a===o?sn(t,e,i):"object"!==o\|\|"undefined"!==a&&"null"!==a\|\|sn(t,e,{})})),i}(t,"view"===t.type?pn:v
2024-04-23 14:05:26 UTC	16384	IN	Data Raw: 65 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 5b 74 5d 7c 7c 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 5b 74 5d 3d 5b 5d 29 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 5b 74 5d 2e 70 75 73 68 28 65 29 2c 7b 75 6e 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 62 61 63 6b 73 5b 74 5d 3d 6e 2e 63 61 6c 6c 62 61 63 6b 73 5b 74 5d 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 74 7d 29 29 7d 7d 7d 2c 74 7d 28 29 2c 45 6e 3d 34 2a 68 2c 78 6e 3d 31 35 2a 76 2c 52 6e 3d 31 2f 30 2c 41 6e 3d 76 2c 49 Data Ascii: e)}))},t.prototype.subscribe=function(t,e){var n=this;return this.callbacks[t]\|\|(this.callbacks[t]=[]),this.callbacks[t].push(e),{unsubscribe:function(){n.callbacks[t]=n.callbacks[t].filter((function(t){return e!==t}))}}},t}(),En=4h,xn=15v,Rn=1/0,An=v,I
2024-04-23 14:05:26 UTC	1024	IN	Data Raw: 68 28 74 29 7d 2c 73 74 61 72 74 43 6c 6f 63 6b 73 3a 75 2c 69 73 53 74 6f 70 70 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 64 7c 7c 32 3d 3d 3d 64 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 72 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 29 7d 2c 76 61 6c 69 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 28 29 2c 31 3d 3d 3d 64 29 7b 76 61 72 20 6e 3d 6c 2e 65 76 65 6e 74 43 6f 75 6e 74 73 2c 63 3d 6e 2e 72 65 73 6f 75 72 63 65 43 6f 75 6e 74 2c 70 3d 6e 2e 65 72 72 6f 72 43 6f 75 6e 74 2c 68 3d 6e 2e 6c 6f 6e 67 54 61 73 6b 43 6f 75 6e 74 2c 6d 3d 72 28 29 2c 67 3d 5f 28 7b 74 79 70 65 3a 22 63 6c 69 63 6b 22 2c 64 75 72 61 74 69 6f 6e 3a 61 26 26 73 74 28 75 2e 74 69 6d 65 53 Data Ascii: h(t)},startClocks:u,isStopped:function(){return 1===d\|\|2===d},clone:function(){return Mr(t,e,n,r,i,o)},validate:function(e){if(v(),1===d){var n=l.eventCounts,c=n.resourceCount,p=n.errorCount,h=n.longTaskCount,m=r(),g=_({type:"click",duration:a&&st(u.timeS
2024-04-23 14:05:26 UTC	16384	IN	Data Raw: 7b 63 75 73 74 6f 6d 65 72 43 6f 6e 74 65 78 74 3a 72 2c 72 61 77 52 75 6d 45 76 65 6e 74 3a 69 2c 73 74 61 72 74 54 69 6d 65 3a 74 2e 73 74 61 72 74 43 6c 6f 63 6b 73 2e 72 65 6c 61 74 69 76 65 2c 64 6f 6d 61 69 6e 43 6f 6e 74 65 78 74 3a 44 72 28 74 29 3f 7b 65 76 65 6e 74 3a 74 2e 65 76 65 6e 74 2c 65 76 65 6e 74 73 3a 74 2e 65 76 65 6e 74 73 7d 3a 7b 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 72 28 74 29 7b 72 65 74 75 72 6e 22 63 75 73 74 6f 6d 22 21 3d 3d 74 2e 74 79 70 65 7d 76 61 72 20 50 72 3d 2f 5e 28 3f 3a 5b 55 75 5d 6e 63 61 75 67 68 74 20 28 3f 3a 65 78 63 65 70 74 69 6f 6e 3a 20 29 3f 29 3f 28 3f 3a 28 28 3f 3a 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 Data Ascii: {customerContext:r,rawRumEvent:i,startTime:t.startClocks.relative,domainContext:Dr(t)?{event:t.event,events:t.events}:{}}}function Dr(t){return"custom"!==t.type}var Pr=/^(?:[Uu]ncaught (?:exception: )?)?(?:((?:Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI
2024-04-23 14:05:26 UTC	16384	IN	Data Raw: 4f 72 52 65 6e 65 77 53 65 73 73 69 6f 6e 28 29 2c 69 2e 61 64 64 28 6f 28 29 2c 61 74 28 29 2e 72 65 6c 61 74 69 76 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 65 28 77 69 6e 64 6f 77 2c 5b 22 63 6c 69 63 6b 22 2c 22 74 6f 75 63 68 73 74 61 72 74 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 73 63 72 6f 6c 6c 22 5d 2c 74 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 2e 73 74 6f 70 3b 44 69 2e 70 75 73 68 28 65 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 78 70 61 6e 64 4f 72 52 65 6e 65 77 53 65 73 73 69 6f 6e 28 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 76 69 73 69 62 6c 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 Data Ascii: OrRenewSession(),i.add(o(),at().relative),function(t){var e=ye(window,["click","touchstart","keydown","scroll"],t,{capture:!0,passive:!0}).stop;Di.push(e)}((function(){return r.expandOrRenewSession()})),function(t){var e=l((function(){"visible"===document
2024-04-23 14:05:26 UTC	2048	IN	Data Raw: 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 74 29 7b 76 61 72 20 65 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 61 61 2e 74 65 73 74 28 65 29 3f 22 64 69 76 22 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 2e 72 75 6c 65 73 7c 7c 74 2e 63 73 73 52 75 6c 65 73 3b 72 65 74 75 72 6e 20 65 3f 51 6f 28 41 72 72 61 79 2e 66 72 6f 6d 28 65 2c 63 61 29 2e 6a 6f 69 6e 28 22 22 29 2c 74 2e 68 72 65 66 29 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 61 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 74 79 6c 65 53 68 65 65 74 22 69 6e 20 74 7d 28 74 29 3f 75 61 28 Data Ascii: ]/;function sa(t){var e=t.toLowerCase().trim();return aa.test(e)?"div":e}function ua(t){try{var e=t.rules\|\|t.cssRules;return e?Qo(Array.from(e,ca).join(""),t.href):null}catch(n){return null}}function ca(t){return function(t){return"styleSheet"in t}(t)?ua(
2024-04-23 14:05:26 UTC	16384	IN	Data Raw: 6f 28 76 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 65 2e 64 65 66 61 75 6c 74 50 72 69 76 61 63 79 4c 65 76 65 6c 29 3b 69 66 28 68 21 3d 3d 43 6f 2e 48 49 44 44 45 4e 26 26 68 21 3d 3d 43 6f 2e 49 47 4e 4f 52 45 29 7b 76 61 72 20 6d 3d 6e 61 28 76 2c 7b 73 65 72 69 61 6c 69 7a 65 64 4e 6f 64 65 49 64 73 3a 6c 2c 70 61 72 65 6e 74 4e 6f 64 65 50 72 69 76 61 63 79 4c 65 76 65 6c 3a 68 2c 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 43 6f 6e 74 65 78 74 3a 7b 73 74 61 74 75 73 3a 32 2c 73 68 61 64 6f 77 52 6f 6f 74 73 43 6f 6e 74 72 6f 6c 6c 65 72 3a 6e 7d 2c 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 65 7d 29 3b 69 66 28 6d 29 7b 76 61 72 20 67 3d 47 65 28 76 29 3b 64 2e 70 75 73 68 28 7b 6e 65 78 74 49 64 3a 5f 28 76 29 2c 70 61 72 65 6e 74 49 64 3a 57 6f 28 67 29 2c Data Ascii: o(v.parentNode,e.defaultPrivacyLevel);if(h!==Co.HIDDEN&&h!==Co.IGNORE){var m=na(v,{serializedNodeIds:l,parentNodePrivacyLevel:h,serializationContext:{status:2,shadowRootsController:n},configuration:e});if(m){var g=Ge(v);d.push({nextId:_(v),parentId:Wo(g),
2024-04-23 14:05:26 UTC	1024	IN	Data Raw: 2e 68 65 61 70 5f 6d 61 78 5d 2b 31 5d 3d 30 2c 6e 3d 74 2e 68 65 61 70 5f 6d 61 78 2b 31 3b 6e 3c 68 3b 6e 2b 2b 29 28 6f 3d 75 5b 32 2a 75 5b 32 2a 28 72 3d 74 2e 68 65 61 70 5b 6e 5d 29 2b 31 5d 2b 31 5d 2b 31 29 3e 76 26 26 28 6f 3d 76 2c 67 2b 2b 29 2c 75 5b 32 2a 72 2b 31 5d 3d 6f 2c 72 3e 63 7c 7c 28 74 2e 62 6c 5f 63 6f 75 6e 74 5b 6f 5d 2b 2b 2c 61 3d 30 2c 72 3e 3d 70 26 26 28 61 3d 66 5b 72 2d 70 5d 29 2c 73 3d 75 5b 32 2a 72 5d 2c 74 2e 6f 70 74 5f 6c 65 6e 2b 3d 73 2a 28 6f 2b 61 29 2c 64 26 26 28 74 2e 73 74 61 74 69 63 5f 6c 65 6e 2b 3d 73 2a 28 6c 5b 32 2a 72 2b 31 5d 2b 61 29 29 29 3b 69 66 28 30 21 3d 3d 67 29 7b 64 6f 7b 66 6f 72 28 6f 3d 76 2d 31 3b 30 3d 3d 3d 74 2e 62 6c 5f 63 6f 75 6e 74 5b 6f 5d 3b 29 6f 2d 2d 3b 74 2e 62 6c 5f 63 Data Ascii: .heap_max]+1]=0,n=t.heap_max+1;n<h;n++)(o=u[2u[2(r=t.heap[n])+1]+1]+1)>v&&(o=v,g++),u[2r+1]=o,r>c\|\|(t.bl_count[o]++,a=0,r>=p&&(a=f[r-p]),s=u[2r],t.opt_len+=s(o+a),d&&(t.static_len+=s(l[2*r+1]+a)));if(0!==g){do{for(o=v-1;0===t.bl_count[o];)o--;t.bl_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49773	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:24 UTC	600	OUT	GET /static/js/4660.6d63bde7.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:26 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 160774 Connection: close Date: Tue, 23 Apr 2024 14:05:26 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "58e913e58587b96ad22228ffb41ae184" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a391141d25437d7aa74fa579471d4816.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _bVyOrSw4J5xroO_gpGAE_ZVjfi2uZujfSF3E1yqBawi5Sa5kyJM0g== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:26 UTC	6396	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 36 30 5d 2c 7b 39 30 39 37 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 6e 28 34 39 34 32 29 2c 61 3d 6e 28 36 33 33 36 36 29 2c 72 3d 6e 28 38 37 34 36 32 29 2c 69 3d 6e 28 39 33 32 36 34 29 2c 6c 3d 6e 28 32 38 31 38 32 29 2c 73 3d 6e 28 39 34 34 31 39 29 2c 63 3d 6e 28 31 32 30 36 35 29 2c 75 3d 6e 28 36 36 39 33 34 29 2c 64 3d 6e 28 33 31 34 30 32 29 2c 70 3d 6e 28 35 33 39 31 35 29 2c 6d 3d 6e 28 31 34 30 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4660],{90977:function(e,t,n){"use strict";var o=n(4942),a=n(63366),r=n(87462),i=n(93264),l=n(28182),s=n(94419),c=n(12065),u=n(66934),d=n(31402),p=n(53915),m=n(140
2024-04-23 14:05:26 UTC	1754	IN	Data Raw: 61 64 6f 77 52 6f 6f 74 29 3a 74 3a 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 64 2e 67 65 6e 65 72 61 74 65 55 74 69 6c 69 74 79 43 6c 61 73 73 29 28 22 50 72 69 76 61 74 65 50 69 63 6b 65 72 73 4d 6f 6e 74 68 22 2c 65 29 7d 76 61 72 20 77 3d 28 30 2c 64 2e 67 65 6e 65 72 61 74 65 55 74 69 6c 69 74 79 43 6c 61 73 73 65 73 29 28 22 50 72 69 76 61 74 65 50 69 63 6b 65 72 73 4d 6f 6e 74 68 22 2c 5b 22 72 6f 6f 74 22 2c 22 73 65 6c 65 63 74 65 64 22 5d 29 2c 78 3d 6e 28 38 30 31 38 34 29 2c 44 3d 5b 22 64 69 73 61 62 6c 65 64 22 2c 22 6f 6e 53 65 6c 65 63 74 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 76 61 6c 75 65 22 2c 22 74 61 62 49 6e 64 65 78 22 2c 22 68 61 73 46 6f 63 75 73 22 2c 22 6f 6e 46 6f 63 75 73 22 2c Data Ascii: adowRoot):t:null};function y(e){return(0,d.generateUtilityClass)("PrivatePickersMonth",e)}var w=(0,d.generateUtilityClasses)("PrivatePickersMonth",["root","selected"]),x=n(80184),D=["disabled","onSelect","selected","value","tabIndex","hasFocus","onFocus",
2024-04-23 14:05:26 UTC	16384	IN	Data Raw: 70 73 3a 7b 6c 6f 63 61 6c 65 54 65 78 74 3a 28 30 2c 72 2e 5a 29 28 7b 7d 2c 65 29 7d 7d 7d 7d 7d 2c 56 3d 7b 70 72 65 76 69 6f 75 73 4d 6f 6e 74 68 3a 22 50 72 65 76 69 6f 75 73 20 6d 6f 6e 74 68 22 2c 6e 65 78 74 4d 6f 6e 74 68 3a 22 4e 65 78 74 20 6d 6f 6e 74 68 22 2c 6f 70 65 6e 50 72 65 76 69 6f 75 73 56 69 65 77 3a 22 6f 70 65 6e 20 70 72 65 76 69 6f 75 73 20 76 69 65 77 22 2c 6f 70 65 6e 4e 65 78 74 56 69 65 77 3a 22 6f 70 65 6e 20 6e 65 78 74 20 76 69 65 77 22 2c 63 61 6c 65 6e 64 61 72 56 69 65 77 53 77 69 74 63 68 69 6e 67 42 75 74 74 6f 6e 41 72 69 61 4c 61 62 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 79 65 61 72 22 3d 3d 3d 65 3f 22 79 65 61 72 20 76 69 65 77 20 69 73 20 6f 70 65 6e 2c 20 73 77 69 74 63 68 20 74 6f 20 Data Ascii: ps:{localeText:(0,r.Z)({},e)}}}}},V={previousMonth:"Previous month",nextMonth:"Next month",openPreviousView:"open previous view",openNextView:"open next view",calendarViewSwitchingButtonAriaLabel:function(e){return"year"===e?"year view is open, switch to
2024-04-23 14:05:26 UTC	1024	IN	Data Raw: 31 21 3d 3d 28 22 20 22 2b 28 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 7c 7c 65 2e 63 6c 61 73 73 4e 61 6d 65 29 2b 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 74 2b 22 20 22 29 7d 28 6e 2c 6f 29 7c 7c 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 2e 63 6c 61 73 73 4e 61 6d 65 3f 6e 2e 63 6c 61 73 73 4e 61 6d 65 3d 6e 2e 63 6c 61 73 73 4e 61 6d 65 2b 22 20 22 2b 6f 3a 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 28 6e 2e 63 6c 61 73 73 4e 61 6d 65 26 26 6e 2e 63 6c 61 73 73 4e 61 6d 65 2e 62 61 73 65 56 61 6c 7c 7c 22 22 29 2b 22 20 22 2b 6f 29 29 29 3b 76 61 72 20 6e 2c 6f 7d 29 29 7d 28 65 2c 6f 29 29 7d 2c 6e 2e 72 65 6d 6f 76 65 43 6c 61 73 73 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: 1!==(" "+(e.className.baseVal\|\|e.className)+" ").indexOf(" "+t+" ")}(n,o)\|\|("string"===typeof n.className?n.className=n.className+" "+o:n.setAttribute("class",(n.className&&n.className.baseVal\|\|"")+" "+o)));var n,o}))}(e,o))},n.removeClasses=function(e,t)
2024-04-23 14:05:26 UTC	16384	IN	Data Raw: 65 22 2c 22 72 65 64 75 63 65 41 6e 69 6d 61 74 69 6f 6e 73 22 2c 22 73 6c 69 64 65 44 69 72 65 63 74 69 6f 6e 22 2c 22 74 72 61 6e 73 4b 65 79 22 5d 2c 52 65 3d 28 30 2c 75 2e 5a 50 29 28 6e 65 2e 5a 2c 7b 6e 61 6d 65 3a 22 50 72 69 76 61 74 65 50 69 63 6b 65 72 73 53 6c 69 64 65 54 72 61 6e 73 69 74 69 6f 6e 22 2c 73 6c 6f 74 3a 22 52 6f 6f 74 22 2c 6f 76 65 72 72 69 64 65 73 52 65 73 6f 6c 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2e 72 6f 6f 74 2c 28 30 2c 68 2e 5a 29 28 7b 7d 2c 22 2e 22 2e 63 6f 6e 63 61 74 28 42 65 5b 22 73 6c 69 64 65 45 6e 74 65 72 2d 6c 65 66 74 22 5d 29 2c 74 5b 22 73 6c 69 64 65 45 6e 74 65 72 2d 6c 65 66 74 22 5d 29 2c 28 30 2c 68 2e 5a 29 28 7b 7d 2c 22 2e 22 2e 63 6f 6e 63 61 74 28 42 65 Data Ascii: e","reduceAnimations","slideDirection","transKey"],Re=(0,u.ZP)(ne.Z,{name:"PrivatePickersSlideTransition",slot:"Root",overridesResolver:function(e,t){return[t.root,(0,h.Z)({},".".concat(Be["slideEnter-left"]),t["slideEnter-left"]),(0,h.Z)({},".".concat(Be
2024-04-23 14:05:26 UTC	1024	IN	Data Raw: 6b 65 72 73 59 65 61 72 22 2c 5b 22 72 6f 6f 74 22 2c 22 6d 6f 64 65 44 65 73 6b 74 6f 70 22 2c 22 6d 6f 64 65 4d 6f 62 69 6c 65 22 2c 22 79 65 61 72 42 75 74 74 6f 6e 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 64 69 73 61 62 6c 65 64 22 5d 29 2c 53 74 3d 5b 22 61 75 74 6f 46 6f 63 75 73 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 64 69 73 61 62 6c 65 64 22 2c 22 6f 6e 43 6c 69 63 6b 22 2c 22 6f 6e 4b 65 79 44 6f 77 6e 22 2c 22 76 61 6c 75 65 22 2c 22 74 61 62 49 6e 64 65 78 22 2c 22 6f 6e 46 6f 63 75 73 22 2c 22 6f 6e 42 6c 75 72 22 5d 2c 56 74 3d 28 30 2c 75 2e 5a 50 29 28 22 64 69 76 22 2c 7b 6e 61 6d 65 3a 22 50 72 69 76 61 74 65 50 69 63 6b 65 72 73 59 65 61 72 22 2c 73 6c 6f 74 3a 22 52 6f 6f 74 22 2c 6f 76 65 72 72 Data Ascii: kersYear",["root","modeDesktop","modeMobile","yearButton","selected","disabled"]),St=["autoFocus","className","children","disabled","onClick","onKeyDown","value","tabIndex","onFocus","onBlur"],Vt=(0,u.ZP)("div",{name:"PrivatePickersYear",slot:"Root",overr
2024-04-23 14:05:26 UTC	16384	IN	Data Raw: 68 6f 76 65 72 22 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 28 30 2c 67 2e 46 71 29 28 6e 2e 70 61 6c 65 74 74 65 2e 61 63 74 69 6f 6e 2e 61 63 74 69 76 65 2c 6e 2e 70 61 6c 65 74 74 65 2e 61 63 74 69 6f 6e 2e 68 6f 76 65 72 4f 70 61 63 69 74 79 29 7d 7d 2c 28 30 2c 68 2e 5a 29 28 74 2c 22 26 2e 22 2e 63 6f 6e 63 61 74 28 4c 74 2e 64 69 73 61 62 6c 65 64 29 2c 7b 63 6f 6c 6f 72 3a 6e 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 73 65 63 6f 6e 64 61 72 79 7d 29 2c 28 30 2c 68 2e 5a 29 28 74 2c 22 26 2e 22 2e 63 6f 6e 63 61 74 28 4c 74 2e 73 65 6c 65 63 74 65 64 29 2c 7b 63 6f 6c 6f 72 3a 6e 2e 70 61 6c 65 74 74 65 2e 70 72 69 6d 61 72 79 2e 63 6f 6e 74 72 61 73 74 54 65 78 74 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 6e 2e 70 61 6c 65 74 Data Ascii: hover":{backgroundColor:(0,g.Fq)(n.palette.action.active,n.palette.action.hoverOpacity)}},(0,h.Z)(t,"&.".concat(Lt.disabled),{color:n.palette.text.secondary}),(0,h.Z)(t,"&.".concat(Lt.selected),{color:n.palette.primary.contrastText,backgroundColor:n.palet
2024-04-23 14:05:26 UTC	1024	IN	Data Raw: 6b 3b 63 61 73 65 22 41 72 72 6f 77 55 70 22 3a 4e 28 54 2b 52 2c 22 70 61 72 74 69 61 6c 22 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 41 72 72 6f 77 44 6f 77 6e 22 3a 4e 28 54 2d 52 2c 22 70 61 72 74 69 61 6c 22 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 2c 74 61 62 49 6e 64 65 78 3a 30 2c 63 6c 61 73 73 4e 61 6d 65 3a 4c 2e 77 72 61 70 70 65 72 2c 63 68 69 6c 64 72 65 6e 3a 72 7d 29 5d 7d 29 2c 6e 26 26 28 22 64 65 73 6b 74 6f 70 22 3d 3d 3d 4d 7c 7c 6f 29 26 26 28 30 2c 78 2e 6a 73 78 73 29 28 69 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 78 2e 6a 73 78 29 28 4d 6e 2c 7b 6f 6e 43 6c 69 63 6b 3a 50 3f 76 6f 69 64 20 30 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: k;case"ArrowUp":N(T+R,"partial"),e.preventDefault();break;case"ArrowDown":N(T-R,"partial"),e.preventDefault()}},tabIndex:0,className:L.wrapper,children:r})]}),n&&("desktop"===M\|\|o)&&(0,x.jsxs)(i.Fragment,{children:[(0,x.jsx)(Mn,{onClick:P?void 0:function(
2024-04-23 14:05:26 UTC	16384	IN	Data Raw: 74 65 3b 72 65 74 75 72 6e 28 30 2c 72 2e 5a 29 28 28 74 3d 7b 68 65 69 67 68 74 3a 73 6e 2c 77 69 64 74 68 3a 73 6e 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6c 65 66 74 3a 22 63 61 6c 63 28 28 31 30 30 25 20 2d 20 22 2e 63 6f 6e 63 61 74 28 73 6e 2c 22 70 78 29 20 2f 20 32 29 22 29 2c 64 69 73 70 6c 61 79 3a 22 69 6e 6c 69 6e 65 2d 66 6c 65 78 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 63 65 6e 74 65 72 22 2c 61 6c 69 67 6e 49 74 65 6d 73 3a 22 63 65 6e 74 65 72 22 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 22 35 30 25 22 2c 63 6f 6c 6f 72 3a 6e 2e 70 61 6c 65 74 74 65 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 2c 66 6f 6e 74 46 61 6d 69 6c 79 3a 6e 2e 74 79 70 6f 67 72 61 70 68 79 2e 66 6f 6e 74 46 61 6d 69 6c 79 2c 22 26 3a Data Ascii: te;return(0,r.Z)((t={height:sn,width:sn,position:"absolute",left:"calc((100% - ".concat(sn,"px) / 2)"),display:"inline-flex",justifyContent:"center",alignItems:"center",borderRadius:"50%",color:n.palette.text.primary,fontFamily:n.typography.fontFamily,"&:
2024-04-23 14:05:26 UTC	1024	IN	Data Raw: 72 20 50 3d 72 3f 72 28 43 29 3a 43 3b 72 65 74 75 72 6e 20 73 3d 3d 3d 50 3f 6e 28 29 3a 65 2e 6f 6e 43 68 61 6e 67 65 28 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 67 28 43 29 3b 69 66 28 6e 75 6c 6c 21 3d 65 2e 6d 61 73 6b 26 26 28 75 7c 7c 64 26 26 21 6d 29 29 66 6f 72 28 3b 43 5b 74 5d 26 26 22 22 3d 3d 3d 68 28 43 5b 74 5d 29 3b 29 74 2b 3d 31 3b 63 2e 73 65 6c 65 63 74 69 6f 6e 53 74 61 72 74 3d 63 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 3d 74 2b 28 6d 3f 31 2b 62 3a 30 29 7d 7d 7d 29 29 2c 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 44 65 6c 65 74 65 22 3d 3d 3d 65 2e 63 6f 64 65 26 26 28 63 2e 63 75 72 72 65 6e 74 3d 21 30 29 7d 2c 74 Data Ascii: r P=r?r(C):C;return s===P?n():e.onChange(P),function(){var t=g(C);if(null!=e.mask&&(u\|\|d&&!m))for(;C[t]&&""===h(C[t]);)t+=1;c.selectionStart=c.selectionEnd=t+(m?1+b:0)}}})),(0,i.useEffect)((function(){var e=function(e){"Delete"===e.code&&(c.current=!0)},t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49774	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:25 UTC	600	OUT	GET /static/js/6269.519fb7d7.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:25 UTC	2108	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1415 Connection: close Date: Sun, 21 Apr 2024 20:41:33 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "13020de5b6b942f4719eb09b520cc483" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d25b5a4b536886c15089faae019d94da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YBPbCyc1gvRN434e_KlV8bYIKjQfy96-OCAFdFDX9zXfkfa3KhzgDg== Age: 149033 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:25 UTC	1415	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 32 36 39 2e 35 31 39 66 62 37 64 37 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 32 36 39 2c 34 37 36 35 5d 2c 7b 36 36 33 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 6e 28 33 31 37 32 35 29 3b 76 61 72 20 74 3d 6e 28 39 33 32 36 34 29 2c 6f 3d 36 30 31 30 33 3b 69 66 28 72 2e 46 Data Ascii: /! For license information please see 6269.519fb7d7.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6269,4765],{66374:function(e,r,n){n(31725);var t=n(93264),o=60103;if(r.F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49775	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:25 UTC	600	OUT	GET /static/js/1239.da3f3802.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:26 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11138 Connection: close Date: Tue, 23 Apr 2024 14:05:27 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "6a6e40f6d8135407350fbbacfcdc1b80" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d25b5a4b536886c15089faae019d94da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wLzUrQP1ua3NH0sa71rJy2Sy2OV-PcfNvXwTLGac3Lf2nEO9vIIwgQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:26 UTC	11138	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 32 33 39 5d 2c 7b 34 31 32 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 42 72 6f 77 73 65 72 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 7d 2c 48 61 73 68 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 2c 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 2c 4d 65 6d 6f 72 79 52 6f 75 74 65 72 3a Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1239],{41239:function(e,t,n){n.r(t),n.d(t,{BrowserRouter:function(){return q},HashRouter:function(){return z},Link:function(){return G},MemoryRouter:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49776	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:25 UTC	600	OUT	GET /static/js/1965.d562d08f.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:27 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 68227 Connection: close Date: Tue, 23 Apr 2024 14:05:28 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "f94075c598d765237b83ccf1de5a07e0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a101821db99e79c2da5df8cbe85ee476.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6GFzPNyS5j3yhjo0lPrQkJjeaWYZvIQ3z_6eyoGIvg2-47-b0dCkJQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:27 UTC	1496	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 36 35 5d 2c 7b 39 34 31 38 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 3c 30 3f 22 2d 22 3a 22 22 2c 72 3d 4d 61 74 68 2e 61 62 73 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 2e 6c 65 6e 67 74 68 3c 65 3b 29 72 3d 22 30 22 2b 72 3b 72 65 74 75 72 6e 20 6e 2b 72 7d 6e 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1965],{94189:function(t,e,n){function r(t,e){for(var n=t<0?"-":"",r=Math.abs(t).toString();r.length<e;)r="0"+r;return n+r}n.d(e,{Z:function(){return
2024-04-23 14:05:27 UTC	16384	IN	Data Raw: 3d 61 7d 2c 37 33 34 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 50 22 3a 72 65 74 75 72 6e 20 65 2e 64 61 74 65 28 7b 77 69 64 74 68 3a 22 73 68 6f 72 74 22 7d 29 3b 63 61 73 65 22 50 50 22 3a 72 65 74 75 72 6e 20 65 2e 64 61 74 65 28 7b 77 69 64 74 68 3a 22 6d 65 64 69 75 6d 22 7d 29 3b 63 61 73 65 22 50 50 50 22 3a 72 65 74 75 72 6e 20 65 2e 64 61 74 65 28 7b 77 69 64 74 68 3a 22 6c 6f 6e 67 22 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 2e 64 61 74 65 28 7b 77 69 64 74 68 3a 22 66 75 6c 6c 22 7d 29 7d 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 70 22 3a 72 65 74 75 72 6e 20 Data Ascii: =a},73462:function(t,e){var n=function(t,e){switch(t){case"P":return e.date({width:"short"});case"PP":return e.date({width:"medium"});case"PPP":return e.date({width:"long"});default:return e.date({width:"full"})}},r=function(t,e){switch(t){case"p":return
2024-04-23 14:05:27 UTC	1024	IN	Data Raw: 28 30 2c 31 29 2c 65 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 3b 76 61 72 20 72 3d 6e 2d 65 2e 67 65 74 54 69 6d 65 28 29 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2f 38 36 34 65 35 29 2b 31 7d 28 74 29 3b 72 65 74 75 72 6e 22 44 6f 22 3d 3d 3d 65 3f 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 72 2c 7b 75 6e 69 74 3a 22 64 61 79 4f 66 59 65 61 72 22 7d 29 3a 28 30 2c 64 2e 5a 29 28 72 2c 65 2e 6c 65 6e 67 74 68 29 7d 2c 45 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 55 54 43 44 61 79 28 29 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 45 22 3a 63 61 73 65 22 45 45 22 3a 63 61 73 65 22 45 45 45 22 3a 72 65 74 75 72 6e 20 6e 2e 64 61 79 28 72 2c 7b 77 69 64 74 68 3a 22 61 Data Ascii: (0,1),e.setUTCHours(0,0,0,0);var r=n-e.getTime();return Math.floor(r/864e5)+1}(t);return"Do"===e?n.ordinalNumber(r,{unit:"dayOfYear"}):(0,d.Z)(r,e.length)},E:function(t,e,n){var r=t.getUTCDay();switch(e){case"E":case"EE":case"EEE":return n.day(r,{width:"a
2024-04-23 14:05:27 UTC	16384	IN	Data Raw: 67 28 69 29 3b 63 61 73 65 22 63 63 22 3a 72 65 74 75 72 6e 28 30 2c 64 2e 5a 29 28 69 2c 65 2e 6c 65 6e 67 74 68 29 3b 63 61 73 65 22 63 6f 22 3a 72 65 74 75 72 6e 20 6e 2e 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 28 69 2c 7b 75 6e 69 74 3a 22 64 61 79 22 7d 29 3b 63 61 73 65 22 63 63 63 22 3a 72 65 74 75 72 6e 20 6e 2e 64 61 79 28 61 2c 7b 77 69 64 74 68 3a 22 61 62 62 72 65 76 69 61 74 65 64 22 2c 63 6f 6e 74 65 78 74 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 7d 29 3b 63 61 73 65 22 63 63 63 63 63 22 3a 72 65 74 75 72 6e 20 6e 2e 64 61 79 28 61 2c 7b 77 69 64 74 68 3a 22 6e 61 72 72 6f 77 22 2c 63 6f 6e 74 65 78 74 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 7d 29 3b 63 61 73 65 22 63 63 63 63 63 63 22 3a 72 65 74 75 72 6e 20 6e 2e 64 61 79 28 61 2c 7b 77 69 64 Data Ascii: g(i);case"cc":return(0,d.Z)(i,e.length);case"co":return n.ordinalNumber(i,{unit:"day"});case"ccc":return n.day(a,{width:"abbreviated",context:"standalone"});case"ccccc":return n.day(a,{width:"narrow",context:"standalone"});case"cccccc":return n.day(a,{wid
2024-04-23 14:05:27 UTC	1024	IN	Data Raw: 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 2c 28 30 2c 75 74 2e 5a 29 28 74 2c 72 29 7d 76 61 72 20 6f 3d 22 65 72 61 22 69 6e 20 65 26 26 31 21 3d 3d 65 2e 65 72 61 3f 31 2d 6e 2e 79 65 61 72 3a 6e 2e 79 65 61 72 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 6f 2c 30 2c 72 2e 66 69 72 73 74 57 65 65 6b 43 6f 6e 74 61 69 6e 73 44 61 74 65 29 2c 74 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 2c 28 30 2c 75 74 2e 5a 29 28 74 2c 72 29 7d 7d 5d 29 2c 6e 7d 28 6b 29 2c 6c 74 3d 6e 28 38 39 38 35 33 29 2c 73 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 68 2e 5a 29 28 6e 2c 74 29 3b 76 61 72 20 65 3d 28 30 2c 77 2e 5a 29 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 3b Data Ascii: .setUTCHours(0,0,0,0),(0,ut.Z)(t,r)}var o="era"in e&&1!==e.era?1-n.year:n.year;return t.setUTCFullYear(o,0,r.firstWeekContainsDate),t.setUTCHours(0,0,0,0),(0,ut.Z)(t,r)}}]),n}(k),lt=n(89853),st=function(t){(0,h.Z)(n,t);var e=(0,w.Z)(n);function n(){var t;
2024-04-23 14:05:27 UTC	16384	IN	Data Raw: 22 2c 22 49 22 2c 22 69 22 2c 22 65 22 2c 22 63 22 2c 22 74 22 2c 22 54 22 5d 29 2c 74 7d 72 65 74 75 72 6e 28 30 2c 6d 2e 5a 29 28 6e 2c 5b 7b 6b 65 79 3a 22 70 61 72 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 74 28 22 75 22 3d 3d 3d 65 3f 34 3a 65 2e 6c 65 6e 67 74 68 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 73 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 6e 2c 30 2c 31 29 2c 74 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 2c 74 7d 7d 5d 29 2c 6e 7d 28 6b 29 2c 66 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 68 2e 5a 29 28 6e 2c 74 29 3b 76 61 72 20 65 3d 28 30 2c 77 2e 5a 29 28 Data Ascii: ","I","i","e","c","t","T"]),t}return(0,m.Z)(n,[{key:"parse",value:function(t,e){return et("u"===e?4:e.length,t)}},{key:"set",value:function(t,e,n){return t.setUTCFullYear(n,0,1),t.setUTCHours(0,0,0,0),t}}]),n}(k),ft=function(t){(0,h.Z)(n,t);var e=(0,w.Z)(
2024-04-23 14:05:27 UTC	15531	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 72 65 74 75 72 6e 20 74 3d 65 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 65 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 61 29 29 2c 28 30 2c 79 2e 5a 29 28 28 30 2c 5a 2e 5a 29 28 74 29 2c 22 70 72 69 6f 72 69 74 79 22 2c 37 30 29 2c 28 30 2c 79 2e 5a 29 28 28 30 2c 5a 2e 5a 29 28 74 29 2c 22 69 6e 63 6f 6d 70 61 74 69 62 6c 65 54 6f 6b 65 6e 73 22 2c 5b 22 61 22 2c 22 62 22 2c 22 68 22 2c 22 4b 22 2c 22 6b 22 2c 22 74 22 2c 22 54 22 5d 29 2c 74 7d 72 65 74 75 72 6e 28 30 2c 6d 2e 5a 29 28 6e 2c 5b 7b 6b 65 79 3a 22 70 61 72 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 48 22 3a 72 65 74 75 72 6e 20 4b 28 59 2c 74 29 3b 63 61 73 65 22 48 6f 22 3a Data Ascii: arguments[i];return t=e.call.apply(e,[this].concat(a)),(0,y.Z)((0,Z.Z)(t),"priority",70),(0,y.Z)((0,Z.Z)(t),"incompatibleTokens",["a","b","h","K","k","t","T"]),t}return(0,m.Z)(n,[{key:"parse",value:function(t,e,n){switch(e){case"H":return K(Y,t);case"Ho":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49777	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:26 UTC	600	OUT	GET /static/js/2632.a844fabe.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:27 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6007 Connection: close Date: Tue, 23 Apr 2024 14:05:28 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "571137e364c538f567b276e0726a4702" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9f7d0905153f4a5038c2d204546afd48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Klsd_OZ2VQNLTJUWFQNaa-JyVFiqbiPE7N7lG1hh5kSsWuWCVHimVQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:27 UTC	6007	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 33 32 5d 2c 7b 31 32 36 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 74 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 33 39 30 34 30 29 2c 69 3d 6e 28 33 37 37 33 30 29 2c 75 3d 6e 28 36 31 35 31 38 29 2c 61 3d 6e 28 35 32 30 37 34 29 2c 6f 3d 6e 28 39 30 30 32 30 29 2c 73 3d 6e 28 31 31 30 34 29 2c 63 3d 6e 28 37 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[2632],{12632:function(t,e,n){n.r(e),n.d(e,{default:function(){return ut}});var r=n(39040),i=n(37730),u=n(61518),a=n(52074),o=n(90020),s=n(1104),c=n(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49778	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:26 UTC	600	OUT	GET /static/js/1807.3e4cf805.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:27 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 64322 Connection: close Date: Tue, 23 Apr 2024 14:05:28 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "27cfdb9446cc6ca8077df3bf6ac01926" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5f06e2c87fa9fb6c547f5739f3753dda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ud2h_4KsxH4ouBfNi-8em9eV-ewYJtVHbPI1YagOazidzlXwBEW21g== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:27 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 30 37 5d 2c 7b 36 31 38 30 37 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 7b 44 45 42 55 47 3a 21 31 2c 4c 49 42 5f 56 45 52 53 49 4f 4e 3a 22 32 2e 34 37 2e 30 22 7d 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 7b 76 61 72 20 69 3d 7b 68 6f 73 74 6e 61 6d 65 3a 22 22 7d 3b 74 3d 7b 6e 61 76 69 67 61 74 6f 72 3a 7b 75 73 65 72 41 67 65 6e 74 3a 22 22 7d 2c 64 6f 63 75 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1807],{61807:function(e){var t,r={DEBUG:!1,LIB_VERSION:"2.47.0"};if("undefined"===typeof window){var i={hostname:""};t={navigator:{userAgent:""},docu
2024-04-23 14:05:27 UTC	16384	IN	Data Raw: 65 29 3f 22 4d 61 63 20 4f 53 20 58 22 3a 2f 4c 69 6e 75 78 2f 2e 74 65 73 74 28 65 29 3f 22 4c 69 6e 75 78 22 3a 2f 43 72 4f 53 2f 2e 74 65 73 74 28 65 29 3f 22 43 68 72 6f 6d 65 20 4f 53 22 3a 22 22 7d 2c 64 65 76 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 2f 69 2e 74 65 73 74 28 65 29 7c 7c 2f 57 50 44 65 73 6b 74 6f 70 2f 2e 74 65 73 74 28 65 29 3f 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 3a 2f 69 50 61 64 2f 2e 74 65 73 74 28 65 29 3f 22 69 50 61 64 22 3a 2f 69 50 6f 64 2f 2e 74 65 73 74 28 65 29 3f 22 69 50 6f 64 20 54 6f 75 63 68 22 3a 2f 69 50 68 6f 6e 65 2f 2e 74 65 73 74 28 65 29 3f 22 69 50 68 6f 6e 65 22 3a 2f 28 42 6c 61 63 6b 42 65 72 72 79 7c 50 6c 61 79 42 6f 6f 6b 7c 42 Data Ascii: e)?"Mac OS X":/Linux/.test(e)?"Linux":/CrOS/.test(e)?"Chrome OS":""},device:function(e){return/Windows Phone/i.test(e)\|\|/WPDesktop/.test(e)?"Windows Phone":/iPad/.test(e)?"iPad":/iPod/.test(e)?"iPod Touch":/iPhone/.test(e)?"iPhone":/(BlackBerry\|PlayBook\|B
2024-04-23 14:05:27 UTC	1496	IN	Data Raw: 6e 69 6f 6e 3d 6d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 69 6f 6e 2c 6d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 65 74 3d 6d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 65 74 2c 6d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 6d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 76 61 72 20 79 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 78 2e 65 78 74 65 6e 64 28 79 65 2e 70 72 6f 74 6f 74 79 70 65 2c 67 65 29 2c 79 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 6d 69 78 70 61 6e 65 6c 3d 65 7d 2c 79 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 74 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 73 65 74 5f 61 63 Data Ascii: nion=me.prototype.union,me.prototype.unset=me.prototype.unset,me.prototype.toString=me.prototype.toString;var ye=function(){};x.extend(ye.prototype,ge),ye.prototype._init=function(e){this._mixpanel=e},ye.prototype.set=te((function(e,t,r){var i=this.set_ac
2024-04-23 14:05:27 UTC	16384	IN	Data Raw: 72 67 65 3d 74 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 78 2e 69 73 4e 75 6d 62 65 72 28 65 29 7c 7c 28 65 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 21 69 73 4e 61 4e 28 65 29 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 61 70 70 65 6e 64 28 22 24 74 72 61 6e 73 61 63 74 69 6f 6e 73 22 2c 78 2e 65 78 74 65 6e 64 28 7b 24 61 6d 6f 75 6e 74 3a 65 7d 2c 74 29 2c 72 29 3b 77 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 70 61 73 73 65 64 20 74 6f 20 6d 69 78 70 61 6e 65 6c 2e 70 65 6f 70 6c 65 2e 74 72 61 63 6b 5f 63 68 61 72 67 65 20 2d 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 22 29 7d 29 29 2c 79 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 5f 63 68 61 72 67 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: rge=te((function(e,t,r){if(x.isNumber(e)\|\|(e=parseFloat(e),!isNaN(e)))return this.append("$transactions",x.extend({$amount:e},t),r);w.error("Invalid value passed to mixpanel.people.track_charge - must be a number")})),ye.prototype.clear_charges=function(e
2024-04-23 14:05:27 UTC	13674	IN	Data Raw: 62 61 74 63 68 65 72 73 5f 69 6e 69 74 69 61 6c 69 7a 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 72 65 71 75 65 73 74 5f 62 61 74 63 68 65 72 73 2e 65 76 65 6e 74 73 7d 2c 4c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 5f 62 61 74 63 68 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 5f 63 6f 6e 66 69 67 28 22 74 6f 6b 65 6e 22 29 3b 69 66 28 21 74 68 69 73 2e 61 72 65 5f 62 61 74 63 68 65 72 73 5f 69 6e 69 74 69 61 6c 69 7a 65 64 28 29 29 7b 76 61 72 20 74 3d 78 2e 62 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 47 28 22 5f 5f 6d 70 71 5f 22 2b 65 2b 74 2e 71 75 65 75 65 5f 73 75 66 66 69 78 2c 7b 6c 69 62 43 6f 6e 66 69 67 3a 74 68 69 Data Ascii: batchers_initialized=function(){return!!this.request_batchers.events},Le.prototype.init_batchers=function(){var e=this.get_config("token");if(!this.are_batchers_initialized()){var t=x.bind((function(t){return new G("__mpq_"+e+t.queue_suffix,{libConfig:thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49779	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:26 UTC	600	OUT	GET /static/js/9356.2538253e.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:27 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 44029 Connection: close Date: Tue, 23 Apr 2024 14:05:28 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "8a0bdac83d726678eceb6f17e4a12fe5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2b98ef877819781cd86c369994bd8ba6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dIx9hsBC2JELEcmOYhgcm6sPWF_YMkP7AUs2xrv3Mg8yVvAgBCxuLQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:27 UTC	7639	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 35 36 5d 2c 7b 32 39 33 35 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 65 2e 72 28 74 29 2c 65 2e 64 28 74 2c 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 61 64 64 42 75 73 69 6e 65 73 73 44 61 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 61 64 64 44 61 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 5a 7d 2c 61 64 64 48 6f 75 72 73 3a 66 75 6e 63 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9356],{29356:function(n,t,e){e.r(t),e.d(t,{add:function(){return c},addBusinessDays:function(){return v},addDays:function(){return u.Z},addHours:func
2024-04-23 14:05:27 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 78 2e 59 32 7d 2c 73 65 63 6f 6e 64 73 49 6e 57 65 65 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 2e 76 72 7d 2c 73 65 63 6f 6e 64 73 49 6e 59 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 2e 72 7a 7d 2c 73 65 63 6f 6e 64 73 54 6f 48 6f 75 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 72 7d 2c 73 65 63 6f 6e 64 73 54 6f 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 72 7d 2c 73 65 63 6f 6e 64 73 54 6f 4d 69 6e 75 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 72 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 72 7d 2c 73 65 74 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: {return x.Y2},secondsInWeek:function(){return x.vr},secondsInYear:function(){return x.rz},secondsToHours:function(){return pr},secondsToMilliseconds:function(){return Sr},secondsToMinutes:function(){return kr},set:function(){return Ir},setDate:function(){
2024-04-23 14:05:28 UTC	11424	IN	Data Raw: 72 65 71 75 69 72 65 64 2c 20 62 75 74 20 6f 6e 6c 79 20 22 2e 63 6f 6e 63 61 74 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 22 20 70 72 65 73 65 6e 74 22 29 29 3b 76 61 72 20 72 3d 28 30 2c 61 2e 5a 29 28 6e 29 3b 69 66 28 21 28 30 2c 51 2e 5a 29 28 72 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 65 20 76 61 6c 75 65 22 29 3b 76 61 72 20 75 3d 4e 75 6d 62 65 72 28 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 66 72 61 63 74 69 6f 6e 44 69 67 69 74 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 30 29 3b 69 66 28 21 28 75 3e 3d 30 26 26 75 3c 3d 33 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f Data Ascii: required, but only ".concat(arguments.length," present"));var r=(0,a.Z)(n);if(!(0,Q.Z)(r))throw new RangeError("Invalid time value");var u=Number(null!==(e=null===t\|\|void 0===t?void 0:t.fractionDigits)&&void 0!==e?e:0);if(!(u>=0&&u<=3))throw new RangeErro
2024-04-23 14:05:28 UTC	8582	IN	Data Raw: 36 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 77 65 65 6b 53 74 61 72 74 73 4f 6e 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 36 22 29 3b 76 61 72 20 68 3d 28 30 2c 61 2e 5a 29 28 6e 29 2c 6d 3d 68 2e 67 65 74 44 61 79 28 29 2c 67 3d 36 2b 28 6d 3c 64 3f 2d 37 3a 30 29 2d 28 6d 2d 64 29 3b 72 65 74 75 72 6e 20 68 2e 73 65 74 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 2c 68 2e 73 65 74 44 61 74 65 28 68 2e 67 65 74 44 61 74 65 28 29 2b 67 29 2c 68 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 6e 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 5a 29 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 2c 52 65 28 6e 2c 7b 77 65 65 6b 53 74 61 72 74 73 4f 6e 3a 31 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 6e 29 7b 28 30 2c 69 2e 5a Data Ascii: 6))throw new RangeError("weekStartsOn must be between 0 and 6");var h=(0,a.Z)(n),m=h.getDay(),g=6+(m<d?-7:0)-(m-d);return h.setHours(0,0,0,0),h.setDate(h.getDate()+g),h}function xe(n){return(0,i.Z)(1,arguments),Re(n,{weekStartsOn:1})}function Ce(n){(0,i.Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49780	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:27 UTC	600	OUT	GET /static/js/8267.061962da.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:28 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12174 Connection: close Date: Tue, 23 Apr 2024 14:05:29 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "c6003904d43881b45ec98d9ebe91c817" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 69549fdd08f6edbeec8f40a9473365d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CZAhYwPpCvyLovxFwNwmZf8ro_dHQZ-m7pZ7EuhTL3nfWkh-e1BY2A== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:28 UTC	472	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 32 36 37 5d 2c 7b 36 36 38 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 65 3d 6e 2e 77 69 64 74 68 3f 53 74 72 69 6e 67 28 6e 2e 77 69 64 74 68 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8267],{66840:function(t,n,e){function r(t){return function(){var n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},e=n.width?String(n.width
2024-04-23 14:05:28 UTC	11702	IN	Data Raw: 67 28 65 2e 63 6f 6e 74 65 78 74 29 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 29 26 26 74 2e 66 6f 72 6d 61 74 74 69 6e 67 56 61 6c 75 65 73 29 7b 76 61 72 20 6f 3d 74 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 74 69 6e 67 57 69 64 74 68 7c 7c 74 2e 64 65 66 61 75 6c 74 57 69 64 74 68 2c 61 3d 6e 75 6c 6c 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 77 69 64 74 68 3f 53 74 72 69 6e 67 28 65 2e 77 69 64 74 68 29 3a 6f 3b 72 3d 74 2e 66 6f 72 6d 61 74 74 69 6e 67 56 61 6c 75 65 73 5b 61 5d 7c 7c 74 2e 66 6f 72 6d 61 74 74 69 6e 67 56 61 6c 75 65 73 5b 6f 5d 7d 65 6c 73 65 7b 76 61 72 20 69 3d 74 2e 64 65 66 61 75 6c 74 57 69 64 74 68 2c 75 3d 6e 75 6c 6c 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 77 69 64 74 68 3f 53 74 72 69 6e Data Ascii: g(e.context):"standalone")&&t.formattingValues){var o=t.defaultFormattingWidth\|\|t.defaultWidth,a=null!==e&&void 0!==e&&e.width?String(e.width):o;r=t.formattingValues[a]\|\|t.formattingValues[o]}else{var i=t.defaultWidth,u=null!==e&&void 0!==e&&e.width?Strin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49781	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:27 UTC	599	OUT	GET /static/js/404.7a421d50.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:28 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3804 Connection: close Date: Tue, 23 Apr 2024 14:05:29 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "4b3476bfcc034b39fa7392a72b21fc73" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08829bb06bccf0ab66e6bd5eaa5fcbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: v9Vo1uMRETX4kXVgQR4Zb2_9SCU5bABmp2nDh7izGupvXhwXwHhGOQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:28 UTC	472	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 30 34 2e 37 61 34 32 31 64 35 30 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 34 2c 36 34 34 39 5d 2c 7b 34 30 34 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 74 29 7b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 45 72 72 6f 72 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: /! For license information please see 404.7a421d50.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[404,6449],{404:function(r,n,t){t.r(n),t.d(n,{ErrorLink:function(){return
2024-04-23 14:05:28 UTC	3332	IN	Data Raw: 70 68 51 4c 45 72 72 6f 72 73 3a 6f 2e 65 72 72 6f 72 73 2c 72 65 73 70 6f 6e 73 65 3a 6f 2c 6f 70 65 72 61 74 69 6f 6e 3a 6e 2c 66 6f 72 77 61 72 64 3a 74 7d 29 29 3f 69 3d 75 2e 73 75 62 73 63 72 69 62 65 28 7b 6e 65 78 74 3a 65 2e 6e 65 78 74 2e 62 69 6e 64 28 65 29 2c 65 72 72 6f 72 3a 65 2e 65 72 72 6f 72 2e 62 69 6e 64 28 65 29 2c 63 6f 6d 70 6c 65 74 65 3a 65 2e 63 6f 6d 70 6c 65 74 65 2e 62 69 6e 64 28 65 29 7d 29 3a 65 2e 6e 65 78 74 28 6f 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 28 75 3d 72 28 7b 6f 70 65 72 61 74 69 6f 6e 3a 6e 2c 6e 65 74 77 6f 72 6b 45 72 72 6f 72 3a 6f 2c 67 72 61 70 68 51 4c 45 72 72 6f 72 73 3a 6f 26 26 6f 2e 72 65 73 75 6c 74 26 26 6f 2e 72 65 73 75 6c 74 2e 65 72 72 6f 72 73 2c 66 6f 72 77 61 72 64 Data Ascii: phQLErrors:o.errors,response:o,operation:n,forward:t}))?i=u.subscribe({next:e.next.bind(e),error:e.error.bind(e),complete:e.complete.bind(e)}):e.next(o)},error:function(o){(u=r({operation:n,networkError:o,graphQLErrors:o&&o.result&&o.result.errors,forward

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49782	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:27 UTC	600	OUT	GET /static/js/2686.fc673267.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:28 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11131 Connection: close Date: Tue, 23 Apr 2024 14:05:29 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "190885154bdcd7bafa56e38b9e1d630a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 23f80b153c334c9917e485cd3fc5f1d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UqKMNrLysrl5si21wODEupNp7m6Awj7C1GsciVzUGHbfi47CHnanZQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:28 UTC	9594	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 36 38 36 2e 66 63 36 37 33 32 36 37 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 38 36 5d 2c 7b 31 34 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 3d 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 73 65 74 54 69 6d 65 6f Data Ascii: /! For license information please see 2686.fc673267.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[2686],{1426:function(e){var t,r,n=e.exports={};function o(){throw new Error("setTimeo
2024-04-23 14:05:28 UTC	1537	IN	Data Raw: 74 2c 46 2e 46 6f 72 77 61 72 64 52 65 66 2c 46 2e 46 72 61 67 6d 65 6e 74 2c 46 2e 4c 61 7a 79 2c 46 2e 4d 65 6d 6f 2c 46 2e 50 6f 72 74 61 6c 2c 46 2e 50 72 6f 66 69 6c 65 72 2c 46 2e 53 74 72 69 63 74 4d 6f 64 65 2c 46 2e 53 75 73 70 65 6e 73 65 2c 46 2e 69 73 41 73 79 6e 63 4d 6f 64 65 2c 46 2e 69 73 43 6f 6e 63 75 72 72 65 6e 74 4d 6f 64 65 2c 46 2e 69 73 43 6f 6e 74 65 78 74 43 6f 6e 73 75 6d 65 72 2c 46 2e 69 73 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 2c 46 2e 69 73 45 6c 65 6d 65 6e 74 2c 46 2e 69 73 46 6f 72 77 61 72 64 52 65 66 2c 46 2e 69 73 46 72 61 67 6d 65 6e 74 2c 46 2e 69 73 4c 61 7a 79 2c 46 2e 69 73 4d 65 6d 6f 2c 46 2e 69 73 50 6f 72 74 61 6c 2c 46 2e 69 73 50 72 6f 66 69 6c 65 72 2c 46 2e 69 73 53 74 72 69 63 74 4d 6f 64 65 2c 46 Data Ascii: t,F.ForwardRef,F.Fragment,F.Lazy,F.Memo,F.Portal,F.Profiler,F.StrictMode,F.Suspense,F.isAsyncMode,F.isConcurrentMode,F.isContextConsumer,F.isContextProvider,F.isElement,F.isForwardRef,F.isFragment,F.isLazy,F.isMemo,F.isPortal,F.isProfiler,F.isStrictMode,F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49783	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:28 UTC	600	OUT	GET /static/js/3438.dccc51d0.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:29 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10601 Connection: close Date: Tue, 23 Apr 2024 14:05:30 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "4eb79cdef3d30eb1ea6e26c837ef237b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f191d757f16dd6002ae3a0c09389b68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZBas1uvgr6tcBMapWu6bxcarIWEKs-R75Kdc3shytfpqKA-M785chQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:29 UTC	10601	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 33 34 33 38 2e 64 63 63 63 35 31 64 30 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 33 38 2c 37 35 37 31 5d 2c 7b 34 33 34 33 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 63 68 65 63 6b 46 65 74 63 68 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: /! For license information please see 3438.dccc51d0.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3438,7571],{43438:function(n,e,t){t.r(e),t.d(e,{checkFetcher:function(){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49784	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:28 UTC	600	OUT	GET /static/js/6022.d967874c.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:29 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5163 Connection: close Date: Tue, 23 Apr 2024 14:05:30 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "203d79b1325ab9a0e5d9269702c3eafa" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c33ccd454bf1796b79f9f9af880e2882.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: MWzft5YLCo2M0lScCXOv1bP28qkHpS_fy6SSEm8v8PEVQEQQeGPBtA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:29 UTC	5163	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 30 32 32 2e 64 39 36 37 38 37 34 63 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 30 32 32 2c 37 32 35 30 5d 2c 7b 33 36 30 32 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 48 74 74 70 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: /! For license information please see 6022.d967874c.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6022,7250],{36022:function(e,t,n){n.r(t),n.d(t,{HttpLink:function(){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49785	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:28 UTC	600	OUT	GET /static/js/4644.9e961433.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:29 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23839 Connection: close Date: Tue, 23 Apr 2024 14:05:30 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "ce93b89508b64b4574a1745ce8d7a012" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7d22f981b2e0ccd3fbaa2d588cb84a48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4SPD-O-xAvUhE4zGwNuoIdeUX1yKc8aA5ucLhtphHsWIsHRW4Bfzng== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:29 UTC	8448	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 34 34 5d 2c 7b 34 34 36 34 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 2e 72 28 65 29 2c 72 2e 64 28 65 2c 7b 48 65 75 72 69 73 74 69 63 46 72 61 67 6d 65 6e 74 4d 61 74 63 68 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 2c 49 6e 4d 65 6d 6f 72 79 43 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 74 7d 2c 49 6e 74 72 6f 73 70 65 63 74 69 6f 6e 46 72 61 67 6d 65 6e 74 4d 61 74 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4644],{44644:function(t,e,r){r.r(e),r.d(e,{HeuristicFragmentMatcher:function(){return P},InMemoryCache:function(){return dt},IntrospectionFragmentMat
2024-04-23 14:05:29 UTC	15391	IN	Data Raw: 29 7b 76 61 72 20 74 3d 69 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 2c 65 3d 76 6f 69 64 20 30 21 3d 3d 74 26 26 72 2e 67 65 74 28 74 29 3b 65 26 26 65 2e 73 65 74 44 69 72 74 79 28 29 7d 2c 61 7d 76 61 72 20 4b 3d 72 28 33 34 31 30 35 29 2c 42 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 76 61 72 20 74 3d 21 42 3b 72 65 74 75 72 6e 28 30 2c 69 2e 59 38 29 28 29 7c 7c 28 42 3d 21 30 29 2c 74 7d 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 73 75 72 65 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 Data Ascii: ){var t=i.apply(null,arguments),e=void 0!==t&&r.get(t);e&&e.setDirty()},a}var K=r(34105),B=!1;function G(){var t=!B;return(0,i.Y8)()\|\|(B=!0),t}var P=function(){function t(){}return t.prototype.ensureReady=function(){return Promise.resolve()},t.prototype.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49786	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:28 UTC	600	OUT	GET /static/js/9348.cd3170fe.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:28 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 109981 Connection: close Date: Sun, 21 Apr 2024 20:41:42 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "0e7d35d0a16d58bc964331ebde7080c8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9f7d0905153f4a5038c2d204546afd48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: q7m5ATr3HuM_1jWgkR7qUMyA2-LqzQCSwa33CZzAvZRoitdtYLjB4Q== Age: 149027 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:28 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 34 38 5d 2c 7b 39 35 30 30 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 65 7d 7d 29 3b 76 61 72 20 72 3d 74 28 32 39 34 33 39 29 2c 69 3d 74 28 39 33 32 36 34 29 2c 6f 3d 74 2e 6e 28 69 29 2c 61 3d 74 28 31 32 34 30 38 29 2c 75 3d 74 28 33 37 39 32 39 29 2c 73 3d 74 28 36 31 32 31 30 29 2c 63 3d 74 28 32 38 38 34 39 29 2c 6c 3d 74 28 36 33 39 31 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9348],{95002:function(e,n,t){t.d(n,{Z:function(){return Pe}});var r=t(29439),i=t(93264),o=t.n(i),a=t(12408),u=t(37929),s=t(61210),c=t(28849),l=t(6391
2024-04-23 14:05:28 UTC	16384	IN	Data Raw: 65 72 76 69 63 65 28 29 2e 77 61 74 63 68 51 75 65 72 79 28 7b 63 6f 6e 74 65 78 74 3a 7b 68 65 61 64 65 72 73 3a 74 68 69 73 2e 72 65 71 75 65 73 74 53 74 72 61 74 65 67 79 2e 67 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 73 28 29 7d 2c 71 75 65 72 79 3a 65 2e 71 75 65 72 79 2c 76 61 72 69 61 62 6c 65 73 3a 65 2e 76 61 72 69 61 62 6c 65 73 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 65 78 65 63 75 74 65 4d 75 74 61 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 65 41 70 6f 6c 6c 6f 53 65 72 76 69 63 65 28 29 2e 6d 75 74 61 74 65 28 7b 63 6f 6e 74 65 78 74 3a 7b 68 65 61 64 65 72 73 3a 74 68 69 73 2e 72 65 71 75 65 73 74 53 74 72 61 74 65 67 79 2e 67 65 74 52 65 71 75 65 73 74 48 65 61 64 Data Ascii: ervice().watchQuery({context:{headers:this.requestStrategy.getRequestHeaders()},query:e.query,variables:e.variables})}},{key:"executeMutation",value:function(e){return this.createApolloService().mutate({context:{headers:this.requestStrategy.getRequestHead
2024-04-23 14:05:28 UTC	16384	IN	Data Raw: 72 20 65 3d 63 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 29 7d 7d 7d 29 2c 5b 52 5d 29 3b 72 65 74 75 72 6e 28 30 2c 45 2e 6a 73 78 73 29 28 6f 2e 42 6f 78 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 41 70 70 4c 61 79 6f 75 74 22 2c 73 78 3a 28 30 2c 72 2e 5a 29 28 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 4e 3f 22 76 61 72 28 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 22 3a 6d 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 63 6f 6c 75 6d 6e 22 2c 68 65 69 67 68 74 3a 6b 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 73 70 61 63 65 2d 62 65 74 77 65 65 6e 22 2c 6f 76 65 72 66 6c 6f 77 3a 43 3f 76 6f 69 64 20 30 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 64 3f 22 Data Ascii: r e=c();return function(){e()}}}),[R]);return(0,E.jsxs)(o.Box,{className:"AppLayout",sx:(0,r.Z)({background:N?"var(--background-color)":m,display:"flex",flexDirection:"column",height:k,justifyContent:"space-between",overflow:C?void 0:"hidden",position:d?"
2024-04-23 14:05:28 UTC	16384	IN	Data Raw: 72 73 22 2c 4e 55 4d 42 45 52 5f 56 41 4c 55 45 53 3a 22 6e 75 6d 62 65 72 20 76 61 6c 75 65 73 22 2c 4e 55 4d 42 45 52 5f 56 49 53 49 54 53 3a 22 6e 75 6d 62 65 72 20 76 69 73 69 74 73 22 2c 4f 50 54 49 4f 4e 5f 4e 55 4d 42 45 52 3a 22 6f 70 74 69 6f 6e 20 6e 75 6d 62 65 72 22 2c 4f 52 47 41 4e 49 5a 41 54 49 4f 4e 5f 49 44 3a 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 69 64 22 2c 4f 52 47 41 4e 49 5a 41 54 49 4f 4e 5f 4e 41 4d 45 3a 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 6e 61 6d 65 22 2c 50 41 54 48 3a 22 70 61 74 68 22 2c 50 44 46 5f 56 49 45 57 45 52 3a 22 70 64 66 20 76 69 65 77 65 72 22 2c 50 45 52 53 4f 4e 41 4c 3a 22 70 65 72 73 6f 6e 61 6c 22 2c 50 4c 41 4e 5f 46 52 45 51 55 45 4e 43 59 3a 22 70 6c 61 6e 20 66 72 65 71 75 65 6e 63 79 22 2c 50 Data Ascii: rs",NUMBER_VALUES:"number values",NUMBER_VISITS:"number visits",OPTION_NUMBER:"option number",ORGANIZATION_ID:"organization id",ORGANIZATION_NAME:"organization name",PATH:"path",PDF_VIEWER:"pdf viewer",PERSONAL:"personal",PLAN_FREQUENCY:"plan frequency",P
2024-04-23 14:05:28 UTC	16384	IN	Data Raw: 28 34 33 31 34 34 29 2c 6f 3d 74 28 35 36 31 37 31 29 2c 61 3d 74 28 35 38 39 33 34 29 2c 75 3d 74 28 34 39 34 32 29 2c 73 3d 74 28 36 30 31 33 36 29 2c 63 3d 74 28 32 39 33 38 38 29 2c 6c 3d 74 28 34 34 33 32 31 29 2c 64 3d 74 28 38 38 33 34 37 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 73 2e 5a 29 28 74 2c 65 29 3b 76 61 72 20 6e 3d 28 30 2c 63 2e 5a 29 28 74 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 28 30 2c 72 2e 5a 29 28 74 68 69 73 2c 74 29 2c 28 69 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 29 29 2e 63 6f 6e 66 69 67 3d 76 6f 69 64 20 30 2c 69 2e 63 6f 6e 66 69 67 3d 65 2c 69 7d 72 65 74 75 72 6e 28 30 2c 69 2e 5a 29 28 74 2c 5b 7b 6b 65 79 3a 22 67 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 73 22 Data Ascii: (43144),o=t(56171),a=t(58934),u=t(4942),s=t(60136),c=t(29388),l=t(44321),d=t(88347),E=function(e){(0,s.Z)(t,e);var n=(0,c.Z)(t);function t(e){var i;return(0,r.Z)(this,t),(i=n.call(this)).config=void 0,i.config=e,i}return(0,i.Z)(t,[{key:"getRequestHeaders"
2024-04-23 14:05:28 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 52 7d 2c 6d 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 2c 6e 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 6f 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 6f 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 2c 74 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 7a 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 76 61 72 20 72 3d 74 28 32 39 34 33 39 29 2c 69 3d 74 28 37 39 39 38 35 29 2c 6f 3d 74 28 33 31 36 34 31 29 2c 61 3d 74 28 31 33 38 33 30 29 2c 75 3d 74 28 37 34 38 39 30 29 2c 73 3d 74 28 38 35 39 30 38 29 2c 63 3d 22 4d 4d 4d 20 64 64 2c 20 79 79 79 79 22 2c 6c 3d 22 4d 4d 4d 20 64 64 22 Data Ascii: ){return R},mw:function(){return I},n1:function(){return l},o0:function(){return p},oI:function(){return E},tN:function(){return T},zT:function(){return c}});var r=t(29439),i=t(79985),o=t(31641),a=t(13830),u=t(74890),s=t(85908),c="MMM dd, yyyy",l="MMM dd"
2024-04-23 14:05:28 UTC	11677	IN	Data Raw: 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 65 6e 64 69 6e 67 41 63 74 69 6f 6e 73 53 75 62 6a 65 63 74 2e 6e 65 78 74 28 65 29 7d 7d 5d 2c 5b 7b 6b 65 79 3a 22 67 65 74 49 6e 73 74 61 6e 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 73 74 61 6e 63 65 7c 7c 28 65 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 65 29 2c 65 2e 69 6e 73 74 61 6e 63 65 7d 7d 5d 29 2c 65 7d 28 29 3b 61 2e 69 6e 73 74 61 6e 63 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 75 3d 61 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 75 29 2c 6e 2e 5a 3d 75 7d 2c 32 37 30 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 31 35 36 37 31 29 2c 69 3d Data Ascii: ,value:function(e){this.pendingActionsSubject.next(e)}}],[{key:"getInstance",value:function(){return e.instance\|\|(e.instance=new e),e.instance}}]),e}();a.instance=void 0;var u=a.getInstance();Object.freeze(u),n.Z=u},27043:function(e,n,t){var r=t(15671),i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49787	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:28 UTC	600	OUT	GET /static/js/6653.846fd015.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:29 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 181856 Connection: close Date: Tue, 23 Apr 2024 14:05:30 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "730a7b3d4a1efb86b8acb964076f2682" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0df880fcc0eaaf2d73df10e0f110cabe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: F9NKQlP9W80e5R5gvhvYp5wii23en4-Qrru1xDBcWnEFsxXJovWtRA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:29 UTC	7639	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 35 33 5d 2c 7b 34 36 36 35 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 41 73 59 6f 75 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 64 7d 2c 41 73 59 6f 75 54 79 70 65 43 75 73 74 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 64 7d 2c 44 49 47 49 54 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 2c 44 49 47 49 54 5f 50 4c Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6653],{46653:function(t,e,n){n.r(e),n.d(e,{AsYouType:function(){return ad},AsYouTypeCustom:function(){return id},DIGITS:function(){return z},DIGIT_PL
2024-04-23 14:05:30 UTC	16384	IN	Data Raw: 34 36 39 5d 7c 33 5b 32 35 37 38 5d 7c 35 5b 34 2d 38 5d 7c 37 5b 33 36 2d 38 5d 7c 38 5b 35 2d 38 5d 29 29 29 7c 39 32 28 3f 3a 32 5b 32 34 2d 39 5d 7c 33 5b 31 2d 35 39 5d 7c 34 37 29 22 2c 22 39 28 3f 3a 32 28 3f 3a 5b 32 33 5d 30 32 7c 36 28 3f 3a 5b 32 35 5d 7c 34 28 3f 3a 36 34 7c 5b 37 38 5d 29 29 7c 39 28 3f 3a 5b 30 32 33 35 36 5d 7c 34 28 3f 3a 5b 30 32 36 38 5d 7c 35 5b 32 2d 36 5d 29 7c 37 32 7c 38 5b 32 33 5d 29 29 7c 33 28 3f 3a 33 5b 32 38 5d 7c 34 28 3f 3a 5b 30 34 36 37 39 5d 7c 33 5b 37 38 5d 7c 35 28 3f 3a 34 5b 34 36 5d 7c 38 29 7c 38 5b 32 33 37 39 5d 29 7c 35 28 3f 3a 5b 32 34 36 37 5d 7c 33 5b 32 33 37 5d 7c 38 5b 32 33 5d 29 7c 37 5b 31 2d 35 37 38 5d 7c 38 28 3f 3a 5b 32 34 36 39 5d 7c 33 5b 32 37 38 5d 7c 35 28 3f 3a 5b 35 36 5d Data Ascii: 469]\|3[2578]\|5[4-8]\|7[36-8]\|8[5-8])))\|92(?:2[24-9]\|3[1-59]\|47)","9(?:2(?:[23]02\|6(?:[25]\|4(?:64\|[78]))\|9(?:[02356]\|4(?:[0268]\|5[2-6])\|72\|8[23]))\|3(?:3[28]\|4(?:[04679]\|3[78]\|5(?:4[46]\|8)\|8[2379])\|5(?:[2467]\|3[237]\|8[23])\|7[1-578]\|8(?:[2469]\|3[278]\|5(?:[56]
2024-04-23 14:05:30 UTC	1024	IN	Data Raw: 38 7d 7c 28 3f 3a 31 7c 5b 33 36 38 5d 5c 5c 64 7c 34 5b 30 2d 38 5d 29 5c 5c 64 7b 33 2c 31 33 7d 7c 34 39 28 3f 3a 5b 30 31 35 5d 5c 5c 64 7c 32 5b 31 33 5d 7c 33 31 7c 5b 34 36 5d 5b 31 2d 38 5d 29 5c 5c 64 7b 31 2c 39 7d 22 2c 5b 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 5d 2c 5b 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 33 2c 31 33 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 33 5b 30 32 5d 7c 34 30 7c 5b 36 38 5d 39 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 2c 31 32 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 32 28 3f 3a 30 5b 31 2d 33 38 39 5d 7c 31 5b 31 32 34 5d 7c 32 5b 31 38 5d 7c 33 5b 31 34 5d 29 7c 33 28 3f 3a 5b 33 35 2d 39 5d 5b 31 35 5d 7c 34 5b 30 31 35 5d 29 Data Ascii: 8}\|(?:1\|[368]\\d\|4[0-8])\\d{3,13}\|49(?:[015]\\d\|2[13]\|31\|[46][1-8])\\d{1,9}",[4,5,6,7,8,9,10,11,12,13,14,15],[["(\\d{2})(\\d{3,13})","$1 $2",["3[02]\|40\|[68]9"],"0$1"],["(\\d{3})(\\d{3,12})","$1 $2",["2(?:0[1-389]\|1[124]\|2[18]\|3[14])\|3(?:[35-9][15]\|4[015])
2024-04-23 14:05:30 UTC	16384	IN	Data Raw: 22 2c 22 24 31 20 24 32 22 2c 5b 22 31 33 38 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 35 7d 29 28 5c 5c 64 7b 32 2c 31 30 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 33 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 35 2c 31 31 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 31 38 31 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 29 28 5c 5c 64 7b 34 2c 31 30 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 31 28 3f 3a 33 7c 38 30 29 7c 39 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 37 2c 38 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 31 5b 36 37 5d 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 37 2c 31 32 7d 29 22 2c 22 24 31 20 24 32 22 2c Data Ascii: ","$1 $2",["138"],"0$1"],["(\\d{5})(\\d{2,10})","$1 $2",["3"],"0$1"],["(\\d{3})(\\d{5,11})","$1 $2",["181"],"0$1"],["(\\d{3})(\\d)(\\d{4,10})","$1 $2 $3",["1(?:3\|80)\|9"],"0$1"],["(\\d{3})(\\d{7,8})","$1 $2",["1[67]"],"0$1"],["(\\d{3})(\\d{7,12})","$1 $2",
2024-04-23 14:05:30 UTC	1024	IN	Data Raw: 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 2c 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 39 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 34 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 5b 31 2d 38 5d 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 49 53 3a 5b 22 33 35 34 22 2c 22 30 30 7c 31 28 3f 3a 30 28 3f 3a 30 31 7c 5b 31 32 5d 30 29 7c 31 30 30 29 22 2c 22 28 3f 3a 33 38 5c 5c 64 7c 5b 34 2d 39 5d 29 5c 5c 64 7b 36 7d 22 2c 5b 37 2c 39 5d 2c 5b 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 5b 34 2d 39 5d 22 5d 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 Data Ascii: ],"0$1"],["(\\d{3})(\\d{3})(\\d{3,4})","$1 $2 $3",["9"],"0$1"],["(\\d{2})(\\d{4})(\\d{4})","$1 $2 $3",["[1-8]"],"0$1"]],"0"],IS:["354","00\|1(?:0(?:01\|[12]0)\|100)","(?:38\\d\|[4-9])\\d{6}",[7,9],[["(\\d{3})(\\d{4})","$1 $2",["[4-9]"]],["(\\d{3})(\\d{3})(\\d
2024-04-23 14:05:30 UTC	10992	IN	Data Raw: 5d 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 5b 5b 22 30 36 36 39 5b 30 2d 37 39 5d 5c 5c 64 7b 31 2c 36 7d 7c 30 28 3f 3a 31 28 3f 3a 5b 30 31 35 39 5d 5c 5c 64 7c 5b 32 37 5d 5b 31 2d 35 5d 7c 33 31 7c 34 5b 31 2d 34 5d 7c 36 5b 31 33 35 36 5d 7c 38 5b 32 2d 35 37 5d 29 7c 32 5c 5c 64 5c 5c 64 7c 33 28 3f 3a 5b 30 31 35 39 5d 5c 5c 64 7c 32 5b 31 2d 34 5d 7c 33 5b 31 32 5d 7c 5b 34 38 5d 5b 31 2d 36 5d 7c 36 5b 32 2d 35 39 5d 7c 37 5b 31 2d 37 5d 29 7c 34 28 3f 3a 5b 30 31 35 39 5d 5c 5c 64 7c 5b 32 33 5d 5b 31 2d 39 5d 7c 34 5b 32 34 35 5d 7c 36 5b 31 2d 35 5d 7c 37 5b 31 2d 34 5d 7c 38 31 29 7c 35 28 3f 3a 5b 30 31 35 39 5d 5c 5c 64 7c 32 5b 31 2d 35 5d 7c 33 5b 32 2d 36 5d 7c 34 5b 31 2d 37 39 5d 7c 36 5b 34 2d 36 5d 7c 37 5b 31 2d 35 37 38 5d 7c 38 5b Data Ascii: ],0,0,0,0,0,0,[["0669[0-79]\\d{1,6}\|0(?:1(?:[0159]\\d\|[27][1-5]\|31\|4[1-4]\|6[1356]\|8[2-57])\|2\\d\\d\|3(?:[0159]\\d\|2[1-4]\|3[12]\|[48][1-6]\|6[2-59]\|7[1-7])\|4(?:[0159]\\d\|[23][1-9]\|4[245]\|6[1-5]\|7[1-4]\|81)\|5(?:[0159]\\d\|2[1-5]\|3[2-6]\|4[1-79]\|6[4-6]\|7[1-578]\|8[
2024-04-23 14:05:30 UTC	16384	IN	Data Raw: 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 32 32 7c 33 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 5b 32 35 2d 37 5d 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 4d 45 3a 5b 22 33 38 32 22 2c 22 30 30 22 2c 22 28 3f 3a 32 30 7c 5b 33 2d 37 39 5d 5c 5c 64 29 5c 5c 64 7b 36 7d 7c 38 30 5c 5c 64 7b 36 2c 37 7d 22 2c 5b 38 2c 39 5d 2c 5b 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 2c 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 5b 32 2d 39 5d 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 4d 46 3a 5b 22 35 39 30 22 2c 22 30 30 22 2c 22 35 39 30 5c 5c 64 7b 36 7d 7c 28 3f 3a 36 39 7c 38 Data Ascii: (\\d{3})","$1 $2 $3",["22\|3"],"0$1"],["(\\d{3})(\\d{2})(\\d{3})","$1 $2 $3",["[25-7]"],"0$1"]],"0"],ME:["382","00","(?:20\|[3-79]\\d)\\d{6}\|80\\d{6,7}",[8,9],[["(\\d{2})(\\d{3})(\\d{3,4})","$1 $2 $3",["[2-9]"],"0$1"]],"0"],MF:["590","00","590\\d{6}\|(?:69\|8
2024-04-23 14:05:30 UTC	10514	IN	Data Raw: 7c 5b 33 36 38 39 5d 5c 5c 64 7b 37 7d 22 2c 5b 38 2c 31 30 2c 31 31 5d 2c 5b 5b 22 28 5c 5c 64 7b 34 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 5b 33 36 39 5d 7c 38 28 3f 3a 30 5b 31 2d 36 5d 7c 5b 31 2d 39 5d 29 22 5d 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 38 22 5d 5d 2c 5b 22 28 5c 5c 64 7b 34 7d 29 28 5c 5c 64 7b 34 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 37 22 5d 5d 2c 5b 22 28 5c 5c 64 7b 34 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 31 22 5d 5d 5d 5d 2c 53 48 3a 5b 22 32 39 30 22 2c 22 30 30 22 2c 22 28 3f 3a 5b 32 35 36 5d 5c 5c 64 7c 38 29 5c 5c Data Ascii: \|[3689]\\d{7}",[8,10,11],[["(\\d{4})(\\d{4})","$1 $2",["[369]\|8(?:0[1-6]\|[1-9])"]],["(\\d{3})(\\d{3})(\\d{4})","$1 $2 $3",["8"]],["(\\d{4})(\\d{4})(\\d{3})","$1 $2 $3",["7"]],["(\\d{4})(\\d{3})(\\d{4})","$1 $2 $3",["1"]]]],SH:["290","00","(?:[256]\\d\|8)\\
2024-04-23 14:05:30 UTC	7918	IN	Data Raw: 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 38 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 5a 4d 3a 5b 22 32 36 30 22 2c 22 30 30 22 2c 22 38 30 30 5c 5c 64 7b 36 7d 7c 28 3f 3a 32 31 7c 36 33 7c 5b 37 39 5d 5c 5c 64 29 5c 5c 64 7b 37 7d 22 2c 5b 39 5d 2c 5b 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 5b 32 38 5d 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 37 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 5b 37 39 5d 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 5a 57 3a 5b 22 32 36 33 22 2c 22 30 30 22 2c 22 32 28 3f 3a 5b 30 2d 35 37 2d 39 5d 5c 5c 64 7b 36 2c 38 7d 7c 36 5b 30 2d 32 34 2d 39 5d 5c 5c 64 7b 36 2c 37 7d 29 7c 5b 33 38 5d 5c Data Ascii: )","$1 $2 $3",["8"],"0$1"]],"0"],ZM:["260","00","800\\d{6}\|(?:21\|63\|[79]\\d)\\d{7}",[9],[["(\\d{3})(\\d{3})(\\d{3})","$1 $2 $3",["[28]"],"0$1"],["(\\d{2})(\\d{7})","$1 $2",["[79]"],"0$1"]],"0"],ZW:["263","00","2(?:[0-57-9]\\d{6,8}\|6[0-24-9]\\d{6,7})\|[38]\
2024-04-23 14:05:30 UTC	16384	IN	Data Raw: 7d 72 65 74 75 72 6e 20 77 28 74 2c 5b 7b 6b 65 79 3a 22 67 65 74 43 6f 75 6e 74 72 69 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 6d 65 74 61 64 61 74 61 2e 63 6f 75 6e 74 72 69 65 73 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 30 30 31 22 21 3d 3d 74 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 43 6f 75 6e 74 72 79 4d 65 74 61 64 61 74 61 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 74 61 64 61 74 61 2e 63 6f 75 6e 74 72 69 65 73 5b 74 5d 7d 7d 2c 7b 6b 65 79 3a 22 6e 6f 6e 47 65 6f 67 72 61 70 68 69 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 Data Ascii: }return w(t,[{key:"getCountries",value:function(){return Object.keys(this.metadata.countries).filter((function(t){return"001"!==t}))}},{key:"getCountryMetadata",value:function(t){return this.metadata.countries[t]}},{key:"nonGeographic",value:function(){if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49788	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:28 UTC	600	OUT	GET /static/js/8718.44c8171f.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:30 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 18383 Connection: close Date: Tue, 23 Apr 2024 14:05:30 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "c20607ce83e01bb65686cd66a702af6e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 fdf00b190a061de7e2517d80e4d54e0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qqAFlTqA_stYMk53klQsKLnyUM2ns4dOmAjvaNPqz-JSm0W4QhpfYw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:30 UTC	8447	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 37 31 38 2e 34 34 63 38 31 37 31 66 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 31 38 5d 2c 7b 38 38 31 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: /! For license information please see 8718.44c8171f.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8718],{88199:function(e,t,n){n.d(t,{W:function(){return r},X:function(){
2024-04-23 14:05:30 UTC	9936	IN	Data Raw: 65 74 75 72 6e 20 73 7d 2c 62 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 64 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 67 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 2c 6c 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 7d 2c 6e 4a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 2c 6e 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 70 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 2c 73 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 74 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 75 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 2c 77 43 3a 66 75 6e Data Ascii: eturn s},by:function(){return l},d1:function(){return u},gT:function(){return F},lk:function(){return M},nJ:function(){return D},nX:function(){return T},pj:function(){return K},s9:function(){return C},tf:function(){return w},uP:function(){return I},wC:fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49790	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:31 UTC	601	OUT	GET /sdk/v1.0/zipy.min.umd.js HTTP/1.1 Host: cdn.zipy.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://web.enable.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:31 UTC	1188	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:31 GMT Content-Type: text/javascript Content-Length: 179894 Connection: close Age: 1376 Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=179895 access-control-allow-origin: * access-control-expose-headers: * etag: "0dac804f4b9ba6fba385746809825500" expires: Tue, 23 Apr 2024 13:51:13 GMT last-modified: Thu, 11 Apr 2024 07:23:45 GMT vary: Accept-Encoding x-goog-generation: 1712820225389464 x-goog-hash: crc32c=t8lDZg== x-goog-hash: md5=DayAT0ubpvujhXRoCYJVAA== x-goog-metageneration: 2 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: br x-goog-stored-content-length: 45874 x-guploader-uploadid: ABPtcPpxZrdmljNQ8jBPjZ1h7inxvfa_V853ouSlcg9i8pfkGhNaTtIcmxOh_idLkugzFb4_ViY CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XLEYWyzjVLBVnwMvmVEKDfkTVKMDmedeG%2Bf8dQMK4%2Fdlg033qX7SEB0vknBPUtcgXixBS6vdxAwwoTV0F3S6D0aftrpOQMmePYpspGw0y5IxjnlRYOx91XLKzBsc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e68b14a1606ec-ATL
2024-04-23 14:05:31 UTC	181	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 7c 7c 73 65 6c 66 29 2e 7a 69 70 79 3d 7b 7d 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e\|\|self).zipy={})}(this,function(e){var
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 20 74 2c 6e 2c 72 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 4d 75 74 61 74 69 6f 6e 3d 30 5d 3d 22 4d 75 74 61 74 69 6f 6e 22 2c 65 5b 65 2e 4d 6f 75 73 65 4d 6f 76 65 3d 31 5d 3d 22 4d 6f 75 73 65 4d 6f 76 65 22 2c 65 5b 65 2e 4d 6f 75 73 65 49 6e 74 65 72 61 63 74 69 6f 6e 3d 32 5d 3d 22 4d 6f 75 73 65 49 6e 74 65 72 61 63 74 69 6f 6e 22 2c 65 5b 65 2e 53 63 72 6f 6c 6c 3d 33 5d 3d 22 53 63 72 6f 6c 6c 22 2c 65 5b 65 2e 56 69 65 77 70 6f 72 74 52 65 73 69 7a 65 3d 34 5d 3d 22 56 69 65 77 70 6f 72 74 52 65 73 69 7a 65 22 2c 65 5b 65 2e 49 6e 70 75 74 3d 35 5d 3d 22 49 6e 70 75 74 22 2c 65 5b 65 2e 54 6f 75 63 68 4d 6f 76 65 3d 36 5d 3d 22 54 6f 75 63 68 4d 6f 76 65 22 2c 65 5b 65 2e 4d 65 64 69 61 49 6e 74 65 72 61 63 74 69 6f 6e 3d 37 5d 3d Data Ascii: t,n,r;!function(e){e[e.Mutation=0]="Mutation",e[e.MouseMove=1]="MouseMove",e[e.MouseInteraction=2]="MouseInteraction",e[e.Scroll=3]="Scroll",e[e.ViewportResize=4]="ViewportResize",e[e.Input=5]="Input",e[e.TouchMove=6]="TouchMove",e[e.MediaInteraction=7]=
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 6f 67 4e 65 74 77 6f 72 6b 45 72 72 6f 72 22 2c 65 5b 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 3d 31 31 39 5d 3d 22 50 65 72 66 6f 72 6d 61 6e 63 65 22 2c 65 5b 65 2e 50 65 72 66 4e 61 76 69 67 61 74 69 6f 6e 3d 31 32 30 5d 3d 22 50 65 72 66 4e 61 76 69 67 61 74 69 6f 6e 22 2c 65 5b 65 2e 4f 74 68 65 72 4e 65 74 77 6f 72 6b 43 61 6c 6c 3d 31 32 31 5d 3d 22 4f 74 68 65 72 4e 65 74 77 6f 72 6b 43 61 6c 6c 22 2c 65 5b 65 2e 57 65 62 56 69 74 61 6c 73 3d 31 32 32 5d 3d 22 57 65 62 56 69 74 61 6c 73 22 2c 65 5b 65 2e 4e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3d 31 32 33 5d 3d 22 4e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 2c 65 5b 65 2e 44 45 42 55 47 5f 49 4e 46 4f 3d 31 32 34 5d 3d 22 44 45 42 55 47 5f 49 4e 46 4f 22 7d 28 74 7c 7c 28 74 3d 7b 7d 29 29 Data Ascii: ogNetworkError",e[e.Performance=119]="Performance",e[e.PerfNavigation=120]="PerfNavigation",e[e.OtherNetworkCall=121]="OtherNetworkCall",e[e.WebVitals=122]="WebVitals",e[e.NavigationStart=123]="NavigationStart",e[e.DEBUG_INFO=124]="DEBUG_INFO"}(t\|\|(t={}))
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 64 22 3b 28 70 3d 6c 7c 7c 28 6c 3d 7b 7d 29 29 2e 44 45 42 55 47 3d 22 31 22 2c 70 2e 57 41 52 4e 49 4e 47 3d 22 32 22 2c 70 2e 45 52 52 4f 52 3d 22 33 22 2c 70 2e 4c 4f 47 3d 22 34 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 42 4c 4f 43 4b 49 4e 47 3d 30 5d 3d 22 42 4c 4f 43 4b 49 4e 47 22 2c 65 5b 65 2e 4e 4f 4e 5f 42 4c 4f 43 4b 49 4e 47 3d 31 5d 3d 22 4e 4f 4e 5f 42 4c 4f 43 4b 49 4e 47 22 7d 28 64 7c 7c 28 64 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 65 73 73 69 6f 6e 5f 64 61 74 61 3d 22 5f 7a 73 65 73 73 69 6f 6e 2d 64 61 74 61 22 2c 65 2e 74 6f 74 61 6c 5f 64 61 74 61 5f 73 65 6e 74 3d 22 5f 7a 74 6f 74 61 6c 2d 64 61 74 61 2d 73 65 6e 74 22 2c 65 2e 65 6e 64 75 73 65 72 5f 6c 61 73 74 5f 61 63 74 69 76 69 74 79 5f Data Ascii: d";(p=l\|\|(l={})).DEBUG="1",p.WARNING="2",p.ERROR="3",p.LOG="4",function(e){e[e.BLOCKING=0]="BLOCKING",e[e.NON_BLOCKING=1]="NON_BLOCKING"}(d\|\|(d={})),function(e){e.session_data="_zsession-data",e.total_data_sent="_ztotal-data-sent",e.enduser_last_activity_
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 69 6d 65 3a 31 65 33 2c 70 65 72 66 4c 6f 6f 70 54 69 6d 65 3a 35 65 33 2c 69 67 6e 6f 72 65 45 6d 70 74 79 45 72 72 6f 73 3a 21 30 2c 69 67 6e 6f 72 65 4c 61 72 67 65 52 65 73 70 6f 6e 73 65 3a 21 30 2c 64 65 62 75 67 4c 6f 67 73 3a 21 31 2c 73 65 73 73 69 6f 6e 4c 69 6e 6b 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 7a 69 70 79 2e 61 69 22 2c 69 73 4e 50 4d 3a 21 31 7d 2c 52 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 52 26 26 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 61 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 29 7b 52 26 26 63 6f 6e 73 6f 6c 65 2e 64 65 62 75 67 28 61 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 52 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 52 26 26 Data Ascii: ime:1e3,perfLoopTime:5e3,ignoreEmptyErros:!0,ignoreLargeResponse:!0,debugLogs:!1,sessionLinkUrl:"https://app.zipy.ai",isNPM:!1},R=!1;function O(e){R&&console.info(a,e)}function z(e){R&&console.debug(a,e)}function M(e){R&&console.log(a,e)}function D(e){R&&
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 69 64 4e 6f 64 65 4d 61 70 2e 6b 65 79 73 28 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4d 65 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 6f 64 65 4d 65 74 61 4d 61 70 2e 67 65 74 28 65 29 7c 7c 6e 75 6c 6c 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4e 6f 64 65 46 72 6f 6d 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 74 68 69 73 2e 67 65 74 49 64 28 65 29 3b 74 68 69 73 2e 69 64 4e 6f 64 65 4d 61 70 2e 64 65 6c 65 74 65 28 6e 29 2c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 26 26 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6d Data Ascii: ay.from(this.idNodeMap.keys())},e.prototype.getMeta=function(e){return this.nodeMetaMap.get(e)\|\|null},e.prototype.removeNodeFromMap=function(e){var t=this,n=this.getId(e);this.idNodeMap.delete(n),e.childNodes&&e.childNodes.forEach(function(e){return t.rem
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 6e 63 61 74 28 6c 29 2e 63 6f 6e 63 61 74 28 28 61 3d 74 2c 28 61 2e 69 6e 64 65 78 4f 66 28 22 2f 2f 22 29 3e 2d 31 3f 61 2e 73 70 6c 69 74 28 22 2f 22 29 2e 73 6c 69 63 65 28 30 2c 33 29 2e 6a 6f 69 6e 28 22 2f 22 29 3a 61 2e 73 70 6c 69 74 28 22 2f 22 29 5b 30 5d 29 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 2b 63 29 29 2e 63 6f 6e 63 61 74 28 6c 2c 22 29 22 29 3b 76 61 72 20 64 3d 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 75 3d 63 2e 73 70 6c 69 74 28 22 2f 22 29 3b 64 2e 70 6f 70 28 29 3b 66 6f 72 28 76 61 72 20 70 3d 30 2c 66 3d 75 3b 70 3c 66 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 7b 76 61 72 20 67 3d 66 5b 70 5d 3b 22 2e 22 21 3d 3d 67 26 26 28 22 2e 2e 22 3d 3d 3d 67 3f 64 2e 70 6f 70 28 29 3a 64 2e 70 75 73 68 28 67 29 29 7d 72 65 74 75 72 6e 22 75 72 Data Ascii: ncat(l).concat((a=t,(a.indexOf("//")>-1?a.split("/").slice(0,3).join("/"):a.split("/")[0]).split("?")[0]+c)).concat(l,")");var d=t.split("/"),u=c.split("/");d.pop();for(var p=0,f=u;p<f.length;p++){var g=f[p];"."!==g&&(".."===g?d.pop():d.push(g))}return"ur
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 6e 26 26 6f 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 74 2c 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 65 2e 63 6c 61 73 73 4c 69 73 74 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 69 66 28 74 2e 74 65 73 74 28 65 2e 63 6c 61 73 73 4c 69 73 74 5b 72 5d 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 21 6e 26 26 6f 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 69 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 3f 65 3a 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 69 66 28 72 2e 63 6c 61 73 73 4c 69 73 74 2e Data Ascii: n&&oe(e.parentNode,t,n);for(var r=e.classList.length;r--;)if(t.test(e.classList[r]))return!0;return!!n&&oe(e.parentNode,t,n)}function ie(e,t,n){var r=e.nodeType===e.ELEMENT_NODE?e:e.parentElement;if(null===r)return!1;if("string"==typeof t){if(r.classList.
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 74 2e 6e 65 77 6c 79 41 64 64 65 64 45 6c 65 6d 65 6e 74 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 68 61 73 4e 6f 64 65 28 65 29 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 49 64 28 65 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 7d 7d 28 6e 2c 74 2e 6d 69 72 72 6f 72 29 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 65 2e 44 4f 43 55 4d 45 4e 54 5f 4e 4f 44 45 3a 72 65 74 75 72 6e 22 43 53 53 31 43 6f 6d 70 61 74 22 21 3d 3d 65 2e 63 6f 6d 70 61 74 4d 6f 64 65 3f 7b 74 79 70 65 3a 54 2e 44 6f 63 75 6d 65 6e 74 2c 63 68 69 6c 64 4e 6f 64 65 73 3a 5b 5d 2c 63 6f 6d 70 61 74 4d 6f 64 65 3a 65 2e 63 6f 6d 70 61 74 4d 6f 64 65 7d 3a 7b 74 79 Data Ascii: t.newlyAddedElement,y=void 0!==v&&v,I=function(e,t){if(t.hasNode(e)){var n=t.getId(e);return 1===n?void 0:n}}(n,t.mirror);switch(e.nodeType){case e.DOCUMENT_NODE:return"CSS1Compat"!==e.compatMode?{type:T.Document,childNodes:[],compatMode:e.compatMode}:{ty
2024-04-23 14:05:31 UTC	1369	IN	Data Raw: 29 26 26 28 76 2e 5f 63 73 73 54 65 78 74 3d 58 28 53 2c 74 65 28 29 29 29 2c 22 69 6e 70 75 74 22 3d 3d 3d 6d 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 6d 7c 7c 22 73 65 6c 65 63 74 22 3d 3d 3d 6d 29 7b 76 61 72 20 62 3d 65 2e 76 61 6c 75 65 2c 45 3d 65 2e 63 68 65 63 6b 65 64 3b 69 66 28 22 72 61 64 69 6f 22 21 3d 3d 76 2e 74 79 70 65 26 26 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 76 2e 74 79 70 65 26 26 22 73 75 62 6d 69 74 22 21 3d 3d 76 2e 74 79 70 65 26 26 22 62 75 74 74 6f 6e 22 21 3d 3d 76 2e 74 79 70 65 26 26 62 29 7b 76 61 72 20 6b 3d 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 72 2d 69 73 2d 70 61 73 73 77 6f 72 64 22 29 3f 22 70 61 73 73 77 6f 72 64 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 76 2e 74 79 70 Data Ascii: )&&(v._cssText=X(S,te())),"input"===m\|\|"textarea"===m\|\|"select"===m){var b=e.value,E=e.checked;if("radio"!==v.type&&"checkbox"!==v.type&&"submit"!==v.type&&"button"!==v.type&&b){var k=e.hasAttribute("data-rr-is-password")?"password":"string"==typeof v.typ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49793	99.86.229.112	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:31 UTC	591	OUT	OPTIONS /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod.mindtickle.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,organization-id,x-referer Origin: https://web.enable.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:32 UTC	2439	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Tue, 23 Apr 2024 14:05:31 GMT access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true access-control-allow-headers: content-type,organization-id,x-referer X-Request-Time: 0.002; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .goto.com .twilio.com .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com .goto.com enablement.cribl.io .haasalert.com .bitsight.com .outreach.io X-Cache: Miss from cloudfront Via: 1.1 d91f9d07d2d79c22681fc8eb4b5f2698.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C3 X-Amz-Cf-Id: g3_fspCrghCPuE8gOoQMtR7WS-rlvZ1v9WJkoIrAtKlgnQ6CMD5qlw== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=2,cdn-upstream-fbl;dur=7,cdn-cache-miss,cdn-pop;desc="IAD79-C3",cdn-rid;desc="g3_fspCrghCPuE8gOoQMtR7WS-rlvZ1v9WJkoIrAtKlgnQ6CMD5qlw==",cdn-downstream-fbl;dur=257

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49791	3.233.159.182	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:31 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=e893ef4c-7d71-4709-811e-c4b820286001&batch_time=1713881130696 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:31 UTC	16381	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 30 38 38 36 32 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881108862,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:05:31 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:05:31 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: e893ef4c-7d71-4709-811e-c4b820286001 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:05:31 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 65 38 39 33 65 66 34 63 2d 37 64 37 31 2d 34 37 30 39 2d 38 31 31 65 2d 63 34 62 38 32 30 32 38 36 30 30 31 22 7d Data Ascii: {"request_id":"e893ef4c-7d71-4709-811e-c4b820286001"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49792	3.233.159.182	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:31 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=8be989ba-cd68-4648-a2e0-32fe175b0a96&batch_time=1713881130706 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16082 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:31 UTC	16082	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 31 31 33 38 30 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881111380,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:05:31 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:05:31 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 8be989ba-cd68-4648-a2e0-32fe175b0a96 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:05:31 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 38 62 65 39 38 39 62 61 2d 63 64 36 38 2d 34 36 34 38 2d 61 32 65 30 2d 33 32 66 65 31 37 35 62 30 61 39 36 22 7d Data Ascii: {"request_id":"8be989ba-cd68-4648-a2e0-32fe175b0a96"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49794	99.86.229.112	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:32 UTC	716	OUT	POST /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod.mindtickle.com Connection: keep-alive Content-Length: 169 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: / x-referer: https://web.enable.us organization-id: 0 sec-ch-ua-platform: "Windows" Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:32 UTC	169	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 63 6f 6e 66 69 67 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 63 6f 6e 66 69 67 20 7b 5c 6e 20 20 63 6f 6e 66 69 67 20 7b 5c 6e 20 20 20 20 61 70 69 55 72 6c 5c 6e 20 20 20 20 72 65 67 69 6f 6e 5c 6e 20 20 20 20 6f 61 75 74 68 55 72 6c 73 20 7b 5c 6e 20 20 20 20 20 20 61 7a 75 72 65 55 72 6c 5c 6e 20 20 20 20 20 20 67 6f 6f 67 6c 65 55 72 6c 5c 6e 20 20 20 20 7d 5c 6e 20 20 7d 5c 6e 7d 5c 6e 22 7d Data Ascii: {"operationName":"config","variables":{},"query":"query config {\n config {\n apiUrl\n region\n oauthUrls {\n azureUrl\n googleUrl\n }\n }\n}\n"}
2024-04-23 14:05:32 UTC	2697	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 281 Connection: close Date: Tue, 23 Apr 2024 14:05:32 GMT access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true Referrer-Policy: no-referrer-when-downgrade api_version: 20230911 dc: AP Vary: Accept-Encoding ETag: W/"7dd3d09b63d7ceaf0ff6e0276a7d22bd" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 09997daebdbaf41b720df8d4c4ec8c20 X-Runtime: 0.005967 vary: Origin X-Request-Time: 0.007; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .goto.com .twilio.com .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com .goto.com enablement.cribl.io .haasalert.com .bitsight.com .outreach.io X-Cache: Miss from cloudfront Via: 1.1 016de4084b3995907681c203a7d5af44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C3 X-Amz-Cf-Id: tXOHLeeCmUVdYIPbJWfoKoeb2sZLoAL7gW7X4Srq5YTpFNfmN2WQJg== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=2,cdn-upstream-fbl;dur=14,cdn-cache-miss,cdn-pop;desc="IAD79-C3",cdn-rid;desc="tXOHLeeCmUVdYIPbJWfoKoeb2sZLoAL7gW7X4Srq5YTpFNfmN2WQJg==",cdn-downstream-fbl;dur=267
2024-04-23 14:05:32 UTC	281	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 61 70 69 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 73 72 2d 73 76 63 2d 63 73 76 2e 70 72 6f 64 2d 75 73 2e 6d 69 6e 64 74 69 63 6b 6c 65 2e 63 6f 6d 2f 63 6f 72 65 22 2c 22 72 65 67 69 6f 6e 22 3a 22 75 73 2d 65 61 73 74 2d 31 22 2c 22 6f 61 75 74 68 55 72 6c 73 22 3a 7b 22 61 7a 75 72 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 73 72 2d 73 76 63 2d 63 73 76 2e 70 72 6f 64 2d 75 73 2e 6d 69 6e 64 74 69 63 6b 6c 65 2e 63 6f 6d 2f 63 6f 72 65 2f 6f 61 75 74 68 2f 61 7a 75 72 65 2f 72 65 64 69 72 65 63 74 22 2c 22 67 6f 6f 67 6c 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 73 72 2d 73 76 63 2d 63 73 76 2e 70 72 6f 64 2d 75 73 2e 6d 69 6e 64 74 69 63 6b 6c 65 2e 63 6f 6d 2f 63 6f 72 65 2f Data Ascii: {"data":{"config":{"apiUrl":"https://dsr-svc-csv.prod-us.mindtickle.com/core","region":"us-east-1","oauthUrls":{"azureUrl":"https://dsr-svc-csv.prod-us.mindtickle.com/core/oauth/azure/redirect","googleUrl":"https://dsr-svc-csv.prod-us.mindtickle.com/core/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49710	13.32.151.24	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:32 UTC	727	OUT	GET /favicon.ico HTTP/1.1 Host: web.enable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=1&id=77971c23-12c8-4086-ab9c-0abbc88f2e75&created=1713881130602&expire=1713882030602
2024-04-23 14:05:32 UTC	2087	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 4286 Connection: close Last-Modified: Fri, 15 Mar 2024 18:17:50 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 23 Apr 2024 10:27:38 GMT Cache-Control: max-age=25012345 ETag: "5631ee3fe150214ab5e4fc4281f4e7f5" X-Cache: Hit from cloudfront Via: 1.1 70e06614c0a8446cd4a80ab3436628d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JUocH1UkIBiwUS_Lf2GXyGdpevjj9VWHN5BnuZWLgSGSrNTd0CQGNw== Age: 162969 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:32 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49795	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:32 UTC	611	OUT	GET /manifest.json HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:34 UTC	2118	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 163 Connection: close Date: Tue, 23 Apr 2024 14:05:34 GMT Last-Modified: Sat, 20 Apr 2024 01:29:05 GMT ETag: "35fed198901f89f5dcdee2abbccd053a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0cf2795a093d0418def3c6d92780bb7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jJW8ijv7a1xqt0Ld18FtImhZ9DZeWwjEDV9UOlBqGR6sKzu2RhcxsA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-04-23 14:05:34 UTC	163	IN	Data Raw: 7b 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 45 6e 61 62 6c 65 20 55 73 22 2c 0a 20 20 22 6e 61 6d 65 22 3a 20 22 45 6e 61 62 6c 65 20 55 73 22 2c 0a 20 20 22 73 74 61 72 74 5f 75 72 6c 22 3a 20 22 2e 22 2c 0a 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 20 22 23 30 30 30 30 30 30 22 2c 0a 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 66 66 66 66 66 66 22 0a 7d 0a Data Ascii: { "short_name": "Enable Us", "name": "Enable Us", "start_url": ".", "display": "standalone", "theme_color": "#000000", "background_color": "#ffffff"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49796	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:32 UTC	616	OUT	OPTIONS /sdk-session-manager/v2/enduser-info/5c9cd8a6?v=1.0.28&e=Production&o=0&ns=true HTTP/1.1 Host: services.zipy.ai Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://web.enable.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:33 UTC	1039	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:33 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close access-control-max-age: 86400 x-uri: /sdk-session-manager/v2/enduser-info/5c9cd8a6 access-control-allow-origin: https://web.enable.us timing-allow-origin: https://app.zipy.ai access-control-allow-headers: Access-Control-Allow-Headers, Set-Cookie, cancelToken, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, auth-token access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qPflSBHLiFtcn6A3I7XRImOffURNVS%2BYqvoyzd1JLl79EmJIejFsm8v8bPNm85Alq3VbmN01C1HIc6iol3MetgCisy%2BXEHjCIQL4EfeyknvIkTj1edaA5mggdNQ%2FR4q36lQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e68b9a9634551-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49797	108.138.64.17	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:32 UTC	571	OUT	GET /widget/sitd2fd5 HTTP/1.1 Host: widget.intercom.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:33 UTC	728	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2706 Connection: close Date: Tue, 23 Apr 2024 14:05:34 GMT Last-Modified: Tue, 23 Apr 2024 14:05:08 GMT ETag: "aca08ae00ab32f0e4b015b681282c942" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: 4LzQ.JgO9cP6JLjz2x4eMhGpSVaaJf.K Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 4a91a321d4c2ab7334c6f285093956ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: u59vkP9n8O3hAcEb0mjHFn-tjNnIQNlO0CfU9en3UdbXHt2yizXtTw== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-04-23 14:05:33 UTC	2706	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0d 73 da 38 1a fe 2b c6 77 43 ec a9 30 90 36 4d eb d4 e9 65 d3 ec 6d e6 9a 6d a7 74 f6 ee 26 e1 18 61 0b 50 6b 2c af 2c 42 d8 c0 7f bf 47 f2 07 36 90 ec ee cc 76 da c4 7e f5 7e e9 d5 fb f1 c8 6d 4d 16 49 a8 b8 48 1c f7 f1 9e 4a 8b 05 8f a7 af fb af fa 7e 45 67 ee 23 f3 d8 43 2a a4 ca 82 c7 4c 2c 64 c8 46 73 9a fa f6 8c 47 11 4b 3a 39 a9 03 92 4d 68 ca 47 63 9a 31 2c 2a 95 66 7e b7 0b 4a 87 d3 b9 c7 13 c5 64 28 f0 20 6c 92 2e c6 31 0f 47 29 55 b3 2d e7 b7 ac 62 0a a3 c4 c3 af ae 4d b2 19 63 2a 1b a5 52 3c ac 76 f8 4b e6 4e ce 63 04 ea ec 10 66 89 92 ab 83 c2 cb e5 b2 b2 d6 91 4c ef 8e 27 d3 5c 87 91 82 fa 88 3d 78 33 35 8f 6d c2 93 4c d1 38 1e cd 45 c4 f6 f6 97 6e f7 86 7f 95 d5 28 4b b6 5c 93 97 bd 93 88 bd 7e 1b d2 f0 Data Ascii: Ys8+wC06Memmt&aPk,,BG6v~~mMIHJ~Eg#CL,dFsGK:9MhGc1,f~Jd( l.1G)U-bMc*R<vKNcfL'\=x35mL8En(K\~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49799	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:33 UTC	616	OUT	GET /static/css/2655.20d3c4e6.chunk.css HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:34 UTC	2083	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 41472 Connection: close Date: Tue, 23 Apr 2024 14:05:35 GMT Last-Modified: Sat, 20 Apr 2024 01:29:05 GMT ETag: "b4293df02a38fb279829c078d8203a3d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4f00e77688d92901b5afc8b7b033ed56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: S9332dIYPB_56UdRpi6B7LEZBayvTpj-CwWN6RTKj69S9Ynq7yCD4g== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:34 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 20 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 62 65 66 6f 72 65 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2c 2e 76 6a 73 2d 62 75 74 74 6f 6e 3e 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 62 65 66 6f 72 65 2c 2e 76 6a 73 2d 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 2e 76 6a 73 2d 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 69 64 65 6f 2d 6a 73 20 2e Data Ascii: @charset "UTF-8";.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.video-js .vjs-modal-dialog,.vjs-button>.vjs-icon-placeholder:before,.vjs-modal-dialog .vjs-modal-dialog-content{height:100%;left:0;position:absolute;top:0;width:100%}.video-js .
2024-04-23 14:05:34 UTC	16384	IN	Data Raw: 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 76 69 64 65 6f 2d 6a 73 3a 68 6f 76 65 72 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 33 38 35 39 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 31 35 2c 31 33 33 2c 31 35 39 2c 2e 35 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 73 7d 2e 76 6a 73 2d 63 6f 6e 74 72 6f 6c 73 2d 64 69 73 61 62 6c 65 64 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 2c 2e 76 6a 73 2d 65 72 72 6f 72 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 2c 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 20 2e Data Ascii: js-big-play-button:focus,.video-js:hover .vjs-big-play-button{background-color:#73859f;background-color:rgba(115,133,159,.5);border-color:#fff;transition:all 0s}.vjs-controls-disabled .vjs-big-play-button,.vjs-error .vjs-big-play-button,.vjs-has-started .
2024-04-23 14:05:34 UTC	1120	IN	Data Raw: 6d 29 7d 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 70 69 63 74 75 72 65 2d 69 6e 2d 70 69 63 74 75 72 65 2d 63 6f 6e 74 72 6f 6c 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6c 65 78 3a 6e 6f 6e 65 7d 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 20 2e 76 6a 73 2d 70 69 63 74 75 72 65 2d 69 6e 2d 70 69 63 74 75 72 65 2d 63 6f 6e 74 72 6f 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 63 6f 6e 74 72 6f 6c 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6c 65 78 3a 6e 6f 6e 65 7d 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 20 2e 76 6a 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 63 6f 6e 74 72 Data Ascii: m)}.video-js .vjs-picture-in-picture-control{cursor:pointer;flex:none}.video-js.vjs-audio-only-mode .vjs-picture-in-picture-control{display:none}.video-js .vjs-fullscreen-control{cursor:pointer;flex:none}.video-js.vjs-audio-only-mode .vjs-fullscreen-contr
2024-04-23 14:05:34 UTC	1574	IN	Data Raw: 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 6f 70 3a 35 30 25 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 35 30 70 78 7d 2e 76 6a 73 2d 73 65 65 6b 69 6e 67 20 2e 76 6a 73 2d 6c 6f 61 64 69 6e 67 2d 73 70 69 6e 6e 65 72 2c 2e 76 6a 73 2d 77 61 69 74 69 6e 67 20 2e 76 6a 73 2d 6c 6f 61 64 69 6e 67 2d 73 70 69 6e 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 76 6a 73 2d 73 70 69 6e 6e 65 72 2d 73 68 6f 77 20 30 73 20 6c 69 6e 65 61 72 20 2e 33 73 20 66 6f 72 77 61 72 64 73 3b 61 6e 69 6d 61 74 69 6f 6e 3a 76 6a 73 2d 73 70 69 6e 6e 65 72 2d 73 68 6f 77 20 30 73 20 6c 69 6e 65 61 72 20 2e 33 73 20 66 6f 72 77 61 72 64 73 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 76 6a 73 2d Data Ascii: solute;text-align:left;top:50%;visibility:hidden;width:50px}.vjs-seeking .vjs-loading-spinner,.vjs-waiting .vjs-loading-spinner{-webkit-animation:vjs-spinner-show 0s linear .3s forwards;animation:vjs-spinner-show 0s linear .3s forwards;display:block}.vjs-
2024-04-23 14:05:34 UTC	6010	IN	Data Raw: 20 76 6a 73 2d 73 70 69 6e 6e 65 72 2d 66 61 64 65 7b 30 25 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 37 33 38 35 39 66 7d 32 30 25 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 37 33 38 35 39 66 7d 33 35 25 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 36 30 25 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 37 33 38 35 39 66 7d 74 6f 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 37 33 38 35 39 66 7d 7d 2e 76 69 64 65 6f 2d 6a 73 2e 76 6a 73 2d 61 75 64 69 6f 2d 6f 6e 6c 79 2d 6d 6f 64 65 20 2e 76 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 76 6a 73 2d 63 68 61 70 74 65 72 73 2d 62 75 74 74 6f 6e 20 2e 76 6a 73 2d 6d 65 6e 75 20 75 Data Ascii: vjs-spinner-fade{0%{border-top-color:#73859f}20%{border-top-color:#73859f}35%{border-top-color:#fff}60%{border-top-color:#73859f}to{border-top-color:#73859f}}.video-js.vjs-audio-only-mode .vjs-captions-button{display:none}.vjs-chapters-button .vjs-menu u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49798	13.33.4.35	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:33 UTC	452	OUT	GET /favicon.ico HTTP/1.1 Host: web.enable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=1&id=77971c23-12c8-4086-ab9c-0abbc88f2e75&created=1713881130602&expire=1713882030602
2024-04-23 14:05:33 UTC	2087	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 4286 Connection: close Date: Sun, 21 Apr 2024 16:49:24 GMT Last-Modified: Sat, 20 Apr 2024 01:29:05 GMT ETag: "5631ee3fe150214ab5e4fc4281f4e7f5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 18605cbe377a28a7af20e4740c13a360.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: L4ff6HZTNTPu5g2L3QnnhKL7XgymhtOziXTWcKUu-uu3qMv15Cf0Pg== Age: 162970 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:33 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49800	99.86.229.106	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:33 UTC	367	OUT	GET /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:33 UTC	2066	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Date: Tue, 23 Apr 2024 14:05:33 GMT X-Request-Id: fe49a6b2530de847fbc5bc23f2384c16 X-Runtime: 0.000932 vary: Origin Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Request-Time: 0.002; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .goto.com .twilio.com .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com .goto.com enablement.cribl.io .haasalert.com .bitsight.com .outreach.io X-Cache: Error from cloudfront Via: 1.1 23546b21bebd898e1f4c79789ae527ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C3 X-Amz-Cf-Id: _VMNUGfzOJ6UO7theEO5Nk2D4mvOIvcmGZwDSOybmeIpGj324cmK_g== Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49802	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:33 UTC	712	OUT	POST /sdk-session-manager/v2/enduser-info/5c9cd8a6?v=1.0.28&e=Production&o=0&ns=true HTTP/1.1 Host: services.zipy.ai Connection: keep-alive Content-Length: 69 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:33 UTC	69	OUT	Data Raw: 7b 22 65 6e 64 75 73 65 72 5f 7a 69 70 79 5f 69 64 22 3a 22 36 65 36 35 65 36 31 34 2d 37 63 39 33 2d 34 32 33 65 2d 61 62 30 38 2d 63 63 33 37 66 36 33 65 66 64 66 35 2d 31 37 31 33 38 38 31 31 33 31 22 7d Data Ascii: {"enduser_zipy_id":"6e65e614-7c93-423e-ab08-cc37f63efdf5-1713881131"}
2024-04-23 14:05:33 UTC	1042	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:33 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-max-age: 86400 x-uri: /sdk-session-manager/v2/enduser-info/5c9cd8a6 access-control-allow-origin: https://web.enable.us timing-allow-origin: https://app.zipy.ai access-control-allow-headers: Access-Control-Allow-Headers, Set-Cookie, cancelToken, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, auth-token access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q6BfPNn5GGsNhzlSrGXwc9OcXgU1Jf4cYipYy2OM0%2FHD%2BeVepi818Giof5QtHQd%2FPBLHygJCdShzXqmu18RBb92clJ7%2B5jQo9p17tnNthB84O984NEKY8olxihdYCiPDxwk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e68bd6ffa676b-ATL
2024-04-23 14:05:33 UTC	327	IN	Data Raw: 65 66 63 0d 0a 7b 22 69 73 5f 62 6c 6f 63 6b 65 64 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 65 64 5f 74 69 6c 6c 22 3a 30 2c 22 72 65 6c 65 61 73 65 5f 76 65 72 22 3a 22 74 72 75 65 22 2c 22 64 6f 6d 5f 63 61 70 74 75 72 65 22 3a 74 72 75 65 2c 22 63 6f 6e 73 6f 6c 65 5f 63 61 70 74 75 72 65 22 3a 74 72 75 65 2c 22 6e 65 74 77 6f 72 6b 5f 63 61 70 74 75 72 65 22 3a 74 72 75 65 2c 22 73 74 61 63 6b 5f 74 72 61 63 65 5f 63 61 70 74 75 72 65 22 3a 74 72 75 65 2c 22 77 65 62 5f 73 6f 63 6b 65 74 73 5f 63 61 70 74 75 72 65 22 3a 66 61 6c 73 65 2c 22 69 70 5f 63 61 70 74 75 72 65 22 3a 74 72 75 65 2c 22 69 6e 70 75 74 5f 6d 61 73 6b 69 6e 67 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 5f 6d 61 73 6b 69 6e 67 22 3a 74 72 75 65 2c 22 70 61 69 64 22 3a 66 61 6c 73 65 Data Ascii: efc{"is_blocked":false,"blocked_till":0,"release_ver":"true","dom_capture":true,"console_capture":true,"network_capture":true,"stack_trace_capture":true,"web_sockets_capture":false,"ip_capture":true,"input_masking":false,"text_masking":true,"paid":false
2024-04-23 14:05:33 UTC	1369	IN	Data Raw: 64 65 70 6c 6f 79 6d 65 6e 74 5f 65 6e 76 69 6f 72 6e 6d 65 6e 74 22 3a 22 53 74 61 67 69 6e 67 22 2c 22 7a 69 70 79 5f 64 65 76 65 6c 6f 70 6d 65 6e 74 5f 65 6e 76 69 6f 72 6e 6d 65 6e 74 22 3a 22 50 72 6f 64 75 63 74 69 6f 6e 22 2c 22 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6e 65 74 77 6f 72 6b 5f 74 79 70 65 22 3a 6e 75 6c 6c 2c 22 62 72 6f 77 73 65 72 5f 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 6d 69 6e 69 6d 75 6d 5f 73 64 6b 5f 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6c 61 74 65 73 74 5f 73 64 6b 5f 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 74 72 65 61 6d 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6c 6c 65 63 74 6f 72 38 2e 7a 69 70 79 2e 61 69 22 2c 22 6d 61 78 5f 62 75 66 66 65 72 5f 73 69 7a 65 22 3a 35 Data Ascii: deployment_enviornment":"Staging","zipy_development_enviornment":"Production","browser_version":null,"network_type":null,"browser_name":null,"minimum_sdk_version":null,"latest_sdk_version":null,"stream_url":"https://collector8.zipy.ai","max_buffer_size":5
2024-04-23 14:05:33 UTC	1369	IN	Data Raw: 65 74 22 2c 22 63 6c 61 72 69 74 79 2e 6d 73 22 5d 2c 22 69 73 49 67 6e 6f 72 65 55 72 6c 45 72 72 6f 72 22 3a 5b 22 7a 69 70 79 2e 61 69 22 2c 22 6d 69 78 70 61 6e 65 6c 22 2c 22 65 78 74 72 65 6d 65 2d 69 70 2d 6c 6f 6f 6b 75 70 2e 63 6f 6d 22 2c 22 68 6f 74 6a 61 72 22 2c 22 73 6d 61 72 74 6c 6f 6f 6b 2e 63 6f 6d 22 2c 22 6e 65 77 72 65 6c 69 63 2e 63 6f 6d 22 2c 22 62 75 67 73 6e 61 67 22 2c 22 66 75 6c 6c 73 74 6f 72 79 22 2c 22 73 65 6e 74 72 79 2e 69 6f 22 2c 22 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 2c 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 77 69 73 74 69 61 2e 63 6f 6d 22 2c 22 61 6d 70 6c 69 74 75 64 65 2e 63 6f 6d 22 2c 22 73 65 67 6d 65 6e 74 2e 69 6f 22 2c 22 70 65 6e 64 6f 2e 69 6f 22 2c 22 72 61 79 Data Ascii: et","clarity.ms"],"isIgnoreUrlError":["zipy.ai","mixpanel","extreme-ip-lookup.com","hotjar","smartlook.com","newrelic.com","bugsnag","fullstory","sentry.io","google-analytics.com","bam.nr-data.net","wistia.com","amplitude.com","segment.io","pendo.io","ray
2024-04-23 14:05:33 UTC	778	IN	Data Raw: 70 79 2e 61 69 22 2c 22 63 61 70 74 75 72 65 50 65 72 66 6f 72 6d 61 6e 63 65 22 3a 66 61 6c 73 65 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 43 61 70 74 75 72 65 43 6f 6e 66 69 67 22 3a 30 2c 22 6e 65 74 77 6f 72 6b 43 61 70 74 75 72 65 43 6f 6e 66 69 67 22 3a 6e 75 6c 6c 2c 22 70 65 72 66 54 69 6d 65 46 72 65 71 75 65 6e 63 79 22 3a 35 2c 22 70 65 72 66 42 75 66 66 65 72 53 69 7a 65 46 72 65 71 75 65 6e 63 79 22 3a 31 30 32 34 2c 22 69 67 6e 6f 72 65 55 72 6c 45 72 72 6f 72 43 6f 64 65 73 22 3a 6e 75 6c 6c 2c 22 69 67 6e 6f 72 65 55 72 6c 43 6f 64 65 73 22 3a 6e 75 6c 6c 2c 22 65 6e 64 75 73 65 72 5f 69 6e 66 6f 22 3a 7b 22 69 64 22 3a 32 32 39 32 39 35 39 33 2c 22 65 6e 64 75 73 65 72 5f 7a 69 70 79 5f 69 64 22 3a 22 36 65 36 35 65 36 31 34 2d 37 63 39 33 Data Ascii: py.ai","capturePerformance":false,"performanceCaptureConfig":0,"networkCaptureConfig":null,"perfTimeFrequency":5,"perfBufferSizeFrequency":1024,"ignoreUrlErrorCodes":null,"ignoreUrlCodes":null,"enduser_info":{"id":22929593,"enduser_zipy_id":"6e65e614-7c93
2024-04-23 14:05:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49801	44.195.108.183	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:33 UTC	644	OUT	GET /core/favicon HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:33 UTC	2666	IN	HTTP/1.1 302 Found Date: Tue, 23 Apr 2024 14:05:33 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Referrer-Policy: no-referrer-when-downgrade Location: https://dsr-images-us-east-1.prod.mindtickle.com/protected/organization-994/favicon-1713869489.gif?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L2Zhdmljb24tMTcxMzg2OTQ4OS5naWYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTUwODAyNjB9fX1dfQ__&Signature=hqFYWRAheFJYyNn0S~v-sXDHQ5QAVnOjtInGu4qtkjkizEgPfqA8uaC~KESAmg9ivifpRnwR4WIr4kbFdj3Mskq63Pg5aXu8mvAcF5fXeg-FBzpprEdfJitgbv2VZitJBHPTkVisY3qHiHRPrGFOPkkQHNmA-kBKI5DAA4xTBPckPMLhZPczwgxnluE966DF3vGAQDdIBhdQg68RGGO1b5Tqlpi8MRlx5iAeuzq6dO07jRusCnviBPlVF9hXCgFOAcdTu1~el3kd7KI97w09GRfiiQCO7-PkSL6eLuWKD8GRm5s72lQ83pus02Gi5Y3C5q~FAUh29hetjTlsgSRJvA__&Key-Pair-Id=KFSVSK4GDGUMB api_version: 20230911 dc: US Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing Cache-Control: max-age=0, private X-Request-Id: fef705f723faa30490b360e53bc74dcf X-Runtime: 0.007483 vary: Accept-Encoding, Origin X-Request-Time: 0.010; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49804	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:34 UTC	600	OUT	GET /static/js/5543.663021d7.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:35 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13007 Connection: close Date: Tue, 23 Apr 2024 14:05:36 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "33ea11ee833366b34931d2cd63e3f94c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 03b474db824c472de7c4629c50b35ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: O0e1eOBrCBgTK-eQ6oXnQJE-3ysyvEte8ms6Sdpk6TSUXQ7uHI-7Jg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:35 UTC	12147	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 35 34 33 5d 2c 7b 36 39 32 31 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 76 61 72 20 6f 3d 61 28 36 34 38 33 36 29 3b 65 2e 5a 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 6f 28 61 28 34 35 36 34 39 29 29 2c 72 3d 61 28 38 30 31 38 34 29 2c 6c 3d 28 30 2c 6e 2e 64 65 66 61 75 6c 74 29 28 5b 28 30 2c 72 2e 6a 73 78 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 31 2e 39 39 20 32 43 36 2e 34 37 20 32 20 32 20 36 2e 34 38 20 32 20 31 32 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5543],{69212:function(t,e,a){var o=a(64836);e.Z=void 0;var n=o(a(45649)),r=a(80184),l=(0,n.default)([(0,r.jsx)("path",{d:"M11.99 2C6.47 2 2 6.48 2 12
2024-04-23 14:05:35 UTC	860	IN	Data Raw: 61 6d 65 3a 4a 2e 69 63 6f 6e 2c 63 68 69 6c 64 72 65 6e 3a 49 7c 7c 42 5b 45 5d 7c 7c 79 5b 45 5d 7d 29 3a 6e 75 6c 6c 2c 28 30 2c 6d 2e 6a 73 78 29 28 41 2c 7b 6f 77 6e 65 72 53 74 61 74 65 3a 47 2c 63 6c 61 73 73 4e 61 6d 65 3a 4a 2e 6d 65 73 73 61 67 65 2c 63 68 69 6c 64 72 65 6e 3a 4d 7d 29 2c 6e 75 6c 6c 21 3d 7a 3f 28 30 2c 6d 2e 6a 73 78 29 28 56 2c 7b 6f 77 6e 65 72 53 74 61 74 65 3a 47 2c 63 6c 61 73 73 4e 61 6d 65 3a 4a 2e 61 63 74 69 6f 6e 2c 63 68 69 6c 64 72 65 6e 3a 7a 7d 29 3a 6e 75 6c 6c 2c 6e 75 6c 6c 3d 3d 7a 26 26 57 3f 28 30 2c 6d 2e 6a 73 78 29 28 56 2c 7b 6f 77 6e 65 72 53 74 61 74 65 3a 47 2c 63 6c 61 73 73 4e 61 6d 65 3a 4a 2e 61 63 74 69 6f 6e 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 6d 2e 6a 73 78 29 28 51 2c 28 30 2c 72 2e 5a 29 Data Ascii: ame:J.icon,children:I\|\|B[E]\|\|y[E]}):null,(0,m.jsx)(A,{ownerState:G,className:J.message,children:M}),null!=z?(0,m.jsx)(V,{ownerState:G,className:J.action,children:z}):null,null==z&&W?(0,m.jsx)(V,{ownerState:G,className:J.action,children:(0,m.jsx)(Q,(0,r.Z)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49803	18.165.116.102	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:34 UTC	1328	OUT	GET /protected/organization-994/favicon-1713869489.gif?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L2Zhdmljb24tMTcxMzg2OTQ4OS5naWYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTUwODAyNjB9fX1dfQ__&Signature=hqFYWRAheFJYyNn0S~v-sXDHQ5QAVnOjtInGu4qtkjkizEgPfqA8uaC~KESAmg9ivifpRnwR4WIr4kbFdj3Mskq63Pg5aXu8mvAcF5fXeg-FBzpprEdfJitgbv2VZitJBHPTkVisY3qHiHRPrGFOPkkQHNmA-kBKI5DAA4xTBPckPMLhZPczwgxnluE966DF3vGAQDdIBhdQg68RGGO1b5Tqlpi8MRlx5iAeuzq6dO07jRusCnviBPlVF9hXCgFOAcdTu1~el3kd7KI97w09GRfiiQCO7-PkSL6eLuWKD8GRm5s72lQ83pus02Gi5Y3C5q~FAUh29hetjTlsgSRJvA__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1 Host: dsr-images-us-east-1.prod.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:34 UTC	613	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 650 Connection: close Date: Tue, 23 Apr 2024 14:05:35 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Apr 2024 10:51:30 GMT ETag: "17505393b9802400190f9843b0c1977e" x-amz-server-side-encryption: AES256 x-amz-version-id: O3XNPl59aU5IrqkVtx26YjQZ2LvhZmyW Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9e235f80fac5fad93cf2ef57bfc0eaea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: s2qIvJuuewsiMVT3dyiwmLGB0WxKOxac5S7ij1lgbrfYhSHorbMHpQ==
2024-04-23 14:05:34 UTC	650	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f6 4b 00 6c 39 39 6e 39 38 72 3c 39 77 3e 38 18 10 46 19 10 46 18 11 46 19 11 46 19 11 47 1a 11 46 1a 12 47 1a 12 48 1b 13 48 1b 13 49 1b 14 49 1c 14 49 1e 15 48 1d 15 4a 1f 17 4b 1f 17 4c 20 14 45 24 17 47 2f 1b 43 20 18 4c 21 19 4d 23 1b 4f 24 1c 4f 24 1c 50 24 1d 50 25 1d 50 27 1f 52 39 20 41 3d 23 41 28 20 52 29 22 54 2a 22 54 2c 25 56 33 2c 5c 43 2a 49 5b 34 41 5c 37 46 7d 48 43 94 4f 38 9e 50 30 9c 50 32 b5 5f 34 cb 66 29 c9 6c 36 e6 74 27 ea 74 23 ef 76 22 ee 76 23 ef 76 23 ef 77 23 ef 77 24 ef 78 24 ef 78 25 ef 78 26 ef 79 26 ef 79 27 ef 7a 28 ef 7a 29 f0 7a 29 f0 7b 29 f0 7b 2a f0 7d 2d f0 7d 2e f0 7e 2e f0 7f 30 ec 83 3b f0 80 32 f0 82 35 f1 83 37 f1 83 38 f1 85 3b ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a Kl99n98r<9w>8FFFFGFGHHIIIHJKL E$G/C L!M#O$O$P$P%P'R9 A=#A( R)"T"T,%V3,\CI[4A\7F}HCO8P0P2_4f)l6t't#v"v#v#w#w$x$x%x&y&y'z(z)z){){*}-}.~.0;2578;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49807	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:35 UTC	600	OUT	GET /static/js/9663.4a37fca5.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17798 Connection: close Date: Tue, 23 Apr 2024 14:05:37 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "452c028b018aa4aca02a3893662da196" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 23f80b153c334c9917e485cd3fc5f1d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: IIZ2_MWUu63V7xGDdYk2FBQkn_i5Qx3qH78kQUGbY69aTogTZOnafA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:36 UTC	8448	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 36 33 5d 2c 7b 34 32 34 31 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 6e 28 36 34 38 33 36 29 3b 72 2e 5a 3d 76 6f 69 64 20 30 3b 76 61 72 20 75 3d 65 28 6e 28 34 35 36 34 39 29 29 2c 61 3d 6e 28 38 30 31 38 34 29 2c 63 3d 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 28 30 2c 61 2e 6a 73 78 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 39 20 31 33 68 2d 36 76 36 68 2d 32 76 2d 36 48 35 76 2d 32 68 36 56 35 68 32 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9663],{42419:function(t,r,n){"use strict";var e=n(64836);r.Z=void 0;var u=e(n(45649)),a=n(80184),c=(0,u.default)((0,a.jsx)("path",{d:"M19 13h-6v6h-2v-6H5v-2h6V5h2
2024-04-23 14:05:36 UTC	9350	IN	Data Raw: 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 72 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 6e 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 72 65 74 75 72 6e 28 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3f 6e 3a 72 7d 29 28 74 29 7d 76 61 72 20 76 3d 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 28 30 2c 61 2e 6a 73 78 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 39 20 33 61 32 20 32 20 30 20 30 20 31 20 32 20 32 76 31 34 61 32 20 32 20 30 20 30 20 31 2d 32 20 32 48 35 61 32 20 32 20 30 20 30 20 31 2d 32 2d 32 56 35 61 32 20 32 20 30 20 30 20 31 20 32 2d 32 68 31 34 6d 2d 2e 35 20 31 35 2e 35 76 2d 35 2e 33 61 33 2e 32 36 20 33 2e 32 36 20 30 20 30 20 30 2d 33 2e 32 36 2d 33 2e 32 Data Ascii: on"!==typeof WeakMap)return null;var r=new WeakMap,n=new WeakMap;return(c=function(t){return t?n:r})(t)}var v=(0,u.default)((0,a.jsx)("path",{d:"M19 3a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h14m-.5 15.5v-5.3a3.26 3.26 0 0 0-3.26-3.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49806	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:35 UTC	600	OUT	GET /static/js/7530.d631d9ac.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2496 Connection: close Date: Tue, 23 Apr 2024 14:05:37 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "798f4d2271f4272b74c83272bdb1bdc4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c33ccd454bf1796b79f9f9af880e2882.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5NN6HI85lkdmqiIddKCGPPvCaiFJYUsIU1fcK8tlnAZLc12icObBYw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:36 UTC	2496	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 37 35 33 30 2e 64 36 33 31 64 39 61 63 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 33 30 5d 2c 7b 32 37 35 33 30 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 2f 5e 28 62 7c 42 29 24 2f 2c 74 3d 7b 69 65 63 3a 7b 62 69 Data Ascii: /! For license information please see 7530.d631d9ac.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7530],{27530:function(i){i.exports=function(){"use strict";var i=/^(b\|B)$/,t={iec:{bi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49808	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:35 UTC	600	OUT	GET /static/js/1885.b8d7c262.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 14452 Connection: close Date: Tue, 23 Apr 2024 14:05:37 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "0558260dd84740266c3fc8290ae4c698" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f191d757f16dd6002ae3a0c09389b68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OFyk_VwCx4UjW5ND25flHj4YLwxR4lzRnMjEii_YBUWPClnZNBXw7w== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:36 UTC	1496	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 38 35 5d 2c 7b 32 31 38 38 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 73 2c 61 3b 73 3d 5b 72 28 39 33 32 36 34 29 5d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1885],{21885:function(e,t,r){var n,s,a;s=[r(93264)],n=function(e){"use strict";function t(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){
2024-04-23 14:05:36 UTC	12956	IN	Data Raw: 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 72 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 72 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 72 7c 7c 22 53 65 74 22 3d 3d 3d 72 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 72 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 72 29 3f 73 28 65 2c 74 29 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 72 3c 74 Data Ascii: urn"Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r\|\|"Set"===r?Array.from(e):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?s(e,t):void 0}}function s(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49805	3.233.159.182	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:35 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=f70d9984-de69-4097-9404-aa00ecc1edcc&batch_time=1713881134654 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15890 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:35 UTC	15890	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 31 31 33 38 35 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881111385,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:05:35 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:05:35 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: f70d9984-de69-4097-9404-aa00ecc1edcc cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:05:35 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 66 37 30 64 39 39 38 34 2d 64 65 36 39 2d 34 30 39 37 2d 39 34 30 34 2d 61 61 30 30 65 63 63 31 65 64 63 63 22 7d Data Ascii: {"request_id":"f70d9984-de69-4097-9404-aa00ecc1edcc"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49809	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:35 UTC	600	OUT	GET /static/js/5658.4583a995.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8266 Connection: close Date: Tue, 23 Apr 2024 14:05:37 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "2471286a779d43079135781617c0bba6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9cef05ab6cc8095e8cbb2721cdabd510.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TERpGNmOCkdic6mv4Yi_lhrjusBAoFbkEZR1de71pJaMYjeww0Pwbg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:36 UTC	8266	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 36 35 38 5d 2c 7b 37 35 36 35 38 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 74 29 7b 76 61 72 20 65 3b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 4e 49 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 2c 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 76 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5658],{75658:function(r,n,t){var e;t.r(n),t.d(n,{NIL:function(){return S},parse:function(){return y},stringify:function(){return l},v1:function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49810	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:35 UTC	600	OUT	GET /static/js/9778.c2571d8b.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28202 Connection: close Date: Tue, 23 Apr 2024 14:05:37 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "0c307e898efd90b6440f40533d788b7a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 20ae150f60acdff8fc384fb3233356a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: cGsvK5bpHB0NOkC1VOEoZkN1Id9FaoydqFu8BPIevcLvU4lDAsk7cg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:37 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 39 37 37 38 2e 63 32 35 37 31 64 38 62 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 38 5d 2c 7b 32 30 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 62 79 74 65 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 75 28 74 29 2c 65 3d 72 5b 30 5d 2c 6e 3d 72 Data Ascii: /! For license information please see 9778.c2571d8b.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9778],{2009:function(t,r){"use strict";r.byteLength=function(t){var r=u(t),e=r[0],n=r
2024-04-23 14:05:37 UTC	11818	IN	Data Raw: 69 64 20 30 21 3d 3d 65 7c 7c 48 28 74 2c 74 68 69 73 2e 6c 65 6e 67 74 68 2d 38 29 3b 76 61 72 20 6e 3d 72 2b 74 68 69 73 5b 2b 2b 74 5d 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 38 29 2b 74 68 69 73 5b 2b 2b 74 5d 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 31 36 29 2b 74 68 69 73 5b 2b 2b 74 5d 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 32 34 29 2c 6f 3d 74 68 69 73 5b 2b 2b 74 5d 2b 74 68 69 73 5b 2b 2b 74 5d 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 38 29 2b 74 68 69 73 5b 2b 2b 74 5d 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 31 36 29 2b 65 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 32 34 29 3b 72 65 74 75 72 6e 20 42 69 67 49 6e 74 28 6e 29 2b 28 42 69 67 49 6e 74 28 6f 29 3c 3c 42 69 67 49 6e 74 28 33 32 29 29 7d 29 29 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 42 69 67 55 49 6e Data Ascii: id 0!==e\|\|H(t,this.length-8);var n=r+this[++t]Math.pow(2,8)+this[++t]Math.pow(2,16)+this[++t]Math.pow(2,24),o=this[++t]+this[++t]Math.pow(2,8)+this[++t]Math.pow(2,16)+eMath.pow(2,24);return BigInt(n)+(BigInt(o)<<BigInt(32))})),l.prototype.readBigUIn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49811	172.67.68.84	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:35 UTC	418	OUT	GET /sdk-session-manager/v2/enduser-info/5c9cd8a6?v=1.0.28&e=Production&o=0&ns=true HTTP/1.1 Host: services.zipy.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	876	IN	HTTP/1.1 500 Internal Server Error Date: Tue, 23 Apr 2024 14:05:36 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-headers: Access-Control-Allow-Headers, Set-Cookie, cancelToken, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, auth-token access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0noH7GMySkVF8FN6ED3Y1Hl5zwK1CCCmGLvDEWZSxOr6CxxMYgsMeDr%2B3jCP46s02g2jJK2Hth229kfox8eoujTyHBG8X0UsJYMM9B0Q6QvM6xGibpLN1BocASAUUt4VRdc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e68cc1e67adcf-ATL
2024-04-23 14:05:36 UTC	354	IN	Data Raw: 31 35 62 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 38 38 31 31 33 36 31 32 31 2c 22 73 74 61 74 75 73 22 3a 22 49 4e 54 45 52 4e 41 4c 5f 53 45 52 56 45 52 5f 45 52 52 4f 52 22 2c 22 72 65 73 70 6f 6e 73 65 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 72 65 73 70 6f 6e 73 65 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 65 72 76 69 63 65 22 3a 22 7a 69 70 79 2d 73 65 72 76 69 63 65 2d 73 64 6b 2d 73 65 73 73 69 6f 6e 2d 6d 61 6e 61 67 65 72 22 2c 22 72 65 73 70 6f 6e 73 65 4f 62 6a 65 63 74 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 46 69 65 6c 64 73 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 22 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 77 65 62 2e 48 74 74 70 52 65 71 75 65 73 74 4d 65 74 68 6f 64 4e 6f 74 53 75 70 70 6f 72 Data Ascii: 15b{"timestamp":1713881136121,"status":"INTERNAL_SERVER_ERROR","responseType":null,"responseDescription":null,"service":"zipy-service-sdk-session-manager","responseObject":null,"errorFields":[{"source":"org.springframework.web.HttpRequestMethodNotSuppor
2024-04-23 14:05:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49812	18.165.83.9	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:36 UTC	1054	OUT	GET /protected/organization-994/favicon-1713869489.gif?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L2Zhdmljb24tMTcxMzg2OTQ4OS5naWYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTUwODAyNjB9fX1dfQ__&Signature=hqFYWRAheFJYyNn0S~v-sXDHQ5QAVnOjtInGu4qtkjkizEgPfqA8uaC~KESAmg9ivifpRnwR4WIr4kbFdj3Mskq63Pg5aXu8mvAcF5fXeg-FBzpprEdfJitgbv2VZitJBHPTkVisY3qHiHRPrGFOPkkQHNmA-kBKI5DAA4xTBPckPMLhZPczwgxnluE966DF3vGAQDdIBhdQg68RGGO1b5Tqlpi8MRlx5iAeuzq6dO07jRusCnviBPlVF9hXCgFOAcdTu1~el3kd7KI97w09GRfiiQCO7-PkSL6eLuWKD8GRm5s72lQ83pus02Gi5Y3C5q~FAUh29hetjTlsgSRJvA__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1 Host: dsr-images-us-east-1.prod.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	613	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 650 Connection: close Date: Tue, 23 Apr 2024 14:05:37 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Apr 2024 10:51:30 GMT ETag: "17505393b9802400190f9843b0c1977e" x-amz-server-side-encryption: AES256 x-amz-version-id: O3XNPl59aU5IrqkVtx26YjQZ2LvhZmyW Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 65566883560611dde36b4dfe13fd3272.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: V9oFBOwWbslOCkwpjQDTx6GYIYKUNpxaUlF5bj6gOehKUeXbp5hvQQ==
2024-04-23 14:05:36 UTC	650	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f6 4b 00 6c 39 39 6e 39 38 72 3c 39 77 3e 38 18 10 46 19 10 46 18 11 46 19 11 46 19 11 47 1a 11 46 1a 12 47 1a 12 48 1b 13 48 1b 13 49 1b 14 49 1c 14 49 1e 15 48 1d 15 4a 1f 17 4b 1f 17 4c 20 14 45 24 17 47 2f 1b 43 20 18 4c 21 19 4d 23 1b 4f 24 1c 4f 24 1c 50 24 1d 50 25 1d 50 27 1f 52 39 20 41 3d 23 41 28 20 52 29 22 54 2a 22 54 2c 25 56 33 2c 5c 43 2a 49 5b 34 41 5c 37 46 7d 48 43 94 4f 38 9e 50 30 9c 50 32 b5 5f 34 cb 66 29 c9 6c 36 e6 74 27 ea 74 23 ef 76 22 ee 76 23 ef 76 23 ef 77 23 ef 77 24 ef 78 24 ef 78 25 ef 78 26 ef 79 26 ef 79 27 ef 7a 28 ef 7a 29 f0 7a 29 f0 7b 29 f0 7b 2a f0 7d 2d f0 7d 2e f0 7e 2e f0 7f 30 ec 83 3b f0 80 32 f0 82 35 f1 83 37 f1 83 38 f1 85 3b ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a Kl99n98r<9w>8FFFFGFGHHIIIHJKL E$G/C L!M#O$O$P$P%P'R9 A=#A( R)"T"T,%V3,\CI[4A\7F}HCO8P0P2_4f)l6t't#v"v#v#w#w$x$x%x&y&y'z(z)z){){*}-}.~.0;2578;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49813	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:36 UTC	600	OUT	GET /static/js/1744.32cea325.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:37 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 32271 Connection: close Date: Tue, 23 Apr 2024 14:05:38 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "ca16263c79259fcbaf643d5cefea14e2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 71c9229c52c40e2117e67076e35eb6dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VFOv4IYkGZWUoCxUhHkwbME5E9RTOWyXVHxxqAX9eCBq2Nf9bM5KQA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:37 UTC	1497	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 34 34 5d 2c 7b 38 34 35 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 38 37 38 29 2c 6f 3d 6e 28 35 39 31 39 39 29 2c 69 3d 6e 28 34 30 31 38 31 29 2c 61 3d 6e 28 32 35 32 36 37 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 5a 29 28 65 29 7c 7c 28 30 2c 6f 2e 5a 29 28 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1744],{84506:function(e,t,n){n.d(t,{Z:function(){return s}});var r=n(83878),o=n(59199),i=n(40181),a=n(25267);function s(e){return(0,r.Z)(e)\|\|(0,o.Z)(
2024-04-23 14:05:37 UTC	15952	IN	Data Raw: 20 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 75 28 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 73 28 65 29 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 74 7c 7c 74 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 6e 75 6c 6c 3d 3d 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 26 26 21 28 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 20 69 6e 20 65 29 26 26 21 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 65 29 7d 2c 62 3d 63 28 22 44 61 74 65 22 29 2c 45 3d 63 28 22 46 69 6c 65 22 29 2c 77 3d 63 28 22 42 6c 6f 62 22 29 2c 4f 3d 63 28 22 46 69 6c Data Ascii: null!==e&&"object"===typeof e},g=function(e){if("object"!==u(e))return!1;var t=s(e);return(null===t\|\|t===Object.prototype\|\|null===Object.getPrototypeOf(t))&&!(Symbol.toStringTag in e)&&!(Symbol.iterator in e)},b=c("Date"),E=c("File"),w=c("Blob"),O=c("Fil
2024-04-23 14:05:38 UTC	8949	IN	Data Raw: 3c 6e 3b 6f 2b 2b 29 72 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 73 65 74 28 65 29 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 61 63 63 65 73 73 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 74 68 69 73 5b 79 65 5d 3d 74 68 69 73 5b 79 65 5d 3d 7b 61 63 63 65 73 73 6f 72 73 3a 7b 7d 7d 29 2e 61 63 63 65 73 73 6f 72 73 2c 6e 3d 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 72 3d 67 65 28 65 29 3b 74 5b 72 5d 7c 7c 28 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4c 2e 74 6f 43 61 6d 65 6c 43 61 73 65 28 22 20 22 2b 74 Data Ascii: <n;o++)r[o-1]=arguments[o];return r.forEach((function(e){return t.set(e)})),t}},{key:"accessor",value:function(e){var t=(this[ye]=this[ye]={accessors:{}}).accessors,n=this.prototype;function r(e){var r=ge(e);t[r]\|\|(!function(e,t){var n=L.toCamelCase(" "+t
2024-04-23 14:05:38 UTC	5873	IN	Data Raw: 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 69 29 7b 69 66 28 21 31 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 4a 28 72 28 6f 2c 22 20 68 61 73 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 22 2b 28 74 3f 22 20 69 6e 20 22 2b 74 3a 22 22 29 29 2c 4a 2e 45 52 52 5f 44 45 50 52 45 43 41 54 45 44 29 3b 72 65 74 75 72 6e 20 74 26 26 21 4a 65 5b 6f 5d 26 26 28 4a 65 5b 6f 5d 3d 21 30 2c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 72 28 6f 2c 22 20 68 61 73 20 62 65 65 6e 20 64 65 70 72 65 63 61 74 65 64 20 73 69 6e 63 65 20 76 22 2b 74 2b 22 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 6e 65 61 72 20 66 75 74 75 72 65 22 29 29 29 2c 21 65 7c 7c 65 28 6e 2c 6f 2c 69 29 7d 7d 3b 76 61 72 20 5a 65 3d 7b 61 73 73 65 72 Data Ascii: return function(n,o,i){if(!1===e)throw new J(r(o," has been removed"+(t?" in "+t:"")),J.ERR_DEPRECATED);return t&&!Je[o]&&(Je[o]=!0,console.warn(r(o," has been deprecated since v"+t+" and will be removed in the near future"))),!e\|\|e(n,o,i)}};var Ze={asser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49814	3.163.101.92	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:36 UTC	506	OUT	GET /frame-modern.e91be2dc.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 145451 Connection: close Date: Tue, 23 Apr 2024 14:05:37 GMT Last-Modified: Tue, 23 Apr 2024 14:02:28 GMT ETag: "dbafd06dee91b470c42b4c00097d19c6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: 41BkbX7Xv9xm4Vq16X4w__FdJHG49hAY Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c95c58c776c7077b19a10e3445dd9bb6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qtlFdIP76ckVeSk2fqKr4M6HwfZpZPPglTEX5BgkgLTnRwq3GLVSiA== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-23 14:05:36 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 07 7b db 48 b6 20 fa 57 28 5e 3f 5d 60 ba 04 31 29 90 1a b6 56 c9 96 6c 25 2b d8 b2 bd 5e 1a 24 8b 22 2c 10 a0 01 90 34 2d f1 bf ef 39 a7 aa 80 42 a0 e4 ee 99 7b 77 df fb de 37 d3 32 88 50 f1 d4 c9 c1 30 cc f6 9f 8f 53 3b 28 71 16 b1 80 79 cc 61 7e fb 71 ab 5e ab 57 5a 06 dd 53 2f 78 ed c7 b2 b5 3e b0 1d 97 f7 ad d1 b8 5e 6e d5 6b db 9b 75 06 37 3d 3f 72 06 4e cf 8e 1c df 13 8f 9a cd 7a a3 8a 8f fc 31 0f ec c8 0f e4 17 db b5 46 03 6f 87 93 ee c8 89 c4 cd 46 a3 ba b1 b9 d8 19 4c bc 1e 36 50 72 0c 6e 52 8f 51 db 87 cb 9d 80 47 93 c0 2b 05 46 64 2e e2 97 f0 c9 a3 33 30 56 02 cb 37 3c c6 4d f5 89 c7 67 a5 a3 20 f0 03 a3 7c 60 7b 30 b2 d2 c0 f1 fa a5 91 df 9f b8 bc f4 9f e5 3f f8 1f e5 ff 2c 9b 3b d1 30 f0 67 a5 c8 ea f9 7d Data Ascii: {H W(^?]`1)Vl%+^$",4-9B{w72P0S;(qya~q^WZS/x>^nku7=?rNz1FoFL6PrnRQG+Fd.30V7<Mg \|`{0?,;0g}
2024-04-23 14:05:36 UTC	435	IN	Data Raw: d4 08 77 18 53 f1 38 85 11 56 d4 06 20 5f 32 34 94 e7 3d 67 3c e6 91 be d0 fa d8 80 c2 4c 2c 44 90 61 2c 93 c8 ac 62 28 f5 4a 3d ef 35 b1 29 a6 f9 a5 f2 35 85 4a b2 ef 87 f4 4a 5c 90 0f e9 ad b0 76 21 e9 e7 92 f4 23 43 ac 58 43 c9 81 da bb 64 bb 7a ed fa 76 64 d8 a6 c4 2c 2c 28 78 13 e5 27 c9 0e f0 76 9f 08 95 25 9c df 53 1c 01 57 b8 6f ad 4a 88 4c 15 a8 a1 a2 ad ed 18 f7 a1 b8 ec 84 e7 f6 b9 81 59 5d 0d d9 5e 08 ac 33 a7 68 82 7f e2 1b f0 57 7f 70 e4 f5 63 cb 5f 42 82 11 56 db c8 06 8c f6 ad 11 30 70 ce 35 a5 49 da c5 a4 1e e8 e5 12 c7 83 0a 18 2d 6b 4e f7 30 b6 12 69 3d d0 25 59 b5 c7 e2 ab 92 a2 cb e4 c7 8c 5f c0 49 9c 3a 7d de 2f 01 d8 c6 6f c9 45 28 f5 7d 7a 47 54 c5 21 60 8f bf 5f 93 7c bb 48 ce 76 3f 71 ed 40 9e 84 b2 ac 66 88 c7 76 12 6b 50 c6 ed Data Ascii: wS8V _24=g<L,Da,b(J=5)5JJ\v!#CXCdzvd,,(x'v%SWoJLY]^3hWpc_BV0p5I-kN0i=%Y_I:}/oE(}zGT!`_\|Hv?q@fvkP
2024-04-23 14:05:36 UTC	16384	IN	Data Raw: 7e 9c f4 f5 2d 86 17 be c4 f8 12 19 bd 28 11 ce 82 c5 57 d8 00 40 77 72 eb b9 d8 7a fa b6 f5 c5 b2 2c d9 ce d3 d3 97 af 09 b3 36 31 bf 32 1d 07 b6 90 91 d7 78 bb 38 74 98 16 e7 ba 10 0c 4b 43 38 b7 54 cf 5d e6 4b 17 2f e8 db e4 c1 b9 23 07 5d 63 2c b2 24 c5 de 17 cb 21 05 c3 74 0a e1 04 13 64 97 54 96 36 1d 46 08 1e e6 c0 b4 67 52 43 a7 42 ef e2 ba d4 0a b8 f5 ba d4 72 9f 8b 2a 52 4f ff 8b 2b 52 c7 24 5b 68 31 62 64 84 e4 44 3c 92 cc 10 ef 77 50 4d 8d 25 a6 45 6d 63 4f 77 8f e8 5b 21 2a 77 28 0f 89 d7 f6 70 b7 77 bc a4 7e 99 f9 e7 5a 75 37 b7 a1 d9 3a d7 b8 a1 b6 ac 3d 4f 1b 1b 77 ad 6a 55 ab 82 f3 91 dd c5 42 f3 2f b6 b8 ac 72 f6 25 f0 06 e3 7c e5 6c e6 89 52 e4 c0 ed e3 84 42 9c 10 cb 94 a4 a6 bc 75 58 c7 33 d9 4b bd c8 b6 dc ca 82 0a db 7a 0e f0 3c 68 Data Ascii: ~-(W@wrz,612x8tKC8T]K/#]c,$!tdT6FgRCBrRO+R$[h1bdD<wPM%EmcOw[!w(pw~Zu7:=OwjUB/r%\|lRBuX3Kz<h
2024-04-23 14:05:36 UTC	6396	IN	Data Raw: 9f 31 7b 57 63 15 b2 8a 1a b8 8a da 32 a0 02 93 e2 c3 12 f1 4f 26 4a 52 cb 62 1d f5 fe 9c de e3 68 7e 32 d0 39 c3 d5 2a 9f 0c d4 9b 8b b5 c6 f8 7e f8 d5 72 a4 4b 9c 7c 0e be 24 0e fb 8f 07 10 c4 9c 0a 04 fe b8 6c 6d c9 98 67 4e df 40 e2 f2 9b 6f ce e9 f4 3f 5d dd 5a d7 ce a9 73 25 8e e6 d0 3d 71 42 65 05 fc 5a 3a ab 2f 69 bd 86 6b 99 ea ca 9b 31 ce 85 a3 ca cd bb e7 96 a9 03 d8 ad c1 c6 2e f0 64 03 8e 26 5a ea 2d fa 0f 2b a6 2e 8a 8a 1f 08 15 7f 3a 9e 1e e7 e3 ea 12 15 5d 1d 44 7b 7d f9 a0 bf 86 6e ac 40 d9 c9 3a 94 9d 1a 28 23 c2 64 ad bf d0 84 74 ae 4a 25 62 b6 17 32 50 58 ae 91 0d 8a 57 da 77 a6 a5 d8 37 73 c4 8b 15 ed 24 41 71 a3 3a d5 a5 6e 7e c3 c5 43 ff 36 8b 8d 71 69 8e b1 d4 ba f3 10 f5 b3 c6 fa 8c fa 01 a4 7e c8 81 d0 24 ca 72 f7 7c 5b 69 f2 31 Data Ascii: 1{Wc2O&JRbh~29*~rK\|$lmgN@o?]Zs%=qBeZ:/ik1.d&Z-+.:]D{}n@:(#dtJ%b2PXWw7s$Aq:n~C6qi~$r\|[i1
2024-04-23 14:05:36 UTC	13701	IN	Data Raw: e6 ee 7e bb 67 95 79 c4 65 00 b3 3d 59 50 40 ed f6 23 dd f4 f3 ed 81 bb eb 82 73 c2 5c 9e bb b3 b0 b5 f5 be d4 0a 37 d5 3c e7 6a 06 b4 94 bc 70 fa 9e 79 fb 79 cb f9 b3 c4 e4 8f 2a 81 b3 4d cc da 2a 2a 2e 29 80 99 25 79 01 a2 7a 40 27 ea 04 6e e8 5f bd 78 c2 5e 1c 26 d4 0e 08 99 dd d9 2c c7 9e e7 5f 62 60 76 26 15 be 67 21 51 5c 89 65 9e 5d bf 7e b3 fd f5 55 4d 2d b4 d1 ff 80 1f 13 bb 6c 7d c9 09 4a 4a d8 5c 08 23 b6 9a df 34 ad 50 85 bb 18 e2 62 76 79 65 2f 2d fb b8 44 13 62 14 5d d2 8e 85 15 01 f3 49 e9 53 d3 30 83 8b 1a 66 90 dd 3c 97 2d 94 85 ad a6 16 75 de 61 67 d7 aa fd 32 ee e1 2d 0d e9 b0 7b 7f 6e 5f a9 50 73 83 4b c2 3d 90 16 54 84 d7 d0 4e af ca 09 61 40 6d 04 e1 db 75 17 48 4a a3 d8 52 9a 9d 4a 4e 95 8b 50 ba c5 8e 66 25 b4 ff 0c 83 cc c6 ea b9 Data Ascii: ~gye=YP@#s\7<jpyyM*.)%yz@'n_x^&,_b`v&g!Q\e]~UM-l}JJ\#4Pbvye/-Db]IS0f<-uag2-{n_PsK=TNa@muHJRJNPf%
2024-04-23 14:05:36 UTC	16384	IN	Data Raw: a9 f5 72 23 ad b2 11 9f 1b e1 ae 59 d2 e8 73 34 93 b0 28 c3 3f d9 58 57 b7 62 4a e4 93 e4 0b 60 b3 c0 50 a2 c2 bc 29 14 f7 57 b7 52 2b 4b a0 b4 07 af b2 51 3f 9e 0e 1b ff 0f f3 2a cd 92 9f 7c 3a 77 3e cd 9d 3d 8b 9f dc b5 f8 c9 dd 9b ca 4f ee ae e7 27 1f ac e1 27 77 af 95 9f 7c 0a 82 f0 e9 3a fd 78 f7 13 9c 89 bb a7 f8 3b dd 40 62 ad 2b 1d b9 89 f8 a4 15 79 92 8e e0 be a6 0e 0e a3 f8 20 94 2a 35 3f 4d dc 2e 51 74 a6 79 ce 23 8a 21 7c fa 02 79 46 b5 b7 d5 22 8d aa ec 22 01 09 0e 83 91 08 86 ec 9c 75 dd cf 45 85 3e c7 a6 a5 8d 23 19 5a 7c 00 6f 64 b4 83 6b 70 09 11 6d e1 11 5b 4e 31 3d e1 cb 06 58 5f f3 79 5e 2f 48 7a 07 6e 36 ce de a6 f3 c1 89 7c e0 1e 3e 70 ef aa 39 06 db 13 f1 3c 87 a0 e7 69 ae f9 67 c1 47 df ea 3a 8e 94 3e 08 7b 09 6a ac ec 58 30 ea c9 Data Ascii: r#Ys4(?XWbJ`P)WR+KQ?\|:w>=O''w\|:x;@b+y 5?M.Qty#!\|yF""uE>#Z\|odkpm[N1=X_y^/Hzn6\|>p9<igG:>{jX0
2024-04-23 14:05:36 UTC	10616	IN	Data Raw: 76 eb 7c 95 ee fd f9 0c 60 d5 6b df 3e cf 2e fe dc a8 cb 5d a3 59 77 52 eb eb 26 4e 7a 51 6e 1a 27 25 24 34 ce e7 7d 1a d4 c6 1c 1c 14 cc 32 ca fd f7 b0 0a 2f fc d0 a4 5e d8 ec 5f 38 9e eb 45 57 09 1b 7e d5 4c 8a 74 9d be 5c 4c 9c d1 7d be 18 3b c7 07 22 14 72 4e 85 5c 49 9d b3 a7 85 68 82 10 a6 36 5e 05 b7 d9 ab ac cd 3b e5 a6 fb 7a 33 df 33 51 88 dd 72 53 51 19 2e a4 a8 47 38 dd 03 58 78 54 9c df c8 a3 19 ed dc d9 a6 a6 72 be 92 c2 11 1d bd 83 67 bc fd 6e fa f4 c8 ba a7 0a c0 7e 50 50 97 0c ea 20 1d 8f b3 29 8f 4a 2e a5 cd a3 c9 4c 86 85 8b a2 95 c9 65 ad 4c b3 0f c7 83 69 d6 23 24 a1 77 f2 3b eb 0b dd ca 17 8e f9 9c e6 f6 e5 52 8a b3 51 3a 18 f2 57 f3 95 19 49 7f 32 96 4f e6 ab 62 2c b3 cb c6 c2 67 f7 a0 cb 5d 9a 6b 33 79 b4 1f cd b8 53 be ca fb 9c bc Data Ascii: v\|`k>.]YwR&NzQn'%$4}2/^_8EW~Lt\L};"rN\Ih6^;z33QrSQ.G8XxTrgn~PP )J.LeLi#$w;RQ:WI2Ob,g]k3yS
2024-04-23 14:05:36 UTC	16384	IN	Data Raw: 81 fe e2 57 2b 04 cf 0a 1e 61 d6 ca 22 be 5d 59 a2 f2 55 d8 c5 d6 6a 6d 99 fe 62 f9 ea 12 95 ac 62 3b ab 48 6d e0 2f 96 ac d5 b0 fe 1a f5 b2 56 c7 fa 6b 2b 54 82 c8 60 ad d7 ea f4 77 19 43 e3 ca 49 5a 80 49 ba 34 a7 b4 f8 64 39 fd 62 6e bd 02 c4 81 b6 2f 0c e2 b5 b0 b8 54 b2 ba 26 9e 2d 16 e3 59 dc 35 6b 97 b4 6d f0 15 cb c5 4d 77 8c cd b4 56 52 f9 7a da 33 ae 0e 95 3b d3 56 c6 a5 31 e9 5c c9 46 32 b7 c6 4a f1 96 ee 98 93 57 72 d8 76 ce cd da c5 e7 4a e7 c2 18 e3 5a 49 6d 93 84 d6 4a 26 db 24 2e f5 e2 45 ef 85 26 e9 2f 41 11 83 59 59 2e 99 92 ab a9 37 02 d6 36 4f f1 92 a5 ec 18 07 f3 52 bd 98 a1 e8 1a d3 5d b2 c5 ba e6 29 5e 32 c8 ae 79 8a af 96 9c 86 dd a0 80 de ae d5 38 5d a2 bf 40 69 4f 8c 7d c1 3a e6 74 16 c3 c5 4c 7c 2c 9e 9f e8 d2 44 b0 e2 a6 cf bf Data Ascii: W+a"]YUjmbb;Hm/Vk+T`wCIZI4d9bn/T&-Y5kmMwVRz3;V1\F2JWrvJZImJ&$.E&/AYY.76OR])^2y8]@iO}:tL\|,D
2024-04-23 14:05:36 UTC	16384	IN	Data Raw: b9 ab 04 98 a4 af c3 f5 fa 9f 58 d2 52 10 cc 5b 38 81 86 f9 28 4f 26 b3 74 25 97 c6 ce 30 77 e3 28 52 b9 ed 86 dd 08 77 cc eb c2 0b eb 8b d6 8d ee 6e a3 db 95 f8 cd 8b d8 30 5c 99 d9 8d 2b 76 c5 77 3e dd bb 55 76 29 e3 6a b2 d9 3f 39 b3 0b b6 b3 93 57 09 1f e0 8f 7f e9 46 55 91 17 26 e9 2b fa e4 00 9c bf 83 20 fa 39 ae be df b5 41 d0 60 d8 94 9d 10 c4 ad af 09 94 b9 50 85 49 87 d5 51 1e 58 85 b5 58 f7 13 fa b7 4e a8 84 8c bb e7 f6 71 46 3f 39 fc 85 82 ac bb 7b f6 77 ce 5f ed ef 9b bf 9a 36 7f bb b5 a3 3f 3e 7f e2 d2 df 80 4e 99 c7 3e ed e6 34 f8 cd 57 c2 04 6a ca ba c4 69 16 77 9d 1d ea 82 f4 f6 f4 9b fb f8 91 58 76 c7 53 3f f9 27 25 b3 d8 21 9c f1 27 f5 9c b3 ac 9f f0 52 64 a7 a0 31 58 e3 d6 65 c2 f5 bc ee fc e9 95 95 13 33 e5 74 97 2c 60 ee 2e 29 a2 50 Data Ascii: XR[8(O&t%0w(Rwn0\+vw>Uv)j?9WFU&+ 9A`PIQXXNqF?9{w_6?>N>4WjiwXvS?'%!'Rd1Xe3t,`.)P
2024-04-23 14:05:36 UTC	16024	IN	Data Raw: d5 29 a0 b4 3a 05 f2 01 02 5c c6 f1 0d dc 3e b0 46 6a 36 12 96 f5 43 c0 fc 78 6a 35 c4 34 3e 03 3a 3d 7e e8 aa 0c dc 8f be 8d d4 56 5b 1a b3 8f 0b fa 7a 68 57 e1 96 c4 6e 58 bf 77 41 12 40 99 43 2d cf 9b b9 cf 0b 77 7a 3e a0 8b 76 8d 91 01 07 2b 79 23 82 b4 d8 88 20 a5 88 55 b6 ae 59 ce 5e f1 05 a6 74 1a 36 ab d1 15 66 be 9e 7d b3 69 54 9c 7b 35 68 2a a6 e7 48 63 e3 c4 fd 7a 41 a2 ce 43 6e a9 05 0c 94 89 0c 01 c9 5e 66 92 73 fa f2 72 55 5e dc 29 03 9d ca 02 57 d5 72 80 85 57 1c 72 76 4a 34 d7 76 b6 b1 ec fd 05 0c fe 60 48 f7 82 c9 93 db 33 ef 12 d3 64 d7 aa 28 73 51 36 6a 3e 05 bd bc 01 c2 73 ba 68 a0 f9 3a 49 dc 97 37 68 e7 e7 9b d7 f2 05 46 0b 74 27 07 a5 bf 37 b1 34 0f ce 5e 65 f7 f4 e0 cc 4a c6 45 86 bb f7 55 b6 e8 8e ff 73 53 c0 81 be 40 6e 69 51 98 Data Ascii: ):\>Fj6Cxj54>:=~V[zhWnXwA@C-wz>v+y# UY^t6f}iT{5h*HczACn^fsrU^)WrWrvJ4v`H3d(sQ6j>sh:I7hFt'74^eJEUsS@niQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49815	3.163.101.92	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:36 UTC	507	OUT	GET /vendor-modern.07772018.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 150799 Connection: close Date: Tue, 23 Apr 2024 14:05:37 GMT Last-Modified: Tue, 23 Apr 2024 14:02:28 GMT ETag: "b27b573e6b04daed0b4144a6e206ba93" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: WFyqpXk3Ig2BfTeA3BYPpJns.vOIva4N Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 109d9edc1c8cf44908a8ad8f3f91edd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: NmwdTHgDU3Hwa5adTYaM8AwxcirMPK2Jp7PFue-nQA4IRJRBHXUx4w== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-23 14:05:36 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 7b db 38 96 28 fc fd fd 15 36 27 ed 21 23 5a 96 e4 9d 32 a3 c9 e2 54 f9 76 12 67 62 a7 aa fa 2a 2a 3d 94 08 49 2c 53 a4 42 52 5e ca d2 7f 7f cf 39 58 08 2e 72 92 ea 9e e7 ce 87 ee ea 58 c4 0e 1c 9c 15 38 00 f6 9e 6f 6f bd 8d 93 ad 30 18 b3 28 65 5b 41 34 89 93 b9 97 05 71 b4 b5 08 99 07 51 29 63 5b b7 2c f2 e3 64 77 1e fb 2c 89 9a ad e3 e3 e3 4e ab 7d d2 fc 23 6d be bb 78 7d fe e1 ea bc 99 dd 67 5b cf f7 fe 3f 73 1a c6 23 2f bc 9e 05 69 f3 8e 8d 16 de f8 e6 f5 6c 19 dd 04 51 c6 92 71 3c 1f fe 91 ba df ce b2 5a f5 07 56 73 b1 4c 67 66 bf 7f d0 ee b4 07 f6 e3 f1 c1 c1 e1 89 63 32 3b b3 23 cb 7d f1 68 2c b1 6f 59 12 8c 33 a3 7b 39 fa 83 8d b3 a6 cf 26 41 c4 3e 26 f1 82 25 d9 83 99 d9 c6 70 c8 d2 f7 b1 bf 0c 99 61 3f de Data Ascii: i{8(6'!#Z2Tvgb**=I,SBR^9X.rX8oo0(e[A4qQ)c[,dw,N}#mx}g[?s#/ilQq<ZVsLgfc2;#}h,oY3{9&A>&%pa?
2024-04-23 14:05:36 UTC	1261	IN	Data Raw: 88 8d 10 c1 03 2c df 01 90 e9 77 01 64 5c 03 90 f4 7f 13 40 10 63 aa f0 40 18 7c 13 41 e8 60 40 f7 5b 68 62 82 9e eb d6 82 66 8d de 98 e5 68 03 ef 55 40 15 dd a8 00 ce b0 97 22 a9 06 7e 06 48 31 9e 58 01 61 9e 94 43 a9 c4 1c ca c9 1c ae c5 4c c4 c6 aa 39 39 b8 8d 1a be 2e f2 ea d3 60 d8 1c e0 22 a9 38 19 86 2d 26 c9 a2 45 ce 8d 33 f2 ff 08 41 c7 35 c8 39 d6 11 b3 20 1e 2a 38 5a 95 08 55 9c 7d 42 08 68 d8 ba 11 87 d7 5c 62 d6 79 b3 fe 45 f5 d2 ef 16 2f 2a 33 a4 b0 d8 a5 bb b8 76 41 f3 37 c4 3d 9f db 43 73 0c 9a f1 ad 78 83 bc 94 71 bf d9 2a 65 9c 5b e5 db 6d cb 1a c8 0b 30 74 73 43 e4 4a bc e7 bb fd 2a 8e 43 e6 c1 e8 24 a4 c8 07 c7 b2 b2 19 de f4 fc 72 4b c4 6e 11 64 b7 ee bc 74 2b 8a 33 88 8d 6f 03 9f f9 5b 59 bc 95 cd 98 48 05 c3 70 bc 0c f9 ab ee 5d a5 Data Ascii: ,wd\@c@\|A`@[hbfhU@"~H1XaCL99.`"8-&E3A59 8ZU}Bh\byE/3vA7=Csxqe[m0tsCJC$rKndt+3o[YHp]
2024-04-23 14:05:36 UTC	12792	IN	Data Raw: 51 48 60 1a 1f 54 36 83 1f b3 c7 82 af e3 f9 bc 2c e4 6b 0a 8a 6c b2 20 aa 64 8a b5 6e 3a 25 a5 98 2f 81 73 b6 cc fc f8 2e aa 80 f0 69 28 68 3e 3e aa 0a 93 76 2b 53 bc 11 2a 4b e2 07 dc 1a 68 26 0c 9f 21 da cc 32 d7 f4 f6 7c 86 66 96 e2 ce 7f bd 27 09 13 79 3f c4 77 a6 9c 05 6d 92 aa 78 92 77 1d 72 72 a9 c1 7c 4d 68 00 88 7f 65 a3 34 1e df b0 ac ae 8b 4c 13 96 fc 1a 50 7c b4 23 c4 c3 26 09 7f 72 de 58 46 28 b3 86 59 3c 64 b2 d6 21 4c f0 f0 4e d6 3b 1c b1 b1 07 a2 68 68 34 d4 35 23 4f 0b 30 75 1d c9 5f 9d a4 ef 17 36 a4 88 b3 04 37 e8 7f 66 5e 98 cd c8 e0 fb 27 e6 a8 5a 99 9a 29 94 e7 bc 9e 4a fd 15 d4 69 34 e8 5d b3 fa c4 9e 59 af 54 98 da 7b c4 3c 47 08 26 ec 9b 20 15 dd 7f 89 2e 00 21 d8 6e 73 5c 7c 36 c0 76 46 07 6d c3 ae d3 3e 77 eb 2b 90 13 58 8e 77 Data Ascii: QH`T6,kl dn:%/s.i(h>>v+S*Kh&!2\|f'y?wmxwrr\|Mhe4LP\|#&rXF(Y<d!LN;hh45#O0u_67f^'Z)Ji4]YT{<G& .!ns\\|6vFm>w+Xw
2024-04-23 14:05:36 UTC	12792	IN	Data Raw: b5 74 8c 66 8e aa 4a dc 7e e5 8a 51 45 f5 b4 5b 8d d5 c6 22 e5 9c d2 d2 57 d4 73 26 90 81 d3 4c 3c a8 16 0f 72 33 54 8b 07 a0 1c 41 dd fa 84 a0 4a c6 c9 4f e7 64 f7 5c 94 88 6f 51 2a ff 1e 6c 6f 27 6f b5 af 76 f7 b3 69 e4 ed ef ed 03 6b d9 dd c7 a2 54 de fe c7 c3 b7 78 75 c0 15 eb 00 c1 ef ec bf db 7a bd e3 a1 17 0a ea 09 a9 16 0f 9c 40 6f 9a 4d b9 d6 ba 5d f5 c4 7a 31 50 b2 3b 93 f0 ad 41 99 cb 4a 1c 85 f5 7d 08 6e da f0 98 d2 72 02 51 53 2a 50 e0 5b 10 b1 10 50 b6 74 6d 68 a5 9b 2a 6a e6 ca 99 37 b3 02 18 e9 2e 4d 40 7c 91 d7 f0 1b fe 15 c9 e8 6b 58 ce dd 40 0b e5 df db c4 79 58 bc 46 15 77 15 29 ca 53 e5 39 3b c5 b5 27 21 d1 cf 45 01 c4 14 0e 98 e7 09 00 08 fc 3b 17 8d 57 ca fe 10 bd 67 4a 96 14 50 7f 88 43 c4 62 d2 38 4a 60 f3 6f 6f 2b 2e ef 26 d9 8c Data Ascii: tfJ~QE["Ws&L<r3TAJOd\oQlo'ovikTxuz@oM]z1P;AJ}nrQSP[Ptmh*j7.M@\|kX@yXFw)S9;'!E;WgJPCb8J`oo+.&
2024-04-23 14:05:36 UTC	9232	IN	Data Raw: 67 a5 a9 83 ac 1e 56 37 08 ab f3 55 06 91 91 b3 3b 62 7f 37 23 68 9d 3e 30 3f 9a a0 27 51 95 40 48 96 a4 c2 6b 5d db 93 f4 1e 4b 55 33 a9 ce 2e 48 c9 ef 25 c9 b7 87 f0 fd f8 8c 98 db dd 52 5e f8 b9 24 4d 4b aa 07 e1 14 a9 48 83 3a 2b 53 2f 50 8a 9a b6 20 00 96 bb 5a 0f 36 0f 28 82 09 99 1b a1 dd 62 72 74 b3 c2 d8 74 13 06 3e 47 03 e9 47 ad 55 47 d9 ad 61 f2 2f 95 c7 95 31 f8 9a ac c6 03 c9 23 2a 83 14 33 fd 92 94 7d 4c e9 6b 1b 33 2d cc 4c 45 2d 18 04 99 25 33 1c a6 82 6f e0 70 c2 19 86 63 5e 50 3a 4f cc 36 07 d7 e8 b6 e2 d0 7a ca 5e 56 fd 4c c7 a7 0c a8 01 e6 35 d5 33 2b 5b 14 e1 53 68 7b 0e 67 97 f2 5c fe c9 c5 07 db b5 d1 6e 4b 8d ae 2b 7e 12 b7 b7 d7 28 27 a3 9b 8c 73 46 6e ea aa 43 d2 a6 89 fd b9 30 7a de d0 8d 40 50 3d 5f b9 35 1d af 1c 26 50 b0 4b Data Ascii: gV7U;b7#h>0?'Q@Hk]KU3.H%R^$MKH:+S/P Z6(brtt>GGUGa/1#*3}Lk3-LE-%3opc^P:O6z^VL53+[Sh{g\nK+~('sFnC0z@P=_5&PK
2024-04-23 14:05:36 UTC	16384	IN	Data Raw: d6 ad d3 34 8b dd 12 f5 8b 58 7e a0 64 47 d3 09 bb bb 1c 3a 36 85 4b 2b e4 90 66 65 d4 8d fb 17 46 2d 6b 8c 0b 9c c3 0b 54 a7 04 68 8c ad 40 f4 48 e9 f8 98 77 f7 f1 31 c1 92 eb 55 3f 2f ae e3 bc c5 0e a7 b0 c3 81 a4 53 1a 2b 33 97 54 32 61 74 e2 30 2c b3 6d 22 bc 06 43 9c e6 90 93 35 22 0f 29 01 7b 16 50 1b e7 38 2f a8 0f 8d e8 1e 50 be 3b 01 52 96 26 7d 91 2c 90 e8 3b fd 22 37 06 9f 63 d9 ca 52 03 5c de 41 eb 66 ef 7c 83 cb 4b c5 3b 52 0b e5 dd d6 9e 81 f8 3d 00 70 4d bd 01 67 d1 70 dd 94 42 a3 7d b8 1b 58 d0 84 b2 35 83 02 53 0b 69 ef 40 2d a5 ed ee b6 86 ea 05 bb ef f3 02 c9 11 2a d7 7c 82 65 17 b4 53 a5 f3 39 62 df cc e2 e0 3c 40 f8 a2 1d 81 42 18 30 c1 2b f6 3d 44 63 12 36 f0 dc 01 c6 4a 91 12 c0 9b 40 17 72 27 42 e9 4b 90 40 00 d4 9c fa 3c 95 bb 47 Data Ascii: 4X~dG:6K+feF-kTh@Hw1U?/S+3T2at0,m"C5"){P8/P;R&},;"7cR\Af\|K;R=pMgpB}X5Si@-*\|eS9b<@B0+=Dc6J@r'BK@<G
2024-04-23 14:05:36 UTC	16384	IN	Data Raw: a7 51 ab 17 91 13 cc 9e 88 59 6a b6 3a 87 85 84 8a 04 47 88 dd b5 50 1e 9e 44 cc 4f 35 ab c2 dc 03 9c bf 02 37 22 5c 4f 85 05 cd 0f f8 87 f9 dd a9 94 06 8c 68 53 ce 87 bd f0 5e 15 21 04 47 76 1f 16 1a be 35 72 42 b0 24 dc 75 37 b6 16 ce c8 ee 7a e8 60 a0 9c 22 87 ee 28 cd 54 8a 2f 69 b7 0b f5 0b b4 c6 44 27 58 79 29 24 76 41 51 6b f4 f2 de a4 1f ba 61 6f c0 e6 41 b3 5e 2f da 74 b5 83 b6 ec f6 e0 e0 e0 f0 e0 36 f4 2c 44 27 56 e2 c6 22 00 9e 26 6e 39 93 05 bd 35 04 0b e6 13 c5 4d 87 66 10 96 cb 43 3b 0d 38 44 77 91 c4 43 c7 b8 a3 d9 a9 d7 0a 09 35 63 9d 05 3d 74 03 89 1f b8 c2 a5 59 9d 57 a8 41 69 7d 02 27 64 3b 42 a2 a9 eb 44 61 15 c9 e9 20 27 94 6a 9e 96 a4 07 5b 87 0d d0 52 9e 4b b4 a8 0e 77 fb da 3b 95 c3 de ce 67 65 f5 f3 30 03 ea a7 e8 57 59 1f 0c 4b Data Ascii: QYj:GPDO57"\OhS^!Gv5rB$u7z`"(T/iD'Xy)$vAQkaoA^/t6,D'V"&n95MfC;8DwC5c=tYWAi}'d;BDa 'j[RKw;ge0WYK
2024-04-23 14:05:36 UTC	5608	IN	Data Raw: b3 d0 da 23 c5 c5 20 20 32 0f a9 4a 3a 54 e9 33 44 ce 28 81 a5 01 c0 d4 53 4c 94 6b 64 de d1 73 fd 35 7b 32 25 7c 6e 76 34 49 e9 ac c6 9b 89 54 37 e9 41 df f5 04 44 4d a2 54 1d ab 61 bf 6a 90 7a ea cd e0 31 0d 97 b5 44 a0 43 cd 82 2e d0 a0 c7 09 f7 03 9a 1d b7 40 a8 cd 69 cc bc eb 60 84 75 90 a2 b1 fa 59 f1 f2 72 bd 94 b3 3e 6f a5 a3 ae b1 70 3c 88 a1 5d 3f 02 13 26 d3 ac e5 b2 99 5f 54 28 82 e5 e3 f9 5d a6 c9 b6 f1 a0 78 65 f4 78 f4 b3 66 dd f4 2b 3a 1e db f7 2c ef b8 0c 3a e7 02 86 59 6c 74 5b eb 4d 63 5c cd 09 9b 0c d0 49 7b c6 d7 75 20 95 ee 72 c7 29 6d 67 ee fa d3 42 50 75 99 ad c5 f5 24 fa d8 cc ac 03 cd 18 13 72 3d 47 9c ed a9 d6 6f 42 e6 e6 99 d6 6f 62 e2 28 d0 76 d9 b5 fe df 30 15 91 5f dc 05 ff 7a 35 99 7b 61 bc 93 be 06 51 0c 87 ae 56 95 d0 be Data Ascii: # 2J:T3D(SLkds5{2%\|nv4IT7ADMTajz1DC.@i`uYr>op<]?&_T(]xexf+:,:Ylt[Mc\I{u r)mgBPu$r=GoBob(v0_z5{aQV
2024-04-23 14:05:36 UTC	12792	IN	Data Raw: ec ad f1 55 b5 b6 c6 44 32 16 39 87 93 ab 5a 5d 9d b7 f4 a2 41 0b 7f cd 62 34 1d 5d 2f 12 38 16 26 ae 39 e3 e6 56 68 03 e4 be 86 39 3f 3c 24 6f 6f cf 33 76 91 af 15 7c ef 74 56 bf 66 e2 95 2d 40 3c b9 67 50 df 58 16 25 bf 7d 6a df 6e 6b 22 9f 3f b4 cb b2 eb 85 0d 78 9d 1d 70 7c 3f a3 d0 ee d8 5c 38 a7 7b 3f e3 a9 ac e2 6c ff 69 76 00 73 84 9f 1a 8b 6d a3 ae 6f b4 4a 18 e8 35 ee 8b 44 87 4e 29 6d 79 be 4e 69 1d b5 d4 5d 2d 57 c6 fd b2 ac 0f 55 cc 9e a0 19 62 19 40 8b b8 97 5e 9b 8a fb 4b d7 6d 27 22 26 58 2f 9a d9 c3 10 e0 60 bb b7 ac 0c 71 58 69 52 25 7b 9b 36 6d 92 c6 22 c5 a8 35 68 c4 e7 9e b6 e6 61 f3 00 e9 9a 07 78 b1 6b 7c dd fa 4d f7 42 fb e0 c5 cd de 7f 45 13 ec 8d e4 27 95 40 0f 66 0d ef 5c 2b 2b 66 1c e6 7a 90 f5 ef 9f 78 48 a3 db 2f be c5 5c fc Data Ascii: UD29Z]Ab4]/8&9Vh9?<$oo3v\|tVf-@<gPX%}jnk"?xp\|?\8{?livsmoJ5DN)myNi]-WUb@^Km'"&X/`qXiR%{6m"5haxk\|MBE'@f\++fzxH/\
2024-04-23 14:05:36 UTC	12792	IN	Data Raw: d4 d8 04 5f 12 b3 77 52 61 e2 b2 61 28 19 63 d1 ba c0 5e 85 3f b2 7c 3b 0a e8 63 f5 ec ea 8b 8e 53 98 3b 11 a7 42 dd 29 35 bd a9 37 bd 19 bb 77 f2 d9 ff 0b 67 98 6c cc 7f 65 7e 43 ea 20 27 71 75 94 b7 1e 20 84 55 2d b3 7e 38 d3 8d 65 a4 75 5b 9b ee 1c 3b 98 bb 36 9f 28 d9 d1 f3 9c 8b f6 d0 10 dd eb e6 3f 13 b9 b1 b6 f2 4f 39 67 31 b2 e6 39 e6 ad 47 36 4f 8f ed 24 ff 03 d0 35 90 27 3c 5e 85 06 bd f0 bf 31 6c 67 de cd a9 db f9 95 25 70 b6 c0 b5 b3 cc ab e3 af 8b 13 47 67 a6 9c f1 d6 39 4f 6d b1 3b 62 75 45 2f 8a 34 90 b5 55 52 cf 44 af bc 18 59 c5 18 f0 b9 c6 6f 33 1f 2f 60 7c a0 b6 3d b5 f6 7e 52 37 27 42 bf cf 18 f1 fa 3c 29 46 25 85 d6 c0 1b db 68 b4 98 c7 3d 8c 93 c9 17 0e a9 b0 44 80 be 25 e9 38 ca e8 c7 ae 01 bc c6 0c 8a cb 9a 0b 47 ef 39 9d 47 41 b2 Data Ascii: _wRaa(c^?\|;cS;B)57wgle~C 'qu U-~8eu[;6(?O9g19G6O$5'<^1lg%pGg9Om;buE/4URDYo3/`\|=~R7'B<)F%h=D%8G9GA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49816	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:36 UTC	533	OUT	OPTIONS /report/v4?s=0noH7GMySkVF8FN6ED3Y1Hl5zwK1CCCmGLvDEWZSxOr6CxxMYgsMeDr%2B3jCP46s02g2jJK2Hth229kfox8eoujTyHBG8X0UsJYMM9B0Q6QvM6xGibpLN1BocASAUUt4VRdc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://services.zipy.ai Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 23 Apr 2024 14:05:36 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49817	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:36 UTC	600	OUT	GET /static/js/1881.21dbf1b7.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:38 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7858 Connection: close Date: Tue, 23 Apr 2024 14:05:38 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "82836d672cdaca6f4e15fdf3bc829e09" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ffb64e712182ecebf7bbb2b7e367a4a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RlKQbhiUr1ln3fr6GtyDo5fcjyAQ1xraJPZm6pBsiWsLqtgV7CjJew== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:38 UTC	7858	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 38 31 2c 31 31 32 38 5d 2c 7b 36 36 31 31 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 2c Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1881,1128],{66115:function(t){t.exports=function(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49818	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:36 UTC	474	OUT	POST /report/v4?s=0noH7GMySkVF8FN6ED3Y1Hl5zwK1CCCmGLvDEWZSxOr6CxxMYgsMeDr%2B3jCP46s02g2jJK2Hth229kfox8eoujTyHBG8X0UsJYMM9B0Q6QvM6xGibpLN1BocASAUUt4VRdc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 463 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:36 UTC	463	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 30 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 36 38 2e 38 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 35 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 73 2e 7a 69 70 79 2e 61 69 2f Data Ascii: [{"age":0,"body":{"elapsed_time":708,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.68.84","status_code":500,"type":"http.error"},"type":"network-error","url":"https://services.zipy.ai/
2024-04-23 14:05:37 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 23 Apr 2024 14:05:37 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49819	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:37 UTC	600	OUT	GET /static/js/7773.1f3c061c.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:38 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 48187 Connection: close Date: Tue, 23 Apr 2024 14:05:39 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "e68dcbc59565455bbe104d13da57eb11" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 03b474db824c472de7c4629c50b35ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qNLk9ApjeG-6miyt7vlYqfkV3GegGDrk1PR0Mh7yeHPT_3rXXLuhvw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:38 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 37 33 5d 2c 7b 36 30 37 32 35 3a 66 75 6e 63 74 69 6f 6e 28 41 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 6e 2c 72 2c 43 3d 74 28 39 33 32 36 34 29 2c 61 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7773],{60725:function(A,e,t){t.d(e,{r:function(){return o}});var n,r,C=t(93264),a=["title","titleId"];function i(){return i=Object.assign?Object.assi
2024-04-23 14:05:38 UTC	16384	IN	Data Raw: 5d 2c 65 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2e 63 61 6c 6c 28 41 2c 74 29 26 26 28 72 5b 74 5d 3d 41 5b 74 5d 29 7d 72 65 74 75 72 6e 20 72 7d 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 65 29 7b 76 61 72 20 74 3d 41 2e 74 69 74 6c 65 2c 6c 3d 41 2e 74 69 74 6c 65 49 64 2c 67 3d 69 28 41 2c 43 29 3b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 61 28 7b 77 69 64 74 68 3a 33 30 2c 68 65 69 67 68 74 3a 33 32 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 33 30 20 33 32 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 Data Ascii: ],e.indexOf(t)>=0\|\|Object.prototype.propertyIsEnumerable.call(A,t)&&(r[t]=A[t])}return r}var l=function(A,e){var t=A.title,l=A.titleId,g=i(A,C);return r.createElement("svg",a({width:30,height:32,viewBox:"0 0 30 32",fill:"none",xmlns:"http://www.w3.org/200
2024-04-23 14:05:38 UTC	2680	IN	Data Raw: 20 39 2e 36 37 38 31 35 43 32 38 2e 35 31 37 34 20 39 2e 35 30 36 35 33 20 32 38 2e 34 30 32 32 20 39 2e 33 33 32 36 20 32 38 2e 33 32 37 32 20 39 2e 32 35 33 31 33 43 32 38 2e 32 30 37 36 20 39 2e 31 32 37 35 38 20 32 38 2e 30 39 31 36 20 39 2e 30 33 38 38 39 20 32 37 2e 39 37 35 35 20 38 2e 39 39 30 35 31 43 32 37 2e 38 30 38 20 38 2e 39 32 30 35 31 20 32 37 2e 36 32 37 37 20 38 2e 38 38 34 35 38 20 32 37 2e 34 34 35 37 20 38 2e 38 38 34 38 39 43 32 37 2e 32 31 34 38 20 38 2e 38 38 34 38 39 20 32 37 2e 30 30 35 20 38 2e 39 32 33 32 34 20 32 36 2e 38 33 35 20 39 2e 30 30 31 32 32 43 32 36 2e 36 36 35 20 39 2e 30 37 39 37 38 20 32 36 2e 35 32 32 20 39 2e 31 38 36 36 37 20 32 36 2e 34 30 39 35 20 39 2e 33 32 30 32 38 43 32 36 2e 32 39 37 31 20 39 2e 34 35 Data Ascii: 9.67815C28.5174 9.50653 28.4022 9.3326 28.3272 9.25313C28.2076 9.12758 28.0916 9.03889 27.9755 8.99051C27.808 8.92051 27.6277 8.88458 27.4457 8.88489C27.2148 8.88489 27.005 8.92324 26.835 9.00122C26.665 9.07978 26.522 9.18667 26.4095 9.32028C26.2971 9.45
2024-04-23 14:05:38 UTC	12739	IN	Data Raw: 34 30 38 36 20 31 30 2e 31 31 32 39 20 37 2e 35 32 39 35 20 31 30 2e 31 39 31 36 43 37 2e 34 31 37 38 34 20 31 30 2e 32 36 39 39 20 37 2e 33 32 36 20 31 30 2e 33 37 32 34 20 37 2e 32 36 31 30 38 20 31 30 2e 34 39 31 31 43 37 2e 31 39 35 35 35 20 31 30 2e 36 31 30 39 20 37 2e 31 36 32 31 35 20 31 30 2e 37 35 31 34 20 37 2e 31 36 32 31 35 20 31 30 2e 39 31 30 34 43 37 2e 31 36 32 31 35 20 31 31 2e 30 37 31 36 20 37 2e 31 39 30 36 33 20 31 31 2e 32 31 31 20 37 2e 32 34 36 38 39 20 31 31 2e 33 32 35 43 37 2e 33 30 32 30 33 20 31 31 2e 34 33 38 32 20 37 2e 33 38 35 30 33 20 31 31 2e 35 33 35 39 20 37 2e 34 38 38 33 36 20 31 31 2e 36 30 39 35 43 37 2e 35 39 31 31 36 20 31 31 2e 36 38 33 20 37 2e 37 31 38 31 20 31 31 2e 37 33 37 34 20 37 2e 38 36 34 36 32 20 31 Data Ascii: 4086 10.1129 7.5295 10.1916C7.41784 10.2699 7.326 10.3724 7.26108 10.4911C7.19555 10.6109 7.16215 10.7514 7.16215 10.9104C7.16215 11.0716 7.19063 11.211 7.24689 11.325C7.30203 11.4382 7.38503 11.5359 7.48836 11.6095C7.59116 11.683 7.7181 11.7374 7.86462 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49820	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:37 UTC	600	OUT	GET /static/js/2793.c92744d0.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:38 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11260 Connection: close Date: Tue, 23 Apr 2024 14:05:39 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "0854c68a688b708417d3d96af90b2ec6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4f00e77688d92901b5afc8b7b033ed56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: d-aPYFfG0wQ5paFa131ucwJiLOQr25YnEoscAGZrjkjdgc_TNrVLvA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:38 UTC	11260	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 39 33 5d 2c 7b 37 37 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 2e 64 28 74 2c 7b 64 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 6e 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 29 3b 76 61 72 20 65 3d 72 28 37 34 31 36 35 29 2c 61 3d 72 28 31 35 38 36 31 29 2c 69 3d 72 28 32 39 34 33 39 29 2c 6f 3d 72 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[2793],{77380:function(n,t,r){r.d(t,{dX:function(){return f},nm:function(){return m},r:function(){return d}});var e=r(74165),a=r(15861),i=r(29439),o=r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49821	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:37 UTC	600	OUT	GET /static/js/6323.a999228a.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:38 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 67930 Connection: close Date: Tue, 23 Apr 2024 14:05:39 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "5bb6b92b6b214f56fd175875e648bcfb" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3d9025085ca74ec423404f8a18a7972c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lxbGkApC2YTJhddpCDTZGmKrzHCK3HfgLKWJhwOCjw1kGqu1HpG1jg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:38 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 32 33 5d 2c 7b 38 30 39 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 2c 72 3d 5b 5b 22 41 66 67 68 61 6e 69 73 74 61 6e 20 28 5c 75 32 30 32 62 5c 75 30 36 32 37 5c 75 30 36 34 31 5c 75 30 36 33 61 5c 75 30 36 32 37 5c 75 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6323],{80959:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var n,r=[["Afghanistan (\u202b\u0627\u0641\u063a\u0627\u
2024-04-23 14:05:38 UTC	15438	IN	Data Raw: 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 22 7d 2c 72 29 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 69 61 6c 2d 63 6f 64 65 22 7d 2c 22 2b 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 29 7d 3b 61 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 6f 6e 46 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 4d 6f 75 73 65 4f 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 3b 76 61 72 20 69 3d 61 3b 74 2e 64 65 66 61 75 6c 74 3d 69 2c 61 2e 5f 5f 64 6f 63 67 65 6e 49 6e 66 6f 3d 7b Data Ascii: ,o.default.createElement("span",{className:"country-name"},r),o.default.createElement("span",{className:"dial-code"},"+ ".concat(t)))};a.defaultProps={onFocus:function(){},onMouseOver:function(){},onClick:function(){}};var i=a;t.default=i,a.__docgenInfo={
2024-04-23 14:05:38 UTC	1418	IN	Data Raw: 6f 75 6e 74 72 79 44 61 74 61 26 26 2d 31 21 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 72 2e 73 65 6c 65 63 74 65 64 43 6f 75 6e 74 72 79 44 61 74 61 2e 69 73 6f 32 29 29 7c 7c 72 2e 69 73 55 6e 6b 6e 6f 77 6e 4e 61 6e 70 28 65 2c 6e 29 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 61 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 69 66 28 61 5b 69 5d 29 7b 6f 3d 61 5b 69 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 22 2b 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 73 2e 64 65 66 61 75 6c 74 2e 67 65 74 4e 75 6d 65 72 69 63 28 65 29 2e 6c 65 6e 67 74 68 26 26 28 6f 3d 6e 75 6c 6c 29 3b 6e 75 6c 6c 21 3d 3d 6f 26 26 72 2e 73 65 74 46 6c 61 67 28 6f 2c 74 29 7d 29 29 2c 62 28 67 28 67 28 72 29 29 2c 22 66 69 6c 74 65 72 43 6f 75 6e 74 72 69 65 73 22 2c 28 66 75 6e 63 74 69 Data Ascii: ountryData&&-1!==a.indexOf(r.selectedCountryData.iso2))\|\|r.isUnknownNanp(e,n))for(var i=0;i<a.length;i++)if(a[i]){o=a[i];break}}else"+"===e.charAt(0)&&s.default.getNumeric(e).length&&(o=null);null!==o&&r.setFlag(o,t)})),b(g(g(r)),"filterCountries",(functi
2024-04-23 14:05:38 UTC	16384	IN	Data Raw: 65 44 6f 63 75 6d 65 6e 74 43 6c 69 63 6b 29 7d 29 29 2c 62 28 67 28 67 28 72 29 29 2c 22 63 6c 69 63 6b 53 65 6c 65 63 74 65 64 46 6c 61 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 2e 70 72 6f 70 73 2c 6e 3d 74 2e 61 6c 6c 6f 77 44 72 6f 70 64 6f 77 6e 2c 6f 3d 74 2e 6f 6e 46 6c 61 67 43 6c 69 63 6b 2c 61 3d 72 2e 73 74 61 74 65 2c 69 3d 61 2e 73 68 6f 77 44 72 6f 70 64 6f 77 6e 2c 6c 3d 61 2e 64 69 73 61 62 6c 65 64 2c 75 3d 61 2e 72 65 61 64 6f 6e 6c 79 3b 69 7c 7c 6c 7c 7c 75 7c 7c 21 6e 3f 69 26 26 72 2e 74 6f 67 67 6c 65 44 72 6f 70 64 6f 77 6e 28 21 31 29 3a 72 2e 73 65 74 53 74 61 74 65 28 7b 73 68 6f 77 44 72 6f 70 64 6f 77 6e 3a 21 30 2c 6f 66 66 73 65 74 54 6f 70 3a 73 2e 64 65 66 61 75 6c 74 2e 6f 66 66 73 65 74 28 72 Data Ascii: eDocumentClick)})),b(g(g(r)),"clickSelectedFlag",(function(e){var t=r.props,n=t.allowDropdown,o=t.onFlagClick,a=r.state,i=a.showDropdown,l=a.disabled,u=a.readonly;i\|\|l\|\|u\|\|!n?i&&r.toggleDropdown(!1):r.setState({showDropdown:!0,offsetTop:s.default.offset(r
2024-04-23 14:05:38 UTC	1024	IN	Data Raw: 63 6f 75 6e 74 72 69 65 73 44 61 74 61 3a 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 22 6e 75 6c 6c 22 2c 63 6f 6d 70 75 74 65 64 3a 21 31 7d 2c 74 79 70 65 3a 7b 6e 61 6d 65 3a 22 61 72 72 61 79 4f 66 22 2c 76 61 6c 75 65 3a 7b 6e 61 6d 65 3a 22 61 72 72 61 79 22 7d 7d 2c 72 65 71 75 69 72 65 64 3a 21 31 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 43 6f 75 6e 74 72 69 65 73 20 64 61 74 61 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 69 74 20 64 65 66 61 75 6c 74 73 20 74 6f 20 64 61 74 61 20 64 65 66 69 6e 65 64 20 69 6e 20 60 41 6c 6c 43 6f 75 6e 74 72 69 65 73 60 2e 22 7d 2c 61 6c 6c 6f 77 44 72 6f 70 64 6f 77 6e 3a 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 22 74 72 75 65 22 2c 63 6f 6d 70 75 74 65 Data Ascii: countriesData:{defaultValue:{value:"null",computed:!1},type:{name:"arrayOf",value:{name:"array"}},required:!1,description:"Countries data can be configured, it defaults to data defined in `AllCountries`."},allowDropdown:{defaultValue:{value:"true",compute
2024-04-23 14:05:38 UTC	16384	IN	Data Raw: 72 61 74 65 64 20 62 79 20 61 75 74 6f 50 6c 61 63 65 68 6f 6c 64 65 72 2e 20 4d 75 73 74 20 72 65 74 75 72 6e 20 61 20 73 74 72 69 6e 67 2e 22 7d 2c 65 78 63 6c 75 64 65 43 6f 75 6e 74 72 69 65 73 3a 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 22 5b 5d 22 2c 63 6f 6d 70 75 74 65 64 3a 21 31 7d 2c 74 79 70 65 3a 7b 6e 61 6d 65 3a 22 61 72 72 61 79 4f 66 22 2c 76 61 6c 75 65 3a 7b 6e 61 6d 65 3a 22 73 74 72 69 6e 67 22 7d 7d 2c 72 65 71 75 69 72 65 64 3a 21 31 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 44 6f 6e 27 74 20 64 69 73 70 6c 61 79 20 74 68 65 20 63 6f 75 6e 74 72 69 65 73 20 79 6f 75 20 73 70 65 63 69 66 79 2e 20 28 41 72 72 61 79 29 22 7d 2c 66 6f 72 6d 61 74 4f 6e 49 6e 69 74 3a 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 7b 76 Data Ascii: rated by autoPlaceholder. Must return a string."},excludeCountries:{defaultValue:{value:"[]",computed:!1},type:{name:"arrayOf",value:{name:"string"}},required:!1,description:"Don't display the countries you specify. (Array)"},formatOnInit:{defaultValue:{v
2024-04-23 14:05:38 UTC	898	IN	Data Raw: 29 29 2c 65 3d 6e 75 6c 6c 7d 29 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 3f 70 28 65 2c 72 29 3a 72 7d 7d 2c 6f 3d 7b 7d 3b 72 65 74 75 72 6e 20 72 2e 70 69 70 65 3d 72 2e 74 68 65 6e 2c 64 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 69 3d 65 5b 32 5d 2c 6c 3d 65 5b 33 5d 3b 72 5b 65 5b 31 5d 5d 3d 69 2e 61 64 64 2c 6c 26 26 69 2e 61 64 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 6c 7d 29 2c 74 5b 31 5e 61 5d 5b 32 5d 2e 64 69 73 61 62 6c 65 2c 74 5b 32 5d 5b 32 5d 2e 6c 6f 63 6b 29 2c 6f 5b 65 5b 30 5d 5d 3d 69 2e 66 69 72 65 2c 6f 5b 65 5b 30 5d 2b 22 57 69 74 68 22 5d 3d 69 2e 66 69 72 65 57 69 74 68 7d 29 29 2c 72 2e 70 72 6f Data Ascii: )),e=null})).promise()},promise:function(e){return null!=e?p(e,r):r}},o={};return r.pipe=r.then,d(t,(function(e,a){var i=e[2],l=e[3];r[e[1]]=i.add,l&&i.add((function(){n=l}),t[1^a][2].disable,t[2][2].lock),o[e[0]]=i.fire,o[e[0]+"With"]=i.fireWith})),r.pro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49822	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:37 UTC	600	OUT	GET /static/js/6927.eb3f508f.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:38 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11050 Connection: close Date: Tue, 23 Apr 2024 14:05:39 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "33fe246de1b1d177198980c71a984564" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08829bb06bccf0ab66e6bd5eaa5fcbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RRBaiCxQGP0PH982qaAbAYITbuIbBL5O58ivgsFcKWyBlWr8FiFe5g== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:38 UTC	11050	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 32 37 5d 2c 7b 34 36 39 32 37 3a 66 75 6e 63 74 69 6f 6e 28 5f 2c 74 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 5f 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 75 29 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6927],{46927:function(_,t,u){"use strict";function e(_){return Array.prototype.slice.call(arguments,1).forEach((function(t){t&&Object.keys(t).forEach((function(u)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49823	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:38 UTC	600	OUT	GET /static/js/8700.57dbdfc1.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:39 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15265 Connection: close Date: Tue, 23 Apr 2024 14:05:40 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "5dd4e8bc9116cfa9f634be8912205dcb" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 048a6c89005e16288875f5750557de68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BAcsaN8lJupC3SsYkSAWnTAhsiHWCP0M-ayclbxv9viV9wPlo-nr_w== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:39 UTC	15265	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 30 30 5d 2c 7b 38 38 31 32 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 7d 29 3b 76 61 72 20 72 2c 61 3d 74 28 37 34 31 36 35 29 2c 6f 3d 74 28 31 35 38 36 31 29 2c 69 3d 74 28 31 35 36 37 31 29 2c 75 3d 74 28 34 33 31 34 34 29 2c 63 3d 74 28 37 34 34 34 31 29 2c 6c 3d 74 2e 6e 28 63 29 2c 64 3d 74 28 37 32 32 33 31 29 2c 73 3d 74 28 38 31 35 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8700],{88125:function(n,e,t){t.d(e,{Z:function(){return E}});var r,a=t(74165),o=t(15861),i=t(15671),u=t(43144),c=t(74441),l=t.n(c),d=t(72231),s=t(815

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49824	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:38 UTC	600	OUT	GET /static/js/7982.b17092ad.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:39 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23015 Connection: close Date: Tue, 23 Apr 2024 14:05:40 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "2979091d37b96183be3820f40e381876" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0cf2795a093d0418def3c6d92780bb7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uKc82ZQH_bAvXdoH1tjKJjOuFl_x8nFLXPIRkxOka81cFr_B5RK-Vg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:39 UTC	8447	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 38 32 5d 2c 7b 35 39 33 32 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 53 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 56 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 67 42 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 74 28 31 37 39 32 36 29 2c 61 3d 22 5c 6e 20 20 63 6f 6c 6c 61 62 6f 72 61 74 6f 72 73 20 7b 5c 6e Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7982],{59320:function(n,e,t){t.d(e,{SY:function(){return i},Vi:function(){return a},gB:function(){return o}});var r=t(17926),a="\n collaborators {\n
2024-04-23 14:05:39 UTC	14568	IN	Data Raw: 74 61 74 75 73 5c 6e 20 20 75 73 65 72 4c 69 6e 6b 5c 6e 20 20 75 75 69 64 5c 6e 20 20 76 69 73 69 74 73 43 6f 75 6e 74 5c 6e 20 20 61 63 74 69 6f 6e 50 6c 61 6e 73 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 7d 5c 6e 20 20 62 75 74 74 6f 6e 73 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 7d 5c 6e 20 20 63 6f 6e 74 65 6e 74 73 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 7d 5c 6e 20 20 64 65 61 6c 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 7d 5c 6e 20 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 7b 5c 6e 20 20 20 20 22 29 2e 63 6f 6e 63 61 74 28 73 2e 4f 78 2c 22 5c 6e 20 20 20 20 76 65 6e 64 6f 72 49 64 5c 6e 20 20 7d 5c 6e 20 20 6f 77 6e 65 72 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 20 20 65 6d 61 69 6c 5c 6e 20 20 20 20 66 69 72 73 74 4e 61 6d 65 5c 6e 20 20 20 Data Ascii: tatus\n userLink\n uuid\n visitsCount\n actionPlans {\n id\n }\n buttons {\n id\n }\n contents {\n id\n }\n deal {\n id\n }\n organization {\n ").concat(s.Ox,"\n vendorId\n }\n owner {\n id\n email\n firstName\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49825	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:38 UTC	600	OUT	GET /static/js/5686.0c43113a.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:39 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 16165 Connection: close Date: Tue, 23 Apr 2024 14:05:40 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "9ede34587698d98aa521c779dea65bbc" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 194873016b193fd05afa56c1dbe27330.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 3PGGHiZgO2DunC4JFaxZ9gATw70YQs3jpgFP40pgQMplpoYoaKU8TQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:39 UTC	473	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 36 38 36 5d 2c 7b 33 31 39 33 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 7d 29 3b 76 61 72 20 72 2c 61 2c 75 2c 6f 2c 73 2c 69 2c 63 2c 70 2c 6c 2c 76 2c 66 2c 64 2c 68 2c 67 2c 5a 2c 79 2c 6d 3d 74 28 31 34 31 33 29 2c 43 3d 74 28 37 34 31 36 35 29 2c 62 3d 74 28 33 30 31 36 38 29 2c 24 3d 74 28 31 35 38 36 31 29 2c 6b 3d 74 28 31 35 36 37 31 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5686],{31934:function(n,e,t){t.d(e,{Z:function(){return j}});var r,a,u,o,s,i,c,p,l,v,f,d,h,g,Z,y,m=t(1413),C=t(74165),b=t(30168),$=t(15861),k=t(15671
2024-04-23 14:05:40 UTC	15692	IN	Data Raw: 5b 7b 6b 65 79 3a 22 63 72 65 61 74 65 4c 69 6e 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 28 30 2c 24 2e 5a 29 28 28 30 2c 43 2e 5a 29 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 28 30 2c 43 2e 5a 29 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 6e 2e 70 72 65 76 3d 6e 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 74 68 69 73 2e 6d 75 74 61 74 65 28 28 30 2c 24 2e 5a 29 28 28 30 2c 43 2e 5a 29 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 61 2c 75 2c 6f 2c 73 2c 69 3b 72 65 74 75 72 6e Data Ascii: [{key:"createLink",value:function(){var n=(0,$.Z)((0,C.Z)().mark((function n(e){var t=this;return(0,C.Z)().wrap((function(n){for(;;)switch(n.prev=n.next){case 0:return n.abrupt("return",this.mutate((0,$.Z)((0,C.Z)().mark((function n(){var a,u,o,s,i;return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49826	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:38 UTC	600	OUT	GET /static/js/1947.70494fb1.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:40 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 22862 Connection: close Date: Tue, 23 Apr 2024 14:05:41 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "385215b94eb47c9571f09d2eb9cc3060" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 03b474db824c472de7c4629c50b35ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9hR33OinsHIBuV9ZXPt0-4XoiVm-3O1PO4we6eUxpDvOMxEOi7ZhLQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:40 UTC	8449	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 39 34 37 2e 37 30 34 39 34 66 62 31 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 34 37 5d 2c 7b 38 31 39 34 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 45 78 69 74 43 6f 6e 74 61 69 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: /! For license information please see 1947.70494fb1.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1947],{81947:function(t,e,n){n.r(e),n.d(e,{ExitContainer:function(){retu
2024-04-23 14:05:40 UTC	14413	IN	Data Raw: 65 72 73 68 6f 6f 74 43 6c 61 6d 70 69 6e 67 2c 69 3d 74 2e 67 65 74 4f 6e 55 70 64 61 74 65 46 75 6e 63 2c 72 3d 74 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 2c 6f 3d 74 2e 6f 6e 53 70 72 69 6e 67 41 63 74 69 76 61 74 65 2c 73 3d 54 2e 63 72 65 61 74 65 53 70 72 69 6e 67 28 65 2e 73 74 69 66 66 6e 65 73 73 2c 65 2e 64 61 6d 70 69 6e 67 29 3b 73 2e 73 65 74 4f 76 65 72 73 68 6f 6f 74 43 6c 61 6d 70 69 6e 67 45 6e 61 62 6c 65 64 28 21 21 6e 29 3b 76 61 72 20 61 3d 7b 6f 6e 53 70 72 69 6e 67 41 63 74 69 76 61 74 65 3a 6f 2c 6f 6e 53 70 72 69 6e 67 41 74 52 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 64 65 73 74 72 6f 79 28 29 2c 72 28 29 7d 2c 6f 6e 53 70 72 69 6e 67 55 70 64 61 74 65 3a 69 28 7b 73 70 72 69 6e 67 3a 73 2c 6f 6e 41 6e 69 6d 61 74 Data Ascii: ershootClamping,i=t.getOnUpdateFunc,r=t.onAnimationEnd,o=t.onSpringActivate,s=T.createSpring(e.stiffness,e.damping);s.setOvershootClampingEnabled(!!n);var a={onSpringActivate:o,onSpringAtRest:function(){s.destroy(),r()},onSpringUpdate:i({spring:s,onAnimat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49827	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:39 UTC	599	OUT	GET /static/js/280.a3adc45b.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:40 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 30106 Connection: close Date: Tue, 23 Apr 2024 14:05:41 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "36bf07df9d994d13b888cb0304cbc6ae" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a4294eb914e3f883aba658e8044fe4f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZPaNDi0tOu3o9ExuRrDoK9Kh76CAjW0yp4UGR2xaYGy_Jy7rNgOhdg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:40 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 30 5d 2c 7b 36 34 37 35 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 34 39 34 32 29 2c 6f 3d 74 28 32 39 34 33 39 29 2c 69 3d 74 28 39 33 32 36 34 29 2c 61 3d 74 2e 6e 28 69 29 2c 6c 3d 74 28 31 37 37 31 31 29 2c 73 3d 74 2e 6e 28 6c 29 2c 75 3d 74 28 39 38 38 35 30 29 2c 63 3d 74 28 33 31 38 30 33 29 2c 64 3d 74 28 37 31 30 31 29 2c 70 3d 74 2e 6e 28 64 29 2c 66 3d 74 28 31 35 39 39 39 29 2c 68 3d 74 2e Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[280],{64758:function(e,n,t){var r=t(4942),o=t(29439),i=t(93264),a=t.n(i),l=t(17711),s=t.n(l),u=t(98850),c=t(31803),d=t(7101),p=t.n(d),f=t(15999),h=t.
2024-04-23 14:05:40 UTC	1065	IN	Data Raw: 6c 22 2c 65 7d 28 7b 7d 29 7d 2c 36 38 38 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 41 43 54 49 56 45 22 2c 72 3d 22 49 4e 41 43 54 49 56 45 22 2c 6f 3d 22 50 45 4e 44 49 4e 47 22 2c 69 3d 7b 7d 3b 69 5b 74 5d 3d 22 41 63 74 69 76 65 22 2c 69 5b 72 5d 3d 22 49 6e 61 63 74 69 76 65 22 2c 69 5b 6f 5d 3d 22 50 65 6e 64 69 6e 67 22 2c 6e 2e 5a 3d 7b 41 43 54 49 56 45 3a 74 2c 49 4e 41 43 54 49 56 45 3a 72 2c 50 45 4e 44 49 4e 47 3a 6f 2c 6c 61 62 65 6c 3a 69 7d 7d 2c 32 30 30 33 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 2c 61 3d 74 28 37 34 31 36 35 29 2c 6c 3d 74 28 33 30 31 36 38 29 2c 73 3d 74 Data Ascii: l",e}({})},68828:function(e,n){var t="ACTIVE",r="INACTIVE",o="PENDING",i={};i[t]="Active",i[r]="Inactive",i[o]="Pending",n.Z={ACTIVE:t,INACTIVE:r,PENDING:o,label:i}},20031:function(e,n,t){t.d(n,{Z:function(){return b}});var r,o,i,a=t(74165),l=t(30168),s=t
2024-04-23 14:05:40 UTC	12657	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 72 73 74 4e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6c 6c 4e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 73 74 4e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 6b 65 64 69 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 68 6f 6e 65 4e 75 6d 62 65 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 68 6f 74 6f 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6c 65 4e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 75 73 5c 6e 20 20 20 20 20 20 20 Data Ascii: email\n firstName\n fullName\n lastName\n linkedin\n phoneNumber\n photo\n roleName\n status\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49828	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:39 UTC	599	OUT	GET /static/js/586.b709a998.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:40 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 27505 Connection: close Date: Tue, 23 Apr 2024 14:05:41 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "20f5ee6df552dc84a572e75ee1c113a3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f191d757f16dd6002ae3a0c09389b68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: r20wr9C8nGw2dZtLE_puFQ9vJ57_M88YWQx1NmIZ53D5ENe-_zYdCw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:40 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 36 5d 2c 7b 32 33 31 36 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 35 35 35 36 38 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 65 3d 7b 7d 2c 74 3d 30 2c 6e 3d 30 2c 69 3d 30 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 6f 7c 7c 28 6f 3d 72 2c 72 3d 30 29 2c 72 3e 6e 3f 6e 3d 72 3a 72 3c 69 26 26 28 69 3d 72 29 2c 65 5b 72 5d 7c 7c 28 65 5b 72 5d 3d 5b 5d 29 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[586],{23165:function(e,t,n){"use strict";var i=n(55568);function r(){var e={},t=0,n=0,i=0;return{add:function(r,o){o\|\|(o=r,r=0),r>n?n=r:r<i&&(i=r),e[r]\|\|(e[r]=[])
2024-04-23 14:05:40 UTC	11121	IN	Data Raw: 64 6c 65 72 2e 67 65 74 53 74 61 74 65 3b 72 65 74 75 72 6e 7b 69 73 44 65 74 65 63 74 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 28 65 29 3b 72 65 74 75 72 6e 20 6e 26 26 21 21 6e 2e 69 73 44 65 74 65 63 74 61 62 6c 65 7d 2c 6d 61 72 6b 41 73 44 65 74 65 63 74 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 65 29 2e 69 73 44 65 74 65 63 74 61 62 6c 65 3d 21 30 7d 2c 69 73 42 75 73 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 74 28 65 29 2e 62 75 73 79 7d 2c 6d 61 72 6b 42 75 73 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 28 65 29 2e 62 75 73 79 3d 21 21 6e 7d 7d 7d 7d 2c 35 39 30 34 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 Data Ascii: dler.getState;return{isDetectable:function(e){var n=t(e);return n&&!!n.isDetectable},markAsDetectable:function(e){t(e).isDetectable=!0},isBusy:function(e){return!!t(e).busy},markBusy:function(e,n){t(e).busy=!!n}}}},59041:function(e){"use strict";e.exports

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49829	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:39 UTC	600	OUT	GET /static/js/1093.7ee8aa6b.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:41 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 635999 Connection: close Date: Tue, 23 Apr 2024 14:05:41 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "c93c48bb57e9d1e6a8731ec0ecf31d61" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3b990103ab5b615e2cee71bdfd65a4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: sIAtA3W1mDlOfdGMxWdzy0a-HlqDcc8b9f4XNCE71VEXO8jumu6LpA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:41 UTC	3543	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 30 39 33 2e 37 65 65 38 61 61 36 62 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 39 33 5d 2c 7b 37 33 38 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 69 28 33 39 38 35 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 Data Ascii: /! For license information please see 1093.7ee8aa6b.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1093],{73874:function(e,t,i){"use strict";var n=i(39851);e.exports=function(e,t){retu
2024-04-23 14:05:41 UTC	16384	IN	Data Raw: 69 61 6c 73 22 69 6e 20 6e 65 77 20 75 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3f 75 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3a 6e 2e 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 28 65 5b 69 5d 29 7d 28 5b 22 67 65 74 22 2c 22 70 75 74 22 2c 22 70 6f 73 74 22 2c 22 70 61 74 63 68 22 2c 22 68 65 61 64 22 2c 22 64 65 6c 65 74 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 5b 22 64 65 6c 65 74 65 22 3d 3d 3d 65 3f 22 64 65 6c 22 3a 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 29 7b 72 65 74 75 72 6e 28 69 3d 6f 28 74 2c 69 2c 6e 29 29 2e 6d 65 74 68 6f 64 3d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 6c 28 Data Ascii: ials"in new u.XMLHttpRequest?u.XMLHttpRequest:n.XDomainRequest,function(e,t){for(var i=0;i<e.length;i++)t(e[i])}(["get","put","post","patch","head","delete"],(function(e){u["delete"===e?"del":e]=function(t,i,n){return(i=o(t,i,n)).method=e.toUpperCase(),l(
2024-04-23 14:05:41 UTC	1024	IN	Data Raw: 3d 74 68 69 73 3b 74 3b 29 7b 76 61 72 20 69 3d 74 2e 5f 6e 73 4d 61 70 3b 69 66 28 69 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6e 29 26 26 69 5b 6e 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 3b 74 3d 74 2e 6e 6f 64 65 54 79 70 65 3d 3d 70 3f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 74 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 6c 6f 6f 6b 75 70 4e 61 6d 65 73 70 61 63 65 55 52 49 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 3b 74 3b 29 7b 76 61 72 20 69 3d 74 2e 5f 6e 73 4d 61 70 3b 69 66 28 69 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: =this;t;){var i=t._nsMap;if(i)for(var n in i)if(Object.prototype.hasOwnProperty.call(i,n)&&i[n]===e)return n;t=t.nodeType==p?t.ownerDocument:t.parentNode}return null},lookupNamespaceURI:function(e){for(var t=this;t;){var i=t._nsMap;if(i&&Object.prototype.
2024-04-23 14:05:41 UTC	16384	IN	Data Raw: 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6a 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 69 2e 6e 6f 64 65 54 79 70 65 3d 3d 68 26 26 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 65 29 72 65 74 75 72 6e 20 74 3d 69 2c 21 30 7d 29 29 2c 74 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 75 28 65 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 4c 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3e 30 26 26 6a 28 69 2e 64 Data Ascii: },getElementById:function(e){var t=null;return j(this.documentElement,(function(i){if(i.nodeType==h&&i.getAttribute("id")==e)return t=i,!0})),t},getElementsByClassName:function(e){var t=u(e);return new L(this,(function(i){var n=[];return t.length>0&&j(i.d
2024-04-23 14:05:41 UTC	1024	IN	Data Raw: 22 2c 47 72 65 61 74 65 72 45 71 75 61 6c 3a 22 5c 75 32 32 36 35 22 2c 47 72 65 61 74 65 72 45 71 75 61 6c 4c 65 73 73 3a 22 5c 75 32 32 64 62 22 2c 47 72 65 61 74 65 72 46 75 6c 6c 45 71 75 61 6c 3a 22 5c 75 32 32 36 37 22 2c 47 72 65 61 74 65 72 47 72 65 61 74 65 72 3a 22 5c 75 32 61 61 32 22 2c 47 72 65 61 74 65 72 4c 65 73 73 3a 22 5c 75 32 32 37 37 22 2c 47 72 65 61 74 65 72 53 6c 61 6e 74 45 71 75 61 6c 3a 22 5c 75 32 61 37 65 22 2c 47 72 65 61 74 65 72 54 69 6c 64 65 3a 22 5c 75 32 32 37 33 22 2c 47 73 63 72 3a 22 5c 75 64 38 33 35 5c 75 64 63 61 32 22 2c 67 73 63 72 3a 22 5c 75 32 31 30 61 22 2c 67 73 69 6d 3a 22 5c 75 32 32 37 33 22 2c 67 73 69 6d 65 3a 22 5c 75 32 61 38 65 22 2c 67 73 69 6d 6c 3a 22 5c 75 32 61 39 30 22 2c 47 74 3a 22 5c 75 32 Data Ascii: ",GreaterEqual:"\u2265",GreaterEqualLess:"\u22db",GreaterFullEqual:"\u2267",GreaterGreater:"\u2aa2",GreaterLess:"\u2277",GreaterSlantEqual:"\u2a7e",GreaterTilde:"\u2273",Gscr:"\ud835\udca2",gscr:"\u210a",gsim:"\u2273",gsime:"\u2a8e",gsiml:"\u2a90",Gt:"\u2
2024-04-23 14:05:41 UTC	15088	IN	Data Raw: 75 32 35 30 30 22 2c 48 73 63 72 3a 22 5c 75 32 31 30 62 22 2c 68 73 63 72 3a 22 5c 75 64 38 33 35 5c 75 64 63 62 64 22 2c 68 73 6c 61 73 68 3a 22 5c 75 32 31 30 66 22 2c 48 73 74 72 6f 6b 3a 22 5c 75 30 31 32 36 22 2c 68 73 74 72 6f 6b 3a 22 5c 75 30 31 32 37 22 2c 48 75 6d 70 44 6f 77 6e 48 75 6d 70 3a 22 5c 75 32 32 34 65 22 2c 48 75 6d 70 45 71 75 61 6c 3a 22 5c 75 32 32 34 66 22 2c 68 79 62 75 6c 6c 3a 22 5c 75 32 30 34 33 22 2c 68 79 70 68 65 6e 3a 22 5c 75 32 30 31 30 22 2c 49 61 63 75 74 65 3a 22 5c 78 63 64 22 2c 69 61 63 75 74 65 3a 22 5c 78 65 64 22 2c 69 63 3a 22 5c 75 32 30 36 33 22 2c 49 63 69 72 63 3a 22 5c 78 63 65 22 2c 69 63 69 72 63 3a 22 5c 78 65 65 22 2c 49 63 79 3a 22 5c 75 30 34 31 38 22 2c 69 63 79 3a 22 5c 75 30 34 33 38 22 2c 49 Data Ascii: u2500",Hscr:"\u210b",hscr:"\ud835\udcbd",hslash:"\u210f",Hstrok:"\u0126",hstrok:"\u0127",HumpDownHump:"\u224e",HumpEqual:"\u224f",hybull:"\u2043",hyphen:"\u2010",Iacute:"\xcd",iacute:"\xed",ic:"\u2063",Icirc:"\xce",icirc:"\xee",Icy:"\u0418",icy:"\u0438",I
2024-04-23 14:05:41 UTC	16384	IN	Data Raw: 72 3a 22 5c 75 32 39 35 64 22 2c 52 69 67 68 74 44 6f 77 6e 56 65 63 74 6f 72 3a 22 5c 75 32 31 63 32 22 2c 52 69 67 68 74 44 6f 77 6e 56 65 63 74 6f 72 42 61 72 3a 22 5c 75 32 39 35 35 22 2c 52 69 67 68 74 46 6c 6f 6f 72 3a 22 5c 75 32 33 30 62 22 2c 72 69 67 68 74 68 61 72 70 6f 6f 6e 64 6f 77 6e 3a 22 5c 75 32 31 63 31 22 2c 72 69 67 68 74 68 61 72 70 6f 6f 6e 75 70 3a 22 5c 75 32 31 63 30 22 2c 72 69 67 68 74 6c 65 66 74 61 72 72 6f 77 73 3a 22 5c 75 32 31 63 34 22 2c 72 69 67 68 74 6c 65 66 74 68 61 72 70 6f 6f 6e 73 3a 22 5c 75 32 31 63 63 22 2c 72 69 67 68 74 72 69 67 68 74 61 72 72 6f 77 73 3a 22 5c 75 32 31 63 39 22 2c 72 69 67 68 74 73 71 75 69 67 61 72 72 6f 77 3a 22 5c 75 32 31 39 64 22 2c 52 69 67 68 74 54 65 65 3a 22 5c 75 32 32 61 32 22 2c Data Ascii: r:"\u295d",RightDownVector:"\u21c2",RightDownVectorBar:"\u2955",RightFloor:"\u230b",rightharpoondown:"\u21c1",rightharpoonup:"\u21c0",rightleftarrows:"\u21c4",rightleftharpoons:"\u21cc",rightrightarrows:"\u21c9",rightsquigarrow:"\u219d",RightTee:"\u22a2",
2024-04-23 14:05:41 UTC	16384	IN	Data Raw: 69 29 26 26 21 52 2e 63 6c 6f 73 65 64 3f 41 3d 62 28 65 2c 41 2c 52 2e 74 61 67 4e 61 6d 65 2c 6f 2c 72 29 3a 41 2b 2b 7d 7d 63 61 74 63 68 28 71 29 7b 69 66 28 71 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 29 74 68 72 6f 77 20 71 3b 61 2e 65 72 72 6f 72 28 22 65 6c 65 6d 65 6e 74 20 70 61 72 73 65 20 65 72 72 6f 72 3a 20 22 2b 71 29 2c 41 3d 2d 31 7d 41 3e 53 3f 53 3d 41 3a 75 28 4d 61 74 68 2e 6d 61 78 28 43 2c 53 29 2b 31 29 7d 7d 28 65 2c 74 2c 69 2c 72 2c 74 68 69 73 2e 65 72 72 6f 72 48 61 6e 64 6c 65 72 29 2c 72 2e 65 6e 64 44 6f 63 75 6d 65 6e 74 28 29 7d 7d 2c 6b 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 65 74 54 61 67 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 73 2e 74 65 73 74 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: i)&&!R.closed?A=b(e,A,R.tagName,o,r):A++}}catch(q){if(q instanceof m)throw q;a.error("element parse error: "+q),A=-1}A>S?S=A:u(Math.max(C,S)+1)}}(e,t,i,r,this.errorHandler),r.endDocument()}},k.prototype={setTagName:function(e){if(!s.test(e))throw new Erro
2024-04-23 14:05:41 UTC	2048	IN	Data Raw: 2b 22 20 63 6c 61 6d 70 69 6e 67 20 50 41 52 54 2d 48 4f 4c 44 2d 42 41 43 4b 20 28 22 2b 74 5b 73 5d 2b 22 29 20 74 6f 20 70 61 72 74 54 61 72 67 65 74 44 75 72 61 74 69 6f 6e 20 2a 20 32 20 28 22 2b 75 2b 22 29 2e 22 7d 29 2c 74 5b 73 5d 3d 75 29 7d 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3b 28 74 3d 65 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 29 2e 6c 69 6e 65 53 74 72 65 61 6d 3d 6e 65 77 20 50 2c 74 2e 70 61 72 73 65 53 74 72 65 61 6d 3d 6e 65 77 20 4e 2c 74 2e 6c 69 6e 65 53 74 72 65 61 6d 2e 70 69 70 65 28 74 2e 70 61 72 73 65 53 74 72 65 61 6d 29 3b 76 61 72 20 69 2c 6e 2c 72 3d 28 30 2c 63 2e 5a 29 28 74 29 2c 61 3d 5b 5d 2c 73 3d 7b 7d 2c 75 3d 21 31 2c 6c 3d 66 75 6e 63 74 Data Ascii: +" clamping PART-HOLD-BACK ("+t[s]+") to partTargetDuration * 2 ("+u+")."}),t[s]=u)}},U=function(e){function t(){var t;(t=e.call(this)\|\|this).lineStream=new P,t.parseStream=new N,t.lineStream.pipe(t.parseStream);var i,n,r=(0,c.Z)(t),a=[],s={},u=!1,l=funct
2024-04-23 14:05:41 UTC	16384	IN	Data Raw: 69 6f 6e 5b 22 63 6f 6d 2e 6d 69 63 72 6f 73 6f 66 74 2e 70 6c 61 79 72 65 61 64 79 22 5d 3d 7b 75 72 69 3a 65 2e 61 74 74 72 69 62 75 74 65 73 2e 55 52 49 7d 29 3b 69 66 28 22 75 72 6e 3a 75 75 69 64 3a 65 64 65 66 38 62 61 39 2d 37 39 64 36 2d 34 61 63 65 2d 61 33 63 38 2d 32 37 64 63 64 35 31 64 32 31 65 64 22 3d 3d 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2e 4b 45 59 46 4f 52 4d 41 54 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 5b 22 53 41 4d 50 4c 45 2d 41 45 53 22 2c 22 53 41 4d 50 4c 45 2d 41 45 53 2d 43 54 52 22 2c 22 53 41 4d 50 4c 45 2d 41 45 53 2d 43 45 4e 43 22 5d 2e 69 6e 64 65 78 4f 66 28 65 2e 61 74 74 72 69 62 75 74 65 73 2e 4d 45 54 48 4f 44 29 3f 76 6f 69 64 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 77 61 72 6e 22 2c 7b 6d 65 73 73 61 67 65 Data Ascii: ion["com.microsoft.playready"]={uri:e.attributes.URI});if("urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed"===e.attributes.KEYFORMAT){return-1===["SAMPLE-AES","SAMPLE-AES-CTR","SAMPLE-AES-CENC"].indexOf(e.attributes.METHOD)?void this.trigger("warn",{message

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49830	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:40 UTC	600	OUT	GET /static/js/5893.87617d4e.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:41 UTC	2072	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 122 Connection: close Date: Tue, 23 Apr 2024 14:05:42 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "9693a362903b2265b1ffc4395c591c66" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 048a6c89005e16288875f5750557de68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JvFMC6tenw4XNzKFO3PkX7S-onbvLvu2FVerloSGE1FqK5z0YJvhyQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:41 UTC	122	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 39 33 5d 2c 7b 32 35 38 39 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 5d 29 3b Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5893],{25893:function(){}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49831	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:40 UTC	600	OUT	GET /static/js/1052.41310dca.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:41 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17474 Connection: close Date: Tue, 23 Apr 2024 14:05:42 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "293d2b952990aa6160f7a4cf9852c864" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a101821db99e79c2da5df8cbe85ee476.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: iUXyopclzAd6Bj6kOj6fHDpGDEEoQydImNVZoC7Cll-6qM-KDa3veA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:41 UTC	8448	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 35 32 2c 35 36 35 37 5d 2c 7b 32 37 39 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 61 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 61 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1052,5657],{27950:function(e,a,t){Object.defineProperty(a,"__esModule",{value:!0});var r=function(){function e(e,a){for(var t=0;t<a.length;t++){var r
2024-04-23 14:05:41 UTC	9026	IN	Data Raw: 74 69 63 73 22 2c 22 6b 65 72 72 79 70 72 6f 70 65 72 74 69 65 73 22 2c 22 6b 66 68 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 69 61 22 2c 22 6b 69 64 73 22 2c 22 6b 69 6d 22 2c 22 6b 69 6e 64 65 72 22 2c 22 6b 69 6e 64 6c 65 22 2c 22 6b 69 74 63 68 65 6e 22 2c 22 6b 69 77 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 6f 65 6c 6e 22 2c 22 6b 6f 6d 61 74 73 75 22 2c 22 6b 6f 73 68 65 72 22 2c 22 6b 70 22 2c 22 6b 70 6d 67 22 2c 22 6b 70 6e 22 2c 22 6b 72 22 2c 22 6b 72 64 22 2c 22 6b 72 65 64 22 2c 22 6b 75 6f 6b 67 72 6f 75 70 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 79 6f 74 6f 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 61 63 61 69 78 61 22 2c 22 6c 61 6d 62 6f 72 67 68 69 6e 69 22 2c 22 6c 61 6d 65 72 22 2c 22 6c 61 6e 63 61 73 74 65 72 22 Data Ascii: tics","kerryproperties","kfh","kg","kh","ki","kia","kids","kim","kinder","kindle","kitchen","kiwi","km","kn","koeln","komatsu","kosher","kp","kpmg","kpn","kr","krd","kred","kuokgroup","kw","ky","kyoto","kz","la","lacaixa","lamborghini","lamer","lancaster"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49832	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:40 UTC	599	OUT	GET /static/js/788.ed998e8a.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:41 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21573 Connection: close Date: Tue, 23 Apr 2024 14:05:42 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "beacb749456e7d0c3d900f45cdd53f4c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 442817b8ed9905d22aba1f0284647858.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lFf8eEGDo_uxdYKcQ6EoG2r1vUg9LjBwVHS56qowCrp4umuQ3MYYxg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:41 UTC	8447	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 38 5d 2c 7b 36 39 39 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 6e 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 3a 6e 2e 73 70 6c 69 74 28 22 2c 22 29 2c 72 3d 65 2e 6e 61 6d 65 7c 7c 22 22 2c 6f 3d 28 65 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 69 3d 6f 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2e Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[788],{69998:function(e,n){"use strict";n.Z=function(e,n){if(e&&n){var t=Array.isArray(n)?n:n.split(","),r=e.name\|\|"",o=(e.type\|\|"").toLowerCase(),i=o.replace(/\/.
2024-04-23 14:05:42 UTC	13126	IN	Data Raw: 74 69 6f 6e 28 6e 29 7b 45 28 65 2c 6e 2c 74 5b 6e 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 74 29 29 3a 6b 28 4f 62 6a 65 63 74 28 74 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 6e 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: tion(n){E(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):k(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function E(e,n,t){return n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49833	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:40 UTC	600	OUT	GET /static/js/9360.4bf256f8.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:42 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17971 Connection: close Date: Tue, 23 Apr 2024 14:05:42 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "12f9e627e84f8dd3c933b1bf1209a562" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 03b474db824c472de7c4629c50b35ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TVQxs3R1Wjap6dy0DnwDdbETToMNz3Rc1E6OhgFRItm-fMLInQdyzQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:42 UTC	8448	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 36 30 5d 2c 7b 36 39 33 36 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 7d 29 3b 76 61 72 20 6e 3d 69 28 33 31 31 39 34 29 2c 73 3d 7b 6e 62 73 70 3a 22 5c 78 61 30 22 7d 2c 6f 3d 2f 5e 23 5b 78 58 5d 28 5b 41 2d 46 61 2d 66 30 2d 39 5d 2b 29 24 2f 2c 61 3d 2f 5e 23 28 5b 30 2d 39 5d 2b 29 24 2f 2c 72 3d Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9360],{69360:function(t,e,i){i.r(e),i.d(e,{default:function(){return A}});var n=i(31194),s={nbsp:"\xa0"},o=/^#[xX]([A-Fa-f0-9]+)$/,a=/^#([0-9]+)$/,r=
2024-04-23 14:05:42 UTC	9523	IN	Data Raw: 75 74 65 56 61 6c 75 65 28 21 31 29 2c 74 68 69 73 2e 64 65 6c 65 67 61 74 65 2e 66 69 6e 69 73 68 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 28 29 2c 74 68 69 73 2e 63 6f 6e 73 75 6d 65 28 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 54 6f 28 22 73 65 6c 66 43 6c 6f 73 69 6e 67 53 74 61 72 74 54 61 67 22 29 29 3a 22 3d 22 3d 3d 3d 74 3f 28 74 68 69 73 2e 63 6f 6e 73 75 6d 65 28 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 54 6f 28 22 62 65 66 6f 72 65 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 22 29 29 3a 22 3e 22 3d 3d 3d 74 3f 28 74 68 69 73 2e 64 65 6c 65 67 61 74 65 2e 62 65 67 69 6e 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 28 21 31 29 2c 74 68 69 73 2e 64 65 6c 65 67 61 74 65 2e 66 69 6e 69 73 68 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 Data Ascii: uteValue(!1),this.delegate.finishAttributeValue(),this.consume(),this.transitionTo("selfClosingStartTag")):"="===t?(this.consume(),this.transitionTo("beforeAttributeValue")):">"===t?(this.delegate.beginAttributeValue(!1),this.delegate.finishAttributeValue

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49834	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:41 UTC	600	OUT	GET /static/js/8962.d30b6cd1.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:42 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 32005 Connection: close Date: Tue, 23 Apr 2024 14:05:43 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "eb849e426a5b56a5cb7b6a0b94d78b30" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9cef05ab6cc8095e8cbb2721cdabd510.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4YOejjMW9VjOnODtZmd1clX74HCBU9FaaRr1I4cew5-sGnSWfqAgjQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:42 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 36 32 5d 2c 7b 33 38 39 36 32 3a 66 75 6e 63 74 69 6f 6e 28 75 2c 44 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 75 29 7b 74 68 69 73 2e 6a 3d 7b 7d 2c 74 68 69 73 2e 6a 72 3d 5b 5d 2c 74 68 69 73 2e 6a 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 3d 75 7d 65 2e 72 28 44 29 2c 65 2e 64 28 44 2c 7b 4f 70 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 75 7d 2c 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8962],{38962:function(u,D,e){function t(u){this.j={},this.jr=[],this.jd=null,this.t=u}e.r(D),e.d(D,{Options:function(){return su},find:function(){ret
2024-04-23 14:05:42 UTC	1514	IN	Data Raw: 5c 75 31 46 35 46 2d 5c 75 31 46 37 44 5c 75 31 46 38 30 2d 5c 75 31 46 42 34 5c 75 31 46 42 36 2d 5c 75 31 46 42 43 5c 75 31 46 42 45 5c 75 31 46 43 32 2d 5c 75 31 46 43 34 5c 75 31 46 43 36 2d 5c 75 31 46 43 43 5c 75 31 46 44 30 2d 5c 75 31 46 44 33 5c 75 31 46 44 36 2d 5c 75 31 46 44 42 5c 75 31 46 45 30 2d 5c 75 31 46 45 43 5c 75 31 46 46 32 2d 5c 75 31 46 46 34 5c 75 31 46 46 36 2d 5c 75 31 46 46 43 5c 75 32 30 37 31 5c 75 32 30 37 46 5c 75 32 30 39 30 2d 5c 75 32 30 39 43 5c 75 32 31 30 32 5c 75 32 31 30 37 5c 75 32 31 30 41 2d 5c 75 32 31 31 33 5c 75 32 31 31 35 5c 75 32 31 31 39 2d 5c 75 32 31 31 44 5c 75 32 31 32 34 5c 75 32 31 32 36 5c 75 32 31 32 38 5c 75 32 31 32 41 2d 5c 75 32 31 32 44 5c 75 32 31 32 46 2d 5c 75 32 31 33 39 5c 75 32 31 33 43 Data Ascii: \u1F5F-\u1F7D\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128\u212A-\u212D\u212F-\u2139\u213C
2024-04-23 14:05:42 UTC	14107	IN	Data Raw: 75 46 44 46 42 5c 75 46 45 37 30 2d 5c 75 46 45 37 34 5c 75 46 45 37 36 2d 5c 75 46 45 46 43 5c 75 46 46 32 31 2d 5c 75 46 46 33 41 5c 75 46 46 34 31 2d 5c 75 46 46 35 41 5c 75 46 46 36 36 2d 5c 75 46 46 42 45 5c 75 46 46 43 32 2d 5c 75 46 46 43 37 5c 75 46 46 43 41 2d 5c 75 46 46 43 46 5c 75 46 46 44 32 2d 5c 75 46 46 44 37 5c 75 46 46 44 41 2d 5c 75 46 46 44 43 5d 7c 5c 75 44 38 30 30 5b 5c 75 44 43 30 30 2d 5c 75 44 43 30 42 5c 75 44 43 30 44 2d 5c 75 44 43 32 36 5c 75 44 43 32 38 2d 5c 75 44 43 33 41 5c 75 44 43 33 43 5c 75 44 43 33 44 5c 75 44 43 33 46 2d 5c 75 44 43 34 44 5c 75 44 43 35 30 2d 5c 75 44 43 35 44 5c 75 44 43 38 30 2d 5c 75 44 43 46 41 5c 75 44 45 38 30 2d 5c 75 44 45 39 43 5c 75 44 45 41 30 2d 5c 75 44 45 44 30 5c 75 44 46 30 30 2d 5c Data Ascii: uFDFB\uFE70-\uFE74\uFE76-\uFEFC\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF\uFFD2-\uFFD7\uFFDA-\uFFDC]\|\uD800[\uDC00-\uDC0B\uDC0D-\uDC26\uDC28-\uDC3A\uDC3C\uDC3D\uDC3F-\uDC4D\uDC50-\uDC5D\uDC80-\uDCFA\uDE80-\uDE9C\uDEA0-\uDED0\uDF00-\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49835	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:41 UTC	600	OUT	GET /static/js/5822.3b13b8ea.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:42 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 467629 Connection: close Date: Tue, 23 Apr 2024 14:05:43 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "23a699a064d7d42940b561056653e9da" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08829bb06bccf0ab66e6bd5eaa5fcbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Hy_41KPmYAsKhbWpzpvDFZkVewutDz5Vr_jc6AbZKTKKGPyoisaiLA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:42 UTC	3543	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 35 38 32 32 2e 33 62 31 33 62 38 65 61 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 32 32 5d 2c 7b 36 32 35 36 30 3a 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 76 61 72 20 42 75 66 66 65 72 Data Ascii: /! For license information please see 5822.3b13b8ea.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5822],{62560:function(module,__unused_webpack_exports,__webpack_require__){var Buffer
2024-04-23 14:05:43 UTC	16384	IN	Data Raw: 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 6f 2c 69 3d 21 30 2c 73 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3d 72 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 69 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 3d 21 30 2c 6f 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 7c 7c 6e 75 6c 6c 3d 3d 72 2e 72 65 74 75 72 6e 7c 7c 72 2e 72 65 74 75 72 6e 28 Data Ascii: ce.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var o,i=!0,s=!1;return{s:function(){r=r.call(e)},n:function(){var e=r.next();return i=e.done,e},e:function(e){s=!0,o=e},f:function(){try{i\|\|null==r.return\|\|r.return(
2024-04-23 14:05:43 UTC	16384	IN	Data Raw: 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 63 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 Data Ascii: a function")}function l(e,t){if("function"!==typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&c(e,t)}function c(e
2024-04-23 14:05:43 UTC	2048	IN	Data Raw: 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 6c 69 63 65 28 30 29 3b 72 65 74 75 72 6e 20 65 5b 30 5d 3e 65 5b 32 5d 26 26 28 74 5b 30 5d 3d 65 5b 32 5d 2c 74 5b 32 5d 3d 65 5b 30 5d 29 2c 65 5b 31 5d 3e 65 5b 33 5d 26 26 28 74 5b 31 5d 3d 65 5b 33 5d 2c 74 5b 33 5d 3d 65 5b 31 5d 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 69 6e 74 65 72 73 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2d 74 7d 76 61 72 20 61 3d 5b 74 5b 30 5d 2c 74 5b 32 5d 2c 72 5b 30 5d 2c 72 5b 32 5d 5d 2e 73 6f 72 74 28 6e 29 2c 6f 3d 5b 74 5b 31 5d 2c 74 5b 33 5d 2c 72 5b 31 5d 2c 72 5b 33 5d 5d 2e 73 6f 72 74 28 6e 29 2c 69 3d 5b 5d 3b 72 65 74 75 Data Ascii: ",value:function(e){var t=e.slice(0);return e[0]>e[2]&&(t[0]=e[2],t[2]=e[0]),e[1]>e[3]&&(t[1]=e[3],t[3]=e[1]),t}},{key:"intersect",value:function(t,r){function n(e,t){return e-t}var a=[t[0],t[2],r[0],r[2]].sort(n),o=[t[1],t[3],r[1],r[3]].sort(n),i=[];retu
2024-04-23 14:05:43 UTC	16384	IN	Data Raw: 67 28 22 62 61 73 65 36 34 22 29 7d 29 2c 21 67 6c 6f 62 61 6c 54 68 69 73 2e 61 74 6f 62 26 26 6e 2e 69 73 4e 6f 64 65 4a 53 26 26 28 67 6c 6f 62 61 6c 54 68 69 73 2e 61 74 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 42 75 66 66 65 72 2e 66 72 6f 6d 28 65 2c 22 62 61 73 65 36 34 22 29 2e 74 6f 53 74 72 69 6e 67 28 22 62 69 6e 61 72 79 22 29 7d 29 2c 21 67 6c 6f 62 61 6c 54 68 69 73 2e 44 4f 4d 4d 61 74 72 69 78 26 26 6e 2e 69 73 4e 6f 64 65 4a 53 26 26 28 67 6c 6f 62 61 6c 54 68 69 73 2e 44 4f 4d 4d 61 74 72 69 78 3d 72 28 36 39 29 29 2c 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 7c 7c 72 28 37 30 29 2c 67 6c 6f 62 61 6c 54 68 69 73 2e 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 7c 7c 28 67 6c 6f 62 61 6c 54 68 Data Ascii: g("base64")}),!globalThis.atob&&n.isNodeJS&&(globalThis.atob=function(e){return Buffer.from(e,"base64").toString("binary")}),!globalThis.DOMMatrix&&n.isNodeJS&&(globalThis.DOMMatrix=r(69)),Object.fromEntries\|\|r(70),globalThis.Promise.allSettled\|\|(globalTh
2024-04-23 14:05:43 UTC	16384	IN	Data Raw: 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6d 31 31 26 26 30 3d 3d 3d 65 2e 6d 31 32 26 26 30 3d 3d 3d 65 2e 6d 31 33 26 26 30 3d 3d 3d 65 2e 6d 31 34 26 26 30 3d 3d 3d 65 2e 6d 32 31 26 26 31 3d 3d 3d 65 2e 6d 32 32 26 26 30 3d 3d 3d 65 2e 6d 32 33 26 26 30 3d 3d 3d 65 2e 6d 32 34 26 26 30 3d 3d 3d 65 2e 6d 33 31 26 26 30 3d 3d 3d 65 2e 6d 33 32 26 26 31 3d 3d 3d 65 2e 6d 33 33 26 26 30 3d 3d 3d 65 2e 6d 33 34 26 26 30 3d 3d 3d 65 2e 6d 34 31 26 26 30 3d 3d 3d 65 2e 6d 34 32 26 26 30 3d 3d 3d 65 2e 6d 34 33 26 26 31 3d 3d 3d 65 2e 6d 34 34 7d 2c 64 2e 69 73 32 44 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6d 33 31 26 26 30 3d 3d 3d 65 2e 6d 33 32 26 26 31 3d 3d Data Ascii: e=this;return 1===e.m11&&0===e.m12&&0===e.m13&&0===e.m14&&0===e.m21&&1===e.m22&&0===e.m23&&0===e.m24&&0===e.m31&&0===e.m32&&1===e.m33&&0===e.m34&&0===e.m41&&0===e.m42&&0===e.m43&&1===e.m44},d.is2D.get=function(){var e=this;return 0===e.m31&&0===e.m32&&1==
2024-04-23 14:05:43 UTC	16384	IN	Data Raw: 69 6f 6e 29 5c 62 2f 2c 68 3d 6e 28 64 2e 65 78 65 63 29 2c 70 3d 21 64 2e 65 78 65 63 28 6c 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6f 28 65 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 20 66 28 6c 2c 63 2c 65 29 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 21 66 7c 7c 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 76 28 76 2e 63 61 6c 6c 29 7c 7c 21 76 28 4f 62 6a 65 63 74 29 7c 7c 21 76 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 21 30 7d 29 29 7c 7c 65 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6f 28 65 29 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 69 28 65 29 29 7b 63 61 73 65 22 41 73 79 6e 63 46 Data Ascii: ion)\b/,h=n(d.exec),p=!d.exec(l),v=function(e){if(!o(e))return!1;try{return f(l,c,e),!0}catch(t){return!1}};e.exports=!f\|\|a((function(){var e;return v(v.call)\|\|!v(Object)\|\|!v((function(){e=!0}))\|\|e}))?function(e){if(!o(e))return!1;switch(i(e)){case"AsyncF
2024-04-23 14:05:43 UTC	3072	IN	Data Raw: 28 21 52 65 28 74 68 69 73 29 29 74 68 72 6f 77 20 6f 74 28 22 63 6c 6f 73 65 22 29 3b 69 66 28 74 68 69 73 2e 5f 63 6c 6f 73 65 52 65 71 75 65 73 74 65 64 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 73 74 72 65 61 6d 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 63 6c 6f 73 65 64 3b 20 64 6f 20 6e 6f 74 20 63 6c 6f 73 65 20 69 74 20 61 67 61 69 6e 21 22 29 3b 76 61 72 20 65 3d 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 64 52 65 61 64 61 62 6c 65 42 79 74 65 53 74 72 65 61 6d 2e 5f 73 74 61 74 65 3b 69 66 28 22 72 65 61 64 61 62 6c 65 22 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 73 74 72 65 61 6d 20 28 69 6e 20 22 2b 65 2b 22 20 73 74 61 74 65 29 20 69 73 20 6e 6f Data Ascii: (!Re(this))throw ot("close");if(this._closeRequested)throw new TypeError("The stream has already been closed; do not close it again!");var e=this._controlledReadableByteStream._state;if("readable"!==e)throw new TypeError("The stream (in "+e+" state) is no
2024-04-23 14:05:43 UTC	16384	IN	Data Raw: 52 65 71 75 65 73 74 2e 5f 61 73 73 6f 63 69 61 74 65 64 52 65 61 64 61 62 6c 65 42 79 74 65 53 74 72 65 61 6d 43 6f 6e 74 72 6f 6c 6c 65 72 3d 76 6f 69 64 20 30 2c 65 2e 5f 62 79 6f 62 52 65 71 75 65 73 74 2e 5f 76 69 65 77 3d 6e 75 6c 6c 2c 65 2e 5f 62 79 6f 62 52 65 71 75 65 73 74 3d 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 42 65 28 65 29 7b 66 6f 72 28 3b 65 2e 5f 70 65 6e 64 69 6e 67 50 75 6c 6c 49 6e 74 6f 73 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 69 66 28 30 3d 3d 3d 65 2e 5f 71 75 65 75 65 54 6f 74 61 6c 53 69 7a 65 29 72 65 74 75 72 6e 3b 76 61 72 20 74 3d 65 2e 5f 70 65 6e 64 69 6e 67 50 75 6c 6c 49 6e 74 6f 73 2e 70 65 65 6b 28 29 3b 44 65 28 65 2c 74 29 26 26 28 48 65 28 65 29 2c 49 65 28 65 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 64 52 65 61 64 61 Data Ascii: Request._associatedReadableByteStreamController=void 0,e._byobRequest._view=null,e._byobRequest=null)}function Be(e){for(;e._pendingPullIntos.length>0;){if(0===e._queueTotalSize)return;var t=e._pendingPullIntos.peek();De(e,t)&&(He(e),Ie(e._controlledReada
2024-04-23 14:05:43 UTC	16384	IN	Data Raw: 3a 4c 72 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 5f 6f 77 6e 65 72 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 2c 72 3d 74 2e 5f 73 74 61 74 65 3b 72 65 74 75 72 6e 22 65 72 72 6f 72 65 64 22 3d 3d 3d 72 7c 7c 22 65 72 72 6f 72 69 6e 67 22 3d 3d 3d 72 3f 6e 75 6c 6c 3a 22 63 6c 6f 73 65 64 22 3d 3d 3d 72 3f 30 3a 70 72 28 74 2e 5f 77 72 69 74 61 62 6c 65 53 74 72 65 61 6d 43 6f 6e 74 72 6f 6c 6c 65 72 29 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 5f 6f 77 6e 65 72 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 2c 72 3d 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 57 72 69 74 65 72 20 77 61 73 20 72 65 6c 65 61 73 65 64 20 61 6e 64 20 63 61 6e 20 6e 6f 20 6c 6f 6e 67 65 72 20 62 65 20 75 Data Ascii: :Lr(e,t)}function nr(e){var t=e._ownerWritableStream,r=t._state;return"errored"===r\|\|"erroring"===r?null:"closed"===r?0:pr(t._writableStreamController)}function ar(e){var t=e._ownerWritableStream,r=new TypeError("Writer was released and can no longer be u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49837	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:42 UTC	600	OUT	GET /static/js/9378.e150dafa.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:43 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9381 Connection: close Date: Tue, 23 Apr 2024 14:05:44 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "790c2744b6ada6b0bcf7edb050836caa" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 03b474db824c472de7c4629c50b35ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: LXVReBma9LoP_VXy6sdFLcxZhnAu0-X4gaB8HMLD6LPJ8Q6A9Mgj_w== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:43 UTC	9381	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 37 38 2c 31 31 32 38 2c 33 36 33 33 5d 2c 7b 31 34 36 30 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 33 32 37 36 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 32 38 32 35 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 35 37 36 37 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 31 35 34 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 38 37 33 32 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 36 36 31 31 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9378,1128,3633],{14601:function(){},32767:function(){},28251:function(){},57677:function(){},1543:function(){},87324:function(){},66115:function(t){t.exports=func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49836	3.233.159.182	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:42 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=97db3813-1954-4112-8bf4-d749b4b4db26&batch_time=1713881141453 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:42 UTC	16192	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 33 32 30 39 35 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881132095,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:05:42 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:05:42 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 97db3813-1954-4112-8bf4-d749b4b4db26 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:05:42 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 39 37 64 62 33 38 31 33 2d 31 39 35 34 2d 34 31 31 32 2d 38 62 66 34 2d 64 37 34 39 62 34 62 34 64 62 32 36 22 7d Data Ascii: {"request_id":"97db3813-1954-4112-8bf4-d749b4b4db26"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49838	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:42 UTC	600	OUT	GET /static/js/7781.a9e99a82.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:43 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3058 Connection: close Date: Tue, 23 Apr 2024 14:05:44 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "9daf81ae450ae5d382fda4eeceb53fe0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c33ccd454bf1796b79f9f9af880e2882.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Et7YN55GMSxTRRnbKM5PT7asoWz1-u-mgzWMkWwf4eu0xTN0-Uxpew== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:43 UTC	3058	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 38 31 5d 2c 7b 38 37 37 38 31 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 44 45 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 4d 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 6d 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 2c 71 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 65 3d 74 28 31 34 31 33 29 3b 66 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7781],{87781:function(r,n,t){t.d(n,{DE:function(){return a},MT:function(){return p},md:function(){return y},qC:function(){return s}});var e=t(1413);f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49839	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:42 UTC	600	OUT	GET /static/js/8498.ba15fbee.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:43 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 103289 Connection: close Date: Tue, 23 Apr 2024 14:05:44 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "2b8e57ae75448cb98c32f0005f49ae0e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 03b474db824c472de7c4629c50b35ac4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tdBLHjDQ2mmqaqxbQeaDWA4VIgR-Ds7YYyBFgoyIzhfd01mf6E8jxA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:43 UTC	1495	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 34 39 38 2e 62 61 31 35 66 62 65 65 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 39 38 5d 2c 7b 36 32 31 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 76 61 72 20 6e 3d 74 28 34 38 33 30 39 29 2c 69 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 Data Ascii: /! For license information please see 8498.ba15fbee.chunk.js.LICENSE.txt /"use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8498],{62110:function(e,r,t){var n=t(48309),i={childContextTypes:!0,cont
2024-04-23 14:05:44 UTC	16384	IN	Data Raw: 3a 36 30 31 31 30 2c 73 3d 74 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 61 73 79 6e 63 5f 6d 6f 64 65 22 29 3a 36 30 31 31 31 2c 64 3d 74 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 6f 6e 63 75 72 72 65 6e 74 5f 6d 6f 64 65 22 29 3a 36 30 31 31 31 2c 70 3d 74 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 3a 36 30 31 31 32 2c 66 3d 74 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 3a 36 30 31 31 33 2c 67 3d 74 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 5f 6c 69 73 74 22 29 3a 36 30 31 32 30 2c 76 3d 74 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 3a 36 30 31 31 35 2c 6d Data Ascii: :60110,s=t?Symbol.for("react.async_mode"):60111,d=t?Symbol.for("react.concurrent_mode"):60111,p=t?Symbol.for("react.forward_ref"):60112,f=t?Symbol.for("react.suspense"):60113,g=t?Symbol.for("react.suspense_list"):60120,v=t?Symbol.for("react.memo"):60115,m
2024-04-23 14:05:44 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 73 71 72 74 28 4d 61 74 68 2e 70 6f 77 28 72 2e 78 2d 65 2e 78 2c 32 29 2b 4d 61 74 68 2e 70 6f 77 28 72 2e 79 2d 65 2e 79 2c 32 29 29 7d 2c 4c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 69 6e 2e 61 70 70 6c 79 28 4d 61 74 68 2c 72 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 54 65 28 65 2c 72 29 7d 29 29 29 7d 2c 4d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 7b 78 3a 65 28 72 2e 78 29 2c 79 3a 65 28 72 2e 79 29 7d 7d 7d 2c 47 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 7b 74 6f 70 3a 65 2e 74 6f 70 2b 72 2e Data Ascii: =function(e,r){return Math.sqrt(Math.pow(r.x-e.x,2)+Math.pow(r.y-e.y,2))},Le=function(e,r){return Math.min.apply(Math,r.map((function(r){return Te(e,r)})))},Me=function(e){return function(r){return{x:e(r.x),y:e(r.y)}}},Ge=function(e,r){return{top:e.top+r.
2024-04-23 14:05:44 UTC	2048	IN	Data Raw: 4f 56 45 5f 44 4f 57 4e 22 3d 3d 3d 74 7c 7c 22 4d 4f 56 45 5f 52 49 47 48 54 22 3d 3d 3d 74 2c 73 3d 72 2e 64 69 6d 65 6e 73 69 6f 6e 73 2e 64 72 61 67 67 61 62 6c 65 73 5b 72 2e 63 72 69 74 69 63 61 6c 2e 64 72 61 67 67 61 62 6c 65 2e 69 64 5d 2c 64 3d 72 2e 63 75 72 72 65 6e 74 2e 70 61 67 65 2e 62 6f 72 64 65 72 42 6f 78 43 65 6e 74 65 72 2c 70 3d 72 2e 64 69 6d 65 6e 73 69 6f 6e 73 2c 66 3d 70 2e 64 72 61 67 67 61 62 6c 65 73 2c 67 3d 70 2e 64 72 6f 70 70 61 62 6c 65 73 3b 72 65 74 75 72 6e 20 75 3f 4e 72 28 7b 69 73 4d 6f 76 69 6e 67 46 6f 72 77 61 72 64 3a 63 2c 70 72 65 76 69 6f 75 73 50 61 67 65 42 6f 72 64 65 72 42 6f 78 43 65 6e 74 65 72 3a 64 2c 64 72 61 67 67 61 62 6c 65 3a 73 2c 64 65 73 74 69 6e 61 74 69 6f 6e 3a 61 2c 64 72 61 67 67 61 62 Data Ascii: OVE_DOWN"===t\|\|"MOVE_RIGHT"===t,s=r.dimensions.draggables[r.critical.draggable.id],d=r.current.page.borderBoxCenter,p=r.dimensions,f=p.draggables,g=p.droppables;return u?Nr({isMovingForward:c,previousPageBorderBoxCenter:d,draggable:s,destination:a,draggab
2024-04-23 14:05:44 UTC	16384	IN	Data Raw: 29 7b 76 61 72 20 72 3d 65 2e 64 72 61 67 67 61 62 6c 65 2c 74 3d 65 2e 70 61 67 65 42 6f 72 64 65 72 42 6f 78 57 69 74 68 44 72 6f 70 70 61 62 6c 65 53 63 72 6f 6c 6c 2c 6e 3d 65 2e 70 72 65 76 69 6f 75 73 49 6d 70 61 63 74 2c 69 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 2c 6f 3d 65 2e 69 6e 73 69 64 65 44 65 73 74 69 6e 61 74 69 6f 6e 2c 61 3d 65 2e 61 66 74 65 72 43 72 69 74 69 63 61 6c 3b 69 66 28 21 69 2e 69 73 43 6f 6d 62 69 6e 65 45 6e 61 62 6c 65 64 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6c 3d 69 2e 61 78 69 73 2c 75 3d 54 72 28 69 2e 61 78 69 73 2c 72 2e 64 69 73 70 6c 61 63 65 42 79 29 2c 63 3d 75 2e 76 61 6c 75 65 2c 73 3d 74 5b 6c 2e 73 74 61 72 74 5d 2c 64 3d 74 5b 6c 2e 65 6e 64 5d 2c 70 3d 6a 65 28 4b 65 28 72 2c 6f 29 2c 28 66 Data Ascii: ){var r=e.draggable,t=e.pageBorderBoxWithDroppableScroll,n=e.previousImpact,i=e.destination,o=e.insideDestination,a=e.afterCritical;if(!i.isCombineEnabled)return null;var l=i.axis,u=Tr(i.axis,r.displaceBy),c=u.value,s=t[l.start],d=t[l.end],p=je(Ke(r,o),(f
2024-04-23 14:05:44 UTC	1514	IN	Data Raw: 3d 3d 72 2e 64 72 61 67 67 61 62 6c 65 2e 69 6e 64 65 78 2c 6e 3d 65 2e 64 72 6f 70 70 61 62 6c 65 2e 69 64 3d 3d 3d 72 2e 64 72 6f 70 70 61 62 6c 65 2e 69 64 26 26 65 2e 64 72 6f 70 70 61 62 6c 65 2e 74 79 70 65 3d 3d 3d 72 2e 64 72 6f 70 70 61 62 6c 65 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 74 26 26 6e 7d 28 69 2c 6e 2e 6c 61 73 74 43 72 69 74 69 63 61 6c 29 3b 63 26 26 28 6e 2e 6c 61 73 74 43 72 69 74 69 63 61 6c 3d 69 29 3b 76 61 72 20 73 2c 64 2c 70 3d 28 64 3d 6c 2c 21 28 6e 75 6c 6c 3d 3d 28 73 3d 6e 2e 6c 61 73 74 4c 6f 63 61 74 69 6f 6e 29 26 26 6e 75 6c 6c 3d 3d 64 7c 7c 6e 75 6c 6c 21 3d 73 26 26 6e 75 6c 6c 21 3d 64 26 26 73 2e 64 72 6f 70 70 61 62 6c 65 49 64 3d 3d 3d 64 2e 64 72 6f 70 70 61 62 6c 65 49 64 26 26 73 2e 69 6e 64 65 78 3d 3d 3d Data Ascii: ==r.draggable.index,n=e.droppable.id===r.droppable.id&&e.droppable.type===r.droppable.type;return t&&n}(i,n.lastCritical);c&&(n.lastCritical=i);var s,d,p=(d=l,!(null==(s=n.lastLocation)&&null==d\|\|null!=s&&null!=d&&s.droppableId===d.droppableId&&s.index===
2024-04-23 14:05:44 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 2c 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 22 46 4c 55 53 48 22 21 3d 3d 69 2e 74 79 70 65 26 26 22 44 52 4f 50 5f 43 4f 4d 50 4c 45 54 45 22 21 3d 3d 69 2e 74 79 70 65 26 26 22 44 52 4f 50 5f 41 4e 49 4d 41 54 49 4f 4e 5f 46 49 4e 49 53 48 45 44 22 21 3d 3d 69 2e 74 79 70 65 7c 7c 28 74 26 26 28 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 74 29 2c 74 3d 6e 75 6c 6c 29 2c 72 26 26 28 72 28 29 2c 72 3d 6e 75 6c 6c 29 29 2c 6e 28 69 29 2c 22 44 52 4f 50 5f 41 4e 49 4d 41 54 45 22 3d 3d 3d 69 2e 74 79 70 65 29 7b 76 61 72 20 6f 3d 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 73 63 72 6f 6c Data Ascii: ction(e){var r=null,t=null;return function(n){return function(i){if("FLUSH"!==i.type&&"DROP_COMPLETE"!==i.type&&"DROP_ANIMATION_FINISHED"!==i.type\|\|(t&&(cancelAnimationFrame(t),t=null),r&&(r(),r=null)),n(i),"DROP_ANIMATE"===i.type){var o={eventName:"scrol
2024-04-23 14:05:44 UTC	16384	IN	Data Raw: 3a 64 7d 29 7d 7d 7d 7d 2c 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 6d 6f 75 73 65 75 70 22 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 6e 28 29 3b 22 44 52 41 47 47 49 4e 47 22 3d 3d 3d 69 2e 74 79 70 65 3f 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 69 2e 61 63 74 69 6f 6e 73 2e 64 72 6f 70 28 7b 73 68 6f 75 6c 64 42 6c 6f 63 6b 4e 65 78 74 43 6c 69 63 6b 3a 21 30 7d 29 2c 74 28 29 29 3a 72 28 29 7d 7d 2c 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 44 52 41 47 47 49 4e 47 22 3d 3d 3d 6e 28 29 2e 74 79 70 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 28 29 7d 7d 2c 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 6b 65 79 64 6f 77 6e 22 2c Data Ascii: :d})}}}},{eventName:"mouseup",fn:function(e){var i=n();"DRAGGING"===i.type?(e.preventDefault(),i.actions.drop({shouldBlockNextClick:!0}),t()):r()}},{eventName:"mousedown",fn:function(e){"DRAGGING"===n().type&&e.preventDefault(),r()}},{eventName:"keydown",
2024-04-23 14:05:44 UTC	1558	IN	Data Raw: 65 3d 63 65 28 63 29 2c 72 3d 7b 73 63 72 6f 6c 6c 48 65 69 67 68 74 3a 63 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2c 73 63 72 6f 6c 6c 57 69 64 74 68 3a 63 2e 73 63 72 6f 6c 6c 57 69 64 74 68 7d 3b 72 65 74 75 72 6e 7b 63 6c 69 65 6e 74 3a 65 2c 70 61 67 65 3a 6c 65 28 65 2c 69 29 2c 73 63 72 6f 6c 6c 3a 6a 69 28 63 29 2c 73 63 72 6f 6c 6c 53 69 7a 65 3a 72 2c 73 68 6f 75 6c 64 43 6c 69 70 53 75 62 6a 65 63 74 3a 75 7d 7d 28 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 64 65 73 63 72 69 70 74 6f 72 2c 74 3d 65 2e 69 73 45 6e 61 62 6c 65 64 2c 6e 3d 65 2e 69 73 43 6f 6d 62 69 6e 65 45 6e 61 62 6c 65 64 2c 69 3d 65 2e 69 73 46 69 78 65 64 4f 6e 50 61 67 65 2c 6f 3d 65 2e 64 69 72 65 63 74 69 6f 6e 2c 61 3d 65 2e 63 6c 69 65 6e 74 Data Ascii: e=ce(c),r={scrollHeight:c.scrollHeight,scrollWidth:c.scrollWidth};return{client:e,page:le(e,i),scroll:ji(c),scrollSize:r,shouldClipSubject:u}}(),f=function(e){var r=e.descriptor,t=e.isEnabled,n=e.isCombineEnabled,i=e.isFixedOnPage,o=e.direction,a=e.client
2024-04-23 14:05:44 UTC	14754	IN	Data Raw: 70 6c 61 79 3a 74 2e 64 69 73 70 6c 61 79 2c 62 6f 78 53 69 7a 69 6e 67 3a 22 62 6f 72 64 65 72 2d 62 6f 78 22 2c 77 69 64 74 68 3a 69 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 69 2e 68 65 69 67 68 74 2c 6d 61 72 67 69 6e 54 6f 70 3a 69 2e 6d 61 72 67 69 6e 2e 74 6f 70 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 69 2e 6d 61 72 67 69 6e 2e 72 69 67 68 74 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 69 2e 6d 61 72 67 69 6e 2e 62 6f 74 74 6f 6d 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 69 2e 6d 61 72 67 69 6e 2e 6c 65 66 74 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 22 30 22 2c 66 6c 65 78 47 72 6f 77 3a 22 30 22 2c 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3a 22 6e 6f 6e 65 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 6e 6f 6e 65 22 21 3d 3d 6e 3f 43 74 2e 70 6c 61 63 65 68 6f 6c 64 Data Ascii: play:t.display,boxSizing:"border-box",width:i.width,height:i.height,marginTop:i.margin.top,marginRight:i.margin.right,marginBottom:i.margin.bottom,marginLeft:i.margin.left,flexShrink:"0",flexGrow:"0",pointerEvents:"none",transition:"none"!==n?Ct.placehold

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49840	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:42 UTC	600	OUT	GET /static/js/6405.f80d8117.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:44 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2527 Connection: close Date: Tue, 23 Apr 2024 14:05:44 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "2bb423ccd08028187226b6b92997a7f1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f191d757f16dd6002ae3a0c09389b68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: F6QzpuPt6-N5Kl-X17Jk4rbDKLA5k_WZsW1xr95i5Xre2LYhm8N3Cg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:44 UTC	2527	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 30 35 5d 2c 7b 34 39 34 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 6e 2e 64 28 72 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 65 3d 6e 28 34 39 31 34 32 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 28 72 3d 28 30 2c 65 2e 5a 29 28 72 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 76 61 6c 75 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[6405],{4942:function(t,r,n){n.d(r,{Z:function(){return o}});var e=n(49142);function o(t,r,n){return(r=(0,e.Z)(r))in t?Object.defineProperty(t,r,{valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49841	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:42 UTC	600	OUT	GET /static/js/7207.a10606fd.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:44 UTC	2072	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 559 Connection: close Date: Tue, 23 Apr 2024 14:05:44 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "02a2cab30b552402c469524646275a13" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2b98ef877819781cd86c369994bd8ba6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CSr9qn_KvXWzE5IYG593hqVhefHgv3duUe6NeL9ESgmomPzoFhhVBQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:44 UTC	559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 32 30 37 5d 2c 7b 34 37 32 30 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 76 61 72 20 65 3d 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 29 2e 68 74 74 70 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7207],{47207:function(t,e,n){function r(t){var e=(arguments.length>1&&void 0!==arguments[1]?arguments[1]:{}).https,n=void 0===e\|\|e;if("string"!==type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49842	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:43 UTC	600	OUT	GET /static/js/9291.5bde9037.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:44 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4551 Connection: close Date: Tue, 23 Apr 2024 14:05:45 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "aa1c484d16b3f4f6a3605246ac5b1703" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ffb64e712182ecebf7bbb2b7e367a4a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OdnA0w_0ohf7Tmq0n9pdY_iouqxve8fx1p-aiRPwEIB0y45NZPU9SA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:44 UTC	4551	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 39 31 2c 32 30 37 30 5d 2c 7b 35 39 32 39 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 2c 75 3b 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 76 69 64 65 6f 6a 73 5f 68 6f 74 6b 65 79 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 32 2e 32 38 22 7d 29 2c 28 65 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 7c Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9291,2070],{59291:function(e,n,t){var r,o,u;u=function(e){"use strict";"undefined"!==typeof window&&(window.videojs_hotkeys={version:"0.2.28"}),(e.registerPlugin\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49843	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:44 UTC	600	OUT	GET /static/js/4866.9bc0a053.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:45 UTC	2099	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2218886 Connection: close Date: Tue, 23 Apr 2024 14:05:46 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "b072ea833d897aa8c384db3b9f40473a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 fdf00b190a061de7e2517d80e4d54e0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: N40ibYPFOo5fkscZEBSKbTT6kPg3d5ZQ6g5yEFTttmUOGk1hOyjRUg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:45 UTC	1495	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 38 36 36 2e 39 62 63 30 61 30 35 33 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 38 36 36 5d 2c 7b 31 34 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 73 65 74 54 69 6d 65 6f Data Ascii: /! For license information please see 4866.9bc0a053.chunk.js.LICENSE.txt /(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4866],{1426:function(e){var t,n,r=e.exports={};function o(){throw new Error("setTimeo
2024-04-23 14:05:45 UTC	16384	IN	Data Raw: 3d 68 2c 72 2e 61 64 64 4c 69 73 74 65 6e 65 72 3d 68 2c 72 2e 6f 6e 63 65 3d 68 2c 72 2e 6f 66 66 3d 68 2c 72 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 68 2c 72 2e 72 65 6d 6f 76 65 41 6c 6c 4c 69 73 74 65 6e 65 72 73 3d 68 2c 72 2e 65 6d 69 74 3d 68 2c 72 2e 70 72 65 70 65 6e 64 4c 69 73 74 65 6e 65 72 3d 68 2c 72 2e 70 72 65 70 65 6e 64 4f 6e 63 65 4c 69 73 74 65 6e 65 72 3d 68 2c 72 2e 6c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 5d 7d 2c 72 2e 62 69 6e 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 70 72 6f 63 65 73 73 2e 62 69 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 7d 2c 72 2e 63 77 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: =h,r.addListener=h,r.once=h,r.off=h,r.removeListener=h,r.removeAllListeners=h,r.emit=h,r.prependListener=h,r.prependOnceListener=h,r.listeners=function(e){return[]},r.binding=function(e){throw new Error("process.binding is not supported")},r.cwd=function(
2024-04-23 14:05:45 UTC	16384	IN	Data Raw: 65 78 63 65 70 74 69 6f 6e 20 6f 63 63 75 72 72 65 64 3b 20 75 73 65 20 74 68 65 20 6e 6f 6e 2d 6d 69 6e 69 66 69 65 64 20 64 65 76 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 20 61 6e 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 68 65 6c 70 66 75 6c 20 77 61 72 6e 69 6e 67 73 2e 22 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 30 3b 28 69 3d 6e 65 77 20 45 72 72 6f 72 28 74 2e 72 65 70 6c 61 63 65 28 2f 25 73 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 61 2b 2b 5d 7d 29 29 29 29 2e 6e 61 6d 65 3d 22 49 6e 76 61 72 69 61 6e 74 20 56 69 6f 6c 61 74 69 6f 6e 22 7d 74 68 72 6f 77 20 69 2e 66 72 61 6d 65 73 54 6f 50 6f 70 3d 31 2c 69 7d 7d 6e 2e 72 28 74 29 2c 6e 2e 64 28 Data Ascii: exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var a=0;(i=new Error(t.replace(/%s/g,(function(){return r[a++]})))).name="Invariant Violation"}throw i.framesToPop=1,i}}n.r(t),n.d(
2024-04-23 14:05:45 UTC	16384	IN	Data Raw: 7d 2c 7b 6b 65 79 3a 22 75 6e 70 69 6e 53 6f 75 72 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 70 28 74 68 69 73 2e 70 69 6e 6e 65 64 53 6f 75 72 63 65 2c 22 4e 6f 20 73 6f 75 72 63 65 20 69 73 20 70 69 6e 6e 65 64 20 61 74 20 74 68 65 20 74 69 6d 65 2e 22 29 2c 74 68 69 73 2e 70 69 6e 6e 65 64 53 6f 75 72 63 65 49 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 70 69 6e 6e 65 64 53 6f 75 72 63 65 3d 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 48 61 6e 64 6c 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6d 65 28 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 79 70 65 73 2e 73 65 74 28 72 2c 74 29 2c 65 3d 3d 3d 6f 65 2e 53 4f 55 52 43 45 3f 74 68 69 73 2e 64 72 61 67 53 6f 75 72 63 65 73 2e 73 Data Ascii: },{key:"unpinSource",value:function(){p(this.pinnedSource,"No source is pinned at the time."),this.pinnedSourceId=null,this.pinnedSource=null}},{key:"addHandler",value:function(e,t,n){var r=me(e);return this.types.set(r,t),e===oe.SOURCE?this.dragSources.s
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 7d 2c 7b 6b 65 79 3a 22 72 65 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 64 69 64 48 61 6e 64 6c 65 72 49 64 43 68 61 6e 67 65 28 29 7c 7c 74 68 69 73 2e 64 69 64 44 72 6f 70 54 61 72 67 65 74 43 68 61 6e 67 65 28 29 7c 7c 74 68 69 73 2e 64 69 64 4f 70 74 69 6f 6e 73 43 68 61 6e 67 65 28 29 3b 65 26 26 74 68 69 73 2e 64 69 73 63 6f 6e 6e 65 63 74 44 72 6f 70 54 61 72 67 65 74 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 64 72 6f 70 54 61 72 67 65 74 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 49 64 26 26 28 74 3f 65 26 26 28 74 68 69 73 2e 6c 61 73 74 43 6f 6e 6e 65 63 74 65 64 48 61 6e 64 6c 65 72 49 64 3d 74 68 69 73 2e 68 61 6e 64 6c 65 72 49 64 2c 74 68 69 73 2e 6c 61 73 74 43 6f 6e 6e 65 63 Data Ascii: },{key:"reconnect",value:function(){var e=this.didHandlerIdChange()\|\|this.didDropTargetChange()\|\|this.didOptionsChange();e&&this.disconnectDropTarget();var t=this.dropTarget;this.handlerId&&(t?e&&(this.lastConnectedHandlerId=this.handlerId,this.lastConnec
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 22 69 6e 74 65 67 65 72 2d 77 69 64 74 68 22 3a 69 66 28 69 2e 6f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 3e 31 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 74 65 67 65 72 2d 77 69 64 74 68 20 73 74 65 6d 73 20 6f 6e 6c 79 20 61 63 63 65 70 74 20 61 20 73 69 6e 67 6c 65 20 6f 70 74 69 6f 6e 61 6c 20 6f 70 74 69 6f 6e 22 29 3b 69 2e 6f 70 74 69 6f 6e 73 5b 30 5d 2e 72 65 70 6c 61 63 65 28 41 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 6f 2c 69 2c 61 29 7b 69 66 28 6e 29 74 2e 6d 69 6e 69 6d 75 6d 49 6e 74 65 67 65 72 44 69 67 69 74 73 3d 72 2e 6c 65 6e 67 74 68 3b 65 6c 73 65 7b 69 66 28 6f 26 26 69 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 57 65 20 63 75 72 72 65 6e Data Ascii: ;continue;case"integer-width":if(i.options.length>1)throw new RangeError("integer-width stems only accept a single optional option");i.options[0].replace(A,(function(e,n,r,o,i,a){if(n)t.minimumIntegerDigits=r.length;else{if(o&&i)throw new Error("We curren
2024-04-23 14:05:46 UTC	3072	IN	Data Raw: 3d 65 7c 7c 31 30 36 33 30 3d 3d 3d 65 7c 7c 31 30 36 33 31 3d 3d 3d 65 7c 7c 31 30 36 33 32 3d 3d 3d 65 7c 7c 31 30 36 33 33 3d 3d 3d 65 7c 7c 31 30 36 33 34 3d 3d 3d 65 7c 7c 31 30 36 33 35 3d 3d 3d 65 7c 7c 31 30 36 33 36 3d 3d 3d 65 7c 7c 31 30 36 33 37 3d 3d 3d 65 7c 7c 31 30 36 33 38 3d 3d 3d 65 7c 7c 31 30 36 33 39 3d 3d 3d 65 7c 7c 31 30 36 34 30 3d 3d 3d 65 7c 7c 31 30 36 34 31 3d 3d 3d 65 7c 7c 31 30 36 34 32 3d 3d 3d 65 7c 7c 31 30 36 34 33 3d 3d 3d 65 7c 7c 31 30 36 34 34 3d 3d 3d 65 7c 7c 31 30 36 34 35 3d 3d 3d 65 7c 7c 31 30 36 34 36 3d 3d 3d 65 7c 7c 31 30 36 34 37 3d 3d 3d 65 7c 7c 31 30 36 34 38 3d 3d 3d 65 7c 7c 65 3e 3d 31 30 36 34 39 26 26 65 3c 3d 31 30 37 31 31 7c 7c 31 30 37 31 32 3d 3d 3d 65 7c 7c 31 30 37 31 33 3d 3d 3d 65 7c 7c Data Ascii: =e\|\|10630===e\|\|10631===e\|\|10632===e\|\|10633===e\|\|10634===e\|\|10635===e\|\|10636===e\|\|10637===e\|\|10638===e\|\|10639===e\|\|10640===e\|\|10641===e\|\|10642===e\|\|10643===e\|\|10644===e\|\|10645===e\|\|10646===e\|\|10647===e\|\|10648===e\|\|e>=10649&&e<=10711\|\|10712===e\|\|10713===e\|\|
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 76 65 7c 7c 28 76 65 3d 7b 7d 29 29 3b 76 61 72 20 77 65 2c 50 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 6f 2e 63 6f 64 65 3d 6e 2c 6f 2e 6f 72 69 67 69 6e 61 6c 4d 65 73 73 61 67 65 3d 72 2c 6f 7d 72 65 74 75 72 6e 28 30 2c 72 2e 5f 5f 65 78 74 65 6e 64 73 29 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 66 6f 72 6d 61 74 6a 73 20 45 72 72 6f 72 3a 20 22 2b 74 68 69 73 2e 63 6f 64 65 2b 22 5d 20 22 2b 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 2c 74 7d 28 45 72 72 6f 72 29 2c 53 65 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ve\|\|(ve={}));var we,Pe=function(e){function t(t,n,r){var o=e.call(this,t)\|\|this;return o.code=n,o.originalMessage=r,o}return(0,r.__extends)(t,e),t.prototype.toString=function(){return"[formatjs Error: "+this.code+"] "+this.message},t}(Error),Se=function(e
2024-04-23 14:05:46 UTC	1024	IN	Data Raw: 65 2e 76 61 72 69 61 64 69 63 7d 29 2c 67 65 74 52 65 6c 61 74 69 76 65 54 69 6d 65 46 6f 72 6d 61 74 3a 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 6e 65 77 28 74 2e 62 69 6e 64 2e 61 70 70 6c 79 28 74 2c 28 30 2c 72 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 29 28 5b 76 6f 69 64 20 30 5d 2c 65 29 29 29 7d 29 2c 7b 63 61 63 68 65 3a 4b 65 28 65 2e 72 65 6c 61 74 69 76 65 54 69 6d 65 29 2c 73 74 72 61 74 65 67 79 3a 62 65 2e 76 61 72 69 61 64 69 63 7d 29 2c 67 65 74 50 6c 75 72 61 6c 52 75 6c 65 73 3a 73 2c 67 65 74 4c 69 73 74 46 6f 72 6d 61 74 3a 6c 65 28 28 66 Data Ascii: e.variadic}),getRelativeTimeFormat:le((function(){for(var e=[],n=0;n<arguments.length;n++)e[n]=arguments[n];return new(t.bind.apply(t,(0,r.__spreadArray)([void 0],e)))}),{cache:Ke(e.relativeTime),strategy:be.variadic}),getPluralRules:s,getListFormat:le((f
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 73 28 6e 65 77 20 46 65 28 27 4d 69 73 73 69 6e 67 20 6c 6f 63 61 6c 65 20 64 61 74 61 20 66 6f 72 20 6c 6f 63 61 6c 65 3a 20 22 27 2b 69 2b 27 22 20 69 6e 20 49 6e 74 6c 2e 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 20 55 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6c 6f 63 61 6c 65 3a 20 22 27 2b 61 2b 27 22 20 61 73 20 66 61 6c 6c 62 61 63 6b 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 66 6f 72 6d 61 74 6a 73 2e 69 6f 2f 64 6f 63 73 2f 72 65 61 63 74 2d 69 6e 74 6c 23 72 75 6e 74 69 6d 65 2d 72 65 71 75 69 72 65 6d 65 6e 74 73 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 27 29 29 3a 28 73 26 26 73 28 6e 65 77 20 4d 65 28 27 22 6c 6f 63 61 6c 65 22 20 77 61 73 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 75 73 69 6e 67 20 22 27 2b 61 2b 27 22 20 Data Ascii: s(new Fe('Missing locale data for locale: "'+i+'" in Intl.DateTimeFormat. Using default locale: "'+a+'" as fallback. See https://formatjs.io/docs/react-intl#runtime-requirements for more details')):(s&&s(new Me('"locale" was not configured, using "'+a+'"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49844	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:44 UTC	599	OUT	GET /static/js/845.87798335.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:45 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2174 Connection: close Date: Tue, 23 Apr 2024 14:05:46 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "144501a64a20860ca013a26711f6b3bf" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 20ae150f60acdff8fc384fb3233356a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zGPka-bVRv4RtPT-5gX0F62k4BNwbJiT3guXVuC1W3FkZxcitBPDWg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:45 UTC	2174	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 35 2c 32 37 36 34 5d 2c 7b 38 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[845,2764],{845:function(e,t,o){Object.defineProperty(t,"__esModule",{value:!0});var n=function(){function e(e,t){for(var o=0;o<t.length;o++){var n=t[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49845	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:44 UTC	600	OUT	GET /static/js/5782.cb349513.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:45 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2986 Connection: close Date: Tue, 23 Apr 2024 14:05:46 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "3e9d7389f1d694358145d906b35b763d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9f7d0905153f4a5038c2d204546afd48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tAgQ4EejbS-v-skp9zL4UHJFnEP723q9l-4mwoxc83mzpT6MsdQtZQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:45 UTC	2986	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 37 38 32 2c 32 31 39 38 5d 2c 7b 36 35 37 38 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 2e 72 28 6e 29 2c 72 2e 64 28 6e 2c 7b 46 75 6c 6c 53 63 72 65 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 75 73 65 46 75 6c 6c 53 63 72 65 65 6e 48 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 29 3b 76 61 72 20 6c 3d 72 28 39 33 32 36 34 29 2c 75 3d 72 2e 6e 28 6c 29 2c 74 3d Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[5782,2198],{65782:function(e,n,r){r.r(n),r.d(n,{FullScreen:function(){return m},useFullScreenHandle:function(){return d}});var l=r(93264),u=r.n(l),t=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49846	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:44 UTC	600	OUT	GET /static/js/9969.d56a16a9.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:45 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 67160 Connection: close Date: Tue, 23 Apr 2024 14:05:46 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "cb1a20b8ddec78eb873df4f10581e8c4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08829bb06bccf0ab66e6bd5eaa5fcbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9JCIj25yqdKuRn7aLr3-Lg6m50m3OGFwlgipiUPd1A1vU3XeMR_g6A== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:45 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 36 39 5d 2c 7b 32 33 31 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 76 61 72 20 72 3d 74 28 31 35 36 37 31 29 2c 6f 3d 74 28 34 33 31 34 34 29 2c 69 3d 74 28 39 39 35 37 39 29 2c 61 3d 74 28 35 32 33 32 32 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 28 30 2c 72 2e 5a 29 28 74 68 69 73 2c 65 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9969],{23130:function(e,n,t){t.d(n,{Z:function(){return c}});var r=t(15671),o=t(43144),i=t(99579),a=t(52322),c=function(){function e(){(0,r.Z)(this,e
2024-04-23 14:05:45 UTC	471	IN	Data Raw: 72 6f 6f 6d 5f 69 64 22 2c 65 2e 53 4f 55 52 43 45 3d 22 73 6f 75 72 63 65 22 2c 65 2e 54 45 4d 50 4c 41 54 45 3d 22 74 65 6d 70 6c 61 74 65 5f 69 64 22 2c 65 2e 54 59 50 45 3d 22 73 6f 75 72 63 65 54 79 70 65 22 2c 65 2e 55 52 4c 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 55 52 4c 22 2c 65 2e 55 53 45 52 3d 22 64 73 72 5f 75 73 65 72 5f 69 64 22 2c 65 2e 56 49 45 57 3d 22 76 69 65 77 54 79 70 65 22 2c 65 2e 4f 50 50 4f 52 54 55 4e 49 54 59 5f 49 44 3d 22 6f 70 70 6f 72 74 75 6e 69 74 79 5f 69 64 22 2c 65 2e 43 4f 4e 54 41 43 54 5f 43 4f 4e 53 45 4e 54 3d 22 63 6f 6e 74 61 63 74 5f 63 6f 6e 73 65 6e 74 22 2c 65 7d 28 66 7c 7c 7b 7d 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 49 4e 54 45 52 4e 41 4c 3d 22 69 6e 74 65 72 6e 61 6c Data Ascii: room_id",e.SOURCE="source",e.TEMPLATE="template_id",e.TYPE="sourceType",e.URL="interactionURL",e.USER="dsr_user_id",e.VIEW="viewType",e.OPPORTUNITY_ID="opportunity_id",e.CONTACT_CONSENT="contact_consent",e}(f\|\|{}),v=function(e){return e.INTERNAL="internal
2024-04-23 14:05:45 UTC	16384	IN	Data Raw: 28 64 2e 70 6c 2e 52 4f 4f 4d 5f 54 45 4d 50 4c 41 54 45 53 2e 45 44 49 54 2c 22 20 2d 20 50 72 65 76 69 65 77 22 29 2c 75 2e 54 45 4d 50 4c 41 54 45 5f 50 52 45 56 49 45 57 29 2c 28 30 2c 6f 2e 5a 29 28 72 2c 22 22 2e 63 6f 6e 63 61 74 28 64 2e 70 6c 2e 44 45 41 4c 5f 52 4f 4f 4d 53 2e 53 54 41 54 49 53 54 49 43 53 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 64 2e 70 6c 2e 44 45 41 4c 5f 52 4f 4f 4d 53 2e 45 44 49 54 2c 22 20 2d 20 50 72 65 76 69 65 77 22 29 2c 75 2e 52 4f 4f 4d 5f 50 52 45 56 49 45 57 29 2c 28 30 2c 6f 2e 5a 29 28 72 2c 22 22 2e 63 6f 6e 63 61 74 28 64 2e 70 6c 2e 44 45 41 4c 5f 52 4f 4f 4d 53 2e 48 4f 4d 45 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 64 2e 70 6c 2e 44 45 41 4c 5f 52 4f 4f 4d 53 2e 43 52 45 41 54 45 2c 22 20 2d 20 50 72 65 76 69 Data Ascii: (d.pl.ROOM_TEMPLATES.EDIT," - Preview"),u.TEMPLATE_PREVIEW),(0,o.Z)(r,"".concat(d.pl.DEAL_ROOMS.STATISTICS,"-").concat(d.pl.DEAL_ROOMS.EDIT," - Preview"),u.ROOM_PREVIEW),(0,o.Z)(r,"".concat(d.pl.DEAL_ROOMS.HOME,"-").concat(d.pl.DEAL_ROOMS.CREATE," - Previ
2024-04-23 14:05:45 UTC	1024	IN	Data Raw: 6c 65 53 74 72 65 61 6d 3a 21 30 2c 64 69 73 61 62 6c 65 46 6f 6e 74 46 61 63 65 3a 41 65 2c 73 74 61 6e 64 61 72 64 46 6f 6e 74 44 61 74 61 55 72 6c 3a 41 65 3f 22 68 74 74 70 73 3a 2f 2f 75 6e 70 6b 67 2e 63 6f 6d 2f 70 64 66 6a 73 2d 64 69 73 74 40 22 2e 63 6f 6e 63 61 74 28 55 2e 5a 2e 76 65 72 73 69 6f 6e 2c 22 2f 73 74 61 6e 64 61 72 64 5f 66 6f 6e 74 73 2f 22 29 3a 76 6f 69 64 20 30 7d 2c 63 68 69 6c 64 72 65 6e 3a 49 65 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 54 2e 6a 73 78 29 28 71 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 70 28 29 28 28 30 2c 6c 2e 5a 29 28 7b 7d 2c 61 2e 68 69 64 65 2c 45 65 21 3d 3d 65 29 29 2c 6f 6e 52 65 6e 64 65 72 53 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 3d 3d 28 6e Data Ascii: leStream:!0,disableFontFace:Ae,standardFontDataUrl:Ae?"https://unpkg.com/pdfjs-dist@".concat(U.Z.version,"/standard_fonts/"):void 0},children:Ie.map((function(e){return(0,T.jsx)(q,{className:p()((0,l.Z)({},a.hide,Ee!==e)),onRenderSuccess:function(){e===(n
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 65 73 3a 66 65 7d 29 7d 29 5d 7d 29 5d 7d 29 3a 28 30 2c 54 2e 6a 73 78 29 28 48 2c 7b 64 6f 77 6e 6c 6f 61 64 61 62 6c 65 3a 77 2c 6f 6e 44 6f 77 6e 6c 6f 61 64 3a 44 2c 6d 69 6d 65 3a 59 7d 29 7d 29 7d 29 7d 7d 29 7d 29 7d 29 7d 29 7d 29 29 2c 75 65 3d 74 28 37 34 31 36 35 29 2c 66 65 3d 74 28 31 35 38 36 31 29 2c 76 65 3d 74 28 34 32 36 35 37 29 2c 70 65 3d 74 28 37 37 33 34 30 29 2c 6d 65 3d 74 28 39 39 36 35 37 29 2c 68 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3d 79 28 29 2c 72 3d 28 30 2c 6a 2e 5a 29 28 29 2c 6f 3d 28 30 2c 45 2e 5a 29 28 29 2e 69 73 45 6d 62 65 64 64 65 64 4d 6f 64 65 2c 69 3d 65 2e 63 75 72 72 65 6e 74 50 61 67 65 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 31 3a 69 2c 63 3d 65 2e 64 61 72 6b 54 68 65 6d 65 2c Data Ascii: es:fe})})]})]}):(0,T.jsx)(H,{downloadable:w,onDownload:D,mime:Y})})})}})})})})})),ue=t(74165),fe=t(15861),ve=t(42657),pe=t(77340),me=t(99657),he=function(e){var n,t=y(),r=(0,j.Z)(),o=(0,E.Z)().isEmbeddedMode,i=e.currentPage,a=void 0===i?1:i,c=e.darkTheme,
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 21 30 2c 50 6f 70 70 65 72 50 72 6f 70 73 3a 7b 64 69 73 61 62 6c 65 50 6f 72 74 61 6c 3a 21 30 7d 2c 74 69 74 6c 65 3a 22 44 6f 77 6e 6c 6f 61 64 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 77 2e 6a 73 78 29 28 73 2e 49 63 6f 6e 42 75 74 74 6f 6e 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 64 6f 77 6e 6c 6f 61 64 22 2c 63 6f 6c 6f 72 3a 22 69 6e 68 65 72 69 74 22 2c 64 6f 77 6e 6c 6f 61 64 3a 21 30 2c 65 64 67 65 3a 22 65 6e 64 22 2c 68 72 65 66 3a 50 2c 6f 6e 43 6c 69 63 6b 3a 53 65 2c 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 73 69 7a 65 3a 22 6c 61 72 67 65 22 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 77 2e 6a 73 78 29 28 66 2e 5a 2c 7b 7d 29 7d 29 7d 29 7d 29 5d 7d 29 7d 28 29 5d 7d 29 2c 63 68 69 6c 64 72 65 6e 3a 5f 26 26 28 30 2c 77 2e 6a 73 Data Ascii: !0,PopperProps:{disablePortal:!0},title:"Download",children:(0,w.jsx)(s.IconButton,{"aria-label":"download",color:"inherit",download:!0,edge:"end",href:P,onClick:Se,target:"_blank",size:"large",children:(0,w.jsx)(f.Z,{})})})})]})}()]}),children:_&&(0,w.js
2024-04-23 14:05:46 UTC	129	IN	Data Raw: 5a 29 28 65 2c 63 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 6a 73 78 29 28 69 2e 49 63 6f 6e 42 75 74 74 6f 6e 2c 28 30 2c 72 2e 5a 29 28 7b 63 6f 6c 6f 72 3a 22 73 65 63 6f 6e 64 61 72 79 22 2c 73 69 7a 65 3a 74 7d 2c 6c 29 29 7d 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 39 39 36 39 2e 64 35 36 61 31 36 61 39 2e 63 68 75 6e 6b 2e 6a 73 2e 6d 61 70 Data Ascii: Z)(e,c);return(0,a.jsx)(i.IconButton,(0,r.Z)({color:"secondary",size:t},l))}}}]);//# sourceMappingURL=9969.d56a16a9.chunk.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49847	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:44 UTC	600	OUT	GET /static/js/7898.e38af75d.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:46 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 88581 Connection: close Date: Tue, 23 Apr 2024 14:05:46 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "636ce665cd44633380d82d0d969c3746" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a391141d25437d7aa74fa579471d4816.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: m0Ieq7njMS37e-3I8aoWE2B0y0TGDEnzg-Z18cwlBWY9aA9zCks6Ww== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:46 UTC	1497	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 39 38 5d 2c 7b 39 35 32 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 34 39 34 32 29 2c 6c 3d 28 72 28 39 33 32 36 34 29 2c 72 28 39 38 38 35 30 29 29 2c 69 3d 72 28 33 31 38 30 33 29 2c 6f 3d 72 28 37 31 30 31 29 2c 61 3d 72 2e 6e 28 6f 29 2c 43 3d 72 28 38 30 31 38 34 29 2c 63 3d 28 30 2c 69 2e 5a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 6f 75 74 6c 69 6e 65 64 3a 28 30 2c 6e Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7898],{95239:function(e,t,r){var n=r(4942),l=(r(93264),r(98850)),i=r(31803),o=r(7101),a=r.n(o),C=r(80184),c=(0,i.Z)((function(e){return{outlined:(0,n
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 73 28 29 2c 72 3d 65 2e 63 6c 61 73 73 65 73 2c 6c 3d 65 2e 6f 72 67 43 6f 6c 6f 72 73 2c 69 3d 65 2e 73 65 63 74 69 6f 6e 48 65 61 64 65 72 2c 48 3d 69 2e 69 63 6f 6e 2c 75 3d 69 2e 6c 6f 67 6f 55 72 6c 2c 66 3d 69 2e 6e 61 6d 65 2c 64 3d 69 2e 73 69 67 6e 65 64 55 72 6c 3b 72 65 74 75 72 6e 20 48 3f 28 30 2c 63 2e 6a 73 78 29 28 43 2e 5a 2c 7b 63 6f 6c 6f 72 73 3a 6c 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 63 2e 6a 73 78 29 28 61 2e 5a 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6f 28 29 28 74 2e 69 63 6f 6e 2c 6e 75 6c 6c 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 69 63 6f 6e 29 2c 69 63 6f 6e 43 6f 6c 6f 72 3a 21 30 2c 6e 61 6d 65 3a 22 22 2e 63 6f 6e 63 61 74 28 48 Data Ascii: Z=function(e){var t=s(),r=e.classes,l=e.orgColors,i=e.sectionHeader,H=i.icon,u=i.logoUrl,f=i.name,d=i.signedUrl;return H?(0,c.jsx)(C.Z,{colors:l,children:(0,c.jsx)(a.Z,{className:o()(t.icon,null===r\|\|void 0===r?void 0:r.icon),iconColor:!0,name:"".concat(H
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 34 33 43 32 34 20 32 33 2e 38 31 31 20 32 33 2e 39 39 34 20 32 33 2e 39 30 36 34 20 32 33 2e 39 38 32 33 20 32 34 48 32 39 43 32 39 2e 35 35 32 33 20 32 34 20 33 30 20 32 33 2e 35 35 32 33 20 33 30 20 32 33 43 33 30 20 32 30 2e 37 39 30 39 20 32 38 2e 32 30 39 31 20 31 39 20 32 36 20 31 39 48 32 35 43 32 34 2e 34 34 37 37 20 31 39 20 32 34 20 31 38 2e 35 35 32 33 20 32 34 20 31 38 43 32 34 20 31 37 2e 34 34 37 37 20 32 34 2e 34 34 37 37 20 31 37 20 32 35 20 31 37 48 32 36 43 32 39 2e 33 31 33 37 20 31 37 20 33 32 20 31 39 2e 36 38 36 33 20 33 32 20 32 33 43 33 32 20 32 34 2e 36 35 36 39 20 33 30 2e 36 35 36 39 20 32 36 20 32 39 20 32 36 48 32 31 2e 37 31 34 33 48 32 30 5a 22 7d 29 29 29 7d 2c 4e 3d 28 30 2c 61 2e 66 6f 72 77 61 72 64 52 65 66 29 28 46 29 Data Ascii: 43C24 23.811 23.994 23.9064 23.9823 24H29C29.5523 24 30 23.5523 30 23C30 20.7909 28.2091 19 26 19H25C24.4477 19 24 18.5523 24 18C24 17.4477 24.4477 17 25 17H26C29.3137 17 32 19.6863 32 23C32 24.6569 30.6569 26 29 26H21.7143H20Z"})))},N=(0,a.forwardRef)(F)
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 20 34 2e 36 39 38 37 31 20 32 33 2e 39 39 34 31 20 35 2e 38 35 32 35 20 32 34 2e 37 32 38 33 4c 31 35 2e 34 36 33 31 20 33 30 2e 38 34 34 32 4c 31 36 20 33 31 2e 31 38 35 38 4c 31 36 2e 35 33 36 39 20 33 30 2e 38 34 34 32 4c 32 36 2e 31 34 37 35 20 32 34 2e 37 32 38 33 43 32 37 2e 33 30 31 33 20 32 33 2e 39 39 34 31 20 32 38 20 32 32 2e 37 32 31 33 20 32 38 20 32 31 2e 33 35 33 37 56 36 2e 34 31 32 39 34 43 32 38 20 35 2e 30 30 34 38 39 20 32 36 2e 36 33 34 39 20 34 2e 31 32 35 34 37 20 32 35 2e 33 39 36 31 20 34 2e 34 35 30 37 34 43 32 33 2e 37 33 32 31 20 34 2e 38 38 37 36 37 20 32 32 2e 33 36 35 35 20 34 2e 39 31 33 31 31 20 32 31 2e 31 34 33 39 20 34 2e 35 36 35 31 38 43 31 39 2e 39 32 30 38 20 34 2e 32 31 36 38 35 20 31 38 2e 37 34 36 33 20 33 2e 34 Data Ascii: 4.69871 23.9941 5.8525 24.7283L15.4631 30.8442L16 31.1858L16.5369 30.8442L26.1475 24.7283C27.3013 23.9941 28 22.7213 28 21.3537V6.41294C28 5.00489 26.6349 4.12547 25.3961 4.45074C23.7321 4.88767 22.3655 4.91311 21.1439 4.56518C19.9208 4.21685 18.7463 3.4
2024-04-23 14:05:46 UTC	8555	IN	Data Raw: 34 20 31 38 2e 37 33 33 34 20 31 38 2e 31 36 39 20 31 38 2e 35 31 34 36 20 31 37 2e 38 30 35 20 31 38 2e 33 32 33 32 43 31 37 2e 34 34 30 39 20 31 38 2e 31 32 37 33 20 31 36 2e 39 37 35 32 20 31 37 2e 39 31 39 39 20 31 36 2e 34 30 37 38 20 31 37 2e 37 30 31 32 43 31 35 2e 38 34 35 32 20 31 37 2e 34 38 32 34 20 31 35 2e 34 35 39 38 20 31 37 2e 32 36 38 32 20 31 35 2e 32 35 31 38 20 31 37 2e 30 35 38 36 43 31 35 2e 30 34 33 37 20 31 36 2e 38 34 39 20 31 34 2e 39 33 39 37 20 31 36 2e 35 37 31 20 31 34 2e 39 33 39 37 20 31 36 2e 32 32 34 36 43 31 34 2e 39 33 39 37 20 31 35 2e 38 35 30 39 20 31 35 2e 30 34 36 31 20 31 35 2e 35 35 39 32 20 31 35 2e 32 35 38 39 20 31 35 2e 33 34 39 36 43 31 35 2e 34 37 31 36 20 31 35 2e 31 33 35 34 20 31 35 2e 37 37 31 39 20 31 Data Ascii: 4 18.7334 18.169 18.5146 17.805 18.3232C17.4409 18.1273 16.9752 17.9199 16.4078 17.7012C15.8452 17.4824 15.4598 17.2682 15.2518 17.0586C15.0437 16.849 14.9397 16.571 14.9397 16.2246C14.9397 15.8509 15.0461 15.5592 15.2589 15.3496C15.4716 15.1354 15.7719 1
2024-04-23 14:05:46 UTC	16384	IN	Data Raw: 35 38 20 31 38 2e 30 39 37 36 20 34 2e 37 30 37 31 31 20 31 37 2e 37 30 37 31 4c 31 30 2e 35 20 31 31 2e 39 31 34 32 4c 31 35 2e 32 39 32 39 20 31 36 2e 37 30 37 31 4c 31 35 2e 39 36 39 39 20 31 37 2e 33 38 34 31 4c 31 36 2e 36 37 35 37 20 31 36 2e 37 33 37 32 4c 32 37 20 37 2e 32 37 33 32 33 56 38 2e 35 43 32 37 20 39 2e 30 35 32 32 38 20 32 37 2e 34 34 37 37 20 39 2e 35 20 32 38 20 39 2e 35 43 32 38 2e 35 35 32 33 20 39 2e 35 20 32 39 20 39 2e 30 35 32 32 38 20 32 39 20 38 2e 35 56 35 56 34 48 32 38 48 32 34 5a 4d 32 35 20 31 34 43 32 35 20 31 33 2e 34 34 37 37 20 32 35 2e 34 34 37 37 20 31 33 20 32 36 20 31 33 43 32 36 2e 35 35 32 33 20 31 33 20 32 37 20 31 33 2e 34 34 37 37 20 32 37 20 31 34 56 32 37 43 32 37 20 32 37 2e 35 35 32 33 20 32 36 2e 35 35 Data Ascii: 58 18.0976 4.70711 17.7071L10.5 11.9142L15.2929 16.7071L15.9699 17.3841L16.6757 16.7372L27 7.27323V8.5C27 9.05228 27.4477 9.5 28 9.5C28.5523 9.5 29 9.05228 29 8.5V5V4H28H24ZM25 14C25 13.4477 25.4477 13 26 13C26.5523 13 27 13.4477 27 14V27C27 27.5523 26.55
2024-04-23 14:05:46 UTC	12993	IN	Data Raw: 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 72 29 3e 3d 30 7c 7c 28 6c 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6c 7d 28 65 2c 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 66 6f 72 28 6e 3d 30 3b 6e 3c 69 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 72 3d 69 5b 6e 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 72 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2e 63 61 6c 6c 28 65 2c 72 29 26 26 28 6c 5b 72 5d 3d 65 5b 72 5d 29 7d 72 65 74 75 72 6e 20 6c 7d 76 61 72 20 6a 72 2c 5a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: ],t.indexOf(r)>=0\|\|(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var jr,Zr=function(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49848	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:45 UTC	599	OUT	GET /static/js/127.d438896d.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:46 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23029 Connection: close Date: Tue, 23 Apr 2024 14:05:47 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "9924bbe6f9ce50e228c3bdedd0481d83" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3b990103ab5b615e2cee71bdfd65a4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ie1fYQJLYaGg2ViF8hDpeUoinSNP_2O-ZcP2SqemfNlJRzmRcXDjUg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:46 UTC	8447	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 32 37 5d 2c 7b 36 30 36 33 37 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 65 2c 74 29 7b 74 28 39 33 32 36 34 29 3b 76 61 72 20 72 3d 74 28 39 38 38 35 30 29 2c 6e 3d 74 28 33 31 38 30 33 29 2c 61 3d 74 28 37 31 30 31 29 2c 6c 3d 74 2e 6e 28 61 29 2c 69 3d 74 28 38 30 31 38 34 29 2c 6f 3d 28 30 2c 6e 2e 5a 29 28 28 66 75 6e 63 74 69 6f 6e 28 43 29 7b 72 65 74 75 72 6e 7b 62 61 64 67 65 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 72 67 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[127],{60637:function(C,e,t){t(93264);var r=t(98850),n=t(31803),a=t(7101),l=t.n(a),i=t(80184),o=(0,n.Z)((function(C){return{badge:{backgroundColor:"rg
2024-04-23 14:05:46 UTC	14582	IN	Data Raw: 35 56 33 32 31 48 33 35 33 2e 38 37 37 4c 33 35 33 2e 32 34 38 20 33 31 34 2e 38 37 35 5a 4d 33 33 33 2e 39 39 38 20 33 30 36 2e 35 33 35 56 33 30 35 2e 39 36 31 43 33 33 33 2e 39 39 38 20 33 30 33 2e 37 31 39 20 33 33 34 2e 32 36 33 20 33 30 31 2e 36 37 37 20 33 33 34 2e 37 39 31 20 32 39 39 2e 38 33 36 43 33 33 35 2e 33 32 20 32 39 37 2e 39 37 37 20 33 33 36 2e 30 38 35 20 32 39 36 2e 33 38 32 20 33 33 37 2e 30 38 38 20 32 39 35 2e 30 35 31 43 33 33 38 2e 30 39 31 20 32 39 33 2e 37 30 32 20 33 33 39 2e 33 31 32 20 32 39 32 2e 36 37 32 20 33 34 30 2e 37 35 32 20 32 39 31 2e 39 36 31 43 33 34 32 2e 31 39 32 20 32 39 31 2e 32 33 32 20 33 34 33 2e 38 31 35 20 32 39 30 2e 38 36 37 20 33 34 35 2e 36 31 39 20 32 39 30 2e 38 36 37 43 33 34 37 2e 34 30 36 20 32 Data Ascii: 5V321H353.877L353.248 314.875ZM333.998 306.535V305.961C333.998 303.719 334.263 301.677 334.791 299.836C335.32 297.977 336.085 296.382 337.088 295.051C338.091 293.702 339.312 292.672 340.752 291.961C342.192 291.232 343.815 290.867 345.619 290.867C347.406 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49849	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:45 UTC	600	OUT	GET /static/js/4799.24810307.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:46 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5788 Connection: close Date: Tue, 23 Apr 2024 14:05:47 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "5fe5c83090d8dfb65818730a903f9073" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5f06e2c87fa9fb6c547f5739f3753dda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2-UZlH5qIt2aPCfP5cCPULfd6Jy0jUmfKmP8O-ZQ4aVi_w38G4-YgA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:46 UTC	5788	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 39 39 5d 2c 7b 34 34 37 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 61 3d 5b 5d 2c 69 3d 7b 7d 2c 73 3d 7b 7d 2c 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 65 2b 22 24 22 2c 22 69 22 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 61 29 7b 72 65 74 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4799],{44799:function(e){e.exports=function(){var e=[],a=[],i={},s={},r={};function o(e){return"string"===typeof e?new RegExp("^"+e+"$","i"):e}function t(e,a){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49850	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:45 UTC	600	OUT	GET /static/js/9687.f2dfe077.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:47 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 14767 Connection: close Date: Tue, 23 Apr 2024 14:05:47 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "a293956f226f716cbc9c2327477dccd2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 58e8a18b90f1ecf86195a304167ce9ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: blZITrOLqMsyubgtsHwN6GYv3n66q1P0Jd8RIwMpcDLZpyTNCwrElg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:47 UTC	14767	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 38 37 5d 2c 7b 34 39 36 38 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 45 64 69 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 7d 29 3b 76 61 72 20 6f 3d 74 28 39 33 32 36 34 29 2c 72 3d 74 28 35 32 30 30 37 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[9687],{49687:function(n,e,t){"use strict";t.r(e),t.d(e,{Editor:function(){return S}});var o=t(93264),r=t(52007),i=function(){return i=Object.assign\|\|function(n){f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49851	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:46 UTC	600	OUT	GET /static/js/1249.fdabb546.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:47 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 217246 Connection: close Date: Tue, 23 Apr 2024 14:05:48 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "b9d67fd2f586335ea09662a29b430cef" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5f06e2c87fa9fb6c547f5739f3753dda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ckDmAz-gbAM4sEEhZHx2lEup8DKkigDTYWf4soysexhqNUpX-PvaoQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:47 UTC	1494	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 32 34 39 5d 2c 7b 37 38 36 35 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 72 2c 6f 2c 61 3d 74 28 39 33 32 36 34 29 2c 69 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1249],{78656:function(e,n,t){t.d(n,{r:function(){return u}});var r,o,a=t(93264),i=["title","titleId"];function s(){return s=Object.assign?Object.assi
2024-04-23 14:05:47 UTC	16384	IN	Data Raw: 20 31 32 2e 37 35 20 31 32 43 31 33 2e 35 37 38 34 20 31 32 20 31 34 2e 32 35 20 31 32 2e 36 37 31 36 20 31 34 2e 32 35 20 31 33 2e 35 5a 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 29 29 2c 6f 7c 7c 28 6f 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 31 2e 32 35 20 36 56 38 2e 32 35 48 39 2e 37 35 56 36 48 37 2e 35 56 34 2e 35 48 39 2e 37 35 56 32 2e 32 35 48 31 31 2e 32 35 56 34 2e 35 48 31 33 2e 35 56 36 48 31 31 2e 32 35 5a 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 29 29 29 7d 2c 75 3d 28 30 2c 61 2e 66 6f 72 77 61 72 64 52 65 66 29 28 6c 29 3b 74 2e 70 7d 2c 32 35 30 37 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 72 3a 66 75 6e 63 Data Ascii: 12.75 12C13.5784 12 14.25 12.6716 14.25 13.5Z",fill:"currentColor"})),o\|\|(o=a.createElement("path",{d:"M11.25 6V8.25H9.75V6H7.5V4.5H9.75V2.25H11.25V4.5H13.5V6H11.25Z",fill:"currentColor"})))},u=(0,a.forwardRef)(l);t.p},25077:function(e,n,t){t.d(n,{r:func
2024-04-23 14:05:47 UTC	9973	IN	Data Raw: 7d 29 5d 7d 29 7d 29 29 2c 57 65 3d 74 28 33 38 34 37 35 29 2c 47 65 3d 74 28 33 34 35 35 31 29 2c 71 65 3d 74 28 35 36 39 33 34 29 2c 24 65 3d 5b 22 53 68 61 72 65 52 6f 6f 6d 44 69 61 6c 6f 67 50 72 6f 70 73 22 5d 3b 76 61 72 20 51 65 2c 4a 65 2c 4b 65 2c 59 65 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 53 68 61 72 65 52 6f 6f 6d 44 69 61 6c 6f 67 50 72 6f 70 73 2c 72 3d 28 30 2c 68 2e 5a 29 28 6e 2c 24 65 29 2c 6f 3d 28 30 2c 6d 2e 75 73 65 53 74 61 74 65 29 28 21 31 29 2c 61 3d 28 30 2c 76 2e 5a 29 28 6f 2c 32 29 2c 69 3d 61 5b 30 5d 2c 73 3d 61 5b 31 5d 2c 63 3d 28 30 2c 6d 2e 75 73 65 53 74 61 74 65 29 28 29 2c 6c 3d 28 30 2c 76 2e 5a 29 28 63 2c 32 29 2c 64 3d 6c Data Ascii: })]})})),We=t(38475),Ge=t(34551),qe=t(56934),$e=["ShareRoomDialogProps"];var Qe,Je,Ke,Ye,Xe=function(e){return function(n){var t=n.ShareRoomDialogProps,r=(0,h.Z)(n,$e),o=(0,m.useState)(!1),a=(0,v.Z)(o,2),i=a[0],s=a[1],c=(0,m.useState)(),l=(0,v.Z)(c,2),d=l
2024-04-23 14:05:47 UTC	6411	IN	Data Raw: 47 2e 78 48 29 28 65 29 7d 29 29 2c 74 3d 65 2e 74 61 72 67 65 74 2e 63 68 65 63 6b 65 64 3f 44 2e 63 45 2e 43 6f 6d 70 6c 65 74 65 64 3a 44 2e 63 45 2e 50 65 6e 64 69 6e 67 3b 69 66 28 21 6e 2e 6c 65 6e 67 74 68 7c 7c 74 3d 3d 3d 44 2e 63 45 2e 50 65 6e 64 69 6e 67 29 72 65 74 75 72 6e 20 4b 28 74 29 2c 76 6f 69 64 20 59 65 28 21 31 29 3b 6f 6e 28 21 30 29 7d 3b 61 6e 2e 63 68 65 63 6b 28 22 6e 61 6d 65 22 2c 6c 65 2c 22 72 65 71 75 69 72 65 64 7c 6d 61 78 3a 32 35 30 22 29 3b 76 61 72 20 6d 6e 3d 61 6e 2e 67 65 74 45 72 72 6f 72 28 22 6e 61 6d 65 22 2c 56 65 29 2c 78 6e 3d 4a 3d 3d 3d 44 2e 63 45 2e 43 6f 6d 70 6c 65 74 65 64 2c 67 6e 3d 28 30 2c 49 2e 6a 73 78 73 29 28 49 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 49 2e 6a Data Ascii: G.xH)(e)})),t=e.target.checked?D.cE.Completed:D.cE.Pending;if(!n.length\|\|t===D.cE.Pending)return K(t),void Ye(!1);on(!0)};an.check("name",le,"required\|max:250");var mn=an.getError("name",Ve),xn=J===D.cE.Completed,gn=(0,I.jsxs)(I.Fragment,{children:[(0,I.j
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 66 2e 5a 29 28 28 30 2c 70 2e 5a 29 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 30 2c 70 2e 5a 29 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 69 66 28 74 3d 21 31 2c 21 4f 29 7b 65 2e 6e 65 78 74 3d 35 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 34 2c 4f 28 6e 2c 4a 29 3b 63 61 73 65 20 34 3a 74 3d 65 2e 73 65 6e 74 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 74 26 26 42 28 22 22 29 2c 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 21 30 29 3b 63 61 73 65 20 37 3a 63 61 73 65 22 65 6e 64 Data Ascii: nction(){var e=(0,f.Z)((0,p.Z)().mark((function e(n){var t;return(0,p.Z)().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:if(t=!1,!O){e.next=5;break}return e.next=4,O(n,J);case 4:t=e.sent;case 5:return t&&B(""),e.abrupt("return",!0);case 7:case"end
2024-04-23 14:05:48 UTC	1024	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 76 61 72 20 74 2c 72 2c 6f 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 28 30 2c 70 2e 5a 29 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 61 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 5b 31 5d 3f 61 5b 31 5d 3a 54 6e 2e 67 42 2c 65 2e 6e 65 78 74 3d 33 2c 74 68 69 73 2e 71 75 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 6f 6c 6c 6f 53 65 72 76 69 63 65 2e 65 78 65 63 75 74 65 51 75 65 72 79 28 7b 71 75 65 72 79 3a 63 65 28 29 28 59 65 7c 7c 28 59 65 3d 28 30 2c 74 65 2e 5a 29 28 5b Data Ascii: function e(n){var t,r,o=this,a=arguments;return(0,p.Z)().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:return t=a.length>1&&void 0!==a[1]?a[1]:Tn.gB,e.next=3,this.query((function(){return o.apolloService.executeQuery({query:ce()(Ye\|\|(Ye=(0,te.Z)([
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 29 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 66 2e 5a 29 28 28 30 2c 70 2e 5a 29 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 30 2c 70 2e 5a 29 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 32 2c 6e 65 77 20 77 6e 28 6c 29 2e 67 65 74 28 7b 69 64 3a 6e 7d 2c 54 6e 2e 56 69 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 74 3d 65 2e 73 65 6e 74 2c 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 74 2e 63 6f 6c 6c 61 62 6f 72 61 74 6f 72 73 7c 7c 5b 5d 29 3b 63 61 73 65 20 34 3a 63 61 73 65 22 65 6e 64 Data Ascii: ),C=function(){var e=(0,f.Z)((0,p.Z)().mark((function e(){var t;return(0,p.Z)().wrap((function(e){for(;;)switch(e.prev=e.next){case 0:return e.next=2,new wn(l).get({id:n},Tn.Vi);case 2:return t=e.sent,e.abrupt("return",t.collaborators\|\|[]);case 4:case"end
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 28 64 65 2c 6b 2c 22 6d 61 78 3a 34 39 35 22 29 3b 76 61 72 20 70 65 3d 69 65 2e 67 65 74 45 72 72 6f 72 28 75 65 2c 6f 65 29 2c 66 65 3d 69 65 2e 67 65 74 45 72 72 6f 72 28 64 65 2c 6f 65 29 3b 72 65 74 75 72 6e 28 30 2c 49 2e 6a 73 78 73 29 28 22 66 6f 72 6d 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 72 2e 63 6f 6e 74 61 69 6e 65 72 2c 6f 6e 53 75 62 6d 69 74 3a 6c 65 2c 6e 6f 56 61 6c 69 64 61 74 65 3a 21 30 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 49 2e 6a 73 78 73 29 28 67 2e 42 6f 78 2c 7b 66 6c 65 78 3a 22 31 22 2c 6d 74 3a 34 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 49 2e 6a 73 78 29 28 67 2e 54 65 78 74 46 69 65 6c 64 2c 7b 61 75 74 6f 46 6f 63 75 73 3a 21 61 2c 63 6f 6c 6f 72 3a 22 73 65 63 6f 6e 64 61 72 79 22 2c 64 69 73 61 62 6c 65 64 3a 59 2c Data Ascii: (de,k,"max:495");var pe=ie.getError(ue,oe),fe=ie.getError(de,oe);return(0,I.jsxs)("form",{className:r.container,onSubmit:le,noValidate:!0,children:[(0,I.jsxs)(g.Box,{flex:"1",mt:4,children:[(0,I.jsx)(g.TextField,{autoFocus:!a,color:"secondary",disabled:Y,
2024-04-23 14:05:48 UTC	2048	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 44 69 73 63 75 73 73 69 6f 6e 3d 22 64 69 73 63 75 73 73 69 6f 6e 22 2c 65 2e 48 69 73 74 6f 72 79 3d 22 68 69 73 74 6f 72 79 22 2c 65 2e 53 75 62 74 61 73 6b 73 3d 22 73 75 62 74 61 73 6b 73 22 2c 65 7d 28 7b 7d 29 2c 75 74 3d 28 30 2c 6b 2e 5a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 74 61 62 52 6f 6f 74 3a 7b 6d 69 6e 57 69 64 74 68 3a 22 69 6e 69 74 69 61 6c 22 2c 70 61 64 64 69 6e 67 3a 65 2e 73 70 61 63 69 6e 67 28 2e 37 35 2c 31 2e 35 2c 32 29 2c 74 65 78 74 54 72 61 6e 73 66 6f 72 6d 3a 22 6e 6f 6e 65 22 7d 7d 7d 29 29 2c 64 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3d 28 30 2c 48 2e 51 54 29 28 29 2e 74 2c 72 3d 75 74 28 29 2c 6f 3d 65 2e 61 63 74 69 6f 6e 50 Data Ascii: n(e){return e.Discussion="discussion",e.History="history",e.Subtasks="subtasks",e}({}),ut=(0,k.Z)((function(e){return{tabRoot:{minWidth:"initial",padding:e.spacing(.75,1.5,2),textTransform:"none"}}})),dt=function(e){var n,t=(0,H.QT)().t,r=ut(),o=e.actionP
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 72 63 3a 5a 2e 72 65 71 75 65 73 74 65 72 2e 70 68 6f 74 6f 2c 73 78 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 76 61 72 28 2d 2d 61 76 61 74 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6c 69 67 68 74 29 22 2c 62 6f 72 64 65 72 3a 22 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 22 2c 63 6f 6c 6f 72 3a 22 74 65 78 74 2e 73 65 63 6f 6e 64 61 72 79 22 2c 68 65 69 67 68 74 3a 65 2e 73 70 61 63 69 6e 67 28 34 29 2c 77 69 64 74 68 3a 65 2e 73 70 61 63 69 6e 67 28 34 29 2c 74 79 70 6f 67 72 61 70 68 79 3a 22 62 6f 64 79 32 22 7d 7d 2c 63 68 69 6c 64 72 65 6e 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 6f 55 70 70 65 72 43 61 73 Data Ascii: rc:Z.requester.photo,sx:function(e){return{backgroundColor:"var(--avatar-background-light)",border:"2px solid #fff",color:"text.secondary",height:e.spacing(4),width:e.spacing(4),typography:"body2"}},children:null===(e=n[0])\|\|void 0===e?void 0:e.toUpperCas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49852	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:46 UTC	600	OUT	GET /static/js/4217.46f06040.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:48 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 34832 Connection: close Date: Tue, 23 Apr 2024 14:05:48 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "c18dae37630dadef4dbdbde0bdb0fcc6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 346b33648172c0201e749f9caeed0d02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: v6Zo5dEIloquiGfMpJZ21urkaf89j295gqZuSurwKzZBE7mcpf5HFA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 31 37 5d 2c 7b 31 31 30 39 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 76 61 72 20 72 3d 6f 28 37 34 31 36 35 29 2c 69 3d 6f 28 31 35 38 36 31 29 2c 74 3d 6f 28 32 39 34 33 39 29 2c 61 3d 6f 28 39 33 32 36 34 29 2c 6c 3d 6f 28 39 38 38 35 30 29 2c 73 3d 6f 28 33 31 38 30 33 29 2c 63 3d 6f 28 38 36 37 31 31 29 2c 64 3d 6f 28 34 30 36 30 30 29 2c 75 3d 6f 28 37 32 32 33 31 29 2c 70 3d 6f 28 33 30 36 32 39 29 2c 6d 3d 6f 28 39 37 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4217],{11097:function(e,n,o){var r=o(74165),i=o(15861),t=o(29439),a=o(93264),l=o(98850),s=o(31803),c=o(86711),d=o(40600),u=o(72231),p=o(30629),m=o(97
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 7b 73 74 61 72 74 49 63 6f 6e 3a 28 30 2c 6c 2e 6a 73 78 29 28 69 2e 5a 2c 7b 66 6f 6e 74 53 69 7a 65 3a 22 73 6d 61 6c 6c 22 7d 29 2c 73 74 79 6c 65 73 3a 7b 74 65 78 74 54 72 61 6e 73 66 6f 72 6d 3a 22 6e 6f 6e 65 22 7d 2c 63 68 69 6c 64 72 65 6e 3a 6e 28 22 73 63 68 65 64 75 6c 65 2e 62 75 74 74 6f 6e 22 29 7d 29 29 7d 7d 2c 33 31 37 37 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 6f 28 39 33 32 36 34 29 3b 76 61 72 20 72 3d 6f 28 39 38 38 35 30 29 2c 69 3d 6f 28 38 36 33 30 32 29 2c 74 3d 6f 28 38 30 31 38 34 29 3b 6e 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 28 30 2c 69 2e 70 29 28 29 2c 6f 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 61 3d 65 2e 69 6d 61 67 65 3b 72 65 74 75 72 6e 28 30 2c 74 2e 6a 73 78 29 28 72 2e 42 6f 78 Data Ascii: {startIcon:(0,l.jsx)(i.Z,{fontSize:"small"}),styles:{textTransform:"none"},children:n("schedule.button")}))}},31772:function(e,n,o){o(93264);var r=o(98850),i=o(86302),t=o(80184);n.Z=function(e){var n=(0,i.p)(),o=e.className,a=e.image;return(0,t.jsx)(r.Box
2024-04-23 14:05:48 UTC	2064	IN	Data Raw: 61 79 56 69 73 69 62 69 6c 69 74 79 54 65 78 74 2c 73 3d 76 6f 69 64 20 30 21 3d 3d 6c 26 26 6c 2c 63 3d 65 2e 65 6e 61 62 6c 65 64 2c 64 3d 65 2e 6f 6e 43 68 61 6e 67 65 2c 75 3d 65 2e 73 65 63 74 69 6f 6e 2c 70 3d 65 2e 73 6d 61 6c 6c 2c 6d 3d 76 6f 69 64 20 30 21 3d 3d 70 26 26 70 2c 68 3d 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 2c 66 3d 76 6f 69 64 20 30 21 3d 3d 68 26 26 68 2c 78 3d 65 2e 64 69 73 61 62 6c 65 50 6f 72 74 61 6c 2c 76 3d 76 6f 69 64 20 30 21 3d 3d 78 26 26 78 2c 67 3d 63 3f 22 73 68 6f 77 6e 20 69 6e 20 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2e 20 43 6c 69 63 6b 20 74 6f 20 68 69 64 65 2e 22 29 3a 22 68 69 64 64 65 6e 20 69 6e 20 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2e 20 43 6c 69 63 6b 20 74 6f 20 73 68 6f 77 2e 22 29 2c 62 3d Data Ascii: ayVisibilityText,s=void 0!==l&&l,c=e.enabled,d=e.onChange,u=e.section,p=e.small,m=void 0!==p&&p,h=e.stopPropagation,f=void 0!==h&&h,x=e.disablePortal,v=void 0!==x&&x,g=c?"shown in ".concat(o,". Click to hide."):"hidden in ".concat(o,". Click to show."),b=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49853	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:46 UTC	600	OUT	GET /static/js/7838.1bcca07f.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:48 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 115408 Connection: close Date: Tue, 23 Apr 2024 14:05:48 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "f243a62705fd4d77d35cdbfb07938879" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08829bb06bccf0ab66e6bd5eaa5fcbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Mpfyl3dRHV2Ut_FfiwCBer0DThQ5Wy98wmP0dXAwvXvv6mGWUxVPxg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:48 UTC	7639	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 33 38 5d 2c 7b 39 30 30 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 76 61 72 20 72 2c 6f 3d 74 28 39 33 32 36 34 29 2c 69 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[7838],{90048:function(e,n,t){t.d(n,{r:function(){return l}});var r,o=t(93264),i=["title","titleId"];function a(){return a=Object.assign?Object.assign
2024-04-23 14:05:48 UTC	6396	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 55 28 68 29 2c 62 28 21 30 29 7d 3b 72 65 74 75 72 6e 28 30 2c 4f 2e 6a 73 78 73 29 28 4f 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 4f 2e 6a 73 78 29 28 44 2e 5a 2c 7b 64 69 73 61 62 6c 65 42 72 65 61 6b 50 6f 69 6e 74 3a 75 2c 64 69 73 61 62 6c 65 64 3a 6e 2c 66 75 6c 6c 57 69 64 74 68 3a 75 2c 69 73 51 75 69 63 6b 41 63 63 65 73 73 49 63 6f 6e 3a 72 2c 6d 65 73 73 61 67 65 73 43 6f 75 6e 74 3a 77 2c 6f 6e 43 6c 69 63 6b 3a 57 2c 76 61 72 69 61 6e 74 3a 75 3f 22 6f 75 74 6c 69 6e 65 64 22 3a 76 6f 69 64 20 30 7d 29 3b 72 65 74 75 72 6e 20 77 3f 65 3a 28 30 2c 4f 2e 6a 73 78 29 28 50 2e 5a 2c 7b 71 75 65 72 79 50 61 72 61 6d 73 3a 28 30 2c 69 2e 5a 29 Data Ascii: ction(){U(h),b(!0)};return(0,O.jsxs)(O.Fragment,{children:[function(){var e=(0,O.jsx)(D.Z,{disableBreakPoint:u,disabled:n,fullWidth:u,isQuickAccessIcon:r,messagesCount:w,onClick:W,variant:u?"outlined":void 0});return w?e:(0,O.jsx)(P.Z,{queryParams:(0,i.Z)
2024-04-23 14:05:48 UTC	11012	IN	Data Raw: 74 72 61 63 6b 49 6e 74 65 72 61 63 74 69 6f 6e 28 69 6e 70 75 74 3a 20 24 69 6e 70 75 74 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 73 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 22 5d 29 29 29 2c 76 61 72 69 61 62 6c 65 73 3a 7b 69 6e 70 75 74 3a 6e 7d 7d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6f 3d 65 2e 73 65 6e 74 2c 69 3d 6f 2e 64 61 74 61 2e 74 72 61 63 6b 49 6e 74 65 72 61 63 74 69 6f 6e 2c 61 3d 69 2e 65 72 72 6f 72 73 2c 73 3d 69 2e 6d 65 73 73 61 67 65 2c 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 7b 64 61 74 61 3a 6e 75 6c 6c 2c 73 65 72 76 65 72 45 72 72 6f 72 73 3a 61 2c 73 65 72 76 65 72 4d 65 73 73 61 67 65 3a 73 7d 29 3b Data Ascii: trackInteraction(input: $input) {\n errors\n }\n }\n "]))),variables:{input:n}});case 2:return o=e.sent,i=o.data.trackInteraction,a=i.errors,s=i.message,e.abrupt("return",{data:null,serverErrors:a,serverMessage:s});
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 74 69 6f 6e 44 65 6c 61 79 3a 22 22 2e 63 6f 6e 63 61 74 28 4a 65 2c 22 6d 73 22 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 4f 2e 6a 73 78 29 28 6c 2e 42 6f 78 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 2e 72 65 6d 6f 76 65 41 63 74 69 6f 6e 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 4f 2e 6a 73 78 29 28 58 65 2e 5a 2c 7b 6f 6e 43 6c 69 63 6b 3a 4c 7d 29 7d 29 7d 29 5d 7d 29 7d 29 7d 29 7d 7d 7d 3b 69 66 28 21 76 29 72 65 74 75 72 6e 28 30 2c 4f 2e 6a 73 78 29 28 4f 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 75 7d 29 3b 76 61 72 20 55 3d 28 6b 7c 7c 53 29 26 26 21 50 2c 57 3d 53 26 26 21 50 2c 48 3d 7b 63 6c 61 73 73 65 73 3a 7b 61 75 64 69 6f 3a 70 28 29 28 28 6e 3d 7b 7d 2c 28 30 2c 69 2e 5a 29 28 6e 2c 74 2e 77 65 6c 63 6f 6d 65 4d 65 73 73 Data Ascii: tionDelay:"".concat(Je,"ms")},children:(0,O.jsx)(l.Box,{className:t.removeAction,children:(0,O.jsx)(Xe.Z,{onClick:L})})})]})})})}}};if(!v)return(0,O.jsx)(O.Fragment,{children:u});var U=(k\|\|S)&&!P,W=S&&!P,H={classes:{audio:p()((n={},(0,i.Z)(n,t.welcomeMess
2024-04-23 14:05:48 UTC	1024	IN	Data Raw: 29 2c 73 3d 74 28 34 35 39 38 37 29 2c 63 3d 74 28 39 33 32 36 34 29 2c 6c 3d 74 2e 6e 28 63 29 2c 64 3d 74 28 32 30 32 39 36 29 2c 75 3d 74 28 35 39 30 30 35 29 2c 70 3d 74 28 32 38 38 39 36 29 2c 68 3d 74 28 36 30 36 37 37 29 2c 76 3d 74 28 35 32 33 32 32 29 2c 66 3d 74 28 37 37 39 37 36 29 2c 6d 3d 74 28 38 30 31 38 34 29 2c 78 3d 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 63 6f 6e 74 61 63 74 22 2c 22 64 65 61 6c 22 2c 22 64 65 65 70 4c 69 6e 6b 41 63 74 69 6f 6e 50 6c 61 6e 49 64 22 2c 22 64 65 65 70 4c 69 6e 6b 41 63 74 69 6f 6e 50 6c 61 6e 54 61 73 6b 49 64 22 2c 22 64 65 65 70 4c 69 6e 6b 41 63 74 69 6f 6e 50 6c 61 6e 54 61 73 6b 4d 65 73 73 61 67 65 49 64 22 2c 22 69 73 47 75 65 73 74 56 69 73 69 74 6f 72 22 2c 22 72 65 66 65 72 72 65 72 22 2c 22 72 Data Ascii: ),s=t(45987),c=t(93264),l=t.n(c),d=t(20296),u=t(59005),p=t(28896),h=t(60677),v=t(52322),f=t(77976),m=t(80184),x=["children","contact","deal","deepLinkActionPlanId","deepLinkActionPlanTaskId","deepLinkActionPlanTaskMessageId","isGuestVisitor","referrer","r
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 6f 69 64 20 30 3a 6e 2e 76 69 73 69 62 69 6c 69 74 79 7d 29 7d 29 2c 5b 5d 29 3b 76 61 72 20 51 3d 28 30 2c 63 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 2e 52 39 2e 67 65 74 43 75 72 72 65 6e 74 28 29 26 26 66 2e 5a 2e 74 72 61 63 6b 28 75 2e 7a 57 2e 4d 41 50 5f 44 52 41 57 45 52 5f 4f 50 45 4e 45 44 2c 28 30 2c 69 2e 5a 29 28 7b 7d 2c 75 2e 45 2e 45 4e 54 45 52 45 44 5f 46 52 4f 4d 2c 42 29 29 7d 29 2c 5b 42 5d 29 2c 24 3d 28 30 2c 63 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 55 28 22 22 29 2c 7a 28 22 22 29 7d 29 2c 5b 5d 29 2c 59 3d 28 30 2c 63 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 50 28 28 66 75 6e 63 74 69 Data Ascii: oid 0:n.visibility})}),[]);var Q=(0,c.useCallback)((function(){v.R9.getCurrent()&&f.Z.track(u.zW.MAP_DRAWER_OPENED,(0,i.Z)({},u.E.ENTERED_FROM,B))}),[B]),$=(0,c.useCallback)((function(){U(""),z("")}),[]),Y=(0,c.useCallback)((function(e,n){return P((functi
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 29 2c 28 30 2c 42 2e 6a 73 78 29 28 73 2e 42 6f 78 2c 7b 6d 74 3a 62 7c 7c 66 3f 34 3a 32 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 42 2e 6a 73 78 29 28 79 2e 53 69 7a 65 4d 65 2c 7b 72 65 66 72 65 73 68 4d 6f 64 65 3a 22 64 65 62 6f 75 6e 63 65 22 2c 63 68 69 6c 64 72 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 42 2e 6a 73 78 29 28 49 2e 5a 2c 28 30 2c 5a 2e 5a 29 28 7b 61 75 74 6f 50 6c 61 79 3a 21 30 2c 63 6f 6e 74 65 6e 74 3a 50 2c 63 6f 6e 74 65 6e 74 44 65 73 63 72 69 70 74 69 6f 6e 3a 76 2c 63 6f 6e 74 65 6e 74 49 64 3a 74 2e 69 64 2c 63 6f 6e 74 65 6e 74 4e 61 6d 65 3a 67 2c 63 6f 6e 74 65 6e 74 55 72 6c 3a 44 2c 63 6f 6e 74 65 78 74 50 72 6f 70 73 3a 69 2c 64 61 72 6b 54 68 65 6d 65 3a 21 30 2c 64 69 73 61 62 6c 65 49 6d Data Ascii: ),(0,B.jsx)(s.Box,{mt:b\|\|f?4:2,children:(0,B.jsx)(y.SizeMe,{refreshMode:"debounce",children:function(e){return(0,B.jsx)(I.Z,(0,Z.Z)({autoPlay:!0,content:P,contentDescription:v,contentId:t.id,contentName:g,contentUrl:D,contextProps:i,darkTheme:!0,disableIm
2024-04-23 14:05:48 UTC	10997	IN	Data Raw: 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 75 6c 6c 3d 3d 3d 79 7c 7c 76 6f 69 64 20 30 3d 3d 3d 79 3f 76 6f 69 64 20 30 3a 79 2e 75 72 6c 2c 63 6f 76 65 72 3a 6c 65 2c 64 61 72 6b 54 68 65 6d 65 3a 54 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 77 2c 69 66 72 61 6d 65 3a 54 65 2c 6e 61 6d 65 3a 6b 7c 7c 22 22 2c 6f 6e 56 69 65 77 3a 68 65 2c 6f 70 65 6e 47 72 61 70 68 3a 42 65 2c 75 72 6c 3a 50 65 7d 2c 6e 65 29 2c 4b 29 29 7d 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 5a 2e 56 49 44 45 4f 3a 69 66 28 6a 2e 76 69 64 65 6f 29 7b 76 61 72 20 44 65 3d 6a 2e 76 69 64 65 6f 2c 4d 65 3d 44 65 2e 63 61 70 74 69 6f 6e 73 2c 4e 65 3d 44 65 2e 64 6f 77 6e 6c 6f 61 64 61 62 6c 65 2c 4f 65 3d 44 65 2e 64 6f 77 6e 6c 6f 61 64 55 72 6c 2c 52 65 3d 44 65 2e 75 72 6c 2c 4c 65 3d 56 7c Data Ascii: ,className:null===y\|\|void 0===y?void 0:y.url,cover:le,darkTheme:T,description:w,iframe:Te,name:k\|\|"",onView:he,openGraph:Be,url:Pe},ne),K))}break;case m.Z.VIDEO:if(j.video){var De=j.video,Me=De.captions,Ne=De.downloadable,Oe=De.downloadUrl,Re=De.url,Le=V\|
2024-04-23 14:05:48 UTC	8459	IN	Data Raw: 78 47 72 6f 77 3a 31 2c 70 6c 3a 74 3f 30 3a 32 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 75 2e 6a 73 78 29 28 69 2e 54 79 70 6f 67 72 61 70 68 79 2c 7b 63 6f 6c 6f 72 3a 22 74 65 78 74 50 72 69 6d 61 72 79 22 2c 74 69 74 6c 65 3a 63 2c 76 61 72 69 61 6e 74 3a 76 2c 63 68 69 6c 64 72 65 6e 3a 63 7d 29 7d 29 5d 7d 29 7d 7d 2c 36 34 35 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 74 28 39 33 34 33 33 29 2c 6f 3d 74 28 31 34 31 33 29 2c 69 3d 74 28 32 34 38 36 37 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 7b 69 64 3a 61 72 67 75 6d 65 Data Ascii: xGrow:1,pl:t?0:2,children:(0,u.jsx)(i.Typography,{color:"textPrimary",title:c,variant:v,children:c})})]})}},64581:function(e,n,t){t.d(n,{C:function(){return s},m:function(){return a}});var r=t(93433),o=t(1413),i=t(24867),a=function(e,n,t){return{id:argume
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 3a 65 2e 73 70 61 63 69 6e 67 28 32 2e 32 35 29 7d 2c 64 65 6c 65 74 65 49 63 6f 6e 3a 7b 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 66 6f 6e 74 53 69 7a 65 3a 65 2e 73 70 61 63 69 6e 67 28 32 29 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 62 61 73 65 6c 69 6e 65 22 7d 2c 73 69 67 6e 61 62 6c 65 49 63 6f 6e 3a 7b 63 6f 6c 6f 72 3a 65 2e 70 61 6c 65 74 74 65 2e 73 65 63 6f 6e 64 61 72 79 2e 6d 61 69 6e 2c 68 65 69 67 68 74 3a 65 2e 73 70 61 63 69 6e 67 28 32 2e 35 29 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 74 6f 70 22 2c 77 69 64 74 68 3a 65 2e 73 70 61 63 69 6e 67 28 32 2e 35 29 7d 2c 73 69 67 6e 61 62 6c 65 49 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 7b 68 65 69 67 68 74 3a 65 2e 73 70 61 63 69 6e 67 28 32 2e 35 29 7d 7d 7d 29 29 2c 51 3d 66 75 Data Ascii: :e.spacing(2.25)},deleteIcon:{color:"white",fontSize:e.spacing(2),verticalAlign:"baseline"},signableIcon:{color:e.palette.secondary.main,height:e.spacing(2.5),verticalAlign:"top",width:e.spacing(2.5)},signableIconContainer:{height:e.spacing(2.5)}}})),Q=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49854	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:47 UTC	600	OUT	GET /static/js/4779.d2b3c15c.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:48 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 86650 Connection: close Date: Tue, 23 Apr 2024 14:05:49 GMT Last-Modified: Sat, 20 Apr 2024 01:29:07 GMT ETag: "ba6be4aa2cc494ac012590118299537c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 194873016b193fd05afa56c1dbe27330.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: r2guT5oLyTpaQBVKQ4ppMTp1TeG9gSq8W1r1oAvQcfTkJBZtoompXw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:48 UTC	1496	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 37 39 5d 2c 7b 35 33 38 39 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 65 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 72 2c 6f 3d 74 28 39 33 32 36 34 29 2c 69 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[4779],{53897:function(n,e,t){"use strict";t.d(e,{r:function(){return s}});var r,o=t(93264),i=["title","titleId"];function a(){return a=Object.assign?Object.assign
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 29 2c 69 3d 74 28 34 33 31 34 34 29 2c 61 3d 74 28 39 39 36 34 31 29 2c 75 3d 74 2e 6e 28 61 29 2c 63 3d 74 28 31 35 30 37 31 29 2c 73 3d 74 28 34 30 39 34 36 29 2c 6c 3d 74 28 33 30 30 37 35 29 2c 64 3d 74 28 36 35 35 35 29 2c 66 3d 74 28 36 30 36 37 37 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 63 2e 61 67 2e 6c 6f 63 61 6c 65 3b 28 30 2c 6f 2e 5a 29 28 74 68 Data Ascii: ),i=t(43144),a=t(99641),u=t.n(a),c=t(15071),s=t(40946),l=t(30075),d=t(6555),f=t(60677),v=function(){function n(e){var t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:c.ag.locale;(0,o.Z)(th
2024-04-23 14:05:48 UTC	16384	IN	Data Raw: 74 65 20 69 6e 74 65 67 72 61 74 69 6f 6e 22 7d 29 2c 28 30 2c 76 2e 6a 73 78 29 28 66 2e 44 69 61 6c 6f 67 43 6f 6e 74 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c 76 2e 6a 73 78 29 28 76 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c 76 2e 6a 73 78 29 28 66 2e 54 79 70 6f 67 72 61 70 68 79 2c 7b 70 61 72 61 67 72 61 70 68 3a 21 30 2c 76 61 72 69 61 6e 74 3a 22 62 6f 64 79 32 22 2c 63 68 69 6c 64 72 65 6e 3a 65 3f 65 20 69 6e 20 68 3f 68 5b 65 5d 3a 65 3a 22 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 6e 6f 74 20 63 6f 6d 70 6c 65 74 65 64 22 7d 29 7d 29 7d 29 2c 28 30 2c 76 2e 6a 73 78 29 28 66 2e 44 69 61 6c 6f 67 41 63 74 69 6f 6e 73 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c 76 2e 6a 73 78 29 28 66 2e 42 75 74 Data Ascii: te integration"}),(0,v.jsx)(f.DialogContent,{children:(0,v.jsx)(v.Fragment,{children:(0,v.jsx)(f.Typography,{paragraph:!0,variant:"body2",children:e?e in h?h[e]:e:"The connection was not completed"})})}),(0,v.jsx)(f.DialogActions,{children:(0,v.jsx)(f.But
2024-04-23 14:05:48 UTC	2048	IN	Data Raw: 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 4c 61 7a 79 3d 22 6c 61 7a 79 22 2c 6e 7d 28 7b 7d 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 41 70 70 72 6f 76 61 6c 50 75 62 6c 69 73 68 3d 22 61 70 70 72 6f 76 61 6c 22 2c 6e 2e 41 75 74 6f 50 75 62 6c 69 73 68 3d 22 61 75 74 6f 22 2c 6e 2e 4e 6f 74 53 79 6e 63 3d 22 6e 6f 5f 73 79 6e 63 22 2c 6e 7d 28 7b 7d 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 41 63 63 6f 75 6e 74 44 69 73 63 6f 6e 6e 65 63 74 65 64 3d 22 61 63 63 6f 75 6e 74 5f 64 69 73 63 6f 6e 6e 65 63 74 65 64 22 2c 6e 2e 41 70 70 72 6f 76 65 64 3d 22 61 70 70 72 6f 76 65 64 22 2c 6e 2e 41 75 74 6f 53 79 6e 63 65 64 3d 22 61 75 74 6f 5f 73 Data Ascii: });var r=function(n){return n.Lazy="lazy",n}({}),o=function(n){return n.ApprovalPublish="approval",n.AutoPublish="auto",n.NotSync="no_sync",n}({}),i=function(n){return n.AccountDisconnected="account_disconnected",n.Approved="approved",n.AutoSynced="auto_s
2024-04-23 14:05:49 UTC	16384	IN	Data Raw: 28 30 2c 69 2e 5a 29 28 28 30 2c 69 2e 5a 29 28 7b 7d 2c 6e 29 2c 7b 7d 2c 7b 61 75 64 69 6f 3a 72 7c 7c 6e 2e 61 75 64 69 6f 7d 29 3b 63 61 73 65 20 73 2e 5a 2e 44 4f 43 55 4d 45 4e 54 3a 76 61 72 20 6f 2c 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 6e 2e 64 6f 63 75 6d 65 6e 74 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 76 65 72 73 69 6f 6e 3d 3d 3d 65 7d 29 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 5a 29 28 28 30 2c 69 2e 5a 29 28 7b 7d 2c 6e 29 2c 7b 7d 2c 7b 64 6f 63 75 6d 65 6e 74 3a 61 7c 7c 6e 2e 64 6f 63 75 6d 65 6e 74 7d 29 3b 63 61 73 65 20 73 2e 5a 2e 56 49 44 45 4f 3a 76 61 72 20 75 2c 63 3d 6e 75 6c 6c 3d 3d 3d 28 75 3d 6e 2e 76 69 64 65 6f 73 Data Ascii: (0,i.Z)((0,i.Z)({},n),{},{audio:r\|\|n.audio});case s.Z.DOCUMENT:var o,a=null===(o=n.documents)\|\|void 0===o?void 0:o.find((function(n){return n.version===e}));return(0,i.Z)((0,i.Z)({},n),{},{document:a\|\|n.document});case s.Z.VIDEO:var u,c=null===(u=n.videos
2024-04-23 14:05:49 UTC	1024	IN	Data Raw: 3d 74 2e 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 54 65 78 74 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 22 43 61 6e 63 65 6c 22 3a 64 2c 76 3d 74 2e 63 6c 61 73 73 65 73 2c 70 3d 74 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 42 75 74 74 6f 6e 50 72 6f 70 73 2c 6d 3d 74 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 54 65 78 74 2c 68 3d 74 2e 63 6f 6e 74 65 6e 74 2c 67 3d 74 2e 63 6f 6e 74 65 6e 74 50 72 6f 70 73 2c 78 3d 74 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 79 3d 74 2e 64 69 73 61 62 6c 65 50 6f 72 74 61 6c 2c 5a 3d 76 6f 69 64 20 30 21 3d 3d 79 26 26 79 2c 45 3d 74 2e 68 69 64 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 42 75 74 74 6f 6e 2c 62 3d 76 6f 69 64 20 30 21 3d 3d 45 26 26 45 2c 53 3d 74 2e 6d 61 78 57 69 64 74 68 2c 43 3d 76 6f 69 64 20 30 3d 3d 3d 53 3f 22 78 Data Ascii: =t.cancellationText,f=void 0===d?"Cancel":d,v=t.classes,p=t.confirmationButtonProps,m=t.confirmationText,h=t.content,g=t.contentProps,x=t.description,y=t.disablePortal,Z=void 0!==y&&y,E=t.hideConfirmationButton,b=void 0!==E&&E,S=t.maxWidth,C=void 0===S?"x
2024-04-23 14:05:49 UTC	16384	IN	Data Raw: 61 72 20 6e 3d 28 30 2c 69 2e 51 54 29 28 29 2e 74 2c 65 3d 28 30 2c 6f 2e 4c 29 28 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 2e 6f 6e 45 78 69 74 2c 6f 3d 74 2e 6f 6e 43 61 6e 63 65 6c 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 6f 3b 72 65 74 75 72 6e 20 65 28 7b 61 6c 6c 6f 77 43 6c 6f 73 65 3a 21 31 2c 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 54 65 78 74 3a 6e 28 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 64 69 61 6c 6f 67 2e 63 61 6e 63 65 6c 22 29 2c 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 54 65 78 74 3a 6e 28 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 64 69 61 6c 6f 67 2e 65 78 69 74 5f 77 69 74 68 6f 75 74 5f 73 61 76 69 6e 67 Data Ascii: ar n=(0,i.QT)().t,e=(0,o.L)();return(0,r.useCallback)((function(t){var r=t.onExit,o=t.onCancel,i=void 0===o?function(){}:o;return e({allowClose:!1,cancellationText:n("confirmation_dialog.cancel"),confirmationText:n("confirmation_dialog.exit_without_saving
2024-04-23 14:05:49 UTC	16384	IN	Data Raw: 22 3a 72 65 74 75 72 6e 20 6e 2e 73 74 6f 70 28 29 7d 7d 29 2c 6e 2c 6e 75 6c 6c 2c 5b 5b 30 2c 36 2c 31 31 2c 31 34 5d 5d 29 7d 29 29 29 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 57 28 22 22 29 7d 7d 29 2c 5b 5d 29 2c 28 30 2c 6c 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 74 26 26 4e 65 28 21 30 29 7d 29 2c 5b 67 74 5d 29 2c 28 30 2c 6c 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 57 6e 26 26 6b 74 28 78 6e 29 7d 29 2c 5b 57 6e 5d 29 3b 76 61 72 20 79 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 74 28 6e 29 7d 2c 5a 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 78 6e 26 26 79 6e 28 28 30 2c 61 2e 5a 29 28 28 30 2c 61 2e 5a 29 28 7b 7d 2c 78 6e 29 2c 7b 7d 2c 7b 73 69 67 6e 61 62 6c Data Ascii: ":return n.stop()}}),n,null,[[0,6,11,14]])})))(),function(){W("")}}),[]),(0,l.useEffect)((function(){gt&&Ne(!0)}),[gt]),(0,l.useEffect)((function(){Wn&&kt(xn)}),[Wn]);var yt=function(n){rt(n)},Zt=function(n){var e;xn&&yn((0,a.Z)((0,a.Z)({},xn),{},{signabl
2024-04-23 14:05:49 UTC	162	IN	Data Raw: 74 2e 65 28 65 5b 31 5d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 74 28 6f 2c 31 39 29 7d 29 29 7d 6f 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 7d 2c 6f 2e 69 64 3d 37 35 36 36 2c 6e 2e 65 78 70 6f 72 74 73 3d 6f 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 34 37 37 39 2e 64 32 62 33 63 31 35 63 2e 63 68 75 6e 6b 2e 6a 73 2e 6d 61 70 Data Ascii: t.e(e[1]).then((function(){return t.t(o,19)}))}o.keys=function(){return Object.keys(r)},o.id=7566,n.exports=o}}]);//# sourceMappingURL=4779.d2b3c15c.chunk.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49855	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:47 UTC	600	OUT	GET /static/js/1546.b106d597.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:48 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8805 Connection: close Date: Tue, 23 Apr 2024 14:05:49 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "59a92d2552801a1a457a170200ba6a8e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0df880fcc0eaaf2d73df10e0f110cabe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DQkrK9O_7uWXKwsdtB4FDzH4s2wA558QWKjUoTxLrWD9WXC-kyYh3w== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:48 UTC	8805	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 34 36 5d 2c 7b 31 38 31 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 7d 29 3b 76 61 72 20 72 3d 74 28 33 37 37 36 32 29 2c 6f 3d 74 28 31 35 36 37 31 29 2c 61 3d 74 28 34 33 31 34 34 29 2c 69 3d 74 28 39 39 36 34 31 29 2c 75 3d 74 2e 6e 28 69 29 2c 73 3d 74 28 31 35 30 37 31 29 2c 6c 3d 74 28 34 30 39 34 36 29 2c 63 3d 74 28 33 30 30 37 35 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[1546],{18186:function(e,n,t){t.d(n,{Z:function(){return h}});var r=t(37762),o=t(15671),a=t(43144),i=t(99641),u=t.n(i),s=t(15071),l=t(40946),c=t(30075

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49856	3.233.159.182	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:50 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=d1214987-cf46-4e9c-b9bb-ff9b09ce84d8&batch_time=1713881148542 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15802 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:50 UTC	15802	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 33 32 34 33 37 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":1,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881132437,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:05:50 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:05:50 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: d1214987-cf46-4e9c-b9bb-ff9b09ce84d8 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:05:50 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 64 31 32 31 34 39 38 37 2d 63 66 34 36 2d 34 65 39 63 2d 62 39 62 62 2d 66 66 39 62 30 39 63 65 38 34 64 38 22 7d Data Ascii: {"request_id":"d1214987-cf46-4e9c-b9bb-ff9b09ce84d8"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49857	44.195.108.183	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:50 UTC	694	OUT	OPTIONS /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,mtr,organization-id,traceparent,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-referer Origin: https://web.enable.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:50 UTC	1998	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:50 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true access-control-allow-headers: content-type,mtr,organization-id,traceparent,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-referer X-Request-Time: 0.002; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49858	44.195.108.183	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:50 UTC	944	OUT	POST /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive Content-Length: 1785 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" mtr: us-east-1 traceparent: 00-00000000000000000fb9c43210417557-65c9b9fe68a21d85-01 sec-ch-ua-mobile: ?0 x-datadog-origin: rum User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-datadog-sampling-priority: 1 content-type: application/json accept: / x-datadog-parent-id: 7334597970477849989 x-datadog-trace-id: 1133152500560524631 x-referer: https://web.enable.us organization-id: 0 sec-ch-ua-platform: "Windows" Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:50 UTC	1785	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 67 65 74 52 6f 6f 6d 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 75 75 69 64 22 3a 22 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 34 2d 35 30 65 33 64 39 31 62 61 64 65 36 22 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 67 65 74 52 6f 6f 6d 28 24 75 75 69 64 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 67 65 74 52 6f 6f 6d 28 75 75 69 64 3a 20 24 75 75 69 64 29 20 7b 5c 6e 20 20 20 20 65 6e 61 62 6c 65 43 6f 6e 74 61 63 74 43 61 72 64 5c 6e 20 20 20 20 65 6e 61 62 6c 65 51 61 5c 6e 20 20 20 20 65 6e 61 62 6c 65 53 68 61 72 65 5c 6e 20 20 20 20 65 78 70 69 72 65 73 41 74 5c 6e 20 20 20 20 69 6e 76 69 74 65 64 43 6f 6e 74 61 63 74 73 4f 6e 6c 79 5c 6e 20 20 20 20 6c 61 Data Ascii: {"operationName":"getRoom","variables":{"uuid":"36a8f665-0d42-4862-a524-50e3d91bade6"},"query":"query getRoom($uuid: String!) {\n getRoom(uuid: $uuid) {\n enableContactCard\n enableQa\n enableShare\n expiresAt\n invitedContactsOnly\n la
2024-04-23 14:05:51 UTC	2156	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 4755 Connection: close access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true Referrer-Policy: no-referrer-when-downgrade api_version: 20230911 dc: US Vary: Accept-Encoding ETag: W/"0e5e6a665adb8b08b3cad1869c1670c4" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 26b952476be8b2b1c5917fea437b6fcd X-Runtime: 0.039865 vary: Origin X-Request-Time: 0.153; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
2024-04-23 14:05:51 UTC	4755	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 67 65 74 52 6f 6f 6d 22 3a 7b 22 65 6e 61 62 6c 65 43 6f 6e 74 61 63 74 43 61 72 64 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 51 61 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 53 68 61 72 65 22 3a 74 72 75 65 2c 22 65 78 70 69 72 65 73 41 74 22 3a 6e 75 6c 6c 2c 22 69 6e 76 69 74 65 64 43 6f 6e 74 61 63 74 73 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 6c 61 79 6f 75 74 22 3a 22 73 74 6f 72 79 20 33 20 63 6f 6c 75 6d 6e 73 22 2c 22 70 61 73 73 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 73 45 6d 61 69 6c 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 73 45 78 70 69 72 61 74 69 6f 6e 44 61 74 65 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 73 50 61 73 73 63 6f 64 65 22 Data Ascii: {"data":{"getRoom":{"enableContactCard":true,"enableQa":true,"enableShare":true,"expiresAt":null,"invitedContactsOnly":false,"language":"en","layout":"story 3 columns","passcode":null,"requiresEmail":false,"requiresExpirationDate":false,"requiresPasscode"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49860	13.32.151.24	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:51 UTC	754	OUT	GET /assets/mindtickle-trademarked-logo.svg HTTP/1.1 Host: web.enable.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=1&id=77971c23-12c8-4086-ab9c-0abbc88f2e75&created=1713881130602&expire=1713882030602
2024-04-23 14:05:52 UTC	2088	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 11348 Connection: close Date: Tue, 23 Apr 2024 14:05:53 GMT Last-Modified: Sat, 20 Apr 2024 01:29:03 GMT ETag: "551ead797822a89ad3e045b46393c423" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9317f1a4c7320bdeb8f38066b985748a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7om1a9KF-7rDU_0YniWECB-Jk7wkCuudAHKhUchLLdXbA3zsRnetbQ== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:52 UTC	11348	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 37 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 37 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 35 2e 31 32 34 39 20 37 2e 32 38 37 34 36 43 34 35 2e 31 32 34 36 20 37 2e 32 38 39 36 39 20 34 35 2e 31 32 34 36 20 37 2e 32 39 31 39 35 20 34 35 2e 31 32 34 39 20 37 2e 32 39 34 31 38 56 31 34 2e 30 36 35 56 31 34 2e 30 36 39 37 43 34 35 2e 31 32 34 39 20 31 34 2e 30 37 38 35 20 34 35 2e 31 32 34 39 20 31 34 2e 30 38 31 38 20 34 35 2e 31 32 34 39 20 31 34 2e 30 39 30 36 43 34 35 2e 31 32 31 39 20 31 34 2e 31 39 31 35 20 34 35 2e 31 33 39 Data Ascii: <svg width="77" height="20" viewBox="0 0 77 20" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M45.1249 7.28746C45.1246 7.28969 45.1246 7.29195 45.1249 7.29418V14.065V14.0697C45.1249 14.0785 45.1249 14.0818 45.1249 14.0906C45.1219 14.1915 45.139

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49859	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:51 UTC	600	OUT	GET /static/js/8311.a4a8aa60.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:52 UTC	2097	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35992 Connection: close Date: Tue, 23 Apr 2024 14:05:53 GMT Last-Modified: Sat, 20 Apr 2024 01:29:08 GMT ETag: "e9e76c197756dd102f138c77dd026918" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d77a44384491c6a449d3e41f615d0cc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8xe_riIRPFSmg3EydEwnQxNt6QUyDG9uB5uIwtLS1IiS2q7hZdICXg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:53 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 33 31 31 5d 2c 7b 39 38 33 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 6d 65 73 73 61 67 65 73 3a 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 62 75 73 69 6e 65 73 73 5f 63 61 72 64 2e 6c 69 6e 6b 65 64 69 6e 2e 76 69 65 77 5f 70 72 6f 66 69 6c 65 22 3a 22 56 69 65 77 20 70 72 6f 66 69 6c 65 22 2c 22 62 75 73 69 6e 65 73 73 5f 63 61 72 64 2e 73 68 6f 77 5f 61 6c 6c 22 3a 5b 22 53 68 6f 77 20 61 6c 6c 20 28 22 2c 5b 22 73 69 7a 65 22 5d 2c 22 29 22 Data Ascii: (self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[8311],{98311:function(e){e.exports={messages:JSON.parse('{"business_card.linkedin.view_profile":"View profile","business_card.show_all":["Show all (",["size"],")"
2024-04-23 14:05:53 UTC	582	IN	Data Raw: 22 3a 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 65 78 69 74 3f 22 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 64 69 61 6c 6f 67 2e 75 6e 73 61 76 65 64 5f 63 68 61 6e 67 65 73 22 3a 22 41 6c 6c 20 75 6e 73 61 76 65 64 20 63 68 61 6e 67 65 73 20 77 69 6c 6c 20 62 65 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 6c 6f 73 74 2e 22 2c 22 64 65 61 6c 73 2e 61 63 74 69 6f 6e 2e 63 72 65 61 74 65 5f 72 6f 6f 6d 22 3a 22 43 72 65 61 74 65 20 52 6f 6f 6d 22 2c 22 64 65 61 6c 73 2e 61 63 74 69 6f 6e 2e 65 64 69 74 5f 64 72 61 66 74 22 3a 22 45 64 69 74 20 44 72 61 66 74 22 2c 22 64 65 61 6c 73 2e 61 63 74 69 6f 6e 2e 65 64 69 74 5f 72 6f 6f 6d 22 3a 22 45 64 69 74 20 52 6f 6f 6d 22 2c 22 72 6f 6f 6d 2e 61 64 64 5f 74 6f 5f 72 6f 6f 6d Data Ascii: ":"Are you sure you want to exit?","confirmation_dialog.unsaved_changes":"All unsaved changes will be permanently lost.","deals.action.create_room":"Create Room","deals.action.edit_draft":"Edit Draft","deals.action.edit_room":"Edit Room","room.add_to_room
2024-04-23 14:05:53 UTC	16384	IN	Data Raw: 69 62 72 61 72 79 2e 65 78 74 65 6e 64 65 64 22 3a 22 55 70 6c 6f 61 64 20 43 6f 6e 74 65 6e 74 20 74 6f 20 4c 69 62 72 61 72 79 20 61 6e 64 20 52 6f 6f 6d 22 2c 22 72 6f 6f 6d 2e 61 64 64 5f 74 6f 5f 72 6f 6f 6d 2e 74 6f 5f 72 6f 6f 6d 5f 61 6e 64 5f 6c 69 62 72 61 72 79 22 3a 22 55 70 6c 6f 61 64 20 74 6f 20 52 6f 6f 6d 20 26 20 4c 69 62 72 61 72 79 22 2c 22 72 6f 6f 6d 2e 61 64 64 5f 74 6f 5f 72 6f 6f 6d 2e 74 6f 5f 72 6f 6f 6d 2e 65 78 74 65 6e 64 65 64 22 3a 22 55 70 6c 6f 61 64 20 43 6f 6e 74 65 6e 74 20 74 6f 20 52 6f 6f 6d 20 4f 6e 6c 79 22 2c 22 72 6f 6f 6d 2e 61 64 64 5f 74 6f 5f 72 6f 6f 6d 2e 74 6f 5f 72 6f 6f 6d 22 3a 22 55 70 6c 6f 61 64 20 74 6f 20 52 6f 6f 6d 22 2c 22 72 6f 6f 6d 2e 61 64 64 5f 74 6f 5f 72 6f 6f 6d 2e 75 70 6c 6f 61 64 5f Data Ascii: ibrary.extended":"Upload Content to Library and Room","room.add_to_room.to_room_and_library":"Upload to Room & Library","room.add_to_room.to_room.extended":"Upload Content to Room Only","room.add_to_room.to_room":"Upload to Room","room.add_to_room.upload_
2024-04-23 14:05:53 UTC	2642	IN	Data Raw: 74 69 6e 67 73 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2e 6c 61 62 65 6c 73 2e 6f 76 65 72 72 69 64 65 5f 76 65 6e 64 6f 72 22 3a 22 41 6c 6c 20 72 6f 6f 6d 73 22 2c 22 61 64 6d 69 6e 2e 73 65 74 74 69 6e 67 73 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2e 73 6e 61 63 6b 62 61 72 2e 73 75 63 63 65 73 73 2e 75 70 64 61 74 65 64 5f 76 65 6e 64 6f 72 22 3a 22 50 65 72 6d 69 73 73 69 6f 6e 73 20 75 70 64 61 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 21 22 2c 22 61 64 6d 69 6e 2e 73 65 74 74 69 6e 67 73 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2e 73 74 69 63 6b 79 5f 62 75 74 74 6f 6e 73 2e 64 69 73 63 61 72 64 5f 76 65 6e 64 6f 72 22 3a 22 44 69 73 63 61 72 64 22 2c 22 61 64 6d 69 6e 2e 73 65 74 74 69 6e 67 73 2e 70 65 72 6d 69 73 73 69 6f 6e 73 2e 73 74 69 63 6b 79 5f Data Ascii: tings.permissions.labels.override_vendor":"All rooms","admin.settings.permissions.snackbar.success.updated_vendor":"Permissions updated successfully!","admin.settings.permissions.sticky_buttons.discard_vendor":"Discard","admin.settings.permissions.sticky_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49861	3.231.6.160	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:51 UTC	370	OUT	GET /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:52 UTC	1791	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 14:05:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Request-Id: 852bfa31806da964be90d6ff9c0a1834 X-Runtime: 0.001560 vary: Origin Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Request-Time: 0.005; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49862	13.33.4.35	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:53 UTC	479	OUT	GET /assets/mindtickle-trademarked-logo.svg HTTP/1.1 Host: web.enable.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=1&id=77971c23-12c8-4086-ab9c-0abbc88f2e75&created=1713881130602&expire=1713882030602
2024-04-23 14:05:53 UTC	2095	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 11348 Connection: close Date: Tue, 23 Apr 2024 14:05:53 GMT Last-Modified: Sat, 20 Apr 2024 01:29:03 GMT ETag: "551ead797822a89ad3e045b46393c423" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d77a44384491c6a449d3e41f615d0cc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6GQxU1HAXd74DvzmiOMiZltoNFl3qa1RJcd2L6eO0qu2opnkCTy-0A== Age: 1 Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:53 UTC	11348	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 37 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 37 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 35 2e 31 32 34 39 20 37 2e 32 38 37 34 36 43 34 35 2e 31 32 34 36 20 37 2e 32 38 39 36 39 20 34 35 2e 31 32 34 36 20 37 2e 32 39 31 39 35 20 34 35 2e 31 32 34 39 20 37 2e 32 39 34 31 38 56 31 34 2e 30 36 35 56 31 34 2e 30 36 39 37 43 34 35 2e 31 32 34 39 20 31 34 2e 30 37 38 35 20 34 35 2e 31 32 34 39 20 31 34 2e 30 38 31 38 20 34 35 2e 31 32 34 39 20 31 34 2e 30 39 30 36 43 34 35 2e 31 32 31 39 20 31 34 2e 31 39 31 35 20 34 35 2e 31 33 39 Data Ascii: <svg width="77" height="20" viewBox="0 0 77 20" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M45.1249 7.28746C45.1246 7.28969 45.1246 7.29195 45.1249 7.29418V14.065V14.0697C45.1249 14.0785 45.1249 14.0818 45.1249 14.0906C45.1219 14.1915 45.139

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49863	44.195.108.183	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:53 UTC	944	OUT	POST /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive Content-Length: 161 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" mtr: us-east-1 traceparent: 00-00000000000000000d18cfb30f7f05b5-6cfa63808a58c5f5-01 sec-ch-ua-mobile: ?0 x-datadog-origin: rum User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-datadog-sampling-priority: 1 content-type: application/json accept: / x-datadog-parent-id: 7852698304001918453 x-datadog-trace-id: 943732489900197301 x-referer: https://web.enable.us organization-id: 994 sec-ch-ua-platform: "Windows" Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:53 UTC	161	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 28 24 6c 61 6e 67 75 61 67 65 3a 20 4c 61 6e 67 75 61 67 65 45 6e 75 6d 21 29 20 7b 5c 6e 20 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 28 6c 61 6e 67 75 61 67 65 3a 20 24 6c 61 6e 67 75 61 67 65 29 5c 6e 7d 5c 6e 22 7d Data Ascii: {"operationName":"translations","variables":{"language":"en"},"query":"query translations($language: LanguageEnum!) {\n translations(language: $language)\n}\n"}
2024-04-23 14:05:53 UTC	2155	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:53 GMT Content-Type: application/json; charset=utf-8 Content-Length: 243 Connection: close access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true Referrer-Policy: no-referrer-when-downgrade api_version: 20230911 dc: US Vary: Accept-Encoding ETag: W/"b5f9688d59c9e767fe805795b80f115f" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: cd58daba3100404de62806e1dbd28179 X-Runtime: 0.007028 vary: Origin X-Request-Time: 0.170; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
2024-04-23 14:05:53 UTC	243	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 63 6f 6e 73 65 6e 74 2e 62 6f 64 79 2e 64 65 73 63 72 69 70 74 69 6f 6e 5f 32 22 3a 22 57 65 20 77 6f 75 6c 64 20 62 65 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 73 74 6f 72 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 72 65 71 75 69 72 65 73 20 79 6f 75 72 20 63 6f 6e 73 65 6e 74 20 74 6f 20 68 65 6c 70 20 75 6e 64 65 72 73 74 61 6e 64 20 79 6f 75 72 20 65 6e 67 61 67 65 6d 65 6e 74 20 62 65 74 74 65 72 20 61 6e 64 20 73 65 72 76 65 20 79 6f 75 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 69 6e 74 65 72 61 63 74 69 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 79 6f 75 20 72 65 61 64 2e 22 7d 7d 7d Data Ascii: {"data":{"translations":{"consent.body.description_2":"We would be tracking and storing information that requires your consent to help understand your engagement better and serve you personalized interactions based on the content you read."}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49865	3.231.6.160	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:54 UTC	370	OUT	GET /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:54 UTC	1791	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 14:05:54 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Request-Id: d1a6bfdf4aeee6b4e484cecc19ba1993 X-Runtime: 0.001054 vary: Origin Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Request-Time: 0.003; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49864	44.195.108.183	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:54 UTC	945	OUT	POST /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive Content-Length: 188 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" mtr: us-east-1 traceparent: 00-0000000000000000127960ef20eabb64-1202285fce5ab52a-01 sec-ch-ua-mobile: ?0 x-datadog-origin: rum User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-datadog-sampling-priority: 1 content-type: application/json accept: / x-datadog-parent-id: 1297644034585179434 x-datadog-trace-id: 1331201745030396772 x-referer: https://web.enable.us organization-id: 994 sec-ch-ua-platform: "Windows" Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:54 UTC	188	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 63 6f 6e 73 65 6e 74 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 22 3a 22 39 39 34 22 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 63 6f 6e 73 65 6e 74 28 24 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 3a 20 49 44 21 29 20 7b 5c 6e 20 20 63 6f 6e 73 65 6e 74 28 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 3a 20 24 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 43 6f 6e 73 65 6e 74 5c 6e 20 20 7d 5c 6e 7d 5c 6e 22 7d Data Ascii: {"operationName":"consent","variables":{"organizationId":"994"},"query":"query consent($organizationId: ID!) {\n consent(organizationId: $organizationId) {\n displayConsent\n }\n}\n"}
2024-04-23 14:05:54 UTC	2154	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:54 GMT Content-Type: application/json; charset=utf-8 Content-Length: 45 Connection: close access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true Referrer-Policy: no-referrer-when-downgrade api_version: 20230911 dc: US Vary: Accept-Encoding ETag: W/"981edfeecd6401a7fed36e25eca2e04e" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 93708ba82eb969308bdddc303db7e037 X-Runtime: 0.130010 vary: Origin X-Request-Time: 0.292; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
2024-04-23 14:05:54 UTC	45	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 63 6f 6e 73 65 6e 74 22 3a 7b 22 64 69 73 70 6c 61 79 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 7d 7d 7d Data Ascii: {"data":{"consent":{"displayConsent":false}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49867	3.231.6.160	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:55 UTC	370	OUT	GET /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:55 UTC	1791	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 14:05:55 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Request-Id: 55cd8ea1aae9ed88c67d916a9be6e783 X-Runtime: 0.000901 vary: Origin Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Request-Time: 0.003; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49866	44.195.108.183	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:55 UTC	945	OUT	POST /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive Content-Length: 432 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" mtr: us-east-1 traceparent: 00-00000000000000005c58a47f8494f046-33aa94a4dcf8db54-01 sec-ch-ua-mobile: ?0 x-datadog-origin: rum User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-datadog-sampling-priority: 1 content-type: application/json accept: / x-datadog-parent-id: 3722951477777980244 x-datadog-trace-id: 6654249317032063046 x-referer: https://web.enable.us organization-id: 994 sec-ch-ua-platform: "Windows" Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:55 UTC	432	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 76 65 72 69 66 79 52 6f 6f 6d 41 63 63 65 73 73 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 69 6e 70 75 74 22 3a 7b 22 75 75 69 64 22 3a 22 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 34 2d 35 30 65 33 64 39 31 62 61 64 65 36 22 7d 7d 2c 22 71 75 65 72 79 22 3a 22 6d 75 74 61 74 69 6f 6e 20 76 65 72 69 66 79 52 6f 6f 6d 41 63 63 65 73 73 28 24 69 6e 70 75 74 3a 20 56 65 72 69 66 79 52 6f 6f 6d 41 63 63 65 73 73 49 6e 70 75 74 21 29 20 7b 5c 6e 20 20 76 65 72 69 66 79 52 6f 6f 6d 41 63 63 65 73 73 28 69 6e 70 75 74 3a 20 24 69 6e 70 75 74 29 20 7b 5c 6e 20 20 20 20 65 72 72 6f 72 73 5c 6e 20 20 20 20 6d 65 73 73 61 67 65 5c 6e 20 20 20 20 70 65 6e 64 69 6e 67 56 65 72 69 66 69 Data Ascii: {"operationName":"verifyRoomAccess","variables":{"input":{"uuid":"36a8f665-0d42-4862-a524-50e3d91bade6"}},"query":"mutation verifyRoomAccess($input: VerifyRoomAccessInput!) {\n verifyRoomAccess(input: $input) {\n errors\n message\n pendingVerifi
2024-04-23 14:05:55 UTC	2155	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:55 GMT Content-Type: application/json; charset=utf-8 Content-Length: 243 Connection: close access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true Referrer-Policy: no-referrer-when-downgrade api_version: 20230911 dc: US Vary: Accept-Encoding ETag: W/"63df2995acc72c7287fe0e05ff8353c2" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 45d19c0646f7c3d02bfae8309195f634 X-Runtime: 0.361981 vary: Origin X-Request-Time: 0.521; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
2024-04-23 14:05:55 UTC	243	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 76 65 72 69 66 79 52 6f 6f 6d 41 63 63 65 73 73 22 3a 7b 22 65 72 72 6f 72 73 22 3a 6e 75 6c 6c 2c 22 6d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 70 65 6e 64 69 6e 67 56 65 72 69 66 69 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 61 63 74 22 3a 7b 22 69 64 22 3a 22 33 34 36 38 38 31 34 34 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 3a 74 72 75 65 2c 22 61 76 61 74 61 72 55 72 69 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 73 65 6e 74 22 3a 6e 75 6c 6c 2c 22 63 72 6d 49 64 22 3a 6e 75 6c 6c 2c 22 65 6d 61 69 6c 22 3a 6e 75 6c 6c 2c 22 66 69 72 73 74 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 6c 61 73 74 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 6d 6f 62 69 6c 65 50 68 6f 6e 65 22 3a 6e 75 6c 6c 7d 7d 7d 7d Data Ascii: {"data":{"verifyRoomAccess":{"errors":null,"message":null,"pendingVerification":false,"contact":{"id":"34688144","anonymous":true,"avatarUri":null,"consent":null,"crmId":null,"email":null,"firstName":null,"lastName":null,"mobilePhone":null}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49869	3.231.6.160	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:56 UTC	370	OUT	GET /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:56 UTC	1791	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 14:05:56 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Request-Id: 92698c9db9dfa3b8a96f0264708d23ea X-Runtime: 0.000893 vary: Origin Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Request-Time: 0.002; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49868	44.195.108.183	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:56 UTC	705	OUT	OPTIONS /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: contact-id,content-type,mtr,organization-id,traceparent,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-referer Origin: https://web.enable.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:56 UTC	2009	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:56 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true access-control-allow-headers: contact-id,content-type,mtr,organization-id,traceparent,x-datadog-origin,x-datadog-parent-id,x-datadog-sampling-priority,x-datadog-trace-id,x-referer X-Request-Time: 0.003; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49870	44.195.108.183	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:56 UTC	968	OUT	POST /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive Content-Length: 7608 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" mtr: us-east-1 traceparent: 00-000000000000000050689ee234a51899-6b75e1e5ebb2cb8d-01 sec-ch-ua-mobile: ?0 x-datadog-origin: rum User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 contact-id: 34688144 content-type: application/json accept: / x-datadog-sampling-priority: 1 x-datadog-parent-id: 7743343511951559565 x-datadog-trace-id: 5794055614995175577 x-referer: https://web.enable.us organization-id: 994 sec-ch-ua-platform: "Windows" Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:56 UTC	7608	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 67 65 74 52 6f 6f 6d 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 75 75 69 64 22 3a 22 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 34 2d 35 30 65 33 64 39 31 62 61 64 65 36 22 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 67 65 74 52 6f 6f 6d 28 24 75 75 69 64 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 67 65 74 52 6f 6f 6d 28 75 75 69 64 3a 20 24 75 75 69 64 29 20 7b 5c 6e 20 20 20 20 65 6e 61 62 6c 65 43 6f 6e 74 61 63 74 43 61 72 64 5c 6e 20 20 20 20 65 6e 61 62 6c 65 51 61 5c 6e 20 20 20 20 65 6e 61 62 6c 65 53 68 61 72 65 5c 6e 20 20 20 20 65 78 70 69 72 65 73 41 74 5c 6e 20 20 20 20 69 6e 76 69 74 65 64 43 6f 6e 74 61 63 74 73 4f 6e 6c 79 5c 6e 20 20 20 20 6c 61 Data Ascii: {"operationName":"getRoom","variables":{"uuid":"36a8f665-0d42-4862-a524-50e3d91bade6"},"query":"query getRoom($uuid: String!) {\n getRoom(uuid: $uuid) {\n enableContactCard\n enableQa\n enableShare\n expiresAt\n invitedContactsOnly\n la
2024-04-23 14:05:56 UTC	2156	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:05:56 GMT Content-Type: application/json; charset=utf-8 Content-Length: 7430 Connection: close access-control-allow-origin: https://web.enable.us access-control-allow-methods: POST, OPTIONS access-control-expose-headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing access-control-max-age: 7200 access-control-allow-credentials: true Referrer-Policy: no-referrer-when-downgrade api_version: 20230911 dc: US Vary: Accept-Encoding ETag: W/"93210703ea1b2f8b3960be7be70e684e" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 8ec03e3ba2548f0cf76eb462cdee5fea X-Runtime: 0.094084 vary: Origin X-Request-Time: 0.204; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io
2024-04-23 14:05:56 UTC	7430	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 67 65 74 52 6f 6f 6d 22 3a 7b 22 65 6e 61 62 6c 65 43 6f 6e 74 61 63 74 43 61 72 64 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 51 61 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 53 68 61 72 65 22 3a 74 72 75 65 2c 22 65 78 70 69 72 65 73 41 74 22 3a 6e 75 6c 6c 2c 22 69 6e 76 69 74 65 64 43 6f 6e 74 61 63 74 73 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 6c 61 79 6f 75 74 22 3a 22 73 74 6f 72 79 20 33 20 63 6f 6c 75 6d 6e 73 22 2c 22 70 61 73 73 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 73 45 6d 61 69 6c 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 73 45 78 70 69 72 61 74 69 6f 6e 44 61 74 65 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 73 50 61 73 73 63 6f 64 65 22 Data Ascii: {"data":{"getRoom":{"enableContactCard":true,"enableQa":true,"enableShare":true,"expiresAt":null,"invitedContactsOnly":false,"language":"en","layout":"story 3 columns","passcode":null,"requiresEmail":false,"requiresExpirationDate":false,"requiresPasscode"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49871	35.190.25.25	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:56 UTC	693	OUT	POST /track/?verbose=1&ip=1&_=1713881155778 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 1481 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:56 UTC	1481	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 64 65 61 6c 25 32 30 72 6f 6f 6d 25 32 30 65 6d 61 69 6c 25 32 30 70 72 6f 76 69 64 65 64 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 65 6e 61 62 6c 65 2e 75 73 25 32 46 72 6f 6f 6d 25 32 46 33 36 61 38 66 36 36 35 2d 30 64 34 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22deal%20room%20email%20provided%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fweb.enable.us%2Froom%2F36a8f665-0d4
2024-04-23 14:05:56 UTC	578	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://web.enable.us access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 14:05:56 GMT Content-Length: 25 x-envoy-upstream-service-time: 48 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 14:05:56 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49872	13.33.4.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:57 UTC	600	OUT	GET /static/js/3575.51e1cad5.chunk.js HTTP/1.1 Host: dsr-internal-us.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:58 UTC	2096	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5295 Connection: close Date: Tue, 23 Apr 2024 14:05:59 GMT Last-Modified: Sat, 20 Apr 2024 01:29:06 GMT ETag: "47e4fd9e3ed27cf06849b77ebbaaa911" x-amz-server-side-encryption: AES256 Cache-Control: max-age=25012345 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4f00e77688d92901b5afc8b7b033ed56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: DQeXQSOI2ui6MlJOiSBVhpFWblroafI5totBCKuQjafM28vwfDjJBA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: frame-ancestors 'self' .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .bitsight.com .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .goto.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .lincoln.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .twilio.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .haasalert.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: fullscreen=* Vary: Origin
2024-04-23 14:05:58 UTC	5295	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 6e 64 74 69 63 6b 6c 65 5f 64 73 72 5f 63 6c 69 65 6e 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 37 35 5d 2c 7b 34 33 35 37 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 69 29 7b 69 2e 72 28 65 29 3b 76 61 72 20 72 3d 69 28 31 34 31 33 29 2c 6f 3d 28 69 28 39 33 32 36 34 29 2c 69 28 39 38 38 35 30 29 29 2c 74 3d 69 28 33 39 30 35 29 2c 61 3d 69 28 31 33 39 36 37 29 2c 73 3d 69 28 37 31 30 31 29 2c 64 3d 69 2e 6e 28 73 29 2c 63 3d 69 28 33 31 38 30 33 29 2c 6c 3d 69 28 38 35 39 30 35 29 2c 75 3d 69 28 32 36 35 33 38 29 2c 6d 3d 69 28 Data Ascii: "use strict";(self.webpackChunk_mindtickle_dsr_client=self.webpackChunk_mindtickle_dsr_client\|\|[]).push([[3575],{43575:function(n,e,i){i.r(e);var r=i(1413),o=(i(93264),i(98850)),t=i(3905),a=i(13967),s=i(7101),d=i.n(s),c=i(31803),l=i(85905),u=i(26538),m=i(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49873	3.231.6.160	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:57 UTC	370	OUT	GET /core/graphql HTTP/1.1 Host: dsr-svc-csv.prod-us.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:57 UTC	1791	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 14:05:57 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Request-Id: 412661f4e528bfc6766431e73d7fbe92 X-Runtime: 0.001171 vary: Origin Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Request-Time: 0.003; content-security-policy: frame-ancestors 'self' .lincoln.com .vapi.ai .actionaly.com .aiwyn.ai .alkami.com .ameyo.com .annata.net .arht.tech .atlassian.com .atlassian.net .brighter.ai .centripetal.ai .classtime.com .clearwaveinc.com .contentsquare.com .crm.ondemand.com .darktrace.com .doubleoctopus.com .dynamics.com .enable.com .enable.us .engagingnetworks.net .ethyca.net .flyr.com .force.com .forduniversity.com .gainsight.com .h-dnet.com .highspot.com .hubspot.com .hubspoteditor.com .ipresent.com .ipresentweb.com .justappraised.com .live.com .mediafly.com .mindtickle.app .mindtickle.com .mismo.team .myfreshworks.com .numero.ai .okta.com .papirfly.com .pascivite.com .peoplegrove.com .propelleraero.com .reverselogix.com .rheinberg-pools.de .rready.com .salesforce-communities.com .salesforce-experience.com .salesforce.com .schoolmint.com .schoolstatus.com .seismic.com .site.com .splunkcoach.com .stripe.partners .supremeopti.com .talview.com .techsee.me .tenable.com .theiquest.com .thermofisher.one .tracegains.com .trexgroup.com .trucesoftware.com .trustnetinc.com .uniphorecloud.com .unraveldata.com .upshop.com .voucherify.io .wisesystems.com .zendesk.com .zoom.us digdeeper.sysdig.com .showpad.biz .office.com .office365.com partnertraining.bluebeam.com salescompass.goto.com enablement.cribl.io .haasalert.com .bitsight.com *.outreach.io

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49874	107.178.240.159	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:57 UTC	380	OUT	GET /track/?verbose=1&ip=1&_=1713881155778 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:57 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 14:05:57 GMT Content-Length: 45 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 14:05:57 UTC	45	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 64 61 74 61 2c 20 6d 69 73 73 69 6e 67 20 6f 72 20 65 6d 70 74 79 22 2c 22 73 74 61 74 75 73 22 3a 30 7d Data Ascii: {"error":"data, missing or empty","status":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49875	18.165.116.102	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:59 UTC	1342	OUT	GET /protected/organization-994/organization-logo-1713869486?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L29yZ2FuaXphdGlvbi1sb2dvLTE3MTM4Njk0ODYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTY0NzMxNTZ9fX1dfQ__&Signature=d1xx2w9DUk87dEyDNqhbUC1~PTj2MakafHrcklabl1hQyyXwXYKB8U0oXMxSBZNW8Y3sIUWXhuybmAPlKKiSG66xHJ2~66UvXcNC69do9hgkaLaW3L-0SiJgkj319VripRx2cnzcdgeCEvZ~fljo4EWVit8GGanv4iLzy2XXXxiqyU0L8f8kUj90FtlBme5vKgg6rmzW9b6IHe~IMQyN16rFmnYpVa4Rtsx6StVOIE9TPW0KlNHFb-SzD2jv4xFOOA-6Ity-uDeZZNXtDgH8wMUr1JnLv5MzzxH1RKcTa04uTZhH2VYvBrGXfpIjaLqn5avluobBL5sL3Dc2EWzJaQ__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1 Host: dsr-images-us-east-1.prod.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:59 UTC	693	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 10791 Connection: close Date: Tue, 23 Apr 2024 14:06:00 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Apr 2024 10:51:27 GMT ETag: "2a9b0256b9cee811324ea810682e8a81" x-amz-server-side-encryption: AES256 x-amz-meta-filename: protected/organization-994/organization-logo-1713869486 x-amz-version-id: 8jxO3vjhRGmbFE8tDZAK84fgNeZbQ64e Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a692b28e995e2a8288fe7156f8144a44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: aeVrS4XNud0kT-hZMx7UeSXnxpY6XMgHCqsEO5lGUMRPXteFtriWBw==
2024-04-23 14:05:59 UTC	10791	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 02 00 00 00 4c 5c f6 9c 00 00 29 ee 49 44 41 54 78 9c ec bc 09 98 5d 45 99 37 fe be 55 75 ce b9 6b ef dd e9 bd 3b 9d 34 59 48 c8 be 00 81 2c b2 23 8a b2 cd 38 ca a0 e8 e0 82 8e ce 8c e3 36 2a 23 7f 47 64 c6 5d 1c 15 50 94 f1 cf 4e 58 c4 04 d9 11 b2 43 c8 9e 74 3a e9 ee f4 be 77 df f5 2c 55 f5 7e cf 39 37 69 42 70 44 66 e6 e1 7e f3 7c f7 f7 f4 93 be b9 b7 6e 9d aa fa 55 bd ef ef ad 7a ab 05 11 41 01 f9 03 cb 77 03 fe 5f 47 81 80 3c a3 40 40 9e 51 20 20 cf 28 10 90 67 14 08 c8 33 0a 04 e4 19 05 02 f2 8c 02 01 79 46 81 80 3c a3 40 40 9e 51 20 20 cf 28 10 90 67 14 08 c8 33 0a 04 e4 19 05 02 f2 8c 02 01 79 46 81 80 3c a3 40 40 9e 51 20 20 cf 28 10 90 67 14 08 c8 33 0a 04 e4 19 05 02 f2 Data Ascii: PNGIHDRL\)IDATx]E7Uuk;4YH,#86*#Gd]PNXCt:w,U~97iBpDf~\|nUzAw_G<@@Q (g3yF<@@Q (g3yF<@@Q (g3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49876	18.165.116.102	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:59 UTC	1434	OUT	GET /protected/organization-994/rooms/banner-1713871695447-ba2af024-f29d-4190-8d75-d25a9e7758c4.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3Jvb21zL2Jhbm5lci0xNzEzODcxNjk1NDQ3LWJhMmFmMDI0LWYyOWQtNDE5MC04ZDc1LWQyNWE5ZTc3NThjNC5qcGVnIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNzE1MDgxNDU2fX19XX0_&Signature=UMff4RXdBkPTKTusbNilyyTncaLD6UXfs0LxknDTYW6rKIMncWGIbquJT4LPMSmptqSMTY1KCtPYO9b-i6anFsO~Wwnz2OuBVbL~TPv3JSGLhS8us4Hp4c5y2lHnUrWklY2ZhauNMWuMohgX2EgMYjC06tTgz7yV3YII5MSG6QZLqkwWiVLDV-kw9cUXS-a4eYp00PpTVTeL4WYZaB-T2hCOGpDnmCxYYnLuKALz3n-fwCVbTtLrekh45z~0XEtUztB-WuB3vYtr8V13oQ~oLcSq5A9IHf~9HZ7uJ9JIu81s1igdADO~9~WKB8PwVbwtRYjy-5i87QDHFjpGIfeuoQ__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1 Host: dsr-images-us-east-1.prod.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:59 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/x-www-form-urlencoded Content-Length: 412642 Connection: close Date: Tue, 23 Apr 2024 14:06:00 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Apr 2024 11:28:26 GMT ETag: "d049976a8d6c146e5bfbbeec55c9f66e" x-amz-server-side-encryption: AES256 x-amz-version-id: QSYBJKl9HWS8ucNFBZvfAX5752RrF_Df Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a692b28e995e2a8288fe7156f8144a44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OmJtUWCo2QIDocKYQkVipMGFysDJAEVyrdKXTdyOU0dH6VK_PIn6cA==
2024-04-23 14:05:59 UTC	1395	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-04-23 14:05:59 UTC	16384	IN	Data Raw: 73 8d 3b 73 b9 9d d1 52 95 e7 56 ac bf 9a c4 a1 87 a2 a5 a5 38 bf 3d 58 55 b8 0c 7c 57 10 71 8b 52 ef 16 56 ff 00 a9 8b b5 1f af 54 5d 29 c4 eb f0 fa 14 aa 62 2a 39 a4 9c 29 39 45 25 cc e2 f6 8e 57 c5 d5 6f 5f 52 25 c7 b4 ae 03 02 37 04 7a a5 44 86 24 06 e2 18 00 7b ca 1a d8 01 07 b8 04 03 00 10 58 7e f1 00 0f 40 00 0b f8 08 06 01 a8 6a 17 10 13 8a d2 44 6c 4a 2f d5 97 91 00 89 d3 df 41 d4 e4 2a 7a c8 73 d9 13 f5 52 a6 b4 27 24 94 48 d2 f6 49 cf d9 e8 2a 55 0d ea 20 6b 50 00 40 01 b9 40 00 17 00 00 00 00 00 0a 04 3b 88 00 00 00 00 00 00 00 00 00 10 01 25 b3 22 49 7b 2c 88 01 2f a2 88 8d fb 2b cc 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 cc 00 2c 00 0b 70 b0 c0 40 00 03 00 10 00 73 dc 62 01 8d 6e 20 5b a2 07 2f 69 88 72 dd 88 02 3e d2 07 bb 1c 77 42 Data Ascii: s;sRV8=XU\|WqRVT])b9)9E%Wo_R%7zD${X~@jDlJ/AzsR'$HI*U kP@@;%"I{,/+,p@sbn [/ir>wB
2024-04-23 14:05:59 UTC	1024	IN	Data Raw: 25 b8 87 3d c4 84 00 c4 32 82 c2 18 88 01 0d 81 54 84 30 01 00 00 08 00 60 02 00 28 00 06 02 1d c4 00 4e 3e cc 88 12 5e cb 11 02 24 fd 84 21 fd 05 e6 04 47 71 00 0c 2e 20 01 dc 04 00 31 91 0b 81 20 22 30 18 08 00 60 2b 8c 00 04 30 00 00 20 00 00 00 76 0d c1 01 28 a6 de 87 d1 7b 15 c3 d6 13 86 4f 17 38 da 75 f4 8f 84 57 fe 4f 11 c1 f0 32 c7 f1 0a 38 78 2d 67 2b 79 2e 7f 81 f5 98 53 85 1a 30 a3 4d 5a 14 e2 a3 14 70 e5 cb f1 a9 0d 6c 87 c8 4b 61 9c 15 19 fc dc bc 98 41 7a 91 f2 41 3f 9b 97 d9 61 0f 62 3f 65 01 20 00 20 00 00 00 00 00 01 36 9d d0 00 1e 63 b4 9d 95 a7 8d 8c f1 7c 3e 2a 15 d2 bc a9 ad a7 e5 e2 7c fe ad 29 52 a9 28 4e 2e 32 8b b3 4d 6c 7d 99 36 b6 dc f3 1d b6 e1 14 2b f0 e9 f1 1a 71 50 af 49 ac ed 2f 6d 3d 0d e1 9d c6 a3 e7 6c 09 4b 42 27 ae 56 Data Ascii: %=2T0`(N>^$!Gq. 1 "0`+0 v({O8uWO28x-g+y.S0MZplKaAzA?ab?e 6c\|>*\|)R(N.2Ml}6+qPI/m=lKB'V
2024-04-23 14:05:59 UTC	16384	IN	Data Raw: 98 86 bd a9 28 2f 76 ff 00 9a 3d 69 e7 ce fb 68 00 01 80 25 76 8f 98 f6 b3 11 e9 1d a0 c5 c9 3d 23 2c 8b dc ad f9 a3 e9 ae 6a 9c 25 52 4e d1 84 5c 9b f2 3e 3d 8a ab 2a f8 8a 95 66 ef 29 cd c9 f9 b6 74 e3 9e d2 b5 70 1c 37 a5 f1 8c 25 1b 5d 4a aa bf 92 d5 9f 59 96 b2 67 cf 3b 07 87 ef 78 e3 aa f6 a3 4e 52 f7 ed fd 4f a1 0e 4b ba 40 00 07 35 07 33 8a f1 ec 17 08 ab 1a 58 97 37 52 51 cc 94 55 f4 3a 6b 57 63 e6 dd b2 c4 ba fd a0 c4 59 de 34 ad 05 e1 65 af e3 73 52 6e 95 e8 67 db 9c 0c 7d 9c 25 69 79 b4 65 ab db dd 7f 43 81 8d bf 8e 67 89 6c 57 3b 4e 28 c6 de b2 af 6e b1 f2 7f a2 a1 42 9f ba e6 7a 9d b2 e2 d5 34 55 69 c3 c6 30 3c dd c9 47 72 fd 71 76 fa 67 64 b1 58 bc 6f 0d a9 88 c6 55 95 57 2a 99 63 7e 49 23 b6 73 7b 39 43 d1 b8 06 0e 1c e5 0c ef df af f5 3a Data Ascii: (/v=ih%v=#,j%RN\>=f)tp7%]JYg;xNROK@53X7RQU:kWcY4esRng}%iyeCglW;N(nBz4Ui0<GrqvgdXoUWc~I#s{9C:
2024-04-23 14:05:59 UTC	1024	IN	Data Raw: ea 55 94 60 94 55 f9 dd fe 47 83 5d 9c e2 d5 35 8e 02 b5 bc 51 d3 0b 25 da 38 e4 92 3b f4 bb 1f c6 2a 2f d5 a3 0f b5 24 8d 74 7b 0d c4 65 f3 95 68 53 f3 95 ce bf 66 26 9e 56 c2 69 dc f6 90 ec 15 5b fe 97 1f 4a df c3 16 6a 87 60 f0 8b e7 31 b5 65 e5 14 4f b6 26 9e 06 de 00 d3 47 d2 29 f6 2f 84 45 5a 6e bc ed fc 56 34 d1 ec a7 06 83 fd 56 53 fb 72 6c 9f 6a e9 f2 eb 58 e8 70 3c 3f a5 71 6c 2d 1b 5d 4a a4 6e bc 2f a8 71 ca 54 29 71 8c 55 3c 2c 32 51 85 47 18 c7 a5 b4 3a bd 86 c3 f7 bc 7a 13 6b 4a 50 94 ff 00 a7 f5 37 72 fe bb 48 fa 2c bd a6 46 7a 45 8c 52 f6 59 e5 68 c6 9a 8d e4 f6 8a bb 11 8b 8e 57 58 6e 07 8d aa dd ad 49 c5 79 bd 3f a8 1f 2b c7 56 78 8c 5d 5a d2 de a4 dc 9f c4 db c2 38 16 2f 8d 4a 7e 8d 91 46 9a 59 9c 9d ad 7f ff 00 43 98 de a7 d1 3b 0d 43 Data Ascii: U`UG]5Q%8;*/$t{ehSf&Vi[Jj`1eO&G)/EZnV4VSrljXp<?ql-]Jn/qT)qU<,2QG:zkJP7rH,FzERYhWXnIy?+Vx]Z8/J~FYC;C
2024-04-23 14:05:59 UTC	16384	IN	Data Raw: 00 07 35 07 8f ff 00 68 55 ed 0c 16 1d 3f ad 36 be 16 fe a7 b0 3e 77 db 9a fd ef 1e 95 35 b5 1a 71 87 f5 fe a6 b1 9b a5 79 d5 ab d0 fa 97 66 a8 7a 37 67 b0 70 6a ce 71 ce fd ee ff 00 91 f2 fa 31 73 ab 18 a5 ac 9a 49 1f 61 a7 4a 34 30 f4 a8 c5 69 4e 2a 2b dc 8e 9c b7 f1 22 c0 00 38 a8 28 c5 55 ee 69 aa b6 be 45 27 65 f6 59 79 5d 45 7a d8 7b fd 77 ff 00 e2 c0 f9 67 c9 5c 43 13 52 52 86 12 b4 9b 77 f6 59 74 3b 31 c5 e6 ec b0 35 63 7f ad a1 f5 2c cf a8 ae fa 9b 99 d8 3e 71 0e c5 f1 89 2d 69 53 8f 9c d1 a6 97 61 31 f2 5f a4 c4 50 87 c5 9e f8 43 cf 21 e2 61 d8 2a b9 97 79 8e a7 6e 79 62 cd 50 ec 1e 15 7b 78 da af ca 08 f5 a0 4f 2a 3c e4 3b 15 c2 62 bd 77 5e 7f cd 63 9d da 7e cf f0 be 19 c1 65 5b 0f 4e 6a b3 9c 63 07 29 5f c7 f2 4c f6 67 91 ff 00 68 58 8c b8 6c Data Ascii: 5hU?6>w5qyfz7gpjq1sIaJ40iN+"8(UiE'eYy]Ez{wg\CRRwYt;15c,>q-iSa1_PC!aynybP{xO*<;bw^c~e[Njc)_LghXl
2024-04-23 14:05:59 UTC	752	IN	Data Raw: c4 e2 e4 d2 74 e0 f2 df eb 6c bf 13 56 e7 88 ed e7 16 53 a9 0e 1b 46 57 8d 27 9e ab 5f 5a da 2f 72 2c 9b a3 c7 d4 93 94 9c 9b bb 6e ec f6 3f ec f2 85 eb 63 31 0d 7b 30 50 5e ff 00 ff 00 43 c5 f3 3e 91 d8 5c 3b a3 c0 a5 51 ad 6a d5 6d 79 2d 3f 3b 9d f3 f5 8a 47 a2 00 03 82 83 9d da 2c 47 a3 76 7f 1b 53 9b a7 91 7f 36 9f d4 e8 9e 6b b7 b5 fb be 09 4a 8a 95 9d 5a bf 14 93 ff 00 c0 9d 8f 9d 4b 73 bb d8 ba ca 97 69 30 d7 69 29 66 8f c5 33 83 27 a9 76 0b 11 2c 2e 2e 95 78 7b 54 e6 a4 bd da 9e ad 7f 5d 32 fb 2e da 01 4e 13 15 4b 1d 84 a5 8a a0 ef 0a 91 bf 93 e8 5c 79 5a 00 00 40 00 00 00 00 00 00 5a fc 87 96 5d 18 08 69 5d 94 e2 71 38 7c 24 1d 4c 4d 7a 74 a2 be b3 3c 77 1e ed 9a a9 09 61 f8 5d e3 17 a4 ab 3d df 91 64 b4 6b ed 87 68 e3 86 a5 3e 1f 82 9d ea c9 5a Data Ascii: tlVSFW'_Z/r,n?c1{0P^C>\;Qjmy-?;G,GvS6kJZKsi0i)f3'v,..x{T]2.NK\yZ@Z]i]q8\|$LMzt<wa]=dkh>Z
2024-04-23 14:05:59 UTC	16384	IN	Data Raw: 00 17 b0 04 00 17 00 00 00 2a 80 e6 00 40 00 6e 1e e2 a0 00 18 08 10 c2 c4 00 05 82 c0 04 a7 f3 71 23 6d 49 4b e6 e3 ef 02 03 10 00 f9 92 d3 23 f3 20 4d 7c db f3 02 00 30 28 5b 80 00 00 0f 71 00 00 00 50 00 1a 04 01 cc 00 28 00 00 0e 41 cc 00 03 90 f6 10 00 05 80 00 00 00 00 00 00 62 01 80 83 98 00 40 00 01 40 00 00 00 00 12 89 28 fc dc fd c2 86 e4 a3 7c 95 09 51 50 c4 30 27 12 5c c8 c4 7c c8 a8 4f 59 cb cc 22 15 3d b7 e6 11 2c e9 12 44 88 a2 44 00 73 00 01 88 60 b7 01 73 00 00 01 31 8b 70 22 c8 f2 24 c8 ea 55 02 18 14 21 80 00 80 62 00 00 00 00 00 00 0b 80 00 c0 40 01 ee 0e 60 c0 88 00 6c 45 51 70 00 00 b8 00 00 d3 0e 62 1a 02 fa 3a c9 14 cb 76 5b 47 db 5e 65 53 f6 df 99 90 90 c8 8c a1 dc b2 3e cc bc 8a 91 64 36 97 91 28 ad ee 17 07 b8 14 31 5c 40 03 be Data Ascii: *@nq#mIK# M\|0([qP(Ab@@(\|QP0'\\|OY"=,DDs`s1p"$U!b@`lEQpb:v[G^eS>d6(1\@
2024-04-23 14:06:00 UTC	16384	IN	Data Raw: 86 b7 3a e2 26 31 0c f4 44 30 00 2a 00 0e 40 00 00 00 00 00 00 00 00 00 00 00 00 1c ca 27 2f 64 81 37 ec 10 20 94 3d a2 55 3d a1 41 5e 44 aa 69 32 5e cf d4 ec d4 12 2a 96 e5 f6 f5 74 28 9e e3 f5 08 00 0a a0 00 00 06 20 00 e6 30 b0 00 00 00 42 64 49 32 2c 28 00 02 80 00 00 00 00 80 00 02 89 2f 61 91 24 bd 87 e6 44 80 43 96 c8 5c c7 2f 65 00 80 00 a0 00 02 00 00 00 00 00 00 00 00 00 00 28 00 00 02 49 88 08 3a 5c 1f 8b e2 78 56 26 35 70 f3 76 fa 51 7b 49 1f 4d e1 1c 5b 0d c5 f0 ca ae 1e 49 54 5e dd 37 bc 59 f2 14 6c e1 dc 42 bf 0e c5 46 be 1e 6e 33 8b f8 f8 1c b3 c3 c9 65 7d 07 8d e1 3b 9a eb 11 05 ea 55 7a f8 48 e5 5b 53 bf c3 38 86 1f b4 7c 2a 76 8e 4a 9b 4e 3f 55 f5 47 0e ad 39 52 a9 2a 73 5e b4 1d 99 f0 fe 57 17 86 5b 7d af 85 cd e7 8f 8d ee 20 b6 0b d8 Data Ascii: :&1D0@'/d7 =U=A^Di2^t( 0BdI2,(/a$DC\/e(I:\xV&5pvQ{IM[IT^7YlBFn3e};UzH[S8\|vJN?UG9Rs^W[}
2024-04-23 14:06:00 UTC	16384	IN	Data Raw: 38 a8 bd 37 d6 c7 3e 14 69 ca ab 94 16 9b d8 ab 22 56 77 d4 e9 70 aa 2a 74 ea cf 9c 6c 61 5d 4a bc 63 0f 43 b3 ae 9d 3a d1 78 89 53 ee 94 16 eb ab f8 1e 56 9b d4 df 5f 01 1e f9 da ea ec ab 17 83 58 78 52 92 6d e7 be e4 1b 6a 4e 3e 8d 26 f9 46 c8 d7 d9 9c 3f a9 5b 13 25 ba c9 1f ea 61 e1 34 ea 63 71 11 a5 51 29 52 86 b2 4f a1 e9 e8 51 85 28 c6 9d 28 28 45 6c 90 d3 59 65 b6 0e 21 85 53 9c 67 6d 53 32 4f 87 51 c6 65 94 e5 38 b5 a6 8b 91 dc ab 4f 34 6d b5 f9 99 21 07 17 25 a6 8c b1 8a b7 0d 1a 58 7c b1 a3 4e 30 56 b5 d2 d5 9e 77 8f d4 55 38 b5 57 f5 52 89 de 93 cb 6f 03 ca e3 6a ba b8 ca b3 fa d3 66 f0 9e d1 4b 3a bc 0b 1e f8 66 3a 35 f2 39 a7 16 a5 15 d0 e5 d3 8e 69 1a a9 5d 4d 5a d7 b7 33 b5 9e 91 eb e3 da 8c 23 f6 b0 f5 63 cf 46 8b 63 da 2e 1f 24 da ef 57 Data Ascii: 87>i"Vwp*tla]JcC:xSV_XxRmjN>&F?[%a4cqQ)ROQ(((ElYe!SgmS2OQe8O4m!%X\|N0VwU8WRojfK:f:59i]MZ3#cFc.$W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49877	18.165.116.102	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:59 UTC	1456	OUT	GET /protected/organization-994/reference-116777/cover-1713870628834-ebf4ef86-c3f7-4682-be71-bb8ad0ce9afd.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3JlZmVyZW5jZS0xMTY3NzcvY292ZXItMTcxMzg3MDYyODgzNC1lYmY0ZWY4Ni1jM2Y3LTQ2ODItYmU3MS1iYjhhZDBjZTlhZmQuanBlZyIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTA4MDIzMn19fV19&Signature=jXGmVLn9oehpYXRFIEwC2q1fxbl7rwJX2rYtGpb~EmiDs06nzsL9X-9Yw~QYr61MPMKL2z9aycl0XMevtBd4hbC3qPzQlPf3K2jOEEG4Vulb3nTIAGfKHTO74YDEvt3HPWMK3Z05LS1Mcb8byKcbB~dCTIWNyrK0MEuL~cbEnE8pv3e8TzbKUsO5-UxLk0jMFBaXSukgZLPC7I36mu1EO4FLf5f410w8m~lwV93B~D7PnzaLXYFBYP4c7c0Lg9nTXOWrUbGjMJZ59aoRlDhJoeYfste5JE9me~4yhts-kmAe4sWHkGuA2-bFILw1d7CW1NvlpbACO7U4qTVqk~Emxg__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1 Host: dsr-images-us-east-1.prod.mindtickle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:05:59 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/x-www-form-urlencoded Content-Length: 94369 Connection: close Date: Tue, 23 Apr 2024 14:06:00 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Apr 2024 11:10:33 GMT ETag: "ce33cb0245c6cbf42dd5d61936e15d6a" x-amz-server-side-encryption: AES256 x-amz-version-id: Swu.XdZ7.Nu7aOGziL3YjCJhqZMMwEZZ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9991dee74df517ccd6f97b8bb475fe4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TRDkl9p5PHcFo_TY5Lrb2JEzlvgpAZV9_FGxxE75TcdVos952sK3HQ==
2024-04-23 14:05:59 UTC	15755	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 02 35 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 11 31 fb bf 1c 66 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((5 "1f
2024-04-23 14:05:59 UTC	2059	IN	Data Raw: c7 72 96 5c 04 8e 32 1d 02 ff 00 a4 d0 7e 5d 2f 9e 9d a4 08 44 c0 e1 13 04 82 36 87 be 9a 17 bf 62 2b 1a 58 0b e5 a7 8a 55 b3 1e d9 89 84 a6 52 c2 c7 cb 4f 14 a5 f4 f1 48 d8 d8 d8 da e8 d8 e7 4b 1b 25 6b 69 e2 6b 3b 58 98 ca 4a 16 36 19 22 64 ad 64 11 31 86 18 cb 1f 4b 0c 8f 92 9e 29 17 6f 16 2c a6 85 8f 6c 6c 69 65 2c 2c 7f 49 be d6 9d f7 7e 2b fc 02 4a 2b 95 8a c0 a0 cb 2f 05 b5 0e c1 fc ab 74 c9 6e bd 6e 2c 98 b2 01 66 b7 4a 32 13 d0 00 4d 2c a7 b6 cd b1 99 ab 21 63 65 79 7b 89 51 f2 e8 d8 14 ae 0c 82 46 37 65 e2 dd 28 dd 7a 5a fa 11 51 53 4d 4a ca 60 9b 76 a6 8f 4c c7 f9 16 bc 3f f6 a8 6a 5f 4b 07 eb 55 4d 55 35 6e a8 90 9b f4 a3 c7 7f 58 64 71 bd 95 37 d2 f4 a0 5f 34 7b c0 02 ae a3 be e4 be 5c e2 40 75 91 e5 07 0c 57 c3 e7 2d 22 8d c1 95 39 c1 96 e4 Data Ascii: r\2~]/D6b+XUROHK%kik;XJ6"dd1K)o,llie,,I~+J+/tnn,fJ2M,!cey{QF7e(zZQSMJ`vL?j_KUMU5nXdq7_4{\@uW-"9
2024-04-23 14:05:59 UTC	16384	IN	Data Raw: 74 b9 ab 4b 74 98 bb ea ed 2d f3 54 fe 89 1d 9b a5 91 a4 b2 0c 69 29 74 51 4b 27 e8 6e ca ab 44 74 d3 4d 41 b9 59 51 a4 6f 39 da 54 d2 50 d0 e9 fd 9d 50 eb 0f e6 4a d9 1c ed b2 5e 1b 2e 4e 6c 85 40 d7 89 4f fa 1f 11 7e 1f c9 75 e7 a8 17 31 d0 97 a6 e9 62 e3 4e 84 28 e9 61 8d 1f 1e 51 e0 2f 23 14 39 5e 5c e7 26 64 bc 2c b2 1e c3 85 c2 ca c7 2e 32 b2 12 74 b2 02 ca ea 3e 53 ac ae 9c e4 e7 2d c2 af 76 97 34 1b b6 d9 22 57 16 c8 5f 82 bc a9 1e d8 d9 10 df 7b cf 34 bf 93 23 73 38 99 19 10 fd b6 b3 18 dc cf d9 db c0 69 7f 86 ad fd 56 56 56 56 56 56 56 56 e9 65 65 65 65 65 65 6f 92 5a 66 be 4e d5 76 ab b5 5d aa ed 54 34 e2 37 7c 42 d2 69 05 39 2b 64 05 fb 4b d2 83 66 29 b4 d5 4e 5f a7 3a e3 4d 8d 37 4f 85 32 9a 06 23 6b 9e 3a 9e 42 19 05 72 bc b5 3b 20 a3 06 c5 Data Ascii: tKt-Ti)tQK'nDtMAYQo9TPPJ^.Nl@O~u1bN(aQ/#9^\&d,.2t>S-v4"W_{4#s8iVVVVVVVVeeeeeeoZfNv]T47\|Bi9+dKf)N_:M7O2#k:Br;
2024-04-23 14:05:59 UTC	16384	IN	Data Raw: 0a 2e 97 12 7f 31 95 4e 3f 3f ec ae f6 0f 35 77 fa 05 f3 9f b2 b5 19 f5 5b 14 00 fe d5 ae 5f 34 33 d4 d5 77 9c af 98 ad 96 05 a6 1b d6 aa d6 57 5a ad 56 a8 5c 29 59 9d 67 15 b4 56 86 38 28 dd 84 61 2b 7e 1c d6 8a 50 c6 d7 5c f0 95 b9 12 e0 39 42 6c b4 ac 80 3b 37 05 ec 9b 28 34 ea be 28 f4 5f 15 cb 66 af d9 1f 68 df 35 68 ea 9b f7 47 3b 60 a9 9d 78 aa 79 2f 0f 12 b3 46 d6 f4 1e 34 09 c0 8c ae 6d ca 03 47 23 22 c6 e8 7e cb 25 36 82 15 98 cd 02 8e ae 9c f9 a1 ec e9 fd d7 c3 a7 af 35 66 d3 98 90 87 b3 6a 10 d6 12 b6 69 b1 77 1b 08 ec d3 51 91 8a d4 da 54 ba 93 1a de 2a f9 49 89 4d 1d 5b 2e 10 ca c6 42 d1 aa cc 69 5f 0d ab ba d5 dd 6a ee b5 77 5a bb ad 5a 35 58 53 5d ca 3f 75 dd a1 f7 57 14 7e eb fd 2f 42 bf d3 f4 2b fd 3f 45 7c 9e 8b 40 b4 6a d0 2d 1a a1 c0 Data Ascii: .1N??5w[_43wWZV\)YgV8(a+~P\9Bl;7(4(_fh5hG;`xy/F4mG#"~%65fjiwQT*IM[.Bi_jwZZ5XS]?uW~/B+?E\|@j-
2024-04-23 14:05:59 UTC	1024	IN	Data Raw: d5 f5 73 3a 03 c8 27 e7 3e 06 0f d0 90 5d af 6c 52 17 8e 09 b5 3a 98 f1 2a f2 31 01 66 5c df cd 46 1e eb a2 54 0f c8 85 5b 1f 0b 8c f9 ae 61 37 0a f3 2c c4 ac 60 cc f6 45 c8 5f bc 06 97 44 0b 97 06 6a 83 e2 20 d7 2c d2 d7 30 aa b4 f7 17 28 84 ac 38 23 b2 75 01 96 6b 71 70 62 8d dd 53 99 5c 98 8a cd 78 96 3c 65 6f cc d8 a4 0a 66 61 f3 1a 7b 01 ca c1 e6 d5 97 44 b3 07 98 3c cb 7a d2 5c dc 17 59 6f c2 64 2e 3c f3 e6 0e 01 85 ed 16 d8 c5 09 4a e2 96 9d f5 0e c4 86 5d 79 2b 9f b4 38 2f b2 55 88 7e b6 76 7c fd 2f bc a0 86 be da c7 79 07 ae cd b1 73 ee ab 27 23 c5 63 6d 1d 45 76 bd d7 82 af ed 0a 68 f3 03 27 f6 22 ea 54 6b 16 8e e9 75 37 0e b4 3c 55 c2 46 21 9b 13 f3 f2 be 51 23 30 09 69 d3 00 94 48 2b 79 15 b9 fb 4b 16 fa ea 3a 90 de 0f a0 dc 00 52 e5 68 07 27 Data Ascii: s:'>]lR:*1f\FT[a7,`E_Dj ,0(8#ukqpbS\x<eofa{D<z\Yod.<J]y+8/U~v\|/ys'#cmEvh'"Tku7<UF!Q#0iH+yK:Rh'
2024-04-23 14:05:59 UTC	16384	IN	Data Raw: 86 b8 3c 44 ef 13 74 07 ba 0e 6b 7e 66 5d 1d b3 04 ff 00 91 c8 94 4b 86 c7 52 cb 63 52 d8 3a e6 2f 7f b4 bf ec b8 ec d0 c6 07 1e 55 15 67 c6 41 b4 0d 06 93 e6 39 55 3a 6c 82 a1 f3 98 62 8b 7c 04 a7 30 0a 24 33 5b 40 0e 06 6a fb 42 e9 a8 88 86 e7 75 b9 b6 41 cf 51 5c aa e3 ac cc a3 e8 bf 49 99 b0 66 1c 4a 2f 7e 81 cd 62 94 d6 75 11 01 e6 c1 7c c4 77 7a 3b 6f f6 9a f3 2f d7 a8 c8 d7 45 8d e6 2e d5 49 91 d2 4a f4 80 0b e2 ab 51 8a 03 95 75 2f e7 1c 51 dc be c3 89 39 e2 e8 88 4e 99 b8 0d 00 eb 8a 89 c3 f0 26 4c d2 17 28 82 a6 9b ee 55 8a 80 5d cc c6 8d 2a f9 8b 62 ae 35 ea 63 83 60 f5 ed 18 e3 77 2b bc 66 78 d7 89 af 3e 60 eb af 30 d7 cc 4c b8 9c 4b e8 a9 cc b2 f2 5b 2f 41 99 4a 6f 1c 4e 43 9c cc 0f 16 c5 a6 b2 18 68 98 8a b3 70 33 9f ac ec 2d f1 0d af 4c b4 Data Ascii: <Dtk~f]KRcR:/UgA9U:lb\|0$3[@jBuAQ\IfJ/~bu\|wz;o/E.IJQu/Q9N&L(U]*b5c`w+fx>`0LK[/AJoNChp3-L
2024-04-23 14:05:59 UTC	1024	IN	Data Raw: 13 7c 4c f0 40 55 c7 73 29 d0 ec 4b ab 36 9b f4 23 7d 80 52 22 79 9a da 70 42 57 b0 82 f2 86 43 ed b7 50 f3 26 82 d7 ab bf f0 ae 74 64 21 62 a9 3c 47 f6 41 5a 4a 1a 90 60 3b e9 3c 9f c0 88 b1 05 45 0e eb 75 14 a0 6c 16 31 3e f9 1e 97 ac 0a d6 79 83 d6 b5 2b cd f2 66 0f 24 59 65 0d 16 59 06 91 68 20 88 28 05 03 b6 bf a8 26 d0 14 cf 73 0f c6 d9 e6 09 9d 5a 4c e2 f3 10 d6 0b 01 f2 98 aa 9e 77 d4 b8 62 f4 fd a0 b4 e2 da da 8f d6 53 25 86 54 35 10 b0 a1 c4 a0 2f 90 c1 b9 a3 28 f3 4c 20 41 d6 7b 80 c9 44 fc 46 56 90 35 12 bd 66 5a b4 8d c5 ae c0 f8 32 ba 39 0a 7a 49 e2 02 c7 ba 8c c2 e9 06 e1 73 6d 64 a9 40 97 55 4b 52 e2 d7 2b 5d 44 3d 86 be 27 1e c3 70 16 bb 71 94 40 0d 06 2b 16 aa 89 71 30 6a a0 12 98 ba 61 bc 76 9d 90 48 b2 c5 b7 50 4d 68 23 59 9c 10 19 75 Data Ascii: \|L@Us)K6#}R"ypBWCP&td!b<GAZJ`;<Eul1>y+f$YeYh (&sZLwbS%T5/(L A{DFV5fZ29zIsmd@UKR+]D='pq@+q0javHPMh#Yu
2024-04-23 14:06:00 UTC	16384	IN	Data Raw: 97 04 47 68 e6 14 62 20 03 77 28 b2 c0 c9 aa d4 54 d8 b3 ef 01 54 2c db cc ad 1c 85 95 09 6d 26 a0 30 02 5b 7d c5 20 00 e0 f1 1d 0a 2d 79 e5 8c a2 ba c2 e8 6e 0c 2d 86 aa 38 e2 c9 83 10 41 67 88 20 2d 6e ea 62 30 78 b8 20 d8 ad 54 3b 14 1a d3 0c 71 2e 42 5c d4 56 6e 16 52 c7 50 72 64 ac 16 c3 63 4d 59 6a 13 00 e8 a1 57 a5 dc 37 d2 a9 bb 7e 25 5b 0c db 62 5d 0f cf f4 59 78 20 71 62 51 e9 16 c3 75 80 02 71 b6 57 8d ba 0f b1 08 dc 27 50 17 95 b3 dc 84 a9 de 25 0f 46 fd df 33 12 38 61 89 94 04 43 98 8e 7b 88 09 b4 d4 e6 36 4b 5f 88 ae 73 0b c0 ce 6a 2d b2 64 c3 02 50 1d a1 58 e9 2d 93 2f 71 ed bf e2 9a 88 0f 81 38 86 30 ab 42 04 a0 6b 14 de 65 71 3c 17 e2 6f cb b0 1f 6f c4 37 52 91 e8 49 50 29 a5 c7 9d cb 96 7b a0 b5 2d 7a 8a f5 83 84 53 63 ef 2d 31 70 be da Data Ascii: Ghb w(TT,m&0[} -yn-8Ag -nb0x T;q.B\VnRPrdcMYjW7~%[b]Yx qbQuqW'P%F38aC{6K_sj-dPX-/q80Bkeq<oo7RIP){-zSc-1p
2024-04-23 14:06:00 UTC	8971	IN	Data Raw: 43 32 33 ae cb b4 c9 6b fe 39 90 de 91 1e 52 b0 0c c5 38 20 ee 92 30 eb 30 72 06 10 dc 6c d8 cd a6 af 53 11 46 b7 14 e5 b2 f1 16 65 c0 43 46 eb 4b 3e c4 b1 2e fb 5f 89 56 81 cf dc 59 85 77 a1 27 e2 31 19 75 80 2f 21 77 06 1f 3b 79 f4 aa 25 19 4a 58 de fb 9b 80 4d 8f a7 89 51 ab 9a a2 ee 35 01 e4 95 43 fb 4c 73 70 11 ae 65 28 f2 bc 9a e2 31 13 92 b4 7a c4 b2 36 00 08 f5 65 93 2a d6 cb e3 32 85 a5 0c 32 c4 9f 10 ca 79 95 e9 79 2d e3 7d ce 61 bd 56 56 e4 36 2c 1f dc 25 cb 0a b8 0b 62 96 3e db 9a c0 5d 57 48 80 16 06 ef 53 16 11 35 50 29 06 46 cc 44 52 de 7c ca 0b 55 d1 f6 f7 85 49 c0 5d 7e ee 5b b8 80 73 96 b7 08 94 2d 5b bc 7d f8 83 78 02 13 29 eb 04 21 53 9f 58 62 a0 73 4d 54 58 32 74 01 82 37 d5 6c 39 d7 98 a8 1b b2 ee 1d b8 9d 8c e4 45 30 11 31 15 aa 34 Data Ascii: C23k9R8 00rlSFeCFK>._VYw'1u/!w;y%JXMQ5CLspe(1z6e*22yy-}aVV6,%b>]WHS5P)FDR\|UI]~[s-[}x)!SXbsMTX2t7l9E014

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49878	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:05:59 UTC	599	OUT	OPTIONS /sdk-session-manager/v1/register-sdk-session/5c9cd8a6?v=1.0.28 HTTP/1.1 Host: services.zipy.ai Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://web.enable.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:00 UTC	1047	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:00 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close access-control-max-age: 86400 x-uri: /sdk-session-manager/v1/register-sdk-session/5c9cd8a6 access-control-allow-origin: https://web.enable.us timing-allow-origin: https://app.zipy.ai access-control-allow-headers: Access-Control-Allow-Headers, Set-Cookie, cancelToken, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, auth-token access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pAjFnPAcAxZfZfGNM3B0QSZjBfvcZVqnHPHaUQkw6Yfn5%2Blv1ddhBa5mcUfvRHx1TMvCp3acF%2BjSnHs9JfN66EAtKrsD8XevQlfNy0qUjHuRUCph1E%2BgzW3ghvypATizFwE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e69615b441d80-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49879	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:00 UTC	696	OUT	POST /sdk-session-manager/v1/register-sdk-session/5c9cd8a6?v=1.0.28 HTTP/1.1 Host: services.zipy.ai Connection: keep-alive Content-Length: 353 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:00 UTC	353	OUT	Data Raw: 7b 22 65 6e 64 75 73 65 72 5f 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 30 33 64 61 66 62 63 37 2d 32 35 64 36 2d 34 37 34 61 2d 39 31 36 30 2d 32 34 34 62 61 34 33 38 30 61 33 36 2d 31 37 31 33 38 38 31 31 33 31 22 2c 22 75 73 65 72 5f 61 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 69 70 5f 61 64 64 72 65 73 73 22 3a 22 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 22 2c 22 65 6e 64 75 73 65 72 5f 7a 69 70 79 5f 69 64 22 3a 22 22 2c 22 70 72 6f 6a Data Ascii: {"enduser_session_id":"03dafbc7-25d6-474a-9160-244ba4380a36-1713881131","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","ip_address":"","location":"","enduser_zipy_id":"","proj
2024-04-23 14:06:00 UTC	1050	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:00 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-max-age: 86400 x-uri: /sdk-session-manager/v1/register-sdk-session/5c9cd8a6 access-control-allow-origin: https://web.enable.us timing-allow-origin: https://app.zipy.ai access-control-allow-headers: Access-Control-Allow-Headers, Set-Cookie, cancelToken, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, auth-token access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WEkSDlZyzdtl6IMjXv%2BmpD79iNdeqeosJChfeeDnvURs6a0Zy4HWjMfFYkXOQn2uT8us%2Fth5GVGjV%2BQOqVo%2B5z0ApYZBqofiygNM0tlG1Zcl2Z8zmPsyNhycfEM5FqoVqws%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e69650b246750-ATL
2024-04-23 14:06:00 UTC	43	IN	Data Raw: 32 35 0d 0a 7b 22 69 73 5f 62 6c 6f 63 6b 65 64 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 65 64 5f 74 69 6c 6c 22 3a 30 7d 0d 0a Data Ascii: 25{"is_blocked":false,"blocked_till":0}
2024-04-23 14:06:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49880	3.233.159.182	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:00 UTC	940	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=80202178-e1ee-4376-b530-e98d46fe77f0&batch_time=1713881159824 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15679 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:00 UTC	15679	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 33 32 34 36 35 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881132465,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:06:01 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:06:01 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 80202178-e1ee-4376-b530-e98d46fe77f0 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:06:01 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 38 30 32 30 32 31 37 38 2d 65 31 65 65 2d 34 33 37 36 2d 62 35 33 30 2d 65 39 38 64 34 36 66 65 37 37 66 30 22 7d Data Ascii: {"request_id":"80202178-e1ee-4376-b530-e98d46fe77f0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49882	18.165.83.9	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:01 UTC	1068	OUT	GET /protected/organization-994/organization-logo-1713869486?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L29yZ2FuaXphdGlvbi1sb2dvLTE3MTM4Njk0ODYiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3MTY0NzMxNTZ9fX1dfQ__&Signature=d1xx2w9DUk87dEyDNqhbUC1~PTj2MakafHrcklabl1hQyyXwXYKB8U0oXMxSBZNW8Y3sIUWXhuybmAPlKKiSG66xHJ2~66UvXcNC69do9hgkaLaW3L-0SiJgkj319VripRx2cnzcdgeCEvZ~fljo4EWVit8GGanv4iLzy2XXXxiqyU0L8f8kUj90FtlBme5vKgg6rmzW9b6IHe~IMQyN16rFmnYpVa4Rtsx6StVOIE9TPW0KlNHFb-SzD2jv4xFOOA-6Ity-uDeZZNXtDgH8wMUr1JnLv5MzzxH1RKcTa04uTZhH2VYvBrGXfpIjaLqn5avluobBL5sL3Dc2EWzJaQ__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1 Host: dsr-images-us-east-1.prod.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:01 UTC	693	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 10791 Connection: close Date: Tue, 23 Apr 2024 14:06:02 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Apr 2024 10:51:27 GMT ETag: "2a9b0256b9cee811324ea810682e8a81" x-amz-server-side-encryption: AES256 x-amz-meta-filename: protected/organization-994/organization-logo-1713869486 x-amz-version-id: 8jxO3vjhRGmbFE8tDZAK84fgNeZbQ64e Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7bac70c3c5deda2f56c0a3aff53deab0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kY0upX-wb6lnTfi6fzHORCDX0oFBNRMIamlpMDKNpIziJIsjBO9gIg==
2024-04-23 14:06:01 UTC	10791	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 02 00 00 00 4c 5c f6 9c 00 00 29 ee 49 44 41 54 78 9c ec bc 09 98 5d 45 99 37 fe be 55 75 ce b9 6b ef dd e9 bd 3b 9d 34 59 48 c8 be 00 81 2c b2 23 8a b2 cd 38 ca a0 e8 e0 82 8e ce 8c e3 36 2a 23 7f 47 64 c6 5d 1c 15 50 94 f1 cf 4e 58 c4 04 d9 11 b2 43 c8 9e 74 3a e9 ee f4 be 77 df f5 2c 55 f5 7e cf 39 37 69 42 70 44 66 e6 e1 7e f3 7c f7 f7 f4 93 be b9 b7 6e 9d aa fa 55 bd ef ef ad 7a ab 05 11 41 01 f9 03 cb 77 03 fe 5f 47 81 80 3c a3 40 40 9e 51 20 20 cf 28 10 90 67 14 08 c8 33 0a 04 e4 19 05 02 f2 8c 02 01 79 46 81 80 3c a3 40 40 9e 51 20 20 cf 28 10 90 67 14 08 c8 33 0a 04 e4 19 05 02 f2 8c 02 01 79 46 81 80 3c a3 40 40 9e 51 20 20 cf 28 10 90 67 14 08 c8 33 0a 04 e4 19 05 02 f2 Data Ascii: PNGIHDRL\)IDATx]E7Uuk;4YH,#86*#Gd]PNXCt:w,U~97iBpDf~\|nUzAw_G<@@Q (g3yF<@@Q (g3yF<@@Q (g3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49885	172.67.68.84	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:01 UTC	401	OUT	GET /sdk-session-manager/v1/register-sdk-session/5c9cd8a6?v=1.0.28 HTTP/1.1 Host: services.zipy.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:01 UTC	876	IN	HTTP/1.1 500 Internal Server Error Date: Tue, 23 Apr 2024 14:06:01 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-headers: Access-Control-Allow-Headers, Set-Cookie, cancelToken, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, auth-token access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pAwFFhInUMGktj7aO2vwWoTyr2RpS45UhpQdUfrCzBA%2FHzhZmgASSNVIBGxBz4UlPXG1L3okElDT9YgNqWp2O3ShYoyKjXpA8B9TLesBzswVT0jJKawDI1pH2h56vkapS1s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e696aa8076787-ATL
2024-04-23 14:06:01 UTC	354	IN	Data Raw: 31 35 62 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 38 38 31 31 36 31 34 31 34 2c 22 73 74 61 74 75 73 22 3a 22 49 4e 54 45 52 4e 41 4c 5f 53 45 52 56 45 52 5f 45 52 52 4f 52 22 2c 22 72 65 73 70 6f 6e 73 65 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 72 65 73 70 6f 6e 73 65 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 65 72 76 69 63 65 22 3a 22 7a 69 70 79 2d 73 65 72 76 69 63 65 2d 73 64 6b 2d 73 65 73 73 69 6f 6e 2d 6d 61 6e 61 67 65 72 22 2c 22 72 65 73 70 6f 6e 73 65 4f 62 6a 65 63 74 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 46 69 65 6c 64 73 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 22 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 77 65 62 2e 48 74 74 70 52 65 71 75 65 73 74 4d 65 74 68 6f 64 4e 6f 74 53 75 70 70 6f 72 Data Ascii: 15b{"timestamp":1713881161414,"status":"INTERNAL_SERVER_ERROR","responseType":null,"responseDescription":null,"service":"zipy-service-sdk-session-manager","responseObject":null,"errorFields":[{"source":"org.springframework.web.HttpRequestMethodNotSuppor
2024-04-23 14:06:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49884	18.165.83.9	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:01 UTC	1182	OUT	GET /protected/organization-994/reference-116777/cover-1713870628834-ebf4ef86-c3f7-4682-be71-bb8ad0ce9afd.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3JlZmVyZW5jZS0xMTY3NzcvY292ZXItMTcxMzg3MDYyODgzNC1lYmY0ZWY4Ni1jM2Y3LTQ2ODItYmU3MS1iYjhhZDBjZTlhZmQuanBlZyIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcxNTA4MDIzMn19fV19&Signature=jXGmVLn9oehpYXRFIEwC2q1fxbl7rwJX2rYtGpb~EmiDs06nzsL9X-9Yw~QYr61MPMKL2z9aycl0XMevtBd4hbC3qPzQlPf3K2jOEEG4Vulb3nTIAGfKHTO74YDEvt3HPWMK3Z05LS1Mcb8byKcbB~dCTIWNyrK0MEuL~cbEnE8pv3e8TzbKUsO5-UxLk0jMFBaXSukgZLPC7I36mu1EO4FLf5f410w8m~lwV93B~D7PnzaLXYFBYP4c7c0Lg9nTXOWrUbGjMJZ59aoRlDhJoeYfste5JE9me~4yhts-kmAe4sWHkGuA2-bFILw1d7CW1NvlpbACO7U4qTVqk~Emxg__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1 Host: dsr-images-us-east-1.prod.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:01 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/x-www-form-urlencoded Content-Length: 94369 Connection: close Date: Tue, 23 Apr 2024 14:06:02 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Apr 2024 11:10:33 GMT ETag: "ce33cb0245c6cbf42dd5d61936e15d6a" x-amz-server-side-encryption: AES256 x-amz-version-id: Swu.XdZ7.Nu7aOGziL3YjCJhqZMMwEZZ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a97f872e6a14f227f3c3ea78467c0330.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jAX_2_Wo7LMJ4FBU1z0zs2VURxyeIbfF6PGJJABpAwH31JWPHhyjCA==
2024-04-23 14:06:01 UTC	15755	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 02 35 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 11 31 fb bf 1c 66 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((5 "1f
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: c7 72 96 5c 04 8e 32 1d 02 ff 00 a4 d0 7e 5d 2f 9e 9d a4 08 44 c0 e1 13 04 82 36 87 be 9a 17 bf 62 2b 1a 58 0b e5 a7 8a 55 b3 1e d9 89 84 a6 52 c2 c7 cb 4f 14 a5 f4 f1 48 d8 d8 d8 da e8 d8 e7 4b 1b 25 6b 69 e2 6b 3b 58 98 ca 4a 16 36 19 22 64 ad 64 11 31 86 18 cb 1f 4b 0c 8f 92 9e 29 17 6f 16 2c a6 85 8f 6c 6c 69 65 2c 2c 7f 49 be d6 9d f7 7e 2b fc 02 4a 2b 95 8a c0 a0 cb 2f 05 b5 0e c1 fc ab 74 c9 6e bd 6e 2c 98 b2 01 66 b7 4a 32 13 d0 00 4d 2c a7 b6 cd b1 99 ab 21 63 65 79 7b 89 51 f2 e8 d8 14 ae 0c 82 46 37 65 e2 dd 28 dd 7a 5a fa 11 51 53 4d 4a ca 60 9b 76 a6 8f 4c c7 f9 16 bc 3f f6 a8 6a 5f 4b 07 eb 55 4d 55 35 6e a8 90 9b f4 a3 c7 7f 58 64 71 bd 95 37 d2 f4 a0 5f 34 7b c0 02 ae a3 be e4 be 5c e2 40 75 91 e5 07 0c 57 c3 e7 2d 22 8d c1 95 39 c1 96 e4 Data Ascii: r\2~]/D6b+XUROHK%kik;XJ6"dd1K)o,llie,,I~+J+/tnn,fJ2M,!cey{QF7e(zZQSMJ`vL?j_KUMU5nXdq7_4{\@uW-"9
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: 59 f0 05 7c 3c de 25 6c 52 60 f2 c6 fd 86 78 a1 7d 9d e9 c4 e8 74 59 2f 2d ba eb 23 5b 20 07 74 5f cd 6b b4 9a 46 92 7f fa 6a 77 f9 d4 6f 57 f5 52 86 6d e2 51 1a 2a ad 02 40 1d b1 9a 6e 9c 03 9d 21 7c 43 e8 89 eb 34 13 a2 35 03 83 9b db 96 ac ce c1 e7 96 0f 3e 0a 91 e7 65 5a 77 aa f1 f9 93 4c ad b7 c0 e6 a2 98 cc b6 4e 41 c9 6d 38 9f 1c 7a ab 7a 23 2e f2 0a 1a c9 3c 4a 87 55 16 dc d5 21 a3 ce f8 e9 ee 19 e2 80 02 ce 5b a0 77 56 bb 7b d1 78 98 8d 16 46 d3 79 df 30 83 ba 88 76 97 29 b4 c8 02 ff 00 d7 ea b5 0b 50 b5 0b 50 b5 0a c5 53 9d 33 fe c8 28 16 e1 80 e5 81 ba 39 2e 16 8b 4e c0 96 ca cb d4 db c5 7c 37 fa a8 87 81 10 56 46 66 d2 2f ee a1 f3 94 f0 56 15 7f c8 27 39 85 d7 8d 53 23 76 d2 fe 61 c2 5f 97 54 f7 71 32 85 2a 70 d0 37 a9 71 24 f6 ad 39 77 af 66 Data Ascii: Y\|<%lR`x}tY/-#[ t_kFjwoWRmQ@n!\|C45>eZwLNAm8zz#.<JU![wV{xFy0v)PPS3(9.N\|7VFf/V'9S#va_Tq2p7q$9wf
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: b2 e7 9b b9 ec 9b 31 f9 c4 42 12 6a 1f b4 55 be a7 db 25 31 0a 6a 77 cc 40 8a e1 47 12 99 cc 95 5c f6 4d 80 de 88 81 40 1f d3 f1 0f 5d ad e6 10 b4 aa fa c6 d2 9f fe 18 00 00 00 00 45 16 85 0d fb 30 81 a0 c5 42 bd 4a 71 ee a8 36 a6 2e d2 50 55 fb 88 38 8e 51 5c 2e f1 1c 33 d1 93 30 8b 39 9d 15 71 2b 06 1a a1 b8 d7 7f d5 f3 30 06 ac 78 41 2f 33 82 0b 66 b1 3d 2a e3 18 59 f3 2d ed be 20 b9 9c 71 0b 1d e3 8a fc a1 8e d7 04 43 f6 47 de a5 71 28 e1 30 d5 9b 3e f3 5b 5e d5 2e d0 fc 60 97 a0 7f 4e e2 96 ff 00 97 a3 97 04 d3 75 b3 f3 3c 71 14 db 33 77 93 20 7c b8 fb 32 ec 9c 8a fe ee 3e 84 cd b2 69 c9 f7 80 b3 3a a2 a3 35 cb 30 1b cc 28 b7 8b ea 51 71 79 99 e9 50 57 98 db 2f 9b a4 7d dd 7c 78 fd e1 b1 7c b7 6f 10 40 61 6b f6 4e 11 11 e5 fd cc 2c be 68 50 21 8d a0 Data Ascii: 1BjU%1jw@G\M@]E0BJq6.PU8Q\.309q+0xA/3f=*Y- qCGq(0>[^.`Nu<q3w \|2>i:50(QqyPW/}\|x\|o@akN,hP!
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: 01 0d d9 c0 44 11 5b 4b f4 88 37 85 71 68 09 78 86 e1 51 bb e7 a8 aa 0d 47 3e 22 c6 d2 1a ad 4a 9d 53 5e 23 51 04 28 6a 55 01 79 c7 71 0a ba c3 10 87 74 5b 16 18 c3 bb 80 01 7b 10 00 30 ed 5e 63 ed 98 dc 1c b2 b7 43 5d c1 aa c6 3e 05 5b 94 53 25 c7 a0 82 5f 32 b5 4e 68 d2 45 cd 80 a7 68 0d e3 ce e5 58 44 ea 2c d6 e2 59 b1 74 5b 26 1c 03 a5 dc 55 11 36 42 b8 e7 13 8c 07 2f 10 d4 56 ab 1b 89 ac b8 b2 12 63 36 a6 63 28 31 9c c1 b7 cf 7b 81 b3 ba b8 96 0b d4 32 9c a0 a4 b8 4b 83 25 73 0b ea 4d 69 22 98 27 20 51 f6 9d c5 c1 7c 46 f4 cb d0 8d d0 e1 8d 51 16 14 34 dc a6 62 72 66 34 2b 47 88 3d 53 94 e8 20 73 e9 68 8d 1c 68 a3 72 d2 5e 17 51 0e 0a 2f 93 0d e1 0f 2c cb 0b 7a 11 6c 54 34 e7 15 99 9c 01 ad ea 36 f5 8a 11 b2 8b cb 11 97 d6 50 42 4d 18 33 c9 86 8c 14 Data Ascii: D[K7qhxQG>"JS^#Q(jUyqt[{0^cC]>[S%_2NhEhXD,Yt[&U6B/Vc6c(1{2K%sMi"' Q\|FQ4brf4+G=S shhr^Q/,zlT46PBM3
2024-04-23 14:06:01 UTC	13078	IN	Data Raw: a5 f0 63 9c 08 5d b6 07 fa 25 c2 ad e1 5e bf 85 34 8e de dc 35 2f 3c d5 42 8a e6 bd 62 63 84 c0 21 e5 b7 73 8f 05 07 8c db e3 70 c1 53 8c d8 f1 b5 8a 38 17 79 f3 03 40 5f de 67 62 2a 57 bc 53 93 e2 65 d8 f4 c1 ef e2 11 dc 03 74 d6 4f eb cc 52 ce 21 72 ef c0 18 f5 88 fa e6 31 fd 9f 98 da 0b 77 bc ab ba c7 cc a1 75 68 4e db 4f b0 4b 93 c0 70 b6 c9 06 55 90 e3 0c 3d d2 a8 d6 7f fc 20 c3 0c 30 c3 0c 30 c3 0c 30 c3 0c 30 c3 0c 30 c3 0c 30 c3 0c 30 c3 0c 30 d5 f3 f4 dd 4c 1b a3 82 7e df 92 58 14 29 a9 80 2e 9f ac 78 53 58 09 f8 93 14 2c 1a b0 7d fd 48 6a e1 2d 68 28 9e b8 84 72 e2 c1 14 37 9c c4 f3 99 ad ea 5a a4 cc 03 43 10 a5 fa c5 4d e2 fa c6 0b 8b b6 66 d9 65 f9 97 e6 28 22 91 18 b0 ee f3 1e e7 f6 b4 2c 59 0b 07 95 2d b3 97 5c c5 e1 8f 79 a0 b3 d4 8a 0b 22 Data Ascii: c]%^45/<Bbc!spS8y@_gb*WSetOR!r1wuhNOKpU= 00000000L~X).xSX,}Hj-h(r7ZCMfe(",Y-\y"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49881	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:01 UTC	607	OUT	OPTIONS /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1 Host: collector8.zipy.ai Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-encoding,content-type Origin: https://web.enable.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:01 UTC	682	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:01 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close x-uri: / access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZygggsIMN%2F6Oo15811xbZAnm7zdA812qTjCWxAHfTrIBTakcq9pbtV3VIWtGAmcxTrMtZLcMScrhJew2NkE84%2Bg0CrJ%2FTBT1u9f2AVvYKGPCFlGE8MXnWXu3%2Fhyojd1av6dL2Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e696a5e6912d5-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49883	18.165.83.9	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:01 UTC	1160	OUT	GET /protected/organization-994/rooms/banner-1713871695447-ba2af024-f29d-4190-8d75-d25a9e7758c4.jpeg?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kc3ItaW1hZ2VzLXVzLWVhc3QtMS5wcm9kLm1pbmR0aWNrbGUuY29tL3Byb3RlY3RlZC9vcmdhbml6YXRpb24tOTk0L3Jvb21zL2Jhbm5lci0xNzEzODcxNjk1NDQ3LWJhMmFmMDI0LWYyOWQtNDE5MC04ZDc1LWQyNWE5ZTc3NThjNC5qcGVnIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNzE1MDgxNDU2fX19XX0_&Signature=UMff4RXdBkPTKTusbNilyyTncaLD6UXfs0LxknDTYW6rKIMncWGIbquJT4LPMSmptqSMTY1KCtPYO9b-i6anFsO~Wwnz2OuBVbL~TPv3JSGLhS8us4Hp4c5y2lHnUrWklY2ZhauNMWuMohgX2EgMYjC06tTgz7yV3YII5MSG6QZLqkwWiVLDV-kw9cUXS-a4eYp00PpTVTeL4WYZaB-T2hCOGpDnmCxYYnLuKALz3n-fwCVbTtLrekh45z~0XEtUztB-WuB3vYtr8V13oQ~oLcSq5A9IHf~9HZ7uJ9JIu81s1igdADO~9~WKB8PwVbwtRYjy-5i87QDHFjpGIfeuoQ__&Key-Pair-Id=KFSVSK4GDGUMB HTTP/1.1 Host: dsr-images-us-east-1.prod.mindtickle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:01 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/x-www-form-urlencoded Content-Length: 412642 Connection: close Date: Tue, 23 Apr 2024 14:06:02 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Apr 2024 11:28:26 GMT ETag: "d049976a8d6c146e5bfbbeec55c9f66e" x-amz-server-side-encryption: AES256 x-amz-version-id: QSYBJKl9HWS8ucNFBZvfAX5752RrF_Df Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 42da47d5828a8cbe9a05fbe7917a66c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: l-6TTfq25kUYmRdEJIJyv29WO9aMWKZp3nEVykNPIqIJwQzihFGGfw==
2024-04-23 14:06:01 UTC	3198	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-04-23 14:06:01 UTC	245	IN	Data Raw: d1 95 0a aa ae 1e d4 ea 41 e8 e2 ac 51 ec 2c 16 39 dc 27 8b 43 88 43 24 bd 4c 44 17 ad 1e be 47 42 5b 3b bb 04 0c 4d f2 22 ee de 8f 41 6a fa 00 da bf 88 b4 52 f1 68 62 93 49 6a 04 74 6c 79 42 29 25 a2 b0 e5 28 d3 8e 6a 92 51 5e 20 45 d3 a6 f7 84 5f b8 ae 74 d2 6a cb c8 8c eb 54 9f cc c7 22 fa d3 5a fc 0c 95 f0 94 66 9b a8 ea ca 6f 79 67 68 2b 55 58 4a 31 4d 68 61 c5 60 e8 62 97 e9 69 c7 37 29 58 c9 88 e1 d1 71 79 71 58 88 b4 af 1b ce f6 39 b9 78 be 1e 39 a9 d7 55 e2 be 8b dc 0a f8 b7 05 c4 c2 39 b0 92 4a dd 16 e5 1c 16 8e 36 0e a2 ca e7 9d 5a 5a ea 6b a5 da 3c 92 ee f1 94 67 4e 4b 46 da d0 e8 70 da b4 a8 d4 55 a5 2f 52 6b 77 e2 41 9a ae 2a 8c 28 ca 8e 35 d5 a5 09 6f 9a f6 2d c1 71 6c 35 07 18 c6 bf 7b 4e d9 62 af 63 b1 52 18 Data Ascii: AQ,9'CC$LDGB[;M"AjRhbIjtlyB)%(jQ^ E_tjT"Zfoygh+UXJ1Mha`bi7)XqyqX9x9U9J6ZZk<gNKFpU/RkwA*(5o-ql5{NbcR
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: 6c 65 37 1a 90 8d 58 be 47 3a 7c 13 09 7b 53 85 93 5a 27 c8 a8 db 3c 7d 18 e1 dd 58 c6 53 6b e8 25 a9 75 1a f0 c4 c6 32 a7 19 6a af 66 b6 38 d5 38 1d 48 c1 bc 26 22 54 aa 72 b3 d0 c3 0f 97 30 8d c6 b3 72 57 d7 c5 01 ea 2a 42 73 f5 63 2c ae e3 71 b6 8c e2 3e 3b 9a 84 a9 d4 92 c3 55 6a ca 52 46 fc 1e 37 bd a5 1e fa ad 27 65 ac 94 b7 f1 28 d6 e4 a3 bb dc 17 51 d4 c8 92 9d 47 18 c7 94 9e c4 ac 97 93 d9 81 11 31 b8 df 98 30 05 ef 24 a6 d6 c4 53 0d 42 0a 98 a8 52 71 ef 13 4a 4e d7 44 e9 e2 28 55 d2 15 62 da e4 f4 2a 9c 73 35 74 b4 d4 a6 a5 18 b7 7c aa e3 66 9b ed 6d 79 01 cf 8b ab 4b d8 9b 5e 1c 8b a1 8c 7f b5 85 fc 62 5d 9a 69 02 ba 78 8a 75 a4 e3 07 aa 57 d4 b4 a8 43 0e 42 00 00 00 18 08 00 00 00 00 02 e0 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: le7XG:\|{SZ'<}XSk%u2jf88H&"Tr0rWBsc,q>;UjRF7'e(QG10$SBRqJND(Ubs5t\|fmyK^b]ixuWCB
2024-04-23 14:06:01 UTC	1024	IN	Data Raw: 46 88 3d 0e 36 da f5 e3 24 9a 6b 7d df 26 88 cb bb 7b db dc 53 99 7b c8 b6 9e 97 12 d8 5c 71 bd ad 74 28 4f da 8e 85 53 c0 52 9e 90 9d bc d1 0c dc 93 d4 59 a4 9e 8d 9d b1 e5 ca 3c f9 f0 71 e5 f8 85 5e 1d 5a 0a f1 b4 97 81 92 51 71 6e 2d 5a 48 e8 47 11 34 f4 65 58 f7 9d d3 a9 6d 65 1d 4f 4f 1f 27 97 6f 97 f2 78 31 c3 dc 62 7a ee 8a ab 46 2a 29 d9 26 9a 65 fa f3 2a ae bd 4d 3a a3 d0 f0 2c 84 94 ac d3 d0 e9 f0 17 6e 37 83 77 de a2 47 31 24 b6 49 23 7f 05 76 e2 f8 3b 7e f6 3f 99 9c ba 23 e8 72 d2 4c 43 7e d3 f3 11 e7 6c 0c 43 e6 00 02 60 03 01 00 0c 04 30 16 be 01 af 51 80 0b de 16 18 80 02 c1 ef 00 0b 05 92 18 72 00 00 00 00 0b 00 0c 05 c8 5f 10 18 c8 f2 18 00 0c 00 00 41 a7 30 0e 42 5b 5a d7 18 96 ca da 01 cd e3 f4 e3 1e 11 59 c5 7e ca a5 fe 07 cb 66 7d 57 Data Ascii: F=6$k}&{S{\qt(OSRY<q^ZQqn-ZHG4eXmeOO'ox1bzF)&eM:,n7wG1$I#v;~?#rLC~lC`0Qr_A0B[ZY~f}W
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: b5 47 de 54 66 a7 89 ad 39 cd 54 95 a5 06 e2 d5 cd d0 79 a0 a4 f9 a3 35 5c 1d 3a 98 8e fa 2b d7 7a 33 57 e0 40 34 9a b3 b3 5d 1a 28 a9 82 a1 39 66 8c 65 4e 5d 69 ca df 81 a0 00 c6 f0 d5 e3 ec 54 8d 45 d2 4a cc 84 a5 28 7c ed 29 43 c5 6a 8d e1 7f 80 d9 a6 18 ca 33 f6 65 19 79 32 b8 cd ca bd 78 38 b8 aa 6d 24 fa dd 1b 2a 61 a8 d4 d6 54 d2 7d 63 a3 2a 96 16 a4 6e e8 d6 bd f7 8d 45 7f c4 bb 4d 2b 7b 10 71 4f 74 4a 6a ad 3f 9c a2 fe d4 1d d1 4d 6a c9 d0 9a c3 ce 32 ab a2 51 7b ee 5d 9a 5f 4a a5 5a 7e c4 dd ba 17 c3 1b 2d a7 4d 3f 15 a1 9d c6 d7 d2 c2 4f de 06 e9 63 28 c6 9c a7 eb 36 b6 8d b5 31 52 e3 70 75 32 e2 28 3a 69 bb 29 27 b0 ae b4 21 56 31 9a f5 e1 19 2f 14 0d 3a f1 71 9c 14 e0 d4 a2 f6 68 67 1f 0d 52 58 47 fa 1c d2 83 7a d3 6e ff 00 03 ad 1a 91 94 14 Data Ascii: GTf9Ty5\:+z3W@4](9feN]iTEJ(\|)Cj3ey2x8m$aT}cnEM+{qOtJj?Mj2Q{]_JZ~-M?Oc(61Rpu2(:i)'!V1/:qhgRXGzn
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: 98 a4 51 0f d6 4f 43 86 f5 78 3c ba f7 6d fc 6e 79 f8 7e b1 ae fa 9e 83 58 f0 67 7f dd af cc e1 93 71 c7 e6 1c c0 0e 91 9a 06 b7 d8 00 a0 7b e8 30 e9 74 0c 03 90 07 90 5c 03 a8 30 d3 70 e4 b9 00 2d 36 10 c3 5d 00 56 ea 16 7e 68 7e f0 bf 50 20 e1 16 ee d2 b8 b2 b5 b4 9f 93 2c f0 02 08 29 4e 2f 58 e6 5e 00 aa 43 9b 71 7e 24 ed e2 26 af ba 00 5e 01 bf 24 45 d3 5b c5 b8 bf 01 3c e9 f2 97 e0 51 2e 57 33 51 f5 71 4b ad da 2f ef 2d ba 68 cf 06 bd 29 3f 13 35 5d 3c 22 6f 15 65 d1 fe 45 5c 3f 4c 34 7c 1b fc cb f0 1f ac df a2 65 58 2d 28 79 4a 5a 7b cc fe 97 a7 b4 ec bb ff 00 75 54 5f f3 9f e4 8e b9 c8 ec b7 f8 55 4f f5 9f e4 8e b9 ce f6 b0 09 0c 08 13 dc 60 30 10 58 62 00 15 bc 06 00 2b 06 a3 00 10 6e 86 27 14 c0 19 09 38 dd 6a 4a d6 23 27 6b 3b 2d 36 0a c7 c4 64 Data Ascii: QOCx<mny~Xgq{0t\0p-6]V~h~P ,)N/X^Cq~$&^$E[<Q.W3QqK/-h)?5]<"oeE\?L4\|eX-(yJZ{uT_UO`0Xb+n'8jJ#'k;-6d
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: 62 18 40 c4 0c 08 a0 62 18 40 02 18 01 2a 5f 38 88 92 a7 f3 88 15 aa 42 0a ae 59 5b 5a bb 68 11 8c 95 38 4a 6e 39 a4 af 65 c8 88 34 41 70 02 80 07 6b 2b 8b c7 de 00 5e b6 d0 a3 c4 bd 6d b7 22 50 d2 07 be ac 36 b3 07 b9 90 58 06 f5 d0 2e 02 b7 40 b0 00 07 2d 01 ea 0b 6d 43 60 a3 65 70 f0 0b f8 ea 83 96 80 01 d4 2e 3f 20 10 3d 16 ac 49 0d 10 2d d8 d0 af cc 76 f1 b8 00 73 07 e0 17 00 d9 ee 1e 62 0d 00 00 03 98 10 aa 9f 76 d2 e8 60 69 9d 19 3b 41 b6 b5 48 e7 c9 dd b6 66 ba e0 84 b6 d4 4a f6 1c b6 12 61 bf d3 b1 16 99 21 19 ad 45 d8 5a 13 a8 ef 7b 44 e8 f7 34 95 b9 99 f0 5f 34 fc cd 3b 9f 37 92 ff 00 67 db f8 f8 49 84 3a 70 84 67 78 ab 34 6c a7 18 b9 66 92 d4 c3 19 a5 53 d6 69 68 6d a2 db 8a 6f 99 87 a2 34 59 58 8c d4 75 bd ec 4a f6 d3 9f 89 54 c8 aa e5 18 3e Data Ascii: b@b@*_8BY[Zh8Jn9e4Apk+^m"P6X.@-mC`ep.? =I-vsbv`i;AHfJa!EZ{D4_4;7gI:pgx4lfSihmo4YXuJT>
2024-04-23 14:06:01 UTC	9752	IN	Data Raw: 51 7f 35 cc fc c7 13 78 f2 65 3a ac 65 86 37 b8 d1 2c 76 29 b6 9e 26 a3 5e 65 12 93 9b bc a4 e5 f6 9d c8 bd d8 85 e4 ca f7 4c 78 f1 9d 44 e3 ac 97 99 19 6f a9 28 fb 4b cc 8b f6 9d cc de 9a 9d 8d 80 43 32 d1 0c 00 04 1e 40 04 00 c0 0a 01 80 e2 af 6d 35 7c 91 ac 71 b6 fa 66 dd 1c 23 29 49 46 2a ed e8 92 3d 27 0d c0 43 05 45 ce a3 5d eb 57 94 be aa 2a e1 5c 3d 61 e0 ab 55 57 aa d6 89 fd 14 60 ed af 12 78 2e 13 e8 f0 95 ab 62 9d 9d 9e aa 2b 73 ea f0 70 f8 cd fe be 3f cb f9 3e 77 c3 1e 9e 7f b5 bd a3 7c 42 ab c2 61 65 6c 2c 1e af eb be be 47 95 6c 72 7a 91 67 d2 c3 1d 3e 78 1c 5d 88 8d 1d 11 f4 2e c2 71 5f 48 c2 4f 87 55 95 e7 4b d6 a7 7e 71 e6 bf f7 a9 3e 23 84 f4 4c 64 a0 bd 89 7a d0 7e 1d 0f 0f c2 b1 f5 38 76 3e 8e 26 93 79 a9 bb b5 d5 73 47 d3 f1 f0 a7 c5 Data Ascii: Q5xe:e7,v)&^eLxDo(KC2@m5\|qf#)IF='CE]W\=aUW`x.b+sp?>w\|Bael,Glrzg>x].q_HOUK~q>#Ldz~8v>&ysG
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: ce dd fe cf 53 b5 1a d5 2d bb 48 eb 47 da 31 70 78 64 e1 d0 e4 e5 a9 ba 3e d2 f3 3f 37 f2 32 f2 e4 af d2 7c 7c 7c 78 e2 8c 75 4e eb 05 5a 7b 68 d2 f3 3c 84 b7 3d 2f 1c a9 97 03 97 9c e4 8f 32 f7 3e a7 c0 c7 58 ed f3 be 7e 5f da 44 5e e4 9f b2 88 f3 26 f6 5e 47 d0 7c d4 56 e7 a8 e0 b7 f9 32 17 ea ec 79 88 ee 7a ec 05 3e e7 01 46 0f 7b 5d 9f 2f f9 0b fd 64 7d 2f 81 3f b5 ab ca 31 f3 54 f0 15 a5 fc 36 f8 97 9c ee 3b 55 53 c0 e4 be b3 6b 43 e6 7c 7c 7c b9 23 ea 73 65 e3 85 af 35 22 23 62 3f 51 8f 4f cd 65 77 40 00 1a 64 06 ec 06 4a 36 f0 8a 7d e7 10 a4 b9 2d 7e 07 aa 7c ce 07 67 a9 e6 c5 4e 6d 69 18 fe 67 7e e7 e7 be 7e 5b e4 d3 ef 7c 1c 75 c7 b0 bf 13 cc 71 ba 9d e7 10 a9 fc 3a 1e 9f ab f0 3c 76 2e a7 7b 89 a9 37 f4 a4 d9 d7 f8 ec 3f b5 ac fc fc b5 86 94 80 Data Ascii: S-HG1pxd>?72\|\|\|xuNZ{h<=/2>X~_D^&^G\|V2yz>F{]/d}/?1T6;USkC\|\|\|#se5"#b?QOew@dJ6}-~\|gNmig~~[\|uq:<v.{7?
2024-04-23 14:06:01 UTC	16384	IN	Data Raw: fb f6 7f 62 3f 91 e6 d9 e8 e3 e9 28 34 60 1b f4 a8 7b cc c6 8c 13 fe f3 0e b7 3a 5e 99 75 53 cb 56 59 ba 1d 9e 29 a5 1c 32 ea 9b fc 8e 3a d6 ab e9 6d 8e bf 17 8a 74 e8 27 7b 25 c8 e1 7b 58 e7 ed e6 3d 8a d4 64 97 ab 37 ef d4 69 d4 4e f2 8a 6b aa 66 84 c1 11 55 21 f4 af 1f 34 49 34 f6 69 95 07 2d 07 b6 af 5b 05 9e e8 00 35 b0 03 bd b5 d0 16 b7 01 c6 fd ed f9 5a c7 42 9c bf b8 43 4d ab 26 60 6d 29 41 75 d0 d5 19 a5 85 49 b7 ad 4d 0c 64 b1 ed 25 ed 31 0d ef f0 11 cd a0 00 00 00 00 00 39 7c cd 4f b2 c4 3f d9 cf ec b0 3e 3f 5d 7e 9a a2 33 de c6 8c 4f eb 15 3c d9 9a 4b 53 d3 87 4c d4 f3 2b 1d ea 37 ee 69 2d 16 8a ec f3 a7 a2 c2 eb 42 97 8c 51 72 66 b7 52 93 8b 9d f4 cd 0b 15 bd 37 14 63 95 ca d7 d5 75 23 eb a7 7c c9 f8 34 72 69 3f 30 e7 ab 21 9e 7c e0 df 90 d5 Data Ascii: b?(4`{:^uSVY)2:mt'{%{X=d7iNkfU!4I4i-[5ZBCM&`m)AuIMd%19\|O?>?]~3O<KSL+7i-BQrfR7cu#\|4ri?0!\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49887	3.233.159.182	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:01 UTC	939	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=0d3ebc9a-460f-4de4-b5af-d9dbfa9faa62&batch_time=1713881160604 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 2064 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:01 UTC	2064	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 35 38 34 32 34 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881158424,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:06:01 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:06:01 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 0d3ebc9a-460f-4de4-b5af-d9dbfa9faa62 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:06:01 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 30 64 33 65 62 63 39 61 2d 34 36 30 66 2d 34 64 65 34 2d 62 35 61 66 2d 64 39 64 62 66 61 39 66 61 61 36 32 22 7d Data Ascii: {"request_id":"0d3ebc9a-460f-4de4-b5af-d9dbfa9faa62"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49888	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:01 UTC	714	OUT	POST /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1 Host: collector8.zipy.ai Connection: keep-alive Content-Length: 245183 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 7b 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 30 3a 36 30 33 66 31 31 37 62 3a 38 63 34 30 2d 34 38 61 63 2d 38 35 39 34 2d 39 37 35 62 36 65 66 30 39 62 65 61 2d 31 37 31 33 38 38 31 31 33 31 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 41 72 75 5a 7e 45 6d 30 57 4e 6c 41 6e 62 79 7a 56 6d 77 4d 7e 47 52 30 63 4d 62 36 58 6c 39 72 22 2c 22 69 73 5f 6e 65 77 5f 70 61 72 74 79 22 3a 74 72 75 65 2c 22 69 73 5f 6e 65 77 5f 73 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 63 6c 69 65 6e 74 5f 74 69 6d 65 73 74 61 6d 70 5f 69 73 6f 22 3a 22 32 30 32 34 2d 30 34 2d 32 33 54 31 34 3a 30 36 3a 30 30 2e 31 38 34 5a 22 2c 22 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 4d 79 45 76 65 6e 74 52 65 63 6f 72 64 22 2c 22 70 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 65 76 65 6e 74 44 61 Data Ascii: {"session_id":"0:603f117b:8c40-48ac-8594-975b6ef09bea-1713881131","event_id":"AruZ~Em0WNlAnbyzVmwM~GR0cMb6Xl9r","is_new_party":true,"is_new_session":true,"client_timestamp_iso":"2024-04-23T14:06:00.184Z","event_type":"MyEventRecord","parameters":{"eventDa
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 30 2c 5c 5c 5c 22 66 65 74 63 68 53 74 61 72 74 5c 5c 5c 22 3a 32 33 35 34 33 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 5c 5c 5c 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 5c 5c 5c 22 3a 30 2c 5c 5c 5c 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 5c 5c 5c 22 3a 30 2c 5c 5c 5c 22 63 6f 6e 6e 65 63 74 53 74 61 72 74 5c 5c 5c 22 3a 30 2c 5c 5c 5c 22 63 6f 6e 6e 65 63 74 45 6e 64 5c 5c 5c 22 3a 30 2c 5c 5c 5c 22 73 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 5c 5c 22 3a 30 2c 5c 5c 5c 22 72 65 71 75 65 73 74 53 74 61 72 74 5c 5c 5c 22 3a 30 2c 5c 5c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 5c 5c 22 3a 30 2c 5c 5c 5c 22 72 65 73 70 6f 6e 73 65 45 6e 64 5c 5c 5c 22 3a 32 37 35 33 36 2e 36 30 30 30 30 30 30 30 30 30 30 36 Data Ascii: 0,\\\"fetchStart\\\":23543.100000000006,\\\"domainLookupStart\\\":0,\\\"domainLookupEnd\\\":0,\\\"connectStart\\\":0,\\\"connectEnd\\\":0,\\\"secureConnectionStart\\\":0,\\\"requestStart\\\":0,\\\"responseStart\\\":0,\\\"responseEnd\\\":27536.600000000006
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 72 4c 20 3b 59 37 c3 8f c3 96 c2 ba c3 bb 6d 5c 5c 75 30 30 31 61 5c 5c 75 30 30 31 37 5c 5c 75 30 30 31 35 c2 84 6a c3 91 37 c3 b3 c2 92 2a 7a 5c 22 2c 5c 22 74 69 6d 65 5c 22 3a 31 37 31 33 38 38 31 31 33 39 36 37 30 2c 5c 22 74 79 70 65 5c 22 3a 31 31 2c 5c 22 72 72 77 65 62 45 76 65 6e 74 5c 22 3a 33 2c 5c 22 69 73 45 72 72 6f 72 5c 22 3a 66 61 6c 73 65 2c 5c 22 6e 61 76 69 67 61 74 65 64 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 77 65 62 2e 65 6e 61 62 6c 65 2e 75 73 2f 72 6f 6f 6d 2f 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 34 2d 35 30 65 33 64 39 31 62 61 64 65 36 5c 22 7d 2c 7b 5c 22 64 61 74 61 5c 22 3a 5c 22 7b 5c 5c 5c 22 69 6e 69 74 69 61 74 6f 72 54 79 70 65 5c 5c 5c 22 3a 5c 5c 5c 22 73 63 72 69 70 74 5c 5c 5c Data Ascii: rL ;Y7m\\u001a\\u0017\\u0015j7*z\",\"time\":1713881139670,\"type\":11,\"rrwebEvent\":3,\"isError\":false,\"navigatedUrl\":\"https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6\"},{\"data\":\"{\\\"initiatorType\\\":\\\"script\\\
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 83 7b 53 c2 b9 38 4b 5c 5c 5c 5c c3 ab 5c 5c 74 5c 5c 72 c3 89 65 c3 b9 c3 aa c3 83 c2 83 27 c2 83 30 64 c2 b6 c3 bd c2 a8 78 7f c2 86 c3 bb 5c 5c 75 30 30 31 38 5c 5c 6e 51 c2 8a c2 ba c2 98 c3 80 74 27 c2 bb 2c 44 c2 93 c2 9d 69 c2 bc 56 30 2a c2 a1 c3 af c3 b3 4c 2a 72 5c 22 2c 5c 22 74 69 6d 65 5c 22 3a 31 37 31 33 38 38 31 31 34 33 35 31 33 2c 5c 22 74 79 70 65 5c 22 3a 31 31 2c 5c 22 72 72 77 65 62 45 76 65 6e 74 5c 22 3a 33 2c 5c 22 69 73 45 72 72 6f 72 5c 22 3a 66 61 6c 73 65 2c 5c 22 6e 61 76 69 67 61 74 65 64 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 77 65 62 2e 65 6e 61 62 6c 65 2e 75 73 2f 72 6f 6f 6d 2f 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 34 2d 35 30 65 33 64 39 31 62 61 64 65 36 5c 22 7d 2c 7b 5c 22 64 61 Data Ascii: {S8K\\\\\\t\\re'0dx\\u0018\\nQt',DiV0Lr\",\"time\":1713881143513,\"type\":11,\"rrwebEvent\":3,\"isError\":false,\"navigatedUrl\":\"https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6\"},{\"da
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 30 30 31 35 c3 af c3 8f 70 5c 5c 75 30 30 31 66 43 21 4a 51 c2 8e 5c 5c 74 64 c2 9d c2 9d c3 96 c3 95 c3 9a 79 71 6e 5c 5c 5c 5c 54 5c 5c 75 30 30 31 30 c2 aa 45 c3 bf 5c 5c 75 30 30 30 33 c3 b4 c2 b2 2a 7f 5c 22 2c 5c 22 74 69 6d 65 5c 22 3a 31 37 31 33 38 38 31 31 34 36 37 37 30 2c 5c 22 74 79 70 65 5c 22 3a 31 31 2c 5c 22 72 72 77 65 62 45 76 65 6e 74 5c 22 3a 33 2c 5c 22 69 73 45 72 72 6f 72 5c 22 3a 66 61 6c 73 65 2c 5c 22 6e 61 76 69 67 61 74 65 64 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 77 65 62 2e 65 6e 61 62 6c 65 2e 75 73 2f 72 6f 6f 6d 2f 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 34 2d 35 30 65 33 64 39 31 62 61 64 65 36 5c 22 7d 2c 7b 5c 22 64 61 74 61 5c 22 3a 5c 22 78 c2 9c 25 c2 8c 41 5c 5c 6e c3 82 30 5c 5c Data Ascii: 0015p\\u001fC!JQ\\tdyqn\\\\T\\u0010E\\u0003*\",\"time\":1713881146770,\"type\":11,\"rrwebEvent\":3,\"isError\":false,\"navigatedUrl\":\"https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6\"},{\"data\":\"x%A\\n0\\
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 3a 38 2c 5c 22 72 72 77 65 62 45 76 65 6e 74 5c 22 3a 33 2c 5c 22 69 73 45 72 72 6f 72 5c 22 3a 66 61 6c 73 65 2c 5c 22 6e 61 76 69 67 61 74 65 64 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 77 65 62 2e 65 6e 61 62 6c 65 2e 75 73 2f 72 6f 6f 6d 2f 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 34 2d 35 30 65 33 64 39 31 62 61 64 65 36 5c 22 7d 2c 7b 5c 22 64 61 74 61 5c 22 3a 5c 22 78 c2 9c 55 c2 8e c3 8b 5c 5c 6e c3 82 30 5c 5c 75 30 30 31 34 44 7f 45 5c 5c 75 30 30 30 36 c3 9c 45 c3 89 c2 b5 5c 5c 72 c2 ad c2 b7 5c 5c 75 30 30 31 62 c3 bf 43 5c 5c 5c 5c 5c 5c 5c 5c c2 9a 5c 5c 62 41 c3 bb c2 a0 4d c2 8b 21 c3 a4 c3 9f c3 8d 52 c2 97 c3 b3 60 c3 8e 24 c2 84 38 3b 70 c2 a5 60 25 5c 5c 62 38 61 c2 9d c2 b6 c2 a5 2f 56 c2 ab c3 a0 2d Data Ascii: :8,\"rrwebEvent\":3,\"isError\":false,\"navigatedUrl\":\"https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6\"},{\"data\":\"xU\\n0\\u0014DE\\u0006E\\r\\u001bC\\\\\\\\\\bAM!R`$8;p`%\\b8a/V-
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 2d c2 a5 c3 90 c3 97 73 c3 af 5c 5c 5c 5c c3 a6 64 c2 88 c3 b3 c2 80 60 56 5c 5c 75 30 30 30 32 c2 9c c2 8d 5c 5c 75 30 30 31 36 4c 5c 5c 75 30 30 30 36 c3 ae 4f 61 53 51 2b c2 80 5c 5c 75 30 30 31 63 c2 98 c2 b5 5c 5c 75 30 30 30 30 c3 ab 5c 5c 75 30 30 31 63 c2 83 c3 b9 c3 8a 5c 5c 75 30 30 31 30 4e c2 87 5c 5c 75 30 30 31 61 c3 80 c2 a7 47 47 c3 b6 c3 a1 c3 89 c3 93 51 4e c3 a4 c3 a2 c2 8f 79 55 6a 48 c3 8f c3 b9 65 c3 83 2c c3 b7 34 c3 8f c2 bb c2 98 c3 a5 c2 84 c3 9d c2 9e c2 a2 c3 9c 5c 5c 75 30 30 31 65 30 c3 89 c3 8e 32 c2 b1 c3 91 4a 3d 7e 48 c3 8f 67 36 5c 5c 75 30 30 30 34 c3 9c 62 5c 5c 62 c3 a8 24 c3 93 2f c2 9e c3 83 c2 bb c3 b2 65 c2 a4 c3 ab c3 93 72 64 c3 94 5c 5c 75 30 30 31 35 2d c3 95 5d c3 a8 c2 a7 7f 76 c3 9d c3 ac c2 99 5c 5c 5c 22 Data Ascii: -s\\\\d`V\\u0002\\u0016L\\u0006OaSQ+\\u001c\\u0000\\u001c\\u0010N\\u001aGGQNyUjHe,4\\u001e02J=~Hg6\\u0004b\\b$/erd\\u0015-]v\\\"
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: c2 86 c2 99 c2 a6 5c 5c 75 30 30 31 35 28 c2 b1 c2 ba c2 a2 7b c3 b5 6f c3 8f c3 95 5c 5c 75 30 30 30 66 c2 8f c3 ac c3 b0 c2 92 c3 ba 27 7e c3 88 58 c3 9d 71 43 c3 8a 49 63 c2 85 c3 bb c2 8a 7d c2 96 2b c2 ac c2 a5 c2 b4 5e 6a 5c 5c 66 c2 8e c2 aa c2 94 c3 be c3 ba c2 9d c3 b5 5c 5c 75 30 30 31 61 61 5c 5c 75 30 30 31 63 c2 9e 53 5c 5c 75 30 30 31 39 3b 33 c2 be c2 95 c2 8a c2 ba 44 c3 a4 c3 bb 5a c3 89 5c 5c 5c 5c 5c 5c 75 30 30 31 33 55 c2 ac 5b 3e c2 a7 53 29 51 c2 96 49 c3 a1 c2 b5 36 6a c2 b8 c2 b2 79 74 6b c2 9f c3 ba c2 b9 46 5c 5c 75 30 30 31 64 c2 ae c3 91 5c 5c 75 30 30 31 35 5c 5c 5c 5c 49 2f c3 97 c2 86 5c 5c 75 30 30 30 32 c2 ac 5c 5c 75 30 30 31 36 c2 9a c3 8e 61 58 58 c2 ab 4c 5c 5c 75 30 30 31 32 5c 5c 75 30 30 30 34 c3 8b c3 a5 72 50 32 Data Ascii: \\u0015({o\\u000f'~XqCIc}+^j\\f\\u001aa\\u001cS\\u0019;3DZ\\\\\\u0013U[>S)QI6jytkF\\u001d\\u0015\\\\I/\\u0002\\u0016aXXL\\u0012\\u0004rP2
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 30 30 33 c3 ba 60 36 3e 5c 22 2c 5c 22 74 69 6d 65 5c 22 3a 31 37 31 33 38 38 31 31 35 38 30 35 35 2c 5c 22 74 79 70 65 5c 22 3a 38 2c 5c 22 72 72 77 65 62 45 76 65 6e 74 5c 22 3a 33 2c 5c 22 69 73 45 72 72 6f 72 5c 22 3a 66 61 6c 73 65 2c 5c 22 6e 61 76 69 67 61 74 65 64 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 77 65 62 2e 65 6e 61 62 6c 65 2e 75 73 2f 72 6f 6f 6d 2f 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 34 2d 35 30 65 33 64 39 31 62 61 64 65 36 5c 22 7d 2c 7b 5c 22 64 61 74 61 5c 22 3a 5c 22 78 c2 9c 6d c3 8d c2 bd 5c 5c 75 30 30 30 65 c3 82 20 5c 5c 75 30 30 31 34 c2 86 c3 a1 5b 31 c3 9f 5c 5c 66 46 c3 92 c3 b4 27 c2 b8 78 5c 5c 75 30 30 31 66 c3 86 5c 5c 75 30 30 30 31 39 5c 5c 66 68 69 5c 5c 75 30 30 31 62 38 c2 ad Data Ascii: 003`6>\",\"time\":1713881158055,\"type\":8,\"rrwebEvent\":3,\"isError\":false,\"navigatedUrl\":\"https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6\"},{\"data\":\"xm\\u000e \\u0014[1\\fF'x\\u001f\\u00019\\fhi\\u001b8
2024-04-23 14:06:01 UTC	16384	OUT	Data Raw: 61 c2 a2 6f 20 c2 b5 4e 5c 5c 75 30 30 31 30 c3 97 c2 8c c2 b8 4c 35 c3 80 41 c2 a5 c3 94 c2 aa c3 be c3 85 c3 95 3b 3b 5c 5c 75 30 30 31 39 47 3b c2 b7 c3 a4 c2 83 c3 a8 c2 8e 61 c2 bb c3 ac c3 bf c3 9d 5c 5c 75 30 30 31 33 79 c3 b7 47 c2 93 79 c2 90 c3 a8 4e 3f c2 88 76 7c c3 ae 52 50 c3 8b 66 6d 36 5c 5c 62 c3 86 78 c2 b9 c2 95 5c 5c 75 30 30 30 36 64 c2 9d 49 24 5d c2 a8 74 66 7c 5c 5c 75 30 30 31 38 5c 5c 75 30 30 31 38 c3 ab c3 ab c3 95 55 6b c2 9d c2 b0 32 c2 94 2f c3 90 c2 b4 3c c2 97 5c 22 2c 5c 22 74 69 6d 65 5c 22 3a 31 37 31 33 38 38 31 31 35 38 31 31 38 2c 5c 22 74 79 70 65 5c 22 3a 38 2c 5c 22 72 72 77 65 62 45 76 65 6e 74 5c 22 3a 33 2c 5c 22 69 73 45 72 72 6f 72 5c 22 3a 66 61 6c 73 65 2c 5c 22 6e 61 76 69 67 61 74 65 64 55 72 6c 5c 22 3a Data Ascii: ao N\\u0010L5A;;\\u0019G;a\\u0013yGyN?v\|RPfm6\\bx\\u0006dI$]tf\|\\u0018\\u0018Uk2/<\",\"time\":1713881158118,\"type\":8,\"rrwebEvent\":3,\"isError\":false,\"navigatedUrl\":
2024-04-23 14:06:02 UTC	642	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:02 GMT Content-Length: 0 Connection: close x-uri: / access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Xr73RCbRu4RtjcyViFra5XCKeqRz6WjEX2a8EwrN9QZauckTDSedj%2BbZdq%2BgcjiYBA3%2FLb4cw3SC6LBHNYxNxmsAb2YGQn6KRrzp5EfDT8%2BIpEgkNhkF9InyIqHZalL5oLfOg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e696caee51883-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49889	35.190.25.25	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:02 UTC	693	OUT	POST /track/?verbose=1&ip=1&_=1713881161435 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 2254 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:02 UTC	2254	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 64 65 61 6c 25 32 30 72 6f 6f 6d 25 32 30 76 69 65 77 65 64 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 65 62 2e 65 6e 61 62 6c 65 2e 75 73 25 32 46 72 6f 6f 6d 25 32 46 33 36 61 38 66 36 36 35 2d 30 64 34 32 2d 34 38 36 32 2d 61 35 32 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22deal%20room%20viewed%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fweb.enable.us%2Froom%2F36a8f665-0d42-4862-a52
2024-04-23 14:06:02 UTC	578	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://web.enable.us access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 14:06:02 GMT Content-Length: 25 x-envoy-upstream-service-time: 11 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 14:06:02 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49890	107.178.240.159	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:02 UTC	380	OUT	GET /track/?verbose=1&ip=1&_=1713881161435 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:02 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 23 Apr 2024 14:06:02 GMT Content-Length: 45 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-23 14:06:02 UTC	45	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 64 61 74 61 2c 20 6d 69 73 73 69 6e 67 20 6f 72 20 65 6d 70 74 79 22 2c 22 73 74 61 74 75 73 22 3a 30 7d Data Ascii: {"error":"data, missing or empty","status":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49891	172.67.68.84	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:02 UTC	392	OUT	GET /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1 Host: collector8.zipy.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:03 UTC	669	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 23 Apr 2024 14:06:03 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close allow: POST access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sZ5iYOS9UuLgShPTSH3JAOF7Lc14KFlvhkrDCJo75pcg4BUKYbXQpXub2acdGxFBVGV8hgu2tQ05YRHaP%2FL%2FS8siaU8FcmQcS649r67DgqNt%2BoStl1NNl3MjO2DYquy30Tl5ug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e6974deac12f1-ATL
2024-04-23 14:06:03 UTC	104	IN	Data Raw: 36 32 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 32 33 54 31 34 3a 30 36 3a 30 33 2e 30 34 38 2b 30 30 3a 30 30 22 2c 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 2c 22 70 61 74 68 22 3a 22 2f 22 7d 0d 0a Data Ascii: 62{"timestamp":"2024-04-23T14:06:03.048+00:00","status":405,"error":"Method Not Allowed","path":"/"}
2024-04-23 14:06:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49892	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:03 UTC	712	OUT	POST /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1 Host: collector8.zipy.ai Connection: keep-alive Content-Length: 5828 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:03 UTC	5828	OUT	Data Raw: 7b 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 30 3a 36 30 33 66 31 31 37 62 3a 38 63 34 30 2d 34 38 61 63 2d 38 35 39 34 2d 39 37 35 62 36 65 66 30 39 62 65 61 2d 31 37 31 33 38 38 31 31 33 31 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 41 72 75 5a 7e 45 6d 30 57 4e 6c 41 6e 62 79 7a 56 6d 77 4d 7e 47 52 30 63 4d 62 36 58 6c 39 72 22 2c 22 69 73 5f 6e 65 77 5f 70 61 72 74 79 22 3a 66 61 6c 73 65 2c 22 69 73 5f 6e 65 77 5f 73 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 74 69 6d 65 73 74 61 6d 70 5f 69 73 6f 22 3a 22 32 30 32 34 2d 30 34 2d 32 33 54 31 34 3a 30 36 3a 30 32 2e 39 35 36 5a 22 2c 22 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 4d 79 45 76 65 6e 74 52 65 63 6f 72 64 22 2c 22 70 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 65 76 65 6e 74 Data Ascii: {"session_id":"0:603f117b:8c40-48ac-8594-975b6ef09bea-1713881131","event_id":"AruZ~Em0WNlAnbyzVmwM~GR0cMb6Xl9r","is_new_party":false,"is_new_session":false,"client_timestamp_iso":"2024-04-23T14:06:02.956Z","event_type":"MyEventRecord","parameters":{"event
2024-04-23 14:06:03 UTC	640	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:03 GMT Content-Length: 0 Connection: close x-uri: / access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XVnuXnEAkRFkUkcyvaOoovXa4s6VI%2FbCjxhZS8oBAq6QKgLf4c0oNH6jUJR%2B4ysixwuEQ89WwudNmhOvTdMReo6HzvMyFWEx2zPJ%2FyEiLBu4ALaRCEq1YldTJfz75Z0WFxRenQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e69797999b088-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49893	172.67.68.84	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:04 UTC	392	OUT	GET /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1 Host: collector8.zipy.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:04 UTC	677	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 23 Apr 2024 14:06:04 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close allow: POST access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hUc4xc3Z9dgmYC%2FopHIiFhJHDGFBCH0FrvGs1KR90OB%2FNyL2yRkJnP%2FpNYArVwX6Uf8YI%2BJ4%2F1qgCH6eC657G4URtuZ3Pslabag2vo02WP7zvp1Z%2FhmrIwqAjO1nccaB%2BdvfFQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e697d7fe97b90-ATL
2024-04-23 14:06:04 UTC	104	IN	Data Raw: 36 32 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 32 33 54 31 34 3a 30 36 3a 30 34 2e 34 34 31 2b 30 30 3a 30 30 22 2c 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 2c 22 70 61 74 68 22 3a 22 2f 22 7d 0d 0a Data Ascii: 62{"timestamp":"2024-04-23T14:06:04.441+00:00","status":405,"error":"Method Not Allowed","path":"/"}
2024-04-23 14:06:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49894	104.26.6.49	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:05 UTC	712	OUT	POST /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1 Host: collector8.zipy.ai Connection: keep-alive Content-Length: 1716 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:05 UTC	1716	OUT	Data Raw: 7b 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 30 3a 36 30 33 66 31 31 37 62 3a 38 63 34 30 2d 34 38 61 63 2d 38 35 39 34 2d 39 37 35 62 36 65 66 30 39 62 65 61 2d 31 37 31 33 38 38 31 31 33 31 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 41 72 75 5a 7e 45 6d 30 57 4e 6c 41 6e 62 79 7a 56 6d 77 4d 7e 47 52 30 63 4d 62 36 58 6c 39 72 22 2c 22 69 73 5f 6e 65 77 5f 70 61 72 74 79 22 3a 66 61 6c 73 65 2c 22 69 73 5f 6e 65 77 5f 73 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 74 69 6d 65 73 74 61 6d 70 5f 69 73 6f 22 3a 22 32 30 32 34 2d 30 34 2d 32 33 54 31 34 3a 30 36 3a 30 34 2e 34 35 36 5a 22 2c 22 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 4d 79 45 76 65 6e 74 52 65 63 6f 72 64 22 2c 22 70 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 65 76 65 6e 74 Data Ascii: {"session_id":"0:603f117b:8c40-48ac-8594-975b6ef09bea-1713881131","event_id":"AruZ~Em0WNlAnbyzVmwM~GR0cMb6Xl9r","is_new_party":false,"is_new_session":false,"client_timestamp_iso":"2024-04-23T14:06:04.456Z","event_type":"MyEventRecord","parameters":{"event
2024-04-23 14:06:05 UTC	640	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:05 GMT Content-Length: 0 Connection: close x-uri: / access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cbH3u2zRqGJtmDVcGGZulPzK1l3Y5Rt2JlGwkv9TSwuUMikm4%2F3RlkShgbp8d3soLhraPfxwgbCXlbpFxDq2seBqNfWhGiX%2FA3czJEaHtEa5HQiqjj7g4d4jP%2FSR74d7DrAkJQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e6982da57b042-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49895	172.67.68.84	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:05 UTC	392	OUT	GET /?p=03dafbc7-25d6-474a-9160-244ba4380a36-1713881131 HTTP/1.1 Host: collector8.zipy.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:05 UTC	667	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 23 Apr 2024 14:06:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close allow: POST access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VcWrlBQ8gYgwF%2FM9JbUn0vGVT5JnV3EOs4VB6LO8xdNbGE8M9hhSxc3OcSDqq3YtGNY4wVfsKMmb2nPiKvfLFKscZ9VQy2em1f4jf76SofLWUBJWt2OvV5Cz%2Bw9mUdSgpDdV3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 878e6986dff653c0-ATL
2024-04-23 14:06:05 UTC	104	IN	Data Raw: 36 32 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 32 33 54 31 34 3a 30 36 3a 30 35 2e 39 32 38 2b 30 30 3a 30 30 22 2c 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 2c 22 70 61 74 68 22 3a 22 2f 22 7d 0d 0a Data Ascii: 62{"timestamp":"2024-04-23T14:06:05.928+00:00","status":405,"error":"Method Not Allowed","path":"/"}
2024-04-23 14:06:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49896	3.233.159.182	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:06 UTC	943	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Abeacon%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=767fbbd0-d356-4e57-8160-dc776ad2c0d9&batch_time=1713881165671 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 4201 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:06 UTC	4201	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 36 30 36 33 35 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881160635,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:06:07 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:06:07 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 767fbbd0-d356-4e57-8160-dc776ad2c0d9 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:06:07 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 37 36 37 66 62 62 64 30 2d 64 33 35 36 2d 34 65 35 37 2d 38 31 36 30 2d 64 63 37 37 36 61 64 32 63 30 64 39 22 7d Data Ascii: {"request_id":"767fbbd0-d356-4e57-8160-dc776ad2c0d9"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49898	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:07 UTC	642	OUT	GET / HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:08 UTC	452	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache X-Powered-By: PHP/7.4 Link: <https://regional-express.fr/index.php/wp-json/>; rel="https://api.w.org/" Link: <https://regional-express.fr/index.php/wp-json/wp/v2/pages/10>; rel="alternate"; type="application/json" Link: <https://regional-express.fr/>; rel=shortlink Vary: Accept-Encoding
2024-04-23 14:06:08 UTC	1016	IN	Data Raw: 33 66 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 27 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 49 45 3d 65 64 67 65 27 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 Data Ascii: 3f1<!DOCTYPE html><html lang="fr-FR"><head><meta charset="UTF-8" /><meta name='viewport' content='width=device-width, initial-scale=1.0' /><meta http-equiv='X-UA-Compatible' content='IE=edge' /><link rel="profile" href="https://gmpg.org
2024-04-23 14:06:08 UTC	1448	IN	Data Raw: 31 36 61 30 0d 0a 65 73 2c 20 72 6f 75 6c 65 61 75 78 2c 20 6c 6f 6e 67 75 65 75 72 73 2c 20 63 6f 6c 69 73 20 2e 2e 2e 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 67 69 6f 6e 61 6c 2d 65 78 70 72 65 73 73 2e 66 72 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 66 72 5f 46 52 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 54 72 61 6e 73 70 6f 72 74 65 75 72 20 72 6f 75 74 69 Data Ascii: 16a0es, rouleaux, longueurs, colis ..." /><link rel="canonical" href="https://regional-express.fr/" /><meta property="og:locale" content="fr_FR" /><meta property="og:type" content="website" /><meta property="og:title" content="Transporteur routi
2024-04-23 14:06:08 UTC	2896	IN	Data Raw: 30 2f 6c 6f 67 6f 2d 52 45 2e 70 6e 67 22 2c 22 77 69 64 74 68 22 3a 31 33 33 2c 22 68 65 69 67 68 74 22 3a 34 33 2c 22 63 61 70 74 69 6f 6e 22 3a 22 52 45 47 49 4f 4e 41 4c 20 45 58 50 52 45 53 53 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 67 69 6f 6e 61 6c 2d 65 78 70 72 65 73 73 2e 66 72 2f 23 6c 6f 67 6f 22 7d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 67 69 6f 6e 61 6c 2d 65 78 70 72 65 73 73 2e 66 72 2f 23 77 65 62 73 69 74 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 67 69 6f 6e 61 6c 2d 65 78 70 72 65 73 73 2e 66 72 2f 22 2c 22 6e 61 6d 65 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 75 62 6c Data Ascii: 0/logo-RE.png","width":133,"height":43,"caption":"REGIONAL EXPRESS"},"image":{"@id":"https://regional-express.fr/#logo"}},{"@type":"WebSite","@id":"https://regional-express.fr/#website","url":"https://regional-express.fr/","name":"","description":"","publ
2024-04-23 14:06:08 UTC	1456	IN	Data Raw: 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 27 67 61 2d 64 69 73 61 62 6c 65 2d 55 41 2d 31 35 30 37 35 30 35 32 31 2d 31 27 2c 0a 09 09 09 09 09 09 09 09 09 5d 3b 0a 0a 09 09 09 09 2f 2a 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 6f 70 74 65 64 20 6f 75 74 20 75 73 65 72 73 20 2a 2f 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 67 74 61 67 54 72 61 63 6b 65 72 49 73 4f 70 74 65 64 4f 75 74 28 29 20 7b 0a 09 09 09 09 09 66 6f 72 20 28 76 61 72 20 69 6e 64 65 78 20 3d 20 30 3b 20 69 6e 64 65 78 20 3c 20 64 69 73 61 62 6c 65 53 74 72 73 2e 6c 65 6e 67 74 68 3b 20 69 6e 64 65 78 2b 2b 29 20 7b 0a 09 09 09 09 09 09 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 64 69 73 61 62 6c 65 53 74 72 73 5b 69 6e Data Ascii: 'ga-disable-UA-150750521-1',];/* Function to detect opted out users */function __gtagTrackerIsOptedOut() {for (var index = 0; index < disableStrs.length; index++) {if (document.cookie.indexOf(disableStrs[in
2024-04-23 14:06:08 UTC	4344	IN	Data Raw: 31 36 36 31 0d 0a 72 61 6d 65 74 65 72 73 2e 73 65 6e 64 5f 74 6f 20 3d 20 65 78 61 63 74 6d 65 74 72 69 63 73 5f 66 72 6f 6e 74 65 6e 64 2e 75 61 3b 0a 09 09 09 09 09 09 09 5f 5f 67 74 61 67 44 61 74 61 4c 61 79 65 72 28 74 79 70 65 2c 20 6e 61 6d 65 2c 20 70 61 72 61 6d 65 74 65 72 73 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 5f 5f 67 74 61 67 44 61 74 61 4c 61 79 65 72 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 5f 5f 67 74 61 67 54 72 61 63 6b 65 72 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 09 09 09 09 09 5f 5f 67 74 61 67 54 72 61 63 6b 65 72 28 27 73 65 74 27 2c 20 7b 0a 09 09 09 09 09 Data Ascii: 1661rameters.send_to = exactmetrics_frontend.ua;__gtagDataLayer(type, name, parameters);} else {__gtagDataLayer.apply(null, arguments);}}__gtagTracker('js', new Date());__gtagTracker('set', {
2024-04-23 14:06:08 UTC	1393	IN	Data Raw: 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 35 2e 37 2e 31 31 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 69 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 2c 70 3d 69 2e 67 65 74 43 6f 6e 74 65 78 74 26 26 69 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 76 61 72 20 61 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 3b 70 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 69 2e 77 69 64 74 68 2c 69 2e 68 65 69 67 68 74 29 2c 70 2e 66 69 6c 6c 54 65 78 74 28 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 30 2c 30 29 3b 65 3d 69 2e 74 6f 44 61 74 61 55 52 4c 28 29 3b Data Ascii: p-emoji-release.min.js?ver=5.7.11"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0);e=i.toDataURL();
2024-04-23 14:06:08 UTC	5792	IN	Data Raw: 36 35 62 38 0d 0a 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 7c 7c 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 7d 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6e 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6e 2c 21 31 29 29 3a 28 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 2c 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 Data Ascii: 65b8DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("
2024-04-23 14:06:08 UTC	2896	IN	Data Raw: 6c 6f 73 65 5f 72 65 6c 6f 61 64 22 3a 22 22 2c 22 61 63 63 65 70 74 5f 63 6c 6f 73 65 5f 72 65 6c 6f 61 64 22 3a 22 22 2c 22 72 65 6a 65 63 74 5f 63 6c 6f 73 65 5f 72 65 6c 6f 61 64 22 3a 22 22 2c 22 73 68 6f 77 61 67 61 69 6e 5f 74 61 62 22 3a 22 22 2c 22 73 68 6f 77 61 67 61 69 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 66 66 66 22 2c 22 73 68 6f 77 61 67 61 69 6e 5f 62 6f 72 64 65 72 22 3a 22 23 30 30 30 22 2c 22 73 68 6f 77 61 67 61 69 6e 5f 64 69 76 5f 69 64 22 3a 22 23 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2d 61 67 61 69 6e 22 2c 22 73 68 6f 77 61 67 61 69 6e 5f 78 5f 70 6f 73 69 74 69 6f 6e 22 3a 22 31 30 30 70 78 22 2c 22 74 65 78 74 22 3a 22 23 33 33 33 33 33 33 22 2c 22 73 68 6f 77 5f 6f 6e 63 65 5f 79 6e 22 3a 22 22 2c 22 73 68 6f Data Ascii: lose_reload":"","accept_close_reload":"","reject_close_reload":"","showagain_tab":"","showagain_background":"#fff","showagain_border":"#000","showagain_div_id":"#cookie-law-info-again","showagain_x_position":"100px","text":"#333333","show_once_yn":"","sho
2024-04-23 14:06:08 UTC	1448	IN	Data Raw: 2f 61 3e 0a 09 09 09 09 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 61 6e 67 22 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 6e 67 75 61 67 65 20 20 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 6e 67 75 61 67 65 2d 63 75 72 72 65 6e 74 22 3e 3c 73 70 61 6e 3e 66 72 3c 2f 73 70 61 6e 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 6e 67 75 61 67 65 20 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 67 69 6f 6e 61 6c 2d 65 78 70 72 65 73 73 2e 66 72 2f 65 6e 2f 22 3e 65 6e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 70 2d 6e 61 76 69 67 Data Ascii: /a><ul class="menu-lang"><li class="menu-item menu-item-language menu-item-language-current"><span>fr</span></li><li class="menu-item menu-item-language "><a href="https://regional-express.fr/en/">en</a></li></ul><div class="top-navig
2024-04-23 14:06:08 UTC	5792	IN	Data Raw: 75 2d 6c 6f 67 6f 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 65 67 69 6f 6e 61 6c 2d 65 78 70 72 65 73 73 2e 66 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 72 65 67 69 6f 6e 61 6c 65 78 70 72 65 73 73 2f 69 6d 67 2f 6c 6f 67 6f 2d 72 65 67 69 6f 6e 61 6c 65 78 70 72 65 73 73 2d 6c 61 72 67 65 2e 70 6e 67 22 20 61 6c 74 3d 22 52 65 67 69 6f 6e 61 6c 20 45 78 70 72 65 73 73 22 20 2f 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 69 6d 67 20 69 64 3d 22 6c 6f 67 6f 2d 73 6d 61 6c 6c 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 6f 67 6f 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 65 67 69 6f 6e 61 6c 2d 65 78 70 72 65 73 73 2e 66 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 72 65 67 69 6f 6e 61 6c 65 78 70 72 65 73 73 2f 69 6d Data Ascii: u-logo" src="https://regional-express.fr/wp-content/themes/regionalexpress/img/logo-regionalexpress-large.png" alt="Regional Express" /><img id="logo-small" class="menu-logo" src="https://regional-express.fr/wp-content/themes/regionalexpress/im

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49897	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:08 UTC	572	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.11 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:09 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:08 GMT Content-Type: application/javascript Content-Length: 14229 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:46:44 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:08 GMT Vary: Accept-Encoding
2024-04-23 14:06:09 UTC	6948	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 33 2e 30 2e 31 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/13.0.1/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2024-04-23 14:06:09 UTC	5792	IN	Data Raw: 5c 75 32 36 32 33 5c 75 32 36 32 36 5c 75 32 36 32 61 5c 75 32 36 32 65 5c 75 32 36 32 66 5c 75 32 36 33 38 2d 5c 75 32 36 33 61 5c 75 32 36 34 30 5c 75 32 36 34 32 5c 75 32 36 34 38 2d 5c 75 32 36 35 33 5c 75 32 36 36 30 5c 75 32 36 36 33 5c 75 32 36 36 35 5c 75 32 36 36 36 5c 75 32 36 36 38 5c 75 32 36 37 62 5c 75 32 36 37 66 5c 75 32 36 39 32 2d 5c 75 32 36 39 37 5c 75 32 36 39 39 5c 75 32 36 39 62 5c 75 32 36 39 63 5c 75 32 36 61 30 5c 75 32 36 61 31 5c 75 32 36 61 37 5c 75 32 36 61 61 5c 75 32 36 61 62 5c 75 32 36 62 30 5c 75 32 36 62 31 5c 75 32 36 62 64 5c 75 32 36 62 65 5c 75 32 36 63 34 5c 75 32 36 63 35 5c 75 32 36 63 38 5c 75 32 36 63 66 5c 75 32 36 64 31 5c 75 32 36 64 33 5c 75 32 36 64 34 5c 75 32 36 65 39 5c 75 32 36 65 61 5c 75 32 36 66 30 Data Ascii: \u2623\u2626\u262a\u262e\u262f\u2638-\u263a\u2640\u2642\u2648-\u2653\u2660\u2663\u2665\u2666\u2668\u267b\u267f\u2692-\u2697\u2699\u269b\u269c\u26a0\u26a1\u26a7\u26aa\u26ab\u26b0\u26b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0
2024-04-23 14:06:09 UTC	1489	IN	Data Raw: 75 32 36 31 31 5c 75 32 36 31 34 5c 75 32 36 31 35 5c 75 32 36 31 38 5c 75 32 36 31 44 5c 75 32 36 32 30 5c 75 32 36 32 32 5c 75 32 36 32 33 5c 75 32 36 32 36 5c 75 32 36 32 41 5c 75 32 36 32 45 5c 75 32 36 32 46 5c 75 32 36 33 38 5c 75 32 36 33 39 5c 75 32 36 33 41 5c 75 32 36 34 38 2d 5c 75 32 36 35 33 5c 75 32 36 36 30 5c 75 32 36 36 33 5c 75 32 36 36 35 5c 75 32 36 36 36 5c 75 32 36 36 38 5c 75 32 36 37 42 5c 75 32 36 37 46 5c 75 32 36 39 32 5c 75 32 36 39 33 5c 75 32 36 39 34 5c 75 32 36 39 36 5c 75 32 36 39 37 5c 75 32 36 39 39 5c 75 32 36 39 42 5c 75 32 36 39 43 5c 75 32 36 41 30 5c 75 32 36 41 31 5c 75 32 36 41 41 5c 75 32 36 41 42 5c 75 32 36 42 30 5c 75 32 36 42 31 5c 75 32 36 42 44 5c 75 32 36 42 45 5c 75 32 36 43 34 5c 75 32 36 43 35 5c 75 32 Data Ascii: u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A\u262E\u262F\u2638\u2639\u263A\u2648-\u2653\u2660\u2663\u2665\u2666\u2668\u267B\u267F\u2692\u2693\u2694\u2696\u2697\u2699\u269B\u269C\u26A0\u26A1\u26AA\u26AB\u26B0\u26B1\u26BD\u26BE\u26C4\u26C5\u2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49902	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:09 UTC	596	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.11 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:09 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:09 GMT Content-Type: text/css Content-Length: 58171 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:46:32 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:09 GMT Vary: Accept-Encoding
2024-04-23 14:06:09 UTC	1170	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 23 73 74 61 72 74 2d 72 65 73 69 7a 61 62 6c 65 2d 65 64 69 74 6f 72 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 61 75 64 69 6f 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: @charset "UTF-8";#start-resizable-editor-section{display:none}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{color:#fff;background-color:#32373c;border:none;border-radiu
2024-04-23 14:06:09 UTC	13032	IN	Data Raw: 79 6c 65 2d 73 71 75 61 72 65 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 73 71 75 61 72 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c Data Ascii: yle-squared,.wp-block-button__link.wp-block-button.is-style-squared{border-radius:0}.wp-block-button.no-border-radius,.wp-block-button__link.no-border-radius{border-radius:0!important}.is-style-outline>.wp-block-button__link,.wp-block-button__link.is-styl
2024-04-23 14:06:09 UTC	15928	IN	Data Raw: 6f 63 6b 2d 63 6f 76 65 72 2d 74 65 78 74 20 61 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 73 65 63 74 69 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 32 2c 73 65 63 74 69 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 32 20 61 2c 73 65 63 74 69 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 32 20 61 3a 61 63 74 69 76 65 2c 73 65 63 74 69 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 32 20 61 3a 66 6f 63 75 73 2c 73 65 63 Data Ascii: ock-cover-text a,.wp-block-cover-text a:active,.wp-block-cover-text a:focus,.wp-block-cover-text a:hover,section.wp-block-cover-image h2,section.wp-block-cover-image h2 a,section.wp-block-cover-image h2 a:active,section.wp-block-cover-image h2 a:focus,sec
2024-04-23 14:06:09 UTC	13032	IN	Data Raw: 6c 69 67 6e 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 2e 69 73 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 2e 69 73 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 5f 5f 6d 65 64 69 61 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 Data Ascii: lign:start;align-self:start}.wp-block-media-text.is-vertically-aligned-center .wp-block-media-text__content,.wp-block-media-text.is-vertically-aligned-center .wp-block-media-text__media,.wp-block-media-text .wp-block-media-text__content,.wp-block-media-te
2024-04-23 14:06:09 UTC	4344	IN	Data Raw: 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 31 73 20 65 61 73 65 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 20 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 31 73 20 65 61 73 65 7d 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 20 61 2c 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 20 61 3a 61 63 74 69 76 65 2c 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e Data Ascii: ;transition:transform .1s ease;height:auto}@media (prefers-reduced-motion:reduce){.wp-social-link{transition-duration:0s}}.wp-social-link a{display:block;line-height:0;transition:transform .1s ease}.wp-social-link a,.wp-social-link a:active,.wp-social-lin
2024-04-23 14:06:10 UTC	7240	IN	Data Raw: 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 38 30 63 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 77 6f 72 64 70 72 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 34 39 39 63 64 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 Data Ascii: :not(.is-style-logos-only) .wp-social-link-vk{background-color:#4680c2;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-link-wordpress{background-color:#3499cd;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-li
2024-04-23 14:06:10 UTC	3425	IN	Data Raw: 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 62 35 31 65 30 7d 3a 72 6f 6f 74 20 2e 68 61 73 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 72 6f 6f 74 20 2e 68 61 73 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 7d 3a 72 6f 6f 74 20 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 62 38 63 33 7d 3a 72 6f 6f 74 20 2e 68 61 73 2d 76 65 72 79 2d 64 61 72 6b 2d 67 72 61 79 2d 62 61 63 6b 67 72 Data Ascii: color{background-color:#9b51e0}:root .has-white-background-color{background-color:#fff}:root .has-very-light-gray-background-color{background-color:#eee}:root .has-cyan-bluish-gray-background-color{background-color:#abb8c3}:root .has-very-dark-gray-backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49903	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:09 UTC	596	OUT	GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.7.11 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:09 UTC	296	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:09 GMT Content-Type: text/css Content-Length: 2714 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:46:32 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:09 GMT Vary: Accept-Encoding
2024-04-23 14:06:09 UTC	2714	IN	Data Raw: 23 73 74 61 72 74 2d 72 65 73 69 7a 61 62 6c 65 2d 65 64 69 74 6f 72 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 65 6e 6c 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 6d 6f 6e 61 63 6f 2c 6d 6f 6e 6f 73 70 61 63 65 3b 63 6f 6c 6f 72 3a 23 31 65 31 65 31 Data Ascii: #start-resizable-editor-section{display:none}.wp-block-audio figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-audio figcaption{color:hsla(0,0%,100%,.65)}.wp-block-code{font-family:Menlo,Consolas,monaco,monospace;color:#1e1e1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49905	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:09 UTC	618	OUT	GET /wp-content/plugins/bb-plugin/fonts/fontawesome/5.13.0/css/all.min.css?ver=2.3.2.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:09 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:09 GMT Content-Type: text/css Content-Length: 58578 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:23:58 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:09 GMT Vary: Accept-Encoding
2024-04-23 14:06:09 UTC	16087	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 33 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 Data Ascii: /! Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webki
2024-04-23 14:06:09 UTC	16384	IN	Data Raw: 2e 66 61 2d 64 61 73 68 63 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 30 22 7d 2e 66 61 2d 64 61 74 61 62 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 30 22 7d 2e 66 61 2d 64 65 61 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 34 22 7d 2e 66 61 2d 64 65 6c 69 63 69 6f 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 35 22 7d 2e 66 61 2d 64 65 6d 6f 63 72 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 34 37 22 7d 2e 66 61 2d 64 65 70 6c 6f 79 64 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 65 22 7d 2e 66 61 2d 64 65 73 6b 70 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 66 22 7d 2e 66 61 2d 64 65 Data Ascii: .fa-dashcube:before{content:"\f210"}.fa-database:before{content:"\f1c0"}.fa-deaf:before{content:"\f2a4"}.fa-delicious:before{content:"\f1a5"}.fa-democrat:before{content:"\f747"}.fa-deploydog:before{content:"\f38e"}.fa-deskpro:before{content:"\f38f"}.fa-de
2024-04-23 14:06:09 UTC	16384	IN	Data Raw: 7d 2e 66 61 2d 6c 6f 77 2d 76 69 73 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 38 22 7d 2e 66 61 2d 6c 75 67 67 61 67 65 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 39 64 22 7d 2e 66 61 2d 6c 75 6e 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 30 34 22 7d 2e 66 61 2d 6c 75 6e 67 73 2d 76 69 72 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 39 36 37 22 7d 2e 66 61 2d 6c 79 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 33 22 7d 2e 66 61 2d 6d 61 67 65 6e 74 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 34 22 7d 2e 66 61 2d 6d 61 67 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 30 22 7d 2e 66 61 2d Data Ascii: }.fa-low-vision:before{content:"\f2a8"}.fa-luggage-cart:before{content:"\f59d"}.fa-lungs:before{content:"\f604"}.fa-lungs-virus:before{content:"\f967"}.fa-lyft:before{content:"\f3c3"}.fa-magento:before{content:"\f3c4"}.fa-magic:before{content:"\f0d0"}.fa-
2024-04-23 14:06:10 UTC	9723	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 34 39 30 22 7d 2e 66 61 2d 74 61 63 68 6f 6d 65 74 65 72 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 64 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d 2e 66 61 2d 74 61 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 63 22 7d 2e 66 61 2d 74 61 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 64 62 22 7d 2e 66 61 2d 74 61 73 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 65 22 7d 2e 66 61 2d 74 61 78 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 61 22 7d 2e 66 61 2d 74 65 61 6d 73 70 65 61 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 66 39 22 7d 2e 66 Data Ascii: ntent:"\f490"}.fa-tachometer-alt:before{content:"\f3fd"}.fa-tag:before{content:"\f02b"}.fa-tags:before{content:"\f02c"}.fa-tape:before{content:"\f4db"}.fa-tasks:before{content:"\f0ae"}.fa-taxi:before{content:"\f1ba"}.fa-teamspeak:before{content:"\f4f9"}.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49904	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:09 UTC	608	OUT	GET /wp-content/uploads/bb-plugin/icons/ultimate-icons/style.css?ver=2.3.2.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:09 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:09 GMT Content-Type: text/css Content-Length: 20480 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:50 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:09 GMT Vary: Accept-Encoding
2024-04-23 14:06:09 UTC	2618	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 55 6c 74 69 6d 61 74 65 2d 49 63 6f 6e 73 27 3b 0a 20 20 73 72 63 3a 0a 20 20 20 20 75 72 6c 28 27 66 6f 6e 74 73 2f 55 6c 74 69 6d 61 74 65 2d 49 63 6f 6e 73 2e 74 74 66 3f 31 64 64 69 31 6a 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a 20 20 20 20 75 72 6c 28 27 66 6f 6e 74 73 2f 55 6c 74 69 6d 61 74 65 2d 49 63 6f 6e 73 2e 77 6f 66 66 3f 31 64 64 69 31 6a 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 75 72 6c 28 27 66 6f 6e 74 73 2f 55 6c 74 69 6d 61 74 65 2d 49 63 6f 6e 73 2e 73 76 67 3f 31 64 64 69 31 6a 23 55 6c 74 69 6d 61 74 65 2d 49 63 6f 6e 73 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 0a 20 20 66 6f 6e 74 Data Ascii: @font-face { font-family: 'Ultimate-Icons'; src: url('fonts/Ultimate-Icons.ttf?1ddi1j') format('truetype'), url('fonts/Ultimate-Icons.woff?1ddi1j') format('woff'), url('fonts/Ultimate-Icons.svg?1ddi1j#Ultimate-Icons') format('svg'); font
2024-04-23 14:06:09 UTC	2896	IN	Data Raw: 61 2d 69 63 6f 6e 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 36 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 37 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 69 63 6f 6e 2d 33 2d 6d 61 69 6c 2d 65 6e 76 65 6c 6f 70 65 2d 63 6c 6f 73 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 38 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 69 63 6f 6e 2d 36 2d 6d 61 69 6c 2d 65 6e 76 65 6c 6f 70 65 2d 63 6c 6f 73 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 32 39 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 69 63 6f 6e 2d 32 34 2d 6b 65 79 3a 62 65 66 6f 72 65 Data Ascii: a-icon-twitter:before { content: "\e926";}.ua-icon-video:before { content: "\e927";}.ua-icon-icon-3-mail-envelope-closed:before { content: "\e928";}.ua-icon-icon-6-mail-envelope-closed:before { content: "\e929";}.ua-icon-icon-24-key:before
2024-04-23 14:06:09 UTC	1448	IN	Data Raw: 74 3a 20 22 5c 65 39 35 37 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 63 72 6f 73 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 35 38 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 35 39 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 6c 6f 63 6b 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 35 61 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 35 62 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 72 6f 73 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 35 63 22 3b 0a Data Ascii: t: "\e957";}.ua-icon-circle-cross:before { content: "\e958";}.ua-icon-circle-minus:before { content: "\e959";}.ua-icon-clock2:before { content: "\e95a";}.ua-icon-cog:before { content: "\e95b";}.ua-icon-cross:before { content: "\e95c";
2024-04-23 14:06:09 UTC	1448	IN	Data Raw: 65 39 37 35 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 37 36 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 37 37 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 61 6c 61 72 6d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 37 38 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 37 39 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 Data Ascii: e975";}.ua-icon-zoom-in:before { content: "\e976";}.ua-icon-zoom-out:before { content: "\e977";}.ua-icon-alarm:before { content: "\e978";}.ua-icon-arrow-down-circle:before { content: "\e979";}.ua-icon-arrow-down2:before { content: "\e9
2024-04-23 14:06:09 UTC	1448	IN	Data Raw: 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 6d 69 6e 75 73 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 39 31 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 6c 6f 63 6b 33 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 39 32 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 6f 67 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 39 33 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 72 6f 73 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 39 34 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 72 6f 73 73 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 39 35 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 65 61 72 Data Ascii: -icon-circle-minus2:before { content: "\e991";}.ua-icon-clock3:before { content: "\e992";}.ua-icon-cog2:before { content: "\e993";}.ua-icon-cross-circle:before { content: "\e994";}.ua-icon-cross2:before { content: "\e995";}.ua-icon-ear
2024-04-23 14:06:09 UTC	1448	IN	Data Raw: 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 61 66 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 70 61 77 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 62 30 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 70 65 6e 63 69 6c 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 62 31 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 70 68 6f 6e 65 2d 68 61 6e 64 73 65 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 62 32 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 70 68 6f 6e 65 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 62 33 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 70 69 63 74 75 72 65 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 Data Ascii: 2:before { content: "\e9af";}.ua-icon-paw:before { content: "\e9b0";}.ua-icon-pencil2:before { content: "\e9b1";}.ua-icon-phone-handset:before { content: "\e9b2";}.ua-icon-phone2:before { content: "\e9b3";}.ua-icon-picture2:before {
2024-04-23 14:06:09 UTC	2896	IN	Data Raw: 6f 6f 6b 2d 77 69 74 68 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 63 64 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 66 61 63 65 62 6f 6f 6b 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 63 65 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 66 6c 69 63 6b 72 2d 77 69 74 68 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 63 66 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 66 6c 69 63 6b 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 64 30 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 67 69 74 68 75 62 2d 77 69 74 68 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 Data Ascii: ook-with-circle:before { content: "\e9cd";}.ua-icon-facebook2:before { content: "\e9ce";}.ua-icon-flickr-with-circle:before { content: "\e9cf";}.ua-icon-flickr:before { content: "\e9d0";}.ua-icon-github-with-circle:before { content: "\e9
2024-04-23 14:06:09 UTC	4344	IN	Data Raw: 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 30 32 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 32 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 30 33 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 77 69 74 68 2d 63 69 72 63 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 30 34 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 77 69 74 68 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 30 35 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 77 69 74 68 2d 63 69 72 63 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 Data Ascii: content: "\ea02";}.ua-icon-chevron-up2:before { content: "\ea03";}.ua-icon-chevron-with-circle-down:before { content: "\ea04";}.ua-icon-chevron-with-circle-left:before { content: "\ea05";}.ua-icon-chevron-with-circle-right:before { conte
2024-04-23 14:06:09 UTC	1934	IN	Data Raw: 38 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 53 75 62 74 72 61 63 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 35 39 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 45 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 35 61 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 51 75 65 73 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 35 62 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 43 6c 6f 73 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 35 63 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f 6e 2d 50 61 75 73 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 61 35 64 22 3b 0a 7d 0a 2e 75 61 2d 69 63 6f Data Ascii: 8";}.ua-icon-Subtract:before { content: "\ea59";}.ua-icon-Exclamation:before { content: "\ea5a";}.ua-icon-Question:before { content: "\ea5b";}.ua-icon-Close:before { content: "\ea5c";}.ua-icon-Pause:before { content: "\ea5d";}.ua-ico

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49908	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:09 UTC	622	OUT	GET /wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:09 UTC	298	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:09 GMT Content-Type: text/css Content-Length: 134006 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:50 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:09 GMT Vary: Accept-Encoding
2024-04-23 14:06:09 UTC	1169	IN	Data Raw: 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2a 2c 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2a 3a 62 65 66 6f 72 65 2c 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2a 3a 61 66 74 65 72 20 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 2e 66 6c 2d 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 66 6c 2d 72 6f 77 3a 61 66 74 65 72 2c 2e 66 6c 2d 72 6f 77 2d 63 6f 6e 74 65 6e 74 3a 62 65 66 6f 72 65 2c 2e 66 6c 2d 72 6f 77 2d 63 6f 6e 74 65 6e 74 3a 61 66 74 65 72 2c 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 3a 62 65 66 6f Data Ascii: .fl-builder-content ,.fl-builder-content :before,.fl-builder-content *:after {-webkit-box-sizing: border-box;-moz-box-sizing: border-box;box-sizing: border-box;}.fl-row:before,.fl-row:after,.fl-row-content:before,.fl-row-content:after,.fl-col-group:befo
2024-04-23 14:06:09 UTC	2896	IN	Data Raw: 6d 65 6e 74 3a 20 73 63 72 6f 6c 6c 3b 7d 2e 66 6c 2d 72 6f 77 2d 62 67 2d 76 69 64 65 6f 2c 2e 66 6c 2d 72 6f 77 2d 62 67 2d 76 69 64 65 6f 20 2e 66 6c 2d 72 6f 77 2d 63 6f 6e 74 65 6e 74 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 2e 66 6c 2d 72 6f 77 2d 62 67 2d 76 69 64 65 6f 20 2e 66 6c 2d 62 67 2d 76 69 64 65 6f 20 7b 62 6f 74 74 6f 6d 3a 20 30 3b 6c 65 66 74 3a 20 30 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 20 30 3b 74 6f 70 3a 20 30 3b 7d 2e 66 6c 2d 72 6f 77 2d 62 67 2d 76 69 64 65 6f 20 2e 66 6c 2d 62 67 2d 76 69 64 65 6f 20 76 69 64 65 6f 20 7b 62 6f 74 74 6f 6d 3a 20 30 3b 6c 65 66 74 3a 20 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 20 Data Ascii: ment: scroll;}.fl-row-bg-video,.fl-row-bg-video .fl-row-content {position: relative;}.fl-row-bg-video .fl-bg-video {bottom: 0;left: 0;overflow: hidden;position: absolute;right: 0;top: 0;}.fl-row-bg-video .fl-bg-video video {bottom: 0;left: 0px;max-width:
2024-04-23 14:06:09 UTC	2896	IN	Data Raw: 75 69 6c 64 65 72 2d 69 65 2d 31 31 20 2e 66 6c 2d 72 6f 77 2d 63 75 73 74 6f 6d 2d 68 65 69 67 68 74 2e 66 6c 2d 72 6f 77 2d 61 6c 69 67 6e 2d 74 6f 70 20 2e 66 6c 2d 72 6f 77 2d 63 6f 6e 74 65 6e 74 2c 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 69 65 2d 31 31 20 2e 66 6c 2d 72 6f 77 2d 63 75 73 74 6f 6d 2d 68 65 69 67 68 74 2e 66 6c 2d 72 6f 77 2d 61 6c 69 67 6e 2d 62 6f 74 74 6f 6d 20 2e 66 6c 2d 72 6f 77 2d 63 6f 6e 74 65 6e 74 20 7b 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 7d 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 69 65 2d 31 31 20 2e 66 6c 2d 72 6f 77 2d 66 75 6c 6c 2d 68 65 69 67 68 74 2e 66 6c 2d 72 6f 77 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 2d 65 71 75 61 Data Ascii: uilder-ie-11 .fl-row-custom-height.fl-row-align-top .fl-row-content,.fl-builder-ie-11 .fl-row-custom-height.fl-row-align-bottom .fl-row-content {margin: 0 auto;}.fl-builder-ie-11 .fl-row-full-height.fl-row-align-center .fl-col-group:not(.fl-col-group-equa
2024-04-23 14:06:09 UTC	5792	IN	Data Raw: 65 71 75 61 6c 2d 68 65 69 67 68 74 20 2e 66 6c 2d 63 6f 6c 3a 61 66 74 65 72 2c 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 2d 65 71 75 61 6c 2d 68 65 69 67 68 74 20 2e 66 6c 2d 63 6f 6c 2d 63 6f 6e 74 65 6e 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 20 6e 6f 6e 65 3b 7d 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 2d 65 71 75 61 6c 2d 68 65 69 67 68 74 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 2e 66 6c 2d 63 6f 6c 2d 63 6f 6e 74 65 6e 74 20 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e Data Ascii: equal-height .fl-col:after,.fl-col-group-equal-height .fl-col-content:after{content: none;}.fl-col-group-equal-height.fl-col-group-align-center .fl-col-content {align-items: center;justify-content: center;-webkit-align-items: center;-webkit-box-align: cen
2024-04-23 14:06:10 UTC	16384	IN	Data Raw: 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 2d 62 61 72 20 2e 6d 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 66 6f 63 75 73 20 7b 74 6f 70 3a 20 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 69 6d 67 2e 6d 66 70 2d 69 6d 67 20 7b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 2e 6d 66 70 2d 63 6f 75 6e 74 65 72 20 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 2e 6d 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 70 72 65 6c 6f 61 64 65 72 2e 66 61 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 7d 2e 66 6c 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 7d 2e 66 6c 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 2e 66 6c 2d 66 6f 72 6d 2d 65 72 72 6f Data Ascii: fp-wrap .mfp-close:hover,.admin-bar .mfp-wrap .mfp-close:focus {top: 32px!important;}img.mfp-img {padding: 0;}.mfp-counter {display: none;}.mfp-wrap .mfp-preloader.fa {font-size: 30px;}.fl-form-field {margin-bottom: 15px;}.fl-form-field input.fl-form-erro
2024-04-23 14:06:10 UTC	16384	IN	Data Raw: 36 34 30 70 78 3b 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 66 6c 2d 6e 6f 64 65 2d 35 64 63 35 37 32 31 34 38 62 39 34 38 20 3e 20 2e 66 6c 2d 63 6f 6c 2d 63 6f 6e 74 65 6e 74 20 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 20 34 30 30 70 78 3b 7d 7d 2e 66 6c 2d 6e 6f 64 65 2d 35 64 35 35 39 33 62 65 32 32 30 30 32 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 2e 66 6c 2d 6e 6f 64 65 2d 35 64 35 35 39 33 62 65 32 32 30 30 32 20 3e 20 2e 66 6c 2d 63 6f 6c 2d 63 6f 6e 74 65 6e 74 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 66 37 36 32 32 3b 7d 20 2e 66 6c 2d 6e 6f 64 65 2d 35 64 35 35 39 33 62 65 32 32 30 30 32 20 3e 20 2e 66 6c 2d 63 6f 6c 2d Data Ascii: 640px;}@media(max-width: 768px) {.fl-builder-content .fl-node-5dc572148b948 > .fl-col-content {min-height: 400px;}}.fl-node-5d5593be22002 {width: 100%;}.fl-node-5d5593be22002 > .fl-col-content {background-color: #ef7622;} .fl-node-5d5593be22002 > .fl-col-
2024-04-23 14:06:10 UTC	16384	IN	Data Raw: 72 61 70 20 2e 66 6c 69 70 5f 6c 65 66 74 20 2e 75 61 62 62 2d 66 72 6f 6e 74 2c 2e 75 61 62 62 2d 66 6c 69 70 2d 62 6f 78 2d 77 72 61 70 20 2e 66 6c 69 70 5f 72 69 67 68 74 20 2e 75 61 62 62 2d 62 61 63 6b 2c 2e 75 61 62 62 2d 66 6c 69 70 2d 62 6f 78 2d 77 72 61 70 20 2e 66 6c 69 70 5f 72 69 67 68 74 20 2e 75 61 62 62 2d 66 72 6f 6e 74 2c 2e 75 61 62 62 2d 66 6c 69 70 2d 62 6f 78 2d 77 72 61 70 20 2e 66 6c 69 70 5f 74 6f 70 20 2e 75 61 62 62 2d 62 61 63 6b 2c 2e 75 61 62 62 2d 66 6c 69 70 2d 62 6f 78 2d 77 72 61 70 20 2e 66 6c 69 70 5f 74 6f 70 20 2e 75 61 62 62 2d 66 72 6f 6e 74 20 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 31 30 30 30 6d 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 31 30 30 30 6d 73 3b 2d 6f 2d 74 72 61 Data Ascii: rap .flip_left .uabb-front,.uabb-flip-box-wrap .flip_right .uabb-back,.uabb-flip-box-wrap .flip_right .uabb-front,.uabb-flip-box-wrap .flip_top .uabb-back,.uabb-flip-box-wrap .flip_top .uabb-front {-webkit-transition: 1000ms;-moz-transition: 1000ms;-o-tra
2024-04-23 14:06:10 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 7d 2e 75 61 62 62 2d 6d 6f 64 75 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 75 61 62 62 2d 74 65 78 74 2d 65 64 69 74 6f 72 20 2a 3a 6e 6f 74 28 69 29 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 7d 2e 75 61 62 62 2d 6d 6f 64 75 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 75 61 62 62 2d 74 65 78 74 2d 65 64 69 74 6f 72 20 2a 3a 6e 6f 74 28 68 31 29 3a 6e 6f 74 28 68 32 29 3a 6e 6f 74 28 68 33 29 3a 6e 6f 74 28 68 34 29 3a 6e 6f 74 28 68 35 29 3a 6e 6f 74 28 68 36 29 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 20 7d 2e 75 61 62 62 2d 6d 6f 64 75 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 75 61 62 62 2d 74 65 78 74 2d 65 64 69 74 6f 72 Data Ascii: lor: inherit;}.uabb-module-content .uabb-text-editor :not(i) {font-family: inherit;}.uabb-module-content .uabb-text-editor :not(h1):not(h2):not(h3):not(h4):not(h5):not(h6) {font-size: inherit;line-height: inherit; }.uabb-module-content .uabb-text-editor
2024-04-23 14:06:10 UTC	16384	IN	Data Raw: 6e 6f 64 65 2d 35 64 35 35 39 31 63 61 62 31 37 35 36 20 2e 66 6c 2d 70 68 6f 74 6f 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 40 6d 65 64 69 61 20 28 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 20 29 20 7b 20 2e 66 6c 2d 6e 6f 64 65 2d 35 64 35 35 39 31 63 61 62 31 37 35 36 2e 66 6c 2d 6d 6f 64 75 6c 65 20 3e 20 2e 66 6c 2d 6d 6f 64 75 6c 65 2d 63 6f 6e 74 65 6e 74 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 7d 7d 2e 66 6c 2d 6e 6f 64 65 2d 35 64 35 35 39 31 64 32 30 37 65 64 62 20 2e 66 6c 2d 72 69 63 68 2d 74 65 78 74 2c 20 2e 66 6c 2d 6e 6f 64 65 2d 35 64 35 35 39 31 64 32 30 37 65 64 62 20 2e 66 6c 2d 72 69 63 68 2d 74 65 78 74 20 2a 20 7b 63 6f 6c 6f 72 3a 20 23 34 32 34 32 34 63 3b 66 6f 6e 74 2d 66 61 6d 69 Data Ascii: node-5d5591cab1756 .fl-photo {text-align: center;}@media ( max-width: 768px ) { .fl-node-5d5591cab1756.fl-module > .fl-module-content {margin-top:10px;}}.fl-node-5d5591d207edb .fl-rich-text, .fl-node-5d5591d207edb .fl-rich-text * {color: #42424c;font-fami
2024-04-23 14:06:10 UTC	16384	IN	Data Raw: 65 72 69 74 3b 7d 2e 66 6c 2d 6e 6f 64 65 2d 35 64 61 30 38 65 61 61 63 33 31 38 65 20 2e 75 61 62 62 2d 69 6d 61 67 65 20 2e 75 61 62 62 2d 70 68 6f 74 6f 2d 69 6d 67 20 7b 77 69 64 74 68 3a 20 35 35 70 78 3b 7d 2e 66 6c 2d 6e 6f 64 65 2d 35 64 61 30 38 65 61 61 63 33 31 38 65 20 2e 75 61 62 62 2d 69 6d 61 67 65 20 2e 75 61 62 62 2d 69 6d 61 67 65 2d 63 6f 6e 74 65 6e 74 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 35 35 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 70 78 3b 7d 2e 66 6c 2d 6e 6f 64 65 2d 35 64 61 30 38 65 61 61 63 33 31 38 65 20 2e 75 61 62 62 2d 69 6d 61 67 65 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 Data Ascii: erit;}.fl-node-5da08eaac318e .uabb-image .uabb-photo-img {width: 55px;}.fl-node-5da08eaac318e .uabb-image .uabb-image-content{border-style: ;background: rgba(255,0,0,0);border-width: 1px;border-radius: 0px;}.fl-node-5da08eaac318e .uabb-image-content:hover

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49909	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:09 UTC	604	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:10 UTC	296	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:09 GMT Content-Type: text/css Content-Length: 2731 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:09 GMT Vary: Accept-Encoding
2024-04-23 14:06:10 UTC	2731	IN	Data Raw: 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 20 2e 77 70 63 66 37 2d 72 65 73 70 6f Data Ascii: .wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);clip-path: inset(50%);height: 1px;width: 1px;margin: -1px;padding: 0;border: 0;word-wrap: normal !important;}.wpcf7 form .wpcf7-respo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49910	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:10 UTC	619	OUT	GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=2.1.2 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:10 UTC	296	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:10 GMT Content-Type: text/css Content-Length: 3106 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:18 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:10 GMT Vary: Accept-Encoding
2024-04-23 14:06:10 UTC	3106	IN	Data Raw: 23 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2d 62 61 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 31 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 09 2f 2a 20 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 30 70 78 20 35 70 78 20 35 30 70 78 3b 20 2a 2f 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 6c 65 66 74 3a 30 70 78 3b 0a 09 66 6f 6e 74 2d Data Ascii: #cookie-law-info-bar {font-size: 15px;margin: 0 auto;padding: 12px 10px;position: absolute;text-align: center;box-sizing: border-box;width:100%;z-index: 9999;/* box-shadow:rgba(0,0,0,.5) 0px 5px 50px; */display: none;left:0px;font-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49911	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:10 UTC	617	OUT	GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=2.1.2 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:10 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:10 GMT Content-Type: text/css Content-Length: 27249 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:18 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:10 GMT Vary: Accept-Encoding
2024-04-23 14:06:10 UTC	1170	IN	Data Raw: 2e 67 64 70 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 67 64 70 72 2d 72 6f 77 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 09 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 35 70 Data Ascii: .gdpr-container-fluid {width: 100%;padding-right: 15px;padding-left: 15px;margin-right: auto;margin-left: auto;}.gdpr-row {display: -ms-flexbox;display: flex;-ms-flex-wrap: wrap;flex-wrap: wrap;margin-right: -15px;margin-left: -15p
2024-04-23 14:06:10 UTC	7240	IN	Data Raw: 7d 0a 0a 2e 6d 6f 64 61 6c 2d 62 61 63 6b 64 72 6f 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 72 69 67 68 74 3a 20 30 3b 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 33 39 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 0a 7d 0a 0a 2e 6d 6f 64 61 6c 2d 62 61 63 6b 64 72 6f 70 2e 66 61 64 65 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 30 0a 7d 0a 0a 2e 6d 6f 64 61 6c 2d 62 61 63 6b 64 72 6f 70 2e 73 68 6f 77 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 2e 35 0a 7d 0a 0a 2e 67 64 70 72 2d 6d 6f 64 61 6c 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 72 69 67 68 74 3a 20 30 3b 0a 09 62 Data Ascii: }.modal-backdrop {position: fixed;top: 0;right: 0;bottom: 0;left: 0;z-index: 1039;background-color: #000}.modal-backdrop.fade {opacity: 0}.modal-backdrop.show {opacity: .5}.gdpr-modal {position: fixed;top: 0;right: 0;b
2024-04-23 14:06:11 UTC	2896	IN	Data Raw: 31 2e 37 35 72 65 6d 20 61 75 74 6f 3b 0a 09 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 28 31 2e 37 35 72 65 6d 20 2a 20 32 29 29 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 09 2e 63 6c 69 2d 6d 6f 64 61 6c 20 2e 63 6c 69 2d 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 7b 0a 09 09 6d 61 78 2d 77 69 64 74 68 3a 20 39 30 30 70 78 3b 0a 09 7d 0a 7d 0a 2e 63 6c 69 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a Data Ascii: 1.75rem auto;min-height: calc(100% - (1.75rem * 2))}}@media (min-width: 992px) {.cli-modal .cli-modal-dialog {max-width: 900px;}}.cli-modal-content {position: relative;display: -ms-flexbox;display: flex;-ms-flex-direction: column;
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 74 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 09 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 2f 2a 20 53 65 74 74 69 6e 67 73 20 50 6f 70 75 70 20 2a 2f 0a 2e 63 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 63 6c 69 2d 72 6f 77 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a Data Ascii: t;font-weight: 500;line-height: 1.2;color: inherit;}/* Settings Popup */.cli-container-fluid {padding-right: 15px;padding-left: 15px;margin-right: auto;margin-left: auto;}.cli-row {display: -ms-flexbox;display: flex;-ms-flex-wrap:
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 69 2d 6d 6f 64 61 6c 2d 6f 70 65 6e 20 2e 63 6c 69 2d 6d 6f 64 61 6c 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 0a 09 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 61 75 74 6f 0a 7d 0a 2e 63 6c 69 2d 6d 6f 64 61 6c 2e 63 6c 69 2d 66 61 64 65 20 2e 63 6c 69 2d 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 7b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 Data Ascii: i-modal-open .cli-modal {overflow-x: hidden;overflow-y: auto}.cli-modal.cli-fade .cli-modal-dialog {transition: -webkit-transform .3s ease-out;transition: transform .3s ease-out;transition: transform .3s ease-out,-webkit-transform .3s ease-out
2024-04-23 14:06:11 UTC	2896	IN	Data Raw: 6d 69 6e 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 28 31 2e 37 35 72 65 6d 20 2a 20 32 29 29 0a 09 7d 0a 7d 0a 2e 63 6c 69 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c Data Ascii: min-height: calc(100% - (1.75rem * 2))}}.cli-modal-content {position: relative;display: -ms-flexbox;display: flex;-ms-flex-direction: column;flex-direction: column;width: 100%;pointer-events: auto;background-color: #fff;background-cl
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 2d 62 61 72 20 2e 63 6c 69 2d 74 61 62 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2d 62 61 72 20 73 70 61 6e 2e 63 6c 69 2d 6e 65 63 65 73 73 61 72 79 2d 63 61 70 74 69 6f 6e 2c 23 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2d 62 61 72 20 2e 63 6c 69 2d 73 77 69 74 63 68 20 2e 63 6c 69 2d 73 6c 69 64 65 72 3a 61 66 74 65 72 0a 7b 0a 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 23 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2d 62 61 72 20 2e 63 6c 69 2d 74 61 62 2d 68 65 61 64 65 72 20 61 3a 62 65 66 6f 72 65 0a 7b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 Data Ascii: -bar .cli-tab-container p,#cookie-law-info-bar span.cli-necessary-caption,#cookie-law-info-bar .cli-switch .cli-slider:after{color:inherit;}#cookie-law-info-bar .cli-tab-header a:before{border-right: 1px solid currentColor;border-bottom: 1px soli
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 34 70 78 3b 0a 09 74 6f 70 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 35 70 78 29 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 09 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 63 6c 69 2d 74 61 62 2d 68 65 61 64 65 72 20 61 3a 62 65 66 6f 72 65 20 7b 0a 09 77 69 64 74 68 3a 20 37 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 37 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 34 61 36 65 37 38 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 34 61 36 65 37 38 3b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 Data Ascii: 4px;top: calc(50% - 5px);-webkit-transform: none;transform: none;}.cli-tab-header a:before {width: 7px;height: 7px;border-right: 1px solid #4a6e78;border-bottom: 1px solid #4a6e78;content: " ";transform: rotate(-45deg);-webkit-transi
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 2e 77 74 2d 63 6c 69 2d 70 72 69 76 61 63 79 0a 7b 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 2e 63 6c 69 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 0a 7b 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 2e 63 6c 69 2d 74 61 62 2d 73 65 63 74 69 6f 6e 20 2e 63 6c 69 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 20 35 70 78 20 32 30 70 78 3b 0a 7d 0a 2e 63 6c 69 2d 74 61 62 2d 73 65 63 74 69 6f 6e 0a 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 09 2e 63 6c Data Ascii: margin-top: 0;padding: 0;color: #000;}.wt-cli-privacy{display:none;}.cli-tab-content{display:none;}.cli-tab-section .cli-tab-content{padding: 10px 20px 5px 20px;}.cli-tab-section{margin-top:5px;}@media (min-width: 992px) {.cl
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 2e 63 6c 69 2d 70 72 69 76 61 63 79 2d 6f 76 65 72 76 69 65 77 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 63 6c 69 2d 74 61 62 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6c 69 2d 72 6f 77 0a 7b 0a 09 6d 61 78 2d 68 65 69 67 68 74 3a 20 35 30 30 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 63 6c 69 2d 6d 6f 64 61 6c 2e 63 6c 69 2d 62 6c 6f 77 75 70 2e 63 6c 69 2d 6f 75 74 20 7b 0a 09 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 7d 0a 2e 63 6c 69 2d 6d 6f 64 61 6c 2e 63 6c 69 2d 62 6c 6f 77 75 70 20 7b 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 3b 0a 09 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 0a 20 20 7d 0a 20 20 2e 63 6c 69 2d 6d 6f 64 61 6c 2e 63 6c 69 2d 62 6c 6f 77 75 70 20 2e Data Ascii: .cli-privacy-overview {display: none;}.cli-tab-container .cli-row{max-height: 500px;overflow-y: auto;}.cli-modal.cli-blowup.cli-out {z-index: -1;}.cli-modal.cli-blowup {z-index: 999999;transform: scale(1); } .cli-modal.cli-blowup .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49912	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:10 UTC	591	OUT	GET /wp-content/themes/regionalexpress/style.css?ver=5.7.11 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:10 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:10 GMT Content-Type: text/css Content-Length: 19515 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:10 GMT Vary: Accept-Encoding
2024-04-23 14:06:10 UTC	6962	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 52 65 67 69 6f 6e 61 6c 20 45 78 70 72 65 73 73 0a 41 75 74 68 6f 72 3a 20 41 75 64 72 65 79 20 44 65 6c c3 a9 63 6f 6c 6c 65 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 63 6f 64 69 6b 61 2e 66 72 2f 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 c3 a8 6d 65 20 52 65 67 69 6f 6e 61 6c 20 45 78 70 72 65 73 73 0a 54 65 6d 70 6c 61 74 65 3a 20 62 62 2d 74 68 65 6d 65 0a 56 65 72 73 69 6f 6e 3a 20 31 0a 43 72 65 61 74 65 64 20 6f 6e 20 3a 20 32 30 20 61 6f c3 bb 74 20 32 30 31 39 2c 20 32 33 3a 31 38 3a 34 33 0a 2a 2f 0a 0a 68 74 6d 6c 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a Data Ascii: /Theme Name: Regional ExpressAuthor: Audrey DelcolleAuthor URI: http://www.codika.fr/Description: Thme Regional ExpressTemplate: bb-themeVersion: 1Created on : 20 aot 2019, 23:18:43/html {font-family: sans-serif;-webkit-text-size-adj
2024-04-23 14:06:10 UTC	5792	IN	Data Raw: 67 20 74 6f 6f 20 77 69 64 65 20 2a 2f 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 63 61 70 74 69 6f 6e 2c 0a 74 68 2c 0a 74 64 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 74 68 20 7b 0a 09 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 31 70 78 20 31 70 78 20 30 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 7d 0a 0a 74 64 20 7b 0a 09 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 31 70 78 20 31 70 78 20 30 3b 0a 7d 0a 0a 74 68 2c 0a 74 64 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 30 2e 34 33 37 35 65 6d 3b 0a 7d 0a 2e 63 6c 65 61 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 20 7d 0a 0a 2f 2a 2a 0a 20 2a 20 35 2e 30 20 2d 20 46 6f 72 6d Data Ascii: g too wide /width: 100%;}caption,th,td {font-weight: normal;text-align: left;}th {border-width: 0 1px 1px 0;font-weight: 700;}td {border-width: 0 1px 1px 0;}th,td {padding: 0.4375em;}.clear { clear:both }/* * 5.0 - Form
2024-04-23 14:06:10 UTC	1448	IN	Data Raw: 2d 66 6f 6f 74 65 72 20 2e 66 6f 6f 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 33 2e 31 32 35 25 20 37 2e 37 25 20 33 2e 36 34 25 3b 0a 0a 7d 0a 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 6c 6f 67 6f 2d 6c 69 6e 6b 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 25 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 33 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 66 6f 6f 74 65 72 2d 6d 65 6e 75 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 25 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 Data Ascii: -footer .footer-container {padding:3.125% 7.7% 3.64%;}.site-footer .logo-link {margin-bottom:10%;padding-left:13px;display:inline-block;}.site-footer .footer-menu {margin-bottom:10%;display:inline-block;font-size:18px;vertical-align:t
2024-04-23 14:06:11 UTC	5313	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 31 66 31 66 31 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 32 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 09 63 6c 69 70 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 6e 6f 6e 65 3b 0a 09 63 6f 6c 6f 72 3a 20 23 32 31 37 35 39 62 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 38 37 35 72 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6c 65 66 74 3a 20 35 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 70 Data Ascii: ound-color: #f1f1f1;border-radius: 3px;box-shadow: 0 0 2px 2px rgba(0, 0, 0, 0.6);clip: auto !important;clip-path: none;color: #21759b;display: block;font-size:0.875rem;font-weight: bold;height: auto;left: 5px;line-height: normal;p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49913	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:10 UTC	611	OUT	GET /wp-content/uploads/pum/pum-site-styles.css?generated=1709309010&ver=1.18.1 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:10 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:10 GMT Content-Type: text/css Content-Length: 18874 Connection: close Server: Apache Last-Modified: Fri, 01 Mar 2024 16:03:30 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:10 GMT Vary: Accept-Encoding
2024-04-23 14:06:10 UTC	2618	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 44 6f 20 6e 6f 74 20 74 6f 75 63 68 20 74 68 69 73 20 66 69 6c 65 21 20 54 68 69 73 20 66 69 6c 65 20 63 72 65 61 74 65 64 20 62 79 20 74 68 65 20 50 6f 70 75 70 20 4d 61 6b 65 72 20 70 6c 75 67 69 6e 20 75 73 69 6e 67 20 50 48 50 0a 20 2a 20 4c 61 73 74 20 6d 6f 64 69 66 69 65 64 20 74 69 6d 65 3a 20 4d 61 72 20 30 31 20 32 30 32 34 2c 20 30 35 3a 30 33 3a 32 39 0a 20 2a 2f 0a 0a 0a 2f 2a 20 50 6f 70 75 70 20 47 6f 6f 67 6c 65 20 46 6f 6e 74 73 20 2a 2f 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 3a 31 30 30 27 29 3b 0d 0a 0d 0a 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 2d 66 6f 72 65 76 Data Ascii: /** * Do not touch this file! This file created by the Popup Maker plugin using PHP * Last modified time: Mar 01 2024, 05:03:29 // Popup Google Fonts */@import url('//fonts.googleapis.com/css?family=Montserrat:100');@keyframes rotate-forev
2024-04-23 14:06:10 UTC	7240	IN	Data Raw: 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 70 75 6d 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 75 6d 2d 72 65 73 70 6f 6e 73 69 76 65 2e 70 75 6d 2d 70 6f 73 69 74 69 6f 6e 2d 66 69 78 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 7d 2e 70 75 6d 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 75 73 74 6f 6d 2d 70 6f 73 69 74 69 6f 6e 7b 6c 65 66 74 3a 61 75 74 6f 3b 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 7d 2e 70 75 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 75 6d 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 7d 2e 70 75 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 70 75 6d 2d 63 6f 6e 74 65 6e 74 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 75 6d 2d 66 6f 72 6d 5f 5f 6d 65 73 73 61 67 Data Ascii: -width:1024px){.pum-container.pum-responsive.pum-position-fixed{position:absolute}}.pum-container.custom-position{left:auto;top:auto;margin-left:inherit}.pum-container .pum-title{margin-bottom:.5em}.pum-container .pum-content>:last-child,.pum-form__messag
2024-04-23 14:06:10 UTC	2896	IN	Data Raw: 20 72 69 67 68 74 3a 20 30 70 78 3b 20 62 6f 74 74 6f 6d 3a 20 61 75 74 6f 3b 20 74 6f 70 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 38 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 6e 68 65 72 69 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 36 70 78 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 6e 6f 6e 65 20 23 66 66 66 66 66 66 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 70 78 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 31 70 78 20 33 70 78 20 30 70 78 20 72 67 62 61 28 20 32 2c 20 32 2c 20 32 2c 20 30 2e Data Ascii: right: 0px; bottom: auto; top: 0px; padding: 8px; color: #ffffff; font-family: inherit; font-weight: 400; font-size: 12px; font-style: inherit; line-height: 36px; border: 1px none #ffffff; border-radius: 0px; box-shadow: 1px 1px 3px 0px rgba( 2, 2, 2, 0.
2024-04-23 14:06:11 UTC	4344	IN	Data Raw: 20 30 2e 37 35 20 29 20 7d 20 0d 0a 2e 70 75 6d 2d 74 68 65 6d 65 2d 33 36 32 32 20 2e 70 75 6d 2d 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 70 75 6d 2d 74 68 65 6d 65 2d 68 65 6c 6c 6f 2d 62 6f 78 20 2e 70 75 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 30 70 78 3b 20 62 6f 72 64 65 72 3a 20 31 34 70 78 20 73 6f 6c 69 64 20 23 38 31 64 37 34 32 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 20 72 67 62 61 28 20 32 2c 20 32 2c 20 32 2c 20 30 2e 30 30 20 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 31 2e 30 30 20 29 20 7d 20 0d 0a 2e 70 75 6d 2d 74 68 65 Data Ascii: 0.75 ) } .pum-theme-3622 .pum-container, .pum-theme-hello-box .pum-container { padding: 30px; border-radius: 80px; border: 14px solid #81d742; box-shadow: 0px 0px 0px 0px rgba( 2, 2, 2, 0.00 ); background-color: rgba( 255, 255, 255, 1.00 ) } .pum-the
2024-04-23 14:06:11 UTC	1776	IN	Data Raw: 72 20 2e 70 75 6d 2d 63 6f 6e 74 65 6e 74 20 2b 20 2e 70 75 6d 2d 63 6c 6f 73 65 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 68 65 69 67 68 74 3a 20 31 38 70 78 3b 20 77 69 64 74 68 3a 20 31 38 70 78 3b 20 6c 65 66 74 3a 20 61 75 74 6f 3b 20 72 69 67 68 74 3a 20 35 70 78 3b 20 62 6f 74 74 6f 6d 3a 20 61 75 74 6f 3b 20 74 6f 70 3a 20 35 30 25 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 35 30 35 30 35 30 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 61 6e 73 2d 53 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 35 30 Data Ascii: r .pum-content + .pum-close { position: absolute; height: 18px; width: 18px; left: auto; right: 5px; bottom: auto; top: 50%; padding: 0px; color: #505050; font-family: Sans-Serif; font-weight: 700; font-size: 15px; line-height: 18px; border: 1px solid #50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49914	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:10 UTC	610	OUT	GET /wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.3.2.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:10 UTC	296	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:10 GMT Content-Type: text/css Content-Length: 5410 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:23:30 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:10 GMT Vary: Accept-Encoding
2024-04-23 14:06:10 UTC	2600	IN	Data Raw: 2e 6d 66 70 2d 62 67 2c 2e 6d 66 70 2d 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6d 66 70 2d 62 67 2c 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6d 66 70 2d 77 72 61 70 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 2e 6d 66 70 2d 66 69 67 75 72 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 7d 2e 6d 66 70 2d 62 67 7b 7a 2d 69 6e 64 65 78 3a 31 30 34 32 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 62 30 62 30 62 3b 6f 70 61 63 69 74 79 3a 2e 38 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 7d 2e 6d 66 70 2d 77 72 61 70 7b Data Ascii: .mfp-bg,.mfp-wrap{position:fixed;left:0;top:0}.mfp-bg,.mfp-container,.mfp-wrap{height:100%;width:100%}.mfp-container:before,.mfp-figure:after{content:''}.mfp-bg{z-index:1042;overflow:hidden;background:#0b0b0b;opacity:.8;filter:alpha(opacity=80)}.mfp-wrap{
2024-04-23 14:06:10 UTC	1467	IN	Data Raw: 77 3a 61 66 74 65 72 2c 2e 6d 66 70 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 35 70 78 3b 62 6f 72 64 65 72 3a 69 6e 73 65 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6d 66 70 2d 61 72 72 6f 77 20 2e 6d 66 70 2d 61 2c 2e 6d 66 70 2d 61 72 72 6f 77 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 31 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 33 70 78 3b 74 6f 70 3a 38 70 78 7d 2e 6d 66 70 2d 61 72 72 Data Ascii: w:after,.mfp-arrow:before{content:'';display:block;width:0;height:0;position:absolute;left:0;top:0;margin-top:35px;margin-left:35px;border:inset transparent}.mfp-arrow .mfp-a,.mfp-arrow:after{border-top-width:13px;border-bottom-width:13px;top:8px}.mfp-arr
2024-04-23 14:06:10 UTC	1343	IN	Data Raw: 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 6d 66 70 2d 74 69 74 6c 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 63 6f 6c 6f 72 3a 23 66 33 66 33 66 33 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 36 70 78 7d 2e 6d 66 70 2d 67 61 6c 6c 65 72 79 20 2e 6d 66 70 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 66 69 67 75 72 65 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 30 30 70 78 29 20 61 6e 64 20 28 6f 72 69 65 Data Ascii: ition:absolute;top:100%;left:0;width:100%;cursor:auto}.mfp-title{text-align:left;line-height:18px;color:#f3f3f3;word-wrap:break-word;padding-right:36px}.mfp-gallery .mfp-image-holder .mfp-figure{cursor:pointer}@media screen and (max-width:800px) and (orie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49916	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:10 UTC	592	OUT	GET /wp-content/themes/bb-theme/css/base.min.css?ver=1.7.6.3 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:11 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:11 GMT Content-Type: text/css Content-Length: 48426 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:38 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:11 GMT Vary: Accept-Encoding
2024-04-23 14:06:11 UTC	2599	IN	Data Raw: 2f 2a 21 0a 20 2a 20 41 20 6c 69 67 68 74 77 65 69 67 68 74 20 62 75 69 6c 64 20 74 68 61 74 20 6f 6e 6c 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 43 53 53 20 6e 65 65 64 65 64 0a 20 2a 20 66 6f 72 20 74 68 65 20 67 72 69 64 20 73 79 73 74 65 6d 20 61 6e 64 20 62 61 73 69 63 20 73 74 79 6c 69 6e 67 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 74 68 65 0a 20 2a 20 66 75 6c 6c 20 42 6f 6f 74 73 74 72 61 70 20 6c 69 62 72 61 72 79 2c 20 70 6c 65 61 73 65 20 63 68 6f 6f 73 65 20 42 6f 6f 74 73 74 72 61 70 20 33 20 6f 72 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 34 20 75 73 69 6e 67 20 74 68 65 20 46 72 61 6d 65 77 6f 72 6b 20 6f 70 74 69 6f 6e 20 69 6e 20 74 68 65 20 43 75 73 74 6f 6d 69 7a 65 72 2e 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 0a 20 2a 20 2d Data Ascii: /! A lightweight build that only contains the CSS needed * for the grid system and basic styling. If you need the * full Bootstrap library, please choose Bootstrap 3 or * Bootstrap 4 using the Framework option in the Customizer. * * Includes * -
2024-04-23 14:06:11 UTC	7259	IN	Data Raw: 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 66 69 65 6c 64 73 65 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 30 63 30 63 30 3b 6d 61 72 67 69 6e 3a 30 20 32 70 78 3b 70 61 64 64 69 6e 67 3a 30 2e 33 35 65 6d 20 30 2e 36 32 35 65 6d 20 30 2e 37 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 6f 70 74 67 72 6f 75 70 7b 66 6f Data Ascii: [type="search"]::-webkit-search-cancel-button,input[type="search"]::-webkit-search-decoration{-webkit-appearance:none}fieldset{border:1px solid #c0c0c0;margin:0 2px;padding:0.35em 0.625em 0.75em}legend{border:0;padding:0}textarea{overflow:auto}optgroup{fo
2024-04-23 14:06:11 UTC	2896	IN	Data Raw: 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 61 6c 6c 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 70 72 65 20 63 6f 64 65 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 70 72 65 Data Ascii: ight:1.42857143;color:#333;word-break:break-all;word-wrap:break-word;background-color:#f5f5f5;border:1px solid #ccc;border-radius:4px}pre code{padding:0;font-size:inherit;color:inherit;white-space:pre-wrap;background-color:transparent;border-radius:0}.pre
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 74 3a 35 30 25 7d 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a Data Ascii: t:50%}.col-xs-offset-5{margin-left:41.66666667%}.col-xs-offset-4{margin-left:33.33333333%}.col-xs-offset-3{margin-left:25%}.col-xs-offset-2{margin-left:16.66666667%}.col-xs-offset-1{margin-left:8.33333333%}.col-xs-offset-0{margin-left:0}@media (min-width:
2024-04-23 14:06:11 UTC	4344	IN	Data Raw: 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 Data Ascii: 6667%}.col-sm-push-1{left:8.33333333%}.col-sm-push-0{left:auto}.col-sm-offset-12{margin-left:100%}.col-sm-offset-11{margin-left:91.66666667%}.col-sm-offset-10{margin-left:83.33333333%}.col-sm-offset-9{margin-left:75%}.col-sm-offset-8{margin-left:66.666666
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 74 61 62 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 70 61 64 64 69 6e 67 3a 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 Data Ascii: px;padding-bottom:8px;color:#777;text-align:left}th{text-align:left}.table{width:100%;max-width:100%;margin-bottom:20px}.table>thead>tr>th,.table>tbody>tr>th,.table>tfoot>tr>th,.table>thead>tr>td,.table>tbody>tr>td,.table>tfoot>tr>td{padding:8px;line-heig
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 6f 64 79 3e 74 72 3e 74 68 2e 61 63 74 69 76 65 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2e 61 63 74 69 76 65 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 61 63 74 69 76 65 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 61 63 74 69 76 65 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 61 63 74 69 76 65 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 61 63 74 69 76 65 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 61 63 74 69 76 65 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 61 63 74 69 76 65 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 61 63 74 69 76 65 Data Ascii: ody>tr>th.active,.table>tfoot>tr>th.active,.table>thead>tr.active>td,.table>tbody>tr.active>td,.table>tfoot>tr.active>td,.table>thead>tr.active>th,.table>tbody>tr.active>th,.table>tfoot>tr.active>th{background-color:#f5f5f5}.table-hover>tbody>tr>td.active
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 6f 76 65 72 3e 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 34 65 33 66 33 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 77 61 72 6e 69 Data Ascii: over>.info,.table-hover>tbody>tr.info:hover>th{background-color:#c4e3f3}.table>thead>tr>td.warning,.table>tbody>tr>td.warning,.table>tfoot>tr>td.warning,.table>thead>tr>th.warning,.table>tbody>tr>th.warning,.table>tfoot>tr>th.warning,.table>thead>tr.warni
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 Data Ascii: .table-responsive>.table>thead>tr>th,.table-responsive>.table>tbody>tr>th,.table-responsive>.table>tfoot>tr>th,.table-responsive>.table>thead>tr>td,.table-responsive>.table>tbody>tr>td,.table-responsive>.table>tfoot>tr>td{white-space:nowrap}.table-respons
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d Data Ascii: el{display:inline-block;max-width:100%;margin-bottom:5px;font-weight:700}input[type="search"]{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-appearance:none;appearance:none}input[type="radio"],input[type="checkbox"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49917	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:10 UTC	599	OUT	GET /wp-content/uploads/bb-theme/skin-5f0f035474926.css?ver=1.7.6.3 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:11 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:11 GMT Content-Type: text/css Content-Length: 51594 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:52 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:11 GMT Vary: Accept-Encoding
2024-04-23 14:06:11 UTC	5514	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 63 6f 6c 6f 72 3a 23 38 30 38 30 38 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 35 3b 70 61 64 64 69 6e 67 3a 30 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 62 6f 64 79 2e 6d 6f 64 61 6c 2d 6f 70 65 6e 20 2e 6d 65 64 69 61 2d 6d 6f 64 61 6c 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 2c 62 6f 64 79 2e 6d 6f 64 61 6c 2d 6f 70 65 6e 20 2e 6d 65 64 69 61 2d 6d 6f 64 61 6c 2d 63 6c 6f 73 65 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e Data Ascii: body{background-color:#f2f2f2;color:#808080;font-family:"Montserrat",sans-serif;font-size:14px;font-weight:400;line-height:1.45;padding:0;word-wrap:break-word}body.modal-open .media-modal-close:hover,body.modal-open .media-modal-close:focus{background:non
2024-04-23 14:06:11 UTC	7240	IN	Data Raw: 72 69 67 68 74 3a 30 3b 74 6f 70 3a 31 30 30 25 3b 77 69 64 74 68 3a 34 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 7d 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 73 65 61 72 63 68 20 66 6f 72 6d 20 69 6e 70 75 74 2e 66 6c 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 Data Ascii: right:0;top:100%;width:400px;z-index:1000;-moz-box-shadow:0 1px 20px rgba(0,0,0,0.15);-webkit-box-shadow:0 1px 20px rgba(0,0,0,0.15);box-shadow:0 1px 20px rgba(0,0,0,0.15)}.fl-page-nav-search form input.fl-search-input{background-color:#fff;border-color:#
2024-04-23 14:06:11 UTC	2896	IN	Data Raw: 69 67 6e 6e 6f 6e 65 7b 6d 61 72 67 69 6e 3a 35 70 78 20 32 30 70 78 20 32 30 70 78 20 30 7d 61 20 69 6d 67 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 35 70 78 20 32 30 70 78 20 32 30 70 78 20 30 7d 61 20 69 6d 67 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 77 70 2d 63 61 70 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 36 65 36 65 36 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 63 Data Ascii: ignnone{margin:5px 20px 20px 0}a img.alignleft{float:left;margin:5px 20px 20px 0}a img.aligncenter{display:block;margin-left:auto;margin-right:auto}.wp-caption{background:#f7f7f7;border:1px solid #e6e6e6;max-width:100%;padding:10px;text-align:center}.wp-c
2024-04-23 14:06:11 UTC	4344	IN	Data Raw: 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 2c 2e 66 6c 2d 70 61 67 65 20 2e 66 6c 2d 70 6f 73 74 2d 6d 6f 64 75 6c 65 2d 77 6f 6f 2d 62 75 74 74 6f 6e 20 61 2e 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 31 35 31 35 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 62 65 39 65 62 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 22 2c 56 65 72 64 61 6e 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: -woocommerce button.button.alt,.fl-page .fl-post-module-woo-button a.button{color:#515151;background-color:#ebe9eb;font-family:"Helvetica",Verdana,Arial,sans-serif;font-weight:700;font-size:16px;line-height:1.2;text-transform:none;border:none;border-radiu
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 77 65 65 6b 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a Data Ascii: put-placeholder,input[type=tel]::-webkit-input-placeholder,input[type=date]::-webkit-input-placeholder,input[type=month]::-webkit-input-placeholder,input[type=week]::-webkit-input-placeholder,input[type=time]::-webkit-input-placeholder,input[type=number]:
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 79 70 65 3d 74 65 6c 5d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 77 65 65 6b 5d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 2d 6d 73 2d 69 6e 70 Data Ascii: ype=tel]:-ms-input-placeholder,input[type=date]:-ms-input-placeholder,input[type=month]:-ms-input-placeholder,input[type=week]:-ms-input-placeholder,input[type=time]:-ms-input-placeholder,input[type=number]:-ms-input-placeholder,input[type=search]:-ms-inp
2024-04-23 14:06:11 UTC	2896	IN	Data Raw: 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 63 6c 6f 73 65 2c 2e 6d 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 61 63 74 69 76 65 2c 2e 6d 66 70 2d 77 72 61 70 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 2c Data Ascii: transparent !important;border:none !important;outline:none;position:absolute;top:50%;box-shadow:none !important;-moz-box-shadow:none !important;-webkit-box-shadow:none !important}.mfp-wrap .mfp-close,.mfp-wrap .mfp-close:active,.mfp-wrap .mfp-close:hover,
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 65 20 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 77 72 61 70 20 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 30 70 78 7d 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 63 6f 6c 6c 61 70 73 65 20 75 6c 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 6c 69 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 63 6f 6c 6c 61 70 73 65 20 75 6c 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 Data Ascii: e .fl-page-header-wrap .fl-page-header-container{padding-left:40px;padding-right:40px}.fl-page-nav-collapse ul.navbar-nav>li{border:none}.fl-page-nav-collapse ul.navbar-nav>li:first-child{border:none}.fl-page-header-container,.fl-page-nav-container{positi
2024-04-23 14:06:11 UTC	2896	IN	Data Raw: 61 76 20 6c 69 2e 6d 65 67 61 2d 6d 65 6e 75 2e 6d 65 67 61 2d 6d 65 6e 75 2d 69 74 65 6d 73 2d 35 3e 75 6c 3e 6c 69 7b 77 69 64 74 68 3a 32 30 25 7d 75 6c 2e 6e 61 76 62 61 72 2d 6e 61 76 20 6c 69 2e 6d 65 67 61 2d 6d 65 6e 75 2e 6d 65 67 61 2d 6d 65 6e 75 2d 69 74 65 6d 73 2d 36 3e 75 6c 3e 6c 69 7b 77 69 64 74 68 3a 31 36 2e 36 36 25 7d 2e 66 6c 2d 63 6f 6e 74 65 6e 74 2c 2e 66 6c 2d 73 69 64 65 62 61 72 7b 6d 61 72 67 69 6e 3a 34 30 70 78 20 30 7d 2e 66 6c 2d 66 75 6c 6c 2d 77 69 64 74 68 2e 66 6c 2d 66 6f 6f 74 65 72 2d 65 66 66 65 63 74 20 2e 66 6c 2d 70 61 67 65 2d 66 6f 6f 74 65 72 2d 77 72 61 70 7b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 Data Ascii: av li.mega-menu.mega-menu-items-5>ul>li{width:20%}ul.navbar-nav li.mega-menu.mega-menu-items-6>ul>li{width:16.66%}.fl-content,.fl-sidebar{margin:40px 0}.fl-full-width.fl-footer-effect .fl-page-footer-wrap{z-index:-1;position:fixed;bottom:0;left:0;width:10
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 76 2d 72 69 67 68 74 20 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 63 6f 6c 6c 61 70 73 65 20 75 6c 2e 6e 61 76 62 61 72 2d 6e 61 76 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 74 6f 67 67 6c 65 2d 76 69 73 69 62 6c 65 2d 6d 6f 62 69 6c 65 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 72 69 67 68 74 20 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 72 6f 77 20 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 6c 6f 67 6f 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 74 6f 67 67 6c 65 2d 76 69 73 Data Ascii: v-right .fl-page-nav-collapse ul.navbar-nav{float:none !important}.fl-page-nav-toggle-button.fl-page-nav-toggle-visible-mobile.fl-page-nav-right .fl-page-header-row .fl-page-header-logo{padding-bottom:30px}.fl-page-nav-toggle-button.fl-page-nav-toggle-vis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49918	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:11 UTC	617	OUT	GET /wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.0 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:11 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:11 GMT Content-Type: application/javascript Content-Length: 11835 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:30 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:11 GMT Vary: Accept-Encoding
2024-04-23 14:06:11 UTC	8396	IN	Data Raw: 3b 76 61 72 20 45 78 61 63 74 4d 65 74 72 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 69 3d 27 27 2c 72 3d 21 31 3b 74 68 69 73 2e 73 65 74 4c 61 73 74 43 6c 69 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 74 3d 74 79 70 65 6f 66 20 74 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 74 3a 5b 5d 3b 6e 3d 74 79 70 65 6f 66 20 6e 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 6e 3a 5b 5d 3b 69 3d 74 79 70 65 6f 66 20 69 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 3f 69 3a 21 31 3b 65 2e 76 61 6c 75 65 73 41 72 72 61 79 3d 74 3b 65 2e 66 69 65 6c 64 73 41 72 72 61 79 3d 6e 7d 3b 74 68 69 73 2e 67 65 74 4c 61 73 74 43 6c 69 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 74 68 69 73 2e 73 65 Data Ascii: ;var ExactMetrics=function(){var e=[],i='',r=!1;this.setLastClicked=function(t,n,i){t=typeof t!=='undefined'?t:[];n=typeof n!=='undefined'?n:[];i=typeof i!=='undefined'?i:!1;e.valuesArray=t;e.fieldsArray=n};this.getLastClicked=function(){return e};this.se
2024-04-23 14:06:11 UTC	3439	IN	Data Raw: 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 29 7b 69 66 28 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 29 7b 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 0a 65 6c 73 65 7b 6e 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 7d 3b 6b 3d 7b 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 3a 69 2c 65 76 65 6e 74 5f 6c 61 62 65 6c 3a 66 7c 7c 65 2e 74 69 74 6c 65 2c 65 76 65 6e 74 5f 63 61 6c 6c 62 61 63 6b 3a 70 2c 69 73 5f 61 66 66 69 6c 69 61 74 65 5f 6c 69 6e 6b 3a 21 30 2c 61 66 66 69 6c 69 61 74 65 5f 6c 61 62 65 6c 3a 69 2e 72 65 70 6c 61 63 65 28 27 6f 75 74 62 6f 75 6e 64 2d 6c 69 6e 6b 2d 27 2c 27 27 29 2c 6c 69 6e 6b 5f 74 65 78 74 3a 66 7c 7c 65 2e 74 69 74 6c 65 2c 6c 69 6e 6b 5f 75 72 6c 3a 63 2c 6c 69 6e 6b 5f 64 6f 6d 61 69 6e 3a Data Ascii: defaultPrevented){if(n.preventDefault){n.preventDefault()}else{n.returnValue=!1}};k={event_category:i,event_label:f\|\|e.title,event_callback:p,is_affiliate_link:!0,affiliate_label:i.replace('outbound-link-',''),link_text:f\|\|e.title,link_url:c,link_domain:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49919	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:11 UTC	568	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:11 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:11 GMT Content-Type: application/javascript Content-Length: 89496 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:47:04 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:11 GMT Vary: Accept-Encoding
2024-04-23 14:06:11 UTC	4052	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-23 14:06:11 UTC	7240	IN	Data Raw: 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 6a 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 74 3d 5b 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d Data Ascii: ,t){return e===t&&(l=!0),0},j={}.hasOwnProperty,t=[],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|m
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 Data Ascii: ></select>";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disab
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 65 5d 2c 73 3d 5b 74 5d 3b 69 66 28 21 69 7c 7c 21 6f 29 72 65 74 75 72 6e 20 65 3d 3d 43 3f 2d 31 3a 74 3d 3d 43 3f 31 3a 69 3f 2d 31 3a 6f 3f 31 3a 75 3f 50 28 75 2c 65 29 2d 50 28 75 2c 74 29 3a 30 3b 69 66 28 69 3d 3d 3d 6f 29 72 65 74 75 72 6e 20 70 65 28 65 2c 74 29 3b 6e 3d 65 3b 77 68 69 6c 65 28 6e 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 29 61 2e 75 6e 73 68 69 66 74 28 6e 29 3b 6e 3d 74 3b 77 68 69 6c 65 28 6e 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 29 73 2e 75 6e 73 68 69 66 74 28 6e 29 3b 77 68 69 6c 65 28 61 5b 72 5d 3d 3d 3d 73 5b 72 5d 29 72 2b 2b 3b 72 65 74 75 72 6e 20 72 3f 70 65 28 61 5b 72 5d 2c 73 5b 72 5d 29 3a 61 5b 72 5d 3d 3d 70 3f 2d 31 3a 73 5b 72 5d 3d 3d 70 3f 31 3a 30 7d 29 2c 43 7d 2c 73 65 2e 6d 61 74 63 68 65 73 3d 66 75 6e Data Ascii: e],s=[t];if(!i\|\|!o)return e==C?-1:t==C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]==p?-1:s[r]==p?1:0}),C},se.matches=fun
2024-04-23 14:06:12 UTC	1448	IN	Data Raw: 28 74 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 28 62 3d 73 65 2e 73 65 6c 65 63 74 6f 72 73 3d 7b 63 61 63 68 65 4c 65 6e 67 74 68 3a 35 30 2c 63 72 65 61 74 65 50 73 65 75 64 6f 3a 6c 65 2c 6d 61 74 63 68 3a 47 2c 61 74 74 72 48 61 6e 64 6c 65 3a 7b 7d 2c 66 69 6e 64 3a 7b 7d 2c 72 65 6c 61 74 69 76 65 3a 7b 22 3e 22 3a 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 66 69 72 73 74 3a 21 30 7d 2c 22 20 22 3a 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 7d 2c 22 2b 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 66 69 72 73 74 3a 21 30 7d 2c 22 7e 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 7d 7d 2c 70 72 65 46 69 6c 74 65 72 3a 7b 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: (t);return n},(b=se.selectors={cacheLength:50,createPseudo:le,match:G,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){retu
2024-04-23 14:06:12 UTC	2896	IN	Data Raw: 78 4f 66 28 69 29 3a 22 7c 3d 22 3d 3d 3d 72 26 26 28 74 3d 3d 3d 69 7c 7c 74 2e 73 6c 69 63 65 28 30 2c 69 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 3d 69 2b 22 2d 22 29 29 7d 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 65 2c 74 2c 67 2c 76 29 7b 76 61 72 20 79 3d 22 6e 74 68 22 21 3d 3d 68 2e 73 6c 69 63 65 28 30 2c 33 29 2c 6d 3d 22 6c 61 73 74 22 21 3d 3d 68 2e 73 6c 69 63 65 28 2d 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 Data Ascii: xOf(i):"\|="===r&&(t===i\|\|t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibli
2024-04-23 14:06:12 UTC	1448	IN	Data Raw: 4c 6f 77 65 72 43 61 73 65 28 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 73 74 3a 76 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 30 5d 7d 29 2c 6c 61 73 74 3a 76 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2d 31 5d 7d 29 2c 65 71 3a 76 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 5b 6e 3c 30 3f 6e 2b 74 3a 6e 5d 7d 29 2c 65 76 65 6e 3a 76 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b Data Ascii: LowerCase()&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},first:ve(function(){return[0]}),last:ve(function(e,t){return[t-1]}),eq:ve(function(e,t,n){return[n<0?n+t:n]}),even:ve(function(e,t){for(var n=0;n<t;n+=2)e.push(n);
2024-04-23 14:06:12 UTC	2896	IN	Data Raw: 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 64 2c 68 2c 67 2c 76 2c 79 2c 65 29 7b 72 65 74 75 72 6e 20 76 26 26 21 76 5b 53 5d 26 26 28 76 3d 43 65 28 76 29 29 2c 79 26 26 21 79 5b 53 5d 26 26 28 79 3d 43 65 28 79 2c 65 29 29 2c 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 3d 5b 5d 2c 75 3d 5b 5d 2c 6c 3d 74 2e 6c 65 6e 67 74 68 2c 63 3d 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 65 28 65 2c 74 5b 72 5d 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 7d 28 68 7c 7c 22 2a 22 2c 6e 2e 6e 6f 64 65 54 79 70 65 3f 5b 6e 5d 3a 6e 2c 5b 5d 29 2c 66 3d 21 64 7c 7c 21 65 26 26 68 3f 63 3a 54 65 28 63 2c 73 2c Data Ascii: rn a}function Ce(d,h,g,v,y,e){return v&&!v[S]&&(v=Ce(v)),y&&!y[S]&&(y=Ce(y,e)),le(function(e,t,n,r){var i,o,a,s=[],u=[],l=t.length,c=e\|\|function(e,t,n){for(var r=0,i=t.length;r<i;r++)se(e,t[r],n);return n}(h\|\|"*",n.nodeType?[n]:n,[]),f=!d\|\|!e&&h?c:Te(c,s,
2024-04-23 14:06:12 UTC	1448	IN	Data Raw: 3b 69 66 28 28 75 3d 62 2e 66 69 6e 64 5b 73 5d 29 26 26 28 72 3d 75 28 61 2e 6d 61 74 63 68 65 73 5b 30 5d 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2c 65 65 2e 74 65 73 74 28 6f 5b 30 5d 2e 74 79 70 65 29 26 26 79 65 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 74 29 29 29 7b 69 66 28 6f 2e 73 70 6c 69 63 65 28 69 2c 31 29 2c 21 28 65 3d 72 2e 6c 65 6e 67 74 68 26 26 78 65 28 6f 29 29 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 72 29 2c 6e 3b 62 72 65 61 6b 7d 7d 7d 72 65 74 75 72 6e 28 6c 7c 7c 66 28 65 2c 63 29 29 28 72 2c 74 2c 21 45 2c 6e 2c 21 74 7c 7c 65 65 2e 74 65 73 74 28 65 29 26 26 79 65 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 74 29 2c 6e 7d 2c 64 2e 73 6f 72 74 53 74 61 62 6c 65 3d 53 2e 73 70 6c 69 74 28 22 22 29 2e Data Ascii: ;if((u=b.find[s])&&(r=u(a.matches[0].replace(te,ne),ee.test(o[0].type)&&ye(t.parentNode)\|\|t))){if(o.splice(i,1),!(e=r.length&&xe(o)))return H.apply(n,r),n;break}}}return(l\|\|f(e,c))(r,t,!E,n,!t\|\|ee.test(e)&&ye(t.parentNode)\|\|t),n},d.sortStable=S.split("").
2024-04-23 14:06:12 UTC	2896	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 76 61 72 20 4e 3d 2f 5e 3c 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 3a 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 29 5b 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 7c 29 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6d 28 6e 29 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 6e 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 21 3d 3d 72 7d 29 3a 6e 2e 6e 6f 64 65 54 79 70 65 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 Data Ascii: unction A(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()}var N=/^<([a-z][^\/\0>:\x20\t\r\n\f])[\x20\t\r\n\f]\/?>(?:<\/\1>\|)$/i;function D(e,n,r){return m(n)?S.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?S.grep(e,funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49920	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:11 UTC	576	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:11 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:11 GMT Content-Type: application/javascript Content-Length: 11224 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:47:04 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:11 GMT Vary: Accept-Encoding
2024-04-23 14:06:11 UTC	2585	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-04-23 14:06:11 UTC	2896	IN	Data Raw: 29 7d 2c 22 6a 51 75 65 72 79 2e 70 61 72 73 65 4a 53 4f 4e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 4a 53 4f 4e 2e 70 61 72 73 65 22 29 2c 6f 28 73 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 73 2e 68 6f 6c 64 52 65 61 64 79 2c 22 6a 51 75 65 72 79 2e 68 6f 6c 64 52 65 61 64 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 6f 28 73 2c 22 75 6e 69 71 75 65 22 2c 73 2e 75 6e 69 71 75 65 53 6f 72 74 2c 22 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 53 6f 72 74 22 29 2c 74 28 73 2e 65 78 70 72 2c 22 66 69 6c 74 65 72 73 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 2e 66 69 6c 74 65 72 73 20 69 73 20 64 65 Data Ascii: )},"jQuery.parseJSON is deprecated; use JSON.parse"),o(s,"holdReady",s.holdReady,"jQuery.holdReady is deprecated"),o(s,"unique",s.uniqueSort,"jQuery.unique is deprecated; use jQuery.uniqueSort"),t(s.expr,"filters",s.expr.pseudos,"jQuery.expr.filters is de
2024-04-23 14:06:11 UTC	2915	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 62 3d 21 30 2c 65 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 62 3d 21 31 2c 65 7d 29 7d 29 2c 73 2e 73 77 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 2c 69 2c 61 3d 7b 7d 3b 66 6f 72 28 69 20 69 6e 20 62 7c 7c 75 28 22 6a 51 75 65 72 79 2e 73 77 61 70 28 29 20 69 73 20 75 6e 64 6f 63 75 6d 65 6e 74 65 64 20 61 6e 64 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 29 61 5b 69 5d 3d 65 2e 73 74 79 6c 65 5b 69 5d 2c 65 2e 73 74 79 6c 65 5b 69 5d 3d 74 5b 69 5d 3b 66 6f 72 28 69 20 69 6e 20 6f 3d 72 2e 61 70 70 6c 79 28 65 2c 6e 7c 7c 5b 5d 29 2c 74 29 65 2e 73 74 79 6c 65 5b 69 5d 3d 61 5b 69 5d 3b 72 65 74 75 72 6e 20 6f 7d 2c Data Ascii: unction(){var e;return b=!0,e=r.apply(this,arguments),b=!1,e})}),s.swap=function(e,t,r,n){var o,i,a={};for(i in b\|\|u("jQuery.swap() is undocumented and deprecated"),t)a[i]=e.style[i],e.style[i]=t[i];for(i in o=r.apply(e,n\|\|[]),t)e.style[i]=a[i];return o},
2024-04-23 14:06:11 UTC	1448	IN	Data Raw: 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 20 63 68 61 6e 67 65 20 73 65 6c 65 63 74 20 73 75 62 6d 69 74 20 6b 65 79 64 6f 77 6e 20 6b 65 79 70 72 65 73 73 20 6b 65 79 75 70 20 63 6f 6e 74 65 78 74 6d 65 6e 75 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 73 2e 66 6e 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 22 2b 72 2b 22 28 29 20 65 76 65 6e 74 20 73 68 6f 72 74 68 61 6e 64 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 6e 28 72 2c 6e 75 6c 6c 2c 65 2c 74 29 3a 74 68 69 Data Ascii: usemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,r){s.fn[r]=function(e,t){return u("jQuery.fn."+r+"() event shorthand is deprecated"),0<arguments.length?this.on(r,null,e,t):thi
2024-04-23 14:06:11 UTC	1380	IN	Data Raw: 6e 20 50 28 65 29 2c 71 28 65 29 7d 3b 76 61 72 20 44 2c 5f 3d 73 2e 66 6e 2e 6f 66 66 73 65 74 3b 73 2e 66 6e 2e 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 5b 30 5d 3b 72 65 74 75 72 6e 21 65 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 3f 5f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 6f 66 66 73 65 74 28 29 20 72 65 71 75 69 72 65 73 20 61 20 76 61 6c 69 64 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 22 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 3a 76 6f 69 64 20 30 29 7d 2c 73 2e 61 6a 61 78 26 26 28 44 3d 73 2e 70 61 72 61 6d 2c 73 2e 70 61 72 61 6d 3d 66 75 6e Data Ascii: n P(e),q(e)};var D,_=s.fn.offset;s.fn.offset=function(){var e=this[0];return!e\|\|e.nodeType&&e.getBoundingClientRect?_.apply(this,arguments):(u("jQuery.fn.offset() requires a valid DOM element"),arguments.length?this:void 0)},s.ajax&&(D=s.param,s.param=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49921	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:11 UTC	603	OUT	GET /wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=2.1.2 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:11 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:11 GMT Content-Type: application/javascript Content-Length: 34179 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:18 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:11 GMT Vary: Accept-Encoding
2024-04-23 14:06:11 UTC	4033	IN	Data Raw: 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3a 20 27 76 69 65 77 65 64 5f 63 6f 6f 6b 69 65 5f 70 6f 6c 69 63 79 27 29 3b 0a 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 50 52 45 46 45 52 4e 43 45 5f 43 4f 4f 4b 49 45 20 3a 20 27 43 6f 6f 6b 69 65 4c 61 77 49 6e 66 6f 43 6f 6e 73 65 6e 74 27 29 3b 0a 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f Data Ascii: CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');CLI_PREFERNCE_COOKIE = (typeof CLI_PREFERNCE_COOKIE !== 'undefined' ? CLI_PREFERNCE_COOKIE : 'CookieLawInfoConsent');CLI_ACCEPT_CO
2024-04-23 14:06:11 UTC	5792	IN	Data Raw: 09 09 7d 0a 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 7d 2c 0a 09 61 74 74 61 63 68 45 76 65 6e 74 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 0a 09 09 09 27 63 6c 69 63 6b 27 2c 0a 09 09 09 27 2e 77 74 2d 63 6c 69 2d 70 72 69 76 61 63 79 2d 62 74 6e 27 2c 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 09 09 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 09 43 4c 49 2e 61 63 63 65 70 74 5f 63 6c 6f 73 65 28 29 3b 0a 09 09 09 09 43 4c 49 2e 73 65 74 74 69 6e 67 73 50 6f 70 55 70 43 6c 6f 73 65 28 29 3b 0a 09 09 09 7d 0a 09 09 29 3b 0a 0a 09 09 6a 51 75 65 72 79 28 27 2e 77 74 2d 63 6c 69 2d 61 63 63 65 70 74 2d 62 74 6e 27 29 2e 6f 6e 28 Data Ascii: }return false;},attachEvents: function () {jQuery(document).on('click','.wt-cli-privacy-btn',function (e) {e.preventDefault();CLI.accept_close();CLI.settingsPopUpClose();});jQuery('.wt-cli-accept-btn').on(
2024-04-23 14:06:11 UTC	2915	IN	Data Raw: 09 73 74 72 69 70 70 65 64 54 65 78 74 2e 66 69 6e 64 28 27 74 61 62 6c 65 27 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 09 09 09 09 09 74 65 78 74 42 6c 6f 63 6b 2e 68 74 6d 6c 28 73 74 72 69 70 70 65 64 54 65 78 74 2e 68 74 6d 6c 28 29 29 3b 0a 09 09 09 09 09 09 63 75 72 72 65 6e 74 54 65 78 74 20 3d 20 74 65 78 74 42 6c 6f 63 6b 2e 74 65 78 74 28 29 3b 0a 09 09 09 09 09 09 69 66 20 28 63 75 72 72 65 6e 74 54 65 78 74 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 20 3e 20 32 35 30 29 20 7b 0a 09 09 09 09 09 09 09 76 61 72 20 6e 65 77 53 74 72 20 3d 20 63 75 72 72 65 6e 74 54 65 78 74 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 20 32 35 30 29 3b 0a 09 09 09 09 09 09 09 74 65 78 74 42 6c 6f 63 6b 2e 65 6d 70 74 79 28 29 2e 68 74 6d 6c 28 6e 65 77 53 74 72 29 2e 61 70 Data Ascii: strippedText.find('table').remove();textBlock.html(strippedText.html());currentText = textBlock.text();if (currentText.trim().length > 250) {var newStr = currentText.substring(0, 250);textBlock.empty().html(newStr).ap
2024-04-23 14:06:12 UTC	13032	IN	Data Raw: 74 6f 6e 29 29 20 7b 0a 09 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 5f 62 75 74 74 6f 6e 2e 63 73 73 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 27 2c 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 62 75 74 74 6f 6e 5f 34 5f 62 75 74 74 6f 6e 5f 63 6f 6c 6f 75 72 29 3b 0a 09 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 5f 62 75 74 74 6f 6e 2e 6f 6e 28 0a 09 09 09 09 27 6d 6f 75 73 65 65 6e 74 65 72 27 2c 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 09 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 27 2c 20 43 4c 49 2e 73 65 74 74 69 6e 67 73 2e 62 75 74 74 6f 6e 5f 34 5f 62 75 74 74 6f 6e 5f 68 6f 76 65 72 29 3b 0a 09 09 09 09 7d 0a 09 09 09 29 0a 09 09 09 09 2e 6f Data Ascii: ton)) {this.settings_button.css('background-color', this.settings.button_4_button_colour);this.settings_button.on('mouseenter',function () {jQuery(this).css('background-color', CLI.settings.button_4_button_hover);}).o
2024-04-23 14:06:12 UTC	5792	IN	Data Raw: 0a 09 09 09 09 69 66 20 28 6a 51 75 65 72 79 28 74 68 69 73 29 2e 69 73 28 27 3a 63 68 65 63 6b 65 64 27 29 29 20 7b 0a 09 09 09 09 09 63 61 74 65 67 6f 72 79 56 61 6c 20 3d 20 74 72 75 65 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 63 61 74 65 67 6f 72 79 56 61 6c 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 09 7d 0a 09 09 09 09 63 6c 69 43 6f 6e 73 65 6e 74 5b 63 6c 69 5f 63 68 6b 62 6f 78 5f 64 61 74 61 5f 69 64 5d 20 3d 20 63 61 74 65 67 6f 72 79 56 61 6c 3b 0a 09 09 09 7d 0a 09 09 29 3b 0a 09 09 63 6c 69 43 6f 6e 73 65 6e 74 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 6c 69 43 6f 6e 73 65 6e 74 29 3b 0a 09 09 63 6c 69 43 6f 6e 73 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 62 74 6f 61 28 63 6c 69 43 6f 6e 73 65 6e 74 29 3b 0a 09 09 Data Ascii: if (jQuery(this).is(':checked')) {categoryVal = true;} else {categoryVal = false;}cliConsent[cli_chkbox_data_id] = categoryVal;});cliConsent = JSON.stringify(cliConsent);cliConsent = window.btoa(cliConsent);
2024-04-23 14:06:12 UTC	2615	IN	Data Raw: 69 66 20 28 24 73 63 72 69 70 74 2e 64 65 66 65 72 29 20 7b 0a 09 09 09 09 09 73 2e 64 65 66 65 72 20 3d 20 24 73 63 72 69 70 74 2e 64 65 66 65 72 3b 0a 09 09 09 09 7d 0a 09 09 09 09 69 66 20 28 24 73 63 72 69 70 74 2e 73 72 63 29 20 7b 0a 09 09 09 09 09 73 2e 6f 6e 6c 6f 61 64 20 3d 20 63 61 6c 6c 62 61 63 6b 0a 09 09 09 09 09 73 2e 6f 6e 65 72 72 6f 72 20 3d 20 63 61 6c 6c 62 61 63 6b 0a 09 09 09 09 09 73 2e 73 72 63 20 3d 20 24 73 63 72 69 70 74 2e 73 72 63 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 24 73 63 72 69 70 74 2e 69 6e 6e 65 72 54 65 78 74 0a 09 09 09 09 7d 0a 09 09 09 09 76 61 72 20 61 74 74 72 73 20 3d 20 6a 51 75 65 72 79 28 24 73 63 72 69 70 74 29 2e 70 72 6f 70 28 22 61 74 74 Data Ascii: if ($script.defer) {s.defer = $script.defer;}if ($script.src) {s.onload = callbacks.onerror = callbacks.src = $script.src} else {s.textContent = $script.innerText}var attrs = jQuery($script).prop("att

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49923	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:12 UTC	651	OUT	GET /wp-content/themes/regionalexpress/img/logo-regionalexpress-large.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:12 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:12 GMT Content-Type: image/png Content-Length: 10040 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:12 GMT
2024-04-23 14:06:12 UTC	2640	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e9 00 00 00 61 08 06 00 00 00 33 d4 86 56 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRa3VgAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-04-23 14:06:12 UTC	4344	IN	Data Raw: af 3a c7 23 c7 1f bc ce 79 3d f1 a6 fc ad ce db 7d ef b8 ef ba df c7 bd 1f 99 28 fc 40 fe 50 f3 d1 fa 63 c7 a7 d0 4f f7 3e e7 7c fe fc 2f f7 84 f3 fb 2d 47 38 cf 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 1c 59 49 44 41 54 78 9c ed 9d 7b d8 1d 45 79 c0 7f 03 01 21 cb 25 ab 52 51 50 83 88 08 88 05 44 ab 50 11 11 b4 0a d2 e0 a5 68 51 44 85 2a 88 08 56 44 59 0b 96 b2 5a 6a 0b 28 42 85 40 44 52 54 04 85 a2 a2 08 2a 6a 01 eb 85 7b 22 01 0c e1 4e b8 6d 48 b2 b9 91 ef 7b fb c7 cc f9 b2 67 ce cc ec ee b9 84 0f 3a bf e7 39 cf f7 9d dd d9 99 39 bb fb ce bc f3 ce 3b ef 28 11 21 12 89 4c 5e d6 79 ba 2b 10 89 44 Data Ascii: :#y=}(@PcO>\|/-G8 cHRMz&u0`:pQ<pHYsYIDATx{Ey!%RQPDPhQDVDYZj(B@DRTj{"NmH{g:99;(!L^y+D
2024-04-23 14:06:12 UTC	3056	IN	Data Raw: 45 ab 8b e7 33 bc e8 0d 41 56 cf ff 15 cb 2e f9 07 c6 17 4f d8 7b f6 4a f3 72 90 89 fa 46 14 59 32 8d f6 3b 99 5f 91 e6 a5 2f 82 5c 35 ef 7f a7 3b 7a c1 37 d2 bc f4 ad 7f a4 c8 92 bf 43 4f 5d 54 f9 97 34 2f 7d 91 01 aa d7 ee 82 5e a7 b9 1d 7a a9 da 26 e8 b8 3d ab d1 2b 99 e6 a2 1d 1f ae 4a f3 b2 2f 2b 6f 91 25 2f 00 f6 35 65 6c 85 0e 13 92 a0 63 de 2e 45 4f 6d dc 0c 5c de a4 ce 81 72 de 42 7b 47 98 46 f7 c9 2a e7 85 c0 47 d0 ce 27 3b a0 77 f6 5b 85 8e 4d 75 1b 7a da eb 5b 69 5e f6 65 8d 2e b2 e4 f5 e8 55 47 bb a3 37 80 9a 86 76 de 78 00 f8 03 3a dc ed e5 69 5e 4e 74 28 ad a2 ee 29 a5 be 2b da df f1 22 ea c3 75 f4 cf ea 95 2c ff d9 09 ac bc fe 2c 90 89 88 92 67 ad 0d 01 35 ec 48 bb e0 62 e0 5f 68 6c a3 ac bc d7 f7 5d 6b f6 83 3d 97 ee 88 08 b3 5b bc 78 39 Data Ascii: E3AV.O{JrFY2;_/\5;z7CO]T4/}^z&=+J/+o%/5elc.EOm\rB{GF*G';w[Muz[i^e.UG7vx:i^Nt()+"u,,g5Hb_hl]k=[x9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	49924	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:12 UTC	630	OUT	GET /wp-content/themes/regionalexpress/img/close.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:12 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:12 GMT Content-Type: image/png Content-Length: 1034 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:12 GMT
2024-04-23 14:06:12 UTC	1034	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 15 08 06 00 00 00 a9 17 a5 96 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	49930	74.125.136.104	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:12 UTC	686	OUT	GET /recaptcha/api.js?render=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&ver=3.0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:13 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 23 Apr 2024 14:06:12 GMT Date: Tue, 23 Apr 2024 14:06:12 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 14:06:13 UTC	727	IN	Data Raw: 34 65 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4e8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-23 14:06:13 UTC	536	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.i
2024-04-23 14:06:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	49926	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:12 UTC	706	OUT	GET /wp-content/uploads/2022/02/HP-fd-1.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:13 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:13 GMT Content-Type: image/jpeg Content-Length: 688121 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:38 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:13 GMT
2024-04-23 14:06:13 UTC	1190	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cd 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:13 UTC	7240	IN	Data Raw: 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 Data Ascii: i> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:13 UTC	2896	IN	Data Raw: 30 4b 30 11 4a 4b 92 bc bd c3 e6 45 69 a6 80 b6 d6 c6 fb df 45 16 e5 63 23 d6 e3 55 23 1f c9 8e 75 68 da 19 cc 6a ab fc ce 5f de 28 34 01 4c 97 77 b0 c4 cb 6e 41 6a d3 99 a1 3f 99 d1 20 73 77 3c ee 4f 0b c7 2e 39 12 4b fc 4f 80 db a6 94 86 62 7b 97 45 e4 bd 2b c8 15 04 0a 85 e8 2b a5 25 aa 89 27 43 29 76 50 5a 9c 7d 1b 00 7c f6 f1 fc 74 0f 49 54 76 f4 23 80 24 28 2b b0 ad 07 5d f4 48 c6 30 44 84 38 97 61 fc 0b d4 92 45 77 3a 24 5a 4d 4e 61 15 28 39 31 15 2c 7d 20 0a 6c 7c b4 48 69 02 92 57 50 0e c4 9d 95 05 3c 7f de 34 6a ef 0d 20 73 49 73 25 0b 7a 59 41 e4 40 a5 79 6c 46 dd 7a e9 6b 1a a0 c7 0c f7 16 59 0b 6b 82 78 ac 6f 47 5a 6e 63 3e 96 a9 f9 1d b5 e4 7a e7 47 f5 dd 16 ee cf 17 5c 3f d4 b1 af c5 1e c7 a1 75 9f 43 d7 6d 6f 70 56 c7 fd 2f 0b 7c 1b 3d 8b Data Ascii: 0K0JKEiEc#U#uhj_(4LwnAj? sw<O.9KOb{E++%'C)vPZ}\|tITv#$(+]H0D8aEw:$ZMNa(91,} l\|HiWP<4j sIs%zYA@ylFzkYkxoGZnc>zG\?uCmopV/\|=
2024-04-23 14:06:13 UTC	1448	IN	Data Raw: ab b3 75 3e 20 e9 0c 6f 15 be 1c 94 96 f2 52 af d4 23 0f 45 47 9f 96 9a 64 b9 05 bf bc f7 81 48 48 86 de a4 47 1a 0a 74 f3 a6 81 a5 07 3a df 45 53 ee 4d ec 31 f5 33 39 de 9f f7 7c 34 86 26 bd 96 c0 7b 91 8b b0 11 85 4a a6 e1 8f 8e fa 72 07 23 3d ca 47 5e 1e ae a0 13 f2 da ba 96 c6 90 86 e3 23 34 9c 44 45 94 01 b1 f9 75 ff 00 76 93 b4 14 aa 69 ae 2e 66 40 e5 a8 77 57 1f b2 9f df ac de e2 29 6d 94 86 61 b0 50 bc 47 e9 f1 a5 7a ff 00 7e a1 ee 1a 2d b4 1c 96 13 4c d4 00 28 e4 0a 8e 9b 78 0d 46 b6 3d 28 ed 31 10 c5 0c 45 24 50 79 54 72 f1 1f 86 9c 86 90 a9 3d b5 73 ec 8e 55 5e bb 74 3a 13 16 90 6f 76 8a 59 e4 11 b8 e8 00 af e5 f3 d5 ab 11 6a 0a 6e ef 25 72 a9 ee bf 13 5e 4c 4e c2 9a a3 38 15 93 1c 95 66 61 b1 34 41 b9 eb d7 4d 00 7e 3f 25 77 14 8b 1c 32 10 a3 Data Ascii: u> oR#EGdHHGt:ESM139\|4&{Jr#=G^#4DEuvi.f@wW)maPGz~-L(xF=(1E$PyTr=sU^t:ovYjn%r^LN8fa4AM~?%w2
2024-04-23 14:06:13 UTC	1448	IN	Data Raw: a9 a6 c3 e5 f8 e9 14 88 47 13 be ea a6 9d 01 00 78 7c 34 c6 11 1d ac 8c 48 e2 41 07 f2 d2 18 da de d5 55 b8 b5 2b d4 d7 cf 40 05 9b 68 43 06 e6 a0 1e a4 f8 fc b4 86 8d b4 31 a2 9e 34 90 8f e2 a6 db fc 34 8a c4 53 70 c0 0a 73 20 50 d1 74 82 05 ca cd 52 79 13 e0 1b 42 61 06 bd e6 62 13 76 ad 2a c7 cb 44 84 14 30 57 62 18 ec 37 07 ae 90 e0 da 5b 44 db 2e e4 1d f4 d0 40 52 e3 5d 51 58 ad 29 53 c8 79 1d 20 48 9f d1 02 08 0b d3 60 3f 1d 22 a0 bd 6c 40 a1 1b 91 b9 3e 54 f3 d2 60 10 96 e8 b4 d8 57 f8 76 fc 3a 69 31 85 08 36 14 3b 0f 01 d7 f0 d2 2a 0b 11 0f 2d bc fa d2 9a 41 01 f0 db b8 f5 05 a7 89 27 c2 ba 03 02 c7 57 5a d3 72 7a 8f 0a 6a 92 10 29 0e db 57 db 15 dc 79 7e 7a 20 96 cb 96 30 40 a3 01 e6 a3 ae ad 22 5b 21 c5 63 1b b7 26 ff 00 0d 7a 79 ea d2 32 6c 58 Data Ascii: Gx\|4HAU+@hC144Sps PtRyBabvD0Wb7[D.@R]QX)Sy H`?"l@>T`Wv:i16;-A'WZrzj)Wy~z 0@"[!c&zy2lX
2024-04-23 14:06:13 UTC	1448	IN	Data Raw: d7 3d eb 27 4e dd ea 96 27 4f 66 44 de 95 62 c3 f8 77 af 5f 0a eb 2d 2c db 54 07 5d 2c b1 a2 d1 09 15 a1 1e 5f 3d 5d 68 c4 ee 8a 23 be 88 12 8d 6e 48 06 85 8f 5f db ad a9 b1 7b 18 5b a9 a5 78 93 9e eb 80 22 0e 0a 4d 01 dc 75 3a d1 74 97 33 b7 5b b6 73 37 32 dc c5 23 33 85 60 4d 29 4e bf 1d 6f 5e 86 ec e7 bf a8 51 09 ee 32 10 48 9c 78 98 e4 24 f1 f2 15 d6 f4 e8 5a cc e6 dc f5 15 65 82 16 52 46 72 5a 42 bf 03 d7 5d 2b 65 2e 07 05 b7 ad 6c 64 0c a5 c0 7f 75 2b 30 53 d0 ef b7 89 d6 8a a8 97 69 e3 89 d6 e2 ee 4c d0 7b 68 07 b9 18 dd 5b 62 3c ab ab 49 19 b6 d0 f2 33 3b a7 06 15 0b f0 a0 d8 d7 c3 c7 55 04 3c 44 f2 da b8 96 47 65 a8 7d d6 b5 1e 3b 68 24 92 4b 35 9a a8 82 31 ee 1e a1 b7 5f 99 d0 02 7c 9d d5 fc e5 4c cf 55 1f c0 94 03 f0 1a 24 62 41 25 d2 15 68 47 Data Ascii: ='N'OfDbw_-,T],_=]h#nH_{[x"Mu:t3[s72#3`M)No^Q2Hx$ZeRFrZB]+e.ldu+0SiL{h[b<I3;U<DGe};h$K51_\|LU$bA%hG
2024-04-23 14:06:13 UTC	1448	IN	Data Raw: 8a 54 a9 a1 1b fe 1a d6 b6 33 bd 45 cd 7b 34 17 0a b5 28 8d 5a ed d0 8f 0d 6c 8c 1e 01 eb 92 40 b4 73 b0 fe 03 d3 57 5a 99 5a e5 89 71 17 2f d4 80 9a 1a ed 4a 78 6a f4 90 ec 58 d2 24 81 ab 46 65 fe 30 76 34 d0 e8 84 f7 1a 03 9e 06 65 60 f2 90 8e 09 5f 0a d7 4d 50 5e 60 a2 5b 0b b1 4f a7 65 e4 07 9f fb 78 69 aa 22 7c c0 ac 6f 6e dc 37 09 a5 6a 3c bb 83 5a 6a ea 89 77 1f 7f 4c b5 b7 14 79 06 db 72 eb 4f cf 56 91 9e a9 01 92 4b 5b 65 45 72 88 58 d4 b5 6a e5 41 eb 41 ab 14 84 da 34 72 99 1e dc 19 22 06 bc 80 dc fc 34 13 66 11 1d bb b3 49 33 7f 2a 15 af a8 8d ab f3 d2 26 43 ed ed ad dc 57 dd e4 7c 7c 08 fc 34 62 53 6e 03 22 b5 82 11 23 72 0f 5d cb 57 a0 f8 69 8a 46 76 f6 b1 b0 e6 46 c3 c2 b5 ae 91 2d 84 14 8c 7e 95 de bf 2a 9d 38 11 a5 81 64 0c cf 15 14 9f d3 Data Ascii: T3E{4(Zl@sWZZq/JxjX$Fe0v4e`_MP^`[Oexi"\|on7j<ZjwLyrOVK[eErXjAA4r"4fI3&CW\|\|4bSn"#r]WiFvF-~8d
2024-04-23 14:06:13 UTC	1448	IN	Data Raw: a9 ae cb b7 5f c3 42 91 60 0d 2b 4a ac 42 47 50 0e e4 9f 3f 1d 5a 48 87 32 0c d2 ca 68 3d aa 9a 1a 93 bf 8f 85 35 50 b9 93 2f 91 41 72 0f ea e3 fb ab e7 aa 81 36 5d 15 f0 8d 81 e4 47 10 01 e3 b8 1f dd a4 f6 e4 aa ee 41 d4 59 e4 2c 5d 49 9d 9a 8c 2a 00 1b 53 5c 97 da b2 c8 ec db dd a3 cc 63 cb 17 34 75 0f c7 6d b6 d6 51 74 cd be 46 8a 0f d0 c6 42 86 62 01 a7 13 f1 d5 2d 4c 88 aa 15 5e 70 0c d4 62 17 ad 07 9f c7 5b 50 c3 71 29 01 72 48 3c 4d 5a bc 4a 9a ed e7 be b4 46 70 0e c1 ab c5 86 ec 76 5f 3d 54 84 33 da 7e d3 e4 11 7f a8 61 66 2c 09 a5 dd b9 3b d0 03 c5 ff 00 f7 69 af a7 fe 3d d4 4a be db f1 5f 63 fb 8f 96 fe 47 d3 46 8d d5 e0 fe d5 f7 9e cd 4a 03 ed ab 73 5a 54 90 4d 69 d4 ef e5 5e 87 5f 4b a8 f9 88 2a e6 f1 b2 2b 55 48 15 0c 49 a0 1e 27 ae a6 47 05 Data Ascii: _B`+JBGP?ZH2h=5P/Ar6]GAY,]IS\c4umQtFBb-L^pb[Pq)rH<MZJFpv_=T3~af,;i=J_cGFJsZTMi^_K+UHI'G
2024-04-23 14:06:13 UTC	1448	IN	Data Raw: 6e 98 31 0c f7 c2 6a 2c 55 0b fc 4d af 57 6f a6 e0 cf 1b 7f ab d5 91 54 22 48 9d 27 35 e2 8e 03 ae f5 f9 d3 5d 54 db d2 70 6e 6e 37 99 d7 c6 96 f7 8b cb 97 3d ab 4a 6b 4a ac 4c 1b 2c 18 e8 85 0d 03 1e bf 2f 96 b4 64 c9 59 b0 5f 77 95 36 14 02 9e 3a 52 0e c5 af 66 8e 8d c8 74 1a ac c5 a8 53 16 0e 29 99 ab 10 db d4 2b fb 75 50 39 0b fa 04 86 32 55 54 78 83 5a 74 d4 c0 09 25 9e de 2b 83 ce 41 23 9a 1e 22 a4 02 3c 4f 85 74 9b 19 1b 8b d4 48 d1 c0 04 be f4 3e 5e 47 52 d9 68 d1 bb 85 a3 2d 74 a9 13 1f f2 51 77 f0 eb a9 45 a6 0f 04 8d 2b 7a 03 04 66 f4 b7 9f c8 69 36 37 27 51 65 6d 20 29 21 4e 44 8f 4e f5 db a6 94 8a 0b 6f df d8 e2 9c 0d 5e a2 b4 db fb f4 6a 1e 02 76 bb ba 56 2a 61 01 5a 80 b3 0e 40 2f 8e c3 c7 49 b2 b4 8b e4 be b8 11 c8 d0 5b 7b 8b 26 d1 bb 02 Data Ascii: n1j,UMWoT"H'5]Tpnn7=JkJL,/dY_w6:RftS)+uP92UTxZt%+A#"<OtH>^GRh-tQwE+zfi67'Qem )!NDNo^jvV*aZ@/I[{&
2024-04-23 14:06:13 UTC	2896	IN	Data Raw: e4 f4 fe 2d 39 03 5f 41 21 a9 45 e2 1b 7a 7c 7c 06 90 40 44 56 8f 5a 18 da a3 a1 03 7d b4 c0 69 0d 8c ac 28 57 88 3b 02 77 e8 3e 3a 62 0f 6c 5c ae 85 9b c3 a0 1d 0e 90 03 24 1e c3 16 23 d6 6a 05 37 e9 d3 6f 96 80 1f e3 ef 82 90 8e e2 a1 bd 34 3e 03 53 64 1a a0 ee 6c ee 2d a5 88 21 61 1b 1f e2 27 7f c0 ea 20 6a c8 06 fa 08 5a 19 e1 59 43 12 0d 18 ff 00 88 1a 8f db af 3b d6 3a 0f ac e9 37 36 63 16 b0 ff 00 52 c5 7c 4f 4f d1 ba ff 00 a2 eb 36 f7 b8 27 8f fa 5e 16 f8 33 8a d7 e0 87 f4 01 9a 06 66 80 33 40 1f 05 7d cc c3 49 db fd e5 9b b2 45 e3 6d 34 bf 55 64 a0 6d ed 5c 7f 30 01 f0 52 4a fe 1a fe 86 fe 31 d7 fd 77 a7 6d 6e 37 f3 25 a5 f8 d7 0f 8e 7e d3 f9 cb f9 4f 41 f4 3e a3 bb b6 97 ca de aa f8 5b 1f 86 5e c3 cf 18 c8 c6 83 70 35 ef 9f 3e c2 63 32 b1 e2 c4 Data Ascii: -9_A!Ez\|\|@DVZ}i(W;w>:bl\$#j7o4>Sdl-!a' jZYC;:76cR\|OO6'^3f3@}IEm4Udm\0RJ1wmn7%~OA>[^p5>c2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	49925	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:12 UTC	645	OUT	GET /wp-content/themes/regionalexpress/img/logo-regionalexpress.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:13 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:13 GMT Content-Type: image/png Content-Length: 7879 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:13 GMT
2024-04-23 14:06:13 UTC	2622	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 32 08 06 00 00 00 97 a7 1f d8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRx2gAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-04-23 14:06:13 UTC	19	IN	Data Raw: cf 58 fc d8 f0 0b f9 8b cf bf ae 79 a9 f3 72 ef ab a9 af Data Ascii: Xyr
2024-04-23 14:06:13 UTC	2896	IN	Data Raw: 3a c7 23 c7 1f bc ce 79 3d f1 a6 fc ad ce db 7d ef b8 ef ba df c7 bd 1f 99 28 fc 40 fe 50 f3 d1 fa 63 c7 a7 d0 4f f7 3e e7 7c fe fc 2f f7 84 f3 fb 2d 47 38 cf 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 13 e8 49 44 41 54 78 9c ed 9c 79 7c 14 45 da c7 bf dd 3d 57 26 37 24 24 90 70 c8 91 04 22 10 2e 23 88 1c 8a 72 2b 1e 08 a2 2b be 0b 22 97 a2 cb 2e ac e8 ba ee be ae ae 22 a8 c8 a1 72 88 a8 20 2e 28 a7 2c ca 29 09 47 40 04 39 42 42 12 6e 42 08 90 90 84 49 26 33 d3 bd 7f 74 a6 67 3a 33 39 58 e4 d5 97 4f 7e 9f 4f 3e 49 57 3f 55 f5 54 fd aa 9e 7a ea a9 ea 08 8a a2 28 d4 e1 ff 02 b5 ed 67 c5 eb b7 5c e9 47 Data Ascii: :#y=}(@PcO>\|/-G8 cHRMz&u0`:pQ<pHYsIDATxy\|E=W&7$$p".#r++"."r .(,)G@9BBnBI&3tg:39XO~O>IW?UTz(g\G
2024-04-23 14:06:13 UTC	1448	IN	Data Raw: dc 38 73 3a 9f ef 37 7a 9c 9b 01 83 92 b5 bd 6a ca 0f 87 74 83 ea 89 a7 fa 70 e8 e7 13 35 86 46 db b5 6f 4e e7 3b e2 b5 e7 0b b9 57 58 bb 6a 27 d9 d9 b9 38 9d 2e 82 83 ad 24 b4 69 42 ff 81 77 10 12 62 05 d4 b0 a5 db 93 05 18 fc 60 57 9d ae 2e a7 8b 75 6b 77 b3 6d f3 01 2e 5c 28 20 34 34 90 f6 1d 5a f0 d0 a3 dd 75 c4 2c fd 6c b3 e6 98 0d 1d d6 93 e0 8a f2 01 d2 8f 9e d2 06 6a c7 4e ad 38 79 e2 02 57 ae 14 03 70 5f df ce 34 6e 12 a9 c9 16 14 94 f0 cd 8a 1d da 73 65 79 7f 48 68 dd 44 7f d8 70 60 e7 3e 1e 1b fe 2e 0e e7 2f f3 35 4b 62 c3 32 66 2d 9d 41 f3 78 cf 68 bf 7a f5 1a 83 ee 9f 46 70 b0 95 6f 37 bd f9 8b d4 53 87 aa a1 0b 55 26 75 eb cc 5b 33 c7 de 78 a1 82 c2 33 1d 8e b3 62 c5 14 1d b9 00 a1 a1 81 bc 3f 77 22 7d fa 56 bd 97 ae c3 2f 07 bf c7 85 5f 7e Data Ascii: 8s:7zjtp5FoN;WXj'8.$iBwb`W.ukwm.\( 44Zu,ljN8yWp_4nseyHhDp`>./5Kb2f-AxhzFpo7SU&u[3x3b?w"}V/_~
2024-04-23 14:06:13 UTC	894	IN	Data Raw: eb 38 b3 b7 52 3c 3b 19 eb a0 77 30 75 19 e5 bf dd 4d 92 09 7c fc 73 6c 5f 8f c3 75 31 9d 92 85 fd 30 77 1d 47 c0 80 b7 b5 d9 ff df 4f 37 d4 d9 6c e9 f3 97 9a 05 fd 42 6f b2 94 6b 97 50 6c 57 40 94 08 1e bb 0d 04 cf 16 ca ed f2 fb 83 2b ef 28 65 29 ef 81 28 81 ec c2 91 b1 01 e3 ed 0f 55 29 ef 26 4b 29 b9 48 f9 cf 2b 40 32 61 68 92 8c 29 f9 59 4c ed 86 fa cd e3 76 96 0c 4d 92 11 a3 12 71 1e df 84 5c 78 1a c5 61 43 0c 69 54 85 5e 6a 1e 31 ac 31 81 4f 2c d7 bd ab 6e 09 b2 f4 98 8c b1 f5 60 4a 57 4f c4 79 72 27 b6 35 2f 20 35 4e 46 8a be dd af bc b1 cd 03 84 34 ed 4a e9 b7 7f a6 fc e0 72 ec bb e6 21 c5 74 d4 ac ca 0d 11 7c 63 d0 af 2f da 7a 15 de 0c a9 51 87 5a 95 a0 38 4a b1 2d 1f 09 4e 3b d6 47 55 2f b8 fc d0 4a 02 fa bd 81 10 18 e1 37 8f 9b ac c0 27 96 61 Data Ascii: 8R<;w0uM\|sl_u10wGO7lBokPlW@+(e)(U)&K)H+@2ah)YLvMq\xaCiT^j11O,n`JWOyr'5/ 5NF4Jr!t\|c/zQZ8J-N;GU/J7'a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	49927	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:12 UTC	652	OUT	GET /wp-content/themes/regionalexpress/img/logo-regionalexpress-mobile.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:13 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:13 GMT Content-Type: image/png Content-Length: 6171 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:13 GMT
2024-04-23 14:06:13 UTC	2641	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 21 08 06 00 00 00 12 e5 6f ed 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRx!ogAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-04-23 14:06:13 UTC	3530	IN	Data Raw: 3a c7 23 c7 1f bc ce 79 3d f1 a6 fc ad ce db 7d ef b8 ef ba df c7 bd 1f 99 28 fc 40 fe 50 f3 d1 fa 63 c7 a7 d0 4f f7 3e e7 7c fe fc 2f f7 84 f3 fb 2d 47 38 cf 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0d 3c 49 44 41 54 68 81 ed 9b 79 b8 17 55 19 c7 3f f7 5e 90 60 d8 c6 4a 1c 13 18 59 54 40 0d c3 f5 51 29 ad cc b2 b4 10 97 c9 05 4d cd 25 35 d4 72 69 24 10 1b 71 2d f5 a9 a7 22 15 2b 6c 14 73 47 2b 57 54 d4 14 10 11 bc 80 b8 8c 88 8e c8 32 02 0e 82 08 b7 3f de 73 f8 9d df b9 f3 5b 2e e4 f2 07 df e7 99 e7 37 e7 9c f7 3d 73 66 de 73 de ed 9c 5f 03 75 20 0b 9d 06 e0 5c 60 28 f0 2c 70 9d 1b e5 6b eb e1 dd Data Ascii: :#y=}(@PcO>\|/-G8 cHRMz&u0`:pQ<pHYs<IDAThyU?^`JYT@Q)M%5ri$q-"+lsG+WT2?s[.7=sfs_u \`(,pk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	49929	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:13 UTC	629	OUT	GET /wp-content/themes/regionalexpress/img/menu.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:13 UTC	273	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:13 GMT Content-Type: image/png Content-Length: 969 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:13 GMT
2024-04-23 14:06:13 UTC	969	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR;0tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	49931	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:13 UTC	618	OUT	GET /wp-content/plugins/cookie-law-info/public/css/cookie-law-info-table.css?ver=2.1.2 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:13 UTC	296	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:13 GMT Content-Type: text/css Content-Length: 6113 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:18 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:13 GMT Vary: Accept-Encoding
2024-04-23 14:06:13 UTC	6113	IN	Data Raw: 2f 2a 2a 0a 20 52 65 73 70 6f 6e 73 69 76 65 20 74 61 62 6c 65 20 63 6f 75 72 74 65 73 79 20 6f 66 20 4d 61 72 6b 20 57 69 6c 74 73 68 69 72 65 3a 20 6d 61 72 6b 40 62 61 6d 62 6f 6f 72 6f 63 6b 65 74 61 70 70 73 2e 63 6f 6d 20 28 74 68 61 6e 6b 73 21 29 0a 0a 20 46 6f 72 20 6d 6f 72 65 20 73 74 79 6c 65 73 20 74 72 79 3a 20 68 74 74 70 3a 2f 2f 69 63 61 6e 74 2e 63 6f 2e 75 6b 2f 63 73 73 74 61 62 6c 65 67 61 6c 6c 65 72 79 2f 0a 20 2d 2d 2d 2d 0a 20 47 65 6e 65 72 69 63 20 73 74 79 6c 65 73 3a 0a 20 48 65 72 65 20 79 6f 75 20 63 6f 75 6c 64 20 65 2e 67 2e 20 63 75 73 74 6f 6d 69 73 65 20 77 69 64 74 68 20 6f 66 20 63 6f 6c 75 6d 6e 20 31 20 61 6e 64 20 32 2c 0a 20 6f 72 20 61 64 64 20 61 20 67 65 6e 65 72 69 63 20 72 6f 6c 6c 2d 6f 76 65 72 20 65 66 66 Data Ascii: /** Responsive table courtesy of Mark Wiltshire: mark@bamboorocketapps.com (thanks!) For more styles try: http://icant.co.uk/csstablegallery/ ---- Generic styles: Here you could e.g. customise width of column 1 and 2, or add a generic roll-over eff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	49933	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:13 UTC	390	OUT	GET /wp-content/themes/regionalexpress/img/close.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:13 GMT Content-Type: image/png Content-Length: 1034 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:13 GMT
2024-04-23 14:06:14 UTC	1034	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 15 08 06 00 00 00 a9 17 a5 96 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	49934	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:13 UTC	411	OUT	GET /wp-content/themes/regionalexpress/img/logo-regionalexpress-large.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:13 GMT Content-Type: image/png Content-Length: 10040 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:13 GMT
2024-04-23 14:06:14 UTC	4088	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e9 00 00 00 61 08 06 00 00 00 33 d4 86 56 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRa3VgAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-04-23 14:06:14 UTC	5952	IN	Data Raw: c0 97 1d c7 eb ee d9 ba b8 7b 3f df 73 0c 19 7d 3e 5b 53 56 07 6f 9d cc 30 a7 71 03 57 25 28 a4 46 cd 3d a5 b6 6a fd b3 12 38 3c 14 a5 41 29 35 0f 38 6a 84 75 80 9a f1 a8 21 f4 72 6e a3 94 9a a6 94 9a 86 56 eb 76 07 6e 0f a4 df dd fa 1e 7a 78 3b 00 5b 35 f8 7c 0f 40 44 f6 40 db 0f 7c fc 06 d8 5a 29 b5 25 7a c8 f1 b5 40 da 2d 1c 75 f5 dd 87 31 cc 6f 36 6a f2 39 84 ad d5 5f 06 52 a5 d4 8b 81 2d d1 8e 2e 3e 0e 34 c6 44 4c fe eb a2 2d d4 75 7c 54 44 ec 20 04 3e 21 75 0a 89 88 ec 84 56 ff 9b 10 ea 49 5f 4a 58 1b 6d af ee 9a b1 e2 05 35 19 0f c2 7c e0 0d 69 5e ce ac 4b a8 94 9a 05 7c 77 44 f5 80 fa f1 28 f8 5f ce 42 29 f5 70 e7 8b 52 6a 4c 29 75 1d 61 35 af 33 fd 81 88 6c 84 7e 80 2e ee 53 4a cd 55 4a 2d 68 f0 59 61 ae f9 d7 40 b9 f7 00 fb 75 ac a6 46 53 f9 47 Data Ascii: {?s}>[SVo0qW%(F=j8<A)58ju!rnVvnzx;[5\|@D@\|Z)%z@-u1o6j9_R-.>4DL-u\|TD >!uVI_JXm5\|i^K\|wD(_B)pRjL)ua53l~.SJUJ-hYa@uFSG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	49935	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:13 UTC	590	OUT	GET /wp-content/plugins/bb-plugin/js/jquery.waypoints.min.js?ver=2.3.2.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	310	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:14 GMT Content-Type: application/javascript Content-Length: 8833 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:24:36 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:14 GMT Vary: Accept-Encoding
2024-04-23 14:06:14 UTC	6949	IN	Data Raw: 2f 2a 21 0a 57 61 79 70 6f 69 6e 74 73 20 2d 20 34 2e 30 2e 30 0a 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 31 2d 32 30 31 35 20 43 61 6c 65 62 20 54 72 6f 75 67 68 74 6f 6e 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 6d 61 6b 65 77 65 62 74 68 69 6e 67 73 2f 77 61 79 70 6f 69 6e 74 73 2f 62 6c 6f 67 2f 6d 61 73 74 65 72 2f 6c 69 63 65 6e 73 65 73 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 21 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e Data Ascii: /!Waypoints - 4.0.0Copyright 2011-2015 Caleb TroughtonLicensed under the MIT license.https://github.com/imakewebthings/waypoints/blog/master/licenses.txt/!function(){"use strict";function t(o){if(!o)throw new Error("No options passed to Waypoin
2024-04-23 14:06:14 UTC	1884	IN	Data Raw: 5b 5d 2c 6c 65 66 74 3a 5b 5d 2c 72 69 67 68 74 3a 5b 5d 7d 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 54 72 69 67 67 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 68 69 73 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 5b 69 5d 2c 6e 3d 22 75 70 22 3d 3d 3d 69 7c 7c 22 6c 65 66 74 22 3d 3d 3d 69 3b 6f 2e 73 6f 72 74 28 6e 3f 65 3a 74 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 73 3d 6f 2e 6c 65 6e 67 74 68 3b 73 3e 72 3b 72 2b 3d 31 29 7b 76 61 72 20 61 3d 6f 5b 72 5d 3b 28 61 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 69 6e 75 6f 75 73 7c 7c 72 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 2d 31 29 26 26 61 2e 74 72 69 67 67 65 72 28 5b 69 5d 29 Data Ascii: [],left:[],right:[]}},i.prototype.flushTriggers=function(){for(var i in this.triggerQueues){var o=this.triggerQueues[i],n="up"===i\|\|"left"===i;o.sort(n?e:t);for(var r=0,s=o.length;s>r;r+=1){var a=o[r];(a.options.continuous\|\|r===o.length-1)&&a.trigger([i])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	49936	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	607	OUT	GET /wp-content/uploads/bb-plugin/cache/10-layout.js?ver=2b670661ca547c0a2b913d09cf97d721 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:14 GMT Content-Type: application/javascript Content-Length: 56962 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:50 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:14 GMT Vary: Accept-Encoding
2024-04-23 14:06:14 UTC	1156	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 64 65 66 69 6e 69 74 69 6f 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 64 65 66 69 6e 69 74 69 6f 6e 28 29 0a 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 6e 61 6d 65 2c 64 65 66 69 6e 69 74 69 6f 6e 29 0a 65 6c 73 65 20 74 68 69 73 5b 6e 61 6d 65 5d 3d 64 65 66 69 6e 69 74 69 6f 6e 28 29 7d 28 27 62 6f 77 73 65 72 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 72 75 65 0a 66 75 6e 63 74 69 6f 6e 20 64 65 74 65 63 74 28 75 61 29 7b 66 75 6e Data Ascii: !function(name,definition){if(typeof module!='undefined'&&module.exports)module.exports=definition()else if(typeof define=='function'&&define.amd)define(name,definition)else this[name]=definition()}('bowser',function(){var t=truefunction detect(ua){fun
2024-04-23 14:06:14 UTC	1448	IN	Data Raw: 21 74 61 62 6c 65 74 26 26 2f 5b 5e 2d 5d 6d 6f 62 69 2f 69 2e 74 65 73 74 28 75 61 29 2c 78 62 6f 78 3d 2f 78 62 6f 78 2f 69 2e 74 65 73 74 28 75 61 29 2c 72 65 73 75 6c 74 0a 69 66 28 2f 6f 70 65 72 61 7c 6f 70 72 7c 6f 70 69 6f 73 2f 69 2e 74 65 73 74 28 75 61 29 29 7b 72 65 73 75 6c 74 3d 7b 6e 61 6d 65 3a 27 4f 70 65 72 61 27 2c 6f 70 65 72 61 3a 74 2c 76 65 72 73 69 6f 6e 3a 76 65 72 73 69 6f 6e 49 64 65 6e 74 69 66 69 65 72 7c 7c 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 6f 70 65 72 61 7c 6f 70 72 7c 6f 70 69 6f 73 29 5b 5c 73 5c 2f 5d 28 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 29 2f 69 29 7d 7d 0a 65 6c 73 65 20 69 66 28 2f 63 6f 61 73 74 2f 69 2e 74 65 73 74 28 75 61 29 29 7b 72 65 73 75 6c 74 3d 7b 6e 61 6d 65 3a 27 4f 70 65 72 61 20 43 6f Data Ascii: !tablet&&/[^-]mobi/i.test(ua),xbox=/xbox/i.test(ua),resultif(/opera\|opr\|opios/i.test(ua)){result={name:'Opera',opera:t,version:versionIdentifier\|\|getFirstMatch(/(?:opera\|opr\|opios)[\s\/](\d+(\.\d+)?)/i)}}else if(/coast/i.test(ua)){result={name:'Opera Co
2024-04-23 14:06:14 UTC	2896	IN	Data Raw: 3f 29 2f 69 29 7d 7d 0a 65 6c 73 65 20 69 66 28 2f 6d 73 69 65 7c 74 72 69 64 65 6e 74 2f 69 2e 74 65 73 74 28 75 61 29 29 7b 72 65 73 75 6c 74 3d 7b 6e 61 6d 65 3a 27 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 27 2c 6d 73 69 65 3a 74 2c 76 65 72 73 69 6f 6e 3a 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 6d 73 69 65 20 7c 72 76 3a 29 28 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 29 2f 69 29 7d 7d 65 6c 73 65 20 69 66 28 63 68 72 6f 6d 65 6f 73 29 7b 72 65 73 75 6c 74 3d 7b 6e 61 6d 65 3a 27 43 68 72 6f 6d 65 27 2c 63 68 72 6f 6d 65 6f 73 3a 74 2c 63 68 72 6f 6d 65 42 6f 6f 6b 3a 74 2c 63 68 72 6f 6d 65 3a 74 2c 76 65 72 73 69 6f 6e 3a 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 63 68 72 6f 6d 65 7c 63 72 69 6f 73 7c 63 72 6d 6f 29 5c 2f Data Ascii: ?)/i)}}else if(/msie\|trident/i.test(ua)){result={name:'Internet Explorer',msie:t,version:getFirstMatch(/(?:msie \|rv:)(\d+(\.\d+)?)/i)}}else if(chromeos){result={name:'Chrome',chromeos:t,chromeBook:t,chrome:t,version:getFirstMatch(/(?:chrome\|crios\|crmo)\/
2024-04-23 14:06:14 UTC	1448	IN	Data Raw: 64 67 65 26 26 2f 28 61 70 70 6c 65 29 3f 77 65 62 6b 69 74 2f 69 2e 74 65 73 74 28 75 61 29 29 7b 69 66 28 2f 28 61 70 70 6c 65 29 3f 77 65 62 6b 69 74 5c 2f 35 33 37 5c 2e 33 36 2f 69 2e 74 65 73 74 28 75 61 29 29 7b 72 65 73 75 6c 74 2e 6e 61 6d 65 3d 72 65 73 75 6c 74 2e 6e 61 6d 65 7c 7c 22 42 6c 69 6e 6b 22 0a 72 65 73 75 6c 74 2e 62 6c 69 6e 6b 3d 74 7d 65 6c 73 65 7b 72 65 73 75 6c 74 2e 6e 61 6d 65 3d 72 65 73 75 6c 74 2e 6e 61 6d 65 7c 7c 22 57 65 62 6b 69 74 22 0a 72 65 73 75 6c 74 2e 77 65 62 6b 69 74 3d 74 7d 0a 69 66 28 21 72 65 73 75 6c 74 2e 76 65 72 73 69 6f 6e 26 26 76 65 72 73 69 6f 6e 49 64 65 6e 74 69 66 69 65 72 29 7b 72 65 73 75 6c 74 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 49 64 65 6e 74 69 66 69 65 72 7d 7d 65 6c 73 65 20 Data Ascii: dge&&/(apple)?webkit/i.test(ua)){if(/(apple)?webkit\/537\.36/i.test(ua)){result.name=result.name\|\|"Blink"result.blink=t}else{result.name=result.name\|\|"Webkit"result.webkit=t}if(!result.version&&versionIdentifier){result.version=versionIdentifier}}else
2024-04-23 14:06:14 UTC	1448	IN	Data Raw: 65 29 29 29 7c 7c 72 65 73 75 6c 74 2e 73 69 6c 6b 29 7b 72 65 73 75 6c 74 2e 74 61 62 6c 65 74 3d 74 7d 65 6c 73 65 20 69 66 28 6d 6f 62 69 6c 65 7c 7c 69 6f 73 64 65 76 69 63 65 3d 3d 27 69 70 68 6f 6e 65 27 7c 7c 69 6f 73 64 65 76 69 63 65 3d 3d 27 69 70 6f 64 27 7c 7c 61 6e 64 72 6f 69 64 7c 7c 6e 65 78 75 73 4d 6f 62 69 6c 65 7c 7c 72 65 73 75 6c 74 2e 62 6c 61 63 6b 62 65 72 72 79 7c 7c 72 65 73 75 6c 74 2e 77 65 62 6f 73 7c 7c 72 65 73 75 6c 74 2e 62 61 64 61 29 7b 72 65 73 75 6c 74 2e 6d 6f 62 69 6c 65 3d 74 7d 0a 69 66 28 72 65 73 75 6c 74 2e 6d 73 65 64 67 65 7c 7c 28 72 65 73 75 6c 74 2e 6d 73 69 65 26 26 72 65 73 75 6c 74 2e 76 65 72 73 69 6f 6e 3e 3d 31 30 29 7c 7c 28 72 65 73 75 6c 74 2e 79 61 6e 64 65 78 62 72 6f 77 73 65 72 26 26 72 65 73 Data Ascii: e)))\|\|result.silk){result.tablet=t}else if(mobile\|\|iosdevice=='iphone'\|\|iosdevice=='ipod'\|\|android\|\|nexusMobile\|\|result.blackberry\|\|result.webos\|\|result.bada){result.mobile=t}if(result.msedge\|\|(result.msie&&result.version>=10)\|\|(result.yandexbrowser&&res
2024-04-23 14:06:14 UTC	1448	IN	Data Raw: 70 75 73 68 28 69 74 65 72 61 74 6f 72 28 61 72 72 5b 69 5d 29 29 3b 7d 0a 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 70 61 72 65 56 65 72 73 69 6f 6e 73 28 76 65 72 73 69 6f 6e 73 29 7b 76 61 72 20 70 72 65 63 69 73 69 6f 6e 3d 4d 61 74 68 2e 6d 61 78 28 67 65 74 56 65 72 73 69 6f 6e 50 72 65 63 69 73 69 6f 6e 28 76 65 72 73 69 6f 6e 73 5b 30 5d 29 2c 67 65 74 56 65 72 73 69 6f 6e 50 72 65 63 69 73 69 6f 6e 28 76 65 72 73 69 6f 6e 73 5b 31 5d 29 29 3b 76 61 72 20 63 68 75 6e 6b 73 3d 6d 61 70 28 76 65 72 73 69 6f 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 76 65 72 73 69 6f 6e 29 7b 76 61 72 20 64 65 6c 74 61 3d 70 72 65 63 69 73 69 6f 6e 2d 67 65 74 56 65 72 73 69 6f 6e 50 72 65 63 69 73 69 6f 6e 28 76 65 72 73 69 6f 6e Data Ascii: push(iterator(arr[i]));}return result;}function compareVersions(versions){var precision=Math.max(getVersionPrecision(versions[0]),getVersionPrecision(versions[1]));var chunks=map(versions,function(version){var delta=precision-getVersionPrecision(version
2024-04-23 14:06:14 UTC	1448	IN	Data Raw: 6f 76 65 48 6f 6f 6b 3a 66 75 6e 63 74 69 6f 6e 28 68 6f 6f 6b 2c 63 61 6c 6c 62 61 63 6b 29 0a 7b 24 28 27 62 6f 64 79 27 29 2e 6f 66 66 28 27 75 61 62 62 2d 74 72 69 67 67 65 72 2e 27 2b 68 6f 6f 6b 2c 63 61 6c 6c 62 61 63 6b 29 3b 7d 2c 7d 3b 7d 29 28 6a 51 75 65 72 79 29 3b 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 69 66 28 74 79 70 65 6f 66 20 62 6f 77 73 65 72 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 62 6f 77 73 65 72 21 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 75 61 62 62 5f 62 72 6f 77 73 65 72 3d 62 6f 77 73 65 72 2e 6e 61 6d 65 2c 75 61 62 62 5f 62 72 6f 77 73 65 72 5f 76 3d 62 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 2c 75 61 62 62 5f 62 72 6f 77 73 65 72 5f 63 6c 61 73 73 3d 75 61 Data Ascii: oveHook:function(hook,callback){$('body').off('uabb-trigger.'+hook,callback);},};})(jQuery);jQuery(document).ready(function($){if(typeof bowser!=='undefined'&&bowser!==null){var uabb_browser=bowser.name,uabb_browser_v=bowser.version,uabb_browser_class=ua
2024-04-23 14:06:14 UTC	1448	IN	Data Raw: 27 29 2c 77 6d 43 6f 6e 74 65 6e 74 3d 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 27 2e 66 6c 2d 67 61 6c 6c 65 72 79 27 29 2c 6d 66 4f 62 6a 65 63 74 3d 6e 75 6c 6c 3b 69 66 28 6d 66 43 6f 6e 74 65 6e 74 29 7b 6d 66 4f 62 6a 65 63 74 3d 6d 66 43 6f 6e 74 65 6e 74 2e 64 61 74 61 28 27 6d 6f 73 61 69 63 66 6c 6f 77 27 29 3b 69 66 28 6d 66 4f 62 6a 65 63 74 29 7b 6d 66 4f 62 6a 65 63 74 2e 63 6f 6c 75 6d 6e 73 3d 24 28 5b 5d 29 3b 6d 66 4f 62 6a 65 63 74 2e 63 6f 6c 75 6d 6e 73 48 65 69 67 68 74 73 3d 5b 5d 3b 6d 66 43 6f 6e 74 65 6e 74 2e 64 61 74 61 28 27 6d 6f 73 61 69 63 66 6c 6f 77 27 2c 6d 66 4f 62 6a 65 63 74 29 3b 6d 66 43 6f 6e 74 65 6e 74 2e 6d 6f 73 61 69 63 66 6c 6f 77 28 27 72 65 66 69 6c 6c 27 29 3b 7d 7d 0a 69 66 28 77 6d 43 6f 6e 74 65 6e 74 Data Ascii: '),wmContent=$element.find('.fl-gallery'),mfObject=null;if(mfContent){mfObject=mfContent.data('mosaicflow');if(mfObject){mfObject.columns=$([]);mfObject.columnsHeights=[];mfContent.data('mosaicflow',mfObject);mfContent.mosaicflow('refill');}}if(wmContent
2024-04-23 14:06:14 UTC	5792	IN	Data Raw: 6c 61 79 65 72 2e 73 65 74 43 6f 6e 74 72 6f 6c 73 53 69 7a 65 28 29 3b 7d 2c 35 30 29 3b 70 6c 61 79 65 72 2e 66 69 6e 64 28 27 2e 6d 65 6a 73 2d 69 6e 6e 65 72 27 29 2e 63 73 73 28 7b 76 69 73 69 62 69 6c 69 74 79 3a 27 76 69 73 69 62 6c 65 27 2c 68 65 69 67 68 74 3a 27 69 6e 68 65 72 69 74 27 7d 29 3b 7d 7d 7d 29 3b 7d 7d 2c 70 72 65 6c 6f 61 64 41 75 64 69 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 0a 7b 76 61 72 20 24 65 6c 65 6d 65 6e 74 3d 27 75 6e 64 65 66 69 6e 65 64 27 3d 3d 74 79 70 65 6f 66 20 65 6c 65 6d 65 6e 74 3f 24 28 27 62 6f 64 79 27 29 3a 24 28 65 6c 65 6d 65 6e 74 29 2c 63 6f 6e 74 65 6e 74 57 72 61 70 3d 24 65 6c 65 6d 65 6e 74 2e 63 6c 6f 73 65 73 74 28 27 2e 66 6c 2d 61 63 63 6f 72 64 69 6f 6e 2d 69 74 65 6d 27 29 2c Data Ascii: layer.setControlsSize();},50);player.find('.mejs-inner').css({visibility:'visible',height:'inherit'});}}});}},preloadAudio:function(element){var $element='undefined'==typeof element?$('body'):$(element),contentWrap=$element.closest('.fl-accordion-item'),
2024-04-23 14:06:14 UTC	5792	IN	Data Raw: 74 69 6f 6e 28 29 7b 70 6c 61 79 65 72 3d 6e 65 77 20 59 54 2e 50 6c 61 79 65 72 28 76 69 64 65 6f 50 6c 61 79 65 72 5b 30 5d 2c 7b 76 69 64 65 6f 49 64 3a 76 69 64 65 6f 49 64 2c 65 76 65 6e 74 73 3a 7b 6f 6e 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 69 66 28 22 6e 6f 22 3d 3d 3d 65 6e 61 62 6c 65 41 75 64 69 6f 7c 7c 46 4c 42 75 69 6c 64 65 72 4c 61 79 6f 75 74 2e 5f 69 73 4d 6f 62 69 6c 65 28 29 29 7b 65 76 65 6e 74 2e 74 61 72 67 65 74 2e 6d 75 74 65 28 29 3b 7d 0a 65 6c 73 65 20 69 66 28 22 79 65 73 22 3d 3d 3d 65 6e 61 62 6c 65 41 75 64 69 6f 26 26 65 76 65 6e 74 2e 74 61 72 67 65 74 2e 69 73 4d 75 74 65 64 29 7b 65 76 65 6e 74 2e 74 61 72 67 65 74 2e 75 6e 4d 75 74 65 28 29 3b 7d 0a 70 6c 61 79 65 72 57 72 61 70 2e 64 61 74 Data Ascii: tion(){player=new YT.Player(videoPlayer[0],{videoId:videoId,events:{onReady:function(event){if("no"===enableAudio\|\|FLBuilderLayout._isMobile()){event.target.mute();}else if("yes"===enableAudio&&event.target.isMuted){event.target.unMute();}playerWrap.dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	49937	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	578	OUT	GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:14 GMT Content-Type: application/javascript Content-Length: 99310 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:47:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:14 GMT Vary: Accept-Encoding
2024-04-23 14:06:14 UTC	2604	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 72 28 63 2c 61 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 74 29 7b 69 66 28 21 61 5b 6e 5d 29 7b 69 66 28 21 63 5b 6e 5d 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 74 26 26 65 29 72 65 74 75 72 6e 20 65 28 6e 2c 21 30 29 3b 69 66 28 73 29 72 65 74 75 72 6e 20 73 28 6e 2c 21 30 29 3b 76 61 72 20 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6e 2b 22 27 22 29 3b 74 68 72 6f 77 20 69 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 69 7d 76 61 72 20 75 3d 61 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 63 5b 6e 5d 5b 30 5d 2e 63 61 Data Ascii: !function r(c,a,f){function o(n,t){if(!a[n]){if(!c[n]){var e="function"==typeof require&&require;if(!t&&e)return e(n,!0);if(s)return s(n,!0);var i=new Error("Cannot find module '"+n+"'");throw i.code="MODULE_NOT_FOUND",i}var u=a[n]={exports:{}};c[n][0].ca
2024-04-23 14:06:14 UTC	7240	IN	Data Raw: 32 30 38 3a 32 30 38 2c 32 30 39 3a 32 30 39 2c 32 31 30 3a 32 31 30 2c 32 31 31 3a 32 31 31 2c 32 31 32 3a 32 31 32 2c 32 31 33 3a 32 31 33 2c 32 31 34 3a 32 31 34 2c 32 31 35 3a 32 31 35 2c 32 31 36 3a 32 31 36 2c 32 31 37 3a 32 31 37 2c 32 31 38 3a 32 31 38 2c 32 31 39 3a 32 31 39 2c 32 32 30 3a 32 32 30 2c 32 32 31 3a 32 32 31 2c 32 32 32 3a 32 32 32 2c 32 32 33 3a 32 32 33 2c 32 32 34 3a 32 32 34 2c 32 32 35 3a 32 32 35 2c 32 32 36 3a 32 32 36 2c 32 32 37 3a 32 32 37 2c 32 32 38 3a 32 32 38 2c 32 32 39 3a 32 32 39 2c 32 33 30 3a 32 33 30 2c 32 33 31 3a 32 33 31 2c 32 33 32 3a 32 33 32 2c 32 33 33 3a 32 33 33 2c 32 33 34 3a 32 33 34 2c 32 33 35 3a 32 33 35 2c 32 33 36 3a 32 33 36 2c 32 33 37 3a 32 33 37 2c 32 33 38 3a 32 33 38 2c 32 33 39 3a 32 33 39 Data Ascii: 208:208,209:209,210:210,211:211,212:212,213:213,214:214,215:215,216:216,217:217,218:218,219:219,220:220,221:221,222:222,223:223,224:224,225:225,226:226,227:227,228:228,229:229,230:230,231:231,232:232,233:233,234:234,235:235,236:236,237:237,238:238,239:239
2024-04-23 14:06:14 UTC	2896	IN	Data Raw: 63 3c 3d 61 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 52 65 64 75 63 65 20 6f 66 20 65 6d 70 74 79 20 61 72 72 61 79 20 77 69 74 68 20 6e 6f 20 69 6e 69 74 69 61 6c 20 76 61 6c 75 65 22 29 7d 66 6f 72 28 3b 69 3f 30 3c 3d 61 3a 61 3c 63 3b 61 2b 3d 66 29 61 20 69 6e 20 75 26 26 28 65 3d 6e 28 65 2c 75 5b 61 5d 2c 61 2c 6f 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 7b 31 34 31 3a 31 34 31 2c 31 34 32 3a 31 34 32 2c 33 33 3a 33 33 2c 37 37 3a 37 37 7d 5d 2c 34 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 74 28 38 31 29 2c 69 3d 74 28 37 39 29 2c 6f 3d 74 28 31 35 32 29 28 22 73 70 65 63 69 65 73 22 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 69 28 74 Data Ascii: c<=a)throw TypeError("Reduce of empty array with no initial value")}for(;i?0<=a:a<c;a+=f)a in u&&(e=n(e,u[a],a,o));return e}},{141:141,142:142,33:33,77:77}],44:[function(t,n,r){var e=t(81),i=t(79),o=t(152)("species");n.exports=function(t){var n;return i(t
2024-04-23 14:06:14 UTC	1448	IN	Data Raw: 34 3a 35 34 2c 35 38 3a 35 38 2c 36 38 3a 36 38 2c 38 35 3a 38 35 2c 38 37 3a 38 37 2c 39 34 3a 39 34 2c 39 38 3a 39 38 2c 39 39 3a 39 39 7d 5d 2c 35 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 67 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 6c 7c 7c 28 74 2e 5f 6c 3d 6e 65 77 20 67 29 7d 66 75 6e 63 74 69 6f 6e 20 62 68 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 28 74 2e 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 3d 3d 6e 7d 29 7d 76 61 72 20 75 3d 74 28 31 31 37 29 2c 63 3d 74 28 39 34 29 2e 67 65 74 57 65 61 6b 2c 69 3d 74 28 33 38 29 2c 61 3d 74 28 38 31 29 2c 66 3d 74 28 33 37 29 2c 73 3d 74 28 36 38 29 2c 65 3d 74 28 34 32 29 2c 6c 3d 74 Data Ascii: 4:54,58:58,68:68,85:85,87:87,94:94,98:98,99:99}],50:[function(t,n,r){"use strict";function _g(t){return t._l\|\|(t._l=new g)}function bh(t,n){return o(t.a,function(t){return t[0]===n})}var u=t(117),c=t(94).getWeak,i=t(38),a=t(81),f=t(37),s=t(68),e=t(42),l=t
2024-04-23 14:06:14 UTC	2896	IN	Data Raw: 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 20 67 65 74 28 74 29 7b 72 65 74 75 72 6e 20 6f 26 26 21 5f 28 74 29 3f 76 6f 69 64 20 30 3a 72 2e 63 61 6c 6c 28 74 68 69 73 2c 30 3d 3d 3d 74 3f 30 3a 74 29 7d 3a 22 61 64 64 22 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 20 61 64 64 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 30 3d 3d 3d 74 3f 30 3a 74 29 2c 74 68 69 73 7d 3a 66 75 6e 63 74 69 6f 6e 20 73 65 74 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 30 3d 3d 3d 74 3f 30 3a 74 2c 6e 29 2c 74 68 69 73 7d 29 7d 76 61 72 20 75 3d 79 5b 65 5d 2c 63 3d 75 2c 61 3d 69 3f 22 73 65 74 22 3a 22 61 64 64 22 2c 66 3d 63 26 26 63 2e 70 72 6f 74 6f 74 79 70 65 2c 73 3d 7b 7d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 Data Ascii: ==t?function get(t){return o&&!_(t)?void 0:r.call(this,0===t?0:t)}:"add"==t?function add(t){return r.call(this,0===t?0:t),this}:function set(t,n){return r.call(this,0===t?0:t,n),this})}var u=y[e],c=u,a=i?"set":"add",f=c&&c.prototype,s={};if("function"==ty
2024-04-23 14:06:14 UTC	8688	IN	Data Raw: 68 3a 72 29 5b 65 5d 2c 75 3d 6c 26 26 69 3f 6d 28 6f 2c 67 29 3a 73 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 3f 6d 28 46 75 6e 63 74 69 6f 6e 2e 63 61 6c 6c 2c 6f 29 3a 6f 2c 68 26 26 78 28 68 2c 65 2c 6f 2c 74 26 62 2e 55 29 2c 70 5b 65 5d 21 3d 6f 26 26 64 28 70 2c 65 2c 75 29 2c 73 26 26 76 5b 65 5d 21 3d 6f 26 26 28 76 5b 65 5d 3d 6f 29 7d 3b 67 2e 63 6f 72 65 3d 79 2c 62 2e 46 3d 31 2c 62 2e 47 3d 32 2c 62 2e 53 3d 34 2c 62 2e 50 3d 38 2c 62 2e 42 3d 31 36 2c 62 2e 57 3d 33 32 2c 62 2e 55 3d 36 34 2c 62 2e 52 3d 31 32 38 2c 6e 2e 65 78 70 6f 72 74 73 3d 62 7d 2c 7b 31 31 38 3a 31 31 38 2c 35 32 3a 35 32 2c 35 34 3a 35 34 2c 37 30 3a 37 30 2c 37 32 3a 37 32 7d 5d 2c 36 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b Data Ascii: h:r)[e],u=l&&i?m(o,g):s&&"function"==typeof o?m(Function.call,o):o,h&&x(h,e,o,t&b.U),p[e]!=o&&d(p,e,u),s&&v[e]!=o&&(v[e]=o)};g.core=y,b.F=1,b.G=2,b.S=4,b.P=8,b.B=16,b.W=32,b.U=64,b.R=128,n.exports=b},{118:118,52:52,54:54,70:70,72:72}],63:[function(t,n,r){
2024-04-23 14:06:14 UTC	5792	IN	Data Raw: 73 73 69 67 6e 3b 6e 2e 65 78 70 6f 72 74 73 3d 21 69 7c 7c 74 28 36 34 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 2c 6e 3d 7b 7d 2c 72 3d 53 79 6d 62 6f 6c 28 29 2c 65 3d 22 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 22 3b 72 65 74 75 72 6e 20 74 5b 72 5d 3d 37 2c 65 2e 73 70 6c 69 74 28 22 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 74 7d 29 2c 37 21 3d 69 28 7b 7d 2c 74 29 5b 72 5d 7c 7c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 28 7b 7d 2c 6e 29 29 2e 6a 6f 69 6e 28 22 22 29 21 3d 65 7d 29 3f 66 75 6e 63 74 69 6f 6e 20 61 73 73 69 67 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 79 28 74 29 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 31 2c 6f 3d 76 2e Data Ascii: ssign;n.exports=!i\|\|t(64)(function(){var t={},n={},r=Symbol(),e="abcdefghijklmnopqrst";return t[r]=7,e.split("").forEach(function(t){n[t]=t}),7!=i({},t)[r]\|\|Object.keys(i({},n)).join("")!=e})?function assign(t,n){for(var r=y(t),e=arguments.length,i=1,o=v.
2024-04-23 14:06:14 UTC	1448	IN	Data Raw: 64 20 30 29 7d 29 2c 65 7d 29 2c 6e 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 7b 36 36 3a 36 36 7d 5d 2c 31 32 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 69 73 7c 7c 66 75 6e 63 74 69 6f 6e 20 69 73 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 6e 3f 30 21 3d 3d 74 7c 7c 31 2f 74 3d 3d 31 2f 6e 3a 74 21 3d 74 26 26 6e 21 3d 6e 7d 7d 2c 7b 7d 5d 2c 31 32 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 57 75 28 74 2c 6e 29 7b 69 66 28 69 28 74 29 2c 21 65 28 6e 29 26 26 6e 75 6c 6c 21 3d 3d 6e 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 6e 2b 22 3a 20 63 61 6e 27 74 20 73 65 74 20 61 73 20 70 72 6f 74 6f 74 79 70 65 21 22 29 7d 76 61 72 20 65 3d 6e 28 Data Ascii: d 0)}),e}),n.exports=o},{66:66}],121:[function(t,n,r){n.exports=Object.is\|\|function is(t,n){return t===n?0!==t\|\|1/t==1/n:t!=t&&n!=n}},{}],122:[function(n,t,r){function Wu(t,n){if(i(t),!e(n)&&null!==n)throw TypeError(n+": can't set as prototype!")}var e=n(
2024-04-23 14:06:14 UTC	8688	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 65 3d 69 28 74 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 28 72 3d 69 28 65 29 5b 75 5d 29 3f 6e 3a 6f 28 72 29 7d 7d 2c 7b 31 35 32 3a 31 35 32 2c 33 33 3a 33 33 2c 33 38 3a 33 38 7d 5d 2c 31 32 38 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 74 28 36 34 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 21 21 74 26 26 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3f 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 31 29 3a 74 2e 63 61 6c 6c 28 6e 75 6c 6c 29 7d 29 Data Ascii: .exports=function(t,n){var r,e=i(t).constructor;return void 0===e\|\|null==(r=i(e)[u])?n:o(r)}},{152:152,33:33,38:38}],128:[function(t,n,r){"use strict";var e=t(64);n.exports=function(t,n){return!!t&&e(function(){n?t.call(null,function(){},1):t.call(null)})
2024-04-23 14:06:14 UTC	5792	IN	Data Raw: 69 73 5b 5f 74 5d 7d 7d 29 2c 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6c 2c 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 43 43 28 74 2c 69 29 7b 57 28 74 2c 69 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 69 2c 28 6e 3d 74 68 69 73 2e 5f 64 29 2e 76 5b 72 5d 28 74 2a 6c 2b 6e 2e 6f 2c 49 74 29 3b 76 61 72 20 74 2c 6e 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 3d 69 2c 72 3d 74 2c 65 3d 74 68 69 73 2e 5f 64 2c 6f 26 26 28 72 3d 28 72 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 72 29 29 3c 30 3f 30 3a 32 35 35 3c 72 3f 32 35 35 3a 32 35 35 26 72 29 2c 76 6f 69 64 20 65 2e 76 5b 75 5d 28 6e 2a 6c 2b 65 2e 6f 2c 72 2c 49 74 29 3b 76 61 72 20 6e 2c 72 2c 65 7d 2c 65 6e 75 6d 65 72 Data Ascii: is[_t]}}),n.exports=function(t,l,n,o){function CC(t,i){W(t,i,{get:function(){return t=i,(n=this._d).v[r](tl+n.o,It);var t,n},set:function(t){return n=i,r=t,e=this._d,o&&(r=(r=Math.round(r))<0?0:255<r?255:255&r),void e.v[u](nl+e.o,r,It);var n,r,e},enumer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	49939	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	587	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	310	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:14 GMT Content-Type: application/javascript Content-Length: 9720 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:14 GMT Vary: Accept-Encoding
2024-04-23 14:06:14 UTC	6949	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 65 3d 3e 4d 61 74 68 2e 61 62 73 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 2c 74 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 69 6e 69 74 22 2c 22 69 6e 69 74 22 5d 2c 5b 22 76 61 6c 69 64 61 74 69 6f 6e 5f 66 61 69 6c 65 64 22 2c 22 69 6e 76 61 6c 69 64 22 5d 2c 5b 22 61 63 63 65 70 74 61 6e 63 65 5f 6d 69 73 73 69 6e 67 22 2c 22 75 6e 61 63 63 65 70 74 65 64 22 5d 2c 5b 22 73 70 61 6d 22 2c 22 73 70 61 6d 22 5d 2c 5b 22 61 62 6f 72 74 65 64 22 2c 22 61 62 6f 72 74 65 64 22 5d 2c 5b 22 6d 61 69 6c 5f 73 65 6e 74 22 2c 22 73 65 6e 74 22 5d 2c 5b 22 6d 61 69 6c 5f 66 61 69 6c 65 64 22 2c 22 66 61 69 6c 65 64 22 5d Data Ascii: !function(){"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t)=>{const r=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"]
2024-04-23 14:06:14 UTC	2771	IN	Data Raw: 2e 66 6f 63 75 73 28 29 7d 29 29 7d 29 29 7d 29 28 74 29 2c 28 65 3d 3e 7b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 77 70 63 66 37 2d 76 61 6c 69 64 61 74 65 73 2d 61 73 2d 75 72 6c 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 28 74 3d 3e 7b 6c 65 74 20 72 3d 65 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 3b 72 26 26 21 72 2e 6d 61 74 63 68 28 2f 5e 5b 61 2d 7a 5d 5b 61 2d 7a 30 2d 39 2e 2b 2d 5d 2a 3a 2f 69 29 26 26 2d 31 21 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 26 26 28 72 3d 72 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 2b 2f 2c 22 22 29 2c 72 3d 22 68 74 74 70 3a 2f 2f 22 2b 72 29 2c 65 2e 76 61 6c 75 65 3d 72 7d 29 29 7d 29 29 7d 29 28 74 29 Data Ascii: .focus()}))}))})(t),(e=>{e.querySelectorAll(".wpcf7-validates-as-url").forEach((e=>{e.addEventListener("change",(t=>{let r=e.value.trim();r&&!r.match(/^[a-z][a-z0-9.+-]*:/i)&&-1!==r.indexOf(".")&&(r=r.replace(/^\/+/,""),r="http://"+r),e.value=r}))}))})(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	49938	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	583	OUT	GET /wp-content/themes/regionalexpress/js/functions.js?ver=5.7.11 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	310	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:14 GMT Content-Type: application/javascript Content-Length: 1076 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:14 GMT Vary: Accept-Encoding
2024-04-23 14:06:14 UTC	1076	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 68 65 6d 65 20 66 75 6e 63 74 69 6f 6e 73 20 66 69 6c 65 2e 0a 20 2a 0a 20 2a 20 43 6f 6e 74 61 69 6e 73 20 68 61 6e 64 6c 65 72 73 20 66 6f 72 20 6e 61 76 69 67 61 74 69 6f 6e 20 61 6e 64 20 77 69 64 67 65 74 20 61 72 65 61 2e 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 4d 45 4e 55 20 54 4f 47 47 4c 45 0a 09 09 20 2a 2f 0a 09 09 24 28 27 23 6d 65 6e 75 2d 74 6f 67 67 6c 65 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 09 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 24 28 27 23 6d 61 73 74 68 65 61 64 27 29 2e 74 6f 67 67 6c Data Ascii: /** * Theme functions file. * * Contains handlers for navigation and widget area. /(function ($) {$(document).ready(function () {/* * MENU TOGGLE */$('#menu-toggle').click(function (e) {e.preventDefault();$('#masthead').toggl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	49941	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	389	OUT	GET /wp-content/themes/regionalexpress/img/menu.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	273	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:14 GMT Content-Type: image/png Content-Length: 969 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:14 GMT
2024-04-23 14:06:14 UTC	969	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR;0tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	49942	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	405	OUT	GET /wp-content/themes/regionalexpress/img/logo-regionalexpress.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:14 GMT Content-Type: image/png Content-Length: 7879 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:14 GMT
2024-04-23 14:06:14 UTC	6985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 32 08 06 00 00 00 97 a7 1f d8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRx2gAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-04-23 14:06:14 UTC	894	IN	Data Raw: eb 38 b3 b7 52 3c 3b 19 eb a0 77 30 75 19 e5 bf dd 4d 92 09 7c fc 73 6c 5f 8f c3 75 31 9d 92 85 fd 30 77 1d 47 c0 80 b7 b5 d9 ff df 4f 37 d4 d9 6c e9 f3 97 9a 05 fd 42 6f b2 94 6b 97 50 6c 57 40 94 08 1e bb 0d 04 cf 16 ca ed f2 fb 83 2b ef 28 65 29 ef 81 28 81 ec c2 91 b1 01 e3 ed 0f 55 29 ef 26 4b 29 b9 48 f9 cf 2b 40 32 61 68 92 8c 29 f9 59 4c ed 86 fa cd e3 76 96 0c 4d 92 11 a3 12 71 1e df 84 5c 78 1a c5 61 43 0c 69 54 85 5e 6a 1e 31 ac 31 81 4f 2c d7 bd ab 6e 09 b2 f4 98 8c b1 f5 60 4a 57 4f c4 79 72 27 b6 35 2f 20 35 4e 46 8a be dd af bc b1 cd 03 84 34 ed 4a e9 b7 7f a6 fc e0 72 ec bb e6 21 c5 74 d4 ac ca 0d 11 7c 63 d0 af 2f da 7a 15 de 0c a9 51 87 5a 95 a0 38 4a b1 2d 1f 09 4e 3b d6 47 55 2f b8 fc d0 4a 02 fa bd 81 10 18 e1 37 8f 9b ac c0 27 96 61 Data Ascii: 8R<;w0uM\|sl_u10wGO7lBokPlW@+(e)(U)&K)H+@2ah)YLvMq\xaCiT^j11O,n`JWOyr'5/ 5NF4Jr!t\|c/zQZ8J-N;GU/J7'a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	49940	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	412	OUT	GET /wp-content/themes/regionalexpress/img/logo-regionalexpress-mobile.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:14 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:14 GMT Content-Type: image/png Content-Length: 6171 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:14 GMT
2024-04-23 14:06:14 UTC	6171	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 21 08 06 00 00 00 12 e5 6f ed 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRx!ogAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	49943	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	570	OUT	GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:15 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:15 GMT Content-Type: application/javascript Content-Length: 20787 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:47:08 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:15 GMT Vary: Accept-Encoding
2024-04-23 14:06:15 UTC	1156	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 32 30 2d 30 39 2d 32 35 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 73 63 61 70 65 2d 73 65 6c 65 63 74 6f 72 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 66 6f 72 6d 2e 6a 73 2c 20 69 65 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 31 2d 37 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 70 6c 75 67 69 6e 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 73 61 66 65 2d 61 63 74 69 76 65 2d 65 6c 65 6d 65 6e 74 2e Data Ascii: /! jQuery UI - v1.12.1 - 2020-09-25 http://jqueryui.com* Includes: data.js, disable-selection.js, escape-selector.js, focusable.js, form-reset-mixin.js, form.js, ie.js, jquery-1-7.js, keycode.js, labels.js, plugin.js, position.js, safe-active-element.
2024-04-23 14:06:15 UTC	4344	IN	Data Raw: 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 78 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 69 73 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 3a 28 74 3d 22 6f 6e 73 65 6c 65 63 74 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3f 22 73 65 6c 65 63 74 73 74 61 72 74 22 3a 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2b 22 2e 75 69 2d 64 69 73 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e Data Ascii: ndation and other contributors * Released under the MIT license. * http://jquery.org/license */x.fn.extend({disableSelection:(t="onselectstart"in document.createElement("div")?"selectstart":"mousedown",function(){return this.on(t+".ui-disableSelection
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 7c 7c 74 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 31 31 21 3d 3d 74 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 29 29 66 6f 72 28 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 2e 6f 70 74 69 6f 6e 73 5b 73 5b 6f 5d 5b 30 5d 5d 26 26 73 5b 6f 5d 5b 31 5d 2e 61 70 70 6c 79 28 74 2e 65 6c 65 6d 65 6e 74 2c 69 29 7d 7d 2c 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 50 6f 73 69 74 69 6f 6e 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 Data Ascii: \|\|t.element[0].parentNode&&11!==t.element[0].parentNode.nodeType))for(o=0;o<s.length;o++)t.options[s[o][0]]&&s[o][1].apply(t.element,i)}},/! jQuery UI Position 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors *
2024-04-23 14:06:15 UTC	4344	IN	Data Raw: 66 74 2d 3d 6c 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 66 2e 6d 79 5b 30 5d 26 26 28 68 2e 6c 65 66 74 2d 3d 6c 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 66 2e 6d 79 5b 31 5d 3f 68 2e 74 6f 70 2d 3d 61 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 66 2e 6d 79 5b 31 5d 26 26 28 68 2e 74 6f 70 2d 3d 61 2f 32 29 2c 68 2e 6c 65 66 74 2b 3d 63 5b 30 5d 2c 68 2e 74 6f 70 2b 3d 63 5b 31 5d 2c 69 3d 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 65 2c 6d 61 72 67 69 6e 54 6f 70 3a 6e 7d 2c 78 2e 65 61 63 68 28 5b 22 6c 65 66 74 22 2c 22 74 6f 70 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 78 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 5b 79 5b 74 5d 5d 26 26 78 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 5b 79 5b 74 5d 5d 5b 65 5d 28 68 2c 7b 74 61 72 67 65 74 57 69 64 74 68 3a 64 2c 74 61 72 Data Ascii: ft-=l:"center"===f.my[0]&&(h.left-=l/2),"bottom"===f.my[1]?h.top-=a:"center"===f.my[1]&&(h.top-=a/2),h.left+=c[0],h.top+=c[1],i={marginLeft:e,marginTop:n},x.each(["left","top"],function(t,e){x.ui.position[y[t]]&&x.ui.position[y[t]][e](h,{targetWidth:d,tar
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 76 61 72 20 63 2c 66 3d 30 2c 75 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 3b 78 2e 63 6c 65 61 6e 44 61 74 61 3d 28 63 3d 78 2e 63 6c 65 61 6e 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 69 2c 6e 3d 30 3b 6e 75 6c 6c 21 3d 28 69 3d 74 5b 6e 5d 29 3b 6e 2b 2b 29 74 72 79 7b 28 65 3d 78 2e 5f 64 61 74 61 28 69 2c 22 65 76 65 6e 74 73 22 29 29 26 26 65 2e 72 65 6d 6f 76 65 26 26 78 28 69 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 63 61 74 63 Data Ascii: utors * Released under the MIT license. * http://jquery.org/license */var c,f=0,u=Array.prototype.slice;x.cleanData=(c=x.cleanData,function(t){for(var e,i,n=0;null!=(i=t[n]);n++)try{(e=x._data(i,"events"))&&e.remove&&x(i).triggerHandler("remove")}catc
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 6f 3d 30 2c 73 3d 6e 2e 6c 65 6e 67 74 68 3b 6f 3c 73 3b 6f 2b 2b 29 66 6f 72 28 65 20 69 6e 20 6e 5b 6f 5d 29 69 3d 6e 5b 6f 5d 5b 65 5d 2c 6e 5b 6f 5d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 28 78 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 69 29 3f 74 5b 65 5d 3d 78 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 5b 65 5d 29 3f 78 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 5b 65 5d 2c 69 29 3a 78 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 69 29 3a 74 5b 65 5d 3d 69 29 3b 72 65 74 75 72 6e 20 74 7d 2c 78 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 65 29 7b 76 61 72 20 72 3d 65 2e 70 72 6f 74 6f Data Ascii: l(arguments,1),o=0,s=n.length;o<s;o++)for(e in n[o])i=n[o][e],n[o].hasOwnProperty(e)&&void 0!==i&&(x.isPlainObject(i)?t[e]=x.isPlainObject(t[e])?x.widget.extend({},t[e],i):x.widget.extend({},i):t[e]=i);return t},x.widget.bridge=function(s,e){var r=e.proto
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 61 62 6c 65 64 22 3d 3d 3d 74 26 26 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 44 69 73 61 62 6c 65 64 28 65 29 2c 74 68 69 73 7d 2c 5f 73 65 74 4f 70 74 69 6f 6e 43 6c 61 73 73 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 3b 66 6f 72 28 65 20 69 6e 20 74 29 6e 3d 74 68 69 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 65 5d 2c 74 5b 65 5d 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 65 73 5b 65 5d 26 26 6e 26 26 6e 2e 6c 65 6e 67 74 68 26 26 28 69 3d 78 28 6e 2e 67 65 74 28 29 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 6e 2c 65 29 2c 69 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 6c 61 73 73 65 73 28 7b 65 6c 65 6d 65 6e 74 3a 69 2c 6b 65 79 73 3a 65 2c 63 6c 61 Data Ascii: abled"===t&&this._setOptionDisabled(e),this},_setOptionClasses:function(t){var e,i,n;for(e in t)n=this.classesElementLookup[e],t[e]!==this.options.classes[e]&&n&&n.length&&(i=x(n.get()),this._removeClass(n,e),i.addClass(this._classes({element:i,keys:e,cla
2024-04-23 14:06:15 UTC	2255	IN	Data Raw: 2c 6e 29 7b 76 61 72 20 6f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 2c 69 3d 7b 65 78 74 72 61 3a 6f 3f 65 3a 69 2c 6b 65 79 73 3a 6f 3f 74 3a 65 2c 65 6c 65 6d 65 6e 74 3a 6f 3f 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3a 74 2c 61 64 64 3a 6e 3d 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 6e 3a 69 7d 3b 72 65 74 75 72 6e 20 69 2e 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 6c 61 73 73 65 73 28 69 29 2c 6e 29 2c 74 68 69 73 7d 2c 5f 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 2c 74 29 7b 76 61 72 20 72 2c 6c 3d 74 68 69 73 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 6f 26 26 28 74 3d 73 2c 73 3d 6f 2c 6f 3d 21 31 29 2c 74 3f 28 73 3d 72 3d 78 28 73 Data Ascii: ,n){var o="string"==typeof t\|\|null===t,i={extra:o?e:i,keys:o?t:e,element:o?this.element:t,add:n="boolean"==typeof n?n:i};return i.element.toggleClass(this._classes(i),n),this},_on:function(o,s,t){var r,l=this;"boolean"!=typeof o&&(t=s,s=o,o=!1),t?(s=r=x(s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	49944	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	603	OUT	GET /wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1709309010&ver=1.18.1 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:15 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:15 GMT Content-Type: application/javascript Content-Length: 69803 Connection: close Server: Apache Last-Modified: Fri, 01 Mar 2024 16:03:30 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:15 GMT Vary: Accept-Encoding
2024-04-23 14:06:15 UTC	4033	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 44 6f 20 6e 6f 74 20 74 6f 75 63 68 20 74 68 69 73 20 66 69 6c 65 21 20 54 68 69 73 20 66 69 6c 65 20 63 72 65 61 74 65 64 20 62 79 20 74 68 65 20 50 6f 70 75 70 20 4d 61 6b 65 72 20 70 6c 75 67 69 6e 20 75 73 69 6e 67 20 50 48 50 0a 20 2a 20 4c 61 73 74 20 6d 6f 64 69 66 69 65 64 20 74 69 6d 65 3a 20 4d 61 72 20 30 31 20 32 30 32 34 2c 20 30 35 3a 30 33 3a 33 30 0a 20 2a 2f 0a 0a 0a 76 61 72 20 50 55 4d 2c 50 55 4d 5f 41 63 63 65 73 73 69 62 69 6c 69 74 79 2c 50 55 4d 5f 41 6e 61 6c 79 74 69 63 73 2c 70 6d 5f 63 6f 6f 6b 69 65 2c 70 6d 5f 63 6f 6f 6b 69 65 5f 6a 73 6f 6e 2c 70 6d 5f 72 65 6d 6f 76 65 5f 63 6f 6f 6b 69 65 3b 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 6f 69 64 20 30 3d 3d 3d 69 2e Data Ascii: /** * Do not touch this file! This file created by the Popup Maker plugin using PHP * Last modified time: Mar 01 2024, 05:03:30 */var PUM,PUM_Accessibility,PUM_Analytics,pm_cookie,pm_cookie_json,pm_remove_cookie;!function(i){"use strict";void 0===i.
2024-04-23 14:06:15 UTC	8707	IN	Data Raw: 3d 31 22 2c 22 31 3d 31 22 29 3b 74 21 3d 3d 6f 26 26 28 6f 3d 74 29 2c 65 2e 70 72 6f 70 28 22 73 72 63 22 2c 6f 29 7d 29 2c 6f 2e 66 69 6e 64 28 22 76 69 64 65 6f 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 75 73 65 28 29 7d 29 29 7d 7d 7d 2c 61 2e 66 6e 2e 70 6f 70 6d 61 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 70 6f 70 6d 61 6b 65 2e 6d 65 74 68 6f 64 73 5b 65 5d 3f 28 61 28 72 29 2e 74 72 69 67 67 65 72 28 22 70 75 6d 4d 65 74 68 6f 64 43 61 6c 6c 22 2c 61 72 67 75 6d 65 6e 74 73 29 2c 61 2e 66 6e 2e 70 6f 70 6d 61 6b 65 2e 6d 65 74 68 6f 64 73 5b 65 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 Data Ascii: =1","1=1");t!==o&&(o=t),e.prop("src",o)}),o.find("video").each(function(){this.pause()}))}}},a.fn.popmake=function(e){return a.fn.popmake.methods[e]?(a(r).trigger("pumMethodCall",arguments),a.fn.popmake.methods[e].apply(this,Array.prototype.slice.call(arg
2024-04-23 14:06:15 UTC	4344	IN	Data Raw: 70 75 70 5f 69 64 2c 70 75 6d 5f 76 61 72 73 2e 66 6f 72 6d 5f 73 75 63 63 65 73 73 2e 73 65 74 74 69 6e 67 73 29 29 2c 50 55 4d 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 2e 69 6e 69 74 28 29 7d 2c 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 50 55 4d 2e 68 6f 6f 6b 73 2e 61 70 70 6c 79 46 69 6c 74 65 72 73 28 22 70 75 6d 2e 69 6e 69 74 48 61 6e 64 6c 65 72 22 2c 50 55 4d 2e 69 6e 69 74 29 2c 6f 3d 50 55 4d 2e 68 6f 6f 6b 73 2e 61 70 70 6c 79 46 69 6c 74 65 72 73 28 22 70 75 6d 2e 69 6e 69 74 50 72 6f 6d 69 73 65 73 22 2c 5b 5d 29 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 6f 29 2e 74 68 65 6e 28 65 29 7d 29 2c 65 28 22 2e 70 75 6d 22 29 2e 6f 6e 28 22 70 75 6d 49 6e 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 50 55 4d 2e 67 65 74 Data Ascii: pup_id,pum_vars.form_success.settings)),PUM.integrations.init()},e(function(){var e=PUM.hooks.applyFilters("pum.initHandler",PUM.init),o=PUM.hooks.applyFilters("pum.initPromises",[]);Promise.all(o).then(e)}),e(".pum").on("pumInit",function(){var e=PUM.get
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 20 6e 6f 74 20 65 78 69 73 74 2e 22 29 2c 74 68 69 73 29 7d 2c 6e 2e 66 6e 2e 70 6f 70 6d 61 6b 65 2e 61 6e 69 6d 61 74 69 6f 6e 73 3d 7b 6e 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 50 55 4d 2e 67 65 74 50 6f 70 75 70 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 6f 2e 70 6f 70 6d 61 6b 65 28 22 67 65 74 43 6f 6e 74 61 69 6e 65 72 22 29 2e 63 73 73 28 7b 6f 70 61 63 69 74 79 3a 31 2c 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 7d 29 2c 6f 2e 70 6f 70 6d 61 6b 65 28 22 61 6e 69 6d 61 74 65 5f 6f 76 65 72 6c 61 79 22 2c 22 6e 6f 6e 65 22 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 21 3d 3d 72 26 26 65 28 29 7d 29 2c 74 68 69 73 7d 2c 73 6c 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 65 3d 50 55 4d 2e 67 65 74 50 6f 70 Data Ascii: not exist."),this)},n.fn.popmake.animations={none:function(e){var o=PUM.getPopup(this);return o.popmake("getContainer").css({opacity:1,display:"block"}),o.popmake("animate_overlay","none",0,function(){e!==r&&e()}),this},slide:function(o){var e=PUM.getPop
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 6f 62 69 6c 65 44 65 74 65 63 74 3f 6e 65 77 20 4d 6f 62 69 6c 65 44 65 74 65 63 74 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3a 7b 70 68 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 74 61 62 6c 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 65 7d 76 61 72 20 65 3b 70 2e 65 78 74 65 6e 64 28 70 2e 66 6e 2e 70 6f 70 6d 61 6b 65 2e 6d 65 74 68 6f 64 73 2c 7b 63 68 65 63 6b 43 6f 6e 64 69 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6f 2c 74 2c 6e 2c 69 2c 72 3d 50 55 4d 2e 67 65 74 50 6f 70 75 70 28 74 68 Data Ascii: (){return e=void 0===e?"undefined"!=typeof MobileDetect?new MobileDetect(window.navigator.userAgent):{phone:function(){return!1},tablet:function(){return!1}}:e}var e;p.extend(p.fn.popmake.methods,{checkConditions:function(){var e,o,t,n,i,r=PUM.getPopup(th
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 70 6f 70 6d 61 6b 65 2e 63 6f 6f 6b 69 65 2e 70 72 6f 63 65 73 73 2c 70 6d 5f 63 6f 6f 6b 69 65 5f 6a 73 6f 6e 3d 63 2e 70 6d 5f 63 6f 6f 6b 69 65 5f 6a 73 6f 6e 3d 63 2e 66 6e 2e 70 6f 70 6d 61 6b 65 2e 63 6f 6f 6b 69 65 2e 67 65 74 4a 53 4f 4e 2c 70 6d 5f 72 65 6d 6f 76 65 5f 63 6f 6f 6b 69 65 3d 63 2e 70 6d 5f 72 65 6d 6f 76 65 5f 63 6f 6f 6b 69 65 3d 63 2e 66 6e 2e 70 6f 70 6d 61 6b 65 2e 63 6f 6f 6b 69 65 2e 72 65 6d 6f 76 65 7d 28 6a 51 75 65 72 79 29 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 2e 70 6d 5f 63 6f 6f 6b 69 65 28 65 2e 6e 61 6d 65 2c 21 30 2c 65 2e 73 65 73 73 69 6f 6e 3f 6e 75 6c 6c 3a 65 2e 74 69 6d 65 2c 65 2e 70 61 74 68 3f 70 75 6d 5f 76 61 Data Ascii: popmake.cookie.process,pm_cookie_json=c.pm_cookie_json=c.fn.popmake.cookie.getJSON,pm_remove_cookie=c.pm_remove_cookie=c.fn.popmake.cookie.remove}(jQuery),function(i,e,n){"use strict";function r(e){i.pm_cookie(e.name,!0,e.session?null:e.time,e.path?pum_va
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 2c 69 28 77 69 6e 64 6f 77 29 2e 6f 66 66 28 22 73 63 72 6f 6c 6c 2e 70 75 6d 2d 63 6f 6f 6b 69 65 2d 22 2b 74 29 29 7d 2c 31 30 30 29 29 7d 29 7d 29 7d 28 6a 51 75 65 72 79 2c 64 6f 63 75 6d 65 6e 74 29 3b 76 61 72 20 70 75 6d 5f 64 65 62 75 67 2c 70 75 6d 5f 64 65 62 75 67 5f 6d 6f 64 65 3d 21 31 3b 21 66 75 6e 63 74 69 6f 6e 28 73 2c 65 29 7b 76 61 72 20 61 2c 6f 2c 70 3b 65 3d 77 69 6e 64 6f 77 2e 70 75 6d 5f 76 61 72 73 7c 7c 7b 64 65 62 75 67 5f 6d 6f 64 65 3a 21 31 7d 2c 28 70 75 6d 5f 64 65 62 75 67 5f 6d 6f 64 65 3d 21 28 70 75 6d 5f 64 65 62 75 67 5f 6d 6f 64 65 3d 76 6f 69 64 20 30 21 3d 3d 65 2e 64 65 62 75 67 5f 6d 6f 64 65 26 26 65 2e 64 65 62 75 67 5f 6d 6f 64 65 29 26 26 2d 31 21 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 Data Ascii: ,i(window).off("scroll.pum-cookie-"+t))},100))})})}(jQuery,document);var pum_debug,pum_debug_mode=!1;!function(s,e){var a,o,p;e=window.pum_vars\|\|{debug_mode:!1},(pum_debug_mode=!(pum_debug_mode=void 0!==e.debug_mode&&e.debug_mode)&&-1!==window.location.hr
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 20 20 20 20 20 20 20 7c 5c 6e 7c 20 7c 20 20 5f 20 5c 5c 20 5f 5f 5f 20 20 5f 20 5f 5f 20 20 5f 20 20 20 5f 20 5f 20 5f 5f 20 20 20 7c 20 20 5c 5c 2f 20 20 7c 20 5f 5f 20 5f 7c 20 7c 20 5f 5f 5f 5f 5f 20 5f 20 5f 5f 20 20 7c 5c 6e 7c 20 7c 20 7c 5f 29 20 2f 20 5f 20 5c 5c 7c 20 27 5f 20 5c 5c 7c 20 7c 20 7c 20 7c 20 27 5f 20 5c 5c 20 20 7c 20 7c 5c 5c 2f 7c 20 7c 2f 20 5f 60 20 7c 20 7c 2f 20 2f 20 5f 20 5c 5c 20 27 5f 5f 7c 20 7c 5c 6e 7c 20 7c 20 20 5f 5f 2f 20 28 5f 29 20 7c 20 7c 5f 29 20 7c 20 7c 5f 7c 20 7c 20 7c 5f 29 20 7c 20 7c 20 7c 20 20 7c 20 7c 20 28 5f 7c 20 7c 20 20 20 3c 20 20 5f 5f 2f 20 7c 20 20 20 20 7c 5c 6e 7c 20 7c 5f 7c 20 20 20 5c 5c 5f 5f 5f 2f 7c 20 2e 5f 5f 2f 20 5c 5c 5f 5f 2c 5f 7c 20 2e 5f 5f 2f 20 20 7c 5f 7c 20 20 7c 5f 7c Data Ascii: \|\n\| \| _ \\ ___ _ __ _ _ _ __ \| \\/ \| __ _\| \| _____ _ __ \|\n\| \| \|_) / _ \\\| '_ \\\| \| \| \| '_ \\ \| \|\\/\| \|/ _` \| \|/ / _ \\ '__\| \|\n\| \| __/ (_) \| \|_) \| \|_\| \| \|_) \| \| \| \| \| (_\| \| < __/ \| \|\n\| \|_\| \\___/\| .__/ \\__,_\| .__/ \|_\| \|_\|
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 5d 29 3b 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 7d 69 66 28 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 43 6f 6c 6c 61 70 73 65 64 28 70 2e 6c 61 62 65 6c 5f 63 6f 6f 6b 69 65 73 29 2c 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 3d 31 29 70 75 6d 5f 64 65 62 75 67 2e 63 6f 6f 6b 69 65 28 65 2c 6e 5b 72 5d 29 3b 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 7d 69 2e 6c 65 6e 67 74 68 26 26 28 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 43 6f 6c 6c 61 70 73 65 64 28 70 2e 6c 61 62 65 6c 5f 63 6f 6e 64 69 74 69 6f 6e 73 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 69 29 2c 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 29 2c 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 43 6f 6c 6c 61 70 73 65 64 28 Data Ascii: ]);console.groupEnd()}if(n.length){for(console.groupCollapsed(p.label_cookies),r=0;r<n.length;r+=1)pum_debug.cookie(e,n[r]);console.groupEnd()}i.length&&(console.groupCollapsed(p.label_conditions),console.log(i),console.groupEnd()),console.groupCollapsed(
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 6e 74 65 6e 74 3a 21 31 2c 70 6f 73 69 74 69 6f 6e 5f 66 72 6f 6d 5f 74 72 69 67 67 65 72 3a 21 31 2c 70 6f 73 69 74 69 6f 6e 5f 66 69 78 65 64 3a 21 31 2c 6f 76 65 72 6c 61 79 5f 64 69 73 61 62 6c 65 64 3a 21 31 2c 73 74 61 63 6b 61 62 6c 65 3a 21 31 2c 64 69 73 61 62 6c 65 5f 72 65 70 6f 73 69 74 69 6f 6e 3a 21 31 2c 63 6c 6f 73 65 5f 6f 6e 5f 6f 76 65 72 6c 61 79 5f 63 6c 69 63 6b 3a 21 31 2c 63 6c 6f 73 65 5f 6f 6e 5f 66 6f 72 6d 5f 73 75 62 6d 69 73 73 69 6f 6e 3a 21 31 2c 63 6c 6f 73 65 5f 6f 6e 5f 66 6f 72 6d 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 64 65 6c 61 79 3a 30 2c 63 6c 6f 73 65 5f 6f 6e 5f 65 73 63 5f 70 72 65 73 73 3a 21 31 2c 63 6c 6f 73 65 5f 6f 6e 5f 66 34 5f 70 72 65 73 73 3a 21 31 2c 64 69 73 61 62 6c 65 5f 6f 6e 5f 6d 6f 62 69 6c 65 3a Data Ascii: ntent:!1,position_from_trigger:!1,position_fixed:!1,overlay_disabled:!1,stackable:!1,disable_reposition:!1,close_on_overlay_click:!1,close_on_form_submission:!1,close_on_form_submission_delay:0,close_on_esc_press:!1,close_on_f4_press:!1,disable_on_mobile:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	49947	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	381	OUT	GET /wp-content/uploads/2022/02/HP-fd-1.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:15 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:15 GMT Content-Type: image/jpeg Content-Length: 688121 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:38 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:15 GMT
2024-04-23 14:06:15 UTC	6982	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cd 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:15 UTC	5792	IN	Data Raw: b4 e9 5a 78 6b 27 74 6b 5d a1 14 bd cf 93 ba 4f e7 5c bb 56 bd 2b e0 69 a8 7b 86 d5 da 39 ab f7 9a e5 d2 53 3f 21 51 cc 1d b7 f1 3f 1a d7 a6 b1 b5 cd a9 41 8e 36 17 e4 15 88 65 2d 40 ac 37 3e 55 a7 96 b1 77 36 55 3b eb 7b 38 66 50 92 ca 28 3f 51 a5 2a 3f 66 96 a2 b4 40 05 ce 3e d6 02 de cb 06 a1 a0 af 4e 5e 24 69 48 d5 41 6d e1 69 39 1e 7c 85 4f 23 5a 6f f8 f4 ae a7 51 a2 ac 0c 61 8b 90 f5 12 00 dc fc 07 9e b2 65 85 18 8a 00 d5 27 7a 80 46 ff 00 0f c3 53 6c 10 e0 61 63 fc c7 a5 01 a1 a2 9e 9f 86 b3 d4 69 5a 9d dd ad a7 38 2a 15 4d 7a f4 ae a3 51 50 64 f8 e0 41 2d 1f 11 e0 4e d5 1f 0d 6d 53 2b a1 4d dc 10 45 19 55 3c 07 ee d6 89 49 9c c1 ce aa a7 2e 23 6e 44 97 a7 f6 6a f4 92 ee 90 74 72 46 a1 87 05 60 76 04 e8 d2 25 74 1b 1d ec 70 a5 0a 2d 46 c0 81 a1 d4 Data Ascii: Zxk'tk]O\V+i{9S?!Q?A6e-@7>Uw6U;{8fP(?Q?f@>N^$iHAmi9\|O#ZoQae'zFSlaciZ8MzQPdA-NmS+MEU<I.#nDjtrF`v%tp-F
2024-04-23 14:06:15 UTC	13032	IN	Data Raw: a9 a6 c3 e5 f8 e9 14 88 47 13 be ea a6 9d 01 00 78 7c 34 c6 11 1d ac 8c 48 e2 41 07 f2 d2 18 da de d5 55 b8 b5 2b d4 d7 cf 40 05 9b 68 43 06 e6 a0 1e a4 f8 fc b4 86 8d b4 31 a2 9e 34 90 8f e2 a6 db fc 34 8a c4 53 70 c0 0a 73 20 50 d1 74 82 05 ca cd 52 79 13 e0 1b 42 61 06 bd e6 62 13 76 ad 2a c7 cb 44 84 14 30 57 62 18 ec 37 07 ae 90 e0 da 5b 44 db 2e e4 1d f4 d0 40 52 e3 5d 51 58 ad 29 53 c8 79 1d 20 48 9f d1 02 08 0b d3 60 3f 1d 22 a0 bd 6c 40 a1 1b 91 b9 3e 54 f3 d2 60 10 96 e8 b4 d8 57 f8 76 fc 3a 69 31 85 08 36 14 3b 0f 01 d7 f0 d2 2a 0b 11 0f 2d bc fa d2 9a 41 01 f0 db b8 f5 05 a7 89 27 c2 ba 03 02 c7 57 5a d3 72 7a 8f 0a 6a 92 10 29 0e db 57 db 15 dc 79 7e 7a 20 96 cb 96 30 40 a3 01 e6 a3 ae ad 22 5b 21 c5 63 1b b7 26 ff 00 0d 7a 79 ea d2 32 6c 58 Data Ascii: Gx\|4HAU+@hC144Sps PtRyBabvD0Wb7[D.@R]QX)Sy H`?"l@>T`Wv:i16;-A'WZrzj)Wy~z 0@"[!c&zy2lX
2024-04-23 14:06:15 UTC	16384	IN	Data Raw: 12 e8 15 02 95 a0 01 47 97 e3 be 9c 08 2c dc a0 2b 5a 86 04 54 00 45 0e 90 04 87 79 80 60 58 0a 31 67 5f 31 e7 a6 98 36 2c 9a ea ea d8 96 dc f8 3e e7 8f fb 53 4e 41 17 63 fb a6 c8 39 86 e0 30 e0 7f 88 6c 2b d0 d4 e9 36 34 8e 90 64 71 b2 a0 f6 e6 5a 30 a8 4f ed db 49 94 91 13 06 36 e8 ef 90 8e 2a 75 27 72 3e 5a 83 54 85 d9 1c 55 9c 11 19 21 bb 12 a9 f0 20 01 f3 00 69 48 c4 91 ca f6 95 62 e6 83 75 8c f4 a7 cb 4a 40 e9 2c f2 8e c0 19 5c 18 c6 c0 9f 1a fc 34 9b 08 0d 79 20 98 52 bc 0d 2a 64 de ba 24 20 94 11 a1 52 d1 3b 33 11 40 cc 3d 3d 6a 2b a9 6e 0a 55 6c 35 20 95 2a 5a 20 ea 4f 82 ef a9 d4 8b 54 62 ab cb 4d cf 38 0a ab 93 5f 4d 36 d4 5a c5 aa b0 5b 3c 7d b4 8c 44 8e 23 df a1 07 7f ee d6 6e c6 91 03 b8 f1 0a 2a cb 28 74 af e8 0b d7 44 88 16 45 f6 18 86 40 Data Ascii: G,+ZTEy`X1g_16,>SNAc90l+64dqZ0OI6u'r>ZTU! iHbuJ@,\4y Rd$ R;3@==j+nUl5 Z OTbM8_M6Z[<}D#n(tDE@
2024-04-23 14:06:15 UTC	8232	IN	Data Raw: 24 d6 bf 86 8b 29 1c 9d 2d b9 c6 c5 57 33 ba d3 f4 f1 f0 f8 9d 24 82 60 64 32 33 2a 29 8d c4 b6 c0 7a 89 35 63 f1 03 ad 35 49 41 9b b3 17 c9 2d d4 c5 bf a6 50 ab 75 2f 41 42 7c 7e 1a a4 88 76 16 cb 8e ce 50 b4 d1 b8 07 70 c0 06 06 9f 1d 5a 46 6e f2 4a 0c 65 d9 53 23 84 66 df d0 6b d3 e1 ab 44 36 46 5b 98 e1 10 19 6d f6 e5 46 a2 f5 03 cb 54 49 db 5a 17 36 89 71 87 80 3d c4 80 87 77 1e 85 1f 8f 5d 00 36 8a 6c 8a 5b bc d9 2b b2 42 50 b2 02 00 f9 00 3c b4 c8 b2 00 9f ee 06 0a c5 5a 1b 97 f6 8a 83 c7 81 24 9a e9 48 95 58 81 be e9 c0 5d 7e 89 39 aa 1d 84 80 86 db e3 a2 4b 55 81 3e 53 bf 9a fe a3 9b a5 4d 44 29 52 36 f0 db 44 94 94 80 2f 74 65 26 44 56 9f 8c 44 fa 52 84 30 a7 9f 96 93 63 d2 0f 27 75 66 ac 47 0b 5b cd a6 34 15 dc d7 fb 34 6a 12 ac 85 c7 dc 79 12 Data Ascii: $)-W3$`d23*)z5c5IA-Pu/AB\|~vPpZFnJeS#fkD6F[mFTIZ6q=w]6l[+BP<Z$HX]~9KU>SMD)R6D/te&DVDR0c'ufG[44jy
2024-04-23 14:06:15 UTC	16384	IN	Data Raw: 54 ed f2 d3 80 45 7f 45 38 65 f6 99 59 54 d1 83 79 f5 eb a1 81 7b da 33 80 a4 d5 48 e3 41 b8 1e 26 bf 3d 20 2a 36 ec 19 ca b9 02 9d 29 40 29 e4 34 c4 c1 5e cd f7 a1 62 7a d4 9a 8f cf 40 48 09 87 82 f1 79 c8 65 a9 03 c4 9e bf 86 90 db 37 ed db 96 2a 49 f5 2d 48 e9 4a 75 3c be 3a 64 e2 16 67 11 15 65 52 dc 85 02 9d a9 5d c5 0e ad 66 07 59 db f9 65 5b 84 8e ed 44 68 cd c5 9a 95 fc 75 68 cd a3 d7 12 0c 3d d4 20 7d 74 0e 81 6a 4a 90 77 3a 78 11 88 b5 f2 56 16 71 cb 6f 6d 6e 1a 41 55 5b 86 00 f8 fe af ee d2 28 e7 ee 32 f2 c5 30 68 df de ff 00 1e d4 a6 dd 29 f3 d0 00 f7 dd c5 78 d6 d1 c4 23 21 6b c9 c2 f8 7c 4f 9e 80 02 1d d3 75 6a be 98 15 88 dc 2b f8 e8 1a ac 95 4d de 57 b7 32 7d 51 82 23 2c 47 6a 74 a9 1e 5a 94 c3 41 50 ee bb c9 e5 59 26 b7 8d 08 3e a0 a2 84 Data Ascii: TEE8eYTy{3HA&= 6)@)4^bz@Hye7I-HJu<:dgeR]fYe[Dhuh= }tjJw:xVqomnAU[(20h)x#!k\|Ouj+MW2}Q#,GjtZAPY&>
2024-04-23 14:06:15 UTC	14024	IN	Data Raw: f9 ea 2d b8 52 da e6 70 2d de 19 f5 af ff 00 15 6e 9d 1b ff 00 28 c8 dc 6b d6 94 d6 5a d9 ba da ab 2e b5 ee cc d7 ba 92 3c ce 50 f8 13 5f ed df 54 ae d9 36 da 43 7b 9e e0 ca e4 62 58 0c 94 87 f8 88 00 1f c4 f8 ea b5 04 40 be 3f 74 3f 2f 53 90 7f 51 3b ef e3 a9 96 10 34 86 ee e0 15 f4 8a 80 00 3b 68 96 10 11 1d d6 40 b7 23 71 22 12 6b 54 34 a7 90 1a 31 1e 91 aa 66 73 bc d5 7f aa 4d 22 36 c2 a0 35 07 c2 a3 4a 05 03 9e 22 54 4e 52 19 26 93 fc c9 59 47 ea ff 00 7e 80 41 56 f6 d1 d4 00 a8 4f 40 7a 9f fb 75 23 2d 36 51 a8 20 0e 66 b5 27 a6 da 20 35 02 4a 62 53 42 9e df 90 ae fa 20 1d 81 56 3b 79 9e 93 bb c7 1f 45 7e bf 1e 83 55 a4 99 08 e1 89 8e a0 cb 34 84 9e 81 3a 9f 86 98 0c 13 10 65 f5 21 65 43 bf 05 5a 9a 69 40 88 a6 16 46 59 3f cc 81 23 35 0e 45 18 82 77 Data Ascii: -Rp-n(kZ.<P_T6C{bX@?t?/SQ;4;h@#q"kT41fsM"65J"TNR&YG~AVO@zu#-6Q f' 5JbSB V;yE~U4:e!eCZi@FY?#5Ew
2024-04-23 14:06:15 UTC	16384	IN	Data Raw: 22 8b 4e 9f 2d 0e c6 8b 6f 00 66 81 c8 00 9a 53 66 5a 6d 5d 67 a8 7a 09 ae 3d f6 e2 08 35 f8 8a 53 af 5f 0d 29 05 54 17 1e 26 60 c0 84 a5 05 46 e4 fe cd 39 1a 81 84 38 59 4d 0c a0 a1 f0 3d 3e 3a 25 8d c0 c6 3c 22 aa 02 db 15 fd 9f 3d 06 45 8b 88 85 2a c4 85 eb 51 f1 e9 4f c7 41 59 84 3e 3e d9 54 71 24 b9 1d 4f 5d be 1a 09 15 49 6a 8c 58 2e e1 c0 a0 f0 dc 79 69 a4 00 cb 8c 67 27 88 f2 2c 57 a5 6b d0 9d 52 13 c8 6f 6b 8d 00 f1 2a 41 1d 41 df 6f 12 47 e3 ab 48 cd b1 93 62 c9 a4 71 a2 c8 b5 fd 74 dc 9f 89 d3 04 ce 83 19 db 91 4e d4 99 48 a7 ea 70 37 1a 66 73 89 d7 45 da 2c f4 8e da ac 29 bb 75 3f f6 68 82 5a 04 cb 76 7c d6 70 93 2c be e4 92 0a aa 0e a0 7c 74 40 e1 1c 95 b7 6b de a4 ac 58 ad ba 75 02 42 14 91 fd ba 20 a4 c1 af e0 c7 e3 50 21 b9 49 a5 50 43 05 Data Ascii: "N-ofSfZm]gz=5S_)T&`F98YM=>:%<"=EQOAY>>Tq$O]IjX.yig',WkRokAAoGHbqtNHp7fsE,)u?hZv\|p,\|t@kXuB P!IPC
2024-04-23 14:06:15 UTC	16384	IN	Data Raw: 9e 9e 84 e9 a1 69 17 dc 2a 05 e2 bd 17 ae dd 2b f0 d3 05 59 16 b9 e3 52 41 63 5d 81 15 03 fd fa b4 c5 64 0e d2 d5 68 00 0a 48 e4 0f 4f 1e be 7a a4 e0 cc be dd 90 31 66 04 81 d5 48 ea 3a 01 4d 5a 13 0f 12 c4 76 5f 4f 96 dd 29 a7 22 2f e2 08 f0 90 13 41 4f 11 a2 45 05 c9 09 62 2a bc 43 0e ba 24 70 15 1d ab 0a b6 dd 3c 7a 68 d5 20 5a fe d7 0a 00 4b 6d 5a 6d a6 10 02 ca 79 0d 85 2b 4a 8d bf da 9a 4c 70 45 9d 20 34 29 ee 31 e9 50 0e da 52 10 50 f9 38 c1 a2 d9 28 6f f1 0d 1a 92 08 60 52 64 67 62 69 45 14 a7 a7 a8 fe e1 a9 d4 3d 26 a1 ca 5c 42 6b c5 5c 7f 84 8f d8 34 f5 0a 02 e5 ce dd ca 9c 04 71 46 a2 95 0a 28 75 0f 70 ad 00 fe e5 c4 e4 fa 81 1f 0d f5 3a d8 69 09 8a 1b a5 3c bd 54 34 63 4f 13 fd da a5 66 1a 4e bf 17 70 6d d9 7e ac 93 10 1e a5 fe da 6a f5 0b 48 Data Ascii: i+YRAc]dhHOz1fH:MZv_O)"/AOEbC$p<zh ZKmZmy+JLpE 4)1PRP8(o`RdgbiE=&\Bk\4qF(up:i<T4cOfNpm~jH
2024-04-23 14:06:15 UTC	16384	IN	Data Raw: aa c1 2e ff 00 c4 77 fd c7 30 ae 47 65 e0 1d 4f ab 11 dc 74 3f 0a c8 68 3f 6e 9c e1 db 90 df ea 9e 68 e8 2f 62 e7 9b fb 91 6a 45 05 e6 36 29 d3 e4 b1 d3 4e 63 b7 81 3c 17 89 45 93 b7 d6 fd ad bb ad 44 d6 92 5a b9 f8 95 1b 68 ee ef fb c1 e3 a8 4b 1c 45 fb 7f ee 6d 90 dc db 5f b4 e0 7c 03 d7 ff 00 77 54 b0 7e ef b4 97 8c 7b 7e e3 a6 49 4f fa a7 b1 2e aa 29 91 c3 c9 03 1f 92 06 df 45 72 5e cf bc 4e bf ab b7 14 43 b5 20 57 fe 8b 0d 0d 71 bd f3 66 38 ff 00 84 1b e8 c6 ff 00 83 6a a9 1a 90 6e a7 a5 f8 33 ea 59 31 d3 10 ad 1c 60 82 08 52 0f 1a fc 0e bf 2a 5b ab 89 fa f5 b6 9f 02 9f a2 bb 5f 4c 91 0d f7 fd 43 ca 9a af 32 bc 08 f2 ec b3 46 9e dd d7 62 a1 5b e1 e2 29 a6 ac 81 d5 a3 4f 6c ce 87 a8 1e 27 e1 a1 5d 21 3a 36 80 e5 83 ad 3a 7a 8d 0f 4a 6b 4a d8 c6 db 60 Data Ascii: .w0GeOt?h?nh/bjE6)Nc<EDZhKEm_\|wT~{~IO.)Er^NC Wqf8jn3Y1`R*[_LC2Fb[)Ol']!:6:zJkJ`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	49945	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	601	OUT	GET /wp-content/plugins/popup-maker/assets/js/vendor/mobile-detect.min.js?ver=1.3.3 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:15 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:15 GMT Content-Type: application/javascript Content-Length: 38942 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:31:50 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:15 GMT Vary: Accept-Encoding
2024-04-23 14:06:15 UTC	8396	IN	Data Raw: 2f 2a 21 40 6c 69 63 65 6e 73 65 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 48 65 69 6e 72 69 63 68 20 47 6f 65 62 6c 2c 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 68 67 6f 65 62 6c 2f 6d 6f 62 69 6c 65 2d 64 65 74 65 63 74 2e 6a 73 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 6e 75 6c 6c 21 3d 62 26 26 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 61 2e 6c 65 6e 67 Data Ascii: /!@license Copyright 2013, Heinrich Goebl, License: MIT, see https://github.com/hgoebl/mobile-detect.js/!function(a,b){a(function(){"use strict";function a(a,b){return null!=a&&null!=b&&a.toLowerCase()===b.toLowerCase()}function c(a,b){var c,d,e=a.leng
2024-04-23 14:06:15 UTC	4344	IN	Data Raw: 49 4d 2d 41 38 31 30 4b 7c 49 4d 2d 41 38 31 30 53 7c 49 4d 2d 41 38 30 30 53 7c 49 4d 2d 54 31 30 30 4b 7c 49 4d 2d 41 37 32 35 4c 7c 49 4d 2d 41 37 38 30 4c 7c 49 4d 2d 41 37 37 35 43 7c 49 4d 2d 41 37 37 30 4b 7c 49 4d 2d 41 37 36 30 53 7c 49 4d 2d 41 37 35 30 4b 7c 49 4d 2d 41 37 34 30 53 7c 49 4d 2d 41 37 33 30 53 7c 49 4d 2d 41 37 32 30 4c 7c 49 4d 2d 41 37 31 30 4b 7c 49 4d 2d 41 36 39 30 4c 7c 49 4d 2d 41 36 39 30 53 7c 49 4d 2d 41 36 35 30 53 7c 49 4d 2d 41 36 33 30 4b 7c 49 4d 2d 41 36 30 30 53 7c 56 45 47 41 20 50 54 4c 32 31 7c 50 54 30 30 33 7c 50 38 30 31 30 7c 41 44 52 39 31 30 4c 7c 50 36 30 33 30 7c 50 36 30 32 30 7c 50 39 30 37 30 7c 50 34 31 30 30 7c 50 39 30 36 30 7c 50 35 30 30 30 7c 43 44 4d 38 39 39 32 7c 54 58 54 38 30 34 35 7c 41 Data Ascii: IM-A810K\|IM-A810S\|IM-A800S\|IM-T100K\|IM-A725L\|IM-A780L\|IM-A775C\|IM-A770K\|IM-A760S\|IM-A750K\|IM-A740S\|IM-A730S\|IM-A720L\|IM-A710K\|IM-A690L\|IM-A690S\|IM-A650S\|IM-A630K\|IM-A600S\|VEGA PTL21\|PT003\|P8010\|ADR910L\|P6030\|P6020\|P9070\|P4100\|P9060\|P5000\|CDM8992\|TXT8045\|A
2024-04-23 14:06:15 UTC	15928	IN	Data Raw: 65 72 7c 42 4e 52 56 32 30 30 7c 42 4e 52 56 32 30 30 41 7c 42 4e 54 56 32 35 30 7c 42 4e 54 56 32 35 30 41 7c 42 4e 54 56 34 30 30 7c 42 4e 54 56 36 30 30 7c 4c 6f 67 69 63 50 44 20 5a 6f 6f 6d 32 22 2c 41 63 65 72 54 61 62 6c 65 74 3a 22 41 6e 64 72 6f 69 64 2e 2a 3b 20 5c 5c 62 28 41 31 30 30 7c 41 31 30 31 7c 41 31 31 30 7c 41 32 30 30 7c 41 32 31 30 7c 41 32 31 31 7c 41 35 30 30 7c 41 35 30 31 7c 41 35 31 30 7c 41 35 31 31 7c 41 37 30 30 7c 41 37 30 31 7c 57 35 30 30 7c 57 35 30 30 50 7c 57 35 30 31 7c 57 35 30 31 50 7c 57 35 31 30 7c 57 35 31 31 7c 57 37 30 30 7c 47 31 30 30 7c 47 31 30 30 57 7c 42 31 2d 41 37 31 7c 42 31 2d 37 31 30 7c 42 31 2d 37 31 31 7c 41 31 2d 38 31 30 7c 41 31 2d 38 31 31 7c 41 31 2d 38 33 30 29 5c 5c 62 7c 57 33 2d 38 31 30 Data Ascii: er\|BNRV200\|BNRV200A\|BNTV250\|BNTV250A\|BNTV400\|BNTV600\|LogicPD Zoom2",AcerTablet:"Android.*; \\b(A100\|A101\|A110\|A200\|A210\|A211\|A500\|A501\|A510\|A511\|A700\|A701\|W500\|W500P\|W501\|W501P\|W510\|W511\|W700\|G100\|G100W\|B1-A71\|B1-710\|B1-711\|A1-810\|A1-811\|A1-830)\\b\|W3-810
2024-04-23 14:06:15 UTC	10274	IN	Data Raw: 65 66 6f 78 3a 22 66 65 6e 6e 65 63 7c 66 69 72 65 66 6f 78 2e 2a 6d 61 65 6d 6f 7c 28 4d 6f 62 69 6c 65 7c 54 61 62 6c 65 74 29 2e 2a 46 69 72 65 66 6f 78 7c 46 69 72 65 66 6f 78 2e 2a 4d 6f 62 69 6c 65 7c 46 78 69 4f 53 22 2c 42 6f 6c 74 3a 22 62 6f 6c 74 22 2c 54 65 61 53 68 61 72 6b 3a 22 74 65 61 73 68 61 72 6b 22 2c 42 6c 61 7a 65 72 3a 22 42 6c 61 7a 65 72 22 2c 53 61 66 61 72 69 3a 22 56 65 72 73 69 6f 6e 2e 2a 4d 6f 62 69 6c 65 2e 2a 53 61 66 61 72 69 7c 53 61 66 61 72 69 2e 2a 4d 6f 62 69 6c 65 7c 4d 6f 62 69 6c 65 53 61 66 61 72 69 22 2c 57 65 43 68 61 74 3a 22 5c 5c 62 4d 69 63 72 6f 4d 65 73 73 65 6e 67 65 72 5c 5c 62 22 2c 55 43 42 72 6f 77 73 65 72 3a 22 55 43 2e 2a 42 72 6f 77 73 65 72 7c 55 43 57 45 42 22 2c 62 61 69 64 75 62 6f 78 61 70 Data Ascii: efox:"fennec\|firefox.maemo\|(Mobile\|Tablet).Firefox\|Firefox.Mobile\|FxiOS",Bolt:"bolt",TeaShark:"teashark",Blazer:"Blazer",Safari:"Version.Mobile.Safari\|Safari.Mobile\|MobileSafari",WeChat:"\\bMicroMessenger\\b",UCBrowser:"UC.*Browser\|UCWEB",baiduboxap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	49946	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:14 UTC	593	OUT	GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:15 UTC	309	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:15 GMT Content-Type: application/javascript Content-Length: 999 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:06 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:15 GMT Vary: Accept-Encoding
2024-04-23 14:06:15 UTC	999	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 74 3d 3e 7b 76 61 72 20 65 3b 77 70 63 66 37 5f 72 65 63 61 70 74 63 68 61 3d 7b 2e 2e 2e 6e 75 6c 6c 21 3d 3d 28 65 3d 77 70 63 66 37 5f 72 65 63 61 70 74 63 68 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 7b 7d 7d 3b 63 6f 6e 73 74 20 63 3d 77 70 63 66 37 5f 72 65 63 61 70 74 63 68 61 2e 73 69 74 65 6b 65 79 2c 7b 68 6f 6d 65 70 61 67 65 3a 6e 2c 63 6f 6e 74 61 63 74 66 6f 72 6d 3a 61 7d 3d 77 70 63 66 37 5f 72 65 63 61 70 74 63 68 61 2e 61 63 74 69 6f 6e 73 2c 6f 3d 74 3d 3e 7b 63 6f 6e 73 74 7b 61 63 74 69 6f 6e 3a 65 2c 66 75 6e 63 3a 6e 2c 70 61 72 61 6d 73 3a 61 7d 3d 74 3b 67 72 65 63 61 70 74 63 68 61 2e Data Ascii: document.addEventListener("DOMContentLoaded",(t=>{var e;wpcf7_recaptcha={...null!==(e=wpcf7_recaptcha)&&void 0!==e?e:{}};const c=wpcf7_recaptcha.sitekey,{homepage:n,contactform:a}=wpcf7_recaptcha.actions,o=t=>{const{action:e,func:n,params:a}=t;grecaptcha.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	49949	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:15 UTC	601	OUT	GET /wp-content/plugins/bb-plugin/js/jquery.ba-throttle-debounce.min.js?ver=2.3.2.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:15 UTC	309	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:15 GMT Content-Type: application/javascript Content-Length: 731 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:24:36 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:15 GMT Vary: Accept-Encoding
2024-04-23 14:06:15 UTC	731	IN	Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 74 68 72 6f 74 74 6c 65 20 2f 20 64 65 62 6f 75 6e 63 65 20 2d 20 76 31 2e 31 20 2d 20 33 2f 37 2f 32 30 31 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 65 6e 61 6c 6d 61 6e 2e 63 6f 6d 2f 70 72 6f 6a 65 63 74 73 2f 6a 71 75 65 72 79 2d 74 68 72 6f 74 74 6c 65 2d 64 65 62 6f 75 6e 63 65 2d 70 6c 75 67 69 6e 2f 0a 20 2a 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 20 22 43 6f 77 62 6f 79 22 20 42 65 6e 20 41 6c 6d 61 6e 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 65 6e 61 6c 6d 61 6e 2e 63 6f 6d 2f 61 62 6f 75 74 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 28 66 75 Data Ascii: /* * jQuery throttle / debounce - v1.1 - 3/7/2010 * http://benalman.com/projects/jquery-throttle-debounce-plugin/ * * Copyright (c) 2010 "Cowboy" Ben Alman * Dual licensed under the MIT and GPL licenses. * http://benalman.com/about/license/ */(fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	49948	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:15 UTC	594	OUT	GET /wp-content/plugins/bb-plugin/js/jquery.magnificpopup.min.js?ver=2.3.2.6 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:15 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:15 GMT Content-Type: application/javascript Content-Length: 20154 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:24:36 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:15 GMT Vary: Accept-Encoding
2024-04-23 14:06:15 UTC	1137	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 65 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 3a 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 7c 7c 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 29 7d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 2c 6f 2c 72 2c 61 2c 73 3d 22 43 6c 6f 73 65 22 2c 6c 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 63 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 64 3d 22 42 65 66 6f 72 65 41 70 70 65 6e 64 22 2c 75 3d 22 4d 61 72 6b 75 70 50 61 72 73 65 22 2c 70 3d 22 4f 70 65 Data Ascii: !function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e("object"==typeof exports?require("jquery"):window.jQuery\|\|window.Zepto)}(function(e){var t,n,i,o,r,a,s="Close",l="BeforeClose",c="AfterClose",d="BeforeAppend",u="MarkupParse",p="Ope
2024-04-23 14:06:15 UTC	1467	IN	Data Raw: 20 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 43 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 43 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 3b 74 2e 69 73 4c 6f 77 49 45 3d 74 2e 69 73 49 45 38 3d 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 26 26 21 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 74 2e 69 73 41 6e 64 72 6f 69 64 3d 2f 61 6e 64 72 6f 69 64 2f 67 69 2e 74 65 73 74 28 6e 29 2c 74 2e 69 73 49 4f 53 3d 2f 69 70 68 6f 6e 65 7c 69 70 61 64 7c 69 70 6f 64 2f 67 69 2e 74 65 73 74 28 6e 29 2c 74 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 3d 50 28 29 2c 74 2e 70 72 6f 62 61 62 6c 79 Data Ascii: e)return!0;return!1};C.prototype={constructor:C,init:function(){var n=navigator.appVersion;t.isLowIE=t.isIE8=document.all&&!document.addEventListener,t.isAndroid=/android/gi.test(n),t.isIOS=/iphone\|ipad\|ipod/gi.test(n),t.supportsTransition=P(),t.probably
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 75 6c 65 73 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 6c 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 63 3d 6c 5b 6f 5d 3b 63 3d 63 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 63 2e 73 6c 69 63 65 28 31 29 2c 74 5b 22 69 6e 69 74 22 2b 63 5d 2e 63 61 6c 6c 28 74 29 7d 6b 28 22 42 65 66 6f 72 65 4f 70 65 6e 22 29 2c 74 2e 73 74 2e 73 68 6f 77 43 6c 6f 73 65 42 74 6e 26 26 28 74 2e 73 74 2e 63 6c 6f 73 65 42 74 6e 49 6e 73 69 64 65 3f 28 49 28 75 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 6e 2e 63 6c 6f 73 65 5f 72 65 70 6c 61 63 65 57 69 74 68 3d 54 28 69 2e 74 79 70 65 29 7d 29 2c 72 2b 3d 22 20 6d 66 70 2d 63 6c 6f 73 65 2d 62 74 6e 2d 69 6e 22 29 3a 74 2e 77 72 61 70 2e 61 70 70 65 6e 64 28 54 28 29 29 29 2c 74 Data Ascii: ules;for(o=0;o<l.length;o++){var c=l[o];c=c.charAt(0).toUpperCase()+c.slice(1),t["init"+c].call(t)}k("BeforeOpen"),t.st.showCloseBtn&&(t.st.closeBtnInside?(I(u,function(e,t,n,i){n.close_replaceWith=T(i.type)}),r+=" mfp-close-btn-in"):t.wrap.append(T())),t
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 26 26 74 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 3f 28 74 2e 5f 61 64 64 43 6c 61 73 73 54 6f 4d 46 50 28 68 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 63 6c 6f 73 65 28 29 7d 2c 74 2e 73 74 2e 72 65 6d 6f 76 61 6c 44 65 6c 61 79 29 29 3a 74 2e 5f 63 6c 6f 73 65 28 29 29 7d 2c 5f 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 28 73 29 3b 76 61 72 20 6e 3d 68 2b 22 20 22 2b 76 2b 22 20 22 3b 69 66 28 74 2e 62 67 4f 76 65 72 6c 61 79 2e 64 65 74 61 63 68 28 29 2c 74 2e 77 72 61 70 2e 64 65 74 61 63 68 28 29 2c 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 65 6d 70 74 79 28 29 2c 74 2e 73 74 2e 6d 61 69 6e 43 6c 61 73 73 26 26 28 6e 2b 3d 74 2e 73 74 2e 6d 61 69 6e 43 6c 61 73 73 2b 22 20 22 29 2c 74 2e 5f Data Ascii: &&t.supportsTransition?(t._addClassToMFP(h),setTimeout(function(){t._close()},t.st.removalDelay)):t._close())},_close:function(){k(s);var n=h+" "+v+" ";if(t.bgOverlay.detach(),t.wrap.detach(),t.container.empty(),t.st.mainClass&&(n+=t.st.mainClass+" "),t._
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 61 73 73 28 22 6d 66 70 2d 22 2b 6f 2b 22 2d 68 6f 6c 64 65 72 22 29 3b 76 61 72 20 61 3d 74 5b 22 67 65 74 22 2b 69 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 5d 28 6e 2c 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 5b 69 5d 29 3b 74 2e 61 70 70 65 6e 64 43 6f 6e 74 65 6e 74 28 61 2c 69 29 2c 6e 2e 70 72 65 6c 6f 61 64 65 64 3d 21 30 2c 6b 28 66 2c 6e 29 2c 6f 3d 6e 2e 74 79 70 65 2c 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 72 65 70 65 6e 64 28 74 2e 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 29 2c 6b 28 22 41 66 74 65 72 43 68 61 6e 67 65 22 29 7d 2c 61 70 70 65 6e 64 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 2e 63 6f 6e 74 65 6e 74 3d 65 2c 65 3f 74 2e 73 74 2e 73 Data Ascii: ass("mfp-"+o+"-holder");var a=t["get"+i.charAt(0).toUpperCase()+i.slice(1)](n,t.currTemplate[i]);t.appendContent(a,i),n.preloaded=!0,k(f,n),o=n.type,t.container.prepend(t.contentContainer),k("AfterChange")},appendContent:function(e,n){t.content=e,e?t.st.s
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 29 2c 6f 2e 65 6c 3d 65 28 6e 2e 6d 66 70 45 6c 29 2c 6f 2e 64 65 6c 65 67 61 74 65 26 26 28 6f 2e 69 74 65 6d 73 3d 69 2e 66 69 6e 64 28 6f 2e 64 65 6c 65 67 61 74 65 29 29 2c 74 2e 6f 70 65 6e 28 6f 29 7d 7d 2c 75 70 64 61 74 65 53 74 61 74 75 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 74 2e 70 72 65 6c 6f 61 64 65 72 29 7b 6e 21 3d 3d 65 26 26 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6d 66 70 2d 73 2d 22 2b 6e 29 2c 69 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 65 7c 7c 28 69 3d 74 2e 73 74 2e 74 4c 6f 61 64 69 6e 67 29 3b 76 61 72 20 6f 3d 7b 73 74 61 74 75 73 3a 65 2c 74 65 78 74 3a 69 7d 3b 6b 28 22 55 70 64 61 74 65 53 74 61 74 75 73 22 2c 6f 29 2c 65 3d 6f 2e 73 74 61 74 75 73 2c 69 3d 6f 2e 74 65 78 Data Ascii: ),o.el=e(n.mfpEl),o.delegate&&(o.items=i.find(o.delegate)),t.open(o)}},updateStatus:function(e,i){if(t.preloader){n!==e&&t.container.removeClass("mfp-s-"+n),i\|\|"loading"!==e\|\|(i=t.st.tLoading);var o={status:e,text:i};k("UpdateStatus",o),e=o.status,i=o.tex
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 6d 67 22 29 3f 72 2e 61 74 74 72 28 22 73 72 63 22 2c 69 29 3a 72 2e 72 65 70 6c 61 63 65 57 69 74 68 28 65 28 22 3c 69 6d 67 3e 22 29 2e 61 74 74 72 28 22 73 72 63 22 2c 69 29 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 72 2e 61 74 74 72 28 22 63 6c 61 73 73 22 29 29 29 3a 72 2e 61 74 74 72 28 6f 5b 31 5d 2c 69 29 7d 7d 65 6c 73 65 20 74 2e 66 69 6e 64 28 67 2b 22 2d 22 2b 6e 29 2e 68 74 6d 6c 28 69 29 7d 29 7d 2c 5f 67 65 74 53 63 72 6f 6c 6c 62 61 72 53 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 2e 73 63 72 6f 6c 6c 62 61 72 53 69 7a 65 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 77 69 64 74 68 Data Ascii: mg")?r.attr("src",i):r.replaceWith(e("<img>").attr("src",i).attr("class",r.attr("class"))):r.attr(o[1],i)}}else t.find(g+"-"+n).html(i)})},_getScrollbarSize:function(){if(void 0===t.scrollbarSize){var e=document.createElement("div");e.style.cssText="width
2024-04-23 14:06:15 UTC	2896	IN	Data Raw: 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 77 72 61 70 2e 61 64 64 43 6c 61 73 73 28 76 29 7d 2c 31 36 29 2c 74 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 22 72 65 61 64 79 22 29 2c 6b 28 22 41 6a 61 78 43 6f 6e 74 65 6e 74 41 64 64 65 64 22 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 48 28 29 2c 6e 2e 66 69 6e 69 73 68 65 64 3d 6e 2e 6c 6f 61 64 45 72 72 6f 72 3d 21 30 2c 74 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 22 65 72 72 6f 72 22 2c 74 2e 73 74 2e 61 6a 61 78 2e 74 45 72 72 6f 72 2e 72 65 70 6c 61 63 65 28 22 25 75 72 6c 25 22 2c 6e 2e 73 72 63 29 29 7d 7d 2c 74 2e 73 74 2e 61 6a 61 78 2e 73 65 74 74 69 6e 67 73 29 3b 72 65 74 75 72 6e 20 74 2e 72 65 71 3d 65 2e 61 6a 61 78 28 69 29 2c 22 22 7d 7d 7d 29 3b 76 61 72 20 46 2c 6a 3d Data Ascii: t(function(){t.wrap.addClass(v)},16),t.updateStatus("ready"),k("AjaxContentAdded")},error:function(){H(),n.finished=n.loadError=!0,t.updateStatus("error",t.st.ajax.tError.replace("%url%",n.src))}},t.st.ajax.settings);return t.req=e.ajax(i),""}}});var F,j=
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 2e 61 64 64 43 6c 61 73 73 28 22 6d 66 70 2d 6c 6f 61 64 69 6e 67 22 29 2c 74 2e 66 69 6e 64 49 6d 61 67 65 53 69 7a 65 28 6e 29 29 2c 69 29 7d 7d 7d 29 3b 76 61 72 20 4e 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 4e 26 26 28 4e 3d 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 29 2e 73 74 79 6c 65 2e 4d 6f 7a 54 72 61 6e 73 66 6f 72 6d 29 2c 4e 7d 3b 65 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 72 65 67 69 73 74 65 72 4d 6f 64 75 6c 65 28 22 7a 6f 6f 6d 22 2c 7b 6f 70 74 69 6f 6e 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 31 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 2d 69 6e 2d 6f 75 74 22 2c 64 75 72 61 74 69 6f 6e 3a 33 30 30 2c 6f 70 65 6e 65 72 3a 66 75 Data Ascii: .addClass("mfp-loading"),t.findImageSize(n)),i)}}});var N,W=function(){return void 0===N&&(N=void 0!==document.createElement("p").style.MozTransform),N};e.magnificPopup.registerModule("zoom",{options:{enabled:!1,easing:"ease-in-out",duration:300,opener:fu
2024-04-23 14:06:15 UTC	1448	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 69 6d 61 67 65 22 3d 3d 3d 74 2e 63 75 72 72 49 74 65 6d 2e 74 79 70 65 7d 2c 5f 67 65 74 49 74 65 6d 54 6f 5a 6f 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 2e 63 75 72 72 49 74 65 6d 2e 68 61 73 53 69 7a 65 26 26 74 2e 63 75 72 72 49 74 65 6d 2e 69 6d 67 7d 2c 5f 67 65 74 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3b 69 3d 6e 3f 74 2e 63 75 72 72 49 74 65 6d 2e 69 6d 67 3a 74 2e 73 74 2e 7a 6f 6f 6d 2e 6f 70 65 6e 65 72 28 74 2e 63 75 72 72 49 74 65 6d 2e 65 6c 7c 7c 74 2e 63 75 72 72 49 74 65 6d 29 3b 76 61 72 20 6f 3d 69 2e 6f 66 66 73 65 74 28 29 2c 72 3d 70 61 72 73 65 49 6e 74 28 69 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 29 2c 31 Data Ascii: unction(){return"image"===t.currItem.type},_getItemToZoom:function(){return!!t.currItem.hasSize&&t.currItem.img},_getOffset:function(n){var i;i=n?t.currItem.img:t.st.zoom.opener(t.currItem.el\|\|t.currItem);var o=i.offset(),r=parseInt(i.css("padding-top"),1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	49951	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:15 UTC	577	OUT	GET /wp-content/themes/bb-theme/js/theme.min.js?ver=1.7.6.3 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:16 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:16 GMT Content-Type: application/javascript Content-Length: 21977 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:44 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:16 GMT Vary: Accept-Encoding
2024-04-23 14:06:16 UTC	1156	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 46 4c 54 68 65 6d 65 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 62 69 6e 64 28 29 7d 2c 5f 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 2e 66 6c 2d 66 72 61 6d 65 77 6f 72 6b 2d 62 61 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 2c 20 2e 66 6c 2d 66 72 61 6d 65 77 6f 72 6b 2d 62 61 73 65 2d 34 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 6e 61 76 62 61 72 54 6f 67 67 6c 65 43 6c 69 63 6b 29 2c 30 21 3d 65 28 22 2e 66 6c 2d 70 61 67 65 2d 62 61 72 2d 6e 61 76 20 75 6c 2e 73 75 62 2d 6d 65 6e 75 22 29 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 5f 73 65 74 75 70 44 72 6f 70 44 6f 77 6e 73 28 29 2c 74 68 69 73 2e 5f Data Ascii: !function(e){FLTheme={init:function(){this._bind()},_bind:function(){e(".fl-framework-base .navbar-toggle, .fl-framework-base-4 .navbar-toggle").on("click",this.navbarToggleClick),0!=e(".fl-page-bar-nav ul.sub-menu").length&&(this._setupDropDowns(),this._
2024-04-23 14:06:16 UTC	7240	IN	Data Raw: 6e 65 4c 6f 67 6f 28 29 29 2c 30 21 3d 65 28 22 62 6f 64 79 2e 66 6c 2d 6e 61 76 2d 6c 65 66 74 22 29 2e 6c 65 6e 67 74 68 26 26 28 65 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 65 2e 74 68 72 6f 74 74 6c 65 28 35 30 30 2c 74 68 69 73 2e 5f 6e 61 76 4c 65 66 74 29 29 2c 74 68 69 73 2e 5f 6e 61 76 4c 65 66 74 28 29 29 2c 30 21 3d 65 28 22 62 6f 64 79 2e 66 6c 2d 73 68 72 69 6e 6b 22 29 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 65 28 22 68 74 6d 6c 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 65 64 69 74 22 29 2e 6c 65 6e 67 74 68 26 26 28 65 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 65 2e 74 68 72 6f 74 74 6c 65 28 35 30 30 2c 74 68 69 73 2e 5f 73 68 72 69 6e 6b 48 65 61 64 65 72 45 6e 61 62 6c 65 29 29 2c 74 68 69 73 2e 5f 73 68 Data Ascii: neLogo()),0!=e("body.fl-nav-left").length&&(e(window).on("resize",e.throttle(500,this._navLeft)),this._navLeft()),0!=e("body.fl-shrink").length&&0==e("html.fl-builder-edit").length&&(e(window).on("resize",e.throttle(500,this._shrinkHeaderEnable)),this._sh
2024-04-23 14:06:16 UTC	2896	IN	Data Raw: 79 22 29 2e 68 61 73 43 6c 61 73 73 28 22 72 74 6c 22 29 3f 28 69 3d 6c 2e 69 73 28 22 75 6c 2e 73 75 62 2d 6d 65 6e 75 22 29 3f 6c 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2d 74 3a 61 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2d 74 2c 69 3c 3d 30 26 26 61 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 2d 73 75 62 2d 6d 65 6e 75 2d 72 69 67 68 74 22 29 29 3a 28 69 3d 6c 2e 69 73 28 22 75 6c 2e 73 75 62 2d 6d 65 6e 75 22 29 3f 6c 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2b 32 2a 74 3a 61 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2b 74 2c 69 3e 6f 26 26 61 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 2d 73 75 62 2d 6d 65 6e 75 2d 72 69 67 68 74 22 29 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 2d 73 75 62 2d 6d 65 6e 75 2d 6f 70 65 6e 22 29 2c 61 2e 68 61 73 43 6c Data Ascii: y").hasClass("rtl")?(i=l.is("ul.sub-menu")?l.offset().left-t:a.offset().left-t,i<=0&&a.addClass("fl-sub-menu-right")):(i=l.is("ul.sub-menu")?l.offset().left+2*t:a.offset().left+t,i>o&&a.addClass("fl-sub-menu-right")),a.addClass("fl-sub-menu-open"),a.hasCl
2024-04-23 14:06:16 UTC	1448	IN	Data Raw: 61 64 65 72 2d 70 72 69 6d 61 72 79 20 2e 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 63 6f 6c 22 29 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 22 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 70 72 69 6d 61 72 79 20 2e 66 6c 2d 70 61 67 65 2d 6c 6f 67 6f 2d 77 72 61 70 22 29 2c 30 3d 3d 65 28 22 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 66 69 78 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 65 28 22 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 66 69 78 65 64 22 29 2e 68 61 73 43 6c 61 73 73 28 22 66 6c 2d 70 61 67 65 2d 6e 61 76 2d 74 6f 67 67 6c 65 2d 76 69 73 69 62 6c 65 2d 61 6c 77 61 79 73 22 29 7c 7c 65 28 22 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 66 69 78 65 64 20 2e 66 6c 2d 70 61 67 65 2d 66 69 78 65 64 2d 6e 61 76 2d 77 72 61 70 22 29 2e 69 Data Ascii: ader-primary .fl-page-nav-col").insertBefore(".fl-page-header-primary .fl-page-logo-wrap"),0==e(".fl-page-header-fixed").length\|\|e(".fl-page-header-fixed").hasClass("fl-page-nav-toggle-visible-always")\|\|e(".fl-page-header-fixed .fl-page-fixed-nav-wrap").i
2024-04-23 14:06:16 UTC	1448	IN	Data Raw: 6c 6c 2e 66 6c 2d 73 68 72 69 6e 6b 2d 68 65 61 64 65 72 22 29 7d 2c 5f 73 68 72 69 6e 6b 48 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 65 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 6c 3d 32 35 30 2c 6e 3d 65 28 22 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 22 29 2c 74 3d 6e 75 6c 6c 3b 65 28 22 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 6c 6f 67 6f 22 29 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 65 28 22 2e 66 6c 2d 6c 6f 67 6f 2d 69 6d 67 22 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 61 74 61 28 22 6f 72 69 67 48 65 69 67 68 74 22 29 26 26 74 2e 64 61 74 61 28 22 6f 72 69 67 48 65 69 67 68 74 22 2c 74 2e 68 65 69 67 68 74 28 29 29 2c 61 Data Ascii: ll.fl-shrink-header")},_shrinkHeader:function(){var a=e(this).scrollTop(),l=250,n=e(".fl-page-header"),t=null;e(".fl-page-header-logo").imagesLoaded(function(){t=e(".fl-logo-img"),"undefined"==typeof t.data("origHeight")&&t.data("origHeight",t.height()),a
2024-04-23 14:06:16 UTC	4344	IN	Data Raw: 6f 73 69 74 69 6f 6e 22 2c 22 69 6e 69 74 69 61 6c 22 29 2c 65 2e 65 61 63 68 28 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2b 3d 65 28 74 68 69 73 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 7d 29 2c 61 2e 64 61 74 61 28 22 6f 72 69 67 69 6e 61 6c 2d 74 6f 70 22 2c 6e 29 29 7d 2c 5f 66 69 78 54 68 65 6d 65 72 4c 61 79 6f 75 74 4f 6e 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 65 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 6c 3d 65 28 22 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 22 29 2c 6e 3d 6c 2e 64 61 74 61 28 22 6f 72 69 67 69 6e 61 6c 2d 74 6f 70 22 29 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 28 61 3e 3d 6e 3f 6c 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 2c 22 66 69 Data Ascii: osition","initial"),e.each(l,function(){n+=e(this).outerHeight()}),a.data("original-top",n))},_fixThemerLayoutOnScroll:function(){var a=e(window).scrollTop(),l=e(".fl-page-header"),n=l.data("original-top");"undefined"!=typeof n&&(a>=n?l.css("position","fi
2024-04-23 14:06:16 UTC	1448	IN	Data Raw: 2e 66 6c 2d 70 61 67 65 2d 68 65 61 64 65 72 2d 6c 6f 67 6f 22 29 2e 6f 66 66 73 65 74 28 29 3b 46 4c 54 68 65 6d 65 2e 5f 69 73 52 65 73 70 6f 6e 73 69 76 65 4e 61 76 45 6e 61 62 6c 65 64 28 29 26 26 6c 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 3f 28 65 28 22 62 6f 64 79 22 29 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 2d 72 65 73 70 6f 6e 73 69 76 65 2d 6e 61 76 2d 65 6e 61 62 6c 65 64 22 29 2c 6c 2e 61 74 74 72 28 22 64 61 74 61 2d 74 6f 67 67 6c 65 22 2c 22 6f 66 66 63 61 6e 76 61 73 22 29 2c 74 2e 61 64 64 43 6c 61 73 73 28 22 66 6c 2d 6e 61 76 2d 6f 66 66 63 61 6e 76 61 73 2d 63 6f 6c 6c 61 70 73 65 22 29 2c 30 3d 3d 3d 74 2e 66 69 6e 64 28 22 2e 66 6c 2d 62 75 74 74 6f 6e 2d 63 6c 6f 73 65 22 29 2e 6c 65 6e 67 74 68 26 26 74 2e 70 72 65 70 65 6e 64 Data Ascii: .fl-page-header-logo").offset();FLTheme._isResponsiveNavEnabled()&&l.is(":visible")?(e("body").addClass("fl-responsive-nav-enabled"),l.attr("data-toggle","offcanvas"),t.addClass("fl-nav-offcanvas-collapse"),0===t.find(".fl-button-close").length&&t.prepend
2024-04-23 14:06:16 UTC	1997	IN	Data Raw: 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 66 6c 2d 6f 66 66 63 61 6e 76 61 73 2d 63 6c 6f 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 2e 66 6c 2d 70 61 67 65 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 66 6c 2d 6e 61 76 2d 6f 66 66 63 61 6e 76 61 73 2d 61 63 74 69 76 65 22 29 7d 29 2c 65 28 22 2e 66 6c 2d 70 61 67 65 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 66 6c 2d 6f 66 66 63 61 6e 76 61 73 2d 6f 70 61 63 69 74 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 2e 66 6c 2d 70 61 67 65 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 66 6c 2d 6e 61 76 2d 6f 66 66 63 61 6e 76 61 73 2d 61 63 74 69 76 65 22 29 7d 29 2c 65 28 22 2e 66 6c 2d 66 72 61 6d 65 77 6f 72 6b 2d 62 61 73 65 2e 66 6c 2d 6e 61 76 2d 6d 6f 62 69 6c 65 2d 6f 66 Data Ascii: ").on("click",".fl-offcanvas-close",function(){e(".fl-page").toggleClass("fl-nav-offcanvas-active")}),e(".fl-page").on("click",".fl-offcanvas-opacity",function(){e(".fl-page").toggleClass("fl-nav-offcanvas-active")}),e(".fl-framework-base.fl-nav-mobile-of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	49952	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:15 UTC	564	OUT	GET /wp-includes/js/wp-embed.min.js?ver=5.7.11 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:16 UTC	310	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:16 GMT Content-Type: application/javascript Content-Length: 1478 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:46:44 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:16 GMT Vary: Accept-Encoding
2024-04-23 14:06:16 UTC	1478	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 64 2c 6c 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 3b 69 66 28 6c 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 69 66 28 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 65 3d 21 30 3b 69 66 28 64 2e 77 70 3d 64 2e 77 70 7c 7c 7b 7d 2c 21 64 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 29 69 66 28 64 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 3b 69 66 28 74 29 69 66 28 74 2e 73 65 63 72 65 74 7c 7c 74 2e 6d 65 73 73 61 67 65 7c 7c 74 2e 76 61 6c 75 65 Data Ascii: /! This file is auto-generated /!function(d,l){"use strict";var e=!1,n=!1;if(l.querySelector)if(d.addEventListener)e=!0;if(d.wp=d.wp\|\|{},!d.wp.receiveEmbedMessage)if(d.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	49953	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	629	OUT	GET /wp-content/uploads/2019/10/VAL-tiret-bas-2.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:16 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:16 GMT Content-Type: image/png Content-Length: 1618 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:14 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:16 GMT
2024-04-23 14:06:16 UTC	1618	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 34 08 06 00 00 01 16 15 93 ae 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR4tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	49955	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	739	OUT	GET /wp-content/themes/regionalexpress/img/logo-footer.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:16 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:16 GMT Content-Type: image/png Content-Length: 9316 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:16 GMT
2024-04-23 14:06:16 UTC	1193	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e6 00 00 00 3f 08 06 00 00 00 f4 5b b4 5c 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDR?[\gAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-04-23 14:06:16 UTC	8123	IN	Data Raw: cf 51 5f a3 be 5f fd 82 fa 63 0d b2 86 85 46 a0 86 48 a3 54 63 b7 c6 19 8d 21 16 c6 32 65 f1 58 42 d6 72 56 03 eb 2c 6b 98 4d 62 5b b2 f9 ec 4c 76 05 fb 1b 76 2f 7b 4c 53 43 73 aa 66 ac 66 91 66 9d e6 71 cd 01 0e c6 b1 e0 f0 39 d9 9c 4a ce 21 ce 0d ce 7b 2d 03 2d 3f 2d b1 d6 6a ad 66 ad 7e ad 37 da 7a da be da 62 ed 72 ed 16 ed eb da ef 75 70 9d 40 9d 2c 9d f5 3a 6d 3a f7 75 09 ba 36 ba 51 ba 85 ba db 75 cf ea 3e d3 63 eb 79 e9 09 f5 ca f5 0e e9 dd d1 47 f5 6d f4 a3 f5 17 ea ef d6 ef d1 1f 37 30 34 08 36 90 19 6c 31 38 63 f0 cc 90 63 e8 6b 98 69 b8 d1 f0 84 e1 a8 11 cb 68 ba 91 c4 68 a3 d1 49 a3 27 b8 26 ee 87 67 e3 35 78 17 3e 66 ac 6f 1c 62 ac 34 de 65 dc 6b 3c 61 62 69 32 db a4 c4 a4 c5 e4 be 29 cd 94 6b 9a 66 ba d1 b4 d3 74 cc cc c8 2c dc ac d8 ac c9 Data Ascii: Q__cFHTc!2eXBrV,kMb[Lvv/{LSCsfffq9J!{--?-jf~7zbrup@,:m:u6Qu>cyGm7046l18cckihhI'&g5x>fob4ek<abi2)kft,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	49956	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	741	OUT	GET /wp-content/themes/regionalexpress/img/index-egalite.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:16 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:16 GMT Content-Type: image/png Content-Length: 13537 Connection: close Server: Apache Last-Modified: Wed, 06 Mar 2024 08:05:19 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:16 GMT
2024-04-23 14:06:16 UTC	2640	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 be 00 00 00 be 08 06 00 00 00 8b 74 b5 9d 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ed 9d 07 78 95 c5 12 86 37 20 20 82 34 2b 2a 0a 76 11 ec 88 05 45 bd 16 54 50 b0 80 5d b9 36 ec a2 82 0a 48 07 29 2a cd 0e 2a 62 c1 8e 5d ec 7a 15 7b 05 6c 48 11 44 45 e9 bd 85 70 bf 77 93 3d fc e7 e4 9c 9c 92 53 42 dc 7d 1e 1e 4d b2 ff 96 d9 6f 67 66 67 67 67 f2 d6 ab 18 5f 3c 05 fe 65 14 c8 f3 c0 ff 97 ad b8 9f ae a5 80 07 be 07 c2 bf 92 02 1e f8 ff ca 65 f7 93 f6 c0 f7 18 f8 57 52 c0 03 ff 5f b0 ec 6b f3 57 99 c5 2b fe d1 4c 0b ca ec 6c 0b 0a d6 9b 5a d5 b7 35 95 37 a9 9a 95 31 7a e0 67 85 cc b9 ed 64 ce 82 5f cc 6b 9f 0f 32 6b f3 57 9a bc bc bc dc 0e 26 46 ef 6b f3 57 9b d6 87 Data Ascii: PNGIHDRtsBIT\|d IDATx^x7 4+vETP]6H)*b]z{lHDEpw=SB}Mogfggg_<eeWR_kW+LlZ571zgd_k2kW&FkW
2024-04-23 14:06:16 UTC	7240	IN	Data Raw: c6 e3 4f 8e 35 1f 7c f4 91 d5 df 53 05 fe f7 13 27 99 27 9e 7a ca 82 08 c0 73 a8 06 8c 87 36 3d d8 6c b6 d9 66 61 33 9e f1 db 6f a6 ff e0 3b cc ca a2 cd 16 a9 ea e4 4b 12 3d ff e2 4b e6 e3 4f 3e 29 e6 2a 0d 97 5f 56 04 7a 1a 65 cc bb ee b2 b3 b9 fa 8a 2b ec d8 c3 54 1e cd 89 fa cd 8f 38 c2 4a 18 57 16 4a 4d 1a 2e d0 ff f2 cb 94 b0 df a7 61 59 4a 6c c2 03 3f 0d 14 4e 17 c7 67 28 8b a4 eb f6 ee d7 df 70 70 dc 3a 45 55 e7 d3 cf bf b0 1c 34 52 7f 3f b4 69 53 73 99 ce 18 c1 73 08 c0 7e 4c 9b ed dd f7 df b7 94 88 06 fc c7 c6 3e 69 de 7b ff c3 84 28 05 b8 4f 3e b1 85 39 f7 ac b3 c2 ea 43 23 4a 70 4c fc fc 9c 36 d5 b8 17 5f 2c f6 fb 84 3a 2b 45 25 0f fc 52 10 cf 7d 9a 4e e0 d3 e6 ab af bf 61 9e 7c fa 69 b3 cd d6 5b a7 a4 e3 7f 26 e0 c3 45 83 9c 15 55 04 d0 b5 3d Data Ascii: O5\|S''zs6=lfa3o;K=KO>)*_Vze+T8JWJM.aYJl?Ng(pp:EU4R?iSss~L>i{(O>9C#JpL6_,:+E%R}Na\|i[&EU=
2024-04-23 14:06:16 UTC	2896	IN	Data Raw: 3c 2e 8c 9f 53 66 29 b0 51 01 9f f7 b9 67 9e 79 a6 4d 19 34 52 31 73 9a 28 86 a4 2f 9e 02 a9 50 60 a3 01 3e af eb 7b 29 fc c5 73 0a 24 7a ab 42 51 9c 7f fe f9 49 c5 cf 4c 85 38 a5 fd 86 c7 d8 8c 9b 87 10 ff 66 e9 e4 82 0b 10 93 28 5e 70 80 44 69 0e 6d 61 84 3c 9a 4a 25 58 6e 18 f0 d7 ae 5d 67 c6 bf 3d 49 49 00 16 c7 f5 c9 27 64 5f d3 26 0d 14 d6 ad 28 14 85 1e ae ac fa ec 0b b3 46 a9 2e 95 d4 29 c6 f8 d7 9b b9 0a d3 b1 dd 29 2d 4d d5 a2 cc d6 44 25 7b 49 21 06 09 57 41 e1 e1 c0 9e 4a 16 7c 88 c2 13 ba b8 29 ef 2a c7 ea 0f 0a 71 41 6c 1a 02 07 11 a7 9d b8 89 ad 14 5c 94 04 cd e3 15 d6 ce 45 5f 80 08 07 29 62 ef be ca 1c 42 76 ed 27 9e 78 c2 46 e9 6d a3 4c 1b 2e f9 31 7d 3e ad 2c 1f fc dc ae 5d 3b db ef 83 0f 3e 18 8a 9a 40 1b 87 2a be e7 de 8a 08 cd 42 21 Data Ascii: <.Sf)QgyM4R1s(/P`>{)s$zBQIL8f(^pDima<J%Xn]g=II'd_&(F.))-MD%{I!WAJ\|)qAl\E_)bBv'xFmL.1}>,];>@B!
2024-04-23 14:06:16 UTC	761	IN	Data Raw: 5c df 48 20 36 66 90 ab 07 39 3e 07 eb 48 e0 03 44 da 04 4c 30 13 54 05 67 7d 62 b3 63 c6 a4 1f 2c 49 9c 95 28 9c 75 90 4c ac 81 33 6b d2 8e 03 3e 75 e0 c8 d4 61 2e 0e f8 a8 2f a8 53 9c 65 30 14 30 36 54 51 54 14 fe 8b 94 40 27 07 ec 48 03 36 04 8c 8c c2 66 42 7a d3 1f 20 c6 2a 04 80 9d 39 13 a0 b3 2e 48 50 68 4b 7d 98 0c 4c 0f f0 73 56 60 3d a0 11 f4 72 ea 2b 73 70 f7 38 f4 13 c6 f1 f3 f3 0b 04 fa e9 4a a5 b9 bc 38 76 8b ee a4 c8 71 d5 b0 e1 76 4a e6 5b 2b 6c 73 ac f9 e1 67 b3 f6 d7 a9 85 27 e0 12 4a 45 71 ac 2a 87 1d 6c f2 8a ac 3e e8 85 2c 08 dc e6 a6 9b 6e b2 5f 62 af 45 ad 01 88 2c 12 3f a3 e3 ba 02 67 40 9f 47 1c 42 60 00 88 3e 0d 77 8d 94 34 d4 85 68 88 55 c0 0f c0 e0 48 10 d3 c5 81 47 0a b0 d9 e0 2e 10 8b 03 20 1b 82 36 e1 ee 98 f7 58 88 60 c8 6e Data Ascii: \H 6f9>HDL0Tg}bc,I(uL3k>ua./Se006TQT@'H6fBz 9.HPhK}LsV`=r+sp8J8vqvJ[+lsg'JEql>,n_bE,?g@GB`>w4hUHG. 6X`n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	49957	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	753	OUT	GET /wp-content/plugins/cookie-law-info/public/images/logo-cookieyes.svg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:16 UTC	278	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:16 GMT Content-Type: image/svg+xml Content-Length: 2581 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:18 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:16 GMT
2024-04-23 14:06:16 UTC	2581	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	49959	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	805	OUT	GET /wp-content/uploads/2019/08/SF1.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:17 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/jpeg Content-Length: 150073 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	8430	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:17 UTC	4344	IN	Data Raw: 20 31 6e 9f e6 0a 78 1d f4 5e f0 a0 2b 59 d5 97 2e de b6 8b 1c 5a 28 e7 10 7f 45 b6 4b 89 2e 05 09 8a 49 40 40 a6 9b 7b 8c 2a 00 1f 20 af ea d5 52 b0 2b b9 43 c6 65 b8 c9 58 b0 55 96 d3 b6 4b 41 04 0e 7f dd c9 5c af bb 73 23 1f d4 22 56 5a 1f 13 53 ad 1b 9b 78 12 b6 f1 1e 83 2b d0 62 9a da 47 5b 58 20 4b 5b 3b df fe 64 af 22 c6 59 18 8d c4 9d 44 81 4d 86 f5 d3 4c 4d 09 c9 04 b6 b2 37 cb 08 96 0c 9d cc 56 37 16 81 99 0a da b8 90 44 a0 8a f0 10 f5 53 55 66 24 b5 01 bb 5f a7 ee 6c 19 f6 0c 71 c7 10 b4 ba 80 d2 a6 3b e5 e8 6e a3 e7 fd bb 6a 1e e8 6b 5a b2 bd ef a8 b8 ca 0b 5e a8 e2 59 96 e6 38 ea 0a 09 ad a5 f6 1d 8f 80 34 f5 79 6a 27 78 2e 36 92 fb 73 ec 3e 1b a6 c6 e6 48 a5 ed e9 63 6b 0c 82 7a 99 4b 8a ca 58 6e 4a 31 a5 47 95 69 ab 7b 19 ad fc 49 1b 3c ae Data Ascii: 1nx^+Y.Z(EK.I@@{* R+CeXUKA\s#"VZSx+bG[X K[;d"YDMLM7V7DSUf$_lq;njkZ^Y84yj'x.6s>HckzKXnJ1Gi{I<
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: d9 c1 23 77 7d 15 f3 de c5 14 ef 10 bb 2c ac 19 4b 48 22 88 7b 69 08 55 fc a8 45 38 1e 27 6d 5d 93 21 28 16 bd 65 ac b0 b6 bd 33 2a 15 45 b4 2c d2 19 03 7f b8 f2 c8 6a 52 20 07 04 15 6a 6f a3 92 17 79 3f ee cf 71 12 db 5a 2a 5e e2 a0 94 91 35 b8 f6 fa e7 46 21 a2 95 54 92 3a 08 dc 54 8a 02 45 4e af 72 5f c4 9e ed 81 35 a7 bc ed 00 69 e7 98 ca dd 07 dc 1e c3 8a b2 7b a4 0f 9c 8e ae 95 de 9b 69 33 4a b2 dd 8c b6 8b 21 91 0e 7d d9 85 ab 1b 4b 4e a4 28 14 9e a7 9b a8 13 4e a7 0c 3a 8f 20 29 a5 32 d0 34 d2 72 1f 98 b0 78 2e 5e d4 a9 44 89 07 43 b3 51 4c 64 6c 40 a7 10 76 d7 42 d8 e3 6f 53 30 ce e3 7d ba cd 11 01 69 42 dc 69 fe 9f 1a ea 6c 8d 71 db 81 63 ec de e1 0c 1b 17 73 25 15 d6 83 7f 1e 44 fc 38 68 4e 50 5e b1 a9 6a c9 e3 8c 25 a5 45 06 da 8b ed a1 e0 17 Data Ascii: #w},KH"{iUE8'm]!(e3E,jR joy?qZ^5F!T:TENr_5i{i3J!}KN(N: )24rx.^DCQLdl@vBoS0}iBilqcs%D8hNP^j%E
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: 80 45 02 a4 85 e6 4f 1e 5a 26 5e 81 10 89 7b ab 8b 9b 79 2e 4c 17 13 4d 97 bb 22 4c b5 f2 3b 2a 45 d2 28 b1 20 52 03 31 a5 02 af a5 17 6d 5b 70 4d 52 7e 06 81 da 58 e7 58 a1 47 56 bb b8 8d df 23 92 eb 3d 41 ee 5f f6 a0 8f fe 51 52 07 c5 8e b4 a2 84 4d cd 9b b4 ac 6d ed ac 66 92 25 56 33 4a 49 94 a8 ab 90 dd 05 80 f2 20 8a f3 f8 6a 2d b9 b5 66 0b b3 28 92 42 a7 81 1d 2c 7c c8 a6 da 84 f5 0b 2d 04 da c9 50 63 62 09 8f d0 41 f2 d8 d7 5d 2c e2 45 17 2d 6e 71 d7 d2 c2 8a a6 37 3d 71 06 1b 74 be fb 9f 23 b6 ad 6a 43 d1 95 3c dd 94 77 30 24 2e a0 75 2b 90 08 1c 4e c3 fe 1a 71 23 4e 0c df 1b 3d ef 6c 65 95 65 ea 2a c7 d4 8a 76 20 f1 07 8d 3c f5 92 9a b8 67 43 8b ad 0d ba 58 e1 cd 58 09 e2 60 cd 3c 60 2b af 04 f2 5d 69 b1 ce 64 d7 36 b3 59 5c fd 3c 8c cb 1c ad ea Data Ascii: EOZ&^{y.LM"L;E( R1m[pMR~XXGV#=A_QRMmf%V3JI j-f(B,\|-PcbA],E-nq7=qt#jC<w0$.u+Nq#N=leev <gCXX`<`+]id6Y\<
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: b5 8c 46 54 47 8b b5 76 52 19 9a 48 dd dc 05 15 26 bd 42 80 1f e3 a7 5b 15 6c 6c bc e2 e6 6b a8 9a d6 c7 b7 d5 dd f7 12 4c ec 62 56 3e a6 34 1d 3f 37 f3 31 3b 79 6b a9 65 46 1f 66 cf 89 a1 e1 f1 19 8d fd c9 e3 b7 92 e0 85 9d d1 7d 31 c7 ff 00 cb 04 53 a9 9f 98 06 81 74 fe e0 fe d2 45 c2 d6 c5 2d 8b 8e a6 7e b2 41 6a 00 40 1b 00 17 82 8f 0d 63 6b ea 69 5a e8 4d c5 56 10 f2 1c 3a 47 2a 6d b7 8e a5 6a 37 a1 2b 75 77 1d 85 a3 dc ca 47 4c 4b b2 9d ba 98 9a 22 fc 49 db 5b 23 06 57 61 7f 76 13 1b a1 fa 95 72 f7 11 92 09 12 31 ea 35 f2 e4 35 d2 96 87 15 dc b0 66 47 89 89 21 8c 93 92 68 dc 85 78 8f 0d 51 05 5b 3c 8d 35 a4 9e d7 4b c8 0d 40 1f 28 00 ee 6b ce 9e 3a 63 42 24 09 3d 9c 68 aa 65 56 8c 18 c1 fd 4c 16 9d 6c de 03 90 d2 03 27 be b7 16 17 2d d0 0f a4 92 29 Data Ascii: FTGvRH&B[llkLbV>4?71;ykeFf}1StE-~Aj@ckiZMV:G*mj7+uwGLK"I[#Wavr155fG!hxQ[<5K@(k:cB$=heVLl'-)
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 80 82 48 d8 78 ea 16 e6 ad 68 4f db 96 f6 a3 1d 55 72 47 4b 0e 34 3c 36 f3 d6 c9 c2 30 b6 e0 f1 5c c7 95 bf 17 3f 3e 27 11 27 fd bb 71 4b ab ba 50 b0 e4 c9 17 00 7f 9b 5a ef a1 ce f9 91 56 ee e6 fd 99 db a5 25 66 67 71 b7 56 e4 ef fe 3a ed 7b 1e 77 12 42 7e 85 2d 2b a9 62 40 15 e3 40 79 0f 3d 49 4c ae 65 93 ff 00 4e b8 2c 9d 6c ab e9 41 c0 0a fe 1b 6a 90 88 fb 38 d5 2c ed 9c 82 47 4f 4a 00 77 f3 a7 1d 0c 65 1b b8 a0 5f 7d 58 ad 68 fe a4 5d 89 db 81 3c ce 93 35 c6 c6 3b 7a eb e9 2f 12 65 7e 99 58 8a 46 bf 2a 80 76 a7 f3 1d 08 79 0f 41 24 91 65 ec 4a ca be 99 e3 a6 fc 49 3c f5 3b 19 ee 77 1f 0c b6 96 f1 c1 28 1d 51 d4 06 1f 2d 39 53 43 d4 10 4c d2 7a 77 f4 ed bf 9e 92 19 14 aa c1 4b 0e 2a 09 27 4c 90 7c 19 8e 6b b9 0a d2 8b 51 51 e5 cf f3 d3 b0 ab b9 ce e1 Data Ascii: HxhOUrGK4<60\?>''qKPZV%fgqV:{wB~-+b@@y=ILeN,lAj8,GOJwe_}Xh]<5;z/e~XFvyA$eJI<;w(Q-9SCLzwK'L\|kQQ
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: bc d8 00 85 09 d7 30 07 d0 c4 9e 91 e2 c4 70 f2 1a 19 75 dc 8c c3 fb 6b 72 15 94 b3 d2 95 db a5 69 be fc 86 92 d0 bb 9b 96 04 d2 d1 08 2d c3 f6 c1 e1 4f 21 a4 cc 91 63 04 93 52 2a 7f 80 f0 d4 94 0d 70 bd 40 82 28 39 e9 83 23 6e 5c c3 6d 29 5d aa bb 1d 34 4b d8 07 b5 00 65 b8 91 6b 5e ba 0a f3 a1 dc 8f c7 45 82 83 fd e2 bf fa 13 4c be 93 67 76 8e 79 ed 5d f4 aa 16 d8 5d ed b4 d7 58 fb 0c 8d a4 85 4b 22 89 17 97 91 3a c7 2a e2 6b 8d e8 35 0b 18 c8 33 c8 8d 20 1c 3c 7e 1a e7 66 a8 ea e4 e0 79 5a 08 e2 2d 2f 30 46 9c 0b a8 79 e1 90 2a bc 44 ac 9c d4 71 f8 1d 08 19 58 ca 76 85 be 55 8c f6 f0 ae 3a f1 87 ae 44 14 8d cf f9 94 70 3e 63 53 6a 26 6d 4c d6 af 81 41 bc c6 df 60 e6 31 5f db 94 a9 a4 77 20 f5 46 df 06 1a c2 d8 e0 eb a6 55 63 b1 4b 52 00 a5 06 e6 9f df Data Ascii: 0pukri-O!cRp@(9#n\m)]4Kek^ELgvy]]XK":k53 <~fyZ-/0Fy*DqXvU:Dp>cSj&mLA`1_w FUcKR
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 7d 51 ef 5e 35 d2 b6 e5 53 62 3e e2 08 62 9c 96 84 b4 d1 6b 8d a8 70 6c 9a dc 0a dd e4 96 e6 49 0c 1e c5 38 02 28 4f e3 a1 82 d5 87 40 67 9a 46 eb fd ba 71 e6 08 d3 01 4f 3c 91 92 94 ea a9 f4 f8 0d 38 09 09 29 0d c4 0d 05 d4 31 cc b2 0a 3c 52 28 65 3f 81 d2 1a 70 67 d7 fd a1 0b ce e3 15 21 b3 92 a4 8b 79 6a d0 9f 25 6e 2b f8 d7 59 db 12 7b 1b d3 d4 35 a5 8a b5 dd 96 53 17 27 b7 7d 68 f1 80 76 95 7d 51 b0 f1 0e bb 6b 9e d5 6b 73 a6 b9 2b 6d 98 5d bd da f4 f5 0e 34 fe 1a 45 0f 4d 71 ee 26 ed b1 3c 35 2d 8d 22 0a 7b ef 65 fd a9 76 56 f9 24 3c bc 35 06 89 15 9b 8c 93 97 64 53 42 ad 5a f8 1d 43 46 ca 09 fc 6e 4e 3b ab 69 60 34 59 d4 75 33 13 c4 0e 20 6a 76 1b 5a 8a 82 e8 d5 87 59 d8 f5 53 cb e3 ac e4 d9 54 bc e2 2e 3a 95 3a da 94 3c 01 ad 47 96 b7 c5 63 97 35 Data Ascii: }Q^5Sb>bkplI8(O@gFqO<8)1<R(e?pg!yj%n+Y{5S'}hv}Qkks+m]4EMq&<5-"{evV$<5dSBZCFnN;i`4Yu3 jvZYST.::<Gc5
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: eb 0d d2 dd 27 81 3a 00 44 9e e7 b8 40 3b d2 9e 5a 10 0e 9b 77 92 2a 17 e8 90 f3 1a 72 10 21 c2 43 11 8e 45 32 d3 7e 93 b8 fe 3a 00 ad 4d 8c ed fc a3 b3 a4 22 ca 6a d1 de 2f db 27 cc af 0d 43 c7 56 69 5c d6 5c 48 ab ae c9 bb e9 66 b0 c8 47 28 fd 31 4e 3a 09 f8 32 d4 6b 1b 61 7c 0d eb ea 57 14 67 99 ce d8 ee 4b 34 92 5b ac 74 a6 dd 37 69 e2 22 48 e9 e2 4a d4 eb 07 8e cb 74 75 d3 35 2d b3 28 32 2b 23 54 9a 8e 3f 86 84 8a 6c 36 da 66 b7 99 1d 68 68 45 47 96 b2 ba 37 a3 2c 71 4e 86 61 b0 02 b5 5d b6 35 d7 39 d0 8b ae 1e 56 e8 a9 dd 2b 50 9c eb e3 ad 71 b3 1c c8 d1 71 f7 75 8d 58 12 28 3e 56 df f0 d7 7e 3b 9e 66 4a 6a 4f 59 cc cc c7 d5 50 4e d4 e5 4d 74 d2 c7 35 ea 4e 23 75 2f 9f 8e b6 32 23 72 90 c8 f1 a4 b1 1e 97 8d 87 57 fa 4e a6 c8 08 98 7d a6 b8 21 d0 fb Data Ascii: ':D@;Zw*r!CE2~:M"j/'CVi\\HfG(1N:2ka\|WgK4[t7i"HJtu5-(2+#T?l6fhhEG7,qNa]59V+PqquX(>V~;fJjOYPNMt5N#u/2#rWN}!
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 70 65 61 42 08 f0 23 4d 06 c7 9f bb a3 03 2e 0e f4 c5 ed 91 63 75 59 71 f2 30 db a4 ee 52 be 28 76 d7 3e 6a 9e 87 a7 c9 25 72 dc 80 ac bb f1 f9 4e b8 6e b5 3d 2a 32 6e c6 e3 db 60 b4 d9 a9 c7 97 f8 6b 22 de a5 b2 ce e0 fa 19 65 a8 6f 48 52 07 49 15 fe ed 52 66 56 a9 76 b2 b8 a3 2f 4b f4 b8 e3 b6 f4 3c 3e 23 5d 34 b1 c7 92 a5 e6 ce 69 28 a1 8f 20 58 eb d1 c7 63 82 e8 9c 56 04 03 ad 4c 48 4c 95 99 6b 88 6e 55 88 07 d1 22 57 63 e0 75 17 e6 31 06 aa 7a 42 54 28 ad 46 b3 19 f5 b4 e5 c3 f5 23 2a a9 a5 5b 9e 90 26 31 1d b4 33 4a f2 47 38 92 32 7d 51 56 a0 1d 36 c4 92 24 04 5d 24 74 ec bc c6 90 c7 00 a5 77 db 44 02 3e 60 bb 13 a2 00 f9 54 2d 68 dc 79 69 c0 1f 31 a0 27 98 1c 34 98 c6 11 91 d4 b2 6e dc c6 99 27 95 23 62 87 71 d5 41 b8 3a e5 ab 3a 98 e3 bf 54 2e 47 Data Ascii: peaB#M.cuYq0R(v>j%rNn=2n`k"eoHRIRfVv/K<>#]4i( XcVLHLknU"Wcu1zBT(F#[&13JG82}QV6$]$twD>`T-hyi1'4n'#bqA::T.G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	49960	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	810	OUT	GET /wp-content/uploads/2019/08/SF1-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:17 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/jpeg Content-Length: 227526 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	1190	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:17 UTC	5792	IN	Data Raw: 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 Data Ascii: </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: a9 4a a5 4e aa 13 11 69 0a 38 c3 ab 9f 4a 2b 64 09 24 48 39 7c 7e 0e b9 f7 83 59 2d 58 ee 40 bc 92 f7 39 d8 96 bc 3c 0b dc 8c 51 a5 b4 b7 12 d5 b9 41 f6 13 73 74 b6 23 02 5c 42 6a c3 7e e2 c9 29 0a e3 52 40 9d c2 45 03 93 87 07 e5 9b 73 57 db 02 3e 24 61 da ee c6 e5 ff 00 70 b3 e4 e5 f7 1b c5 a3 b4 3d be ca 67 48 9d 71 cd 72 69 7c 57 77 99 21 c2 eb ce c3 8e e0 43 f2 6a e2 88 5b 95 0d a7 e5 4f 86 ad b7 01 12 20 65 55 59 31 88 d4 41 6e 02 a7 a7 32 a7 df d9 fe d1 70 3b c4 ec 71 77 cb ef 7a 33 b9 4d bc d3 77 0b 04 56 20 b4 a7 12 a1 c9 36 ce 22 42 92 e8 40 52 9b 43 4d 55 41 24 a9 43 a8 92 8c 64 e0 03 2a 7f 48 fa fc 90 b7 7e 64 77 62 07 39 54 fc 80 08 cf 18 ce f1 4e d1 da 2e 0e 76 df b5 96 7e db e5 05 0c b8 ee 73 9c dc 5a b8 de c2 5a 51 53 72 a3 c3 09 5b 31 c0 Data Ascii: JNi8J+d$H9\|~Y-X@9<QAst#\Bj~)R@EsW>$ap=gHqri\|Ww!Cj[O eUY1An2p;qwz3MwV 6"B@RCMUA$Cd*H~dwb9TN.v~sZZQSr[1
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: 81 71 8b 85 cf 28 17 1b 9b 29 93 74 95 78 ba a2 df 6d 8b 1d 49 42 24 b5 f5 28 71 51 a3 28 00 03 2a 53 41 92 ba fa ea 50 9d 82 95 ac e2 bd d0 b4 e9 6c 55 bc cf e7 ce c7 3b 79 60 c6 e1 fd 2a 6e 33 73 3b 66 3d 3a 3b 65 0a 65 d7 10 b4 c8 93 19 28 04 a7 90 a9 e6 7a 24 7b 68 1d 0e b7 48 98 c4 76 2c 50 ef 4c 91 83 74 29 ca d7 6e e7 93 58 2d 88 e1 29 c8 cc 3a d3 be e2 8f 05 70 4f b8 f9 71 44 51 74 1c 94 91 bf 23 d2 94 d5 80 10 1d 09 c9 e3 83 28 a3 b9 4a 6b 29 b8 5f e7 5d 59 69 c5 32 fd 86 f9 3e 73 0d ff 00 88 d5 da de a6 a5 4a 6c af 9f 06 d4 85 34 85 20 6e a2 15 5e b5 d2 4c 07 6e 0a 5a ee 8a 73 1e cc 14 7b 65 97 70 8a 2f bd bd 7a 1c 79 13 b1 2b 4b 79 5e 19 2d e4 fe 9b 36 c5 21 2d 4f 88 80 83 ba 12 b2 56 a0 3f 2f 3d b7 d2 c6 4c 4c 4f 62 79 01 26 9f 12 c7 ad 61 db Data Ascii: q()txmIB$(qQ(SAPlU;y`n3s;f=:;ee(z${hHv,PLt)nX-):pOqDQt#(Jk)_]Yi2>sJl4 n^LnZs{ep/zy+Ky^-6!-OV?/=LLOby&a
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: 5f f1 1b 15 a1 f1 07 55 3b 06 e0 53 d8 93 48 f3 56 bf 03 94 d6 63 d9 08 0d 32 e7 bd 22 d5 19 0e 34 a2 2a a5 7b 5e a1 d7 c0 8e 9a 92 ee dc 7e 2a ab 81 c1 09 be d2 f2 14 99 0f b0 79 ba 87 c0 e1 50 ad 94 07 cc 3e 1b ee 34 f2 0a a0 52 6c 6e e0 25 e4 f0 65 a9 a6 59 98 1e 75 12 90 95 54 24 54 04 92 7c 6a 37 ae 96 42 89 c2 93 af ee 08 f7 d9 5c d6 a2 cb e9 0f 94 a2 bc e8 84 d0 00 7a d0 93 e1 a4 8e 08 4b c4 9b 66 cf 4d b6 ed 8c dd 56 ea bd b2 57 17 9a 55 ca aa 52 78 a5 46 83 7a 0a ef a2 ce 08 51 d9 8a 86 3b 81 72 18 37 7a 71 1c 91 ba 22 2d d0 25 12 b8 1e 2a 27 e5 41 24 ed 43 5e 9a 6c 62 98 62 55 9f bb 07 0a 6f 0d b6 83 bb 0b 5b 49 1b fb 89 5a 79 8f f6 ea a8 e4 8c b3 42 98 45 f0 5d fb 75 2e 43 6a 01 76 95 2c 2e bd 41 41 21 40 ed b1 f8 68 cc 34 d2 c0 f7 0f 25 5b 2f Data Ascii: _U;SHVc2"4{^~yP>4Rln%eYuT$T\|j7B\zKfMVWURxFzQ;r7zq"-%*'A$C^lbbUo[IZyBE]u.Cjv,.AA!@h4%[/
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 92 64 31 f4 ee 24 37 40 5c 34 35 4a bc 88 d2 50 0a 84 4b 93 42 95 cc 9c 61 a1 a8 d2 ea 54 a2 3f 5d 20 f1 07 49 8a 63 2d 38 a7 76 1b 71 2d a6 8e 97 10 b0 08 5a fe 3a 01 14 34 ed 8e f2 6e c8 96 d5 cd 06 00 af bb 11 c1 e0 7c 41 d3 3d 12 b1 77 74 fc 98 a8 86 b5 38 db 85 c2 a1 d3 c7 fb 34 f1 42 54 4a 1b 95 c9 45 2e 20 94 ff 00 db cf 50 80 a0 4d 0c 38 89 ee 4b 65 87 50 0a 4f ea 30 37 3b 7f 50 d2 29 8a e3 7b 76 a7 23 ba a9 a8 7b 9a 4a 45 1b 3d 69 5f 01 e5 a6 d6 30 5b 0c 1a a9 ed a4 ba f2 c3 9c 46 e6 b5 1b 72 a6 94 94 2a 97 b2 db 4c 85 7a 38 1f 15 79 f9 d3 51 d1 64 e8 cb 68 e3 c9 24 f2 56 fc 46 fb ea bc d3 e2 96 7b 2f 12 84 00 69 e6 29 4d 14 19 d3 93 11 83 28 35 35 5a b5 02 6c 12 e6 94 cb 69 01 c5 25 b5 ae bc 41 f1 1a 52 14 0b 35 b2 83 4a 2b e3 a5 01 12 b2 49 4a Data Ascii: d1$7@\45JPKBaT?] Ic-8vq-Z:4n\|A=wt84BTJE. PM8KePO07;P){v#{JE=i_0[Fr*Lz8yQdh$VF{/i)M(55Zli%AR5J+IJ
2024-04-23 14:06:17 UTC	4344	IN	Data Raw: 4b 52 16 25 29 ba a1 c7 79 14 87 96 14 2a 0a 8e e1 3b 52 83 46 3c 11 89 62 a0 cb a3 4e c0 7c 4d 8c 8f 71 d4 71 54 f8 cd d5 68 43 60 8a 3a 68 40 a8 e8 52 74 26 18 b8 5d 08 1d 41 91 d6 37 7a 44 c7 8a db 28 72 6a dc e6 cc 86 cd 7d aa 78 83 d0 1f 2a 74 f0 d3 83 a8 2c d7 20 42 9f f1 27 0d b1 6c 5e 1e 50 91 2a 3a 87 b4 eb 62 8b 41 59 e4 54 a5 8d fc 37 1f cf 48 43 d1 66 25 2c bf c2 89 84 77 2e 1e 7d 6c aa 71 ee e8 3c db b7 56 d9 49 4b 2c de 9a 1f e6 96 45 00 48 90 80 1c 03 cc 2b c7 42 01 e2 63 9a 12 35 05 3f f7 49 6d 47 77 19 cd 21 ba 4c 57 7d b4 3c ad f6 51 5d 10 e2 29 b8 f4 d7 6f 2d 2d bc c2 92 e3 c5 37 77 6e dd 22 66 21 6b bf 41 40 54 8b 75 c5 2b 71 c6 c5 28 d2 d3 52 41 ea 36 a9 df 46 06 ac 89 52 2d d9 71 72 2c 0a d3 7a 4a 54 a2 88 83 81 1e 97 3d be 35 d8 1a Data Ascii: KR%)y;RF<bN\|MqqThC`:h@Rt&]A7zD(rj}xt, B'l^P*:bAYT7HCf%,w.}lq<VIK,EH+Bc5?ImGw!LW}<Q])o--7wn"f!kA@Tu+q(RA6FR-qr,zJT=5
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: c3 d5 fc 35 ba d4 b4 96 5c 4b 91 70 ea a6 df ad b1 2e 45 71 80 2f 46 6d be 11 94 d0 fd 37 1d 5e e0 20 1d ea 3f 86 b6 0a 2a 81 55 6f 24 b2 4b c2 af 2d de 21 48 52 a1 73 43 d2 9f 40 e2 10 49 d8 0f 05 54 8a 0f 3f 0d 55 2e e9 7c b3 5d 0b 53 17 06 93 8a b8 9d b7 cf a3 f7 17 1f 7e 34 84 a9 e9 f0 92 90 b5 a8 0e 3c 0f 42 3a 6f b5 08 ea 35 08 18 8c 16 5b 90 30 2c 54 57 dc 8b 14 fb 4a c4 eb 6b 41 31 25 2f 9b 52 1d 49 15 73 a7 10 8e aa 29 a7 5f 0d 38 aa 6b 32 ad 54 77 67 69 4a 9d 6a bd 36 80 b6 dd 52 04 87 9e 50 40 2e 36 aa 71 23 7a 05 1d ab 4a 9d 40 2a eb 44 e5 42 17 43 ec ca 67 25 c5 1b 56 c1 92 d8 6a 89 dd 2a 5f 55 94 91 bf 10 36 ae b3 9e e9 58 b1 0a bf de d8 9d 8c e4 b6 b7 5b 6f da 8c db c4 c7 2a 70 26 a1 3d 14 12 77 ad 75 70 62 12 85 20 67 11 a6 e5 16 cb 7e 7b Data Ascii: 5\Kp.Eq/Fm7^ ?Uo$K-!HRsC@IT?U.\|]S~4<B:o5[0,TWJkA1%/RIs)_8k2TwgiJj6RP@.6q#zJ@DBCg%Vj_U6X[op&=wupb g~{
2024-04-23 14:06:17 UTC	16384	IN	Data Raw: a3 6e 39 a5 b9 36 a2 e8 43 8b 52 d6 a7 16 a2 b7 16 49 52 d4 6a 49 3b 92 75 6a a1 68 79 d4 b0 ca dd 59 a2 52 0a 94 7e 03 51 44 d3 6a b8 22 e5 1d 77 24 9a 45 e6 51 15 44 10 17 43 4a 80 77 eb a8 82 72 12 7d 97 81 4d 0a e3 29 2b 75 b3 43 ea 34 50 4a 87 c4 7f 66 8a 04 38 65 c6 8f ba 6c 6f 2f c5 b3 d9 f8 83 b3 1d 62 c1 21 6e df bb 79 72 e6 a5 37 26 da eb 8b 2a 63 d6 14 86 df 84 a7 54 ca e8 2a a6 f8 12 36 04 f9 4d c5 a3 62 f9 19 62 39 83 f4 c0 f6 2f b1 fa 60 db fa a7 a4 c6 e8 ac bc 17 46 70 b8 05 24 f8 b5 c0 35 0e 6e 38 85 5e 7b 62 7b c3 6c 6b 31 c4 fb 70 b5 e5 48 a8 bc 3f d9 25 23 df 8f 3a 1b a8 57 ee af 46 82 fa 94 99 4d 29 09 47 be d3 07 dc a9 4b 89 4f 5a 6d 89 33 8e 25 78 7d e6 d3 fc 7b 9a 67 8f 1c 3a ab 93 fb 15 64 b9 2e 04 cb a4 db 8d 9a 08 b4 5b 5d 79 4a Data Ascii: n96CRIRjI;ujhyYR~QDj"w$EQDCJwr}M)+uC4PJf8elo/b!nyr7&cT6Mbb9/`Fp$5n8^{b{lk1pH?%#:WFM)GKOZm3%x}{g:d.[]yJ
2024-04-23 14:06:17 UTC	14024	IN	Data Raw: a1 ac 72 2c ae 01 d6 4a b3 15 3c 86 c2 88 66 37 a9 0e 1d f9 7f 1d 2e b6 08 e9 7a 27 80 fa a5 b5 ec c1 58 aa 3d 2e a8 ed 4d 01 4c 51 7d 54 09 3b b1 7d a8 ea 42 64 7b af 24 f2 5a 89 a1 d0 77 53 4b 0a 14 ba da f3 4e 10 95 a4 38 e3 23 e7 ad 6b a8 8a 46 f4 27 6e ef bf f5 11 e9 19 a3 e9 5a 54 42 89 1e 54 d3 6a 61 44 00 72 95 33 8f da 52 df b8 cc 66 c3 c0 53 9a 87 aa be 55 d0 72 8b 04 c8 fa ee 4c 2d 2d cb 65 a4 5b db 34 fd 33 bd 3c 08 d3 d0 e0 94 83 9a 53 3e ec fa 5b 60 db 1f 42 50 aa 25 d0 e0 2a 0a 49 d8 a4 8f 23 f1 d2 c6 2d 8a 32 3c 15 21 ef c7 63 9e b7 b7 3b b8 58 bd b1 28 b4 f3 f7 32 7b 34 54 d5 31 b9 7f fa d3 28 1f 2b 4a 3f 38 1b 24 ef d3 59 e7 68 3b 85 d6 d9 ef 49 1a 26 7a 8f c9 55 47 63 a5 b0 82 3a 16 ea 85 9e 9d 35 83 73 6d 8a f4 3b 3b 8e 19 12 db e4 85 Data Ascii: r,J<f7.z'X=.MLQ}T;}Bd{$ZwSKN8#kF'nZTBTjaDr3RfSUrL--e[43<S>[`BP%*I#-2<!c;X(2{4T1(+J?8$Yh;I&zUGc:5sm;;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	49961	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	492	OUT	GET /wp-content/uploads/2019/10/VAL-tiret-bas-2.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:17 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/png Content-Length: 1618 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:14 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	1618	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 34 08 06 00 00 01 16 15 93 ae 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR4tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	49962	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	813	OUT	GET /wp-content/uploads/2019/08/SFbase-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:17 UTC	276	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/jpeg Content-Length: 28682 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	1191	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:17 UTC	13032	IN	Data Raw: 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 Data Ascii: </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:17 UTC	13032	IN	Data Raw: a8 82 46 08 41 11 04 b0 20 96 04 12 c0 20 44 92 d0 a2 14 09 11 00 49 0c 41 0a 49 32 96 31 24 42 45 94 b2 09 64 ab 26 68 52 26 6a 18 84 31 66 a5 88 40 a4 58 83 93 22 8b 3f 13 a4 73 d9 cd 7e 26 e3 95 73 5d 9a 8c 53 c7 58 d5 ee c6 d1 23 53 24 98 a3 04 96 22 1a 24 5c c8 d3 a5 ed 57 a6 dc 82 c3 36 b1 d1 5b d6 db 68 f9 18 b3 0e b3 69 56 c8 a4 99 04 91 61 8a be 79 6c 7a de 05 49 13 90 59 52 7a 02 52 64 61 c8 1c 89 25 93 4c 92 81 09 24 a9 64 42 64 72 ae a0 19 7b 1d b6 4f 89 8d 3e 2b 4b 1e 7d e6 2b dd db db aa 3b 6b b1 87 48 d6 8b 73 35 b8 d6 cf a5 4f b0 cc 37 83 03 6c a9 00 52 06 a3 40 2a 06 94 80 b4 06 96 88 29 03 50 c9 a5 ad 81 28 09 91 52 40 94 04 12 32 26 90 25 82 10 44 c5 02 40 88 24 08 02 45 00 81 04 b4 29 22 81 02 24 96 31 24 41 10 26 21 02 92 c9 9a 97 b0 Data Ascii: FA DIAI21$BEd&hR&j1f@X"?s~&s]SX#S$"$\W6[hiVaylzIYRzRda%L$dBdr{O>+K}+;kHs5O7lR@*)P(R@2&%D@$E)"$1$A&!
2024-04-23 14:06:17 UTC	1427	IN	Data Raw: 01 1e 22 8a 09 64 a3 c4 81 41 10 20 89 39 bb bd 7b 6c be 89 f6 33 5a 7f 74 63 b9 fd b5 f3 ae c7 af 0f 16 5d fd af 9a f7 5d ac 55 5b e2 62 5f e9 5f 55 ea 7b a3 97 73 b3 ae de d7 6e df 91 b6 9e c7 d2 f6 be 69 db 77 71 5a db e1 65 7f e9 5f 47 ea 7c 4f 1e fd 8d b4 f6 3d fd bf 23 5d fd ae f3 93 b2 58 b2 89 14 44 12 d8 94 0b 04 c8 54 b6 49 9c 88 4b 62 12 c4 54 31 62 a0 42 5e d0 50 b9 ed 58 7e 07 49 5c ac c2 48 10 a2 6c 92 45 38 e4 de 1c 72 24 96 4f a8 30 9b 61 c7 6c b6 e9 5a 25 bd b9 19 da e1 bd 75 ea 7a f8 e9 5c 75 55 aa d0 e1 6e 5e 9d 66 16 0d 82 46 48 12 00 8c 9a 12 48 e4 80 22 24 91 12 04 19 df 25 68 b5 d5 f0 a9 a9 ae 59 bb 48 e2 c9 9a f7 95 31 5e 48 eb ae b2 39 6d bd ae 6b 33 71 c5 8d 98 b3 58 d9 ea 6a 33 5f 71 d8 ae 9e cf b5 5f f9 55 7e d5 27 ce ee 7f 75 Data Ascii: "dA 9{l3Ztc]]U[b__U{sniwqZe_G\|O=#]XDTIKbT1bB^PX~I\HlE8r$O0alZ%uz\uUn^fFHH"$%hYH1^H9mk3qXj3_q_U~'u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	49963	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	805	OUT	GET /wp-content/uploads/2019/08/SF3.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:17 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/jpeg Content-Length: 165379 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	2638	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:17 UTC	4344	IN	Data Raw: 10 95 08 4a 84 25 42 12 a1 09 50 84 a8 42 54 21 2a 10 95 08 4a 84 25 42 12 a6 84 a9 21 2a 10 95 08 4a 84 25 42 12 a1 09 50 84 a8 42 6a 10 9e 84 26 a1 09 50 84 a8 42 54 21 2a 10 95 08 4a 84 28 54 d4 53 d0 84 ad 42 13 d0 84 f4 21 2a 10 9e 84 25 42 13 d0 9a 54 21 2a 12 4f 42 12 a4 84 f4 21 2a 10 9e 84 25 42 69 50 84 f4 21 2a 10 95 09 a7 a4 92 7a 10 95 a8 42 54 21 3d 08 4a 84 25 42 12 a6 84 a9 26 9e 9a 12 a1 09 50 84 a8 42 54 21 2a 10 95 08 4a 84 25 42 13 d0 84 a8 42 54 21 2a 10 95 08 4a 84 25 42 69 50 84 a8 42 54 21 3d a8 42 54 21 2a 10 95 08 4a 84 25 42 12 a1 09 50 84 d4 21 2a 10 9e 84 25 42 12 a1 09 a8 42 54 21 2a 10 95 08 4a 84 25 42 12 a1 09 50 92 54 26 95 34 92 a4 84 a9 a1 2a 10 95 24 25 42 12 a1 09 50 84 a8 42 85 6a 6a 29 e8 42 7b 50 84 a8 42 7a 10 95 Data Ascii: J%BPBT!J%B!J%BPBj&PBT!J(TSB!%BT!OB!%BiP!zBT!=J%B&PBT!J%BBT!J%BiPBT!=BT!J%BP!%BBT!J%BPT&4*$%BPBjj)B{PBz
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: 0d a5 5b 2d d0 ed 26 d4 84 08 46 e0 a2 ad e8 e0 59 0e 6f fc 2e 3f c6 a6 01 51 24 28 2e 3e 09 f6 f5 ed e8 2a 40 28 12 b4 5e a4 92 57 a1 0a 54 59 5e 02 a4 ac 6f 65 7a 2d 3f e6 2a 12 8b a6 24 c8 c3 09 31 90 ea 01 74 29 b4 90 5b 72 fe e4 fc 08 ac b7 c0 b2 be b9 2f 45 f1 39 ad ad 08 4a 9c 41 d7 db 62 0d c5 72 59 a4 b4 4b 10 bb 5e 3d 68 5a 13 ee 04 5a f5 ae 0b 24 d5 e1 6d 0a 48 37 15 73 2a 9d 56 4a 8e 2c 4f f5 aa e4 14 e3 24 07 9a 6c 00 b4 6d 07 70 22 e4 7f f1 d6 b2 58 16 98 15 c4 f9 0e 32 0a 92 5d 7d ad e1 7a 10 9d 09 be 9f d2 8a a7 20 70 56 90 0e 6b 9d cd c2 c2 87 1d f5 36 a7 12 5d 20 78 af 7d 84 76 27 e3 5b 61 74 a4 55 52 80 01 54 47 61 8b c4 69 67 68 76 4a 7c 80 ea 0a 6f d2 ad 9c 8b 12 3a 28 c0 07 00 f5 5d b1 ec c3 6b 75 98 ad a8 06 d8 40 48 48 e8 0d b5 af Data Ascii: [-&FYo.?Q$(.>@(^WTY^oez-?$1t)[r/E9JAbrYK^=hZZ$mH7s*VJ,O$lmp"X2]}z pVk6] x}v'[atURTGaighvJ\|o:(]ku@HH
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: ba 0d a0 9b d5 f0 e1 4e 59 a8 9b 62 10 14 fe 6d 3e 55 f6 b8 53 7f 4b d6 a8 70 a2 33 55 9b ca 14 93 93 9b 29 5b 9e 90 b5 0e c0 9a d5 1a a3 1c 82 a8 cc 95 05 4b 2a d5 47 77 e3 56 00 a2 eb 1b fa 53 64 9d 35 e8 49 d2 a1 0e 95 08 58 95 5a 84 3a c0 92 68 49 35 08 59 01 6e ff 00 8d 09 a7 b7 c6 f4 21 31 36 a1 0b 0e bf e5 42 4b 30 3b 00 49 3d 85 24 c2 27 c2 e1 e4 cb fa 94 9b 35 74 0b 02 6c a2 6f f2 d6 6b ae 11 65 7d 75 92 bb 5e 17 86 8d c9 4a 99 d8 53 1c 6f 50 24 fb bd 3a 57 26 77 ca 4b 50 88 8a e9 f8 ee 28 84 b7 01 2a 6c 6e 65 0a 59 3a e8 6a b1 02 52 33 44 58 fc 02 18 fa 70 5b 00 2d d2 e2 7a e8 6a 71 ad 42 53 44 b1 e0 32 d2 14 6d 60 a7 af 6b 75 ab 44 00 55 19 2b 6d 88 48 7a c9 17 b8 ab 19 41 d6 6b db 77 45 85 94 81 4d 25 b5 98 ef 3c 52 a6 da 52 d2 51 b4 a8 74 a0 Data Ascii: NYbm>USKp3U)[KGwVSd5IXZ:hI5Yn!16BK0;I=$'5tloke}u^JSoP$:W&wKP(lneY:jR3DXp[-zjqBSD2m`kuDU+mHzAkwEM%<RRQt
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 0f 41 eb 4f 73 29 b3 aa e7 b2 de 25 58 a8 24 1f 72 75 17 48 f5 1e b5 13 35 21 15 01 fe 4c d3 56 bb 80 13 ae db f4 4f f7 7e 3f 0a 5e a2 96 c5 22 2f 23 62 4b 69 5a 1d 4a 9b 71 76 6c 95 01 bc fc 7d 0d 1e a2 46 0a d9 59 20 81 75 ec 3b fa 0f ee 57 a1 f4 a9 6f 51 da b9 df 23 ca e3 8a 24 45 7d e4 b6 92 46 f2 4d ae b3 d1 b1 55 62 4e 0a e8 86 5c ac 43 8e fc 97 94 a2 82 e0 3b 63 b2 de a1 37 ed f1 36 ab 77 10 10 c0 94 65 84 c1 30 24 b9 25 a6 94 85 c5 16 f2 5e db c9 1d 0d 56 64 48 46 4b a8 44 8e e3 2c c7 43 85 65 28 4f 91 6a b9 25 27 d0 fc 2a 40 2a c9 75 6c 60 09 48 66 e0 02 a5 ef 3a fe 5f 51 53 d8 ea 3b 99 44 18 16 41 dc 94 02 54 e9 29 02 fa fc 68 f4 d1 bd 5d 46 86 94 6f 36 ea a1 63 af 6a 98 8a 81 92 bb 45 90 17 6d 2c 47 f3 ab 86 0a b2 b7 6e b5 ff 00 d2 6f fc e9 a4 Data Ascii: AOs)%X$ruH5!LVO~?^"/#bKiZJqvl}FY u;WoQ#$E}FMUbN\C;c76we0$%^VdHFKD,Ce(Oj%'@ul`Hf:_QS;DAT)h]Fo6cjEm,Gno
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 85 64 26 53 cd 4f 70 0b a0 41 e3 ac b2 13 66 c0 f8 5a a5 1a 95 66 68 96 3e 31 08 b6 d4 0f e5 56 88 2a cc d5 ab 70 c0 ed 56 08 aa cc 94 d4 47 09 b6 95 31 15 12 54 84 a0 0e d5 20 14 5d 6d 1b 07 53 6a 92 4b 15 48 6d 37 d6 96 e4 32 88 e6 41 23 a2 85 40 d8 a4 20 aa a4 65 82 37 6b d3 53 50 36 2b 05 68 7e 4e 6d 44 94 85 14 a8 7a 8a a6 56 2b 04 10 9e 53 90 3c c8 57 bb 6d b4 2a 35 51 99 2a d1 00 b9 26 6b 9a ba 04 86 ee 5a 79 b1 b9 57 36 f6 8d 6a da e8 32 41 90 0b 97 cb e6 53 25 28 84 3a 50 df 65 93 af f2 ad f0 e1 81 9a a4 dc 4a a8 73 3a e1 07 6b 8b 5a d5 f3 2c 9f f0 1d aa e1 40 50 36 2a 57 e5 3c fa 8a 9c 70 9f 41 7d 2a e8 c4 05 59 93 a8 c5 40 7f d2 a6 a2 eb 02 a3 42 4e 95 fb f7 a1 09 ee 69 b2 1d 63 73 42 16 25 47 b5 08 58 eb eb 42 12 d7 d6 84 2c 82 7e 34 9d 09 f6 Data Ascii: d&SOpAfZfh>1VpVG1T ]mSjKHm72A#@ e7kSP6+h~NmDzV+S<Wm5Q&kZyW6j2AS%(:PeJs:kZ,@P6W<pA}*Y@BNicsB%GXB,~4
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: 4a 6d 13 f5 03 fb 2c 0f 72 95 d6 53 23 33 8e aa 4e 00 47 b0 71 ac c5 61 f7 0a 12 56 fa b6 32 dd 80 fe 22 98 8e 0a 06 4e af 9b 42 10 b6 19 40 21 b8 88 dc bb 7f 75 bb d5 80 28 3a 71 b8 b0 e2 f5 df 29 76 07 e1 f8 d3 d1 1a a9 20 00 f2 05 8e c8 e8 d0 7c 6d 4f 54 b4 4e 2f e3 57 5d ce 2a ea 37 d6 d4 3a 16 f1 fe ea 4e 96 42 6c 3f 95 0e 93 25 74 a1 bb 1b 12 a3 7b 5e a0 64 ca 40 3a 88 f6 49 a6 97 75 2c 27 c6 2c 35 aa 25 78 05 5b 1a 89 0a b5 39 e6 d3 21 96 5b 7b 6b ea 58 53 65 27 50 45 66 b3 93 b4 3a b3 d1 47 6d f2 d2 da 43 6e b1 e4 74 01 75 20 e8 7f 9d 48 7e 73 68 62 1c ac a7 84 f8 a0 8e 57 9b 7d d4 26 43 aa 1e 31 f2 a0 5f 41 f0 ae 7d dc e9 72 24 b7 f1 28 11 42 30 79 0c a2 bf 6e e5 36 74 40 49 b9 fc 75 ac b6 54 49 77 5a e5 54 59 11 0f a9 9c 54 db a5 4d a0 8d 53 7e Data Ascii: Jm,rS#3NGqaV2"NB@!u(:q)v \|mOTN/W]*7:NBl?%t{^d@:Iu,',5%x[9![{kXSe'PEf:GmCntu H~shbW}&C1_A}r$(B0yn6t@IuTIwZTYTMS~
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: 6f f4 fa ef ec 49 f4 ae 4d 97 ee 9e 1a 2d 50 a9 a3 8a b7 4e 59 01 9d ea 42 b7 01 aa 45 68 1c c6 8e 4a bf 47 14 23 94 c9 ad e9 6d 17 46 c4 90 52 d2 07 6b f7 ac 76 5d ba 4e 56 9a eb 61 82 aa 54 d6 52 a7 9a 27 53 a8 3f 8f ad 57 bc 07 0a cd 84 a8 8a cb 37 e3 4a b7 03 b0 ed 55 fb 9f 85 40 de 19 4b d2 c5 6a 39 66 bc e1 27 42 b4 e8 9b 6b f0 bd 2f 5c 3a 7e 91 65 b1 a9 89 71 2e 8d df ed 9b ee b6 9f 85 11 b4 17 41 83 29 cc af cb e2 5b 6a 29 55 c1 d3 b1 1d ea 62 40 87 50 21 97 47 c7 39 29 e8 c8 5c 82 92 a3 f2 a8 77 1e a6 ba 9c 73 39 47 15 82 d0 01 c1 04 fd c2 e2 8f f2 1c 69 76 3c a5 a2 4c 10 a7 63 c6 bf e9 a8 db 5b ff 00 aa dd 0d 73 ff 00 23 c4 9b 8b 41 76 d3 b7 65 af 85 c8 10 3b 48 cd 79 0d cc 86 5f 14 b9 4c 3b 29 32 1b 49 25 f8 e8 1b 54 4a 7b 8b e8 74 aa 6b 11 98 Data Ascii: oIM-PNYBEhJG#mFRkv]NVaTR'S?W7JU@Kj9f'Bk/\:~eq.A)[j)Ub@P!G9)\ws9Giv<Lc[s#Ave;Hy_L;)2I%TJ{tk
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: f2 a6 0f 99 47 9d 96 8c c6 53 1b 1d c2 d8 4a 50 93 e3 28 b9 37 ee 83 e8 69 48 e2 3b 27 18 e0 50 97 23 ce b4 4e 4c 07 37 24 a5 61 29 d9 b5 49 b0 b0 25 75 16 dd 25 6c 22 c1 79 4d dc 92 9b 52 92 a3 62 09 b8 fe 35 e8 23 4a cc 79 04 28 c7 2a ab fa d4 bd 10 a3 fe 49 52 a3 65 d5 75 24 a7 da bd 2a 32 a0 29 47 92 57 63 e1 df 74 46 1d a6 a1 cf 49 52 13 64 25 db 12 0a 46 80 9b 74 23 a5 79 ee 7f e1 8d 92 33 ad 6d 8d f0 b0 34 f0 3d 57 63 63 ee 04 8c e4 35 7e d4 d1 90 09 2d de c5 29 4d ba f5 ae 51 e1 d9 13 b6 c3 87 44 1a a1 1c 42 e6 59 e9 59 28 f3 58 5c a7 9d 42 26 80 90 d2 95 ed 49 1d 6c 47 51 ad 74 68 a6 02 24 01 92 98 93 ab 74 e3 b2 13 8b 18 e0 b7 c3 0b d0 48 f2 d9 d3 a5 fd 82 88 42 2f b9 83 aa e7 63 29 b8 1c 19 71 53 e3 4a 8e 10 f3 1e f6 cf 90 95 2b 66 96 73 fc 4d Data Ascii: GSJP(7iH;'P#NL7$a)I%u%l"yMRb5#Jy(IReu$2)GWctFIRd%Ft#y3m4=Wcc5~-)MQDBYY(X\B&IlGQth$tHB/c)qSJ+fsM
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: e2 b6 55 44 1b 1c d4 24 64 32 54 72 f3 ae c9 06 2c 89 4f 6c 16 05 b7 15 ed 57 e2 7b d5 f0 e3 88 e2 02 5e ab e0 50 93 e8 6d e5 2a e0 1d 4d be 15 ae 25 95 32 88 2a ad d8 cb 45 ca 3d e9 fe b5 68 92 aa 50 21 62 c7 7f 81 a6 54 42 b2 4a c1 d9 6e b5 51 0a e8 95 dd 7e df 66 1b 85 16 53 0e a9 b4 a2 52 92 b4 17 34 49 20 6a 2e 3a 57 9f e7 40 ef 70 ba 71 1b a2 eb 1e 71 92 44 c5 c4 8e da d0 e2 e2 85 2b 73 7f 22 2f d8 1e e6 8e 1c 4e 24 a4 62 c1 6b 83 cf db db 11 e5 cc 66 3b f1 0b 68 73 7a 09 74 06 f4 3b 4f 43 7a b8 f1 65 13 80 59 cd 91 2b b3 e2 de 44 a9 2d cc 6c 21 2c ce be 81 3b 5f 70 38 3a 9b f6 aa 46 6a 32 c9 5b 42 64 06 a5 c5 21 ad a5 3b 90 c2 11 6b 14 9e ab 07 ad 31 a8 51 27 55 24 27 7c 2d a8 5a 0a e3 af fd e0 8b a5 29 57 a2 7b 52 cc 27 91 51 e5 3c af 0c 69 48 72 Data Ascii: UD$d2Tr,OlW{^PmM%2E=hP!bTBJnQ~fSR4I j.:W@pqqD+s"/N$bkf;hszt;OCzeY+D-l!,;_p8:Fj2[Bd!;k1Q'U$'\|-Z)W{R'Q<iHr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	49964	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:16 UTC	499	OUT	GET /wp-content/themes/regionalexpress/img/logo-footer.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1
2024-04-23 14:06:17 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/png Content-Length: 9316 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:44:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	9316	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e6 00 00 00 3f 08 06 00 00 00 f4 5b b4 5c 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDR?[\gAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	49967	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	729	OUT	GET /wp-content/themes/regionalexpress/img/index-egalite.png HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:17 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/png Content-Length: 13537 Connection: close Server: Apache Last-Modified: Wed, 06 Mar 2024 08:05:19 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	2640	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 be 00 00 00 be 08 06 00 00 00 8b 74 b5 9d 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ed 9d 07 78 95 c5 12 86 37 20 20 82 34 2b 2a 0a 76 11 ec 88 05 45 bd 16 54 50 b0 80 5d b9 36 ec a2 82 0a 48 07 29 2a cd 0e 2a 62 c1 8e 5d ec 7a 15 7b 05 6c 48 11 44 45 e9 bd 85 70 bf 77 93 3d fc e7 e4 9c 9c 92 53 42 dc 7d 1e 1e 4d b2 ff 96 d9 6f 67 66 67 67 67 f2 d6 ab 18 5f 3c 05 fe 65 14 c8 f3 c0 ff 97 ad b8 9f ae a5 80 07 be 07 c2 bf 92 02 1e f8 ff ca 65 f7 93 f6 c0 f7 18 f8 57 52 c0 03 ff 5f b0 ec 6b f3 57 99 c5 2b fe d1 4c 0b ca ec 6c 0b 0a d6 9b 5a d5 b7 35 95 37 a9 9a 95 31 7a e0 67 85 cc b9 ed 64 ce 82 5f cc 6b 9f 0f 32 6b f3 57 9a bc bc bc dc 0e 26 46 ef 6b f3 57 9b d6 87 Data Ascii: PNGIHDRtsBIT\|d IDATx^x7 4+vETP]6H)*b]z{lHDEpw=SB}Mogfggg_<eeWR_kW+LlZ571zgd_k2kW&FkW
2024-04-23 14:06:17 UTC	8688	IN	Data Raw: c6 e3 4f 8e 35 1f 7c f4 91 d5 df 53 05 fe f7 13 27 99 27 9e 7a ca 82 08 c0 73 a8 06 8c 87 36 3d d8 6c b6 d9 66 61 33 9e f1 db 6f a6 ff e0 3b cc ca a2 cd 16 a9 ea e4 4b 12 3d ff e2 4b e6 e3 4f 3e 29 e6 2a 0d 97 5f 56 04 7a 1a 65 cc bb ee b2 b3 b9 fa 8a 2b ec d8 c3 54 1e cd 89 fa cd 8f 38 c2 4a 18 57 16 4a 4d 1a 2e d0 ff f2 cb 94 b0 df a7 61 59 4a 6c c2 03 3f 0d 14 4e 17 c7 67 28 8b a4 eb f6 ee d7 df 70 70 dc 3a 45 55 e7 d3 cf bf b0 1c 34 52 7f 3f b4 69 53 73 99 ce 18 c1 73 08 c0 7e 4c 9b ed dd f7 df b7 94 88 06 fc c7 c6 3e 69 de 7b ff c3 84 28 05 b8 4f 3e b1 85 39 f7 ac b3 c2 ea 43 23 4a 70 4c fc fc 9c 36 d5 b8 17 5f 2c f6 fb 84 3a 2b 45 25 0f fc 52 10 cf 7d 9a 4e e0 d3 e6 ab af bf 61 9e 7c fa 69 b3 cd d6 5b a7 a4 e3 7f 26 e0 c3 45 83 9c 15 55 04 d0 b5 3d Data Ascii: O5\|S''zs6=lfa3o;K=KO>)*_Vze+T8JWJM.aYJl?Ng(pp:EU4R?iSss~L>i{(O>9C#JpL6_,:+E%R}Na\|i[&EU=
2024-04-23 14:06:17 UTC	2209	IN	Data Raw: 09 a8 13 05 3e 0b 0c 08 91 10 2c 20 9b 36 a8 d2 38 e0 f7 57 66 91 de bd 7b db 4d 4b 71 29 78 dc b8 50 55 0e 56 c8 3d c0 86 b4 03 f8 80 8c 75 65 5c 97 29 35 2a 2a d6 96 5b 6e 69 e9 3d 74 e8 50 cb 4d e9 2b 08 7c 80 cc e6 44 22 c0 80 82 c0 67 2c a8 16 14 18 0e d2 81 82 d4 fb 5d c1 63 51 af 1c 13 42 42 00 52 a4 1a f5 90 f2 dd ba 75 33 3d 7b f6 b4 7d 46 02 1f 0d 81 b5 85 06 6c 1e 36 85 c3 03 ff 45 ea 02 7c 98 11 b8 61 5e 60 25 32 70 57 42 c0 e7 63 54 43 8d 5b bb b2 82 c4 56 25 33 fc 8e 73 14 82 64 cf 0d c0 17 87 f8 45 1c a3 da c8 31 c6 8c 1a 1d 35 3a 59 49 c0 47 57 26 d4 1c aa 02 5c 00 ce 0e 87 84 40 4c 00 55 87 c5 60 12 fc 6e f4 e8 d1 56 0d 70 c0 87 5b f0 77 b8 02 1c b6 87 52 0e 41 14 88 99 28 f0 f9 0e dd 93 87 f7 2c de d8 b1 63 2d 40 00 5c 22 c0 ef ac d8 95 Data Ascii: >, 68Wf{MKq)xPUV=ue\)5**[ni=tPM+\|D"g,]cQBBRu3={}Fl6E\|a^`%2pWBcTC[V%3sdE15:YIGW&\@LU`nVp[wRA(,c-@\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	49966	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	1038	OUT	GET /wp-content/uploads/2019/08/SF3-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:17 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/jpeg Content-Length: 250052 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	1190	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 Data Ascii: </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 44 97 48 95 65 34 21 2e 91 09 74 25 4b 4d 08 4b 4f e3 a1 09 69 a1 0b 29 fe cd 08 5e a9 a1 09 69 e3 a1 2a 50 3f 66 84 25 d0 84 b4 d0 84 ba 10 96 9a 10 96 9a 10 97 ff 00 61 a1 0b 34 25 4b 4d 22 12 e8 42 cf f0 d0 84 b4 d0 84 b4 d0 85 94 d2 21 65 34 21 2e 84 a9 69 a1 0b 29 a1 0b 29 a1 09 69 ff 00 86 91 09 69 a1 0b 29 a1 0b 29 a1 2a 5e 9a 10 b2 9a 10 b3 42 12 d3 42 16 53 42 16 53 42 12 e8 4a b3 42 16 53 ff 00 1d 08 59 4d 08 4b 4d 08 59 4d 08 4b 4d 08 59 4d 08 59 a1 0b 29 fb 34 21 65 34 21 65 3f f0 d0 85 94 d0 84 b4 d0 85 94 d0 85 94 d0 84 94 fd da 10 b2 9f 0a f9 68 42 cd 08 59 4d 08 4b 4d 08 59 4d 08 49 4d 08 59 4d 08 59 4d 08 59 4d 08 59 4d 08 59 4f df a1 09 29 e1 a1 0b 29 f0 d0 85 9a 10 b2 9f eb ae 84 2c a7 fe 3a 10 b2 9a 12 24 a6 95 0b 29 a1 0b 29 a1 0b 29 Data Ascii: DHe4!.t%KMKOi)^iP?f%a4%KM"B!e4!.i))ii))^BBSBSBJBSYMKMYMKMYMY)4!e4!e?hBYMKMYMIMYMYMYMYMYO)),:$)))
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: d2 21 2d 3e 1a 10 96 9e 7d b4 21 65 34 21 2d 3f 86 84 a9 69 a1 0b 29 a1 0b 29 d3 b6 84 24 a7 fb 34 21 65 34 24 59 a1 0b 34 21 65 34 21 66 84 25 a6 91 2a 5a 7f 1d 08 5e 80 d0 84 b4 d0 95 2e dd 08 4b b7 42 16 11 a1 09 36 fc 34 55 09 29 a1 09 29 a1 09 34 24 49 4d 09 56 68 42 cd 09 16 68 42 4f fd ab a1 0b 34 21 2e 84 2c a7 7d 09 56 1d 09 12 68 42 cd 08 59 a1 09 28 34 21 66 95 22 cd 08 59 a1 2a 5f d9 a1 0b 29 a1 0b 29 a1 09 29 a1 0b 34 21 66 84 2c a6 84 24 d0 85 94 d0 85 94 d0 85 9f c2 ba 10 98 f5 22 85 28 d0 84 b4 d0 85 ea 9a 10 bd 01 a1 2a 5d 08 4b 4d 08 4a 06 91 09 74 21 2e 84 a9 40 d2 21 2d 34 21 2d 34 25 4b 4d 08 4b a4 4a 96 9a 10 96 9a 10 b2 9a 10 bd 53 42 54 b4 d0 84 bf fb 1d 08 4b 4d 08 58 07 c3 42 17 a0 34 21 2d 34 88 4b 4d 09 52 81 a1 09 40 d0 84 b4 Data Ascii: !->}!e4!-?i))$4!e4$Y4!e4!f%Z^.KB64U))4$IMVhBhBO4!.,}VhBY(4!f"Y_)))4!f,$"(*]KMJt!.@!-4!-4%KMKJSBTKMXB4!-4KMR@
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 9c 50 04 03 da 82 bd 35 52 3b 98 da fc 0e 0a 77 44 e2 dc 46 28 45 3e d7 75 69 4e b1 21 b5 2d 6d 02 a6 96 0e e2 53 e2 0f e1 ad a8 e6 61 c4 2a 0e 8d d9 14 30 bf db 5a 79 2a 53 88 da 7f aa 9e a4 9f f6 6b 4a 19 08 54 e4 60 28 68 eb 4b 65 c5 b4 bf 99 b3 43 fe bd 68 03 50 a9 91 42 bc 50 e8 48 b7 47 8c f4 a5 fb 6c a6 a7 c5 47 b0 d2 39 c1 b9 a5 6b 49 c9 48 e1 e3 88 90 76 a9 e5 a8 8e 8a 52 07 40 7e 07 55 df 71 45 33 61 05 3e 37 83 c3 90 28 d5 d8 b2 e7 93 a9 1b 49 fc 75 09 bd 23 30 a4 16 c0 e4 56 a7 38 fe e1 55 a6 34 c6 e4 2d 1f 33 5b 08 57 e3 f1 fd 9a 07 50 66 a2 88 36 a7 42 9a de c3 72 06 12 56 22 09 0d 8f e7 6e a7 f7 8a 54 6a 46 de c4 75 51 9b 77 84 cb 22 d3 74 8a 69 22 03 cd 57 b5 53 d0 fe 07 53 b6 66 3b 22 a3 31 b8 68 9b 55 d1 45 2a 05 2a 1d d2 7a 1f dc 75 20 Data Ascii: P5R;wDF(E>uiN!-mSa0ZySkJT`(hKeChPBPHGlG9kIHvR@~UqE3a>7(Iu#0V8U4-3[WPf6BrV"nTjFuQw"ti"WSSf;"1hUE**zu
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: d1 0d 13 30 88 fa ba b4 82 ea 2b 4d e0 52 87 c8 ea 6d e3 55 1e d2 b7 0b 7c e2 2a 98 ab 58 f1 da 2b fe 1a 4f 51 bc 52 ec 77 05 a8 a1 4d 9a 38 95 36 7c 94 3a fe 1a 70 35 45 28 97 69 1d 76 aa 9e 7b 4e 8a a2 89 01 4d 69 b8 57 cb 45 50 a3 f4 d4 ea b2 f4 34 21 2d 34 88 4b 4d 09 52 e9 10 bd 53 42 54 a0 68 42 f4 01 a6 84 a9 69 fe cd 22 12 d3 42 55 ea 9f b3 42 17 a0 3c 74 21 2d 34 21 2d 34 25 5e 82 74 21 7a 03 48 85 eb 6f f1 d0 84 a1 3d f4 25 5e b6 e9 11 45 eb 6f fb 74 25 a2 f4 13 fb b4 55 14 4b 40 3b 9a 69 2a 96 8b 63 4d 38 f2 82 58 69 6f a8 f8 21 25 55 fd da 69 70 19 a5 0d ae 4a 47 07 0f c9 2e 24 7d 3d ad c0 93 fc ce 74 fe 1d 75 5a 4b d8 99 9b 94 ad b7 7b b4 53 fb 4f 0a 64 f7 02 92 fd 59 07 f9 5b 45 4f f1 d6 74 dd 72 16 65 8a b2 db 17 1c d1 6a c7 f6 d2 eb fb 15 Data Ascii: 0+MRmU\|X+OQRwM86\|:p5E(iv{NMiWEP4!-4KMRSBThBi"BUB<t!-4!-4%^t!zHo=%^Eot%UK@;icM8Xio!%UipJG.$}=tuZK{SOdY[EOtrej
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 3c ca ab d4 eb 8d 1d 73 ac 3d d5 74 e7 b0 60 16 99 82 06 0a 06 36 9d 88 5d 7e e0 9c 62 61 5c 9c 56 18 82 2b ea 86 52 48 47 fe e9 24 11 ff 00 09 af c3 5d 4d 87 5f bb 02 93 1d dc ff 00 3f c5 66 dc 5b 42 7c a2 9d 99 7b 94 02 67 04 97 02 9b 9b 8e 25 44 fc b2 1a a6 d5 7f 0e 87 5b 6c eb 2f 18 87 2a 46 d9 87 30 be 76 d3 5e 86 b9 75 e8 0d 08 4b 4f e3 a4 4a bd 01 db 42 12 81 5d 09 52 81 a1 2a f4 06 84 25 a6 91 09 40 d0 95 7a a6 84 2f 40 7f e3 a1 0b d0 1a 12 af 40 69 10 bd 01 e1 a1 0b d0 1a 12 af 61 3a 44 51 7a 03 42 5a 2f 40 69 2a 96 8b d2 12 5c 21 0d 21 4e a8 f6 4a 01 51 fe 1a 42 69 9a 50 14 8e dd 88 e4 57 32 91 1a d8 e2 41 fe 77 05 3f 87 7d 55 96 f6 28 f3 72 99 b0 3d d9 04 4a b2 70 7e 43 72 28 32 16 b6 d2 7b a5 a4 1f f1 3a cc 9b ae c4 cf 2e 2a cb 2c 5c 73 28 d9 Data Ascii: <s=t`6]~ba\V+RHG$]M_?f[B\|{g%D[l/F0v^uKOJB]R%@z/@@ia:DQzBZ/@i\!!NJQBiPW2Aw?}U(r=Jp~Cr(2{:.,\s(
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: df 70 6b 15 96 dd 3d d8 ce 48 6c cb 50 40 87 bc 2b d9 58 ee 95 13 d4 d7 b8 d6 fc 17 d2 48 e0 0d 30 f8 aa 52 5b b1 8d 34 d5 42 ed b0 20 03 65 86 fa ca 11 2a e8 d7 d4 25 66 a9 5b 61 60 ed af 85 69 43 ab 73 ca fd af 70 cc 34 d3 b5 32 dd 8d de c0 72 2e 15 57 ce 6e 6f 19 f9 50 ad 31 dc 4a 63 5b d8 43 49 69 26 80 1a 55 5d 3f 86 bc 9a 1e 96 e6 b4 c8 e1 8b 8d 57 6d 34 c3 71 08 bb 8d c4 fa f6 da 51 04 82 90 53 d3 a7 5d 42 c8 0e e5 9b 34 a8 89 03 17 01 ca a5 01 5b 8d 4a 47 86 b5 61 8c 95 9d 24 aa 4a 8c 6d 2b 49 5a d0 54 91 4f 75 14 a2 4a 87 8f ed d6 a4 51 61 42 aa 3a 45 f9 c2 a6 bd 71 73 89 69 a4 42 50 3a e8 4a bd 01 a1 2a 50 34 22 8b d5 34 88 5e a9 a1 2a 50 34 21 7a a6 84 ab d0 1a 10 bd 01 f0 a6 91 0b d8 4f fb 34 21 7a 09 d2 25 5e c2 74 25 a2 5a 00 3a 90 34 95 4b Data Ascii: pk=HlP@+XH0R[4B e%f[a`iCsp42r.WnoP1Jc[CIi&U]?Wm4qQS]B4[JGa$Jm+IZTOuJQaB:EqsiBP:JP4"4^*P4!zO4!z%^t%Z:4K
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 2e ab 13 d5 47 d9 39 aa 1d 2b 19 bf 45 5a c3 f6 c7 5a d9 f3 28 d2 94 f0 20 d7 a8 3a bc db 98 dd 93 95 47 42 f1 a2 64 75 0b 8e b2 db e8 2c ac 75 da ae 9a 9c 10 72 51 90 46 6b 4e f4 9e ca 15 d2 a6 a4 dd f1 d0 85 d9 6f 9b f4 92 12 e1 51 48 3d 09 06 9a 8e 46 ee 09 5a ea 15 6b 78 ce f3 3f 75 be 4c 39 2f c5 71 85 54 10 e6 c2 4f 7f 94 9e ba e5 ba 94 2d 15 a8 5b 16 ce 26 8b e9 17 1b 72 3d fa 3b 51 d3 31 f5 be dd 00 2a 34 ed e7 ae 67 71 8c e1 92 b5 24 41 c1 5b 1b 1f 22 c0 94 d2 43 93 50 16 12 37 a2 bd 6b fb 7c f5 72 3b 90 b3 9f 6d c1 4b 5d ba c6 9a cf b8 95 85 a0 8a 94 83 e1 e7 a9 4c 80 85 10 8c b4 a1 9e 53 16 14 b8 ca dc af 6b 71 3e aa 75 14 1e 5a a7 30 04 2b 91 12 15 38 e4 6b 2c 4f 7e 18 5c a4 6c 47 ad 20 f4 1b 47 7a fe de fa ad 1b 88 26 8a f8 35 0a 97 67 6e 98 Data Ascii: .G9+EZZ( :GBdu,urQFkNoQH=FZkx?uL9/qTO-[&r=;Q1*4gq$A["CP7k\|r;mK]LSkq>uZ0+8k,O~\lG Gz&5gn
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 54 ea 27 5a ee c0 25 37 7b 05 51 fa 07 11 e1 10 63 88 23 1e 84 a4 3c 12 99 1b da 4a d4 e0 03 f9 d4 a0 49 d3 ff 00 e0 61 7e 12 62 4e 78 9f 60 a8 3b a9 cb 98 2a 6a d6 2d 68 b5 c6 4b 56 bb 7b 31 5a 69 21 29 8e d2 02 10 12 3c 02 47 41 ab bf f0 96 f0 0a c6 c0 09 cf 9f 6a a8 6f 24 90 f8 8a 8f 64 58 6d 93 29 b4 ce b4 de 2d 8c cd 87 31 a2 dc a8 ce a0 29 2b 41 1d ba eb 3e eb a4 45 38 ad 28 e1 88 23 31 d8 55 a8 2f 1f 13 aa 0a f9 a7 93 70 14 1b 6d ea 5d ad 31 d2 eb 30 e4 3a 96 a5 29 29 a9 88 7a a2 32 bc ea 0d 2b aa 91 fa a0 63 9e bd bc 56 f8 b9 0e 15 41 9c 97 80 e3 c8 42 14 62 88 c2 28 53 88 56 d4 91 15 bf e5 60 83 f3 05 6a dc 57 72 c7 ed f1 41 2c 7a 18 5c 7e dd 58 73 dd 6d eb 7a 63 a5 2c fd 5b e3 6a 0a a1 0f e5 09 e9 ea 4b 9f 1e da b8 ce af 2b 75 fc d3 0c 11 b9 0c Data Ascii: T'Z%7{Qc#<JIa~bNx`;*j-hKV{1Zi!)<GAjo$dXm)-1)+A>E8(#1U/pm]10:))z2+cVABb(SV`jWrA,z\~Xsmzc,[jK+u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	49968	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	1042	OUT	GET /wp-content/uploads/2019/08/SFbase2-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:17 UTC	276	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/jpeg Content-Length: 17266 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	1191	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 Data Ascii: </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:17 UTC	4344	IN	Data Raw: ae b5 84 40 00 01 45 00 00 14 17 08 69 80 51 00 67 60 64 00 4e 00 e7 b5 b7 87 60 8e 6a 22 00 26 17 46 70 01 82 50 63 0a 00 08 df 2e 4e db de 95 5d 10 01 30 aa e9 ac c4 88 8a a3 38 15 04 10 40 45 54 00 10 46 68 b1 28 57 1e 67 0c cf 8a c8 95 e7 56 40 00 00 11 95 74 88 28 ae 9a 4e d0 75 06 e0 28 25 d6 6d 31 7e 15 62 b8 d9 75 ec aa 84 06 c1 64 51 b8 82 a8 d4 41 41 b8 82 a8 b0 55 05 90 45 00 1e 0d b5 fc fb 7b ea 29 3b 38 03 ac be 2a 8d 02 a2 80 b2 d9 c0 1d 75 da 5f 78 34 00 00 a2 80 00 00 2e 50 68 0c 01 80 62 f1 04 c0 62 5b 81 1c ed c8 88 09 82 ab 34 44 00 19 aa 22 80 25 06 00 07 5e 5f 0b ef 4a b1 b4 30 10 9d b4 1d 00 04 04 b1 55 91 04 10 12 aa a0 22 a2 58 83 15 55 8b 3b 2c 11 e6 b1 59 40 00 00 06 55 b9 d8 0a 8a ef ac ec f7 83 70 56 84 51 62 c0 5d b5 9b 4c 5f Data Ascii: @EiQg`dN`j"&FpPc.N]08@ETFh(WgV@t(Nu(%m1~budQAAUE{);8*u_x4.Phbb[4D"%^_J0U"XU;,Y@UpVQb]L_
2024-04-23 14:06:17 UTC	2896	IN	Data Raw: 66 c0 4c 02 60 12 c0 67 00 96 64 46 7c b4 13 00 cf 6e bd ba dc 5f e9 07 5d 39 b3 6e cb d9 b0 3a 0a 8a 20 20 82 00 31 54 44 a3 35 47 2b c4 18 d8 18 bc 10 7a 39 7a f9 75 ed e3 7b 68 8e 80 80 45 12 8a 80 e7 bc e1 44 a8 d0 00 0d 44 46 85 00 00 13 99 af 9b 5f 6c e0 89 1c 75 ee 1a 75 9c 41 da 02 83 52 20 d0 0b 00 14 55 88 34 20 0d 48 29 68 8c 80 2a a8 03 52 20 a2 28 a0 a0 0a 8b 80 5c 20 b8 0c 51 44 00 00 00 00 00 01 51 30 0c e0 10 03 14 04 11 30 09 80 4c 03 38 06 6c 04 11 2c c8 33 8a 0e 5b 6b df 3e 20 d6 9c cd b5 ec bf 9a 03 d1 99 b4 cc b9 16 22 80 20 82 09 41 82 8c d5 1c af 10 62 81 a6 be 6d a7 84 ed a8 3d 22 00 00 09 54 64 56 76 e0 15 8c aa 0a 00 a0 d4 42 a8 00 00 41 cb 69 e5 be cb db 12 ab 5a f7 03 b4 41 b8 a3 48 28 0a 28 aa 0d 22 00 b2 0a d8 8e 77 b6 80 0a Data Ascii: fL`gdF\|n_]9n: 1TD5G+z9zu{hEDDF_luuAR U4 H)h*R (\ QDQ00L8l,3[k> " Abm="TdVvBAiZAH(("w
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 84 00 54 51 44 55 00 00 00 00 00 01 04 45 00 10 4a 08 2a 2a 20 82 28 83 35 51 95 04 54 a2 56 68 22 87 1b 84 1b e1 d8 09 41 95 19 bc 41 90 72 df 8f bc 47 30 41 19 a2 a6 04 05 45 40 00 19 00 67 8d 55 2c 07 a9 08 a0 e7 b6 f2 76 4e df 68 6b 95 b6 f6 d1 05 00 6e 70 01 00 15 a0 06 f4 99 b9 f0 4a 47 64 51 45 82 c0 1b 88 26 dd ca 24 06 91 08 2a a8 d4 41 42 28 a2 8d 4a 88 d2 28 a0 a2 82 a2 90 1a 10 01 51 45 01 51 40 00 00 10 41 44 10 14 40 06 45 41 11 50 45 10 14 61 51 11 44 11 51 95 10 1a d6 77 a0 a0 cd 04 51 80 40 73 df 84 a2 39 02 08 98 02 83 0a 50 00 10 10 01 01 2a ab d1 76 9a f1 fc 11 1c ee d6 fb bc 01 90 01 55 40 58 22 a0 02 ac 14 58 e9 3b 01 d1 00 80 a2 8a d4 41 6f 0a a3 00 d4 41 44 55 55 80 d2 0a 8a 2c 05 46 e5 ca 2a a0 28 2a 28 aa 8a 4a 23 40 00 a0 20 2a Data Ascii: TQDUEJ** (5QTVh"AArG0AE@gU,vNhknpJGdQE&$AB(J(QEQ@AD@EAPEaQDQwQ@s9PvU@X"X;AoADUU,F((J#@ *
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: 19 db 82 8e 68 8b 2e 01 d2 5c 8a a2 b5 90 50 51 05 14 50 17 28 34 20 06 45 d5 45 00 01 40 03 40 d0 34 0d 00 00 40 01 51 03 41 13 22 a6 54 40 59 2d 06 a4 90 12 a0 c5 51 27 7a 0c ef a6 bc cd 7c bb 7c 2f 80 8f 88 e7 6b b7 2f 6f 25 f8 6d e2 dc f1 66 bc e2 00 00 80 a0 00 00 00 00 00 02 c8 06 71 73 3b b8 03 d7 ae de 69 28 a6 50 4c df 1a b8 a9 e6 db c5 10 f3 ed e2 60 da ab 34 46 68 56 29 07 3d 84 4d 34 bc ce 66 ba f8 f1 be c0 7c c4 92 49 27 64 9d 92 23 4a 8a c5 98 f7 2c 42 51 14 14 54 c4 f0 03 10 16 26 2e a8 00 dc a8 28 25 e1 41 ca 2a 2a 04 b8 07 49 72 2a 8a a0 d6 41 44 14 01 45 50 5c a0 a2 00 0a 64 35 43 40 05 10 00 50 11 32 1a 06 80 08 99 15 32 08 a2 c9 68 35 24 80 a0 88 8c da 2b 1b 28 91 0a 5b dd 10 71 e6 72 f5 e6 eb e5 db e1 7c 09 71 1f 13 cc e5 ed ca db cb Data Ascii: h.\PQP(4 EE@@4@QA"T@Y-Q'z\|\|/k/o%mfqs;i(PL`4FhV)=M4f\|I'd#J,BQT&.(%A*IrADEP\d5C@P22h5$+([qr\|q
2024-04-23 14:06:17 UTC	1448	IN	Data Raw: f5 5a 6d d4 e3 8d e4 ef f9 39 d3 e3 a6 d6 3f 2f bd f6 f9 eb fd 17 57 a1 ed e5 c6 e7 ee 9e 3c 7e a9 1f a9 d9 3b 85 ed fe b7 a5 ea 3d 9c 79 4d fd b7 c3 97 d3 6b ec 7b 5d b5 df 5d 77 d3 69 b6 9b c9 75 da 5c cb 2f 0b 2b ac 16 59 72 bb 47 2c b3 67 e0 fd 03 fb b5 e8 3f e5 ef ae bd 67 91 cb d3 c9 d2 fa 8e f3 d4 3a 3e e9 e4 ea 33 b6 d2 4f 09 cc f3 6b 3d ce c5 fd 9b dc 7f 9b db 3a 5c ad f9 b8 4f 25 f7 f1 f0 9f 1e 39 7f 57 5c 7e f2 ed bf c1 ee 9d 5e 32 7c bc ef 9e 7b b9 78 df 87 2f 34 fd 1f 8d 9e d2 f5 64 00 00 66 ed e0 0c e4 12 a0 e7 68 8c cf de 07 44 40 19 b5 54 00 1c b9 9c bd 79 9a e2 f1 ee be 0a 8f 8d df 4d b4 db cb b4 f7 5f 16 a5 46 04 6b 80 20 12 03 48 00 02 28 08 01 45 40 5d 6f 68 35 51 41 1d af 15 54 a0 cd e0 83 d1 c9 d7 cb af 6f 1d 85 c7 60 00 05 ca 06 43 Data Ascii: Zm9?/W<~;=yMk{]]wiu\/+YrG,g?g:>3Ok=:\O%9W\~^2\|{x/4dfhD@TyM_Fk H(E@]oh5QATo`C
2024-04-23 14:06:17 UTC	3043	IN	Data Raw: 7f a6 7a 27 d4 bc 9d 33 bf 41 ce db a1 eb 36 93 b7 e5 73 a7 9f 97 6f b3 5d b5 b3 fb cf 69 fe b3 ee 3e 4e b7 57 d2 db e1 ca 79 a7 bf 8f 85 f8 cb 3f d5 ea bf d9 dd b7 cf d1 e9 7a ae 33 c7 8d f2 df 77 2f 19 f0 b2 ff 00 b3 f5 21 f6 37 c6 40 40 4c 82 65 44 28 cd 41 cb 65 1d b2 80 20 00 00 c5 06 40 00 18 de 4d a6 2f e2 a3 c7 b6 b7 5b 8b f0 aa ca 02 00 08 a8 02 82 02 83 3c 45 01 01 e8 45 74 93 10 1a c8 ab 28 19 15 a1 00 01 54 32 81 95 55 05 88 34 82 82 00 0e 5b 4b ad cf 70 33 95 13 28 80 a6 55 1a c8 2e 50 4c c0 33 01 72 09 9f 68 19 80 79 a0 27 98 0f 30 27 98 16 4d b6 e0 0e 93 4c 71 b9 a2 b4 06 44 0d 19 bc 57 55 01 cb 9b fb 9b 7c 3f a4 66 bc 98 be 2a 86 2f 88 18 03 00 60 1b d3 7e 67 2e e7 4d b1 e3 3b 90 d7 bb 97 d5 6b b7 66 f3 cb 7c 7b 93 1a 95 fb 3f fc b9 7d 41 Data Ascii: z'3A6so]i>NWy?z3w/!7@@LeD(Ae @M/[<EEt(T2U4[Kp3(U.PL3rhy'0'MLqDWU\|?f*/`~g.M;kf\|{?}A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	49969	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	741	OUT	GET /wp-content/plugins/cookie-law-info/public/images/logo-cookieyes.svg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:17 UTC	278	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:17 GMT Content-Type: image/svg+xml Content-Length: 2581 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:29:18 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:17 GMT
2024-04-23 14:06:17 UTC	2581	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	49970	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	716	OUT	GET /wp-content/uploads/2019/08/SFbase-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:18 UTC	276	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Type: image/jpeg Content-Length: 28682 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:18 GMT
2024-04-23 14:06:18 UTC	8431	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:18 UTC	4344	IN	Data Raw: 80 1a 44 5c e6 c0 24 60 4e 09 18 03 23 80 44 12 7d 7f e9 ef cd d7 f9 1f e7 9f 95 fe 68 c6 ed d3 e4 fe 61 8b 2f 78 ab bd bb 6b 3f 87 dc 51 78 db 15 ac bd 67 d1 f9 4f 99 7c 3f 2b b7 df ff 00 4e d3 3e ce 5b 7d d9 7c cf 9b f8 73 cd f1 3b 9d 8f f5 6b 71 ed e7 af d9 70 ff 00 6d 71 65 c7 9f 16 3c d8 6f 5c b8 b3 55 5f 16 4a b9 ad ab 65 29 a6 b7 4d 1f d0 d2 cb 33 39 3f 9c ec ba dc 5e 6d 04 3f 00 7f dd 3f 93 92 ee 3e 53 f9 ef b7 c5 0b 35 2f e4 be 69 91 2d 3a a9 d5 9f b6 6f c5 a7 95 4f 82 3f 32 fe 40 f0 71 7b 5e 4c 9c ff 00 05 ff 00 1d 7f ec fd 43 f8 f3 ce cc ee f8 d6 f2 fc 73 fc 36 ff 00 ab f0 8a c7 55 c2 4f cd 72 fd 33 0a e9 4b 82 23 85 41 1c 00 58 04 b0 d7 0b 8b c7 e2 d0 36 6b 4e 15 d8 73 75 04 99 df 16 3b fd aa af 4f 11 96 c1 75 95 cb 7e d6 35 ae ab e9 37 37 72 Data Ascii: D\$`N#D}ha/xk?QxgO\|?+N>[}\|s;kqpmqe<o\U_Je)M39?^m??>S5/i-:oO?2@q{^LCs6UOr3K#AX6kNsu;Ou~577r
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: e7 4e 0e 8e 6a 40 94 88 c5 c8 13 99 04 09 19 15 20 46 41 16 5a ab 71 5b 91 6b 43 35 d2 3a 28 cc d7 58 e9 a9 ce b4 d1 22 69 64 20 02 09 19 34 da 8a 0c da 63 53 2d b1 c8 f5 e9 e5 b9 ad 63 1b 54 a4 2c ad 20 69 69 01 86 05 44 d1 a5 20 5a 25 04 8d 22 4b 48 0e 0c 09 91 32 26 97 30 ca 54 02 32 20 90 24 09 02 40 90 24 09 02 40 91 41 0c 25 a1 ca 21 44 40 89 60 9a 16 6c 4b 42 12 d1 24 34 49 22 2a 49 92 68 45 66 c4 25 8b 28 81 49 68 86 18 e4 a4 af 14 6a 56 76 8e 56 91 b7 3a 86 87 2c e1 0e a2 2c 74 63 cf 6a fb b7 f7 97 3e 26 6e be a6 f5 df 1c db bb 56 c9 5a ae 51 8c 3a e7 2c 99 a6 6b 1b 6e cd 46 2b 0b 9a 8e 75 a6 0a 42 77 7c 74 5e 83 3b 56 f4 9e 97 41 96 c9 90 a4 20 12 22 09 62 08 49 10 65 95 4d 5f 80 c6 36 70 9d 5c 56 88 e5 52 04 d1 28 a4 05 40 84 92 c9 a6 48 e4 09 Data Ascii: Nj@ FAZq[kC5:(X"id 4cS-cT, iiD Z%"KH2&0T2 $@$@A%!D@`lKB$4I"*IhEf%(IhjVvV:,,tcj>&nVZQ:,knF+uBw\|t^;VA "bIeM_6p\VR(@H
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 91 52 02 b0 26 28 c8 9a 02 cf 2e 7a 62 dd cd bf 0a 1d 75 b5 8d b7 9a bc ec b9 af 97 ed 38 af 0a ad 8e d3 59 1c 36 da ec d7 b7 a4 37 77 e8 46 77 ad 76 e7 a5 e8 5f 74 f9 a3 8c 77 ab 5b 11 8a 40 94 88 c6 8b 63 25 48 1a 8a 44 d3 43 25 6b 72 a5 40 a2 89 a5 2d c1 a5 82 32 2a 40 54 08 c8 a9 6c 15 29 01 86 28 c9 a5 20 a9 40 8c 89 91 04 88 81 10 a4 f6 14 81 44 4c 93 04 4f 61 08 14 44 09 8a 41 02 10 97 b8 a4 08 26 4c d6 6c d0 4b 21 59 b2 04 c4 54 3d 85 86 6c 45 4b d8 42 58 aa da b5 e9 a7 8b d5 99 b7 35 a9 31 1e 17 73 48 b3 6b 83 87 fb 8f 4e 95 e4 de 71 73 1d 1c d2 4c 93 20 40 92 c5 41 04 aa 45 02 00 8a 5e e2 03 5a 12 40 b3 4a 09 13 18 9e e2 d8 f3 3d 78 30 26 49 68 12 90 35 0c 8e 0c 0e 14 88 ac 10 12 2c d5 54 d9 c2 5c 59 4e 2a f0 71 64 ee 9b 95 8f 45 f8 b8 9d 26 9e Data Ascii: R&(.zbu8Y67wFwv_tw[@c%HDC%kr@-2@Tl)( @DLOaDA&LlK!YT=lEKBX51sHkNqsL @AE^Z@J=x0&Ih5,T\YNqdE&
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 28 a4 2d 45 a6 04 c1 29 30 69 a2 02 64 61 81 52 04 64 81 25 27 00 54 08 e4 89 8a 04 81 20 48 12 04 8a 41 02 08 6c 51 08 22 40 92 18 a2 11 48 82 1b 10 81 64 99 24 33 42 a5 93 35 0c 92 05 92 62 cd 66 c4 35 aa e9 af 8b d5 99 ad c9 88 64 69 13 2c 2e f5 37 19 ac c5 97 2f 72 b4 ad b9 38 37 a3 9f 71 c6 ce 8e 55 16 52 31 9a cc d3 20 90 d8 2a 4b 24 81 00 91 91 48 b3 50 48 85 11 32 f6 0e 0f 62 32 66 a5 34 fb 56 e4 86 6b 6b 3b 6f 23 92 f7 b5 dc b7 a7 05 c0 dc 98 72 b6 d4 08 34 09 48 94 32 85 68 85 87 00 4c 8a a9 5e ab 25 ed 0b 70 75 99 af 41 68 71 7a 14 88 ac 91 81 3a e8 d1 53 1b 5b 5a 3f 41 99 cd ab c9 ce 8d d6 5a 23 29 48 94 5a 32 d2 c0 9a 26 a2 d0 15 a2 31 48 1a 58 23 44 62 d3 06 94 08 c8 9a 60 56 08 12 04 95 20 55 24 8c 10 22 24 96 44 92 c8 92 59 22 02 45 25 b2 Data Ascii: (-E)0idaRd%'T HAlQ"@Hd$3B5bf5di,.7/r87qUR1 *K$HPH2b2f4Vkk;o#r4H2hL^%puAhqz:S[Z?AZ#)HZ2&1HX#Db`V U$"$DY"E%
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 0c d8 82 14 e1 cc a3 23 f1 d4 eb af 27 0d f9 b9 ec f5 83 4c 54 90 4b 62 9a d5 ca f1 5b 99 b0 c5 01 21 04 c9 48 91 49 26 6a 3c 4d 22 20 a4 05 60 4c 8a d0 13 04 09 2d 05 4e 4b df aa ee 36 5a 23 a4 9c 06 55 56 15 35 4c 9a 8d aa cc d3 1a a6 65 d1 aa 32 d4 68 98 16 86 49 a2 2b 44 94 05 c7 93 dd ca df 3d 4e 93 8c 73 db 85 6d 57 2a 51 8a d4 ab 4c 1b 8b 4c 92 d3 04 a2 2a 4c 12 c1 a3 02 a4 c8 a9 30 2a 04 72 44 e4 4e 4e 41 ac aa 49 18 03 22 09 64 12 39 60 84 b2 42 59 21 2c 91 0a 04 81 2c 91 02 91 29 92 59 29 16 72 52 00 88 25 b1 49 6c 42 48 5a 42 ca 5b 20 83 49 ad 14 2f 49 9a de b1 40 48 99 a8 6e 06 06 0d cb 93 6c 90 84 36 49 24 12 d8 84 08 0c 93 93 b8 d9 5b d4 6f 57 2e e4 71 1d 1c 49 92 41 a0 75 b7 4b f0 7b 85 8a 57 41 86 c1 24 31 44 22 a5 90 4b e4 21 22 0d 11 8b Data Ascii: #'LTKb[!HI&j<M" `L-NK6Z#UV5Le2hI+D=NsmWQLLL0*rDNNAI"d9`BY!,,)Y)rR%IlBHZB[ I/I@Hnl6I$[oW.qIAuK{WA$1D"K!"
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: e9 89 7d ad f2 3e 76 7b 9f 3b b9 bf 5e d9 7d 4e d7 6f a3 5c 3b 13 39 bb c6 77 a7 de af ad 1a 95 cf 6d 58 c9 a6 72 72 18 4b 4e 48 8d 39 12 c8 84 04 d6 84 65 68 ac 90 61 ae a6 89 a7 b3 32 d4 aa 4e 00 ac 09 a6 45 c1 65 16 b2 e4 ce b1 c2 ce 24 29 49 b4 e5 03 52 ba a9 75 64 73 b1 b9 72 d1 30 6a 55 a6 0d 2e 49 1a 64 94 98 23 02 a5 6e 65 83 95 4c 82 32 27 20 72 64 72 09 1c 92 39 0c 11 d4 58 47 d4 58 43 a8 b0 87 51 61 0e a2 c2 2e a2 c2 12 58 45 22 1e 47 9f 76 7d cf 98 f9 2f 99 f6 5d 9f 73 97 b4 ef 3b 8e db 25 7b 4e e7 0d ed 8e f4 cb 13 46 ad 56 9a f7 92 9d 76 3d df 2c f2 34 f1 fc ae df 73 b9 ac db 59 b4 ea 96 66 5d 7d 3c 2f d0 f1 7c cb b1 bf 91 e3 77 3b 7d bd ae bb 5d 6e 2c b8 b3 6f 47 19 f4 bf 12 5b e6 af 9b 29 6b 52 ff 00 32 79 b5 6d 56 d5 aa fb cc e9 a6 b7 4f Data Ascii: }>v{;^}No\;9wmXrrKNH9eha2NEe$)IRudsr0jU.Id#neL2' rdr9XGXCQa.XE"Gv}/]s;%{NFVv=,4sYf]}</\|w;}]n,oG[)kR2ymVO
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 83 95 c8 11 25 85 91 d4 8b 07 27 d4 8b 0b 23 ab c4 b0 b2 97 91 2e 32 f9 0e 05 d9 8d b2 59 f8 2f 03 53 56 6e d5 c1 db 79 be 6c 51 4c cb e3 51 7d ef bc be b3 ae fe 3c bc b8 3c fd bf 2e eb c2 f1 8f 7b 07 77 83 b9 53 8b 22 b3 5b d3 66 bd 28 f2 ed db ba f3 7b 74 ee eb bf 27 47 51 9c 37 92 ea 2c 2c 97 51 60 14 b1 44 49 f3 ff 00 35 79 4d 3c fb e5 ef 37 f2 96 93 bf 77 db d9 60 9e 19 6b ef e2 7e ab a4 7d 4f 92 f9 d7 c1 f3 3b 5d ff 00 46 bb 4c fe 5b c3 6f ba d7 cc f9 cf 83 3c ef 0f bb d8 f4 ed ad c7 e6 9c 75 fb e4 7e 14 69 d5 ba d9 3a da ae 2d 57 a3 4d 1f d2 72 cb 33 1f ce 16 59 71 5f b3 3f 4e 3c e9 f9 df ca 1e 55 9a f7 eb ee 3b 2a 7e 4b b9 e2 fa b0 45 6a df 8b a7 4b f5 9f cf df bb 7e 5f f0 7f 32 ee 6b 27 e1 da f5 cf 66 dc 6f d9 b6 67 d4 fd f3 f6 a7 cc 3e 33 e5 dd Data Ascii: %'#.2Y/SVnylQLQ}<<.{wS"[f({t'GQ7,,Q`DI5yM<7w`k~}O;]FL[o<u~i:-WMr3Yq_?N<U;*~KEjK~_2k'fog>3
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 2e 6e 8a 61 7b dd ff 00 0a 33 76 6e 6a dd 24 94 25 08 cb 40 86 52 de 82 32 81 45 24 90 d8 8a f9 b8 67 ad f3 c4 3e 64 8a 09 08 24 20 b2 97 8e f9 31 59 5f 1d dd 2c b6 b2 d0 2c 97 85 3a ed 65 cc 7b bd af 9c d9 45 3b aa cf fe 6d 77 f5 af a8 f3 6f e3 ff 00 a5 ec ed f9 7e 8d 9e e6 2c d8 b3 57 af 15 d5 eb cd 7e f3 cb b6 b7 5e 6f 6e bb cd a6 63 c4 f9 a7 ca 57 9e fc bf e6 de 54 d2 77 ee bb 7b 7e 5e 78 65 a7 bf 8d fa ae 91 f4 fe 4b e7 5f 07 cc ed 77 fd 1a ed 33 f9 6f 0d be eb 5f 37 e7 3e 0f c7 78 7d ce cf a7 6d 78 7e 69 c7 5f be 47 e1 f6 9d 5b ad 93 56 ab 86 9e e9 a3 fa 42 5c f1 8f e7 4b 31 c2 bf 63 7e 9e 79 cb f3 af 94 bc ab 35 af d5 9f b4 a7 e4 fb ae 7d 78 3d d4 df 8b a7 4b f5 9f cf ff 00 ba fe 5f f0 7f 31 ee 6b 27 e1 da f5 cf 66 dc 7e eb 99 f5 3f 7b fd ab e7 fc Data Ascii: .na{3vnj$%@R2E$g>d$ 1Y_,,:e{E;mwo~,W~^oncWTw{~^xeK_w3o_7>x}mx~i_G[VB\K1c~y5}x=K_1k'f~?{
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 02 0a 48 10 a2 92 59 45 88 65 04 2a 0d 27 93 07 a1 e5 11 e0 48 47 81 21 1e 04 8a 09 02 42 08 02 44 48 02 04 9a e2 cd 97 0b 9c 77 75 e6 b8 3f 4a 0d b5 97 9b 5a ed 75 e4 f5 b0 79 95 2d 15 cc be 1d bf 12 db fb 0e 1b 76 6f a1 ea d3 c8 97 9b d1 56 56 49 d5 a6 9e cd 6a 71 c3 be 72 56 63 03 0b 1b 8c 57 35 de e3 05 57 6a fd ec 9e 84 5b 8d 1d 6d 98 74 26 22 a6 49 92 6c 12 18 a0 49 0d 8a 21 09 6c 59 66 c4 54 bd 84 33 10 9b 6b a3 db 90 c0 e0 cb 8b a1 ca fb 0f e8 3a 6b b6 5c 37 d3 0c 4d b0 44 81 2e 44 dc 68 41 22 41 02 24 42 cb d4 4c e0 f5 9c 92 ca 93 2c 13 90 c2 12 58 2a 24 00 ae 89 d9 c2 f5 85 e0 64 cb b2 a9 55 42 f5 9c ed 75 93 06 04 c9 06 c8 09 22 a4 c8 19 10 48 c9 11 23 92 46 d9 27 1e 6c 3b de 8b fc 48 de bb 39 ed af a6 39 1e a9 ae 6a 19 d1 cf 9b e7 9d da 6d 3d Data Ascii: HYEe'HG!BDHwu?JZuy-voVVIjqrVcW5Wj[mt&"IlI!lYfT3k:k\7MD.DhA"A$BL,X$dUBu"H#F'l;H99jm=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	49974	142.251.15.103	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	978	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&co=aHR0cHM6Ly9yZWdpb25hbC1leHByZXNzLmZyOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=bhz08cuqamvl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:18 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-OViVr3lRACmcYdbn5W8QPA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 14:06:18 UTC	364	IN	Data Raw: 32 61 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2adc<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-23 14:06:18 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-23 14:06:18 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-23 14:06:18 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-23 14:06:18 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-23 14:06:18 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-23 14:06:18 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4f 56 69 56 72 33 6c 52 41 43 6d 63 59 64 62 6e 35 57 38 51 50 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="OViVr3lRACmcYdbn5W8QPA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-23 14:06:18 UTC	1255	IN	Data Raw: 44 36 63 62 4d 75 32 74 5f 69 79 30 79 53 77 53 78 30 37 72 54 68 6e 47 46 5f 68 5f 70 5f 45 6c 37 61 69 37 75 33 45 4d 69 47 78 77 6a 42 77 36 35 31 66 30 72 37 75 53 68 49 53 2d 4d 54 59 35 5a 34 72 70 59 5f 6d 7a 55 52 4b 6f 43 75 34 70 73 77 63 6f 72 5f 6c 41 30 35 6a 70 49 43 56 71 4e 4b 73 38 67 65 6d 4d 39 5a 77 5f 44 67 6b 43 63 51 4c 7a 35 6b 4f 61 78 73 56 4a 54 43 33 57 71 59 76 44 52 49 6a 6e 69 55 44 6a 34 66 58 79 65 57 6d 71 5f 65 31 31 77 42 6c 63 6a 73 63 62 4c 4c 39 65 39 48 34 70 48 48 69 75 66 30 33 43 6e 30 65 6e 78 54 45 6d 54 44 51 51 6a 30 39 54 57 66 79 67 33 74 67 6c 78 32 79 39 5a 54 42 47 59 63 36 50 65 31 38 62 5a 4a 6d 63 49 6d 61 6c 34 36 73 63 78 61 75 6d 79 62 33 65 65 68 34 75 63 78 56 67 2d 6a 6e 6d 35 61 49 7a 2d 68 59 Data Ascii: D6cbMu2t_iy0ySwSx07rThnGF_h_p_El7ai7u3EMiGxwjBw651f0r7uShIS-MTY5Z4rpY_mzURKoCu4pswcor_lA05jpICVqNKs8gemM9Zw_DgkCcQLz5kOaxsVJTC3WqYvDRIjniUDj4fXyeWmq_e11wBlcjscbLL9e9H4pHHiuf03Cn0enxTEmTDQQj09TWfyg3tglx2y9ZTBGYc6Pe18bZJmcImal46scxaumyb3eeh4ucxVg-jnm5aIz-hY
2024-04-23 14:06:18 UTC	1255	IN	Data Raw: 5f 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 4f 56 69 56 72 33 6c 52 41 43 6d 63 59 64 62 6e 35 57 38 51 50 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 47 4d 33 51 79 63 6b 35 36 4e 32 4a 6e 62 44 5a 49 51 6b 56 50 61 32 4a 77 62 6d 45 79 51 57 39 54 4e 47 64 6b 62 47 70 36 4d 57 4a 6a 51 55 39 4f 57 57 78 59 63 6d 35 46 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 63 33 64 4a 54 55 78 7a Data Ascii: _"><script type="text/javascript" nonce="OViVr3lRACmcYdbn5W8QPA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9GM3Qyck56N2JnbDZIQkVPa2JwbmEyQW9TNGdkbGp6MWJjQU9OWWxYcm5FLmpz\x22,\x22\x22,\x22c3dJTUxz
2024-04-23 14:06:18 UTC	576	IN	Data Raw: 56 6d 4a 59 56 30 78 33 51 6b 35 56 54 6e 55 34 5a 6c 52 54 56 44 4d 78 63 54 42 36 53 32 6b 31 52 55 63 7a 63 44 46 4c 55 32 46 4b 61 44 6b 35 51 31 70 73 61 56 6c 79 5a 48 68 58 4e 31 4a 58 55 69 74 5a 4c 7a 64 46 52 7a 5a 5a 59 55 39 52 57 6d 70 42 55 46 56 6f 61 57 64 68 5a 57 77 30 4f 54 56 54 64 46 5a 32 53 6b 4a 34 4c 32 64 4c 5a 47 52 4d 57 54 6c 54 5a 33 70 75 51 58 46 68 54 31 70 56 63 57 51 30 57 57 68 33 4d 33 6c 72 51 7a 4e 43 65 45 78 51 59 57 35 78 62 43 73 32 62 57 35 55 4c 33 6b 79 55 6b 4d 35 57 43 39 79 61 6e 6c 6f 4b 7a 4a 47 4e 6d 68 36 54 6e 4a 52 52 6b 51 7a 4f 54 46 70 56 44 4a 34 4b 30 30 32 5a 6c 70 6d 57 44 6c 35 54 47 46 48 55 56 64 78 52 45 49 34 4d 6e 52 68 64 55 74 68 61 58 4a 4c 4e 6b 39 49 55 6a 46 69 59 33 70 52 53 48 6c Data Ascii: VmJYV0x3Qk5VTnU4ZlRTVDMxcTB6S2k1RUczcDFLU2FKaDk5Q1psaVlyZHhXN1JXUitZLzdFRzZZYU9RWmpBUFVoaWdhZWw0OTVTdFZ2SkJ4L2dLZGRMWTlTZ3puQXFhT1pVcWQ0WWh3M3lrQzNCeExQYW5xbCs2bW5UL3kyUkM5WC9yanloKzJGNmh6TnJRRkQzOTFpVDJ4K002ZlpmWDl5TGFHUVdxREI4MnRhdUthaXJLNk9IUjFiY3pRSHl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	49971	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	621	OUT	GET /wp-content/uploads/2023/03/POP-labels.png HTTP/1.1 Host: envoye-special.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:18 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Type: image/png Content-Length: 46042 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 10:41:52 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:18 GMT
2024-04-23 14:06:18 UTC	5536	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 b3 00 00 00 71 08 06 00 00 00 c6 58 2b 8d 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec 5d 07 60 14 d5 16 3d 9b de 13 d2 a9 a1 04 02 48 95 de bb 22 88 14 1b 45 05 3f 22 8a d2 a5 4b 11 14 45 90 0e 2a 58 40 54 14 10 14 50 8a 74 a4 f7 de 6b 08 04 02 81 f4 be fb cf 9d cd 42 12 52 36 c9 6e 12 c8 3c 5c 93 ec bc 99 79 ef ce cc 7b 67 ee 3b f7 5c 8d 8e 05 6a 29 34 16 d0 b0 14 9a ce aa 1d 55 2d a0 5a 40 b5 80 6a 01 d5 02 aa 05 9e 7a 0b 68 54 30 fb d4 5f e3 54 1d 54 c1 6c e1 ba de 6a 6f 55 0b a8 16 50 2d a0 5a 40 b5 c0 d3 6e 01 15 cc 3e ed 57 38 4d ff 54 30 5b c8 2e b8 da 5d d5 02 aa 05 54 0b a8 16 50 2d f0 94 5b 40 05 b3 4f f9 05 4e db 3d 15 cc 16 b2 0b ae 76 57 b5 80 6a 01 Data Ascii: PNGIHDRqX+sBIT\|d IDATx^]`=H"E?"KE*X@TPtkBR6n<\y{g;\j)4U-Z@jzhT0_TTljoUP-Z@n>W8MT0[.]TP-[@ON=vWj
2024-04-23 14:06:18 UTC	7240	IN	Data Raw: a9 02 dc 2c 2e 02 d3 ea b4 a5 f7 fb 5b 0e 5f 25 39 46 5d a0 bb 63 a0 15 c2 b7 27 c2 a9 23 ed cb 85 e4 a8 bf 38 0b d9 25 c2 c1 86 9c 49 9b 24 68 92 6c 60 2d e8 85 9e 5b 14 d1 40 db b3 14 22 7f cf c6 b5 36 49 55 53 cf 09 26 69 54 2e 0f 22 f3 d2 fa 75 3b 30 64 e0 dc 54 47 7a e3 ad d6 18 35 a6 4f aa 60 e2 fb d1 a1 18 bc a5 17 15 0a 6e e6 f2 ac e9 ef ee 68 e5 8c f7 aa 8c 42 50 e4 55 fc 76 91 1a 21 e9 14 95 33 9b 0d d3 07 c6 c4 a0 d3 a1 03 b8 48 15 03 43 e9 ec e3 8b 85 55 ab c1 3a 1b 49 11 e4 26 b9 f4 ca 48 d8 96 2d 86 12 9f 7f c8 90 81 d4 9c 13 01 a8 11 db 0e e3 de cf eb a0 61 96 8c 92 d3 06 22 68 f4 d7 b0 29 5d 14 4e 0d aa 12 04 9f 85 25 53 be b9 75 68 8a bb df ff 45 79 ac 35 d0 31 6a 5d 40 ec ed 2f 7e 42 c9 79 c3 70 f3 e3 6f 50 72 f6 50 38 37 a9 99 8d 1e 3e Data Ascii: ,.[_%9F]c'#8%I$hl`-[@"6IUS&iT."u;0dTGz5O`nhBPUv!3HCU:I&H-a"h)]N%SuhEy51j]@/~BypoPrP87>
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: bf 37 85 42 28 b2 da a3 2f 92 c1 ac fc 86 d9 4a a6 31 29 92 dd 2c 3e e8 0e 1c eb 3c c3 24 0a 8f bf b5 49 9d 9b 04 b0 bd 4e 1c c3 76 ea f7 4a f9 af 5e 7d d4 71 75 43 4d a6 0c 3e 1d f5 e8 d8 86 73 ac 7d b6 36 1a bb b8 60 c9 7f fb d1 a7 45 23 a3 01 9d b9 26 45 53 0d 5c 7a 30 4b 57 d0 b9 ab 38 43 4f f7 42 da 2c 25 b7 35 15 98 5d b5 19 61 f1 5a f6 3d f3 48 d3 b4 57 d7 86 81 61 31 4c bc a0 2f 8f 02 ca 8c bf 0b d4 9a aa 05 f2 d6 02 e6 7a 6e d3 eb 05 23 83 98 42 d5 a6 3f 59 e5 03 3d 09 be 98 01 4c 23 f4 02 49 65 cb 40 26 a3 29 06 f2 54 c6 33 05 2b 29 03 bd 6a 20 22 43 ef 2a 23 9b 9c 09 93 7b 59 c1 42 3c b5 55 f9 b1 93 e7 92 fc d9 a4 18 68 37 45 20 b2 67 fd 02 2c d5 b5 95 ed f5 83 63 13 2b 58 0e 21 4a 6d c1 f6 df 27 28 3d c0 df fd 68 2d 2a 0d e0 9a 0e 49 e4 ab 5a Data Ascii: 7B(/J1),><$INvJ^}quCM>s}6`E#&ES\z0KW8COB,%5]aZ=HWa1L/zn#B?Y=L#Ie@&)T3+)j "C#{YB<Uh7E g,c+X!Jm'(=h-IZ
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: 98 3d ff e5 38 bc fd dd 12 9c 0e ba 8d 5d e3 06 e3 87 ed 7b f0 f5 e6 ff 30 bc 7d 6b 45 a2 eb d7 bd 07 15 c0 fb e5 df 9b 14 30 2b 6a 06 cd 3e 9b 89 07 d1 31 0a 98 95 a0 2f f1 f0 9e 99 f2 31 ba cf fb 11 a7 6e 06 63 5e cf d7 d0 91 51 fb 69 c1 ec ef 7b 0f 51 59 61 89 e2 05 1e df b9 1d 03 c0 3e 61 44 9f 03 36 8d ea ff 90 33 fb cf 47 ef a3 d6 b8 29 f4 ea 96 c1 f2 01 ef 28 13 a9 29 3c b3 86 8b 14 4f c0 65 cd 91 37 96 13 61 d2 bd 30 58 17 f3 82 4d 29 b2 cd 52 10 c2 e5 9c f7 39 41 ee 20 95 e0 1f 66 f6 da 42 4f 6b 20 03 be 32 2b 76 dc 7f 7a 40 45 f4 26 d5 20 65 b9 cb 49 fb 4f 72 6b 5f f3 2d 0a 17 aa 1a 64 b7 98 6b 52 34 f5 c0 65 f0 98 9d 66 10 d8 d2 eb b7 30 b1 8a bf 02 dc 14 6a 06 bd e0 67 08 60 ba ee 39 c6 00 b0 1c a8 19 90 9e 70 be 5d 63 5c 88 88 46 0b 6f f7 6c Data Ascii: =8]{0}kE0+j>1/1nc^Qi{QYa>aD63G)()<Oe7a0XM)R9A fBOk 2+vz@E& eIOrk_-dkR4ef0jg`9p]c\Fol
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: a4 6c 16 a8 43 ab 9b 00 ec 22 b5 a0 51 2f fe 4d 89 2d 0d 71 af 21 f9 81 ee 0c c1 2c 55 0b b4 cd f8 3d d5 0a e0 c2 fa f4 70 eb e6 b0 0a 15 1e 06 48 da da 02 59 cc 35 27 14 84 ce de 8f b9 87 91 db df c3 0d 8e d7 52 26 d4 9b 8d da c5 45 46 32 7d 3c 11 4d 1a e5 86 f5 7b f0 ed 37 2b 70 ed 4a f6 df e9 be 5b 34 12 8d 1a 89 84 b0 5a 32 b2 40 8e c0 ac 6a ce 74 06 54 7a 97 47 9e 3f 87 15 c1 b7 4c 9e aa a6 bc 83 03 c6 96 f5 c7 ab 45 a9 f8 98 0b 20 2b ad 36 d7 a4 68 b6 81 4b 5e 56 14 08 22 45 bf 14 9c 5f 34 03 01 88 fb 02 97 91 27 3b 11 e5 3c ea a1 4f 6d 3a 45 94 86 65 ec 59 34 78 4a 2f 87 ee 27 88 eb 0d 1f 06 86 0d 68 f4 07 5f d2 ac f5 60 f6 f8 18 74 ad 3e 85 de cb 8a f8 f3 f4 67 b8 c2 7a fa 62 e8 b5 86 4b f1 2d d0 f9 99 f1 9c 5d bd 94 2d 06 b0 f5 f9 76 4a b3 08 cd Data Ascii: lC"Q/M-q!,U=pHY5'R&EF2}<M{7+pJ[4Z2@jtTzG?LE +6hK^V"E_4';<Om:EeY4xJ/'h_`t>gzbK-]-vJ
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 80 d1 60 56 06 75 e1 c8 4a 76 2e 19 1a 3e 68 dd 0c 0d ca cb 6a c8 a3 92 48 30 37 90 49 0c 44 3b 76 50 5b 7d 74 b2 d0 05 d6 90 d3 fa fb be c3 e4 d4 25 a0 79 c5 f2 e8 d9 a4 1e dc 18 88 75 fc 7a 10 be a7 da c1 85 db 77 50 8b 3c da be 2d 1a a3 28 bd 1d 93 56 ad 53 ce 31 f8 85 56 08 61 f2 84 6f b7 ec c2 e9 9b b7 14 ce 6c df 96 8d f1 eb ee 03 d8 77 e9 ea c3 13 8b ee 6c b5 92 c5 b0 86 3a b6 1f b2 5d 55 f9 fb 46 a6 c4 95 54 af 72 ce 86 6c a7 70 69 ed 18 fd 3f e8 e7 15 8a 4c d8 1b 8d ea e2 67 72 73 f7 5e bc aa 28 2d 48 3b ae df d3 d3 04 1c e9 6f f8 98 29 74 45 1e 2c bb 45 ec 74 2c 3c 1c 13 2e 5d c0 41 6a ec 86 24 64 9f 97 2f 81 2a 01 94 dd 7a 87 94 82 b7 8b 97 50 96 51 4d 55 cc 35 29 e6 d5 c0 65 f0 d4 25 68 63 e1 fd d7 6e ca 28 65 9f 83 64 4b 30 1b f9 4a 0b 02 18 Data Ascii: `VuJv.>hjH07ID;vP[}t%yuzwP<-(VS1Vaolwl:]UFTrlpi?Lgrs^(-H;o)tE,Et,<.]Aj$d/*zPQMU5)e%hcn(edK0J
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 30 ab 0c 72 07 18 fe fa fe a2 09 c3 8f 96 29 53 a6 9d ad ad ed 6c 1f 1f 6f 5f 7b 7b 87 26 f5 eb d7 a7 f8 7f ce 8b bc 3a 5d 83 8b 80 c3 61 04 9a 94 c0 d0 ec a0 7a c1 28 86 89 5e 61 44 05 83 a7 e2 ce 96 46 fc 05 9e c4 49 98 e4 7c 4d 24 af 37 d1 51 0b 9b ff 71 fb 20 82 db 40 82 d9 57 4b 22 ea 84 b4 82 28 d7 c6 11 0e 55 2c 60 d5 9b c7 ee ca ed df f0 73 83 80 56 ce 21 59 ba 36 f1 c3 40 2c bc 2c e0 98 eb 1f bb a4 0e 7f 3d 6b 85 a8 eb 0c 0e eb ce e3 7e c2 7d e9 e9 d5 fd 40 d7 e9 8f c5 10 41 7a 85 94 59 24 39 4a 82 03 25 7d ad a1 90 ab a2 9d 46 d0 4a 6e 90 ad a0 94 4f b8 5d 80 33 69 bf ba ad fc 29 9e 5b 89 72 ae 90 fc 1d a3 24 13 09 80 87 c9 52 c2 13 55 f2 6a 4e c8 6b a3 1c bc b1 17 e3 f7 e9 03 79 9f f7 eb 82 fe b5 46 e5 78 9e 16 2f ed bf 1b 77 e3 db af 57 e2 d2 Data Ascii: 0r)Slo_{{&:]az(^aDFI\|M$7Qq @WK"(U,`sV!Y6@,,=k~}@AzY$9J%}FJnO]3i)[r$RUjNkyFx/wW
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 37 ad 81 f6 45 25 b0 2e 73 79 30 b9 ff 16 5f b9 89 ff ed 3f a1 7f 79 e2 7f 77 bb b4 84 2b c7 34 fb e5 1b e1 64 63 8b 5b 1d 9a 28 14 83 b2 54 4a b8 ce 97 7f 49 cc e1 4f e9 3f 63 5f 78 32 eb 8d b9 9e 5b 63 2d 38 81 0f 0a d5 02 5e f1 86 e5 8c 0a b0 f4 2d 4e 7b d9 2a 81 85 a9 9e b0 fb f4 90 7e 48 4d d7 df 3e 99 30 81 59 8a dc db bb b9 b9 4d f1 f7 f7 af 18 10 10 a0 b1 b1 b1 69 e6 ec ec 2c 6e f1 5c 15 86 26 ba 58 c3 69 00 3d a2 23 e4 01 e6 b3 2f 5e 51 91 ba 62 c0 95 6e 9a 06 11 0b 49 92 79 70 05 2e 4c 37 8b c9 fc de 96 97 2b 92 6d fd 87 1e e3 29 7e 88 3e 46 aa 82 07 c5 d5 78 0c 49 48 80 32 72 39 49 55 98 97 88 c4 45 65 11 1b 78 8d 12 5c d4 d2 a1 07 55 d3 8c db 2d 78 5c 01 a5 87 59 bf 0d 3f f4 00 2b 00 f9 1e 7f 9f ac a1 c2 01 11 e9 03 fe 9e 66 ad 78 32 9d c3 8e Data Ascii: 7E%.sy0_?yw+4dc[(TJIO?c_x2[c-8^-N{*~HM>0YMi,n\&Xi=#/^QbnIyp.L7+m)~>FxIH2r9IUEex\U-x\Y?+fx2
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: 7a 54 bd 45 64 2a 97 b1 54 8b 4b a1 09 25 a5 20 40 71 6d 25 63 03 65 ea 09 82 27 d5 64 c0 79 d6 db 8d d7 fc 2f 32 06 0d 59 bf 24 73 38 f6 54 43 d5 be fc de 23 37 1a 7f 73 3d b7 f9 7d af 7c 0c c7 12 44 7d 13 82 18 78 c5 c4 d2 44 80 5c 04 66 01 b3 04 7b e7 6d 90 fe 5a 09 d2 0b 68 1e e3 94 29 53 1a 7b 78 78 fc 50 ae 5c b9 52 95 2a 55 02 83 c0 28 45 94 d2 c6 c9 c9 89 9e c8 56 9c 30 24 ba 3f 65 0f b0 3c 4f 71 ee 33 70 79 87 57 99 4a 8b 33 08 ca 38 90 db f8 df 65 dd c6 3f 05 e7 66 04 ba 5f 70 40 08 22 8d 57 0c 48 7d 82 d2 5c ae 3c 67 02 47 8d 0a 07 c6 61 97 11 2b 82 ae 6a e5 32 82 48 b3 33 1c fd 8c b0 f9 89 77 6f 63 71 1b f0 0e 3e cd 7f 13 7f c3 8d ef 8a 2d 49 88 6d c5 51 55 e9 9a b8 6c 76 b0 82 2b 83 cc 0c 1f f0 58 4a 70 19 97 51 59 f9 15 2e a3 e4 e6 31 95 29 Data Ascii: zTEdTK% @qm%ce'dy/2Y$s8TC#7s=}\|D}xD\f{mZh)S{xxP\RU(EV0$?e<Oq3pyWJ38e?f_p@"WH}\<gGa+j2H3wocq>-ImQUlv+XJpQY.1)
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 94 e4 96 e5 28 26 6a 38 17 a5 25 67 b1 25 27 4f 12 29 94 2a 2a ef 9e 3b 53 12 f6 9f c0 a9 97 06 22 4d 4d ae 74 31 30 c3 50 d0 4f a3 e1 58 85 54 ab 42 2c f7 3a 98 55 61 24 fc 6f 3e 75 55 05 ec 99 fc 9d f9 b2 80 00 0e 67 02 ad 41 cd d7 2a ed 56 29 ab 42 66 61 e5 71 5d 9c ff c6 d5 98 e0 8f 3a c8 95 40 b6 67 83 f9 04 b4 72 0f 68 c1 41 99 1e 4a 4e bf c9 97 f1 f3 de 0f 70 92 5e 4e 3b f2 4e cb 78 3e 8a 20 8f 60 78 31 b3 95 24 57 90 94 b2 92 15 2b 22 fe 0c ef 75 07 bc 19 fc 85 02 be 59 b6 66 a9 1b fb 97 0a 0a ab cc 04 02 87 2f af 21 00 b2 47 0d bf 27 55 66 2c 7b 9b 22 2a a5 ac 64 ec 92 0c 60 0e b6 45 14 ad c1 cd 9e 90 c2 44 81 c8 9e 01 4c f3 04 9f 8f 39 4a af eb 9b 54 7e 48 42 05 82 d9 4a c5 9a ab 6c 5b 57 13 2f e0 40 f8 4a 1c 0c 5f ad b2 85 75 20 00 af e1 a7 ed Data Ascii: (&j8%g%'O)*;S"MMt10POXTB,:Ua$o>uUgAV)Bfaq]:@grhAJNp^N;Nx> `x1$W+"uYf/!G'Uf,{"*d`EDL9JT~HBJl[W/@J_u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	49973	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	623	OUT	GET /wp-content/uploads/2023/03/POP-ensavoir.png HTTP/1.1 Host: envoye-special.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:18 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Type: image/png Content-Length: 1466 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 10:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:18 GMT
2024-04-23 14:06:18 UTC	1466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b6 00 00 00 2c 08 06 00 00 00 c8 0d 42 21 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 71 49 44 41 54 78 5e ed 99 6b 88 55 55 14 c7 d7 7d cf 1d e7 a1 89 15 66 0f 46 31 54 04 25 2d 0b 32 3f 24 d4 87 a4 c8 1e 44 a2 10 69 f8 45 c2 32 41 24 4c 02 7b 11 11 44 1a 51 16 44 2f 0c 94 28 51 c8 ac 86 5e ea 84 a5 30 3e 7a 69 68 56 e3 dc 19 67 bc ef ee 5a b4 0e e7 ec 73 ce 3d 67 38 97 66 df 3d eb 7e 19 98 bd cf 3a 7b ff d7 6f af bd d6 3a b1 be 75 5d 55 90 9f 28 60 98 02 31 01 db 30 8f ca 76 48 01 01 5b 40 30 52 01 01 db 48 b7 ca a6 04 6c 61 c0 48 05 04 6c 23 dd 2a 9b 12 b0 85 01 23 15 10 b0 8d 74 ab 6c 4a c0 16 06 8c 54 40 c0 36 d2 ad b2 29 01 5b 18 30 52 01 01 db 48 b7 ca a6 04 6c 61 c0 48 05 04 6c Data Ascii: PNGIHDR,B!sBIT\|dqIDATx^kUU}fF1T%-2?$DiE2A$L{DQD/(Q^0>zihVgZs=g8f=~:{o:u]U(`10vH[@0RHlaHl#*#tlJT@6)[0RHlaHl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	49972	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:17 UTC	620	OUT	GET /wp-content/uploads/2023/03/POP-tiret.png HTTP/1.1 Host: envoye-special.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:18 UTC	273	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Type: image/png Content-Length: 939 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 10:41:52 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:18 GMT
2024-04-23 14:06:18 UTC	939	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 24 08 06 00 00 00 89 f3 1a a0 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 03 62 49 44 41 54 48 4b 8d 96 5d 48 14 51 14 c7 cf 99 75 57 ad d0 d9 b5 4c fc 40 67 b0 87 82 f4 b9 f0 a1 42 83 a0 8c 14 41 08 ad 28 2a 08 a1 8d dd 2d aa 07 8b 88 dc 11 7d d1 30 1f 22 4c 8a d4 b2 22 2a e9 a1 5e 84 b0 a0 22 24 d0 da d9 ca ec 83 76 fd 40 13 76 dc b9 9d d1 0a cd b9 eb 1d 58 76 99 fd df df 9c 7b ce ff 9c 3b 38 16 50 87 00 60 1d 7d 6c 2f c6 d8 45 b7 a6 9f 45 00 c6 d3 2c bc 8f d1 80 72 06 01 2f f0 c4 04 7a 82 46 ac 3a bd 79 24 2a 06 f4 29 45 20 61 3f 2d 5c c5 89 f1 2b cc c2 0e 77 93 fe 46 08 f8 cd b7 36 d3 25 ad b8 4d 51 96 f0 76 6d 32 f3 68 86 16 6e 17 02 76 55 81 a3 ac 40 69 00 04 2f 00 4a f6 Data Ascii: PNGIHDR$sBIT\|dbIDATHK]HQuWL@gBA(-}0"L"^"$v@vXv{;8P`}l/EE,r/zF:y$*)E a?-\+wF6%MQvm2hnvU@i/J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	49975	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	708	OUT	GET /wp-content/uploads/2019/08/SF1.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:18 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Type: image/jpeg Content-Length: 150073 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:18 GMT
2024-04-23 14:06:18 UTC	4086	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:18 UTC	4344	IN	Data Raw: b0 c6 5e cf 72 dd 89 bc 84 e0 ac 93 df 2d 09 99 e0 b6 47 55 72 d6 93 86 8d 54 92 38 29 ad 2b cb 8f 0d 24 2b 6e 58 fe de de 93 6d 7f 85 b8 e9 68 22 70 22 94 fa 45 1d 37 a2 d4 d0 12 0f 0d ab c3 4d 0a e3 8d 7b 26 03 2e b1 19 99 6d 9c 9e ae bd 81 1e 5f 86 99 29 48 7f 72 24 13 41 6f 94 b6 01 9c 15 92 bb fe 92 0f 0e 7a cb 32 f2 c9 a6 37 ac 1a 15 f5 da cb 8f b2 b8 56 32 2d cc 68 ca 68 1b 62 01 27 4e a1 63 31 ee 18 88 8e 49 e3 a2 8a 75 19 64 35 00 f8 28 d5 5f 62 69 b9 df b7 f7 c8 71 d9 fb 46 2c 1c 3c 77 3e bd da 8b e9 6f cb 5c d8 34 36 cd a8 be fb b0 fa a8 83 c6 48 79 a2 12 44 08 e6 bb 57 6f 2d 75 35 2a 0e 7a b8 60 7f 6f 32 2d 71 69 7d 80 96 5e b6 96 27 68 00 14 21 96 b5 df e2 34 a8 f4 2f 2a 2e b6 d3 3d a5 91 2c d4 31 c8 00 3c c5 4f 03 5d 5b 32 4c 2e e0 05 65 74 Data Ascii: ^r-GUrT8)+$+nXmh"p"E7M{&.m_)Hr$Aoz27V2-hhb'Nc1Iud5(_biqF,<w>o\46HyDWo-u5z`o2-qi}^'h!4/.=,1<O][2L.et
2024-04-23 14:06:18 UTC	4344	IN	Data Raw: 20 31 6e 9f e6 0a 78 1d f4 5e f0 a0 2b 59 d5 97 2e de b6 8b 1c 5a 28 e7 10 7f 45 b6 4b 89 2e 05 09 8a 49 40 40 a6 9b 7b 8c 2a 00 1f 20 af ea d5 52 b0 2b b9 43 c6 65 b8 c9 58 b0 55 96 d3 b6 4b 41 04 0e 7f dd c9 5c af bb 73 23 1f d4 22 56 5a 1f 13 53 ad 1b 9b 78 12 b6 f1 1e 83 2b d0 62 9a da 47 5b 58 20 4b 5b 3b df fe 64 af 22 c6 59 18 8d c4 9d 44 81 4d 86 f5 d3 4c 4d 09 c9 04 b6 b2 37 cb 08 96 0c 9d cc 56 37 16 81 99 0a da b8 90 44 a0 8a f0 10 f5 53 55 66 24 b5 01 bb 5f a7 ee 6c 19 f6 0c 71 c7 10 b4 ba 80 d2 a6 3b e5 e8 6e a3 e7 fd bb 6a 1e e8 6b 5a b2 bd ef a8 b8 ca 0b 5e a8 e2 59 96 e6 38 ea 0a 09 ad a5 f6 1d 8f 80 34 f5 79 6a 27 78 2e 36 92 fb 73 ec 3e 1b a6 c6 e6 48 a5 ed e9 63 6b 0c 82 7a 99 4b 8a ca 58 6e 4a 31 a5 47 95 69 ab 7b 19 ad fc 49 1b 3c ae Data Ascii: 1nx^+Y.Z(EK.I@@{* R+CeXUKA\s#"VZSx+bG[X K[;d"YDMLM7V7DSUf$_lq;njkZ^Y84yj'x.6s>HckzKXnJ1Gi{I<
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: d9 c1 23 77 7d 15 f3 de c5 14 ef 10 bb 2c ac 19 4b 48 22 88 7b 69 08 55 fc a8 45 38 1e 27 6d 5d 93 21 28 16 bd 65 ac b0 b6 bd 33 2a 15 45 b4 2c d2 19 03 7f b8 f2 c8 6a 52 20 07 04 15 6a 6f a3 92 17 79 3f ee cf 71 12 db 5a 2a 5e e2 a0 94 91 35 b8 f6 fa e7 46 21 a2 95 54 92 3a 08 dc 54 8a 02 45 4e af 72 5f c4 9e ed 81 35 a7 bc ed 00 69 e7 98 ca dd 07 dc 1e c3 8a b2 7b a4 0f 9c 8e ae 95 de 9b 69 33 4a b2 dd 8c b6 8b 21 91 0e 7d d9 85 ab 1b 4b 4e a4 28 14 9e a7 9b a8 13 4e a7 0c 3a 8f 20 29 a5 32 d0 34 d2 72 1f 98 b0 78 2e 5e d4 a9 44 89 07 43 b3 51 4c 64 6c 40 a7 10 76 d7 42 d8 e3 6f 53 30 ce e3 7d ba cd 11 01 69 42 dc 69 fe 9f 1a ea 6c 8d 71 db 81 63 ec de e1 0c 1b 17 73 25 15 d6 83 7f 1e 44 fc 38 68 4e 50 5e b1 a9 6a c9 e3 8c 25 a5 45 06 da 8b ed a1 e0 17 Data Ascii: #w},KH"{iUE8'm]!(e3E,jR joy?qZ^5F!T:TENr_5i{i3J!}KN(N: )24rx.^DCQLdl@vBoS0}iBilqcs%D8hNP^j%E
2024-04-23 14:06:18 UTC	4344	IN	Data Raw: c1 a6 e5 8e d4 dc 5a 5a a3 44 ac 2e b3 31 cb 2d dd ec 6c 40 36 80 85 0d ee 74 d4 23 52 9d 42 9b 0a 0a f1 d6 b5 92 1c 7b 89 3c 42 da cf 74 5b 1d ef 97 b6 48 ad 8c ea fe cc 30 c6 40 f6 a1 ea 00 51 58 f1 08 3a bf 33 ab 4d 70 21 cc 6a 6d 18 08 63 bb ad cd c5 c7 bc f0 51 a4 68 d9 4a 27 8a aa 9a 28 2d b7 2a 81 40 34 59 97 8e ba 17 db 3c 6c 56 85 a5 f6 42 ba f5 7b 29 5e a2 8a c6 a6 a7 9b 31 dd 8f e1 ac d3 d4 bb ec cf b3 96 11 e4 2d 16 75 52 d3 5a 82 c4 70 ea 42 37 5f ef d6 f5 70 71 59 49 97 de db 45 70 4c 74 2f 1a ad 23 2b f2 b3 1d f6 1c 76 d6 82 46 6d 90 b3 97 0f 76 b7 70 c8 4c 35 0f 2b 8d ba 49 3f c6 ba cd e8 e4 de b6 ea 50 6a fd bf 9c 8f 3f 62 f1 c8 0b cf 08 15 24 6d 43 fd fa ad 37 46 56 ac 32 b5 dc 16 53 da 9f 7e dd 69 14 86 ab 23 0e 2d e1 4e 74 f1 d0 3a 3d Data Ascii: ZZD.1-l@6t#RB{<Bt[H0@QX:3Mp!jmcQhJ'(-*@4Y<lVB{)^1-uRZpB7_pqYIEpLt/#+vFmvpL5+I?Pj?b$mC7FV2S~i#-Nt:=
2024-04-23 14:06:18 UTC	5792	IN	Data Raw: b5 8c 46 54 47 8b b5 76 52 19 9a 48 dd dc 05 15 26 bd 42 80 1f e3 a7 5b 15 6c 6c bc e2 e6 6b a8 9a d6 c7 b7 d5 dd f7 12 4c ec 62 56 3e a6 34 1d 3f 37 f3 31 3b 79 6b a9 65 46 1f 66 cf 89 a1 e1 f1 19 8d fd c9 e3 b7 92 e0 85 9d d1 7d 31 c7 ff 00 cb 04 53 a9 9f 98 06 81 74 fe e0 fe d2 45 c2 d6 c5 2d 8b 8e a6 7e b2 41 6a 00 40 1b 00 17 82 8f 0d 63 6b ea 69 5a e8 4d c5 56 10 f2 1c 3a 47 2a 6d b7 8e a5 6a 37 a1 2b 75 77 1d 85 a3 dc ca 47 4c 4b b2 9d ba 98 9a 22 fc 49 db 5b 23 06 57 61 7f 76 13 1b a1 fa 95 72 f7 11 92 09 12 31 ea 35 f2 e4 35 d2 96 87 15 dc b0 66 47 89 89 21 8c 93 92 68 dc 85 78 8f 0d 51 05 5b 3c 8d 35 a4 9e d7 4b c8 0d 40 1f 28 00 ee 6b ce 9e 3a 63 42 24 09 3d 9c 68 aa 65 56 8c 18 c1 fd 4c 16 9d 6c de 03 90 d2 03 27 be b7 16 17 2d d0 0f a4 92 29 Data Ascii: FTGvRH&B[llkLbV>4?71;ykeFf}1StE-~Aj@ckiZMV:G*mj7+uwGLK"I[#Wavr155fG!hxQ[<5K@(k:cB$=heVLl'-)
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: eb 0d d2 dd 27 81 3a 00 44 9e e7 b8 40 3b d2 9e 5a 10 0e 9b 77 92 2a 17 e8 90 f3 1a 72 10 21 c2 43 11 8e 45 32 d3 7e 93 b8 fe 3a 00 ad 4d 8c ed fc a3 b3 a4 22 ca 6a d1 de 2f db 27 cc af 0d 43 c7 56 69 5c d6 5c 48 ab ae c9 bb e9 66 b0 c8 47 28 fd 31 4e 3a 09 f8 32 d4 6b 1b 61 7c 0d eb ea 57 14 67 99 ce d8 ee 4b 34 92 5b ac 74 a6 dd 37 69 e2 22 48 e9 e2 4a d4 eb 07 8e cb 74 75 d3 35 2d b3 28 32 2b 23 54 9a 8e 3f 86 84 8a 6c 36 da 66 b7 99 1d 68 68 45 47 96 b2 ba 37 a3 2c 71 4e 86 61 b0 02 b5 5d b6 35 d7 39 d0 8b ae 1e 56 e8 a9 dd 2b 50 9c eb e3 ad 71 b3 1c c8 d1 71 f7 75 8d 58 12 28 3e 56 df f0 d7 7e 3b 9e 66 4a 6a 4f 59 cc cc c7 d5 50 4e d4 e5 4d 74 d2 c7 35 ea 4e 23 75 2f 9f 8e b6 32 23 72 90 c8 f1 a4 b1 1e 97 8d 87 57 fa 4e a6 c8 08 98 7d a6 b8 21 d0 fb Data Ascii: ':D@;Zw*r!CE2~:M"j/'CVi\\HfG(1N:2ka\|WgK4[t7i"HJtu5-(2+#T?l6fhhEG7,qNa]59V+PqquX(>V~;fJjOYPNMt5N#u/2#rWN}!
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 70 65 61 42 08 f0 23 4d 06 c7 9f bb a3 03 2e 0e f4 c5 ed 91 63 75 59 71 f2 30 db a4 ee 52 be 28 76 d7 3e 6a 9e 87 a7 c9 25 72 dc 80 ac bb f1 f9 4e b8 6e b5 3d 2a 32 6e c6 e3 db 60 b4 d9 a9 c7 97 f8 6b 22 de a5 b2 ce e0 fa 19 65 a8 6f 48 52 07 49 15 fe ed 52 66 56 a9 76 b2 b8 a3 2f 4b f4 b8 e3 b6 f4 3c 3e 23 5d 34 b1 c7 92 a5 e6 ce 69 28 a1 8f 20 58 eb d1 c7 63 82 e8 9c 56 04 03 ad 4c 48 4c 95 99 6b 88 6e 55 88 07 d1 22 57 63 e0 75 17 e6 31 06 aa 7a 42 54 28 ad 46 b3 19 f5 b4 e5 c3 f5 23 2a a9 a5 5b 9e 90 26 31 1d b4 33 4a f2 47 38 92 32 7d 51 56 a0 1d 36 c4 92 24 04 5d 24 74 ec bc c6 90 c7 00 a5 77 db 44 02 3e 60 bb 13 a2 00 f9 54 2d 68 dc 79 69 c0 1f 31 a0 27 98 1c 34 98 c6 11 91 d4 b2 6e dc c6 99 27 95 23 62 87 71 d5 41 b8 3a e5 ab 3a 98 e3 bf 54 2e 47 Data Ascii: peaB#M.cuYq0R(v>j%rNn=2n`k"eoHRIRfVv/K<>#]4i( XcVLHLknU"Wcu1zBT(F#[&13JG82}QV6$]$twD>`T-hyi1'4n'#bqA::T.G
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: ab 47 24 48 38 57 81 d7 a3 8a d2 8f 3f 25 4b 1c 32 03 b7 1d 74 a3 9d a8 1d 91 03 a3 2d 2b cf 7f 11 a1 a9 42 01 75 91 e3 26 20 04 83 91 e0 75 90 30 77 f7 0c 60 18 eb 5d 9d 46 a5 8e 40 a7 4b 6b 18 ab 09 5b 57 99 b6 63 b0 ea 3e 3a 69 09 e8 10 97 47 a7 a1 db aa 45 1e aa 6f f9 68 09 1c eb 69 6d c9 8b 66 61 b0 3b 69 0f 80 98 a4 96 18 90 5c 52 a7 62 47 0d 34 2d 87 98 d2 58 c8 15 8c 8e 3a a4 01 26 30 77 af c3 4b 60 1a 11 88 9a a8 80 54 ef 4d 00 79 29 16 66 62 29 e9 5e 1f 0d 72 23 a9 8f 96 51 44 20 16 23 73 e5 a6 02 91 01 62 01 04 d3 4e 45 00 f0 c9 24 b2 bc 64 54 56 86 ba 6c 48 25 a3 f6 1c 6f 5e 7b e8 5a 8f 61 e5 f6 dd 3a c8 a9 3b 0d 28 09 00 99 d5 e4 07 af a5 54 fa 80 e7 aa 44 b6 3a 93 cc f3 04 4a 85 e9 e3 4d 8f e3 a6 12 72 56 96 17 55 6f 53 6f e9 e2 47 c3 4e 05 Data Ascii: G$H8W?%K2t-+Bu& u0w`]F@Kk[Wc>:iGEohimfa;i\RbG4-X:&0wK`TMy)fb)^r#QD #sbNE$dTVlH%o^{Za:;(TD:JMrVUoSoGN
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 89 03 6d f5 40 19 1b 86 f4 8e 5a 00 e4 8c 55 4b 11 50 38 d3 52 12 79 20 dc 14 42 87 e6 6d ab e1 ae 6a ad 4e 9b 33 e4 2a cb d5 cf 86 9b 40 87 a3 14 25 ab b3 0d 00 3d 1a 74 1e b0 7f 1d 00 30 65 f7 27 21 f8 6a 92 81 48 ec 54 32 94 04 2a d3 73 c7 49 82 3b 75 64 92 a9 55 f4 d4 6c 54 6f 51 a5 56 0d 68 17 6b 6e a2 2f 6c 75 75 12 3a 8b 1a 6a e4 91 57 51 42 f3 88 a3 a3 b8 5f 5b 0e 5a a4 c4 c5 ce 16 d0 c2 c5 c0 2b 41 d0 36 07 cf 42 d4 4f 41 f3 73 1d 25 9c 80 f2 20 a2 a8 1c 48 d2 68 24 52 ac 99 28 51 e5 26 de 83 80 d4 ec 1b 8f 48 e6 db d9 8d 18 c9 20 1b d1 78 ea d0 83 ad 1e 67 97 dc ba 8b db 03 e5 2d c6 9a 1b 19 39 3c 11 5c c2 15 49 20 f1 e9 3e 1a 94 c4 d1 16 ee 2d 24 b7 74 05 45 a4 b1 cc 25 ae e4 23 86 23 f8 6b 4a b1 1b 0f 71 65 c5 bb 3b 24 a1 56 68 0c f1 bf 55 01 Data Ascii: m@ZUKP8Ry BmjN3@%=t0e'!jHT2sI;udUlToQVhkn/luu:jWQB_[Z+A6BOAs% Hh$R(Q&H xg-9<\I >-$tE%##kJqe;$VhU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	49977	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	717	OUT	GET /wp-content/uploads/2019/08/SFbase2-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:18 UTC	276	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Type: image/jpeg Content-Length: 17266 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:18 GMT
2024-04-23 14:06:18 UTC	16108	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:18 UTC	1158	IN	Data Raw: 82 f9 af 88 a4 df 6f 11 0b b6 de 21 a7 9e f8 82 79 f6 f1 53 57 cf b7 8a 07 9f 60 3c fb 28 79 f6 03 e6 6d e2 07 cc da 71 b2 03 86 fd 4d c6 35 ed f6 89 af 6e 9c bd 39 73 cb a6 b3 59 ec 4c 56 d0 40 50 01 00 00 00 32 a1 98 0c d0 45 00 01 32 83 2a 33 78 1a 33 8a a8 62 81 8a 06 28 18 a0 60 01 50 00 04 03 00 43 10 30 10 00 15 9b ce bc 9b 33 3c da ed c6 18 6b d5 cb e7 72 f9 bf bb b7 6f e9 bc 51 5b a8 a8 08 00 80 25 e0 a3 22 a2 20 08 09 6a 8c a8 20 82 56 6c 96 76 90 72 b3 0d 22 00 00 00 e5 94 35 41 72 06 40 94 1d 34 d7 cd db 78 1a 48 ee cb 4a 00 00 28 28 00 00 00 00 00 00 e5 b7 32 4e 1d b4 4d 70 db 6b b7 1b 91 2b 9f 1b 85 1f 38 8d 00 26 02 08 00 00 00 0c aa a0 80 00 28 94 19 ca 08 a0 08 22 00 07 6f 88 18 f6 81 85 34 c0 69 80 d4 c7 b4 00 41 40 00 c0 86 01 04 10 79 Data Ascii: o!ySW`<(ymqM5n9sYLV@P2E2*3x3b(`PC03<kroQ[%" j Vlvr"5Ar@4xHJ((2NMpk+8&("o4iA@y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	49978	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	713	OUT	GET /wp-content/uploads/2019/08/SF1-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:18 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Type: image/jpeg Content-Length: 227526 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:18 GMT
2024-04-23 14:06:18 UTC	1190	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:18 UTC	4344	IN	Data Raw: 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 Data Ascii: </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:18 UTC	4344	IN	Data Raw: 2d d3 2d f6 ec b6 d6 da 5d 79 b5 37 28 28 12 68 5b 50 50 f4 8a f3 a0 04 d3 fb 75 8f 77 13 a1 f8 2d 3b 53 de 6e 2a c9 5f ef 2d 4b c6 ec 77 26 5c 54 a6 ae 91 d9 75 a2 12 16 38 94 05 29 5f 03 be 85 aa 95 2e e0 aa 9f 72 61 94 47 95 70 8c 12 d2 4a 0b a6 5c a5 72 09 27 c1 b4 74 24 80 3a 0a 7e 27 5a 2e 82 60 59 57 60 81 30 b2 fb 70 c8 59 38 cf 71 ac ae 38 b0 f2 1f 8d 74 a3 c7 93 a4 34 3d b7 00 00 74 4d 45 4d 7a 9d 73 76 83 49 6e 6b 6e f2 a1 f9 2d df 70 78 e1 bb c4 4b d1 94 b0 fc d8 69 93 11 2a 48 dd 6d 55 21 43 8e c0 84 93 5d 75 9b 50 65 cd b5 2d 13 74 c7 f6 d3 93 ae e5 66 bf f6 ea 5c a0 f3 92 a2 3c f4 04 04 f1 52 1c 68 12 b1 cc 6e 77 1b 6a b8 60 fc 15 db 98 d5 f8 a9 de d7 3a 45 9e c4 b5 3a e5 15 16 52 10 95 12 41 40 2a 1b 2f 97 8d 2b 5d 5a 43 95 92 26 89 e2 e4 Data Ascii: --]y7((h[PPuw-;Sn_-Kw&\Tu8)_.raGpJ\r't$:~'Z.`YW`0pY8q8t4=tMEMzsvInkn-pxKiHmU!C]uPe-tf\<Rhnwj`:E:RA@*/+]ZC&
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: 81 71 8b 85 cf 28 17 1b 9b 29 93 74 95 78 ba a2 df 6d 8b 1d 49 42 24 b5 f5 28 71 51 a3 28 00 03 2a 53 41 92 ba fa ea 50 9d 82 95 ac e2 bd d0 b4 e9 6c 55 bc cf e7 ce c7 3b 79 60 c6 e1 fd 2a 6e 33 73 3b 66 3d 3a 3b 65 0a 65 d7 10 b4 c8 93 19 28 04 a7 90 a9 e6 7a 24 7b 68 1d 0e b7 48 98 c4 76 2c 50 ef 4c 91 83 74 29 ca d7 6e e7 93 58 2d 88 e1 29 c8 cc 3a d3 be e2 8f 05 70 4f b8 f9 71 44 51 74 1c 94 91 bf 23 d2 94 d5 80 10 1d 09 c9 e3 83 28 a3 b9 4a 6b 29 b8 5f e7 5d 59 69 c5 32 fd 86 f9 3e 73 0d ff 00 88 d5 da de a6 a5 4a 6c af 9f 06 d4 85 34 85 20 6e a2 15 5e b5 d2 4c 07 6e 0a 5a ee 8a 73 1e cc 14 7b 65 97 70 8a 2f bd bd 7a 1c 79 13 b1 2b 4b 79 5e 19 2d e4 fe 9b 36 c5 21 2d 4f 88 80 83 ba 12 b2 56 a0 3f 2f 3d b7 d2 c6 4c 4c 4f 62 79 01 26 9f 12 c7 ad 61 db Data Ascii: q()txmIB$(qQ(SAPlU;y`n3s;f=:;ee(z${hHv,PLt)nX-):pOqDQt#(Jk)_]Yi2>sJl4 n^LnZs{ep/zy+Ky^-6!-OV?/=LLOby&a
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 5f f1 1b 15 a1 f1 07 55 3b 06 e0 53 d8 93 48 f3 56 bf 03 94 d6 63 d9 08 0d 32 e7 bd 22 d5 19 0e 34 a2 2a a5 7b 5e a1 d7 c0 8e 9a 92 ee dc 7e 2a ab 81 c1 09 be d2 f2 14 99 0f b0 79 ba 87 c0 e1 50 ad 94 07 cc 3e 1b ee 34 f2 0a a0 52 6c 6e e0 25 e4 f0 65 a9 a6 59 98 1e 75 12 90 95 54 24 54 04 92 7c 6a 37 ae 96 42 89 c2 93 af ee 08 f7 d9 5c d6 a2 cb e9 0f 94 a2 bc e8 84 d0 00 7a d0 93 e1 a4 8e 08 4b c4 9b 66 cf 4d b6 ed 8c dd 56 ea bd b2 57 17 9a 55 ca aa 52 78 a5 46 83 7a 0a ef a2 ce 08 51 d9 8a 86 3b 81 72 18 37 7a 71 1c 91 ba 22 2d d0 25 12 b8 1e 2a 27 e5 41 24 ed 43 5e 9a 6c 62 98 62 55 9f bb 07 0a 6f 0d b6 83 bb 0b 5b 49 1b fb 89 5a 79 8f f6 ea a8 e4 8c b3 42 98 45 f0 5d fb 75 2e 43 6a 01 76 95 2c 2e bd 41 41 21 40 ed b1 f8 68 cc 34 d2 c0 f7 0f 25 5b 2f Data Ascii: _U;SHVc2"4{^~yP>4Rln%eYuT$T\|j7B\zKfMVWURxFzQ;r7zq"-%*'A$C^lbbUo[IZyBE]u.Cjv,.AA!@h4%[/
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: be 1d 11 2c c1 07 e9 91 fe 5e 42 93 cd 98 9b ef 25 49 1e 92 b0 2b ed 22 94 07 d6 79 2e 9a d1 6e 2d 8a cf 32 e8 8e df 6d 8d 2a 45 ca 04 e9 cf 2a f2 50 85 5e 5d 5a fd d9 c1 b7 4d 12 99 8f 3a 54 98 c4 ee 7d a1 c9 ce 20 93 c4 8d 69 d5 92 a4 f1 45 72 f2 99 13 a1 db 1a b5 ac c1 b5 42 41 8d 65 81 c7 8b 48 2e 02 12 b4 36 37 5b 8b 15 55 37 50 27 75 50 2b 4d e6 16 60 94 5b ad 53 ed 86 c0 8c 4e dc bc aa fc 89 53 f2 5b 94 96 a3 e3 56 06 87 29 37 09 60 06 e3 44 88 c3 7e a2 49 e2 4a f6 08 45 00 05 4a a8 b2 dd a0 3b d3 c7 20 a4 ee ea ee 43 0c cf 05 2a 5d 27 48 c3 a4 e3 5d ba b3 fb 57 ec e9 99 6a bb 64 6c 5b ea f2 25 e4 b2 9a a3 51 50 50 3f f2 d6 fe 65 2b 51 3d 41 a6 eb ae b5 4a 6c 40 18 ac e2 22 6e 7e de 3c bf 1c 93 45 ee 74 68 26 27 6c 31 29 05 f7 b1 e6 5c 6b 3a be b0 Data Ascii: ,^B%I+"y.n-2mEP^]ZM:T} iErBAeH.67[U7P'uP+M`[SNS[V)7`D~IJEJ; C*]'H]Wjdl[%QPP?e+Q=AJl@"n~<Eth&'l1)\k:
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 92 64 31 f4 ee 24 37 40 5c 34 35 4a bc 88 d2 50 0a 84 4b 93 42 95 cc 9c 61 a1 a8 d2 ea 54 a2 3f 5d 20 f1 07 49 8a 63 2d 38 a7 76 1b 71 2d a6 8e 97 10 b0 08 5a fe 3a 01 14 34 ed 8e f2 6e c8 96 d5 cd 06 00 af bb 11 c1 e0 7c 41 d3 3d 12 b1 77 74 fc 98 a8 86 b5 38 db 85 c2 a1 d3 c7 fb 34 f1 42 54 4a 1b 95 c9 45 2e 20 94 ff 00 db cf 50 80 a0 4d 0c 38 89 ee 4b 65 87 50 0a 4f ea 30 37 3b 7f 50 d2 29 8a e3 7b 76 a7 23 ba a9 a8 7b 9a 4a 45 1b 3d 69 5f 01 e5 a6 d6 30 5b 0c 1a a9 ed a4 ba f2 c3 9c 46 e6 b5 1b 72 a6 94 94 2a 97 b2 db 4c 85 7a 38 1f 15 79 f9 d3 51 d1 64 e8 cb 68 e3 c9 24 f2 56 fc 46 fb ea bc d3 e2 96 7b 2f 12 84 00 69 e6 29 4d 14 19 d3 93 11 83 28 35 35 5a b5 02 6c 12 e6 94 cb 69 01 c5 25 b5 ae bc 41 f1 1a 52 14 0b 35 b2 83 4a 2b e3 a5 01 12 b2 49 4a Data Ascii: d1$7@\45JPKBaT?] Ic-8vq-Z:4n\|A=wt84BTJE. PM8KePO07;P){v#{JE=i_0[Fr*Lz8yQdh$VF{/i)M(55Zli%AR5J+IJ
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 4b 52 16 25 29 ba a1 c7 79 14 87 96 14 2a 0a 8e e1 3b 52 83 46 3c 11 89 62 a0 cb a3 4e c0 7c 4d 8c 8f 71 d4 71 54 f8 cd d5 68 43 60 8a 3a 68 40 a8 e8 52 74 26 18 b8 5d 08 1d 41 91 d6 37 7a 44 c7 8a db 28 72 6a dc e6 cc 86 cd 7d aa 78 83 d0 1f 2a 74 f0 d3 83 a8 2c d7 20 42 9f f1 27 0d b1 6c 5e 1e 50 91 2a 3a 87 b4 eb 62 8b 41 59 e4 54 a5 8d fc 37 1f cf 48 43 d1 66 25 2c bf c2 89 84 77 2e 1e 7d 6c aa 71 ee e8 3c db b7 56 d9 49 4b 2c de 9a 1f e6 96 45 00 48 90 80 1c 03 cc 2b c7 42 01 e2 63 9a 12 35 05 3f f7 49 6d 47 77 19 cd 21 ba 4c 57 7d b4 3c ad f6 51 5d 10 e2 29 b8 f4 d7 6f 2d 2d bc c2 92 e3 c5 37 77 6e dd 22 66 21 6b bf 41 40 54 8b 75 c5 2b 71 c6 c5 28 d2 d3 52 41 ea 36 a9 df 46 06 ac 89 52 2d d9 71 72 2c 0a d3 7a 4a 54 a2 88 83 81 1e 97 3d be 35 d8 1a Data Ascii: KR%)y;RF<bN\|MqqThC`:h@Rt&]A7zD(rj}xt, B'l^P*:bAYT7HCf%,w.}lq<VIK,EH+Bc5?ImGw!LW}<Q])o--7wn"f!kA@Tu+q(RA6FR-qr,zJT=5
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: d7 26 dd cc 47 0f 6a ec be a1 ab 8a 8d b1 ee e0 7e c5 79 9c 2d 16 63 72 92 db f2 18 93 1d d6 53 fe 6a 0c a6 4b 0b 4c 68 28 2e 16 1f a1 51 42 d2 b2 a5 27 63 52 2b ab ae 5b 12 83 2a e1 22 f8 26 7c a6 e3 75 6a 5c 49 f2 ae f2 ae 26 e1 19 84 b1 7b 57 a2 43 f1 b8 71 61 2b 5a 28 56 e2 10 8e 2a 24 f2 3c 7a 9d 55 6e 2a d9 36 58 21 06 a7 32 92 8f a3 2b a2 95 c9 4c a6 41 69 7c d3 f9 94 49 a9 1e 3a d2 02 a4 94 ec 8b dc 92 b4 b0 eb d2 1b 6d 49 1c 51 f5 4a 5a d6 49 a8 24 95 0e b5 db fd ba 22 81 23 3a 4f fb b1 b6 bd 21 2d 5b 53 19 fd d4 50 53 c9 de 60 ec 40 51 58 07 7a 93 a5 30 d5 89 4f a9 b0 4f 62 e0 2e a9 8f fb b3 d3 1f 72 2a 05 63 17 28 14 7a 93 cd 6b 52 90 3a 54 25 23 f1 d3 46 00 60 ab 24 a7 3f dc d6 88 ab 61 e7 53 06 da e1 e7 22 18 4a ca 64 fb 5e a4 a1 ce 8a 75 08 Data Ascii: &Gj~y-crSjKLh(.QB'cR+["&\|uj\I&{WCqa+Z(V$<zUn6X!2+LAi\|I:mIQJZI$"#:O!-[SPS`@QXz0OOb.rc(zkR:T%#F`$?aS"Jd^u
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 22 c1 47 b2 b5 36 5e 20 90 dd 6a 49 f8 57 57 10 4a 50 c1 37 3f 72 68 fb 8d 17 d0 ca 49 e2 94 ab 6a 9e 94 3a 6d 2c 97 52 4f 22 4b c9 61 b5 21 9f a9 53 27 a3 43 c3 c8 79 e9 34 55 33 ad 96 e9 f2 ae de af a5 53 25 8a f2 e4 29 4a 78 11 a9 a4 45 00 4c 92 c4 49 66 e8 eb d6 f9 c8 5c 57 12 38 f2 02 8a fc 41 d5 8e c2 88 0a 96 2b 5c 0b 61 8b 29 6d 89 2b 79 29 35 ab 86 85 23 cc 79 e9 0c d1 11 aa 7e 90 82 fc 77 0c 17 42 a4 36 2a da 47 89 1e 07 41 f8 a2 dc 12 4b 7b 53 e4 a1 2e cf 68 30 f2 09 1c 48 f0 fc 75 24 78 25 0f 9a c2 74 68 c5 2e 2d 48 f7 36 20 9e 54 a6 a4 09 52 40 26 a6 59 89 f4 e2 2a df 54 73 27 66 d6 e1 dc 7e 1e 7a 92 c5 30 03 4b 71 44 56 fb 73 51 19 11 94 ff 00 d6 2c 6e db aa 1b d3 e1 a1 8a 8c d4 4e 0f 29 b4 b4 52 ea 52 af 6f 7a ab c3 4a c5 1c 90 fd ca 7c 05 Data Ascii: "G6^ jIWWJP7?rhIj:m,RO"Ka!S'Cy4U3S%)JxELIf\W8A+\a)m+y)5#y~wB6GAK{S.h0Hu$x%th.-H6 TR@&YTs'f~z0KqDVsQ,nN)RRozJ\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	49979	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	708	OUT	GET /wp-content/uploads/2019/08/SF3.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:18 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:18 GMT Content-Type: image/jpeg Content-Length: 165379 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:18 GMT
2024-04-23 14:06:18 UTC	1190	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 Data Ascii: </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: d7 10 ad 53 f6 e6 23 23 72 9a 4a 6d da df e1 51 3c 8b 3a a1 a2 9d 5c 52 0b 56 4f 80 2c 9f 96 e2 d7 fe 55 03 6c ba a9 30 5b 51 c6 9a 17 0b 40 42 07 4b 0d 7f f9 d4 7d 42 9e 0b 27 70 31 a3 a0 a9 2e 1b ff 00 e1 17 1f 8d 2d e5 30 83 72 d8 b7 54 16 52 e7 90 a7 5b 11 a1 15 a2 ab 59 46 51 75 cf a6 c5 07 7a 16 8d 47 63 5d 18 49 67 90 42 6f 35 e2 70 a3 b7 54 d6 a0 5c 2a 08 65 aa 9a 49 5a 92 12 a6 84 ed a0 2d 69 49 e9 d5 5f 80 a0 96 40 08 86 3b 7e 36 43 89 4f b9 5a 20 7a 0a a2 45 ca b8 0c 14 88 b0 de 7d e2 a5 20 94 a7 5f e3 51 94 c0 09 88 92 8a 11 15 f7 10 96 83 65 37 17 72 fa 5d 3d 2b 29 98 18 ab b6 95 bd bc 34 98 cb 25 09 4a 80 1b 90 12 a1 7f c2 a2 6e 12 09 8a c8 56 6f 40 98 b6 3f 51 9f d6 b5 d4 54 46 83 b5 85 57 1b 22 0f 65 33 12 c8 55 f8 d2 50 54 85 a4 92 9d 52 Data Ascii: S##rJmQ<:\RVO,Ul0[Q@BK}B'p1.-0rTR[YFQuzGc]IgBo5pT\*eIZ-iI_@;~6COZ zE} _Qe7r]=+)4%JnVo@?QTFW"e3UPTR
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 0d a5 5b 2d d0 ed 26 d4 84 08 46 e0 a2 ad e8 e0 59 0e 6f fc 2e 3f c6 a6 01 51 24 28 2e 3e 09 f6 f5 ed e8 2a 40 28 12 b4 5e a4 92 57 a1 0a 54 59 5e 02 a4 ac 6f 65 7a 2d 3f e6 2a 12 8b a6 24 c8 c3 09 31 90 ea 01 74 29 b4 90 5b 72 fe e4 fc 08 ac b7 c0 b2 be b9 2f 45 f1 39 ad ad 08 4a 9c 41 d7 db 62 0d c5 72 59 a4 b4 4b 10 bb 5e 3d 68 5a 13 ee 04 5a f5 ae 0b 24 d5 e1 6d 0a 48 37 15 73 2a 9d 56 4a 8e 2c 4f f5 aa e4 14 e3 24 07 9a 6c 00 b4 6d 07 70 22 e4 7f f1 d6 b2 58 16 98 15 c4 f9 0e 32 0a 92 5d 7d ad e1 7a 10 9d 09 be 9f d2 8a a7 20 70 56 90 0e 6b 9d cd c2 c2 87 1d f5 36 a7 12 5d 20 78 af 7d 84 76 27 e3 5b 61 74 a4 55 52 80 01 54 47 61 8b c4 69 67 68 76 4a 7c 80 ea 0a 6f d2 ad 9c 8b 12 3a 28 c0 07 00 f5 5d b1 ec c3 6b 75 98 ad a8 06 d8 40 48 48 e8 0d b5 af Data Ascii: [-&FYo.?Q$(.>@(^WTY^oez-?$1t)[r/E9JAbrYK^=hZZ$mH7s*VJ,O$lmp"X2]}z pVk6] x}v'[atURTGaighvJ\|o:(]ku@HH
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: ea ed 2a 13 d0 84 ff 00 d6 84 27 b5 08 4a 84 27 a1 09 50 9b 27 a1 09 ed 42 6b 20 29 24 b2 b5 24 27 d0 50 9b 29 4c 43 93 20 80 cb 0a 5d ff 00 35 ac 2a 12 98 8e 65 48 44 94 47 07 88 e4 25 11 e4 fd 30 7f 2a 46 bf ce b3 4f 99 18 e4 ad 8d 24 e6 8e 71 9f 6f 05 d2 a7 1a de af ee 56 b5 92 7c d9 1c 95 a2 a8 85 d0 f1 dc 15 a6 f6 fe 88 fe 55 98 ce 72 52 70 11 b4 2e 24 c3 61 3f a2 07 f0 a0 56 4a 89 b1 13 c6 c0 34 80 2c df f4 ab 23 52 ac d8 ae d9 c5 36 8b 7b 06 95 68 ad 56 66 ac 11 05 23 a2 6a 62 0a 06 6a 52 62 a4 76 a9 08 a8 ee 5b c3 29 1d aa 5b 52 75 9e c4 8e d4 d9 27 4f a0 a0 a1 60 a7 10 9e aa 14 9d 36 51 1c 98 ca 3f 30 bd 44 cc 29 08 92 ab 5f cc b0 dd fd c2 c2 ab 36 05 31 59 54 12 b9 4b 2d de ee 00 7d 2f a0 aa cd ca c1 52 13 c8 73 b8 ac 25 57 92 91 ea 6f ad 43 7c Data Ascii: 'J'P'Bk )$$'P)LC ]5eHDG%0*FO$qoV\|UrRp.$a?VJ4,#R6{hVf#jbjRbv[)[Ru'O`6Q?0D)_61YTK-}/Rs%WoC\|
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: ba 0d a0 9b d5 f0 e1 4e 59 a8 9b 62 10 14 fe 6d 3e 55 f6 b8 53 7f 4b d6 a8 70 a2 33 55 9b ca 14 93 93 9b 29 5b 9e 90 b5 0e c0 9a d5 1a a3 1c 82 a8 cc 95 05 4b 2a d5 47 77 e3 56 00 a2 eb 1b fa 53 64 9d 35 e8 49 d2 a1 0e 95 08 58 95 5a 84 3a c0 92 68 49 35 08 59 01 6e ff 00 8d 09 a7 b7 c6 f4 21 31 36 a1 0b 0e bf e5 42 4b 30 3b 00 49 3d 85 24 c2 27 c2 e1 e4 cb fa 94 9b 35 74 0b 02 6c a2 6f f2 d6 6b ae 11 65 7d 75 92 bb 5e 17 86 8d c9 4a 99 d8 53 1c 6f 50 24 fb bd 3a 57 26 77 ca 4b 50 88 8a e9 f8 ee 28 84 b7 01 2a 6c 6e 65 0a 59 3a e8 6a b1 02 52 33 44 58 fc 02 18 fa 70 5b 00 2d d2 e2 7a e8 6a 71 ad 42 53 44 b1 e0 32 d2 14 6d 60 a7 af 6b 75 ab 44 00 55 19 2b 6d 88 48 7a c9 17 b8 ab 19 41 d6 6b db 77 45 85 94 81 4d 25 b5 98 ef 3c 52 a6 da 52 d2 51 b4 a8 74 a0 Data Ascii: NYbm>USKp3U)[KGwVSd5IXZ:hI5Yn!16BK0;I=$'5tloke}u^JSoP$:W&wKP(lneY:jR3DXp[-zjqBSD2m`kuDU+mHzAkwEM%<RRQt
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: 85 64 26 53 cd 4f 70 0b a0 41 e3 ac b2 13 66 c0 f8 5a a5 1a 95 66 68 96 3e 31 08 b6 d4 0f e5 56 88 2a cc d5 ab 70 c0 ed 56 08 aa cc 94 d4 47 09 b6 95 31 15 12 54 84 a0 0e d5 20 14 5d 6d 1b 07 53 6a 92 4b 15 48 6d 37 d6 96 e4 32 88 e6 41 23 a2 85 40 d8 a4 20 aa a4 65 82 37 6b d3 53 50 36 2b 05 68 7e 4e 6d 44 94 85 14 a8 7a 8a a6 56 2b 04 10 9e 53 90 3c c8 57 bb 6d b4 2a 35 51 99 2a d1 00 b9 26 6b 9a ba 04 86 ee 5a 79 b1 b9 57 36 f6 8d 6a da e8 32 41 90 0b 97 cb e6 53 25 28 84 3a 50 df 65 93 af f2 ad f0 e1 81 9a a4 dc 4a a8 73 3a e1 07 6b 8b 5a d5 f3 2c 9f f0 1d aa e1 40 50 36 2a 57 e5 3c fa 8a 9c 70 9f 41 7d 2a e8 c4 05 59 93 a8 c5 40 7f d2 a6 a2 eb 02 a3 42 4e 95 fb f7 a1 09 ee 69 b2 1d 63 73 42 16 25 47 b5 08 58 eb eb 42 12 d7 d6 84 2c 82 7e 34 9d 09 f6 Data Ascii: d&SOpAfZfh>1VpVG1T ]mSjKHm72A#@ e7kSP6+h~NmDzV+S<Wm5Q&kZyW6j2AS%(:PeJs:kZ,@P6W<pA}*Y@BNicsB%GXB,~4
2024-04-23 14:06:18 UTC	1448	IN	Data Raw: 94 96 9a 21 b4 39 59 60 71 6e 2e 31 fa 91 ef 6d 7a 7f f3 ad 1b 84 89 65 1b a6 c7 05 da 70 fc 6d 2f b0 d3 f2 54 52 16 90 52 94 f5 23 d6 ff 00 1a f4 3c 4e 16 f0 09 5c 4b b9 2c 58 22 c4 62 20 36 8d 89 8c 9b 74 b9 17 3f ce ba 7f e1 c0 0c 96 43 74 8e aa bd 98 09 87 91 6f c4 76 b4 e0 51 09 f8 8e d5 9a 35 6c b0 32 b0 cf 74 31 44 75 d3 59 90 a7 21 61 1b 99 78 7f b8 ab a4 fc 40 e9 5c de 4c 5a 4b 55 27 04 2c 6d 6d d6 3e 84 77 ac ab 42 6f 12 45 d0 41 b7 54 f4 b0 ff 00 ad 36 43 ac 36 8b 93 ee 04 68 7d 4f fd 29 3a 13 80 00 22 c6 c4 dd 02 fa 0a 10 ac 31 c9 42 e7 43 0e 13 60 bd 49 3d 48 e9 4e 38 c8 28 cf 22 ba 28 1a 69 5d 90 30 c1 60 40 bc f9 f6 22 61 8c a5 ac 21 d6 5e 6f c2 ab d8 92 4d 88 1f 88 ae 5f 3e 42 2d d5 6b e2 02 4b 2e 5f 0f 34 c3 cc f9 d4 b4 16 ce 8f b5 b8 d9 Data Ascii: !9Y`qn.1mzepm/TRR#<N\K,X"b 6t?CtovQ5l2t1DuY!ax@\LZKU',mm>wBoEAT6C6h}O):"1BC`I=HN8("(i]0`@"a!^oM_>B-kK._4
2024-04-23 14:06:18 UTC	2896	IN	Data Raw: 6f f4 fa ef ec 49 f4 ae 4d 97 ee 9e 1a 2d 50 a9 a3 8a b7 4e 59 01 9d ea 42 b7 01 aa 45 68 1c c6 8e 4a bf 47 14 23 94 c9 ad e9 6d 17 46 c4 90 52 d2 07 6b f7 ac 76 5d ba 4e 56 9a eb 61 82 aa 54 d6 52 a7 9a 27 53 a8 3f 8f ad 57 bc 07 0a cd 84 a8 8a cb 37 e3 4a b7 03 b0 ed 55 fb 9f 85 40 de 19 4b d2 c5 6a 39 66 bc e1 27 42 b4 e8 9b 6b f0 bd 2f 5c 3a 7e 91 65 b1 a9 89 71 2e 8d df ed 9b ee b6 9f 85 11 b4 17 41 83 29 cc af cb e2 5b 6a 29 55 c1 d3 b1 1d ea 62 40 87 50 21 97 47 c7 39 29 e8 c8 5c 82 92 a3 f2 a8 77 1e a6 ba 9c 73 39 47 15 82 d0 01 c1 04 fd c2 e2 8f f2 1c 69 76 3c a5 a2 4c 10 a7 63 c6 bf e9 a8 db 5b ff 00 aa dd 0d 73 ff 00 23 c4 9b 8b 41 76 d3 b7 65 af 85 c8 10 3b 48 cd 79 0d cc 86 5f 14 b9 4c 3b 29 32 1b 49 25 f8 e8 1b 54 4a 7b 8b e8 74 aa 6b 11 98 Data Ascii: oIM-PNYBEhJG#mFRkv]NVaTR'S?W7JU@Kj9f'Bk/\:~eq.A)[j)Ub@P!G9)\ws9Giv<Lc[s#Ave;Hy_L;)2I%TJ{tk
2024-04-23 14:06:18 UTC	4344	IN	Data Raw: f2 a6 0f 99 47 9d 96 8c c6 53 1b 1d c2 d8 4a 50 93 e3 28 b9 37 ee 83 e8 69 48 e2 3b 27 18 e0 50 97 23 ce b4 4e 4c 07 37 24 a5 61 29 d9 b5 49 b0 b0 25 75 16 dd 25 6c 22 c1 79 4d dc 92 9b 52 92 a3 62 09 b8 fe 35 e8 23 4a cc 79 04 28 c7 2a ab fa d4 bd 10 a3 fe 49 52 a3 65 d5 75 24 a7 da bd 2a 32 a0 29 47 92 57 63 e1 df 74 46 1d a6 a1 cf 49 52 13 64 25 db 12 0a 46 80 9b 74 23 a5 79 ee 7f e1 8d 92 33 ad 6d 8d f0 b0 34 f0 3d 57 63 63 ee 04 8c e4 35 7e d4 d1 90 09 2d de c5 29 4d ba f5 ae 51 e1 d9 13 b6 c3 87 44 1a a1 1c 42 e6 59 e9 59 28 f3 58 5c a7 9d 42 26 80 90 d2 95 ed 49 1d 6c 47 51 ad 74 68 a6 02 24 01 92 98 93 ab 74 e3 b2 13 8b 18 e0 b7 c3 0b d0 48 f2 d9 d3 a5 fd 82 88 42 2f b9 83 aa e7 63 29 b8 1c 19 71 53 e3 4a 8e 10 f3 1e f6 cf 90 95 2b 66 96 73 fc 4d Data Ascii: GSJP(7iH;'P#NL7$a)I%u%l"yMRb5#Jy(IReu$2)GWctFIRd%Ft#y3m4=Wcc5~-)MQDBYY(X\B&IlGQth$tHB/c)qSJ+fsM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	49980	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	1033	OUT	GET /wp-content/uploads/2019/08/SF5.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:19 UTC	276	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/jpeg Content-Length: 77665 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	1191	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:19 UTC	5792	IN	Data Raw: 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 Data Ascii: </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:19 UTC	5792	IN	Data Raw: 50 12 23 eb 30 93 53 5c 68 88 00 3d 46 61 e6 1e 28 81 c8 8b df 18 15 af 7a 20 52 5b 36 57 b0 06 d0 8c 69 81 48 7b 9a 04 4f 67 a6 d3 a8 63 99 51 26 38 6c f1 8f 89 c0 53 8a 62 91 cb 2e 22 14 21 fd f4 4c 72 4d 59 be 39 34 80 6b 5e 0a 48 07 97 51 c7 e9 13 5a 50 62 79 29 89 99 86 ef 7a 2d ee 1f 11 c2 99 15 06 44 89 87 73 6f ac 03 9c 03 5c 33 27 8a a7 2d 5b 46 ae b6 4e 17 52 59 6d ee 98 e0 1c 0a e6 d9 43 3b f8 ec 9a 19 de cd ea 57 00 6b c1 59 5b b4 67 cb d7 ab 20 c1 95 b2 79 5d 87 25 ae 99 64 e6 e5 ea ba ec 4d 58 df 48 1b e7 24 01 85 72 f6 ab a4 c9 c5 a2 72 3b d6 b9 a4 13 5a 71 52 01 29 44 52 83 88 39 20 46 89 b7 b1 ad 8a 20 07 e1 0a c4 04 3c c4 0d fe 3a 1c 74 e2 99 09 fa 8d 3a c8 fe 9b 7b 94 19 a5 0f 6a 81 8d 2e cf e9 a1 03 22 6d ff 00 9d e2 99 05 b9 36 ff 00 Data Ascii: P#0S\h=Fa(z R[6WiH{OgcQ&8lSb."!LrMY94k^HQZPby)z-Dso\3'-[FNRYmC;WkY[g y]%dMXH$rr;ZqR)DR9 F <:t:{j."m6
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: 90 ea 39 db 29 35 35 1f 7a 50 00 bd a1 ed 24 0a 01 c5 32 31 ea 45 4a e2 cc 46 6d 39 20 90 bd 9c e5 f2 b5 a4 e0 12 64 74 f2 5f ac 58 c7 35 b5 02 85 45 0e 11 6a b1 b3 84 b4 92 d0 69 80 0a ca a2 2e 06 f7 bb 74 53 32 6a 50 06 a1 a2 32 66 f7 cc 74 3e a0 6d 43 99 c7 b9 28 2c 4c ab 7f 71 90 f1 a1 ae 49 f1 0e 40 8d c5 c6 98 f8 23 88 72 43 bb 7d c6 58 de 24 6b b1 09 71 09 4d 17 fd a7 ae 21 b4 0c 6d c3 1c d2 33 3c 14 ea e0 ae f5 92 d0 3e a5 6d 4d 00 17 1a 95 67 b8 53 ed c0 da e3 ea 6e da 1a 74 87 3a a3 92 16 40 74 65 d7 68 df fe 6e da 0b 88 1a 4b 65 63 48 69 cf 15 a6 8e 51 96 ee 06 fb a6 f9 76 fd ca d6 d5 b1 90 c7 83 57 55 5b 05 0f 23 6c d0 b6 cb cb a6 c0 c0 e0 1c 40 f8 94 5d 51 a6 b6 69 0f dd 7b 76 47 c2 01 4b 8a 1f 36 47 dd 5e df b6 27 b9 ba 6a 38 29 2a a2 0e f6 Data Ascii: 9)55zP$21EJFm9 dt_X5Eji.tS2jP2ft>mC(,LqI@#rC}X$kqM!m3<>mMgSnt:@tehnKecHiQvWU[#l@]Qi{vGK6G^'j8)*
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: cb 16 35 44 57 d3 c7 ee e5 79 1e c6 f5 62 d2 34 56 80 1c 48 e5 c9 72 64 ec c7 a1 39 1c 66 ad 34 14 24 1a 7d a8 92 2d 12 76 af 3a fc d8 1e 1c d0 ac 0e ba 13 6d 76 9a 0a 93 c1 b8 64 ae 56 65 4d 49 25 08 34 18 62 71 a2 be 8d 94 dc 92 66 a0 71 a6 9c d6 9a b6 67 b4 0e 63 2d c6 a7 35 6d 5a 2a b2 0c 59 af 0c 29 c0 f2 2a 4d 49 14 e0 c1 7e a6 74 34 70 bf fe ec d9 ac c3 ee 20 6b 99 bb 5b 35 e5 8d 96 07 60 f6 b9 a0 10 5a 78 f2 cd 66 8f 69 f1 fe d7 fc 99 a1 ff 00 99 72 fe f5 fc d1 03 f4 e3 aa ed e2 dd ff 00 b5 fa d7 2c 8e 5f 2e de 2e 5e d2 ed 0d 15 f4 25 a0 04 e9 fc 2e cc 51 46 f4 74 7c bf 32 35 ba c9 5e 3f c7 f1 fa 9e 8f 9c 47 75 6e e0 59 e7 20 3c 93 f8 a9 c7 bc 1c 0a be d1 6a c9 4d 66 ac 89 b7 ba f4 67 13 bc 1a 46 44 72 f3 f4 dd 83 49 3c 74 aa 55 b8 da 4b 5d 65 41 Data Ascii: 5DWyb4VHrd9f4$}-v:mvdVeMI%4bqfqgc-5mZY)MI~t4p k[5`Zxfir,_..^%.QFt\|25^?GunY <jMfgFDrI<tUK]eA
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: d8 5c 94 fa 17 6d ce 23 1b a4 90 0a 07 34 d5 bc 31 ce 8b a5 53 9d 73 18 eb 59 74 b6 06 81 56 99 9b ea 8e 61 e7 49 15 ee 28 65 4c c5 e4 8c 37 d4 60 f8 58 e7 34 1e 7a 4d 2a 82 31 24 2d c8 c6 84 d0 0e 28 02 29 ff 00 16 5d d5 40 32 4a cc 79 d9 8e 4e 18 f8 a6 07 a1 7a 51 b5 b4 8c d2 84 d2 81 49 0d 16 fb 87 0c 3b b2 4c 05 61 20 e9 e2 79 a6 84 c9 13 90 c1 31 33 c7 51 dc 7a 32 3a 87 07 51 66 2e 24 8d d3 a5 82 a4 e9 03 82 09 78 10 f5 1d a4 38 11 82 04 0c 57 a5 ae 7b 49 e1 85 12 1b 1c 00 25 d5 cf dc 90 22 d3 b1 d9 09 64 61 a6 24 8a f6 d1 57 66 5f 45 e4 d8 36 fd b0 68 68 2d e1 82 ae 0b d3 26 59 b5 31 bf 81 55 64 5d 51 e3 6c 5a d1 40 28 07 25 53 a9 6a b0 de 6b 30 7f 0a a5 a2 ea b2 36 7b 41 43 82 83 2c 45 2b 7b b2 0e 8d f8 57 05 09 2d a9 8a ee b6 8f 8a e1 ce 68 a6 38 Data Ascii: \m#41SsYtVaI(eL7`X4zM*1$-()]@2JyNzQI;La y13Qz2:Qf.$x8W{I%"da$Wf_E6hh-&Y1Ud]QlZ@(%Sjk06{AC,E+{W-h8
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: e7 62 5e d7 0d 3d ca 9b 56 0b e9 63 2f dd b6 23 2b 9d 46 62 95 6f 05 d0 99 0d 6d b4 4f 69 28 2d 69 18 85 2b 5e 4b 28 a0 d1 f6 3b b9 e0 2d 6b ab c1 50 9c 32 76 49 a3 4d b1 bc 73 da 2a b7 e2 c8 73 73 63 48 7b 24 95 19 ab 5d 8a 15 46 92 3a 91 bc e4 92 06 60 1f 55 6e cc 76 2f 65 7e 3c 0a b7 02 9b 19 bb 56 8a 1e 72 66 61 6f 39 05 df 6e af a6 ce ec c2 6f 62 04 de d6 09 ba 70 02 82 a2 8b 2e 43 6e 24 de c6 99 6f 08 f4 c0 3c b3 59 8d 51 ea 54 37 a8 c8 94 90 2a 0a 9d 48 59 a6 56 d8 d2 1e 4b 86 7c d5 85 5f 32 4e 86 82 be c5 12 7f 31 36 9a 4d ef 24 a9 26 41 a3 45 d8 88 3a 4d 73 4d 09 ec 5e e2 a0 02 83 b8 2b 11 11 4d 54 39 a0 02 eb 27 8a 62 62 45 d4 a6 65 02 15 6b f9 fb 12 24 2a 1f 51 5a e1 98 4c 01 f5 30 a7 b9 00 b7 21 37 39 3f 4c e0 a1 62 49 e8 50 64 23 d6 e7 57 64 Data Ascii: b^=Vc/#+FbomOi(-i+^K(;-kP2vIMssscH{$]F:`Unv/e~<Vrfao9nobp.Cn$o<YQT7HYVK\|_2N16M$&AE:MsM^+MT9'bbEek$*QZL0!79?LbIPd#Wd
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: c5 f7 86 d2 e3 3a 79 8f 1e d5 7b 30 89 b4 0f 97 7d 4f 0f 7a 81 24 27 64 03 84 74 e1 fb 54 19 6d 0b 0b 22 0e b8 8c 71 2d fb d3 0f 25 f6 d2 d3 54 4c 14 e0 a3 25 c9 12 23 6d 8c d2 ad aa 39 0f 80 6f ed b1 80 49 62 39 0b db 28 7d 63 b5 34 6d b3 dc 35 ba 5d 6f 47 b8 8f cb c5 26 e4 4e b0 63 f2 b3 fb 6d 9c f2 4c 00 9e e8 09 2e 03 86 2d 8f 26 17 d3 2c 2b da b9 bd 9b 72 b7 15 e0 df d6 a4 29 1b d8 42 e9 65 b5 ad 74 c7 a5 f2 54 00 05 7c e6 a3 ba 81 62 bb 3a 14 52 44 75 5d ab 77 7d ef 67 db c0 d4 04 b2 dd 5d 8c b4 c6 da 06 9f 15 2c 57 e1 4b 58 6e 9c ef 5a bf 1a 96 78 b6 78 28 d7 c5 1f a3 20 14 6b d8 e7 35 c0 78 15 9b dc 66 ee 08 8a dd 76 93 a0 99 2f 6e 1f c9 ae 91 c4 7d a1 4e 99 7e 08 8d b1 49 1d b0 6c cc ba dc e0 63 23 d7 1c 4f 0f 7b dd d9 d8 ac cb 91 f1 21 8b 1a 4e Data Ascii: :y{0}Oz$'dtTm"q-%TL%#m9oIb9(}c4m5]oG&NcmL.-&,+r)BetT\|b:RDu]w}g],WKXnZxx( k5xfv/n}N~Ilc#O{!N
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 00 02 81 05 40 1c 80 39 00 21 3f c0 84 26 53 6f 0d 2e 47 7a b1 15 3d cb 55 99 f2 37 b9 41 96 a2 51 a7 04 86 19 00 15 c7 04 00 d1 e7 14 21 11 17 c7 f4 de a7 52 17 31 bd dc 8f 5a 9c 9c 68 af b1 83 c9 1c fa 7a 2f ee a9 50 24 31 da 85 08 18 f1 a8 f1 51 65 94 2f 36 83 fa 88 28 33 69 4c 1e e6 8f 69 fc b6 f7 28 33 45 49 88 85 54 19 34 28 40 68 73 9c 74 b5 a0 b9 c7 90 1c 50 33 2e ea 91 2b ba 7b 76 9d c5 d1 49 73 1c 94 00 e2 3d 51 81 ad 32 a5 15 59 fe c6 4b 1f de 8c 1e 28 74 b6 3b 76 b0 11 03 fd 7b 90 32 0f f4 c0 63 29 d8 00 5c ab 33 a9 54 a4 5b a8 f5 47 b3 3b 6e 8d d4 30 d9 49 3d c5 3b a8 2b de e7 15 0c 5a da 7e 25 b6 d9 af 81 0f d2 37 5e a6 d5 03 5d 8f a4 df 49 c3 88 2d 51 ec a8 bb 35 f5 ad ca 88 61 b9 4b 2e eb bb 8b 22 49 b2 b0 a4 97 7c 9c e3 8b 19 f7 95 3c 69 Data Ascii: @9!?&So.Gz=U7AQ!R1Zhz/P$1Qe/6(3iLi(3EIT4(@hstP3.+{vIs=Q2YK(t;v{2c)\3T[G;n0I=;+Z~%7^]I-Q5aK."I\|<i
2024-04-23 14:06:19 UTC	7240	IN	Data Raw: e6 19 a4 b6 f3 09 a2 91 ae 0f 63 71 73 4d 3b 16 35 a6 8d 1a 93 f2 6a 5d 3a e3 3d bd ac ed a8 6c 8d 04 03 c0 1c 68 51 8a 64 af 34 13 db 34 af 37 bb 9d b5 6b 14 33 10 ce ce 2a ee ad 9f 3b 57 c1 47 65 2e 15 b7 92 c8 c1 ec 2b a3 53 0d 80 98 55 a0 73 70 4b 22 0a 32 2a 0b 9b 7b c7 be 48 c8 9a 0c 63 2e 3f 0b 85 69 80 e4 b2 e3 c9 5c 8e 56 db 1a 6f 8e d4 50 f4 7b 8e af 6d 9b 35 bd c1 8a 26 fa a2 10 d8 d9 fe 8c 40 5a f2 52 6a e3 d3 f4 32 e3 bc 59 4f a9 90 74 fd bd b9 ea 59 b6 c0 df 52 e2 d1 8e be be 94 1a 00 e9 24 2c 63 29 cc 52 ab 99 8f 1b b3 4d fa c7 e4 74 bb 19 52 4e ab d2 7f 33 47 bc 63 27 df ac d8 e6 97 3e da c4 d5 bc 1b ea 38 90 7d eb 7d b5 c8 97 a2 fd 4e 6d 65 51 bf 88 b7 4b c2 63 77 55 dd 38 10 e9 77 6b 86 b0 fe 66 b3 48 07 c6 98 2b fa 6b ea b3 f8 95 76 dc Data Ascii: cqsM;5j]:=lhQd447k3;WGe.+SUspK"2{Hc.?i\VoP{m5&@ZRj2YOtYR$,c)RMtRN3Gc'>8}}NmeQKcwU8wkfH+kv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	49982	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	1038	OUT	GET /wp-content/uploads/2019/08/SF5-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:19 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/jpeg Content-Length: 127952 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	2619	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:19 UTC	4363	IN	Data Raw: 84 27 87 cf 8e 00 1a b8 8d 68 f1 15 b6 d9 a1 81 0f 5a 44 b2 0d 8a df 25 fb 7a 53 15 5d 3b cb db d8 7b 76 0e 6d 11 70 c1 9e 83 94 85 c7 d6 6e 34 a5 91 54 9e 55 3f 42 7c 5f d2 75 b4 27 d3 6e 20 66 07 51 58 26 75 ec e4 58 2d 64 48 3f 09 99 7f 48 aa 8d 40 fd 38 bf f2 99 ff 00 74 52 00 62 38 8f fe 13 3f ee 8a 43 02 61 8b ff 00 29 9f 40 a6 26 04 47 16 5e 93 3f ee 8a 60 0b d3 8b 3f 4d 9f f7 45 21 86 35 91 7f e5 b3 fe e8 a4 01 ad 8e 2f fc b6 7d 02 80 0c f4 a2 23 fd 26 7f dd 14 00 53 e1 8b ff 00 29 9f f7 45 00 17 e9 c5 ff 00 94 cf fb a2 80 3d f4 e2 ff 00 cb 67 d0 28 03 d1 14 5f f9 6c ff 00 ba 28 03 df 4a 2f fc b6 7d 02 80 12 5f 45 0f a2 7f 09 99 76 14 d0 9e 47 2f 7f 5f f0 b0 f1 cf 6e 5c d8 c2 b7 7b bd c5 a1 33 b6 18 61 e3 5a ec 67 ec 39 bb 9c d5 0e 62 5c c6 57 49 Data Ascii: 'hZD%zS];{vmpn4TU?B\|_u'n fQX&uX-dH?H@8tRb8?Ca)@&G^?`?ME!5/}#&S)E=g(_l(J/}_EvG/_n\{3aZg9b\WI
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: e9 f4 d5 6d e0 5a a2 9f b4 bf b8 86 d7 24 0d b6 69 6e 92 5c 49 24 e2 a3 12 bf 1a aa 54 6c b6 2d a5 8f 6f eb cc d2 7b 04 4d 73 6d 9f a5 35 00 d2 d1 d3 1c be 15 55 4b 14 71 2d 46 ec d0 cd 1b 64 d3 80 1a 40 a0 6d a6 36 5f 6d a6 16 17 86 69 6a 69 71 01 30 e9 4e 80 d9 0e be b5 d7 6a 58 83 53 55 53 02 7a d2 1a aa c8 7a d8 2c c1 8d 92 22 b8 b4 02 06 75 1a 12 6f 0c c9 cd a8 f4 d8 e6 81 81 4c 7b 76 a7 51 50 51 6b 71 a2 55 c9 b9 25 2a 93 a5 49 8d 9c 7e b1 69 23 05 fb 2a 48 8b 24 51 c4 03 86 08 9d 29 d0 55 a8 f9 62 10 90 7e 9a 62 e0 3e c5 d1 68 00 d9 00 11 ba 90 cc 71 fa a4 95 b0 70 3d e5 e8 49 f4 c8 41 9a 1a 17 e4 89 35 e5 7e 0c e6 c7 b0 97 4e 86 59 43 54 b9 f3 39 d8 7f cc 6b 5d f5 81 c2 b7 26 a4 ce 80 5a 6e 93 1b 48 08 85 e0 e8 40 00 27 eb ac 1a 68 6d 73 0c 1b bd Data Ascii: mZ$in\I$Tl-o{Msm5UKq-Fd@m6_mijiq0NjXSUSzz,"uoL{vQPQkqU%I~i#H$Q)Ub~b>hqp=IA5~NYCT9k]&ZnH@'hms
2024-04-23 14:06:19 UTC	4344	IN	Data Raw: ea 84 ef 92 0c 71 6d 18 8a a1 06 68 06 6e 6f d5 4c 55 40 7f 35 6c 3f 9d bf 4d 3a 30 aa 3e 17 d6 a3 ff 00 11 bf 4d 14 0d 48 17 e7 ad 53 fd 41 f4 d1 40 d4 82 9d b9 59 b1 56 56 fd 34 50 5a 90 99 fb ed 84 79 ce c1 e0 b4 e8 c5 ea 21 ae eb 94 ed 71 35 e0 dc b3 e9 14 d4 48 bb b1 22 fb 96 f3 0d e3 7d 38 48 3a fb 75 a9 a5 42 99 4e a5 37 67 1e 8f 71 9a e1 fc d1 26 5f e6 c2 99 42 5e 73 5e ec e7 fd b3 3e 18 d6 69 1d 48 64 3a 3f 23 48 91 1a de 87 fb 63 52 89 09 11 4d a7 ff 00 5a be 23 ec a9 bc 8a e3 99 39 ba 1f 84 3a d5 68 b9 95 d5 f0 3f de 21 c7 0d 3f be ae 59 14 4b 32 71 b5 60 d3 dd 2a b9 16 44 33 75 ff 00 47 e4 68 88 48 e4 a7 eb ba 35 dc b8 3b d4 20 6d e0 45 c5 7c b5 ae d1 cb ba bc f5 39 b1 3b 5d ea e0 3f 98 8d 35 79 5a 64 8e 08 81 87 00 a1 8d 55 39 1f a6 81 d1 56 Data Ascii: qmhnoLU@5l?M:0>MHSA@YVV4PZy!q5H"}8H:uBN7gq&_B^s^>iHd:?#HcRMZ#9:h?!?YK2q`*D3uGhH5; mE\|9;]?5yZdU9V
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 4b 0b 8a 64 14 60 b4 b3 27 8a 78 e7 da 85 89 c6 f4 cb 6f 1b 02 17 3f 1d 2e e8 07 4a ae 59 96 c7 04 d7 6f 0f 02 4b 73 70 2d d9 23 1c d3 a7 aa 75 03 b7 c2 90 b2 55 a7 6e e1 07 1d df 7f 2d 7b 2c 51 bd 34 9d 5a 5a 54 69 5c 4f ca 8a 71 1b c7 ca 69 7e 31 bb fe 6e 28 d2 5d 43 48 f3 1c 17 e5 50 26 f0 c7 e2 4e 34 fa af 78 7f 9b 53 54 bb ba 75 a9 08 65 ba da 5b ac 3d a3 a8 cf 20 3a 9a 8d 49 d3 8b 63 7b da 21 98 8c 10 66 b8 2d 42 44 a2 c9 ee c7 7d 84 51 87 a8 62 29 27 ea a2 a4 a8 58 8f dc e3 82 0c 5c 14 37 22 69 b9 50 23 1a b2 bf de f7 c6 bd a2 36 95 71 27 ae 75 ca de ee 54 55 0f 47 d3 76 2e 52 ab 42 8e 3d 66 6e a4 6c 8f 0b d9 7b 57 06 d3 f5 65 89 e8 ef ff 00 aa 18 0e fb cc 72 da 00 63 6d 5f 7a 2e 0b 03 3d 89 29 e6 3d 70 bb 89 65 20 3d 14 1c 41 ae a7 4d 95 51 c4 eb Data Ascii: Kd`'xo?.JYoKsp-#uUn-{,Q4ZZTi\Oqi~1n(]CHP&N4xSTue[= :Ic{!f-BD}Qb)'X\7"iP#6q'uTUGv.RB=fnl{Wercm_z.=)=pe =AMQ
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: bb 05 5a 17 31 ca b8 27 db ec 41 a4 b6 96 46 4c f6 f9 5e 1d a5 83 a6 19 e2 b9 9a 75 12 4f 2c bb 73 2c 6e 2b 6e fb 76 b4 e2 1a d6 66 99 94 42 2a b9 3a 93 8f c0 1f 22 94 b1 92 69 68 03 46 a2 a7 33 8e 0a 28 40 de 3e 6e c8 ab f6 ad dc c5 bb 46 1c 74 99 81 60 79 c8 11 f1 4c f2 a9 35 51 a6 93 c4 d4 1c 17 7a 0c f4 cb 9c 80 f9 53 e3 92 d5 6c 94 1b 75 e4 68 0b 2b d8 a6 31 9d 63 50 07 4a 52 cc 92 c0 76 79 66 95 18 e0 47 f8 fc e8 63 e1 89 5f 72 2b 96 db bb 50 28 5a aa 46 19 55 52 2d 8f 24 7d c7 b9 13 18 1b ea 3c 39 02 bb b5 45 32 72 80 e1 bb 73 58 c2 b3 d6 d2 00 28 15 70 1f 65 51 7e ed 11 bb 65 b6 72 63 1e d9 bb bb 76 bc 8c 6a d4 09 52 73 4e e2 bc 9e f7 73 59 52 a7 be d8 ed 14 21 5a 1a 13 8c b5 91 86 01 8e 4b f1 ab f6 38 33 17 50 c5 0f 7b ad b8 9c 1f 2d 74 2f c6 a7 Data Ascii: Z1'AFL^uO,s,n+nvfB*:"ihF3(@>nFt`yL5QzSluh+1cPJRvyfGc_r+P(ZFUR-$}<9E2rsX(peQ~ercvjRsNsYR!ZK83P{-t/
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 33 0e e7 81 ca eb a0 b1 00 0e 20 79 87 42 0f 57 7e ea d2 8c d2 cd 32 23 76 e4 76 25 c9 ab f9 46 07 aa 8f 0c 33 a0 79 7b 06 19 1d f8 cd 72 b7 3f 2f 51 fe 34 0d e3 8b 2c 1e 2c 7f f7 0d b1 c0 10 7d 76 62 98 a1 cd 0d 3a 91 a2 68 ee 87 b5 ee 0e e3 5c 79 c0 82 0d 8c 18 8c be e0 4a c7 70 df b7 c8 b9 87 dd 6d 52 6a 00 ea 00 6b bb 34 e2 45 9c 6c b7 bd d1 1e 96 80 5c 5a 4b 64 54 d2 1d 87 4a 9b 2a 4f b7 71 16 dc 77 29 c4 a2 36 bb ca 08 04 bb 02 a7 e1 52 40 da e1 f1 ed f1 0d 8e f5 d3 44 d2 49 21 48 18 22 06 85 51 e1 43 48 51 6e 29 f6 ed f6 26 3b 46 cd f9 bb 21 a1 80 bd fe 70 d0 33 00 22 63 55 c8 b2 31 ae 5d bb 73 2d 0d 8f 8c be 3b 56 34 b5 1f 1a 28 2b d4 2e 3e 35 0d 58 92 a6 0f b7 6f 02 19 c9 f6 fd 06 e5 ae 28 f7 14 0d 41 d7 ad 49 3a 11 92 79 be 25 13 73 b6 98 ef db Data Ascii: 3 yBW~2#vv%F3y{r?/Q4,,}vb:h\yJpmRjk4El\ZKdTJ*Oqw)6R@DI!H"QCHQn)&;F!p3"cU1]s-;V4(+.>5Xo(AI:y%s
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: e6 e2 50 23 d0 98 aa a6 3e 35 8e f6 f6 30 c1 3a 9b ed 74 f9 3c 65 87 c3 b3 2d ee 41 37 0f f6 ea 19 6c a0 e4 70 6e 17 cc 63 cb ac b6 7b 78 9f 10 92 46 e8 49 6f 65 28 bd c4 63 31 f1 ac d0 d7 73 81 aa e3 84 16 05 33 c8 b9 06 c1 bd a9 b9 db 23 b1 dd a5 8d 5f ba b6 77 96 b9 59 a5 ba e1 60 6b 23 c3 0c 31 ef da b4 c2 12 59 3c 0c f7 2e 45 e7 9f 6c c8 8e e5 be ee 3b 8d fb e5 e4 37 b7 b7 97 d2 32 16 c9 71 3c 8e 93 cd 6d 1b 62 85 cd 69 28 b1 c6 d0 d0 99 8a b5 45 25 e5 28 77 1b 74 93 2f 8f 6c fd c5 e6 9c 2e f9 bb bf 02 e4 ae d9 af d8 03 ef 36 82 a7 6f dc 58 30 70 74 45 5a c7 bd 31 08 84 f5 15 82 ef 97 1c 57 7a cd 7d d1 d4 b1 1d 6a 99 ae 4f 2f d1 9d 43 f6 53 f5 55 b1 fb 89 03 36 ed db 6e fe d5 c8 ad 74 b7 72 b3 8d a4 86 2e 02 56 b1 de 62 c2 70 56 aa 75 ef 54 4b 7c ec Data Ascii: P#>50:t<e-A7lpnc{xFIoe(c1s3#_wY`k#1Y<.El;72q<mbi(E%(wt/l.6oX0ptEZ1Wz}jO/CSU6ntr.VbpVuTK\|
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 82 df 30 84 55 65 84 13 78 95 86 e2 04 38 e3 8d 5d 14 53 36 22 86 f3 4c ba 7a 77 a9 69 21 a8 4f b8 6e 8d 6c 0f 20 e2 17 0e f4 28 90 95 cc 0e 78 fe ab b7 66 df 5b 6d 56 08 5e e6 5c 19 40 c9 3c a9 89 f1 ab 63 83 32 cd d5 f3 39 a9 bb 37 fd e3 b0 54 72 12 33 ed 8d 5f c0 ab 36 4d b6 a8 cb ec 83 42 6b 11 90 03 71 2a 46 00 7c 69 12 6f 1a 2c fb 7c cb 77 68 b3 31 0e 59 67 0c 11 5e 3f 70 e2 af bb b2 85 d8 b5 f7 7b 54 90 7a a1 e0 fd f3 13 da e6 32 32 13 05 39 d5 2d fc fe 65 c9 62 f0 e1 f1 5d b0 25 be d9 6c 8e df 79 16 cb 60 e7 fa b7 bb 60 76 e5 71 bf 48 04 8e 8a da 55 2f b7 69 7a 32 33 2b 9b ad 8f 76 58 e4 d2 b5 1b 92 d2 ab db b2 0b 6b 52 4b 97 bf 1f b8 f9 cd 39 e5 df bc 5b a3 38 8c 52 cd 61 ec a7 0d 96 2b bd da 38 f5 11 bd dc b5 e7 d0 63 9b 9c 8d 73 81 10 b1 df 78 Data Ascii: 0Uex8]S6"Lzwi!Onl (xf[mV^\@<c297Tr3_6MBkq*F\|io,\|wh1Yg^?p{Tz229-eb]%ly``vqHU/iz23+vXkRK9[8Ra+8csx
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 75 d3 a9 c0 6a 8c 4a 30 38 74 a2 21 20 c9 06 a8 1f 57 ac 51 9d e6 73 f3 f5 87 63 eb 70 7b d7 04 fc 27 87 10 7a 63 52 da 3a 5d 44 7a 82 ad 86 62 5f 6a 61 b5 b8 90 b6 e3 49 5d 28 5c 06 2a 13 af 5a f4 33 74 47 87 8a 75 cf f5 37 37 04 d9 36 78 ed 55 de 93 9a 1e a5 00 5f 14 ae 75 c9 ba e2 74 ed db aa c0 bb ed b6 4d a6 6b 5f 2b 22 20 31 18 70 fd d5 07 22 e5 03 39 fb a5 b5 ed 02 0b 86 3d ad 2d c5 5a 33 54 c1 3c 6b 2d d9 b5 91 b7 6f 04 de 66 2a 9a 1d be 0b eb 8f 46 31 83 ce 95 44 24 67 54 eb 6d 62 74 bd 38 ac b3 1d ed f7 08 a1 68 0d 1a 70 46 8e 9f 01 4b 32 71 49 71 75 1d ed f7 18 ee 9c e2 e7 6a 68 19 64 49 14 a9 42 34 4f 36 19 3c 6c 9d 85 ec 61 68 68 c0 aa 82 45 0a a5 74 49 e2 88 7d dc 8e 84 6a 1f 7a 32 ba 73 29 d0 9a 78 96 24 aa ab f7 ec 85 fb 26 e0 6e 2e e3 8d Data Ascii: ujJ08t! WQscp{'zcR:]Dzb_jaI](\Z3tGu776xU_utMk_+" 1p"9=-Z3T<k-ofF1D$gTmbt8hpFK2qIqujhdIB4O6<lahhEtI}jz2s)x$&n.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	49983	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	1038	OUT	GET /wp-content/uploads/2019/10/VAL-fd-2.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:19 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/jpeg Content-Length: 501716 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:14 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	2638	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:19 UTC	4344	IN	Data Raw: cd 81 c9 7c 16 1a 8a a9 c0 92 90 21 d6 d1 7b 16 7d fa f1 5e 6b 6e ad 5d 8a f0 90 32 0e 52 02 a3 f7 0c ee 37 d6 c9 94 99 a1 6a 36 56 b4 66 b0 8e 9c 35 64 12 c3 5a 53 cd 38 96 19 50 c7 c1 f8 63 c6 8c 0c 3e 6b d7 2b 5b 95 a2 07 8b fd 4a a5 72 c1 94 7e e4 93 6f 5d 8e b3 eb 24 a4 4a cf e4 b6 a1 f6 92 af 4e 89 25 98 56 46 96 67 12 32 39 27 76 18 3b 93 e3 d3 1a cd 69 73 c8 75 14 a7 6b 52 e5 2a c8 d0 88 2d 4b 39 33 af 12 0a 7b 6c 4e 55 57 7d be 1a dd a6 38 07 b5 2d ba f5 ac cc 38 dd 82 bb ac 9e fb 80 1b d8 3b c8 8f 9d f2 1b 7d bd 34 55 47 00 90 6f 5a b1 bd 7b 56 02 25 3a f3 45 9a f1 0c 7f 56 37 07 90 8c 6f 9d f0 40 27 4a ef 84 2b 60 04 50 e9 80 eb 27 82 31 57 b3 95 b1 ec a9 e3 2a bd 7f 0f ee b1 ce 59 4f 8d 4c b9 69 f0 29 79 29 86 e3 f6 17 2c 23 d3 15 a0 65 8e 48 Data Ascii: \|!{}^kn]2R7j6Vf5dZS8Pc>k+[Jr~o]$JN%VFg29'v;isukR-K93{lNUW}8-8;}4UGoZ{V%:EV7o@'J+`P'1WYOLi)y),#eH
2024-04-23 14:06:19 UTC	4344	IN	Data Raw: 9a 9f df c6 25 a7 7d 4c dd 4f 7b 58 99 28 5d 8c 6f 98 e5 03 66 c7 95 60 18 78 23 5b 34 09 8d aa f6 09 22 05 97 0a 30 3e bf 4c 7a 0d 21 c9 7c 95 55 89 92 bb 70 01 73 ed f9 07 d7 ce 80 07 12 05 cc 73 a8 1c f7 c9 19 07 fc 74 00 4a bb 2a 15 7c db ae f8 cc 2d 9e 40 0f f4 fc 7f 4d 02 67 8f 45 62 02 5a 8f f7 10 3e c5 47 90 7e 1f 2c 7c 0e 81 9e 46 c9 21 28 c0 f0 f4 c8 c0 db 62 b9 c7 91 f0 d0 c0 0a ef 56 8e a6 48 be ac 92 58 63 23 e4 71 a2 45 01 1d 4f 77 6f a6 af 27 59 72 a2 f7 3f 8f 58 93 95 8e 92 c9 21 79 1f fd ca f2 79 85 c7 c5 7f 88 d1 20 7d dd fe 23 07 77 d7 49 da fe 25 74 df ab 54 19 6d d1 99 7f ef 2a 7a f0 b7 0a 83 ee 27 c2 44 fe 23 58 ed d0 af 95 c9 a2 bb e1 f0 70 be cf a8 6e a6 c4 9e e4 4d 2d 79 e3 2f c9 13 2a a4 fc 1b 71 fa 6b 95 ab 2c 32 2c a1 99 f9 e3 Data Ascii: %}LO{X(]of`x#[4"0>Lz!\|UpsstJ\|-@MgEbZ>G~,\|F!(bVHXc#qEOwo'Yr?X!yy }#wI%tTmz'D#XpnM-y/*qk,2,
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 32 76 f2 20 7e b7 ab 62 5a 38 d4 f8 9a c1 3e 76 dd 54 fe a7 6d 6f dd 59 c7 8f 2f fd 8e ae b5 d1 16 bf f7 78 5f ea ff 00 d1 18 6b a9 34 b6 99 ec cc 6d 5d b0 dc a4 94 7d 41 9b fe 93 ae da 35 18 e0 c7 f2 3b 4b 63 ae b7 b6 7e aa c0 92 d2 99 c8 00 c9 3f 1e 4f 9c e7 8a 92 31 9f 8e b9 b6 fa eb 62 c6 0c d5 67 83 5f 43 f2 f1 7f b2 02 d5 25 8a 92 a1 48 f8 e4 c9 8f e5 77 3b 8d be 43 5c d6 f4 a1 61 cb 1b 67 43 eb e4 8f ed cf bb 4d a5 aa a9 ee 22 28 e3 ed 86 38 c7 22 33 bf 91 8f 3a e3 b5 33 c9 a5 40 eb 76 26 b4 8f 29 8e 18 e0 98 01 0d 49 01 e0 83 c7 b8 72 0f a0 f5 d5 3a 4a 29 58 d4 47 d4 c7 71 44 ed 2c 52 72 01 d2 28 d7 99 df d1 38 ef b1 df c6 b1 fc 8d 60 b5 91 47 6b 37 69 d3 93 28 a7 1a 53 9b 11 f6 31 23 81 38 e5 f4 a3 21 3b ee 3d 31 a7 ad 56 f8 f3 e0 ce ee 0c 6c e8 Data Ascii: 2v ~bZ8>vTmoY/x_k4m]}A5;Kc~?O1bg_C%Hw;C\agCM"(8"3:3@v&)Ir:J)XGqD,Rr(8`Gk7i(S1#8!;=1Vl
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: 3f 56 73 c9 7f 5d 15 f5 9b f2 4f e5 f0 31 ea 3b ae af ed ec 58 82 b8 87 b1 5b 2d 24 56 e3 18 cf 24 f4 f2 48 c6 db f8 d6 7b 35 59 61 82 73 c0 1f 6b db d3 b0 b1 5b 48 7d c1 01 66 67 89 cf 32 c4 79 70 49 ce 0e df 0f 5d 3d 7a ac 9c 70 2b 58 0a b7 e5 9f d4 92 54 ae 92 94 5c 2a b0 31 be fe 48 1b ef fc 75 a3 f5 5a e4 9e e0 63 f2 23 66 d3 59 96 34 95 d0 14 8c 2a 80 15 49 f2 ad 8d 8e 35 ab d5 0a 08 6c 2a 6b 55 2c a2 b5 c9 d6 69 19 8a 27 33 82 23 fe 50 78 e3 62 75 a5 2f 6a a8 42 43 5e bb f1 fe c7 b5 ae d7 69 57 ac b0 bc 8d 05 e9 cc d8 e2 c8 07 d4 c0 6f 8c 1f 4f 3a ce de ea a3 8b 1a 2d 6e c2 0b 3d 5f 63 d4 b1 8a f4 75 d9 a6 88 14 88 4a ac ae 0c 85 55 b9 9f a9 71 e4 67 c6 bb b4 ee a6 e5 da b2 67 6a ba bc 83 cd 99 60 ad 1c 95 0b c9 1b 3c 5c 10 a9 27 81 18 76 61 b1 f8 Data Ascii: ?Vs]O1;X[-$V$H{5Yask[H}fg2ypI]=zp+XT\1HuZc#fY4I5l*kU,i'3#Pxbu/jBC^iWoO:-n=_cuJUqggj`<\'va
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: d3 49 ec 74 bc 59 f0 b3 ff 00 83 39 cf 21 96 a1 a9 15 c3 58 24 35 c9 89 51 6b c6 fe e2 a7 d0 32 c5 c9 05 89 24 9c e3 58 d6 cd d6 46 99 7f e2 dd 5f 61 62 7e c6 c5 41 0d ce c0 54 e7 05 09 4b 7b f2 46 84 04 e3 92 aa 55 b1 92 18 e3 f5 d7 37 bd b6 b1 5a b9 4a 79 f0 6f ae bd b8 33 bd a5 fb ca 20 a9 1c 66 92 75 af c4 53 31 f1 78 9e 43 f5 b3 93 e5 98 93 9f 97 8d 74 68 d5 4c be 67 cf c8 e2 4d cf fe 3f a7 d9 24 56 7b 19 1a 3a b4 27 6f 7e ab 39 f1 20 52 99 23 d4 01 91 eb 9f 4d 70 ff 00 90 bd 1d 95 57 2b 03 ef f8 f9 0e b0 b2 41 25 88 c7 2b 76 a4 53 34 71 c7 1a 9f 1b 61 50 6e 09 18 f1 ae 6d 6f 0b c2 38 2d 69 60 15 7a 1b eb d8 dc ed bb c5 af ee b2 fd b5 58 ed bc 96 64 ad ee 01 8f 6a 15 05 14 83 e0 1d 86 ba 2f ed 6b ea b5 d3 f5 70 a2 7f 7f 25 76 6d 40 9b b1 91 2d cb 6a Data Ascii: ItY9!X$5Qk2$XF_ab~ATK{FU7ZJyo3 fuS1xCthLgM?$V{:'o~9 R#MpW+A%+vS4qaPnmo8-i`zXdj/kp%vm@-j
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 72 81 d5 87 ef 64 f2 39 67 fc 35 55 d9 f2 34 c2 1b a1 ad 05 74 c7 64 76 0f 1d 89 9c 89 61 39 3f d3 0d 11 dd 5b 6e 24 8d 52 db 91 f7 02 9b a4 88 55 bf 00 b2 ea 27 48 e4 48 91 83 bb c8 ad fb 63 1b 67 23 c0 5d f5 73 e4 72 38 82 bf 5b 05 4a f1 f6 13 da a9 60 46 8f 17 5d 3c 8a 66 f6 c3 0c aa 30 ff 00 47 eb 92 0e fa cf b5 9f 04 cb f0 7b 56 d5 43 d9 77 25 51 64 aa cc 32 a8 07 1c 83 cb 03 3f 57 9f 8e 9d a9 35 5f 20 eb 84 2c ec 2f 4f db 58 47 a5 3b aa 34 ea df 64 a8 43 b7 04 21 89 3f b9 b3 e3 7f 5d 14 a7 5e 4a 55 81 b1 eb 2d 3c 94 cf b7 35 29 e0 85 a4 b2 b1 66 47 cf 1d 89 f4 c1 fd 0e 34 3b a1 48 6a 3c a9 d4 fd a1 89 6d 43 3b 1b 17 99 e1 1e e0 65 3c 51 a3 56 3b 95 1b 8c 6d f2 d4 5a b3 69 0f 23 3e ba 5a d5 e6 96 6a b6 1a cc d6 c2 c7 34 53 a8 05 5d 87 20 24 23 60 54 Data Ascii: rd9g5U4tdva9?[n$RU'HHcg#]sr8[J`F]<f0G{VCw%Qd2?W5_ ,/OXG;4dC!?]^JU-<5)fG4;Hj<mC;e<QV;mZi#>Zj4S] $#`T
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: ba 63 17 b4 aa 32 a2 25 db c9 1e 7e 1a 00 bd 16 a5 a4 eb eb d4 af 30 ed 67 94 c3 29 2e 3d a9 19 dc 08 78 16 23 89 39 c3 67 6f 5c f9 d4 f1 33 c0 89 c9 0c f0 4b 35 79 d7 85 88 24 68 a7 89 b1 95 74 25 58 1f 4d 88 d3 59 02 b2 0e 40 24 8f 4c f9 3a 06 19 0d bb 51 ed 1d b2 0f c4 8c e7 fc 74 00 40 9a 90 5f 75 3d d4 b3 e6 47 cf d0 49 f8 0d 00 31 81 9a 65 56 0d ee 64 8d fc 79 d0 03 aa f0 b2 79 8d 03 0f 4f 87 eb f1 d2 18 6a 0f 75 d8 3a 23 71 18 3c 70 0a 9f 89 1a 06 0f 34 0e e4 f3 72 40 f0 53 d7 40 84 f6 11 93 6c 89 22 27 63 b6 40 d3 10 a6 75 2f c9 62 1c 94 82 59 5b d3 1f 0f 9e 80 11 4c 02 e3 ea 00 7a 8f 51 a0 00 a5 2b c7 38 d8 9d 87 a9 d0 00 04 64 9c 31 0b e8 bf 0d 30 21 c5 8e e1 03 63 40 88 14 43 9c 31 8d 87 94 3a 40 50 e3 07 0d fc 1f 40 14 b2 ec 48 01 87 c3 fe 7a Data Ascii: c2%~0g).=x#9go\3K5y$ht%XMY@$L:Qt@_u=GI1eVdyyOju:#q<p4r@S@l"'c@u/bY[LzQ+8d10!c@C1:@P@Hz
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: 63 a4 ee 43 a8 82 dd 38 63 e0 17 94 6e b2 03 be e0 fe ef f8 e9 25 f0 75 53 db 7e 52 0d af 61 e0 79 a4 a0 4b 2c 44 3f b5 c8 37 1c f9 fd 06 91 d5 4d a9 f0 75 4e 83 f3 66 af 50 74 bd cd 44 ed fa 5b 87 94 9d 44 ed 84 56 1f fb b0 4b 8e 50 b8 f4 23 f8 eb 6d 5e cc 38 7c 19 6d d4 ad fd a3 6b bf 8d c7 25 39 3b df c7 2c cb dc f4 91 e5 ac d7 75 1f dc 28 8c ff 00 fb c4 6b fe e2 0f 49 13 6f 8e bb d3 4d 4a 39 5d 5d 79 14 d2 ec 3d 82 01 61 2c 5b 0c fc 47 c8 e9 00 f5 5a 2b 03 dc 85 83 29 f0 bf cc 3e 58 f8 0d 02 3e 5f a3 38 03 7f 03 3f b8 fc f4 c0 b5 5e 48 ce 21 e2 f1 9f df 03 6c ad 9f f4 fc 0e 80 3d 96 b4 33 06 92 b2 f0 23 fd d8 9b 66 56 f9 ff 00 c8 e8 06 51 04 d2 42 44 6f f5 21 39 70 46 07 f1 d0 c0 b2 c7 5b 0d c4 79 69 80 b2 63 eb 81 88 1e 7d 57 48 00 3a 9e d7 b4 fc 66 Data Ascii: cC8cn%uS~RayK,D?7MuNfPtD[DVKP#m^8\|mk%9;,u(kIoMJ9]]y=a,[GZ+)>X>_8?^H!l=3#fVQBDo!9pF[yic}WH:f
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 10 74 80 89 fd 32 3e 3a 00 8e 81 9e 8d 02 3d d0 07 d8 cf e9 a0 0f bc 63 40 1f 6e 7f e7 a0 0f bf f8 1a 60 7b e3 ff 00 4d 20 3e db 40 1f 7f c3 4c 0f b1 a0 0f 7d 37 3f a6 80 24 00 3f fa 68 02 40 7f 96 90 12 03 c6 ff 00 ae 98 16 2f ff 00 6b 3a 00 b9 48 1f 11 8d 00 4f 3e 0e 31 f1 23 48 0b 53 63 b1 dc f8 3a 00 bd 4e 3c f8 ce e7 40 c3 11 86 07 cb d7 e3 fc 34 01 f3 9c ed b8 3e bf 0d 30 2b 1b 9f 88 3a 90 3d e2 48 27 fc 47 c3 40 12 82 5a 90 4a 57 b1 ac f2 c0 59 0c c1 4f 09 42 2e ec 10 1d 81 3e 32 46 93 98 c0 9f d0 70 23 a7 51 ec f1 b4 f7 ab d3 de 8c 0e 9c e2 cd 88 f9 ba 48 80 ef be 33 8f 86 75 9c b7 f4 13 2b eb aa 76 31 f5 37 84 1d 78 8e cd a6 49 23 b5 3c 8a 92 34 10 29 91 96 28 5c 65 97 d5 be 3b 0d 2b 59 76 59 1b 03 e9 7a b1 da 5b 74 b6 c0 d5 7f a6 7b 12 ca 62 8d Data Ascii: t2>:=c@n`{M >@L}7?$?h@/k:HO>1#HSc:N<@4>0+:=H'G@ZJWYOB.>2Fp#QH3u+v17xI#<4)(\e;+YvYz[t{b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	49981	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	1038	OUT	GET /wp-content/uploads/2019/10/TAL-fd-2.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/wp-content/uploads/bb-plugin/cache/10-layout.css?ver=2b670661ca547c0a2b913d09cf97d721 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:19 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/jpeg Content-Length: 346307 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:16 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	1190	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 48 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 38 42 49 4d 04 25 00 00 00 00 00 10 fc e1 1f 89 c8 b7 c9 78 2f 34 62 34 07 58 77 eb ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 Data Ascii: </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HPhotoshop 3.08BIMZ%G8BIM%x/4b4XwAdobed
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 54 f6 fb d7 4d 4b a7 62 86 d2 df ca 97 40 27 43 9d 47 54 ee 92 73 38 18 e9 af a6 4a d5 a3 82 de b8 a7 e5 a5 9f bd a2 3b b1 fb 6b 7c a7 71 bb e6 e5 b9 b5 7a 66 cd 4e fa eb e8 a9 b5 05 54 a9 92 4a 5c 4b 47 d5 ea 00 69 9c 79 f9 78 79 2a f5 5a 1e ae 3f 53 c3 75 09 c5 9f 49 3c bc ee 46 e9 77 b8 7d c4 dc 1b 9a a1 b7 28 da 55 4a d8 a5 b7 ba 0a 4b 0d b4 74 84 e8 56 29 24 8c 8c 7a 98 6a a9 44 91 e3 72 9b be 47 3d 86 00 bd 24 25 22 42 58 08 b3 11 d1 4d 90 c3 62 53 fe b5 4e 64 cf 28 06 34 39 4e b7 0c 86 38 cc 12 39 45 49 9b 43 a3 2c 74 5a 92 70 9e 72 e7 12 f5 2d 68 8c b5 46 75 4c 92 67 fc 71 81 b0 48 90 db 28 99 2f 8d 47 52 8c a7 3c 87 b2 25 97 54 48 2b 99 6a 99 09 73 04 ea 9e 27 ee f1 84 0d 09 e9 ee 41 a6 56 5b 3e b2 64 93 9c 38 14 8d f4 fd 47 aa 1d 71 44 e2 4e 26 Data Ascii: TMKb@'CGTs8J;k\|qzfNTJ\KGiyxy*Z?SuI<Fw}(UJKtV)$zjDrG=$%"BXMbSNd(49N89EIC,tZpr-hFuLgqH(/GR<%TH+js'AV[>d8GqDN&
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 5b 4d f7 3a 77 b6 17 85 77 0b b3 82 f7 6e a9 43 17 db 6b 95 15 8c 33 a5 2d ce ed 67 a9 ff 00 38 c3 a1 3f a4 a3 50 a4 ac a8 1f 4c 9f 38 01 14 92 7f 03 3b d9 d7 5f 12 5c ad ad b6 3b 9d b2 6b 76 7d 45 17 c8 d2 d6 d1 5c b6 f2 e8 c2 0a 95 4f 49 5c d6 96 05 31 57 a8 0a 77 43 4b 48 9e 69 97 9c 55 f7 5d 8a bd 5c b5 6e e7 cc 3e ef b6 5f 2c 9b a7 71 5a 77 1e 83 7f b7 57 bc cd d1 d6 80 0d 3c e2 14 53 f3 0c e9 c0 b6 e8 1a 92 46 1c 38 18 f6 71 d9 5a a9 a3 e7 f2 d5 d6 cd 32 34 09 9f a8 cc c5 a3 30 d4 99 09 73 86 04 ef b7 4b 28 dc 6c e3 30 52 3e f8 9b 74 2a 9f 52 3b 45 46 68 49 e6 94 99 46 48 ec 7d 46 57 30 ab 41 13 12 23 ef 80 43 fb f9 34 73 90 c6 24 a0 52 a7 d6 16 47 a5 1c 7f 94 0c 10 a1 d7 14 e2 f1 98 03 87 0e 50 86 1e da 70 94 b0 39 40 21 63 69 c8 fc 30 0c 58 80 9e Data Ascii: [M:wwnCk3-g8?PL8;_\;kv}E\OI\1WwCKHiU]\n>_,qZwW<SF8qZ240sK(l0R>t*R;EFhIFH}FW0A#C4s$RGPp9@!ci0X
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 29 16 eb 3e e4 65 ce f6 77 d7 73 38 11 49 b9 6f af a9 df 81 9b 4d 19 6c 1f 01 d0 67 f1 84 ee 97 74 35 4b 3f 11 43 5d be fa 86 de 4b 4b 95 36 3d d7 5a 97 b1 0f 5c ea 95 4e d9 9f 31 50 fa 3f fa 98 9f 32 7c 47 e4 3f 02 4d 6d fa 4d ee bd c0 85 5c 4d 82 ca a3 f1 2a aa b9 55 0e 0f 30 c3 2b ff 00 ea a1 eb e0 35 42 7b 6c fa 39 bb 29 43 f7 ad fd 41 4e d8 cd 34 14 0f 3c af 61 79 d4 0f b2 08 b7 b0 ad 8b c4 9f db 7e 91 36 15 38 1f ba 6e 5b ed cd 43 ff 00 47 e5 a9 01 3f f4 34 b5 7d b0 6d b7 8f e0 56 da f8 13 cb 6f d3 8f 67 ad c9 01 7b 65 fb aa c7 fd cb 85 7d 53 d3 f3 48 5a 13 f6 41 b3 da c7 a7 82 26 d6 ce d7 f6 d6 cf 23 6e d8 36 1a 75 27 e1 70 d0 b4 e2 87 fd 4e 05 18 7e 5d 47 b9 92 94 db 28 29 18 71 16 fb 75 25 11 20 e9 f9 7a 76 9b 97 96 94 88 9b e3 4d 68 8a ae 4b 27 Data Ascii: )>ews8IoMlgt5K?C]KK6=Z\N1P?2\|G?MmM\M*U0+5B{l9)CAN4<ay~68n[CG?4}mVog{e}SHZA&#n6u'pN~]G()qu% zvMhK'
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 71 dd 43 70 77 e3 72 91 6a ed ea 3b 6d 22 6a ab aa 9d 62 90 31 25 25 dd 41 2a 9f 01 8e 73 e1 1c 97 bb 67 75 71 24 5f f6 ce cc df fb 81 67 a6 ac a3 a6 3b 7a cf 5a 80 f3 9b 9b 71 21 6d 21 2d e6 a5 52 d1 60 eb b2 19 2d 5a 53 c6 71 d1 c6 e3 e4 c8 fe 55 f1 ed fd a7 9b cf f5 2e 3f 1a 56 4b 6b fd d5 ad be 3d ab f6 d0 49 64 be fd 25 f6 93 71 52 5b 76 d2 1e ef ef 76 e9 16 19 7e e8 a5 35 57 4b 6f 77 23 37 7d 54 34 b2 3f 95 b0 eb 9e 20 c7 76 6a 62 e2 56 72 bd d6 f0 fe cf de 71 f0 eb cb f5 3b 45 3f d1 c6 fd ee ed 7b fa ff 00 95 1d d5 b2 ac 83 bb 74 2b ac dd 8e 54 5b 92 a0 9e 8d be d1 50 ed 2a 18 19 a4 97 52 42 dc 23 fb d8 78 47 1f 0f 99 97 95 77 0f 6a 5d 12 3a bd 43 d3 f8 de 9d 45 5a d1 59 be ae dd 5f ee 3c f2 fa 92 6b bc dd a0 ee 25 6d 99 3b e2 a6 a2 c5 53 a2 ab 6a Data Ascii: qCpwrj;m"jb1%%Asguq$_g;zZq!m!-R`-ZSqU.?VKk=Id%qR[vv~5WKow#7}T4? vjbVrq;E?{t+T[PRB#xGwj]:CEZY_<k%m;Sj
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 31 41 68 bf 53 19 b7 4e 9b f5 22 96 91 4b 73 6d e1 26 ea 9a 09 99 9e b9 b4 a9 a7 9f e8 70 be ef dc 75 6d dd 59 b3 fb 7b 7d c4 77 66 f6 5d b6 6b ef b7 be e7 55 52 ed 1a 4d a8 e1 15 75 77 60 e5 22 69 ee 69 49 55 39 4a 92 95 ea 7f d3 24 25 a0 b0 b0 41 98 47 aa 0b 65 6d 42 1d 31 55 39 7a bf b6 a3 9f 79 b7 63 f7 ae e2 fe c4 95 5c e9 28 5c 72 82 c2 d8 e9 b0 82 f3 f5 48 67 aa 2a d9 54 cb 6f 24 ba 4c bf 32 08 d5 88 83 1a 4e b3 f1 0b b6 af 0e 7c 0e ba ed 1e c8 b5 76 fe bb 6d dc 1e 43 ad d9 3b 9c c5 2b 28 ba 56 29 b4 b7 43 75 db d7 27 1f b7 bc c2 58 49 48 f9 a1 48 a4 80 99 4c 4c 0f 52 a3 25 69 ea 69 74 92 d3 fe a4 e3 b0 15 94 b6 6e e2 54 ed ad d0 cb d4 d5 75 94 d5 6a f9 a6 1f 41 15 ed dc ab 69 2f 94 ae 02 7d 40 f5 4a f4 69 39 15 0e 31 4d cb 92 36 c2 75 f0 2b be d0 Data Ascii: 1AhSN"Ksm&pumY{}wf]kURMuw`"iiIU9J$%AGemB1U9zyc\(\rHg*To$L2N\|vmC;+(V)Cu'XIHHLLR%iitnTujAi/}@Ji91M6u+
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 82 ef 57 42 e5 23 17 96 8a 02 d4 92 02 9d 62 40 ff 00 ee 29 31 f8 b7 fc 8b c0 f2 b9 94 e4 55 69 92 b0 ff 00 9a ba 7f 97 6f dc 7e eb ff 00 19 fa 83 cb c1 bf 1a dd 71 da 57 f2 df 5f f3 6e fb ca 7e 3f 3c 3f 4a 04 00 52 3d dd de 1b 1b 60 1b 65 df 77 d4 56 d3 8b bf 51 8a 66 e8 e9 94 ff 00 51 74 e1 24 ea 20 c8 12 95 80 27 c0 47 ed 1f f1 bf a8 f9 bc 4b f1 ac f5 c7 69 5f cb 6f dd 64 fe f3 f0 ff 00 f9 37 d3 d6 1e 5e 3e 4a 5a 64 ac 3f e6 a7 ef ab 5f 71 ce d5 bf 54 bd b1 a4 98 b5 6d 2b dd dd 43 e1 5b c5 aa 64 93 ed 2a 31 fa 3c a3 f3 3d ef c0 86 dc 3e af ea 5b 98 b3 76 f6 d9 44 25 e8 72 be ad 6e 2b ff 00 65 01 23 ed 82 50 6e b7 b0 8a bb f5 35 de 8b d2 ba 76 3a 4a 3a 40 bf 81 36 bb 42 ea 54 3c 94 43 91 2e e9 78 04 5d f7 61 06 ed f5 53 bb 01 e9 27 79 ba cb 99 86 29 cd Data Ascii: WB#b@)1Uio~qW_n~?<?JR=`ewVQfQt$ 'GKi_od7^>JZd?_qTm+C[d*1<=>[vD%rn+e#Pn5v:J:@6BT<C.x]aS'y)
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 3b 9e 84 62 b2 c1 81 70 c8 28 f0 8d 6b 73 8f 27 1a 35 23 2f 5a ca 94 53 a7 04 63 e4 4f 08 d2 4e 57 8d 84 0a 27 29 d6 12 4f c5 8f b2 09 27 6b 42 ea 49 97 52 0a 48 33 94 b8 1f 08 1f 42 ab d4 78 52 52 a5 2b 5a 0a 0a bd 33 03 18 89 35 81 ea 92 dc db e1 49 49 d2 b6 c4 ca 4e 11 36 b4 1a d3 12 b0 a8 d9 d6 50 1f f4 a8 05 69 f4 f9 42 f3 11 5f a7 7d 49 25 97 6f d4 d4 ad 53 28 68 84 99 29 58 6a 90 98 18 c6 57 cc 91 be 3e 33 7d 47 cb 55 05 53 0f 68 ac a7 06 98 2e 4f 19 60 a1 c6 33 b5 d3 e8 6d 4c 6e bd 49 73 bb 36 da 50 a7 1b d4 28 ea 01 34 ce 93 f0 15 64 09 ce 50 2c cc a7 c7 a9 5a 54 d9 d9 b6 d5 2b a8 07 51 40 a1 c6 94 93 a4 c8 e0 41 e1 1d 15 bc 9c 2f 12 ab 19 1c 6d 4f 55 25 0e 36 4a 92 30 1e 1e 11 64 35 2c 70 6e db d7 fd 26 dc 3a 57 30 f2 49 c8 8f 08 97 68 2e b8 e4 Data Ascii: ;bp(ks'5#/ZScONW')O'kBIRH3BxRR+Z35IIN6PiB_}I%oS(h)XjW>3}GUSh.O`3mLnIs6P(4dP,ZT+Q@A/mOU%6J0d5,pn&:W0Ih.
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: d3 e2 21 29 af b8 a6 95 fd 8c 55 49 58 87 69 0d b6 ee d0 2a 69 d3 51 6e b8 20 ab 5b 2e a8 0f 58 4f 22 40 d6 06 7f 16 62 13 5a ca 2e bd 22 c5 95 b6 37 45 c6 9d cf d8 ee e0 07 6b b4 86 6a 96 b2 55 50 d0 27 a4 92 f0 20 05 a4 fa 52 a3 98 32 d4 9e 1c f7 a2 fa 91 d7 8b 23 fa 6d df f1 1c 9d a5 45 ea d3 76 b5 d3 57 a2 92 e3 6e 75 cb a5 8e 8a a6 46 a9 4b 6d 49 35 74 aa 3a 13 a8 14 80 f2 02 86 b0 e2 0e 2a d5 8a 56 da d3 7d 0a 74 dc 9a 4f a6 bf bc 97 76 92 fb 79 a4 a2 dd 36 25 51 8b bd 8f 7b 35 d7 dd d6 56 02 6a 1b ae 6a de 54 e2 2b 29 db 07 52 6a e9 9a 5b 98 27 4a d4 d4 f4 6a 96 98 c7 90 fa 35 db ed f7 1d 1c 4a f5 9e ff 00 6f bc 91 6d db 75 45 3d d6 eb b6 99 69 ca bb 22 ea 4d c8 d5 b4 4a db 53 f5 40 34 aa 86 9a 09 50 0e 55 a0 22 6a 42 14 95 ae 4e 14 62 a9 63 6c 9a Data Ascii: !)UIXiiQn [.XO"@bZ."7EkjUP' R2#mEvWnuFKmI5t:V}tOvy6%Q{5VjjT+)Rj['Jj5JomuE=i"MJS@4PU"jBNbcl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	49985	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	713	OUT	GET /wp-content/uploads/2019/08/SF3-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:19 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/jpeg Content-Length: 250052 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	5534	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: 9c 50 04 03 da 82 bd 35 52 3b 98 da fc 0e 0a 77 44 e2 dc 46 28 45 3e d7 75 69 4e b1 21 b5 2d 6d 02 a6 96 0e e2 53 e2 0f e1 ad a8 e6 61 c4 2a 0e 8d d9 14 30 bf db 5a 79 2a 53 88 da 7f aa 9e a4 9f f6 6b 4a 19 08 54 e4 60 28 68 eb 4b 65 c5 b4 bf 99 b3 43 fe bd 68 03 50 a9 91 42 bc 50 e8 48 b7 47 8c f4 a5 fb 6c a6 a7 c5 47 b0 d2 39 c1 b9 a5 6b 49 c9 48 e1 e3 88 90 76 a9 e5 a8 8e 8a 52 07 40 7e 07 55 df 71 45 33 61 05 3e 37 83 c3 90 28 d5 d8 b2 e7 93 a9 1b 49 fc 75 09 bd 23 30 a4 16 c0 e4 56 a7 38 fe e1 55 a6 34 c6 e4 2d 1f 33 5b 08 57 e3 f1 fd 9a 07 50 66 a2 88 36 a7 42 9a de c3 72 06 12 56 22 09 0d 8f e7 6e a7 f7 8a 54 6a 46 de c4 75 51 9b 77 84 cb 22 d3 74 8a 69 22 03 cd 57 b5 53 d0 fe 07 53 b6 66 3b 22 a3 31 b8 68 9b 55 d1 45 2a 05 2a 1d d2 7a 1f dc 75 20 Data Ascii: P5R;wDF(E>uiN!-mSa0ZySkJT`(hKeChPBPHGlG9kIHvR@~UqE3a>7(Iu#0V8U4-3[WPf6BrV"nTjFuQw"ti"WSSf;"1hUE**zu
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 3c ca ab d4 eb 8d 1d 73 ac 3d d5 74 e7 b0 60 16 99 82 06 0a 06 36 9d 88 5d 7e e0 9c 62 61 5c 9c 56 18 82 2b ea 86 52 48 47 fe e9 24 11 ff 00 09 af c3 5d 4d 87 5f bb 02 93 1d dc ff 00 3f c5 66 dc 5b 42 7c a2 9d 99 7b 94 02 67 04 97 02 9b 9b 8e 25 44 fc b2 1a a6 d5 7f 0e 87 5b 6c eb 2f 18 87 2a 46 d9 87 30 be 76 d3 5e 86 b9 75 e8 0d 08 4b 4f e3 a4 4a bd 01 db 42 12 81 5d 09 52 81 a1 2a f4 06 84 25 a6 91 09 40 d0 95 7a a6 84 2f 40 7f e3 a1 0b d0 1a 12 af 40 69 10 bd 01 e1 a1 0b d0 1a 12 af 61 3a 44 51 7a 03 42 5a 2f 40 69 2a 96 8b d2 12 5c 21 0d 21 4e a8 f6 4a 01 51 fe 1a 42 69 9a 50 14 8e dd 88 e4 57 32 91 1a d8 e2 41 fe 77 05 3f 87 7d 55 96 f6 28 f3 72 99 b0 3d d9 04 4a b2 70 7e 43 72 28 32 16 b6 d2 7b a5 a4 1f f1 3a cc 9b ae c4 cf 2e 2a cb 2c 5c 73 28 d9 Data Ascii: <s=t`6]~ba\V+RHG$]M_?f[B\|{g%D[l/F0v^uKOJB]R%@z/@@ia:DQzBZ/@i\!!NJQBiPW2Aw?}U(r=Jp~Cr(2{:.,\s(
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: df 70 6b 15 96 dd 3d d8 ce 48 6c cb 50 40 87 bc 2b d9 58 ee 95 13 d4 d7 b8 d6 fc 17 d2 48 e0 0d 30 f8 aa 52 5b b1 8d 34 d5 42 ed b0 20 03 65 86 fa ca 11 2a e8 d7 d4 25 66 a9 5b 61 60 ed af 85 69 43 ab 73 ca fd af 70 cc 34 d3 b5 32 dd 8d de c0 72 2e 15 57 ce 6e 6f 19 f9 50 ad 31 dc 4a 63 5b d8 43 49 69 26 80 1a 55 5d 3f 86 bc 9a 1e 96 e6 b4 c8 e1 8b 8d 57 6d 34 c3 71 08 bb 8d c4 fa f6 da 51 04 82 90 53 d3 a7 5d 42 c8 0e e5 9b 34 a8 89 03 17 01 ca a5 01 5b 8d 4a 47 86 b5 61 8c 95 9d 24 aa 4a 8c 6d 2b 49 5a d0 54 91 4f 75 14 a2 4a 87 8f ed d6 a4 51 61 42 aa 3a 45 f9 c2 a6 bd 71 73 89 69 a4 42 50 3a e8 4a bd 01 a1 2a 50 34 22 8b d5 34 88 5e a9 a1 2a 50 34 21 7a a6 84 ab d0 1a 10 bd 01 f0 a6 91 0b d8 4f fb 34 21 7a 09 d2 25 5e c2 74 25 a2 5a 00 3a 90 34 95 4b Data Ascii: pk=HlP@+XH0R[4B e%f[a`iCsp42r.WnoP1Jc[CIi&U]?Wm4qQS]B4[JGa$Jm+IZTOuJQaB:EqsiBP:JP4"4^*P4!zO4!z%^t%Z:4K
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 54 ea 27 5a ee c0 25 37 7b 05 51 fa 07 11 e1 10 63 88 23 1e 84 a4 3c 12 99 1b da 4a d4 e0 03 f9 d4 a0 49 d3 ff 00 e0 61 7e 12 62 4e 78 9f 60 a8 3b a9 cb 98 2a 6a d6 2d 68 b5 c6 4b 56 bb 7b 31 5a 69 21 29 8e d2 02 10 12 3c 02 47 41 ab bf f0 96 f0 0a c6 c0 09 cf 9f 6a a8 6f 24 90 f8 8a 8f 64 58 6d 93 29 b4 ce b4 de 2d 8c cd 87 31 a2 dc a8 ce a0 29 2b 41 1d ba eb 3e eb a4 45 38 ad 28 e1 88 23 31 d8 55 a8 2f 1f 13 aa 0a f9 a7 93 70 14 1b 6d ea 5d ad 31 d2 eb 30 e4 3a 96 a5 29 29 a9 88 7a a2 32 bc ea 0d 2b aa 91 fa a0 63 9e bd bc 56 f8 b9 0e 15 41 9c 97 80 e3 c8 42 14 62 88 c2 28 53 88 56 d4 91 15 bf e5 60 83 f3 05 6a dc 57 72 c7 ed f1 41 2c 7a 18 5c 7e dd 58 73 dd 6d eb 7a 63 a5 2c fd 5b e3 6a 0a a1 0f e5 09 e9 ea 4b 9f 1e da b8 ce af 2b 75 fc d3 0c 11 b9 0c Data Ascii: T'Z%7{Qc#<JIa~bNx`;*j-hKV{1Zi!)<GAjo$dXm)-1)+A>E8(#1U/pm]10:))z2+cVABb(SV`jWrA,z\~Xsmzc,[jK+u
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 24 f7 29 80 61 86 91 38 86 93 52 b4 01 51 da 9e 1a 9e 80 55 57 dc 4d 16 f7 7d b2 b9 69 d8 36 ad 84 d0 74 ef 4d 38 ea 9a 34 5d 90 ad b3 26 ad a7 62 c3 71 f6 d4 c1 6d 6e 01 e9 fd e7 be 81 9a 42 ea 2f 6a 8f 2a 12 a1 a2 5b 0b 8e a1 b9 b2 16 3a 11 f0 3e 3a 50 72 49 9d 56 b4 ac a1 08 af 52 c3 a4 2b af f2 9d 2d 51 44 ab 25 21 f4 a4 f5 64 fb ad fe 07 41 28 a2 d6 a5 8d c5 21 54 4b c8 f7 1b 3d 7a 28 77 d2 55 2d 13 f5 bf 1c bb 5c 9a 6e 42 1a 0c 32 ea 6a 3d da 85 57 cc 0f 0a e9 5a 0b b2 09 8e 7b 5b 9a d1 71 b3 dc 6d 49 43 92 db 1e c8 55 1c 79 ba 94 8a f6 3e 63 41 ab 73 4a d7 07 64 9a f7 50 b8 93 dd af 52 bf 0f 3d 36 a9 d4 48 a5 6f 34 29 0a 0b 1b 80 fe a1 e7 f0 3a 42 52 d1 4b 30 d7 d9 66 e4 a4 b8 40 32 11 44 2c f4 dc 53 e1 fb 34 e8 5c 03 c5 54 53 82 5a 8b a5 a0 56 1c Data Ascii: $)a8RQUWM}i6tM84]&bqmnB/j*[:>:PrIVR+-QD%!dA(!TK=z(wU-\nB2j=WZ{[qmICUy>cAsJdPR=6Ho4):BRK0f@2D,S4\TSZV
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: e9 d1 c3 45 52 49 51 32 3c 02 ca 96 7d c4 a8 94 7b 68 e8 6a 68 3b 9f 3d 5b 0d a2 aa e7 d5 39 37 b1 b4 b6 29 50 cf a5 26 84 fa 8f 96 9e 30 51 95 e8 25 08 1b 42 3f cb 5e f3 51 d8 9d 2d 12 55 62 9d f9 c1 3f e6 1d c3 45 51 45 d9 6a 65 37 2b 8c 58 ab 24 36 fa c2 1d 57 6a a4 75 23 f6 d3 48 4a 1c 36 8a ab 17 12 1b 31 58 69 a6 5a 4a 12 94 80 94 80 00 03 5a b1 c6 1a 02 ca 7b cb 8a e0 be 5b 23 dc 2d ef b4 e2 00 25 27 62 bc 52 a1 d8 8f db a8 ae 58 0b 2a 33 4f 85 e4 39 56 97 ae 85 b5 2d 0e 2c 02 a5 96 d6 6b e2 93 4f f4 6b 18 dc 05 b6 2d d6 35 79 42 b7 a9 4e 54 b1 e8 77 f0 f3 d0 2e 01 41 b7 21 3f d8 5d 62 75 da dd 15 c2 0a 0b a1 40 93 d1 40 75 a6 9e d9 43 88 0a 19 18 5a d2 55 8f 69 b4 a1 b4 a5 20 0e 9a df 6b 00 6e 0b 14 9a 95 cb 72 8a cc 98 6f b6 fa 42 90 b4 14 ac 79 Data Ascii: ERIQ2<}{hjh;=[97)P&0Q%B?^Q-Ub?EQEje7+X$6Wju#HJ61XiZJZ{[#-%'bRX*3O9V-,kOk-5yBNTw.A!?]bu@@uCZUi knroBy
2024-04-23 14:06:19 UTC	2896	IN	Data Raw: d1 52 10 a8 c9 55 7d 0b fe 55 50 78 eb 02 e3 ac 97 57 6e 9c f5 57 59 6a 1b 9a be 58 27 18 c7 62 4d e2 e1 ec 96 e4 25 2d c7 61 f2 ca 12 b0 84 8f 95 63 c7 ca ba c0 ab 9e 28 74 53 c9 20 0a d8 d9 ec b1 6d d1 6d b1 d0 d0 2e 6c 1b 48 00 00 00 a9 23 cb 57 59 18 68 0b 3d ef 26 aa 46 97 82 5a 94 e2 6a 10 da fd a6 ba f8 f6 eb e7 a9 6b 82 8a 95 21 77 a1 61 2f a1 b3 d9 86 77 ab af 4a 9f f0 d3 c6 69 87 25 a8 38 95 33 0c 9a 6e 92 f5 7b f5 a7 5f df a4 ae 01 2d 31 29 5a 44 89 b2 26 c5 88 8f 7a 4b 8b 4b 4c 36 3c 54 47 89 f0 03 be 9a 5d 9a 5a 01 42 51 36 27 1a 3c e3 6c 3b 2e e0 52 f2 5b a2 9b 69 03 60 24 7c 7b ea c3 6d 5e ea 15 51 d7 6d 18 00 a2 57 3b 45 cb 0f 92 c4 97 14 1e 69 b9 01 71 9f 48 20 2b af 54 28 78 12 35 4e 50 e8 fc ca dc 4f 6c c3 04 6a b3 65 16 cb 9c 64 28 3e Data Ascii: RU}UPxWnWYjX'bM%-ac(tS mm.lH#WYh=&FZjk!wa/wJi%83n{_-1)ZD&zKKL6<TG]ZBQ6'<l;.R[i`$\|{m^QmW;EiqH +T(x5NPOljed(>
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 0d 9f a5 09 50 a0 1b 86 b3 76 be 4c ca 57 4c 06 48 f5 66 c1 e2 44 4a 02 63 0e 9e 43 56 19 6e 02 ac f9 d1 1a 0e 3e db 69 4e d6 c0 1f e8 d5 a6 c4 aa ba 65 26 8d 6a 6d 1f ca 3f 1d 4c d8 d4 0e 91 3b 37 19 b4 52 80 6a 50 d5 19 71 5b ea 84 77 a0 1e 7a 5c 02 45 c6 f5 c6 3b 3d 94 14 7c ab a6 97 80 9c 18 4a 66 93 93 25 07 db 68 a7 77 88 07 b7 ee d4 66 65 23 60 aa 67 97 7f 52 db 52 92 6b b0 55 63 a9 f4 f9 8d 46 e9 54 8d 85 45 64 de a4 2b dc 28 a8 d8 52 0f 4e a0 a8 f4 3d 7c 35 11 79 53 06 00 a3 b7 19 d2 03 8f 27 dc 52 48 5f b6 05 45 41 a5 49 a7 88 3a 8d ce 52 b5 a9 94 17 24 a1 95 2c 96 fd c7 14 9f 59 a8 a0 1d 47 c4 1d 42 4d 53 e8 a0 d7 b0 b6 9b 88 ea 19 0f a8 97 1c a1 a9 f4 a4 d0 75 f1 4f c3 50 b8 a9 98 81 d9 f5 b2 5b d1 27 bc e4 7f 63 64 61 bd d4 13 54 ef 34 46 df Data Ascii: PvLWLHfDJcCVn>iNe&jm?L;7RjPq[wz\E;=\|Jf%hwfe#`gRRkUcFTEd+(RN=\|5yS'RH_EAI:R$,YGBMSuOP['cdaT4F
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 8b 33 4e 88 6c 07 12 b0 94 a9 96 01 aa 5e 49 4d 77 2b e3 a5 66 da a4 71 2a 5e da 7f 24 96 b7 0d bd 16 e0 3e a4 0d b5 da 3a f6 d5 80 a1 2b de e2 92 2a d8 0d 9f f2 da 07 d3 5a 57 78 eb df 4a 85 b0 29 5d 12 4f e6 0e af 3c 7f 9d 3f d2 ad 2a 4a 2f 25 e0 12 b7 36 94 a3 e5 6d 00 9d cc 1f 34 75 ed a5 aa 4a 2d a9 74 85 86 e8 82 a4 8d ca 45 4e d7 be 23 c8 e8 aa 28 b6 26 42 76 ee 0a 1b 16 68 97 0e ea a0 d7 e4 50 f2 d2 d5 25 16 e4 bf ea 00 04 85 b7 d5 c6 ea af 97 cd 3e 7a 2a 92 89 7d d4 a9 29 1b 93 47 95 f9 2b 05 5a 5a a2 89 14 e8 01 f5 7a 68 06 d7 13 55 77 3f e1 a2 a8 a2 f2 1d 29 71 b1 b9 35 43 64 85 12 ae bf 05 68 aa 28 b1 b9 20 25 94 d4 53 79 25 3b 8d 47 e1 e6 34 07 20 b5 74 09 49 21 75 52 0e f5 75 f5 1f 50 f8 1f f4 69 77 26 ed 55 87 18 e3 ab 65 bd 2d a5 30 3a 8e Data Ascii: 3Nl^IMw+fq^$>:+ZWxJ)]O<?J/%6m4uJ-tEN#(&BvhP%>z})G+ZZzhUw?)q5Cdh( %Sy%;G4 tI!uRuPiw&Ue-0:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	49984	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	955	OUT	GET /wp-content/uploads/2019/08/SOL-distri.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:19 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/gif Content-Length: 3624 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	3624	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 d4 d2 dc fa d1 b5 f1 87 3c ad aa bd ef 78 25 ec eb f0 18 10 46 8b 87 a2 59 53 7a fd ee e3 f6 b2 82 f4 a4 6c e9 e9 ed 71 6c 8d 23 1b 4e fc e5 d5 fa f9 fb f0 7e 2f f9 cb ab 2b 24 56 43 3c 67 f7 bc 94 bb b9 c9 bf ad b1 85 81 9d fb d9 c2 3b 34 62 cb ca d6 f1 f1 f4 b4 b1 c3 33 2c 5c a8 a5 b9 f3 99 5a 1d 15 4a c6 c4 d1 9d 9a b1 a1 9d b3 90 8d a6 58 2e 3c f3 95 54 75 71 91 f0 81 35 e6 e5 eb fe fe fe f5 ad 7a 95 91 aa 52 4c 75 fe f5 ef f4 f4 f6 da d9 e2 7b 74 92 48 42 6d 60 5b 80 fe f9 f5 f2 8c 45 b1 ae c0 6e 69 8b de dd e5 81 7d 9a f8 c6 a3 f2 8f 4b c0 bd cc fc e9 db 9a 96 ae fd ef e6 f0 7a 29 fb de c9 55 3f 5b f7 f7 f8 f2 90 4d a4 a1 b6 fe f7 f3 af 58 2d fc e1 ce f0 7c 2c 4e 47 71 f5 a6 70 fd f1 e8 6d 66 87 ff fc fa c9 c7 Data Ascii: GIF89a}<x%FYSzlql#N~/+$VC<g;4b3,\ZJX.<Tuq5zRLu{tHBm`[Eni}Kz)U?[MX-\|,NGqpmf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	49988	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:18 UTC	956	OUT	GET /wp-content/uploads/2019/08/SOL-tournee.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:19 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/gif Content-Length: 4784 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	4784	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 fe f6 f1 fe f3 ec dc db e3 fb d9 c2 fc e5 d5 fa d4 ba 6b 66 89 5a 53 79 79 74 94 42 3b 67 97 94 ac f0 7c 2b f6 b1 82 f9 f9 fa f3 98 59 fe f9 f5 8b 67 69 d4 d2 dc f1 85 3a f9 cb ac f2 8f 4b 60 5a 7f cb ca d5 23 1a 4d 2b 23 54 f1 8a 43 c5 c3 d1 32 2a 59 f8 c3 9e f8 c5 a1 f7 ba 90 8c 88 a3 d8 6e 2b f3 95 54 fb dd c8 f2 f2 f5 bd ba c9 fd ea dd ad aa bc f6 ae 7c 1c 14 49 b5 b2 c4 ed ec f0 c3 c0 ce f4 a0 66 f4 a4 6c 48 42 6c 3c 35 63 ea e9 ee 81 7c 99 63 5e 82 9c 99 b0 54 4e 76 f4 9d 60 fe fe fe f0 81 33 c0 bd cc f6 f6 f8 86 81 9e f7 be 96 f7 b8 8c f5 aa 75 ef 78 25 a0 9d b3 59 47 66 f6 b5 88 91 8d a7 b8 b6 c6 9d 4f 30 b2 6b 4b a9 a6 ba 77 58 64 f2 91 4e fb e0 cd f7 c0 9a fa d1 b4 e2 e1 e8 e6 e5 eb 4e 47 71 f3 f3 f6 fc e3 Data Ascii: GIF89a}kfZSyytB;g\|+Ygi:K`Z#M+#TC2*Yn+T\|IflHBl<5c\|c^TNv`3ux%YGfO0kKwXdNNGq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	49991	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	384	OUT	GET /wp-content/uploads/2023/03/POP-ensavoir.png HTTP/1.1 Host: envoye-special.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:19 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/png Content-Length: 1466 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 10:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	1466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b6 00 00 00 2c 08 06 00 00 00 c8 0d 42 21 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 71 49 44 41 54 78 5e ed 99 6b 88 55 55 14 c7 d7 7d cf 1d e7 a1 89 15 66 0f 46 31 54 04 25 2d 0b 32 3f 24 d4 87 a4 c8 1e 44 a2 10 69 f8 45 c2 32 41 24 4c 02 7b 11 11 44 1a 51 16 44 2f 0c 94 28 51 c8 ac 86 5e ea 84 a5 30 3e 7a 69 68 56 e3 dc 19 67 bc ef ee 5a b4 0e e7 ec 73 ce 3d 67 38 97 66 df 3d eb 7e 19 98 bd cf 3a 7b ff d7 6f af bd d6 3a b1 be 75 5d 55 90 9f 28 60 98 02 31 01 db 30 8f ca 76 48 01 01 5b 40 30 52 01 01 db 48 b7 ca a6 04 6c 61 c0 48 05 04 6c 23 dd 2a 9b 12 b0 85 01 23 15 10 b0 8d 74 ab 6c 4a c0 16 06 8c 54 40 c0 36 d2 ad b2 29 01 5b 18 30 52 01 01 db 48 b7 ca a6 04 6c 61 c0 48 05 04 6c Data Ascii: PNGIHDR,B!sBIT\|dqIDATx^kUU}fF1T%-2?$DiE2A$L{DQD/(Q^0>zihVgZs=g8f=~:{o:u]U(`10vH[@0RHlaHl#*#tlJT@6)[0RHlaHl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	49990	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	381	OUT	GET /wp-content/uploads/2023/03/POP-tiret.png HTTP/1.1 Host: envoye-special.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:19 UTC	273	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/png Content-Length: 939 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 10:41:52 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	939	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 24 08 06 00 00 00 89 f3 1a a0 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 03 62 49 44 41 54 48 4b 8d 96 5d 48 14 51 14 c7 cf 99 75 57 ad d0 d9 b5 4c fc 40 67 b0 87 82 f4 b9 f0 a1 42 83 a0 8c 14 41 08 ad 28 2a 08 a1 8d dd 2d aa 07 8b 88 dc 11 7d d1 30 1f 22 4c 8a d4 b2 22 2a e9 a1 5e 84 b0 a0 22 24 d0 da d9 ca ec 83 76 fd 40 13 76 dc b9 9d d1 0a cd b9 eb 1d 58 76 99 fd df df 9c 7b ce ff 9c 3b 38 16 50 87 00 60 1d 7d 6c 2f c6 d8 45 b7 a6 9f 45 00 c6 d3 2c bc 8f d1 80 72 06 01 2f f0 c4 04 7a 82 46 ac 3a bd 79 24 2a 06 f4 29 45 20 61 3f 2d 5c c5 89 f1 2b cc c2 0e 77 93 fe 46 08 f8 cd b7 36 d3 25 ad b8 4d 51 96 f0 76 6d 32 f3 68 86 16 6e 17 02 76 55 81 a3 ac 40 69 00 04 2f 00 4a f6 Data Ascii: PNGIHDR$sBIT\|dbIDATHK]HQuWL@gBA(-}0"L"^"$v@vXv{;8P`}l/EE,r/zF:y$*)E a?-\+wF6%MQvm2hnvU@i/J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	49989	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	382	OUT	GET /wp-content/uploads/2023/03/POP-labels.png HTTP/1.1 Host: envoye-special.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:19 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/png Content-Length: 46042 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 10:41:52 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	5536	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 b3 00 00 00 71 08 06 00 00 00 c6 58 2b 8d 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec 5d 07 60 14 d5 16 3d 9b de 13 d2 a9 a1 04 02 48 95 de bb 22 88 14 1b 45 05 3f 22 8a d2 a5 4b 11 14 45 90 0e 2a 58 40 54 14 10 14 50 8a 74 a4 f7 de 6b 08 04 02 81 f4 be fb cf 9d cd 42 12 52 36 c9 6e 12 c8 3c 5c 93 ec bc 99 79 ef ce cc 7b 67 ee 3b f7 5c 8d 8e 05 6a 29 34 16 d0 b0 14 9a ce aa 1d 55 2d a0 5a 40 b5 80 6a 01 d5 02 aa 05 9e 7a 0b 68 54 30 fb d4 5f e3 54 1d 54 c1 6c e1 ba de 6a 6f 55 0b a8 16 50 2d a0 5a 40 b5 c0 d3 6e 01 15 cc 3e ed 57 38 4d ff 54 30 5b c8 2e b8 da 5d d5 02 aa 05 54 0b a8 16 50 2d f0 94 5b 40 05 b3 4f f9 05 4e db 3d 15 cc 16 b2 0b ae 76 57 b5 80 6a 01 Data Ascii: PNGIHDRqX+sBIT\|d IDATx^]`=H"E?"KE*X@TPtkBR6n<\y{g;\j)4U-Z@jzhT0_TTljoUP-Z@n>W8MT0[.]TP-[@ON=vWj
2024-04-23 14:06:19 UTC	7240	IN	Data Raw: a9 02 dc 2c 2e 02 d3 ea b4 a5 f7 fb 5b 0e 5f 25 39 46 5d a0 bb 63 a0 15 c2 b7 27 c2 a9 23 ed cb 85 e4 a8 bf 38 0b d9 25 c2 c1 86 9c 49 9b 24 68 92 6c 60 2d e8 85 9e 5b 14 d1 40 db b3 14 22 7f cf c6 b5 36 49 55 53 cf 09 26 69 54 2e 0f 22 f3 d2 fa 75 3b 30 64 e0 dc 54 47 7a e3 ad d6 18 35 a6 4f aa 60 e2 fb d1 a1 18 bc a5 17 15 0a 6e e6 f2 ac e9 ef ee 68 e5 8c f7 aa 8c 42 50 e4 55 fc 76 91 1a 21 e9 14 95 33 9b 0d d3 07 c6 c4 a0 d3 a1 03 b8 48 15 03 43 e9 ec e3 8b 85 55 ab c1 3a 1b 49 11 e4 26 b9 f4 ca 48 d8 96 2d 86 12 9f 7f c8 90 81 d4 9c 13 01 a8 11 db 0e e3 de cf eb a0 61 96 8c 92 d3 06 22 68 f4 d7 b0 29 5d 14 4e 0d aa 12 04 9f 85 25 53 be b9 75 68 8a bb df ff 45 79 ac 35 d0 31 6a 5d 40 ec ed 2f 7e 42 c9 79 c3 70 f3 e3 6f 50 72 f6 50 38 37 a9 99 8d 1e 3e Data Ascii: ,.[_%9F]c'#8%I$hl`-[@"6IUS&iT."u;0dTGz5O`nhBPUv!3HCU:I&H-a"h)]N%SuhEy51j]@/~BypoPrP87>
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: bf 37 85 42 28 b2 da a3 2f 92 c1 ac fc 86 d9 4a a6 31 29 92 dd 2c 3e e8 0e 1c eb 3c c3 24 0a 8f bf b5 49 9d 9b 04 b0 bd 4e 1c c3 76 ea f7 4a f9 af 5e 7d d4 71 75 43 4d a6 0c 3e 1d f5 e8 d8 86 73 ac 7d b6 36 1a bb b8 60 c9 7f fb d1 a7 45 23 a3 01 9d b9 26 45 53 0d 5c 7a 30 4b 57 d0 b9 ab 38 43 4f f7 42 da 2c 25 b7 35 15 98 5d b5 19 61 f1 5a f6 3d f3 48 d3 b4 57 d7 86 81 61 31 4c bc a0 2f 8f 02 ca 8c bf 0b d4 9a aa 05 f2 d6 02 e6 7a 6e d3 eb 05 23 83 98 42 d5 a6 3f 59 e5 03 3d 09 be 98 01 4c 23 f4 02 49 65 cb 40 26 a3 29 06 f2 54 c6 33 05 2b 29 03 bd 6a 20 22 43 ef 2a 23 9b 9c 09 93 7b 59 c1 42 3c b5 55 f9 b1 93 e7 92 fc d9 a4 18 68 37 45 20 b2 67 fd 02 2c d5 b5 95 ed f5 83 63 13 2b 58 0e 21 4a 6d c1 f6 df 27 28 3d c0 df fd 68 2d 2a 0d e0 9a 0e 49 e4 ab 5a Data Ascii: 7B(/J1),><$INvJ^}quCM>s}6`E#&ES\z0KW8COB,%5]aZ=HWa1L/zn#B?Y=L#Ie@&)T3+)j "C#{YB<Uh7E g,c+X!Jm'(=h-IZ
2024-04-23 14:06:19 UTC	4344	IN	Data Raw: ed 04 82 61 37 06 82 58 70 52 09 25 de 56 e4 b9 f2 bc 14 46 30 fb c7 99 5f f0 db f9 85 9c 97 22 15 20 1b ba d1 13 11 fb 1d e0 56 49 07 97 76 b7 61 e9 9c 2c fd 9b 8b ab 91 18 69 85 a1 75 c7 a1 79 f9 56 c4 4f 42 81 56 8b 58 c0 a4 60 76 dd f1 d3 f8 88 9c d5 99 04 a6 1f b5 6b 85 49 04 99 b7 c3 c2 51 71 f8 24 cc 7d eb 35 08 d8 bd 1c c2 2c 17 f4 90 be 3c fb 3b 82 de 1b d4 46 f5 52 c0 af 50 17 ee cc fb 42 f1 32 9e bb 75 1b ef 92 63 bb ef f2 55 8c ed d8 16 5d eb d7 46 f9 61 9f a0 7e b9 d2 78 91 5c d9 b2 04 c8 1d 6a 56 c5 4f 0c 14 eb bf 64 79 86 60 36 98 5e da 96 95 2b 60 e9 9e 43 f8 f9 fd 9e e8 46 2f b1 04 8a 99 02 cc 6a e9 2d d6 b0 ad 61 ff ec 46 e0 80 69 64 77 3d 22 84 5b 50 aa ab c2 a6 b9 b0 a1 0c 54 46 45 24 b5 56 df b9 8d 89 17 2f a4 4b 23 e8 ee 5b 0c df 55 Data Ascii: a7XpR%VF0_" VIva,iuyVOBVX`vkIQq$}5,<;FRPB2ucU]Fa~x\jVOdy`6^+`CF/j-aFidw="[PTFE$V/K#[U
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: a4 6c 16 a8 43 ab 9b 00 ec 22 b5 a0 51 2f fe 4d 89 2d 0d 71 af 21 f9 81 ee 0c c1 2c 55 0b b4 cd f8 3d d5 0a e0 c2 fa f4 70 eb e6 b0 0a 15 1e 06 48 da da 02 59 cc 35 27 14 84 ce de 8f b9 87 91 db df c3 0d 8e d7 52 26 d4 9b 8d da c5 45 46 32 7d 3c 11 4d 1a e5 86 f5 7b f0 ed 37 2b 70 ed 4a f6 df e9 be 5b 34 12 8d 1a 89 84 b0 5a 32 b2 40 8e c0 ac 6a ce 74 06 54 7a 97 47 9e 3f 87 15 c1 b7 4c 9e aa a6 bc 83 03 c6 96 f5 c7 ab 45 a9 f8 98 0b 20 2b ad 36 d7 a4 68 b6 81 4b 5e 56 14 08 22 45 bf 14 9c 5f 34 03 01 88 fb 02 97 91 27 3b 11 e5 3c ea a1 4f 6d 3a 45 94 86 65 ec 59 34 78 4a 2f 87 ee 27 88 eb 0d 1f 06 86 0d 68 f4 07 5f d2 ac f5 60 f6 f8 18 74 ad 3e 85 de cb 8a f8 f3 f4 67 b8 c2 7a fa 62 e8 b5 86 4b f1 2d d0 f9 99 f1 9c 5d bd 94 2d 06 b0 f5 f9 76 4a b3 08 cd Data Ascii: lC"Q/M-q!,U=pHY5'R&EF2}<M{7+pJ[4Z2@jtTzG?LE +6hK^V"E_4';<Om:EeY4xJ/'h_`t>gzbK-]-vJ
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 80 d1 60 56 06 75 e1 c8 4a 76 2e 19 1a 3e 68 dd 0c 0d ca cb 6a c8 a3 92 48 30 37 90 49 0c 44 3b 76 50 5b 7d 74 b2 d0 05 d6 90 d3 fa fb be c3 e4 d4 25 a0 79 c5 f2 e8 d9 a4 1e dc 18 88 75 fc 7a 10 be a7 da c1 85 db 77 50 8b 3c da be 2d 1a a3 28 bd 1d 93 56 ad 53 ce 31 f8 85 56 08 61 f2 84 6f b7 ec c2 e9 9b b7 14 ce 6c df 96 8d f1 eb ee 03 d8 77 e9 ea c3 13 8b ee 6c b5 92 c5 b0 86 3a b6 1f b2 5d 55 f9 fb 46 a6 c4 95 54 af 72 ce 86 6c a7 70 69 ed 18 fd 3f e8 e7 15 8a 4c d8 1b 8d ea e2 67 72 73 f7 5e bc aa 28 2d 48 3b ae df d3 d3 04 1c e9 6f f8 98 29 74 45 1e 2c bb 45 ec 74 2c 3c 1c 13 2e 5d c0 41 6a ec 86 24 64 9f 97 2f 81 2a 01 94 dd 7a 87 94 82 b7 8b 97 50 96 51 4d 55 cc 35 29 e6 d5 c0 65 f0 d4 25 68 63 e1 fd d7 6e ca 28 65 9f 83 64 4b 30 1b f9 4a 0b 02 18 Data Ascii: `VuJv.>hjH07ID;vP[}t%yuzwP<-(VS1Vaolwl:]UFTrlpi?Lgrs^(-H;o)tE,Et,<.]Aj$d/*zPQMU5)e%hcn(edK0J
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 30 ab 0c 72 07 18 fe fa fe a2 09 c3 8f 96 29 53 a6 9d ad ad ed 6c 1f 1f 6f 5f 7b 7b 87 26 f5 eb d7 a7 f8 7f ce 8b bc 3a 5d 83 8b 80 c3 61 04 9a 94 c0 d0 ec a0 7a c1 28 86 89 5e 61 44 05 83 a7 e2 ce 96 46 fc 05 9e c4 49 98 e4 7c 4d 24 af 37 d1 51 0b 9b ff 71 fb 20 82 db 40 82 d9 57 4b 22 ea 84 b4 82 28 d7 c6 11 0e 55 2c 60 d5 9b c7 ee ca ed df f0 73 83 80 56 ce 21 59 ba 36 f1 c3 40 2c bc 2c e0 98 eb 1f bb a4 0e 7f 3d 6b 85 a8 eb 0c 0e eb ce e3 7e c2 7d e9 e9 d5 fd 40 d7 e9 8f c5 10 41 7a 85 94 59 24 39 4a 82 03 25 7d ad a1 90 ab a2 9d 46 d0 4a 6e 90 ad a0 94 4f b8 5d 80 33 69 bf ba ad fc 29 9e 5b 89 72 ae 90 fc 1d a3 24 13 09 80 87 c9 52 c2 13 55 f2 6a 4e c8 6b a3 1c bc b1 17 e3 f7 e9 03 79 9f f7 eb 82 fe b5 46 e5 78 9e 16 2f ed bf 1b 77 e3 db af 57 e2 d2 Data Ascii: 0r)Slo_{{&:]az(^aDFI\|M$7Qq @WK"(U,`sV!Y6@,,=k~}@AzY$9J%}FJnO]3i)[r$RUjNkyFx/wW
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 37 ad 81 f6 45 25 b0 2e 73 79 30 b9 ff 16 5f b9 89 ff ed 3f a1 7f 79 e2 7f 77 bb b4 84 2b c7 34 fb e5 1b e1 64 63 8b 5b 1d 9a 28 14 83 b2 54 4a b8 ce 97 7f 49 cc e1 4f e9 3f 63 5f 78 32 eb 8d b9 9e 5b 63 2d 38 81 0f 0a d5 02 5e f1 86 e5 8c 0a b0 f4 2d 4e 7b d9 2a 81 85 a9 9e b0 fb f4 90 7e 48 4d d7 df 3e 99 30 81 59 8a dc db bb b9 b9 4d f1 f7 f7 af 18 10 10 a0 b1 b1 b1 69 e6 ec ec 2c 6e f1 5c 15 86 26 ba 58 c3 69 00 3d a2 23 e4 01 e6 b3 2f 5e 51 91 ba 62 c0 95 6e 9a 06 11 0b 49 92 79 70 05 2e 4c 37 8b c9 fc de 96 97 2b 92 6d fd 87 1e e3 29 7e 88 3e 46 aa 82 07 c5 d5 78 0c 49 48 80 32 72 39 49 55 98 97 88 c4 45 65 11 1b 78 8d 12 5c d4 d2 a1 07 55 d3 8c db 2d 78 5c 01 a5 87 59 bf 0d 3f f4 00 2b 00 f9 1e 7f 9f ac a1 c2 01 11 e9 03 fe 9e 66 ad 78 32 9d c3 8e Data Ascii: 7E%.sy0_?yw+4dc[(TJIO?c_x2[c-8^-N{*~HM>0YMi,n\&Xi=#/^QbnIyp.L7+m)~>FxIH2r9IUEex\U-x\Y?+fx2
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 7a 54 bd 45 64 2a 97 b1 54 8b 4b a1 09 25 a5 20 40 71 6d 25 63 03 65 ea 09 82 27 d5 64 c0 79 d6 db 8d d7 fc 2f 32 06 0d 59 bf 24 73 38 f6 54 43 d5 be fc de 23 37 1a 7f 73 3d b7 f9 7d af 7c 0c c7 12 44 7d 13 82 18 78 c5 c4 d2 44 80 5c 04 66 01 b3 04 7b e7 6d 90 fe 5a 09 d2 0b 68 1e e3 94 29 53 1a 7b 78 78 fc 50 ae 5c b9 52 95 2a 55 02 83 c0 28 45 94 d2 c6 c9 c9 89 9e c8 56 9c 30 24 ba 3f 65 0f b0 3c 4f 71 ee 33 70 79 87 57 99 4a 8b 33 08 ca 38 90 db f8 df 65 dd c6 3f 05 e7 66 04 ba 5f 70 40 08 22 8d 57 0c 48 7d 82 d2 5c ae 3c 67 02 47 8d 0a 07 c6 61 97 11 2b 82 ae 6a e5 32 82 48 b3 33 1c fd 8c b0 f9 89 77 6f 63 71 1b f0 0e 3e cd 7f 13 7f c3 8d ef 8a 2d 49 88 6d c5 51 55 e9 9a b8 6c 76 b0 82 2b 83 cc 0c 1f f0 58 4a 70 19 97 51 59 f9 15 2e a3 e4 e6 31 95 29 Data Ascii: zTEdTK% @qm%ce'dy/2Y$s8TC#7s=}\|D}xD\f{mZh)S{xxP\RU(EV0$?e<Oq3pyWJ38e?f_p@"WH}\<gGa+j2H3wocq>-ImQUlv+XJpQY.1)
2024-04-23 14:06:19 UTC	1448	IN	Data Raw: 27 66 31 0b 57 31 a7 52 cc d8 f5 97 02 d6 d3 a9 d2 10 46 c5 a0 4e 8f cc 42 85 62 a2 60 24 7d d1 3c af 7a f0 9d f4 67 d9 b1 a9 d8 48 9d d8 66 d4 a8 7d bc bc 60 03 ad 98 1b cc a6 72 51 53 77 e5 36 95 a6 56 1f cf 00 f2 e7 c7 55 2f 8f 57 4a 89 4c 97 66 7f b9 37 f6 5f 8d c5 3b dc dd d8 c1 7c e8 f2 b7 1d 17 00 92 01 2c d8 83 5a cd 26 cf fe 0b 1b f7 62 61 98 24 83 d2 ce 2c 4e 60 fa 49 cd 72 68 4f c9 2f 53 be 39 6e 8b 03 df 30 51 c3 80 7d c7 28 0f 66 92 80 e3 c1 43 98 75 6c 64 55 09 81 ca b4 8f d0 0d ea ac d8 aa b8 b2 bd 99 cc 61 0a a9 0b 56 bc 6e 61 15 73 3d b7 f9 6d df 68 ee 15 79 c3 6a 66 39 58 b7 20 d5 00 26 5f b7 6e 73 6a ca 62 7c 0c 62 26 31 94 32 7e c4 88 11 ce 25 4b 96 fc 8b 5c d9 c7 2a 56 ac 28 dc 59 42 3a 6b 01 b3 ef 3b 38 38 4c 03 5e 24 f8 73 66 04 a5 Data Ascii: 'f1W1RFNBb`$}<zgHf}`rQSw6VU/WJLf7_;\|,Z&ba$,N`IrhO/S9n0Q}(fCuldUaVnas=mhyjf9X &_nsjb\|b&12~%K\*V(YB:k;88L^$sf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	49992	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	956	OUT	GET /wp-content/uploads/2019/08/SOL-demande.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:19 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/gif Content-Length: 4440 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:19 UTC	4440	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 ef 78 25 fc ea dc f7 b8 8d c9 c7 d3 f0 7c 2c fa d1 b5 fe f4 ee f6 b6 89 f7 be 96 fb e0 ce dd db e3 9a 96 ae f0 82 35 f8 c5 a1 f6 b1 81 fe f6 f1 e5 e5 eb f2 8e 49 2e 27 58 f0 7a 29 a9 a6 ba f8 c2 9d f4 a5 6d fa f9 fb fa d7 bd f5 aa 75 f1 85 39 f3 98 5a fa d4 ba f3 96 54 18 10 46 f9 ca a8 f2 94 52 f7 ba 90 f1 89 41 f3 9b 5d fe fa f6 ff fb f9 ff fc fa f4 9d 61 fc e2 d0 fc e5 d5 f4 a3 6a f1 87 3d fd ef e5 85 80 9d f2 90 4c ef 77 24 f6 b4 87 fb da c4 f5 a7 71 fe fe fe fc e8 da fa d8 c0 92 8f a8 f4 a0 66 f9 c8 a7 fd ec e0 62 5d 82 f9 cd ae 41 3a 67 23 17 48 fe f7 f3 fd f1 e8 d4 d3 dc f6 af 7e fa d3 b8 f0 80 32 26 1e 51 f2 8d 47 f5 ad 7a fc e6 d7 f9 ce b0 fb df cb f8 c1 9b fb dc c6 f8 c7 a4 1c 15 49 f2 92 50 f0 7e 2f f4 f4 Data Ascii: GIF89a}x%\|,5I.'Xz)mu9ZTFRA]aj=Lw$qfb]A:g#H~2&QGzIP~/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	49993	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	715	OUT	GET /wp-content/uploads/2019/08/SOL-distri.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:19 GMT Content-Type: image/gif Content-Length: 3624 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:19 GMT
2024-04-23 14:06:20 UTC	1193	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 d4 d2 dc fa d1 b5 f1 87 3c ad aa bd ef 78 25 ec eb f0 18 10 46 8b 87 a2 59 53 7a fd ee e3 f6 b2 82 f4 a4 6c e9 e9 ed 71 6c 8d 23 1b 4e fc e5 d5 fa f9 fb f0 7e 2f f9 cb ab 2b 24 56 43 3c 67 f7 bc 94 bb b9 c9 bf ad b1 85 81 9d fb d9 c2 3b 34 62 cb ca d6 f1 f1 f4 b4 b1 c3 33 2c 5c a8 a5 b9 f3 99 5a 1d 15 4a c6 c4 d1 9d 9a b1 a1 9d b3 90 8d a6 58 2e 3c f3 95 54 75 71 91 f0 81 35 e6 e5 eb fe fe fe f5 ad 7a 95 91 aa 52 4c 75 fe f5 ef f4 f4 f6 da d9 e2 7b 74 92 48 42 6d 60 5b 80 fe f9 f5 f2 8c 45 b1 ae c0 6e 69 8b de dd e5 81 7d 9a f8 c6 a3 f2 8f 4b c0 bd cc fc e9 db 9a 96 ae fd ef e6 f0 7a 29 fb de c9 55 3f 5b f7 f7 f8 f2 90 4d a4 a1 b6 fe f7 f3 af 58 2d fc e1 ce f0 7c 2c 4e 47 71 f5 a6 70 fd f1 e8 6d 66 87 ff fc fa c9 c7 Data Ascii: GIF89a}<x%FYSzlql#N~/+$VC<g;4b3,\ZJX.<Tuq5zRLu{tHBm`[Eni}Kz)U?[MX-\|,NGqpmf
2024-04-23 14:06:20 UTC	2431	IN	Data Raw: 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 37 33 46 32 42 36 46 35 35 32 30 36 38 31 31 38 32 32 41 39 43 42 33 41 41 31 33 42 42 37 46 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 33 32 34 30 35 64 31 2d 30 62 66 34 2d 31 31 37 39 2d 61 30 30 37 2d 63 30 64 36 64 33 65 30 62 34 31 66 22 2f 3e 20 3c 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 4d 61 64 73 65 6e 20 56 61 6c 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 64 63 3a 74 69 74 6c 65 3e Data Ascii: ntosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A73F2B6F55206811822A9CB3AA13BB7F" stRef:documentID="adobe:docid:photoshop:032405d1-0bf4-1179-a007-c0d6d3e0b41f"/> <dc:creator> <rdf:Seq> <rdf:li>Madsen Vale</rdf:li> </rdf:Seq> </dc:creator> <dc:title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	49996	142.251.15.103	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	855	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&co=aHR0cHM6Ly9yZWdpb25hbC1leHByZXNzLmZyOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=bhz08cuqamvl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:19 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Tue, 23 Apr 2024 14:06:19 GMT Date: Tue, 23 Apr 2024 14:06:19 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 14:06:19 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');
2024-04-23 14:06:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	49998	142.251.15.103	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	843	OUT	GET /js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&co=aHR0cHM6Ly9yZWdpb25hbC1leHByZXNzLmZyOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=bhz08cuqamvl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:19 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18282 Date: Tue, 23 Apr 2024 14:06:19 GMT Expires: Wed, 23 Apr 2025 14:06:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:06:19 UTC	456	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 79 29 7b 69 66 28 28 61 3d 28 79 3d 44 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 79 29 7c 7c 21 79 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 61 3d 79 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 50 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 50 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 50 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var b=function(a,y){if((a=(y=D.trustedTypes,null),!y)\|\|!y.createPolicy)return a;try{a=y.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P}
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 52 29 7b 72 65 74 75 72 6e 22 22 2b 52 7d 7d 28 44 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 61 79 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 29 7b 72 65 74 75 72 6e 20 43 5b 79 5d 28 43 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 61 72 65 6e 74 3a 61 2c 6c 65 6e 67 74 68 3a 61 2c 70 72 6f 74 6f 74 79 70 65 3a 61 2c 73 70 6c 69 63 65 3a 61 2c 63 61 6c 6c 3a 61 2c 63 6f 6e 73 6f 6c 65 3a 61 2c 66 6c 6f 6f 72 3a 61 2c 73 74 61 63 6b Data Ascii: )}:function(R){return""+R}}(D)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var ay=function(y,a){return C[y](C.prototype,{parent:a,length:a,prototype:a,splice:a,call:a,console:a,floor:a,stack
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 34 2c 32 5d 5d 3b 74 72 79 7b 70 2e 55 5f 3d 70 42 28 52 2c 7a 24 28 70 2c 28 62 7c 30 29 2b 34 29 2c 7a 24 28 70 2c 62 29 29 7d 63 61 74 63 68 28 7a 29 7b 74 68 72 6f 77 20 7a 3b 7d 7d 70 2e 70 75 73 68 28 70 2e 55 5f 5b 4d 26 37 5d 5e 4b 29 7d 2c 42 3d 68 28 61 2c 33 30 31 29 29 3a 79 3d 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 70 2e 70 75 73 68 28 4b 29 7d 2c 50 26 26 79 28 50 26 32 35 35 29 2c 61 3d 44 2e 6c 65 6e 67 74 68 2c 50 3d 30 3b 50 3c 61 3b 50 2b 2b 29 79 28 44 5b 50 5d 29 7d 2c 64 2c 43 42 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 29 7b 31 30 34 3c 79 2e 76 2e 6c 65 6e 67 74 68 3f 66 28 5b 63 2c 33 36 5d 2c 30 2c 79 29 3a 28 79 2e 76 2e 70 75 73 68 28 79 2e 48 2e 73 6c 69 63 65 28 29 29 2c 79 2e 48 5b 34 31 35 5d 3d 76 6f 69 64 20 30 2c 4f 28 79 2c Data Ascii: 4,2]];try{p.U_=pB(R,z$(p,(b\|0)+4),z$(p,b))}catch(z){throw z;}}p.push(p.U_[M&7]^K)},B=h(a,301)):y=function(K){p.push(K)},P&&y(P&255),a=D.length,P=0;P<a;P++)y(D[P])},d,CB=function(y,a){104<y.v.length?f([c,36],0,y):(y.v.push(y.H.slice()),y.H[415]=void 0,O(y,
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 50 3d 68 28 44 2c 34 31 35 29 2c 44 2e 58 26 26 50 3c 44 2e 44 3f 28 4f 28 44 2c 34 31 35 2c 44 2e 44 29 2c 43 42 28 44 2c 61 29 29 3a 4f 28 44 2c 34 31 35 2c 61 29 2c 44 29 2c 79 29 2c 34 31 35 29 2c 50 29 2c 44 29 2c 33 33 34 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 29 7b 69 66 28 34 31 35 3d 3d 61 7c 7c 34 30 35 3d 3d 61 29 79 2e 48 5b 61 5d 3f 79 2e 48 5b 61 5d 2e 63 6f 6e 63 61 74 28 44 29 3a 79 2e 48 5b 61 5d 3d 55 30 28 44 2c 79 29 3b 65 6c 73 65 7b 69 66 28 79 2e 78 4c 26 26 33 36 30 21 3d 61 29 72 65 74 75 72 6e 3b 34 34 36 3d 3d 61 7c 7c 34 39 38 3d 3d 61 7c 7c 33 34 35 3d 3d 61 7c 7c 31 36 35 3d 3d 61 7c 7c 33 35 31 3d 3d 61 7c 7c 33 34 39 3d 3d 61 7c 7c 33 30 31 3d 3d 61 7c 7c 32 38 36 3d 3d 61 7c 7c 34 30 34 3d 3d 61 3f 79 2e Data Ascii: P=h(D,415),D.X&&P<D.D?(O(D,415,D.D),CB(D,a)):O(D,415,a),D),y),415),P),D),334)},O=function(y,a,D){if(415==a\|\|405==a)y.H[a]?y.H[a].concat(D):y.H[a]=U0(D,y);else{if(y.xL&&360!=a)return;446==a\|\|498==a\|\|345==a\|\|165==a\|\|351==a\|\|349==a\|\|301==a\|\|286==a\|\|404==a?y.
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 3e 3e 38 7c 79 3c 3c 32 34 2c 61 5e 3d 50 2b 36 34 31 2c 44 5e 3d 61 2c 79 2b 3d 50 7c 30 2c 50 3d 50 3c 3c 33 7c 50 3e 3e 3e 32 39 2c 79 5e 3d 42 2b 36 34 31 2c 50 5e 3d 79 3b 72 65 74 75 72 6e 5b 44 3e 3e 3e 32 34 26 32 35 35 2c 44 3e 3e 3e 31 36 26 32 35 35 2c 44 3e 3e 3e 38 26 32 35 35 2c 44 3e 3e 3e 30 26 32 35 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 72 68 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 7d 72 65 74 75 72 6e 20 50 3d 28 44 3d 28 42 3d 76 6f 69 64 20 30 2c 79 3d 49 79 28 79 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 70 26 26 28 61 26 26 47 24 28 61 29 2c 42 3d 4b 2c 70 28 29 2c 70 3d 76 6f Data Ascii: >>8\|y<<24,a^=P+641,D^=a,y+=P\|0,P=P<<3\|P>>>29,y^=B+641,P^=y;return[D>>>24&255,D>>>16&255,D>>>8&255,D>>>0&255,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},rh=function(y,a,D,P,B){function p(){}return P=(D=(B=void 0,y=Iy(y,function(K){p&&(a&&G$(a),B=K,p(),p=vo
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 3b 72 65 74 75 72 6e 20 4f 28 61 2c 34 31 35 2c 28 79 3d 52 2c 28 4b 7c 30 29 2b 28 44 7c 30 29 29 29 2c 79 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 29 7b 42 3d 74 68 69 73 3b 74 72 79 7b 56 42 28 44 2c 74 68 69 73 2c 79 2c 61 2c 50 29 7d 63 61 74 63 68 28 70 29 7b 78 28 74 68 69 73 2c 70 29 2c 61 28 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 4b 28 42 2e 52 29 7d 29 7d 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 29 7b 66 6f 72 28 50 3d 28 44 3d 5b 5d 2c 28 79 7c 30 29 2d 31 29 3b 30 3c 3d 50 3b 50 2d 2d 29 44 5b 28 79 7c 30 29 2d 31 2d 28 50 7c 30 29 5d 3d 61 3e 3e 38 2a 50 26 32 35 35 3b 72 65 74 75 72 6e 20 44 7d 2c 57 72 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 2c 70 29 7b 69 66 28 21 79 2e 52 29 7b 79 Data Ascii: ;return O(a,415,(y=R,(K\|0)+(D\|0))),y},l=function(y,a,D,P,B){B=this;try{VB(D,this,y,a,P)}catch(p){x(this,p),a(function(K){K(B.R)})}},X=function(y,a,D,P){for(P=(D=[],(y\|0)-1);0<=P;P--)D[(y\|0)-1-(P\|0)]=a>>8*P&255;return D},Wr=function(y,a,D,P,B,p){if(!y.R){y
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 29 29 2c 44 29 2c 50 7d 29 5d 7d 2c 68 69 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 2c 70 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 28 29 7b 69 66 28 50 2e 4a 3d 3d 50 29 7b 69 66 28 50 2e 48 29 7b 76 61 72 20 52 3d 5b 62 7a 2c 44 2c 79 2c 76 6f 69 64 20 30 2c 42 2c 70 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 32 3d 3d 61 29 76 61 72 20 62 3d 4e 28 50 2c 66 61 6c 73 65 2c 28 75 28 52 2c 50 29 2c 66 61 6c 73 65 29 29 3b 65 6c 73 65 20 69 66 28 31 3d 3d 61 29 7b 76 61 72 20 4d 3d 21 50 2e 68 2e 6c 65 6e 67 74 68 3b 28 75 28 52 2c 50 29 2c 4d 29 26 26 4e 28 50 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 65 6c 73 65 20 62 3d 42 72 28 50 2c 52 29 3b 72 65 74 75 72 6e 20 62 7d 42 26 26 70 26 26 42 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: )),D),P})]},hi=function(y,a,D,P,B,p){function K(){if(P.J==P){if(P.H){var R=[bz,D,y,void 0,B,p,arguments];if(2==a)var b=N(P,false,(u(R,P),false));else if(1==a){var M=!P.h.length;(u(R,P),M)&&N(P,false,false)}else b=Br(P,R);return b}B&&p&&B.removeEventListen
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 51 28 61 2c 35 30 36 2c 28 51 28 61 2c 28 51 28 61 2c 28 61 2e 56 52 3d 28 4f 28 28 4f 28 61 2c 33 30 31 2c 5b 30 2c 30 2c 28 51 28 61 2c 34 36 33 2c 28 4f 28 61 2c 28 51 28 61 2c 31 34 33 2c 28 51 28 61 2c 28 51 28 61 2c 28 51 28 61 2c 28 4f 28 61 2c 33 34 39 2c 28 28 51 28 61 2c 28 51 28 61 2c 33 34 32 2c 28 4f 28 61 2c 28 61 2e 57 59 3d 28 61 2e 4c 3d 76 6f 69 64 20 30 2c 28 61 2e 48 3d 28 61 2e 79 52 3d 30 2c 44 3d 28 61 2e 56 3d 28 61 2e 6f 31 3d 42 2c 61 2e 5a 3d 76 6f 69 64 20 30 2c 61 2e 76 3d 5b 5d 2c 61 2e 4a 33 3d 28 61 2e 41 3d 6e 75 6c 6c 2c 5b 5d 29 2c 61 2e 68 3d 5b 5d 2c 61 2e 43 3d 30 2c 28 61 2e 59 4c 3d 28 61 2e 4f 3d 5b 5d 2c 66 61 6c 73 65 29 2c 61 29 2e 49 3d 76 6f 69 64 20 30 2c 61 2e 46 3d 30 2c 61 2e 67 3d 66 61 6c 73 65 2c 61 2e Data Ascii: Q(a,506,(Q(a,(Q(a,(a.VR=(O((O(a,301,[0,0,(Q(a,463,(O(a,(Q(a,143,(Q(a,(Q(a,(Q(a,(O(a,349,((Q(a,(Q(a,342,(O(a,(a.WY=(a.L=void 0,(a.H=(a.yR=0,D=(a.V=(a.o1=B,a.Z=void 0,a.v=[],a.J3=(a.A=null,[]),a.h=[],a.C=0,(a.YL=(a.O=[],false),a).I=void 0,a.F=0,a.g=false,a.
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 4f 28 52 2c 7a 2c 62 29 29 7d 29 2c 39 34 29 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 62 2c 4d 2c 7a 2c 6b 29 7b 66 6f 72 28 7a 3d 28 6b 3d 28 4d 3d 6d 28 52 29 2c 76 72 28 52 29 29 2c 62 3d 30 2c 5b 5d 29 3b 62 3c 6b 3b 62 2b 2b 29 7a 2e 70 75 73 68 28 41 28 52 29 29 3b 4f 28 52 2c 4d 2c 7a 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 52 29 7b 77 68 28 34 2c 52 29 7d 29 29 2c 39 39 29 2c 5b 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 62 2c 4d 2c 7a 2c 6b 29 7b 4f 28 52 2c 28 6b 3d 68 28 28 4d 3d 28 4d 3d 28 7a 3d 28 6b 3d 28 62 3d 6d 28 52 29 2c 6d 28 52 29 29 2c 6d 28 52 29 29 2c 6d 29 28 52 29 2c 68 28 52 2c 4d 29 29 2c 7a 3d 68 28 52 2c 7a 29 2c 52 29 2c 6b 29 2c 62 29 2c 68 69 28 7a 2c 4d 2c 6b 2c 52 29 29 7d 29 29 2c 30 29 5d 29 2c 61 29 2c 31 36 35 2c 46 28 34 Data Ascii: O(R,z,b))}),94),function(R,b,M,z,k){for(z=(k=(M=m(R),vr(R)),b=0,[]);b<k;b++)z.push(A(R));O(R,M,z)}),function(R){wh(4,R)})),99),[]),function(R,b,M,z,k){O(R,(k=h((M=(M=(z=(k=(b=m(R),m(R)),m(R)),m)(R),h(R,M)),z=h(R,z),R),k),b),hi(z,M,k,R))})),0)]),a),165,F(4
2024-04-23 14:06:19 UTC	1255	IN	Data Raw: 29 2e 74 6f 53 74 72 69 6e 67 28 32 29 2e 6c 65 6e 67 74 68 2c 5b 5d 29 2c 30 29 3b 54 3c 49 3b 54 2b 2b 29 56 5b 54 5d 7c 7c 28 4d 5b 54 5d 3d 55 28 6b 29 29 3b 66 6f 72 28 6b 3d 30 3b 6b 3c 49 3b 6b 2b 2b 29 56 5b 6b 5d 26 26 28 4d 5b 6b 5d 3d 6d 28 52 29 29 3b 66 6f 72 28 7a 3d 5b 5d 3b 62 2d 2d 3b 29 7a 2e 70 75 73 68 28 68 28 52 2c 6d 28 52 29 29 29 3b 51 28 52 2c 77 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 47 2c 59 2c 45 2c 4a 29 7b 66 6f 72 28 59 3d 28 47 3d 28 45 3d 5b 5d 2c 5b 5d 29 2c 30 29 3b 59 3c 49 3b 59 2b 2b 29 7b 69 66 28 21 28 4a 3d 4d 5b 59 5d 2c 56 5b 59 5d 29 29 7b 66 6f 72 28 3b 4a 3e 3d 45 2e 6c 65 6e 67 74 68 3b 29 45 2e 70 75 73 68 28 6d 28 5a 29 29 3b 4a 3d 45 5b 4a 5d 7d 47 2e 70 75 73 68 28 4a 29 7d 28 5a 2e 4e 3d 55 30 28 7a 2e 73 Data Ascii: ).toString(2).length,[]),0);T<I;T++)V[T]\|\|(M[T]=U(k));for(k=0;k<I;k++)V[k]&&(M[k]=m(R));for(z=[];b--;)z.push(h(R,m(R)));Q(R,w,function(Z,G,Y,E,J){for(Y=(G=(E=[],[]),0);Y<I;Y++){if(!(J=M[Y],V[Y])){for(;J>=E.length;)E.push(m(Z));J=E[J]}G.push(J)}(Z.N=U0(z.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	49994	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	955	OUT	GET /wp-content/uploads/2019/08/SOL-affret.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/gif Content-Length: 4257 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	4257	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 fa d5 bb f5 ac 7a f4 a4 6c 8b 87 a2 fb dd c8 db da e2 f5 a9 74 f0 81 34 f3 99 5a fe f9 f5 f1 85 3a f8 c5 a1 fa d1 b4 f2 8e 48 fe f6 f1 d4 d2 dc 58 52 79 fd ec e1 fa f9 fb 33 2c 5b f4 9d 61 f2 90 4c ef 78 25 f6 b6 89 f8 c1 9a f0 7e 2f fc e4 d4 fe f4 ee 18 10 46 fb e0 cd f2 f2 f5 fd ea dd f6 b1 81 29 22 54 a8 a5 b9 3c 36 63 f9 cc ae 95 91 aa f9 c9 a8 f7 b8 8d b4 b1 c3 fe fe fe fc e3 d1 f7 bd 95 43 3c 68 f3 96 56 fa d8 c1 92 8e a8 f0 7b 2a fd f2 ea fd ee e4 f7 ba 90 bc ba c9 6e 69 8b e2 e1 e8 e7 e6 eb ca c9 d5 23 1b 4f 72 6d 8e ed ec f0 f1 89 41 99 95 ad ef 77 23 ea ea ef 1d 15 4a 4a 43 6d f2 8d 46 c6 c4 d2 f4 a0 66 fc e7 d8 53 4d 75 f9 c8 a6 ad ab be fb dc c6 fc e8 da f0 7c 2c fb da c4 d1 cf da ff fc fa c2 c0 ce f1 8b Data Ascii: GIF89a}zlt4Z:HXRy3,[aLx%~/F)"T<6cC<hV{*ni#OrmAw#JJCmFfSMu\|,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	49995	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	716	OUT	GET /wp-content/uploads/2019/08/SOL-tournee.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/gif Content-Length: 4784 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	4784	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 fe f6 f1 fe f3 ec dc db e3 fb d9 c2 fc e5 d5 fa d4 ba 6b 66 89 5a 53 79 79 74 94 42 3b 67 97 94 ac f0 7c 2b f6 b1 82 f9 f9 fa f3 98 59 fe f9 f5 8b 67 69 d4 d2 dc f1 85 3a f9 cb ac f2 8f 4b 60 5a 7f cb ca d5 23 1a 4d 2b 23 54 f1 8a 43 c5 c3 d1 32 2a 59 f8 c3 9e f8 c5 a1 f7 ba 90 8c 88 a3 d8 6e 2b f3 95 54 fb dd c8 f2 f2 f5 bd ba c9 fd ea dd ad aa bc f6 ae 7c 1c 14 49 b5 b2 c4 ed ec f0 c3 c0 ce f4 a0 66 f4 a4 6c 48 42 6c 3c 35 63 ea e9 ee 81 7c 99 63 5e 82 9c 99 b0 54 4e 76 f4 9d 60 fe fe fe f0 81 33 c0 bd cc f6 f6 f8 86 81 9e f7 be 96 f7 b8 8c f5 aa 75 ef 78 25 a0 9d b3 59 47 66 f6 b5 88 91 8d a7 b8 b6 c6 9d 4f 30 b2 6b 4b a9 a6 ba 77 58 64 f2 91 4e fb e0 cd f7 c0 9a fa d1 b4 e2 e1 e8 e6 e5 eb 4e 47 71 f3 f3 f6 fc e3 Data Ascii: GIF89a}kfZSyytB;g\|+Ygi:K`Z#M+#TC2*Yn+T\|IflHBl<5c\|c^TNv`3ux%YGfO0kKwXdNNGq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	49999	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	952	OUT	GET /wp-content/uploads/2019/08/SOL-urg.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/gif Content-Length: 3507 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	1193	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 fc e4 d3 f0 80 32 f1 8a 42 42 3b 67 f7 ba 90 da d9 e2 fa f9 fb fe f6 f1 fe f9 f5 f3 95 53 f7 be 96 bc ba c9 ed ec f0 48 42 6c 6a 65 87 33 2c 5c b6 b3 c4 18 10 46 fd ea dd f3 9a 5c fa d6 bd f4 a5 6d f5 a9 74 2c 25 56 f4 9e 62 e2 e1 e8 f0 7e 2f fb db c5 f1 f1 f4 1e 16 4b fd f1 e8 fe fe fe f8 c2 9b ef 78 25 8c 88 a3 fb e0 ce 9a 96 ae 85 80 9d fe f4 ee 57 52 79 f9 cf b1 3b 35 62 b1 ae c0 ab a8 bc f6 b2 82 f8 c5 a2 f1 87 3d e9 e9 ee 91 8e a7 71 6c 8d f9 cd ae f7 b9 8d 80 7c 99 a8 a5 b9 c5 c3 d1 24 1c 4f a2 9e b4 d6 d5 de 64 5f 83 f0 7c 2c fb de ca a5 a1 b7 f9 ca a9 7c 77 96 e5 e4 ea f6 f6 f8 c8 c6 d3 f0 7b 2a d4 d3 dd d2 d0 db fd ee e4 ef 77 24 b8 b6 c6 f4 f4 f6 fd ec e0 cc cb d6 7d 79 97 ff fc fa fc e7 d8 f1 84 39 f6 b3 Data Ascii: GIF89a}2BB;gSHBlje3,\F\mt,%Vb~/Kx%WRy;5b=ql\|$Od_\|,\|w{*w$}y9
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 37 33 46 32 42 36 46 35 35 32 30 36 38 31 31 38 32 32 41 39 43 42 33 41 41 31 33 42 42 37 46 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 33 32 34 30 35 64 31 2d 30 62 66 34 2d 31 31 37 39 2d 61 30 30 37 2d 63 30 64 36 64 33 65 30 62 34 31 66 22 2f 3e 20 3c 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 4d 61 64 73 65 6e 20 56 61 6c 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 64 63 3a 74 69 74 6c 65 3e Data Ascii: ntosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A73F2B6F55206811822A9CB3AA13BB7F" stRef:documentID="adobe:docid:photoshop:032405d1-0bf4-1179-a007-c0d6d3e0b41f"/> <dc:creator> <rdf:Seq> <rdf:li>Madsen Vale</rdf:li> </rdf:Seq> </dc:creator> <dc:title>
2024-04-23 14:06:20 UTC	866	IN	Data Raw: d4 b4 70 28 98 f9 f1 30 28 11 4f fc 49 ff c5 16 77 82 71 26 4e 50 d1 91 45 3b 84 10 82 46 02 7c aa ce c6 98 44 f1 ed 3c 8c 9e 3c cf 26 1b d0 b9 2c 69 eb a0 8c 49 13 07 e4 ac f3 ce 3c e7 bc aa 1f 2d f4 9c 33 9b 35 bf dc 8a 05 f3 94 ab 94 cd a9 20 ed 87 d2 91 18 00 41 0c 03 f8 fa c0 09 52 d0 91 0b 1a 3d e8 70 c5 a8 1d 5c a1 03 0e c3 46 c2 34 2a 4e 43 ed 08 19 6d 5c f0 6b 17 60 14 50 cb 17 4c 74 d0 c5 a9 1d 30 51 b6 23 67 9f 92 36 24 05 0c 0a e9 dd a4 76 00 c3 07 b2 2c e0 36 a9 84 43 7a c1 02 90 f4 6d ca df 8e 08 71 c3 9b 17 94 20 44 12 7f 88 31 c6 0a 64 be e9 80 18 b0 e0 d0 f8 00 24 10 71 ad 01 44 90 20 78 04 4a f2 6d 34 2b 94 33 52 c4 e5 79 4a 71 ed 21 65 3c 1a 41 0c af d4 c0 e5 05 2a 20 7e 08 04 b5 45 d0 83 ec 12 1f 3d 0f 1e 8d 70 70 45 63 17 14 b1 88 01 Data Ascii: p(0(OIwq&NPE;F\|D<<&,iI<-35 AR=p\F4NCm\k`PLt0Q#g6$v,6Czmq D1d$qD xJm4+3RyJq!e<A ~E=ppEc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50000	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:19 UTC	708	OUT	GET /wp-content/uploads/2019/08/SF5.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	276	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/jpeg Content-Length: 77665 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	2639	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:20 UTC	4344	IN	Data Raw: c9 01 04 e6 df 6a 59 81 14 24 e4 94 12 2f 1b 7c 40 10 00 c8 29 a1 32 46 ea d8 3e 27 02 2b 51 92 6d 08 f2 4f d5 2d 91 d6 bb 83 ee 63 6d 23 91 a6 bd e8 a1 5e 55 a0 6f a7 32 69 89 ad 76 75 a0 54 e7 b4 32 ee ae 29 47 a0 20 95 ba 19 51 85 33 2a aa e5 4b 73 4e 4e bc ea 84 cc b1 bd c4 36 9d ea 7e e5 59 43 c1 75 b9 27 6b 13 5e 09 02 aa ca b9 2a b2 81 fb 60 00 d5 59 05 62 bf 2e d3 98 40 00 6d 23 3c 02 61 02 67 6f 61 c8 66 80 80 87 6c 66 74 cb b1 12 10 10 ed 2d 71 ae 94 e4 50 74 7b 4b 58 e2 69 5e 45 12 1c 45 d9 b6 b4 03 86 28 90 e2 2e dd b9 94 c4 27 21 c4 59 b6 2c 19 35 29 1c 0b 0b 56 8e 01 12 10 28 21 6b 72 08 1c 00 5a e1 96 09 00 99 6b 8f 14 00 1a 6b 9a 00 69 3b 2a c3 de 81 41 18 f6 d0 8e c0 a6 8a d9 13 b5 bc 1d ea 51 c9 a3 ed 4c 8d 77 35 4b 7f 80 28 9a 50 b1 c9 Data Ascii: jY$/\|@)2F>'+QmO-cm#^Uo2ivuT2)G Q3KsNN6~YCu'k^`Yb.@m#<agoaflft-qPt{KXi^EE(.'!Y,5)V(!krZkki;*AQLw5K(P
2024-04-23 14:06:20 UTC	2896	IN	Data Raw: 50 12 23 eb 30 93 53 5c 68 88 00 3d 46 61 e6 1e 28 81 c8 8b df 18 15 af 7a 20 52 5b 36 57 b0 06 d0 8c 69 81 48 7b 9a 04 4f 67 a6 d3 a8 63 99 51 26 38 6c f1 8f 89 c0 53 8a 62 91 cb 2e 22 14 21 fd f4 4c 72 4d 59 be 39 34 80 6b 5e 0a 48 07 97 51 c7 e9 13 5a 50 62 79 29 89 99 86 ef 7a 2d ee 1f 11 c2 99 15 06 44 89 87 73 6f ac 03 9c 03 5c 33 27 8a a7 2d 5b 46 ae b6 4e 17 52 59 6d ee 98 e0 1c 0a e6 d9 43 3b f8 ec 9a 19 de cd ea 57 00 6b c1 59 5b b4 67 cb d7 ab 20 c1 95 b2 79 5d 87 25 ae 99 64 e6 e5 ea ba ec 4d 58 df 48 1b e7 24 01 85 72 f6 ab a4 c9 c5 a2 72 3b d6 b9 a4 13 5a 71 52 01 29 44 52 83 88 39 20 46 89 b7 b1 ad 8a 20 07 e1 0a c4 04 3c c4 0d fe 3a 1c 74 e2 99 09 fa 8d 3a c8 fe 9b 7b 94 19 a5 0f 6a 81 8d 2e cf e9 a1 03 22 6d ff 00 9d e2 99 05 b9 36 ff 00 Data Ascii: P#0S\h=Fa(z R[6WiH{OgcQ&8lSb."!LrMY94k^HQZPby)z-Dso\3'-[FNRYmC;WkY[g y]%dMXH$rr;ZqR)DR9 F <:t:{j."m6
2024-04-23 14:06:20 UTC	2896	IN	Data Raw: 76 b6 12 0b 87 3c 52 f2 ec b0 12 f7 d7 e1 04 d6 a0 72 cb bd 5e b5 d5 99 9c 2d 11 18 e8 cb c9 73 ea e7 1c 5c 75 02 e2 a5 24 20 91 b4 b7 bd 63 ab 0e a9 18 e1 59 19 9b 48 e6 54 5b 44 ea 9a d8 d3 ba 6e d1 9b 75 e5 a6 e9 6d 7f 13 1c c7 fa 57 76 a4 d2 a3 0a b0 8e 58 d7 de a8 be ba 41 ab 1a 8d 53 3d 25 6d d5 db 46 c9 04 51 6f fb 9c 56 82 07 bd ac b9 7b ab 56 b8 b5 cd 0e ed c7 0e cc 54 b1 e4 f0 c5 96 9e 51 7b b4 bf b3 be 89 b7 36 37 31 5d 42 ef 86 66 3c 39 a7 b0 10 b4 2d 4a 1a 6b 72 41 b2 73 23 b8 14 00 a0 70 25 20 05 03 05 00 72 00 2b fe 12 80 66 3f f5 54 7f fe 31 72 47 e1 9a 2f f7 94 8a 72 1e 68 97 16 e7 8f 1f de 99 5b 22 a5 34 3c 73 e0 81 8c 89 f3 57 0c f0 40 32 77 6c fe 7d b1 1f 9c 7f 80 81 41 ec fe 9b 35 db ac 08 e3 03 3e c4 32 ec 7b 16 e1 90 50 2d 38 a0 06 Data Ascii: v<Rr^-s\u$ cYHT[DnumWvXAS=%mFQoV{VTQ{671]Bf<9-JkrAs#p% r+f?T1rG/rh["4<sW@2wl}A5>2{P-8
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: 90 ea 39 db 29 35 35 1f 7a 50 00 bd a1 ed 24 0a 01 c5 32 31 ea 45 4a e2 cc 46 6d 39 20 90 bd 9c e5 f2 b5 a4 e0 12 64 74 f2 5f ac 58 c7 35 b5 02 85 45 0e 11 6a b1 b3 84 b4 92 d0 69 80 0a ca a2 2e 06 f7 bb 74 53 32 6a 50 06 a1 a2 32 66 f7 cc 74 3e a0 6d 43 99 c7 b9 28 2c 4c ab 7f 71 90 f1 a1 ae 49 f1 0e 40 8d c5 c6 98 f8 23 88 72 43 bb 7d c6 58 de 24 6b b1 09 71 09 4d 17 fd a7 ae 21 b4 0c 6d c3 1c d2 33 3c 14 ea e0 ae f5 92 d0 3e a5 6d 4d 00 17 1a 95 67 b8 53 ed c0 da e3 ea 6e da 1a 74 87 3a a3 92 16 40 74 65 d7 68 df fe 6e da 0b 88 1a 4b 65 63 48 69 cf 15 a6 8e 51 96 ee 06 fb a6 f9 76 fd ca d6 d5 b1 90 c7 83 57 55 5b 05 0f 23 6c d0 b6 cb cb a6 c0 c0 e0 1c 40 f8 94 5d 51 a6 b6 69 0f dd 7b 76 47 c2 01 4b 8a 1f 36 47 dd 5e df b6 27 b9 ba 6a 38 29 2a a2 0e f6 Data Ascii: 9)55zP$21EJFm9 dt_X5Eji.tS2jP2ft>mC(,LqI@#rC}X$kqM!m3<>mMgSnt:@tehnKecHiQvWU[#l@]Qi{vGK6G^'j8)*
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: 82 44 a4 33 c1 38 e7 ce 89 c0 b9 0d 5e 1c 28 00 ee 29 c0 a5 84 35 a1 18 e5 c5 10 2e 5e 0f 47 f4 66 3b 45 81 23 11 13 05 56 ac 5b 18 f2 6e 4c 6e 81 a3 73 b3 20 62 78 f8 2b fc 19 5f dc 68 fb 58 fd 16 d4 70 55 b3 65 76 24 8b 45 0e 09 12 19 5d 01 e9 3d 34 42 c4 2d af f3 c8 ed 15 4e c4 6a 59 69 e4 0a 25 a3 0b 87 50 b3 bd 01 23 bb 6c d0 24 39 97 e0 28 1b 31 2f a9 6c ad 8c 74 a6 13 0f b1 3b 6c 50 be e3 cd d7 51 9f 50 fe 16 03 42 e2 70 ee ed 51 24 4f ed ec 63 98 c6 b4 19 49 14 04 f9 47 b3 34 99 24 5a 36 76 cd 72 c9 2c 61 fd 39 21 9a 3b 8b 3a fe 3f 36 99 58 79 02 08 7d 06 64 28 d8 95 3d 0b 27 53 de 45 2c f2 b0 6a 16 d0 b0 44 69 87 e9 b7 e2 a7 23 2b bc 68 b9 57 b7 2b 49 d5 c7 58 a9 8c 75 6d fd c1 7c 36 ec 69 65 e6 e5 1b 44 50 34 d3 d1 b6 93 08 d9 86 46 4a 54 f6 2d Data Ascii: D38^()5.^Gf;E#V[nLns bx+_hXpUev$E]=4B-NjYi%P#l$9(1/lt;lPQPBpQ$OcIG4$Z6vr,a9!;:?6Xy}d(='SE,jDi#+hW+IXum\|6ieDP4FJT-
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: cb 16 35 44 57 d3 c7 ee e5 79 1e c6 f5 62 d2 34 56 80 1c 48 e5 c9 72 64 ec c7 a1 39 1c 66 ad 34 14 24 1a 7d a8 92 2d 12 76 af 3a fc d8 1e 1c d0 ac 0e ba 13 6d 76 9a 0a 93 c1 b8 64 ae 56 65 4d 49 25 08 34 18 62 71 a2 be 8d 94 dc 92 66 a0 71 a6 9c d6 9a b6 67 b4 0e 63 2d c6 a7 35 6d 5a 2a b2 0c 59 af 0c 29 c0 f2 2a 4d 49 14 e0 c1 7e a6 74 34 70 bf fe ec d9 ac c3 ee 20 6b 99 bb 5b 35 e5 8d 96 07 60 f6 b9 a0 10 5a 78 f2 cd 66 8f 69 f1 fe d7 fc 99 a1 ff 00 99 72 fe f5 fc d1 03 f4 e3 aa ed e2 dd ff 00 b5 fa d7 2c 8e 5f 2e de 2e 5e d2 ed 0d 15 f4 25 a0 04 e9 fc 2e cc 51 46 f4 74 7c bf 32 35 ba c9 5e 3f c7 f1 fa 9e 8f 9c 47 75 6e e0 59 e7 20 3c 93 f8 a9 c7 bc 1c 0a be d1 6a c9 4d 66 ac 89 b7 ba f4 67 13 bc 1a 46 44 72 f3 f4 dd 83 49 3c 74 aa 55 b8 da 4b 5d 65 41 Data Ascii: 5DWyb4VHrd9f4$}-v:mvdVeMI%4bqfqgc-5mZY)MI~t4p k[5`Zxfir,_..^%.QFt\|25^?GunY <jMfgFDrI<tUK]eA
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: d8 5c 94 fa 17 6d ce 23 1b a4 90 0a 07 34 d5 bc 31 ce 8b a5 53 9d 73 18 eb 59 74 b6 06 81 56 99 9b ea 8e 61 e7 49 15 ee 28 65 4c c5 e4 8c 37 d4 60 f8 58 e7 34 1e 7a 4d 2a 82 31 24 2d c8 c6 84 d0 0e 28 02 29 ff 00 16 5d d5 40 32 4a cc 79 d9 8e 4e 18 f8 a6 07 a1 7a 51 b5 b4 8c d2 84 d2 81 49 0d 16 fb 87 0c 3b b2 4c 05 61 20 e9 e2 79 a6 84 c9 13 90 c1 31 33 c7 51 dc 7a 32 3a 87 07 51 66 2e 24 8d d3 a5 82 a4 e9 03 82 09 78 10 f5 1d a4 38 11 82 04 0c 57 a5 ae 7b 49 e1 85 12 1b 1c 00 25 d5 cf dc 90 22 d3 b1 d9 09 64 61 a6 24 8a f6 d1 57 66 5f 45 e4 d8 36 fd b0 68 68 2d e1 82 ae 0b d3 26 59 b5 31 bf 81 55 64 5d 51 e3 6c 5a d1 40 28 07 25 53 a9 6a b0 de 6b 30 7f 0a a5 a2 ea b2 36 7b 41 43 82 83 2c 45 2b 7b b2 0e 8d f8 57 05 09 2d a9 8a ee b6 8f 8a e1 ce 68 a6 38 Data Ascii: \m#41SsYtVaI(eL7`X4zM*1$-()]@2JyNzQI;La y13Qz2:Qf.$x8W{I%"da$Wf_E6hh-&Y1Ud]QlZ@(%Sjk06{AC,E+{W-h8
2024-04-23 14:06:20 UTC	5792	IN	Data Raw: e7 62 5e d7 0d 3d ca 9b 56 0b e9 63 2f dd b6 23 2b 9d 46 62 95 6f 05 d0 99 0d 6d b4 4f 69 28 2d 69 18 85 2b 5e 4b 28 a0 d1 f6 3b b9 e0 2d 6b ab c1 50 9c 32 76 49 a3 4d b1 bc 73 da 2a b7 e2 c8 73 73 63 48 7b 24 95 19 ab 5d 8a 15 46 92 3a 91 bc e4 92 06 60 1f 55 6e cc 76 2f 65 7e 3c 0a b7 02 9b 19 bb 56 8a 1e 72 66 61 6f 39 05 df 6e af a6 ce ec c2 6f 62 04 de d6 09 ba 70 02 82 a2 8b 2e 43 6e 24 de c6 99 6f 08 f4 c0 3c b3 59 8d 51 ea 54 37 a8 c8 94 90 2a 0a 9d 48 59 a6 56 d8 d2 1e 4b 86 7c d5 85 5f 32 4e 86 82 be c5 12 7f 31 36 9a 4d ef 24 a9 26 41 a3 45 d8 88 3a 4d 73 4d 09 ec 5e e2 a0 02 83 b8 2b 11 11 4d 54 39 a0 02 eb 27 8a 62 62 45 d4 a6 65 02 15 6b f9 fb 12 24 2a 1f 51 5a e1 98 4c 01 f5 30 a7 b9 00 b7 21 37 39 3f 4c e0 a1 62 49 e8 50 64 23 d6 e7 57 64 Data Ascii: b^=Vc/#+FbomOi(-i+^K(;-kP2vIMssscH{$]F:`Unv/e~<Vrfao9nobp.Cn$o<YQT7HYVK\|_2N16M$&AE:MsM^+MT9'bbEek$*QZL0!79?LbIPd#Wd
2024-04-23 14:06:20 UTC	4344	IN	Data Raw: 00 02 81 05 40 1c 80 39 00 21 3f c0 84 26 53 6f 0d 2e 47 7a b1 15 3d cb 55 99 f2 37 b9 41 96 a2 51 a7 04 86 19 00 15 c7 04 00 d1 e7 14 21 11 17 c7 f4 de a7 52 17 31 bd dc 8f 5a 9c 9c 68 af b1 83 c9 1c fa 7a 2f ee a9 50 24 31 da 85 08 18 f1 a8 f1 51 65 94 2f 36 83 fa 88 28 33 69 4c 1e e6 8f 69 fc b6 f7 28 33 45 49 88 85 54 19 34 28 40 68 73 9c 74 b5 a0 b9 c7 90 1c 50 33 2e ea 91 2b ba 7b 76 9d c5 d1 49 73 1c 94 00 e2 3d 51 81 ad 32 a5 15 59 fe c6 4b 1f de 8c 1e 28 74 b6 3b 76 b0 11 03 fd 7b 90 32 0f f4 c0 63 29 d8 00 5c ab 33 a9 54 a4 5b a8 f5 47 b3 3b 6e 8d d4 30 d9 49 3d c5 3b a8 2b de e7 15 0c 5a da 7e 25 b6 d9 af 81 0f d2 37 5e a6 d5 03 5d 8f a4 df 49 c3 88 2d 51 ec a8 bb 35 f5 ad ca 88 61 b9 4b 2e eb bb 8b 22 49 b2 b0 a4 97 7c 9c e3 8b 19 f7 95 3c 69 Data Ascii: @9!?&So.Gz=U7AQ!R1Zhz/P$1Qe/6(3iLi(3EIT4(@hstP3.+{vIs=Q2YK(t;v{2c)\3T[G;n0I=;+Z~%7^]I-Q5aK."I\|<i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50002	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:20 UTC	953	OUT	GET /wp-content/uploads/2019/08/SOL-temp.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/gif Content-Length: 3205 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	3205	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 f2 94 52 fb d9 c1 e5 e4 ea f6 b3 85 cb ca d6 f9 f8 fa fc e9 dc fd f2 e9 ef 78 25 ed ec f0 18 10 46 f1 85 3a 51 4b 74 43 3d 69 f8 c3 9e 32 2b 5b fe f9 f5 dd dc e4 f5 ac 7a 7d 78 97 f0 80 32 48 42 6c da d9 e2 fd ed e3 f3 99 5a b6 b3 c5 f0 7e 2f 21 19 4d ad aa bd fb de c9 1c 15 49 75 71 91 f1 89 41 5d 57 7d 29 22 54 f8 c6 a2 3d 37 64 f4 a3 6b 8d 89 a4 79 74 94 f7 bc 94 95 91 aa 86 81 9e fa d1 b5 4e 47 71 72 6d 8e fb e0 ce f5 a7 71 d6 d5 df ff fc fb f7 ba 91 89 85 a0 fe fe fe b8 b6 c7 f7 b9 8d fe f7 f2 c7 c5 d2 f6 b6 89 f9 c9 a7 a1 9e b4 f5 ab 77 fe fb f8 fc e7 d8 fa d4 ba f9 cd ae c9 c7 d3 6e 69 8b 65 60 84 82 7e 9b 61 5c 81 f0 7b 2a f5 a8 73 a4 a1 b6 f2 8d 46 37 30 5f fc e5 d5 9a 96 ae d4 d2 dc fe f6 f1 f5 a9 74 f9 cb Data Ascii: GIF89a}Rx%F:QKtC=i2+[z}x2HBlZ~/!MIuqA]W})"T=7dkytNGqrmqwnie`~a\{*sF70_t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50003	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:20 UTC	713	OUT	GET /wp-content/uploads/2019/08/SF5-flip.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/jpeg Content-Length: 127952 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:02 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	12774	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:20 UTC	5792	IN	Data Raw: 4b 0b 8a 64 14 60 b4 b3 27 8a 78 e7 da 85 89 c6 f4 cb 6f 1b 02 17 3f 1d 2e e8 07 4a ae 59 96 c7 04 d7 6f 0f 02 4b 73 70 2d d9 23 1c d3 a7 aa 75 03 b7 c2 90 b2 55 a7 6e e1 07 1d df 7f 2d 7b 2c 51 bd 34 9d 5a 5a 54 69 5c 4f ca 8a 71 1b c7 ca 69 7e 31 bb fe 6e 28 d2 5d 43 48 f3 1c 17 e5 50 26 f0 c7 e2 4e 34 fa af 78 7f 9b 53 54 bb ba 75 a9 08 65 ba da 5b ac 3d a3 a8 cf 20 3a 9a 8d 49 d3 8b 63 7b da 21 98 8c 10 66 b8 2d 42 44 a2 c9 ee c7 7d 84 51 87 a8 62 29 27 ea a2 a4 a8 58 8f dc e3 82 0c 5c 14 37 22 69 b9 50 23 1a b2 bf de f7 c6 bd a2 36 95 71 27 ae 75 ca de ee 54 55 0f 47 d3 76 2e 52 ab 42 8e 3d 66 6e a4 6c 8f 0b d9 7b 57 06 d3 f5 65 89 e8 ef ff 00 aa 18 0e fb cc 72 da 00 63 6d 5f 7a 2e 0b 03 3d 89 29 e6 3d 70 bb 89 65 20 3d 14 1c 41 ae a7 4d 95 51 c4 eb Data Ascii: Kd`'xo?.JYoKsp-#uUn-{,Q4ZZTi\Oqi~1n(]CHP&N4xSTue[= :Ic{!f-BD}Qb)'X\7"iP#6q'uTUGv.RB=fnl{Wercm_z.=)=pe =AMQ
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: 82 df 30 84 55 65 84 13 78 95 86 e2 04 38 e3 8d 5d 14 53 36 22 86 f3 4c ba 7a 77 a9 69 21 a8 4f b8 6e 8d 6c 0f 20 e2 17 0e f4 28 90 95 cc 0e 78 fe ab b7 66 df 5b 6d 56 08 5e e6 5c 19 40 c9 3c a9 89 f1 ab 63 83 32 cd d5 f3 39 a9 bb 37 fd e3 b0 54 72 12 33 ed 8d 5f c0 ab 36 4d b6 a8 cb ec 83 42 6b 11 90 03 71 2a 46 00 7c 69 12 6f 1a 2c fb 7c cb 77 68 b3 31 0e 59 67 0c 11 5e 3f 70 e2 af bb b2 85 d8 b5 f7 7b 54 90 7a a1 e0 fd f3 13 da e6 32 32 13 05 39 d5 2d fc fe 65 c9 62 f0 e1 f1 5d b0 25 be d9 6c 8e df 79 16 cb 60 e7 fa b7 bb 60 76 e5 71 bf 48 04 8e 8a da 55 2f b7 69 7a 32 33 2b 9b ad 8f 76 58 e4 d2 b5 1b 92 d2 ab db b2 0b 6b 52 4b 97 bf 1f b8 f9 cd 39 e5 df bc 5b a3 38 8c 52 cd 61 ec a7 0d 96 2b bd da 38 f5 11 bd dc b5 e7 d0 63 9b 9c 8d 73 81 10 b1 df 78 Data Ascii: 0Uex8]S6"Lzwi!Onl (xf[mV^\@<c297Tr3_6MBkq*F\|io,\|wh1Yg^?p{Tz229-eb]%ly``vqHU/iz23+vXkRK9[8Ra+8csx
2024-04-23 14:06:20 UTC	4344	IN	Data Raw: 75 d3 a9 c0 6a 8c 4a 30 38 74 a2 21 20 c9 06 a8 1f 57 ac 51 9d e6 73 f3 f5 87 63 eb 70 7b d7 04 fc 27 87 10 7a 63 52 da 3a 5d 44 7a 82 ad 86 62 5f 6a 61 b5 b8 90 b6 e3 49 5d 28 5c 06 2a 13 af 5a f4 33 74 47 87 8a 75 cf f5 37 37 04 d9 36 78 ed 55 de 93 9a 1e a5 00 5f 14 ae 75 c9 ba e2 74 ed db aa c0 bb ed b6 4d a6 6b 5f 2b 22 20 31 18 70 fd d5 07 22 e5 03 39 fb a5 b5 ed 02 0b 86 3d ad 2d c5 5a 33 54 c1 3c 6b 2d d9 b5 91 b7 6f 04 de 66 2a 9a 1d be 0b eb 8f 46 31 83 ce 95 44 24 67 54 eb 6d 62 74 bd 38 ac b3 1d ed f7 08 a1 68 0d 1a 70 46 8e 9f 01 4b 32 71 49 71 75 1d ed f7 18 ee 9c e2 e7 6a 68 19 64 49 14 a9 42 34 4f 36 19 3c 6c 9d 85 ec 61 68 68 c0 aa 82 45 0a a5 74 49 e2 88 7d dc 8e 84 6a 1f 7a 32 ba 73 29 d0 9a 78 96 24 aa ab f7 ec 85 fb 26 e0 6e 2e e3 8d Data Ascii: ujJ08t! WQscp{'zcR:]Dzb_jaI](\Z3tGu776xU_utMk_+" 1p"9=-Z3T<k-ofF1D$gTmbt8hpFK2qIqujhdIB4O6<lahhEtI}jz2s)x$&n.
2024-04-23 14:06:20 UTC	4344	IN	Data Raw: 00 95 eb a4 03 f7 82 f5 39 9a b2 38 95 49 a5 e1 c4 6a 86 1b 43 e5 d4 c2 e0 80 2f 9b 23 9f c7 ad 5c bb 8a 65 17 4a be 03 f5 8e d7 63 72 75 3f 4b bb aa 63 fb 1a 44 e5 5f 6f d0 7b 76 c9 b6 17 30 44 c6 0d 27 ef 14 fa 69 91 4a b9 76 fb 12 ed 9b 61 b6 90 2b 1a c7 02 99 66 5d 4f 49 1d 4d d5 3f d4 5f b8 f1 8b 76 46 f7 bd ad 2a a4 9c c1 06 99 5d 28 40 ee 2c ec ad dd 23 5b 23 44 b1 9d 43 aa a8 ec 29 38 f7 0d 4b 9b fe a5 55 c9 0b 1f ea 43 1b 35 3d ca 83 1f 9a d5 54 a1 a6 ab 9f db c0 86 6c 5c 46 fb 72 dc 35 0b 72 c8 4b 81 5c f2 a1 22 7a e9 e0 cd 79 c4 f8 2b e3 b4 8d 92 c5 80 d2 74 8c 2a c8 c6 a5 2d bc bf a8 ef bc f0 48 6e 99 f9 67 40 34 28 f5 3b 27 6f a7 3a 7a 05 29 61 46 32 b7 db 1b 36 b5 c3 f2 ec 52 a3 ca 10 0e b5 1a 0f 0e 1f 02 ba e6 1e df 41 6b 6a f9 19 03 5b a4 Data Ascii: 98IjC/#\eJcru?KcD_o{v0D'iJva+f]OIM?_vF](@,#[#DC)8KUC5=Tl\Fr5rK\"zy+t-Hng@4(;'o:z)aF26RAkj[
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: d4 1a 9b 69 61 6a 16 37 91 db cd ac ad 79 4b 92 69 37 da a7 af b5 6d 26 93 45 43 b4 6c 16 1e fc 7b 81 c9 39 ee f5 3c ce e2 a6 53 b1 f0 ad 9d 8e 2d f4 f6 6d b0 9b 68 24 7b 86 20 c8 e0 e9 10 75 72 d7 43 73 ba 96 c6 dc 6c db c2 58 39 3e f7 c3 d8 55 b1 e9 f1 de b7 7e ee 31 75 51 5d cb 8f b4 78 e6 9f a4 dd 86 e6 cc 5e f0 fd de e6 ca f9 80 3a 7b 0b c7 7e 62 17 0f 07 04 78 3f 4d 1b 7f e4 33 8b a5 c5 55 cd 60 c3 71 fc 66 d4 f1 b6 dc 5f bd 15 4f 1e d9 7d d9 f6 7b 76 37 7b 24 d3 98 5b 20 37 56 d1 3d cf 82 66 34 a3 98 f6 e5 97 54 ad d7 37 7b 5d ec 69 2c fe 28 c7 63 a7 ee f6 52 ac 1d 57 15 cd 1d 16 e1 7c ae 5e 45 b7 da df 5f 44 20 bd b9 6b 7d 68 58 e0 ec 13 20 46 18 fe ea f2 17 e0 a1 27 43 d7 d8 93 92 55 2e b3 2f f6 ed ae 49 a3 84 4d 23 c0 c8 61 8e 39 d2 f5 54 23 91 Data Ascii: iaj7yKi7m&ECl{9<S-mh${ urCslX9>U~1uQ]x^:{~bx?M3U`qf_O}{v7{$[ 7V=f4T7{]i,(cRW\|^E_D k}hX F'CU./IM#a9T#
2024-04-23 14:06:20 UTC	2896	IN	Data Raw: 23 b3 a7 83 45 29 ce ed 9c db a7 b9 ad d4 c7 14 c0 65 d4 60 73 ad 36 70 33 dd 92 79 64 fd a5 61 03 1e 27 25 e3 33 8a 8c 93 c6 b5 19 3b df 6e e2 53 a4 b4 34 92 54 a1 03 c5 3a d5 75 e4 5c 93 c2 b5 af e9 f5 e4 11 0b c3 2f 50 e2 70 2e 71 18 a0 35 38 b6 d1 4c 92 e1 db c0 d3 1e de b8 1f 4d c1 d9 a6 0b 90 4e e2 8c c5 2a a5 5a 71 fe 86 87 b4 0c 11 b3 48 03 00 43 57 11 56 a2 a7 f4 0f d6 8e cc 67 99 18 7d 14 c2 94 0a f5 c9 cc 8c 46 39 e2 bd 2a 58 11 6d 89 8c a5 a4 00 4b 94 61 f1 f8 51 5a 8a 94 14 c5 3f 52 33 e8 6a 05 82 c1 36 a6 ea 2e f2 e2 40 cc 1e 84 53 23 53 d3 73 e5 2d 41 80 52 3b 7c 68 1a 75 78 10 4e 57 73 fe d5 ea d5 45 03 32 bf 2a aa 68 9c 5e 06 74 b8 78 fc ea 84 3a a4 50 c3 9d 52 b0 27 28 b7 97 bb b8 d0 1c 52 60 2d 59 a4 ea 04 04 4c 05 59 06 42 51 4b 97 6f Data Ascii: #E)e`s6p3yda'%3;nS4T:u\/Pp.q58LMNZqHCWVg}F9XmKaQZ?R3j6.@S#Ss-AR;\|huxNWsE2*h^tx:PR'(R`-YLYBQKo
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: f4 b9 ed 9e e1 b7 ed c7 7e de ad 84 77 fb 9f e2 c9 13 87 fa 31 1f ba 1b fb d7 2a f2 d3 5f bb dc 79 7f 08 9e ad b5 b4 db 51 fe 6c d7 fc 9a 66 da d8 c7 0b 7f d3 8c 15 68 38 b9 07 5a df bb 92 82 8a e0 8e 5e d2 2e 6e 52 e2 ce 59 7b f6 ce 43 2e e9 7d 7b b6 44 2f 3f 3a c2 3f 2b f9 86 c1 a8 aa 16 39 ee 42 1a 99 86 d5 3b 2b b6 e7 2a cf e5 53 76 e6 dd c8 5b a4 31 c3 2a d0 c4 32 f0 6e 51 7a cb c1 b9 ed bb 84 7b c5 c5 dc 06 d5 96 72 7a 56 71 d8 05 33 45 a9 ad 52 f7 e0 1a ec 82 62 16 bd 4c 37 96 52 5a 64 a9 df 99 e4 2e f4 dd cd c6 dc a2 fd 9c 8b 77 80 71 7f 7a b8 6f 22 fe ef c1 99 b8 f0 ed 9e 59 60 82 28 62 dc 1d c8 1a d6 c3 ad d2 ea 82 ea 36 c3 2b a4 2f 0e f3 34 06 9c 59 8d 67 dc 6f 76 77 30 95 1b f7 17 ed 7a 66 fe d3 f2 ba 2f 1a f8 9a 7b 87 7b 9b ee 47 11 e6 3c 72 Data Ascii: ~w1_yQlfh8Z^.nRY{C.}{D/?:?+9B;+Sv[1*2nQz{rzVq3ERbL7RZd.wqzo"Y`(b6+/4Ygovw0zf/{{G<r
2024-04-23 14:06:20 UTC	2896	IN	Data Raw: fd 31 4b 78 d5 b0 ff 00 fa 76 0f fb 22 96 b1 fa 61 9f f4 ec 03 ff 00 05 a0 76 02 9e b0 f4 c1 8d 82 1f fc 96 8f 96 14 6b 0d 01 ad d8 a1 19 44 dc 7c 29 6b 0f 4c 6f dc 36 28 5d 13 c3 a2 04 11 8e 14 d4 aa 27 12 8a dd 78 2e dc fd d9 b7 1f 96 67 a8 d9 35 03 a4 67 4f d3 55 a9 53 93 58 17 56 cb b0 43 15 bc 4d 6c 4d 1a 40 c8 50 dd 0b 23 1a 92 96 ec d1 e9 fb 81 3a 61 50 d6 59 a0 1f f6 58 ff 00 a0 7d 14 6b 0d 08 34 6d 4c 6b 53 4e 03 a5 2d 41 a1 08 66 da e3 2f 07 48 25 b9 14 a9 eb 20 ed a2 29 bf d8 c6 db 69 5c 88 80 af ca ad b7 2c 4a 2e c7 03 0a f3 58 f4 ee 38 12 0f a8 ec 35 1c 7c c9 5d 49 1e 7a 98 e0 25 8c 30 6d b3 12 49 f2 90 a4 ae 35 55 4b a3 4e 01 1b 1b 1a f6 5b 10 00 20 22 fc ea 8b 86 ab 19 16 4d bd ab 65 dc ad 42 15 31 60 98 9c 08 ef 42 c8 6d 56 46 89 d9 b6 5f Data Ascii: 1Kxv"avkD\|)kLo6(]'x.g5gOUSXVCMlM@P#:aPYX}k4mLkSN-Af/H% )i\,J.X85\|]Iz%0mI5UKN[ "MeB1`BmVF_
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: 80 cb 1b 5c 4a 80 06 1d be 9a 92 2b 63 64 ad f4 e4 69 70 24 2b 50 3b 30 bd ea 48 cd 73 03 4d 49 b7 46 ff 00 e5 55 ac 55 3a c2 29 36 68 9c aa c1 dc 54 5a 4c b6 33 68 41 37 1d b6 72 a4 7a 57 c3 0a c7 77 6b 19 1d 0b 3b d9 46 82 09 36 47 41 8c 6d 40 bd 2b 99 7b a7 2c d1 d6 b3 d4 6b 83 0b 0d 96 2d 21 c3 01 91 15 82 7b 79 c0 df 1b d1 98 b6 29 89 c1 32 e9 55 a6 c9 35 c4 5e c9 30 18 a6 18 8a b1 32 b6 b1 0d 0e e8 bf 1a 93 62 3d 55 c4 f5 ce 81 80 2a 9d bc 28 18 02 7b 61 e3 40 d0 df 75 32 0c f0 eb da a9 9c 8b ed c3 12 2d 79 30 27 13 87 43 58 ee 48 dd 6e 3c 06 57 cc 8b d7 c6 aa a9 a5 46 a7 d1 cc 4f 54 14 54 54 0f f5 00 5f aa 9e a2 1a 47 4d bf fa bb 62 47 f0 ab ec e6 67 bd 91 48 7b f1 bf b3 69 e3 77 f3 97 80 59 03 80 c5 0a 91 d0 75 ae 95 b8 ea 9a 47 2e e5 cd 10 72 38 Data Ascii: \J+cdip$+P;0HsMIFUU:)6hTZL3hA7rzWwk;F6GAm@+{,k-!{y)2U5^02b=U*({a@u2-y0'CXHn<WFOTTT_GMbGgH{iwYuG.r8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50006	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:20 UTC	990	OUT	GET /index.php/wp-json/pum/v1/analytics/?event=open&pid=3631&_cache=1713881176870 HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:22 UTC	499	IN	HTTP/1.1 204 No Content Date: Tue, 23 Apr 2024 14:06:22 GMT Connection: close Server: Apache X-Powered-By: PHP/7.4 X-Robots-Tag: noindex Link: <https://regional-express.fr/index.php/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50007	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:20 UTC	713	OUT	GET /wp-content/uploads/2019/10/VAL-fd-2.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/jpeg Content-Length: 501716 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:14 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	5515	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:20 UTC	7259	IN	Data Raw: f3 c1 d5 c4 f0 d1 af 08 0d 76 ec c7 6e 43 21 c3 2a 03 82 0e d8 fe 3a 9d 7e c5 2b 2d e5 9a 55 75 1d d4 ea fa 16 b3 0d 9b 15 c4 0d 40 7b 28 20 70 23 90 0f a4 b6 32 71 8c e7 3e ba e7 7b 2f 11 f2 6a 86 bd 85 de ba 84 10 d6 ac cd 2d 8b 3f 52 38 e5 ba 93 80 ce df cd c8 6c 07 c3 53 5a da d9 3b b5 f0 2a fc 87 ba 8f a7 eb fd f6 91 7e ea 5c 08 29 b2 89 16 27 27 23 e0 00 3f 1f 3a d3 4e af c8 d5 4b bd fa d6 4c 45 2a bd a7 e4 4b 76 cc b5 03 28 e2 d3 3a e5 3d b4 1e 08 1e 7c eb ba 2b a9 24 8e 55 5b 6c 97 03 9f c6 db b2 e9 6e fb 90 dc 76 49 0a c1 34 45 18 87 0c 46 ec 47 cb e1 ac f7 5a b6 5c 64 35 5a d4 b6 19 fa 34 55 90 c2 b1 c7 85 33 00 a8 cb f1 f2 49 3f 31 e3 53 4d 6e cb f5 3d 76 e0 9d 68 22 6b 33 73 45 10 d6 5e 11 f2 3e 47 ae 49 f3 93 b6 75 ad a8 b8 f0 86 99 cf 7f 35 Data Ascii: vnC!:~+-Uu@{( p#2q>{/j-?R8lSZ;~\)''#?:NKLE*Kv(:=\|+$U[lnvI4EFGZ\d5Z4U3I?1SMn=vh"k3sE^>GIu5
2024-04-23 14:06:20 UTC	1448	IN	Data Raw: 3f 56 73 c9 7f 5d 15 f5 9b f2 4f e5 f0 31 ea 3b ae af ed ec 58 82 b8 87 b1 5b 2d 24 56 e3 18 cf 24 f4 f2 48 c6 db f8 d6 7b 35 59 61 82 73 c0 1f 6b db d3 b0 b1 5b 48 7d c1 01 66 67 89 cf 32 c4 79 70 49 ce 0e df 0f 5d 3d 7a ac 9c 70 2b 58 0a b7 e5 9f d4 92 54 ae 92 94 5c 2a b0 31 be fe 48 1b ef fc 75 a3 f5 5a e4 9e e0 63 f2 23 66 d3 59 96 34 95 d0 14 8c 2a 80 15 49 f2 ad 8d 8e 35 ab d5 0a 08 6c 2a 6b 55 2c a2 b5 c9 d6 69 19 8a 27 33 82 23 fe 50 78 e3 62 75 a5 2f 6a a8 42 43 5e bb f1 fe c7 b5 ae d7 69 57 ac b0 bc 8d 05 e9 cc d8 e2 c8 07 d4 c0 6f 8c 1f 4f 3a ce de ea a3 8b 1a 2d 6e c2 0b 3d 5f 63 d4 b1 8a f4 75 d9 a6 88 14 88 4a ac ae 0c 85 55 b9 9f a9 71 e4 67 c6 bb b4 ee a6 e5 da b2 67 6a ba bc 83 cd 99 60 ad 1c 95 0b c9 1b 3c 5c 10 a9 27 81 18 76 61 b1 f8 Data Ascii: ?Vs]O1;X[-$V$H{5Yask[H}fg2ypI]=zp+XT\1HuZc#fY4I5l*kU,i'3#Pxbu/jBC^iWoO:-n=_cuJUqggj`<\'va
2024-04-23 14:06:21 UTC	2896	IN	Data Raw: 51 57 7e c6 6a 76 ec 1a 2f 5a 46 fb da 8c 0f 30 14 e0 a2 e3 cb 93 81 b6 93 e0 aa 9f a0 ff 00 11 84 d7 f7 c4 e5 c4 12 c8 dc a2 a6 a5 da 69 51 42 99 37 f1 0d 71 84 1e a5 c9 cf 8d 66 cd 51 d3 23 83 ae ac f5 ed d9 a8 22 71 b4 61 98 f3 24 ee 54 60 ef 8f 5d 22 f0 86 53 f6 d6 52 d5 5a d1 48 88 2d 07 64 8c fe e0 10 67 db 5e 58 04 90 73 93 a6 12 5f 69 8a e5 e5 0c ac a9 f4 a8 39 2d 91 ea 06 fb 68 13 33 56 a5 b1 34 ad cd d2 38 59 41 5c f9 00 7c be 7a 62 66 5f b2 b1 c3 9f ff 00 8d 0e 40 20 c1 12 ee 7d 77 3a 04 cc 99 90 ab 16 07 99 c8 c0 6c 78 f9 8f 9e 81 05 d6 75 8c 2a c6 07 bd cb 23 93 7d 25 71 ba e0 fc fd 74 00 ea 09 95 07 28 e2 c3 9f f7 22 27 e9 07 d7 1a 43 82 f3 69 f9 23 4f c6 c0 5f 08 e4 e3 6d f8 ed f1 d0 0c 97 dd 19 24 90 85 4a dc 89 65 55 db 86 7d 00 f8 0d 02 Data Ascii: QW~jv/ZF0iQB7qfQ#"qa$T`]"SRZH-dg^Xs_i9-h3V48YA\\|zbf_@ }w:lxu*#}%qt("'Ci#O_m$JeU}
2024-04-23 14:06:21 UTC	1448	IN	Data Raw: 42 11 19 c6 3c b1 24 81 8f 8e b8 ef be ca ce 1e 0c 6d 77 20 9d af e3 c9 d7 92 e2 d2 08 24 20 c7 ee 29 1c 43 78 05 bc 1d 5e 8f 6f f2 62 32 55 77 b7 88 18 75 5d 2b cd 19 55 58 64 e1 18 96 49 32 cc a5 41 c8 fa 7d 79 78 1b 6b 2d de c6 7c 93 7b cb 1d 75 71 f5 b0 57 94 d3 eb 92 d2 fb 85 65 6b 0a 18 87 1f ca 59 b3 e3 e5 ae 6d cf 63 b2 ed 68 fd 09 96 de 45 a7 f1 8b 0d 46 f4 d2 d6 27 ad 8f fe e2 bd b6 e3 1c ca ec b8 e2 c0 e4 94 1f 0f 3a ec 5e ca 95 f3 c3 36 fc 99 5f 27 d4 aa 24 90 44 dd 92 3b d6 aa 31 52 c3 46 ca d2 47 9c b0 74 19 3c 41 d3 bd f3 f6 f2 c3 f4 1c df eb af 74 dd 02 f6 96 29 47 fd b6 e9 f6 52 da a0 22 51 93 ed c4 11 d8 95 4f 9e b1 d7 b6 bb 36 75 4f 28 9b 6b 6d a6 60 21 b9 61 ab b5 26 78 20 85 f9 36 48 38 03 19 0a 08 f1 f0 1a ed b6 a5 db b6 64 b7 45 32 Data Ascii: B<$mw $ )Cx^ob2Uwu]+UXdI2A}yxk-\|{uqWekYmchEF':^6_'$D;1RFGt<At)GR"QO6uO(km`!a&x 6H8dE2
2024-04-23 14:06:21 UTC	1448	IN	Data Raw: 72 81 d5 87 ef 64 f2 39 67 fc 35 55 d9 f2 34 c2 1b a1 ad 05 74 c7 64 76 0f 1d 89 9c 89 61 39 3f d3 0d 11 dd 5b 6e 24 8d 52 db 91 f7 02 9b a4 88 55 bf 00 b2 ea 27 48 e4 48 91 83 bb c8 ad fb 63 1b 67 23 c0 5d f5 73 e4 72 38 82 bf 5b 05 4a f1 f6 13 da a9 60 46 8f 17 5d 3c 8a 66 f6 c3 0c aa 30 ff 00 47 eb 92 0e fa cf b5 9f 04 cb f0 7b 56 d5 43 d9 77 25 51 64 aa cc 32 a8 07 1c 83 cb 03 3f 57 9f 8e 9d a9 35 5f 20 eb 84 2c ec 2f 4f db 58 47 a5 3b aa 34 ea df 64 a8 43 b7 04 21 89 3f b9 b3 e3 7f 5d 14 a7 5e 4a 55 81 b1 eb 2d 3c 94 cf b7 35 29 e0 85 a4 b2 b1 66 47 cf 1d 89 f4 c1 fd 0e 34 3b a1 48 6a 3c a9 d4 fd a1 89 6d 43 3b 1b 17 99 e1 1e e0 65 3c 51 a3 56 3b 95 1b 8c 6d f2 d4 5a b3 69 0f 23 3e ba 5a d5 e6 96 6a b6 1a cc d6 c2 c7 34 53 a8 05 5d 87 20 24 23 60 54 Data Ascii: rd9g5U4tdva9?[n$RU'HHcg#]sr8[J`F]<f0G{VCw%Qd2?W5_ ,/OXG;4dC!?]^JU-<5)fG4;Hj<mC;e<QV;mZi#>Zj4S] $#`T
2024-04-23 14:06:21 UTC	4344	IN	Data Raw: ba 63 17 b4 aa 32 a2 25 db c9 1e 7e 1a 00 bd 16 a5 a4 eb eb d4 af 30 ed 67 94 c3 29 2e 3d a9 19 dc 08 78 16 23 89 39 c3 67 6f 5c f9 d4 f1 33 c0 89 c9 0c f0 4b 35 79 d7 85 88 24 68 a7 89 b1 95 74 25 58 1f 4d 88 d3 59 02 b2 0e 40 24 8f 4c f9 3a 06 19 0d bb 51 ed 1d b2 0f c4 8c e7 fc 74 00 40 9a 90 5f 75 3d d4 b3 e6 47 cf d0 49 f8 0d 00 31 81 9a 65 56 0d ee 64 8d fc 79 d0 03 aa f0 b2 79 8d 03 0f 4f 87 eb f1 d2 18 6a 0f 75 d8 3a 23 71 18 3c 70 0a 9f 89 1a 06 0f 34 0e e4 f3 72 40 f0 53 d7 40 84 f6 11 93 6c 89 22 27 63 b6 40 d3 10 a6 75 2f c9 62 1c 94 82 59 5b d3 1f 0f 9e 80 11 4c 02 e3 ea 00 7a 8f 51 a0 00 a5 2b c7 38 d8 9d 87 a9 d0 00 04 64 9c 31 0b e8 bf 0d 30 21 c5 8e e1 03 63 40 88 14 43 9c 31 8d 87 94 3a 40 50 e3 07 0d fc 1f 40 14 b2 ec 48 01 87 c3 fe 7a Data Ascii: c2%~0g).=x#9go\3K5y$ht%XMY@$L:Qt@_u=GI1eVdyyOju:#q<p4r@S@l"'c@u/bY[LzQ+8d10!c@C1:@P@Hz
2024-04-23 14:06:21 UTC	1448	IN	Data Raw: e4 59 23 36 15 b7 8d 41 52 77 f3 f5 0f 9e b1 b5 ba a2 00 ae d1 ab 2d 5b 50 df 06 09 e4 66 b7 17 0e 20 c7 c4 8f f6 dd 4e 0e 48 c9 07 45 6f 23 10 76 dd 84 d5 e1 16 ea c3 2f b0 b1 f2 e2 38 34 72 e0 00 11 4e 18 33 fc b6 d3 ea 24 84 d6 ec f6 16 ed 56 5e c2 94 34 a1 9d 44 4d 5b 3c 88 ca f2 05 9c 60 64 f8 c0 f1 ad 2b 84 57 08 21 3a af b2 a7 d8 57 a6 64 85 8c 0c e6 bc 5f 57 17 0f 91 c9 4f a0 c6 41 1b ff 00 0d 65 6b cb 44 76 90 ce b2 08 6c 45 04 ad 5d 65 b4 92 ac cb 66 2c a3 bb b6 33 22 15 23 97 cf d3 5a 14 99 b8 86 cf f6 b7 54 bf 6a 59 6b 45 20 e0 ef 1a a2 84 c8 23 2e bc 48 0a 3c fa 1f 9e b2 b4 d6 c9 78 03 a2 d6 ea 52 e5 59 ac 51 85 45 ab 04 38 bc d3 ab b8 e6 30 30 83 65 0a 36 04 8f f3 d6 91 3c 1a 75 92 db 34 fa 49 0c a3 b5 e8 e1 ed 60 f1 60 14 56 68 a4 50 07 ed Data Ascii: Y#6ARw-[Pf NHEo#v/84rN3$V^4DM[<`d+W!:Wd_WOAekDvlE]ef,3"#ZTjYkE #.H<xRYQE800e6<u4I``VhP
2024-04-23 14:06:21 UTC	1448	IN	Data Raw: 10 74 80 89 fd 32 3e 3a 00 8e 81 9e 8d 02 3d d0 07 d8 cf e9 a0 0f bc 63 40 1f 6e 7f e7 a0 0f bf f8 1a 60 7b e3 ff 00 4d 20 3e db 40 1f 7f c3 4c 0f b1 a0 0f 7d 37 3f a6 80 24 00 3f fa 68 02 40 7f 96 90 12 03 c6 ff 00 ae 98 16 2f ff 00 6b 3a 00 b9 48 1f 11 8d 00 4f 3e 0e 31 f1 23 48 0b 53 63 b1 dc f8 3a 00 bd 4e 3c f8 ce e7 40 c3 11 86 07 cb d7 e3 fc 34 01 f3 9c ed b8 3e bf 0d 30 2b 1b 9f 88 3a 90 3d e2 48 27 fc 47 c3 40 12 82 5a 90 4a 57 b1 ac f2 c0 59 0c c1 4f 09 42 2e ec 10 1d 81 3e 32 46 93 98 c0 9f d0 70 23 a7 51 ec f1 b4 f7 ab d3 de 8c 0e 9c e2 cd 88 f9 ba 48 80 ef be 33 8f 86 75 9c b7 f4 13 2b eb aa 76 31 f5 37 84 1d 78 8e cd a6 49 23 b5 3c 8a 92 34 10 29 91 96 28 5c 65 97 d5 be 3b 0d 2b 59 76 59 1b 03 e9 7a b1 da 5b 74 b6 c0 d5 7f a6 7b 12 ca 62 8d Data Ascii: t2>:=c@n`{M >@L}7?$?h@/k:HO>1#HSc:N<@4>0+:=H'G@ZJWYOB.>2Fp#QH3u+v17xI#<4)(\e;+YvYz[t{b
2024-04-23 14:06:21 UTC	1448	IN	Data Raw: 2f 88 16 07 b8 cd 2c b5 90 1f 6c 02 77 5c 7c b5 e9 5a 8b a2 af c1 51 e0 d8 5e b5 0c f0 57 4a 36 16 0b 36 23 18 77 4f 71 79 47 b3 05 1b 11 8f 4c ed ae 6a 56 1e 56 0d 2a 8a d5 65 44 8a 29 1b 9b b0 54 8c a9 c9 66 1b b6 4f af c4 e7 54 cd 20 7f 55 7a fa c7 de 8d 23 9a 55 42 2c 23 91 c9 14 fa a8 6d b1 9f 86 b1 b3 b3 33 b0 be ef 61 2c ec d5 19 92 38 64 38 01 40 90 b1 3b 82 4f a6 4e a9 56 32 66 d0 ae 3e ce 5e 98 28 54 22 39 c9 59 a4 66 5f a0 78 2f c4 e4 9f f0 d5 ba f7 26 0c 75 da ef 0d fb 32 75 04 5b af 61 c9 47 72 73 92 3e ae 2c de 75 bd 6c 9d 52 be 20 8f d4 75 47 a0 eb 4d 78 e7 ec 64 f7 a7 2e a3 88 60 63 63 e5 82 91 f5 1c 8d 88 f4 d6 37 f6 6e 9c 57 82 64 d4 5a 82 97 e3 dd 34 b2 75 d5 a6 a9 1d 82 43 4f 0e 1e 58 25 99 3e 81 ca 41 b4 6c 07 80 77 d7 35 1d b7 ec 5d Data Ascii: /,lw\\|ZQ^WJ66#wOqyGLjVV*eD)TfOT Uz#UB,#m3a,8d8@;ONV2f>^(T"9Yf_x/&u2u[aGrs>,ulR uGMxd.`cc7nWdZ4uCOX%>Alw5]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50013	142.251.15.103	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:20 UTC	947	OUT	POST /recaptcha/api2/reload?k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7274 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC&co=aHR0cHM6Ly9yZWdpb25hbC1leHByZXNzLmZyOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=bhz08cuqamvl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:20 UTC	7274	OUT	Data Raw: 0a 18 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 12 8e 0f 30 33 41 46 63 57 65 41 35 55 61 37 71 6d 52 72 7a 42 7a 59 44 4b 54 75 52 63 54 4a 2d 48 5f 2d 4c 36 49 4c 79 77 67 37 65 66 2d 76 47 47 36 56 62 51 49 58 73 52 71 75 4c 36 4f 30 71 53 51 6d 72 53 4e 34 4e 47 53 63 6f 43 6a 75 4b 50 37 32 32 70 75 74 45 39 61 50 36 30 4c 72 77 5f 39 4c 6b 57 35 57 48 54 6b 79 2d 63 5a 72 2d 6d 67 6e 58 2d 58 49 73 57 4b 79 53 51 4d 65 41 33 54 63 6d 6b 4e 4d 70 57 44 48 6f 46 79 57 33 77 56 52 75 68 6b 6e 41 6d 57 44 74 6b 74 62 34 37 71 51 62 65 72 56 51 4a 50 56 35 69 71 75 61 53 63 46 69 41 7a 68 35 49 33 36 51 65 47 38 31 4b 6f 5a 45 4f 6b 51 73 37 62 5a 2d 6d 4c 53 4f 7a 41 59 59 31 37 43 51 7a 46 76 76 59 6a 4d 75 42 44 73 6a 70 Data Ascii: QoukH5jSO3sKFzVEA7Vc8VgC03AFcWeA5Ua7qmRrzBzYDKTuRcTJ-H_-L6ILywg7ef-vGG6VbQIXsRquL6O0qSQmrSN4NGScoCjuKP722putE9aP60Lrw_9LkW5WHTky-cZr-mgnX-XIsWKySQMeA3TcmkNMpWDHoFyW3wVRuhknAmWDtktb47qQberVQJPV5iquaScFiAzh5I36QeG81KoZEOkQs7bZ-mLSOzAYY17CQzFvvYjMuBDsjp
2024-04-23 14:06:20 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Tue, 23 Apr 2024 14:06:20 GMT Expires: Tue, 23 Apr 2024 14:06:20 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AM6hZhbv0oBrGQbYvT36FhCvLRf-yDEY7lfkDRrYMZRBLjPBQ3d4CcxOo3F1DsBrMPukiqfhCxc8oRKxkO1a_yY;Path=/recaptcha;Expires=Sun, 20-Oct-2024 14:06:20 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 14:06:20 UTC	559	IN	Data Raw: 61 36 39 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 36 47 4d 78 42 43 61 62 55 56 79 52 50 5f 52 41 64 59 38 67 65 59 36 63 36 53 76 65 65 36 33 6b 6c 4d 7a 53 39 4f 72 5a 78 39 44 78 66 71 73 44 50 69 43 49 6f 5a 36 4d 35 69 57 6e 4e 48 74 64 54 34 31 37 33 55 4d 62 51 53 46 30 57 71 4f 57 4c 76 43 57 59 67 38 2d 44 39 2d 64 6a 7a 46 54 58 69 36 2d 32 75 38 51 6a 48 71 75 30 37 62 47 55 64 35 6b 65 50 42 4b 31 33 5a 55 79 31 6a 5f 4d 46 63 6a 61 41 50 4c 48 7a 52 6e 78 31 68 74 31 62 6d 74 4b 4a 74 5a 6a 45 70 6a 33 34 4f 6a 69 75 75 34 35 77 74 6f 59 71 34 47 33 42 32 36 54 4e 36 49 77 61 32 61 55 39 31 67 2d 43 59 7a 44 4e 38 74 52 37 77 57 6f 33 5a 36 70 51 66 50 39 31 52 5f 55 6f 38 42 41 72 33 45 78 50 59 79 36 41 Data Ascii: a69)]}'["rresp","03AFcWeA66GMxBCabUVyRP_RAdY8geY6c6Svee63klMzS9OrZx9DxfqsDPiCIoZ6M5iWnNHtdT4173UMbQSF0WqOWLvCWYg8-D9-djzFTXi6-2u8QjHqu07bGUd5kePBK13ZUy1j_MFcjaAPLHzRnx1ht1bmtKJtZjEpj34Ojiuu45wtoYq4G3B26TN6Iwa2aU91g-CYzDN8tR7wWo3Z6pQfP91R_Uo8BAr3ExPYy6A
2024-04-23 14:06:20 UTC	1255	IN	Data Raw: 36 37 32 49 38 50 78 35 5f 59 57 5f 77 6e 4f 6d 6a 32 33 5f 52 44 7a 38 63 5f 6a 64 55 50 47 58 4f 75 7a 48 62 64 64 4d 51 46 64 4e 70 6f 31 4e 6b 35 6a 32 67 68 32 67 38 6f 32 64 50 4d 32 50 4b 55 57 4f 67 5f 57 52 52 67 6b 55 6e 30 42 74 4e 63 53 4f 38 65 70 70 4c 6d 36 49 53 35 69 4f 69 70 79 4b 48 79 56 65 57 68 55 62 55 6b 75 51 55 53 4d 57 6a 4d 57 34 38 4f 4d 30 61 61 4e 35 33 62 6f 31 35 6e 46 51 79 38 42 55 63 6b 41 2d 5f 70 4e 4b 70 39 52 70 31 31 32 34 56 35 6a 64 78 6d 47 50 53 4e 77 49 7a 50 6d 6d 75 51 32 4d 55 65 36 61 75 6a 66 6b 79 79 59 7a 41 5f 64 38 39 55 50 5f 5f 39 69 6f 41 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c Data Ascii: 672I8Px5_YW_wnOmj23_RDz8c_jdUPGXOuzHbddMQFdNpo1Nk5j2gh2g8o2dPM2PKUWOg_WRRgkUn0BtNcSO8eppLm6IS5iOipyKHyVeWhUbUkuQUSMWjMW48OM0aaN53bo15nFQy8BUckA-_pNKp9Rp1124V5jdxmGPSNwIzPmmuQ2MUe6aujfkyyYzA_d89UP__9ioA",null,120,null,null,null,["bgdata","Ly93d3cuZ29vZ2xlL
2024-04-23 14:06:20 UTC	858	IN	Data Raw: 35 59 6b 74 73 51 56 4e 54 4d 32 70 56 52 6d 5a 49 4d 57 31 6e 54 45 5a 71 62 54 46 49 56 6b 77 78 54 47 70 50 4d 32 35 6b 4d 31 4a 57 55 6a 5a 71 61 56 70 56 52 56 49 31 64 33 5a 5a 4f 55 46 36 59 33 56 46 54 6b 35 58 61 6d 5a 5a 56 6e 46 5a 64 30 78 46 63 46 46 71 56 6b 4d 72 63 6d 39 4c 56 56 52 6c 4e 6d 35 4c 55 32 56 73 4e 33 70 4f 54 58 70 70 56 30 46 32 54 55 31 68 64 44 5a 48 57 44 6c 6a 64 6c 64 6a 4c 7a 42 6d 54 6b 68 55 63 79 39 32 54 56 46 4c 65 46 49 77 52 57 51 72 63 58 5a 43 63 6b 4e 79 64 47 70 79 62 44 4e 6f 54 48 51 76 65 44 6c 73 63 46 68 57 53 6a 56 55 53 31 51 32 57 57 52 69 5a 56 5a 53 51 54 4a 31 61 47 39 35 64 58 5a 6b 4f 55 64 6c 54 6a 42 34 64 48 46 48 64 56 52 4f 4d 33 52 78 53 6d 4d 33 62 6c 64 68 4f 44 56 56 57 6e 68 5a 59 6e Data Ascii: 5YktsQVNTM2pVRmZIMW1nTEZqbTFIVkwxTGpPM25kM1JWUjZqaVpVRVI1d3ZZOUF6Y3VFTk5XamZZVnFZd0xFcFFqVkMrcm9LVVRlNm5LU2VsN3pOTXppV0F2TU1hdDZHWDljdldjLzBmTkhUcy92TVFLeFIwRWQrcXZCckNydGpybDNoTHQveDlscFhWSjVUS1Q2WWRiZVZSQTJ1aG95dXZkOUdlTjB4dHFHdVROM3RxSmM3bldhODVVWnhZYn
2024-04-23 14:06:20 UTC	1255	IN	Data Raw: 31 36 36 35 0d 0a 47 56 57 46 44 62 45 39 74 4d 6c 67 79 52 56 56 45 63 31 6f 33 53 47 4e 75 54 57 68 78 53 6b 68 47 55 47 4e 78 51 30 5a 6e 59 57 59 33 53 58 63 31 54 53 39 61 57 54 4a 78 5a 58 5a 33 4c 33 6c 47 4e 47 4d 31 54 6c 4e 53 61 6e 67 33 63 30 51 7a 54 56 46 5a 51 55 68 48 63 6b 78 44 51 58 63 78 59 55 6c 30 55 6a 4a 79 4c 7a 52 32 51 57 68 4b 4e 6d 39 51 4f 47 68 6f 52 47 35 4d 4d 45 35 31 57 6c 6c 30 54 44 68 70 4d 6d 55 7a 64 56 56 61 51 7a 42 72 54 31 46 51 53 6d 6c 54 63 45 6c 43 57 47 4a 51 4d 57 35 52 55 30 6c 4b 63 58 63 7a 54 55 68 46 4f 55 46 55 53 30 6c 6a 55 33 52 48 57 6d 52 6b 59 6b 34 77 63 32 68 54 56 55 4a 30 54 44 68 6f 5a 44 41 72 62 6e 64 54 65 57 59 72 61 47 46 43 52 6d 78 4c 4d 6c 70 4e 5a 57 59 7a 5a 43 74 43 55 6a 42 77 Data Ascii: 1665GVWFDbE9tMlgyRVVEc1o3SGNuTWhxSkhGUGNxQ0ZnYWY3SXc1TS9aWTJxZXZ3L3lGNGM1TlNSang3c0QzTVFZQUhHckxDQXcxYUl0UjJyLzR2QWhKNm9QOGhoRG5MME51Wll0TDhpMmUzdVVaQzBrT1FQSmlTcElCWGJQMW5RU0lKcXczTUhFOUFUS0ljU3RHWmRkYk4wc2hTVUJ0TDhoZDArbndTeWYraGFCRmxLMlpNZWYzZCtCUjBw
2024-04-23 14:06:20 UTC	1255	IN	Data Raw: 54 54 6c 36 4e 58 68 70 51 6d 4e 71 54 48 4e 32 56 6d 34 31 61 6e 68 43 61 31 4e 42 62 6b 35 4a 55 32 46 48 64 7a 55 76 59 6d 4e 74 62 56 56 76 61 31 4e 43 4d 56 4a 57 4d 46 56 44 56 33 56 56 56 6e 42 4e 64 32 4e 52 5a 55 56 6e 64 47 4e 6e 51 31 56 6c 4d 48 56 68 4d 31 68 4b 62 6e 6c 6e 61 57 39 4e 61 47 34 30 56 6b 6c 75 63 46 52 44 59 53 74 47 59 7a 56 45 57 6b 74 6d 5a 47 6c 47 53 32 49 72 59 6e 67 32 4d 6b 56 6c 53 56 64 6b 57 57 64 6a 55 31 56 43 61 6e 4a 58 63 55 63 76 59 33 70 78 51 55 4a 4c 61 54 6c 33 62 48 42 55 62 57 52 55 54 6a 5a 48 4d 45 5a 42 51 6a 52 75 62 7a 4d 77 64 31 64 34 65 47 6f 35 51 7a 52 33 64 6d 4e 45 5a 32 68 76 5a 6d 68 31 64 55 78 54 56 7a 42 69 63 48 64 4a 53 6b 6c 57 55 33 46 53 5a 55 74 6b 62 6b 70 4d 4c 7a 42 32 51 55 70 Data Ascii: TTl6NXhpQmNqTHN2Vm41anhCa1NBbk5JU2FHdzUvYmNtbVVva1NCMVJWMFVDV3VVVnBNd2NRZUVndGNnQ1VlMHVhM1hKbnlnaW9NaG40VklucFRDYStGYzVEWktmZGlGS2IrYng2MkVlSVdkWWdjU1VCanJXcUcvY3pxQUJLaTl3bHBUbWRUTjZHMEZBQjRubzMwd1d4eGo5QzR3dmNEZ2hvZmh1dUxTVzBicHdJSklWU3FSZUtkbkpMLzB2QUp
2024-04-23 14:06:20 UTC	1255	IN	Data Raw: 36 63 53 39 35 54 32 64 76 56 6b 5a 50 5a 32 35 6e 52 47 4d 76 53 57 56 6d 51 56 4e 4e 4e 6e 5a 78 4e 6d 70 6b 51 57 56 78 4e 46 6c 54 63 6e 4e 32 51 55 4d 33 63 57 70 73 53 45 55 33 63 6a 56 70 56 6d 6c 68 5a 56 56 45 63 6d 4a 31 53 56 70 30 55 31 70 4b 4d 55 35 47 5a 46 42 54 56 6e 56 6e 56 45 31 56 63 30 56 78 61 44 56 53 4e 33 6c 59 4d 57 52 6b 53 43 73 78 59 55 64 43 53 6b 31 68 61 45 74 4b 54 54 55 78 4f 45 45 34 53 43 73 72 63 44 6c 34 4f 43 39 59 63 6a 52 45 54 6b 77 76 64 31 45 30 52 31 70 69 54 32 35 75 55 6c 70 35 63 47 68 30 53 45 52 47 5a 30 31 69 55 33 5a 33 56 33 68 35 57 69 73 33 4c 32 56 45 65 45 78 4b 4e 32 31 76 55 30 70 45 52 6d 74 6f 56 6e 45 34 51 69 74 7a 65 56 67 31 64 31 52 6f 54 57 46 59 62 30 74 61 54 57 39 45 59 57 70 6c 53 6d Data Ascii: 6cS95T2dvVkZPZ25nRGMvSWVmQVNNNnZxNmpkQWVxNFlTcnN2QUM3cWpsSEU3cjVpVmlhZVVEcmJ1SVp0U1pKMU5GZFBTVnVnVE1Vc0VxaDVSN3lYMWRkSCsxYUdCSk1haEtKTTUxOEE4SCsrcDl4OC9YcjRETkwvd1E0R1piT25uUlp5cGh0SERGZ01iU3Z3V3h5Wis3L2VEeExKN21vU0pERmtoVnE4QitzeVg1d1RoTWFYb0taTW9EYWplSm
2024-04-23 14:06:20 UTC	1255	IN	Data Raw: 56 49 61 56 4a 53 4e 6e 68 53 57 56 6c 76 56 47 38 33 53 33 67 7a 4d 55 52 45 61 30 35 69 54 55 68 42 5a 58 70 47 63 57 6c 43 52 46 64 59 61 55 6c 4d 52 48 5a 56 4e 6c 56 72 4d 57 68 77 64 56 6f 72 61 48 70 6b 52 6c 64 6f 54 56 4e 50 4e 30 56 49 4d 7a 46 30 53 32 4e 6a 56 32 56 6b 4b 32 56 50 63 45 51 34 53 46 4a 75 4c 30 35 53 52 55 4a 32 53 57 4e 76 54 6d 6f 7a 64 6d 64 5a 64 45 70 70 55 56 68 6e 57 57 38 76 4f 46 51 31 56 47 74 4f 53 44 56 78 64 45 70 46 4d 56 49 76 4b 33 52 78 4e 47 56 36 54 57 39 59 61 48 68 43 64 47 46 4e 61 6c 42 6c 52 33 5a 4a 4f 57 64 5a 4e 33 4d 33 64 33 56 34 4d 31 70 4d 52 54 68 43 63 6c 56 42 4c 31 68 6f 63 46 49 33 59 57 74 32 63 44 46 34 53 6b 64 55 64 56 56 6d 63 56 52 79 59 55 78 74 51 7a 42 44 55 44 4e 76 62 33 46 53 4e Data Ascii: VIaVJSNnhSWVlvVG83S3gzMUREa05iTUhBZXpGcWlCRFdYaUlMRHZVNlVrMWhwdVoraHpkRldoTVNPN0VIMzF0S2NjV2VkK2VPcEQ4SFJuL05SRUJ2SWNvTmozdmdZdEppUVhnWW8vOFQ1VGtOSDVxdEpFMVIvK3RxNGV6TW9YaHhCdGFNalBlR3ZJOWdZN3M3d3V4M1pMRThCclVBL1hocFI3YWt2cDF4SkdUdVVmcVRyYUxtQzBDUDNvb3FSN
2024-04-23 14:06:20 UTC	721	IN	Data Raw: 6d 31 55 5a 6b 39 4a 4f 46 42 68 4f 46 6b 78 62 6a 64 76 62 58 4a 74 4e 55 4a 6a 64 6a 56 53 65 54 68 45 51 31 56 61 53 6b 78 6b 65 6c 64 76 63 6b 46 45 62 56 52 6a 4b 32 34 35 4d 30 31 4d 59 79 39 69 63 32 5a 6f 56 30 55 77 61 32 46 4f 64 6e 64 76 55 44 4e 58 56 47 52 73 57 57 30 72 5a 6b 74 53 4f 54 55 77 4d 54 56 69 4d 54 63 78 65 44 68 7a 62 6d 34 32 57 46 42 6d 64 54 64 6f 52 44 4e 54 61 6b 70 4a 52 46 6f 76 4e 57 5a 5a 5a 45 35 49 51 6b 74 55 5a 46 4e 31 4d 69 39 56 55 6b 6c 61 54 32 56 4c 5a 6d 4a 31 55 30 68 58 51 55 56 34 55 54 4a 56 62 47 56 30 56 47 51 30 53 6a 4e 4a 4e 32 74 46 53 6b 35 31 4e 6d 4e 46 52 33 5a 7a 59 56 41 33 59 57 35 42 59 6d 46 79 54 6d 4a 77 5a 58 41 79 64 47 31 6d 53 56 5a 31 61 54 5a 36 52 57 5a 68 55 6c 46 50 56 45 4a 52 Data Ascii: m1UZk9JOFBhOFkxbjdvbXJtNUJjdjVSeThEQ1VaSkxkeldvckFEbVRjK245M01MYy9ic2ZoV0Uwa2FOdndvUDNXVGRsWW0rZktSOTUwMTViMTcxeDhzbm42WFBmdTdoRDNTakpJRFovNWZZZE5IQktUZFN1Mi9VUklaT2VLZmJ1U0hXQUV4UTJVbGV0VGQ0SjNJN2tFSk51NmNFR3ZzYVA3YW5BYmFyTmJwZXAydG1mSVZ1aTZ6RWZhUlFPVEJR
2024-04-23 14:06:20 UTC	1255	IN	Data Raw: 66 36 35 0d 0a 61 32 5a 33 63 46 52 4e 62 45 78 4d 56 55 39 52 53 6b 39 74 56 33 70 58 65 48 49 72 4b 32 39 43 4f 58 64 36 61 47 31 30 4f 44 56 31 61 54 6b 31 59 7a 68 6a 52 33 46 4e 61 57 52 76 63 6b 46 50 54 79 73 7a 62 45 35 59 63 45 46 30 52 32 4e 51 61 6a 4e 42 63 57 74 34 59 58 4a 61 57 6d 5a 4f 52 7a 42 7a 62 46 41 78 64 6d 6c 56 64 54 5a 6d 56 46 68 6f 59 33 56 30 55 45 46 53 4c 7a 4e 36 4c 7a 46 45 64 45 4a 4a 61 54 6c 78 62 54 4a 6e 64 32 78 46 57 57 70 73 53 6c 4e 4b 5a 45 31 4b 4b 31 64 77 52 55 46 73 64 57 39 52 52 31 70 51 62 43 39 56 52 43 74 75 63 6b 78 53 4d 6d 78 71 65 45 4a 35 52 31 5a 47 4e 46 5a 72 64 57 74 58 57 55 5a 42 65 6d 35 57 57 58 6f 78 53 32 39 31 53 6d 5a 70 53 30 64 4b 5a 45 64 53 4e 45 77 7a 55 69 74 49 56 6e 4e 70 63 31 Data Ascii: f65a2Z3cFRNbExMVU9RSk9tV3pXeHIrK29COXd6aG10ODV1aTk1YzhjR3FNaWRvckFPTyszbE5YcEF0R2NQajNBcWt4YXJaWmZORzBzbFAxdmlVdTZmVFhoY3V0UEFSLzN6LzFEdEJJaTlxbTJnd2xFWWpsSlNKZE1KK1dwRUFsdW9RR1pQbC9VRCtuckxSMmxqeEJ5R1ZGNFZrdWtXWUZBem5WWXoxS291SmZpS0dKZEdSNEwzUitIVnNpc1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50009	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:20 UTC	713	OUT	GET /wp-content/uploads/2019/10/TAL-fd-2.jpg HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/jpeg Content-Length: 346307 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:16 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	4086	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 04 cb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-04-23 14:06:20 UTC	5792	IN	Data Raw: 5b 4d f7 3a 77 b6 17 85 77 0b b3 82 f7 6e a9 43 17 db 6b 95 15 8c 33 a5 2d ce ed 67 a9 ff 00 38 c3 a1 3f a4 a3 50 a4 ac a8 1f 4c 9f 38 01 14 92 7f 03 3b d9 d7 5f 12 5c ad ad b6 3b 9d b2 6b 76 7d 45 17 c8 d2 d6 d1 5c b6 f2 e8 c2 0a 95 4f 49 5c d6 96 05 31 57 a8 0a 77 43 4b 48 9e 69 97 9c 55 f7 5d 8a bd 5c b5 6e e7 cc 3e ef b6 5f 2c 9b a7 71 5a 77 1e 83 7f b7 57 bc cd d1 d6 80 0d 3c e2 14 53 f3 0c e9 c0 b6 e8 1a 92 46 1c 38 18 f6 71 d9 5a a9 a3 e7 f2 d5 d6 cd 32 34 09 9f a8 cc c5 a3 30 d4 99 09 73 86 04 ef b7 4b 28 dc 6c e3 30 52 3e f8 9b 74 2a 9f 52 3b 45 46 68 49 e6 94 99 46 48 ec 7d 46 57 30 ab 41 13 12 23 ef 80 43 fb f9 34 73 90 c6 24 a0 52 a7 d6 16 47 a5 1c 7f 94 0c 10 a1 d7 14 e2 f1 98 03 87 0e 50 86 1e da 70 94 b0 39 40 21 63 69 c8 fc 30 0c 58 80 9e Data Ascii: [M:wwnCk3-g8?PL8;_\;kv}E\OI\1WwCKHiU]\n>_,qZwW<SF8qZ240sK(l0R>t*R;EFhIFH}FW0A#C4s$RGPp9@!ci0X
2024-04-23 14:06:21 UTC	15928	IN	Data Raw: 82 ef 57 42 e5 23 17 96 8a 02 d4 92 02 9d 62 40 ff 00 ee 29 31 f8 b7 fc 8b c0 f2 b9 94 e4 55 69 92 b0 ff 00 9a ba 7f 97 6f dc 7e eb ff 00 19 fa 83 cb c1 bf 1a dd 71 da 57 f2 df 5f f3 6e fb ca 7e 3f 3c 3f 4a 04 00 52 3d dd de 1b 1b 60 1b 65 df 77 d4 56 d3 8b bf 51 8a 66 e8 e9 94 ff 00 51 74 e1 24 ea 20 c8 12 95 80 27 c0 47 ed 1f f1 bf a8 f9 bc 4b f1 ac f5 c7 69 5f cb 6f dd 64 fe f3 f0 ff 00 f9 37 d3 d6 1e 5e 3e 4a 5a 64 ac 3f e6 a7 ef ab 5f 71 ce d5 bf 54 bd b1 a4 98 b5 6d 2b dd dd 43 e1 5b c5 aa 64 93 ed 2a 31 fa 3c a3 f3 3d ef c0 86 dc 3e af ea 5b 98 b3 76 f6 d9 44 25 e8 72 be ad 6e 2b ff 00 65 01 23 ed 82 50 6e b7 b0 8a bb f5 35 de 8b d2 ba 76 3a 4a 3a 40 bf 81 36 bb 42 ea 54 3c 94 43 91 2e e9 78 04 5d f7 61 06 ed f5 53 bb 01 e9 27 79 ba cb 99 86 29 cd Data Ascii: WB#b@)1Uio~qW_n~?<?JR=`ewVQfQt$ 'GKi_od7^>JZd?_qTm+C[d*1<=>[vD%rn+e#Pn5v:J:@6BT<C.x]aS'y)
2024-04-23 14:06:21 UTC	10136	IN	Data Raw: 6b 73 d2 d4 6a 2a 2c 54 d7 38 85 d4 94 c8 15 81 50 92 95 38 00 09 4a db e1 8c 74 e3 b6 d5 ef 39 2f 4d ce 7c 3f 23 b1 68 ec ff 00 b7 f6 57 75 59 aa 69 85 de df 5b b6 a9 e9 76 32 69 1a 49 eb 55 52 a5 15 74 65 07 56 87 16 52 85 a7 59 92 8c d5 29 69 91 c2 af 5d 4e 8c 8b a6 de df 91 62 6d 5a 7a 8b cb e3 69 3f 4e 6b 6c 3b 9b 6a 5a 2f 1b 39 fa 9d 4c 56 25 16 8a c4 3b fb 5d 4a 93 ea 9b 4c 92 59 3f 99 44 19 e3 28 99 ec 36 a3 e6 5a 6b f9 9e 2f fd 49 f5 db ee fe e8 ea a6 a9 4d 54 2c 8a 3b 95 43 84 fc f5 2b 6f 38 19 59 64 7a 18 5b 52 e9 ba d2 4c 92 e2 4a a4 9d 52 8f 6b 8b 1e 5a 48 f9 de 73 6f 33 6c a2 02 42 64 a3 1b 9c 61 da db 52 40 23 19 7d b0 c6 2a b2 9d 17 9a 22 9c 07 54 7d b0 c9 67 6c 5b 56 4d ba 95 4a 38 06 80 23 fb 63 9c f4 08 95 ee f1 5b d5 55 3d 23 2a 59 c8 Data Ascii: ksj,T8P8Jt9/M\|?#hWuYi[v2iIURteVRY)i]NbmZzi?Nkl;jZ/9LV%;]JLY?D(6Zk/IMT,;C+o8Ydz[RLJRkZHso3lBdaR@#}"T}gl[VMJ8#c[U=#*Y
2024-04-23 14:06:21 UTC	2896	IN	Data Raw: 2d 4e c7 d0 71 f9 14 c8 b7 55 a6 be dd 57 54 1b 6e af 60 d4 34 d3 75 3d 02 bf f0 c9 f8 54 0e 62 38 ed 56 75 d6 c8 94 dc 29 e9 6b 69 1c 4b 6a 4b 75 2c 27 f5 5b 18 a5 43 32 61 55 c3 0c 95 dc b4 2b 1b 95 13 ce 50 14 32 94 84 15 12 e6 a0 42 87 91 1f 7c 75 52 ca 4e 0b d1 c6 84 31 09 a8 6f aa cc 81 71 bf f0 9d 1f 14 f3 c4 88 d5 98 a9 25 db 72 d5 51 56 83 54 b7 00 ac 44 c9 69 46 53 1e 11 cf 96 e9 69 d8 eb e3 e2 6d 4f 72 6d 4c 69 cb 0b 2a 68 36 fa 55 eb 6c 8c 42 87 e6 11 cc d9 dd 44 a3 a0 fa d8 1e b4 8f 89 d1 34 f1 1e 71 9b 67 4d 51 87 34 a1 b0 bf 89 42 42 49 c6 67 c4 44 49 a2 43 2d c9 85 2c 21 c4 c8 ea 1f aa 78 f8 4a 29 31 b4 57 b7 e2 86 10 b2 65 3d 26 64 9f ba 36 a6 a6 77 69 12 5e d1 dc 29 7f 69 bb d1 28 00 f8 74 ba d8 57 e6 07 3f 18 c3 9b 47 29 9e 8f a5 67 ae Data Ascii: -NqUWTn`4u=Tb8Vu)kiKjKu,'[C2aU+P2B\|uRN1oq%rQVTDiFSimOrmLi*h6UlBD4qgMQ4BBIgDIC-,!xJ)1We=&d6wi^)i(tW?G)g
2024-04-23 14:06:21 UTC	2896	IN	Data Raw: 9e 29 1a d3 33 20 0a 71 9f 8e 13 02 3e b7 fa 23 d4 7f 47 ea 74 4d fc b9 3e 47 ff 00 97 d3 fe 24 8f 8f fe b9 f4 ef d6 7a 5d da 5f 36 3f 9d 7f e3 f5 7f 85 b1 86 3f a0 8f e7 90 40 00 80 01 03 18 99 d4 c8 12 23 26 8d 2a c6 d9 9d 78 ce 51 91 b8 df 56 ea 40 3a c9 09 13 d5 2c e5 12 d8 d1 4c ee 5a a6 93 53 4e 85 9e 99 78 cc 3b 9c 84 fd 33 e1 8c 66 8b 6e 11 6a ed 69 b9 48 c2 c8 92 8a 40 59 3c c6 72 f0 8e ac 67 15 89 e0 c8 46 e4 82 10 81 00 02 00 04 00 08 00 10 00 20 00 40 00 80 01 00 1a 9c e1 92 c8 c6 e5 05 54 35 18 6a 4a 50 4a d3 ce 62 52 89 cb f4 15 85 fc e5 4f 61 71 29 7d 40 2d 33 42 81 9a c4 d4 e1 d5 9a 49 c4 48 47 96 9e a7 b5 65 28 bd d9 70 74 11 3f e9 11 eb 23 c6 68 3d bf 84 40 c8 a9 bc 22 81 00 02 00 04 00 08 00 10 00 20 02 39 b9 90 17 6f 58 57 c2 44 95 2c Data Ascii: )3 q>#GtM>G$z]_6??@#&*xQV@:,LZSNx;3fnjiH@Y<rgF @T5jJPJbROaq)}@-3BIHGe(pt?#h=@" 9oXWD,
2024-04-23 14:06:21 UTC	10136	IN	Data Raw: 3d 2e 2e 59 8e 64 40 01 e8 70 cc 63 8f 9f d9 00 0a 03 b8 8e 53 cc 67 0c 05 29 a8 1c a7 00 83 14 f1 20 4b 28 00 09 79 64 e7 28 00 c2 9e 96 6e 0f 21 e1 00 8d ba 8d 91 3d 4a 24 c0 38 36 ea 24 9f 4b 64 91 94 cc 00 64 29 d2 7d 2d 81 8e 13 f0 80 46 e0 3e a9 4d 41 33 38 c0 06 e1 95 12 09 59 3c e5 f6 c0 06 c1 a4 64 a3 3f 09 c0 21 53 14 aa 78 c9 8a 77 1e 51 c0 06 d2 54 67 ec 9c 12 29 25 14 3b 27 76 5c 65 f2 5b 72 bd c0 46 0a e8 94 8f 7a a5 06 ea ae e3 52 fa 22 59 4f d9 fd ec e0 0a ab a4 a5 b6 37 f9 97 59 52 db 72 f6 4e 21 e6 aa ee 5a c3 91 f6 fb c3 dc ed ed 92 d6 9d 5b 8b b8 d6 1b 52 47 c6 80 f0 71 49 96 79 10 20 59 67 a2 62 78 b6 fd 56 aa f8 91 da dd c5 f4 e1 b7 02 bf 7a ee a1 b8 38 8f 89 9a 24 a4 4e 5c 8f a8 c3 ff 00 51 f4 a9 9b c9 86 bd 6f 3e e4 44 6b fe a5 be Data Ascii: =..Yd@pcSg) K(yd(n!=J$86$Kdd)}-F>MA38Y<d?!SxwQTg)%;'v\e[rFzR"YO7YRrN!Z[RGqIy YgbxVz8$N\Qo>Dk
2024-04-23 14:06:21 UTC	7240	IN	Data Raw: 50 03 a2 69 5b 12 05 b1 e5 2f ba 1c 08 50 29 1a 51 98 04 43 00 d3 48 44 8a 14 40 e5 00 04 ae 95 c5 7c 0a d0 b1 cf 28 00 43 70 b7 2d f6 4a 42 10 e2 d4 24 54 40 38 c0 26 a4 ae dd da 8e 8a a5 3d 57 42 cb ad 8f 85 c0 84 99 7d 91 3b 46 51 dd c1 d9 17 8b a5 cb e6 69 69 93 f2 ac a6 48 43 68 00 ab ec e1 c2 06 90 53 4e a7 27 ee 6d 9b 7e 37 37 8b f4 ef 30 da 14 74 85 89 03 ee 88 6a 4d e9 64 97 bc 87 1a 7b 9d 01 75 94 4d 3a 4e 1f d9 13 0c b1 6d 1e e9 bc 53 54 b7 a4 ad 0a 60 4a 68 25 27 0f 28 52 35 52 db b2 77 5a f7 6e 43 55 0f dc 9e 75 93 20 e3 0a 51 d4 07 b6 2f 71 9b aa f0 2d 9b 1f d4 92 28 5d 6f a8 95 38 ca 88 0a 42 cf 3e 46 1e f2 3c a6 74 0d a7 be 16 0a fa 26 eb 51 58 a6 09 1e a6 55 98 3c a2 93 4c 9b 55 d5 c3 26 d6 be ec 59 ab 02 7f 5d b7 92 b1 82 81 10 a1 31 74 Data Ascii: Pi[/P)QCHD@\|(Cp-JB$T@8&=WB};FQiiHChSN'm~770tjMd{uM:NmST`Jh%'(R5RwZnCUu Q/q-(]o8B>F<t&QXU<LU&Y]1t
2024-04-23 14:06:21 UTC	8688	IN	Data Raw: 00 2e df b8 fd 83 fe 36 f5 1f 3b 85 7e 3b 7a e3 b6 9f cb 7d 7f cd bb ef 39 92 3f 3d 3f 47 04 00 36 dc 1b c5 b7 40 02 60 a5 52 07 31 88 24 f8 ce 5e c8 fd a3 fe 38 f5 0f 37 89 7e 33 7a e3 b4 af e5 b7 ee b2 7f 79 f8 9f fc 95 e9 de 57 2e 9c 94 b4 c9 58 7f cd 4f fe 2d 7d c3 74 7e 8e 7e 6a 6a a4 85 0c 44 26 a4 69 c0 8d 4d 63 29 46 2d 1b 2b 05 b8 d1 96 19 88 4d 0d 5a 46 7a e4 2b 4a cc a5 21 19 d8 d2 a5 15 bb a9 dc 6e a5 7a 69 9c 75 b7 92 a5 30 50 a9 1c 25 a9 60 63 ac 27 32 0f 9c 64 91 ad 9c a4 59 db 10 2b e4 1a d6 24 b9 09 e1 20 7c 40 e0 0c 74 63 38 ad d4 b4 06 43 ca 3a 48 33 00 81 00 cd 0a 26 67 10 ea 34 cd c6 11 69 40 81 00 81 00 02 00 04 00 08 00 10 00 5a e5 0c ce c3 05 c9 b0 e3 4e a7 56 80 a4 a8 12 33 cb 87 9c 55 be 91 53 a9 54 37 72 a3 7d 34 d4 74 f6 ea 6b Data Ascii: .6;~;z}9?=?G6@`R1$^87~3zyW.XO-}t~~jjD&iMc)F-+MZFz+J!nziu0P%`c'2dY+$ \|@tc8C:H3&g4i@ZNV3UST7r}4tk
2024-04-23 14:06:21 UTC	7240	IN	Data Raw: 02 3e f8 02 45 29 75 64 27 4f 0c 26 39 72 30 00 70 f9 85 9c 15 8c fe 1e 02 00 11 55 bc ab 7e 92 81 ad c5 89 73 1e 67 c6 29 29 25 b8 1c 29 ee 67 a6 95 3c 90 35 70 fc d8 f1 30 a0 24 7a 63 a6 a6 83 a9 56 a9 4b 03 fc 73 84 ca 23 1b 81 87 2b 1f b6 ba 92 92 8a 75 ac a9 b3 af d4 65 84 82 48 18 0c 64 63 0e 4a ff 00 4d 9d de 9a e3 3a f7 1b b3 42 96 bd 5a 35 04 c8 83 2c 15 31 99 11 e1 d9 9f 65 44 28 72 81 29 21 c0 90 80 9c e4 25 84 b0 03 ce 23 71 b6 c2 38 ea 56 fb c1 94 38 48 99 25 63 09 8e 18 78 45 26 73 db 56 53 7b da 89 fb 85 f5 9a 36 09 69 0d 69 42 d6 99 ff 00 cc a5 18 f4 38 f6 55 ac 9e 3f 32 ae f9 21 0d ed 17 8d 5b 86 6a 59 59 d2 94 aa 67 01 86 22 2d c4 0a a9 c9 d6 fd 83 aa 6d ab 83 05 dd 2a 34 aa 0b 42 41 1a 89 26 41 bc 73 e6 63 cc e4 75 93 d8 c1 ad 20 f5 96 Data Ascii: >E)ud'O&9r0pU~sg))%)g<5p0$zcVKs#+ueHdcJM:BZ5,1eD(r)!%#q8V8H%cxE&sVS{6iiB8U?2![jYYg"-m*4BA&Ascu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50008	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:20 UTC	716	OUT	GET /wp-content/uploads/2019/08/SOL-demande.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:20 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/gif Content-Length: 4440 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:20 UTC	2641	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 ef 78 25 fc ea dc f7 b8 8d c9 c7 d3 f0 7c 2c fa d1 b5 fe f4 ee f6 b6 89 f7 be 96 fb e0 ce dd db e3 9a 96 ae f0 82 35 f8 c5 a1 f6 b1 81 fe f6 f1 e5 e5 eb f2 8e 49 2e 27 58 f0 7a 29 a9 a6 ba f8 c2 9d f4 a5 6d fa f9 fb fa d7 bd f5 aa 75 f1 85 39 f3 98 5a fa d4 ba f3 96 54 18 10 46 f9 ca a8 f2 94 52 f7 ba 90 f1 89 41 f3 9b 5d fe fa f6 ff fb f9 ff fc fa f4 9d 61 fc e2 d0 fc e5 d5 f4 a3 6a f1 87 3d fd ef e5 85 80 9d f2 90 4c ef 77 24 f6 b4 87 fb da c4 f5 a7 71 fe fe fe fc e8 da fa d8 c0 92 8f a8 f4 a0 66 f9 c8 a7 fd ec e0 62 5d 82 f9 cd ae 41 3a 67 23 17 48 fe f7 f3 fd f1 e8 d4 d3 dc f6 af 7e fa d3 b8 f0 80 32 26 1e 51 f2 8d 47 f5 ad 7a fc e6 d7 f9 ce b0 fb df cb f8 c1 9b fb dc c6 f8 c7 a4 1c 15 49 f2 92 50 f0 7e 2f f4 f4 Data Ascii: GIF89a}x%\|,5I.'Xz)mu9ZTFRA]aj=Lw$qfb]A:g#H~2&QGzIP~/
2024-04-23 14:06:20 UTC	1799	IN	Data Raw: ce f6 88 a9 5f 5c 40 48 15 43 bd 45 88 ff 87 7e 30 31 b0 22 16 fa a1 c4 21 5f f9 51 ae 21 06 64 35 01 12 91 40 2c 71 21 21 ab 70 48 c1 7e 8c b0 31 22 24 2c eb c7 a6 83 18 90 ae 21 55 b0 3b c1 12 29 03 13 f1 21 28 d0 ba 85 21 2c 68 83 ef cc 84 74 91 cd 0a 87 54 a0 e0 21 3b b0 23 44 d0 b9 0c 8d 88 5c 7e 54 70 08 73 c2 32 5d 08 1d d9 64 70 08 d7 1a 17 42 42 1a d9 38 80 88 1d 40 a8 a1 06 10 76 0c a2 b2 22 30 77 70 c8 b8 7e 20 20 36 21 c6 7e 60 48 cd d9 a0 61 08 0e 41 8a 53 c8 05 36 48 20 95 04 36 5c 70 f7 1f 54 e4 f0 ae 20 58 d0 aa 38 21 1f 64 e3 f2 df 82 c8 bb ab 21 65 64 53 c4 21 4d 7a 6c 08 04 3c 98 e5 81 e3 59 af fc 87 14 64 1e 32 66 19 86 c0 91 8d 08 a0 7f 6b b3 c0 4a 64 83 6c 21 6c 34 b7 2d 14 ad e7 22 81 0e 3a c0 2e b4 ec 7f 04 6b 22 21 19 30 3b b8 36 Data Ascii: _\@HCE~01"!_Q!d5@,q!!pH~1"$,!U;)!(!,htT!;#D\~Tps2]dpBB8@v"0wp~ 6!~`HaAS6H 6\pT X8!d!edS!Mzl<Yd2fkJdl!l4-":.k"!0;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50010	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:20 UTC	715	OUT	GET /wp-content/uploads/2019/08/SOL-affret.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:21 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:20 GMT Content-Type: image/gif Content-Length: 4257 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:20 GMT
2024-04-23 14:06:21 UTC	4257	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 fa d5 bb f5 ac 7a f4 a4 6c 8b 87 a2 fb dd c8 db da e2 f5 a9 74 f0 81 34 f3 99 5a fe f9 f5 f1 85 3a f8 c5 a1 fa d1 b4 f2 8e 48 fe f6 f1 d4 d2 dc 58 52 79 fd ec e1 fa f9 fb 33 2c 5b f4 9d 61 f2 90 4c ef 78 25 f6 b6 89 f8 c1 9a f0 7e 2f fc e4 d4 fe f4 ee 18 10 46 fb e0 cd f2 f2 f5 fd ea dd f6 b1 81 29 22 54 a8 a5 b9 3c 36 63 f9 cc ae 95 91 aa f9 c9 a8 f7 b8 8d b4 b1 c3 fe fe fe fc e3 d1 f7 bd 95 43 3c 68 f3 96 56 fa d8 c1 92 8e a8 f0 7b 2a fd f2 ea fd ee e4 f7 ba 90 bc ba c9 6e 69 8b e2 e1 e8 e7 e6 eb ca c9 d5 23 1b 4f 72 6d 8e ed ec f0 f1 89 41 99 95 ad ef 77 23 ea ea ef 1d 15 4a 4a 43 6d f2 8d 46 c6 c4 d2 f4 a0 66 fc e7 d8 53 4d 75 f9 c8 a6 ad ab be fb dc c6 fc e8 da f0 7c 2c fb da c4 d1 cf da ff fc fa c2 c0 ce f1 8b Data Ascii: GIF89a}zlt4Z:HXRy3,[aLx%~/F)"T<6cC<hV{*ni#OrmAw#JJCmFfSMu\|,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50015	172.217.215.104	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:21 UTC	610	OUT	GET /recaptcha/api2/reload?k=6LeKnb4UAAAAADvk5Kz2KbDGgS0R-fV1aR-NxHbC HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AM6hZhbv0oBrGQbYvT36FhCvLRf-yDEY7lfkDRrYMZRBLjPBQ3d4CcxOo3F1DsBrMPukiqfhCxc8oRKxkO1a_yY
2024-04-23 14:06:21 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Tue, 23 Apr 2024 14:06:21 GMT Expires: Tue, 23 Apr 2024 14:06:21 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 14:06:21 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-23 14:06:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50014	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:21 UTC	712	OUT	GET /wp-content/uploads/2019/08/SOL-urg.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:21 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:21 GMT Content-Type: image/gif Content-Length: 3507 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:21 GMT
2024-04-23 14:06:21 UTC	3507	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 fc e4 d3 f0 80 32 f1 8a 42 42 3b 67 f7 ba 90 da d9 e2 fa f9 fb fe f6 f1 fe f9 f5 f3 95 53 f7 be 96 bc ba c9 ed ec f0 48 42 6c 6a 65 87 33 2c 5c b6 b3 c4 18 10 46 fd ea dd f3 9a 5c fa d6 bd f4 a5 6d f5 a9 74 2c 25 56 f4 9e 62 e2 e1 e8 f0 7e 2f fb db c5 f1 f1 f4 1e 16 4b fd f1 e8 fe fe fe f8 c2 9b ef 78 25 8c 88 a3 fb e0 ce 9a 96 ae 85 80 9d fe f4 ee 57 52 79 f9 cf b1 3b 35 62 b1 ae c0 ab a8 bc f6 b2 82 f8 c5 a2 f1 87 3d e9 e9 ee 91 8e a7 71 6c 8d f9 cd ae f7 b9 8d 80 7c 99 a8 a5 b9 c5 c3 d1 24 1c 4f a2 9e b4 d6 d5 de 64 5f 83 f0 7c 2c fb de ca a5 a1 b7 f9 ca a9 7c 77 96 e5 e4 ea f6 f6 f8 c8 c6 d3 f0 7b 2a d4 d3 dd d2 d0 db fd ee e4 ef 77 24 b8 b6 c6 f4 f4 f6 fd ec e0 cc cb d6 7d 79 97 ff fc fa fc e7 d8 f1 84 39 f6 b3 Data Ascii: GIF89a}2BB;gSHBlje3,\F\mt,%Vb~/Kx%WRy;5b=ql\|$Od_\|,\|w{*w$}y9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50016	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:21 UTC	713	OUT	GET /wp-content/uploads/2019/08/SOL-temp.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:21 UTC	274	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:21 GMT Content-Type: image/gif Content-Length: 3205 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:00 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:21 GMT
2024-04-23 14:06:21 UTC	1193	IN	Data Raw: 47 49 46 38 39 61 aa 00 7d 00 e6 00 00 f2 94 52 fb d9 c1 e5 e4 ea f6 b3 85 cb ca d6 f9 f8 fa fc e9 dc fd f2 e9 ef 78 25 ed ec f0 18 10 46 f1 85 3a 51 4b 74 43 3d 69 f8 c3 9e 32 2b 5b fe f9 f5 dd dc e4 f5 ac 7a 7d 78 97 f0 80 32 48 42 6c da d9 e2 fd ed e3 f3 99 5a b6 b3 c5 f0 7e 2f 21 19 4d ad aa bd fb de c9 1c 15 49 75 71 91 f1 89 41 5d 57 7d 29 22 54 f8 c6 a2 3d 37 64 f4 a3 6b 8d 89 a4 79 74 94 f7 bc 94 95 91 aa 86 81 9e fa d1 b5 4e 47 71 72 6d 8e fb e0 ce f5 a7 71 d6 d5 df ff fc fb f7 ba 91 89 85 a0 fe fe fe b8 b6 c7 f7 b9 8d fe f7 f2 c7 c5 d2 f6 b6 89 f9 c9 a7 a1 9e b4 f5 ab 77 fe fb f8 fc e7 d8 fa d4 ba f9 cd ae c9 c7 d3 6e 69 8b 65 60 84 82 7e 9b 61 5c 81 f0 7b 2a f5 a8 73 a4 a1 b6 f2 8d 46 37 30 5f fc e5 d5 9a 96 ae d4 d2 dc fe f6 f1 f5 a9 74 f9 cb Data Ascii: GIF89a}Rx%F:QKtC=i2+[z}x2HBlZ~/!MIuqA]W})"T=7dkytNGqrmqwnie`~a\{*sF70_t
2024-04-23 14:06:21 UTC	2012	IN	Data Raw: 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 37 33 46 32 42 36 46 35 35 32 30 36 38 31 31 38 32 32 41 39 43 42 33 41 41 31 33 42 42 37 46 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 33 32 34 30 35 64 31 2d 30 62 66 34 2d 31 31 37 39 2d 61 30 30 37 2d 63 30 64 36 64 33 65 30 62 34 31 66 22 2f 3e 20 3c 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 4d 61 64 73 65 6e 20 56 61 6c 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 64 63 3a 74 69 74 6c 65 3e Data Ascii: ntosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A73F2B6F55206811822A9CB3AA13BB7F" stRef:documentID="adobe:docid:photoshop:032405d1-0bf4-1179-a007-c0d6d3e0b41f"/> <dc:creator> <rdf:Seq> <rdf:li>Madsen Vale</rdf:li> </rdf:Seq> </dc:creator> <dc:title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50017	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:24 UTC	967	OUT	GET /wp-content/uploads/2020/07/cropped-favicone-32x32.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://regional-express.fr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:24 UTC	273	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:24 GMT Content-Type: image/gif Content-Length: 650 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:34 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:24 GMT
2024-04-23 14:06:24 UTC	650	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f6 4b 00 6c 39 39 6e 39 38 72 3c 39 77 3e 38 18 10 46 19 10 46 18 11 46 19 11 46 19 11 47 1a 11 46 1a 12 47 1a 12 48 1b 13 48 1b 13 49 1b 14 49 1c 14 49 1e 15 48 1d 15 4a 1f 17 4b 1f 17 4c 20 14 45 24 17 47 2f 1b 43 20 18 4c 21 19 4d 23 1b 4f 24 1c 4f 24 1c 50 24 1d 50 25 1d 50 27 1f 52 39 20 41 3d 23 41 28 20 52 29 22 54 2a 22 54 2c 25 56 33 2c 5c 43 2a 49 5b 34 41 5c 37 46 7d 48 43 94 4f 38 9e 50 30 9c 50 32 b5 5f 34 cb 66 29 c9 6c 36 e6 74 27 ea 74 23 ef 76 22 ee 76 23 ef 76 23 ef 77 23 ef 77 24 ef 78 24 ef 78 25 ef 78 26 ef 79 26 ef 79 27 ef 7a 28 ef 7a 29 f0 7a 29 f0 7b 29 f0 7b 2a f0 7d 2d f0 7d 2e f0 7e 2e f0 7f 30 ec 83 3b f0 80 32 f0 82 35 f1 83 37 f1 83 38 f1 85 3b ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a Kl99n98r<9w>8FFFFGFGHHIIIHJKL E$G/C L!M#O$O$P$P%P'R9 A=#A( R)"T"T,%V3,\CI[4A\7F}HCO8P0P2_4f)l6t't#v"v#v#w#w$x$x%x&y&y'z(z)z){){*}-}.~.0;2578;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50020	145.239.37.162	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:25 UTC	727	OUT	GET /wp-content/uploads/2020/07/cropped-favicone-32x32.gif HTTP/1.1 Host: regional-express.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1693860873.1713881175; _gid=GA1.2.1886746453.1713881175; _gat_gtag_UA_150750521_1=1; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=yes; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-04-23 14:06:26 UTC	273	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:06:25 GMT Content-Type: image/gif Content-Length: 650 Connection: close Server: Apache Last-Modified: Tue, 20 Feb 2024 14:45:34 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 23 Apr 2024 14:21:25 GMT
2024-04-23 14:06:26 UTC	650	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f6 4b 00 6c 39 39 6e 39 38 72 3c 39 77 3e 38 18 10 46 19 10 46 18 11 46 19 11 46 19 11 47 1a 11 46 1a 12 47 1a 12 48 1b 13 48 1b 13 49 1b 14 49 1c 14 49 1e 15 48 1d 15 4a 1f 17 4b 1f 17 4c 20 14 45 24 17 47 2f 1b 43 20 18 4c 21 19 4d 23 1b 4f 24 1c 4f 24 1c 50 24 1d 50 25 1d 50 27 1f 52 39 20 41 3d 23 41 28 20 52 29 22 54 2a 22 54 2c 25 56 33 2c 5c 43 2a 49 5b 34 41 5c 37 46 7d 48 43 94 4f 38 9e 50 30 9c 50 32 b5 5f 34 cb 66 29 c9 6c 36 e6 74 27 ea 74 23 ef 76 22 ee 76 23 ef 76 23 ef 77 23 ef 77 24 ef 78 24 ef 78 25 ef 78 26 ef 79 26 ef 79 27 ef 7a 28 ef 7a 29 f0 7a 29 f0 7b 29 f0 7b 2a f0 7d 2d f0 7d 2e f0 7e 2e f0 7f 30 ec 83 3b f0 80 32 f0 82 35 f1 83 37 f1 83 38 f1 85 3b ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a Kl99n98r<9w>8FFFFGFGHHIIIHJKL E$G/C L!M#O$O$P$P%P'R9 A=#A( R)"T"T,%V3,\CI[4A\7F}HCO8P0P2_4f)l6t't#v"v#v#w#w$x$x%x&y&y'z(z)z){){*}-}.~.0;2578;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50021	3.233.159.181	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:06:31 UTC	939	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.33.0%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Adsr-client&dd-api-key=pubeba1b2bf29e543137642cd1bb823df66&dd-evp-origin-version=4.33.0&dd-evp-origin=browser&dd-request-id=6935bc9a-1bc5-46f1-a75d-eee4604f4ede&batch_time=1713881190833 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 1575 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://web.enable.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 14:06:31 UTC	1575	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 63 62 37 36 64 39 61 37 2d 63 64 33 34 2d 34 35 66 65 2d 38 39 66 32 2d 64 61 66 34 64 65 39 62 32 64 32 37 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 33 38 38 31 31 37 31 39 31 36 2c 22 73 65 72 76 69 63 65 22 3a 22 64 73 72 2d 63 6c 69 65 6e 74 22 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 37 37 39 37 31 63 32 33 2d 31 32 63 38 2d 34 30 38 36 2d 61 62 39 63 2d 30 61 62 62 63 38 38 66 32 65 37 35 22 2c Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2},"discarded":false},"application":{"id":"cb76d9a7-cd34-45fe-89f2-daf4de9b2d27"},"date":1713881171916,"service":"dsr-client","source":"browser","session":{"id":"77971c23-12c8-4086-ab9c-0abbc88f2e75",
2024-04-23 14:06:32 UTC	430	IN	HTTP/1.1 202 Accepted Date: Tue, 23 Apr 2024 14:06:32 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 6935bc9a-1bc5-46f1-a75d-eee4604f4ede cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-23 14:06:32 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 36 39 33 35 62 63 39 61 2d 31 62 63 35 2d 34 36 66 31 2d 61 37 35 64 2d 65 65 65 34 36 30 34 66 34 65 64 65 22 7d Data Ascii: {"request_id":"6935bc9a-1bc5-46f1-a75d-eee4604f4ede"}

Target ID:	0
Start time:	16:05:01
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:05:04
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1964,i,13455950369934999318,5407255302200282622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:05:08
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Windows Analysis Report
https://web.enable.us/room/36a8f665-0d42-4862-a524-50e3d91bade6