Edit tour

Windows Analysis Report
http://clicks.sharefile.com/f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW

Overview

General Information

Sample URL:	http://clicks.sharefile.com/f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0
Analysis ID:	1431824
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Drops files with a non-matching file extension (content does not match file extension)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2216,i,4007318040339904038,1145951052867774334,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://clicks.sharefile.com/f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW5OMFlYUWlPM002TWpJNklqWTJNbUV5WXprNE9ETmhNVGMyTWpjNE56STBPRGNpTzNNNk5Eb2liR1ZoWkNJN2N6bzJPaUl4TmpVd09EUWlPM002TnpvaVkyaGhibTVsYkNJN1lUb3hPbnR6T2pVNkltVnRZV2xzSWp0cE9qSXhPRHQ5ZlElM0QlM0QmVwNzcGNCCmYonywqZgIFPr1SGWttcXVpY2tAYXVndXN0YWhlYWx0aC5jb21YBAAABt8~" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community	HTTP Parser: No favicon
Source: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49805 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50137 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49805 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	HTTP traffic detected: GET /r/11b86c9fe68b87a35e37a930e?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D& HTTP/1.1Host: campaignstudio.sharefile.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1a.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1b.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1c.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1d.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1d.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1c.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1a.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/catalog-1b.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon.ico HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/images/favicon.ico HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile.pdf HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notice?domain=sharefile.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&fade=30000&language=en HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/notice.js/v/v1.7-3185 HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=49bf&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get?name=crossdomain.html&domain=sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=49bf&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/ HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070854182 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; GA1.3.1322026028.1714070856; _gid=GA1.3.2101004329.1714070856; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; GA1.3.1322026028.1714070856; _gid=GA1.3.2101004329.1714070856; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; GA1.3.1322026028.1714070856; _gid=GA1.3.2101004329.1714070856; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f07a&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&_u=YEBAAQAAAAAAACAAs~&z=1683289489 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&gjid=1071460475&_gid=2101004329.1714070856&_u=YEBAAQAAAAAAACAAs~&z=323130226 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f07a&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&_u=YEBAAQAAAAAAACAAs~&z=1683289489 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070859592 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /rest/ua/v15/analytics/view?visitor=97fc8b95-1583-4e4e-91f7-b83c892ea259 HTTP/1.1Host: platform.cloud.coveo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/ua/v15/analytics/view?visitor=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 HTTP/1.1Host: platform.cloud.coveo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /searchui/v2.10111/2/fonts/lato.woff2 HTTP/1.1Host: static.cloud.coveo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/utils/common.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/client/liveagent.esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/eswFrame.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/communityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/frame/session.esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/communityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/frame/broadcast.esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/communityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/frame/chasitor.esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/communityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/frame/filetransfer.esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/communityAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/client/invite.esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
Source: global traffic	HTTP traffic detected: GET /chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp?Settings.prefix=EmbeddedService&org_id=00DDn00000AvI1G&EmbeddedServiceConfig.configName=Service_Group&callback=embedded_svc.liveAgentAPI.handleChatSettings&version=48&EmbeddedServiceConfig.language=en-US HTTP/1.1Host: d.la1-c1-ia6.salesforceliveagent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/utils/inert.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
Source: global traffic	HTTP traffic detected: GET /chat/rest/Visitor/Settings.jsonp?Settings.prefix=Visitor&Settings.buttonIds=[573Dn000000hOkW]&Settings.updateBreadcrumb=1&callback=embedded_svc.liveAgentAPI.connection.handlePing&deployment_id=572Dn000000hP8x&org_id=00DDn00000AvI1G&version=48 HTTP/1.1Host: d.la1-c1-ia6.salesforceliveagent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/whats-new HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/sharefile/whats-newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/sharefile/whats-newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/captcha.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/whats-newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-logo.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/whats-newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/sf-win-access-dashboard-rf.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/whats-newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/sf-win-access-dashboard-queue.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/whats-newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-logo.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/captcha.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/password-5-a.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/whats-newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/sf-win-access-dashboard-rf.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/sf-win-access-dashboard-queue.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile.pdf HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/password-5-a.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/sharefile/whats-newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=d124&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=d124&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070880641 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/getting-started HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/get-started/buy-now.html HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-get-started-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-plan-pricing-2.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-plan-buy-now-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-plan-details-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-plan-account-info-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-account-info-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-account-info-2.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-3.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-4.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-5a.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-6.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-try-now-sf-hello.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7b43&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-get-started-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-plan-details-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-plan-pricing-2.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-plan-buy-now-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-plan-account-info-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-account-info-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-account-info-2.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-4.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-3.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-5a.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile.pdf HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070886925 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7b43&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-buy-sign-on-6.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/rb-try-now-sf-hello.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/configuration HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/sharefile/configurationAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/sharefile/configurationAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/sharefile/configurationAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile.pdf HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7e33&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7e33&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/catalog/integrations/export HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070894183 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-frb.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-pd.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-qb.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-sf.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-x.png HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-frb.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/exportAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-sf.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-pd.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-qb.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/media/int-export-1-x.png HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=eb81&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile.pdf HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=eb81&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070899607 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile-app HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/sharefile/sharefile-appAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/sharefile/sharefile-appAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/sharefile/sharefile-appAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile.pdf HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f0fa&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile-vdr HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f0fa&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070906059 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/sharefile/sharefile-vdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/sharefile/sharefile-vdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/sharefile/sharefile-vdrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /en-us/sharefile/sharefile.pdf HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=3d27&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/electronic-signature HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=3d27&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070910275 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/electronic-signatureAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/electronic-signatureAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/electronic-signatureAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/electronic-signature/rightsignature.pdf HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=c5d9&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/storage-zones-controller/storage-zones-controller HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controllerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=c5d9&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070914468 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /assets/dist/bundle.js HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controllerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docs.sharefile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://docs.sharefile.com/assets/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
Source: global traffic	HTTP traffic detected: GET /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controllerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: docs.sharefile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=8a97&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=8a97&referer=https://docs.sharefile.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/sendInsights?1714070918377 HTTP/1.1Host: titan.citrix.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GCLB=CNWk1oqaweXrhwEQAw
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&_u=YEBAAQAAAAAAACAAs~&z=124763840 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&gjid=980149886&_gid=979624069.1714070919&_u=YEBAAQAAAAAAACAAs~&z=1563054629 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&_u=YEBAAQAAAAAAACAAs~&z=124763840 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chat/rest/Visitor/Availability.jsonp?sid=undefined&r=759&Availability.prefix=Visitor&Availability.ids=[573Dn000000hOkW]&callback=embedded_svc.liveAgentAPI.connection.handlePing&deployment_id=572Dn000000hP8x&org_id=00DDn00000AvI1G&version=48 HTTP/1.1Host: d.la1-c1-ia6.salesforceliveagent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW5OMFlYUWlPM002TWpJNklqWTJNbUV5WXprNE9ETmhNVGMyTWpjNE56STBPRGNpTzNNNk5Eb2liR1ZoWkNJN2N6bzJPaUl4TmpVd09EUWlPM002TnpvaVkyaGhibTVsYkNJN1lUb3hPbnR6T2pVNkltVnRZV2xzSWp0cE9qSXhPRHQ5ZlElM0QlM0QmVwNzcGNCCmYonywqZgIFPr1SGWttcXVpY2tAYXVndXN0YWhlYWx0aC5jb21YBAAABt8~ HTTP/1.1Host: clicks.sharefile.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr

String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: clicks.sharefile.com
Source: global traffic	DNS traffic detected: DNS query: campaignstudio.sharefile.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: docs.sharefile.com
Source: global traffic	DNS traffic detected: DNS query: consent.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: us-central1-citrix-product-documentation.cloudfunctions.net
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: www.citrix.com
Source: global traffic	DNS traffic detected: DNS query: titan.citrix.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: support.sharefile.com
Source: global traffic	DNS traffic detected: DNS query: platform.cloud.coveo.com
Source: global traffic	DNS traffic detected: DNS query: service.force.com
Source: global traffic	DNS traffic detected: DNS query: static.cloud.coveo.com
Source: global traffic	DNS traffic detected: DNS query: d.la1-c1-ia6.salesforceliveagent.com

Source: unknown

HTTP traffic detected: POST /allowedPageEdit HTTP/1.1Host: us-central1-citrix-product-documentation.cloudfunctions.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"query_suggestion_index: en-us-production-sharefile_query_suggestionssec-ch-ua-mobile: ?0index_name: en-us-production-sharefileAuthorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cgUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01lang_code: en-usproduct_name: sharefile_mainsec-ch-ua-platform: "Windows"Origin: https://docs.sharefile.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.sharefile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; fwd=missContent-Security-Policy: frame-ancestors https://docs.sharefile.comContent-Type: text/html; charset=utf-8Date: Thu, 25 Apr 2024 18:48:37 GMTEtag: 1680810075-sslServer: NetlifyStrict-Transport-Security: max-age=31536000X-Frame-Options: DENYX-Nf-Request-Id: 01HWB9D3ZQ9ZN8PTT25VZ9XX1GX-Xss-Protection: 1; mode=blockConnection: close

Source: chromecache_268.2.dr	String found in binary or memory: http://pellepim.bitbucket.org/jstz/
Source: chromecache_290.2.dr	String found in binary or memory: http://sharefile.com
Source: chromecache_315.2.dr	String found in binary or memory: https://74nz.la1-c1-ia6.salesforceliveagent.com/content
Source: chromecache_248.2.dr	String found in binary or memory: https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC89d456eb3ce9483bb655ec17c4c10fb
Source: chromecache_268.2.dr	String found in binary or memory: https://bitbucket.org/pellepim/jstimezonedetect/src/default/LICENCE.txt
Source: chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_290.2.dr	String found in binary or memory: https://consent.trustarc.com
Source: chromecache_290.2.dr	String found in binary or memory: https://docs.cloud.com
Source: chromecache_290.2.dr	String found in binary or memory: https://docs.sharefile.com/en-us/sharefile/integrations/integrations#browse-integrations-in-sharefil
Source: chromecache_166.2.dr	String found in binary or memory: https://docs.sharefile.com/en-us/sharefile/sharefile-app/configuration.html#mount-points
Source: chromecache_268.2.dr	String found in binary or memory: https://github.com/dbushell/Pikaday
Source: chromecache_268.2.dr	String found in binary or memory: https://github.com/jquery/globalize
Source: chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_268.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_166.2.dr	String found in binary or memory: https://support.sharefile.com/img/userprofile/default_profile_160_v2.png
Source: chromecache_166.2.dr	String found in binary or memory: https://support.sharefile.com/img/userprofile/default_profile_200_v2.png
Source: chromecache_166.2.dr	String found in binary or memory: https://support.sharefile.com/img/userprofile/default_profile_200_v2.png?fromEmail=1
Source: chromecache_166.2.dr	String found in binary or memory: https://support.sharefile.com/img/userprofile/default_profile_45_v2.png
Source: chromecache_166.2.dr	String found in binary or memory: https://support.sharefile.com/img/userprofile/default_profile_45_v2.png?fromEmail=1
Source: chromecache_290.2.dr	String found in binary or memory: https://support.sharefile.com/s/community
Source: chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_290.2.dr	String found in binary or memory: https://www.cloud.com/legal.html
Source: chromecache_311.2.dr, chromecache_299.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	String found in binary or memory: https://www.googletagmanager.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443

Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:50137 version: TLS 1.2

Source: chromecache_313.2.dr

Binary or memory string: .sln4

Source: classification engine

Classification label: clean1.win@30/254@66/23

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2216,i,4007318040339904038,1145951052867774334,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://clicks.sharefile.com/f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW5OMFlYUWlPM002TWpJNklqWTJNbUV5WXprNE9ETmhNVGMyTWpjNE56STBPRGNpTzNNNk5Eb2liR1ZoWkNJN2N6bzJPaUl4TmpVd09EUWlPM002TnpvaVkyaGhibTVsYkNJN1lUb3hPbnR6T2pVNkltVnRZV2xzSWp0cE9qSXhPRHQ5ZlElM0QlM0QmVwNzcGNCCmYonywqZgIFPr1SGWttcXVpY2tAYXVndXN0YWhlYWx0aC5jb21YBAAABt8~"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2216,i,4007318040339904038,1145951052867774334,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 179			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 313			Jump to dropped file

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://clicks.sharefile.com/f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW5OMFlYUWlPM002TWpJNklqWTJNbUV5WXprNE9ETmhNVGMyTWpjNE56STBPRGNpTzNNNk5Eb2liR1ZoWkNJN2N6bzJPaUl4TmpVd09EUWlPM002TnpvaVkyaGhibTVsYkNJN1lUb3hPbnR6T2pVNkltVnRZV2xzSWp0cE9qSXhPRHQ5ZlElM0QlM0QmVwNzcGNCCmYonywqZgIFPr1SGWttcXVpY2tAYXVndXN0YWhlYWx0aC5jb21YBAAABt8~	0%	Avira URL Cloud	safe
http://clicks.sharefile.com/f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW5OMFlYUWlPM002TWpJNklqWTJNbUV5WXprNE9ETmhNVGMyTWpjNE56STBPRGNpTzNNNk5Eb2liR1ZoWkNJN2N6bzJPaUl4TmpVd09EUWlPM002TnpvaVkyaGhibTVsYkNJN1lUb3hPbnR6T2pVNkltVnRZV2xzSWp0cE9qSXhPRHQ5ZlElM0QlM0QmVwNzcGNCCmYonywqZgIFPr1SGWttcXVpY2tAYXVndXN0YWhlYWx0aC5jb21YBAAABt8~	1%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	0%	Avira URL Cloud	safe
https://us-central1-citrix-product-documentation.cloudfunctions.net/allowedPageEdit	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	0%	Virustotal		Browse
https://us-central1-citrix-product-documentation.cloudfunctions.net/allowedPageEdit	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
spgo.io	44.229.102.36	true	false	unknown
us-central1-citrix-product-documentation.cloudfunctions.net	216.239.36.54	true	false	unknown
titan.citrix.com	130.211.22.189	true	false	high
la1-c1-ia6.ia6.r.salesforceliveagent.com	136.146.24.66	true	false	high
sharefile-prod.mautic.net	174.129.6.84	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
consent.trustarc.com	18.238.49.47	true	false	high
stats.g.doubleclick.net	142.250.105.154	true	false	high
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
static.cloud.coveo.com	18.67.65.9	true	false	high
citrix.netlifyglobalcdn.com	54.156.13.12	true	false	unknown
www.google.com	172.217.215.99	true	false	high
platform.cloud.coveo.com	99.83.254.102	true	false	high
location.l.force.com	136.146.25.2	true	false	high
d.la1-c1-ia6.salesforceliveagent.com	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
support.sharefile.com	unknown	unknown	false	high
docs.sharefile.com	unknown	unknown	false	high
campaignstudio.sharefile.com	unknown	unknown	false	high
service.force.com	unknown	unknown	false	high
www.citrix.com	unknown	unknown	false	high
clicks.sharefile.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=eb81&referer=https://docs.sharefile.com	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&_u=YEBAAQAAAAAAACAAs~&z=1683289489	false		high
https://consent.trustarc.com/asset/notice.js/v/v1.7-3185	false		high
https://service.force.com/embeddedservice/5.0/utils/common.min.js	false		high
https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D	false		high
https://docs.sharefile.com/assets/images/favicon.ico	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-plan-pricing-2.png	false		high
https://docs.sharefile.com/en-us/sharefile/media/catalog-1a.png	false		high
about:blank	false	Avira URL Cloud: safe	low
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=8a97&referer=https://docs.sharefile.com	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&gjid=980149886&_gid=979624069.1714070919&_u=YEBAAQAAAAAAACAAs~&z=1563054629	false		high
https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community	false		high
https://docs.sharefile.com/en-us/sharefile/getting-started	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-plan-details-1.png	false		high
https://docs.sharefile.com/en-us/sharefile/sharefile-app	false		high
https://titan.citrix.com/api/v2/sendInsights?1714070914468	false		high
https://d.la1-c1-ia6.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp?sid=undefined&r=759&Availability.prefix=Visitor&Availability.ids=[573Dn000000hOkW]&callback=embedded_svc.liveAgentAPI.connection.handlePing&deployment_id=572Dn000000hP8x&org_id=00DDn00000AvI1G&version=48	false		high
https://docs.sharefile.com/en-us/sharefile/media/catalog-1c.png	false		high
https://docs.sharefile.com/en-us/sharefile/media/captcha.png	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-buy-account-info-1.png	false		high
https://docs.sharefile.com/en-us/sharefile/media/sf-win-access-dashboard-queue.png	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-3.png	false		high
https://consent.trustarc.com/get?name=crossdomain.html&domain=sharefile.com	false		high
https://titan.citrix.com/api/v2/sendInsights?1714070894183	false		high
https://titan.citrix.com/api/v2/sendInsights?1714070910275	false		high
https://d.la1-c1-ia6.salesforceliveagent.com/chat/rest/Visitor/Settings.jsonp?Settings.prefix=Visitor&Settings.buttonIds=[573Dn000000hOkW]&Settings.updateBreadcrumb=1&callback=embedded_svc.liveAgentAPI.connection.handlePing&deployment_id=572Dn000000hP8x&org_id=00DDn00000AvI1G&version=48	false		high
https://service.force.com/embeddedservice/5.0/client/liveagent.esw.min.js	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-1.png	false		high
https://docs.sharefile.com/en-us	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-plan-account-info-1.png	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-try-now-sf-hello.png	false		high
https://static.cloud.coveo.com/searchui/v2.10111/2/fonts/lato.woff2	false		high
https://docs.sharefile.com/en-us/electronic-signature	false		high
https://service.force.com/embeddedservice/5.0/frame/session.esw.min.js	false		high
https://docs.sharefile.com/en-us/sharefile/whats-new	false		high
https://platform.cloud.coveo.com/rest/ua/v15/analytics/view?visitor=dca37891-e1ad-4cf0-89b2-8b306a94b9a7	false		high
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=d124&referer=https://docs.sharefile.com	false		high
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7e33&referer=https://docs.sharefile.com	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-6.png	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-plan-buy-now-1.png	false		high
https://docs.sharefile.com/en-us/sharefile/media/catalog-1.png	false		high
https://titan.citrix.com/api/v2/sendInsights?1714070880641	false		high
https://service.force.com/embeddedservice/5.0/frame/chasitor.esw.min.js	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-buy-account-info-2.png	false		high
https://service.force.com/embeddedservice/5.0/esw.min.js	false		high
https://docs.sharefile.com/en-us/sharefile/media/catalog-1b.png	false		high
https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controller	false		high
https://docs.sharefile.com/en-us/sharefile/sharefile-vdr	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&gjid=1071460475&_gid=2101004329.1714070856&_u=YEBAAQAAAAAAACAAs~&z=323130226	false		high
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f07a&referer=https://docs.sharefile.com	false		high
https://docs.sharefile.com/assets/dist/bundle.js	false		high
https://d.la1-c1-ia6.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp?Settings.prefix=EmbeddedService&org_id=00DDn00000AvI1G&EmbeddedServiceConfig.configName=Service_Group&callback=embedded_svc.liveAgentAPI.handleChatSettings&version=48&EmbeddedServiceConfig.language=en-US	false		high
https://docs.sharefile.com/en-us/	false		high
https://docs.sharefile.com/en-us/sharefile/media/catalog-1d.png	false		high
https://support.sharefile.com/s/community	false		high
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7b43&referer=https://docs.sharefile.com	false		high
https://titan.citrix.com/api/v2/sendInsights?1714070886925	false		high
https://service.force.com/embeddedservice/5.0/eswFrame.min.js	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-4.png	false		high
https://docs.sharefile.com/assets/fonts/custom-fonts/PPMori-Regular.woff	false		high
https://service.force.com/embeddedservice/5.0/frame/broadcast.esw.min.js	false		high
https://campaignstudio.sharefile.com/r/11b86c9fe68b87a35e37a930e?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D&	false		high
https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html	false		high
https://consent.trustarc.com/notice?domain=sharefile.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&fade=30000&language=en	false		high
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=3d27&referer=https://docs.sharefile.com	false		high
https://titan.citrix.com/api/v2/sendInsights?1714070906059	false		high
https://docs.sharefile.com/en-us/electronic-signature/rightsignature.pdf	false		high
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=49bf&referer=https://docs.sharefile.com	false		high
https://us-central1-citrix-product-documentation.cloudfunctions.net/allowedPageEdit	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://service.force.com/embeddedservice/5.0/utils/inert.min.js	false		high
https://docs.sharefile.com/en-us/sharefile/media/password-5-a.png	false		high
https://docs.sharefile.com/en-us/sharefile/configuration	false		high
https://consent.trustarc.com/log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f0fa&referer=https://docs.sharefile.com	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&_u=YEBAAQAAAAAAACAAs~&z=124763840	false		high
https://platform.cloud.coveo.com/rest/ua/v15/analytics/view?visitor=97fc8b95-1583-4e4e-91f7-b83c892ea259	false		high
https://docs.sharefile.com/en-us/sharefile/sharefile.pdf	false		high
https://docs.sharefile.com/en-us/sharefile/media/sf-win-access-dashboard-rf.png	false		high
https://service.force.com/embeddedservice/5.0/frame/filetransfer.esw.min.js	false		high
https://titan.citrix.com/api/v2/sendInsights?1714070899607	false		high
https://service.force.com/embeddedservice/5.0/client/invite.esw.min.js	false		high
https://titan.citrix.com/api/v2/sendInsights?1714070859592	false		high
https://docs.sharefile.com/en-us/sharefile/media/rb-get-started-1.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://consent.trustarc.com	chromecache_290.2.dr	false		high
https://www.google.com	chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	false		high
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	chromecache_268.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.cloud.com/legal.html	chromecache_290.2.dr	false		high
https://74nz.la1-c1-ia6.salesforceliveagent.com/content	chromecache_315.2.dr	false		high
https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC89d456eb3ce9483bb655ec17c4c10fb	chromecache_248.2.dr	false		high
http://pellepim.bitbucket.org/jstz/	chromecache_268.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	false	URL Reputation: safe	unknown
https://support.sharefile.com/img/userprofile/default_profile_45_v2.png	chromecache_166.2.dr	false		high
https://support.sharefile.com/img/userprofile/default_profile_160_v2.png	chromecache_166.2.dr	false		high
https://docs.sharefile.com/en-us/sharefile/sharefile-app/configuration.html#mount-points	chromecache_166.2.dr	false		high
https://bitbucket.org/pellepim/jstimezonedetect/src/default/LICENCE.txt	chromecache_268.2.dr	false		high
https://support.sharefile.com/img/userprofile/default_profile_200_v2.png	chromecache_166.2.dr	false		high
https://github.com/dbushell/Pikaday	chromecache_268.2.dr	false		high
https://docs.cloud.com	chromecache_290.2.dr	false		high
https://support.sharefile.com/img/userprofile/default_profile_200_v2.png?fromEmail=1	chromecache_166.2.dr	false		high
https://github.com/jquery/globalize	chromecache_268.2.dr	false		high
https://td.doubleclick.net	chromecache_311.2.dr, chromecache_223.2.dr, chromecache_299.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
136.146.25.2	location.l.force.com	United States	14340	SALESFORCEUS	false
172.217.215.99	www.google.com	United States	15169	GOOGLEUS	false
130.211.22.189	titan.citrix.com	United States	15169	GOOGLEUS	false
142.250.105.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.212.91.35	unknown	United States	14618	AMAZON-AESUS	false
18.238.49.99	unknown	United States	16509	AMAZON-02US	false
18.67.65.9	static.cloud.coveo.com	United States	3	MIT-GATEWAYSUS	false
44.229.102.36	spgo.io	United States	16509	AMAZON-02US	false
174.129.6.84	sharefile-prod.mautic.net	United States	14618	AMAZON-AESUS	false
108.177.122.154	unknown	United States	15169	GOOGLEUS	false
108.177.122.157	unknown	United States	15169	GOOGLEUS	false
136.146.37.11	unknown	United States	14340	SALESFORCEUS	false
52.85.132.96	unknown	United States	16509	AMAZON-02US	false
99.83.254.102	platform.cloud.coveo.com	United States	16509	AMAZON-02US	false
18.238.49.47	consent.trustarc.com	United States	16509	AMAZON-02US	false
44.217.247.226	unknown	United States	14618	AMAZON-AESUS	false
136.146.24.66	la1-c1-ia6.ia6.r.salesforceliveagent.com	United States	14340	SALESFORCEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.239.36.54	us-central1-citrix-product-documentation.cloudfunctions.net	United States	15169	GOOGLEUS	false
54.156.13.12	citrix.netlifyglobalcdn.com	United States	14618	AMAZON-AESUS	false
64.233.185.99	unknown	United States	15169	GOOGLEUS	false
108.177.122.99	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431824
Start date and time:	2024-04-25 20:46:29 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://clicks.sharefile.com/f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW5OMFlYUWlPM002TWpJNklqWTJNbUV5WXprNE9ETmhNVGMyTWpjNE56STBPRGNpTzNNNk5Eb2liR1ZoWkNJN2N6bzJPaUl4TmpVd09EUWlPM002TnpvaVkyaGhibTVsYkNJN1lUb3hPbnR6T2pVNkltVnRZV2xzSWp0cE9qSXhPRHQ5ZlElM0QlM0QmVwNzcGNCCmYonywqZgIFPr1SGWttcXVpY2tAYXVndXN0YWhlYWx0aC5jb21YBAAABt8~
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@30/254@66/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://docs.sharefile.com/en-us Browse: https://support.sharefile.com/s/community Browse: https://docs.sharefile.com/en-us/sharefile/whats-new Browse: https://docs.sharefile.com/en-us/sharefile/getting-started Browse: https://docs.sharefile.com/en-us/sharefile/configuration Browse: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Browse: https://docs.sharefile.com/en-us/sharefile/sharefile-app Browse: https://docs.sharefile.com/en-us/sharefile/sharefile-vdr Browse: https://docs.sharefile.com/en-us/electronic-signature Browse: https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controller

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 74.125.136.101, 74.125.136.102, 74.125.136.113, 74.125.136.100, 74.125.136.139, 74.125.136.138, 108.177.122.84, 34.104.35.123, 108.177.122.95, 64.233.176.95, 64.233.177.95, 64.233.185.95, 172.253.124.95, 74.125.138.95, 142.251.15.95, 74.125.136.95, 172.217.215.95, 142.250.105.95, 173.194.219.95, 142.250.9.95, 23.63.205.55, 74.125.136.97, 184.87.37.4, 142.250.105.102, 142.250.105.139, 142.250.105.101, 142.250.105.100, 142.250.105.138, 142.250.105.113, 13.85.23.86, 192.229.211.108, 20.166.126.56, 142.251.15.101, 142.251.15.139, 142.251.15.113, 142.251.15.100, 142.251.15.138, 142.251.15.102, 199.232.214.172, 104.76.210.207, 104.76.210.219, 173.222.249.178, 173.222.249.155, 13.85.23.206, 23.40.205.81, 23.40.205.59, 23.40.205.75, 23.40.205.58, 23.40.205.67, 23.40.205.66, 23.40.205.49, 23.40.205.56, 23.40.205.74, 23.40.205.16, 23.40.205.48, 23.40.205.41, 23.40.205.26, 23.40.205.34, 23.40.205.43, 23.40.205.83, 64.233.185.113, 64.233.185.102, 64.233.185.100, 6
Excluded domains from analysis (whitelisted): sdc.prod.communities.salesforce.cdn.edgekey.net, slscr.update.microsoft.com, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, e78038.dsca.akamaiedge.net, sls.update.microsoft.com, update.googleapis.com, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, www.citrix.com.edgekey.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e7808.dscg.akamaiedge.net, e10988.dsca.akamaiedge.net, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30406), with no line terminators
Category:	downloaded
Size (bytes):	30426
Entropy (8bit):	5.234433764965232
Encrypted:	false
SSDEEP:	384:4FPIAIsEGPY3PI4Up4cAKCeLoXlAH5PIYTJ76GK7VsgVgaixGvbFRs4cBUzYKWq:KPIAIfwPpLTCWusgpMK/
MD5:	8FE28A025E7321D096C325423F9DCC69
SHA1:	9079349F3803BBEA30E2460159C2B58DCE2BE81F
SHA-256:	8267EB2AE0B03F2765F1CCF6C0F29ED27A2D5332702F483D5B1F88F5EA3A4AD0
SHA-512:	0E463EF02AD2A994C666CD9F71813191F2A7B31FF3B463735F72057EDA2AED0D02129EAF00A70456B73C649F7AF713EAA581E754FABEA0714A08EE1CED5AEE8C
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.chatter.components.aura.components.forceChatter.chatter.FeedController%2FACTION%24getModel%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22type%22%3A%22HOME%22%2C%22selectedFilter%22%3A%22AllQuestions%22%2C%22selectedSortOrder%22%3A%22Relevance%22%2C%22subjectId%22%3Anull%2C%22showFeedItemActions%22%3Atrue%2C%22feedDesign%22%3A%22COMPACT%22%2C%22firstPageSize%22%3A15%2C%22nextPageSize%22%3A15%2C%22hasFeedSwitcher%22%3Afalse%2C%22retrieveOnlyTopLevelThreadedComments%22%3Afalse%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22-lAyjg7Rz5q_SREY4hPdNA%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwMDBlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"config":{"subjectId":"005Dn000007plZi","communityId":{"rawValue":"0DBDn000000Xhb5","communityId":{"value":"0DBDn000000Xhb5"},"isAll":false,"isInternal":false,"isActive":true},"isPrivateGroup":false,"type":"Home","sortOrder":"Relevance","feedFilter":"AllQuestions","density":"AllUpdates","isTopicsEnabled":true,"isThreadedEnabled":true,"commentSortOrder":"CreatedDateLatestAsc","threadedConversationLevelLimit":3,"feedDisplayConfig":{"feedElementDisplayConfig":{"bodyTruncation":"INLINE_EXPAND","auxBodyDetail":"SIMPLE","topicsDetail":"SIMPLE","bodyTruncationLimit":400,"showInlineComments":true,"useLargeDrillInTarget":false,"showLikesDetail":true,"showLikeAction":true,"showOverflowActionsMenu":true,"showBookmarkStatus":true,"showBookmarkAction":true,"showDeleteAction":true,"showModerationAction":true,"truncateAttachments":true,"mode":"IN_FEED","feedUiDesign":"COMPACT"},"commentsDisplayConfig":{"commentInputStyle":"NONE","pagingMode":"PULL","postA

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (566)
Category:	downloaded
Size (bytes):	23514
Entropy (8bit):	5.14508009060643
Encrypted:	false
SSDEEP:	384:5LKVxbIKN6krZq1lAsF0MyzNmT0wqLHKKRwI7+oEmfmF9ioaWVsSPVM:5LmxbIdkrZq1l24RKRwICFwmFy3
MD5:	92D549B7431BFC6D919B551D01FA05B0
SHA1:	788C66653A70F2FFA8444563696514261C81D4D2
SHA-256:	2B18192A287DEBCAC96EF5CF0FFC45F720594A3C52A9C06A4478117871B21208
SHA-512:	2914F0B0EA8D4182956D42F77448A4639A5E13E27A89135D730586AFACE43AC6A74A6DD21D3EE66CED9814ACAB315955AB2D1FF868235B81EF1B7CE8F27648EB
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/frame/chasitor.esw.min.js
Preview:	/. Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. ./.window.esw.defineFeature("Chasitor",function(c){function e(){this.esw=c;this.receiveIsTabPrimaryFunction=this.isTabPrimary=this.chatKey=this.chatWindowStateName=this.prechatEntities=this.prechatFormDetails=this.chasitorSettings=this.events=this.liveAgentChasitor=void 0;this.registerMessageHandlers();"mobile"!==c.getSafariType()&&this.registerBroadcastHandlers();c.loadFeatureScript("FileTransfer");window.addEventListener("pagehide",function(){this.chasitorSettings&&this.chasitorSettings.deploymentId&&.this.decrementActiveChatSession(this.chasitorSettings.deploymentId)}.bind(this),{capture:!0})}function m(a){var b="";if(a&&"string"===typeof a)return a;"ChatWindowButton"===a.type?b+="Button Selections:":"ChatWindowMenu"===a.type&&(b+="Menu Options:");a.items&&a.items.forEach(function(d){b+="\n\t"+d.text});return b}v

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 448, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	110080
Entropy (8bit):	7.993863026173229
Encrypted:	true
SSDEEP:	3072:qsgqM1C/DIIHqi7e1qlsdIYUnD3RTOdsLUGk:q71ChHAqlIINbRa6Ljk
MD5:	0C26B56A2BBB3B5D4A45F8E0C69EDDA1
SHA1:	BD0E6E43DDE05EE8FE111E923F5AC13A75C5BB7E
SHA-256:	95DD3E544DA2DF0531397957DDDE83A222AF444FF1F915FCE1C79CF5F953F7F7
SHA-512:	E9663478A62E05BD9691678FA93264BB2DA53E8B8AF68A33B331D3DAD9652871DE21D1F9971B04AD75ECFD55F3805868E77BF503716E64A48B60D76E785EAECF
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-get-started-1.png
Preview:	.PNG........IHDR.............@..d....pHYs..........+......tIME.....,.F..... .IDATx..yx.U...U.....d_.EQVQ.G....QA.p.A.q..DD.Q..sa.Q.._E.eTT.Ap.G.#;B............EwR.t%.t...<<@u...n.:u.Y.""0..0..0L..f...... ._HH. ..L..0..0.......a..a......iy.Vk.m.(B...[B .a..a..iNDQDuu5...\Vx..a..a.6..dBFF..n....:J/.40..0.....}..k..hDnn...>.......b......P......0..0.S?....N...>X.V...+..D............."BHH...^.a..a...BD0..2...."r.0a..a..a..i....:..A..)....2..0..................3gPVV.k....bA........{.w....k...teHOO...KD...CRR..Vx..a..aZ./....}..~..7ddd.Z.f#""..............km...I.PRRRG.e........0..0.S?..Z.m......7zC.6.u.]..'c.Q.n...z.dYFAA...=...^u.U\Z.a..a..%.Z..6m....vY..../.`...9r$rss[.o.).6.......a..a...g........!I....9_}......9r........'.`.a8.....d..a..i.TVV.....u.\|-J...~..w.S.N.H.^Qx...0}.t..0.aaa8~.8.n....?...BTVV..^PP...z.S.NURM.e.....w.)_9YYY.3f.f..c...a..i3g.l.Nt.........-...QAk...X.\|9...qt....=..V.\..'N ((...r.......{.....j.*.?~....h..z.............{w$&&"

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2396
Entropy (8bit):	7.881846797099339
Encrypted:	false
SSDEEP:	48:ORzzMwlWO8g4mhmT6Lx4Xp0QxfdZgvaCCTR0iY442rmWOrwKDqBcI:OBztUO8p1w2yQxfB/yipxrmmAqBH
MD5:	BC15D97EED615B89D1E701E0F935D10E
SHA1:	17BD019565BFA3FC8E3C8C95659FD0A82AA95C1A
SHA-256:	83C1A32CD854EE78081A6E0C0DE87A408CAA231B071860E0C8045D73B524DEB6
SHA-512:	744EA63ACCD314DD47FF6C376BA478F24AB8E5EF1C2F617F65515A8ABB3C8D328B6AF3030A92EB54140C8183E880C0628A945857C9066208A8FEAC89B3FE9650
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......(.....6q.H...#IDATx..\..7.}P..j...q.':.{6..J@.&`S.h.......N.+'0.............t/..\|.kI..W5....h4.@w.C.g...@....=...Z.X...`.[>G....$..%..D..........1....\=I.&....m.^..% #....O...p.[.,$.G...t.=J.k...K.W.e..AF.JFq)3AF.I.CEr`hT&=?o../.=.$#./..{.}....o..3........2..}.o0.sW..u.&d&.....(W...{......G3.K...!3.Wb.d&m.7c.l..h.....d_.};e.a..J....T.\...g.(A.<.G...0B{Q.....d&.S.....#.w../.....N........3$.H..G..H.;?7?.~.U..&.=..l..v.<O.y".v).[..c..\|'...P..(.{N\|+.p,.=.i..i}+.....3..3.p)4+...k...+..............>..5..I..[....s.....v.*.R...(.mt...,..P5.\|.P.K....9.....9..:h...27.......<.-........16.,:..DK-JS.ayP.....3X...6[f....^.PF.o.Se..]..q..<t.`..W.n.Z.$I...\|H..W$...Y.5b0.F..@).r..2\|..h.._...W4..v...i....d..A...S......:.a...!.$-...+(m.S%....b..........5c.S&...Q5n(..t;H6.."/Ei..U../j..c#O#........6d..S.ST..`...L`.W.....a...k.-.lS!i{+.....,c<P..\|u.'%.#...f..i.>.`...>.l...'..6h"yl.62..NK.k. .....0.........hk..........W..K...9...q..9

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 338, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21006
Entropy (8bit):	7.94373470438487
Encrypted:	false
SSDEEP:	384:u8LFz2yaq1nsk6uHTcX0mfrwA68DMw9PQ0goCcUCP:1LZ2yHyuzCx/DN9ICUCP
MD5:	F3332CA0002D01F65878D1A83B3F03C8
SHA1:	631096EBE4E21BA8ECE65616D7C8B7DF5EB35E21
SHA-256:	859AB206E527E700A0BF9DA2561159E36344703979638F86586394A1DE150220
SHA-512:	9E727CBC229ED4A3EFC0D791E8005F8550A5629A70194CF848C2D9DDDD29E2B79317F9F72C9E17B9565FFC496E3153EFDA456C43439F7BBAE060AD1D21C4B202
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/catalog-1d.png
Preview:	.PNG........IHDR...X...R........'....pHYs...t...t..f.x....tIME.....#...%... .IDATx...w.T.....9.g{.,.......A..F..K..1..N~.I.......k.1Xb7.5.b..(E..ewa.e..9.....(......x.p.)..ff..s....af....Z........9...6]RL...gp..c..Z{.....h%"""rLb6.d.7.O....;.g?.A......q.......8...DDDD...`I.....AW""""...H.L.....H.1....DDDDN4.X""""........l ..vGW"r....h\.H;P..9^6.6\:$.B.q.%o.t...0a..8.w..'(d....,......,..<.<).]...7.x..'>r..d..1S..9^......~..<i....eap'..X.c.A.". n...I.g.\|.cA...A..)`...E+9Q.}.m[.J.8$X...t...d...Hg.X.......k...<f..."""".(....R.u.>x............\|i...l..........j#.:WXDDD:...X.eY....6.'f.I..f......$..... .T...xs%....IDDD.KI..!..n...."..d.d.............9:.......%..`...n+.L.1(""".Jb.,lp..a`.n.X..#....DDD..H..E...vk..i..JDDD:....."""..)`........".]`T..m..e{m..u.]....i..t.~...t....D.k.......g..........,..I.........t&.X"'..es..{y`A}.\|s&.5]9.p.....^.L..$.8x]jv..9....I.......u...C..\|h2..n...M.vf&}r\@K.....mO.\.......$.,....5.<.Nk.2..."O[.......}.......o.N

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	670135
Entropy (8bit):	5.406070470331677
Encrypted:	false
SSDEEP:	12288:4DZou/nDjzfNg7WvlVhf24rZE3fySJl1Z7Up4cTQO7oZ:+FnDjdkP8K
MD5:	5E39904C79390A99E17848DEC19BDFBE
SHA1:	294F4ECF8CE8CB5B3A46872193FCBD46B8FC5BF8
SHA-256:	84B731E1D3BA3B2E7DFB905EA03C9F25EE4716C00E7D773F8FB58050547D00B8
SHA-512:	FF8B40CF8B5C3D9633F2D9361B4490234A791586499C3A3116466CBA7B4A9D183F69B97FF073B7CEB8E7A77F171FB6E9C44155A9917F33B504D83981C9410760
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22-lAyjg7Rz5q_SREY4hPdNA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwMDBlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%22f8a65d86-3288-496f-bcd1-5762be189f66%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22106ffd39-67d8-4187-8350-a302d5104b8a%22%2C%22publishedChangelistNum%22%3A%2246%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D
Preview:	window.Aura \|\| (window.Aura = {});.window.Aura.bootstrap \|\| (window.Aura.bootstrap = {});.window.Aura.appBootstrap = {"data":{"app":{"componentDef":{"descriptor":"markup://siteforce:communityApp"},"creationPath":"/[0]","attributes":{"values":{"schema":"Published","authenticated":false,"ac":"","formFactor":"LARGE","brandingSetId":"f8a65d86-3288-496f-bcd1-5762be189f66","uds":false,"language":"en_US","viewType":"Published","pageId":"106ffd39-67d8-4187-8350-a302d5104b8a","themeLayoutType":"Inner","priv_themeLayoutReady":true,"isHybrid":false,"includeInstrumentation":true,"publishedChangelistNum":46}}},"components":[{"componentDef":{"descriptor":"markup://siteforce:baseApp"},"creationPath":"/[0]/$","model":{"appConfigData":{"allLanguages":[],"isHybridApp":false,"activeLanguage":"en_US","cmsSettings":{"isEnabled":"true","isPersonalizationEnabled":"true"},"cmsConnections":[]},"googleAnalyticsAnonymizeIpEnabled":false,"googleAnalyticsCustomDimensions":{},"googleAnalyticsSalesforceDataOptInEn

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 414, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48081
Entropy (8bit):	7.984333300874881
Encrypted:	false
SSDEEP:	768:ttoGYi9pQdSDsrJGFCkTi6avUrHMzuk+B+HhCbc/LY0WWe2WM7z/ZJdg5qhE:tef2pWSDWJ3k+lcriu/Bwk0ZeQ/ZJdZ2
MD5:	F6E84B27277D5F41A814C262E432558A
SHA1:	F3D91D6FE65A55069BBFA3A9DD54D61C6D97FAB5
SHA-256:	DE32D14B9FEC892FBE37FB461E49CACDCCDE2CBE7C47B7DF232F9B8A94F73E03
SHA-512:	5D639529ADEAE9EBDF04289C837E29522D53C88DAFBF62B1B319A21A0BAC4B61D4C3F9026E6FB488D3C4919C47365D745E3BF1C8363A98E6554F6E396273F2DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b......pHYs...t...t..f.x....tIME.....",.E.u.. .IDATx...w\|Uu....).....^..B. .....(8...R.u..ov....utg..3....Xf-...(CWA.@(.{....zSn.\|...... )\|.....-.\|.......9...j"...$..../($1>...i..O...G.ej.^...'91.Y....;&.v..kg.&6..gP..KJ.e.....v./)%..BQ...H.v.4M....h.<.....v..A..P....r$.BCBD..""....4.ZT".#(>..[."j. ....PU]MIi9.......I...+.Ihh...........B.S....Z........n.0....mC.z;e.&Q...].r...FQ.$Ij...p..$.Y....$....p.BC.E..Rjk.@.1.MX&Q..X,.KJ...%""..j.0...%..wF....>....2..>.bcp9.".[...v.4.4..BB.r88_RJn^.Ng...`,...,#I.....pS...i.......SU....n............@..t..b....GMm-UU...+FQT,..EU.E...p.....k..........M..q!..!...h8kv:.8...u.o].>..@@.o.]DA..=.E..Z..\..v{.(v....D.w0F};<.$..t...n....A.G5..1.S...........A.n..5A..A..D... .B. .]..A.:... .....@..A...@.. .. t."..A......... ....tA..A..n.....D.A..7q....%.:....A.Zv....1.U....e.!"..A..ku;...(Jk..\......_. ..pc......,..qq.F... ..".[..... ....+m:.E.\..A..t..Q......w./L..A.........].~3.X.. ....fU.M.l...

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550)
Category:	downloaded
Size (bytes):	4933
Entropy (8bit):	5.2743715394963
Encrypted:	false
SSDEEP:	96:xYtw7HXA3fHtQH6uL03qZqy6fJkp1RgK5qZOmuVqZqIQXMFVqZqIUGhLI42XQZMp:xYGXmQH6uo3jkp1qK5PJVUqMFVUzhLIV
MD5:	C5D3CEDC1B074F2F25895FEEFB72A2DF
SHA1:	5C02D1EEE3361874A3406C617856EFFCB259D338
SHA-256:	7C273510050E27AD1E0A533B0A766C6C597575710D578A104E60D4810E173648
SHA-512:	D7E9246826F5837EFD15B4D5F9BAC33EA4093B8F46A824D27E43CC6F08350149CE67D9A2B603A965EE81FA9BBBCC3EBAC56B6B8C424C506A0BED13AAB6659AA7
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/utils/common.min.js
Preview:	(function(){function f(){this.eventHandlers={}}function g(){}f.prototype.getOS=function(){var a=["Macintosh","MacIntel","MacPPC","Mac68K"],b=["Win32","Win64","Win16","Windows","WinCE"],d=["iPhone","iPad","iPod"],e=navigator.platform,c="";e&&(-1!==a.indexOf(e)?c="Mac":-1!==d.indexOf(e)?c="IOS":-1!==b.indexOf(e)?c="Windows":/Linux/.test(e)\|\|/Android/.test(e)?c="Linux":c\|\|(c="OtherOS"));return c};f.prototype.isDesktop=function(){return-1===navigator.userAgent.indexOf("Mobi")};f.prototype.outputToConsole=.function(a,b){if((embedded_svc.settings&&embedded_svc.settings.devMode\|\|embedded_svc.menu&&embedded_svc.menu.settings.devMode)&&console&&console[a])console[a]("[Embedded-Service] "+(Array.isArray(b)?b.join(", "):b))};f.prototype.log=function(){this.outputToConsole("log",[].slice.apply(arguments))};f.prototype.error=function(a){a?this.outputToConsole("error",a):this.outputToConsole("error","unspecified error.")};f.prototype.warning=function(a){a?this.outputToConsole("warn","Warning: "+a):t

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	138941
Entropy (8bit):	3.8028314311583626
Encrypted:	false
SSDEEP:	768:suhS3liy5+TvBZ76kSr+su2Jhz1bFjnaWcqwPYuU81xdQ1YjKqfN0SXMVS2PWe6f:s/5+TvBZ77SLdu73e1HeN0UMVTW5Zqw
MD5:	941EFDA57BB34D1966E258E86EBC998F
SHA1:	B3337DFDDA7DB84D57BB1A45AFBA6147D2496FEF
SHA-256:	63389EF789D684B52D1797CCE6E84DF4C0FDBC1CE4BA824E819176EAD7F0FC73
SHA-512:	2B6D653AFC762E9556445E2B34F4D289AA8F16F6F0FECEE5FD9130D917D2CB68B8548DD77A78A003358EFC6CB5B8E53E31994BDE78CF1C92BF60BAEA130800DE
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>Getting started with ShareFile \| ShareFile</title>... <meta name="description" content="To get started with ShareFile, follow the instructions under Get ShareFile to:.ShareFile is accessible by any computer with a supported web browser and an internet connection.">... <meta name="ctx_product" content="sharefile_main">. <meta name="lastModified" content="October 18, 2023">.<meta name="googlebot" content="noindex">.<meta name="robots" content="noindex">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9p

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 228 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4263
Entropy (8bit):	7.9303525428385315
Encrypted:	false
SSDEEP:	48:zT47+uOS1aIaH/0po78EC1UedkdLfkFrELX+LnKSdW14pNcyUS2HxMbByYZKbzzb:zT47+uOt/OFPlE+tJIDJmbk9bqIjn0jE
MD5:	756B1EA004EEB84A85775C605F388C00
SHA1:	19996C8FA75EB5B9FE03C17CC0C876CDEACBB0EF
SHA-256:	8820BCC8F3572D1DCCC5F2C648B25D6C38CBBC653C5E2AA2FF0A4AB3214ADBC2
SHA-512:	25E7A14AAAD6AC83EBD29C84DCA9FD701A7B10A5E58DC3C20E06F79CF918834DE9035B83B3FC4A62D8B696D0CEBCA4C8B66407629907DF4D62996F4032047AB7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.....v:......pHYs..........+......tIME......1.~}...FIDATx..yT.........LM....RJ..[..H....)..`!....:.q..J...r.........D\..44.P........i........:g.w..y>.g.y.<...""p8....E'..p.....". 9.+....". 9.+....". 9.+....". 9.+....".\..&M.._\|Q..r8/.....<l...P\\..~.....p..U]..wuu........1.+V...K.`cc..-[b.e/:%.....Y.f......?...^tJ..:b.........[JJ...2.**.....",,...2.....[.&M.X ;.>233.}.......4.......V.........+W0s.Lf......h.5"""..'.\|."....JJJ...G...%Kp..q.v{{{...b..h...X....q..f..FAA.....-Z(....c.^..~~~..>}.....dt...qqqZ.6j.Hq.u.9....%\..<y"l.?...=##.).`...v...s...?..C....U..2s.L.1.../..j......q.c.k.e......h.....).EFF...6.........=.......m..>._QQ!....g.T4(--U\|.......)...\|..r..BL.m.UL./. Mj.&&&.w........^xx8....{.n... <<\..w/S~.....'N...A.M....../_..G....?g...+.g..a.K.0n.8l..9.........<y.Dv...rxzz..999.3f.n....0DEEY"U..y.............[.b.Y..).e..;........6.J..prrBaa!. *..V..\|rss.....pvv.i.PVV...U.Vc..puu5:../.k

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25715)
Category:	downloaded
Size (bytes):	864099
Entropy (8bit):	5.434976653687334
Encrypted:	false
SSDEEP:	12288:VmyL3XeZ9vn9W6HMqCvys1IZwiznuxN7WdVlOmf22MdwtdQOS0trdB2WURJUw:VzeZ9vno6HMqCK7ZwiznuxNitBRURJUw
MD5:	21BBC2B00E86BE5510F0E9DD9A710160
SHA1:	20217C7BF3B82C2CCF60DCC21314C4D4D5C69626
SHA-256:	EE6084B045C4CF3136AF565C81C51C15173E6C1C65274E5129C1C47142CC6B45
SHA-512:	03BCE5A264379BD09DC6D7658660DBD4233617309A7255FCC2CB29339244056AD5C00093C65978550E58A8D242C84C5F7009BF820191EFE4D5628673D71E3ECA
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js
Preview:	!function(){"use strict";const{assign:e,create:t,defineProperties:n,defineProperty:l,entries:r,freeze:o,getOwnPropertyDescriptor:a,getOwnPropertyDescriptors:i,getOwnPropertyNames:c,getPrototypeOf:u,hasOwnProperty:s,isFrozen:f,keys:h,seal:g,setPrototypeOf:p}=Object,{concat:b,copyWithin:m,every:d,fill:y,filter:E,find:w,findIndex:v,includes:T,indexOf:N,join:M,map:S,pop:C,push:L,reduce:O,reverse:R,shift:D,slice:$,some:H,sort:I,splice:P,unshift:A,forEach:B}=Array.prototype;function x(e){return void 0===e}function _(e){return null===e}function F(e){return!0===e}function k(e){return!1===e}function W(e){return"function"==typeof e}function K(e){return"object"==typeof e}const U="object"==typeof globalThis?globalThis:window,j="$shadowResolver$",q="$$ShadowResolverKey$$",G="$shadowStaticNodeKey$",Y="$shadowToken$",X="$$ShadowTokenKey$$",V="$legacyShadowToken$",z="$$LegacyShadowTokenKey$$",Q="$nativeGetElementById$",J="$nativeQuerySelectorAll$";U.lwcRuntimeFlags\|\|Object.defineProperty(U,"lwcRuntime

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 414, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47903
Entropy (8bit):	7.986022781025193
Encrypted:	false
SSDEEP:	768:ztoGYi9pQdSDsrJGFCkTi6avUrHMzuk+B+HhCbc/LJF5VSbAXNd6kdEYIWl6sv83:zef2pWSDWJ3k+lcriu/Bwb+WNdkYbnvo
MD5:	53B0E99A49E7D051DDCA5680244EC8E6
SHA1:	8466C94E5749485D544B05B3157CB4F02B51FFD1
SHA-256:	536CFD2B6B247045468E04A61034621D9F3FCAF21BB97BA3666BDF3ACDB568FF
SHA-512:	B18BC8AC3F2F62A0840DF4A770DD7172DE3BDE68D8F9882E0D1044C2E8263D2ABECB125293858E2D82291ECFF72754E65BD942387CAD90BD0294CF6A65F75E53
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/int-export-1-pd.png
Preview:	.PNG........IHDR.............b......pHYs...t...t..f.x....tIME.......P.L.. .IDATx...w\|Uu....).....^..B. .....(8...R.u..ov....utg..3....Xf-...(CWA.@(.{....zSn.\|...... )\|.....-.\|.......9...j"...$..../($1>...i..O...G.ej.^...'91.Y....;&.v..kg.&6..gP..KJ.e.....v./)%..BQ...H.v.4M....h.<.....v..A..P....r$.BCBD..""....4.ZT".#(>..[."j. ....PU]MIi9.......I...+.Ihh...........B.S....Z........n.0....mC.z;e.&Q...].r...FQ.$Ij...p..$.Y....$....p.BC.E..Rjk.@.1.MX&Q..X,.KJ...%""..j.0...%..wF....>....2..>.bcp9.".[...v.4.4..BB.r88_RJn^.Ng...`,...,#I.....pS...i.......SU....n............@..t..b....GMm-UU...+FQT,..EU.E...p.....k..........M..q!..!...h8kv:.8...u.o].>..@@.o.]DA..=.E..Z..\..v{.(v....D.w0F};<.$..t...n....A.G5..1.S...........A.n..5A..A..D... .B. .]..A.:... .....@..A...@.. .. t."..A......... ....tA..A..n.....D.A..7q....%.:....A.Zv....1.U....e.!"..A..ku;...(Jk..\......_. ..pc......,..qq.F... ..".[..... ....+m:.E.\..A..t..Q......w./L..A.........].~3.X.. ....fU.M.l...

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 380 x 460, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21734
Entropy (8bit):	7.949710127418306
Encrypted:	false
SSDEEP:	384:1w8Wqb8su7ia1mlLVohCJi76ZEAnizR2ailtQR4Bv0Q38KKEA5i8zGqR:1niiZ9NZEAniQxi6v/3VKEAES
MD5:	EF30E454ECFB24C87F252D4D0E8972DA
SHA1:	541D875E90F41C561D8CEF35007EC10AE0125D62
SHA-256:	7E42D463EBF158BE67662AA68B5FD2932FCB1EE53FCD6D22441F275E217F860C
SHA-512:	C0A23DD1C1A3919B922BF4DBFA9DA3C7322FE639D5E849114FA503827EC4802EA6A8EDF7932394AC81E0A2C0922519CD10D5A98A4E5052DC4E70C051732CEB4D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|..........-......pHYs..........+......tIME........>H... .IDATx...}\|S..?.O."O....b.....tS..4..h...l....:iP.../..nS..>4.o73...-ql.I...i.......N..V... .....9yn.4...~.x.H.9..I...s]'I....ADD....p.\....e..b..lW........H!..DD...'"R..>..B0......OD...\|"".`...)....H!..DD...'"R..>..B0......OD...\|"".`...)....H!..DD.1%.. "J...`F......v.>.0...+app..........NC..F\.pC6Sa/.....x.....?..v....nL.:....p..g..K..N...3.._..7.x#.\|.!......^...+p.\8t.P.u.L...n...{..`.o"w.T.y..L&.f..G6l.Q]......1u.T.>\|.+W..X..(Sn......k.._._.....F_=..\|.._...8r...;.8..`..>......x;.B.....smm.6;v....7v..J../~.Kl{...-]...{........"L.:...;p......5k...../......m...^x....F\.Q64>....K..jC..G...[^...5.O.3..j.X...o...?......_...~..<y2...........mm8..2U...........q..\g...(8....I..a.%.5k..=.......B.V#''..&q.......w....v..:.S..k%).Yx.a..U......G188._.s....*...\\|.[.RD/......,H..q............\....EEx..q.fd?D.t..s..j..z./.k.7z.Q..2C5.?2...@..&M.%._<..8..~.M.e.]..j.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.5 (zip deflate encoded)
Category:	dropped
Size (bytes):	2226817
Entropy (8bit):	7.993016398634036
Encrypted:	true
SSDEEP:	49152:nMHmvq7rkrwwQMOhTmIzQ7UBY+tnhDSvOGUEcx8enD4H5z0FO9y5KjoOgf:nZSsAMOhTBQwY+tpSVUE48IDE+f5Kjo3
MD5:	ABC0B2781A2FCD4B5E4F4E10C88541CF
SHA1:	DA168B413A73D8BFA69E6EF325AFBAE6BA02E708
SHA-256:	6B40EB760774E9BF6E64C7A5621D85248A09EE3E3B8497F5E66D990E5C2E9035
SHA-512:	D689C9BFE689F9001E6CD74786553BDF2C0F253999D2924E7FD4258ACC13F158403D05E162A53083C12A2F80039377A1F63CCACDF142CCAE186F6B401FD4425B
Malicious:	false
Reputation:	low
Preview:	%PDF-1.5.%.....4 0 obj.<</Type/XObject/Subtype/Image/Width 2816/Height 512/ColorSpace/DeviceGray/BitsPerComponent.8/DecodeParms<</BitsPerComponent 8/Colors 1/Columns 2816/Predictor 2>>/Filter/FlateDecode/Length.26457>>.stream.x..Y.W.=\|.....8....FN@.&.8.`.....$` .3$`F..Q.......O..B.2....\.}.y...z./....`P0...f...........>.......`.....S............f.........s.}..H...........S........d...".............8+....P*W...D.0....................}........D...=d..pz.....,..>{.......@Y\......i.....P..z.=3`.........>{.d..<....@.......g.........\~l.......(..{.=.Y.L....@.,.}...............M............Xi8U.....?.e..c4......"p.}F........c...........}.....=b\|..c......@........z.[..}......../j............o.....#.}.....}.l..S.5........[...........}.....=bw...}.....E.....7....(.z.....@.p.}.6.T....@.\.]~..7....(.z.A.\t...2....c...wvf......l..3.9...p...d.c......C.3..._....z.c............ P..T....../.gx..c..<...d..l....../...M...l<h..9.......Y.3..gw.i.H"......_.I}Q...(.d......../D.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 458 x 468, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21812
Entropy (8bit):	7.9234666660932715
Encrypted:	false
SSDEEP:	384:RI0CH1M9j2Le4/Qu/iiuc98i8NHml1JmClm2zst6/o9mjkyV5Awu+zusNiN1AB:HCH1oSjou/wHNHO1J5KA/bF71NGAB
MD5:	56D5BC49A9D38A79848134E8AABF0068
SHA1:	997B79BF6B4EE621C2D0B16A6EFF247D1E81DA3E
SHA-256:	BDBF4AB14B53E1153AB266A067FEBD70820A452C71846A5C2E83B3C3981E45D8
SHA-512:	B7E1FF855514D0F5B691C3001EC0D69CE58947309C4823CB9053150747BC45C178BD111B053E34C36DCC3AFD188E05C0FBE3C445AC4F5C5D1AFA7FC965BB0C9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............@h7....pHYs..........+......tIME.....$..v.Z.. .IDATx...o...}'.og.y....G...n..n..M.v3.d......]m....N2$....&...:58.......vj.ip..K....e..T\..ujp..:q..X.f=.H...T.{..c...{.....S5%6.<x.R...@....o....Q..9........N}.C.Q....0wt~.AIDD4.{...a.....5'......h.^.CDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT..e.E..)""...m.. .pRU.y..h....q[..bY(..0M.....hv_..bYX.............{..F.....+"...{nf!.a..L...../.F.vC..lB.4.~.m{.....x<F....].Q..`%.......AU..w]..4_......h6../...tM.x<..y.y....]sSA.F.F#h..5.F.^...h....8.V.m.@.T....>\|.....p8.....94.(.\|\.<&".w..2.c..j.Z.Z..:.!.Z..0.q....;......f..m.j.Z..t.n......!Vj5...f..+..m.]..pX8......^.1........L..M.D...8.t:PU.q....Q..1J..f.U....#.c..9...nP\.........y.<...E...!.0.7.=..89.i.l..}..#b..(..;...a.]../.".......2.9.......A.{v.MDtW...E.8.. .][...Y^>.......G....\]]..KKbsssb.G.....8:??....E...=....8[.....#N,,.........xjee.r;A ..bssS.XX..^...E. ....omm.h{....]....;pP.!.I....E

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 450 x 416, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	31571
Entropy (8bit):	7.961915336880122
Encrypted:	false
SSDEEP:	768:vMhqiT5EK2/9nsJGhoFcWreLgReKd1FibVKaCj88Sl:jsFssJLFP6LgReACVKXg8Sl
MD5:	5B34FBB98D7D8AE0D6378EDB45DB90FB
SHA1:	5A5A71702FD0D9CB8FE4DEC650F4CABF60AF5CCC
SHA-256:	DFAB3139A6C7490F57992671DF7165D8FBB98619309F0C9B3CCE1EBE2AB2D9EE
SHA-512:	2EEF0EFF61FA176D897ED664D63B13C856042B51F552B1725EB18E2C697BDBF59CD6D4577C9EDF54AB98E3ED0A20E12C86875F192B838C186DC4E5EF8CD06AB7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............9$g.....pHYs..........+......tIME......4.Y!... .IDATx...w\|.U......C.!..U ... MT...]t-.b....uu}....V.!...^..J !..H.......D.~....f...so.;gf.D..R.!..>J.KW@.!..%I..!..i..B.!\|....B..&A(..... .x<......B.!......./...3~...r...lx...}.?5.......!...{.. .x<..r.q.Ff.Abb"%%%.5.....ZOYY..6l`.U.........0i.V...l6.eee...p........EEEL.>...........<......7Ds...?......2e..'O.d21}.t...q....G.}....9.w8.L.>...S[[.F.A..3q.D.\|.A.i...w..o.........?...3x....E).F..h.N.6....&N...c.;w.._~9yyy......_..B.!...\|3-..k..W.^.....[oq.....=..o..={x...4i.{....t..x....].v..5s.L.{.1....3f.F.....3}.trrr......`0`2.0..?.....s..AF..E....zy^....K.6m...g.)..8..N.^....)4..B...7.u:...>[.l..f..<.....K.......X,..,X..E.p..X.V...z.x....vf.A.n....O......[o%&&..^z..?..)S...j..t.t:...X.f.!!!dee....~...._....2..."z..M}}=......S]]..n'.....:...IHH ::......l..d....$''7.w....S.<xp...r.x.......6.9.V[[.u.(...S.N....??......5p.8..Oim.h.$..$!.\|..[.+.F.......i...h./+..

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 262, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17040
Entropy (8bit):	7.958569114763627
Encrypted:	false
SSDEEP:	384:Kzvc5mnwhrDVqPtJsB9GNdHaBznbL4Lp+NCgAHBvTbYhtf9:KzE5xVLBo2ZbLk+YgAHyhtf9
MD5:	746ED54B943155B2E98A41DF572C0EE2
SHA1:	8BE3EFEC9E54E8E03B2AF8C4734715659440BB68
SHA-256:	D1B6C1A6A3476A910D709DCD3271A135894FC1562CAC9A843190DD472423DB97
SHA-512:	A9ABB3D024D930A59015C98E59FB799F315DD1C5829C67E4A94C231DA202CA95104989D6912EF83143CD7EFE0252532A619D4F3A11FD7AB0F02BCBE26BC27826
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-5a.png
Preview:	.PNG........IHDR.............K......pHYs..........+......tIME......2..... .IDATx...y\|T.....5.}_HH !l..... ......bmm..j..~]....VQ.Zw-. .../..[.@ .I..If.s..)...S..........sg..{.wFKNIQ.!....b.X.v...B..i_/[&=.!...MSJI..!.8m..].!..?N. B.!.".".." . B.!.".".." . B.!.".".." . B.!..P.8.N........t}..B.H.r.........o.AhH....'''..0Nk.>....V.N'....kjj......N...R.].O...(..g.k.A.u...y.'x..7.z.g..B.qF..7).....+.0h.@.......s.M7.==.....6...~.;....y...e.^.....&O..ms..kW....y..g...[.z...Zw..].....S]S.a.h......F.~..........}......y..w.8p .....Y...B.i'....r.kj../.%%,_....=........[...%....S^^.R...........?..9..Frr2.'L.d6SZZ.y.X.t)......(.0i.&..c.....\|...tIL$%%...Y.....b.!......2.L&....B.qF..X.l..7n.((P...j....P...T..G]w..,<\..8QM.:UM.4I..?^}..'.-.0.5x...7+K.........S....{...S...W!!!.?.Q).TYY..y....:a}...6o......kllT.a(].U}}..z..........]UU..l.....).........k...\|>..z......y.^e..r:....X).TAA.....n..F..ru...\m.U....-.B.....@F..A\|\|<.=.....?....2x0.\r.J)~r.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65441)
Category:	dropped
Size (bytes):	109321
Entropy (8bit):	5.1690159357953345
Encrypted:	false
SSDEEP:	768:BgJFlicc3KkUi0INGte2ni2TGIl9HBhIswvQEoBOLV2rZl+9R+2pxVD7+s5tzmM6:NbRU5WGPa7Rbtz3BnWmz2Mf4Zy6J
MD5:	25354AA40F703E32ABE2C174C180CAE9
SHA1:	ECF7F72DDF46E7A732FFE0936BC3A99630E9E52B
SHA-256:	96BCA299AE880DD6875FB78F0FD8890C093F9B7AD7DB653450689DFC73523415
SHA-512:	ECA38FD897108A7C9A3AC030E1861E9E7B0C6BA483293E804DB26A59A46D2CE95973D2FD2BB5DEAD49E62D4C6DC6AE1047C2664FFCC4AAD3E30787318D3DDF32
Malicious:	false
Reputation:	low
Preview:	window.instanceOf = window.instanceOf \|\| function(arg1, arg2) {return arg1 instanceof arg2;}; .!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).coveoua=t()}(this,(function(){"use strict";var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};function t(t,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function r(){this.constructor=t}e(t,n),t.prototype=null===n?Object.create(n):(r.prototype=n.prototype,new r)}var n,r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},r.apply(this,arguments)};functio

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89947
Entropy (8bit):	5.290839266829335
Encrypted:	false
SSDEEP:	1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL
MD5:	CF2FBBF84281D9ECBFFB4993203D543B
SHA1:	832A6A4E86DAF38B1975D705C5DE5D9E5F5844BC
SHA-256:	A6F3F0FAEA4B3D48E03176341BEF0ED3151FFBF226D4C6635F1C6039C0500575
SHA-512:	493A1FE319B5C2091F9BB85E5AA149567E7C1E6DC4B52DF55C569A81A6BC54C45E097024427259FA3132F0F082FE24F5F1D172F7959C131347153A8BCA9EF679
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/1701464332000/CoveoV2__jquery/jquery.min.js
Preview:	/! jQuery v3.6.3 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},S=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|S).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	4.641545216684304
Encrypted:	false
SSDEEP:	3:7M9v0TviuHf8X6iyPzunS6winPLUGTaY:EsTvyqio6SWPLfTaY
MD5:	6D036A8650C69F87B3C418CC60E00B14
SHA1:	B380E314F9FBEDE61F492BF8515931CCAF7C2477
SHA-256:	033B9E67AE05C9DF6D0D3C6891D5E1C3A3CCBD97EF4703D954920B862CEEBB22
SHA-512:	5D391344E83A4F0CAB6D389FA2E9981025A4FC84DB7126C2085E7A43A54BC6086DC6FD0288DD9A97D26A5BF8F7165C67EABE166BE8D155D698CD43C1DC57763B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSOgn-s1QUfHMZaRIFDaqQk_QSBQ1JQK9JEgUNPSy82BIFDQ5LEYESBQ2UVPrPEgUNeG8SGRIFDeLVy_M=?alt=proto
Preview:	Cj8KBw2qkJP0GgAKBw1JQK9JGgAKBw09LLzYGgAKBw0OSxGBGgAKBw2UVPrPGgAKBw14bxIZGgAKBw3i1cvzGgA=

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	485833
Entropy (8bit):	4.878829612109462
Encrypted:	false
SSDEEP:	12288:eRjNz10tW0E98EsgQJzd0daqnbCKZr7zw/edb+MRvUpfyvMDunQAjpMnIJqj7b58:E
MD5:	3B8E80B81334B072084E8912D615E5A8
SHA1:	4B58FFA0DB3D334979DE83BE400DF8776A31E6B3
SHA-256:	1073AF122BC1115327C49A85FBE9D980B9AAE3AEBF52F95EAB039A3CD1B3003D
SHA-512:	82768F521773D736F6991562E64D0478DEB80D35101F2A68E1CC9EF4A4B7FADFDEABB888E54954CFCDBD2D03DCA34358FF368DA0D97881FA882262FB9C04CDEE
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/1701464332000/CoveoV2__searchUi/css/CoveoFullSearch.css
Preview:	.CoveoSearchInterface.coveo-small-tabs .coveo-dropdown-content,..CoveoSearchInterface.coveo-small-facets .coveo-dropdown-content,..CoveoSearchInterface.coveo-small-recommendation .coveo-dropdown-content {. padding: 0;.}...CoveoSearchInterface.coveo-small-tabs .coveo-dropdown-header,..CoveoSearchInterface.coveo-small-facets .coveo-dropdown-header,..CoveoSearchInterface.coveo-small-recommendation .coveo-dropdown-header {. font-size: 12px;. display: inline-block;. padding: 0 7px;. height: 22px;. font-weight: 700;. line-height: 20px;. letter-spacing: .09px;. vertical-align: middle;. white-space: normal;. color: #1d4f76;. cursor: pointer;. text-transform: uppercase;.}...CoveoSearchInterface.coveo-small-tabs .coveo-dropdown-header ,..CoveoSearchInterface.coveo-small-facets .coveo-dropdown-header ,..CoveoSearchInterface.coveo-small-recommendation .coveo-dropdown-header * {. display: inline-block;. margin: 0;.}...CoveoSearchInterface.coveo-small-tabs .coveo-dropdown-header li,

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (626)
Category:	downloaded
Size (bytes):	20598
Entropy (8bit):	5.250606050130313
Encrypted:	false
SSDEEP:	384:z2xKWxhNRO7CyqyqBFWT0dKEavqpfVzZTOODvK:zAhrcFNqDWT0d4vEXK+C
MD5:	D51F65C97A64B987C9D19EB712F89743
SHA1:	82240387754B9788E0D5BA4F067FE98A6FCB9EA4
SHA-256:	1DF96AFF7C1A0B4A1F03D51EC741DF8D542FCF32EDDEE1A0295068E4A7F0017B
SHA-512:	29254C5E8FA61A58F366CB50EFE284BD61ED14C13BD843810A9224F29F697B81278C034947399C42242114DB80062E24207AFF7569164FA3A8DD4074F4926A29
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/client/liveagent.esw.min.js
Preview:	/. Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. ./.embedded_svc.defineFeature("LiveAgent",function(b){function r(a,c){this.name=a;this.data=c}function k(a){this.liveAgentAPI=a;this.running=!1;this.pingScript=this.pingTimeoutTimer=void 0;this.sid=b.getCookie("liveagent_sid")}function l(){this.createElements();this.registerMessageHandlers()}function n(){this.visitCount=0;this.originalReferrer=void 0;this.pages=[]}function g(){this.connection=new k(this);this.fileTransfer=new l;this.visitorInfo=new n;this.browserSessionInfo={};this.INVITATIONS_CONTAINER_ID=."esw-invite-container";this.INVITE_RESOURCE_ID="esw-invite-resource";this.INVITE_API_ID="esw-invite-api";this.inviteButton={};this.hasInvitationsLoaded=!!document.getElementById("snapins_invite");this.isInvitationsRendered=!!document.getElementById("snapins_invite");b.setDefaultButtonText("LiveAgent","Chat with a

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 450 x 416, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31571
Entropy (8bit):	7.961915336880122
Encrypted:	false
SSDEEP:	768:vMhqiT5EK2/9nsJGhoFcWreLgReKd1FibVKaCj88Sl:jsFssJLFP6LgReACVKXg8Sl
MD5:	5B34FBB98D7D8AE0D6378EDB45DB90FB
SHA1:	5A5A71702FD0D9CB8FE4DEC650F4CABF60AF5CCC
SHA-256:	DFAB3139A6C7490F57992671DF7165D8FBB98619309F0C9B3CCE1EBE2AB2D9EE
SHA-512:	2EEF0EFF61FA176D897ED664D63B13C856042B51F552B1725EB18E2C697BDBF59CD6D4577C9EDF54AB98E3ED0A20E12C86875F192B838C186DC4E5EF8CD06AB7
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-plan-account-info-1.png
Preview:	.PNG........IHDR.............9$g.....pHYs..........+......tIME......4.Y!... .IDATx...w\|.U......C.!..U ... MT...]t-.b....uu}....V.!...^..J !..H.......D.~....f...so.;gf.D..R.!..>J.KW@.!..%I..!..i..B.!\|....B..&A(..... .x<......B.!......./...3~...r...lx...}.?5.......!...{.. .x<..r.q.Ff.Abb"%%%.5.....ZOYY..6l`.U.........0i.V...l6.eee...p........EEEL.>...........<......7Ds...?......2e..'O.d21}.t...q....G.}....9.w8.L.>...S[[.F.A..3q.D.\|.A.i...w..o.........?...3x....E).F..h.N.6....&N...c.;w.._~9yyy......_..B.!...\|3-..k..W.^.....[oq.....=..o..={x...4i.{....t..x....].v..5s.L.{.1....3f.F.....3}.trrr......`0`2.0..?.....s..AF..E....zy^....K.6m...g.)..8..N.^....)4..B...7.u:...>[.l..f..<.....K.......X,..,X..E.p..X.V...z.x....vf.A.n....O......[o%&&..^z..?..)S...j..t.t:...X.f.!!!dee....~...._....2..."z..M}}=......S]]..n'.....:...IHH ::......l..d....$''7.w....S.<xp...r.x.......6.9.V[[.u.(...S.N....??......5p.8..Oim.h.$..$!.\|..[.+.F.......i...h./+..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32585)
Category:	downloaded
Size (bytes):	149668
Entropy (8bit):	5.3343613246873
Encrypted:	false
SSDEEP:	3072:vyMbbUdceuBi6u3bJ0QVtfuBYnWUkqMCsAb9:6mUTuBDu3bJ0GtfPWUkqLDb9
MD5:	CDF38374CD5EDD4C945ADF376080E18B
SHA1:	6E6D71303E59812E5ACD1E9D0062F11F5B820F11
SHA-256:	78BB23FA7FFE0D40D6E9D3FBBE3219B14AC4F84AB8B8A2DC29CD7C42755DE28C
SHA-512:	7BECC13DB4071DF52E98F0CC495415B97FD4A8E879FA8AA68EB2FAD23E791546EE7443C9EA5F4BF8EDB43A552145705A2480D3789013F7EF3AE9F144564A92B7
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/1701464332000/CoveoV2__assets/js/lightning_search.bundle.min.js
Preview:	var c4sf;window.Coveo=window.Coveo\|\|{},function(){var o,a,i={4736:function(t){t.exports='<svg viewBox="0 0 13 13" xmlns="http://www.w3.org/2000/svg"><g><path d="m0 .05446421 13.2302246-.05446421-5.1328965 4.82505531-.12313645 8.31155399-3.31868579-2.5443468.14271201-5.71511099z"></path><path d="m0 .05446421 13.2302246-.05446421-5.1328965 4.82505531-.12313645 8.31155399-3.31868579-2.5443468.14271201-5.71511099z"></path></g></svg>'},8558:function(t){t.exports='<svg version="1.1" id="Calque_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 90 78.58" enable-background="new 0 0 90 78.58" xml:space="preserve"><g><path fill="none" d="M66.024,56.591c-0.014-0.199,0.001-0.395,0.014-0.592c0.006-0.093-0.001-0.188,0.011-0.279 c0.02-0.148,0.064-0.289,0.099-0.433c0.031-0.131,0.05-0.267,0.094-0.394c0.031-0.092,0.082-0.177,0.119-0.267 c0.07-0.167,0.133-0.337,0.223-0.492c0.068-0.119,0.159-0.225,0.238-0.338c0.081-0.114,0.151-0.236,0.242-0.341 c0

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 414, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48081
Entropy (8bit):	7.984333300874881
Encrypted:	false
SSDEEP:	768:ttoGYi9pQdSDsrJGFCkTi6avUrHMzuk+B+HhCbc/LY0WWe2WM7z/ZJdg5qhE:tef2pWSDWJ3k+lcriu/Bwk0ZeQ/ZJdZ2
MD5:	F6E84B27277D5F41A814C262E432558A
SHA1:	F3D91D6FE65A55069BBFA3A9DD54D61C6D97FAB5
SHA-256:	DE32D14B9FEC892FBE37FB461E49CACDCCDE2CBE7C47B7DF232F9B8A94F73E03
SHA-512:	5D639529ADEAE9EBDF04289C837E29522D53C88DAFBF62B1B319A21A0BAC4B61D4C3F9026E6FB488D3C4919C47365D745E3BF1C8363A98E6554F6E396273F2DD
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/int-export-1-sf.png
Preview:	.PNG........IHDR.............b......pHYs...t...t..f.x....tIME.....",.E.u.. .IDATx...w\|Uu....).....^..B. .....(8...R.u..ov....utg..3....Xf-...(CWA.@(.{....zSn.\|...... )\|.....-.\|.......9...j"...$..../($1>...i..O...G.ej.^...'91.Y....;&.v..kg.&6..gP..KJ.e.....v./)%..BQ...H.v.4M....h.<.....v..A..P....r$.BCBD..""....4.ZT".#(>..[."j. ....PU]MIi9.......I...+.Ihh...........B.S....Z........n.0....mC.z;e.&Q...].r...FQ.$Ij...p..$.Y....$....p.BC.E..Rjk.@.1.MX&Q..X,.KJ...%""..j.0...%..wF....>....2..>.bcp9.".[...v.4.4..BB.r88_RJn^.Ng...`,...,#I.....pS...i.......SU....n............@..t..b....GMm-UU...+FQT,..EU.E...p.....k..........M..q!..!...h8kv:.8...u.o].>..@@.o.]DA..=.E..Z..\..v{.(v....D.w0F};<.$..t...n....A.G5..1.S...........A.n..5A..A..D... .B. .]..A.:... .....@..A...@.. .. t."..A......... ....tA..A..n.....D.A..7q....%.:....A.Zv....1.U....e.!"..A..ku;...(Jk..\......_. ..pc......,..qq.F... ..".[..... ....+m:.E.\..A..t..Q......w./L..A.........].~3.X.. ....fU.M.l...

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 394, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50389
Entropy (8bit):	7.987116407157837
Encrypted:	false
SSDEEP:	768:FzxlRE3PK8+fGd6B4PAJS8SvYaFJ7c1DYxsaKAKhErrrIFcU19Bwen7sVXLG8+t:F+/fuY6iPAoNvYaFdcaua7vrrpUhsVm
MD5:	81A49E7151598EE40CD3BB61714ED9A4
SHA1:	0F9B4BF765D251CFDD9EEE8ADD126BB9E63F8DA8
SHA-256:	1B14CC05DC28F732C76895BFCEF4CD0CC8BE230EB8E093DE23F26E46AF488DE4
SHA-512:	EB1C38A625C059FD5F9538C612F5F91A2E52814D82C4F56F4836D35F293DE1516A6F459CDE84CA74DE637EEE99EBD38272825B16426F6DDA18A5AEB0E08D50CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................;....pHYs...t...t..f.x....tIME.....,mV.... .IDATx...y\|T.....Yf.d.C...@.AA@@.A..^.]..^...Z...zo.Ck.n..E\Apa...UvP.$.!.....v....)...`B.<..@rf..g....,.s..^x.D..$I....EQ....0LLS.u. t.I..$..J.E!&.C......N_lL4~....jdIB..... ..)Y..GyE%H....t...~.0M.I....E..J...i~.EA.....D.$.E...RRV.,....`...y...~.i....l.+ee....c.&.,#..wA..9I...1.nP]SKEE%AN..1......P....9.......rQW_Osk.......bAUU.E....p.3M..0.....>..n<^/6....8.6+........(.0..$....ziii......K.+..p.H....a......j.....nE....0M0MlV+..(......u-0.^. .?...vUQ.XT$I.0..C.yw$...0M.]...X._<8vl-..pv..qn.a.z..F85..=.>........p.....A......... .=..tA..A..D... .B.......A..Lb..3s....lA.......".;...].. ...'..9.}.....A.N.w3.b..n;(.4M.. ...r1...^....\. .B..S.E.z.]].v... ...5zl.w....e..A....2.....(J..@.. ...UzR.wY.. ..A..........sE.@.. \8~.5M.G...>..\|.].NX..7K..A..s._..s.G....Z.i.Z. .B.;. =..\.5.....L.X.. ...\..~.Z./.P.Q....../.[...g.l?.Y...P.PC.[..;{.O7.E... \.N....../.P.~6a..\....9......B..u..

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 362 x 505, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19504
Entropy (8bit):	7.913752785739381
Encrypted:	false
SSDEEP:	384:HQL5Wt5YeEaAf2f02A7hgbiKL6qhbo3DnhfA7mIc2AME2:wLGYeEaAfIlehBKo3DhfdIc2O2
MD5:	6D3D8F95FDAD1050AE9430F245C201E0
SHA1:	06EA88B6F4F0D16168452CE20B4B493069B61425
SHA-256:	B9DC7B6C452772AE6C12A51721CA1057F572709C9020A1EA971097B5DE125FCA
SHA-512:	EDE857254213F622651465F1252F19D67D7EFC984879F356D870EDA3E7B5A5A6E1E8498156A30CAB02458A397CA877DF0C33224D8B16A4A2F5D717847698B550
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...j..........t.....pHYs..........+......tIME........'... .IDATx...Ol..?..~....(.h.&..4.1Pe]...5n...0.H...$..h.......)l."..b..b9.".]...q...h.$.S.xwF@T....wP?O.CR.l......l...g.~....K.$...i...u...ho..DD.c.&"...5...)P.J%....T.""...zuu.....B....H.{ggg.uo..s.....3.j............KED'.......u..Cx...u...........p8D.T....s....sx..Wq..U....$....<...M..<.a..V..R....8f.&.g.........{.......{.7o..+WP(.......U.A.^.w...J%....u],.......z...V..`.....b..e.V.aaaa.%#.S+..w.}..r....%I.$.m'.....&I.$.B!.0.'.g}.......h..v...u....).w.}..{7.....n...;.o).._....F^K.$..zI..I:.....F. ....o....DQ..:...j?.,..677G..AM{.eEQ.....4....DQ..{m..:g.?...d..\...7n......u....B.....zx.......I.q...%.=6..y...y.....[oaccC..C)o....^..R..s..a}}...S.;w......7o..W_E.T.Y.T.R..R. ..#....g...P..&...1J...\.0..z.~.....y....:...B..?.rA.Ll.q..x_...>\|.G..j.0kZ...s-.q.c.^.z..8F.E.u...}........;w.....#AX.....H......a.6n........{.m..\......=VWW...P(......W....../.\|?...[X^^........

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 912 x 652, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48317
Entropy (8bit):	7.958100862347455
Encrypted:	false
SSDEEP:	768:wRe5h/s9UK6q9VsqL47c69cXRpjwhrz4XEEY0Og/EsFCpgtTA:wRe5FrK6q9Vsquc635EXU0Og/Es/M
MD5:	035FF87F9F4D78FC44FFE80E6CA000DA
SHA1:	FE3B3902119B8EF079E567A29AC397EC75357E13
SHA-256:	024B9D14AF18E013485F5CBBFD9BB640B6891BC34CBAE319700619AEFF9FEACB
SHA-512:	FE034A0002C0CF979F7DC85BBA862A57C1EEB69E48B6C69F486A92A5067E1B6A92A443664403B2C2719F0F2CAA5087D81E3CF91A37DF3BAE026A8446E5130039
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............../Wp....pHYs..........+......tIME.....'..E.... .IDATx...{p.././....e[.C..e.c..dm%.r....-.N.VF.v...?Vc.Uq....U.....LQ.M.L.x....7.......1...Q,.&.l.H...%Y"A=,./....f7.x.O...b.ht.>.D.....266........(..\|g........C.......:.DDDDDDT`v..mxm1k...o\|#g.""""""........MX......().MX...r..""""""p......u>............^..+......%..$......%..$......%..$......%..$......%..$......%..$......%..$......%..$......%.,.. "Z-&.......S.....y....V[kE.....j.Zk.sDDT...@.....l...er.+..<v.........oV.+...T .........{..S""J.ellL.\.........V..x.r.r.O".L.<6....o.~.;...$..9w.......}..$"J.....u^.@z{z.(..N'.p@.K-..him..>sM.$.y..\|him....c....w...q...g.HTD..~..u...............6a..\|p8....e.>.....6.M..t.\8...,......k.l6.\..Z..'IR....$..-....$I....!8.N..I..p8..U.U......./....Q.\....;. .MZ.............!.;;a..`......W.l...z.........r.p../.....7.1F:....MEQ..-.5..#......;u..V+[...%)...,.....s...v;<G....F...I...N.F:.N.....0r?"x.x<p.j..E....>....`xh(.G.{N...#G..w.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	135929
Entropy (8bit):	3.759329381953854
Encrypted:	false
SSDEEP:	1536:3w5+TvBZ77SUdu79P2VQibeN0dQVTW5Zqw:3rtiPW5Zqw
MD5:	47F2F25434F3D981C26883D1B2AA37B8
SHA1:	98AF8760A2F45AC746D318412AF0BD2F12C4DF41
SHA-256:	FD7AF54F272C712955803B375080693CBD26E0C736706C16F4093121B3EF5827
SHA-512:	6FB152F97E3911A44337E8B2EF2CCB5888F96837DE47489818BFE6663136CDB10A86AD679FAE900A0DFFDC597D9BBB0B4ABC3DF3B9F4BC4F4C05A254ECCFAB46
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/sharefile-app
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>ShareFile apps and integrations \| ShareFile</title>... <meta name="description" content="ShareFile integrates seamlessly with the software you love so you can automate document workflows, securely send files, and sync work across all your devices.">... <meta name="ctx_product" content="sharefile_main">. <meta name="lastModified" content="February 15, 2024">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm-u6_UtwuyIN3fURpkBgy4E">. .. .. <link rel="preconnect" href="https://consent.trustar

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 550 x 309, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	71175
Entropy (8bit):	7.991332068997466
Encrypted:	true
SSDEEP:	1536:8PRhFlIpWev6f0w7Gllh3f0d6tF8vfUDY9bh9Zu+pAat:wZ46PKlh1tF83UD4bhjAE
MD5:	AA1E23FCFA54D87281B257694073D52A
SHA1:	1C48F3C0D0093FCC1E6B960778BA1F30CDB2254D
SHA-256:	ABB0FEFCD7BD7A0E620F6F6676DE3A8AC5A4A3C7E08CE0D187BCB992345E072A
SHA-512:	227DCF4D1E297E07EF042E2861F5BA741A5B73AC2C0EEC39797BFBEAE64BB4B71C6EBBF6B8025F825654EC4A8F64E38307408301CEE683C733B96BDD14868A53
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/catalog-1c.png
Preview:	.PNG........IHDR...&...5......d+.....pHYs...t...t..f.x....tIME....."...H... .IDATx..y\|.E....&.d......I.YT.e.E....p.Qq...7........z..q..:8 n.,"..n@....d....}=9{...&..,.....r.]].tw..O?.T.4k.,..@ ....FQ.\.....E..}B7......@0.$.E..[F....9..!L...@ ..t:......=..j.0....D3._.dy.-.\,h4RGW.....B....Sbm..[.i.-.!.H...JH..v..F...O.a"..N.F.5.2m-....5=CQ@.........9....B....."...0..r..D .L.a"..N.$...5......'B....."b.....b..h...@ .\0.a..4.........., .I..h4......&f.........-k..H.mmV.....-B.....@.hSSS..h#..."...y...eg.n........3.........C...N4.=E...Jrr....*..s?5.U....v.~.......@p\|[p1......h......(2..-DGG.^..{.....qr.rt....D ...'.k.r.k..^..h....Z.VU...\|......CTU..l6...!I?...!....AO.=.........E.`0..........MK.....RVQ.....4......mC..fD.....F#--.<...q.W..'...$.n...}i....v=.....B........tFxLz.F.A..<..o..;6......c....t......!.Y.w..........Z..f.O....E.....HF.p....`$ ..Y..K;8..`.[ ....`.B(.2(....1.!..........v..ob....5t......`.[ .....Z..V..GxLzA./I...A]..D..s^(.Z ...J.y ...B..a...MQ

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	4.814605475513043
Encrypted:	false
SSDEEP:	6:QBizqEpiMKQLzLe6YXirblaquI1n0YlMKCdxvABmQkR6F9UY4HX4QL:F3Ur6YXuam107lxYcQkmp4IQL
MD5:	67929C7677F9D190A7DE7D783D35F3AC
SHA1:	6EA3F35FAE00CC4AFCCEE5A3D1F542DD5E9778B2
SHA-256:	F0FD989D3D400AF9D0E449AECF31CEF85E4ED7394306B79F8D8FDE69BC907750
SHA-512:	B6CB77B6B6780173C97A57207496AC97A54EA1072BEB1E5883DE9925B71F1530C20337F907D601FD562D4CC591F73857677876175FF11D95F62D0FC7AD50A38E
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community
Preview:	Shared document for Embedded Service for Web hosted in Salesforce domain. -->.<html>.<head>. <meta http-equiv="Content-Security-Policy" content="script-src 'self' .salesforce.com .salesforceliveagent.com .sfdc.net .salesforcescrt.com .salesforce.ms .salesforce.mil">.</head>.<body>. <script type='text/javascript' src='eswFrame.min.js'></script>.</body>.</html>.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1049), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	65231
Entropy (8bit):	4.807949616878959
Encrypted:	false
SSDEEP:	768:cS4lRhM9j46YuU81BJglKqfN0SzD5VS2PWe6ZqxJg:ATu7neN0Q5VTW5Zqw
MD5:	1DE5D94B2CA69923179D43192EE19B51
SHA1:	04C6C84C89CA332E705FDC2B78231D0E207DB315
SHA-256:	FBDC693E7406F0CACFC8B0E19FF6710534D5C61195EB00A9B4CC6E297E5D4BD6
SHA-512:	87C685104E5AE1D873EBAC63BADF5ECEDA4A9F8A2050EBF57AA59C5EDA5DAE213F2E09F88E48BC8EF7A3D67D943A3F2F8B887DC700C1EC42D2CD8C82F0117383
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controller
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>Storage zones controller</title>... <meta name="description" content="Storage zones controller 5.x.Storage zones controller 4.x.">... <meta name="ctx_product" content="storage_zones_controller">. <meta name="lastModified" content="February 25, 2020">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm-u6_UtwuyIN3fURpkBgy4E">. .. .. <link rel="preconnect" href="https://consent.trustarc.com" crossorigin> . . <link rel="preload" as="style" href="/assets/main.css">. <link rel="styles

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.6249388141473196
Encrypted:	false
SSDEEP:	3:PSEO9djiCkuv0TviuHf8X6iyPzunS6winPLUGTaY:q9djiCkusTvyqio6SWPLfTaY
MD5:	4327D0BCF4FEA8D87BAF3F810740EEC9
SHA1:	BF435A032B580D34811023211CB384565A6E7054
SHA-256:	169DD520C39718E286A030101401AFCD0E54286128F2710AA717BE66B060BFBC
SHA-512:	CF3F3C7D6EA88381969F57385CF80474F460A161672333B2B8555BA056ADA114CA6F7A2DD107069160A4316ED64BED9FE33E96246BD1A7510E3B507EA2178CF2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSQQmORILlC8DlFhIFDaqQk_QSBQ2q_QvFEgUNSUCvSRIFDT0svNgSBQ0OSxGBEgUNlFT6zxIFDXhvEhkSBQ3i1cvz?alt=proto
Preview:	CkgKBw2qkJP0GgAKBw2q/QvFGgAKBw1JQK9JGgAKBw09LLzYGgAKBw0OSxGBGgAKBw2UVPrPGgAKBw14bxIZGgAKBw3i1cvzGgA=

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 262, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17040
Entropy (8bit):	7.958569114763627
Encrypted:	false
SSDEEP:	384:Kzvc5mnwhrDVqPtJsB9GNdHaBznbL4Lp+NCgAHBvTbYhtf9:KzE5xVLBo2ZbLk+YgAHyhtf9
MD5:	746ED54B943155B2E98A41DF572C0EE2
SHA1:	8BE3EFEC9E54E8E03B2AF8C4734715659440BB68
SHA-256:	D1B6C1A6A3476A910D709DCD3271A135894FC1562CAC9A843190DD472423DB97
SHA-512:	A9ABB3D024D930A59015C98E59FB799F315DD1C5829C67E4A94C231DA202CA95104989D6912EF83143CD7EFE0252532A619D4F3A11FD7AB0F02BCBE26BC27826
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............K......pHYs..........+......tIME......2..... .IDATx...y\|T.....5.}_HH !l..... ......bmm..j..~]....VQ.Zw-. .../..[.@ .I..If.s..)...S..........sg..{.wFKNIQ.!....b.X.v...B..i_/[&=.!...MSJI..!.8m..].!..?N. B.!.".".." . B.!.".".." . B.!.".".." . B.!..P.8.N........t}..B.H.r.........o.AhH....'''..0Nk.>....V.N'....kjj......N...R.].O...(..g.k.A.u...y.'x..7.z.g..B.qF..7).....+.0h.@.......s.M7.==.....6...~.;....y...e.^.....&O..ms..kW....y..g...[.z...Zw..].....S]S.a.h......F.~..........}......y..w.8p .....Y...B.i'....r.kj../.%%,_....=........[...%....S^^.R...........?..9..Frr2.'L.d6SZZ.y.X.t)......(.0i.&..c.....\|...tIL$%%...Y.....b.!......2.L&....B.qF..X.l..7n.((P...j....P...T..G]w..,<\..8QM.:UM.4I..?^}..'.-.0.5x...7+K.........S....{...S...W!!!.?.Q).TYY..y....:a}...6o......kllT.a(].U}}..z..........]UU..l.....).........k...\|>..z......y.^e..r:....X).TAA.....n..F..ru...\m.U....-.B.....@F..A\|\|<.=.....?....2x0.\r.J)~r.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11058)
Category:	downloaded
Size (bytes):	12420
Entropy (8bit):	5.4220034884046004
Encrypted:	false
SSDEEP:	192:lRQv1zxc5BOYyVjZ7q+8owKApta6MxytgylRs:m4loOQIs
MD5:	7B65EFD0E8D6B62D9894044AD39C2E2D
SHA1:	D557C531D63D400925CAC3225AFBC9FD9D236E62
SHA-256:	525386FAD75A56F8AF10451E0E3B0C1C4AA0EB13299BA1D81C7CD3BACC127C54
SHA-512:	ED5964CCBD1A11641418D219860F3AFC7FCA2E390014FBDA238AF67E0549D2E3E3D00634C10EEDC4EC99AFFCFA531FFE20F23C011222392E0C717C74A373A61E
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22-lAyjg7Rz5q_SREY4hPdNA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwMDBlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=1714065450000-294613071&rv=1713445683000
Preview:	'undefined'===typeof Aura&&(Aura={});.(function() { .. function initAccessResources() {.... $A.componentService.addModule('markup://force:customPerms', 'force/customPerms', ['exports'], null, {}); .... $A.componentService.addModule('markup://force:userPerms', 'force/userPerms', ['exports'], null, {}); .. };.. if(Aura.frameworkJsReady)initAccessResources();else{Aura.beforeFrameworkInit=Aura.beforeFrameworkInit\|\|[],Aura.beforeFrameworkInit.push(initAccessResources)}.})(); .Aura.StaticResourceMap = {"UtilitySound_Zoink":{"nwcs_ldl":1696267866000},"AngularJS":{"SBQQ":1707555905000},"getRecordsForUpsert":{"DOZISF":1696268095000},"Reassign":{"sbaa":1696272799000},"UtilitySound_BambooFlute":{"nwcs_ldl":1696267866000},"Busy":{"nwcs_ldl":1696267866000},"Extended":{"nwcs_ldl":1696267866000},"updateRunStatusDone":{"DOZISF":1696268095000},"DefaultRecommendation":{"CoveoV2":1701464332000},"sb_ms_js":{"SBQQ":1696272614000},"UtilitySound_Bleep":{"nwcs_ldl":1696267866000},"Clock":{"nwcs_ldl":169626786

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 338, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39752
Entropy (8bit):	7.975615266836873
Encrypted:	false
SSDEEP:	768:alBNBKVt6LUS3LGz55s1IqKSSgzbdkzmRMQH:alDBKfjrHAWIbOKx
MD5:	20E6B87B28B75A5CC64747251667D1C8
SHA1:	88D3DFA5B54C3C50D9CD7ECC3386536B13C3F029
SHA-256:	2D2020C1F9D222551467D6538653A0DA29CFF68F5009436424E53D21E8F22D48
SHA-512:	B7273337A342F7738B3DD7F9EE79490C4EBEF9049460B6FDEBE9800FF9746BC45541609D2BF8028A051B9FCF5B45D794EA96926564EAD2EB698807CC2F480B3D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...R........'....pHYs...t...t..f.x....tIME.....)..w... .IDATx...wxTU...........I.Yi..@E..Vtu]].]{.....Vl.E."....H ....3..L.9.?.Q..A...yx.....7wf.}.{.=W..\|......SQQ...GQ.$I.$I...(8..bcc.....=j.Jyy........N.C.V.$I.$IGF......x.{.]...v.R.0..':6I.$I...,EQp.\.\|>...'T..I.$I.$.!3+I.$I..^&.,I.$I..^&.,I.$I..^&.,I.$I..^&.,I.$I..^&.,I.$I..^.9..H.tp.......?.H'...B...jOt(.tR;..`....V.III...J...f..l.@..Rd.Y:v~!.z=..... BCBNtH.tR.............&,,...Mdd.1ms..tuuq....R.........v;..-b.Y$&&...D}C#...........t.r:]...a..H..G...J....k..?.8555..?.!**.9s.`...l.r.u........<x0....K.a...=.?..S.s.=...!..~n....O..I.z...?..o.....bccy..'...b.......O:...7..jIIJ..t...z...1.L...#.8.!I.I.+X...g.}6....s...xX.t)..>.6m.nb.u.......U__..S..........[o1q.D6o...#....f..k..M....~HXX..M....(.....(n...&L.....@+.3H......ZCTd..E....../.445...{.....1'X.6l`......[...+..........I.&.../.......{.?I.V.\I}}={...h4.p.M7.......7.\|.@@@.......x.^.,X....{.SVV...O{{;...c...,_.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (571)
Category:	downloaded
Size (bytes):	5328
Entropy (8bit):	5.236039033051003
Encrypted:	false
SSDEEP:	96:Htd3KguhUvyrYaUg2amja7azTQcif0Lt9kUbHy5ZLD8UwTU2DMER+yGa:nKgu2gCQcifS2UbS5B81TrDJRUa
MD5:	029071357798FB3C1AF2F1F0CDE935AF
SHA1:	44045251A2887695FA67FA0544992AF15251B363
SHA-256:	0284B82FC74F4FD666A234FC2DF3C7BE10D49E40D9F5D238594F69B63C5D794D
SHA-512:	8BD44C07861C41A4257959CF3778D3E918023D8E2AD4DDEBE9907CAEC56FD7C81349DDAD25926767FDD969DB39A3AB2781709FA4313F7FB47C17B077FC24E10D
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/eswFrame.min.js
Preview:	/. Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. ./.(function(){function e(){this.parentOrigin=void 0;this.messageHandlers={};this.featureScripts={};this.sessionLoaded=!1;this.pendingMessages={};this.availableFeatures=["script"];try{window.localStorage}catch(a){this.noLocalStorageAvailable=!0,this.log("localStorage is not available. User chat sessions continue only in a single-page view and not across multiple pages.",!0)}try{window.sessionStorage}catch(a){this.noSessionStorageAvailable=!0,this.log("sessionStorage is not available. User chat sessions end after a web page refresh or across browser tabs and windows.",.!0)}window.location.search.replace(/([a-zA-Z0-9]+)=([\S]+)/g,function(a,b,c){"parent"===b&&(this.parentOrigin=c)}.bind(this));this.parentOrigin?(this.addEventListeners(),this.loadFeatureScript("Session"),this.loadFeatureScript("Broadcast"),this.addMess

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 380 x 460, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12137
Entropy (8bit):	7.878489287965991
Encrypted:	false
SSDEEP:	192:lfPi2FKMmNd1yrd+wydmN2Rd02UZRg1zNWKqRN7Cp0sNpSHBtL2PTXV0E5u:lS2F8srd+wyYN2L0VRIz9qzuxkHj2P5e
MD5:	ED40DFAC781AC0CD0039FBF82653E9B1
SHA1:	8464BED940A1D459DECB7769C2889C306FBA3A35
SHA-256:	AD5DC002463A2D7C2B3ADF6C252DF18F6EAF2B55FA6E74D61CE5EA0F2DC4D34D
SHA-512:	75C09A92C950C82823E4B358D1B9AFD4A443501EDFF932AA2E80F3ED6779E69332200EA3DC23A8F6099DFB8DB9CC5311D0CE8CE3B2E7F39D886B37A7240D01BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|..........-......pHYs..........+......tIME...... ..)... .IDATx...y\|T.....L&..@D..D....@..k.L.1.b.x.Bj..YI....Rkk..R.j.KA.j.55......Jr..\...-..J..@..e.....9f.d.-.....J.....>..9.9.6g.....].C........@.egg...F..B....C...`.....A...!.\|.0..... .....>......C...`.....A...!.\|.0..... .....>......C...`.G......v...]....".=-!..t.n.[...../.....\|..5..vo..!....n;..............}.v...........6L.n.Q..'+...Z...u.]wi....?~\|...4.......U]]..2..(.3w.....I..m.....K...g...L.....>...9sF......Qmm.n... .`....t.....M.h.q!jQ..../((.c.>...:u..M....3.Ok.?...v...7...#.f.Zk.-[......eK...G.{L.?.......+..B...BS.NULL..lQ.=.e.y.m....-.6mRjj.....`..m.IW_}u.......*k..z..S.....J-\|.].4r...N.q.:.....u..G.G.=..c.......%I....{...U.....:}.$.........w.GT..\x.$.O..5j....;....l6..n......&..k......y.~w../..2.W..o.l.6.....;....s.='...xB..r....h]}..F.2....A....\.n....-(m.0a.JKK5$9Y....M......tq..=..).=.w.../.....R."G.....Lv.]7.pC....x.w....p7...o....'~.u~....}......h.\.U..{.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (11531), with no line terminators
Category:	downloaded
Size (bytes):	11531
Entropy (8bit):	5.311065678732573
Encrypted:	false
SSDEEP:	192:gARcVvHgdkFmnge5Ep5MEFyN1x/EDTeO6q1Xl9b45+eUk5bcTW4U3I43oO:gAipOge6zP6x/fOpLl45JmT057
MD5:	776A2B00F860EF386655CF05134DAB61
SHA1:	7EE30E958EFE5584BC424F78E8D6CFFFCB6FD226
SHA-256:	E362042C21CD3B62237416645F647B070D008BCB2523BB2861CC811F2D420261
SHA-512:	5871814DF34DFB76D991CB87A19F5A7671CB4DE88F4EB188D4029062D19DC1652E420AFCA09084A612AC1E8D8333BE75E1C8BA53FFA6C8D368EAE6C2AFCB35CF
Malicious:	false
Reputation:	low
URL:	https://www.citrix.com/c-lib/insights/v2/insights-min.js
Preview:	(function(e){"use strict";function t(){var e=x.readDomain();document.cookie="insight_refresh="+y.encode(document.URL)+"; domain="+e+" path=/;secure;samesite=lax;Max-Age=30;"}function n(){var e=x.readDomain();document.cookie="insight_referer="+y.encode(document.URL)+"; domain="+e+"; path=/;secure;samesite=lax;Max-Age=30"}function r(e,t){this.openid=e,this.sessionid=t,this.toString=function(){return"XApiActor [openId="+this.openid+" sessionId="+this.sessionid+"]"}}function i(e){this.display=e,this.toString=function(){return"XApiVerb [display="+this.display+"]"}}function o(e,t,n){this.definition={name:e,description:t\|\|e,title:n\|\|x.getPageTitle(),url:document.URL},this.toString=function(){return"XApiObject [definition_name="+this.definition.name+"definition_desc="+this.definition.description+"definition_title="+this.definition.title+"definition_url="+this.definition.url+"]"}}function s(e,t,n,s,a,d,c,u,f,g){if(this.id=e,this.actor=new r(t,f),"visited"===n){var v=x.readCookie("insight_refres

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2638
Entropy (8bit):	5.26023744782677
Encrypted:	false
SSDEEP:	48:Ys/Cxd5X4REDd5X4RE+IhBbwqTe6ud76fpA+c/fpd4eti0Ns2wi/9/Sie:iSCSmBU6WWfQfW6g
MD5:	2EBFCA363F9630F49D2EAC6A76C49E04
SHA1:	B1D4A3A48E663D154967E9C98FD7DB3FDD61A75C
SHA-256:	22C5A62C8624682F575CE6526F0F7E46CF2135D02580CBD56FB23349624AB442
SHA-512:	9488E14F758E1A35B5865B40AD4FA55D92DD2D9A6617C570DD17DE6DAA2856451423E1E287B786F48FA83D45FDFDF0DA7017D0D2FA08FA73D8E96BF6D0F5EB5A
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableAttributeLoaderController%2FACTION%24getComponentAttributes%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fsiteforce%3ApageLoader%22%2C%22params%22%3A%7B%22viewOrThemeLayoutId%22%3A%2299984d62-ba17-44d3-bf55-6a7dcfd3788c%22%2C%22publishedChangelistNum%22%3A46%2C%22audienceKey%22%3A%2211FxOYiYfpMxmANj4kGJzg%22%7D%2C%22version%22%3A%2260.0%22%2C%22storable%22%3Atrue%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22-lAyjg7Rz5q_SREY4hPdNA%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwMDBlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"4d7c87fa-c54f-4064-8f7d-4d0c1223471d":{"attributes":{"buttonBackgroundColor":"rgb(0, 0, 0)","buttonText":"Log in","buttonBorderColor":"rgba(240, 240, 240, 0)","menuStyleSettings":"{\"selectedMenuStyleSetting\":\"iconAndName\",\"selectedIconSetting\":\"userAvatar\",\"includeCompanyName\":false,\"selectedTextOrientationSetting\":\"right\"}","customizableUserProfileMenuEditor":"Default_User_Profile_Menu","buttonTextColor":"","buttonBorderRadius":10,"buttonTextHoverColor":"","commThemeGroupId":"stellaInnerHeader","buttonBackgroundHoverColor":"rgb(0, 0, 0)"},"componentName":"forceCommunity:customizableUserProfileMenu","priority":0},"4012cef8-ec9d-4509-9914-1bd2f3e858b4":{"attributes":{"buttonBackgroundColor":"rgb(0, 0, 0)","buttonText":"Log in","buttonBorderColor":"rgba(240, 240, 240, 0)","menuStyleSettings":"{\"selectedMenuStyleSetting\":\"iconAndName\",\"selectedIconSetting\":\"userAvatar\",\"includeCompanyName\":false,\"selectedTextOrientati

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1433)
Category:	downloaded
Size (bytes):	1580
Entropy (8bit):	5.314295779237997
Encrypted:	false
SSDEEP:	48:8d7Bt/BVd7X9YB5v5jesXSlOx0SOGLOb43Sm+:8dtBBVdr9YY40W64Cm+
MD5:	F17E8CDAB796EA9CF55DFC5235CAB2D1
SHA1:	3C5D6A6D39989120A14BA2F17185E069AF9F61D0
SHA-256:	105F3ED54197BAB87E2FAE8328F769728A27EF6B3A108652D0E594BAD35DE917
SHA-512:	DB2967070CE27856503B7DE40FFDABCAC4B0D4F3ED5F673719C71F37392AD1AB647B9AB0C71C6C871316FEB54219E596C5E9163C0840D366449870F28B7B6B0F
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC3bc46f17ebe04e30b002a3fa83819594-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC3bc46f17ebe04e30b002a3fa83819594-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC3bc46f17ebe04e30b002a3fa83819594-source.min.js', "!function(){var e=\"off\",n=\"<b>Add .ShareFile.io to your domain inclusion list on or before June 30th</b><br>ShareFile will introduce the ShareFile.io domain on or before June 30th, 2023. If you haven't already added .ShareFile.io to your domain inclusion list, please reference <a href='https://docs.sharefile.com/en-us/sharefile/configure/firewall-ip.html#domain-inclusion-list' target='_blank' style='text-decoration:underline'>this article</a> and take action to prevent disruption in accessing your account\",a=\"\",t=\"\",r=\"\",i=\"\",o=\"\",l=\"\",s=\"\",c=window.location.pathname;if(c.length>0)var d=c.split(\"/\")[1];switch(d){case\"de-de\":bannerText=\"\"!=a?a:n;break;case\"ja-jp\":banner

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	301569
Entropy (8bit):	5.568555922415849
Encrypted:	false
SSDEEP:	6144:q4nQX5NzJLYLceF+qKXjXP9RIMbQ95YDSz:zn+xJaNT7z
MD5:	0B6D798699BEF27DF107DB963E45357C
SHA1:	98B87156B0E177ECB42C815D46AAB1A9F9EEF449
SHA-256:	222F374E24F43202D08F2367DF1676F8D0F4146AFAF39FFCC5CA0A94DC42AEDE
SHA-512:	174AE0D36F71C92795124E9E429E67CDD57FF4E98148430994D3797D75CE99925E14E910388238BCAAAD9E9517D662F22A608784E6D5FB64C87ADF09035D53C7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-W95SLW9E4W&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 267 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	45374
Entropy (8bit):	7.975621347156141
Encrypted:	false
SSDEEP:	768:v1d1IHSyq3ShQ6s5u8CsQvFyeB5TQW5eqbbXP3LmwwTeaNBddAnRhY0HPzFRbnJJ:td1IyyqmqpCsQvFy2TQWMW/3qfe2B+7f
MD5:	181062EC09699CCD007215C1BE11776D
SHA1:	68EA2B3B785DABC417BD08071D5ADACBD894F3A8
SHA-256:	D1DB84F960FBFBA9A94468C4337F621EF02FEA4706706E7B0AE4C49BE921F9D0
SHA-512:	9FB074058C2EE9EF317006DA213B9B032498D5D5009BEC3043BC668B3041C360C9127F7DE051943AE5464CEC6A72532487F92F148AD8F783D81C07594FDF05C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............E.....pHYs..........+......tIME............. .IDATx...y\|T.....9g...... ,I..VE.D...Rm.....[...........E....Vm.V.D-.( H..H...@...6..~f.....bTh!~.<"..9sf{..\|....J..i.. \|.._... \.DX..0,",.A..... ....A...S.E0....!..%.....Gy.gp:......Jgg'...3o.B.......@ ...A.d.s%..M{{;.....j.=....P^^.7..d:............5...&.PWW.....,Y.....\|.G.1....CUU$I. .........U.Xz..>\|.M.7....'.... \....~....Coo/...o.8a..UU<..c...[8.../^\|...\|>~.._../2j.(T.._<......,[..............(M...s.\|.r...e.M.p.\\|._d.Y.^........AyE.>... \....N...<.$_..N.....C....B.$.z.M.cbX.l.........nC..qd.s.N^z.%..?e..x<......'?...'O&--....b..t...Itt4....G{{;.....$L&.........d2!I.===.l6...>.....z=)))C......G.y.....,.bc.........<i..UUX....K{{;N....xl6.y...2r.....f.....=...O...k..l6._.._H..$I...1c`.i.J[{;n..........~..444`....5..^.;....k.Qz..)....W.b................+.d.......\|..^x....Z..Y.n./...F...~.....@Q.n..6~...a4.....b..g<...RV...).......(....~.;^y...~?.......Y.>../...

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 311, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24055
Entropy (8bit):	7.96773379290325
Encrypted:	false
SSDEEP:	384:0EJVGJ1o5nGfvcT0by09N5xpwFsw2mzynCsqaXYmOPKhue7+R6FXyEq8L82L:Z3GkIj9TTwFT2mzynvqmOPKhtiCvq12L
MD5:	2BAE893B1DD0C0618D53D3E223E3EB05
SHA1:	1E3A34CB2C44844C1721BA455DC7F1F7B416CA20
SHA-256:	D16C8F74FDFDD5A89FE519AAF182377D9C60B687B1F058EF0BE05A0F7A4B6E45
SHA-512:	CC85C7410E21E96A20308E80BDA0E8CD698C7AB6AD89E4EB2D930CA15572285A962E73538F3AF4F2BE7B87B869D7708D0C099EE209CED25B4DC76A3FFD471FBD
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-6.png
Preview:	.PNG........IHDR.......7.............pHYs..........+......tIME.....2:..... .IDATx...w\|.U....M...$@.I.=R%Ti.......,...b]t.WY;.....Ho!!..$.....o....f."E.O...._/^$S.L..w.{T....I.$I...v..j.A.$I....v.Zy."I.$.b!...I.$..s....$I..3...$I.:E..$I..)2@$I..N.."I.$u...I.$.Sd.H.$I.".D.$I._. .......^.[.G.$I....D..'.~..=GKK.....o.]Z.......l.M..[..lJ....q..!N.8..f..%.$I....j....JKK...uuu\|..W.1g.aaa........?..g..n..;=...l......#6&...T.....y.]>..S..;Fxxx..W$. c...JKA..@u.x..B........./rssy...qqq...g.^...kxzz^...$I...d..>s.E...../.v.:....;...e.......W....3K..j.....p8....3m.4.........Bcc#v..........;l..K}}.A...Y.x...Y.v-G..a..$%%QS[KxD.U(.$I.o.....?.....g...........&.y.m.../....l6...y...lh4...Cll.%W...^.../w...w...;MMM\|..g,..},...~..Z..ggg.4..o...Pss3...,^.......f.....%,,..>...O...JMM.j.Z..I..........jjkY...l.....g...\7q"c.....,.........p`..pqq.w\|.e....L...x...quuU.....6l...]..8a.2.h4r..!6l.F.a.A......Lc.X.o.{....A..1q........a...h4.v..E....."??..."

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	2250
Entropy (8bit):	5.09572411697293
Encrypted:	false
SSDEEP:	48:k3w+E3wvxn6bw0HZxncbIAGZKbUZnPEWTElfGG3vmYh03wav8u:k3+lbJHIbHGZTZgVGGwou
MD5:	EE45086CDB484E3CDB2073E8BA9B2F45
SHA1:	214F90BA7278C2E5D5301CF4948355382DA4FCA7
SHA-256:	ECB244F676677252C58D2ECCB58F1B0B87B5DD6BAAB45D29D46DBA74C823B7F2
SHA-512:	29B6EDEC846AC8C2279375B32E327DDDB6D5882B948E0F912CD17B8A458B99872800586988D54EE445C2E90B83031F68CB2D90C06D9DBC16ADA8F39FBC568BA7
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/frame/broadcast.esw.min.js
Preview:	window.esw.defineFeature("Broadcast",function(e){function c(){this.esw=e;this.callbacks={};e.noLocalStorageAvailable?e.noSessionStorageAvailable\|\|(this.storage=window.sessionStorage):this.storage=window.localStorage;this.prefix="__broadcastAPI:";this.queue={};this.postedEvents=new Set;this.postedEvents2=new Set;this.on();this.off();this.send();window.addEventListener("storage",function(a){var b=a.newValue,d="";if(0===a.key.indexOf(this.prefix)&&null===a.oldValue){var f=a.key.replace(this.prefix,"");."undefined"!==b&&(d=JSON.parse(b));this.safariWorkaroundIgnoreSameTabEvents(a.key,d)\|\|this.broadcast(f,d)}}.bind(this));window.addEventListener("storage",function(a){if(0===a.key.indexOf(this.prefix)&&null===a.newValue){var b=a.key.replace(this.prefix,"");!this.safariWorkaroundIgnoreSameTabEvents(a.key,JSON.parse(a.oldValue))&&b in this.queue&&(this.send(b,this.queue[b].shift()),0===this.queue[b].length&&delete this.queue[b])}}.bind(this))}c.prototype.on=function(a,b){a in this.callbacks\|\|(

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	30813
Entropy (8bit):	5.163195557334805
Encrypted:	false
SSDEEP:	768:UHm6hM55xzjzHGkehRitzfwGY6/tWXveCF6o6ILzJDC8LlEHlm:SMHGkeTm+6/4UOcBHw
MD5:	E42DF024FAD660BBADF4D550BB33FE6D
SHA1:	0C73CF3E830F5FFED5C9D070A95D98883DB23454
SHA-256:	EF4DCC4DAB4D780F44939C455D4720CAB662B2F5FABC36EBC33A21F4CDBECD4E
SHA-512:	193AB01FB92FBFC0BFF58D018D2F2AC64850A29D0EB47283370B0A872D71C1B00636FB2A8BC0F79F0CB906457061AA869BC291F69E3B6703EA08A04E922596EA
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/esw.min.js
Preview:	/. Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. ./.(function(l){function d(){var a=!1,b;this.settings={appendHelpButton:!0,displayHelpButton:!0,isExternalPage:!0,devMode:!1,targetElement:document.body,elementForOnlineDisplay:void 0,elementForOfflineDisplay:void 0,defaultMinimizedText:"",disabledMinimizedText:"",defaultAssistiveText:"",loadingText:"Loading",showIcon:void 0,enabledFeatures:[],entryFeature:"FieldService",storageDomain:document.domain,language:void 0,linkAction:{feature:void 0,name:void 0,valid:!1},linkActionParameters:{},useCustomAuthentication:!1,.allowGuestUsers:!1,requireSLDS:!1,hasBottomTabBar:!1};this.auth={};this.validLinkActions={};this.alwaysWarnOnBeforeUnload=!1;Object.defineProperty(this.auth,"oauthToken",{get:function(){return b},set:function(c){this.validateHeaderValue(c)?(b=c)?(this.setSessionData("ESW_OAUTH_TOKEN",c),this.checkAuthenti

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1206
Entropy (8bit):	7.775992295851312
Encrypted:	false
SSDEEP:	24:naweu+Kojx74ho2ZSr+f3lLKcXFNtQx14bIvdTELHNM1z06Mw/:zeuro9iZa+vjq1noH+f/
MD5:	93AA1647F23C7E63E9C2E3D5C34CE92A
SHA1:	3F92AB2F822DF0A00EEB81F5E4207ECA508975B1
SHA-256:	FCBC4A3342678EC75322DE335B01C03C15593EC8CD566FAD73CA8FE81EE6DDBA
SHA-512:	AA415985DFA9EA4D965F1FD0E54F3BF11A5F6D94C61B8D4CB9B7CBD0D79D37F2976982B83308BBBAFE4818A1149536CFC92A86DF17F0E77E2FAB798C7C779CF4
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/file-asset/footercsglogo
Preview:	RIFF....WEBPVP8X...........'..ALPH......Z{... ...!.~.A02.+#.d.U.XA...C....!.:..QG.5"&@?k.......wn6......l.;...X0j..Z.EV!.b...c0.,...!..Z....= ,....x2..q...5.`,)._)..Jmo..e(.g..0U.0..X{...3iW...N...?.j.....2./rp.....j4=`3.w...........\..\..HN_..\|=?...N...Zc... ....Jku..z..MR~.b?..8.G.....'p.;O.aw.i7I..Y...:x}...(I...E..1.F]..P.5..u.t....a.A.......w.T....;9.2.#.6x..'I.`.z@....'.\.o<.E..<...<....Ah..r...V......^f..p......i.o..R..0(...!...{.lVnY.-.W.d.p..r.U....o.e....Nh..j45.....g..N.D..../I..Y0Z].(.z@...9g...VXg..x....LW.S.>jAW.k..48f.."A.eX.`../.\|..4.B.A....4F.(.m...v....BR0..1I.3.,.9Y.....V.:k..R@s/...2.y...%U..k#^T!.<F..hg]8..4.FY8g.`^t.u0...N..O.3.\|..q../P`.j....."I.....0.k....J__.O.5...;;.I....A.(.....Fq.w.x..S>.h:...]6jb$g...-...,.K.M...ws%..I.=iq.Y\Z...J.....:xjc....j`...6...5`.z7<S.....K}D...bP..p.~.......A..A...8r..3cId.2F..=.......,9..YCu\.]e"...\|r.E..j.....7.3..e..G3V\|g...$.:..u;UpR=..\|..S..&..%;...r.gZ....l..6bl{.b..."QFuZ.D..l

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1129920
Entropy (8bit):	5.064926976242312
Encrypted:	false
SSDEEP:	12288:jla/b6GGnckmBzvU090MESGUaVnAq+hhnJsIYM:Ra/bDkmBzvU+ACd
MD5:	E0C47491000B02DE88C89EA764B30AED
SHA1:	1D519BBA161C2AE418197EDF35FB69F8FF633CC4
SHA-256:	8EE01C19E49920A5A891E6CFEE6E2539C11F83520F4D5038EA69D9B49074608B
SHA-512:	B48483E06F513854CCB455459491E8B861B1ED93BDB862CD130277D0FF226FCE88E8C65CCC3B1F188A8927BD9C6DCB742C4643B8D40DD5F58AA4E88EEC590FA8
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22-lAyjg7Rz5q_SREY4hPdNA%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%22WvwwWywcQq1y8aLq29C8yQ%22%2C%22cuid%22%3A1674504956%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%22f8a65d86-3288-496f-bcd1-5762be189f66%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22106ffd39-67d8-4187-8350-a302d5104b8a%22%2C%22publishedChangelistNum%22%3A%2246%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D
Preview:	:root{--lwc-mqLarge:only screen and (min-width: 64.0625em);--lwc-mqSingleColumnRecordLayout:(max-width: 599px);--lwc-mqMediumLandscape:only screen and (min-width: 48em) and (min-aspect-ratio: 4/3);--lwc-mqMedium:only screen and (min-width: 48em);--lwc-mqHighRes:only screen and (-webkit-min-device-pixel-ratio: 2), screen and (min-device-pixel-ratio: 2),screen and (min-resolution: 192dpi),screen and (min-resolution: 2dppx);--lwc-mqSmall:only screen and (max-width: 47.9375em);--lwc-paletteIndigo10:rgb(32, 6, 71);--lwc-popoverWalkthroughHeaderImage:;--lwc-zIndexDialog:6000;--lwc-colorPickerSelectorWidth:14rem;--lwc-nubbinSizeDefault:1rem;--lwc-navigationItemVerticalPadding:var(--lwc-spacingXSmall);--lwc-paletteCloudBlue40:rgb(5, 98, 138);--lwc-brandNavigationColorText:var(--lwc-colorTextInverse);--lwc-colorBackgroundContextBarInverseItemHover:rgba(255, 255, 255, 0.2);--lwc-dropZoneSlotHeight:0.25rem;--lwc-colorTextTabLabelSelected:rgb(0, 0, 0);--lwc-colorStrokeBrandActive:rgb(3, 45, 96);--

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 492 x 397, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27686
Entropy (8bit):	7.960002551550626
Encrypted:	false
SSDEEP:	384:Qr62KniNd1RoozJqUCh0XkMbJ/l9eUfLqpic3JCfpl2PZdKOT9enDLrhb:Qr62KQqUtLhWutkJILeZdKRDLrhb
MD5:	B7704084917025F705B0D4B5AA500FBF
SHA1:	0D00FC649A2E50AE9D539A73CBB447D16AE0F241
SHA-256:	22DDD98BB2E5B2FBB12FE45EC95A5243384EBADE170F00B93C53073EF9B542BA
SHA-512:	149107EC7F5708D626BF7206051A4510D959D6C51F7F35A11885C3E56CEB94A72848FBAC2B2184B14F168E7482DBAE190D8AC23B7857FE0147A41759E1CAA1A3
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-buy-account-info-2.png
Preview:	.PNG........IHDR..............B.....pHYs..........+......tIME......8...... .IDATx...y\|T.....5.}.....D.Y...j.....uk..G.wm....Oi{...X.R.EEE.D.2A,.....$.....#.q2L.IHB.\|.. s..:.9..s.E.4.!..B.i.3..!..BtL...B.a.....B....-..B...l!.....%`......B.!.t.m]........v...B.q..a..n.n7......m...(J..{...n...[.w....B.K:].....l...t:C....B\...[q/,,....\....Bi......q.......~......@.!D..N.4..i...\.....4M..."..\.Wgw.....~d..p8}.^......V.F..!.........C.8.......Ng..7.7.w.....IAAAh.z-..r...O'..(.,.......(....-...,.QD.Vkv:....b...V{..F..F_....Lh...@.3.t.sFVTT.j.....3...r.B..5......{u$.~..Zu.....X...u.......;...........S.{.......{."........}Q{.....M_...^>..Kqqq....kD_=...y..uMl...nw..MLM.EEE..*......KsnG.w.nw...d......M...A5.>../s[i...._..{C[....D.....(J..h...+..]....,..}w..e.Ky.D.A.....:...cw:..v..\|[.~q..QO........6...........ZM.B..~.p...:e....^..z...^F.....5..i....h...aD.$...........~.......wB_7\|.....y.F....5 \|....h....h5i=..2...2....f..n[.[.^...

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 550 x 309, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	71175
Entropy (8bit):	7.991332068997466
Encrypted:	true
SSDEEP:	1536:8PRhFlIpWev6f0w7Gllh3f0d6tF8vfUDY9bh9Zu+pAat:wZ46PKlh1tF83UD4bhjAE
MD5:	AA1E23FCFA54D87281B257694073D52A
SHA1:	1C48F3C0D0093FCC1E6B960778BA1F30CDB2254D
SHA-256:	ABB0FEFCD7BD7A0E620F6F6676DE3A8AC5A4A3C7E08CE0D187BCB992345E072A
SHA-512:	227DCF4D1E297E07EF042E2861F5BA741A5B73AC2C0EEC39797BFBEAE64BB4B71C6EBBF6B8025F825654EC4A8F64E38307408301CEE683C733B96BDD14868A53
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...5......d+.....pHYs...t...t..f.x....tIME....."...H... .IDATx..y\|.E....&.d......I.YT.e.E....p.Qq...7........z..q..:8 n.,"..n@....d....}=9{...&..,.....r.]].tw..O?.T.4k.,..@ ....FQ.\.....E..}B7......@0.$.E..[F....9..!L...@ ..t:......=..j.0....D3._.dy.-.\,h4RGW.....B....Sbm..[.i.-.!.H...JH..v..F...O.a"..N.F.5.2m-....5=CQ@.........9....B....."...0..r..D .L.a"..N.$...5......'B....."b.....b..h...@ .\0.a..4.........., .I..h4......&f.........-k..H.mmV.....-B.....@.hSSS..h#..."...y...eg.n........3.........C...N4.=E...Jrr....*..s?5.U....v.~.......@p\|[p1......h......(2..-DGG.^..{.....qr.rt....D ...'.k.r.k..^..h....Z.VU...\|......CTU..l6...!I?...!....AO.=.........E.`0..........MK.....RVQ.....4......mC..fD.....F#--.<...q.W..'...$.n...}i....v=.....B........tFxLz.F.A..<..o..;6......c....t......!.Y.w..........Z..f.O....E.....HF.p....`$ ..Y..K;8..`.[ ....`.B(.2(....1.!..........v..ob....5t......`.[ .....Z..V..GxLzA./I...A]..D..s^(.Z ...J.y ...B..a...MQ

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 338, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21006
Entropy (8bit):	7.94373470438487
Encrypted:	false
SSDEEP:	384:u8LFz2yaq1nsk6uHTcX0mfrwA68DMw9PQ0goCcUCP:1LZ2yHyuzCx/DN9ICUCP
MD5:	F3332CA0002D01F65878D1A83B3F03C8
SHA1:	631096EBE4E21BA8ECE65616D7C8B7DF5EB35E21
SHA-256:	859AB206E527E700A0BF9DA2561159E36344703979638F86586394A1DE150220
SHA-512:	9E727CBC229ED4A3EFC0D791E8005F8550A5629A70194CF848C2D9DDDD29E2B79317F9F72C9E17B9565FFC496E3153EFDA456C43439F7BBAE060AD1D21C4B202
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...R........'....pHYs...t...t..f.x....tIME.....#...%... .IDATx...w.T.....9.g{.,.......A..F..K..1..N~.I.......k.1Xb7.5.b..(E..ewa.e..9.....(......x.p.)..ff..s....af....Z........9...6]RL...gp..c..Z{.....h%"""rLb6.d.7.O....;.g?.A......q.......8...DDDD...`I.....AW""""...H.L.....H.1....DDDDN4.X""""........l ..vGW"r....h\.H;P..9^6.6\:$.B.q.%o.t...0a..8.w..'(d....,......,..<.<).]...7.x..'>r..d..1S..9^......~..<i....eap'..X.c.A.". n...I.g.\|.cA...A..)`...E+9Q.}.m[.J.8$X...t...d...Hg.X.......k...<f..."""".(....R.u.>x............\|i...l..........j#.:WXDDD:...X.eY....6.'f.I..f......$..... .T...xs%....IDDD.KI..!..n...."..d.d.............9:.......%..`...n+.L.1(""".Jb.,lp..a`.n.X..#....DDD..H..E...vk..i..JDDD:....."""..)`........".]`T..m..e{m..u.]....i..t.~...t....D.k.......g..........,..I.........t&.X"'..es..{y`A}.\|s&.5]9.p.....^.L..$.8x]jv..9....I.......u...C..\|h2..n...M.vf&}r\@K.....mO.\.......$.,....5.<.Nk.2..."O[.......}.......o.N

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 414, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47903
Entropy (8bit):	7.986022781025193
Encrypted:	false
SSDEEP:	768:ztoGYi9pQdSDsrJGFCkTi6avUrHMzuk+B+HhCbc/LJF5VSbAXNd6kdEYIWl6sv83:zef2pWSDWJ3k+lcriu/Bwb+WNdkYbnvo
MD5:	53B0E99A49E7D051DDCA5680244EC8E6
SHA1:	8466C94E5749485D544B05B3157CB4F02B51FFD1
SHA-256:	536CFD2B6B247045468E04A61034621D9F3FCAF21BB97BA3666BDF3ACDB568FF
SHA-512:	B18BC8AC3F2F62A0840DF4A770DD7172DE3BDE68D8F9882E0D1044C2E8263D2ABECB125293858E2D82291ECFF72754E65BD942387CAD90BD0294CF6A65F75E53
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b......pHYs...t...t..f.x....tIME.......P.L.. .IDATx...w\|Uu....).....^..B. .....(8...R.u..ov....utg..3....Xf-...(CWA.@(.{....zSn.\|...... )\|.....-.\|.......9...j"...$..../($1>...i..O...G.ej.^...'91.Y....;&.v..kg.&6..gP..KJ.e.....v./)%..BQ...H.v.4M....h.<.....v..A..P....r$.BCBD..""....4.ZT".#(>..[."j. ....PU]MIi9.......I...+.Ihh...........B.S....Z........n.0....mC.z;e.&Q...].r...FQ.$Ij...p..$.Y....$....p.BC.E..Rjk.@.1.MX&Q..X,.KJ...%""..j.0...%..wF....>....2..>.bcp9.".[...v.4.4..BB.r88_RJn^.Ng...`,...,#I.....pS...i.......SU....n............@..t..b....GMm-UU...+FQT,..EU.E...p.....k..........M..q!..!...h8kv:.8...u.o].>..@@.o.]DA..=.E..Z..\..v{.(v....D.w0F};<.$..t...n....A.G5..1.S...........A.n..5A..A..D... .B. .]..A.:... .....@..A...@.. .. t."..A......... ....tA..A..n.....D.A..7q....%.:....A.Zv....1.U....e.!"..A..ku;...(Jk..\......_. ..pc......,..qq.F... ..".[..... ....+m:.E.\..A..t..Q......w./L..A.........].~3.X.. ....fU.M.l...

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89947
Entropy (8bit):	5.290839266829335
Encrypted:	false
SSDEEP:	1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL
MD5:	CF2FBBF84281D9ECBFFB4993203D543B
SHA1:	832A6A4E86DAF38B1975D705C5DE5D9E5F5844BC
SHA-256:	A6F3F0FAEA4B3D48E03176341BEF0ED3151FFBF226D4C6635F1C6039C0500575
SHA-512:	493A1FE319B5C2091F9BB85E5AA149567E7C1E6DC4B52DF55C569A81A6BC54C45E097024427259FA3132F0F082FE24F5F1D172F7959C131347153A8BCA9EF679
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.3 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},S=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|S).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2212)
Category:	downloaded
Size (bytes):	184783
Entropy (8bit):	5.52733210262317
Encrypted:	false
SSDEEP:	3072:WVQaf5qZ3fhO+pW98wG1LceF2/eaJQtSTnXDL9btIMolbN4:uQX5N8YLceF+jTnXP9RIMyS
MD5:	1ABF81B0F060903CFAF0E940B54CD5E1
SHA1:	A6287191CE530FEA48BCDA799FADAD0180AECD3C
SHA-256:	0895163AC6B992C5A644F1E643DF715E45F6D96C14D6B1D40F2960351E4A727B
SHA-512:	1D41D2330130AB1C59912F9574FB960C9748A28A29BCCE045E6749B2F9465E55AD47266A3C237CD58DF846407653C6920DD7BBBC429C5F49B30C75CA683487B8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-T7T5Q3XW
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__googtag","metadata":["map"],"consent":["list","analytics_storage"],"once_per_event":true,"vtp_tagId":"G-W95SLW9E4W","tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__googtag",[46,"a"],[50,"l",[46,"u","v"],[66,"w",[2,[15,"b"],"keys",[7,[15,"v"]]],[46,[43,[15,"u"],[15,"w"],[16,[15,"v"],[15,"w"]]]]]],[50,"m",[46],[36,[7,[17,[17,[15,"

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 338, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	63999
Entropy (8bit):	7.9874646349803635
Encrypted:	false
SSDEEP:	1536:MyFxrrHO9S7h4n9868jMivic2ys34tPAIO0n7H:MyFxHOshQ9R4HKcHs3z0n7H
MD5:	744041BC8FCC240C10CD056E42100FA4
SHA1:	EBB682DD29D2E65ED3E0E30DA13C2F950041D852
SHA-256:	4DB06A41A5D713FF79AE790D0567CBF68038E046B0EC347369A9B3A6BA02CA93
SHA-512:	2A058B03F92DAF3350DE7826C3CCA7EA310D005353152484762878F804B752B55D8A122AEC7FB0530F258D09A6AD82744E429F9CA61B7530D4E25C43ACC32692
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/catalog-1.png
Preview:	.PNG........IHDR...X...R........'....pHYs...t...t..f.x....tIME......6...A.. .IDATx...wx.......Y..r...+r.lS..P.8.$p !$....@H.!.7.I.r.@.sH.`N....q.-c.Yn.V.Z.j.....q...2..._...3..J;{....=..iFee%o..&555.$I.. .. .'A....ddd.of.IH.....w.....X.VDh%.. ..pj. .........+RWW.!.2v.}..&.. ...%I..P.M.4M3dY..1.. .. .7Dd%.. ..p...K..A....... .. ........A..A.li..:..)..d..e..0.D.%.. ..w....0.,a..Y}n....Y.Z..k...I.X. ..p....io5.1[A=........t...n...K..q.h.P(...=..< K2V....2.C.."I.w..}...z.....}g.I..g.6WWW.(................`...X.".>.0.zz.u...8....{H.Yb.......J.`..,.J...x...D..x..'IJJ".....zZ.\.t)}}}.t.Mgh..........~?../f...........DSs..h.....N.`.G8...!::;.z}dge!..Bi.p&..S._..W....?....4......\...?q.}.../}..."F...m......c...7....;SC.D......0..\|f...7c.....{.n222....M__.w.}7.v.:k...o.M.X,..ssDp%\|f.v.9.Y..n....z. ..N;...K/q.........D"...[..o.c.......^......YMMM.;...T...4Mc.E....i.&&N.H\|\|<>..t.z.....W_%)).y...n.$.a.........._L$..."...3....EQIKM........tC.......... .7N;.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 912 x 652, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48317
Entropy (8bit):	7.958100862347455
Encrypted:	false
SSDEEP:	768:wRe5h/s9UK6q9VsqL47c69cXRpjwhrz4XEEY0Og/EsFCpgtTA:wRe5FrK6q9Vsquc635EXU0Og/Es/M
MD5:	035FF87F9F4D78FC44FFE80E6CA000DA
SHA1:	FE3B3902119B8EF079E567A29AC397EC75357E13
SHA-256:	024B9D14AF18E013485F5CBBFD9BB640B6891BC34CBAE319700619AEFF9FEACB
SHA-512:	FE034A0002C0CF979F7DC85BBA862A57C1EEB69E48B6C69F486A92A5067E1B6A92A443664403B2C2719F0F2CAA5087D81E3CF91A37DF3BAE026A8446E5130039
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-try-now-sf-hello.png
Preview:	.PNG........IHDR............../Wp....pHYs..........+......tIME.....'..E.... .IDATx...{p.././....e[.C..e.c..dm%.r....-.N.VF.v...?Vc.Uq....U.....LQ.M.L.x....7.......1...Q,.&.l.H...%Y"A=,./....f7.x.O...b.ht.>.D.....266........(..\|g........C.......:.DDDDDDT`v..mxm1k...o\|#g.""""""........MX......().MX...r..""""""p......u>............^..+......%..$......%..$......%..$......%..$......%..$......%..$......%..$......%..$......%.,.. "Z-&.......S.....y....V[kE.....j.Zk.sDDT...@.....l...er.+..<v.........oV.+...T .........{..S""J.ellL.\.........V..x.r.r.O".L.<6....o.~.;...$..9w.......}..$"J.....u^.@z{z.(..N'.p@.K-..him..>sM.$.y..\|him....c....w...q...g.HTD..~..u...............6a..\|p8....e.>.....6.M..t.\8...,......k.l6.\..Z..'IR....$..-....$I....!8.N..I..p8..U.U......./....Q.\....;. .MZ.............!.;;a..`......W.l...z.........r.p../.....7.1F:....MEQ..-.5..#......;u..V+[...%)...,.....s...v;<G....F...I...N.F:.N.....0r?"x.x<p.j..E....>....`xh(.G.{N...#G..w.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	135687
Entropy (8bit):	3.769353154781337
Encrypted:	false
SSDEEP:	1536:mHp95+TvBZ77SLnu7h8p3HZeN0tZVTW5Zqw:mJSh43H4mW5Zqw
MD5:	B905F40F5D5F2302BE228EBE2A294B37
SHA1:	117D6E9EFAAE3C776AE7899BB55DD5AFD1E55AED
SHA-256:	FD7EE84CB742D679201740F997DC81974B2D487287C572D8888B7A2B53EA976A
SHA-512:	4D93445B433C8D1900F4635A27B2C325CA1ADB1CAC09D26984C1D7D4F3AA58BF6C16801E9BA9C359E15008766F8F87D1801551DCB4DDE8C19E6DC463A0C690EA
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/sharefile-vdr
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>ShareFile Virtual Data Room \| ShareFile</title>... <meta name="description" content="ShareFile provides a simple virtual data room designed for your most complex deals.ShareFile Virtual Data Room allows you to easily control, share, and track your secure documents . it.s your complete due diligence solution.">... <meta name="ctx_product" content="sharefile_main">. <meta name="lastModified" content="November 20, 2023">.<meta name="googlebot" content="noindex">.<meta name="robots" content="noindex">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name="goog

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 50x50, 32 bits/pixel
Category:	downloaded
Size (bytes):	10462
Entropy (8bit):	1.7796289145168793
Encrypted:	false
SSDEEP:	48:LcKD+t1r2cZph6FvaMWx5aDZo9unx0ed:LcZtp2HzWxp9unx0
MD5:	0647CECFAE4B353C07A6F326885278FF
SHA1:	A02DA9FF45E2D95C245C565759371EFCBA78862C
SHA-256:	8B569C6BF31E5C9E05DE28E44F039C705A0F322784585AC64352407C31281338
SHA-512:	47C12CA9EE6EAD9E0263D0C39841577389928A87E19EA5EF113BFC54786CCF793ACB7A8967EE1AF86F0C46E6175C111A14241A64C679F2E1634F954747276EE3
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/assets/images/favicon.ico
Preview:	......22.... ..(......(...2...d..... ......'..#...#.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 492 x 397, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27686
Entropy (8bit):	7.960002551550626
Encrypted:	false
SSDEEP:	384:Qr62KniNd1RoozJqUCh0XkMbJ/l9eUfLqpic3JCfpl2PZdKOT9enDLrhb:Qr62KQqUtLhWutkJILeZdKRDLrhb
MD5:	B7704084917025F705B0D4B5AA500FBF
SHA1:	0D00FC649A2E50AE9D539A73CBB447D16AE0F241
SHA-256:	22DDD98BB2E5B2FBB12FE45EC95A5243384EBADE170F00B93C53073EF9B542BA
SHA-512:	149107EC7F5708D626BF7206051A4510D959D6C51F7F35A11885C3E56CEB94A72848FBAC2B2184B14F168E7482DBAE190D8AC23B7857FE0147A41759E1CAA1A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............B.....pHYs..........+......tIME......8...... .IDATx...y\|T.....5.}.....D.Y...j.....uk..G.wm....Oi{...X.R.EEE.D.2A,.....$.....#.q2L.IHB.\|.. s..:.9..s.E.4.!..B.i.3..!..BtL...B.a.....B....-..B...l!.....%`......B.!.t.m]........v...B.q..a..n.n7......m...(J..{...n...[.w....B.K:].....l...t:C....B\...[q/,,....\....Bi......q.......~......@.!D..N.4..i...\.....4M..."..\.Wgw.....~d..p8}.^......V.F..!.........C.8.......Ng..7.7.w.....IAAAh.z-..r...O'..(.,.......(....-...,.QD.Vkv:....b...V{..F..F_....Lh...@.3.t.sFVTT.j.....3...r.B..5......{u$.~..Zu.....X...u.......;...........S.{.......{."........}Q{.....M_...^>..Kqqq....kD_=...y..uMl...nw..MLM.EEE..*......KsnG.w.nw...d......M...A5.>../s[i...._..{C[....D.....(J..h...+..]....,..}w..e.Ky.D.A.....:...cw:..v..\|[.~q..QO........6...........ZM.B..~.p...:e....^..z...^F.....5..i....h...aD.$...........~.......wB_7\|.....y.F....5 \|....h....h5i=..2...2....f..n[.[.^...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 380 x 460, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12137
Entropy (8bit):	7.878489287965991
Encrypted:	false
SSDEEP:	192:lfPi2FKMmNd1yrd+wydmN2Rd02UZRg1zNWKqRN7Cp0sNpSHBtL2PTXV0E5u:lS2F8srd+wyYN2L0VRIz9qzuxkHj2P5e
MD5:	ED40DFAC781AC0CD0039FBF82653E9B1
SHA1:	8464BED940A1D459DECB7769C2889C306FBA3A35
SHA-256:	AD5DC002463A2D7C2B3ADF6C252DF18F6EAF2B55FA6E74D61CE5EA0F2DC4D34D
SHA-512:	75C09A92C950C82823E4B358D1B9AFD4A443501EDFF932AA2E80F3ED6779E69332200EA3DC23A8F6099DFB8DB9CC5311D0CE8CE3B2E7F39D886B37A7240D01BF
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/sf-win-access-dashboard-queue.png
Preview:	.PNG........IHDR...\|..........-......pHYs..........+......tIME...... ..)... .IDATx...y\|T.....L&..@D..D....@..k.L.1.b.x.Bj..YI....Rkk..R.j.KA.j.55......Jr..\...-..J..@..e.....9f.d.-.....J.....>..9.9.6g.....].C........@.egg...F..B....C...`.....A...!.\|.0..... .....>......C...`.....A...!.\|.0..... .....>......C...`.G......v...]....".=-!..t.n.[...../.....\|..5..vo..!....n;..............}.v...........6L.n.Q..'+...Z...u.]wi....?~\|...4.......U]]..2..(.3w.....I..m.....K...g...L.....>...9sF......Qmm.n... .`....t.....M.h.q!jQ..../((.c.>...:u..M....3.Ok.?...v...7...#.f.Zk.-[......eK...G.{L.?.......+..B...BS.NULL..lQ.=.e.y.m....-.6mRjj.....`..m.IW_}u.......*k..z..S.....J-\|.].4r...N.q.:.....u..G.G.=..c.......%I....{...U.....:}.$.........w.GT..\x.$.O..5j....;....l6..n......&..k......y.~w../..2.W..o.l.6.....;....s.='...xB..r....h]}..F.2....A....\.n....-(m.0a.JKK5$9Y....M......tq..=..).=.w.../.....R."G.....Lv.]7.pC....x.w....p7...o....'~.u~....}......h.\.U..{.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	65372
Entropy (8bit):	6.5754824924291695
Encrypted:	false
SSDEEP:	1536:Y53VLfdX1ddAG5t+kOyXgIqYUpHUttttttttEFHe7:Y531lX1ddA2t+YwI/i8
MD5:	43CFAD7EE8534FDB946BC7A857CF4C24
SHA1:	CA3B4D3F7EA65573F390A699CEE847796E257656
SHA-256:	F34616511B441BEFADAD10D2833C638194C68D8E43F99DC3DF8F50C58E3CF0A9
SHA-512:	403F10C61F01D73F39CB7AF205A062B14FC4A9D1E4598E0773887FE6BA58D33C6D5601BFFE4DBD1FEB85F80F2A550A624BF231264900761C3D0E1539FA7A6FCA
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/c/resource/FontPPMori
Preview:	OTTO.......PCFF B.qx..& ...YDSIG.......T....GDEF.......\|....GPOS.8.g......:.GSUB@H.........\OS/2h..........`cmap.r{....<....head".}8.......6hhea...3...p...$hmtxV.G........Tmaxp.UP.........name..........Epost...2..&.... ..P..U...........-._.<....................:.{.)...............E.7.X...X.........................................................U...5...5...5...5...5...U.......U.....m.U.m.U.m.U.m.U.m.U.m.U.m.T.m.U.m.U.\.U...5...5...5...5...U.0.....U...<...........@.................D.,...U...U.H.U.H.<.H.U.H.U.x...j.U...U...U...U...U...U...U...5...5...5...5...5...5...5...5...5...5...5...U...U...5...U...U...U...U...2...2...2...2...2...U.~.#.~.#.~.#.~.#.~.#...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O.................................................h.4.h.4.h.4.h.4.E..E..E..E..E..E...E..E..E..E..E....*.h.).h.).h.).h.).h.).h.).h.).h.).h.).h.).k.G.J.).J.).J.).J.).J.).l.).K.)...)...).@.).@.).@.).@.).@.).@.).@...@.).@.).....g.).g.).g.).g.).-...-...-...-...E.G.h.....0

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (472)
Category:	downloaded
Size (bytes):	473
Entropy (8bit):	4.696817759093035
Encrypted:	false
SSDEEP:	6:I52EGGteTMOXA38xUaHqLg8xoQsxxcC2qyUE9RNKShhj8Ge8xxcY4XIGXpUE9RNJ:qdRs0HgjQSWrfveNi8rXpfvi1A
MD5:	6D324159AA7864EFD46CE66F36BE74F1
SHA1:	E0FBCFCDDFD80E7C6DE85423A05CFFD0E2E53F25
SHA-256:	34172E3B2C0F93498A2730933BC90740B38178CF10BD81B3164289D0445644A9
SHA-512:	0AAD747AD08C2DE076C6342DB06E34343BF5E641D63C14A99DC51F8DBC3202A91EBF4726AD07CBD3C248A615A8B1DF372EB0A21B37F30B9CD36D2DCF932438AE
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/frame/filetransfer.esw.min.js
Preview:	window.esw.defineFeature("FileTransfer",function(a){function b(){this.registerMessageHandlers()}b.prototype.registerMessageHandlers=function(){a.addMessageHandler("fileTransfer.uploadFile",function(b,c){parent.postMessage({method:"liveagent.fileTransfer.uploadFile",data:c},a.parentOrigin)});a.addMessageHandler("fileTransfer.resetFileSelector",function(){parent.postMessage({method:"liveagent.fileTransfer.resetFileSelector"},a.parentOrigin)})};a.fileTransferAPI=new b});.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	950289
Entropy (8bit):	5.37962459100762
Encrypted:	false
SSDEEP:	24576:JyInpJrHdz8xLy4BUrYDqgX5GKIVTiI31ib3/PHDPdRhU+:JyInph9z8xLyGUrYDqgX5tIVTik1ib3Z
MD5:	C5162D27D15C2506D3B14ACFD4B74E3B
SHA1:	2BDB4C5D4D5BE486DE23AFC8B3F436B23313062C
SHA-256:	DB2430E2DD779CD3979008EBB5CCB1546D61BCACEAA6B2BE87F135FEAFFFCFF2
SHA-512:	ACED578B70B1FACEA478D32A8C841D4C07D3F6A730C716B9742364B4A60E4474CE4DEA25DE9B021650A92AA5148030752D2EF0DFE241503D4C0F5494F05E7174
Malicious:	false
Reputation:	low
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-bddc4e88-c91b-48fd-b24b-671595b1debe.c46_0"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"f4459f2b-83a1-40c2-bdc2-38003bb971af","themeLayoutType":"Inner","params":{"viewid":"bddc4e88-c91b-48fd-b24b-671595b1debe","view_uddid":"","entity_name":"","audience_name":"","picasso_id":"","routeId":""},"priority":0,"includeLayout":true}},"version":"60.0"},"error":[],"components":[{"componentDef":{"descriptor":"layout://siteforce-generatedpage-bddc4e88-c91b-48fd-b24b-671595b1debe.c46_0"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"f4459f2b-83a1-40c2-bdc2-38003bb971af","themeLayoutType":"Inner","params":{"viewid":"bddc4e88-c91b-48fd-b24b-671595b1debe","view_uddid":"","entity_name":"","audience_name":"","p

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2178), with no line terminators
Category:	downloaded
Size (bytes):	2178
Entropy (8bit):	5.216854247225728
Encrypted:	false
SSDEEP:	48:Ed+UePCCRJw2Gb7IsQTfm7CPqjfubEEfpcGbpCBOxm:EdfeqCR0vymOPXNXs
MD5:	4D5EF1646D4ED9C5B01DFE7460C84083
SHA1:	A4A25442AE7A2612611B3815128CC437A5AEBAAF
SHA-256:	4E02FDA4BDFBDF9DF0E3523B8B2B385AFBD007A3F8318E0E640F8D0A0DA100BE
SHA-512:	2E6C05DCB0EA44B4DDB24C35FA72FE2555676C9CE3726D98E0519B794426279B00E77378595BF49CE9E75555124F4107D7A412AF43001C1B47FA5D600578D985
Malicious:	false
Reputation:	low
URL:	https://consent.trustarc.com/get?name=crossdomain.html&domain=sharefile.com
Preview:	<html><head><script>!function(){var e,t,a,r,n,o="truste.consent.",i=function(e){var t,a={},e=a._url=e;if(e=(a._query=e.replace(/^[^;?#][;?#]/,"")).replace(/[#;?&]+/g,"&"))for(e=e.split("&"),t=e.length;0<t--;){var r=e[t].split("="),n=r.shift();a[n]\|\|(a[n]=r.length?decodeURIComponent(r.join("=")):"")}return a}(location.href).domain;function s(e,t){var a=JSON.stringify({source:"preference_manager",message:e,data:t});top.postMessage(a,""),parent.postMessage(a,"*")}function c(e){var t=null;try{var a=self.localStorage;t=a.getItem?a.getItem(e):a[e]}catch(e){}return t&&JSON.parse(t)\|\|null}function p(e){try{var t=o+e,a=c(t);if(!a)return null;if(new Date(a.expires)<new Date)try{return self.localStorage.removeItem(t),null}catch(e){return null}return a}catch(e){}return null}function l(e,t){var a=c(e);!t.popTime&&a&&a.popTime&&(t.popTime=a.popTime);var r="string"==typeof t\|\|t instanceof String?t:JSON.stringify(t);try{var n=self.localStorage;n.setItem?n.setItem(e,r):n[e]=r}catch(e){}}void 0!==i&&s

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65472)
Category:	downloaded
Size (bytes):	1038460
Entropy (8bit):	5.643442319336139
Encrypted:	false
SSDEEP:	12288:LIj0GWWR1nP+S+FJST2HRByIPkY/A5SZscJY/jMH2QGVeRSXF:LIjV1P+S+FJFRBt9o58sZQGVeRSXF
MD5:	A7F176EF1914B4639BDDA49292514CF8
SHA1:	4DA3C3F6F95DEFE198CB5D40F5F0564A4EAB3420
SHA-256:	3D35720E614ABBA70010C999A0FD05287743BF8EE5C6C565FA8B6F558BEE455B
SHA-512:	D482899164255B7CF1BF4A29853B7F5EAE51895E15DE71FD429CB974F8AA8348CE3436C5604A70DEF2F06CDA849887110D4F6CF35716ADD3248F814885C5B757
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/assets/dist/bundle.js
Preview:	/! For license information please see bundle.js.LICENSE.txt /.(function(){var __webpack_modules__={19172:function(e,t,n){"use strict";function r(){return"object"==typeof navigator&&"userAgent"in navigator?navigator.userAgent:"object"==typeof process&&void 0!==process.version?`Node.js/${process.version.substr(1)} (${process.platform}; ${process.arch})`:"<environment undetectable>"}n.r(t),n.d(t,{Octokit:function(){return W}});var o=n(85186);function i(e){return"[object Object]"===Object.prototype.toString.call(e)}function a(e){var t,n;return!1!==i(e)&&(void 0===(t=e.constructor)\|\|!1!==i(n=t.prototype)&&!1!==n.hasOwnProperty("isPrototypeOf"))}function s(e,t){const n=Object.assign({},e);return Object.keys(t).forEach((r=>{a(t[r])?r in e?n[r]=s(e[r],t[r]):Object.assign(n,{[r]:t[r]}):Object.assign(n,{[r]:t[r]})})),n}function l(e){for(const t in e)void 0===e[t]&&delete e[t];return e}function c(e,t,n){if("string"==typeof t){let[e,r]=t.split(" ");n=Object.assign(r?{method:e,url:r}:{url:e},n)}e

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.5326596074175587
Encrypted:	false
SSDEEP:	12:L2gIRRPoKaBnJtOQGaC90uUCcnSayaUooFa9FaRm8ZetKZoX0GkZA:qnRRQhsQN58cnS5mfFaRm8ZeYZhGkZ
MD5:	17CF2EEE048AC3A02BBF8F690F7C2971
SHA1:	2414A361C15A31449FACBF93C8AC126E9FE66110
SHA-256:	555340319447F2A32D6CB090A35CBD317A125C94B6A58FC4874492E0BE0F7466
SHA-512:	405F694865D3129FE793F780C7F7A855E5714C3A9C691209DA5D1562356FBC4C4CA5B3E25ACCDCFF47D5A53837E9F3A20ACA6CE60AF21F7149847D3ACBFBF544
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....................................................................................................................................................................................AAA.....................................................JJJ.............................................................---.....<<<.....yyy.........................................................xxx.....}}}.................................PPP.uuu.nnn.rrr.UUU.........>>>.....(((.........................................................................................................000.....###.....................................666.....999.........YYY.rrr.nnn.uuu.PPP.........................................ooo.........................................................zzz.....;;;.....................................................................HHH.....................................................???.......................................................................

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 397 x 222, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24472
Entropy (8bit):	7.972435960395898
Encrypted:	false
SSDEEP:	384:m8OF0MF53D0Kw7dwvVnKCsyhLfW6GMAuGegxgiaw0m0NxmzfMOuxfYtnUcJRFLeR:YF0c5hMqirCgxglwZ02zfMXxoJLLkos7
MD5:	15F9099BD909C5F3C9DACB93431DF41C
SHA1:	F481DA5CDA80E1981DB952E042C01BFB73E52B80
SHA-256:	06162240B67E9AC8DA5DF0DEE79BE5486087FD0CE7DA956774001FA3AA689CEA
SHA-512:	BDB038A33290624D073E73F095A37514D5807F8DAFA63AD605928FCC515735D622ACE4BA6D53015EFA28ECE95F198C78389F62138B444215FE66193D28A5D712
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-plan-details-1.png
Preview:	.PNG........IHDR...............\<....pHYs..........+......tIME........3s... .IDATx...wx.......jK..j.r.......).i...K...7..)..\B.'..@ .lS\....{..-[.e..Zm...!..!...`H..y.<+......s....<.A..Ah..J.@..A....!.. ....A....>..Vu).}..{...+..[.....F..~.K....>.9...D.u....O.......w..#...Q.....b.9p.../.{.)>... ......]w._=.(.PG23.X:..[U..oid.#....?2)5.....g..{....9.R2.)..#.Mo...+.~.3a^...]...$...4\|.%<:k9M....A..!..=h8..M.......%.6./.....Y..!\? .%s.a..K........0......e.f..l.......u....{.y.l....2....Wo#P...2...XNI..Q...~...-.^....G.G.c@~'v.../m(..e...`.z...L....=......4..X..>=......O..G.N...f....Q.N.C..x..u.d..oRW^~z>u.K.^....F.{.>r3SHKM..Z.}.yJ+.a......H.+...A...KW.iE...o..../...c.(....8P^.....9q....0.WM...:;..g.....U\|..?..E$..yz.C(#..?...J3[V-.......9~.8.....=.s..N...<R..c.......nb.y.e.1...29+..XFU.Q..r....C..y....Vf...e....~.t..I...O. .s#...?.....Z....C......m.............3.../e...I>..,.......d\|..".g...A.>O....k.=:..~.?.].y....W....N.h. 1.Ap.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1810)
Category:	downloaded
Size (bytes):	94379
Entropy (8bit):	5.297413209420254
Encrypted:	false
SSDEEP:	1536:+OkrkzhoXdEOMGBKEbA75CKxBK4Ca1z3eol+6F5WcQStmvbyF06:+4iETGBKi0BKTaxeofu6
MD5:	FD4C6774C4375AF26D9D3052B630294E
SHA1:	11275B2C3C04CCBA7F38ABA7E84850C97CAC3075
SHA-256:	7904D8846E66F0C538335E696B4E06FE1D1D10F8856E275316D409EFDA45EAD9
SHA-512:	9D6F053AF487C11FFE97C1654B67F995DEA2B76F954E200FF1B36FFE690499816F71D1DD5A942280F60A89A5B91AB3BC775E4B80C983BDDC1265C876190E4661
Malicious:	false
Reputation:	low
URL:	https://consent.trustarc.com/asset/notice.js/v/v1.7-3185
Preview:	function _truste_eu(){function t(){var g=truste.eu.bindMap;g.feat.isConsentRetrieved=g.feat.crossDomain?g.feat.isConsentRetrieved:!0;if(!t.done&&truste.util.isConsentResolved()){t.done=!0;var k=function(){var a=(new Date).getTime(),c=truste.util.readCookie(truste.eu.COOKIE_REPOP,!0),d=truste.eu.bindMap.popTime;return d&&d!=c&&a>=d}();k&&(g.feat.dropPopCookie=!0);truste.eu.ccpa.initialize();truste.eu.gpp.initialize();truste.eu.gpcDntAutoOptOut();truste.eu.gcm();var a=function(){var a=truste.eu.bindMap;.if(a.feat.consentResolution){var c=truste.util.readCookie(truste.eu.COOKIE_GDPR_PREF_NAME,!0);if(c&&(c=c.split(":"),!RegExp(a.behavior+"."+a.behaviorManager).test(c[2])&&(/(,us\|none)/i.test(c[2])\|\|"eu"==a.behaviorManager&&/implied.eu/i.test(c[2]))))return!0}return!1};truste.util.fireCustomEvent("truste-cookie",g.prefCookie);truste.eu.isGPCDNTEvent()?g.feat.dntShowUI&&"expressed"==g.behavior&&truste.util.executeOnCondition(function(){return g.prefCookie\|\|g.feat.gpp.gppApplies&&null==truste

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136783
Entropy (8bit):	3.77786879779607
Encrypted:	false
SSDEEP:	768:f5tS3liy5+TvBZ76kSr+P/jJhz1bFjnaWcqwPYuU81ELBKqfN0SuEVS2PWe6Zqxa:f05+TvBZ77Ssdu7SLoeN0REVTW5Zqw
MD5:	7F96F8A6C443CE4D6184291C3AE2B8F8
SHA1:	77FCD9DCB0E94052EAA43F96B3863998F08D3E43
SHA-256:	A1480537685D12FEAC9D0F29004627501DB0C832C595B4B0B6B36B86A9C9960B
SHA-512:	C5BB83DCF4968F495FB0DC38F8E237CA425C11EF576D6EBBE1E2871FD20BC9BFBCFE01608F4050DF67B3A28E9719A951D1B0D8B27C41DD9286FA2B445616FA0D
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>Integrations \| ShareFile</title>... <meta name="description" content="ShareFile allows you to eliminate manual data entry by automatically syncing prospective client data with various third-party software packages.">... <meta name="ctx_product" content="sharefile_main">. <meta name="lastModified" content="April 1, 2024">.<meta name="googlebot" content="noindex">.<meta name="robots" content="noindex">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm-u6_UtwuyIN3fURpkBgy4E">. .. .. <link re

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon
Category:	downloaded
Size (bytes):	11836
Entropy (8bit):	6.21678480595952
Encrypted:	false
SSDEEP:	192:jkTxRxECEJWpu+hw6XSYL/w0+hFZK8SpAChpOPgNFX9+bO/H3R0c2lPV2K:YNHECEJWpuov+hFZK8UpvNp/hp2d5
MD5:	CC29191C839C2869470B7F71503B724B
SHA1:	ED66A0DC0B0A871AF365C98317FB9F97EAD2B2C8
SHA-256:	FB73D34DDA748822B47633DCF7AAE65425833A865EDF83F1318D4C85749C7004
SHA-512:	76D68F7DB0A09614BB6A27DFE722FA0FE7CE9C36F93C19F3055F71C8F8D0CB0B30303A27A03F29ECB70AA98B6ECBBF123314A4E65D0CEE591AA36F1A6CC4CA22
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/assets/fonts/sharefile-icons.ttf?ptbtl7
Preview:	...........0OS/2...........`cmap..........lgasp............glyf{v8.......).head7i.g..+....6hhea.v....+....$hmtxuo....+....`loca..un..,@...2maxp.,.h..,t... name.J....,.....post........... ...g.......................3...................................@...1.....@...@............... .................................P............. .....'.1......... .....%.0..........................................................79..................79..................79...............m...........-..................32675?.>.71736.............1..."......5..'..#........3...3......;..6?.267>.7>.54&'..'1..#"......0.9.8.1..38.31.6'..'#&..7...1....67>.54&'...'&.........3.27>.76&'0"#"..1....1......1.....7>.75>.54&/...'#.............1....&'..5<.5.>...............1..3>.7>.7#>.71>..........7>.76&'..'#...............................z..................D.....3A.........!2........HY ...........!..L..`.o...........................................................&>......"....+B...#.......(.3..........$E....R4DAh......

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 423, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70843
Entropy (8bit):	7.986387171882486
Encrypted:	false
SSDEEP:	1536:z8juOdHImMH2nhRWT6S8U1b/nq8gYmXWL7ZZDBYhoGQwDQNvcZ4IjTuadMc:ZAQGha6f58PmG5ZDeh/QwR64Z
MD5:	40719EEF8ADC4C3386190FD6BFAABB0D
SHA1:	03CB38FD4D513912D648F91D68E7937B04948E4F
SHA-256:	10F44C003D388C2AE21D87449ECD28A48B2B78D0C936BF20854FF347A6899FBD
SHA-512:	D7CC1C59DBF988AC5C654010BC1B8A7B2D2D28F2DDE156CA88F36C4CE671B33024CDCC957C0E53D12810F8EE8B9989054CDA43149E774D93F1032F645CE27F8E
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-plan-pricing-2.png
Preview:	.PNG........IHDR.............UC......pHYs..........+......tIME......%...... .IDATx...wx......l.$.... @.PB...wi.(bE..^...x/^....(E.H..k.-..J !......H.P.E...gg..3..g.y......B.!..w)....@Q.kn.....B.!...O%...B.!.(S.E)..+...B.!.(34..n....FS..J.+..B.!...F...a.....UU.h4...!..B..#66...TRRR...-.. Y...B.!.>233.k....X,..d(h2.....e......r.ei...lh.Z..n7f...m...B.!..K.e._..5[.n%99....W....a...6.!C...^.F.E....k..Gzx..B.!...TF....s.{A....^...}...o........v...x...HNN.s..7}r!..B.q......c.q...;].[R.B.&N.....oj...ARR........w...v.......C.z..Eff&..5...?..f#$$...+....7...y..'o..~...Avv6n..UUQ..x.^....w/...T.Z....3x.`.5k...K.!.....D..9t....o.......i....u:....q..y.z.U.;......`0....ng....1....7>>......8L&.N..G.}...~..F.?............{.EQ.h4.....\.rL.8..^x........>.....+...B.!.._....v.....>\|8{.......k4.t:.5{x...^....,Z.n..O?M^^..&Mb.e.Z....p..>...t..&M.....F."==..s.R.B.6n...#.j...7....\|}}..X,h.Z.F.Uu.........R.-.F.v.......YYY\.x..S.......AUU.Z-..4..>....UU.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 550 x 237, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	62383
Entropy (8bit):	7.991149064248627
Encrypted:	true
SSDEEP:	1536:l2j4HgH7NkxqDXBGh9X2dDKo/VbBJUvobqYsj:l20HgH7wcGhWDKo/VbB60qH
MD5:	44880511582FA180946D9015F6517D1B
SHA1:	96F878334BA421058AC57B4E6DA23A1375B5DBFA
SHA-256:	CF962AD83F92281DA17816A55296603B0C7F58310B8C7CBD4C402A186C0AA844
SHA-512:	3140F15534C4F998BC8BFD6C86BC873102D5D3AF291F727BA15C3BD53EEB3E5D91D583A3415CF08821B741006D85231302B8753AC96D5BDDB8B138EE5EEDBDF4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&..........~......pHYs...t...t..f.x....tIME.....!.tD.... .IDATx...wx].........m.[r..`.6.1`L5.....H.y..I.L&sg.7...nB.I.!..........%.HV.]..z.8.b..l0......t..Z[G{...%=..#.. .. ....l.@..A..3O....]..&..A..A..H..e.8.}..r.D`".. ...I.0M..PU..m...L.A....bZ.^..Y..vaN..L.A...BrL...o.%....t.....$I...+.. ...&.,..)=.O...i_X.Q...=.$I..$I.~.A.m..0@.t..O.RBU..q. .. \|!....E........o..m..y..,Ix.^.E..OQ.\....`0x.[!.EA.u4M......b.6.eQ[[.m.\|nM.hjj....].O..$..xQ..1=./.....K......DBr-.Z.1..rF. ._.I.......p....\|....cL.^/....4M..>Lzz:%%%...2m.4....a...I.w.....E....+...EQx..;w..'L b..F..n8.........)J..o.6...o.^6m.<p..0(.....~..\.s.=....Obb".m.....\|......3..Gq.e....`Y.q..L.t&Y.>"..,+.........lb...\u.U....AUTTU..L.WB6..Y....Bn......k[..1.LV.T...'.`;._.. \h$.d.Nlp..h .ygj...F.x.......".2.e.1...n....$...4m.ccp..3I.$..x...4.7W.....!C..r.JJKKy...m[.....d..5......0w.\JJJx...PUu.e#.....;...i...........=.4x..`......C ....*.....2n.8....Q....!77.I.&.t..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16331), with no line terminators
Category:	downloaded
Size (bytes):	16347
Entropy (8bit):	4.951741797406929
Encrypted:	false
SSDEEP:	384:mLYj18r9Am0/LD/M8SDg+ufs6j26qJynG6Vcrsi:mLYj18r96/LD/M8SDSs6j26qJynG6Vc7
MD5:	789B87CA0360E90875B1F43F892348B5
SHA1:	8635A03DE092C27979DA4A3269CA364AC564EDF6
SHA-256:	0A7CE6D3BAFE15E682D3F05EE53B4B0C69D2FA543579F38B6C9CFE06F498A5C5
SHA-512:	7F4D3B700891C5BAF955EA4F2D3A6B9AB4D343F8C7B1BEE6A226F7869759BD07EA1768DE8DCFDDC4DEF378B7F5A728BD2DDB0CD7C88D0076EDA74CB5E109F797
Malicious:	false
Reputation:	low
URL:	https://d.la1-c1-ia6.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp?Settings.prefix=EmbeddedService&org_id=00DDn00000AvI1G&EmbeddedServiceConfig.configName=Service_Group&callback=embedded_svc.liveAgentAPI.handleChatSettings&version=48&EmbeddedServiceConfig.language=en-US
Preview:	/**/embedded_svc.liveAgentAPI.handleChatSettings({"messages":[{"type":"EmbeddedServiceConfig", "message":{"labels":[{"labelValue":"We.ll be with you shortly!","sectionName":"LiveAgentChatWindow","labelName":"QueuePositionMaxMessageSecondLine"},{"labelValue":"Hello!","sectionName":"LiveAgentChatWindow","labelName":"WaitingGreeting"},{"labelValue":"We.ll be with you shortly!","sectionName":"LiveAgentChatWindow","labelName":"WaitingMessage"},{"labelValue":"If you're still there, let me know if I can help. Otherwise, I'll close the chat in a couple of minutes.","sectionName":"LiveAgentChatWindow","labelName":"IdleTimeoutWarningQuestion"},{"labelValue":"Offline support is not working right now. Please try again later.","sectionName":"LiveAgentOfflineSupport","labelName":"ErrorDialogBody"},{"labelValue":"Thanks for chatting with us!","sectionName":"LiveAgentChatWindow","labelName":"ChatStateHeaderGreeting"},{"labelValue":"Last Name","sectionName":"LiveAgentFormFields","labelName":"Contac

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 397 x 222, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24472
Entropy (8bit):	7.972435960395898
Encrypted:	false
SSDEEP:	384:m8OF0MF53D0Kw7dwvVnKCsyhLfW6GMAuGegxgiaw0m0NxmzfMOuxfYtnUcJRFLeR:YF0c5hMqirCgxglwZ02zfMXxoJLLkos7
MD5:	15F9099BD909C5F3C9DACB93431DF41C
SHA1:	F481DA5CDA80E1981DB952E042C01BFB73E52B80
SHA-256:	06162240B67E9AC8DA5DF0DEE79BE5486087FD0CE7DA956774001FA3AA689CEA
SHA-512:	BDB038A33290624D073E73F095A37514D5807F8DAFA63AD605928FCC515735D622ACE4BA6D53015EFA28ECE95F198C78389F62138B444215FE66193D28A5D712
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............\<....pHYs..........+......tIME........3s... .IDATx...wx.......jK..j.r.......).i...K...7..)..\B.'..@ .lS\....{..-[.e..Zm...!..!...`H..y.<+......s....<.A..Ah..J.@..A....!.. ....A....>..Vu).}..{...+..[.....F..~.K....>.9...D.u....O.......w..#...Q.....b.9p.../.{.)>... ......]w._=.(.PG23.X:..[U..oid.#....?2)5.....g..{....9.R2.)..#.Mo...+.~.3a^...]...$...4\|.%<:k9M....A..!..=h8..M.......%.6./.....Y..!\? .%s.a..K........0......e.f..l.......u....{.y.l....2....Wo#P...2...XNI..Q...~...-.^....G.G.c@~'v.../m(..e...`.z...L....=......4..X..>=......O..G.N...f....Q.N.C..x..u.d..oRW^~z>u.K.^....F.{.>r3SHKM..Z.}.yJ+.a......H.+...A...KW.iE...o..../...c.(....8P^.....9q....0.WM...:;..g.....U\|..?..E$..yz.C(#..?...J3[V-.......9~.8.....=.s..N...<R..c.......nb.y.e.1...29+..XFU.Q..r....C..y....Vf...e....~.t..I...O. .s#...?.....Z....C......m.............3.../e...I>..,.......d\|..".g...A.>O....k.=:..~.?.].y....W....N.h. 1.Ap.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3999
Entropy (8bit):	7.796277534863661
Encrypted:	false
SSDEEP:	96:rGgyclGQCmzFObqXjdT91qP7PF5X6+buD:rGT9zY5TjqP7zwD
MD5:	42C25D5CF06833515FEECFB6EA79AE56
SHA1:	7DC1B4BBD05648F7B0BCE76AB86DE88CCE35885D
SHA-256:	3A61D6C5FE82BF715FAE66ABF4042E5844F823EC80095811C75DDCBF84F1DEF7
SHA-512:	D2186833FC9F8E293C71D40D49F53C9BCBCE7B3FCAA5AB3D27163A92BE472617E48BC098D190DCC1C9C56D9BB9419D7E1582011CDCADCC76E6ED70028F6F2625
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/file-asset/Property_1Black?v=1
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...........................`.........?...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe......./........pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe......./........pixi............ipma..........................iref........auxl..........mdat.....%....2..L....b....s$O..1..........n..O...r...[....._.._....@..P....AQ..w..k/8.......utK.fw.Z...F....\|.X.U.:..R].../..}.%v..8......{+..,.;!5...s8......j..JL.l.w4u..x....\|v...&..3.(.}}..DzP.R..g.r...h..'.....1..VB.#....=...G.f..30.@.p"h..^..d.a...#.:.X.N.L../....`Twg..K.TOnk....13y........Gz......sGe....N.M..<...HC \|.. ....a.f...x.7\|z!u...\|...FZr..uo..r)p.X.....y.......q.H...Ef..c.. .l...DSM!..f..,....RVtv....k9.M^...<XW)$......=X.t...._\6..U@.y;..0............~`.7.z `]....g.9F..8..{UPE.&...Y...J........E.f.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (857)
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	5.371008024114514
Encrypted:	false
SSDEEP:	24:8to5gct/BVto5LF/E8Aj8vHIO6P4vltavleAg8vHSUvDB+DhIrdlz1mRlz3lv:8to5nt/BVto5L1Efj4oONmjg4D0dIrdU
MD5:	FBA07869A0D990A496F4A23EA5459167
SHA1:	B8CDEE3D02B0520689AB15E042FE84C847772295
SHA-256:	73642D90A207E379B81AE474B322802E0576E1320DD8C6CA4D2B89B515D3E995
SHA-512:	7C481763402F4BC93515638E8B84937141609F80E31B00D88F7BB9C27EC1CC9F987E00006CF9CDF6D33A8F0C49B900C5B9A2902CF30B0B090EE168E38465D0BC
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC89d456eb3ce9483bb655ec17c4c10fbd-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC89d456eb3ce9483bb655ec17c4c10fbd-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC89d456eb3ce9483bb655ec17c4c10fbd-source.min.js', "if(\"undefined\"!=typeof jQuery){var pageHeight=jQuery(document).height(),viewportHeight=jQuery(window).height(),initialPercent=viewportHeight/pageHeight,maxScroll=initialPercent=initialPercent>1?100:Math.round(100initialPercent),scrollPercent=0;jQuery(window).scroll((function(){var e=jQuery(window).scrollTop(),r=jQuery(document).height(),t=jQuery(window).height();(scrollPercent=e/(r-t)100)>maxScroll&&(maxScroll=scrollPercent)})),jQuery(window).on(\"beforeunload\",(function(){var e=1,r=Math.floor(maxScroll);r=Math.min(r,100);var t=Math.floor(maxScroll/e)*e;t=Math.min(t,100),_satellite.setVar(\"scrollAmount\",r),_satellite.setVar(\"scrollInterval\",t),_satellite.track(\"percent_page_scroll\")}))

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65441)
Category:	dropped
Size (bytes):	2063672
Entropy (8bit):	5.485249591123425
Encrypted:	false
SSDEEP:	49152:1mdvdA0kWYwHLsUOwUddAZbzMiKooElHh8ed:eJv
MD5:	0F45B1C0C4F2157E47A0300F0C999E13
SHA1:	6947A87FE6C85514395F64DDF72F167241C9E08D
SHA-256:	18279C20BE124A0E968EC7D56232DCA7D2E28A550A6CAA16492280D0605ECB3F
SHA-512:	A488602292F7630AB01FEF7FD9AFA9CF927ACA9C6A495AB17501B5BDE3E58BFF457E6E33FC00E1078BDFD97977A196A1DD200C722BEDEEA1A5B229F5D45F881A
Malicious:	false
Reputation:	low
Preview:	window.instanceOf = window.instanceOf \|\| function(arg1, arg2) {return arg1 instanceof arg2;}; .!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Coveo__temporary=t():e.Coveo__temporary=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var o=i[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n=window.webpackJsonpCoveo__temporary;window.webpackJsonpCoveo__temporary=function(t,i,r){for(var s,a,u=0,l=[];u<t.length;u++)a=t[u],o[a]&&l.push(o[a][0]),o[a]=0;for(s in i)Object.prototype.hasOwnProperty.call(i,s)&&(e[s]=i[s]);for(n&&n(t,i,r);l.length;)l.shift()()};var i={},o={88:0,1:0,2:0,3:0,4:0,5:0,6:0,7:0,8:0,9:0,10:0,11:0,12:0,13:0,14:0,15:0,16:0,17:0,18:0,19:0,20:0,21:0,22:0,23:0,24:0,25:0,26:0,27:0,28:0,29:0,30:0,31:0,32:0,33:0,34:0,35:0,36:0,37:0,38:0,39:0,40:0,41:0,42:0,43:0

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 394, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50389
Entropy (8bit):	7.987116407157837
Encrypted:	false
SSDEEP:	768:FzxlRE3PK8+fGd6B4PAJS8SvYaFJ7c1DYxsaKAKhErrrIFcU19Bwen7sVXLG8+t:F+/fuY6iPAoNvYaFdcaua7vrrpUhsVm
MD5:	81A49E7151598EE40CD3BB61714ED9A4
SHA1:	0F9B4BF765D251CFDD9EEE8ADD126BB9E63F8DA8
SHA-256:	1B14CC05DC28F732C76895BFCEF4CD0CC8BE230EB8E093DE23F26E46AF488DE4
SHA-512:	EB1C38A625C059FD5F9538C612F5F91A2E52814D82C4F56F4836D35F293DE1516A6F459CDE84CA74DE637EEE99EBD38272825B16426F6DDA18A5AEB0E08D50CF
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/int-export-1-frb.png
Preview:	.PNG........IHDR................;....pHYs...t...t..f.x....tIME.....,mV.... .IDATx...y\|T.....Yf.d.C...@.AA@@.A..^.]..^...Z...zo.Ck.n..E\Apa...UvP.$.!.....v....)...`B.<..@rf..g....,.s..^x.D..$I....EQ....0LLS.u. t.I..$..J.E!&.C......N_lL4~....jdIB..... ..)Y..GyE%H....t...~.0M.I....E..J...i~.EA.....D.$.E...RRV.,....`...y...~.i....l.+ee....c.&.,#..wA..9I...1.nP]SKEE%AN..1......P....9.......rQW_Osk.......bAUU.E....p.3M..0.....>..n<^/6....8.6+........(.0..$....ziii......K.+..p.H....a......j.....nE....0M0MlV+..(......u-0.^. .?...vUQ.XT$I.0..C.yw$...0M.]...X._<8vl-..pv..qn.a.z..F85..=.>........p.....A......... .=..tA..A..D... .B.......A..Lb..3s....lA.......".;...].. ...'..9.}.....A.N.w3.b..n;(.4M.. ...r1...^....\. .B..S.E.z.]].v... ...5zl.w....e..A....2.....(J..@.. ...UzR.wY.. ..A..........sE.@.. \8~.5M.G...>..\|.].NX..7K..A..s._..s.G....Z.i.Z. .B.;. =..\.5.....L.X.. ...\..~.Z./.P.Q....../.[...g.l?.Y...P.PC.[..;{.O7.E... \.N....../.P.~6a..\....9......B..u..

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	950289
Entropy (8bit):	5.37962459100762
Encrypted:	false
SSDEEP:	24576:JyInpJrHdz8xLy4BUrYDqgX5GKIVTiI31ib3/PHDPdRhU+:JyInph9z8xLyGUrYDqgX5tIVTik1ib3Z
MD5:	C5162D27D15C2506D3B14ACFD4B74E3B
SHA1:	2BDB4C5D4D5BE486DE23AFC8B3F436B23313062C
SHA-256:	DB2430E2DD779CD3979008EBB5CCB1546D61BCACEAA6B2BE87F135FEAFFFCFF2
SHA-512:	ACED578B70B1FACEA478D32A8C841D4C07D3F6A730C716B9742364B4A60E4474CE4DEA25DE9B021650A92AA5148030752D2EF0DFE241503D4C0F5494F05E7174
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22f4459f2b-83a1-40c2-bdc2-38003bb971af%22%2C%22routeType%22%3A%22custom-community%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22params%22%3A%7B%22viewid%22%3A%22bddc4e88-c91b-48fd-b24b-671595b1debe%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%2C%22priority%22%3A%220%22%7D%2C%22publishedChangelistNum%22%3A46%2C%22brandingSetId%22%3A%22f8a65d86-3288-496f-bcd1-5762be189f66%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22-lAyjg7Rz5q_SREY4hPdNA%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwMDBlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-bddc4e88-c91b-48fd-b24b-671595b1debe.c46_0"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"f4459f2b-83a1-40c2-bdc2-38003bb971af","themeLayoutType":"Inner","params":{"viewid":"bddc4e88-c91b-48fd-b24b-671595b1debe","view_uddid":"","entity_name":"","audience_name":"","picasso_id":"","routeId":""},"priority":0,"includeLayout":true}},"version":"60.0"},"error":[],"components":[{"componentDef":{"descriptor":"layout://siteforce-generatedpage-bddc4e88-c91b-48fd-b24b-671595b1debe.c46_0"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"f4459f2b-83a1-40c2-bdc2-38003bb971af","themeLayoutType":"Inner","params":{"viewid":"bddc4e88-c91b-48fd-b24b-671595b1debe","view_uddid":"","entity_name":"","audience_name":"","p

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	downloaded
Size (bytes):	2547
Entropy (8bit):	5.089312782425005
Encrypted:	false
SSDEEP:	48:HtdOCY3p3s2rzNzdif7jci3u8BTpjTuTM4C48BTYDe34qAdsiodP8BTVgz:HtdORBa//u8BTpKl8BTYDpOP8BTS
MD5:	BAD8EC329327C0CDC7DE27E5CCA2FB37
SHA1:	2683CB6FD84BA237B85BC2974B9DD147BD681855
SHA-256:	F2863821119660D61DEA8C3D9024B49B3CF368A87F54FADA27A95379F20CE92B
SHA-512:	B2C0B63D86D4F0AF78DA86CCE5B6842877757F4BF5E354858344DFBAFF8914594EA675D777E3B9E0A38C2F81167E05E91689F82ABD55BB8DF16286B6C9F15BF8
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/frame/session.esw.min.js
Preview:	/. Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. ./.window.esw.defineFeature("Session",function(a){function h(){this.trackedKeys=[];a.addMessageHandler("session.set",this.setSessionData.bind(this));a.addMessageHandler("session.get",function(b,c){parent.postMessage({method:"session.sessionData",data:a.noSessionStorageAvailable?null:this.getSessionData(b,c)},a.parentOrigin)}.bind(this));a.addMessageHandler("session.delete",this.deleteSessionData.bind(this));a.addMessageHandler("session.deleteAllKeys",function(b){this.deleteAllSessionData(b)}.bind(this))}.h.prototype.getKeyName=function(b,c){if(void 0!==c&&null!==c&&"string"===typeof c)return b+c;throw Error("key is a required parameter must be a string, cannot be undefined or null");};h.prototype.getSessionData=function(b,c,d){var f={},e;if(b&&c)d&&(a.noLocalStorageAvailable?d=!1:e=localStorage),d\|\|(e=a.noSessionSto

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 327 x 450, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	19563
Entropy (8bit):	7.954733637959808
Encrypted:	false
SSDEEP:	384:fK4MZtmAEeefStVIACrvf85k5am2ZY2e0GQXPqumUamN1G0lpFnQ:fKJtCesStVIlrv8k5d2W0GQiumUaq1Gb
MD5:	AEA3AA8D05A59AF73AC8C849F7B7406D
SHA1:	095BC5B66B079A93AF937E56D87276FD9A59E753
SHA-256:	D951FE2F797692D886DDC4351FD94BFF0E2E8CC8A3EA01AC9B4D82008A07858E
SHA-512:	A6BAB7B2933D1C270222B9F00BE4AB884B37495C5B9FA1AC29F2A35E3279C2D6CDF820B407971D19D91ED30024E7B674AC03EC24424A6DEABB018813AE20BE53
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/captcha.png
Preview:	.PNG........IHDR...G..........V.W....pHYs...%...%.IR$.....tIME.......$].D.. .IDATx...w\|\.?.sn.^4.2.Z...w0.CBHH6.eI..'......}6.y...n.......!.l.q..l...4U.~.y..X(.\$....~..%...93..=.{.9......B....9...@i ..(......T..4.j...R...@..P.H5.J...@i ..(......T..4.j...R...@..P.H5.J...@i ..(......T..4.j...R...0.H$.e...%.a..X.........l...2...........`.aX=....+[.(......T..4.j...R...@..P.H5.J...@i ..(......T..4.j...R}U....... ".....0..@.iln...(.!$IRfFz....+.....F..r.....:>..{i......Axo...Vfef..>g.r..^oQa.Ux-py....F..Z-##....VK.V..8...?]7J.t.=wtu.54J.....t....1g.r...H....:\|..244t........W......(.,..i5...-.7!..{z.....q..+.-.7#..8Y....h.n.....x.........m.......{=........N..u.....\|............uk./=x.Hiiq......X]......Z..n.!33cz9.[Z..@..`(..n....L.aX..8n....C.9.[6mdY....M-.&...m[...;.....e.f..Y...........+.,..w...G;..S....5.....'.....uk.....=~....h4.t....c.N...e....3u..[...[.j4.3g...jIE.$IG../+).y~.G.#...%..U.N..5.M%..v.XwO.......qgrr.5.W.__I..>... ..v..v.../[

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1049), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	75592
Entropy (8bit):	4.656586550063902
Encrypted:	false
SSDEEP:	768:ntjDj4YuU81HkeKqfN0SZ9VS2PWe6ZqxJg:nPu7RkReN0u9VTW5Zqw
MD5:	C0B916702384724D0561F38F362233E9
SHA1:	746F139487B06E3A56F1C674EF033E6A2BD8C43D
SHA-256:	2112F13EDBF8C838E063836047A0EFCC1F7E12FE3FAD37F9A2D8C8E3733F7BC1
SHA-512:	B169B1622BE0949F461ADD2D3A7ED0289C5AB3DD865374FEAF431D3560C56880E949F70CDE9BA55E772D12A3FD7E3BF6FA36731D8C01293B7CBA45B09DEE2096
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/electronic-signature
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>RightSignature</title>... <meta name="description" content="ShareFile delivers electronic signature ability using RightSignature. An electronic signature, sometimes known as an e-signature, is the same as your handwritten signature on a paper document, except electronic . a mark on an electronic contract or document you make to demonstrate your intent to agree to the terms of that document.">... <meta name="ctx_product" content="electronic_signature">. <meta name="lastModified" content="December 8, 2023">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	139349
Entropy (8bit):	3.807872248281327
Encrypted:	false
SSDEEP:	1536:yfqA5+TvBZ77SLdu72b5bPfeN05vVTW5Zqw:yWyb57WKW5Zqw
MD5:	947ABFFEB48050500ED0DA765C1A6B2F
SHA1:	D52E321A2547C668174E11659517077439EAFDA6
SHA-256:	8FB75883BDB40E90DA08822093B7190B8A4FB7EEDD63979DC8FE7151CF2AD0FD
SHA-512:	70461D28B8192321397405450A4F2DF4A20271E26E08A921307C5DA806180E3C091BCD16B13FE444C7D2EC6DADC3C76E4FAD9338544E9EA27AD7A8305C444309
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/configuration
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>Configure ShareFile \| ShareFile</title>... <meta name="description" content="After you create or link your ShareFile account, perform the following tasks:.The first thing you need to do is provision administrators. When your account was created, it was provisioned with an account owner.">... <meta name="ctx_product" content="sharefile_main">. <meta name="lastModified" content="March 14, 2024">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm-u6_UtwuyIN3fURpkBgy4E">. .. .. <link rel="prec

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	4.984488444453931
Encrypted:	false
SSDEEP:	3:UTVNfx0lb15EDA2XR68fE8sScp6eHXzgW/+ecE1UVkI3yrYVhe:U5ti7qAl83cv38W/I/WY2
MD5:	3D0339480B51F053E8275CE848617879
SHA1:	920DEE3ED64E17939278F0EA0669291BF84087F4
SHA-256:	56ECC7B52DF5E58971C400D6330DB4285CF3B9E65E2AF75D10A4EA56AB0927D4
SHA-512:	86F3D4E1F60A48DBC137A6F0BD58C033C0DE47C2AE97B9562A0BEFED357DB2CCDAD8EAAC6EB763891F52AB52CF201E9CE4070783107E0E6BC57A3DC53162D562
Malicious:	false
Reputation:	low
URL:	https://d.la1-c1-ia6.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp?sid=undefined&r=759&Availability.prefix=Visitor&Availability.ids=[573Dn000000hOkW]&callback=embedded_svc.liveAgentAPI.connection.handlePing&deployment_id=572Dn000000hP8x&org_id=00DDn00000AvI1G&version=48
Preview:	/**/embedded_svc.liveAgentAPI.connection.handlePing({"messages":[{"type":"Availability", "message":{"results":[{"id":"573Dn000000hOkW","isAvailable":true}]}}]});

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	529002
Entropy (8bit):	5.091267286656454
Encrypted:	false
SSDEEP:	12288:MX9KeP2IkOSPt0ut7D2cH3KVeDMfnM2ePEtrf6LeTW:MX95P2IkOSPt0ut7D2cH3KVeDMfnM2ef
MD5:	03871E40F88BC6E79E20C925E4AB9DA7
SHA1:	DB7B8C77614640B43E4C636029BBEC013450B0C6
SHA-256:	639167A694F18A9157AA2F7FA7FEA2B4A2CE312B2B073F1A47E24E2AEEE83444
SHA-512:	711F770C1A574A56631900FC3948EE3E6734560CF0F740FADEAA4A36712E3DA154B644701A5CBDA4BDEEE7F18EC9C421D086A5D8B8D7F8D4C1400E6841CE7579
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/assets/main.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue: #007bff;--indigo: #6610f2;--purple: #6f42c1;--pink: #e83e8c;--red: #dc3545;--orange: #fd7e14;--yellow: #ffc107;--green: #28a745;--teal: #20c997;--cyan: #17a2b8;--white: #fff;--gray: #6c757d;--gray-dark: #343a40;--primary: #007bff;--secondary: #6c757d;--success: #28a745;--info: #17a2b8;--warning: #ffc107;--danger: #dc3545;--light: #f8f9fa;--dark: #343a40;--breakpoint-xs: 0;--breakpoint-sm: 576px;--breakpoint-md: 768px;--breakpoint-lg: 992px;--breakpoint-xl: 1200px;--font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";--font-family-monospace: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace},::before,::afte

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 267 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	45374
Entropy (8bit):	7.975621347156141
Encrypted:	false
SSDEEP:	768:v1d1IHSyq3ShQ6s5u8CsQvFyeB5TQW5eqbbXP3LmwwTeaNBddAnRhY0HPzFRbnJJ:td1IyyqmqpCsQvFy2TQWMW/3qfe2B+7f
MD5:	181062EC09699CCD007215C1BE11776D
SHA1:	68EA2B3B785DABC417BD08071D5ADACBD894F3A8
SHA-256:	D1DB84F960FBFBA9A94468C4337F621EF02FEA4706706E7B0AE4C49BE921F9D0
SHA-512:	9FB074058C2EE9EF317006DA213B9B032498D5D5009BEC3043BC668B3041C360C9127F7DE051943AE5464CEC6A72532487F92F148AD8F783D81C07594FDF05C4
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-1.png
Preview:	.PNG........IHDR...............E.....pHYs..........+......tIME............. .IDATx...y\|T.....9g...... ,I..VE.D...Rm.....[...........E....Vm.V.D-.( H..H...@...6..~f.....bTh!~.<"..9sf{..\|....J..i.. \|.._... \.DX..0,",.A..... ....A...S.E0....!..%.....Gy.gp:......Jgg'...3o.B.......@ ...A.d.s%..M{{;.....j.=....P^^.7..d:............5...&.PWW.....,Y.....\|.G.1....CUU$I. .........U.Xz..>\|.M.7....'.... \....~....Coo/...o.8a..UU<..c...[8.../^\|...\|>~.._../2j.(T.._<......,[..............(M...s.\|.r...e.M.p.\\|._d.Y.^........AyE.>... \....N...<.$_..N.....C....B.$.z.M.cbX.l.........nC..qd.s.N^z.%..?e..x<......'?...'O&--....b..t...Itt4....G{{;.....$L&.........d2!I.===.l6...>.....z=)))C......G.y.....,.bc.........<i..UUX....K{{;N....xl6.y...2r.....f.....=...O...k..l6._.._H..$I...1c`.i.J[{;n..........~..444`....5..^.;....k.Qz..)....W.b................+.d.......\|..^x....Z..Y.n./...F...~.....@Q.n..6~...a4.....b..g<...RV...).......(....~.;^y...~?.......Y.>../...

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32585)
Category:	dropped
Size (bytes):	149668
Entropy (8bit):	5.3343613246873
Encrypted:	false
SSDEEP:	3072:vyMbbUdceuBi6u3bJ0QVtfuBYnWUkqMCsAb9:6mUTuBDu3bJ0GtfPWUkqLDb9
MD5:	CDF38374CD5EDD4C945ADF376080E18B
SHA1:	6E6D71303E59812E5ACD1E9D0062F11F5B820F11
SHA-256:	78BB23FA7FFE0D40D6E9D3FBBE3219B14AC4F84AB8B8A2DC29CD7C42755DE28C
SHA-512:	7BECC13DB4071DF52E98F0CC495415B97FD4A8E879FA8AA68EB2FAD23E791546EE7443C9EA5F4BF8EDB43A552145705A2480D3789013F7EF3AE9F144564A92B7
Malicious:	false
Reputation:	low
Preview:	var c4sf;window.Coveo=window.Coveo\|\|{},function(){var o,a,i={4736:function(t){t.exports='<svg viewBox="0 0 13 13" xmlns="http://www.w3.org/2000/svg"><g><path d="m0 .05446421 13.2302246-.05446421-5.1328965 4.82505531-.12313645 8.31155399-3.31868579-2.5443468.14271201-5.71511099z"></path><path d="m0 .05446421 13.2302246-.05446421-5.1328965 4.82505531-.12313645 8.31155399-3.31868579-2.5443468.14271201-5.71511099z"></path></g></svg>'},8558:function(t){t.exports='<svg version="1.1" id="Calque_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 90 78.58" enable-background="new 0 0 90 78.58" xml:space="preserve"><g><path fill="none" d="M66.024,56.591c-0.014-0.199,0.001-0.395,0.014-0.592c0.006-0.093-0.001-0.188,0.011-0.279 c0.02-0.148,0.064-0.289,0.099-0.433c0.031-0.131,0.05-0.267,0.094-0.394c0.031-0.092,0.082-0.177,0.119-0.267 c0.07-0.167,0.133-0.337,0.223-0.492c0.068-0.119,0.159-0.225,0.238-0.338c0.081-0.114,0.151-0.236,0.242-0.341 c0

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2212)
Category:	downloaded
Size (bytes):	185524
Entropy (8bit):	5.527532481469573
Encrypted:	false
SSDEEP:	3072:WVQaf5qZ3fhO+SWW8wG1LceF2/eaJQtSTnXDL9btIMolbs4:uQX5NeYLceF+jTnXP9RIMy/
MD5:	5A6A8EFDB078E039486B3CFE58130748
SHA1:	2BFF3B25B7DC9BEEBA430E8C977ECB8D255C948E
SHA-256:	59303D0D2818A7CA9CCC6653E801B09F8FE43C45952E86E0622CFC1C367058D9
SHA-512:	019ACDB5402358469F8072555DAFDFE05BE36244F536851CA526591E7FA0DB0E821C22A2C780E5E269E900C4256ADDCB25CA5EC5BE237728A1473E28B3AB3408
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=GTM-T7T5Q3XW
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__googtag","metadata":["map"],"consent":["list","analytics_storage"],"once_per_event":true,"vtp_tagId":"G-W95SLW9E4W","tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__googtag",[46,"a"],[50,"l",[46,"u","v"],[66,"w",[2,[15,"b"],"keys",[7,[15,"v"]]],[46,[43,[15,"u"],[15,"w"],[16,[15,"v"],[15,"w"]]]]]],[50,"m",[46],[36,[7,[17,[17,[15,"

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.5326596074175587
Encrypted:	false
SSDEEP:	12:L2gIRRPoKaBnJtOQGaC90uUCcnSayaUooFa9FaRm8ZetKZoX0GkZA:qnRRQhsQN58cnS5mfFaRm8ZeYZhGkZ
MD5:	17CF2EEE048AC3A02BBF8F690F7C2971
SHA1:	2414A361C15A31449FACBF93C8AC126E9FE66110
SHA-256:	555340319447F2A32D6CB090A35CBD317A125C94B6A58FC4874492E0BE0F7466
SHA-512:	405F694865D3129FE793F780C7F7A855E5714C3A9C691209DA5D1562356FBC4C4CA5B3E25ACCDCFF47D5A53837E9F3A20ACA6CE60AF21F7149847D3ACBFBF544
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/c/resource/FaviconSite
Preview:	............ .h.......(....... ..... .....................................................................................................................................................................................AAA.....................................................JJJ.............................................................---.....<<<.....yyy.........................................................xxx.....}}}.................................PPP.uuu.nnn.rrr.UUU.........>>>.....(((.........................................................................................................000.....###.....................................666.....999.........YYY.rrr.nnn.uuu.PPP.........................................ooo.........................................................zzz.....;;;.....................................................................HHH.....................................................???.......................................................................

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 317, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	67062
Entropy (8bit):	7.991029116509685
Encrypted:	true
SSDEEP:	1536:QV89NhlrBDz46hUMwcRRhAulrOkelgLxjpzAs6JT3/aHodw:QV89NhNx46hUrcRRhAulx1jpzmJTvaZ
MD5:	84FB59553222221F38486C126115E409
SHA1:	DE2F6583101A4B4280161EE4FB381605F3E1F687
SHA-256:	15546F333086DBAC6D3F05107A283A20DEB4C06BBA3DA170C3B6E388C6757195
SHA-512:	FA040086BF76DF651F87A526787F9E550FEA3A7612BB559B47E0BC9391C92CB9E60692FD692870E06AA0F414A22977FC6D5AB4F796CC1E116C16E3FDC8F06B04
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...=............pHYs...t...t..f.x....tIME......4z).... .IDATx..w......#m...{.............%.....%.BB:o.$..B%.C.o.B..c.`.....v..\|w..M+....v%...ymS...yG..h4..g.)...R.P(...B...!.0.u....B.P(.S.,i..2(...B.P...j.P.P(.....h.....B.P(..5...P(...BQc...P(...BQc...P(...BQc...P(...BQcB.....B.P.B..d..2..}].....$....D<...R.+..................d.)-b.((.K.D.L.. ...cU.xW.N..R.x..f..X,....P(...e..E.u}_.E.(I$lb........K.K..G6k2q.x.N.....d2..H..b..l..N.-.g.KJ...;...6..f..ttt.b...K/.DOOO_O.'..}.vZZZ.c...la..,^.........3.<....m3.?.o..yq..[w..*..t.6.zrA..CQ[..`..f...#.<N6k..")...B.....i./..2...7.f.......'.d....4.<.,._\|1.]w......s'......P9.}.\|.[......n`...,\...o....6.=VJIWWW.,}.k.p..T.5o<...... .i#Y....[..?.x...J.q.....,xa.vto>.a.-......=..k.........+..8h....g.+....w...BF}..=O:......... ...7....P......7....9l.l....i...`Y..&L...;.`..\|.....Y.r%.x._...$...../0{.l......d.;v,G.q.[.la...3..ap...3i.$...o.....+.d...,\....N..8.......<...3q.D.......)....w.#.../

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (688)
Category:	downloaded
Size (bytes):	2973137
Entropy (8bit):	5.3619232742723915
Encrypted:	false
SSDEEP:	49152:wJGLrNOxN4Ew+XlC7mj73aG03myTnkSJ4k0G7uUeWjksd+xIcCoi7qKDz3akVEYL:dTkSJKGGunjA1SY36WGJYI7CdYGjfMZ5
MD5:	C7C3FBA8884EF66C7E2CB6D9A562247A
SHA1:	AE66E55AB73A27C0577DF75FC9264F5BCCD0F38C
SHA-256:	B3CE39FB0BCF0DD04B8C1526750A6C6AF1F2DEA9CDF6A751921145E9CC0EDC82
SHA-512:	000A8B94065C31545C70A7667629EA9E74D56D80CABBB68F43C2BA70FA740FC1CD2CD6ED46C6E505E2518F61CB2C50FD89F00B64DE600AC561B2C7ED16CA739B
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22-lAyjg7Rz5q_SREY4hPdNA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=
Preview:	"undefined"===typeof Aura&&(Aura={});Aura.bootstrap\|\|(Aura.bootstrap={});Aura.frameworkJsReady\|\|(Aura.ApplicationDefs={cmpExporter:{},libExporter:{}},$A={componentService:{addComponent:function(a,b){Aura.ApplicationDefs.cmpExporter[a]=b},addLibraryExporter:function(a,b){Aura.ApplicationDefs.libExporter[a]=b},initEventDefs:function(a){Aura.ApplicationDefs.eventDefs=a},initLibraryDefs:function(a){Aura.ApplicationDefs.libraryDefs=a},initControllerDefs:function(a){Aura.ApplicationDefs.controllerDefs=a},initModuleDefs:function(a){Aura.ApplicationDefs.moduleDefs=a}}});.$A.componentService.addLibraryExporter("js://force.sfdcAjaxLibrary.Ajax",function(){/*$A.componentService.addLibraryInclude("js://force.sfdcAjaxLibrary.Ajax",[],function(){var g=["while(1);\n","while(1);\n".replace("\n","")];return{parseWithCSRF:function(d){if(!$A.util.isString(d))return null;a:{for(var a=0,b=g.length;a<b;a++){var e=g[a];if(0===d.indexOf(e)){d=d.slice(e.length);break a}}$A.assert(!1,"CSRF protect string not ad

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 520, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	59073
Entropy (8bit):	7.965247546319023
Encrypted:	false
SSDEEP:	1536:/Kg8sRVKd61BgKBGw+HLagl4cD44JhIaB3MhAMDqld8aCSW8:38sGEg8Gd2cD9C43MWQKX48
MD5:	A0F79726D4BEF21FB9398F0A3A868E9E
SHA1:	C0A31755D934EF07DD03C6595CA67C99147F8B9A
SHA-256:	F98F4CB253AEE19ABB92AA7A6B6A71B56CC86C266A08551D7FC21B9FA302E08B
SHA-512:	C16D292C5521E84A538A853C5B9C56CD689D5D67F0B25318BB895DBB1658D88C7AF67967FE7B2418467331889693670EA1C782F9D8C0549F2AE62344E270614E
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/password-5-a.png
Preview:	.PNG........IHDR... .................pHYs..........+......tIME......&R\|.j.. .IDATx...w.\g}...........e..wcl0...B..H8..NHNnr..&'....J @0.6.`..-7Y..-........?...%.&hoY..~.....ff...Z........!.8.....l......TJ..l..B..e....B.!..B..."..B.!..0.@..B.!....z..<_S.z.=..yN...A<l...(.<..O,l...s2..P......D~..].!..B.5.n.......l?ZF)..`.z[:.o].....5.\|......zan\?....4.n.e.<.]..%s3g{...B.!....n..W<..>..}.&eCDl.b...@..}.....C..R.....T.,...9oF.MO.aoO...o..!.1.O..'.Sd.c.w_.@..\.....[.J<\........[.....Y^7.(.......WOffS..B..<../....~n_.J...,9d.6Zk.....E.\|.....'u#.<.....!ac.......I..........(...F..8>}....hL..Y.x......l..9.p=..iB..0.I..Z.X.{....!...=.}.9.8.O..c..T.d...4&CX.B.u...a+x....f.hN...zr.....Ja.c.].{......\.b..2\v..-......B.7.u.\|..<.)...h..Mx..\|...Oo...X.l\|+.g............6.!.D.q.{Cw.....m.Z.cR&.v(..z.....eE3.....u=,...k...*.X...K..v.....!_q...q....;.....i.....u...8..L..o=.............<M...FB...<.s..^..`..4.-i.6.{..\|.#Li...+.I.,......r~.;.nA..z.....0\v.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 448, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	110080
Entropy (8bit):	7.993863026173229
Encrypted:	true
SSDEEP:	3072:qsgqM1C/DIIHqi7e1qlsdIYUnD3RTOdsLUGk:q71ChHAqlIINbRa6Ljk
MD5:	0C26B56A2BBB3B5D4A45F8E0C69EDDA1
SHA1:	BD0E6E43DDE05EE8FE111E923F5AC13A75C5BB7E
SHA-256:	95DD3E544DA2DF0531397957DDDE83A222AF444FF1F915FCE1C79CF5F953F7F7
SHA-512:	E9663478A62E05BD9691678FA93264BB2DA53E8B8AF68A33B331D3DAD9652871DE21D1F9971B04AD75ECFD55F3805868E77BF503716E64A48B60D76E785EAECF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............@..d....pHYs..........+......tIME.....,.F..... .IDATx..yx.U...U.....d_.EQVQ.G....QA.p.A.q..DD.Q..sa.Q.._E.eTT.Ap.G.#;B............EwR.t%.t...<<@u...n.:u.Y.""0..0..0L..f...... ._HH. ..L..0..0.......a..a......iy.Vk.m.(B...[B .a..a..iNDQDuu5...\Vx..a..a.6..dBFF..n....:J/.40..0.....}..k..hDnn...>.......b......P......0..0.S?....N...>X.V...+..D............."BHH...^.a..a...BD0..2...."r.0a..a..a..i....:..A..)....2..0..................3gPVV.k....bA........{.w....k...teHOO...KD...CRR..Vx..a..aZ./....}..~..7ddd.Z.f#""..............km...I.PRRRG.e........0..0.S?..Z.m......7zC.6.u.]..'c.Q.n...z.dYFAA...=...^u.U\Z.a..a..%.Z..6m....vY..../.`...9r$rss[.o.).6.......a..a...g........!I....9_}......9r........'.`.a8.....d..a..i.TVV.....u.\|-J...~..w.S.N.H.^Qx...0}.t..0.aaa8~.8.n....?...BTVV..^PP...z.S.NURM.e.....w.)_9YYY.3f.f..c...a..i3g.l.Nt.........-...QAk...X.\|9...qt....=..V.\..'N ((...r.......{.....j.*.?~....h..z.............{w$&&"

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4636)
Category:	dropped
Size (bytes):	143932
Entropy (8bit):	4.83009784040717
Encrypted:	false
SSDEEP:	768:BW+Ubuhx2bNKtQiWnUOyQfXZmytyBhxqZWAVWCjhG45aOqt11hBz:AqkQOoOykXZmy+nQG45a7dz
MD5:	13C3535E66D673AD48FF31EA40772F38
SHA1:	24640EB8CD6A8816CBD677BE6AD8ED7CB455B943
SHA-256:	34B140EDA0CE9324517B581748598CCDAE8F9945D2CC7D72DC622ED083D8C082
SHA-512:	35FF24EFD9DCEC0158299A59E96998B55B6277B2F1E846091AC418B0199E5071645F98F7487F56FFA0EFEE3C10C0D5EB83F4D6E3267FB5EE5837DA8B96F6919B
Malicious:	false
Reputation:	low
Preview:	window.instanceOf = window.instanceOf \|\| function(arg1, arg2) {return arg1 instanceof arg2;}; .Coveo.TemplateCache.registerTemplate("CardSalesforceCase", Coveo.HtmlTemplate.fromString("<div class=\"coveo-result-frame\">\n <div class=\"coveo-result-row\">\n <div class=\"coveo-result-cell\">\n <div class=\"coveo-result-row\">\n <div class=\"coveo-result-cell\" style=\"width: 32px; vertical-align: middle;\">\n <div class=\"CoveoIcon\" data-small=\"true\" data-with-label=\"false\">\n </div>\n </div>\n <div class=\"coveo-result-cell\" style=\"text-align:left; padding-left: 10px; vertical-align: middle;\" role=\"heading\" aria-level=\"2\">\n <a class=\"CoveoResultLink\"></a>\n </div>\n </div>\n <div class=\"coveo-result-row\" style=\"padding-top:10px; padding-bottom:10px\">\n <div class=\"coveo-result-cell\">\n <span class=\"CoveoFieldValue\"\n data-field=\"@objecttype\"\n

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65441)
Category:	downloaded
Size (bytes):	2063672
Entropy (8bit):	5.485249591123425
Encrypted:	false
SSDEEP:	49152:1mdvdA0kWYwHLsUOwUddAZbzMiKooElHh8ed:eJv
MD5:	0F45B1C0C4F2157E47A0300F0C999E13
SHA1:	6947A87FE6C85514395F64DDF72F167241C9E08D
SHA-256:	18279C20BE124A0E968EC7D56232DCA7D2E28A550A6CAA16492280D0605ECB3F
SHA-512:	A488602292F7630AB01FEF7FD9AFA9CF927ACA9C6A495AB17501B5BDE3E58BFF457E6E33FC00E1078BDFD97977A196A1DD200C722BEDEEA1A5B229F5D45F881A
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/1701464332000/CoveoV2__searchUi/js/CoveoJsSearch.min.js
Preview:	window.instanceOf = window.instanceOf \|\| function(arg1, arg2) {return arg1 instanceof arg2;}; .!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Coveo__temporary=t():e.Coveo__temporary=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var o=i[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n=window.webpackJsonpCoveo__temporary;window.webpackJsonpCoveo__temporary=function(t,i,r){for(var s,a,u=0,l=[];u<t.length;u++)a=t[u],o[a]&&l.push(o[a][0]),o[a]=0;for(s in i)Object.prototype.hasOwnProperty.call(i,s)&&(e[s]=i[s]);for(n&&n(t,i,r);l.length;)l.shift()()};var i={},o={88:0,1:0,2:0,3:0,4:0,5:0,6:0,7:0,8:0,9:0,10:0,11:0,12:0,13:0,14:0,15:0,16:0,17:0,18:0,19:0,20:0,21:0,22:0,23:0,24:0,25:0,26:0,27:0,28:0,29:0,30:0,31:0,32:0,33:0,34:0,35:0,36:0,37:0,38:0,39:0,40:0,41:0,42:0,43:0

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22673)
Category:	dropped
Size (bytes):	22901
Entropy (8bit):	5.340918792566464
Encrypted:	false
SSDEEP:	384:yz4g/CcCfVTaC0riJpmvv8WlMP9AP1lEnkYMp42dcSRouj7sK/kEsFbG6cN:XcCcCoC0ryYv8mMPy7vYMTcSmujoK/kK
MD5:	825F724C54292C7121FE3A7D0596FEB4
SHA1:	3FDCE95A267AB5BF087620C5A20F6FD6CF5CCE38
SHA-256:	E13CECDBAAD8324D9BDF164F8BF79381D8AD9DD9B60328811524B0517D737398
SHA-512:	22373CE98FEB3CE142AFE0892DDD1042511A082F73B55245BCFCCAD0332B1C227C6E20E4C90A28E8B97F3A6A8C10E6832769C282C57CF78D364B35E7A1C2B366
Malicious:	false
Reputation:	low
Preview:	/! @license DOMPurify 3.0.0 \| (c) Cure53 and other contributors \| Released under the Apache license 2.0 and Mozilla Public License 2.0 \| github.com/cure53/DOMPurify/blob/3.0.0/LICENSE /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).DOMPurify=t()}(this,(function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e,n){return t=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e},t(e,n)}function n(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30406), with no line terminators
Category:	dropped
Size (bytes):	30426
Entropy (8bit):	5.234433764965232
Encrypted:	false
SSDEEP:	384:4FPIAIsEGPY3PI4Up4cAKCeLoXlAH5PIYTJ76GK7VsgVgaixGvbFRs4cBUzYKWq:KPIAIfwPpLTCWusgpMK/
MD5:	8FE28A025E7321D096C325423F9DCC69
SHA1:	9079349F3803BBEA30E2460159C2B58DCE2BE81F
SHA-256:	8267EB2AE0B03F2765F1CCF6C0F29ED27A2D5332702F483D5B1F88F5EA3A4AD0
SHA-512:	0E463EF02AD2A994C666CD9F71813191F2A7B31FF3B463735F72057EDA2AED0D02129EAF00A70456B73C649F7AF713EAA581E754FABEA0714A08EE1CED5AEE8C
Malicious:	false
Reputation:	low
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"config":{"subjectId":"005Dn000007plZi","communityId":{"rawValue":"0DBDn000000Xhb5","communityId":{"value":"0DBDn000000Xhb5"},"isAll":false,"isInternal":false,"isActive":true},"isPrivateGroup":false,"type":"Home","sortOrder":"Relevance","feedFilter":"AllQuestions","density":"AllUpdates","isTopicsEnabled":true,"isThreadedEnabled":true,"commentSortOrder":"CreatedDateLatestAsc","threadedConversationLevelLimit":3,"feedDisplayConfig":{"feedElementDisplayConfig":{"bodyTruncation":"INLINE_EXPAND","auxBodyDetail":"SIMPLE","topicsDetail":"SIMPLE","bodyTruncationLimit":400,"showInlineComments":true,"useLargeDrillInTarget":false,"showLikesDetail":true,"showLikeAction":true,"showOverflowActionsMenu":true,"showBookmarkStatus":true,"showBookmarkAction":true,"showDeleteAction":true,"showModerationAction":true,"truncateAttachments":true,"mode":"IN_FEED","feedUiDesign":"COMPACT"},"commentsDisplayConfig":{"commentInputStyle":"NONE","pagingMode":"PULL","postA

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 228 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4263
Entropy (8bit):	7.9303525428385315
Encrypted:	false
SSDEEP:	48:zT47+uOS1aIaH/0po78EC1UedkdLfkFrELX+LnKSdW14pNcyUS2HxMbByYZKbzzb:zT47+uOt/OFPlE+tJIDJmbk9bqIjn0jE
MD5:	756B1EA004EEB84A85775C605F388C00
SHA1:	19996C8FA75EB5B9FE03C17CC0C876CDEACBB0EF
SHA-256:	8820BCC8F3572D1DCCC5F2C648B25D6C38CBBC653C5E2AA2FF0A4AB3214ADBC2
SHA-512:	25E7A14AAAD6AC83EBD29C84DCA9FD701A7B10A5E58DC3C20E06F79CF918834DE9035B83B3FC4A62D8B696D0CEBCA4C8B66407629907DF4D62996F4032047AB7
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-logo.png
Preview:	.PNG........IHDR.......<.....v:......pHYs..........+......tIME......1.~}...FIDATx..yT.........LM....RJ..[..H....)..`!....:.q..J...r.........D\..44.P........i........:g.w..y>.g.y.<...""p8....E'..p.....". 9.+....". 9.+....". 9.+....". 9.+....".\..&M.._\|Q..r8/.....<l...P\\..~.....p..U]..wuu........1.+V...K.`cc..-[b.e/:%.....Y.f......?...^tJ..:b.........[JJ...2.**.....",,...2.....[.&M.X ;.>233.}.......4.......V.........+W0s.Lf......h.5"""..'.\|."....JJJ...G...%Kp..q.v{{{...b..h...X....q..f..FAA.....-Z(....c.^..~~~..>}.....dt...qqqZ.6j.Hq.u.9....%\..<y"l.?...=##.).`...v...s...?..C....U..2s.L.1.../..j......q.c.k.e......h.....).EFF...6.........=.......m..>._QQ!....g.T4(--U\|.......)...\|..r..BL.m.UL./. Mj.&&&.w........^xx8....{.n... <<\..w/S~.....'N...A.M....../_..G....?g...+.g..a.K.0n.8l..9.........<y.Dv...rxzz..999.3f.n....0DEEY"U..y.............[.b.Y..).e..;........6.J..prrBaa!. *..V..\|rss.....pvv.i.PVV...U.Vc..puu5:../.k

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	22114
Entropy (8bit):	4.90471671920011
Encrypted:	false
SSDEEP:	384:kgKnbwyPOAELmH+s8OD4geKcVDJdxDdxd/Jlb:kgKnbwyPOAEweKcVDJdxDdxd/Jlb
MD5:	059128E00CF8822208FEE606F3F7DAFE
SHA1:	AF6311BFB1D8965CC8E161E2666718A91367313B
SHA-256:	4762684E849C40FB18BB7B38548D2BEF7EBD8605093BD1A9ADAEE33C46ACE694
SHA-512:	C7B25EF3DB464AF7944F88DB8B96D46BCE771679383A3624245BBE6F3EE43AE67D370E043EB4A5CFCB40AADC4312B33D00D94C0F915E827D2BDF79586F07AC02
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/1701464332000/CoveoV2__assets/css/search.style.css
Preview:	.CoveoResult .CoveoChatterThumbnail .coveo-chatter-thumbnail-img {. border-radius: 50%;.}..CoveoResult .CoveoChatterThumbnail .coveo-chatter-thumbnail-placeholder {. text-align: center;. border-radius: 2px;. width: 30px;. height: 30px;. background-size: 30px 30px;.}...CoveoResult .coveo-salesforce-thumbnail-container.coveo-salesforce-thumbnail-placeholder {. text-align: center;.}..CoveoResult .coveo-salesforce-thumbnail-container.coveo-salesforce-thumbnail-placeholder > img.coveo-salesforce-thumbnail-img {. display: none;.}...CoveoSearchInterface.coveo-chat-ended .CoveoResultActionsSendLiveAgent {. display: none;.}...CoveoResultActionsMenu {. display: none;. position: relative;. height: 1.5rem;. right: 0;. border: 1px solid #ccc;. border-radius: 6px;. margin-top: -24px;. background: white;.}..CoveoResultActionsMenu .coveo-hidden {. display: none;.}..CoveoResultActionsMenu.coveo-menu-opened {. display: flex;. flex-flow: row nowrap;. justify-content: flex-end;. floa

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 50x50, 32 bits/pixel
Category:	dropped
Size (bytes):	10462
Entropy (8bit):	1.7796289145168793
Encrypted:	false
SSDEEP:	48:LcKD+t1r2cZph6FvaMWx5aDZo9unx0ed:LcZtp2HzWxp9unx0
MD5:	0647CECFAE4B353C07A6F326885278FF
SHA1:	A02DA9FF45E2D95C245C565759371EFCBA78862C
SHA-256:	8B569C6BF31E5C9E05DE28E44F039C705A0F322784585AC64352407C31281338
SHA-512:	47C12CA9EE6EAD9E0263D0C39841577389928A87E19EA5EF113BFC54786CCF793ACB7A8967EE1AF86F0C46E6175C111A14241A64C679F2E1634F954747276EE3
Malicious:	false
Reputation:	low
Preview:	......22.... ..(......(...2...d..... ......'..#...#.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4636)
Category:	downloaded
Size (bytes):	143932
Entropy (8bit):	4.83009784040717
Encrypted:	false
SSDEEP:	768:BW+Ubuhx2bNKtQiWnUOyQfXZmytyBhxqZWAVWCjhG45aOqt11hBz:AqkQOoOykXZmy+nQG45a7dz
MD5:	13C3535E66D673AD48FF31EA40772F38
SHA1:	24640EB8CD6A8816CBD677BE6AD8ED7CB455B943
SHA-256:	34B140EDA0CE9324517B581748598CCDAE8F9945D2CC7D72DC622ED083D8C082
SHA-512:	35FF24EFD9DCEC0158299A59E96998B55B6277B2F1E846091AC418B0199E5071645F98F7487F56FFA0EFEE3C10C0D5EB83F4D6E3267FB5EE5837DA8B96F6919B
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/1701464332000/CoveoV2__searchUi/js/templates/templatesNew.js
Preview:	window.instanceOf = window.instanceOf \|\| function(arg1, arg2) {return arg1 instanceof arg2;}; .Coveo.TemplateCache.registerTemplate("CardSalesforceCase", Coveo.HtmlTemplate.fromString("<div class=\"coveo-result-frame\">\n <div class=\"coveo-result-row\">\n <div class=\"coveo-result-cell\">\n <div class=\"coveo-result-row\">\n <div class=\"coveo-result-cell\" style=\"width: 32px; vertical-align: middle;\">\n <div class=\"CoveoIcon\" data-small=\"true\" data-with-label=\"false\">\n </div>\n </div>\n <div class=\"coveo-result-cell\" style=\"text-align:left; padding-left: 10px; vertical-align: middle;\" role=\"heading\" aria-level=\"2\">\n <a class=\"CoveoResultLink\"></a>\n </div>\n </div>\n <div class=\"coveo-result-row\" style=\"padding-top:10px; padding-bottom:10px\">\n <div class=\"coveo-result-cell\">\n <span class=\"CoveoFieldValue\"\n data-field=\"@objecttype\"\n

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlxpEOzAZ3RHxIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 131 x 218, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15238
Entropy (8bit):	7.977285184544566
Encrypted:	false
SSDEEP:	384:io6DTXc4wMOclxpJ6xv+A6j+Does6VTXxzE4odwok:io6HXc4dxJ6x2X+D1j9Sbdwok
MD5:	4F73D9D01711B2F0A700246AF5E92672
SHA1:	AA2AC74EF5631C7B23EA8B01082BFEE4BBCE09FC
SHA-256:	A453F2AFA67BE5DB76772B886B665D3F70B09EB020E679D79EF5D0A40BF53090
SHA-512:	FB597EAE007F6ECA62ED2356A22D59CBCBB024B657D92CC4C9968304FA5667E038966430337118162B7282C10688C3D282FB6677F72B9DC66300E80ACDB87D14
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................Y....pHYs..........+......tIME.....7..-.... .IDATx..wxUU..?...F)$.PB@.....b.Q....3...SuFGg.w.3?.....(...'!..!.IH.....#...%.@..y.<...g....=k...w.K0M.$D....mA..CH.!...!D;!1.hG.fAh<yq#..)....."8.:$..........v$...n.a......AU...2.A.b..t:O).v1.....?OQQ.....[...ijjb....z..?..#.]%.......;..........k.eK..M.<A...B.EQ......$I.r.0..a.x..!.>L.<..5.!...!D;!1.h'$.........B...C.vBb..NH.!...!D;!1.h'$.........B...C.vBb..NH.!...!D;!1.h'$.........B.s.........=.p,t.~.....%.,.]S.z..T.....^(]a....Pu,...^;..:=.}...RW.z..m..f..i1......[.H..^......?.K...8_.F~..G<...I..su..A.......?..^.7........`PUY.....#.....l...x.O0\|.$.c.aM.....%....ED..?........"`v\|.L("...{...I....Jdd$.W.r..x.........%X.-c..6%....<.n.1....7Od...).g.a..#...k(Z.1.vWs./...z>.l..M....y<...........I7c.\|......<...r.....l)5....cBF.....u^.....&q.5...~*....Q.5io&l2..+..p..(P.5!.S$.^.......&.Er?-....A6.&..q.Z.Ss.b...8......y.oXGL...s........?.-...'.....'...D.]..1.......

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 362 x 505, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19504
Entropy (8bit):	7.913752785739381
Encrypted:	false
SSDEEP:	384:HQL5Wt5YeEaAf2f02A7hgbiKL6qhbo3DnhfA7mIc2AME2:wLGYeEaAfIlehBKo3DhfdIc2O2
MD5:	6D3D8F95FDAD1050AE9430F245C201E0
SHA1:	06EA88B6F4F0D16168452CE20B4B493069B61425
SHA-256:	B9DC7B6C452772AE6C12A51721CA1057F572709C9020A1EA971097B5DE125FCA
SHA-512:	EDE857254213F622651465F1252F19D67D7EFC984879F356D870EDA3E7B5A5A6E1E8498156A30CAB02458A397CA877DF0C33224D8B16A4A2F5D717847698B550
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-buy-account-info-1.png
Preview:	.PNG........IHDR...j..........t.....pHYs..........+......tIME........'... .IDATx...Ol..?..~....(.h.&..4.1Pe]...5n...0.H...$..h.......)l."..b..b9.".]...q...h.$.S.xwF@T....wP?O.CR.l......l...g.~....K.$...i...u...ho..DD.c.&"...5...)P.J%....T.""...zuu.....B....H.{ggg.uo..s.....3.j............KED'.......u..Cx...u...........p8D.T....s....sx..Wq..U....$....<...M..<.a..V..R....8f.&.g.........{.......{.7o..+WP(.......U.A.^.w...J%....u],.......z...V..`.....b..e.V.aaaa.%#.S+..w.}..r....%I.$.m'.....&I.$.B!.0.'.g}.......h..v...u....).w.}..{7.....n...;.o).._....F^K.$..zI..I:.....F. ....o....DQ..:...j?.,..677G..AM{.eEQ.....4....DQ..{m..:g.?...d..\...7n......u....B.....zx.......I.q...%.=6..y...y.....[oaccC..C)o....^..R..s..a}}...S.;w......7o..W_E.T.Y.T.R..R. ..#....g...P..&...1J...\.0..z.~.....y....:...B..?.rA.Ll.q..x_...>\|.G..j.0kZ...s-.q.c.^.z..8F.E.u...}........;w.....#AX.....H......a.6n........{.m..\......=VWW...P(......W....../.\|?...[X^^........

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (939)
Category:	downloaded
Size (bytes):	1086
Entropy (8bit):	5.454154003723979
Encrypted:	false
SSDEEP:	24:86fdivct/BV6fdiGF/E8Aj8vHIO6P4vltavlr8AtvHWUvDBQU3b8jgjzlzwlzvMt:8qt/BVk1Efj4oONmxf9faU3zjzlzwlzo
MD5:	1AEFB0284858A8C7F4226990B2C6677F
SHA1:	51FA60BCDAF3D38561AFAC597232A97B6C718E5C
SHA-256:	B594BA9AFDF149D0E0900F365088B710739BDA94EAB72345B9FAB2B706794464
SHA-512:	B2FB9B40AA7B30FA58E9D099F772BC155A91B44DB0DE6EDD5ACD345622B5242D744A992EDA28C0DF60AE052E2FE7F9E035DD96554651349E099EC108B0D6E8D2
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC5194c984201449b7ac072c46a8bc0bf1-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC5194c984201449b7ac072c46a8bc0bf1-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/5981692bb0bb/RC5194c984201449b7ac072c46a8bc0bf1-source.min.js', "if(\"undefined\"!=typeof jQuery){var pageHeight=jQuery(document).height(),viewportHeight=jQuery(window).height(),initialPercent=viewportHeight/pageHeight,maxScroll=initialPercent=initialPercent>1?100:Math.round(100initialPercent),scrollPercent=0;jQuery(window).scroll((function(){var e=jQuery(window).scrollTop(),t=jQuery(document).height(),r=jQuery(window).height();(scrollPercent=e/(t-r)100)>maxScroll&&(maxScroll=scrollPercent)})),jQuery(window).on(\"beforeunload\",(function(){var e=1,t=Math.floor(maxScroll);t=Math.min(t,100);var r=Math.floor(maxScroll/e)*e;r=Math.min(r,100),t>0&&t<=25?t=25:t>=26&&t<=50?t=50:t>=51&&t<=75?t=75:t>75&&(t=100),_satellite.setVar(\"scrollAmountBatch\",t),_satellite.se

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3544)
Category:	downloaded
Size (bytes):	14732
Entropy (8bit):	5.476294485786968
Encrypted:	false
SSDEEP:	384:l5gLzcrM7KAi/YsK7dawqzmM9QFjz3G/qTMy4:l6La8KwR1M9Q5z33Tj4
MD5:	F587F4B81EE8A8C4248C308F86E9A468
SHA1:	FE0D6ABD71B8FF6D3BDA26BDDA0F149E22B85005
SHA-256:	052822CD008A8922DD33A22B76FCB905DE9025B5753EFD79A8885F44BB0EC008
SHA-512:	552B3B8234DEE42A30D8FBA8FD20263030BC847E86FEF730687C1B9F1553ED8D1D7DA596C4B7030C30EAB4CE16C4177429657402AA0DB9683E0BE34810FA9C73
Malicious:	false
Reputation:	low
URL:	https://consent.trustarc.com/notice?domain=sharefile.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&fade=30000&language=en
Preview:	function _truste_eumap(){truste=self.truste\|\|{};truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});.truste.util.error=function(p,l,o){o=o\|\|{};var n=l&&l.toString()\|\|"",e=o.caller\|\|"";if(l&&l.stack){n+="\n"+l.stack.match(/(@\|at)[^\n\r\t]/)[0]+"\n"+l.stack.match(/(@\|at)[^\n\r\t]$/)[0].}truste.util.trace(p,n,o);if(truste.util.debug\|\|!l&&!p){return}var d={apigwlambdaUrl:"https://api-js-log.trustarc.com/error",enableJsLog:false};.if(d.enableJsLog){delete o.caller;delete o.mod;delete o.domain;delete o.authority;o.msg=p;var m=new (self.XMLHttpRequest\|\|self.XDomainRequest\|\|self.ActiveXObject)("MSXML2.XMLHTTP.3.0");.m.open("POST",d.apigwlambdaUrl,true);m.setRequestHeader&&m.setRequestHeader("Content-type","application/json");.m.send(truste.util.getJSON({info:truste.util.getJSON(o)\|\|"",error:n,caller:e}))}};truste.util.trace=function(){if(self.console&&console.log&&(this.debug\|\|this.debug!==false&&(self.location.hostname.indexOf(".")<0\|\|self.location.hostname.indexOf(".truste-svc.net")>0)

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	5.105521963840683
Encrypted:	false
SSDEEP:	24:twdmluFgbz8+mn8muj0Cqm9WaUjQcRUumj8gmzA0ti6dNHb:68kgUVC7ZYQOR80Y6P
MD5:	90367AB917588B8A43818D6E0454034A
SHA1:	B0C9DCEF5BF2A0D5F2AEBD6399EA7C2B9EFFA19A
SHA-256:	66703843B3670F75A7F104D4001173BA61435E782BB8A11784FD4337F5C63B8B
SHA-512:	0FC9DD7286E8E1BB1A0B7D91A8DA042A2C0E227AE29C58D2E64C8424E64D8064221E964A2627EB751E653E68887E1C11A3146D9F720BBCE645ED3F564DBD34C8
Malicious:	false
Reputation:	low
Preview:	<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="ShareFile Symbol" clip-path="url(#clip0_10656_6233)">.<path id="Vector" d="M20 6.41847V5.00001H13.3335L14.9997 2.50001L13.5818 1.79105L10.4972 6.41794L20 6.41847Z" fill="black"/>.<path id="Vector_2" d="M0 13.5815V14.9995L6.66646 15L4.99969 17.4995L6.41817 18.209L9.5028 13.5815H0Z" fill="black"/>.<path id="Vector_3" d="M1.41847 4.2905L0 4.99999L3.33354 9.99999H0V11.4179H6.16926L1.41847 4.2905Z" fill="black"/>.<path id="Vector_4" d="M18.5815 15.709L19.9994 15L16.6665 9.99999H19.9994V8.58206H13.8301L18.5815 15.709Z" fill="black"/>.<path id="Vector_5" d="M8.58151 19.2905L9.99999 20L13.3329 15L14.9997 17.5L16.4175 16.791L13.3329 12.1636L8.58151 19.2905Z" fill="black"/>.<path id="Vector_6" d="M11.4185 0.708963L9.99998 0L6.66645 5L5.00029 2.5L3.58182 3.20896L6.66645 7.83585L11.4185 0.708963Z" fill="black"/>.</g>.<defs>.<clipPath id="clip0_10656_6233">.<rect width="20" height="20" fill="white

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 414, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48518
Entropy (8bit):	7.984776828331928
Encrypted:	false
SSDEEP:	768:LtoGYi9pQdSDsrJGFCkTi6avUrHMzuk+B+HhCbc/LEGk7yw5ME2PEPNEvbfyqgvJ:Lef2pWSDWJ3k+lcriu/BwU2w5SPyEOvJ
MD5:	4018A23290A0518790D2E3439ECC7684
SHA1:	D676EFB155E4254FB1F3B3E53936838A8040B761
SHA-256:	88B1844DBE7BAC86D303109A4FD0869B1EF5DCE915831361221320C83935BFF1
SHA-512:	AEAABA4CCC1D0740699457827496DC052E63AF1B6B2ABA472E25962095527A7B28D5F2ED22535EECADA29044165EA2C3FA6AFB4D8CD61DCF6754056732F6CB07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b......pHYs...t...t..f.x....tIME.....##.#.... .IDATx...w\|Uu....).....^..B. .....(8...R.u..ov....utg..3....Xf-...(CWA.@(.{....zSn.\|...... )\|.....-.\|.......9...j"...$..../($1>...i..O...G.ej.^...'91.Y....;&.v..kg.&6..gP..KJ.e.....v./)%..BQ...H.v.4M....h.<.....v..A..P....r$.BCBD..""....4.ZT".#(>..[."j. ....PU]MIi9.......I...+.Ihh...........B.S....Z........n.0....mC.z;e.&Q...].r...FQ.$Ij...p..$.Y....$....p.BC.E..Rjk.@.1.MX&Q..X,.KJ...%""..j.0...%..wF....>....2..>.bcp9.".[...v.4.4..BB.r88_RJn^.Ng...`,...,#I.....pS...i.......SU....n............@..t..b....GMm-UU...+FQT,..EU.E...p.....k..........M..q!..!...h8kv:.8...u.o].>..@@.o.]DA..=.E..Z..\..v{.(v....D.w0F};<.$..t...n....A.G5..1.S...........A.n..5A..A..D... .B. .]..A.:... .....@..A...@.. .. t."..A......... ....tA..A..n.....D.A..7q....%.:....A.Zv....1.U....e.!"..A..ku;...(Jk..\......_. ..pc......,..qq.F... ..".[..... ....+m:.E.\..A..t..Q......w./L..A.........].~3.X.. ....fU.M.l...

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65441)
Category:	downloaded
Size (bytes):	109321
Entropy (8bit):	5.1690159357953345
Encrypted:	false
SSDEEP:	768:BgJFlicc3KkUi0INGte2ni2TGIl9HBhIswvQEoBOLV2rZl+9R+2pxVD7+s5tzmM6:NbRU5WGPa7Rbtz3BnWmz2Mf4Zy6J
MD5:	25354AA40F703E32ABE2C174C180CAE9
SHA1:	ECF7F72DDF46E7A732FFE0936BC3A99630E9E52B
SHA-256:	96BCA299AE880DD6875FB78F0FD8890C093F9B7AD7DB653450689DFC73523415
SHA-512:	ECA38FD897108A7C9A3AC030E1861E9E7B0C6BA483293E804DB26A59A46D2CE95973D2FD2BB5DEAD49E62D4C6DC6AE1047C2664FFCC4AAD3E30787318D3DDF32
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/1701464332000/CoveoV2__analytics/coveoua.js
Preview:	window.instanceOf = window.instanceOf \|\| function(arg1, arg2) {return arg1 instanceof arg2;}; .!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).coveoua=t()}(this,(function(){"use strict";var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};function t(t,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function r(){this.constructor=t}e(t,n),t.prototype=null===n?Object.create(n):(r.prototype=n.prototype,new r)}var n,r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},r.apply(this,arguments)};functio

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	195334
Entropy (8bit):	4.268844219782109
Encrypted:	false
SSDEEP:	3072:VCOaK2xDQE99ivSdEZomWGgOYnoJ3E4k4ubQRY5g+exO8r/0GcPcJTZeg5OohB3n:VTaK2xDQE99ivSdEZomWGbYnoJ3E4k45
MD5:	4F84F67272518372A280992DBF27BF42
SHA1:	724951D2E7BBF0B05A622C52E6BAD9745A3A3C1E
SHA-256:	EAA94E1AA58F1BEE1D21A921D47B1D4C8BDB8E97E96561A42F1F86C926BACDE0
SHA-512:	CB6E753964721FF6263208C61BD4D8465833649EA2268266403C9CE860BA5442AE71E96356B39ED78EA0521489357829E8B2BA29078E73107DCE26E8A63BF18C
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/whats-new
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>What.s new in ShareFile documentation \| ShareFile</title>... <meta name="description" content="A goal of ShareFile is to deliver new features and product updates to ShareFile customers when available.To you, the customer, this process is transparent.">... <meta name="ctx_product" content="sharefile_main">. <meta name="lastModified" content="April 22, 2024">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm-u6_UtwuyIN3fURpkBgy4E">. .. .. <link rel="preconnect" href="https://consent.trust

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	downloaded
Size (bytes):	19104
Entropy (8bit):	5.289118072116604
Encrypted:	false
SSDEEP:	384:k0dN9p+hpIzHIgYJEN5jew0dvIYtbS7u7Akeu/M58:z7Yg3Revdvp4keu/H
MD5:	8E73FCCB65276AB65C2366BFAC6B5862
SHA1:	984FA75EA1AAB51188D087A7AFD8F67C7103FF36
SHA-256:	11B97392FE91256A463D66E0A68F1ED068DD3BA2200289FA89E0AFB2B0558B12
SHA-512:	6D2BF8D642B1F689274065CD82873732C6B2EC5C8388AE1399C4DF258812E58A263FE5B8F98CE1EA3CB3CC9DBFB5E46FC2B891914D14CFB6462339362D09A94A
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/client/invite.esw.min.js
Preview:	embedded_svc.defineFeature("Invite",function(f){function J(a){var b;if(void 0!==a.style.animationName)return"";["Webkit","Moz","O","ms","Khtml"].forEach(function(c){void 0!==a.style[c+"AnimationName"]&&(b=c.toLowerCase())});return b}function K(a,b,c){if(a.addEventListener)a.addEventListener(b,c,!1);else if(a.attachEvent)a.attachEvent("on"+b,c,!1);else throw Error("Could not add event listener");}function p(){}function n(){}function e(){}function B(a){this.ruleId=a;n.prototype.init.call(this,null,.null)}function C(a,b){n.prototype.init.call(this,a,b)}function D(a,b){n.prototype.init.call(this,a,b)}function E(a){n.prototype.init.call(this,a,null)}function w(a){return m(a)?m(a).getTracker():null}function k(){}function t(a,b,c,d){k.prototype.init.call(this,a,b,c,d)}function u(a,b,c,d){k.prototype.init.call(this,a,b,null,d)}function x(a,b,c,d){k.prototype.init.call(this,a,b,null,d)}function g(a){p.prototype.init.call(this,a,p.TYPE.INVITE);this.active=!1;this.filterLogic=null;this.rules={};t

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	24724
Entropy (8bit):	4.980328201261782
Encrypted:	false
SSDEEP:	384:mUKU2JUEKXVWO7I9OqhmMxLM0MRDFEFuF74F8ZMU:ZVVpXVWO7I08mol0FEFuF74F8uU
MD5:	33935072F7DB31D0E5359DD90A4E6D8E
SHA1:	9A6CF6D39A79C9C7A27C5DD98766BCF9BCEC39CA
SHA-256:	DA92991DE14390C52B2460B9FC03A639CC155C17723792D50A3282DE11CF6A88
SHA-512:	69F653A2674688C5865413831AA6A6DDA77487DF031C72758314CA3B04B13EE1CD15A6FF13EAE5F8F12EFB11ABAD98F83C9F793192E3048EE071093C6BCCF353
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/NF_Bot/css/serviceBotStyles.css?t=1714070864075
Preview:	/. Bot CSS below./../ CTA /./ .forceCommunityEmbeddedServiceHelpButton .flatButton {. color: black !important;.} /../ CTA icon /...embeddedServiceIcon path {. fill: black !important;.}../ header /..sidebarHeader {. color: black !important;.}...embeddedServiceSidebar .dockableContainer .sidebarHeader h2 {. font-weight: 600;. color: #000;.}../ announcement /..announcement[embeddedService-chatHeaderAnnouncement_chatHeaderAnnouncement] {. background-color: #000000 !important;. color: #ffffff !important;.}../ bottom container /..endChatContainer {. color: black !important;.}../ agent chat messages /..chat-content.agent[ebcm-einsteinBotChatMessage_einsteinBotChatMessage] {. background-color: #ffffff !important;. color: #000000 !important;.}../ user chat messages /..chat-content.chasitor[ebcm-einsteinBotChatMessage_einsteinBotChatMessage] {. background-color: #000000 !important;. color: #ffffff !important;.}../ bot background /./ .emb

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (626)
Category:	downloaded
Size (bytes):	8294
Entropy (8bit):	5.127167650843331
Encrypted:	false
SSDEEP:	192:B2wX7gDYOOdfDP26G3gjDsSmL8bCaYy84Ma8:swXdrGwcrax8
MD5:	B9CC312F6AA625061B4C9AEA76E9AD88
SHA1:	722673FEA59409AA0C2DB2E6D70CE8D38AE6D8BE
SHA-256:	12834F596F899E7E17CC2A4A76A1EE77EA0F1EBBFB61E8A33DAFE426327C71A3
SHA-512:	A29C56718BB571C7CCF8AAAFB5281072863A2F353439509A45A2869802308C0C6B84C1CBA87900EE7BA4CDC251B56F3EE72ECF9CC7B4A4D0A84A371FDF55D530
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/utils/inert.min.js
Preview:	(function(e,f){"object"===typeof exports&&"undefined"!==typeof module?f():"function"===typeof define&&define.amd?define("inert",f):f()})(this,function(){function e(b,a,d){if(b.nodeType==Node.ELEMENT_NODE){a&&a(b);var c=b.shadowRoot\|\|b.webkitShadowRoot;if(c){e(c,a,c);return}if("content"==b.localName){b=b.getDistributedNodes?b.getDistributedNodes():[];for(c=0;c<b.length;c++)e(b[c],a,d);return}if("slot"==b.localName){b=b.assignedNodes?b.assignedNodes({flatten:!0}):[];for(c=0;c<b.length;c++)e(b[c],a,.d);return}}for(b=b.firstChild;null!=b;)e(b,a,d),b=b.nextSibling}function f(b){if(!b.querySelector("style#inert-style")){var a=document.createElement("style");a.setAttribute("id","inert-style");a.textContent="\n[inert] {\n\tpointer-events: none;\n\tcursor: default;\n}\n\n[inert], [inert] * {\n\tuser-select: none;\n\t-webkit-user-select: none;\n\t-moz-user-select: none;\n\t-ms-user-select: none;\n}\n";b.appendChild(a)}}var k=function(b,a){var d=window.Element.prototype;d=d.matches\|\|d.mozMatchesS

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24428, version 1.0
Category:	downloaded
Size (bytes):	24428
Entropy (8bit):	7.991146917269357
Encrypted:	true
SSDEEP:	384:sQHpKlWW6mqNEX1W+evi8/7tOf+cmWh63lt0O8JDU6+kQpjJZu5XkvHuBH7v1VoX:vsWBmhMxq1mTVt0BB+kQFJ82+bcs3B0
MD5:	A1B0A8A177E3F9E8FAE22AA0DEDD1AAA
SHA1:	D63BF2AB04CF6D932002F0903BA26DC92343873C
SHA-256:	1D8944B2872336F95B0D844CE5066A0C4EDF8AD008EC3199AEFFE97D56BB5C02
SHA-512:	5A14B5924AFD2740BBB515FAFD769759AB8BB49C094F8AEFBF0FE868E0952385A249D25B0A4FAFF3D3817546FDAF7418953720DC4565082E49EB1BF22C67DE97
Malicious:	false
Reputation:	low
URL:	https://static.cloud.coveo.com/searchui/v2.10111/2/fonts/lato.woff2
Preview:	wOF2......_l.......p.._.........................?FFTM.......Z.`..Z.2..e.....t.._..F..6.$..\|. .......K.....I..v0..:..lD.v@.fm.EGs..Iy.=\...yIC.KR....~.....L1'......K.12..^.m..j...o9..iK[..t)....`4.H..v.m.......h\|.T....'..OLr..anF7'...l.j.Q.?..._...>.....l.I.e.7..;.i.T.u.D`.r..\|O.....t...^.^g....G../....=y...,.j.....@....L.%...._..&2.b.:..x.@...Y\.......?....N7.ZT.....@,..)I..PD.#zN..m..s....m..^.."..%...\|........6KA.%i..P....lv.Y...i.nz...c.x...<..$C.;..uQ.C.\4w_..xo..'.2...m....1T.8..}.."T.\0.q.t.....oOn.W=i.i.Y1V.k.h.^.it...........N.L...js..4...p;.@..r.-....P`uN..i....f....U.M...Ur.F.M..t....#^.Ld.U./."i.M........_.l)...m..L.f...n.{.+....j..QE..+.L'.G.{h..>....!:0..r....g.T.];{8.H....Ck...\|"...n.....@0..p.y...[....`...........&G:..._.E-'Er....Y\|.C....WWB.h............W;[IAy.NS....\.f..D.-.......k.j6.3.3.....^D..$......HJ..-.%evz..@.@#.....H..y....{........?...=...>...0.j.~iw...._..).t@3<.....\..! ..\o...)p.@.(.B..7.zy.^R...(.ED.S./aZ.)."T..`..

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	139667
Entropy (8bit):	3.8127229355620806
Encrypted:	false
SSDEEP:	1536:HH5+TvBZ77SFdu7pddL/eeN0lLVTW5Zqw:HslddL/7wW5Zqw
MD5:	141B22B49F3DEF87FC361946E0FBBB2A
SHA1:	2C02CFE5F105241AA6BFD51ADA2C1C8EE26ACE21
SHA-256:	B33788069F650D328F5D29B188F3633478FB564249BBAC6488E57A6BAB8163FC
SHA-512:	A061663E67999536D6F77DC980B639086F34E18D8EF0317D26EB0D8DC7C9D8113FD088DDC26334BA3807BC59554F5E9A45EB9CAA75F6CFD291C9E3B341AE0607
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export
Preview:	<!DOCTYPE html>.<html lang="en" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>Export ShareFile files to integrated applications \| ShareFile</title>... <meta name="description" content="ShareFile export integrations allow users to export files to a connected third party application saving time, reducing errors, and streamline your workflow.">... <meta name="ctx_product" content="sharefile_main">. <meta name="lastModified" content="April 8, 2024">.<meta name="googlebot" content="noindex">.<meta name="robots" content="noindex">.<meta name="mt_fly_provider" content="">. <meta name="lang_code" content="en-us"> . <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm-u

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22673)
Category:	downloaded
Size (bytes):	22901
Entropy (8bit):	5.340918792566464
Encrypted:	false
SSDEEP:	384:yz4g/CcCfVTaC0riJpmvv8WlMP9AP1lEnkYMp42dcSRouj7sK/kEsFbG6cN:XcCcCoC0ryYv8mMPy7vYMTcSmujoK/kK
MD5:	825F724C54292C7121FE3A7D0596FEB4
SHA1:	3FDCE95A267AB5BF087620C5A20F6FD6CF5CCE38
SHA-256:	E13CECDBAAD8324D9BDF164F8BF79381D8AD9DD9B60328811524B0517D737398
SHA-512:	22373CE98FEB3CE142AFE0892DDD1042511A082F73B55245BCFCCAD0332B1C227C6E20E4C90A28E8B97F3A6A8C10E6832769C282C57CF78D364B35E7A1C2B366
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/1701464332000/CoveoV2__dompurify/purify.min.js
Preview:	/! @license DOMPurify 3.0.0 \| (c) Cure53 and other contributors \| Released under the Apache license 2.0 and Mozilla Public License 2.0 \| github.com/cure53/DOMPurify/blob/3.0.0/LICENSE /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).DOMPurify=t()}(this,(function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e,n){return t=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e},t(e,n)}function n(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 327 x 450, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	19563
Entropy (8bit):	7.954733637959808
Encrypted:	false
SSDEEP:	384:fK4MZtmAEeefStVIACrvf85k5am2ZY2e0GQXPqumUamN1G0lpFnQ:fKJtCesStVIlrv8k5d2W0GQiumUaq1Gb
MD5:	AEA3AA8D05A59AF73AC8C849F7B7406D
SHA1:	095BC5B66B079A93AF937E56D87276FD9A59E753
SHA-256:	D951FE2F797692D886DDC4351FD94BFF0E2E8CC8A3EA01AC9B4D82008A07858E
SHA-512:	A6BAB7B2933D1C270222B9F00BE4AB884B37495C5B9FA1AC29F2A35E3279C2D6CDF820B407971D19D91ED30024E7B674AC03EC24424A6DEABB018813AE20BE53
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...G..........V.W....pHYs...%...%.IR$.....tIME.......$].D.. .IDATx...w\|\.?.sn.^4.2.Z...w0.CBHH6.eI..'......}6.y...n.......!.l.q..l...4U.~.y..X(.\$....~..%...93..=.{.9......B....9...@i ..(......T..4.j...R...@..P.H5.J...@i ..(......T..4.j...R...@..P.H5.J...@i ..(......T..4.j...R...0.H$.e...%.a..X.........l...2...........`.aX=....+[.(......T..4.j...R...@..P.H5.J...@i ..(......T..4.j...R}U....... ".....0..@.iln...(.!$IRfFz....+.....F..r.....:>..{i......Axo...Vfef..>g.r..^oQa.Ux-py....F..Z-##....VK.V..8...?]7J.t.=wtu.54J.....t....1g.r...H....:\|..244t........W......(.,..i5...-.7!..{z.....q..+.-.7#..8Y....h.n.....x.........m.......{=........N..u.....\|............uk./=x.Hiiq......X]......Z..n.!33cz9.[Z..@..`(..n....L.aX..8n....C.9.[6mdY....M-.&...m[...;.....e.f..Y...........+.,..w...G;..S....5.....'.....uk.....=~....h4.t....c.N...e....3u..[...[.j4.3g...jIE.$IG../+).y~.G.#...%..U.N..5.M%..v.XwO.......qgrr.5.W.__I..>... ..v..v.../[

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (700), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	34271
Entropy (8bit):	4.242252471430602
Encrypted:	false
SSDEEP:	192:15oGysTqii2t9svWSJTKT+o3nm/obfyZqxDOji3sTS+4E5mVguU:15oGyqn/iOsanm/ob6Zqxd3+Si5m/U
MD5:	C87C4D53A38C7BFB540C43192263AAAE
SHA1:	A7B73D503043D492A804F2D63E8AE809282BBF30
SHA-256:	3B1CE94028EF7F78F54F4F6B88AA9D8A2DFCA5FE27B3DA0916043C4848EADE58
SHA-512:	66C44D501D4D591411347C4E3077A6E44252CFD9053EE85DA1FBFC20D87E3537334EE8214F1216AF40CAC4284F40ACD06C64B7D856192FA7DAB883B7C682964F
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/
Preview:	<!DOCTYPE html>.<html lang="" class="theme" style="visibility:hidden">. <head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=12.0, user-scalable=yes">. . . . <title>ShareFile Documentation</title>. . <meta name="description" content="Product documentation for Sharefile">. <meta name="mt_fly_provider" content="">. <meta name="lang_code" content=""> . <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm-u6_UtwuyIN3fURpkBgy4E">. .. .. <link rel="preconnect" href="https://consent.trustarc.com" crossorigin> . . <link rel="preload" as="style" href="/assets/main.css">. <link rel="stylesheet" href="/assets/main.css">.... <link rel="canonical" href="/en-us/">. <link rel="icon" type="image/vnd.microsoft.icon" href="/assets/images/

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 458 x 468, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21812
Entropy (8bit):	7.9234666660932715
Encrypted:	false
SSDEEP:	384:RI0CH1M9j2Le4/Qu/iiuc98i8NHml1JmClm2zst6/o9mjkyV5Awu+zusNiN1AB:HCH1oSjou/wHNHO1J5KA/bF71NGAB
MD5:	56D5BC49A9D38A79848134E8AABF0068
SHA1:	997B79BF6B4EE621C2D0B16A6EFF247D1E81DA3E
SHA-256:	BDBF4AB14B53E1153AB266A067FEBD70820A452C71846A5C2E83B3C3981E45D8
SHA-512:	B7E1FF855514D0F5B691C3001EC0D69CE58947309C4823CB9053150747BC45C178BD111B053E34C36DCC3AFD188E05C0FBE3C445AC4F5C5D1AFA7FC965BB0C9A
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-3.png
Preview:	.PNG........IHDR..............@h7....pHYs..........+......tIME.....$..v.Z.. .IDATx...o...}'.og.y....G...n..n..M.v3.d......]m....N2$....&...:58.......vj.ip..K....e..T\..ujp..:q..X.f=.H...T.{..c...{.....S5%6.<x.R...@....o....Q..9........N}.C.Q....0wt~.AIDD4.{...a.....5'......h.^.CDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT.AIDDT..e.E..)""...m.. .pRU.y..h....q[..bY(..0M.....hv_..bYX.............{..F.....+"...{nf!.a..L...../.F.vC..lB.4.~.m{.....x<F....].Q..`%.......AU..w]..4_......h6../...tM.x<..y.y....]sSA.F.F#h..5.F.^...h....8.V.m.@.T....>\|.....p8.....94.(.\|\.<&".w..2.c..j.Z.Z..:.!.Z..0.q....;......f..m.j.Z..t.n......!Vj5...f..+..m.]..pX8......^.1........L..M.D...8.t:PU.q....Q..1J..f.U....#.c..9...nP\.........y.<...E...!.0.7.=..89.i.l..}..#b..(..;...a.]../.".......2.9.......A.{v.MDtW...E.8.. .][...Y^>.......G....\]]..KKbsssb.G.....8:??....E...=....8[.....#N,,.........xjee.r;A ..bssS.XX..^...E. ....omm.h{....]....;pP.!.I....E

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 380 x 460, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21734
Entropy (8bit):	7.949710127418306
Encrypted:	false
SSDEEP:	384:1w8Wqb8su7ia1mlLVohCJi76ZEAnizR2ailtQR4Bv0Q38KKEA5i8zGqR:1niiZ9NZEAniQxi6v/3VKEAES
MD5:	EF30E454ECFB24C87F252D4D0E8972DA
SHA1:	541D875E90F41C561D8CEF35007EC10AE0125D62
SHA-256:	7E42D463EBF158BE67662AA68B5FD2932FCB1EE53FCD6D22441F275E217F860C
SHA-512:	C0A23DD1C1A3919B922BF4DBFA9DA3C7322FE639D5E849114FA503827EC4802EA6A8EDF7932394AC81E0A2C0922519CD10D5A98A4E5052DC4E70C051732CEB4D
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/sf-win-access-dashboard-rf.png
Preview:	.PNG........IHDR...\|..........-......pHYs..........+......tIME........>H... .IDATx...}\|S..?.O."O....b.....tS..4..h...l....:iP.../..nS..>4.o73...-ql.I...i.......N..V... .....9yn.4...~.x.H.9..I...s]'I....ADD....p.\....e..b..lW........H!..DD...'"R..>..B0......OD...\|"".`...)....H!..DD...'"R..>..B0......OD...\|"".`...)....H!..DD.1%.. "J...`F......v.>.0...+app..........NC..F\.pC6Sa/.....x.....?..v....nL.:....p..g..K..N...3.._..7.x#.\|.!......^...+p.\8t.P.u.L...n...{..`.o"w.T.y..L&.f..G6l.Q]......1u.T.>\|.+W..X..(Sn......k.._._.....F_=..\|.._...8r...;.8..`..>......x;.B.....smm.6;v....7v..J../~.Kl{...-]...{........"L.:...;p......5k...../......m...^x....F\.Q64>....K..jC..G...[^...5.O.3..j.X...o...?......_...~..<y2...........mm8..2U...........q..\g...(8....I..a.%.5k..=.......B.V#''..&q.......w....v..:.S..k%).Yx.a..U......G188._.s....*...\\|.[.RD/......,H..q............\....EEx..q.fd?D.t..s..j..z./.k.7z.Q..2C5.?2...@..&M.%._<..8..~.M.e.]..j.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32750)
Category:	downloaded
Size (bytes):	91216
Entropy (8bit):	5.333779805428639
Encrypted:	false
SSDEEP:	1536:/LqlDtGs1HTB0HJMxWwrD1gxOX+tLmodIydIsxjevdbV7xPvjO22:jwrD15+nmFbV13a
MD5:	5FED8399681FBB32E0DB6181ED2ADADC
SHA1:	1C460B74720F77849C357E087A5B7AD1EA9FBCC1
SHA-256:	C5A3914F2149F07DDCBD96383E7B58744C38D066D5058C90F9C9819091CE6D4F
SHA-512:	07DACDEDA4018ED6B9A09D1504068278272A9847F356F5D1BE6E8D032D30A6281ED75AC70E40EFDB1F7BE1A6DCBB1A0470B672FAB9E1A6A8A8C9937AF2A83AE4
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/launch-947a4496eaa3.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/3af873facf65/c93a1f7aa6dc/launch-947a4496eaa3.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2023-07-27T13:44:44Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"ENad603e1215d242a8a18ffa4af6894f05",stage:"production"},dataElements:{"Screen Width":{defaultValue:"",storageDuration:"pageview",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){var e="";try{e=jQuery(window).width().toString()}catch(e){_satellite.logger.log(e,1)}return e}}},"ctx: pagePath":{defaultValue:"",storageDuration:"pageview",modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"document.location.pathname"}},"ctx: SiteLang":{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return $("link[rel='canonical']").attr("href").substring(1,3)}}},"ctx: pageURL":{storageDuration:"pageview",m

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:0sE:M
MD5:	8D8832035EA9E7A0A894338DFA5B59E7
SHA1:	15E08AFA20264E3F6CF2285FF9360E7661C0AC14
SHA-256:	E4E7F9E64C424EF242510F31911FCBBD35BC3C8ADCC6EC70AD1B9A91AE34B131
SHA-512:	52C056E6B6529277F4F6C2B5437EAC2266403A227EAD4B4CAC586B7BDAFB90E732BEF9FC6F1FB0C202FA7D72B6BD0E3F86F12FAFC52EB1C79300F9B0A98001EF
Malicious:	false
Reputation:	low
Preview:	Success..GCF Up!

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 45736, version 0.0
Category:	downloaded
Size (bytes):	45736
Entropy (8bit):	7.989692132369454
Encrypted:	false
SSDEEP:	768:Ie5omqeJBzc9kaP3HijFaoYCdkp0tH26cYKtTO4IJ9Wx7ECEqAZHkpd7ZBbcx9:gLeJBze13CnY5p0FcYGO99C9AJkH7nQr
MD5:	EA8D7DE9DF28640043CC24BB159281D6
SHA1:	EDB735B3A5713F47137045EFADE6808CF57478B1
SHA-256:	B1B362D1FD3340720B933C8CC4009D122D253A1FA13BD30B170449F13ACC828D
SHA-512:	CEDD254EE8B8C5739E7DEE1500904B8CF6F349C507B5FA458422C06F552B334B892C23D2B6FAAF12ED731B5A75A4698A2E9FEF7737D8BDAC6C70DA1F38DD9286
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/assets/fonts/custom-fonts/PPMori-Regular.woff
Preview:	wOFF........................................DSIG................GDEF.......j........GPOS.......[..:..8.gGSUB...\.......\@H..OS/2... ...N...`h...cmap...p.../.....r{.cvt .......A...`.z..fpgm...8.........6..gasp................glyf..'...om........head.......4...6"w..hhea...D... ...$...3hmtx...d.......TV.G.loca...8.........y..maxp....... ... ....name.......F....J.N#post...H.......;..I.prep.............V.x...a.........NE...K...R.3...z..g..}. ...0p...G@..S....9.@U..Q{...su.....w...+"6qaHI.T..nd.^...?.2....x......;..o.T..f.xm...m.m...m.V^^......&)..A.......j..8.^v.uW ....#..C.T.k~J.L4h..L.....L...S&...s&.9.yx....3q..JB".n=3.Ph.9B2.o=.....E.n=..Pl..!.......(y...\....).S..........u...\.E.U.M...2YYHYJ...t..._J.........)OS...Ly........=b.............j.Uz.^.....%S.w.?..@./.^....Wxa...U...B..zh.n8.....G..^.k.......)...X....80.F2e.!....L.H.....n.C.\p./.P..,.FY!3'd...!..H..1.&?Q9y+.]..o.#.;.H}..J.qa.w......e.{n.<..z.\."..J.*. .i.....d..O.G.>..=....Y~.. .3~...;...

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	189699
Entropy (8bit):	5.527522535070843
Encrypted:	false
SSDEEP:	3072:LUQaf5qZ3fhO+CW988G1LceF2/eazQthTnXDL9btIM01mu4:IQX5NXYLceF+CTnXP9RIMzV
MD5:	42BEFD151D9441832213AAAC984C9B4E
SHA1:	7DA5F4EA511ABE6F372BA0324A3B55BF923F9929
SHA-256:	0EA8BF7AA87C6A253D41CC5E7C3F3B192509C5C9ED4585A2D065EB0FB4294894
SHA-512:	4E42FB53CB15110EDB9B414B00A88E79E596C4FC3066075571E7EAC764A73EB983E6A4BB93FD6A1122F62725F61E014F49DACC8883058052F2B53BA9D9D03CC0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-142592-2
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	dropped
Size (bytes):	529002
Entropy (8bit):	5.091267286656454
Encrypted:	false
SSDEEP:	12288:MX9KeP2IkOSPt0ut7D2cH3KVeDMfnM2ePEtrf6LeTW:MX95P2IkOSPt0ut7D2cH3KVeDMfnM2ef
MD5:	03871E40F88BC6E79E20C925E4AB9DA7
SHA1:	DB7B8C77614640B43E4C636029BBEC013450B0C6
SHA-256:	639167A694F18A9157AA2F7FA7FEA2B4A2CE312B2B073F1A47E24E2AEEE83444
SHA-512:	711F770C1A574A56631900FC3948EE3E6734560CF0F740FADEAA4A36712E3DA154B644701A5CBDA4BDEEE7F18EC9C421D086A5D8B8D7F8D4C1400E6841CE7579
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue: #007bff;--indigo: #6610f2;--purple: #6f42c1;--pink: #e83e8c;--red: #dc3545;--orange: #fd7e14;--yellow: #ffc107;--green: #28a745;--teal: #20c997;--cyan: #17a2b8;--white: #fff;--gray: #6c757d;--gray-dark: #343a40;--primary: #007bff;--secondary: #6c757d;--success: #28a745;--info: #17a2b8;--warning: #ffc107;--danger: #dc3545;--light: #f8f9fa;--dark: #343a40;--breakpoint-xs: 0;--breakpoint-sm: 576px;--breakpoint-md: 768px;--breakpoint-lg: 992px;--breakpoint-xl: 1200px;--font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";--font-family-monospace: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace},::before,::afte

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 302, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	32776
Entropy (8bit):	7.976361454559355
Encrypted:	false
SSDEEP:	768:fYJkT5SLnnneKWQv/5XqBWnnY06xwDx0LhT5ZSeH7HCDIAL8o6UsOS1C/:NkZW2/c3wDx0LRZH7HC5L/
MD5:	AA58DFE94AED5779030C89775D782B75
SHA1:	D74AE66762D13A8C808A07F743F4BA0620577D04
SHA-256:	C897583DADAF4176473C0A64CEA863C13B0030EC545D48AF494C7884D3F690F0
SHA-512:	FC9773FD0083811360ACA435F8B41DE1708B71BAD0E193DFC5C7FF8536F15AF9A625C5491E996D9A068D3F511D00703A2DC024F70AB0BB98F0B01D549D42C774
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-buy-sign-on-4.png
Preview:	.PNG........IHDR...............D.....pHYs..........+......tIME.....'..Z.... .IDATx...wxTU......Lz...@ t...T.E...u.]..k[]Q.........&..T .BH...I.ef2...H.%..Y].......;..{.;.s.9.F...).$I.._H1...e.H.$I..B.!.D.$I...w.$I...M2@$I....."I.$....I.$.Gd.H.$I=".D.$I... .$IR....$I.z.W.....f.5..$I..G.........O....k.w^B..v;N..7.......n.#...$I..z. 6....8q..K.,.O.....s.NN.<...4.L..........s.....4i.....I...B....hhh8.....477.p8...f......p8.3w..........C.$...Q..Z...>.........../..r.999L..e.sr~Qy{....{.%99...D.....7..e.hmmu..........I...mmm....\7~<W_s.W....1c\....r.\|.A...y..2e..~.!V......c.o.s.$I.-./t.......>\|8N........7;w2}.t...y..gQ.DEEQTT......P.z.9..g.w.y'V...'N......222...[.6m.o..&....B..Ry....l6..>..GIKK..............@.j5.........4...J...J.:.I...%.. .N......On..6.....k.q.}.q......y.ft:.O?.4N.....f.?&99...~...4662w.\&O..Z~..1..........5r...U.;....HEE.........\|..B~~>^^^DEE.`6.@..`0.p80......iii.......J..P(.....j....p....{....q8..>?...\|.....Z.{..b. .8ox.;v.KG..qq..&I

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1031
Entropy (8bit):	5.105521963840683
Encrypted:	false
SSDEEP:	24:twdmluFgbz8+mn8muj0Cqm9WaUjQcRUumj8gmzA0ti6dNHb:68kgUVC7ZYQOR80Y6P
MD5:	90367AB917588B8A43818D6E0454034A
SHA1:	B0C9DCEF5BF2A0D5F2AEBD6399EA7C2B9EFFA19A
SHA-256:	66703843B3670F75A7F104D4001173BA61435E782BB8A11784FD4337F5C63B8B
SHA-512:	0FC9DD7286E8E1BB1A0B7D91A8DA042A2C0E227AE29C58D2E64C8424E64D8064221E964A2627EB751E653E68887E1C11A3146D9F720BBCE645ED3F564DBD34C8
Malicious:	false
Reputation:	low
URL:	https://support.sharefile.com/resource/NF_Bot/img/ShareFileSymbol.svg
Preview:	<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="ShareFile Symbol" clip-path="url(#clip0_10656_6233)">.<path id="Vector" d="M20 6.41847V5.00001H13.3335L14.9997 2.50001L13.5818 1.79105L10.4972 6.41794L20 6.41847Z" fill="black"/>.<path id="Vector_2" d="M0 13.5815V14.9995L6.66646 15L4.99969 17.4995L6.41817 18.209L9.5028 13.5815H0Z" fill="black"/>.<path id="Vector_3" d="M1.41847 4.2905L0 4.99999L3.33354 9.99999H0V11.4179H6.16926L1.41847 4.2905Z" fill="black"/>.<path id="Vector_4" d="M18.5815 15.709L19.9994 15L16.6665 9.99999H19.9994V8.58206H13.8301L18.5815 15.709Z" fill="black"/>.<path id="Vector_5" d="M8.58151 19.2905L9.99999 20L13.3329 15L14.9997 17.5L16.4175 16.791L13.3329 12.1636L8.58151 19.2905Z" fill="black"/>.<path id="Vector_6" d="M11.4185 0.708963L9.99998 0L6.66645 5L5.00029 2.5L3.58182 3.20896L6.66645 7.83585L11.4185 0.708963Z" fill="black"/>.</g>.<defs>.<clipPath id="clip0_10656_6233">.<rect width="20" height="20" fill="white

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 317, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	67062
Entropy (8bit):	7.991029116509685
Encrypted:	true
SSDEEP:	1536:QV89NhlrBDz46hUMwcRRhAulrOkelgLxjpzAs6JT3/aHodw:QV89NhNx46hUrcRRhAulx1jpzmJTvaZ
MD5:	84FB59553222221F38486C126115E409
SHA1:	DE2F6583101A4B4280161EE4FB381605F3E1F687
SHA-256:	15546F333086DBAC6D3F05107A283A20DEB4C06BBA3DA170C3B6E388C6757195
SHA-512:	FA040086BF76DF651F87A526787F9E550FEA3A7612BB559B47E0BC9391C92CB9E60692FD692870E06AA0F414A22977FC6D5AB4F796CC1E116C16E3FDC8F06B04
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/catalog-1a.png
Preview:	.PNG........IHDR...X...=............pHYs...t...t..f.x....tIME......4z).... .IDATx..w......#m...{.............%.....%.BB:o.$..B%.C.o.B..c.`.....v..\|w..M+....v%...ymS...yG..h4..g.)...R.P(...B...!.0.u....B.P(.S.,i..2(...B.P...j.P.P(.....h.....B.P(..5...P(...BQc...P(...BQc...P(...BQc...P(...BQcB.....B.P.B..d..2..}].....$....D<...R.+..................d.)-b.((.K.D.L.. ...cU.xW.N..R.x..f..X,....P(...e..E.u}_.E.(I$lb........K.K..G6k2q.x.N.....d2..H..b..l..N.-.g.KJ...;...6..f..ttt.b...K/.DOOO_O.'..}.vZZZ.c...la..,^.........3.<....m3.?.o..yq..[w..*..t.6.zrA..CQ[..`..f...#.<N6k..")...B.....i./..2...7.f.......'.d....4.<.,._\|1.]w......s'......P9.}.\|.[......n`...,\...o....6.=VJIWWW.,}.k.p..T.5o<...... .i#Y....[..?.x...J.q.....,xa.vto>.a.-......=..k.........+..8h....g.+....w...BF}..=O:......... ...7....P......7....9l.l....i...`Y..&L...;.`..\|.....Y.r%.x._...$...../0{.l......d.;v,G.q.[.la...3..ap...3i.$...o.....+.d...,\....N..8.......<...3q.D.......)....w.#.../

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 815 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10241
Entropy (8bit):	7.891668241987099
Encrypted:	false
SSDEEP:	192:3SuRRg6uEdNJGIF6NVAxwuYGGvn5Vn9KYkvLXeGQu0LezQTk5xV:ius6FgKYGGv5Vn9KNvLXeBuqezH5j
MD5:	3803CD4FDE1320F21398496FA961675A
SHA1:	29E14BD9097097AF6AD0D540592B44603F22D24B
SHA-256:	EC3A31663706DB36050EC72C1525FEB092E0A5CD19E7641FB4A978EF80F76DF1
SHA-512:	49CBAE136E0249C8E9D239B7D1D6FE370FE663ACC18C0A0C6CD8DD1B6B6454F24DB2188707933471752B79F527129F40373CD407A8C75CC6799999428936A5F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.../.........8.7.....pHYs.................sRGB.........gAMA......a...'.IDATx..........G.`..$G0t..F0T..#(.............X.@r..}..ROwu.......uA-[.... ...?.Oz.............Tj..............J.c..<...#"""""..N..+a\|..""""""...y.....""""""...<\..DDDDDDV.r}..BBDDDDDda..Y.........Xg...ur."""""".K.-..nc"""""........c.8>./..(...G.....m.....A.%o.EDJ.............5/....:/""2.kg%..?Y..Y....K\|..%D.:/""RJ........c.....u^dQ..Y..(....S.J...."""Q...I.v.:/......H..z{..-r..p.r.6...s.....>Cl&&...K.nm..D....#...:A?>..0.h&.#1U...K..._.......O?...~~...]Vy7.....""rYb.x.#.g...........Y}.z.....2~.H......_?.=.Bo...u\|..8.n.x......0U.?#"".i....k...X..j...S.)..d..M..7.......i.:.6...b..{......<(.m....Y...w@n.....m..#....2..8-}...X#\|.0>./Q.H...lI...B..~Z)..q...hx.s...#.p%..yq......K.k...:1.............\|^8...5.J.C.....HLb...-cF..s..5..4,.....k...""[R.3...q..p....s@6..S...K..xF./Y......R..w...F........,.-t\.......7 ../..-..t*.S.f..w..=..s.=.).VV~l

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon
Category:	downloaded
Size (bytes):	42996
Entropy (8bit):	6.007967283299101
Encrypted:	false
SSDEEP:	768:EcBqVdMDxyKA6Q0qsf3Fb1WG+8XGinK9FZ6EfVpEzVJDqKCq2uIdKTqL9zOCFZ2l:roSDxy6Q4fF1W38XGinK9FgE7KVJsq2E
MD5:	1C0D3D3231B4ACDF23E9866EC143796E
SHA1:	AF2A47CD83E39CA7341126EA1DCA4A7239A077F9
SHA-256:	620CB115E240D71BAC0F21C15FE71EF488D80BE9E3AD10431FF6ED3B6A219D7D
SHA-512:	F8C975C6EE8877DCB050FFFCE928BC75E9E79D1DAC6577521F97737FF31DB69F2CBD14DF54F15C9921B8BFAF0C9B8D231D935403B573CC37ADEF57970519F0BE
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/assets/fonts/docs-icons.ttf?kuflrc
Preview:	...........0OS/2...........`cmap.V.........Tgasp.......p....glyf..d....x....head...........6hhea.\.....4...$hmtx..ez...X....loca^*/....8....maxp.......,... name.J.....L....post........... ...........................3...................................@...s.....@...@............... .................................8............. .s......... ................................................79..................79..................79...........%...(......1.........3267.>.54&'1..#"...'..#0"#1....................................e.......................................3...B.Y.~.............47>.7632...........#"&'..#"............3267>.32...........#"'..'&5...#"&5.4632...32....+.%..#"&'..#".....#"&5.4632...>.32.....74632.....#"&5.4632.....#"&5.2654&#"........#"&5467....54632....>.32............#"&'.2654&#".......gHHU:44U! ..........T@56M....M56@T}"........ U54<VHGg..........................&.O^........ `7+?...d..................1 .. --.<............................................ -- !--.8REDc

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 414, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47350
Entropy (8bit):	7.983742237326035
Encrypted:	false
SSDEEP:	768:7toGYi9pQdSDsrJGFCkTi6avUrHMzuk+B+HhCbc/Les6rgd5gkcVkBoG6:7ef2pWSDWJ3k+lcriu/BwP6rGlcVkBI
MD5:	C8A3AC217724FAFDF86CCE119C532D22
SHA1:	65182B3E163D4788FE0A4F4A3F7601BD4BD8607E
SHA-256:	C0CCAECC7BA191CE72A7BA8F4CA051A0F508A55CEAD55F104FDA2C5743C8F740
SHA-512:	6EBFE52E4AA5E2299906E65F87B3409DB53F7174C374C77A8497F3D5E0764678161AE1916B38F5795BC15D8CBFF8A1E38A6E684E4EB6ED9BE86C8A9577D445B5
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/int-export-1-x.png
Preview:	.PNG........IHDR.............b......pHYs...t...t..f.x....tIME.....$...}... .IDATx...w\|Uu....).....^..B. .....(8...R.u..ov....utg..3....Xf-...(CWA.@(.{....zSn.\|...... )\|.....-.\|.......9...j"...$..../($1>...i..O...G.ej.^...'91.Y....;&.v..kg.&6..gP..KJ.e.....v./)%..BQ...H.v.4M....h.<.....v..A..P....r$.BCBD..""....4.ZT".#(>..[."j. ....PU]MIi9.......I...+.Ihh...........B.S....Z........n.0....mC.z;e.&Q...].r...FQ.$Ij...p..$.Y....$....p.BC.E..Rjk.@.1.MX&Q..X,.KJ...%""..j.0...%..wF....>....2..>.bcp9.".[...v.4.4..BB.r88_RJn^.Ng...`,...,#I.....pS...i.......SU....n............@..t..b....GMm-UU...+FQT,..EU.E...p.....k..........M..q!..!...h8kv:.8...u.o].>..@@.o.]DA..=.E..Z..\..v{.(v....D.w0F};<.$..t...n....A.G5..1.S...........A.n..5A..A..D... .B. .]..A.:... .....@..A...@.. .. t."..A......... ....tA..A..n.....D.A..7q....%.:....A.Zv....1.U....e.!"..A..ku;...(Jk..\......_. ..pc......,..qq.F... ..".[..... ....+m:.E.\..A..t..Q......w./L..A.........].~3.X.. ....fU.M.l...

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 550 x 237, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	62383
Entropy (8bit):	7.991149064248627
Encrypted:	true
SSDEEP:	1536:l2j4HgH7NkxqDXBGh9X2dDKo/VbBJUvobqYsj:l20HgH7wcGhWDKo/VbB60qH
MD5:	44880511582FA180946D9015F6517D1B
SHA1:	96F878334BA421058AC57B4E6DA23A1375B5DBFA
SHA-256:	CF962AD83F92281DA17816A55296603B0C7F58310B8C7CBD4C402A186C0AA844
SHA-512:	3140F15534C4F998BC8BFD6C86BC873102D5D3AF291F727BA15C3BD53EEB3E5D91D583A3415CF08821B741006D85231302B8753AC96D5BDDB8B138EE5EEDBDF4
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/catalog-1b.png
Preview:	.PNG........IHDR...&..........~......pHYs...t...t..f.x....tIME.....!.tD.... .IDATx...wx].........m.[r..`.6.1`L5.....H.y..I.L&sg.7...nB.I.!..........%.HV.]..z.8.b..l0......t..Z[G{...%=..#.. .. ....l.@..A..3O....]..&..A..A..H..e.8.}..r.D`".. ...I.0M..PU..m...L.A....bZ.^..Y..vaN..L.A...BrL...o.%....t.....$I...+.. ...&.,..)=.O...i_X.Q...=.$I..$I.~.A.m..0@.t..O.RBU..q. .. \|!....E........o..m..y..,Ix.^.E..OQ.\....`0x.[!.EA.u4M......b.6.eQ[[.m.\|nM.hjj....].O..$..xQ..1=./.....K......DBr-.Z.1..rF. ._.I.......p....\|....cL.^/....4M..>Lzz:%%%...2m.4....a...I.w.....E....+...EQx..;w..'L b..F..n8.........)J..o.6...o.^6m.<p..0(.....~..\.s.=....Obb".m.....\|......3..Gq.e....`Y.q..L.t&Y.>"..,+.........lb...\u.U....AUTTU..L.WB6..Y....Bn......k[..1.LV.T...'.`;._.. \h$.d.Nlp..h .ygj...F.x.......".2.e.1...n....$...4m.ccp..3I.$..x...4.7W.....!C..r.JJKKy...m[.....d..5......0w.\JJJx...PUu.e#.....;...i...........=.4x..`......C ....*.....2n.8....Q....!77.I.&.t..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 338, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	39752
Entropy (8bit):	7.975615266836873
Encrypted:	false
SSDEEP:	768:alBNBKVt6LUS3LGz55s1IqKSSgzbdkzmRMQH:alDBKfjrHAWIbOKx
MD5:	20E6B87B28B75A5CC64747251667D1C8
SHA1:	88D3DFA5B54C3C50D9CD7ECC3386536B13C3F029
SHA-256:	2D2020C1F9D222551467D6538653A0DA29CFF68F5009436424E53D21E8F22D48
SHA-512:	B7273337A342F7738B3DD7F9EE79490C4EBEF9049460B6FDEBE9800FF9746BC45541609D2BF8028A051B9FCF5B45D794EA96926564EAD2EB698807CC2F480B3D
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/int-export-1.png
Preview:	.PNG........IHDR...X...R........'....pHYs...t...t..f.x....tIME.....)..w... .IDATx...wxTU...........I.Yi..@E..Vtu]].]{.....Vl.E."....H ....3..L.9.?.Q..A...yx.....7wf.}.{.=W..\|......SQQ...GQ.$I.$I...(8..bcc.....=j.Jyy........N.C.V.$I.$IGF......x.{.]...v.R.0..':6I.$I...,EQp.\.\|>...'T..I.$I.$.!3+I.$I..^&.,I.$I..^&.,I.$I..^&.,I.$I..^&.,I.$I..^&.,I.$I..^.9..H.tp.......?.H'...B...jOt(.tR;..`....V.III...J...f..l.@..Rd.Y:v~!.z=..... BCBNtH.tR.............&,,...Mdd.1ms..tuuq....R.........v;..-b.Y$&&...D}C#...........t.r:]...a..H..G...J....k..?.8555..?.!**.9s.`...l.r.u........<x0....K.a...=.?..S.s.=...!..~n....O..I.z...?..o.....bccy..'...b.......O:...7..jIIJ..t...z...1.L...#.8.!I.I.+X...g.}6....s...xX.t)..>.6m.nb.u.......U__..S..........[o1q.D6o...#....f..k..M....~HXX..M....(.....(n...&L.....@+.3H......ZCTd..E....../.445...{.....1'X.6l`......[...+..........I.&.../.......{.?I.V.\I}}={...h4.p.M7.......7.\|.@@@.......x.^.,X....{.SVV...O{{;...c...,_.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 131 x 218, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15238
Entropy (8bit):	7.977285184544566
Encrypted:	false
SSDEEP:	384:io6DTXc4wMOclxpJ6xv+A6j+Does6VTXxzE4odwok:io6HXc4dxJ6x2X+D1j9Sbdwok
MD5:	4F73D9D01711B2F0A700246AF5E92672
SHA1:	AA2AC74EF5631C7B23EA8B01082BFEE4BBCE09FC
SHA-256:	A453F2AFA67BE5DB76772B886B665D3F70B09EB020E679D79EF5D0A40BF53090
SHA-512:	FB597EAE007F6ECA62ED2356A22D59CBCBB024B657D92CC4C9968304FA5667E038966430337118162B7282C10688C3D282FB6677F72B9DC66300E80ACDB87D14
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/rb-plan-buy-now-1.png
Preview:	.PNG........IHDR................Y....pHYs..........+......tIME.....7..-.... .IDATx..wxUU..?...F)$.PB@.....b.Q....3...SuFGg.w.3?.....(...'!..!.IH.....#...%.@..y.<...g....=k...w.K0M.$D....mA..CH.!...!D;!1.hG.fAh<yq#..)....."8.:$..........v$...n.a......AU...2.A.b..t:O).v1.....?OQQ.....[...ijjb....z..?..#.]%.......;..........k.eK..M.<A...B.EQ......$I.r.0..a.x..!.>L.<..5.!...!D;!1.h'$.........B...C.vBb..NH.!...!D;!1.h'$.........B...C.vBb..NH.!...!D;!1.h'$.........B.s.........=.p,t.~.....%.,.]S.z..T.....^(]a....Pu,...^;..:=.}...RW.z..m..f..i1......[.H..^......?.K...8_.F~..G<...I..su..A.......?..^.7........`PUY.....#.....l...x.O0\|.$.c.aM.....%....ED..?........"`v\|.L("...{...I....Jdd$.W.r..x.........%X.-c..6%....<.n.1....7Od...).g.a..#...k(Z.1.vWs./...z>.l..M....y<...........I7c.\|......<...r.....l)5....cBF.....u^.....&q.5...~*....Q.5io&l2..+..p..(P.5!.S$.^.......&.Er?-....A6.&..q.Z.Ss.b...8......y.oXGL...s........?.-...'.....'...D.]..1.......

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 302, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	32776
Entropy (8bit):	7.976361454559355
Encrypted:	false
SSDEEP:	768:fYJkT5SLnnneKWQv/5XqBWnnY06xwDx0LhT5ZSeH7HCDIAL8o6UsOS1C/:NkZW2/c3wDx0LRZH7HC5L/
MD5:	AA58DFE94AED5779030C89775D782B75
SHA1:	D74AE66762D13A8C808A07F743F4BA0620577D04
SHA-256:	C897583DADAF4176473C0A64CEA863C13B0030EC545D48AF494C7884D3F690F0
SHA-512:	FC9773FD0083811360ACA435F8B41DE1708B71BAD0E193DFC5C7FF8536F15AF9A625C5491E996D9A068D3F511D00703A2DC024F70AB0BB98F0B01D549D42C774
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............D.....pHYs..........+......tIME.....'..Z.... .IDATx...wxTU......Lz...@ t...T.E...u.]..k[]Q.........&..T .BH...I.ef2...H.%..Y].......;..{.;.s.9.F...).$I.._H1...e.H.$I..B.!.D.$I...w.$I...M2@$I....."I.$....I.$.Gd.H.$I=".D.$I... .$IR....$I.z.W.....f.5..$I..G.........O....k.w^B..v;N..7.......n.#...$I..z. 6....8q..K.,.O.....s.NN.<...4.L..........s.....4i.....I...B....hhh8.....477.p8...f......p8.3w..........C.$...Q..Z...>.........../..r.999L..e.sr~Qy{....{.%99...D.....7..e.hmmu..........I...mmm....\7~<W_s.W....1c\....r.\|.A...y..2e..~.!V......c.o.s.$I.-./t.......>\|8N........7;w2}.t...y..gQ.DEEQTT......P.z.9..g.w.y'V...'N......222...[.6m.o..&....B..Ry....l6..>..GIKK..............@.j5.........4...J...J.:.I...%.. .N......On..6.....k.q.}.q......y.ft:.O?.4N.....f.?&99...~...4662w.\&O..Z~..1..........5r...U.;....HEE.........\|..B~~>^^^DEE.`6.@..`0.p80......iii.......J..P(.....j....p....{....q8..>?...\|.....Z.{..b. .8ox.;v.KG..qq..&I

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	191700
Entropy (8bit):	5.5285975093221715
Encrypted:	false
SSDEEP:	3072:LxQaf5qZ3fhO+HWW88G1LceF2/eazQthTnXDL9btIM013I4:FQX5NPYLceF+CTnXP9RIM4z
MD5:	40434A1FD82E7447B5EACB0E13872B19
SHA1:	A2E7FAC38DF823DBFB84A43EE46D98135D9EFAAB
SHA-256:	0D3D750E4CD496091FDDA110807DD46C78284C4DE58145C0EAE547FBDF1A49E5
SHA-512:	5C3967BF14684D302D837F4329978292A1C0C57806BD1823BA37991C5DF74A5433C88994C0ED7FAD7CAF6978990531279ECBB11D1D15565FE3FE96AC4A6D0348
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-142592-2&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{do

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 414, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48518
Entropy (8bit):	7.984776828331928
Encrypted:	false
SSDEEP:	768:LtoGYi9pQdSDsrJGFCkTi6avUrHMzuk+B+HhCbc/LEGk7yw5ME2PEPNEvbfyqgvJ:Lef2pWSDWJ3k+lcriu/BwU2w5SPyEOvJ
MD5:	4018A23290A0518790D2E3439ECC7684
SHA1:	D676EFB155E4254FB1F3B3E53936838A8040B761
SHA-256:	88B1844DBE7BAC86D303109A4FD0869B1EF5DCE915831361221320C83935BFF1
SHA-512:	AEAABA4CCC1D0740699457827496DC052E63AF1B6B2ABA472E25962095527A7B28D5F2ED22535EECADA29044165EA2C3FA6AFB4D8CD61DCF6754056732F6CB07
Malicious:	false
Reputation:	low
URL:	https://docs.sharefile.com/en-us/sharefile/media/int-export-1-qb.png
Preview:	.PNG........IHDR.............b......pHYs...t...t..f.x....tIME.....##.#.... .IDATx...w\|Uu....).....^..B. .....(8...R.u..ov....utg..3....Xf-...(CWA.@(.{....zSn.\|...... )\|.....-.\|.......9...j"...$..../($1>...i..O...G.ej.^...'91.Y....;&.v..kg.&6..gP..KJ.e.....v./)%..BQ...H.v.4M....h.<.....v..A..P....r$.BCBD..""....4.ZT".#(>..[."j. ....PU]MIi9.......I...+.Ihh...........B.S....Z........n.0....mC.z;e.&Q...].r...FQ.$Ij...p..$.Y....$....p.BC.E..Rjk.@.1.MX&Q..X,.KJ...%""..j.0...%..wF....>....2..>.bcp9.".[...v.4.4..BB.r88_RJn^.Ng...`,...,#I.....pS...i.......SU....n............@..t..b....GMm-UU...+FQT,..EU.E...p.....k..........M..q!..!...h8kv:.8...u.o].>..@@.o.]DA..=.E..Z..\..v{.(v....D.w0F};<.$..t...n....A.G5..1.S...........A.n..5A..A..D... .B. .]..A.:... .....@..A...@.. .. t."..A......... ....tA..A..n.....D.A..7q....%.:....A.Zv....1.U....e.!"..A..ku;...(Jk..\......_. ..pc......,..qq.F... ..".[..... ....+m:.E.\..A..t..Q......w./L..A.........].~3.X.. ....fU.M.l...

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.5 (zip deflate encoded)
Category:	dropped
Size (bytes):	23057345
Entropy (8bit):	7.9945828301793
Encrypted:	true
SSDEEP:	393216:nw4D3W0O9AiE2QGMWe6bCENSs0aKVfJHe3NHlatMJRyPGm7qPYgDAZCLbu7g0eCS:nXjWvAV5pKOkH0aKJJHe9FaSJRi3+PYG
MD5:	54C50EA27013D2AAB2C87DF1C80EE908
SHA1:	0136A5B6E4ED82540C3FBA12B3B1E150EA96F082
SHA-256:	142183965D9711FBD38B0DFF00B3A3934B75923D171527F384B8D30BE4F02644
SHA-512:	0956F626799B3A304907DBC5A80B38A60889226977EA819A30F9158B6FB073BB6037F5CD1956EDDBA49C91390292AD0AECA7286FAC129E3D4F3AF0396ED70827
Malicious:	false
Reputation:	low
Preview:	%PDF-1.5.%.....4 0 obj.<</Type/XObject/Subtype/Image/Width 2816/Height 512/ColorSpace/DeviceGray/BitsPerComponent.8/DecodeParms<</BitsPerComponent 8/Colors 1/Columns 2816/Predictor 2>>/Filter/FlateDecode/Length.26457>>.stream.x..Y.W.=\|.....8....FN@.&.8.`.....$` .3$`F..Q.......O..B.2....\.}.y...z./....`P0...f...........>.......`.....S............f.........s.}..H...........S........d...".............8+....P*W...D.0....................}........D...=d..pz.....,..>{.......@Y\......i.....P..z.=3`.........>{.d..<....@.......g.........\~l.......(..{.=.Y.L....@.,.}...............M............Xi8U.....?.e..c4......"p.}F........c...........}.....=b\|..c......@........z.[..}......../j............o.....#.}.....}.l..S.5........[...........}.....=bw...}.....E.....7....(.z.....@.p.}.6.T....@.\.]~..7....(.z.A.\t...2....c...wvf......l..3.9...p...d.c......C.3..._....z.c............ P..T....../.gx..c..<...d..l....../...M...l<h..9.......Y.3..gw.i.H"......_.I}Q...(.d......../D.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 311, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24055
Entropy (8bit):	7.96773379290325
Encrypted:	false
SSDEEP:	384:0EJVGJ1o5nGfvcT0by09N5xpwFsw2mzynCsqaXYmOPKhue7+R6FXyEq8L82L:Z3GkIj9TTwFT2mzynvqmOPKhtiCvq12L
MD5:	2BAE893B1DD0C0618D53D3E223E3EB05
SHA1:	1E3A34CB2C44844C1721BA455DC7F1F7B416CA20
SHA-256:	D16C8F74FDFDD5A89FE519AAF182377D9C60B687B1F058EF0BE05A0F7A4B6E45
SHA-512:	CC85C7410E21E96A20308E80BDA0E8CD698C7AB6AD89E4EB2D930CA15572285A962E73538F3AF4F2BE7B87B869D7708D0C099EE209CED25B4DC76A3FFD471FBD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7.............pHYs..........+......tIME.....2:..... .IDATx...w\|.U....M...$@.I.=R%Ti.......,...b]t.WY;.....Ho!!..$.....o....f."E.O...._/^$S.L..w.{T....I.$I...v..j.A.$I....v.Zy."I.$.b!...I.$..s....$I..3...$I.:E..$I..)2@$I..N.."I.$u...I.$.Sd.H.$I.".D.$I._. .......^.[.G.$I....D..'.~..=GKK.....o.]Z.......l.M..[..lJ....q..!N.8..f..%.$I....j....JKK...uuu\|..W.1g.aaa........?..g..n..;=...l......#6&...T.....y.]>..S..;Fxxx..W$. c...JKA..@u.x..B........./rssy...qqq...g.^...kxzz^...$I...d..>s.E...../.v.:....;...e.......W....3K..j.....p8....3m.4.........Bcc#v..........;l..K}}.A...Y.x...Y.v-G..a..$%%QS[KxD.U(.$I.o.....?.....g...........&.y.m.../....l6...y...lh4...Cll.%W...^.../w...w...;MMM\|..g,..},...~..Z..ggg.4..o...Pss3...,^.......f.....%,,..>...O...JMM.j.Z..I..........jjkY...l.....g...\7q"c.....,.........p`..pqq.w\|.e....L...x...quuU.....6l...]..8a.2.h4r..!6l.F.a.A......Lc.X.o.{....A..1q........a...h4.v..E....."??..."

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.220499629438423
Encrypted:	false
SSDEEP:	6:U5ti7qA3AYv1X7cfx2dOLId/hkeiWj/ayeNkxi4EN/WY2:UsqAwYv1LRdOLId/hkeiYVEWT
MD5:	8BE7F0458EC111C9A6E51DCD55D721E0
SHA1:	CA2291911C570357717223ECA47E9CBC9425135B
SHA-256:	AACE6D84096E0869A2EA267CB78F73C970547BF23140039EAE6BCF4299D714E0
SHA-512:	70FBB24CC985DFC5843FAB324D287DE60431C48C5734B4F2A2153D1CEE9A7A0544F2F950944FF84C31BFA36DB64A7CA57C1AAD26991FBA72B0CF1867DC32B99C
Malicious:	false
Reputation:	low
URL:	https://d.la1-c1-ia6.salesforceliveagent.com/chat/rest/Visitor/Settings.jsonp?Settings.prefix=Visitor&Settings.buttonIds=[573Dn000000hOkW]&Settings.updateBreadcrumb=1&callback=embedded_svc.liveAgentAPI.connection.handlePing&deployment_id=572Dn000000hP8x&org_id=00DDn00000AvI1G&version=48
Preview:	/**/embedded_svc.liveAgentAPI.connection.handlePing({"messages":[{"type":"Settings", "message":{"prefixKey":"49a52244d5716d8cfcdf8c38fbadd487d5371244","contentServerUrl":"https://74nz.la1-c1-ia6.salesforceliveagent.com/content","pingRate":50000.0,"buttons":[{"language":"en_US","type":"Standard","id":"573Dn000000hOkW","isAvailable":true}]}}]});

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 414, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47350
Entropy (8bit):	7.983742237326035
Encrypted:	false
SSDEEP:	768:7toGYi9pQdSDsrJGFCkTi6avUrHMzuk+B+HhCbc/Les6rgd5gkcVkBoG6:7ef2pWSDWJ3k+lcriu/BwP6rGlcVkBI
MD5:	C8A3AC217724FAFDF86CCE119C532D22
SHA1:	65182B3E163D4788FE0A4F4A3F7601BD4BD8607E
SHA-256:	C0CCAECC7BA191CE72A7BA8F4CA051A0F508A55CEAD55F104FDA2C5743C8F740
SHA-512:	6EBFE52E4AA5E2299906E65F87B3409DB53F7174C374C77A8497F3D5E0764678161AE1916B38F5795BC15D8CBFF8A1E38A6E684E4EB6ED9BE86C8A9577D445B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b......pHYs...t...t..f.x....tIME.....$...}... .IDATx...w\|Uu....).....^..B. .....(8...R.u..ov....utg..3....Xf-...(CWA.@(.{....zSn.\|...... )\|.....-.\|.......9...j"...$..../($1>...i..O...G.ej.^...'91.Y....;&.v..kg.&6..gP..KJ.e.....v./)%..BQ...H.v.4M....h.<.....v..A..P....r$.BCBD..""....4.ZT".#(>..[."j. ....PU]MIi9.......I...+.Ihh...........B.S....Z........n.0....mC.z;e.&Q...].r...FQ.$Ij...p..$.Y....$....p.BC.E..Rjk.@.1.MX&Q..X,.KJ...%""..j.0...%..wF....>....2..>.bcp9.".[...v.4.4..BB.r88_RJn^.Ng...`,...,#I.....pS...i.......SU....n............@..t..b....GMm-UU...+FQT,..EU.E...p.....k..........M..q!..!...h8kv:.8...u.o].>..@@.o.]DA..=.E..Z..\..v{.(v....D.w0F};<.$..t...n....A.G5..1.S...........A.n..5A..A..D... .B. .]..A.:... .....@..A...@.. .. t."..A......... ....tA..A..n.....D.A..7q....%.:....A.Zv....1.U....e.!"..A..ku;...(Jk..\......_. ..pc......,..qq.F... ..".[..... ....+m:.E.\..A..t..Q......w./L..A.........].~3.X.. ....fU.M.l...

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 520, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	59073
Entropy (8bit):	7.965247546319023
Encrypted:	false
SSDEEP:	1536:/Kg8sRVKd61BgKBGw+HLagl4cD44JhIaB3MhAMDqld8aCSW8:38sGEg8Gd2cD9C43MWQKX48
MD5:	A0F79726D4BEF21FB9398F0A3A868E9E
SHA1:	C0A31755D934EF07DD03C6595CA67C99147F8B9A
SHA-256:	F98F4CB253AEE19ABB92AA7A6B6A71B56CC86C266A08551D7FC21B9FA302E08B
SHA-512:	C16D292C5521E84A538A853C5B9C56CD689D5D67F0B25318BB895DBB1658D88C7AF67967FE7B2418467331889693670EA1C782F9D8C0549F2AE62344E270614E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... .................pHYs..........+......tIME......&R\|.j.. .IDATx...w.\g}...........e..wcl0...B..H8..NHNnr..&'....J @0.6.`..-7Y..-........?...%.&hoY..~.....ff...Z........!.8.....l......TJ..l..B..e....B.!..B..."..B.!..0.@..B.!....z..<_S.z.=..yN...A<l...(.<..O,l...s2..P......D~..].!..B.5.n.......l?ZF)..`.z[:.o].....5.\|......zan\?....4.n.e.<.]..%s3g{...B.!....n..W<..>..}.&eCDl.b...@..}.....C..R.....T.,...9oF.MO.aoO...o..!.1.O..'.Sd.c.w_.@..\.....[.J<\........[.....Y^7.(.......WOffS..B..<../....~n_.J...,9d.6Zk.....E.\|.....'u#.<.....!ac.......I..........(...F..8>}....hL..Y.x......l..9.p=..iB..0.I..Z.X.{....!...=.}.9.8.O..c..T.d...4&CX.B.u...a+x....f.hN...zr.....Ja.c.].{......\.b..2\v..-......B.7.u.\|..<.)...h..Mx..\|...Oo...X.l\|+.g............6.!.D.q.{Cw.....m.Z.cR&.v(..z.....eE3.....u=,...k...*.X...K..v.....!_q...q....;.....i.....u...8..L..o=.............<M...FB...<.s..^..`..4.-i.6.{..\|.#Li...+.I.,......r~.;.nA..z.....0\v.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 423, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70843
Entropy (8bit):	7.986387171882486
Encrypted:	false
SSDEEP:	1536:z8juOdHImMH2nhRWT6S8U1b/nq8gYmXWL7ZZDBYhoGQwDQNvcZ4IjTuadMc:ZAQGha6f58PmG5ZDeh/QwR64Z
MD5:	40719EEF8ADC4C3386190FD6BFAABB0D
SHA1:	03CB38FD4D513912D648F91D68E7937B04948E4F
SHA-256:	10F44C003D388C2AE21D87449ECD28A48B2B78D0C936BF20854FF347A6899FBD
SHA-512:	D7CC1C59DBF988AC5C654010BC1B8A7B2D2D28F2DDE156CA88F36C4CE671B33024CDCC957C0E53D12810F8EE8B9989054CDA43149E774D93F1032F645CE27F8E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............UC......pHYs..........+......tIME......%...... .IDATx...wx......l.$.... @.PB...wi.(bE..^...x/^....(E.H..k.-..J !......H.P.E...gg..3..g.y......B.!..w)....@Q.kn.....B.!...O%...B.!.(S.E)..+...B.!.(34..n....FS..J.+..B.!...F...a.....UU.h4...!..B..#66...TRRR...-.. Y...B.!.>233.k....X,..d(h2.....e......r.ei...lh.Z..n7f...m...B.!..K.e._..5[.n%99....W....a...6.!C...^.F.E....k..Gzx..B.!...TF....s.{A....^...}...o........v...x...HNN.s..7}r!..B.q......c.q...;].[R.B.&N.....oj...ARR........w...v.......C.z..Eff&..5...?..f#$$...+....7...y..'o..~...Avv6n..UUQ..x.^....w/...T.Z....3x.`.5k...K.!.....D..9t....o.......i....u:....q..y.z.U.;......`0....ng....1....7>>......8L&.N..G.}...~..F.?............{.EQ.h4.....\.rL.8..^x........>.....+...B.!.._....v.....>\|8{.......k4.t:.5{x...^....,Z.n..O?M^^..&Mb.e.Z....p..>...t..&M.....F."==..s.R.B.6n...#.j...7....\|}}..X,h.Z.F.Uu.........R.-.F.v.......YYY\.x..S.......AUU.Z-..4..>....UU.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 338, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	63999
Entropy (8bit):	7.9874646349803635
Encrypted:	false
SSDEEP:	1536:MyFxrrHO9S7h4n9868jMivic2ys34tPAIO0n7H:MyFxHOshQ9R4HKcHs3z0n7H
MD5:	744041BC8FCC240C10CD056E42100FA4
SHA1:	EBB682DD29D2E65ED3E0E30DA13C2F950041D852
SHA-256:	4DB06A41A5D713FF79AE790D0567CBF68038E046B0EC347369A9B3A6BA02CA93
SHA-512:	2A058B03F92DAF3350DE7826C3CCA7EA310D005353152484762878F804B752B55D8A122AEC7FB0530F258D09A6AD82744E429F9CA61B7530D4E25C43ACC32692
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...R........'....pHYs...t...t..f.x....tIME......6...A.. .IDATx...wx.......Y..r...+r.lS..P.8.$p !$....@H.!.7.I.r.@.sH.`N....q.-c.Yn.V.Z.j.....q...2..._...3..J;{....=..iFee%o..&555.$I.. .. .'A....ddd.of.IH.....w.....X.VDh%.. ..pj. .........+RWW.!.2v.}..&.. ...%I..P.M.4M3dY..1.. .. .7Dd%.. ..p...K..A....... .. ........A..A.li..:..)..d..e..0.D.%.. ..w....0.,a..Y}n....Y.Z..k...I.X. ..p....io5.1[A=........t...n...K..q.h.P(...=..< K2V....2.C.."I.w..}...z.....}g.I..g.6WWW.(................`...X.".>.0.zz.u...8....{H.Yb.......J.`..,.J...x...D..x..'IJJ".....zZ.\.t)}}}.t.Mgh..........~?../f...........DSs..h.....N.`.G8...!::;.z}dge!..Bi.p&..S._..W....?....4......\...?q.}.../}..."F...m......c...7....;SC.D......0..\|f...7c.....{.n222....M__.w.}7.v.:k...o.M.X,..ssDp%\|f.v.9.Y..n....z. ..N;...K/q.........D"...[..o.c.......^......YMMM.;...T...4Mc.E....i.&&N.H\|\|<>..t.z.....W_%)).y...n.$.a.........._L$..."...3....EQIKM........tC.......... .7N;.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2639
Entropy (8bit):	5.260992170077151
Encrypted:	false
SSDEEP:	48:Ys/Cxd5X4REDd5X4RE+IhBbwqTe6ud76fpA+c/fpd4eti0Ns2Ji/9xi9+:iSCSmBU6WWfQfW63+
MD5:	E89A4FD37513869FE410370716DA0997
SHA1:	0B4CC8D74711A17854D623570C60A671D2287B95
SHA-256:	9D3F001B844B5732411BC44BC2CF4174BC6C4EE9ECB48DECC77C776166A67AC5
SHA-512:	EE5996497CB73A9CE233601AEB9C020B6F3B18A187589281203ED9D4A97E348EBBE5A2C7107AE690227BD003598989248B6EBA2BB07DC25A47CFFEA3ECB9B856
Malicious:	false
Reputation:	low
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"4d7c87fa-c54f-4064-8f7d-4d0c1223471d":{"attributes":{"buttonBackgroundColor":"rgb(0, 0, 0)","buttonText":"Log in","buttonBorderColor":"rgba(240, 240, 240, 0)","menuStyleSettings":"{\"selectedMenuStyleSetting\":\"iconAndName\",\"selectedIconSetting\":\"userAvatar\",\"includeCompanyName\":false,\"selectedTextOrientationSetting\":\"right\"}","customizableUserProfileMenuEditor":"Default_User_Profile_Menu","buttonTextColor":"","buttonBorderRadius":10,"buttonTextHoverColor":"","commThemeGroupId":"stellaInnerHeader","buttonBackgroundHoverColor":"rgb(0, 0, 0)"},"componentName":"forceCommunity:customizableUserProfileMenu","priority":0},"4012cef8-ec9d-4509-9914-1bd2f3e858b4":{"attributes":{"buttonBackgroundColor":"rgb(0, 0, 0)","buttonText":"Log in","buttonBorderColor":"rgba(240, 240, 240, 0)","menuStyleSettings":"{\"selectedMenuStyleSetting\":\"iconAndName\",\"selectedIconSetting\":\"userAvatar\",\"includeCompanyName\":false,\"selectedTextOrientati

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 20:47:15.801093102 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 25, 2024 20:47:15.801110029 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 25, 2024 20:47:16.129231930 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 25, 2024 20:47:23.104851007 CEST	49716	80	192.168.2.6	44.229.102.36
Apr 25, 2024 20:47:23.108228922 CEST	49717	80	192.168.2.6	44.229.102.36
Apr 25, 2024 20:47:23.237938881 CEST	49719	80	192.168.2.6	44.229.102.36
Apr 25, 2024 20:47:23.285609007 CEST	80	49716	44.229.102.36	192.168.2.6
Apr 25, 2024 20:47:23.285711050 CEST	49716	80	192.168.2.6	44.229.102.36
Apr 25, 2024 20:47:23.285943031 CEST	49716	80	192.168.2.6	44.229.102.36
Apr 25, 2024 20:47:23.288640976 CEST	80	49717	44.229.102.36	192.168.2.6
Apr 25, 2024 20:47:23.290555000 CEST	49717	80	192.168.2.6	44.229.102.36
Apr 25, 2024 20:47:23.418565035 CEST	80	49719	44.229.102.36	192.168.2.6
Apr 25, 2024 20:47:23.418699026 CEST	49719	80	192.168.2.6	44.229.102.36
Apr 25, 2024 20:47:23.466281891 CEST	80	49716	44.229.102.36	192.168.2.6
Apr 25, 2024 20:47:23.474839926 CEST	80	49716	44.229.102.36	192.168.2.6
Apr 25, 2024 20:47:23.516906977 CEST	49716	80	192.168.2.6	44.229.102.36
Apr 25, 2024 20:47:23.616744995 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:23.616787910 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:23.616872072 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:23.617063046 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:23.617075920 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:23.881305933 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:23.883269072 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:23.883304119 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:23.884809017 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:23.884989023 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:23.886066914 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:23.886154890 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:23.886408091 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:23.928160906 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:23.934807062 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:23.934834957 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:23.985924959 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:24.563883066 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:24.563904047 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:24.563947916 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:24.563955069 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:24.564048052 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:24.564048052 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:24.564085960 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:24.566448927 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:24.566517115 CEST	443	49720	174.129.6.84	192.168.2.6
Apr 25, 2024 20:47:24.566571951 CEST	49720	443	192.168.2.6	174.129.6.84
Apr 25, 2024 20:47:24.603140116 CEST	49721	443	192.168.2.6	172.217.215.99
Apr 25, 2024 20:47:24.603171110 CEST	443	49721	172.217.215.99	192.168.2.6
Apr 25, 2024 20:47:24.603231907 CEST	49721	443	192.168.2.6	172.217.215.99
Apr 25, 2024 20:47:24.604031086 CEST	49721	443	192.168.2.6	172.217.215.99
Apr 25, 2024 20:47:24.604044914 CEST	443	49721	172.217.215.99	192.168.2.6
Apr 25, 2024 20:47:24.706322908 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:24.706403971 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:24.706490993 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:24.709943056 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:24.709981918 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:24.831628084 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:24.831676960 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:24.831734896 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:24.832360983 CEST	443	49721	172.217.215.99	192.168.2.6
Apr 25, 2024 20:47:24.832484007 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:24.832503080 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:24.832634926 CEST	49721	443	192.168.2.6	172.217.215.99
Apr 25, 2024 20:47:24.832653046 CEST	443	49721	172.217.215.99	192.168.2.6
Apr 25, 2024 20:47:24.833656073 CEST	443	49721	172.217.215.99	192.168.2.6
Apr 25, 2024 20:47:24.833719015 CEST	49721	443	192.168.2.6	172.217.215.99
Apr 25, 2024 20:47:24.970247984 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:24.970537901 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:24.970601082 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:24.972048044 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:24.972134113 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.224328995 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:25.224415064 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:25.231431961 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:25.231446028 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:25.231681108 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:25.234395027 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:25.234982014 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:25.234988928 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:25.235402107 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:25.250590086 CEST	49721	443	192.168.2.6	172.217.215.99
Apr 25, 2024 20:47:25.250766039 CEST	443	49721	172.217.215.99	192.168.2.6
Apr 25, 2024 20:47:25.251713991 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.251713991 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.251858950 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.252023935 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.280122995 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:25.302356005 CEST	49721	443	192.168.2.6	172.217.215.99
Apr 25, 2024 20:47:25.302377939 CEST	443	49721	172.217.215.99	192.168.2.6
Apr 25, 2024 20:47:25.302530050 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.302589893 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.345815897 CEST	49721	443	192.168.2.6	172.217.215.99
Apr 25, 2024 20:47:25.346144915 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.362195969 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:25.362282038 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:25.362343073 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:25.365497112 CEST	49723	443	192.168.2.6	20.25.241.18
Apr 25, 2024 20:47:25.365520954 CEST	443	49723	20.25.241.18	192.168.2.6
Apr 25, 2024 20:47:25.408941984 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 25, 2024 20:47:25.409050941 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 25, 2024 20:47:25.426587105 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.426649094 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.426722050 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.426728010 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.426739931 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.426784992 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.426980019 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.474416971 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.549194098 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549212933 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549268961 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549305916 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549318075 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549355984 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.549374104 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549386024 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549431086 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549493074 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.549494028 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.549494028 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.549516916 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.549554110 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.549876928 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.550250053 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.550308943 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.561991930 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.562042952 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.562172890 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.562803030 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.562827110 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.600200891 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.653502941 CEST	49725	443	192.168.2.6	18.238.49.47
Apr 25, 2024 20:47:25.653548956 CEST	443	49725	18.238.49.47	192.168.2.6
Apr 25, 2024 20:47:25.653740883 CEST	49725	443	192.168.2.6	18.238.49.47
Apr 25, 2024 20:47:25.654673100 CEST	49725	443	192.168.2.6	18.238.49.47
Apr 25, 2024 20:47:25.654687881 CEST	443	49725	18.238.49.47	192.168.2.6
Apr 25, 2024 20:47:25.674078941 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674093962 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674216032 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674284935 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674299955 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674331903 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674396038 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.674396038 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.674463034 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674514055 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.674573898 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674611092 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.674626112 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.674664974 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.675327063 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.675374985 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.675424099 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.675441027 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.675465107 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.675476074 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.675960064 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.676018953 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.726161957 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.734463930 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:25.734541893 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:25.734751940 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:25.737322092 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:25.737360954 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:25.741242886 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 25, 2024 20:47:25.799099922 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.799133062 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.799365997 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.799365997 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.799431086 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.799534082 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.799745083 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.799771070 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.799998999 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.799998999 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.800060987 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.800223112 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.800246000 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.800311089 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.800422907 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.800422907 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.800422907 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.800422907 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.800422907 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.802591085 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.818648100 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.824456930 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.824493885 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.824825048 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.826680899 CEST	49722	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.826710939 CEST	443	49722	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.829600096 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.829682112 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.829798937 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.840045929 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.840070963 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.840080023 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.840095043 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.840172052 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.840194941 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.840631008 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.840646982 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.840992928 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.841010094 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.842122078 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.842122078 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.842144966 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.842148066 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.842411041 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.842411995 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.842961073 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.842972040 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.843014956 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.843023062 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.843301058 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.843302011 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.843316078 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.843703032 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:25.843719006 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.872118950 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:25.930258036 CEST	443	49725	18.238.49.47	192.168.2.6
Apr 25, 2024 20:47:25.934377909 CEST	49725	443	192.168.2.6	18.238.49.47
Apr 25, 2024 20:47:25.934391975 CEST	443	49725	18.238.49.47	192.168.2.6
Apr 25, 2024 20:47:25.936199903 CEST	443	49725	18.238.49.47	192.168.2.6
Apr 25, 2024 20:47:25.936579943 CEST	49725	443	192.168.2.6	18.238.49.47
Apr 25, 2024 20:47:25.937669992 CEST	49725	443	192.168.2.6	18.238.49.47
Apr 25, 2024 20:47:25.937758923 CEST	443	49725	18.238.49.47	192.168.2.6
Apr 25, 2024 20:47:25.965234995 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:25.965323925 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:25.970587969 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:25.970598936 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:25.970844030 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:25.988403082 CEST	49725	443	192.168.2.6	18.238.49.47
Apr 25, 2024 20:47:25.988416910 CEST	443	49725	18.238.49.47	192.168.2.6
Apr 25, 2024 20:47:26.018136978 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.033337116 CEST	49725	443	192.168.2.6	18.238.49.47
Apr 25, 2024 20:47:26.057687998 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.095418930 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.095922947 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.095985889 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.096402884 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.096462965 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.101155996 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.101207972 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.101221085 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.101481915 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.101567030 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.101766109 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.101785898 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.102425098 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.102466106 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.102507114 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.102909088 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.103107929 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.103293896 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.103354931 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.104012966 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.104120016 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.104216099 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.104343891 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.104346991 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.104350090 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.104355097 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.104562044 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.106107950 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.106209993 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.106957912 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.111227989 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.111228943 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.111238003 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.111310959 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.111674070 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.112353086 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.112546921 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.113099098 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.113157988 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.113329887 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.144874096 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.145015001 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.145090103 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.145150900 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.145180941 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.145196915 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.145267010 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.145267010 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.145277977 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.146703959 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.148116112 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.148139954 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.156110048 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.156119108 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.158319950 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.158320904 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.158327103 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.158327103 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.179259062 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.179378033 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.179588079 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.189810991 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.189831972 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.189846992 CEST	49726	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.189856052 CEST	443	49726	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.205498934 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.205499887 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.269026041 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.269134998 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.269179106 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.269494057 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.269532919 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.269556046 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.269588947 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.269707918 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.269812107 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.269824982 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.323928118 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.329771042 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.329813957 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.329958916 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.330229998 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.330243111 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.393593073 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.393605947 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.393644094 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.393685102 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.393727064 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.393999100 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.394160032 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.394191980 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.394238949 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.394252062 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.394293070 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.394460917 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.394490957 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.394520044 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.394531965 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.394568920 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.395067930 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.395098925 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.395128965 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.395133972 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.395339966 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.429325104 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.429384947 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.429456949 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.429470062 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.429492950 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.429593086 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.431700945 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.431736946 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.431958914 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.431967020 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.432039022 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.432049990 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.432889938 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.432956934 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.433119059 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.433129072 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.433192968 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.433202982 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.433945894 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.434051991 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.434211969 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.434242964 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.434248924 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.434271097 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.434576035 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.482738972 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.482738972 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.482739925 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.482770920 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.491198063 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.491230011 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.491280079 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.491347075 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.491362095 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517092943 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517102003 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517137051 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517157078 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.517174959 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517196894 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.517247915 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517296076 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.517303944 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517338037 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.517867088 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517884016 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517936945 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.517944098 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.517983913 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.518448114 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.518469095 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.518516064 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.518522024 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.518574953 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.518939018 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.518954992 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.519005060 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.519011974 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.519047976 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.519402981 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.519419909 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.519454956 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.519460917 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.519488096 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.519505024 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.534116983 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.553080082 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553098917 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553142071 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.553242922 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553257942 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553298950 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.553483963 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.553536892 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.553623915 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553654909 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553680897 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.553710938 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.553718090 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553730011 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553772926 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.553781033 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.553822041 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.555107117 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.555114985 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.555363894 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.555372953 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.555387020 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.555412054 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.555439949 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.555558920 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.555565119 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.555602074 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.555608034 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.555644035 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.555649996 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.555684090 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.556044102 CEST	49729	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.556056976 CEST	443	49729	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556307077 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556349993 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556385040 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.556534052 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556581974 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.556587934 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556621075 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.556747913 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556781054 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556804895 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.556829929 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.556833982 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556890965 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556895018 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.556935072 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.556938887 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.556993008 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557116985 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557154894 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557183027 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557189941 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557200909 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557332993 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557354927 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557385921 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557404041 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557411909 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557440996 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557507038 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557531118 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557571888 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557605028 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557609081 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557658911 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557710886 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.557717085 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.557749987 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.559578896 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.559622049 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.559691906 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.559962988 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.559984922 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.604110003 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.614016056 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614022970 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614062071 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614073992 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.614084959 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614092112 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614104986 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.614124060 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.614192009 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614200115 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614233971 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.614238977 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614396095 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614439964 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.614444017 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.614473104 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.640698910 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.640718937 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.640774012 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.640805006 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.640825987 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.640851021 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.641233921 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.641252041 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.641285896 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.641292095 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.641319036 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.641335011 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.641690016 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.641710997 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.641737938 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.641746998 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.641771078 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.641787052 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.642148018 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.642164946 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.642194986 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.642206907 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.642225981 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.642241001 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.642668009 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.642685890 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.642713070 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.642719984 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.642759085 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.642766953 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.643306017 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.643327951 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.643363953 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.643371105 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.643402100 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.643419027 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.643914938 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.643934011 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.643969059 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.643974066 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.644015074 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.644480944 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.644500971 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.644534111 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.644539118 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.644562006 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.644578934 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.645075083 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.645097017 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.645123959 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.645129919 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.645153046 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.645167112 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.645576000 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.645603895 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.645626068 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.645632029 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.645651102 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.645665884 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.646164894 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.646189928 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.646213055 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.646219015 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.646240950 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.646313906 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.646847963 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.646867037 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.646893978 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.646900892 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.646924019 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.646939039 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.676673889 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.676712036 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.676753044 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.676768064 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.676805973 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.676986933 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.677020073 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.677051067 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.677058935 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.677083015 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.677274942 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.677306890 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.677331924 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.677340031 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.677367926 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.677376032 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.677408934 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.677472115 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.677486897 CEST	443	49728	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.677498102 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.677530050 CEST	49728	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.681173086 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.681240082 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.681258917 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.681269884 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.681303024 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.681514978 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.681554079 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.681570053 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.681586981 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.681611061 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.681998968 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.682034969 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.682065964 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.682073116 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.682096004 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.682162046 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.682213068 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.682223082 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.682313919 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.682358980 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.682423115 CEST	49731	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.682434082 CEST	443	49731	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683356047 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683413982 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683429003 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.683438063 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683475018 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.683532953 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683581114 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683604956 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.683612108 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683635950 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.683691025 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683751106 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.683758020 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683804035 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.683849096 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.683892012 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.684370995 CEST	49727	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.684376955 CEST	443	49727	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.736839056 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.736876011 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.736907005 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.736920118 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.736958027 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.737344027 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.737374067 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.737385988 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.737396002 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.737400055 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.737432957 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.737433910 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.737445116 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.737473965 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.737514973 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.737555027 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.737778902 CEST	49730	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.737791061 CEST	443	49730	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.764743090 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.764763117 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.764811039 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.764827013 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.764857054 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.764867067 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.765127897 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.765146017 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.765173912 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.765182018 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.765202045 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.765458107 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.765826941 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.765846014 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.765875101 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.765880108 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.765902996 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.765913963 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.766333103 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.766351938 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.766381979 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.766387939 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.766412020 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.766428947 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.766809940 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.766829014 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.766863108 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.766869068 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.766895056 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.766911030 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.767227888 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.767247915 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.767276049 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.767282009 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.767304897 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.767322063 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.767807007 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.767831087 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.767857075 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.767860889 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.767888069 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.767903090 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.768279076 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.768299103 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.768332005 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.768337965 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.768381119 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.769016027 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769036055 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769071102 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.769078016 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769104004 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.769128084 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.769541979 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769562960 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769593000 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.769598007 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769607067 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769624949 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.769644976 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.769649982 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769682884 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.769684076 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.769721031 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.771771908 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.771826029 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:26.771871090 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:26.772555113 CEST	49724	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:26.772567987 CEST	443	49724	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.810261011 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:26.862998009 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.062271118 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.062305927 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.062853098 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.103475094 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.120080948 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.120271921 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.123975992 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.126260996 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:27.126290083 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:27.126322985 CEST	49732	443	192.168.2.6	23.63.206.91
Apr 25, 2024 20:47:27.126327991 CEST	443	49732	23.63.206.91	192.168.2.6
Apr 25, 2024 20:47:27.136410952 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.136491060 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.136564016 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.137172937 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.137219906 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.138149977 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.138176918 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.138233900 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.138900995 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.138914108 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.156022072 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 25, 2024 20:47:27.156142950 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 25, 2024 20:47:27.164141893 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.280797005 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.280843019 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.280899048 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.280927896 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.280955076 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.280962944 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.280987024 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.281009912 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.281035900 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.281058073 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.345180035 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.345273972 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.345359087 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.347798109 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.347850084 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.347912073 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.348860979 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.348938942 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.349005938 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.349531889 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.349558115 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.349724054 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.349973917 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.350020885 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.350070000 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.350632906 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.350667953 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.350837946 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.350864887 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.351303101 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.351401091 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.351722002 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.351737976 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.351957083 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.351991892 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.389986992 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.390419006 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.390439987 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.390911102 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.391830921 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.391963959 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.392214060 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.395688057 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.396123886 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.396182060 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.397357941 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.398086071 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.398264885 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.398650885 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.404295921 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.404305935 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.404385090 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.404512882 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.404519081 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.404748917 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.404968023 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.404974937 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.405028105 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.405059099 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.405262947 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.405550003 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.405610085 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.405672073 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.436156034 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.440157890 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.526844025 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.526885033 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527184963 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.527247906 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527370930 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527405977 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527415037 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527582884 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.527584076 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.527584076 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.527690887 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527797937 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527807951 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.527823925 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527869940 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527874947 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.527900934 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527900934 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.527913094 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.527930021 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.527972937 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.602984905 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.603785992 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.603843927 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.604645967 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.604871035 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.604893923 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.605082035 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.605184078 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.605854988 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.606005907 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.606070995 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.606077909 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.606261015 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.606776953 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.606868029 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.607096910 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.610204935 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.610665083 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.610723972 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.611279011 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.612341881 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.612696886 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.612736940 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.612778902 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.612798929 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.614352942 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.614514112 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.615072012 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.615160942 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.615637064 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.615654945 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.616060972 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.616081953 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.616169930 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.616179943 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.617381096 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.617388010 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.617490053 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.617521048 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.617809057 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.617815971 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.617815971 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.617830992 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.649276018 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.649292946 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.649476051 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.649497032 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.649574995 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.649864912 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.649879932 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.650026083 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.650039911 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.650137901 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.650319099 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.650332928 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.650420904 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.650422096 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.650439024 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.650528908 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.650824070 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.650837898 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.650953054 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.650968075 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.651253939 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.651432991 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.651446104 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.651659966 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.651673079 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.651751995 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.652112961 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.659998894 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.660012007 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.660068035 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.660141945 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.660171986 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.662997961 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.662998915 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.667984009 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.677223921 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.677285910 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.677369118 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.677417040 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.677448034 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.677459002 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.677480936 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.677495956 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.677525043 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.677570105 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.680370092 CEST	49735	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.680380106 CEST	443	49735	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.687422991 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.687494040 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.687558889 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.687725067 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.687750101 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.695890903 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.695904016 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.695991039 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.696369886 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.696381092 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.705856085 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.705939054 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.737807035 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.772927999 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.772945881 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.773143053 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.773175955 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.773332119 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.773348093 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.773361921 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.773458004 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.773474932 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.773585081 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.773850918 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.773864985 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.774005890 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.774019957 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.774275064 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.774310112 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.774324894 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.774604082 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.774616957 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.774738073 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.774760962 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.774777889 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.774797916 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.774838924 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.774838924 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.775284052 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.775298119 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.775394917 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.775425911 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.775547028 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.775634050 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.775651932 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.775696039 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.775711060 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.775743008 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.775827885 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.776174068 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.776190996 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.776382923 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.776396036 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.776624918 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.776643038 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.776740074 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.776740074 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.776756048 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.776983023 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.776998043 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.777096987 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.777096987 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.777112961 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.777177095 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.777404070 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.777631998 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.777645111 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.777765036 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.777791977 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.777884007 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.811322927 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.811340094 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.811403990 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.811454058 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.811511993 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.811554909 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.811770916 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.811829090 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.811867952 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.811868906 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.811933041 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.812000990 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.812001944 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.894877911 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.894896030 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.895024061 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.895024061 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.895055056 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.895169020 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.895176888 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.895190954 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.895286083 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.895293951 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.895416975 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.895725012 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.895740032 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.896248102 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.896256924 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.896342993 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.896363020 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.896373034 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.896378994 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.896394968 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.896560907 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.896814108 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.896828890 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.896869898 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.896876097 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.896905899 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.896997929 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.897269964 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.897284985 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.897350073 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.897350073 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.897358894 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.897439957 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.897721052 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.897733927 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.897768021 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.897775888 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.897804022 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.898036957 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.898133039 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.898149014 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.898302078 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.898309946 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.898437023 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.898732901 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.898746014 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.898883104 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.898891926 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.898926973 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.899003983 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.899158001 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.899173021 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.899312973 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.899321079 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.899374962 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.899775982 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.899789095 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.899877071 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.899877071 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.899885893 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.899941921 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.900166035 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.900180101 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.900198936 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.900367975 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.900373936 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.900719881 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.900738955 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.900800943 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.900800943 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.900810957 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.901298046 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.901309967 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.901480913 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.901489973 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.901554108 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.901815891 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.901829004 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.901972055 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.901979923 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.902060032 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.902399063 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.902414083 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.902532101 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.902540922 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.902630091 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.902868986 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.902883053 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.903012991 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.903021097 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.903146029 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.903420925 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.903434992 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.903738022 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.903745890 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.903917074 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.903934956 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.903944969 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.903951883 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.903964043 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.904126883 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.904345036 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.904359102 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.904428005 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.904437065 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.904498100 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.904761076 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.904772997 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.904850960 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.904850960 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.904860020 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.904999971 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.905225039 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.905239105 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.905304909 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.905304909 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.905319929 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.905488014 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.905617952 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.905632973 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.905778885 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.905787945 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.905879974 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.935478926 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.935534954 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.935595989 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.935676098 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.935754061 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.935918093 CEST	49734	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.935956001 CEST	443	49734	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.938505888 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938546896 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938627958 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938652992 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938659906 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938688993 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.938719034 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938755035 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938760042 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.938832045 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938832045 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.938839912 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938870907 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938878059 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.938909054 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.938951015 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.948086977 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.948240995 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.948394060 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.948450089 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.948482990 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.948523045 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.953350067 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.953670025 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.953691959 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.954157114 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.954521894 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.954605103 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:27.954622030 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:27.959116936 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.959316969 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.959431887 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.959439993 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.959544897 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.959548950 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.959563971 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.959656000 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.959660053 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.959673882 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.960072994 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.960078001 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.963884115 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.964011908 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.964148998 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.964227915 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.964274883 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.964384079 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.964400053 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:27.964689016 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.988779068 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:27.988852024 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.000150919 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.004753113 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.004753113 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.017704010 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.017719984 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.017874002 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.017940998 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.017987013 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.018263102 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.018282890 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.018377066 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.018378019 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.018395901 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.018707991 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.018723011 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.019047976 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.019084930 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.019316912 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.019448996 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.019464016 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.019664049 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.019675970 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.019814968 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.020083904 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.020103931 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.020143032 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.020155907 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.020204067 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.020278931 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.020459890 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.020476103 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.020654917 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.020668030 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.020927906 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.020963907 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.020977974 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.021058083 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.021058083 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.021073103 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.021138906 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.021315098 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.021327972 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.021430016 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.021445036 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.021534920 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.021964073 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.021981001 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.022108078 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.022120953 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.022392035 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.022492886 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.022506952 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.022634029 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.022648096 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.022783041 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.023107052 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.023121119 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.023161888 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.023174047 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.023215055 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.023267031 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.023657084 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.023669958 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.023828030 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.023840904 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.024142981 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.024163961 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.024204016 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.024219036 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.024256945 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.024578094 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.024602890 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.024619102 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.025038958 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.025077105 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.025080919 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.025099039 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.025136948 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.025137901 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.025614023 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.025628090 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.025702953 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.025717974 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.026029110 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.026047945 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.026127100 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.026127100 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.026143074 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.026602030 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.026614904 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.026685953 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.026685953 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.026701927 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.027084112 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.027101040 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.027172089 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.027172089 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.027187109 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.027288914 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.027364016 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.027395964 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.029489994 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.030098915 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.030915976 CEST	49733	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.030937910 CEST	443	49733	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.061439037 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.061448097 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.061489105 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.061495066 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.061537981 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.061665058 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.061665058 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.061860085 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.061867952 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.061907053 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.061958075 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.061996937 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.062058926 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.062804937 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.062813997 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.062875032 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.062901974 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.062923908 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.062942982 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.062971115 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.063175917 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.063175917 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.073174000 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073205948 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073241949 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073285103 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.073342085 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073343039 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.073378086 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073410034 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.073412895 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073503971 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.073592901 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073612928 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073652983 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.073688984 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.073714972 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.073745012 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.074491978 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.074507952 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.079094887 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.083127022 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.083143950 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.083220005 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.083261967 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.083378077 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.083390951 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.083424091 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.083453894 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.083463907 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.083489895 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.088021040 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088058949 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088206053 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088268042 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.088365078 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.088396072 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088565111 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.088581085 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088614941 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088680983 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.088680983 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.088701963 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088725090 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088804007 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.088815928 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.088926077 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.116775036 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.132785082 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.184518099 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.184526920 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.184551954 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.184561014 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.184604883 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.184691906 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.184801102 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.184808016 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.184829950 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.184886932 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.184886932 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.184919119 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.185086966 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.185101032 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.185149908 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.185168028 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.185184956 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.185367107 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.185368061 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.197684050 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.197736025 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.197772026 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.197798014 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.198065042 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.198103905 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.198112965 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.198133945 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.198141098 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.198160887 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.198337078 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.198437929 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.198455095 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.198489904 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.198520899 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.198649883 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.198662996 CEST	443	49740	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.198705912 CEST	49740	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.207392931 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207427025 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207447052 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207465887 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.207532883 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.207541943 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207648039 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207667112 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207701921 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207736969 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.207736969 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.207742929 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207767963 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.207859039 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207894087 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.207959890 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.207961082 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.207967043 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.208056927 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.208105087 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.208148003 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.208153963 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.208237886 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.208271027 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.208359957 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.208797932 CEST	49739	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.208806038 CEST	443	49739	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212321997 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212382078 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212439060 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.212513924 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212544918 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212583065 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212614059 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.212634087 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212675095 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.212780952 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212822914 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212868929 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.212882996 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212913036 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.212923050 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.213021994 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.213023901 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.213218927 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.213218927 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.243478060 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.243535995 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.243634939 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.243660927 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.243670940 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.243695021 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.286503077 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.367216110 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.367228985 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.367361069 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.367372036 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.367522955 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.367547989 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.367564917 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.367571115 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.367583990 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.367588997 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.367614985 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.367904902 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.374393940 CEST	49736	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.374447107 CEST	443	49736	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.491117954 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.491215944 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.491240978 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.498143911 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.498162031 CEST	49738	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.498224020 CEST	443	49738	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.514254093 CEST	49737	443	192.168.2.6	44.217.247.226
Apr 25, 2024 20:47:28.514317989 CEST	443	49737	44.217.247.226	192.168.2.6
Apr 25, 2024 20:47:28.619781017 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.619869947 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.619947910 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.620395899 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.620434046 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.623296022 CEST	49747	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.623347998 CEST	443	49747	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.623517036 CEST	49747	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.623724937 CEST	49747	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.623743057 CEST	443	49747	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.624272108 CEST	49741	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.624298096 CEST	443	49741	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.844036102 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.844059944 CEST	443	49749	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.844127893 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.844600916 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.844629049 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.844692945 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.845144033 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.845155954 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.845408916 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.845432043 CEST	443	49749	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.853951931 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.878339052 CEST	443	49747	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.881407976 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.881469965 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.882339001 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.882366896 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.882415056 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.882435083 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.882466078 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.882550955 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.883416891 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.887670994 CEST	49747	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.887732029 CEST	443	49747	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.887744904 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.887901068 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.889095068 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.889112949 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:28.889559031 CEST	443	49747	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.892508984 CEST	49747	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.892625093 CEST	49747	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:28.892859936 CEST	443	49747	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:28.932032108 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:28.948129892 CEST	49747	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.098555088 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.098925114 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.098939896 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.099757910 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.100306988 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.100442886 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.100545883 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.104587078 CEST	443	49749	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.104792118 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.104855061 CEST	443	49749	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.106431961 CEST	443	49749	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.106528997 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.107439995 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.107528925 CEST	443	49749	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.107547998 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.125137091 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.126764059 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.130430937 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:29.132545948 CEST	49746	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:29.132580042 CEST	443	49746	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.134150982 CEST	49751	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:29.134234905 CEST	443	49751	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.134314060 CEST	49751	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:29.135195971 CEST	49751	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:29.135231018 CEST	443	49751	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.148116112 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.148137093 CEST	443	49749	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.162410975 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.162468910 CEST	443	49749	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.215059996 CEST	49749	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.370347977 CEST	443	49751	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.370698929 CEST	49751	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:29.370760918 CEST	443	49751	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.371454000 CEST	443	49751	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.371798992 CEST	49751	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:29.371916056 CEST	443	49751	216.239.36.54	192.168.2.6
Apr 25, 2024 20:47:29.372143984 CEST	49751	443	192.168.2.6	216.239.36.54
Apr 25, 2024 20:47:29.387804985 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.387851000 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.387896061 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.387909889 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.387948990 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.388334036 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.388365984 CEST	443	49750	54.156.13.12	192.168.2.6
Apr 25, 2024 20:47:29.388386011 CEST	49750	443	192.168.2.6	54.156.13.12
Apr 25, 2024 20:47:29.388401031 CEST	443	49750	54.156.13.12	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 20:47:22.970338106 CEST	192.168.2.6	1.1.1.1	0x851c	Standard query (0)	clicks.sharefile.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:22.970338106 CEST	192.168.2.6	1.1.1.1	0xcafe	Standard query (0)	clicks.sharefile.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:23.478713989 CEST	192.168.2.6	1.1.1.1	0x15e1	Standard query (0)	campaignstudio.sharefile.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:23.478880882 CEST	192.168.2.6	1.1.1.1	0xca05	Standard query (0)	campaignstudio.sharefile.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:24.490017891 CEST	192.168.2.6	1.1.1.1	0xaf25	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.490478992 CEST	192.168.2.6	1.1.1.1	0x281b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:24.573972940 CEST	192.168.2.6	1.1.1.1	0xa3b1	Standard query (0)	docs.sharefile.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.574608088 CEST	192.168.2.6	1.1.1.1	0x1b64	Standard query (0)	docs.sharefile.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:25.524868011 CEST	192.168.2.6	1.1.1.1	0x176e	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:25.524868011 CEST	192.168.2.6	1.1.1.1	0x7afc	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:27.209367990 CEST	192.168.2.6	1.1.1.1	0x88f9	Standard query (0)	docs.sharefile.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:27.210000992 CEST	192.168.2.6	1.1.1.1	0xb6dc	Standard query (0)	docs.sharefile.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:28.429935932 CEST	192.168.2.6	1.1.1.1	0x5d97	Standard query (0)	us-central1-citrix-product-documentation.cloudfunctions.net	65	IN (0x0001)	false
Apr 25, 2024 20:47:28.429935932 CEST	192.168.2.6	1.1.1.1	0xa698	Standard query (0)	us-central1-citrix-product-documentation.cloudfunctions.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:29.636734009 CEST	192.168.2.6	1.1.1.1	0x3bfb	Standard query (0)	us-central1-citrix-product-documentation.cloudfunctions.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:29.637042046 CEST	192.168.2.6	1.1.1.1	0x66d1	Standard query (0)	us-central1-citrix-product-documentation.cloudfunctions.net	65	IN (0x0001)	false
Apr 25, 2024 20:47:32.702003956 CEST	192.168.2.6	1.1.1.1	0xd05c	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:32.702143908 CEST	192.168.2.6	1.1.1.1	0xd00a	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:33.599164963 CEST	192.168.2.6	1.1.1.1	0x6444	Standard query (0)	www.citrix.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:33.599494934 CEST	192.168.2.6	1.1.1.1	0x314c	Standard query (0)	www.citrix.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:34.568140030 CEST	192.168.2.6	1.1.1.1	0x9f9a	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:34.568583965 CEST	192.168.2.6	1.1.1.1	0xc015	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:34.587758064 CEST	192.168.2.6	1.1.1.1	0xc9a7	Standard query (0)	titan.citrix.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:34.588052034 CEST	192.168.2.6	1.1.1.1	0x8a9a	Standard query (0)	titan.citrix.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:35.240674973 CEST	192.168.2.6	1.1.1.1	0xd8a0	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:35.240938902 CEST	192.168.2.6	1.1.1.1	0x6318	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:36.809150934 CEST	192.168.2.6	1.1.1.1	0x930e	Standard query (0)	titan.citrix.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:36.809519053 CEST	192.168.2.6	1.1.1.1	0x3828	Standard query (0)	titan.citrix.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:38.466164112 CEST	192.168.2.6	1.1.1.1	0xe073	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:38.466669083 CEST	192.168.2.6	1.1.1.1	0x86d1	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 20:47:40.266232014 CEST	192.168.2.6	1.1.1.1	0x7a63	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.266410112 CEST	192.168.2.6	1.1.1.1	0xfb4d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:40.292747974 CEST	192.168.2.6	1.1.1.1	0x46f1	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.292892933 CEST	192.168.2.6	1.1.1.1	0x5d88	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 20:47:40.969235897 CEST	192.168.2.6	1.1.1.1	0xa0b2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.969422102 CEST	192.168.2.6	1.1.1.1	0x98be	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:43.156718969 CEST	192.168.2.6	1.1.1.1	0x2a6d	Standard query (0)	support.sharefile.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:43.156877995 CEST	192.168.2.6	1.1.1.1	0x7b4f	Standard query (0)	support.sharefile.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:47.107575893 CEST	192.168.2.6	1.1.1.1	0xc4cc	Standard query (0)	support.sharefile.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:47.107733965 CEST	192.168.2.6	1.1.1.1	0xbdaf	Standard query (0)	support.sharefile.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:50.274405956 CEST	192.168.2.6	1.1.1.1	0xe6c4	Standard query (0)	platform.cloud.coveo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:50.274846077 CEST	192.168.2.6	1.1.1.1	0xe46b	Standard query (0)	platform.cloud.coveo.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:51.462436914 CEST	192.168.2.6	1.1.1.1	0xd782	Standard query (0)	platform.cloud.coveo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:51.462589025 CEST	192.168.2.6	1.1.1.1	0xa86a	Standard query (0)	platform.cloud.coveo.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:52.255256891 CEST	192.168.2.6	1.1.1.1	0x8b38	Standard query (0)	service.force.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.255398989 CEST	192.168.2.6	1.1.1.1	0x4ca1	Standard query (0)	service.force.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:52.407196045 CEST	192.168.2.6	1.1.1.1	0xcb07	Standard query (0)	static.cloud.coveo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.407646894 CEST	192.168.2.6	1.1.1.1	0x3fa	Standard query (0)	static.cloud.coveo.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:54.118453026 CEST	192.168.2.6	1.1.1.1	0x27b9	Standard query (0)	service.force.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.119510889 CEST	192.168.2.6	1.1.1.1	0x6c88	Standard query (0)	service.force.com	65	IN (0x0001)	false
Apr 25, 2024 20:47:56.475708961 CEST	192.168.2.6	1.1.1.1	0x86ec	Standard query (0)	d.la1-c1-ia6.salesforceliveagent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:56.475946903 CEST	192.168.2.6	1.1.1.1	0xd9e0	Standard query (0)	d.la1-c1-ia6.salesforceliveagent.com	65	IN (0x0001)	false
Apr 25, 2024 20:48:24.918366909 CEST	192.168.2.6	1.1.1.1	0xee6e	Standard query (0)	docs.sharefile.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:24.918555021 CEST	192.168.2.6	1.1.1.1	0x1e38	Standard query (0)	docs.sharefile.com	65	IN (0x0001)	false
Apr 25, 2024 20:48:26.459194899 CEST	192.168.2.6	1.1.1.1	0x9275	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:26.459379911 CEST	192.168.2.6	1.1.1.1	0x14fc	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Apr 25, 2024 20:48:29.200139046 CEST	192.168.2.6	1.1.1.1	0x5003	Standard query (0)	docs.sharefile.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:29.200285912 CEST	192.168.2.6	1.1.1.1	0x1fbc	Standard query (0)	docs.sharefile.com	65	IN (0x0001)	false
Apr 25, 2024 20:48:32.897134066 CEST	192.168.2.6	1.1.1.1	0x7797	Standard query (0)	us-central1-citrix-product-documentation.cloudfunctions.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:32.897558928 CEST	192.168.2.6	1.1.1.1	0xa66e	Standard query (0)	us-central1-citrix-product-documentation.cloudfunctions.net	65	IN (0x0001)	false
Apr 25, 2024 20:48:33.508049965 CEST	192.168.2.6	1.1.1.1	0x2c15	Standard query (0)	us-central1-citrix-product-documentation.cloudfunctions.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:33.508196115 CEST	192.168.2.6	1.1.1.1	0xfce3	Standard query (0)	us-central1-citrix-product-documentation.cloudfunctions.net	65	IN (0x0001)	false
Apr 25, 2024 20:48:35.535345078 CEST	192.168.2.6	1.1.1.1	0xda7b	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:35.535620928 CEST	192.168.2.6	1.1.1.1	0x9987	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Apr 25, 2024 20:48:39.687980890 CEST	192.168.2.6	1.1.1.1	0x99a1	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:39.688214064 CEST	192.168.2.6	1.1.1.1	0x533e	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 20:47:23.085819006 CEST	1.1.1.1	192.168.2.6	0x851c	No error (0)	clicks.sharefile.com	spgo.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:23.085819006 CEST	1.1.1.1	192.168.2.6	0x851c	No error (0)	spgo.io		44.229.102.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:23.085819006 CEST	1.1.1.1	192.168.2.6	0x851c	No error (0)	spgo.io		44.242.50.123	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:23.085819006 CEST	1.1.1.1	192.168.2.6	0x851c	No error (0)	spgo.io		44.241.136.158	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:23.103984118 CEST	1.1.1.1	192.168.2.6	0xcafe	No error (0)	clicks.sharefile.com	spgo.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:23.615519047 CEST	1.1.1.1	192.168.2.6	0xca05	No error (0)	campaignstudio.sharefile.com	sharefile-prod.mautic.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:23.616050005 CEST	1.1.1.1	192.168.2.6	0x15e1	No error (0)	campaignstudio.sharefile.com	sharefile-prod.mautic.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:23.616050005 CEST	1.1.1.1	192.168.2.6	0x15e1	No error (0)	sharefile-prod.mautic.net		174.129.6.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:23.616050005 CEST	1.1.1.1	192.168.2.6	0x15e1	No error (0)	sharefile-prod.mautic.net		18.213.75.129	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.600258112 CEST	1.1.1.1	192.168.2.6	0xaf25	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.600258112 CEST	1.1.1.1	192.168.2.6	0xaf25	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.600258112 CEST	1.1.1.1	192.168.2.6	0xaf25	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.600258112 CEST	1.1.1.1	192.168.2.6	0xaf25	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.600258112 CEST	1.1.1.1	192.168.2.6	0xaf25	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.600258112 CEST	1.1.1.1	192.168.2.6	0xaf25	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.600737095 CEST	1.1.1.1	192.168.2.6	0x281b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 20:47:24.702523947 CEST	1.1.1.1	192.168.2.6	0xa3b1	No error (0)	docs.sharefile.com	citrix.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:24.702523947 CEST	1.1.1.1	192.168.2.6	0xa3b1	No error (0)	citrix.netlifyglobalcdn.com		54.156.13.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.702523947 CEST	1.1.1.1	192.168.2.6	0xa3b1	No error (0)	citrix.netlifyglobalcdn.com		44.217.247.226	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:24.704391003 CEST	1.1.1.1	192.168.2.6	0x1b64	No error (0)	docs.sharefile.com	citrix.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:25.638062000 CEST	1.1.1.1	192.168.2.6	0x7afc	No error (0)	consent.trustarc.com		18.238.49.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:25.638062000 CEST	1.1.1.1	192.168.2.6	0x7afc	No error (0)	consent.trustarc.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:25.638062000 CEST	1.1.1.1	192.168.2.6	0x7afc	No error (0)	consent.trustarc.com		18.238.49.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:25.638062000 CEST	1.1.1.1	192.168.2.6	0x7afc	No error (0)	consent.trustarc.com		18.238.49.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:27.337902069 CEST	1.1.1.1	192.168.2.6	0xb6dc	No error (0)	docs.sharefile.com	citrix.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:27.338799000 CEST	1.1.1.1	192.168.2.6	0x88f9	No error (0)	docs.sharefile.com	citrix.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:27.338799000 CEST	1.1.1.1	192.168.2.6	0x88f9	No error (0)	citrix.netlifyglobalcdn.com		44.217.247.226	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:27.338799000 CEST	1.1.1.1	192.168.2.6	0x88f9	No error (0)	citrix.netlifyglobalcdn.com		54.156.13.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:28.547154903 CEST	1.1.1.1	192.168.2.6	0xa698	No error (0)	us-central1-citrix-product-documentation.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:29.747740030 CEST	1.1.1.1	192.168.2.6	0x3bfb	No error (0)	us-central1-citrix-product-documentation.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:32.812494993 CEST	1.1.1.1	192.168.2.6	0xd00a	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:32.813328981 CEST	1.1.1.1	192.168.2.6	0xd05c	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:33.710573912 CEST	1.1.1.1	192.168.2.6	0x6444	No error (0)	www.citrix.com	www.citrix.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:34.679913998 CEST	1.1.1.1	192.168.2.6	0x9f9a	No error (0)	consent.trustarc.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:34.679913998 CEST	1.1.1.1	192.168.2.6	0x9f9a	No error (0)	consent.trustarc.com		18.238.49.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:34.679913998 CEST	1.1.1.1	192.168.2.6	0x9f9a	No error (0)	consent.trustarc.com		18.238.49.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:34.679913998 CEST	1.1.1.1	192.168.2.6	0x9f9a	No error (0)	consent.trustarc.com		18.238.49.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:34.698900938 CEST	1.1.1.1	192.168.2.6	0xc9a7	No error (0)	titan.citrix.com		130.211.22.189	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:35.352056026 CEST	1.1.1.1	192.168.2.6	0xd8a0	No error (0)	consent.trustarc.com		18.238.49.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:35.352056026 CEST	1.1.1.1	192.168.2.6	0xd8a0	No error (0)	consent.trustarc.com		18.238.49.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:35.352056026 CEST	1.1.1.1	192.168.2.6	0xd8a0	No error (0)	consent.trustarc.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:35.352056026 CEST	1.1.1.1	192.168.2.6	0xd8a0	No error (0)	consent.trustarc.com		18.238.49.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:36.920444012 CEST	1.1.1.1	192.168.2.6	0x930e	No error (0)	titan.citrix.com		130.211.22.189	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:37.322247028 CEST	1.1.1.1	192.168.2.6	0xbd33	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:37.322247028 CEST	1.1.1.1	192.168.2.6	0xbd33	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:38.562557936 CEST	1.1.1.1	192.168.2.6	0x1f84	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:38.562557936 CEST	1.1.1.1	192.168.2.6	0x1f84	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:38.576776981 CEST	1.1.1.1	192.168.2.6	0xe073	No error (0)	stats.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:38.576776981 CEST	1.1.1.1	192.168.2.6	0xe073	No error (0)	stats.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:38.576776981 CEST	1.1.1.1	192.168.2.6	0xe073	No error (0)	stats.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:38.576776981 CEST	1.1.1.1	192.168.2.6	0xe073	No error (0)	stats.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.376530886 CEST	1.1.1.1	192.168.2.6	0xfb4d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 20:47:40.376605034 CEST	1.1.1.1	192.168.2.6	0x7a63	No error (0)	www.google.com		64.233.185.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.376605034 CEST	1.1.1.1	192.168.2.6	0x7a63	No error (0)	www.google.com		64.233.185.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.376605034 CEST	1.1.1.1	192.168.2.6	0x7a63	No error (0)	www.google.com		64.233.185.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.376605034 CEST	1.1.1.1	192.168.2.6	0x7a63	No error (0)	www.google.com		64.233.185.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.376605034 CEST	1.1.1.1	192.168.2.6	0x7a63	No error (0)	www.google.com		64.233.185.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.376605034 CEST	1.1.1.1	192.168.2.6	0x7a63	No error (0)	www.google.com		64.233.185.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.402815104 CEST	1.1.1.1	192.168.2.6	0x46f1	No error (0)	stats.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.402815104 CEST	1.1.1.1	192.168.2.6	0x46f1	No error (0)	stats.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.402815104 CEST	1.1.1.1	192.168.2.6	0x46f1	No error (0)	stats.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:40.402815104 CEST	1.1.1.1	192.168.2.6	0x46f1	No error (0)	stats.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:41.079237938 CEST	1.1.1.1	192.168.2.6	0x98be	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 20:47:41.080076933 CEST	1.1.1.1	192.168.2.6	0xa0b2	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:41.080076933 CEST	1.1.1.1	192.168.2.6	0xa0b2	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:41.080076933 CEST	1.1.1.1	192.168.2.6	0xa0b2	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:41.080076933 CEST	1.1.1.1	192.168.2.6	0xa0b2	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:41.080076933 CEST	1.1.1.1	192.168.2.6	0xa0b2	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:41.080076933 CEST	1.1.1.1	192.168.2.6	0xa0b2	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:43.314527988 CEST	1.1.1.1	192.168.2.6	0x7b4f	No error (0)	support.sharefile.com	support.sharefile.com.00ddn00000avi1gmav.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:43.314527988 CEST	1.1.1.1	192.168.2.6	0x7b4f	No error (0)	support.sharefile.com.00ddn00000avi1gmav.live.siteforce.com	sdc.prod.communities.salesforce.cdn.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:43.360958099 CEST	1.1.1.1	192.168.2.6	0x2a6d	No error (0)	support.sharefile.com	support.sharefile.com.00ddn00000avi1gmav.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:43.360958099 CEST	1.1.1.1	192.168.2.6	0x2a6d	No error (0)	support.sharefile.com.00ddn00000avi1gmav.live.siteforce.com	sdc.prod.communities.salesforce.cdn.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:47.252965927 CEST	1.1.1.1	192.168.2.6	0xc4cc	No error (0)	support.sharefile.com	support.sharefile.com.00ddn00000avi1gmav.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:47.252965927 CEST	1.1.1.1	192.168.2.6	0xc4cc	No error (0)	support.sharefile.com.00ddn00000avi1gmav.live.siteforce.com	sdc.prod.communities.salesforce.cdn.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:47.268296957 CEST	1.1.1.1	192.168.2.6	0xbdaf	No error (0)	support.sharefile.com	support.sharefile.com.00ddn00000avi1gmav.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:47.268296957 CEST	1.1.1.1	192.168.2.6	0xbdaf	No error (0)	support.sharefile.com.00ddn00000avi1gmav.live.siteforce.com	sdc.prod.communities.salesforce.cdn.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:50.386820078 CEST	1.1.1.1	192.168.2.6	0xe6c4	No error (0)	platform.cloud.coveo.com		99.83.254.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:50.386820078 CEST	1.1.1.1	192.168.2.6	0xe6c4	No error (0)	platform.cloud.coveo.com		75.2.21.6	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:51.575830936 CEST	1.1.1.1	192.168.2.6	0xd782	No error (0)	platform.cloud.coveo.com		99.83.254.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:51.575830936 CEST	1.1.1.1	192.168.2.6	0xd782	No error (0)	platform.cloud.coveo.com		75.2.21.6	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.366331100 CEST	1.1.1.1	192.168.2.6	0x4ca1	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:52.366331100 CEST	1.1.1.1	192.168.2.6	0x4ca1	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:52.367135048 CEST	1.1.1.1	192.168.2.6	0x8b38	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:52.367135048 CEST	1.1.1.1	192.168.2.6	0x8b38	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:52.367135048 CEST	1.1.1.1	192.168.2.6	0x8b38	No error (0)	location.l.force.com		136.146.25.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.367135048 CEST	1.1.1.1	192.168.2.6	0x8b38	No error (0)	location.l.force.com		13.110.58.203	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.367135048 CEST	1.1.1.1	192.168.2.6	0x8b38	No error (0)	location.l.force.com		136.146.27.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.367135048 CEST	1.1.1.1	192.168.2.6	0x8b38	No error (0)	location.l.force.com		136.146.24.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.367135048 CEST	1.1.1.1	192.168.2.6	0x8b38	No error (0)	location.l.force.com		136.146.26.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.367135048 CEST	1.1.1.1	192.168.2.6	0x8b38	No error (0)	location.l.force.com		13.110.59.203	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.524183035 CEST	1.1.1.1	192.168.2.6	0xcb07	No error (0)	static.cloud.coveo.com		18.67.65.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.524183035 CEST	1.1.1.1	192.168.2.6	0xcb07	No error (0)	static.cloud.coveo.com		18.67.65.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.524183035 CEST	1.1.1.1	192.168.2.6	0xcb07	No error (0)	static.cloud.coveo.com		18.67.65.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:52.524183035 CEST	1.1.1.1	192.168.2.6	0xcb07	No error (0)	static.cloud.coveo.com		18.67.65.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.228375912 CEST	1.1.1.1	192.168.2.6	0x27b9	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:54.228375912 CEST	1.1.1.1	192.168.2.6	0x27b9	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:54.228375912 CEST	1.1.1.1	192.168.2.6	0x27b9	No error (0)	location.l.force.com		136.146.37.11	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.228375912 CEST	1.1.1.1	192.168.2.6	0x27b9	No error (0)	location.l.force.com		136.146.36.11	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.228375912 CEST	1.1.1.1	192.168.2.6	0x27b9	No error (0)	location.l.force.com		13.109.189.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.228375912 CEST	1.1.1.1	192.168.2.6	0x27b9	No error (0)	location.l.force.com		136.146.38.11	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.228375912 CEST	1.1.1.1	192.168.2.6	0x27b9	No error (0)	location.l.force.com		13.109.188.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.228375912 CEST	1.1.1.1	192.168.2.6	0x27b9	No error (0)	location.l.force.com		13.110.69.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.229898930 CEST	1.1.1.1	192.168.2.6	0x6c88	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:54.229898930 CEST	1.1.1.1	192.168.2.6	0x6c88	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:54.302572966 CEST	1.1.1.1	192.168.2.6	0x2dc9	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:54.302572966 CEST	1.1.1.1	192.168.2.6	0x2dc9	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:56.587562084 CEST	1.1.1.1	192.168.2.6	0xd9e0	No error (0)	d.la1-c1-ia6.salesforceliveagent.com	la1-c1-ia6.salesforceliveagent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:56.587562084 CEST	1.1.1.1	192.168.2.6	0xd9e0	No error (0)	la1-c1-ia6.salesforceliveagent.com	la1-c1-ia6.ia6.r.salesforceliveagent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:56.587702990 CEST	1.1.1.1	192.168.2.6	0x86ec	No error (0)	d.la1-c1-ia6.salesforceliveagent.com	la1-c1-ia6.salesforceliveagent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:56.587702990 CEST	1.1.1.1	192.168.2.6	0x86ec	No error (0)	la1-c1-ia6.salesforceliveagent.com	la1-c1-ia6.ia6.r.salesforceliveagent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:47:56.587702990 CEST	1.1.1.1	192.168.2.6	0x86ec	No error (0)	la1-c1-ia6.ia6.r.salesforceliveagent.com		136.146.24.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:56.587702990 CEST	1.1.1.1	192.168.2.6	0x86ec	No error (0)	la1-c1-ia6.ia6.r.salesforceliveagent.com		136.146.20.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:47:56.587702990 CEST	1.1.1.1	192.168.2.6	0x86ec	No error (0)	la1-c1-ia6.ia6.r.salesforceliveagent.com		136.146.18.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:13.667151928 CEST	1.1.1.1	192.168.2.6	0xf39b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:13.667151928 CEST	1.1.1.1	192.168.2.6	0xf39b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:25.043606043 CEST	1.1.1.1	192.168.2.6	0xee6e	No error (0)	docs.sharefile.com	citrix.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:48:25.043606043 CEST	1.1.1.1	192.168.2.6	0xee6e	No error (0)	citrix.netlifyglobalcdn.com		54.156.13.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:25.043606043 CEST	1.1.1.1	192.168.2.6	0xee6e	No error (0)	citrix.netlifyglobalcdn.com		44.217.247.226	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:25.046657085 CEST	1.1.1.1	192.168.2.6	0x1e38	No error (0)	docs.sharefile.com	citrix.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:48:26.571140051 CEST	1.1.1.1	192.168.2.6	0x9275	No error (0)	consent.trustarc.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:26.571140051 CEST	1.1.1.1	192.168.2.6	0x9275	No error (0)	consent.trustarc.com		18.238.49.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:26.571140051 CEST	1.1.1.1	192.168.2.6	0x9275	No error (0)	consent.trustarc.com		18.238.49.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:26.571140051 CEST	1.1.1.1	192.168.2.6	0x9275	No error (0)	consent.trustarc.com		18.238.49.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:29.326303959 CEST	1.1.1.1	192.168.2.6	0x5003	No error (0)	docs.sharefile.com	citrix.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:48:29.326303959 CEST	1.1.1.1	192.168.2.6	0x5003	No error (0)	citrix.netlifyglobalcdn.com		3.212.91.35	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:29.326303959 CEST	1.1.1.1	192.168.2.6	0x5003	No error (0)	citrix.netlifyglobalcdn.com		44.217.247.226	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:29.330879927 CEST	1.1.1.1	192.168.2.6	0x1fbc	No error (0)	docs.sharefile.com	citrix.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 20:48:33.008491039 CEST	1.1.1.1	192.168.2.6	0x7797	No error (0)	us-central1-citrix-product-documentation.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:33.625111103 CEST	1.1.1.1	192.168.2.6	0x2c15	No error (0)	us-central1-citrix-product-documentation.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:35.645736933 CEST	1.1.1.1	192.168.2.6	0xda7b	No error (0)	consent.trustarc.com		52.85.132.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:35.645736933 CEST	1.1.1.1	192.168.2.6	0xda7b	No error (0)	consent.trustarc.com		52.85.132.42	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:35.645736933 CEST	1.1.1.1	192.168.2.6	0xda7b	No error (0)	consent.trustarc.com		52.85.132.63	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:35.645736933 CEST	1.1.1.1	192.168.2.6	0xda7b	No error (0)	consent.trustarc.com		52.85.132.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:39.797943115 CEST	1.1.1.1	192.168.2.6	0x99a1	No error (0)	stats.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:39.797943115 CEST	1.1.1.1	192.168.2.6	0x99a1	No error (0)	stats.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:39.797943115 CEST	1.1.1.1	192.168.2.6	0x99a1	No error (0)	stats.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 20:48:39.797943115 CEST	1.1.1.1	192.168.2.6	0x99a1	No error (0)	stats.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	44.229.102.36	80	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 20:47:23.285943031 CEST	961	OUT	GET /f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW5OMFlYUWlPM002TWpJNklqWTJNbUV5WXprNE9ETmhNVGMyTWpjNE56STBPRGNpTzNNNk5Eb2liR1ZoWkNJN2N6bzJPaUl4TmpVd09EUWlPM002TnpvaVkyaGhibTVsYkNJN1lUb3hPbnR6T2pVNkltVnRZV2xzSWp0cE9qSXhPRHQ5ZlElM0QlM0QmVwNzcGNCCmYonywqZgIFPr1SGWttcXVpY2tAYXVndXN0YWhlYWx0aC5jb21YBAAABt8~ HTTP/1.1 Host: clicks.sharefile.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 25, 2024 20:47:23.474839926 CEST	499	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Date: Thu, 25 Apr 2024 18:47:23 GMT Location: https://campaignstudio.sharefile.com/r/11b86c9fe68b87a35e37a930e?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D& Server: msys-http X-Robots-Tag: noindex Content-Length: 0 Connection: keep-alive
Apr 25, 2024 20:48:08.671756029 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	44.229.102.36	80	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 20:48:08.407072067 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49719	44.229.102.36	80	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 20:48:08.530883074 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49720	174.129.6.84	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:23 UTC	939	OUT	GET /r/11b86c9fe68b87a35e37a930e?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D& HTTP/1.1 Host: campaignstudio.sharefile.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:24 UTC	1069	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 18:47:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: mautic_device_id=g40q4kmlp46q8b01escw9q2; expires=Fri, 25-Apr-2025 18:47:24 GMT; Max-Age=31536000; path=/; secure; SameSite=None Set-Cookie: mtc_id=165084; path=/; secure; SameSite=None Set-Cookie: mtc_sid=g40q4kmlp46q8b01escw9q2; path=/; secure; SameSite=None Cache-Control: max-age=0, must-revalidate, private Location: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Link: <https://campaignstudio.sharefile.com/api/v2/docs.jsonld>; rel="http://www.w3.org/ns/hydra/core#apiDocumentation" Expires: Thu, 25 Apr 2024 18:47:24 GMT Set-Cookie: Blocked-Tracking=deleted; expires=Wed, 26-Apr-2023 18:47:23 GMT; Max-Age=0; path=/; httponly
2024-04-25 18:47:24 UTC	3027	IN	Data Raw: 37 62 39 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 63 32 65 32 65 32 31 35 30 32 65 39 35 37 33 36 33 62 34 22 2c 61 Data Ascii: 7b9c<!DOCTYPE html><html> <head> <meta charset="UTF-8" /><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-c2e2e21502e957363b4",a
2024-04-25 18:47:24 UTC	4096	IN	Data Raw: 76 61 6c 69 64 20 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 2e 62 6c 6f 63 6b 5f 73 65 6c 65 63 74 6f 72 20 77 61 73 20 70 72 6f 76 69 64 65 64 20 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 75 73 65 64 22 2c 74 29 7d 2c 67 65 74 20 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 73 28 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 73 7d 2c 73 65 74 20 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 73 28 74 29 7b 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 65 2e 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 73 3d 7b 2e 2e 2e 74 2c 70 61 73 73 77 6f 72 64 3a 21 30 7d 3a 28 30 2c 6c 2e 5a 29 28 22 41 6e 20 69 6e 76 61 6c 69 64 20 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 2e 6d 61 73 Data Ascii: valid session_replay.block_selector was provided and will not be used",t)},get mask_input_options(){return e.mask_input_options},set mask_input_options(t){t&&"object"==typeof t?e.mask_input_options={...t,password:!0}:(0,l.Z)("An invalid session_replay.mas

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49723	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:25 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 32 4a 32 41 64 36 67 6d 45 79 43 72 65 51 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 64 64 30 66 30 31 35 34 33 63 32 61 65 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: t2J2Ad6gmEyCreQn.1Context: aedd0f01543c2aea
2024-04-25 18:47:25 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-25 18:47:25 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 74 32 4a 32 41 64 36 67 6d 45 79 43 72 65 51 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 64 64 30 66 30 31 35 34 33 63 32 61 65 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 61 74 48 6d 42 69 45 6b 54 6b 76 39 78 7a 55 6a 37 47 35 62 58 6f 78 45 4f 50 44 7a 48 49 52 4f 2f 67 38 62 41 51 76 57 70 45 35 6d 45 6c 65 54 68 69 47 34 75 78 53 63 30 53 57 4c 57 77 4f 64 74 47 34 55 37 32 6c 6d 49 61 2b 45 67 50 63 2b 39 57 49 37 36 45 34 75 31 72 67 36 4a 45 36 49 66 34 39 44 4c 54 37 4a 47 71 69 61 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: t2J2Ad6gmEyCreQn.2Context: aedd0f01543c2aea<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASatHmBiEkTkv9xzUj7G5bXoxEOPDzHIRO/g8bAQvWpE5mEleThiG4uxSc0SWLWwOdtG4U72lmIa+EgPc+9WI76E4u1rg6JE6If49DLT7JGqia
2024-04-25 18:47:25 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 32 4a 32 41 64 36 67 6d 45 79 43 72 65 51 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 64 64 30 66 30 31 35 34 33 63 32 61 65 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: t2J2Ad6gmEyCreQn.3Context: aedd0f01543c2aea<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-25 18:47:25 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-25 18:47:25 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 64 41 6c 4e 61 79 65 52 30 69 65 47 52 42 6f 63 47 51 75 57 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: jdAlNayeR0ieGRBocGQuWA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:25 UTC	950	OUT	GET /en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:25 UTC	537	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 136783 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:47:25 GMT Etag: "c38b65ebe6d1e8cc4bceb46fd484b9bb-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9AXW06NA3XCDN88RFBMX6 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:25 UTC	649	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:47:25 UTC	2372	IN	Data Raw: 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 41 70 72 69 6c 20 31 2c 20 32 30 32 34 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 74 5f 66 6c 79 5f 70 72 6f 76 69 64 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 5f 63 6f 64 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 3e 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 Data Ascii: n"> <meta name="lastModified" content="April 1, 2024"><meta name="googlebot" content="noindex"><meta name="robots" content="noindex"><meta name="mt_fly_provider" content=""> <meta name="lang_code" content="en-us"> <meta name="google-site
2024-04-25 18:47:25 UTC	538	IN	Data Raw: 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 6c 65 61 72 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 43 6c 65 61 72 20 41 6c 6c 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 69 74 72 69 78 5f 70 72 6f 5f 64 6f 63 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 50 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 22 20 76 61 6c 75 65 3d 22 54 72 79 20 61 20 64 69 66 66 65 72 65 6e 74 20 6f 72 20 6c 65 73 73 20 73 70 65 63 69 66 69 63 20 71 75 65 72 79 2e 20 52 65 6d 6f 76 65 20 61 6e 79 20 73 65 6c 65 63 74 65 64 20 66 69 6c Data Ascii: ut type="hidden" id="search_clear_all" value="Clear All"><input type="hidden" id="search_citrix_pro_doc" value="Search Product documentation"><input type="hidden" id="search_query" value="Try a different or less specific query. Remove any selected fil
2024-04-25 18:47:25 UTC	4744	IN	Data Raw: 65 22 20 76 61 6c 75 65 3d 22 4e 6f 20 72 65 73 75 6c 74 73 20 66 6f 75 6e 64 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 73 68 6f 77 5f 6d 6f 72 65 22 20 76 61 6c 75 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 69 6e 20 61 6c 6c 20 70 72 6f 64 75 63 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 66 65 61 74 75 72 65 64 22 20 76 61 6c 75 65 3d 22 46 65 61 74 75 72 65 64 20 74 6f Data Ascii: e" value="No results found in Tech Zone"><input type="hidden" id="search_show_more" value="Show more in Tech Zone"><input type="hidden" id="search_query_all" value="Search in all products"><input type="hidden" id="search_featured" value="Featured to
2024-04-25 18:47:25 UTC	5930	IN	Data Raw: 6c 61 74 65 64 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 6e 67 20 61 63 74 69 76 65 20 6c 61 6e 67 2d 6d 6f 62 69 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 73 68 61 72 65 66 69 6c 65 2f 63 61 74 61 6c 6f 67 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 2e 68 74 6d 6c 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 65 22 Data Ascii: lated</p> </div> </a> </li> <li class="lang active lang-mobile"> <a class="language-option mt-lang" href="/de-de/sharefile/catalog/integrations/integrations.html?lang-switch=true"
2024-04-25 18:47:25 UTC	7116	IN	Data Raw: 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 65 46 69 6c 65 20 43 6f 6d 6d 75 6e 69 74 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ="noopener noreferrer" target="_blank"> ShareFile Community </a> </p> </li> <li>
2024-04-25 18:47:25 UTC	8302	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 6f 6e 66 69 67 75 72 65 2f 61 64 6d 69 6e 2d 73 65 74 74 69 6e 67 Data Ascii: </li> <li> <p> <a href='/en-us/sharefile/configure/admin-setting
2024-04-25 18:47:25 UTC	6081	IN	Data Raw: 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 27 63 74 78 2d 73 75 62 2d 6d 65 6e 75 2d 67 72 6f 75 70 2d 74 69 74 6c 65 27 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 61 70 70 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 65 46 69 6c 65 20 61 70 70 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f Data Ascii: <a class='ctx-sub-menu-group-title' href='/en-us/sharefile/sharefile-app'> ShareFile apps </a> </
2024-04-25 18:47:25 UTC	10674	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 Data Ascii: </p> </li> <li> <p> <a href='/en-us/sha
2024-04-25 18:47:25 UTC	11860	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 70 70 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 6e 64 72 6f 69 64 2f 73 68 61 72 65 2d 66 69 6c 65 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 69 6e 67 20 66 69 6c 65 73 20 3c 2f 61 Data Ascii: <p> <a href='/en-us/sharefile/citrix-files-app/citrix-files-android/share-files'> Sharing files </a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49724	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:25 UTC	839	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:26 UTC	535	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 529002 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/css; charset=UTF-8 Date: Thu, 25 Apr 2024 18:47:26 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9AYK14TRSSET7V8M532MH X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:26 UTC	651	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d Data Ascii: /! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue: #007bff;--indigo: #6610f2;-
2024-04-25 18:47:26 UTC	2372	IN	Data Raw: 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 20 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 20 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 6d 6f 6e 6f 73 70 61 63 65 3a 20 53 46 4d 6f 6e 6f 2d 52 65 67 Data Ascii: breakpoint-lg: 992px;--breakpoint-xl: 1200px;--font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";--font-family-monospace: SFMono-Reg
2024-04-25 18:47:26 UTC	538	IN	Data Raw: 6f 6e 2d 73 69 64 65 3a 62 6f 74 74 6f 6d 7d 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 6f 70 74 67 72 6f 75 70 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 Data Ascii: on-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}input,button,select,optgroup,textarea{margin:0;font-family:inherit;font-si
2024-04-25 18:47:26 UTC	4744	IN	Data Raw: 69 74 22 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 69 6d 65 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 6d 6f 6e 74 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6c 69 73 74 62 6f 78 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c Data Ascii: it"]::-moz-focus-inner{padding:0;border-style:none}input[type="radio"],input[type="checkbox"]{box-sizing:border-box;padding:0}input[type="date"],input[type="time"],input[type="datetime-local"],input[type="month"]{-webkit-appearance:listbox}textarea{overfl
2024-04-25 18:47:26 UTC	5930	IN	Data Raw: 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 Data Ascii: :75%}.col-10{flex:0 0 83.3333333333%;max-width:83.3333333333%}.col-11{flex:0 0 91.6666666667%;max-width:91.6666666667%}.col-12{flex:0 0 100%;max-width:100%}.order-first{order:-1}.order-last{order:13}.order-0{order:0}.order-1{order:1}.order-2{order:2}.orde
2024-04-25 18:47:26 UTC	7116	IN	Data Raw: 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 78 6c 2d 66 69 72 73 74 7b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 6c 61 73 74 7b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 78 6c 2d 30 7b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 78 6c 2d 31 7b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 32 7b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 78 6c 2d 33 7b 6f 72 64 65 72 3a 33 7d 2e Data Ascii: max-width:83.3333333333%}.col-xl-11{flex:0 0 91.6666666667%;max-width:91.6666666667%}.col-xl-12{flex:0 0 100%;max-width:100%}.order-xl-first{order:-1}.order-xl-last{order:13}.order-xl-0{order:0}.order-xl-1{order:1}.order-xl-2{order:2}.order-xl-3{order:3}.
2024-04-25 18:47:26 UTC	8302	IN	Data Raw: 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 62 74 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 66 6f 72 6d 2d 63 Data Ascii: -group-append>.form-control-plaintext.input-group-text,.input-group-lg>.input-group-prepend>.form-control-plaintext.btn,.input-group-lg>.input-group-append>.form-control-plaintext.btn{padding-right:0;padding-left:0}.form-control-sm,.input-group-sm>.form-c
2024-04-25 18:47:26 UTC	6188	IN	Data Raw: 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 20 7e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 2c 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 20 7e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 32 30 2c 35 33 2c 36 39 2c 30 2e 32 35 29 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 68 Data Ascii: .was-validated .custom-file-input:invalid:focus ~ .custom-file-label,.custom-file-input.is-invalid:focus ~ .custom-file-label{box-shadow:0 0 0 .2rem rgba(220,53,69,0.25)}.form-inline{display:flex;flex-flow:row wrap;align-items:center}.form-inline .form-ch
2024-04-25 18:47:26 UTC	10674	IN	Data Raw: 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 34 38 2c 32 34 39 2c 32 35 30 2c 30 2e 35 29 7d 2e 62 74 6e 2d 6c 69 67 68 74 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6c 69 67 68 74 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d Data Ascii: us{box-shadow:0 0 0 .2rem rgba(248,249,250,0.5)}.btn-light.disabled,.btn-light:disabled{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-light:not(:disabled):not(.disabled):active,.btn-light:not(:disabled):not(.disabled).active,.show>.btn-
2024-04-25 18:47:26 UTC	11860	IN	Data Raw: 6e 3a 2e 35 72 65 6d 20 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 63 65 66 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 31 2e 35 72 65 6d 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 68 6f 76 65 72 2c Data Ascii: n:.5rem 0;overflow:hidden;border-top:1px solid #e9ecef}.dropdown-item{display:block;width:100%;padding:.25rem 1.5rem;clear:both;font-weight:400;color:#212529;text-align:inherit;white-space:nowrap;background-color:transparent;border:0}.dropdown-item:hover,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49726	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:26 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 18:47:26 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=130569 Date: Thu, 25 Apr 2024 18:47:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49728	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:26 UTC	905	OUT	GET /en-us/sharefile/media/catalog-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:26 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 63999 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:26 GMT Etag: "8bfe160b56f04105eb6aa3685a6bc671-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9AYVHS0TSC2ETPS4VK6NN X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:26 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 52 08 06 00 00 00 2e 15 a1 27 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 1c 36 a6 11 eb 41 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 1c e5 b9 f8 fd ef 94 ed ab 2e 59 bd d8 72 91 8d dc 2b 72 01 6c 53 0c 81 50 02 38 9c 24 70 20 21 24 90 90 f0 83 40 48 08 21 e1 9c 37 c9 49 03 72 e0 40 12 73 48 08 60 4e 02 a1 18 8c 71 ef 96 2d 63 1b 59 6e aa 56 ef 5a ed 6a fb cc bc 7f 8c b4 71 c7 c6 c6 32 f6 f3 b9 2e 5f 97 b5 bb 33 fb ec 4a 3b 7b cf fd dc cf 3d 92 a6 69 46 65 65 25 6f be f9 26 35 35 35 e8 ba 8e 24 49 08 82 20 08 82 20 08 27 41 92 08 06 02 64 64 64 f0 a5 9b 6f 66 f2 a4 49 48 d5 d5 d5 c6 1d 77 dc c1 c7 e5 e5 58 ad 56 44 68 25 08 82 20 Data Ascii: PNGIHDRXR.'pHYsttfxtIME6A IDATxwx.Yr+rlSP8$p !$@H!7Ir@sH`Nq-cYnVZjq2._3J;{=iFee%o&555$I 'AdddofIHwXVDh%
2024-04-25 18:47:26 UTC	2372	IN	Data Raw: f1 7a 7d 64 67 65 21 cb e2 42 69 82 70 26 9d b1 53 e2 5f fd ea 57 d4 d7 d7 f3 a7 3f fd 89 b4 b4 34 ae b9 e6 1a 16 2e 5c c8 e6 cd 9b 3f 71 db 7d fb f6 f1 a5 2f 7d 89 a2 a2 22 46 8d 1a c5 6d b7 dd c6 f6 ed db 63 f7 ff e6 37 bf e1 b1 c7 1e 3b 53 43 fd 44 ba ae f3 c0 03 0f 30 7f fe 7c 66 ce 9c 19 fb 37 63 c6 0c be f3 9d ef b0 7b f7 6e 32 32 32 f8 f5 af 7f 4d 5f 5f 1f 77 df 7d 37 bb 76 ed 3a 6b e3 13 ce 6f 8d 4d cd 58 2c 16 f2 73 73 44 70 25 7c 66 ec 76 1b 39 d9 59 b8 dd 6e 1a 1a 9b ce 7a e1 b3 20 9c ef 4e 3b 83 f5 d2 4b 2f 71 ed b5 d7 12 0a 85 b8 e1 86 1b 88 44 22 bc f5 d6 5b fc ed 6f 7f 63 e3 c6 8d dc 7f ff fd ac 5e bd 1a 80 e2 e2 e2 a3 b2 59 4d 4d 4d cc 9d 3b 97 d4 d4 54 ee b9 e7 1e 34 4d 63 d1 a2 45 94 94 94 b0 69 d3 26 26 4e 9c 48 7c 7c 3c 3e 9f ef 74 87 Data Ascii: z}dge!Bip&S_W?4.\?q}/}"Fmc7;SCD0\|f7c{n222M__w}7v:koMX,ssDp%\|fv9Ynz N;K/qD"[oc^YMMM;T4McEi&&NH\|\|<>t
2024-04-25 18:47:26 UTC	538	IN	Data Raw: da 8a 2c ff eb b0 98 9c 9c 8c d3 e9 64 ed da b5 84 c3 61 b6 6d db 46 6b 6b 2b 71 71 71 6c db b6 8d f6 f6 76 3a 3b 3b 01 d8 b5 6b 17 bb 77 ef 66 cb 96 2d ec dc b9 93 d5 ab 57 13 08 04 d8 be 7d 3b b5 b5 b5 54 56 56 7e aa 0c c3 d9 a2 aa 0a 06 86 28 76 3f 87 18 86 81 c5 6a 25 39 39 99 c4 c4 44 22 91 08 d5 35 35 14 15 15 91 93 93 43 28 14 22 14 0e 33 74 e8 50 ae b8 fc 72 7a bd 5e a2 d1 e8 29 3d 87 d5 6a 25 d0 9f c1 19 38 f1 08 06 02 64 67 67 e3 ed ed 25 37 37 97 8b 2f be 98 40 20 40 72 72 32 92 24 e1 0f 04 e8 ec ec c4 00 ae 5e b0 00 ab d5 4a d9 b6 6d 5c 77 dd 75 cc 9c 39 f3 94 7a f6 6d d9 b2 85 ae ae 2e 76 ef de cd be fd fb 49 4b 4d 65 de bc 79 e6 89 49 63 23 b3 67 cf 66 c1 82 05 b4 b5 b5 31 71 e2 44 12 13 13 f1 9e e4 89 80 61 18 87 4d 6d f6 f6 f6 72 f5 d5 57 Data Ascii: ,damFkk+qqqlv:;;kwf-W};TVV~(v?j%99D"55C("3tPrz^)=j%8dgg%77/@ @rr2$^Jm\wu9zm.vIKMeyIc#gf1qDaMmrW
2024-04-25 18:47:26 UTC	4744	IN	Data Raw: 64 65 65 51 5c 5c 8c c7 e3 a1 ba ba 9a b1 63 c7 92 97 97 17 4b f3 27 26 26 92 99 99 49 76 76 36 07 0f 1e 04 cc 4c 79 7d 7d 3d 45 45 45 04 02 01 e2 e2 e2 18 31 62 04 5e af 37 f6 99 d7 34 0d 9b cd 86 a6 69 74 75 75 e1 70 38 98 30 61 02 5d 5d 5d 94 95 95 91 90 90 c0 84 09 13 50 14 25 f6 05 95 9a 9a 4a 5e 5e 1e 56 ab 15 8b c5 c2 c4 89 13 d9 bb 77 2f f5 f5 f5 a4 a4 a4 d0 d1 d1 c1 55 57 5d 85 cf e7 63 db b6 6d d4 d6 d6 92 9d 9d 1d 3b ee a4 a5 a5 31 6a d4 28 e2 e3 e3 69 6e 6e c6 30 0c d1 2c 56 38 25 86 61 90 9f 97 47 71 71 31 5e af 97 b2 b2 32 0a 0b 0b a9 ac ac 24 27 27 07 c3 30 e8 ed ed 65 d7 ae 5d 74 76 75 91 9b 93 73 ca 27 69 a3 46 8d a2 ba ba 9a d7 5e 7b 8d 40 30 c8 94 c9 93 69 6d 6d c5 62 b5 12 0a 87 b1 58 ad ec d8 b9 93 84 f8 78 ba bb bb d1 75 9d 5e 8f 87 Data Ascii: deeQ\\cK'&&Ivv6Ly}}=EEE1b^74ituup80a]]]P%J^^Vw/UW]cm;1j(inn0,V8%aGqq1^2$''0e]tvus'iF^{@0immbXxu^
2024-04-25 18:47:26 UTC	5930	IN	Data Raw: 3e 4f 28 f1 32 72 2c 5d d4 74 f9 a8 2c df c7 45 57 ba ce dc 3b 27 08 82 20 08 9f c0 6a 33 b3 4f cd 8d b0 61 b5 c4 a6 b5 d0 de 6a ae 06 74 38 cd fa 2a 59 81 29 33 e0 92 cb 0d 46 17 9b 59 ae 60 00 c4 05 54 3e ef 24 64 59 66 c5 8a 15 ac 5b b7 0e 59 96 59 b0 60 01 d3 a7 4f 3f f1 14 61 38 1c 26 23 3d 9d cb 2f bf 1c c3 30 a8 ad ad e5 a9 a7 9f 66 d7 ae 5d 00 94 94 94 30 72 c4 08 fc 7e ff 71 f6 60 80 01 ba a6 23 69 21 9a ba 3d cc bc 74 26 ed 95 b5 58 13 87 72 ed 15 b3 d0 fa 3a 68 eb ea e5 ab df fa 3e 37 4e 2c a0 ac 74 3b 43 46 4e e7 17 bf fc 35 3d 75 1b f9 9f 3f bf cb 4f 7e f7 07 be 52 92 c9 e2 bf bf 81 33 f7 22 26 0c cb 63 df 47 15 f4 25 64 f1 ed fb 6f 67 cf be 2a 7e fc 9b ff e2 0b 97 8c c5 db 77 bc b1 9c 7f 24 49 46 96 15 24 59 41 92 55 e4 c3 fe 89 c6 a5 82 20 Data Ascii: >O(2r,]t,EW;' j3Oajt8Y)3FY`T>$dYf[YY`O?a8&#=/0f]0r~q`#i!=t&Xr:h>7N,t;CFN5=u?O~R3"&cG%dog~w$IF$YAU
2024-04-25 18:47:26 UTC	7116	IN	Data Raw: 3f 8b 20 08 e7 32 8b c5 cc 4c 75 76 c0 8a a5 66 1f ab c6 83 e6 f5 03 6d 03 5d d7 c3 50 54 0c 97 cc 37 18 3f f9 5f 2d 18 c4 54 e0 b9 43 d7 f5 c3 02 a9 e8 79 9e 4e 3c 61 80 15 8d 46 49 4e 4a 22 23 7d 08 00 49 09 f1 34 b5 b4 12 e8 af e1 91 80 a6 e6 16 fa fc 7e 86 0f 2d 38 6a fb aa dd 65 94 57 36 e1 70 b8 99 5c 32 93 14 77 7f 4f f0 a0 87 55 1b ca b9 74 de 4c 24 e0 e0 9e 5d 74 2b c9 8c 1f 99 73 06 5f da d9 57 77 b0 9e 9a 9a 5a 2e bd 64 f6 19 df b7 ae eb c4 c7 bb d0 0d 9d d6 b6 1e 2c 80 43 b1 11 a6 0f 4f 4f 37 23 f2 87 d1 31 a2 08 6f 77 0f 2e 55 c1 8a 8e 1e d1 b9 f3 ee 3b 99 7a ed 17 d1 2d 2a 86 a8 e4 14 04 e1 73 24 d6 75 bd 05 36 ad 91 d8 b8 06 5a 9a cc db 06 9a 83 ca 12 8c 9b 64 76 5d bf 68 82 b9 8d 08 ac 84 73 c1 09 03 ac 23 3b 69 c7 b9 dd 8c 1a ee 3e ec 31 Data Ascii: ? 2Luvfm]PT7?_-TCyN<aFINJ"#}I4~-8jeW6p\2wOUtL$]t+s_WwZ.d,COO7#1ow.U;z-*s$u6Zdv]hs#;i>1
2024-04-25 18:47:26 UTC	8302	IN	Data Raw: 07 f7 33 6d 2a d4 94 17 11 4b 24 01 8b a9 e9 08 05 15 35 dc ff c0 fd c4 86 7b 49 48 61 4a f3 c2 8c 8e 8c 11 ac 6e e6 e1 9d 5b 08 97 56 f2 d8 83 f7 32 35 91 a4 bc 76 09 79 e1 00 ba 6a 20 ba 43 e4 05 25 f6 bf 7f 98 74 2a 89 6a 79 79 e6 99 2f e3 63 8c f3 97 fa f0 f9 7c 08 d6 6c 40 5b 35 45 76 61 1d 2b ab 0b 38 d5 da 43 7d c3 52 8c a9 21 ce 77 4c f0 cc 33 cf f0 c0 a6 65 9c 3f 7a 18 db 9b 4f 59 4e 80 e1 91 51 f2 96 ae e1 b1 6d 1b 98 9e 4a b2 7c d3 dd dc b5 69 15 a6 6e 51 55 59 4a cb f1 03 0c ce 68 54 14 85 d1 53 49 5c de 00 39 3e 2f 17 ce 9e a3 3f 0d cf 3c f3 2c 1b 1a 2b 38 75 b2 8d 1d 4f 7d 99 67 1f dd ce 40 db 19 c6 62 22 75 e5 05 68 86 4d 4d 5d 03 39 01 0f a2 27 8b 9a ba 5a 72 b2 03 b4 5d 38 49 52 0a 52 53 56 44 6b cb 49 02 55 2b 79 ec a9 e7 08 07 5c 1f be Data Ascii: 3mK$5{IHaJn[V25vyj C%tjyy/c\|l@[5Eva+8C}R!wL3e?zOYNQmJ\|inQUYJhTSI\9>/?<,+8uO}g@b"uhMM]9'Zr]8IRRSVDkIU+y\
2024-04-25 18:47:26 UTC	3101	IN	Data Raw: e6 8f 75 3d 6c db 26 16 8f e3 f5 7a 17 45 f8 02 97 cb 85 28 08 24 e7 e1 4f 37 5f 62 f1 38 1e 8f 7b d1 f8 5f c1 1c 16 ac a9 e9 19 06 87 87 a9 28 2b 43 d5 34 c6 c6 c7 e9 ee ed a3 a8 b0 00 5d d7 e9 b9 d2 c7 b6 cd 9b 16 45 87 39 cc 8d 65 59 cc 44 a2 48 2e 3f 15 95 59 04 7c 2e dc 52 1e c5 46 26 f6 55 6e 5e 21 ae 60 98 a2 e2 32 56 2e 4d 11 35 14 36 6e ac a1 b7 a7 8b b1 b4 41 6d 53 16 08 16 4b ea 9b a8 28 2b 42 cf f5 73 f6 5c 0b 97 94 20 2b 57 34 23 89 32 d3 d3 83 b4 27 4d d6 ac db 88 36 3d 8a 2e fb 59 96 97 85 df e3 c1 d4 5c 60 5b d7 a6 08 93 d1 29 a6 53 36 8f 3c ba 0b bf 3b f3 56 3c 39 15 e3 be 1d f7 83 1a 27 bf a0 1c d1 30 98 42 c4 e3 ce 98 7c a7 27 46 d1 a5 2c 9e 78 78 2d ae 59 f3 7f 20 2b 84 9c 95 cd 12 59 e5 f0 e1 63 94 d6 35 e1 b6 6d 0c db e4 c4 89 53 64 Data Ascii: u=l&zE($O7_b8{_(+C4]E9eYDH.?Y\|.RF&Un^!`2V.M56nAmSK(+Bs\ +W4#2'M6=.Y\`[)S6<;V<9'0B\|'F,xx-Y +Yc5mSd
2024-04-25 18:47:26 UTC	10674	IN	Data Raw: 5f a2 b7 7f 8c a6 6d db c8 c6 e7 99 9c 4f 90 49 27 50 03 61 dc f4 1c 27 ce 5d a5 20 cf 47 5f df 10 d3 33 8b ec 7b fa 69 f2 ef c5 03 e5 98 5c be 74 99 8c 61 31 b7 94 46 4f ce d2 3b b2 40 50 ca 30 3e 39 cd c4 d4 22 fb f6 ed a6 af bb 13 35 94 8f 9d 9c a5 7f c6 e4 4b 5f 3c ca 85 d3 1f 72 bd 7f 82 7d 87 9f 63 76 a8 1d 1d 15 c7 d0 19 e8 bf 81 ab f8 90 64 46 5a b4 e4 00 00 20 00 49 44 41 54 8d 2d d5 15 8c 0f f6 d0 33 34 81 e3 da cc 8d 0d 32 ef e4 f1 85 a7 9a 38 fe c1 71 7c 91 3c 6e 74 77 d3 74 e0 0b c4 34 9d c1 c1 21 6e 0c 8c 92 17 09 30 d8 3f c0 f8 f8 1c fb 8f 1c 62 bc af 93 a4 29 53 54 58 44 51 f4 de 53 9e 6c db 26 95 4a e3 f7 fb 6f 55 56 50 14 99 b6 b6 36 12 89 04 ae eb 12 8b c5 68 6e 6e f6 3c 58 4f 1a 17 fb 6d be ff 67 99 5c 21 3d 11 3e f9 79 77 5c c8 1a 2e Data Ascii: _mOI'Pa'] G_3{i\ta1FO;@P0>9"5K_<r}cvdFZ IDAT-3428q\|<ntwt4!n0?b)STXDQSl&JoUVP6hnn<XOmg\!=>yw\.
2024-04-25 18:47:26 UTC	11860	IN	Data Raw: 3d 7a 03 3d 3c 3c 1e 09 8e 0b a2 00 7a 26 83 a4 f9 90 57 68 2e bd 12 46 36 8b 20 ab 28 72 ee 8b c4 b6 2c dc e5 24 f7 9b d8 56 ee 61 ce e7 cb e5 fc e8 99 0c 92 ea 43 96 36 fb f1 cd c5 b2 6c 44 51 5a b1 a9 f6 dd c8 24 e3 58 82 4a 38 f8 78 14 14 b5 4c 13 44 71 5d 2d 71 f4 4c 06 1b 01 4d f3 b1 56 af 70 23 9b 41 90 b5 5b e7 76 3d 98 86 8e 23 48 68 1b 90 3c 6e 3b ce 5d fb 17 3f 0a 1c cb 44 b7 1c fc be cd 2f 2d e2 85 08 9f 30 e6 e2 06 a3 b3 59 96 d2 26 8b 49 8b c5 a4 c5 42 f2 e3 df e3 29 93 c9 39 9d a9 45 fd 53 eb c6 67 a7 68 6b 6f a7 bb bb 8b f6 8e ab a4 f4 95 8b bb 99 7a f6 8e d7 56 36 41 7b 47 3b f3 49 1d dc 34 a7 4e 9f e6 2e 73 58 56 25 9b c9 dc e3 1a b7 1b 90 a2 a3 fd da fd af ef e1 f1 19 c1 4c 2f f1 e1 af df e6 1f 7e f6 33 2e 77 f5 71 f9 cc 59 06 26 17 6f Data Ascii: =z=<<z&Wh.F6 (r,$VaC6lDQZ$XJ8xLDq]-qLMVp#A[v=#Hh<n;]?D/-0Y&IB)9ESghkozV6A{G;I4N.sXV%L/~3.wqY&o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49730	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:26 UTC	906	OUT	GET /en-us/sharefile/media/catalog-1a.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:26 UTC	520	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 67062 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:26 GMT Etag: "4f24d2d10b210f7847a2cae95f715564-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9AYVFTTP9HDNH0KGEJMHW X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:26 UTC	666	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 3d 08 06 00 00 00 d7 b7 1c a8 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 1e 34 7a 29 e8 ef 00 00 20 00 49 44 41 54 78 9c ec 9d 77 9c dc c4 d9 f8 bf 23 6d bd ea de 7b a7 d8 14 83 0d a1 98 9e 90 90 00 09 09 25 90 90 f6 be f9 25 90 42 42 3a 6f 02 24 01 de 90 42 2a 25 a1 43 02 6f 12 42 0d a1 63 c0 60 c0 18 0c b8 f7 76 b6 ef 7c 77 be b2 4d 2b cd ef 0f ad 76 25 ad b6 dc 79 6d 53 e6 eb cf 79 47 a3 d1 68 34 8f 9e 67 9e 29 92 84 94 52 a2 50 28 14 0a 85 42 a1 a8 19 21 c3 30 f6 75 19 14 0a 85 42 a1 50 28 de 53 84 2c 69 ed eb 32 28 14 0a 85 42 a1 50 bc a7 10 6a 8a 50 a1 50 28 14 0a 85 a2 b6 68 fb ba 00 0a 85 42 a1 50 28 14 ef 35 94 83 a5 50 Data Ascii: PNGIHDRX=pHYsttfxtIME4z) IDATxw#m{%%BB:o$B*%CoBc`v\|wM+v%ymSyGh4g)RP(B!0uBP(S,i2(BPjPP(hBP(5P
2024-04-25 18:47:26 UTC	2372	IN	Data Raw: e9 a5 7c eb 5b df e2 ea ab af e6 fa 1b 6e 60 fe fc f9 2c 5c b8 90 1b 6f ba 89 0d 1b 36 94 3d 56 4a 49 57 57 57 f1 b5 2c 7d 85 6b ff 70 0b 89 54 86 35 6f 3c c7 d5 bf b9 99 a4 05 20 d9 b4 69 23 59 00 cb e0 ce 5b fe c4 3f 9f 78 09 03 c0 4a b3 71 d3 16 00 cc de 9d 2c 78 61 11 76 74 6f 3e de 61 cb 96 2d 18 a6 04 f5 ad c7 3d 82 ae 6b b4 b6 b6 f1 c4 13 cf f2 ca 2b 8b 18 38 68 00 9a a6 d6 67 bc 2b 91 e0 ef a7 f5 77 bc c2 ca 42 46 7d bf fe 3d 4f 3a d9 cb fa 0d 1b d9 d5 93 aa fe 20 99 a5 ab 37 b9 e7 0a a5 50 f8 e8 d3 1a ac cd 9b 37 b3 f8 f5 d7 39 6c f6 6c e6 cd 9b 87 ae 69 b4 b4 b4 60 59 16 13 26 4c 00 e0 8e 3b ee 60 ce dc b9 7c ed e2 8b b9 ed f6 db 59 b9 72 25 f1 78 9c 5f fc e2 17 24 12 09 be f0 85 2f 30 7b f6 6c 2e fb 9f ff c1 c8 64 18 3b 76 2c 47 1c 71 04 5b b6 Data Ascii: \|[n`,\o6=VJIWWW,}kpT5o< i#Y[?xJq,xavto>a-=k+8hg+wBF}=O: 7P79lli`Y&L;`\|Yr%x_$/0{l.d;v,Gq[
2024-04-25 18:47:26 UTC	538	IN	Data Raw: 5d a1 50 28 14 0a 85 a2 c6 28 07 4b a1 50 28 14 0a 85 a2 c6 28 07 4b a1 50 28 14 0a 85 a2 c6 84 0c c3 d8 d7 65 50 28 14 0a 85 42 a1 78 4f 11 32 8c ec be 2e 83 42 a1 50 28 14 0a c5 7b 0a f5 14 a1 42 a1 50 28 14 0a 45 8d 51 6b b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a cc 5e 77 b0 da b6 6f 62 f5 ea f5 a4 0c ab aa f4 bb Data Ascii: ]P((KP((KP(eP(BxO2.BP({BP(EQkBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(j^wob
2024-04-25 18:47:26 UTC	4744	IN	Data Raw: c9 f3 4f f2 ed cb 7e 4a 87 05 2b 5f 7d 90 6f 7f f7 27 74 67 60 e5 ab 4f f3 d3 ab ff 97 ed 09 09 56 8a db ff 70 35 f3 8e 9c cd 84 49 53 38 fd dc 2f 32 ff 8d b5 00 3c fd d0 5d 5c f1 eb bf 12 8d 46 79 e2 be eb f9 da d7 2e e5 b5 65 db 68 dd b1 96 35 2b 97 d3 d2 d2 6d 9f db e8 e1 2f d7 fd 94 63 e6 1c c2 c4 c9 53 39 fb f3 5f 65 c1 5b eb ed 7d 32 c5 9f ae ba 9c 9b ef 7f 92 f9 ff fe 1b 47 1f 7e 10 33 0e 9c cd 4f 7e 7d 2b 99 9c bf b9 fe cd 05 7c f1 dc 33 98 38 61 02 87 1f 7b 32 b7 fc e3 b1 bd 20 15 85 42 a1 50 28 14 35 45 ee 65 be 76 de a1 12 46 c8 37 b7 4a d9 b6 ec 01 09 c8 e1 23 46 c9 69 fb cf 92 c7 9f 78 9c 8c 81 0c 0d 9e 2a 57 6c 69 93 5f 38 63 ae 04 64 43 53 93 0c 85 90 30 4a be b6 21 2d 1f bb f3 2a 09 c8 01 a3 a6 c8 93 4f 39 49 c6 40 d6 8f 3e 40 be b2 a6 55 Data Ascii: O~J+_}o'tg`OVp5IS8/2<]\Fy.eh5+m/cS9_e[}2G~3O~}+\|38a{2 BP(5EevF7J#FixWli_8cdCS0J!-O9I@>@U
2024-04-25 18:47:26 UTC	5930	IN	Data Raw: bf 3d 70 cc 74 ce 3e 7b ba 2b c5 70 26 e5 42 e7 7d 7a 1c 00 6b 5b 47 32 b8 b9 91 89 a7 7f 82 53 3f 30 85 e6 68 88 2f 7d 61 a6 9d 68 ff 83 00 e8 6d 5b cf d3 6f ee e0 f2 2b 2e db f7 2b f9 df 01 48 d7 9f 73 2b f9 0d 78 30 d5 dc 76 39 43 94 bb 99 dd 0a 1f 98 4b 09 03 5d ea 8c a5 14 ad dc be aa c3 7b 42 a9 fd fb 85 37 ce df 68 08 c0 fb a4 4b 75 f8 47 a5 82 4a b1 3b ab 0a 3c c6 3a a8 61 76 c7 55 92 69 3f 8c 75 35 e9 02 f7 57 21 d3 dd 6a 98 5d f9 fb 7b de 9e 35 59 12 ca 4d c4 07 11 3c 2a e9 97 63 f5 77 8a 5f 15 f3 72 83 a2 f7 24 79 64 ea bb 67 83 f2 2d 17 57 b3 b0 ab 3c 7d 96 53 5f f6 07 e4 ef 59 b7 e3 48 c6 f5 fe a4 f2 b5 2f 8b 42 c5 0e b4 bf 34 fd c3 23 53 d7 89 dc 75 e7 d6 d3 fe e8 a8 7f bb bf 61 77 59 f7 96 8e e6 54 b2 84 dd 75 6c 72 9f bb 9f 55 b1 cf 1d ac Data Ascii: =pt>{+p&B}zk[G2S?0h/}ahm[o+.+Hs+x0v9CK]{B7hKuGJ;<:avUi?u5W!j]{5YM<*cw_r$ydg-W<}S_YH/B4#SuawYTulrU
2024-04-25 18:47:26 UTC	7116	IN	Data Raw: db 15 8d 77 60 83 5b e8 91 15 1c 2f bf 4c ed b0 69 4a 86 36 47 08 69 82 0d db 53 8c 1f 56 c7 ae de 2c 3b bb 32 ec 37 b6 81 ba 98 9e fb 00 ad 8d 44 12 09 c7 e8 48 76 d3 93 49 31 a8 ae 99 23 c7 cf 64 50 5d 33 2b 5b 37 32 6b c4 54 22 a1 70 d1 f7 f1 70 9f 5f d4 5e a6 ee 46 b9 14 ba ee 1d a1 8c c5 6c 47 b9 a5 a5 85 7f fc e3 9f bc f6 da 6b f9 7d c7 ce 3b 96 4b 2f fd 4e e9 cc f2 0e 8a 59 90 9d 94 5e f9 ba 64 e0 c8 b3 9a 11 ac b2 3a ea eb f8 f8 e5 29 b1 9f e0 1d 33 24 46 4b 47 1a 29 61 d4 e0 18 eb b6 27 68 ae d7 99 34 22 ee 2b 81 c4 92 92 01 f1 46 56 b6 6e 60 50 5d 23 cd b1 46 4e 9a 36 87 35 6d 9b b1 a4 64 f2 90 31 64 ad 60 1d cd eb 94 23 c7 dd 90 a9 db a9 72 e7 5f 2f 60 7e fa 5e 96 66 e7 53 27 06 e4 9d a8 8c 99 61 57 ba 93 ee 4c 37 bd 99 1e fb cf e8 21 95 4d 22 Data Ascii: w`[/LiJ6GiSV,;27DHvI1#dP]3+[72kT"pp_^FlGk};K/NY^d:)3$FKG)a'h4"+FVn`P]#FN65md1d`#r_/`~^fS'aWL7!M"
2024-04-25 18:47:26 UTC	8302	IN	Data Raw: 70 80 40 ee 56 a9 3a 55 cf db 35 36 a6 35 29 39 da 80 93 53 69 56 d6 2a 8c ba c8 68 b8 11 eb cb dc 90 f1 06 6f cd c0 07 b2 60 49 0b 57 46 26 79 b0 e2 1e 49 f7 dc 7e 52 7a 61 2c 3a a2 0d 2c c3 80 c1 3e 49 43 ab 40 d8 92 52 09 cc 34 34 36 0a 84 e1 4e d3 f7 c2 48 48 a5 c0 ae 41 b1 28 c9 36 08 52 a6 37 03 a6 ea 4e 2b 35 84 bb 56 92 30 dc 31 e4 5a 0d d2 19 28 0e 49 4a 16 74 76 0a 70 dc e5 22 d2 19 b0 2d 48 d8 51 e0 5f 92 14 a3 07 e2 d6 4d f5 7b 1a be 42 d4 7a d1 02 d4 87 e8 94 4b b4 1c 77 22 cd cf 39 8d ca fe 3d 98 b9 46 a4 55 45 a4 32 e4 66 2f 60 ff ef 7e 84 b4 6a 31 65 0e ae f0 b6 86 8a 14 b6 6e c1 2a 16 42 7c 15 f4 ee 94 f1 a7 bc 69 82 a0 a7 a1 89 27 ad 17 15 f4 e8 41 b9 98 05 a8 e5 54 7c d3 23 ca f0 86 64 5c 33 80 9e 32 d9 70 4a 3b cc c9 58 94 ec c0 7b 83 Data Ascii: p@V:U565)9SiVho`IWF&yI~Rza,:,>IC@R446NHHA(6R7N+5V01Z(IJtvp"-HQ_M{BzKw"9=FUE2f/`~j1enB\|i'AT\|#d\32pJ;X{
2024-04-25 18:47:26 UTC	6085	IN	Data Raw: 1c eb 37 6c e0 d8 63 8f 65 f7 ee dd 34 37 37 e3 38 0e 85 62 11 ca 35 f2 9b 76 53 28 97 90 21 19 5b 87 4f 3d b9 6b 18 9a dc 15 75 8c 65 e5 41 f6 db 63 34 43 3a 6a e4 44 f0 d2 71 55 7c 28 a5 3f 5c 3c 1a 8f 86 e5 6e bc 6c ff b7 9e dc 0d a5 3f 0b d7 c1 9a a0 c3 43 6e 3c 8e b6 4a b4 cf 6b 61 0e 4a 99 02 a4 85 b4 c2 aa 18 22 e7 9e 1c 10 b6 85 21 0c 7a 7b 7b 29 14 0a bc f7 bd ef e5 de 7b ef e5 c2 65 cb b8 f9 96 5b 68 ef ec c0 ae d5 10 b5 9a bb b6 0b 49 bd 57 34 dd e3 2e 9a a8 cf 9c 09 98 4f e5 09 1b 51 de f2 b3 5a 59 f5 8c 2a fd de a4 1e b0 4a 97 81 11 90 c4 d0 32 ce e0 d1 32 02 c6 8e 9c fb 65 24 a7 bb 87 36 63 2f e5 ee ad 6b 86 c0 df a3 51 c7 54 b5 8d 10 ee 4a 83 4e 0d e9 c4 31 8d cd 57 b3 ab de 6c 1a d8 b6 6d 1b 2f 7e f1 8b 79 fb 3b de 81 21 04 ad 6d 6d dc 7d Data Ascii: 7lce4778b5vS(![O=kueAc4C:jDqU\|(?\<nl?Cn<JkaJ"!z{{){e[hIW4.OQZY*J22e$6c/kQTJN1Wlm/~y;!mm}
2024-04-25 18:47:26 UTC	10674	IN	Data Raw: 58 bd 76 13 53 bb a6 22 80 3b 6f b8 96 4f 7e eb 37 d8 c5 61 d2 69 c1 f6 1d 7b 78 f8 af 77 b3 af 3a 95 53 8f 69 65 d5 fa ad 74 4d 9b 0a c0 6d 3f bf 8e cf 5d f7 7b 84 9d c7 c8 e4 c8 64 9a 68 6b c9 b0 6b e7 1e cc b4 a4 67 e7 0e fa 0a 16 1d 6d cd e4 0f f6 b0 6a e3 0e 66 4e 9f 46 a1 30 44 5f ef 01 b6 af be 97 f7 fd df 8f 71 d4 92 17 33 a3 bd 65 d4 76 38 52 e8 70 18 58 fb b7 ac e4 c3 9f 58 ce e6 ad 4f 70 d3 2d 77 b0 68 f1 89 50 2b 91 cd a6 19 18 e8 e7 de 3b ff 4c eb dc 13 69 95 fd ac de bc 9b 19 5d 8d 7c f4 03 d7 70 c6 85 97 32 b8 7f 17 f7 af f8 39 bf 7f 78 2b b3 3b 3b 98 36 75 0a e0 f0 e8 df 57 92 69 9d 42 63 d6 e4 60 f7 76 36 ee 3c c0 f4 69 53 f8 f4 87 3e c5 31 4b 2e a0 32 d8 4d 43 73 33 5b 37 ad a3 66 36 d2 d2 90 65 c7 e3 b7 73 d5 87 3e 83 53 b5 a8 da 16 dd Data Ascii: XvS";oO~7ai{xw:SietMm?]{dhkkgmjfNF0D_q3ev8RpXXOp-whP+;Li]\|p29x+;;6uWiBc`v6<iS>1K.2MCs3[7f6es>S
2024-04-25 18:47:26 UTC	11057	IN	Data Raw: d3 1d 26 b2 96 62 a4 c3 cf d4 dc 2a 83 a1 01 e2 2b 51 24 9f 46 36 96 64 64 b4 9f e7 9e 7c 04 5b 53 3f 6e 97 9b e6 80 83 2b 57 ae 51 af d6 b1 87 fc d8 35 99 44 51 a5 bd 2b 4c 3e 79 96 4b eb 39 42 2d fd 18 28 33 bb 12 a7 6f f7 dd 74 90 25 a7 5b 29 a7 97 59 cb 96 50 eb 1a 34 35 31 d2 db cd f2 d2 38 ab d1 0c 7b f6 1c a1 ab d5 73 bb 2d f8 63 64 63 f3 ac a4 52 0c f6 78 a8 a6 b3 5c 3e fb 0a 13 0b b3 0c 0c ed 24 1e 9f a3 63 68 0f fb 87 c2 cc cd 2f 32 e4 1f e2 f9 27 9e c3 ea 31 93 cb 96 69 6b 6b 23 b1 ba 42 49 a9 a2 03 7d 43 bb 18 6a 35 33 1d 59 a2 b5 b9 8f 54 62 85 e9 95 65 a2 99 61 fc 86 2a 13 cb 49 06 7b 3a 89 c5 d6 30 1b ab cc 45 8b 74 f6 06 98 59 8d 71 c0 df 8a d1 90 a4 50 ae f3 f2 73 cf 31 bd 18 e5 c1 4f 7e 1a 63 32 ca b3 df 3d 43 ba 12 27 93 c8 b2 65 ef 01 Data Ascii: &b+Q$F6dd\|[S?n+WQ5DQ+L>yK9B-(3ot%[)YP4518{s-cdcRx\>$ch/2'1ikk#BI}Cj53YTbeaI{:0EtYqPs1O~c2=C'e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49727	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:26 UTC	906	OUT	GET /en-us/sharefile/media/catalog-1b.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:26 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 62383 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:26 GMT Etag: "44a2a5e91ee4e4c7123906d55d3646a8-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9AYVRE49YF2WFGM8HZACK X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:26 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 26 00 00 00 ed 08 06 00 00 00 8b 7e be 18 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 21 01 74 44 06 f0 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 5d d5 9d e8 fd ef ae e7 1c 1d f5 de 6d 09 5b 72 ef dd 60 03 36 b6 31 60 4c 35 c5 c0 04 92 10 48 99 79 93 09 49 de 90 4c 26 73 67 de 37 09 b9 01 6e 42 86 49 08 21 f4 12 88 8d a9 06 f7 82 ab dc 25 b9 48 56 ef 5d a7 ed 7a ff 38 92 62 1b 13 6c 30 b8 ad cf f3 f8 b1 74 b4 cb 5a 5b 47 7b ff ce 2a bf 25 3d f2 c8 23 2e 82 20 08 82 20 08 e7 00 f5 6c 17 40 10 04 41 10 84 33 4f 02 90 a4 b3 5d 8c d3 26 02 13 41 10 04 41 b8 c0 48 92 84 65 db 38 b6 7d b6 8b 72 da 44 60 22 08 82 20 08 17 10 49 92 30 4d 13 d3 b4 50 Data Ascii: PNGIHDR&~pHYsttfxtIME!tD IDATxwx]m[r`61`L5HyIL&sg7nBI!%HV]z8bl0tZ[G{*%=#. l@A3O]&AAHe8}rD`" I0MP
2024-04-25 18:47:26 UTC	2372	IN	Data Raw: 62 62 22 b6 6d 0f b4 fe 9c ec 7c fd fa 83 9a 93 06 33 92 82 47 71 d8 bd 65 0d fb 8e d4 60 59 2e 71 89 e9 4c bb 74 26 59 89 3e 22 86 89 2c 2b a8 9a 8a e4 ba 98 a6 09 8a 8e 14 6c 62 f9 96 fd 5c 75 e5 55 c4 b8 11 0c db 41 55 54 54 55 c1 b2 4c 1c 57 42 36 02 ac 59 b5 8c a9 f3 be 42 6e 82 8c e3 ca a8 9a 8a 6b 5b 98 d6 31 d7 4c 56 d0 54 15 c7 8e ee 27 e1 60 3b e7 5f bf a1 20 5c 68 24 19 64 09 4e 6c 70 95 e5 68 20 f1 79 67 6a 2a 2a b8 0e 18 46 f4 78 aa 0a e7 e1 90 01 e1 1c 22 c9 32 8e 65 12 31 ad e8 07 6e 09 9c cf f0 a6 92 24 09 cb 88 10 34 6d e2 63 63 70 cf e0 33 49 96 24 09 cb b2 78 ef bd f7 d0 34 8d 37 57 ac a0 ad ad 8d 21 43 86 b0 72 e5 4a 4a 4b 4b 79 f9 e5 97 d9 b6 6d 5b b4 05 a0 af a5 64 f5 9a 35 ec d9 b3 87 05 0b 16 30 77 ee 5c 4a 4a 4a 78 f5 b5 d7 50 55 Data Ascii: bb"m\|3Gqe`Y.qLt&Y>",+lb\uUAUTTULWB6YBnk[1LVT'`;_ \h$dNlph ygj**Fx"2e1n$4mccp3I$x47W!CrJJKKym[d50w\JJJxPU
2024-04-25 18:47:26 UTC	538	IN	Data Raw: 85 d2 e6 18 6e be f1 16 7c 52 2f 2f bc bc 1c 49 56 c0 71 b0 5d 88 f1 c7 41 cf 61 de 5a b1 8a 29 0b 6f 66 d4 e0 0c 8e ec 78 9f 6d 0d 4e 74 10 b0 eb a2 fb e3 90 94 20 2d 1d 01 72 0b 52 70 c2 ed 34 07 bb 18 9f 99 4e 57 95 4c 4b 4b 3b 13 06 17 61 1b 5d d4 34 37 92 9e 37 e6 8c f5 e5 09 82 f0 d9 b9 0e d8 0e 28 0e 58 16 98 46 f4 7b c9 85 ee 4e 97 cc 1c 19 9f df 25 21 45 02 5c 62 fd 32 9d 15 0e f5 75 36 3d 8d 2e 86 2b e1 71 c0 01 7a 5a 5d 6a 9b 60 d4 08 89 e6 26 07 c3 02 c7 86 ae 6e 17 cb 04 3d 46 c2 0c 38 d4 d6 39 38 1d 2e 9a 0f dc 48 df 79 5d 70 6d 08 45 5c 92 d3 65 6a 0e 39 a0 ba 0c c9 91 30 4f fd 96 27 5c e0 24 49 c6 b1 c2 54 57 36 93 94 10 8f 61 3b c4 25 a5 e2 86 7b 08 04 7a 91 1d 9b 98 98 18 c2 e1 30 7a ac 07 c7 32 09 84 c2 c8 8e 8b 65 bb 24 24 26 52 59 d7 Data Ascii: n\|R//IVq]AaZ)ofxmNt -rRp4NWLKK;a]477(XF{N%!E\b2u6=.+qzZ]j`&n=F898.Hy]pmE\ej90O'\$ITW6a;%{z0z2e$$&RY
2024-04-25 18:47:26 UTC	4744	IN	Data Raw: 95 8e b1 c3 69 ab 2e 85 a4 3c 8a 0a 72 49 33 c6 b3 ec c3 77 b0 bb 6a 71 c3 ad d4 34 75 93 ab 88 91 6d 82 70 b6 b9 2e 78 fc 12 89 3a 28 5e 50 75 40 95 48 49 84 e4 34 89 f6 16 9b a0 04 05 39 12 47 ca 1c 7c 09 12 59 b9 12 99 e9 d0 58 e3 22 99 2e 92 47 22 21 55 c2 a3 40 4c 8a 44 66 3b d4 d5 41 52 b2 8c 65 42 6e 9e 44 75 ab 4b 52 1c c4 26 48 64 26 28 1c ae 70 90 75 89 a2 61 0a ed 0d 0e 5e 2d 9a f7 21 25 55 c2 a7 49 54 d7 38 78 13 25 32 52 24 6c d1 db 2b 1c c3 71 6c e2 92 d2 28 f0 f8 e8 09 86 49 49 cb 24 21 ce 0f 4e 0c 9d 9d 5d b8 4a 2c 49 09 71 c4 c5 78 e8 0a 84 49 c8 ca 8d ce a4 95 24 34 15 74 2d 81 41 39 0a dd c1 08 29 a9 09 78 64 17 9f 69 63 9b 36 c9 29 69 c8 8a 8a 73 06 66 e7 28 57 5d 75 d5 cf 64 59 66 c4 88 11 8c 19 33 86 d6 96 16 c6 8d 1b c7 f6 ed db 19 Data Ascii: i.<rI3wjq4ump.x:(^Pu@HI49G\|YX".G"!U@LDf;AReBnDuKR&Hd&(pua^-!%UIT8x%2R$l+ql(II$!N]J,IqxI$4t-A9)xdic6)isf(W]udYf3
2024-04-25 18:47:26 UTC	5930	IN	Data Raw: df b8 91 dd 7b 4b 69 e9 e8 26 26 3e 89 c4 b8 18 5c 17 02 5d 2d 1c ad ac a6 ac ec 00 8d ad dd 68 1e 3f 19 69 71 b4 b7 34 81 ea c3 ab b9 84 22 16 89 89 09 20 2b f8 3c 1e 70 5d 54 dd 83 e2 9a 1c 2a dd cb a6 8d 9b d8 f4 d1 56 0e 56 56 13 b1 20 25 35 15 af 2a 63 db 0e 8a 2a d3 d9 58 4f 65 75 0d a8 7e e2 63 64 0e 94 6c 63 f5 9a 35 6c dd bd 8f de 88 4b 46 66 26 9a 0c b6 e3 a0 7b bc 84 bb 5a d9 b1 ed 23 d6 6f d8 c0 ce 5d 7b 69 6a eb c2 9f 90 4c 62 5c 0c b6 2d 82 93 2f 82 6d db c4 c6 c6 32 79 f2 e4 d3 da af ae ae 8e ac ac 2c d2 d2 d2 c0 75 b9 ec b2 cb a8 a8 a8 a0 b8 b8 98 09 13 26 f0 a7 a7 9e 42 55 55 be f5 cd 6f 32 7e c2 04 76 ec d8 41 4b 73 33 4b 97 2e 65 c3 fa f5 84 c3 61 a6 cf 98 81 6d db 24 26 26 32 6a e4 48 c2 e1 30 23 47 8c 18 78 20 97 1f 3c c8 d4 29 53 48 Data Ascii: {Ki&&>\]-h?iq4" +<p]TVVV %5c*XOeu~cdlc5lKFf&{Z#o]{ijLb\-/m2y,u&BUUo2~vAKs3K.eam$&&2jH0#Gx <)SH
2024-04-25 18:47:26 UTC	7116	IN	Data Raw: ff eb fe 26 f3 fe f1 21 d9 d9 d9 8c 19 33 86 94 94 94 81 ee 8f c1 83 07 93 9c 9c cc ce 92 12 70 dd 81 31 1b 56 5f 2b 60 ff 2a d2 a6 19 0d c2 bb bb bb 07 ba 69 6c db 06 d7 45 51 14 22 86 31 b0 bd e3 38 e8 1e 0f 1e 8f 07 d3 34 51 fb 9a e8 1d c7 19 68 fa 8f 8b 8b 23 31 31 11 db b2 f0 7a bd f4 f6 f6 22 49 12 96 69 d2 dd dd 4d fe a0 41 f8 63 63 d9 b1 7d 3b 6e 5f 77 4b 7f 99 a2 33 de 0c cc be ae 14 db b6 a3 2d 1e 83 07 33 7a f4 68 72 72 72 50 14 e5 b8 eb d1 5f 56 a7 af 1b b3 bf 9c 8a a2 e0 f7 fb 07 ae 93 61 18 84 42 27 64 76 3e a6 db 4d 51 14 cc be 6e a7 50 38 4c c4 34 49 4a 4c 24 26 26 ba e2 f6 e0 41 83 18 3b 66 0c b9 b9 b9 d4 d6 d4 0c 94 d9 34 cd 81 d6 4a c7 71 88 f4 cd ec b3 fb ba 40 d2 33 32 18 33 7a 34 e9 69 69 14 14 14 b0 6e dd 3a 82 c1 60 f4 77 d1 77 ed Data Ascii: &!3p1V_+`*ilEQ"184Qh#11z"IiMAcc};n_wK3-3zhrrrP_VaB'dv>MQnP8L4IJL$&&A;f4Jq@323z4iin:`ww
2024-04-25 18:47:26 UTC	8302	IN	Data Raw: 75 e7 9d 3c f1 ab 5f d1 db db cb f8 f1 e3 7d 81 e5 79 4c 9c 38 91 2b ae b8 e2 b4 7e fb 90 73 83 b5 af ba ec db ab b8 fc aa 53 8f 4d d1 c0 c1 7d 9a 8f 2c 34 d8 be 59 31 aa 46 e0 b8 b0 79 83 47 5d bd 44 03 3d 87 34 91 18 a4 53 b0 67 97 a2 aa 5a d2 d7 a7 99 35 c7 3f d6 df dc a1 98 b7 c8 f0 7b 0b 99 d0 d2 2a d9 be c9 17 35 d7 7d d2 e2 50 97 a2 ed 80 df 58 f1 86 4f 59 c5 d2 fc c9 a4 e6 86 4f 59 24 06 a0 ab 43 b3 63 ab c7 94 69 06 47 7a 34 9d ed 9a a1 04 dc f8 69 8b c6 26 49 26 0d d5 35 82 e9 b3 24 b5 f5 82 dd 3b 14 87 ba 34 57 7c dc e4 23 17 19 bc b1 c6 23 95 d4 8c 1e 23 b9 ea 5a 93 d7 5f f1 68 9d 6e 1c 53 48 6d 70 40 f3 c2 0a 87 86 46 c9 c7 3e 6e 9d 70 df bc b6 61 2d 3b da f7 11 b1 fd 4e 8f 7e 46 0e c5 61 38 36 eb 66 b8 23 7c 24 11 22 46 1c 5d 9c 86 3e 91 c5 Data Ascii: u<_}yL8+~sSM},4Y1FyG]D=4SgZ5?{*5}PXOYOY$CciGz4i&I&5$;4W\|###Z_hnSHmp@F>npa-;N~Fa86f#\|$"F]>
2024-04-25 18:47:26 UTC	3101	IN	Data Raw: e7 c9 e5 72 b8 ae eb 1f ec 2a 78 15 86 b5 5f 1a 79 eb ee 37 d9 b2 f3 4d 2c cb 02 e9 0b 19 61 18 08 c3 00 c3 40 18 61 5c 78 48 48 48 88 cf 08 b5 4c 46 b2 9c 88 e0 81 b4 5c a5 1c e3 02 02 21 83 7b 87 61 60 98 26 86 61 62 1a 7e 86 a6 65 98 a1 30 09 79 77 08 0a 69 5e 02 43 80 19 04 bc 4a 40 6a 85 61 47 f1 14 d8 86 c4 32 4c 0c a1 11 65 ae 16 11 c4 95 18 42 90 cd a6 59 f5 ca 5a 72 b9 9c af a8 03 f1 51 2a da 06 b9 7c 9e 6c 2e 87 06 9c 7c 9e 9a 9a 1a 2e 5f ba 94 ce 8e 0e ba 0f 1d 02 21 98 34 69 12 95 95 95 c5 42 6b 85 2a b4 4a 6b 54 50 a7 56 4a 83 75 5b 77 d0 dd 73 04 cb b6 41 4a ff 6c 11 b2 24 50 42 42 42 42 42 8e e2 14 aa c1 8e 14 87 30 82 b0 11 42 20 83 07 5c 29 45 b1 62 76 28 4c 42 ce 20 fe 41 55 f0 bc 68 0d da b4 41 6b 62 d1 58 29 ae 04 11 24 df 94 b2 69 4c Data Ascii: rx_y7M,a@a\xHHHLF\!{a`&ab~e0ywi^CJ@jaG2LeBYZrQ\|l.\|._!4iBk*JkTPVJu[wsAJl$PBBBBB0B \)Ebv(LB AUhAkbX)$iL
2024-04-25 18:47:26 UTC	10674	IN	Data Raw: 0b d9 d0 df 6b 26 dc 4b 6c f5 2c 1b ea a3 02 b3 73 3e 8a a7 28 c0 a6 30 3b 2b d5 4e cd 53 7a 67 24 63 11 39 e1 3f ef 70 6a aa 1f 35 ed 84 73 79 d8 c7 c6 6b 4d d6 cd cf 05 60 e1 46 b5 1f 4e 4b a7 d6 66 b3 59 fa 8a 34 1a 0d 8c 31 a4 69 4a a3 d1 28 93 b2 f5 7a 3d ee b9 e7 1e 7e ed d7 7e 8d 24 49 38 74 f8 30 5f fb da d7 78 f4 d1 47 39 70 e0 00 fd 7e 7f f3 22 9c d3 00 00 20 00 49 44 41 54 ad b6 24 3c 67 7e a6 e3 eb 50 9a 96 ae 7f 74 b8 02 3e f3 1f 32 1f 32 df e2 27 3a c0 3a 33 c2 9b 07 0b fe ea cf b2 89 e7 57 96 bd a3 eb fd 0f bd 3b 80 c0 1d 77 1b 56 57 95 b3 67 a6 b3 70 4a 53 7a f7 52 00 24 97 cb 63 32 49 83 32 e1 f8 68 81 da f7 1a 28 89 54 e8 0d d2 98 50 bf ff 65 7e 8f 9c 73 a3 3c 7b 7c 11 5b bf 36 9e 53 85 4d db 0d 9b 77 f8 df 45 4c 9e 56 07 18 b5 ef f5 f7 Data Ascii: k&Kl,s>(0;+NSzg$c9?pj5sykM`FNKfY41iJ(z=~~$I8t0_xG9p~" IDAT$<g~Pt>22'::3W;wVWgpJSzR$c2I2h(TPe~s<{\|[6SMwELV
2024-04-25 18:47:26 UTC	11860	IN	Data Raw: 7b 62 84 86 29 68 db 9c d9 74 48 db e6 34 6d 46 c3 28 d6 a8 77 6e 13 43 62 0c 89 f5 40 24 31 4a 22 04 4d 89 c3 9a a0 65 28 ab e3 77 0b ae af 58 2a 95 aa 94 42 ba e4 11 61 65 88 9a a0 b6 15 9c 13 ac 2a 66 79 95 bc 28 ca 49 a7 22 68 5e d0 58 b7 9e 6d 9f fc c7 9c 7d ee 59 dc d2 12 5b 9f 78 92 23 7f fd 79 96 be f1 f7 58 f1 3e 2e 61 ef 63 f2 61 c6 c9 c5 45 f6 fc e7 bf c1 ca 9b 6f b0 74 f8 4d 36 3f fa 7e 76 7c f2 d3 9c fc ec 67 70 c3 01 6a 93 00 8c 14 69 35 91 66 a3 d4 92 44 13 8e b7 c1 56 ab a9 6b a5 08 30 62 87 49 58 6d 48 fd 3c 8c 98 72 b4 fc 2d 23 c7 4b 79 ac b5 df 65 b3 d6 56 a1 5a bb 67 64 42 54 e0 65 2d 7f 93 91 8f 2b bf 60 75 4e 6b c7 aa f7 5c eb 63 a2 23 e5 65 a4 ff eb 02 ee 5a 80 49 65 5a 9b 50 b6 76 48 21 98 40 bc ef 87 37 cb 19 6c 58 7d af 6b 2a e0 Data Ascii: {b)htH4mF(wnCb@$1J"Me(wXBaefy(I"h^Xm}Y[x#yX>.acaEotM6?~v\|gpji5fDVk0bIXmH<r-#KyeVZgdBTe-+`uNk\c#eZIeZPvH!@7lX}k*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49731	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:26 UTC	906	OUT	GET /en-us/sharefile/media/catalog-1c.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:26 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 71175 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:26 GMT Etag: "c0917092a1e02a4da21a8741a5dcc373-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9AYVTJDMKAB36J3VTBMKV X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:26 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 26 00 00 01 35 08 06 00 00 00 d3 64 2b ee 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 22 0e cf d6 48 a2 00 00 20 00 49 44 41 54 78 9c ec bd 79 7c 15 45 ba ff ff ee b3 26 e7 64 df 13 b2 13 c8 02 49 00 59 54 06 65 1d 45 05 11 c5 05 70 99 51 71 d7 99 d1 f1 37 d7 19 af ce d5 eb d5 f1 7a bf d7 71 9b d1 b9 3a 38 20 6e a0 2c 22 a0 08 6e 40 80 10 04 02 64 03 12 b2 90 7d 3d 39 7b f7 ef 8f 93 d3 26 10 96 2c 10 02 f5 e6 15 72 d2 5d 5d fd 74 77 9d aa 4f 3f f5 54 95 34 6b d6 2c 05 81 40 20 10 08 04 bd 46 51 14 5c 2e 17 06 83 1e 45 b4 aa 7d 42 37 d0 06 08 04 02 81 40 30 d8 91 24 09 45 01 b7 5b 46 ab d5 0c b4 39 83 1a 21 4c 04 02 81 40 20 e8 07 74 3a 1d 2e Data Ascii: PNGIHDR&5d+pHYsttfxtIME"H IDATxy\|E&dIYTeEpQq7zq:8 n,"n@d}=9{&,r]]twO?T4k,@ FQ\.E}B7@0$E[F9!L@ t:.
2024-04-25 18:47:26 UTC	2372	IN	Data Raw: 6c 36 9d d4 fb 21 49 3f 8b 12 e1 21 11 08 04 02 41 4f f1 b6 3d 9d db 93 0b 0d 11 b9 d9 0b 14 45 c1 60 30 02 d0 d2 d2 ca d2 a5 1f 12 19 19 4d 4b ab 05 8d e6 e4 52 56 51 bc 1e 97 0b b4 34 09 04 02 81 e0 ac e2 6d 43 2e e4 66 44 cc fc da 0b 8c 46 23 2d 2d ad 3c fe f8 bf 71 ed b5 57 f3 c9 27 cb a9 ad a9 24 2e 6e 08 b2 dc 7d 69 b9 d0 c4 c8 85 76 3d 02 81 e0 e2 e0 42 89 d9 f0 d6 c1 17 ca f5 74 46 78 4c 7a 88 46 a3 41 96 dd 3c fc f0 6f d9 ba ed 3b 36 7f fb 1d bf fb cd 63 18 8d be e8 74 da 13 1a ec c1 ee 21 f9 59 9d 77 fd 11 08 04 82 c1 c8 c9 ea b4 c1 5a af 0d 66 db 4f 86 f0 98 f4 10 45 01 93 c9 80 d5 da 48 46 fa 70 f6 ed dd 8d d1 60 24 20 c0 1f 59 96 8f 4b 3b 38 0b cb 60 b5 5b 20 10 08 fa c2 60 f6 42 28 8a 32 28 ed ee 0e e1 31 e9 21 8a a2 a0 d7 eb f1 f3 f3 c3 ed Data Ascii: l6!I?!AO=E`0MKRVQ4mC.fDF#--<qW'$.n}iv=BtFxLzFA<o;6ct!YwZfOEHFp`$ YK;8`[ `B(2(1!
2024-04-25 18:47:26 UTC	538	IN	Data Raw: f1 8f 7f a0 28 0a 95 55 55 5c f5 cb 5f b2 79 f3 66 00 56 ad 5e cd e2 c5 8b f9 fa eb af 79 e4 e1 87 99 3d 7b 36 cf fe f9 cf ec dc b9 93 17 5f 7a 89 98 98 18 b6 fc f8 23 ff fd df ff cd 27 9f 7e 4a 56 56 16 4f 3c f1 04 53 a6 4c e1 b3 15 2b 88 8c 88 a0 b9 a9 89 b6 b6 36 fe f8 a7 3f 91 9e 96 46 ce b6 6d bc f0 c2 0b 3c ff 9f ff c9 de bd 7b 71 bb dd f8 99 cd 7c f4 e1 87 dc be 70 21 6f bf fd f6 79 e1 0e 16 08 04 5d f1 7a 9c 57 ad 5a 45 6d 6d 2d f3 e7 cf 67 58 4a 0a 37 de 78 23 3f fe f0 03 3b 76 ec 10 f1 7c 3d 40 08 93 0b 0c 59 96 89 8e 8e 26 32 22 82 90 90 10 1c 76 3b 46 a3 91 9b 6f be 99 9a 9a 1a be fd f6 5b 22 22 22 30 99 4c 28 8a 82 56 ab 45 a3 d1 10 16 16 46 62 42 02 bb 76 ed a2 b0 b0 10 1f 1f 1f e8 65 7f a4 5e af c7 df cf 8f da ba ba 2e db 77 ed da c5 b6 6d Data Ascii: (UU\_yfV^y={6_z#'~JVVO<SL+6?Fm<{q\|p!oy]zWZEmm-gXJ7x#?;v\|=@Y&2"v;Fo["""0L(VEFbBve^.wm
2024-04-25 18:47:26 UTC	4744	IN	Data Raw: 30 b9 40 e8 3c f9 8e db ed c6 e5 72 e1 76 bb d1 68 b5 b4 b6 b4 50 5c 5c cc f4 19 33 c8 ce ce 66 e5 ca 95 54 54 54 a0 91 24 5a 5b 5b 91 24 89 9d 3b 77 b2 69 d3 26 2e b9 e4 12 d2 d2 d2 70 b9 5c bd 0e 94 f2 f1 f1 e1 c6 79 f3 78 f5 7f ff 97 9d 3b 77 02 b0 63 c7 0e 6e 98 3b 97 bd fb f6 e1 eb eb 8b 56 a7 c3 6e b7 03 90 96 96 46 6a 6a 2a 2b 96 2f e7 cd d7 5f 67 f2 e4 c9 18 0c 06 7e 75 f7 dd 18 8c 46 1e 7c f0 41 22 23 23 b1 da 6c de 8b a5 ae b6 16 14 85 94 61 c3 88 8a 8c e4 d5 57 5f e5 b3 e5 cb b9 ee ba eb c8 1c 39 52 b5 65 d4 a8 51 7c f5 d5 57 d4 d4 d4 70 f8 f0 61 6e be f9 66 aa ab ab c9 ca ca e2 a3 8f 3e c2 6e b7 f3 f9 ca 95 34 36 36 92 96 96 86 c3 e1 50 ed b2 db ed ea e4 48 b2 2c 63 eb 38 bf c3 e1 c0 60 30 90 92 92 42 f2 d0 a1 7c b8 6c 19 ef bd fb 2e 93 a7 4c Data Ascii: 0@<rvhP\\3fTTT$Z[[$;wi&.p\yx;wcn;VnFjj*+/_g~uF\|A"##laW_9ReQ\|Wpanf>n466PH,c8`0B\|l.L
2024-04-25 18:47:26 UTC	5930	IN	Data Raw: 6a b5 34 35 35 b1 63 c7 0e ca 2b 2a d8 b6 6d 1b ed 56 6b af bb 80 74 3a 1d 99 99 99 fc 73 f1 62 ac 56 2b d7 5e 7b 2d e9 e9 e9 18 8d 46 5a 5a 5a d4 ca 71 fc b8 71 bc f2 ca 2b 04 07 05 61 36 9b 19 9a 9c 4c 5c 6c 2c 37 cf 9b 47 52 72 b2 1a 2f e2 76 bb f9 fa eb af b9 74 c2 04 ae be fa 6a 2c ed ed 5d 46 61 74 8e b3 70 bb 5c d4 d4 d4 f0 e3 96 2d cc 9e 35 8b f1 13 26 50 5f 5f 8f cd 66 53 47 36 78 47 5f 78 3f 5b 2c 16 e2 e2 e2 48 4c 4c 64 c6 8c 19 9e 78 05 45 e9 12 9f e3 76 bb 29 2d 2d 25 29 29 89 a2 a2 22 0a 0b 0b 29 eb 88 11 48 ef f4 b6 a9 d5 6a a9 3a 76 0c 97 cb 85 dd 6e 57 af d5 d6 51 c9 bb 65 99 fa fa 7a 76 ec d8 c1 0d 73 e6 10 12 12 c2 ca 55 ab 80 9f 57 8a f6 5e 8b d5 6a c5 cf cf 8f e4 a4 24 32 33 33 b9 e5 96 5b f0 f7 f7 47 ab d5 92 32 74 28 9f 7c fa 29 e9 Data Ascii: j455c+*mVkt:sbV+^{-FZZZqq+a6L\l,7GRr/vtj,]Fatp\-5&P__fSG6xG_x?[,HLLdxEv)--%))")Hj:vnWQezvsUW^j$233[G2t(\|)
2024-04-25 18:47:26 UTC	7116	IN	Data Raw: 56 92 8e 0b 1f 3c 1b f1 25 27 35 b8 fb 6d 67 d4 8c f4 25 98 f5 04 1b fa 5f 9c 08 61 72 16 91 00 59 55 26 9e 87 27 39 ec c8 76 1b 68 24 cf e2 7d 2e 05 6c 36 24 97 93 be 0d 1c a6 db 89 85 4e be 80 20 1d 0b 08 9e b8 ff 6c 2f 28 a8 d5 e9 88 8c 8c 64 c8 90 21 5d b6 bf f7 cf 7f 72 f0 e0 41 32 d2 d3 89 8b 8d 65 c5 67 9f d1 dc d4 84 d3 e5 62 c7 f6 ed dc 7f ff fd ac 5b bf 9e bc bc 3c 7c 8c 46 be fd ee 3b 7e ff c4 13 b8 5d 2e fe f5 af 7f 31 7c f8 70 f6 1f 38 c0 9c 39 73 98 31 7d 3a 01 81 81 c4 c5 c5 31 24 26 06 a7 d3 49 f2 d0 a1 f8 f9 f9 51 5f 5f cf cb 2f bf 4c 40 60 20 96 b6 36 be fd f6 5b 1e 7f fc 71 8a 8b 8b f9 db df fe 46 64 64 24 b5 b5 b5 64 64 64 f0 eb 5f ff 1a 8d 46 83 bf bf 3f 65 65 65 bc f6 da 6b 3c f8 d0 43 e4 e4 e4 b0 7c c5 0a 42 43 42 58 fb e5 97 3c f6 Data Ascii: V<%'5mg%_arYU&'9vh$}.l6$N l/(d!]rA2egb[<\|F;~].1\|p89s1}:1$&IQ__/L@` 6[qFdd$ddd_F?eeek<C\|BCBX<
2024-04-25 18:47:26 UTC	8302	IN	Data Raw: 71 e8 f2 3c 88 cb 8a b1 d0 5d 6b 43 b9 e2 2f b5 4a 0f b5 de 21 9a 02 69 dc 26 d0 8a 20 08 09 82 80 c0 f7 86 c9 3c 24 d9 42 67 a4 a1 78 bc 62 a5 ba 5c ae a3 70 ae 2a 5f 39 cf 71 43 ed dd 61 01 81 08 26 6e 67 fe b1 ae 95 c8 8a be 6d 28 59 b2 83 84 c0 5a eb 3d 22 a1 63 fe 66 a7 ab 03 95 28 51 a2 44 89 6d e3 56 c9 49 d7 b1 32 6f 8b b3 a7 81 0e bc 7d b5 84 41 c8 b9 f9 2b 2c b7 d7 08 95 b3 69 4b f1 aa f3 6a a0 d0 3a ab 53 92 17 3b df 90 d8 91 25 e2 a2 14 62 9d 7d 1c ee ed a3 3f a8 92 b4 db 4e 72 a1 03 42 ad 9d 0c 43 3b 22 a2 7d 08 47 df e9 ee c2 9b ad 87 88 a2 aa 35 55 ad 59 35 09 0a c5 72 6b b5 93 9b e2 0d b4 ce 64 a1 59 63 a1 a2 46 43 0a de 07 bf 8f f6 69 bd c6 a6 0c d7 06 d8 d3 3f 8a 4a 2d 89 24 44 51 44 e0 5d 45 5a 6b 94 76 8b a0 7d 7d 92 2c f5 c9 9f 38 1b Data Ascii: q<]kC/J!i& <$Bgxb\p*_9qCa&ngm(YZ="cf(QDmVI2o}A+,iKj:S;%b}?NrBC;"}G5UY5rkdYcFCi?J-$DQD]EZkv}},8
2024-04-25 18:47:26 UTC	3101	IN	Data Raw: 98 91 51 a7 2f 89 5b ce d0 37 9b c2 e9 13 96 34 75 e1 9a cf fe 59 c2 b7 7f 57 44 9a ba 26 8c 71 5b 88 5b 70 f6 b4 db 27 08 5d 48 ed ec 69 4b ab 05 bf fb 1f 63 7e e4 27 2a fc c3 7f 52 65 69 51 f8 ea 0b 86 34 15 3e f5 9f 13 7a 7b 15 3f f6 b1 0a d6 c0 f9 73 96 ff f2 7b 09 61 78 73 8c 57 04 46 c7 ee d1 d8 5a 89 12 3b 82 1b f9 ee 5c c7 c3 72 5d 72 92 bb 49 72 65 67 87 f0 64 f2 83 62 81 35 e9 ba 30 57 28 94 b7 a5 92 85 7a d6 1d 5d 6b cd f4 f4 34 97 2f 5f ee 7e ed f7 7f ff f7 77 0f 4d 29 4c dc 22 5d 9c be 7d e9 48 db 40 36 b9 2c 73 45 44 1c 83 52 01 61 bd 1f 31 a9 0f 91 a8 4e f8 23 bb 77 03 47 50 84 41 c0 a9 37 ce f3 c6 85 cb 84 e1 d6 57 ec 45 b7 d1 b5 90 11 11 70 35 4a 8e 1e 3d 4a 4f 4f 0f 2f bd f4 12 00 83 83 83 bc e7 3d ef 21 49 12 be f4 a5 2f d1 68 34 b6 0c Data Ascii: Q/[74uYWD&q[[p']HiKc~'*ReiQ4>z{?s{axsWFZ;\r]rIregdb50W(z]k4/_~wM)L"]}H@6,sEDRa1N#wGPA7WEp5J=JOO/=!I/h4
2024-04-25 18:47:26 UTC	10674	IN	Data Raw: ca 06 21 6c 11 b7 fd 9b 5f 24 24 1d 82 21 08 1a 8b 22 55 15 12 ab 49 88 48 8c c2 78 22 e2 5c 3e dd 72 9e 8c c6 88 2f f4 61 f3 e3 fa a7 15 be f7 9d b8 63 5a 4d a4 52 b7 bf df d9 88 30 39 3e 46 b3 dd e6 d2 95 19 74 a0 d1 79 28 65 0b 78 f2 92 a6 29 a7 4f 9f 06 c8 fb ea 6c 17 59 bd 94 c3 fb f7 d0 d7 5b c7 a4 d6 cf 41 fc d0 05 51 da 89 87 ae d1 91 f8 fa 15 4e ca fa 00 00 20 00 49 44 41 54 e7 71 e5 c1 b7 a3 2d 49 53 d7 37 e6 e1 c7 02 a6 f6 80 b5 0a a5 85 af bd 90 32 3e a1 d9 bd 4f a1 94 e5 d4 09 cb d8 b8 eb a5 72 7b a1 a9 56 6b 3c f5 74 c2 db 1e 89 39 7b aa c5 a9 13 8a 57 be a9 a9 d5 02 c2 50 a1 b6 f0 6a dd 0b 10 eb ea e4 34 9b 96 30 32 4c ec 16 3e f8 84 62 70 a8 02 dc 9e 62 2d cf bc 2f e0 6d 8f 68 fe ec 8f 52 9e ff 9c 61 e6 aa 45 2b 21 aa ba 94 f0 7b 4d 43 74 Data Ascii: !l_$$!"UIHx"\>r/acZMR09>Fty(ex)OlY[AQN IDATq-IS72>Or{Vk<t9{WPj402L>bpb-/mhRaE+!{MCt
2024-04-25 18:47:26 UTC	11860	IN	Data Raw: 37 50 a8 1a 2d 1e d8 2f 03 30 76 2b c7 7e 69 af 9a 4e 2b 57 53 28 db c6 db 16 2c 56 d5 5a 9a df 47 f3 84 c6 8c 26 1e a9 7b 95 69 bf 24 c4 e3 68 7f 14 f4 89 d4 02 a2 59 b1 12 b4 b5 18 6b e9 4b b5 7d d8 52 4d 44 aa b2 4f e6 1c 83 43 89 f2 29 2d 9e 54 bc 5c b7 b7 44 e3 69 62 0b bf 7f 1f 3b 98 b7 77 58 bd 6e a1 10 d6 e2 8e e7 f6 f6 21 6b b0 d9 c8 a5 17 78 ca d6 cb 0e 16 a5 82 65 40 ca 7c 5d 73 55 f9 07 3f af 38 ff 60 ba 13 a5 48 b0 d8 8d 75 f7 4a 57 5b ff 3d 2e f1 8d a3 40 f7 2a 45 2a de c7 2e 46 6f b5 0c da 2a de 8c 13 0b 94 5d 3e 89 ca 1b 7f e0 9a 2d 92 6f fe fb d2 aa 55 7e e2 9e 2d 91 c5 ba 4c 7b 97 59 f3 44 3d 64 e2 cd b4 4f 9a 3c d7 0c 0b bc d6 e4 ed f0 63 d7 f4 5f 89 29 a3 b2 bc cc 72 ce b4 7e 6e 0d 6f c9 39 d4 5d 85 10 d7 12 49 cf f8 cd 68 fe f2 3e 1b Data Ascii: 7P-/0v+~iN+WS(,VZG&{i$hYkK}RMDOC)-T\Dib;wXn!kxe@\|]sU?8`HuJW[=.@E.Fo*]>-oU~-L{YD=dO<c_)r~no9]Ih>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49729	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:26 UTC	906	OUT	GET /en-us/sharefile/media/catalog-1d.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:26 UTC	520	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 21006 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:26 GMT Etag: "ff4ebd0120b55db59cd9d22165eae15e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9AYVST205V4C03XBSBKKC X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:26 UTC	666	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 52 08 06 00 00 00 2e 15 a1 27 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 23 12 c2 cc 25 ac 00 00 20 00 49 44 41 54 78 9c ec dd 77 9c 54 e5 dd ff ff d7 39 d3 67 7b af 2c b0 f4 de 15 90 80 14 41 b1 a3 46 c5 12 4b 9a 89 31 96 fb 4e 7e de 49 fc e6 ce 9d 98 dc c9 1d 6b 9a 31 58 62 37 8a 35 8a 62 a1 8b 28 45 a4 f7 65 77 61 d9 85 65 eb f4 39 e7 f7 c7 2e 0b 28 2a c2 ea ce c2 fb f9 78 f8 70 ca 29 9f 19 66 66 df e7 ba ae 73 1d c3 8e 87 ec b2 bd 61 66 7f dc cc e6 5a 0b cb 06 03 11 11 11 11 39 2a 06 84 a2 36 5d 52 4c 2e 1e e2 67 70 b1 0f 63 cd ce 5a 7b ea ac fd ec aa b6 c0 a9 68 25 22 22 22 72 4c 62 36 be 64 83 37 ae 4f c7 f8 e6 c3 3b ec 67 Data Ascii: PNGIHDRXR.'pHYsttfxtIME#% IDATxwT9g{,AFK1N~Ik1Xb75b(Eewae9.(xp)ffsafZ96]RL.gpcZ{h%"""rLb6d7O;g
2024-04-25 18:47:26 UTC	2372	IN	Data Raw: e2 ee 64 fa 64 c4 a9 f6 8e 01 d3 02 ab a3 8b 13 11 11 11 39 3a 89 15 b0 e2 11 1a fd 25 cc 8f 94 60 10 a0 ae 6e 2b f8 4c 9d 31 28 22 22 22 9d 4a 62 05 2c 6c 70 ba c0 61 60 db 6e d6 58 a7 80 23 06 b6 9a af 44 44 44 a4 f3 48 b0 80 45 cb ec c1 76 6b 93 95 69 a9 f5 4a 44 44 44 3a 9d 84 1b e4 2e 22 22 22 d2 d9 29 60 89 88 88 88 b4 b3 c4 eb 22 04 5d 60 54 a4 03 6d dd 1b 65 7b 6d 8c e6 a8 85 75 14 5d f4 b6 05 05 69 0e c6 74 f5 7e f5 c5 89 88 74 12 89 19 b0 44 e4 6b f7 c6 c6 00 f7 2e ac 67 fe d6 10 81 e6 f8 d1 1f e8 04 2c a6 8f 49 e5 df d7 e5 7f a5 f5 89 88 74 26 0a 58 22 27 b9 98 65 73 e3 0b 7b 79 60 41 7d cb 7c 73 26 b4 35 5d 39 0d 70 18 10 fe c4 99 bc 5e 13 4c a3 e5 24 94 38 78 5d 6a 76 16 11 39 94 02 96 c8 49 ee c6 17 f7 f1 c0 9b 75 90 e2 80 98 cd b9 43 93 b8 Data Ascii: dd9:%`n+L1("""Jb,lpa`nX#DDDHEvkiJDDD:.""")`"]`Tme{mu]it~tDk.g,It&X"'es{y`A}\|s&5]9p^L$8x]jv9IuC
2024-04-25 18:47:26 UTC	538	IN	Data Raw: b9 ed b6 db f8 ed 6f 7f 4b 28 14 62 c0 80 01 f4 ea d5 0b 80 fb ee bb 8f b2 b2 32 5e 7a e9 25 1e 7a e8 21 6e bc f1 46 1e 7a e8 21 b2 b3 b3 f9 ef ff fe 6f ce 38 e3 8c e3 78 f7 45 a4 33 33 52 7e b6 d5 6e 0c a3 2b 5e 88 1c ab 90 cd 5d e7 98 dc 32 b5 2b 9d a9 d7 fd e7 73 6a f9 cd 2b fb 5a e6 b5 3a 20 60 71 fb d9 99 dc 79 56 26 00 cf 7f dc c4 c5 ff a8 3a bc 05 eb 00 03 68 8c 33 69 68 32 6f 7d a7 e0 53 83 e6 2d cb 22 1a 8d e2 72 b9 30 cd 83 ef cb a1 63 a4 0e 7d 1c a0 aa aa 0a 97 cb 45 56 56 d6 61 8f 37 35 35 51 55 55 45 51 51 11 3e 9f 0f db b6 89 46 a3 6d 83 d9 a1 a5 8b d0 b6 6d 1c 0e 07 96 65 b5 85 43 a7 f3 c8 c7 91 b1 58 8c 1d 3b 76 90 93 93 73 c4 f9 aa 6c db 66 db b6 6d a4 a7 a7 b7 d5 63 db 36 96 d5 72 16 a5 c3 e1 68 7b 2c 10 08 90 94 94 84 65 59 d4 d6 d6 e2 Data Ascii: oK(b2^z%z!nFz!o8xE33R~n+^]2+sj+Z: `qyV&:h3ih2o}S-"r0c}EVVa755QUUEQQ>FmmeCX;vslfmc6rh{,eY
2024-04-25 18:47:26 UTC	4744	IN	Data Raw: 91 4e 42 01 4b 44 44 44 a4 9d 29 60 89 88 88 88 b4 33 05 2c 11 11 11 91 76 a6 80 25 22 22 22 d2 ce 14 b0 44 44 44 44 da 99 02 96 88 88 88 48 3b 53 c0 12 11 11 11 69 67 0a 58 22 22 22 22 ed 4c 01 4b 44 44 44 a4 9d 29 60 89 88 88 88 b4 33 05 2c 11 11 11 91 76 a6 80 25 22 22 22 d2 ce 14 b0 44 44 44 44 da 99 b3 a3 0b 10 91 8e b1 ec bd f9 ec f7 14 32 6d 78 af e3 da ce c2 37 e7 e1 2a ea c5 e8 01 45 9f bb 9c 1d 8f d2 10 08 93 96 92 fc c5 1b b5 9a f9 d5 af 1e a0 a2 21 86 e1 36 21 60 73 d9 75 97 33 71 68 f1 97 ae af 61 cf 76 5e 59 b6 99 2b ce 9d 7a d8 e3 1f 2d 9a cf 1f fe f9 2e 49 19 29 10 8f 52 d8 b3 27 37 5f 33 83 34 ef d1 1f 77 ce 7e 61 0e 7d 47 8f a5 7f 41 ea 97 ae 4b 44 4e 6c 0a 58 22 27 a9 5d 95 65 ec f6 f9 8e f8 9c 65 83 69 1c fe 98 6d db 44 1b aa f9 d7 82 Data Ascii: NBKDDD)`3,v%"""DDDDH;SigX""""LKDDD)`3,v%"""DDDD2mx7*E!6!`su3qhav^Y+z-.I)R'7_34w~a}GAKDNlX"']eeimD
2024-04-25 18:47:26 UTC	5930	IN	Data Raw: 39 c9 59 79 58 c1 46 36 6f 2d c7 95 91 af 80 25 22 f2 15 51 c0 12 49 64 86 93 68 a8 99 0f d6 6c a5 7b ef 52 82 75 75 34 34 34 f0 d1 47 75 98 76 0c 77 5a 26 d1 c6 5a ca 76 ef a7 a7 c7 8b 1d 6c 60 ed ae 3d 84 2d 17 85 59 5e 6a a3 3e c6 0f ef ce e2 85 ef d1 e8 4a 65 64 7a 1a 65 7b c3 0c 1f d4 83 f5 bb 02 1d fd ea 44 44 4e 58 1a 83 25 92 c8 ec 18 2e af 9f 53 46 0d 62 68 df 42 2a ab ea 28 c8 cd 20 12 8d d3 ad 7b 17 62 8d fb a8 aa 0f d1 ab 7b 01 db b7 ef c4 eb 75 d3 14 35 49 72 c6 08 38 92 49 f7 d8 54 d5 d4 e3 f5 f9 48 4d f6 93 9e 9a 4c 3c 12 a4 aa a6 96 48 2c de d1 af 4e 00 6c d8 52 5e cf 82 0d fb 69 0c 44 a9 d8 17 ea e8 8a 44 a4 1d a8 05 4b 24 91 39 fc 8c 1a 35 88 64 a7 09 24 31 66 64 3f f6 36 04 19 37 b6 98 78 24 84 a7 df 40 72 d2 bd 54 d7 d4 31 66 74 09 f9 Data Ascii: 9YyXF6o-%"QIdhl{Ruu444GuvwZ&Zvl`=-Y^j>Jedze{DDNX%.SFbhB*( {b{u5Ir8ITHML<H,NlR^iDDK$95d$1fd?67x$@rT1ft
2024-04-25 18:47:26 UTC	6756	IN	Data Raw: dd de 96 75 9c 2d 3f 45 2e b7 fb b0 ed 9a 66 eb 4f 94 61 b6 1c 03 3a 5d 1c 58 3b b7 a0 e0 b0 65 bd 9e 96 75 cd 43 96 01 f0 f8 7c 9c 31 f9 4c 32 f2 bb 91 e4 02 88 73 e6 d4 e9 14 77 2d 6c fb 01 f4 fb 7c 00 38 3c c9 74 eb aa c1 ed 22 72 fc 14 b0 44 3a a1 92 92 12 9e 79 e6 19 7e f2 93 9f 90 97 97 47 8f 1e 3d 58 b2 64 09 25 25 25 fc f9 cf 7f 6e 0b 2c 1d a9 5b 9f c1 74 eb 33 b8 a3 cb 00 a0 b8 4b b7 43 ee 39 e8 d6 b5 6b 47 95 22 22 27 89 8e ff 15 16 91 63 32 6d da 34 a6 4e 9d 8a 61 a8 7f 5f 44 24 d1 e8 3c 19 91 4e 4c e1 4a 44 24 31 29 60 89 88 88 88 b4 33 05 2c 91 04 f1 65 ae c9 27 72 24 fa 0c 89 24 0e 8d c1 12 49 00 5e 8f 0b cb b2 d9 b4 b5 9c a2 82 af eb 3a 82 72 22 a9 d8 5d 83 6d b7 7c 96 44 a4 e3 29 60 89 24 00 d3 34 99 30 7a 08 8b 3f 5c c3 fa 2d 3b 31 4d 8d Data Ascii: u-?E.fOa:]X;euC\|1L2sw-l\|8<t"rD:y~G=Xd%%%n,[t3KC9kG""'c2m4Na_D$<NLJD$1)`3,e'r$$I^:r"]m\|D)`$40z?\-;1M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49732	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:26 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 18:47:26 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=130582 Date: Thu, 25 Apr 2024 18:47:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 18:47:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49733	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	831	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:27 UTC	550	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 1038460 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/javascript; charset=UTF-8 Date: Thu, 25 Apr 2024 18:47:27 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9AZPF70K8BDZ5E0P7DWDF X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:27 UTC	636	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 31 39 31 37 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 22 75 73 65 72 41 67 65 6e 74 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 26 26 76 6f Data Ascii: /! For license information please see bundle.js.LICENSE.txt /(function(){var __webpack_modules__={19172:function(e,t,n){"use strict";function r(){return"object"==typeof navigator&&"userAgent"in navigator?navigator.userAgent:"object"==typeof process&&vo
2024-04-25 18:47:27 UTC	2372	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 72 3d 3e 7b 61 28 74 5b 72 5d 29 3f 72 20 69 6e 20 65 3f 6e 5b 72 5d 3d 73 28 65 5b 72 5d 2c 74 5b 72 5d 29 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6e 2c 7b 5b 72 5d 3a 74 5b 72 5d 7d 29 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6e 2c 7b 5b 72 5d 3a 74 5b 72 5d 7d 29 7d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 65 29 76 6f 69 64 20 30 3d 3d 3d 65 5b 74 5d 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 3b 72 65 74 75 72 6e 20 65 7d 66 Data Ascii: rototypeOf"))}function s(e,t){const n=Object.assign({},e);return Object.keys(t).forEach((r=>{a(t[r])?r in e?n[r]=s(e[r],t[r]):Object.assign(n,{[r]:t[r]}):Object.assign(n,{[r]:t[r]})})),n}function l(e){for(const t in e)void 0===e[t]&&delete e[t];return e}f
2024-04-25 18:47:27 UTC	538	IN	Data Raw: 6e 20 69 7d 28 74 2c 65 2c 72 5b 31 5d 2c 72 5b 32 5d 7c 7c 72 5b 33 5d 29 29 7d 29 29 2c 65 26 26 22 2b 22 21 3d 3d 65 29 7b 76 61 72 20 69 3d 22 2c 22 3b 72 65 74 75 72 6e 22 3f 22 3d 3d 3d 65 3f 69 3d 22 26 22 3a 22 23 22 21 3d 3d 65 26 26 28 69 3d 65 29 2c 28 30 21 3d 3d 6f 2e 6c 65 6e 67 74 68 3f 65 3a 22 22 29 2b 6f 2e 6a 6f 69 6e 28 69 29 7d 72 65 74 75 72 6e 20 6f 2e 6a 6f 69 6e 28 22 2c 22 29 7d 72 65 74 75 72 6e 20 70 28 6f 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 6c 65 74 20 74 2c 6e 3d 65 2e 6d 65 74 68 6f 64 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 72 3d 28 65 2e 75 72 6c 7c 7c 22 2f 22 29 2e 72 65 70 6c 61 63 65 28 2f 3a 28 5b 61 2d 7a 5d 5c 77 2b 29 2f 67 2c 22 7b 24 31 7d 22 29 2c 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 Data Ascii: n i}(t,e,r[1],r[2]\|\|r[3]))})),e&&"+"!==e){var i=",";return"?"===e?i="&":"#"!==e&&(i=e),(0!==o.length?e:"")+o.join(i)}return o.join(",")}return p(o)}))}function b(e){let t,n=e.method.toUpperCase(),r=(e.url\|\|"/").replace(/:([a-z]\w+)/g,"{$1}"),o=Object.assi
2024-04-25 18:47:27 UTC	4744	IN	Data Raw: 28 65 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 61 2e 69 6e 63 6c 75 64 65 73 28 65 29 29 29 2e 63 6f 6e 63 61 74 28 22 62 61 73 65 55 72 6c 22 29 29 3b 69 66 28 21 2f 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 2f 69 2e 74 65 73 74 28 6f 2e 61 63 63 65 70 74 29 26 26 28 65 2e 6d 65 64 69 61 54 79 70 65 2e 66 6f 72 6d 61 74 26 26 28 6f 2e 61 63 63 65 70 74 3d 6f 2e 61 63 63 65 70 74 2e 73 70 6c 69 74 28 2f 2c 2f 29 2e 6d 61 70 28 28 74 3d 3e 74 2e 72 65 70 6c 61 63 65 28 2f 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 76 6e 64 28 5c 2e 5c 77 2b 29 28 5c 2e 76 33 29 3f 28 5c 2e 5c 77 2b 29 3f 28 5c 2b 6a 73 6f 6e 29 3f 24 2f 2c 60 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 24 31 24 32 2e 24 7b 65 2e 6d 65 64 69 61 54 79 70 65 2e 66 Data Ascii: (e).filter((e=>a.includes(e))).concat("baseUrl"));if(!/application\/octet-stream/i.test(o.accept)&&(e.mediaType.format&&(o.accept=o.accept.split(/,/).map((t=>t.replace(/application\/vnd(\.\w+)(\.v3)?(\.\w+)?(\+json)?$/,`application/vnd$1$2.${e.mediaType.f
2024-04-25 18:47:27 UTC	5930	IN	Data Raw: 3d 6e 2e 64 61 74 61 2c 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 26 26 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 7d 2c 4c 3d 5b 22 6d 65 74 68 6f 64 22 2c 22 62 61 73 65 55 72 6c 22 2c 22 75 72 6c 22 2c 22 68 65 61 64 65 72 73 22 2c 22 72 65 71 75 65 73 74 22 2c 22 71 75 65 72 79 22 2c 22 6d 65 64 69 61 54 79 70 65 22 5d 2c 50 3d 5b 22 71 75 65 72 79 22 2c 22 6d 65 74 68 6f 64 22 2c 22 75 72 6c 22 5d 2c 6a 3d 2f 5c 2f 61 70 69 5c 2f 76 33 5c 2f 3f 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 65 2e 64 65 66 61 75 6c 74 73 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 Data Ascii: =n.data,Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)}},L=["method","baseUrl","url","headers","request","query","mediaType"],P=["query","method","url"],j=/\/api\/v3\/?$/;function z(e,t){const n=e.defaults(t);return Object.assign(
2024-04-25 18:47:27 UTC	7116	IN	Data Raw: 6b 65 72 22 2c 22 6d 61 73 6b 22 2c 22 6d 65 74 61 64 61 74 61 22 2c 22 6d 70 61 74 68 22 2c 22 70 61 74 68 22 2c 22 70 61 74 74 65 72 6e 22 2c 22 70 6f 6c 79 67 6f 6e 22 2c 22 70 6f 6c 79 6c 69 6e 65 22 2c 22 72 61 64 69 61 6c 67 72 61 64 69 65 6e 74 22 2c 22 72 65 63 74 22 2c 22 73 74 6f 70 22 2c 22 73 74 79 6c 65 22 2c 22 73 77 69 74 63 68 22 2c 22 73 79 6d 62 6f 6c 22 2c 22 74 65 78 74 22 2c 22 74 65 78 74 70 61 74 68 22 2c 22 74 69 74 6c 65 22 2c 22 74 72 65 66 22 2c 22 74 73 70 61 6e 22 2c 22 76 69 65 77 22 2c 22 76 6b 65 72 6e 22 5d 29 2c 4d 3d 69 28 5b 22 66 65 42 6c 65 6e 64 22 2c 22 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 22 2c 22 66 65 43 6f 6d 70 6f 6e 65 6e 74 54 72 61 6e 73 66 65 72 22 2c 22 66 65 43 6f 6d 70 6f 73 69 74 65 22 2c 22 66 65 43 Data Ascii: ker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),M=i(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feC
2024-04-25 18:47:27 UTC	8302	IN	Data Raw: 7b 7d 3b 6e 2e 69 73 53 75 70 70 6f 72 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 65 26 26 61 65 26 26 76 6f 69 64 20 30 21 3d 3d 61 65 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 26 26 39 21 3d 3d 64 65 3b 76 61 72 20 70 65 3d 7a 2c 68 65 3d 42 2c 6d 65 3d 71 2c 76 65 3d 46 2c 67 65 3d 48 2c 79 65 3d 55 2c 62 65 3d 5f 2c 77 65 3d 6e 75 6c 6c 2c 6b 65 3d 43 28 7b 7d 2c 5b 5d 2e 63 6f 6e 63 61 74 28 57 28 53 29 2c 57 28 41 29 2c 57 28 4d 29 2c 57 28 4e 29 2c 57 28 52 29 29 29 2c 78 65 3d 6e 75 6c 6c 2c 43 65 3d 43 28 7b 7d 2c 5b 5d 2e 63 6f 6e 63 61 74 28 57 28 44 29 2c 57 28 4c 29 2c 57 28 50 29 2c 57 28 6a 29 29 29 2c 54 65 3d 6e 75 6c 6c 2c 45 65 3d 6e 75 6c 6c 2c 53 65 3d 21 30 2c 41 65 3d 21 30 2c 4d 65 3d 21 Data Ascii: {};n.isSupported="function"==typeof te&&ae&&void 0!==ae.createHTMLDocument&&9!==de;var pe=z,he=B,me=q,ve=F,ge=H,ye=U,be=_,we=null,ke=C({},[].concat(W(S),W(A),W(M),W(N),W(R))),xe=null,Ce=C({},[].concat(W(D),W(L),W(P),W(j))),Te=null,Ee=null,Se=!0,Ae=!0,Me=!
2024-04-25 18:47:27 UTC	6188	IN	Data Raw: 66 65 5b 65 5d 2c 74 29 29 7d 2c 6e 2e 72 65 6d 6f 76 65 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 65 5b 65 5d 26 26 70 28 66 65 5b 65 5d 29 7d 2c 6e 2e 72 65 6d 6f 76 65 48 6f 6f 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 65 5b 65 5d 26 26 28 66 65 5b 65 5d 3d 5b 5d 29 7d 2c 6e 2e 72 65 6d 6f 76 65 41 6c 6c 48 6f 6f 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 65 3d 7b 7d 7d 2c 6e 7d 28 29 7d 28 29 7d 2c 39 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 32 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 2c 69 3b 69 66 28 6e 3d 6e 7c 7c 30 2c 21 72 28 74 29 29 72 65 74 75 72 6e 2d 31 3b 69 66 28 41 72 72 61 79 Data Ascii: fe[e],t))},n.removeHook=function(e){fe[e]&&p(fe[e])},n.removeHooks=function(e){fe[e]&&(fe[e]=[])},n.removeAllHooks=function(){fe={}},n}()}()},928:function(e,t,n){"use strict";var r=n(322);e.exports=function(e,t,n){var o,i;if(n=n\|\|0,!r(t))return-1;if(Array
2024-04-25 18:47:27 UTC	10674	IN	Data Raw: 65 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 38 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 37 38 35 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 33 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 73 7d 7d 2c 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 74 3d 63 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 63 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6c 5b 65 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e Data Ascii: e.exports=o},814:function(e){"use strict";e.exports=i},785:function(e){"use strict";e.exports=a},311:function(e){"use strict";e.exports=s}},c={};function u(e){var t=c[e];if(void 0!==t)return t.exports;var n=c[e]={exports:{}};return l[e].call(n.exports,n,n
2024-04-25 18:47:27 UTC	11860	IN	Data Raw: 65 2c 6f 3d 65 2e 63 6f 6f 72 64 73 41 74 50 6f 73 28 74 2e 70 6f 73 29 2c 69 3d 6f 2e 74 6f 70 2c 61 3d 6f 2e 6c 65 66 74 2c 73 3d 6f 2e 62 6f 74 74 6f 6d 2d 69 2c 6c 3d 74 68 69 73 2e 72 6f 6f 74 45 6c 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 63 3d 69 2d 6c 2e 74 6f 70 3b 70 28 29 28 6e 2c 7b 6f 70 61 63 69 74 79 3a 22 30 22 7d 29 2c 74 68 69 73 2e 72 6f 6f 74 45 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 70 28 29 28 6e 2c 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6c 65 66 74 3a 61 2d 6c 2e 6c 65 66 74 2b 35 2b 22 70 78 22 2c 74 6f 70 3a 28 22 62 6f 74 74 6f 6d 22 3d 3d 3d 72 3f 63 2b 73 2d 35 3a 63 2d 73 29 2b 22 70 78 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 7d 29 2c 74 68 69 73 2e 70 6f 70 Data Ascii: e,o=e.coordsAtPos(t.pos),i=o.top,a=o.left,s=o.bottom-i,l=this.rootEl.getBoundingClientRect(),c=i-l.top;p()(n,{opacity:"0"}),this.rootEl.appendChild(n),p()(n,{position:"absolute",left:a-l.left+5+"px",top:("bottom"===r?c+s-5:c-s)+"px",opacity:"1"}),this.pop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49735	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	606	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:27 UTC	517	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 9669 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 11836 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: font/ttf Date: Thu, 25 Apr 2024 18:47:27 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B03VRPT2V4AM8E7WPQXS X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:27 UTC	669	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 03 c2 00 00 00 bc 00 00 00 60 63 6d 61 70 ca 98 cb 1b 00 00 01 1c 00 00 00 6c 67 61 73 70 00 00 00 10 00 00 01 88 00 00 00 08 67 6c 79 66 7b 76 38 0c 00 00 01 90 00 00 29 f4 68 65 61 64 37 69 07 67 00 00 2b 84 00 00 00 36 68 68 65 61 19 76 15 9b 00 00 2b bc 00 00 00 24 68 6d 74 78 75 6f 04 a2 00 00 2b e0 00 00 00 60 6c 6f 63 61 80 10 75 6e 00 00 2c 40 00 00 00 32 6d 61 78 70 00 2c 01 68 00 00 2c 74 00 00 00 20 6e 61 6d 65 99 4a 09 fb 00 00 2c 94 00 00 01 86 70 6f 73 74 00 03 00 00 00 00 2e 1c 00 00 00 20 00 03 05 67 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e5 Data Ascii: 0OS/2`cmaplgaspglyf{v8)head7ig+6hheav+$hmtxuo+`locaun,@2maxp,h,t nameJ,post. g3@
2024-04-25 18:47:27 UTC	2372	IN	Data Raw: 31 05 0e 01 07 31 0e 01 15 14 16 17 31 1e 01 17 1e 01 37 3e 01 37 35 3e 01 35 34 26 2f 01 2e 01 27 23 2e 01 07 17 1e 01 17 16 14 07 0e 01 07 31 0e 01 07 06 26 27 2e 01 35 3c 01 35 15 3e 01 17 03 0e 01 07 0e 01 07 06 16 17 1e 01 17 31 1e 01 33 3e 01 37 3e 01 37 23 3e 01 37 31 3e 01 17 1e 01 17 1e 01 17 1e 01 37 3e 01 37 36 26 27 2e 01 27 23 2e 01 07 01 8e 0b 15 08 07 0c 03 03 01 01 01 01 02 0f 0a 08 0c 04 04 02 04 02 05 03 06 fa 82 7a 03 07 0b 02 03 01 05 02 05 03 05 0c 1e 16 14 02 02 2a 1c 44 01 03 07 07 1a 33 41 07 07 05 01 08 06 01 03 13 21 32 01 02 03 0b 07 01 0b 1a 48 59 20 16 0e 08 16 1e 06 02 01 01 02 06 21 16 09 4c b7 a3 60 06 6f 0b 0e 19 11 01 17 1a 09 04 0c 07 01 06 15 07 9a 07 0b 04 0b 14 18 0c 1b 06 01 02 01 01 02 11 07 07 13 05 94 14 07 10 04 Data Ascii: 1117>75>54&/.'#.1&'.5<5>13>7>7#>71>7>76&'.'#.z*D3A!2HY !L`o
2024-04-25 18:47:27 UTC	538	IN	Data Raw: 06 01 03 3b 25 5c fc fc 0c 0b 13 08 09 0d 03 01 01 01 01 03 08 22 08 03 01 01 01 05 03 08 04 0a fe 33 e8 c0 2f 09 08 03 01 01 01 03 08 22 08 03 01 01 01 fe f6 03 26 1d 0e 28 0e 07 01 01 05 20 08 2a 35 04 01 02 fe 50 25 3a 03 01 01 07 0b 04 02 01 01 02 04 0b 07 01 01 03 3a 25 5a 5a 09 04 0c 0b 0b 0d 03 01 01 01 02 03 0c 0b 0a 0c 04 02 01 01 01 02 00 00 00 00 06 00 15 ff d4 03 ed 03 ab 00 61 00 9d 00 aa 00 d2 00 db 00 f2 00 00 13 0e 01 0f 01 15 1c 01 17 1e 01 17 1e 01 3b 01 17 14 16 17 1e 01 33 3a 01 37 23 32 36 37 3e 01 27 2e 01 23 2a 01 23 31 22 06 07 0e 01 31 30 26 35 34 26 27 2e 01 27 2e 01 27 2e 01 27 35 27 35 3f 01 3e 01 37 3e 01 33 32 16 17 1e 01 1f 01 15 1f 01 16 32 3f 01 35 27 2e 01 27 23 2e 01 07 22 06 07 05 0e 01 07 0e 01 15 06 16 17 16 32 37 3e Data Ascii: ;%\"3/"&( 5P%::%ZZa;3:7#267>'.##1"10&54&'.'.'.'5'5?>7>322?5'.'#."27>
2024-04-25 18:47:27 UTC	4744	IN	Data Raw: 06 77 03 03 02 04 01 01 02 04 1a 4d 5c 5d 31 2f 02 01 03 01 05 08 03 04 36 2d 13 05 02 01 01 0b fe fe 6a 9a 01 01 ec 01 73 0a a1 b2 01 01 d2 f3 07 03 03 09 05 06 05 09 03 03 08 02 04 03 03 05 02 03 a8 05 1b 11 0a ec a0 4f 07 16 1f 05 02 01 58 3d 1c 03 04 05 01 1e 15 28 11 0a 06 08 16 0f 0e 15 2c 1f 2f 1e 04 08 02 01 01 01 02 04 0b 07 01 08 e7 e7 07 07 09 04 02 01 01 02 03 0a 07 08 69 69 05 05 05 05 d7 0b 13 1b 06 02 01 01 01 02 7f 04 0f 07 0d 21 10 0a 0b 03 01 02 02 0a 0b 12 1a 06 03 01 05 09 25 14 0b 11 06 05 07 02 04 04 04 07 0c 07 03 05 22 19 01 08 0b 0d 0d 0b 07 14 1d 08 06 03 02 02 fb 08 23 0d 0e 0a 13 10 1b 02 01 03 03 01 03 02 05 c2 88 3c 04 09 03 5d 30 2e 01 05 04 06 ad 03 08 04 34 90 c3 0c 01 cf aa 01 0c 95 a1 01 01 53 5a 04 14 38 38 14 04 02 02 Data Ascii: wM\]1/6-jsOX=(,/ii!%"#<]0.4SZ88
2024-04-25 18:47:27 UTC	3513	IN	Data Raw: 05 19 2d 07 03 01 01 03 07 2d 19 05 85 85 01 3d 85 85 05 19 2c 09 04 01 4a 07 12 29 2f 2f 26 13 06 08 02 01 06 fd fb 58 40 40 53 15 15 01 05 0b 02 02 01 01 02 02 0b 05 01 15 15 53 40 40 58 01 50 fe b0 e9 12 03 05 14 0d 09 1a 31 0d 05 08 01 08 06 16 31 20 03 01 43 01 02 09 05 15 35 13 0b 0d 0d 30 0d 0c 08 0d 15 04 04 12 13 01 25 02 03 17 0d 08 1a 18 09 0f 01 01 08 05 0c 11 14 35 18 07 43 10 17 33 14 0c 1a 30 0d 0c 08 0f 15 04 02 24 12 59 06 29 1b 2f 75 30 1e 28 0a 02 01 01 04 0c 32 24 17 1f 1d 19 17 12 20 36 0f 09 07 04 01 02 03 63 03 15 0e 14 34 14 0d 14 03 06 0b 0f 0c 16 10 21 3a 05 02 02 48 07 15 01 0f 07 09 04 00 00 00 13 00 00 ff c0 15 f1 03 c0 00 3d 00 53 00 6e 00 7c 00 8c 00 b2 00 b9 00 c4 00 d0 00 d4 00 d8 00 fe 01 05 01 0c 01 13 01 1a 01 21 01 28 Data Ascii: --=,J)//&X@@SS@@XP11 C50%5C30$Y)/u0(2$ 6c4!:H=Sn\|!(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49734	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	612	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:27 UTC	530	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5889 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 45736 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/font-woff Date: Thu, 25 Apr 2024 18:47:27 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B04AT469HA71H6FFEFWS X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:27 UTC	656	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 b2 a8 00 12 00 00 00 01 8e 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 53 49 47 00 00 b2 a0 00 00 00 08 00 00 00 08 00 00 00 01 47 44 45 46 00 00 01 94 00 00 00 6a 00 00 00 82 10 1c 0f cd 47 50 4f 53 00 00 02 00 00 00 15 5b 00 00 3a f8 1a 38 96 67 47 53 55 42 00 00 17 5c 00 00 06 c1 00 00 11 5c 40 48 f0 ed 4f 53 2f 32 00 00 1e 20 00 00 00 4e 00 00 00 60 68 b8 88 15 63 6d 61 70 00 00 1e 70 00 00 09 2f 00 00 15 c4 01 72 7b c1 63 76 74 20 00 00 aa f4 00 00 00 41 00 00 00 60 15 7a 06 86 66 70 67 6d 00 00 ab 38 00 00 06 c4 00 00 0e 15 9e 36 13 ce 67 61 73 70 00 00 aa ec 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 27 a0 00 00 6f 6d 00 00 f4 04 1f f2 f7 fe 68 65 61 64 00 00 97 10 00 00 00 Data Ascii: wOFFDSIGGDEFjGPOS[:8gGSUB\\@HOS/2 N`hcmapp/r{cvt A`zfpgm86gaspglyf'omhead
2024-04-25 18:47:27 UTC	2372	IN	Data Raw: 45 2a 8a 6e 3d 0b d2 50 6c eb d9 21 1d c5 b7 9e 13 90 81 12 28 79 e9 f9 d7 5c 81 f7 94 9f 29 bf 53 fe a6 ec a5 1c a4 1c a5 9c a4 9c 75 f9 d9 d7 5c 8a 45 ca 55 ca 4d ff 93 8c 32 59 59 48 59 4a 99 ab ac 74 f9 a5 97 5f 4a b5 94 8d 94 ad 94 9d 94 c7 29 4f 53 9e a7 bc 4c 79 1d 00 0e a2 a3 e2 8c e8 a8 b8 81 3d 62 17 a4 a2 04 2a a1 16 1a a1 15 18 09 88 d0 84 6a f1 55 7a 16 5e 94 b2 a6 f0 19 25 53 e3 77 c4 3f 81 01 40 f1 2f a0 5e e6 13 08 82 57 78 61 ab 0f 00 55 aa a1 b1 42 a8 81 7a 68 81 6e 38 05 e7 e1 0e dc 87 47 f0 14 5e c0 6b f8 02 df e1 17 fc 85 29 98 85 05 58 06 a2 bb fc 38 30 95 46 32 65 fa 21 88 a8 b4 9f 4c 99 48 a3 1c bf 04 1c 6e f3 43 c6 5c 70 b8 2f d7 93 50 19 bf 2c e4 be 46 59 21 33 27 64 e6 fa a5 21 f2 0c 48 e3 da 31 f0 26 3f 51 39 79 2b 0d 5d 14 f2 Data Ascii: En=Pl!(y\)Su\EUM2YYHYJt_J)OSLy=bjUz^%Sw?@/^WxaUBzhn8G^k)X80F2e!LHnC\p/P,FY!3'd!H1&?Q9y+]
2024-04-25 18:47:27 UTC	538	IN	Data Raw: 14 e6 8d 1f b8 d6 2d 66 98 c7 3c 0f b8 19 98 ce 18 42 26 81 0d 4c 00 5b 03 db ef 39 33 61 ce 9b 8e ac aa 09 14 c5 14 b8 c2 16 00 2b 3d d1 73 24 8b 77 c2 bc 57 8b 7e 01 ed 3f 66 14 03 61 ea b6 a9 27 e8 cf 10 30 c9 70 08 31 09 7c cc 9f 72 fb db d0 e8 f3 b7 d7 4d 4f 6d a1 1f 03 c0 1f f3 11 fa 8d 4e 8f be 4c 7f 46 f0 0c 53 e8 c7 7b 81 be 1e e8 bb 81 7e 1c e8 97 81 7e 97 d3 5f 02 fd 23 d0 8a 40 eb 80 97 80 37 0a b6 d9 92 db 66 57 4e 5d b7 19 c8 23 3c c5 0b bc f6 7f 56 ed 01 48 92 24 8c e2 f8 d7 88 ee aa 5e db b6 6d db b6 6d db b6 6d ef 9e 6d db b6 6d db be fb e7 db 8a 89 99 e9 89 8b 55 5c e4 ef 5e bc fc b2 6a ac da 94 e7 dd 21 f7 bb 21 de 2f eb 87 73 e2 51 79 a9 f3 9f 8f e5 e3 6a 72 cb 6a 72 81 2c 28 6b 68 e6 47 e5 a2 ce 50 3f 33 6c 1e be 0b 5f 26 a3 72 6b e5 Data Ascii: -f<B&L[93a+=s$wW~?fa'0p1\|rMOmNLFS{~~_#@7fWN]#<VH$^mmmmmU\^j!!/sQyjrjr,(khGP?3l_&rk
2024-04-25 18:47:27 UTC	4744	IN	Data Raw: af 49 e3 4d de 1d de 7d f2 91 33 95 f9 a7 38 fb 82 f7 1a be 23 3f 92 5f 04 f9 3b fc 45 fe e5 f4 c3 48 f6 3d 72 56 3f 37 16 f4 8b fb 65 f9 7f 65 bf a6 5f 5f 36 3d 13 83 53 ad 59 1d fd ee b2 2f 0e 96 23 83 3c 5e 4e c5 d9 fe 42 5c 2e d7 06 6e 4e d5 ec f4 f7 fb 47 e5 45 67 e0 d1 e4 c6 eb ca 75 ae f0 2e c3 eb fc e2 78 8b bc 2b f0 01 35 8f e1 33 f2 a5 c0 37 d4 bc 87 9f c8 af 02 7f 50 f3 9b fc c7 2c 11 45 4c 24 64 76 99 37 51 38 51 52 96 3f 63 93 e7 ab 26 eb 5e 97 44 ed 44 43 6c 2e db 66 60 67 ec 99 e8 6f e6 0d 94 c3 33 70 28 33 a3 e5 c4 0c 9c 8e 73 e5 e2 d4 a6 fb 8e 77 fc 82 7e df 1b e7 ae 16 5e 86 e4 f0 5d ce c8 32 fc d2 35 91 31 48 56 df 94 8c ca 9b c8 48 46 e6 f1 df fa c8 3c b6 55 bf 40 79 20 99 46 33 b3 d5 fc 2d 3b d1 a3 fa 0d 34 48 83 34 f8 cf 55 b8 9c 1e Data Ascii: IM}38#?_;EH=rV?7ee__6=SY/#<^NB\.nNGEgu.x+537P,EL$dv7Q8QR?c&^DDCl.f`go3p(3sw~^]251HVHF<U@y F3-;4H4U
2024-04-25 18:47:27 UTC	5930	IN	Data Raw: b3 59 c2 52 d6 b2 9e 9d ec 62 0f 07 39 c4 09 2e 73 95 6b 84 73 9f 27 7c e6 8b 24 a3 a8 ea a2 03 ea aa b9 6a a9 d1 1a af 31 9a a0 83 da a9 ab da a5 44 1a ae 79 da a3 5b da af d9 4a af 0c ba a1 1d 6a a3 db 4a a7 c4 1a a1 9c ca a1 5c 6a 4d 24 3c f1 26 3a 3e 44 25 06 71 b1 48 4c 52 ec a4 21 05 29 49 45 02 f2 51 98 02 14 a4 04 85 34 99 62 34 a4 2e f5 69 40 67 4a 73 8f 01 f4 a1 1f 43 e9 cf 60 86 31 95 85 cc 61 1e f3 d9 ca 46 36 b1 99 19 1c e7 0c 27 39 c5 45 4e 6b 0a e7 79 c9 53 9e f3 42 36 ae c8 93 c8 0c c4 8b be 44 61 10 b1 99 4c 3c a6 11 87 29 24 64 26 be cc c2 c1 22 be 63 01 4e 16 93 84 b9 04 b0 8c 20 56 10 c8 72 92 b1 8e b4 6c 23 1d 3b 48 cd 06 32 b1 9b 2c ec 25 1b fb c9 ca 3e b2 73 80 5c 1c 26 0f 47 c9 cd 11 f2 72 8c a2 9c a3 08 67 29 c9 25 ca 71 9d 0a b8 Data Ascii: YRb9.sks'\|$j1Dy[JjJ\jM$<&:>D%qHLR!)IEQ4b4.i@gJsC`1aF6'9ENkySB6DaL<)$d&"cN Vrl#;H2,%>s\&Grg)%q
2024-04-25 18:47:27 UTC	7116	IN	Data Raw: fb 01 6e c6 b3 8c 3f 62 85 f1 a2 f1 24 4e 03 04 1f 00 0d b1 5d 37 4c 4e 56 b0 59 29 47 01 bf ad 80 cf 36 7a 71 da 38 be f5 ad 37 b7 1a c7 30 81 37 19 df c2 06 e3 1a ab c6 85 2d 91 c7 95 36 67 5d 39 7c 58 98 b7 1d cc 5f 68 7e 1e cc 90 83 39 4c 45 39 9c 4d f4 75 14 9f cc e1 ac 8e 31 75 e2 2e 23 96 9c ae 22 12 4a d4 06 ce 36 65 bd a6 64 97 99 45 9d a6 25 50 e3 66 8f 1a d5 19 80 f7 19 bb f1 f7 c6 85 f8 44 8a aa b8 d9 ff 92 fd 0a 9b c2 ef 90 9d 63 f3 78 bf 0e e6 35 07 73 92 82 79 30 43 0e e6 08 de 9f 73 8f 50 33 7a 92 66 d1 14 88 32 fa 95 cf d6 e8 24 a1 79 0d 3f 99 87 05 0d 10 24 40 69 0f 03 45 53 9b 9c 72 bb 48 92 e4 3e 95 4b 43 0e c9 e6 cb 84 b3 19 38 2b 2f 10 18 66 fd ac f4 a9 d6 f0 50 99 ac ce 85 c3 29 30 ba 5c 0e b6 a7 27 19 8c c5 00 62 75 b1 38 47 38 e3 Data Ascii: n?b$N]7LNVY)G6zq8707-6g]9\|X_h~9LE9Mu1u.#"J6edE%PfDcx5sy0CsP3zf2$y?$@iESrH>KC8+/fP)0\'bu8G8
2024-04-25 18:47:27 UTC	8302	IN	Data Raw: 5f 90 fb 94 73 70 b5 ef 40 57 2f a8 e4 c4 6a ff e4 f2 c8 f0 72 0a df 91 7e 66 2c 7e 64 60 68 ad 3b 3f be 32 60 4b 8a 2f 4d 25 fb 2b b1 46 0d 5c 62 02 cc 4a d4 8a 6a 8d a4 3e bc 3e ea 68 e8 12 a8 e7 2b 11 a2 ee 4d a8 e7 f5 5c ae e5 ea 03 f1 9f cf e9 1f be 6b b1 ff da 41 cd 82 6e 29 b9 7a 9c 98 6f cf f6 1f 8a 77 1f 1b 76 8e b5 34 8f fa fd e9 50 cb 84 df b8 fb 1d 47 8f bf 65 36 7a 4d b2 67 f2 f5 a7 cb ea fa 16 13 47 07 87 ae ed 9e 70 8d b5 77 8c ba dc 63 ed 91 31 57 21 bf f9 27 f6 2e 79 43 d2 aa c1 18 2b 5f f6 55 1e 1c 17 91 d9 6e e4 43 7b f1 70 ee 3e fc 43 76 24 05 c8 db 0c fa e8 63 79 48 0f 8a a0 c1 64 5f a5 06 a2 3a 4c 5f 98 07 6f a5 2e d8 9b 97 1a 1e 81 bc de fa 7a 84 bc 11 6f 5b 4b b0 de 53 ef 76 34 d1 82 77 50 2f 22 91 28 8e 0a 67 2e 82 53 13 df cf 9f Data Ascii: _sp@W/jr~f,~d`h;?2`K/M%+F\bJj>>h+M\kAn)zowv4PGe6zMgGpwc1W!'.yC+_UnC{p>Cv$cyHd_:L_o.zo[KSv4wP/"(g.S
2024-04-25 18:47:27 UTC	6178	IN	Data Raw: 10 c5 00 84 c5 5f 06 80 4b f4 18 e3 ff cb bf 81 f4 ea 48 bd 80 c8 70 46 e0 7d ce 07 18 de 7d 60 be d0 80 c6 86 a9 53 00 f0 91 c4 60 45 b8 cb 27 a6 7f d3 c2 1b c4 f3 e1 e9 96 61 5e 37 7d 22 c2 eb 93 11 d1 9b b2 f9 f0 86 30 c5 ef 62 7a 7a f7 90 5f 81 ec 19 30 81 0d 2c 10 46 8c c4 b7 42 16 c2 20 4c 89 bf 68 01 ed b4 95 bf 2c fe b3 05 22 50 2b fe c2 0f 9a 24 68 fc e2 2f 94 b2 60 59 c8 fb 77 64 de 35 00 5c 4f dc 27 c9 29 d5 20 e3 c0 8f cf 4f c3 24 77 68 1e 39 05 b4 ec cd af 17 bd f0 89 e9 47 5b 78 fd 70 56 92 d7 47 a6 4f c0 c7 91 75 2a e7 57 f9 8b 02 3f 7b 39 cb 84 c0 4a e5 fc 8b 10 f0 65 c0 43 66 08 07 44 91 df 31 3d 0e 5c b1 01 ba 92 65 09 fa 14 af 24 b6 72 60 9c a3 25 49 c9 e6 12 87 e3 0b d4 a0 0b 15 5e 7d 32 79 17 df 25 7a b1 80 eb 5b a6 d1 d8 70 56 04 9e Data Ascii: _KHpF}}`S`E'a^7}"0bzz_0,FB Lh,"P+$h/`Ywd5\O') O$wh9G[xpVGOu*W?{9JeCfD1=\e$r`%I^}2y%z[pV
2024-04-25 18:47:27 UTC	9900	IN	Data Raw: bc f7 de c2 fb ee 2d 94 71 e0 21 b6 83 33 6e 54 70 e0 c1 a8 7f 49 08 b8 15 46 de 26 b4 3b 73 56 0b b9 ca 04 f1 94 18 82 5f bd ae fc 80 07 52 b3 c2 eb 6c cf 66 4c fa 39 f2 73 07 bc 01 57 fc 3b b8 6e 33 1e f0 06 a1 9f e9 80 a3 b6 3f a5 ca 92 35 c1 1b dc fc 6e 70 dd da 59 5c b7 2b 8d eb 76 99 9f 1e 35 26 3e f4 a5 8b c4 bf 41 e9 b0 31 76 f4 b3 17 43 f6 1d 87 f3 ce b3 7d d7 76 69 de 3e 3c cb e9 f7 33 17 37 f1 82 8c f1 50 c1 76 9b c4 9e 3c b8 5b 4c e6 21 bb fa 97 cc a7 7e 6f 7e 89 c2 07 30 3c e3 05 0b b1 dd 2c 8f 72 96 27 26 43 e6 97 4a 5f 32 ff 9e 71 d6 c3 da 79 90 67 49 18 ec b2 68 b1 46 2d 00 53 2f 0a c1 d6 ce 45 76 07 c5 22 2d fc 4a 0c 69 e1 0f 12 b2 7b f8 3a eb 97 be 64 bd 4e 3c 41 4c 2f a4 4b d0 ee 25 e9 66 42 bb eb b4 84 dd d7 62 2d ff 86 e8 fe d8 7a 5d Data Ascii: -q!3nTpIF&;sV_RlfL9sW;n3?5npY\+v5&>A1vC}vi><37Pv<[L!~o~0<,r'&CJ_2qygIhF-S/Ev"-Ji{:dN<AL/K%fBb-z]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49738	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	377	OUT	GET /en-us/sharefile/media/catalog-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:27 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 63999 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:27 GMT Etag: "8bfe160b56f04105eb6aa3685a6bc671-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B0AQJRAE6YA83W42PBDV X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:27 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 52 08 06 00 00 00 2e 15 a1 27 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 1c 36 a6 11 eb 41 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 1c e5 b9 f8 fd ef 94 ed ab 2e 59 bd d8 72 91 8d dc 2b 72 01 6c 53 0c 81 50 02 38 9c 24 70 20 21 24 90 90 f0 83 40 48 08 21 e1 9c 37 c9 49 03 72 e0 40 12 73 48 08 60 4e 02 a1 18 8c 71 ef 96 2d 63 1b 59 6e aa 56 ef 5a ed 6a fb cc bc 7f 8c b4 71 c7 c6 c6 32 f6 f3 b9 2e 5f 97 b5 bb 33 fb ec 4a 3b 7b cf fd dc cf 3d 92 a6 69 46 65 65 25 6f be f9 26 35 35 35 e8 ba 8e 24 49 08 82 20 08 82 20 08 27 41 92 08 06 02 64 64 64 f0 a5 9b 6f 66 f2 a4 49 48 d5 d5 d5 c6 1d 77 dc c1 c7 e5 e5 58 ad 56 44 68 25 08 82 20 Data Ascii: PNGIHDRXR.'pHYsttfxtIME6A IDATxwx.Yr+rlSP8$p !$@H!7Ir@sH`Nq-cYnVZjq2._3J;{=iFee%o&555$I 'AdddofIHwXVDh%
2024-04-25 18:47:27 UTC	2372	IN	Data Raw: f1 7a 7d 64 67 65 21 cb e2 42 69 82 70 26 9d b1 53 e2 5f fd ea 57 d4 d7 d7 f3 a7 3f fd 89 b4 b4 34 ae b9 e6 1a 16 2e 5c c8 e6 cd 9b 3f 71 db 7d fb f6 f1 a5 2f 7d 89 a2 a2 22 46 8d 1a c5 6d b7 dd c6 f6 ed db 63 f7 ff e6 37 bf e1 b1 c7 1e 3b 53 43 fd 44 ba ae f3 c0 03 0f 30 7f fe 7c 66 ce 9c 19 fb 37 63 c6 0c be f3 9d ef b0 7b f7 6e 32 32 32 f8 f5 af 7f 4d 5f 5f 1f 77 df 7d 37 bb 76 ed 3a 6b e3 13 ce 6f 8d 4d cd 58 2c 16 f2 73 73 44 70 25 7c 66 ec 76 1b 39 d9 59 b8 dd 6e 1a 1a 9b ce 7a e1 b3 20 9c ef 4e 3b 83 f5 d2 4b 2f 71 ed b5 d7 12 0a 85 b8 e1 86 1b 88 44 22 bc f5 d6 5b fc ed 6f 7f 63 e3 c6 8d dc 7f ff fd ac 5e bd 1a 80 e2 e2 e2 a3 b2 59 4d 4d 4d cc 9d 3b 97 d4 d4 54 ee b9 e7 1e 34 4d 63 d1 a2 45 94 94 94 b0 69 d3 26 26 4e 9c 48 7c 7c 3c 3e 9f ef 74 87 Data Ascii: z}dge!Bip&S_W?4.\?q}/}"Fmc7;SCD0\|f7c{n222M__w}7v:koMX,ssDp%\|fv9Ynz N;K/qD"[oc^YMMM;T4McEi&&NH\|\|<>t
2024-04-25 18:47:27 UTC	538	IN	Data Raw: da 8a 2c ff eb b0 98 9c 9c 8c d3 e9 64 ed da b5 84 c3 61 b6 6d db 46 6b 6b 2b 71 71 71 6c db b6 8d f6 f6 76 3a 3b 3b 01 d8 b5 6b 17 bb 77 ef 66 cb 96 2d ec dc b9 93 d5 ab 57 13 08 04 d8 be 7d 3b b5 b5 b5 54 56 56 7e aa 0c c3 d9 a2 aa 0a 06 86 28 76 3f 87 18 86 81 c5 6a 25 39 39 99 c4 c4 44 22 91 08 d5 35 35 14 15 15 91 93 93 43 28 14 22 14 0e 33 74 e8 50 ae b8 fc 72 7a bd 5e a2 d1 e8 29 3d 87 d5 6a 25 d0 9f c1 19 38 f1 08 06 02 64 67 67 e3 ed ed 25 37 37 97 8b 2f be 98 40 20 40 72 72 32 92 24 e1 0f 04 e8 ec ec c4 00 ae 5e b0 00 ab d5 4a d9 b6 6d 5c 77 dd 75 cc 9c 39 f3 94 7a f6 6d d9 b2 85 ae ae 2e 76 ef de cd be fd fb 49 4b 4d 65 de bc 79 e6 89 49 63 23 b3 67 cf 66 c1 82 05 b4 b5 b5 31 71 e2 44 12 13 13 f1 9e e4 89 80 61 18 87 4d 6d f6 f6 f6 72 f5 d5 57 Data Ascii: ,damFkk+qqqlv:;;kwf-W};TVV~(v?j%99D"55C("3tPrz^)=j%8dgg%77/@ @rr2$^Jm\wu9zm.vIKMeyIc#gf1qDaMmrW
2024-04-25 18:47:27 UTC	4744	IN	Data Raw: 64 65 65 51 5c 5c 8c c7 e3 a1 ba ba 9a b1 63 c7 92 97 97 17 4b f3 27 26 26 92 99 99 49 76 76 36 07 0f 1e 04 cc 4c 79 7d 7d 3d 45 45 45 04 02 01 e2 e2 e2 18 31 62 04 5e af 37 f6 99 d7 34 0d 9b cd 86 a6 69 74 75 75 e1 70 38 98 30 61 02 5d 5d 5d 94 95 95 91 90 90 c0 84 09 13 50 14 25 f6 05 95 9a 9a 4a 5e 5e 1e 56 ab 15 8b c5 c2 c4 89 13 d9 bb 77 2f f5 f5 f5 a4 a4 a4 d0 d1 d1 c1 55 57 5d 85 cf e7 63 db b6 6d d4 d6 d6 92 9d 9d 1d 3b ee a4 a5 a5 31 6a d4 28 e2 e3 e3 69 6e 6e c6 30 0c d1 2c 56 38 25 86 61 90 9f 97 47 71 71 31 5e af 97 b2 b2 32 0a 0b 0b a9 ac ac 24 27 27 07 c3 30 e8 ed ed 65 d7 ae 5d 74 76 75 91 9b 93 73 ca 27 69 a3 46 8d a2 ba ba 9a d7 5e 7b 8d 40 30 c8 94 c9 93 69 6d 6d c5 62 b5 12 0a 87 b1 58 ad ec d8 b9 93 84 f8 78 ba bb bb d1 75 9d 5e 8f 87 Data Ascii: deeQ\\cK'&&Ivv6Ly}}=EEE1b^74ituup80a]]]P%J^^Vw/UW]cm;1j(inn0,V8%aGqq1^2$''0e]tvus'iF^{@0immbXxu^
2024-04-25 18:47:28 UTC	5930	IN	Data Raw: 3e 4f 28 f1 32 72 2c 5d d4 74 f9 a8 2c df c7 45 57 ba ce dc 3b 27 08 82 20 08 9f c0 6a 33 b3 4f cd 8d b0 61 b5 c4 a6 b5 d0 de 6a ae 06 74 38 cd fa 2a 59 81 29 33 e0 92 cb 0d 46 17 9b 59 ae 60 00 c4 05 54 3e ef 24 64 59 66 c5 8a 15 ac 5b b7 0e 59 96 59 b0 60 01 d3 a7 4f 3f f1 14 61 38 1c 26 23 3d 9d cb 2f bf 1c c3 30 a8 ad ad e5 a9 a7 9f 66 d7 ae 5d 00 94 94 94 30 72 c4 08 fc 7e ff 71 f6 60 80 01 ba a6 23 69 21 9a ba 3d cc bc 74 26 ed 95 b5 58 13 87 72 ed 15 b3 d0 fa 3a 68 eb ea e5 ab df fa 3e 37 4e 2c a0 ac 74 3b 43 46 4e e7 17 bf fc 35 3d 75 1b f9 9f 3f bf cb 4f 7e f7 07 be 52 92 c9 e2 bf bf 81 33 f7 22 26 0c cb 63 df 47 15 f4 25 64 f1 ed fb 6f 67 cf be 2a 7e fc 9b ff e2 0b 97 8c c5 db 77 bc b1 9c 7f 24 49 46 96 15 24 59 41 92 55 e4 c3 fe 89 c6 a5 82 20 Data Ascii: >O(2r,]t,EW;' j3Oajt8Y)3FY`T>$dYf[YY`O?a8&#=/0f]0r~q`#i!=t&Xr:h>7N,t;CFN5=u?O~R3"&cG%dog~w$IF$YAU
2024-04-25 18:47:28 UTC	7116	IN	Data Raw: 3f 8b 20 08 e7 32 8b c5 cc 4c 75 76 c0 8a a5 66 1f ab c6 83 e6 f5 03 6d 03 5d d7 c3 50 54 0c 97 cc 37 18 3f f9 5f 2d 18 c4 54 e0 b9 43 d7 f5 c3 02 a9 e8 79 9e 4e 3c 61 80 15 8d 46 49 4e 4a 22 23 7d 08 00 49 09 f1 34 b5 b4 12 e8 af e1 91 80 a6 e6 16 fa fc 7e 86 0f 2d 38 6a fb aa dd 65 94 57 36 e1 70 b8 99 5c 32 93 14 77 7f 4f f0 a0 87 55 1b ca b9 74 de 4c 24 e0 e0 9e 5d 74 2b c9 8c 1f 99 73 06 5f da d9 57 77 b0 9e 9a 9a 5a 2e bd 64 f6 19 df b7 ae eb c4 c7 bb d0 0d 9d d6 b6 1e 2c 80 43 b1 11 a6 0f 4f 4f 37 23 f2 87 d1 31 a2 08 6f 77 0f 2e 55 c1 8a 8e 1e d1 b9 f3 ee 3b 99 7a ed 17 d1 2d 2a 86 a8 e4 14 04 e1 73 24 d6 75 bd 05 36 ad 91 d8 b8 06 5a 9a cc db 06 9a 83 ca 12 8c 9b 64 76 5d bf 68 82 b9 8d 08 ac 84 73 c1 09 03 ac 23 3b 69 c7 b9 dd 8c 1a ee 3e ec 31 Data Ascii: ? 2Luvfm]PT7?_-TCyN<aFINJ"#}I4~-8jeW6p\2wOUtL$]t+s_WwZ.d,COO7#1ow.U;z-*s$u6Zdv]hs#;i>1
2024-04-25 18:47:28 UTC	8302	IN	Data Raw: 07 f7 33 6d 2a d4 94 17 11 4b 24 01 8b a9 e9 08 05 15 35 dc ff c0 fd c4 86 7b 49 48 61 4a f3 c2 8c 8e 8c 11 ac 6e e6 e1 9d 5b 08 97 56 f2 d8 83 f7 32 35 91 a4 bc 76 09 79 e1 00 ba 6a 20 ba 43 e4 05 25 f6 bf 7f 98 74 2a 89 6a 79 79 e6 99 2f e3 63 8c f3 97 fa f0 f9 7c 08 d6 6c 40 5b 35 45 76 61 1d 2b ab 0b 38 d5 da 43 7d c3 52 8c a9 21 ce 77 4c f0 cc 33 cf f0 c0 a6 65 9c 3f 7a 18 db 9b 4f 59 4e 80 e1 91 51 f2 96 ae e1 b1 6d 1b 98 9e 4a b2 7c d3 dd dc b5 69 15 a6 6e 51 55 59 4a cb f1 03 0c ce 68 54 14 85 d1 53 49 5c de 00 39 3e 2f 17 ce 9e a3 3f 0d cf 3c f3 2c 1b 1a 2b 38 75 b2 8d 1d 4f 7d 99 67 1f dd ce 40 db 19 c6 62 22 75 e5 05 68 86 4d 4d 5d 03 39 01 0f a2 27 8b 9a ba 5a 72 b2 03 b4 5d 38 49 52 0a 52 53 56 44 6b cb 49 02 55 2b 79 ec a9 e7 08 07 5c 1f be Data Ascii: 3mK$5{IHaJn[V25vyj C%tjyy/c\|l@[5Eva+8C}R!wL3e?zOYNQmJ\|inQUYJhTSI\9>/?<,+8uO}g@b"uhMM]9'Zr]8IRRSVDkIU+y\
2024-04-25 18:47:28 UTC	3101	IN	Data Raw: e6 8f 75 3d 6c db 26 16 8f e3 f5 7a 17 45 f8 02 97 cb 85 28 08 24 e7 e1 4f 37 5f 62 f1 38 1e 8f 7b d1 f8 5f c1 1c 16 ac a9 e9 19 06 87 87 a9 28 2b 43 d5 34 c6 c6 c7 e9 ee ed a3 a8 b0 00 5d d7 e9 b9 d2 c7 b6 cd 9b 16 45 87 39 cc 8d 65 59 cc 44 a2 48 2e 3f 15 95 59 04 7c 2e dc 52 1e c5 46 26 f6 55 6e 5e 21 ae 60 98 a2 e2 32 56 2e 4d 11 35 14 36 6e ac a1 b7 a7 8b b1 b4 41 6d 53 16 08 16 4b ea 9b a8 28 2b 42 cf f5 73 f6 5c 0b 97 94 20 2b 57 34 23 89 32 d3 d3 83 b4 27 4d d6 ac db 88 36 3d 8a 2e fb 59 96 97 85 df e3 c1 d4 5c 60 5b d7 a6 08 93 d1 29 a6 53 36 8f 3c ba 0b bf 3b f3 56 3c 39 15 e3 be 1d f7 83 1a 27 bf a0 1c d1 30 98 42 c4 e3 ce 98 7c a7 27 46 d1 a5 2c 9e 78 78 2d ae 59 f3 7f 20 2b 84 9c 95 cd 12 59 e5 f0 e1 63 94 d6 35 e1 b6 6d 0c db e4 c4 89 53 64 Data Ascii: u=l&zE($O7_b8{_(+C4]E9eYDH.?Y\|.RF&Un^!`2V.M56nAmSK(+Bs\ +W4#2'M6=.Y\`[)S6<;V<9'0B\|'F,xx-Y +Yc5mSd
2024-04-25 18:47:28 UTC	10674	IN	Data Raw: 5f a2 b7 7f 8c a6 6d db c8 c6 e7 99 9c 4f 90 49 27 50 03 61 dc f4 1c 27 ce 5d a5 20 cf 47 5f df 10 d3 33 8b ec 7b fa 69 f2 ef c5 03 e5 98 5c be 74 99 8c 61 31 b7 94 46 4f ce d2 3b b2 40 50 ca 30 3e 39 cd c4 d4 22 fb f6 ed a6 af bb 13 35 94 8f 9d 9c a5 7f c6 e4 4b 5f 3c ca 85 d3 1f 72 bd 7f 82 7d 87 9f 63 76 a8 1d 1d 15 c7 d0 19 e8 bf 81 ab f8 90 64 46 5a b4 e4 00 00 20 00 49 44 41 54 8d 2d d5 15 8c 0f f6 d0 33 34 81 e3 da cc 8d 0d 32 ef e4 f1 85 a7 9a 38 fe c1 71 7c 91 3c 6e 74 77 d3 74 e0 0b c4 34 9d c1 c1 21 6e 0c 8c 92 17 09 30 d8 3f c0 f8 f8 1c fb 8f 1c 62 bc af 93 a4 29 53 54 58 44 51 f4 de 53 9e 6c db 26 95 4a e3 f7 fb 6f 55 56 50 14 99 b6 b6 36 12 89 04 ae eb 12 8b c5 68 6e 6e f6 3c 58 4f 1a 17 fb 6d be ff 67 99 5c 21 3d 11 3e f9 79 77 5c c8 1a 2e Data Ascii: _mOI'Pa'] G_3{i\ta1FO;@P0>9"5K_<r}cvdFZ IDAT-3428q\|<ntwt4!n0?b)STXDQSl&JoUVP6hnn<XOmg\!=>yw\.
2024-04-25 18:47:28 UTC	11860	IN	Data Raw: 3d 7a 03 3d 3c 3c 1e 09 8e 0b a2 00 7a 26 83 a4 f9 90 57 68 2e bd 12 46 36 8b 20 ab 28 72 ee 8b c4 b6 2c dc e5 24 f7 9b d8 56 ee 61 ce e7 cb e5 fc e8 99 0c 92 ea 43 96 36 fb f1 cd c5 b2 6c 44 51 5a b1 a9 f6 dd c8 24 e3 58 82 4a 38 f8 78 14 14 b5 4c 13 44 71 5d 2d 71 f4 4c 06 1b 01 4d f3 b1 56 af 70 23 9b 41 90 b5 5b e7 76 3d 98 86 8e 23 48 68 1b 90 3c 6e 3b ce 5d fb 17 3f 0a 1c cb 44 b7 1c fc be cd 2f 2d e2 85 08 9f 30 e6 e2 06 a3 b3 59 96 d2 26 8b 49 8b c5 a4 c5 42 f2 e3 df e3 29 93 c9 39 9d a9 45 fd 53 eb c6 67 a7 68 6b 6f a7 bb bb 8b f6 8e ab a4 f4 95 8b bb 99 7a f6 8e d7 56 36 41 7b 47 3b f3 49 1d dc 34 a7 4e 9f e6 2e 73 58 56 25 9b c9 dc e3 1a b7 1b 90 a2 a3 fd da fd af ef e1 f1 19 c1 4c 2f f1 e1 af df e6 1f 7e f6 33 2e 77 f5 71 f9 cc 59 06 26 17 6f Data Ascii: =z=<<z&Wh.F6 (r,$VaC6lDQZ$XJ8xLDq]-qLMVp#A[v=#Hh<n;]?D/-0Y&IB)9ESghkozV6A{G;I4N.sXV%L/~3.wqY&o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49736	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	378	OUT	GET /en-us/sharefile/media/catalog-1d.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:27 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 21006 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:27 GMT Etag: "ff4ebd0120b55db59cd9d22165eae15e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B0ANH80WZR8XFCK5R3NY X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:27 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 52 08 06 00 00 00 2e 15 a1 27 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 23 12 c2 cc 25 ac 00 00 20 00 49 44 41 54 78 9c ec dd 77 9c 54 e5 dd ff ff d7 39 d3 67 7b af 2c b0 f4 de 15 90 80 14 41 b1 a3 46 c5 12 4b 9a 89 31 96 fb 4e 7e de 49 fc e6 ce 9d 98 dc c9 1d 6b 9a 31 58 62 37 8a 35 8a 62 a1 8b 28 45 a4 f7 65 77 61 d9 85 65 eb f4 39 e7 f7 c7 2e 0b 28 2a c2 ea ce c2 fb f9 78 f8 70 ca 29 9f 19 66 66 df e7 ba ae 73 1d c3 8e 87 ec b2 bd 61 66 7f dc cc e6 5a 0b cb 06 03 11 11 11 11 39 2a 06 84 a2 36 5d 52 4c 2e 1e e2 67 70 b1 0f 63 cd ce 5a 7b ea ac fd ec aa b6 c0 a9 68 25 22 22 22 72 4c 62 36 be 64 83 37 ae 4f c7 f8 e6 c3 3b ec 67 Data Ascii: PNGIHDRXR.'pHYsttfxtIME#% IDATxwT9g{,AFK1N~Ik1Xb75b(Eewae9.(xp)ffsafZ96]RL.gpcZ{h%"""rLb6d7O;g
2024-04-25 18:47:27 UTC	2372	IN	Data Raw: 22 e2 ee 64 fa 64 c4 a9 f6 8e 01 d3 02 ab a3 8b 13 11 11 11 39 3a 89 15 b0 e2 11 1a fd 25 cc 8f 94 60 10 a0 ae 6e 2b f8 4c 9d 31 28 22 22 22 9d 4a 62 05 2c 6c 70 ba c0 61 60 db 6e d6 58 a7 80 23 06 b6 9a af 44 44 44 a4 f3 48 b0 80 45 cb ec c1 76 6b 93 95 69 a9 f5 4a 44 44 44 3a 9d 84 1b e4 2e 22 22 22 d2 d9 29 60 89 88 88 88 b4 b3 c4 eb 22 04 5d 60 54 a4 03 6d dd 1b 65 7b 6d 8c e6 a8 85 75 14 5d f4 b6 05 05 69 0e c6 74 f5 7e f5 c5 89 88 74 12 89 19 b0 44 e4 6b f7 c6 c6 00 f7 2e ac 67 fe d6 10 81 e6 f8 d1 1f e8 04 2c a6 8f 49 e5 df d7 e5 7f a5 f5 89 88 74 26 0a 58 22 27 b9 98 65 73 e3 0b 7b 79 60 41 7d cb 7c 73 26 b4 35 5d 39 0d 70 18 10 fe c4 99 bc 5e 13 4c a3 e5 24 94 38 78 5d 6a 76 16 11 39 94 02 96 c8 49 ee c6 17 f7 f1 c0 9b 75 90 e2 80 98 cd b9 43 93 Data Ascii: "dd9:%`n+L1("""Jb,lpa`nX#DDDHEvkiJDDD:.""")`"]`Tme{mu]it~tDk.g,It&X"'es{y`A}\|s&5]9p^L$8x]jv9IuC
2024-04-25 18:47:27 UTC	538	IN	Data Raw: d3 b9 ed b6 db f8 ed 6f 7f 4b 28 14 62 c0 80 01 f4 ea d5 0b 80 fb ee bb 8f b2 b2 32 5e 7a e9 25 1e 7a e8 21 6e bc f1 46 1e 7a e8 21 b2 b3 b3 f9 ef ff fe 6f ce 38 e3 8c e3 78 f7 45 a4 33 33 52 7e b6 d5 6e 0c a3 2b 5e 88 1c ab 90 cd 5d e7 98 dc 32 b5 2b 9d a9 d7 fd e7 73 6a f9 cd 2b fb 5a e6 b5 3a 20 60 71 fb d9 99 dc 79 56 26 00 cf 7f dc c4 c5 ff a8 3a bc 05 eb 00 03 68 8c 33 69 68 32 6f 7d a7 e0 53 83 e6 2d cb 22 1a 8d e2 72 b9 30 cd 83 ef cb a1 63 a4 0e 7d 1c a0 aa aa 0a 97 cb 45 56 56 d6 61 8f 37 35 35 51 55 55 45 51 51 11 3e 9f 0f db b6 89 46 a3 6d 83 d9 a1 a5 8b d0 b6 6d 1c 0e 07 96 65 b5 85 43 a7 f3 c8 c7 91 b1 58 8c 1d 3b 76 90 93 93 73 c4 f9 aa 6c db 66 db b6 6d a4 a7 a7 b7 d5 63 db 36 96 d5 72 16 a5 c3 e1 68 7b 2c 10 08 90 94 94 84 65 59 d4 d6 d6 Data Ascii: oK(b2^z%z!nFz!o8xE33R~n+^]2+sj+Z: `qyV&:h3ih2o}S-"r0c}EVVa755QUUEQQ>FmmeCX;vslfmc6rh{,eY
2024-04-25 18:47:27 UTC	4744	IN	Data Raw: 11 91 4e 42 01 4b 44 44 44 a4 9d 29 60 89 88 88 88 b4 33 05 2c 11 11 11 91 76 a6 80 25 22 22 22 d2 ce 14 b0 44 44 44 44 da 99 02 96 88 88 88 48 3b 53 c0 12 11 11 11 69 67 0a 58 22 22 22 22 ed 4c 01 4b 44 44 44 a4 9d 29 60 89 88 88 88 b4 33 05 2c 11 11 11 91 76 a6 80 25 22 22 22 d2 ce 14 b0 44 44 44 44 da 99 b3 a3 0b 10 91 8e b1 ec bd f9 ec f7 14 32 6d 78 af e3 da ce c2 37 e7 e1 2a ea c5 e8 01 45 9f bb 9c 1d 8f d2 10 08 93 96 92 fc c5 1b b5 9a f9 d5 af 1e a0 a2 21 86 e1 36 21 60 73 d9 75 97 33 71 68 f1 97 ae af 61 cf 76 5e 59 b6 99 2b ce 9d 7a d8 e3 1f 2d 9a cf 1f fe f9 2e 49 19 29 10 8f 52 d8 b3 27 37 5f 33 83 34 ef d1 1f 77 ce 7e 61 0e 7d 47 8f a5 7f 41 ea 97 ae 4b 44 4e 6c 0a 58 22 27 a9 5d 95 65 ec f6 f9 8e f8 9c 65 83 69 1c fe 98 6d db 44 1b aa f9 d7 Data Ascii: NBKDDD)`3,v%"""DDDDH;SigX""""LKDDD)`3,v%"""DDDD2mx7*E!6!`su3qhav^Y+z-.I)R'7_34w~a}GAKDNlX"']eeimD
2024-04-25 18:47:27 UTC	2733	IN	Data Raw: 65 39 c9 59 79 58 c1 46 36 6f 2d c7 95 91 af 80 25 22 f2 15 51 c0 12 49 64 86 93 68 a8 99 0f d6 6c a5 7b ef 52 82 75 75 34 34 34 f0 d1 47 75 98 76 0c 77 5a 26 d1 c6 5a ca 76 ef a7 a7 c7 8b 1d 6c 60 ed ae 3d 84 2d 17 85 59 5e 6a a3 3e c6 0f ef ce e2 85 ef d1 e8 4a 65 64 7a 1a 65 7b c3 0c 1f d4 83 f5 bb 02 1d fd ea 44 44 4e 58 1a 83 25 92 c8 ec 18 2e af 9f 53 46 0d 62 68 df 42 2a ab ea 28 c8 cd 20 12 8d d3 ad 7b 17 62 8d fb a8 aa 0f d1 ab 7b 01 db b7 ef c4 eb 75 d3 14 35 49 72 c6 08 38 92 49 f7 d8 54 d5 d4 e3 f5 f9 48 4d f6 93 9e 9a 4c 3c 12 a4 aa a6 96 48 2c de d1 af 4e 00 6c d8 52 5e cf 82 0d fb 69 0c 44 a9 d8 17 ea e8 8a 44 a4 1d a8 05 4b 24 91 39 fc 8c 1a 35 88 64 a7 09 24 31 66 64 3f f6 36 04 19 37 b6 98 78 24 84 a7 df 40 72 d2 bd 54 d7 d4 31 66 74 09 Data Ascii: e9YyXF6o-%"QIdhl{Ruu444GuvwZ&Zvl`=-Y^j>Jedze{DDNX%.SFbhB*( {b{u5Ir8ITHML<H,NlR^iDDK$95d$1fd?67x$@rT1ft
2024-04-25 18:47:28 UTC	7116	IN	Data Raw: f1 ee ff c5 d5 bf 1f fe 99 d7 e0 f0 f9 88 bc b7 10 ef c0 21 5f 5b b8 aa ad d8 cc 73 2f fe 1b 2b 29 8f 19 17 9e 47 68 4f 19 8e 8c 22 8a 72 d3 5a 97 b0 88 c4 c1 ed f8 74 3d 5b d7 7e 8c 3f af 3b 05 d9 c9 47 b7 af ca 1d d4 46 3d 74 c9 4f c3 f4 fa a9 da f0 31 b1 e4 22 ba 17 67 7e 62 c9 28 ef bc fa 02 2b 37 ed 62 e4 37 ce e0 1b 23 07 70 b4 33 16 84 9b 6b 59 f9 d1 36 86 8e 1e 89 57 f9 54 44 8e 93 02 96 48 67 13 dd 8a d1 78 17 9e 53 86 92 f6 fb 07 71 14 97 00 e0 b9 e6 bb 18 98 d8 c4 30 be f2 af 76 84 c7 1e 7d 82 9e e3 cf a7 c0 51 cf 9a 0d 9b 29 4d 73 e2 76 ba 88 36 d7 f2 ee 82 f7 a8 da 57 cf f0 53 bf 41 aa 23 cc f6 9d 15 0c 1c 39 96 ac 64 37 00 36 60 d8 31 6a 6b aa d9 b6 6d 33 ce d4 02 86 f6 2b 05 60 5f f5 6e 3c a9 39 10 ac c3 f4 a7 63 c6 82 ec 6f 0c 61 13 e6 a1 Data Ascii: !_[s/+)GhO"rZt=[~?;GF=tO1"g~b(+7b7#p3kY6WTDHgxSq0v}Q)Msv6WSA#9d76`1jkm3+`_n<9coa
2024-04-25 18:47:28 UTC	2838	IN	Data Raw: 83 6b 83 65 5b b4 16 6c 88 0c b6 6b d1 94 af 7d 7f 65 57 86 7b af ca b3 c2 03 52 68 cd 59 90 71 f9 dc 1d 0d e4 ac 54 d7 d7 14 91 ba 50 0f 96 88 5c ba d4 d0 da e8 b2 fd 0a 9f 3f 78 a2 ca 91 f1 88 55 cd 2e 3b 7b 32 3c 74 b0 44 4b de a6 c9 85 a1 b3 01 6d 7d 45 1e e8 f7 19 9c 8e 39 34 16 d3 df ed b1 ae c1 21 f4 0c ce 15 3e 57 76 e6 68 ce 3a 9c 19 0b 18 8f 5c f6 6c c8 b0 aa d9 e1 c1 7d 73 3c 37 12 e3 7b 16 5d 8d 4e 2d 08 a5 d0 d5 e0 72 76 aa ca b1 e1 88 5f b9 be 89 81 1c 3c 38 18 70 6d 7f 9e a6 4a c2 e1 c9 88 c8 75 d8 da e5 71 7c b0 c2 ca ee 0c 95 d0 70 6d 6f 16 37 e7 d1 d7 68 73 b6 6a 68 2f e8 88 53 44 ea 47 fb 13 11 a9 8b 28 31 e4 3c 8b 5f d9 51 e4 a3 57 17 e9 69 72 6b a7 02 4d ad 26 6b be 92 32 b3 90 d0 de e4 b0 ff f4 02 47 e7 53 ee 59 93 a3 c9 87 03 67 02 Data Ascii: ke[lk}eW{RhYqTP\?xU.;{2<tDKm}E94!>Wvh:\l}s<7{]N-rv_<8pmJuq\|pmo7hsjh/SDG(1<_QWirkM&k2GSYg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49737	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	378	OUT	GET /en-us/sharefile/media/catalog-1c.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:27 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 71175 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:27 GMT Etag: "c0917092a1e02a4da21a8741a5dcc373-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B0AVYPH0PB99E4HZSNK5 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:27 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 26 00 00 01 35 08 06 00 00 00 d3 64 2b ee 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 22 0e cf d6 48 a2 00 00 20 00 49 44 41 54 78 9c ec bd 79 7c 15 45 ba ff ff ee b3 26 e7 64 df 13 b2 13 c8 02 49 00 59 54 06 65 1d 45 05 11 c5 05 70 99 51 71 d7 99 d1 f1 37 d7 19 af ce d5 eb d5 f1 7a bf d7 71 9b d1 b9 3a 38 20 6e a0 2c 22 a0 08 6e 40 80 10 04 02 64 03 12 b2 90 7d 3d 39 7b f7 ef 8f 93 d3 26 10 96 2c 10 02 f5 e6 15 72 d2 5d 5d fd 74 77 9d aa 4f 3f f5 54 95 34 6b d6 2c 05 81 40 20 10 08 04 bd 46 51 14 5c 2e 17 06 83 1e 45 b4 aa 7d 42 37 d0 06 08 04 02 81 40 30 d8 91 24 09 45 01 b7 5b 46 ab d5 0c b4 39 83 1a 21 4c 04 02 81 40 20 e8 07 74 3a 1d 2e Data Ascii: PNGIHDR&5d+pHYsttfxtIME"H IDATxy\|E&dIYTeEpQq7zq:8 n,"n@d}=9{&,r]]twO?T4k,@ FQ\.E}B7@0$E[F9!L@ t:.
2024-04-25 18:47:27 UTC	2372	IN	Data Raw: 6c 36 9d d4 fb 21 49 3f 8b 12 e1 21 11 08 04 02 41 4f f1 b6 3d 9d db 93 0b 0d 11 b9 d9 0b 14 45 c1 60 30 02 d0 d2 d2 ca d2 a5 1f 12 19 19 4d 4b ab 05 8d e6 e4 52 56 51 bc 1e 97 0b b4 34 09 04 02 81 e0 ac e2 6d 43 2e e4 66 44 cc fc da 0b 8c 46 23 2d 2d ad 3c fe f8 bf 71 ed b5 57 f3 c9 27 cb a9 ad a9 24 2e 6e 08 b2 dc 7d 69 b9 d0 c4 c8 85 76 3d 02 81 e0 e2 e0 42 89 d9 f0 d6 c1 17 ca f5 74 46 78 4c 7a 88 46 a3 41 96 dd 3c fc f0 6f d9 ba ed 3b 36 7f fb 1d bf fb cd 63 18 8d be e8 74 da 13 1a ec c1 ee 21 f9 59 9d 77 fd 11 08 04 82 c1 c8 c9 ea b4 c1 5a af 0d 66 db 4f 86 f0 98 f4 10 45 01 93 c9 80 d5 da 48 46 fa 70 f6 ed dd 8d d1 60 24 20 c0 1f 59 96 8f 4b 3b 38 0b cb 60 b5 5b 20 10 08 fa c2 60 f6 42 28 8a 32 28 ed ee 0e e1 31 e9 21 8a a2 a0 d7 eb f1 f3 f3 c3 ed Data Ascii: l6!I?!AO=E`0MKRVQ4mC.fDF#--<qW'$.n}iv=BtFxLzFA<o;6ct!YwZfOEHFp`$ YK;8`[ `B(2(1!
2024-04-25 18:47:27 UTC	538	IN	Data Raw: f1 8f 7f a0 28 0a 95 55 55 5c f5 cb 5f b2 79 f3 66 00 56 ad 5e cd e2 c5 8b f9 fa eb af 79 e4 e1 87 99 3d 7b 36 cf fe f9 cf ec dc b9 93 17 5f 7a 89 98 98 18 b6 fc f8 23 ff fd df ff cd 27 9f 7e 4a 56 56 16 4f 3c f1 04 53 a6 4c e1 b3 15 2b 88 8c 88 a0 b9 a9 89 b6 b6 36 fe f8 a7 3f 91 9e 96 46 ce b6 6d bc f0 c2 0b 3c ff 9f ff c9 de bd 7b 71 bb dd f8 99 cd 7c f4 e1 87 dc be 70 21 6f bf fd f6 79 e1 0e 16 08 04 5d f1 7a 9c 57 ad 5a 45 6d 6d 2d f3 e7 cf 67 58 4a 0a 37 de 78 23 3f fe f0 03 3b 76 ec 10 f1 7c 3d 40 08 93 0b 0c 59 96 89 8e 8e 26 32 22 82 90 90 10 1c 76 3b 46 a3 91 9b 6f be 99 9a 9a 1a be fd f6 5b 22 22 22 30 99 4c 28 8a 82 56 ab 45 a3 d1 10 16 16 46 62 42 02 bb 76 ed a2 b0 b0 10 1f 1f 1f e8 65 7f a4 5e af c7 df cf 8f da ba ba 2e db 77 ed da c5 b6 6d Data Ascii: (UU\_yfV^y={6_z#'~JVVO<SL+6?Fm<{q\|p!oy]zWZEmm-gXJ7x#?;v\|=@Y&2"v;Fo["""0L(VEFbBve^.wm
2024-04-25 18:47:27 UTC	4744	IN	Data Raw: 30 b9 40 e8 3c f9 8e db ed c6 e5 72 e1 76 bb d1 68 b5 b4 b6 b4 50 5c 5c cc f4 19 33 c8 ce ce 66 e5 ca 95 54 54 54 a0 91 24 5a 5b 5b 91 24 89 9d 3b 77 b2 69 d3 26 2e b9 e4 12 d2 d2 d2 70 b9 5c bd 0e 94 f2 f1 f1 e1 c6 79 f3 78 f5 7f ff 97 9d 3b 77 02 b0 63 c7 0e 6e 98 3b 97 bd fb f6 e1 eb eb 8b 56 a7 c3 6e b7 03 90 96 96 46 6a 6a 2a 2b 96 2f e7 cd d7 5f 67 f2 e4 c9 18 0c 06 7e 75 f7 dd 18 8c 46 1e 7c f0 41 22 23 23 b1 da 6c de 8b a5 ae b6 16 14 85 94 61 c3 88 8a 8c e4 d5 57 5f e5 b3 e5 cb b9 ee ba eb c8 1c 39 52 b5 65 d4 a8 51 7c f5 d5 57 d4 d4 d4 70 f8 f0 61 6e be f9 66 aa ab ab c9 ca ca e2 a3 8f 3e c2 6e b7 f3 f9 ca 95 34 36 36 92 96 96 86 c3 e1 50 ed b2 db ed ea e4 48 b2 2c 63 eb 38 bf c3 e1 c0 60 30 90 92 92 42 f2 d0 a1 7c b8 6c 19 ef bd fb 2e 93 a7 4c Data Ascii: 0@<rvhP\\3fTTT$Z[[$;wi&.p\yx;wcn;VnFjj*+/_g~uF\|A"##laW_9ReQ\|Wpanf>n466PH,c8`0B\|l.L
2024-04-25 18:47:28 UTC	5930	IN	Data Raw: 6a b5 34 35 35 b1 63 c7 0e ca 2b 2a d8 b6 6d 1b ed 56 6b af bb 80 74 3a 1d 99 99 99 fc 73 f1 62 ac 56 2b d7 5e 7b 2d e9 e9 e9 18 8d 46 5a 5a 5a d4 ca 71 fc b8 71 bc f2 ca 2b 04 07 05 61 36 9b 19 9a 9c 4c 5c 6c 2c 37 cf 9b 47 52 72 b2 1a 2f e2 76 bb f9 fa eb af b9 74 c2 04 ae be fa 6a 2c ed ed 5d 46 61 74 8e b3 70 bb 5c d4 d4 d4 f0 e3 96 2d cc 9e 35 8b f1 13 26 50 5f 5f 8f cd 66 53 47 36 78 47 5f 78 3f 5b 2c 16 e2 e2 e2 48 4c 4c 64 c6 8c 19 9e 78 05 45 e9 12 9f e3 76 bb 29 2d 2d 25 29 29 89 a2 a2 22 0a 0b 0b 29 eb 88 11 48 ef f4 b6 a9 d5 6a a9 3a 76 0c 97 cb 85 dd 6e 57 af d5 d6 51 c9 bb 65 99 fa fa 7a 76 ec d8 c1 0d 73 e6 10 12 12 c2 ca 55 ab 80 9f 57 8a f6 5e 8b d5 6a c5 cf cf 8f e4 a4 24 32 33 33 b9 e5 96 5b f0 f7 f7 47 ab d5 92 32 74 28 9f 7c fa 29 e9 Data Ascii: j455c+*mVkt:sbV+^{-FZZZqq+a6L\l,7GRr/vtj,]Fatp\-5&P__fSG6xG_x?[,HLLdxEv)--%))")Hj:vnWQezvsUW^j$233[G2t(\|)
2024-04-25 18:47:28 UTC	7116	IN	Data Raw: 56 92 8e 0b 1f 3c 1b f1 25 27 35 b8 fb 6d 67 d4 8c f4 25 98 f5 04 1b fa 5f 9c 08 61 72 16 91 00 59 55 26 9e 87 27 39 ec c8 76 1b 68 24 cf e2 7d 2e 05 6c 36 24 97 93 be 0d 1c a6 db 89 85 4e be 80 20 1d 0b 08 9e b8 ff 6c 2f 28 a8 d5 e9 88 8c 8c 64 c8 90 21 5d b6 bf f7 cf 7f 72 f0 e0 41 32 d2 d3 89 8b 8d 65 c5 67 9f d1 dc d4 84 d3 e5 62 c7 f6 ed dc 7f ff fd ac 5b bf 9e bc bc 3c 7c 8c 46 be fd ee 3b 7e ff c4 13 b8 5d 2e fe f5 af 7f 31 7c f8 70 f6 1f 38 c0 9c 39 73 98 31 7d 3a 01 81 81 c4 c5 c5 31 24 26 06 a7 d3 49 f2 d0 a1 f8 f9 f9 51 5f 5f cf cb 2f bf 4c 40 60 20 96 b6 36 be fd f6 5b 1e 7f fc 71 8a 8b 8b f9 db df fe 46 64 64 24 b5 b5 b5 64 64 64 f0 eb 5f ff 1a 8d 46 83 bf bf 3f 65 65 65 bc f6 da 6b 3c f8 d0 43 e4 e4 e4 b0 7c c5 0a 42 43 42 58 fb e5 97 3c f6 Data Ascii: V<%'5mg%_arYU&'9vh$}.l6$N l/(d!]rA2egb[<\|F;~].1\|p89s1}:1$&IQ__/L@` 6[qFdd$ddd_F?eeek<C\|BCBX<
2024-04-25 18:47:28 UTC	8302	IN	Data Raw: 71 e8 f2 3c 88 cb 8a b1 d0 5d 6b 43 b9 e2 2f b5 4a 0f b5 de 21 9a 02 69 dc 26 d0 8a 20 08 09 82 80 c0 f7 86 c9 3c 24 d9 42 67 a4 a1 78 bc 62 a5 ba 5c ae a3 70 ae 2a 5f 39 cf 71 43 ed dd 61 01 81 08 26 6e 67 fe b1 ae 95 c8 8a be 6d 28 59 b2 83 84 c0 5a eb 3d 22 a1 63 fe 66 a7 ab 03 95 28 51 a2 44 89 6d e3 56 c9 49 d7 b1 32 6f 8b b3 a7 81 0e bc 7d b5 84 41 c8 b9 f9 2b 2c b7 d7 08 95 b3 69 4b f1 aa f3 6a a0 d0 3a ab 53 92 17 3b df 90 d8 91 25 e2 a2 14 62 9d 7d 1c ee ed a3 3f a8 92 b4 db 4e 72 a1 03 42 ad 9d 0c 43 3b 22 a2 7d 08 47 df e9 ee c2 9b ad 87 88 a2 aa 35 55 ad 59 35 09 0a c5 72 6b b5 93 9b e2 0d b4 ce 64 a1 59 63 a1 a2 46 43 0a de 07 bf 8f f6 69 bd c6 a6 0c d7 06 d8 d3 3f 8a 4a 2d 89 24 44 51 44 e0 5d 45 5a 6b 94 76 8b a0 7d 7d 92 2c f5 c9 9f 38 1b Data Ascii: q<]kC/J!i& <$Bgxb\p*_9qCa&ngm(YZ="cf(QDmVI2o}A+,iKj:S;%b}?NrBC;"}G5UY5rkdYcFCi?J-$DQD]EZkv}},8
2024-04-25 18:47:28 UTC	3101	IN	Data Raw: 98 91 51 a7 2f 89 5b ce d0 37 9b c2 e9 13 96 34 75 e1 9a cf fe 59 c2 b7 7f 57 44 9a ba 26 8c 71 5b 88 5b 70 f6 b4 db 27 08 5d 48 ed ec 69 4b ab 05 bf fb 1f 63 7e e4 27 2a fc c3 7f 52 65 69 51 f8 ea 0b 86 34 15 3e f5 9f 13 7a 7b 15 3f f6 b1 0a d6 c0 f9 73 96 ff f2 7b 09 61 78 73 8c 57 04 46 c7 ee d1 d8 5a 89 12 3b 82 1b f9 ee 5c c7 c3 72 5d 72 92 bb 49 72 65 67 87 f0 64 f2 83 62 81 35 e9 ba 30 57 28 94 b7 a5 92 85 7a d6 1d 5d 6b cd f4 f4 34 97 2f 5f ee 7e ed f7 7f ff f7 77 0f 4d 29 4c dc 22 5d 9c be 7d e9 48 db 40 36 b9 2c 73 45 44 1c 83 52 01 61 bd 1f 31 a9 0f 91 a8 4e f8 23 bb 77 03 47 50 84 41 c0 a9 37 ce f3 c6 85 cb 84 e1 d6 57 ec 45 b7 d1 b5 90 11 11 70 35 4a 8e 1e 3d 4a 4f 4f 0f 2f bd f4 12 00 83 83 83 bc e7 3d ef 21 49 12 be f4 a5 2f d1 68 34 b6 0c Data Ascii: Q/[74uYWD&q[[p']HiKc~'*ReiQ4>z{?s{axsWFZ;\r]rIregdb50W(z]k4/_~wM)L"]}H@6,sEDRa1N#wGPA7WEp5J=JOO/=!I/h4
2024-04-25 18:47:28 UTC	10674	IN	Data Raw: ca 06 21 6c 11 b7 fd 9b 5f 24 24 1d 82 21 08 1a 8b 22 55 15 12 ab 49 88 48 8c c2 78 22 e2 5c 3e dd 72 9e 8c c6 88 2f f4 61 f3 e3 fa a7 15 be f7 9d b8 63 5a 4d a4 52 b7 bf df d9 88 30 39 3e 46 b3 dd e6 d2 95 19 74 a0 d1 79 28 65 0b 78 f2 92 a6 29 a7 4f 9f 06 c8 fb ea 6c 17 59 bd 94 c3 fb f7 d0 d7 5b c7 a4 d6 cf 41 fc d0 05 51 da 89 87 ae d1 91 f8 fa 15 4e ca fa 00 00 20 00 49 44 41 54 e7 71 e5 c1 b7 a3 2d 49 53 d7 37 e6 e1 c7 02 a6 f6 80 b5 0a a5 85 af bd 90 32 3e a1 d9 bd 4f a1 94 e5 d4 09 cb d8 b8 eb a5 72 7b a1 a9 56 6b 3c f5 74 c2 db 1e 89 39 7b aa c5 a9 13 8a 57 be a9 a9 d5 02 c2 50 a1 b6 f0 6a dd 0b 10 eb ea e4 34 9b 96 30 32 4c ec 16 3e f8 84 62 70 a8 02 dc 9e 62 2d cf bc 2f e0 6d 8f 68 fe ec 8f 52 9e ff 9c 61 e6 aa 45 2b 21 aa ba 94 f0 7b 4d 43 74 Data Ascii: !l_$$!"UIHx"\>r/acZMR09>Fty(ex)OlY[AQN IDATq-IS72>Or{Vk<t9{WPj402L>bpb-/mhRaE+!{MCt
2024-04-25 18:47:28 UTC	11860	IN	Data Raw: 37 50 a8 1a 2d 1e d8 2f 03 30 76 2b c7 7e 69 af 9a 4e 2b 57 53 28 db c6 db 16 2c 56 d5 5a 9a df 47 f3 84 c6 8c 26 1e a9 7b 95 69 bf 24 c4 e3 68 7f 14 f4 89 d4 02 a2 59 b1 12 b4 b5 18 6b e9 4b b5 7d d8 52 4d 44 aa b2 4f e6 1c 83 43 89 f2 29 2d 9e 54 bc 5c b7 b7 44 e3 69 62 0b bf 7f 1f 3b 98 b7 77 58 bd 6e a1 10 d6 e2 8e e7 f6 f6 21 6b b0 d9 c8 a5 17 78 ca d6 cb 0e 16 a5 82 65 40 ca 7c 5d 73 55 f9 07 3f af 38 ff 60 ba 13 a5 48 b0 d8 8d 75 f7 4a 57 5b ff 3d 2e f1 8d a3 40 f7 2a 45 2a de c7 2e 46 6f b5 0c da 2a de 8c 13 0b 94 5d 3e 89 ca 1b 7f e0 9a 2d 92 6f fe fb d2 aa 55 7e e2 9e 2d 91 c5 ba 4c 7b 97 59 f3 44 3d 64 e2 cd b4 4f 9a 3c d7 0c 0b bc d6 e4 ed f0 63 d7 f4 5f 89 29 a3 b2 bc cc 72 ce b4 7e 6e 0d 6f c9 39 d4 5d 85 10 d7 12 49 cf f8 cd 68 fe f2 3e 1b Data Ascii: 7P-/0v+~iN+WS(,VZG&{i$hYkK}RMDOC)-T\Dib;wXn!kxe@\|]sU?8`HuJW[=.@E.Fo*]>-oU~-L{YD=dO<c_)r~no9]Ih>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49739	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	378	OUT	GET /en-us/sharefile/media/catalog-1a.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:27 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 67062 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:27 GMT Etag: "4f24d2d10b210f7847a2cae95f715564-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B0AZ5CD37410YX7ST61D X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:27 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 3d 08 06 00 00 00 d7 b7 1c a8 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 1e 34 7a 29 e8 ef 00 00 20 00 49 44 41 54 78 9c ec 9d 77 9c dc c4 d9 f8 bf 23 6d bd ea de 7b a7 d8 14 83 0d a1 98 9e 90 90 00 09 09 25 90 90 f6 be f9 25 90 42 42 3a 6f 02 24 01 de 90 42 2a 25 a1 43 02 6f 12 42 0d a1 63 c0 60 c0 18 0c b8 f7 76 b6 ef 7c 77 be b2 4d 2b cd ef 0f ad 76 25 ad b6 dc 79 6d 53 e6 eb cf 79 47 a3 d1 68 34 8f 9e 67 9e 29 92 84 94 52 a2 50 28 14 0a 85 42 a1 a8 19 21 c3 30 f6 75 19 14 0a 85 42 a1 50 28 de 53 84 2c 69 ed eb 32 28 14 0a 85 42 a1 50 bc a7 10 6a 8a 50 a1 50 28 14 0a 85 a2 b6 68 fb ba 00 0a 85 42 a1 50 28 14 ef 35 94 83 a5 50 Data Ascii: PNGIHDRX=pHYsttfxtIME4z) IDATxw#m{%%BB:o$B*%CoBc`v\|wM+v%ymSyGh4g)RP(B!0uBP(S,i2(BPjPP(hBP(5P
2024-04-25 18:47:27 UTC	2372	IN	Data Raw: 7d e9 a5 7c eb 5b df e2 ea ab af e6 fa 1b 6e 60 fe fc f9 2c 5c b8 90 1b 6f ba 89 0d 1b 36 94 3d 56 4a 49 57 57 57 f1 b5 2c 7d 85 6b ff 70 0b 89 54 86 35 6f 3c c7 d5 bf b9 99 a4 05 20 d9 b4 69 23 59 00 cb e0 ce 5b fe c4 3f 9f 78 09 03 c0 4a b3 71 d3 16 00 cc de 9d 2c 78 61 11 76 74 6f 3e de 61 cb 96 2d 18 a6 04 f5 ad c7 3d 82 ae 6b b4 b6 b6 f1 c4 13 cf f2 ca 2b 8b 18 38 68 00 9a a6 d6 67 bc 2b 91 e0 ef a7 f5 77 bc c2 ca 42 46 7d bf fe 3d 4f 3a d9 cb fa 0d 1b d9 d5 93 aa fe 20 99 a5 ab 37 b9 e7 0a a5 50 f8 e8 d3 1a ac cd 9b 37 b3 f8 f5 d7 39 6c f6 6c e6 cd 9b 87 ae 69 b4 b4 b4 60 59 16 13 26 4c 00 e0 8e 3b ee 60 ce dc b9 7c ed e2 8b b9 ed f6 db 59 b9 72 25 f1 78 9c 5f fc e2 17 24 12 09 be f0 85 2f 30 7b f6 6c 2e fb 9f ff c1 c8 64 18 3b 76 2c 47 1c 71 04 5b Data Ascii: }\|[n`,\o6=VJIWWW,}kpT5o< i#Y[?xJq,xavto>a-=k+8hg+wBF}=O: 7P79lli`Y&L;`\|Yr%x_$/0{l.d;v,Gq[
2024-04-25 18:47:27 UTC	538	IN	Data Raw: c8 5d a1 50 28 14 0a 85 a2 c6 28 07 4b a1 50 28 14 0a 85 a2 c6 28 07 4b a1 50 28 14 0a 85 a2 c6 84 0c c3 d8 d7 65 50 28 14 0a 85 42 a1 78 4f 11 32 8c ec be 2e 83 42 a1 50 28 14 0a c5 7b 0a f5 14 a1 42 a1 50 28 14 0a 45 8d 51 6b b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a 8c 72 b0 14 0a 85 42 a1 50 28 6a cc 5e 77 b0 da b6 6f 62 f5 ea f5 a4 0c ab aa f4 Data Ascii: ]P((KP((KP(eP(BxO2.BP({BP(EQkBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(jrBP(j^wob
2024-04-25 18:47:27 UTC	4744	IN	Data Raw: 62 c9 f3 4f f2 ed cb 7e 4a 87 05 2b 5f 7d 90 6f 7f f7 27 74 67 60 e5 ab 4f f3 d3 ab ff 97 ed 09 09 56 8a db ff 70 35 f3 8e 9c cd 84 49 53 38 fd dc 2f 32 ff 8d b5 00 3c fd d0 5d 5c f1 eb bf 12 8d 46 79 e2 be eb f9 da d7 2e e5 b5 65 db 68 dd b1 96 35 2b 97 d3 d2 d2 6d 9f db e8 e1 2f d7 fd 94 63 e6 1c c2 c4 c9 53 39 fb f3 5f 65 c1 5b eb ed 7d 32 c5 9f ae ba 9c 9b ef 7f 92 f9 ff fe 1b 47 1f 7e 10 33 0e 9c cd 4f 7e 7d 2b 99 9c bf b9 fe cd 05 7c f1 dc 33 98 38 61 02 87 1f 7b 32 b7 fc e3 b1 bd 20 15 85 42 a1 50 28 14 35 45 ee 65 be 76 de a1 12 46 c8 37 b7 4a d9 b6 ec 01 09 c8 e1 23 46 c9 69 fb cf 92 c7 9f 78 9c 8c 81 0c 0d 9e 2a 57 6c 69 93 5f 38 63 ae 04 64 43 53 93 0c 85 90 30 4a be b6 21 2d 1f bb f3 2a 09 c8 01 a3 a6 c8 93 4f 39 49 c6 40 d6 8f 3e 40 be b2 a6 Data Ascii: bO~J+_}o'tg`OVp5IS8/2<]\Fy.eh5+m/cS9_e[}2G~3O~}+\|38a{2 BP(5EevF7J#FixWli_8cdCS0J!-O9I@>@
2024-04-25 18:47:27 UTC	2733	IN	Data Raw: 3e bf 3d 70 cc 74 ce 3e 7b ba 2b c5 70 26 e5 42 e7 7d 7a 1c 00 6b 5b 47 32 b8 b9 91 89 a7 7f 82 53 3f 30 85 e6 68 88 2f 7d 61 a6 9d 68 ff 83 00 e8 6d 5b cf d3 6f ee e0 f2 2b 2e db f7 2b f9 df 01 48 d7 9f 73 2b f9 0d 78 30 d5 dc 76 39 43 94 bb 99 dd 0a 1f 98 4b 09 03 5d ea 8c a5 14 ad dc be aa c3 7b 42 a9 fd fb 85 37 ce df 68 08 c0 fb a4 4b 75 f8 47 a5 82 4a b1 3b ab 0a 3c c6 3a a8 61 76 c7 55 92 69 3f 8c 75 35 e9 02 f7 57 21 d3 dd 6a 98 5d f9 fb 7b de 9e 35 59 12 ca 4d c4 07 11 3c 2a e9 97 63 f5 77 8a 5f 15 f3 72 83 a2 f7 24 79 64 ea bb 67 83 f2 2d 17 57 b3 b0 ab 3c 7d 96 53 5f f6 07 e4 ef 59 b7 e3 48 c6 f5 fe a4 f2 b5 2f 8b 42 c5 0e b4 bf 34 fd c3 23 53 d7 89 dc 75 e7 d6 d3 fe e8 a8 7f bb bf 61 77 59 f7 96 8e e6 54 b2 84 dd 75 6c 72 9f bb 9f 55 b1 cf 1d Data Ascii: >=pt>{+p&B}zk[G2S?0h/}ahm[o+.+Hs+x0v9CK]{B7hKuGJ;<:avUi?u5W!j]{5YM<*cw_r$ydg-W<}S_YH/B4#SuawYTulrU
2024-04-25 18:47:28 UTC	7116	IN	Data Raw: 4c 2d 49 54 0f a3 69 85 91 dc 72 32 dd 5d a7 2a 1f 2e d3 08 c7 85 dd 09 7a 2e fd 2f 9e 4b df cd aa ec 8b 24 e4 2e 24 16 22 df 25 93 58 48 42 84 19 a4 8d e6 90 f0 87 38 31 76 21 d3 43 07 92 91 b6 63 e6 69 84 73 c7 08 59 70 a4 0a db b9 b0 4f be d5 74 82 f2 8e 9a c4 25 53 27 77 d7 79 71 c9 df 25 3b fc 76 57 80 c8 e9 a8 93 36 1a d6 6d 1b da 07 bb 1b 0b 85 30 ad 62 eb 56 49 a6 a5 e4 b6 3b f2 2c 15 ee b7 03 e6 8a f4 ce 14 48 44 ae b5 09 9e ea 7d 0f ae c1 0a 85 42 34 36 bc bf bf 13 b8 77 b0 6f 1e 8d 5c 6f c7 d5 2b 72 cc b7 fb 49 0a c7 a8 e8 9a 20 9d b5 b8 f2 81 a5 ac 69 ed 25 1a d2 fc d9 82 80 44 c6 e4 84 fd 86 73 d1 89 53 90 12 b6 27 da f9 e1 4b 3f 61 67 aa 9d b0 08 be c5 12 d9 04 9f 9e 7e 2e 9f dd ef 4c 7a 8d e2 fd 7d 55 b0 8a 69 45 70 7c 5c 87 94 29 f9 d9 aa Data Ascii: L-ITir2]*.z./K$.$"%XHB81v!CcisYpOt%S'wyq%;vW6m0bVI;,HD}B46wo\o+rI i%DsS'K?ag~.Lz}UiEp\|\)
2024-04-25 18:47:28 UTC	8302	IN	Data Raw: 8c 4a d3 3e 4e 23 44 de 50 17 9e 5a 71 f5 a4 5c d3 0f 85 df 32 79 52 90 97 8d 4b a6 b9 d1 2c e7 05 a7 de 74 36 96 05 59 5d 47 b8 87 ea 03 64 6a 19 99 bc 4c b3 32 8b 1e 8e 52 64 42 5d 32 35 01 33 37 55 ec b6 b6 ce 3a ae fc b4 66 ce 0b 88 84 75 36 6d 5e cf 63 cf ff 95 90 1e c9 3b 75 03 9a 06 d1 dd dd ce 3f 1f bd 9e a3 0e 3d 09 13 e9 99 86 00 9f 4c 2d e7 01 8d ea b9 fc f2 cb 59 b1 72 05 8b 16 2d 62 d8 b0 61 fc e6 37 bf 61 d4 a8 51 00 ac 5a b5 8a 75 eb d6 96 38 52 a2 49 b3 30 45 98 1f c1 f2 ca b4 d0 43 ce 7d 86 a3 62 63 4c be ae bd 3a 8a 4b 2f fc 72 2f a4 31 a4 40 d3 c3 9e 1c a5 4f 9e 86 65 21 65 26 3f 0d 69 08 13 11 2e af a3 59 13 30 5d fa e4 b3 17 ce f4 14 39 c7 39 a4 e9 bc b6 e4 71 d6 6c 7c 8b 48 38 9a 3b 44 a3 b9 69 30 8b df 7e 86 17 17 1d c9 a7 3e fc 59 Data Ascii: J>N#DPZq\2yRK,t6Y]GdjL2RdB]2537U:fu6m^c;u?=L-Yr-ba7aQZu8RI0EC}bcL:K/r/1@Oe!e&?i.Y0]99ql\|H8;Di0~>Y
2024-04-25 18:47:28 UTC	9142	IN	Data Raw: a8 7b fd e1 a4 b0 c1 15 de 11 33 f2 6e 5a 5a 59 0e 92 23 cd bb 33 57 73 91 79 01 7f b6 ef e0 1e eb 5e f6 c9 7d 8c 90 a7 26 6b 38 48 4c 0c 72 22 47 9b 68 65 91 58 c0 85 e6 39 9c 6d 2e a1 83 36 f2 72 08 e9 4d e3 8f 1a 57 be a1 13 53 da 04 c6 95 17 6a 21 c7 b1 81 b7 5a 5b 49 e3 04 ad 9d 94 dc 75 bc b6 0d cb 5d 81 a0 fd a2 77 20 42 ad 0e 6e 90 bf 49 5b 6b 9b bb e5 a0 26 77 69 6d f1 e5 6e b5 2a 19 ce 8f 8c 22 77 f3 71 b9 2b dd 8d c9 f5 20 f7 c0 16 1c cd c0 82 00 d3 a8 dc 8d 0f fb ea 98 46 3d 5b 12 89 ed 04 65 b8 d7 b5 36 d2 e4 27 10 36 a6 fc 21 5c ef 1e 19 e0 5a 57 ee 6a 31 58 3c ab 82 dc 27 e8 b0 51 10 73 11 61 57 c5 7c 9e b7 23 58 4c 50 cb 25 a5 bb 8a 7b 84 9d 4c 33 45 be 98 e7 eb df bd 86 52 a9 84 61 1a d8 b6 4d ad 56 23 93 ce 60 98 06 d5 4a 95 93 16 9f c8 Data Ascii: {3nZZY#3Wsy^}&k8HLr"GheX9m.6rMWSj!Z[Iu]w BnI[k&wimn*"wq+ F=[e6'6!\ZWj1X<'QsaW\|#XLP%{L3ERaMV#`J
2024-04-25 18:47:28 UTC	10674	IN	Data Raw: db db d8 b3 73 07 16 29 0e ee db 4d 77 df 08 53 3a 26 61 15 fb 59 b9 6a 3d d3 67 cc a0 96 cf 73 e0 40 2f 7b b7 af e5 dd 1f 78 2f 6d 0b 96 70 f4 8c f6 7f 04 14 87 44 4f d5 c0 1a d8 b5 96 2b de fe 41 1c a7 c6 ad 37 dd c4 48 c9 62 77 4f 2f c7 1e 3b 9f 7d 7b 76 b0 7f b0 c2 e4 f6 56 ec d2 20 ab d7 6f a1 ab 6b 1a 20 59 b7 66 0d 3f bb fe 1b ec b4 3b 79 ee 8c 4e f6 1e e8 e6 9e bf dc 8d cc b6 31 b5 b3 83 8c 51 65 6f df 20 cd 19 58 bd 76 13 53 bb a6 22 80 3b 6f b8 96 4f 7e eb 37 d8 c5 61 d2 69 c1 f6 1d 7b 78 f8 af 77 b3 af 3a 95 53 8f 69 65 d5 fa ad 74 4d 9b 0a c0 6d 3f bf 8e cf 5d f7 7b 84 9d c7 c8 e4 c8 64 9a 68 6b c9 b0 6b e7 1e cc b4 a4 67 e7 0e fa 0a 16 1d 6d cd e4 0f f6 b0 6a e3 0e 66 4e 9f 46 a1 30 44 5f ef 01 b6 af be 97 f7 fd df 8f 71 d4 92 17 33 a3 bd 65 Data Ascii: s)MwS:&aYj=gs@/{x/mpDO+A7HbwO/;}{vV ok Yf?;yN1Qeo XvS";oO~7ai{xw:SietMm?]{dhkkgmjfNF0D_q3e
2024-04-25 18:47:28 UTC	11860	IN	Data Raw: 0e 7a 9d b1 33 c7 99 58 af 32 3c d0 cd f2 ec 34 c1 d6 5e 50 72 c4 13 15 ba 3b c2 ac ac 2c 61 32 d9 a0 a5 8b fe 26 1b 97 27 2e 23 14 6b 38 bc 4d 2c 9d 9d c0 d2 12 62 a8 3f c6 b1 b1 22 26 4b 10 bb 43 62 25 ba 48 eb c0 16 76 0f b4 32 76 e5 02 eb d1 65 34 cd c4 96 2d bd 24 d3 05 06 7a da f8 d6 3f 7e 87 e1 fd 07 c8 2c 8c 11 49 ca ec d9 b5 95 89 ab 57 e8 ee 1f a0 92 8f 90 4c ea 08 06 09 87 d7 8b d7 ee e4 b9 a7 bf 45 3c 23 d1 d3 1d 26 b2 96 62 a4 c3 cf d4 dc 2a 83 a1 01 e2 2b 51 24 9f 46 36 96 64 64 b4 9f e7 9e 7c 04 5b 53 3f 6e 97 9b e6 80 83 2b 57 ae 51 af d6 b1 87 fc d8 35 99 44 51 a5 bd 2b 4c 3e 79 96 4b eb 39 42 2d fd 18 28 33 bb 12 a7 6f f7 dd 74 90 25 a7 5b 29 a7 97 59 cb 96 50 eb 1a 34 35 31 d2 db cd f2 d2 38 ab d1 0c 7b f6 1c a1 ab d5 73 bb 2d f8 63 64 Data Ascii: z3X2<4^Pr;,a2&'.#k8M,b?"&KCb%Hv2ve4-$z?~,IWLE<#&b*+Q$F6dd\|[S?n+WQ5DQ+L>yK9B-(3ot%[)YP4518{s-cd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49740	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	378	OUT	GET /en-us/sharefile/media/catalog-1b.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:27 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 62383 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:27 GMT Etag: "44a2a5e91ee4e4c7123906d55d3646a8-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B0AYS8NKMBGFVND0VG2K X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:27 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 26 00 00 00 ed 08 06 00 00 00 8b 7e be 18 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 21 01 74 44 06 f0 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 5d d5 9d e8 fd ef ae e7 1c 1d f5 de 6d 09 5b 72 ef dd 60 03 36 b6 31 60 4c 35 c5 c0 04 92 10 48 99 79 93 09 49 de 90 4c 26 73 67 de 37 09 b9 01 6e 42 86 49 08 21 f4 12 88 8d a9 06 f7 82 ab dc 25 b9 48 56 ef 5d a7 ed 7a ff 38 92 62 1b 13 6c 30 b8 ad cf f3 f8 b1 74 b4 cb 5a 5b 47 7b ff ce 2a bf 25 3d f2 c8 23 2e 82 20 08 82 20 08 e7 00 f5 6c 17 40 10 04 41 10 84 33 4f 02 90 a4 b3 5d 8c d3 26 02 13 41 10 04 41 b8 c0 48 92 84 65 db 38 b6 7d b6 8b 72 da 44 60 22 08 82 20 08 17 10 49 92 30 4d 13 d3 b4 50 Data Ascii: PNGIHDR&~pHYsttfxtIME!tD IDATxwx]m[r`61`L5HyIL&sg7nBI!%HV]z8bl0tZ[G{*%=#. l@A3O]&AAHe8}rD`" I0MP
2024-04-25 18:47:27 UTC	2372	IN	Data Raw: 62 62 22 b6 6d 0f b4 fe 9c ec 7c fd fa 83 9a 93 06 33 92 82 47 71 d8 bd 65 0d fb 8e d4 60 59 2e 71 89 e9 4c bb 74 26 59 89 3e 22 86 89 2c 2b a8 9a 8a e4 ba 98 a6 09 8a 8e 14 6c 62 f9 96 fd 5c 75 e5 55 c4 b8 11 0c db 41 55 54 54 55 c1 b2 4c 1c 57 42 36 02 ac 59 b5 8c a9 f3 be 42 6e 82 8c e3 ca a8 9a 8a 6b 5b 98 d6 31 d7 4c 56 d0 54 15 c7 8e ee 27 e1 60 3b e7 5f bf a1 20 5c 68 24 19 64 09 4e 6c 70 95 e5 68 20 f1 79 67 6a 2a 2a b8 0e 18 46 f4 78 aa 0a e7 e1 90 01 e1 1c 22 c9 32 8e 65 12 31 ad e8 07 6e 09 9c cf f0 a6 92 24 09 cb 88 10 34 6d e2 63 63 70 cf e0 33 49 96 24 09 cb b2 78 ef bd f7 d0 34 8d 37 57 ac a0 ad ad 8d 21 43 86 b0 72 e5 4a 4a 4b 4b 79 f9 e5 97 d9 b6 6d 5b b4 05 a0 af a5 64 f5 9a 35 ec d9 b3 87 05 0b 16 30 77 ee 5c 4a 4a 4a 78 f5 b5 d7 50 55 Data Ascii: bb"m\|3Gqe`Y.qLt&Y>",+lb\uUAUTTULWB6YBnk[1LVT'`;_ \h$dNlph ygj**Fx"2e1n$4mccp3I$x47W!CrJJKKym[d50w\JJJxPU
2024-04-25 18:47:27 UTC	538	IN	Data Raw: 85 d2 e6 18 6e be f1 16 7c 52 2f 2f bc bc 1c 49 56 c0 71 b0 5d 88 f1 c7 41 cf 61 de 5a b1 8a 29 0b 6f 66 d4 e0 0c 8e ec 78 9f 6d 0d 4e 74 10 b0 eb a2 fb e3 90 94 20 2d 1d 01 72 0b 52 70 c2 ed 34 07 bb 18 9f 99 4e 57 95 4c 4b 4b 3b 13 06 17 61 1b 5d d4 34 37 92 9e 37 e6 8c f5 e5 09 82 f0 d9 b9 0e d8 0e 28 0e 58 16 98 46 f4 7b c9 85 ee 4e 97 cc 1c 19 9f df 25 21 45 02 5c 62 fd 32 9d 15 0e f5 75 36 3d 8d 2e 86 2b e1 71 c0 01 7a 5a 5d 6a 9b 60 d4 08 89 e6 26 07 c3 02 c7 86 ae 6e 17 cb 04 3d 46 c2 0c 38 d4 d6 39 38 1d 2e 9a 0f dc 48 df 79 5d 70 6d 08 45 5c 92 d3 65 6a 0e 39 a0 ba 0c c9 91 30 4f fd 96 27 5c e0 24 49 c6 b1 c2 54 57 36 93 94 10 8f 61 3b c4 25 a5 e2 86 7b 08 04 7a 91 1d 9b 98 98 18 c2 e1 30 7a ac 07 c7 32 09 84 c2 c8 8e 8b 65 bb 24 24 26 52 59 d7 Data Ascii: n\|R//IVq]AaZ)ofxmNt -rRp4NWLKK;a]477(XF{N%!E\b2u6=.+qzZ]j`&n=F898.Hy]pmE\ej90O'\$ITW6a;%{z0z2e$$&RY
2024-04-25 18:47:27 UTC	4744	IN	Data Raw: 95 8e b1 c3 69 ab 2e 85 a4 3c 8a 0a 72 49 33 c6 b3 ec c3 77 b0 bb 6a 71 c3 ad d4 34 75 93 ab 88 91 6d 82 70 b6 b9 2e 78 fc 12 89 3a 28 5e 50 75 40 95 48 49 84 e4 34 89 f6 16 9b a0 04 05 39 12 47 ca 1c 7c 09 12 59 b9 12 99 e9 d0 58 e3 22 99 2e 92 47 22 21 55 c2 a3 40 4c 8a 44 66 3b d4 d5 41 52 b2 8c 65 42 6e 9e 44 75 ab 4b 52 1c c4 26 48 64 26 28 1c ae 70 90 75 89 a2 61 0a ed 0d 0e 5e 2d 9a f7 21 25 55 c2 a7 49 54 d7 38 78 13 25 32 52 24 6c d1 db 2b 1c c3 71 6c e2 92 d2 28 f0 f8 e8 09 86 49 49 cb 24 21 ce 0f 4e 0c 9d 9d 5d b8 4a 2c 49 09 71 c4 c5 78 e8 0a 84 49 c8 ca 8d ce a4 95 24 34 15 74 2d 81 41 39 0a dd c1 08 29 a9 09 78 64 17 9f 69 63 9b 36 c9 29 69 c8 8a 8a 73 06 66 e7 28 57 5d 75 d5 cf 64 59 66 c4 88 11 8c 19 33 86 d6 96 16 c6 8d 1b c7 f6 ed db 19 Data Ascii: i.<rI3wjq4ump.x:(^Pu@HI49G\|YX".G"!U@LDf;AReBnDuKR&Hd&(pua^-!%UIT8x%2R$l+ql(II$!N]J,IqxI$4t-A9)xdic6)isf(W]udYf3
2024-04-25 18:47:28 UTC	5930	IN	Data Raw: df b8 91 dd 7b 4b 69 e9 e8 26 26 3e 89 c4 b8 18 5c 17 02 5d 2d 1c ad ac a6 ac ec 00 8d ad dd 68 1e 3f 19 69 71 b4 b7 34 81 ea c3 ab b9 84 22 16 89 89 09 20 2b f8 3c 1e 70 5d 54 dd 83 e2 9a 1c 2a dd cb a6 8d 9b d8 f4 d1 56 0e 56 56 13 b1 20 25 35 15 af 2a 63 db 0e 8a 2a d3 d9 58 4f 65 75 0d a8 7e e2 63 64 0e 94 6c 63 f5 9a 35 6c dd bd 8f de 88 4b 46 66 26 9a 0c b6 e3 a0 7b bc 84 bb 5a d9 b1 ed 23 d6 6f d8 c0 ce 5d 7b 69 6a eb c2 9f 90 4c 62 5c 0c b6 2d 82 93 2f 82 6d db c4 c6 c6 32 79 f2 e4 d3 da af ae ae 8e ac ac 2c d2 d2 d2 c0 75 b9 ec b2 cb a8 a8 a8 a0 b8 b8 98 09 13 26 f0 a7 a7 9e 42 55 55 be f5 cd 6f 32 7e c2 04 76 ec d8 41 4b 73 33 4b 97 2e 65 c3 fa f5 84 c3 61 a6 cf 98 81 6d db 24 26 26 32 6a e4 48 c2 e1 30 23 47 8c 18 78 20 97 1f 3c c8 d4 29 53 48 Data Ascii: {Ki&&>\]-h?iq4" +<p]TVVV %5c*XOeu~cdlc5lKFf&{Z#o]{ijLb\-/m2y,u&BUUo2~vAKs3K.eam$&&2jH0#Gx <)SH
2024-04-25 18:47:28 UTC	7116	IN	Data Raw: ff eb fe 26 f3 fe f1 21 d9 d9 d9 8c 19 33 86 94 94 94 81 ee 8f c1 83 07 93 9c 9c cc ce 92 12 70 dd 81 31 1b 56 5f 2b 60 ff 2a d2 a6 19 0d c2 bb bb bb 07 ba 69 6c db 06 d7 45 51 14 22 86 31 b0 bd e3 38 e8 1e 0f 1e 8f 07 d3 34 51 fb 9a e8 1d c7 19 68 fa 8f 8b 8b 23 31 31 11 db b2 f0 7a bd f4 f6 f6 22 49 12 96 69 d2 dd dd 4d fe a0 41 f8 63 63 d9 b1 7d 3b 6e 5f 77 4b 7f 99 a2 33 de 0c cc be ae 14 db b6 a3 2d 1e 83 07 33 7a f4 68 72 72 72 50 14 e5 b8 eb d1 5f 56 a7 af 1b b3 bf 9c 8a a2 e0 f7 fb 07 ae 93 61 18 84 42 27 64 76 3e a6 db 4d 51 14 cc be 6e a7 50 38 4c c4 34 49 4a 4c 24 26 26 ba e2 f6 e0 41 83 18 3b 66 0c b9 b9 b9 d4 d6 d4 0c 94 d9 34 cd 81 d6 4a c7 71 88 f4 cd ec b3 fb ba 40 d2 33 32 18 33 7a 34 e9 69 69 14 14 14 b0 6e dd 3a 82 c1 60 f4 77 d1 77 ed Data Ascii: &!3p1V_+`*ilEQ"184Qh#11z"IiMAcc};n_wK3-3zhrrrP_VaB'dv>MQnP8L4IJL$&&A;f4Jq@323z4iin:`ww
2024-04-25 18:47:28 UTC	8302	IN	Data Raw: 75 e7 9d 3c f1 ab 5f d1 db db cb f8 f1 e3 7d 81 e5 79 4c 9c 38 91 2b ae b8 e2 b4 7e fb 90 73 83 b5 af ba ec db ab b8 fc aa 53 8f 4d d1 c0 c1 7d 9a 8f 2c 34 d8 be 59 31 aa 46 e0 b8 b0 79 83 47 5d bd 44 03 3d 87 34 91 18 a4 53 b0 67 97 a2 aa 5a d2 d7 a7 99 35 c7 3f d6 df dc a1 98 b7 c8 f0 7b 0b 99 d0 d2 2a d9 be c9 17 35 d7 7d d2 e2 50 97 a2 ed 80 df 58 f1 86 4f 59 c5 d2 fc c9 a4 e6 86 4f 59 24 06 a0 ab 43 b3 63 ab c7 94 69 06 47 7a 34 9d ed 9a a1 04 dc f8 69 8b c6 26 49 26 0d d5 35 82 e9 b3 24 b5 f5 82 dd 3b 14 87 ba 34 57 7c dc e4 23 17 19 bc b1 c6 23 95 d4 8c 1e 23 b9 ea 5a 93 d7 5f f1 68 9d 6e 1c 53 48 6d 70 40 f3 c2 0a 87 86 46 c9 c7 3e 6e 9d 70 df bc b6 61 2d 3b da f7 11 b1 fd 4e 8f 7e 46 0e c5 61 38 36 eb 66 b8 23 7c 24 11 22 46 1c 5d 9c 86 3e 91 c5 Data Ascii: u<_}yL8+~sSM},4Y1FyG]D=4SgZ5?{*5}PXOYOY$CciGz4i&I&5$;4W\|###Z_hnSHmp@F>npa-;N~Fa86f#\|$"F]>
2024-04-25 18:47:28 UTC	3101	IN	Data Raw: e7 c9 e5 72 b8 ae eb 1f ec 2a 78 15 86 b5 5f 1a 79 eb ee 37 d9 b2 f3 4d 2c cb 02 e9 0b 19 61 18 08 c3 00 c3 40 18 61 5c 78 48 48 48 88 cf 08 b5 4c 46 b2 9c 88 e0 81 b4 5c a5 1c e3 02 02 21 83 7b 87 61 60 98 26 86 61 62 1a 7e 86 a6 65 98 a1 30 09 79 77 08 0a 69 5e 02 43 80 19 04 bc 4a 40 6a 85 61 47 f1 14 d8 86 c4 32 4c 0c a1 11 65 ae 16 11 c4 95 18 42 90 cd a6 59 f5 ca 5a 72 b9 9c af a8 03 f1 51 2a da 06 b9 7c 9e 6c 2e 87 06 9c 7c 9e 9a 9a 1a 2e 5f ba 94 ce 8e 0e ba 0f 1d 02 21 98 34 69 12 95 95 95 c5 42 6b 85 2a b4 4a 6b 54 50 a7 56 4a 83 75 5b 77 d0 dd 73 04 cb b6 41 4a ff 6c 11 b2 24 50 42 42 42 42 42 8e e2 14 aa c1 8e 14 87 30 82 b0 11 42 20 83 07 5c 29 45 b1 62 76 28 4c 42 ce 20 fe 41 55 f0 bc 68 0d da b4 41 6b 62 d1 58 29 ae 04 11 24 df 94 b2 69 4c Data Ascii: rx_y7M,a@a\xHHHLF\!{a`&ab~e0ywi^CJ@jaG2LeBYZrQ\|l.\|._!4iBk*JkTPVJu[wsAJl$PBBBBB0B \)Ebv(LB AUhAkbX)$iL
2024-04-25 18:47:28 UTC	10674	IN	Data Raw: 0b d9 d0 df 6b 26 dc 4b 6c f5 2c 1b ea a3 02 b3 73 3e 8a a7 28 c0 a6 30 3b 2b d5 4e cd 53 7a 67 24 63 11 39 e1 3f ef 70 6a aa 1f 35 ed 84 73 79 d8 c7 c6 6b 4d d6 cd cf 05 60 e1 46 b5 1f 4e 4b a7 d6 66 b3 59 fa 8a 34 1a 0d 8c 31 a4 69 4a a3 d1 28 93 b2 f5 7a 3d ee b9 e7 1e 7e ed d7 7e 8d 24 49 38 74 f8 30 5f fb da d7 78 f4 d1 47 39 70 e0 00 fd 7e 7f f3 22 9c d3 00 00 20 00 49 44 41 54 ad b6 24 3c 67 7e a6 e3 eb 50 9a 96 ae 7f 74 b8 02 3e f3 1f 32 1f 32 df e2 27 3a c0 3a 33 c2 9b 07 0b fe ea cf b2 89 e7 57 96 bd a3 eb fd 0f bd 3b 80 c0 1d 77 1b 56 57 95 b3 67 a6 b3 70 4a 53 7a f7 52 00 24 97 cb 63 32 49 83 32 e1 f8 68 81 da f7 1a 28 89 54 e8 0d d2 98 50 bf ff 65 7e 8f 9c 73 a3 3c 7b 7c 11 5b bf 36 9e 53 85 4d db 0d 9b 77 f8 df 45 4c 9e 56 07 18 b5 ef f5 f7 Data Ascii: k&Kl,s>(0;+NSzg$c9?pj5sykM`FNKfY41iJ(z=~~$I8t0_xG9p~" IDAT$<g~Pt>22'::3W;wVWgpJSzR$c2I2h(TPe~s<{\|[6SMwELV
2024-04-25 18:47:28 UTC	11860	IN	Data Raw: 7b 62 84 86 29 68 db 9c d9 74 48 db e6 34 6d 46 c3 28 d6 a8 77 6e 13 43 62 0c 89 f5 40 24 31 4a 22 04 4d 89 c3 9a a0 65 28 ab e3 77 0b ae af 58 2a 95 aa 94 42 ba e4 11 61 65 88 9a a0 b6 15 9c 13 ac 2a 66 79 95 bc 28 ca 49 a7 22 68 5e d0 58 b7 9e 6d 9f fc c7 9c 7d ee 59 dc d2 12 5b 9f 78 92 23 7f fd 79 96 be f1 f7 58 f1 3e 2e 61 ef 63 f2 61 c6 c9 c5 45 f6 fc e7 bf c1 ca 9b 6f b0 74 f8 4d 36 3f fa 7e 76 7c f2 d3 9c fc ec 67 70 c3 01 6a 93 00 8c 14 69 35 91 66 a3 d4 92 44 13 8e b7 c1 56 ab a9 6b a5 08 30 62 87 49 58 6d 48 fd 3c 8c 98 72 b4 fc 2d 23 c7 4b 79 ac b5 df 65 b3 d6 56 a1 5a bb 67 64 42 54 e0 65 2d 7f 93 91 8f 2b bf 60 75 4e 6b c7 aa f7 5c eb 63 a2 23 e5 65 a4 ff eb 02 ee 5a 80 49 65 5a 9b 50 b6 76 48 21 98 40 bc ef 87 37 cb 19 6c 58 7d af 6b 2a e0 Data Ascii: {b)htH4mF(wnCb@$1J"Me(wXBaefy(I"h^Xm}Y[x#yX>.acaEotM6?~v\|gpji5fDVk0bIXmH<r-#KyeVZgdBTe-+`uNk\c#eZIeZPvH!@7lX}k*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49741	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:27 UTC	601	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:28 UTC	517	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 9769 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 42996 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: font/ttf Date: Thu, 25 Apr 2024 18:47:28 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B0NP3HH1Q4NKT94BQM3X X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:28 UTC	669	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 06 b7 00 00 00 bc 00 00 00 60 63 6d 61 70 17 56 d2 fa 00 00 01 1c 00 00 00 54 67 61 73 70 00 00 00 10 00 00 01 70 00 00 00 08 67 6c 79 66 01 82 64 c6 00 00 01 78 00 00 a1 84 68 65 61 64 f6 11 ea dd 00 00 a2 fc 00 00 00 36 68 68 65 61 8b 5c bc ce 00 00 a3 34 00 00 00 24 68 6d 74 78 e3 e0 65 7a 00 00 a3 58 00 00 01 e0 6c 6f 63 61 5e 2a 2f e8 00 00 a5 38 00 00 00 f2 6d 61 78 70 00 90 02 dc 00 00 a6 2c 00 00 00 20 6e 61 6d 65 99 4a 09 fb 00 00 a6 4c 00 00 01 86 70 6f 73 74 00 03 00 00 00 00 a7 d4 00 00 00 20 00 03 04 1a 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e9 Data Ascii: 0OS/2`cmapVTgasppglyfdxhead6hhea\4$hmtxezXloca^*/8maxp, nameJLpost 3@
2024-04-25 18:47:28 UTC	2372	IN	Data Raw: 01 33 32 16 15 14 06 2b 01 25 14 06 23 22 26 27 2e 01 23 22 06 15 11 14 06 23 22 26 35 11 34 36 33 32 16 1d 01 3e 01 33 32 16 17 1e 01 15 37 34 36 33 32 16 15 11 14 06 23 22 26 35 01 34 36 33 32 16 15 11 14 06 23 22 26 35 13 32 36 35 34 26 23 22 06 15 14 16 09 01 0e 01 23 22 26 35 34 36 37 09 01 2e 01 35 34 36 33 32 16 17 09 01 3e 01 33 32 16 15 14 06 07 09 01 1e 01 15 14 06 23 22 26 27 01 32 36 35 34 26 23 22 06 15 14 16 00 1d 1c 67 48 48 55 3a 34 34 55 21 20 13 04 03 1c 14 10 1a 07 1d 80 54 40 35 36 4d 15 16 16 15 4d 35 36 40 54 7d 22 06 18 11 14 1c 02 04 12 20 20 55 35 34 3c 56 48 47 67 1d 1c 05 13 1a 17 18 19 1a 18 18 19 a9 17 19 19 17 a9 02 f6 1b 15 08 11 0c 11 26 17 4f 5e 19 18 17 1b 1a 18 18 19 20 60 37 2b 3f 15 0d 0d 64 1a 18 18 19 1a 18 18 19 fb Data Ascii: 32+%#"&'.#"#"&54632>3274632#"&54632#"&52654&#"#"&5467.54632>32#"&'2654&#"gHHU:44U! T@56MM56@T}" U54<VHGg&O^ `7+?d
2024-04-25 18:47:28 UTC	538	IN	Data Raw: 06 07 0e 01 2b 01 35 34 26 27 2e 01 23 22 06 07 0e 01 1d 01 23 22 26 27 2e 01 35 11 34 26 23 31 01 22 06 07 01 0e 01 15 14 16 17 31 1e 01 33 32 36 37 09 01 1e 01 33 32 36 37 31 3e 01 35 34 26 27 01 2e 01 23 30 22 39 01 ba 0d 11 0b 0a 0a 1b 0e bc 0b 12 07 08 08 0b 0a 0b 1b 0f 0f 1b 0b 0a 0c 08 07 07 13 0a bc 0f 1a 0a 0a 0b 11 0d 0c 12 02 01 02 04 03 b3 15 12 13 32 1b 1b 31 13 13 15 b3 02 05 01 02 02 12 0c 01 63 06 0a 04 fe 1e 04 05 05 04 04 0b 06 06 0b 05 01 cc 01 cd 04 0b 06 06 0b 04 04 05 05 04 fe 1e 04 0b 06 01 01 ab 12 0c fe 87 0f 1a 0a 0a 0b 07 08 07 13 0a a7 0f 1c 0a 0b 0b 0b 0b 0a 1c 0f a7 0a 13 07 07 08 0b 0a 0a 1a 0f 01 64 0c 12 12 0c fe 9c 03 04 02 01 02 9e 1b 32 13 13 14 14 13 13 32 1b 9e 02 01 02 04 03 01 79 0c 12 01 f7 05 04 fe 1e 04 0b 06 06 Data Ascii: +54&'.#"#"&'.54&#1"1326732671>54&'.#0"921cd22y
2024-04-25 18:47:28 UTC	4744	IN	Data Raw: 11 2d 18 e0 18 2d 11 11 12 12 0e 0d 13 08 08 09 15 0b e0 0b 15 08 08 09 09 08 08 15 0b e0 0b 15 08 09 08 13 0d 0e 12 12 11 11 2d 18 e0 18 2d 11 11 12 df 13 0d fe 9a 0e 12 12 0e 01 66 0d 13 40 fe da 00 00 00 00 03 00 00 ff c0 03 a2 03 c0 00 1b 00 38 00 59 00 00 01 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 32 37 3e 01 37 36 35 34 27 2e 01 27 26 07 32 17 1e 01 17 16 15 14 07 0e 01 07 06 23 22 27 2e 01 27 26 35 34 37 3e 01 37 36 33 13 38 01 23 22 06 07 31 0e 01 15 14 16 1f 01 1e 01 33 32 36 37 31 3e 01 35 34 26 2f 01 2e 01 23 31 01 d5 4d 45 44 66 1e 1d 1d 1e 66 44 45 4d 4e 44 45 66 1d 1e 1e 1d 66 45 44 4e 40 38 38 53 18 19 19 18 53 38 38 40 3f 38 38 54 18 18 18 18 54 38 38 3f f2 01 07 0c 05 04 06 06 04 ba 05 0c 07 07 0c 05 05 05 05 05 b9 05 0c 07 03 62 1d 1e Data Ascii: ----f@8Y"327>7654'.'&2#"'.'&547>7638#"132671>54&/.#1MEDffDEMNDEffEDN@88SS88@?88TT88?b
2024-04-25 18:47:28 UTC	5930	IN	Data Raw: 0c fe d7 01 7a 11 0c 0c 10 10 0c 0c 11 00 01 00 00 ff c0 01 92 03 c0 00 11 00 00 13 22 06 15 31 14 16 33 31 33 32 36 35 31 34 26 23 31 d7 0c 10 10 0c 9e 0c 11 11 0c 01 03 11 0c 0b 11 11 0b 0c 11 00 03 00 00 ff c0 04 1b 03 c0 00 12 00 3e 00 5f 00 00 25 22 06 15 31 14 16 33 31 21 32 36 35 31 34 26 23 31 21 01 22 06 07 01 0e 01 07 15 07 06 14 15 14 16 33 32 36 33 23 37 3e 01 37 01 3e 01 37 3e 01 35 34 26 27 31 2e 01 27 2e 01 27 2e 01 23 15 32 16 17 1e 01 17 1e 01 17 38 01 31 38 01 39 01 1e 01 15 14 06 07 0e 01 07 01 07 37 01 3e 01 33 02 1b 0b 10 10 0b 01 e5 0b 10 10 0b fe 1b 01 43 1c 34 14 fd 5f 03 03 01 36 01 10 0b 02 03 02 01 d8 04 06 03 02 a1 0a 10 05 05 06 06 05 05 10 0a 0a 17 0d 0c 1c 0e 09 11 08 08 0e 06 06 0a 03 03 04 04 03 03 0a 06 fd 64 a5 29 02 9d Data Ascii: z"131326514&#1>_%"131!26514&#1!"3263#7>7>7>54&'1.'.'.#281897>3C4_6d)
2024-04-25 18:47:28 UTC	7116	IN	Data Raw: 33 32 36 35 34 26 2b 01 17 33 32 16 15 14 06 2b 01 2e 01 35 34 36 37 25 22 06 15 14 16 33 32 36 37 23 3e 01 35 34 26 27 31 26 22 23 15 3a 01 17 1e 01 15 14 06 07 31 0e 01 23 22 26 35 34 36 33 02 60 04 06 2d 1d 1e 2c 06 04 15 32 2d 2c 48 1a 1a 0e 06 16 1b 27 26 1c 16 06 11 25 24 65 3e 3d 45 44 3e 3e 64 25 24 12 06 18 20 2c 01 2c 1f 19 07 0e 1a 1a 48 2c 2d 32 15 17 29 24 24 3b 16 16 0e 25 34 01 34 25 12 20 21 58 35 36 3b 3c 36 35 58 21 21 11 21 2d 2d 21 0d 16 16 3b 24 25 29 0e 37 26 25 38 0e 6a 33 47 02 01 07 43 2d 2d 43 08 02 48 32 22 2f 01 06 2c 1e 1f 2b 05 01 01 2f 01 8c 01 2f 42 42 30 08 33 47 47 33 08 03 05 22 2f 2f 22 06 1f 2c 2c 20 fd 14 32 48 48 32 07 0c 05 01 2b 39 39 2a 07 0c 05 05 08 03 1b 27 26 1c 04 09 03 21 30 30 21 03 0f 15 1c 27 26 1d 15 06 Data Ascii: 32654&+32+.5467%"3267#>54&'1&"#:1#"&5463`-,2-,H'&%$e>=ED>>d%$ ,,H,-2)$$;%44% !X56;<65X!!!--!;$%)7&%8j3GC--CH2"/,+//BB03GG3"//",, 2HH2+99*'&!00!'&
2024-04-25 18:47:28 UTC	8302	IN	Data Raw: 01 6a 0e 23 14 13 28 13 3a 09 0a 01 01 01 b6 03 03 07 06 15 0e 0e 1f 10 01 16 28 10 0f 11 09 09 0a 19 0f 0f 21 10 11 1d 0b 0c 10 03 3a 01 07 06 06 0d 08 08 0f 07 07 0c 05 04 05 08 08 07 13 0a 01 07 0f 07 06 0a 03 03 02 02 00 00 07 00 00 ff c0 03 f9 03 c0 00 5f 00 93 00 b0 00 e9 01 06 01 3c 01 5b 00 00 13 22 06 07 0e 01 15 30 14 31 38 01 39 01 11 14 16 17 1e 01 33 21 32 36 35 38 01 39 01 34 26 23 21 22 26 27 2e 01 35 11 34 36 37 3e 01 33 21 38 01 31 38 01 39 01 3a 01 17 32 16 17 38 01 31 17 1e 01 1d 01 14 16 33 31 38 01 31 32 36 3d 01 38 01 31 38 01 39 01 34 26 2f 01 2e 01 27 2e 01 23 01 2e 01 23 22 06 07 31 07 27 2e 01 23 22 06 07 31 0e 01 15 14 16 1f 01 27 1e 01 17 38 01 31 38 01 39 01 1e 01 37 32 36 37 3e 01 3f 01 3e 01 35 34 26 27 31 17 22 06 15 38 01 Data Ascii: j#(:(!:_<["01893!265894&#!"&'.5467>3!8189:281318126=81894&/.'.#.#"1'.#"1'81897267>?>54&'1"8
2024-04-25 18:47:28 UTC	6178	IN	Data Raw: 2e 01 23 22 26 2b 01 38 01 31 38 01 31 07 1e 01 17 31 38 01 39 01 38 01 31 2a 01 27 38 01 31 38 01 39 01 22 26 27 31 2e 01 27 34 26 35 37 0e 01 07 31 0e 01 07 0e 01 15 1c 01 15 1e 01 17 38 01 31 38 01 39 01 1e 01 17 1e 01 33 32 36 37 3e 01 37 3e 01 37 38 01 39 01 3e 01 27 34 26 27 38 01 39 01 2e 01 27 2e 01 27 38 01 31 38 01 39 01 26 22 27 22 26 23 31 38 01 31 22 30 31 07 1e 01 17 31 30 32 39 01 22 30 31 2a 01 27 22 26 27 31 2e 01 35 31 26 34 35 30 34 31 01 38 01 31 22 06 15 30 14 39 01 14 16 33 38 01 31 33 32 36 35 31 30 34 31 34 26 23 31 27 22 06 15 38 01 39 01 14 16 3b 01 38 01 31 32 36 35 31 38 01 31 34 26 23 38 01 39 01 03 22 06 07 0e 01 07 06 16 17 1e 01 17 15 14 30 39 01 14 16 17 1e 01 3b 01 32 36 37 3e 01 35 38 01 31 30 34 39 01 35 3e 01 37 3e 01 Data Ascii: .#"&+818118981'8189"&'1.'4&57181893267>7>789>'4&'89.'.'8189&"'"&#181"011029"01'"&'1.51&4504181"09381326510414&#1'"89;812651814&#89"09;267>5810495>7>
2024-04-25 18:47:28 UTC	7147	IN	Data Raw: 01 39 01 17 26 06 07 0e 01 07 0e 01 15 14 16 17 1e 01 17 1e 01 17 1e 01 33 32 36 37 3e 01 37 3e 01 27 2e 01 27 2e 01 27 07 1e 01 17 1e 01 17 16 06 07 0e 01 07 0e 01 23 38 01 31 38 01 39 01 22 26 27 2e 01 27 2e 01 27 2e 01 35 38 01 31 38 01 39 01 34 36 37 3e 01 37 3e 01 17 05 38 01 31 22 06 15 38 01 39 01 11 38 01 31 14 16 33 38 01 39 01 38 01 31 32 36 35 38 01 39 01 11 38 01 31 34 26 23 38 01 39 01 11 38 01 31 22 06 15 38 01 39 01 15 38 01 31 14 16 33 38 01 39 01 38 01 31 32 36 35 38 01 39 01 35 38 01 31 34 26 23 38 01 39 01 17 26 06 07 0e 01 07 0e 01 15 38 01 31 38 01 31 14 16 17 1e 01 17 1e 01 17 1e 01 33 32 36 37 3e 01 37 31 3e 01 27 2e 01 27 2e 01 27 07 1e 01 17 1e 01 17 16 06 07 0e 01 07 0e 01 23 38 01 31 38 01 39 01 22 26 27 2e 01 27 2e 01 27 2e 01 Data Ascii: 9&3267>7>'.'.'#8189"&'.'.'.58189467>7>81"89813898126589814&#8981"898138981265895814&#89&81813267>71>'.'.'#8189"&'.'.'.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49746	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:28 UTC	623	OUT	OPTIONS /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,index_name,lang_code,product_name,query_suggestion_index Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:29 UTC	616	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,PUT Access-Control-Allow-Headers: Authorization,x-forwarded-for,content-type,lang_code,product_name,origin,index_name,query_suggestion_index Access-Control-Max-Age: 3600 Function-Execution-Id: fp5095hcopjp X-Cloud-Trace-Context: 8c24bb431dd132938237a1740d461727;o=1 Date: Thu, 25 Apr 2024 18:47:29 GMT Content-Type: text/html Server: Google Frontend Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49747	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:28 UTC	870	OUT	HEAD /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:29 UTC	529	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 23057345 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:47:29 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B1JDCN1GFR20KGFW7R78 X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49750	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:29 UTC	895	OUT	GET /assets/images/favicon.ico HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:29 UTC	533	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 9284 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 10462 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/vnd.microsoft.icon Date: Thu, 25 Apr 2024 18:47:29 GMT Etag: "8851a4098a7b4f4b0872fb44d89d8c8f-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B1S93J3M4K82MNQ0J7CQ X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:29 UTC	653	IN	Data Raw: 00 00 01 00 01 00 32 32 00 00 01 00 20 00 c8 28 00 00 16 00 00 00 28 00 00 00 32 00 00 00 64 00 00 00 01 00 20 00 00 00 00 00 10 27 00 00 23 2e 00 00 23 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 Data Ascii: 22 ((2d '#.#.
2024-04-25 18:47:29 UTC	2372	IN	Data Raw: ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 Data Ascii:
2024-04-25 18:47:29 UTC	538	IN	Data Raw: ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 89 89 89 ff ff ff ff ff f9 f9 f9 ff 26 26 26 ff 00 00 00 ff 00 00 00 ff 02 02 02 ff cb cb cb ff ff ff ff ff d5 d5 d5 ff 05 05 05 ff 90 90 90 ff ff ff ff ff f8 f8 f8 ff 24 24 24 ff 00 00 00 ff 00 00 00 ff 04 04 04 ff 13 13 13 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 Data Ascii: &&&$$$
2024-04-25 18:47:29 UTC	4744	IN	Data Raw: 00 00 ff 00 00 00 ff a9 a9 a9 ff ff ff ff ff ff ff ff ff ff ff ff ff e4 e4 e4 ff 0c 0c 0c ff 00 00 00 ff 00 00 00 ff 11 11 11 ff eb eb eb ff ff ff ff ff a8 a8 a8 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 20 20 20 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d6 d6 d6 ff 05 05 05 ff 00 00 00 ff 00 00 00 ff 1d 1d 1d ff f5 f5 f5 ff ff ff ff ff ff ff ff ff 5d 5d 5d ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 93 93 93 ff ff ff ff ff f6 f6 f6 ff 20 20 20 ff Data Ascii: ]]]
2024-04-25 18:47:29 UTC	2155	IN	Data Raw: 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 08 08 08 ff 0b 0b 0b ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49749	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:29 UTC	876	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/integrations?ct=YTo1OntzOjY6InNvdXJjZSI7YToyOntpOjA7czo1OiJlbWFpbCI7aToxO2k6MjE4O31zOjU6ImVtYWlsIjtpOjIxODtzOjQ6InN0YXQiO3M6MjI6IjY2MmEyYzk4ODNhMTc2Mjc4NzI0ODciO3M6NDoibGVhZCI7czo2OiIxNjUwODQiO3M6NzoiY2hhbm5lbCI7YToxOntzOjU6ImVtYWlsIjtpOjIxODt9fQ%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:47:29 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:47:29 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9B1SRN2RVFD4BTYMZGZHE Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49751	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:29 UTC	889	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: sharefile_main sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:29 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e15sujaacf X-Cloud-Trace-Context: a1803c9a1f65a3b95caeb483b74081d6 Date: Thu, 25 Apr 2024 18:47:29 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:29 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49752	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:29 UTC	367	OUT	GET /assets/images/favicon.ico HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:29 UTC	533	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 9834 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 10462 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/vnd.microsoft.icon Date: Thu, 25 Apr 2024 18:47:29 GMT Etag: "8851a4098a7b4f4b0872fb44d89d8c8f-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B2B8VVR6ZJ6EWVJVM2SZ X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:29 UTC	653	IN	Data Raw: 00 00 01 00 01 00 32 32 00 00 01 00 20 00 c8 28 00 00 16 00 00 00 28 00 00 00 32 00 00 00 64 00 00 00 01 00 20 00 00 00 00 00 10 27 00 00 23 2e 00 00 23 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 Data Ascii: 22 ((2d '#.#.
2024-04-25 18:47:29 UTC	2372	IN	Data Raw: ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 Data Ascii:
2024-04-25 18:47:29 UTC	538	IN	Data Raw: ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 89 89 89 ff ff ff ff ff f9 f9 f9 ff 26 26 26 ff 00 00 00 ff 00 00 00 ff 02 02 02 ff cb cb cb ff ff ff ff ff d5 d5 d5 ff 05 05 05 ff 90 90 90 ff ff ff ff ff f8 f8 f8 ff 24 24 24 ff 00 00 00 ff 00 00 00 ff 04 04 04 ff 13 13 13 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 Data Ascii: &&&$$$
2024-04-25 18:47:29 UTC	4744	IN	Data Raw: 00 00 ff 00 00 00 ff a9 a9 a9 ff ff ff ff ff ff ff ff ff ff ff ff ff e4 e4 e4 ff 0c 0c 0c ff 00 00 00 ff 00 00 00 ff 11 11 11 ff eb eb eb ff ff ff ff ff a8 a8 a8 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 20 20 20 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d6 d6 d6 ff 05 05 05 ff 00 00 00 ff 00 00 00 ff 1d 1d 1d ff f5 f5 f5 ff ff ff ff ff ff ff ff ff 5d 5d 5d ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 93 93 93 ff ff ff ff ff f6 f6 f6 ff 20 20 20 ff Data Ascii: ]]]
2024-04-25 18:47:29 UTC	2155	IN	Data Raw: 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 08 08 08 ff 0b 0b 0b ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49753	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:29 UTC	357	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:30 UTC	535	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 529002 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/css; charset=UTF-8 Date: Thu, 25 Apr 2024 18:47:29 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B2CG4HVH8NM7M6QPC2JR X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:30 UTC	651	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d Data Ascii: /! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue: #007bff;--indigo: #6610f2;-
2024-04-25 18:47:30 UTC	2372	IN	Data Raw: 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 20 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 20 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 6d 6f 6e 6f 73 70 61 63 65 3a 20 53 46 4d 6f 6e 6f 2d 52 65 67 Data Ascii: breakpoint-lg: 992px;--breakpoint-xl: 1200px;--font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";--font-family-monospace: SFMono-Reg
2024-04-25 18:47:30 UTC	538	IN	Data Raw: 6f 6e 2d 73 69 64 65 3a 62 6f 74 74 6f 6d 7d 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 6f 70 74 67 72 6f 75 70 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 Data Ascii: on-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}input,button,select,optgroup,textarea{margin:0;font-family:inherit;font-si
2024-04-25 18:47:30 UTC	4744	IN	Data Raw: 69 74 22 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 69 6d 65 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 6d 6f 6e 74 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6c 69 73 74 62 6f 78 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c Data Ascii: it"]::-moz-focus-inner{padding:0;border-style:none}input[type="radio"],input[type="checkbox"]{box-sizing:border-box;padding:0}input[type="date"],input[type="time"],input[type="datetime-local"],input[type="month"]{-webkit-appearance:listbox}textarea{overfl
2024-04-25 18:47:30 UTC	5930	IN	Data Raw: 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 Data Ascii: :75%}.col-10{flex:0 0 83.3333333333%;max-width:83.3333333333%}.col-11{flex:0 0 91.6666666667%;max-width:91.6666666667%}.col-12{flex:0 0 100%;max-width:100%}.order-first{order:-1}.order-last{order:13}.order-0{order:0}.order-1{order:1}.order-2{order:2}.orde
2024-04-25 18:47:30 UTC	7116	IN	Data Raw: 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 78 6c 2d 66 69 72 73 74 7b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 6c 61 73 74 7b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 78 6c 2d 30 7b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 78 6c 2d 31 7b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 32 7b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 78 6c 2d 33 7b 6f 72 64 65 72 3a 33 7d 2e Data Ascii: max-width:83.3333333333%}.col-xl-11{flex:0 0 91.6666666667%;max-width:91.6666666667%}.col-xl-12{flex:0 0 100%;max-width:100%}.order-xl-first{order:-1}.order-xl-last{order:13}.order-xl-0{order:0}.order-xl-1{order:1}.order-xl-2{order:2}.order-xl-3{order:3}.
2024-04-25 18:47:30 UTC	8302	IN	Data Raw: 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 62 74 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 66 6f 72 6d 2d 63 Data Ascii: -group-append>.form-control-plaintext.input-group-text,.input-group-lg>.input-group-prepend>.form-control-plaintext.btn,.input-group-lg>.input-group-append>.form-control-plaintext.btn{padding-right:0;padding-left:0}.form-control-sm,.input-group-sm>.form-c
2024-04-25 18:47:30 UTC	6188	IN	Data Raw: 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 20 7e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 2c 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 20 7e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 32 30 2c 35 33 2c 36 39 2c 30 2e 32 35 29 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 68 Data Ascii: .was-validated .custom-file-input:invalid:focus ~ .custom-file-label,.custom-file-input.is-invalid:focus ~ .custom-file-label{box-shadow:0 0 0 .2rem rgba(220,53,69,0.25)}.form-inline{display:flex;flex-flow:row wrap;align-items:center}.form-inline .form-ch
2024-04-25 18:47:30 UTC	10674	IN	Data Raw: 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 34 38 2c 32 34 39 2c 32 35 30 2c 30 2e 35 29 7d 2e 62 74 6e 2d 6c 69 67 68 74 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6c 69 67 68 74 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d Data Ascii: us{box-shadow:0 0 0 .2rem rgba(248,249,250,0.5)}.btn-light.disabled,.btn-light:disabled{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-light:not(:disabled):not(.disabled):active,.btn-light:not(:disabled):not(.disabled).active,.show>.btn-
2024-04-25 18:47:30 UTC	11860	IN	Data Raw: 6e 3a 2e 35 72 65 6d 20 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 63 65 66 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 31 2e 35 72 65 6d 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 68 6f 76 65 72 2c Data Ascii: n:.5rem 0;overflow:hidden;border-top:1px solid #e9ecef}.dropdown-item{display:block;width:100%;padding:.25rem 1.5rem;clear:both;font-weight:400;color:#212529;text-align:inherit;white-space:nowrap;background-color:transparent;border:0}.dropdown-item:hover,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49754	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:30 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:30 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1fiiujbch X-Cloud-Trace-Context: 35568b58d752d5a08c9463f0fc92a0ab Date: Thu, 25 Apr 2024 18:47:30 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:30 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49755	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:30 UTC	371	OUT	GET /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:30 UTC	529	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 23057345 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:47:30 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B2PZQA9T8X490M2C9P80 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:30 UTC	657	IN	Data Raw: 25 50 44 46 2d 31 2e 35 0a 25 e4 f0 ed f8 0a 34 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 2f 58 4f 62 6a 65 63 74 2f 53 75 62 74 79 70 65 2f 49 6d 61 67 65 2f 57 69 64 74 68 20 32 38 31 36 2f 48 65 69 67 68 74 20 35 31 32 2f 43 6f 6c 6f 72 53 70 61 63 65 2f 44 65 76 69 63 65 47 72 61 79 2f 42 69 74 73 50 65 72 43 6f 6d 70 6f 6e 65 6e 74 0a 38 2f 44 65 63 6f 64 65 50 61 72 6d 73 3c 3c 2f 42 69 74 73 50 65 72 43 6f 6d 70 6f 6e 65 6e 74 20 38 2f 43 6f 6c 6f 72 73 20 31 2f 43 6f 6c 75 6d 6e 73 20 32 38 31 36 2f 50 72 65 64 69 63 74 6f 72 20 32 3e 3e 2f 46 69 6c 74 65 72 2f 46 6c 61 74 65 44 65 63 6f 64 65 2f 4c 65 6e 67 74 68 0a 32 36 34 35 37 3e 3e 0a 73 74 72 65 61 6d 0a 78 da ed bd 8b 59 1c 57 f2 b8 3d 7c 09 b8 d9 04 d4 38 01 0d 9b 80 46 4e 40 c3 26 00 38 Data Ascii: %PDF-1.5%4 0 obj<</Type/XObject/Subtype/Image/Width 2816/Height 512/ColorSpace/DeviceGray/BitsPerComponent8/DecodeParms<</BitsPerComponent 8/Colors 1/Columns 2816/Predictor 2>>/Filter/FlateDecode/Length26457>>streamxYW=\|8FN@&8
2024-04-25 18:47:30 UTC	2372	IN	Data Raw: 06 00 00 00 00 3d 62 7c e6 f4 63 14 bf 01 00 00 00 40 11 d0 fb 0c 00 00 00 00 7a 84 5b ef b3 e6 7d c3 a9 02 00 00 00 80 fc a9 2f 6a 97 1f a3 f7 19 00 00 00 00 14 01 c5 6f 00 00 00 00 d0 23 e8 7d 06 00 00 00 00 7d e2 6c ec f2 53 93 35 ce 14 00 00 00 00 14 80 5b f1 1b bd cf 00 00 00 00 a0 0c e8 7d 06 00 00 00 00 3d 62 77 cf e5 a7 e8 7d 06 00 00 00 00 45 e0 d8 fb 8c e2 37 00 00 00 00 28 02 7a 9f 01 00 00 00 40 8f 70 ec 7d b6 36 e1 54 01 00 00 00 40 01 5c 0e 5d 7e 8a e2 37 00 00 00 00 28 02 7a 9f 41 89 5c 74 ff 95 13 32 dc 01 00 f2 63 b4 db fd 77 76 66 9c b7 be e3 d6 fb 6c 7f 8f 33 05 39 f1 b5 fb af 70 93 03 00 64 88 63 1c ef 11 ef a7 9c b7 9e 43 ef 33 c0 7f f1 5f 00 00 fc 17 7a 84 63 f1 1b bd cf 00 ff 05 00 00 fc 17 8a 20 50 ef b3 aa e5 54 03 fe 0b 00 00 f8 Data Ascii: =b\|c@z[}/jo#}}lS5[}=bw}E7(z@p}6T@\]~7(zA\t2cwvfl39pdcC3_zc PT
2024-04-25 18:47:30 UTC	538	IN	Data Raw: 49 59 1d f5 29 50 ef 33 fc 02 fd 0d 26 c0 f8 2f 00 e0 bf c1 fd 57 5b b1 22 7a 4d 8c ff 96 82 5b 09 9c d3 4d 12 a8 2a 8d de 67 9e b8 1c 96 fb dd 3c df 0e f8 2f 00 e0 bf c1 fd 57 1b 00 16 bd 26 c6 7f 4b c1 ae 07 5a a8 de 67 61 0e d3 3f 0e b6 4b fe 76 7e 05 18 ff 05 00 fc 37 bc ff ea 8a 56 64 55 42 f8 6f 31 9c 39 75 bf 73 e8 81 e6 b6 0e 9b ac 29 3f 2f bd cf fc b0 75 58 f6 f7 53 ef b9 82 ff 02 00 fe 9b 96 ff aa 5a 40 08 c3 22 f8 6f 39 0f 9a db f2 e9 d5 78 6a a0 aa b4 e1 a5 d3 8f ad ce b8 b2 8c b7 8f 98 bd f7 27 c0 f8 2f 00 30 1e 47 f0 5f 4d e2 de 8e 2c ea 83 ff 96 83 db f2 a9 5d 79 c5 1e 02 f5 3e 0b 74 98 de 0d b7 e5 d6 be 85 b8 29 f0 5f 00 c0 7f 63 f8 af 3c 03 42 3a 25 e0 bf e5 50 5d 3a a9 cf 2b f3 b5 db eb 73 75 16 26 bd cf 3c b9 e1 ba ff 63 b4 ed a0 b9 fd Data Ascii: IY)P3&/W["zM[M*g</W&KZga?Kv~7VdUBo19us)?/uXSZ@"o9xj'/0G_M,]y>t)_c<B:%P]:+su&<c
2024-04-25 18:47:30 UTC	4744	IN	Data Raw: 50 6b 99 fd d0 9c 4f 4c 9e f3 6a 34 7e 57 7b f8 b2 7e 6a e0 f0 5f 00 c0 7f a3 f9 6f c7 1c e0 76 4d 33 4d e1 bf e9 b0 b5 57 a9 13 5e 95 3d d0 dc de 9f ab 67 7c 7a 9f 79 c1 ae f7 43 7b 34 b5 7c c8 47 e3 0f f6 0a ec 65 18 c2 7f 01 00 ff 8d 38 50 77 e9 02 a1 6c 44 85 ff a6 c2 e8 b8 0e a7 96 87 3b 73 ff b1 63 55 5a 98 de 67 7e 37 ba 2d 10 c9 b3 3c 97 e9 be fd 13 3e da b0 8e 02 7b 49 01 c6 7f 01 00 ff 8d e8 bf 1d 9a d8 1f ed e9 26 01 fc 37 91 a7 e4 78 74 fb 9f af ee 4e f1 aa 67 b8 95 c0 cd 4d 2d 08 54 95 e6 78 77 ef 1c 72 5b 78 58 fa bc 46 7b 74 e8 69 7b b5 f1 fa d8 f4 ef a9 77 e0 c6 7f 01 20 3d ff 2d aa ef 51 2b 98 4f dc de 63 37 9b 5a 15 c5 7f 53 a0 da fa 3e 87 be 10 99 75 47 d1 03 2d 50 ef b3 40 87 e9 1b 26 e1 df e6 f0 d4 df e6 c2 83 7a cf 34 08 ec 61 85 84 Data Ascii: PkOLj4~W{~j_ovM3MW^=g\|zyC{4\|Ge8PwlD;scUZg~7-<>{I&7xtNgM-Txwr[xXF{ti{w =-Q+Oc7ZS>uG-P@&z4a
2024-04-25 18:47:30 UTC	5930	IN	Data Raw: 7f 33 11 be 40 4b 9e ec d2 d8 1e 0b 70 17 63 09 e4 bf 83 e5 e7 d1 0e 59 77 6c 9f fe 9b ab fe 7a 15 60 fc 17 ff 2d 58 7f 3d 68 84 63 09 dc aa b2 a3 e7 93 f1 73 75 36 80 2c c7 ee 75 e9 6f ce de b7 9c 3e 0b ff cd a6 d8 2b c8 15 cf ac 88 79 f0 b4 3b 72 87 ed 2f 82 f9 ef f3 d2 64 c7 bd 42 03 fa 6f be fa eb 33 07 18 ff c5 7f 4b d6 5f 0f 02 1c a8 07 da a3 4a 3b 7a 9f e5 8a b0 03 b0 c9 2d 84 ff de f8 af c7 48 9c 35 01 52 80 b3 59 0c 3c 14 e0 87 81 f1 2e 0f 54 28 ff 7d d6 d4 cf 6b 9f 7c 91 ff e6 ac bf 1e 05 18 ff c5 7f 8b d6 5f fb a8 8a e3 23 63 da 03 8d de 67 b9 e2 58 30 39 17 56 3d 06 fe 7b 92 cf 96 3d 01 36 fe cb 62 db 8b 67 3c 6c 0e d7 a5 a2 34 94 ff 3e 6d ea e7 b8 51 68 40 ff cd 5b 7f fd 09 30 fe 8b ff 96 ad bf d7 02 bc 6a fb f7 1c 7b a0 69 1b 7a 3e 18 e8 e9 Data Ascii: 3@KpcYwlz`-X=hcsu6,uo>+y;r/dBo3K_J;z-H5RY<.T(}k\|_#cgX09V={=6bg<l4>mQh@[0j{iz>
2024-04-25 18:47:30 UTC	7116	IN	Data Raw: bf b2 f2 b7 e5 e4 df c0 08 3b a0 c5 f0 df f0 eb ad a5 ff 75 8f 8e 27 db fd 4c 7a b5 85 a7 1d ff ed b9 ff 0a 4a 6b 93 4e 17 93 dc d0 0f ee 88 0b cb cf e2 76 6a 9b d5 62 13 00 e8 81 e6 9f 6a 34 4e 6c 77 b8 e6 bd 2f 05 10 8c be 49 0d 56 be fd 57 56 fe 96 c1 f3 27 d4 94 08 fe 1b a1 95 9c 60 f7 8b 84 bb 9f 09 af b6 f0 1d 06 fe db 73 ff 15 64 56 a5 9d 2e 26 48 1e 7a 90 3c ff 35 c2 27 2e b7 02 cc 71 74 59 9b a0 b1 ba 85 56 62 f5 70 be 42 c0 82 a7 33 a9 d6 b6 be fd 57 56 fe e6 65 03 cc f8 a3 7a 1c ff 8d d0 d0 52 52 fe f6 ef a4 ab 4e 04 52 22 3c ef f8 6f bf fd 57 72 fd 53 4e ff 15 a5 8a 3d a8 e7 8b e1 bf 05 57 80 b9 65 d7 14 1c 01 0f a7 c0 e3 0f 09 29 b0 a7 10 b0 e0 e9 4c 2a b8 e9 db 7f 65 7d c2 72 c8 3f 92 25 00 47 f0 df f0 b9 81 92 f2 b7 64 37 3f be 43 90 c6 2e Data Ascii: ;u'LzJkNvjbj4Nlw/IVWV'`sdV.&Hz<5'.qtYVbpB3WVezRRNR"<oWrSN=We)L*e}r?%Gd7?C.
2024-04-25 18:47:30 UTC	8302	IN	Data Raw: 87 ff e2 bf b6 21 83 d9 5a 13 f4 8a c8 c7 cd b9 23 bb c8 54 aa 2a c0 17 ad bd df 6d 77 63 df b6 fb 61 dc 43 c5 21 1e ba 74 4b e0 ac 32 20 6e 4e fc de 69 ec 2f 53 ed 2a 33 6c e4 93 16 fe 1b 7e ed 15 66 40 b7 dc f5 0d ff 55 95 c0 5d 73 f9 9f 80 93 f8 ca 9f e2 25 9a be ea 03 ff c5 7f 9f 39 e0 48 35 43 07 ed d6 af a8 42 4f b7 67 ac e2 41 d5 5e 7d c7 c3 7c 53 18 b7 3b 65 b2 16 e2 86 4c 26 39 60 9e 32 9a 6d 28 72 fd 7c 6d c6 f5 fc e1 99 f2 bb 28 06 44 fc 37 f4 68 1e 66 40 af 8f 47 5e fe 6e 6f fd 57 55 02 77 cd d5 2f c1 06 d3 d5 3f e4 e3 89 3a fc 8b ff e2 bf cf ef 09 65 cb fe 9d 60 09 f4 9a 32 9c c8 1b d6 75 1e 91 ea 20 5f ca ad f7 d9 bd d1 06 8a cc 3a 0c 52 d3 fd 69 ca 57 cf b4 b1 69 cc ef 5a 6d a9 7d 52 31 69 e1 bf e1 47 f3 c1 a0 dd f6 fc ce 41 bd a4 c2 7f 9f Data Ascii: !Z#TmwcaC!tK2 nNi/S3l~f@U]s%9H5CBOgA^}\|S;eL&9`2m(r\|m(D7hf@G^noWUw/?:e`2u _:RiWiZm}R1iGA
2024-04-25 18:47:30 UTC	6085	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-25 18:47:30 UTC	10674	IN	Data Raw: 5a 42 1a 70 15 3c d7 d4 03 b7 b6 27 a0 b0 a7 16 4d 46 ba ac c7 48 fc fd 5c 64 b7 e4 54 b6 2f 8f b3 0d 80 1c c1 10 dd 53 a6 67 c9 b4 cd 6d 5c 4a 68 39 09 6f 1d f0 7c 65 28 b9 6d 7d 1b 3a 5c 47 f0 32 85 24 30 aa cc 9d bc e6 15 95 7c 94 d1 f7 5b 99 f0 eb 3e 9e 23 58 5a cb 09 cb e0 db b5 03 8b 19 b8 d5 ad 58 86 10 51 30 e6 08 79 b6 06 52 3c 07 86 86 1c fc c4 c4 42 e3 29 99 7b c3 e2 53 c7 d4 e9 00 99 2d f4 ac b0 e1 da 41 a6 d3 dc 49 20 32 4d 22 b1 84 74 4b 66 0c 13 cc 1a 43 6a 92 f5 e3 83 7c f4 73 09 c7 8a 93 ca 72 c7 f2 93 d2 df f8 a2 26 2b 07 36 b1 32 a7 7b 55 62 66 4d 4a 1b 63 bb d4 c6 19 11 81 e2 03 08 57 fe 54 84 1d d9 5a 6a c1 a5 b6 2d c2 49 e0 ed 96 30 94 94 b4 9b 9a 94 d8 26 9c fc 04 53 3c 52 da df 43 4d 91 10 4d 8d 26 7c 2b 6b d5 43 93 bf 02 92 13 b4 Data Ascii: ZBp<'MFH\dT/Sgm\Jh9o\|e(m}:\G2$0\|[>#XZXQ0yR<B){S-AI 2M"tKfCj\|sr&+62{UbfMJcWTZj-I0&S<RCMM&\|+kC
2024-04-25 18:47:30 UTC	7264	IN	Data Raw: 6f 62 6a 0a 32 33 37 20 30 20 6f 62 6a 0a 3c 3c 2f 46 69 6c 74 65 72 2f 46 6c 61 74 65 44 65 63 6f 64 65 2f 4c 65 6e 67 74 68 20 31 38 35 34 3e 3e 0a 73 74 72 65 61 6d 0a 78 da dd 5a bd 8e 23 37 0c ee f3 14 f3 02 56 44 fd 8c 24 c0 70 11 20 39 20 dd 25 db 05 29 ec b5 27 4d ae b8 6b f2 fa a1 24 4a a2 e4 b1 3d de ec 06 48 ee e0 9d b5 46 3f 14 f9 f1 13 49 ed f4 75 82 49 e2 7f 98 9c 9a dc 1c 84 0f d3 eb 17 6c f8 84 9f 3f ae 9e 3f bc 4c df ff a4 27 90 22 c8 00 d3 cb 32 81 16 52 87 49 0b 65 fc f4 72 fe 6d 2f 25 18 29 95 c6 e7 2b 3e cf 87 80 4d 4a e2 3f 87 cf f8 2a 3e e5 e1 f7 97 9f a7 1f 5f 6e ae 54 9e 5f 27 a1 83 b7 d3 5f 65 a5 1d 08 af c2 f4 65 32 f3 2c ac d7 a5 e1 cf e9 d7 e9 f3 7d c1 61 02 10 c1 5a c5 04 df 69 25 02 28 12 5d ba 03 78 92 17 ce 51 7c 29 b5 ac Data Ascii: obj237 0 obj<</Filter/FlateDecode/Length 1854>>streamxZ#7VD$p 9 %)'Mk$J=HF?IuIl??L'"2RIerm/%)+>MJ?*>_nT_'_ee2,}aZi%(]xQ\|)

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49757	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6a 6d 4f 62 69 66 47 56 6d 30 61 49 42 54 6b 4d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 63 35 66 32 35 64 65 65 65 33 66 61 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: jmObifGVm0aIBTkM.1Context: e7fc5f25deee3fab
2024-04-25 18:47:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-25 18:47:33 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 6a 6d 4f 62 69 66 47 56 6d 30 61 49 42 54 6b 4d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 63 35 66 32 35 64 65 65 65 33 66 61 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 61 74 48 6d 42 69 45 6b 54 6b 76 39 78 7a 55 6a 37 47 35 62 58 6f 78 45 4f 50 44 7a 48 49 52 4f 2f 67 38 62 41 51 76 57 70 45 35 6d 45 6c 65 54 68 69 47 34 75 78 53 63 30 53 57 4c 57 77 4f 64 74 47 34 55 37 32 6c 6d 49 61 2b 45 67 50 63 2b 39 57 49 37 36 45 34 75 31 72 67 36 4a 45 36 49 66 34 39 44 4c 54 37 4a 47 71 69 61 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: jmObifGVm0aIBTkM.2Context: e7fc5f25deee3fab<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASatHmBiEkTkv9xzUj7G5bXoxEOPDzHIRO/g8bAQvWpE5mEleThiG4uxSc0SWLWwOdtG4U72lmIa+EgPc+9WI76E4u1rg6JE6If49DLT7JGqia
2024-04-25 18:47:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6a 6d 4f 62 69 66 47 56 6d 30 61 49 42 54 6b 4d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 63 35 66 32 35 64 65 65 65 33 66 61 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: jmObifGVm0aIBTkM.3Context: e7fc5f25deee3fab<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-25 18:47:33 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-25 18:47:33 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 53 42 75 52 4d 78 54 51 30 71 51 55 46 50 53 6d 55 6b 72 4e 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TSBuRMxTQ0qQUFPSmUkrNQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49758	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:33 UTC	620	OUT	GET /notice?domain=sharefile.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&fade=30000&language=en HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:34 UTC	471	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Length: 14732 Connection: close Date: Thu, 25 Apr 2024 18:47:34 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 fb71bc40c2ca2e3f3af674bf6527ac8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: nys69KEyKNmVdNYLWsb78gvqNvnvFITrdLIBzprh2dzY_IYzCAn1OQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=3600 Vary: Origin
2024-04-25 18:47:34 UTC	14732	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 72 75 73 74 65 5f 65 75 6d 61 70 28 29 7b 74 72 75 73 74 65 3d 73 65 6c 66 2e 74 72 75 73 74 65 7c 7c 7b 7d 3b 74 72 75 73 74 65 2e 65 75 7c 7c 28 74 72 75 73 74 65 2e 65 75 3d 7b 7d 29 3b 74 72 75 73 74 65 2e 75 74 69 6c 7c 7c 28 74 72 75 73 74 65 2e 75 74 69 6c 3d 7b 7d 29 3b 0a 74 72 75 73 74 65 2e 75 74 69 6c 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 6c 2c 6f 29 7b 6f 3d 6f 7c 7c 7b 7d 3b 76 61 72 20 6e 3d 6c 26 26 6c 2e 74 6f 53 74 72 69 6e 67 28 29 7c 7c 22 22 2c 65 3d 6f 2e 63 61 6c 6c 65 72 7c 7c 22 22 3b 69 66 28 6c 26 26 6c 2e 73 74 61 63 6b 29 7b 6e 2b 3d 22 5c 6e 22 2b 6c 2e 73 74 61 63 6b 2e 6d 61 74 63 68 28 2f 28 40 7c 61 74 29 5b 5e 5c 6e 5c 72 5c 74 5d 2a 2f 29 5b 30 5d 2b 22 5c 6e 22 2b 6c 2e Data Ascii: function _truste_eumap(){truste=self.truste\|\|{};truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});truste.util.error=function(p,l,o){o=o\|\|{};var n=l&&l.toString()\|\|"",e=o.caller\|\|"";if(l&&l.stack){n+="\n"+l.stack.match(/(@\|at)[^\n\r\t]*/)[0]+"\n"+l.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49725	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:34 UTC	582	OUT	GET /asset/notice.js/v/v1.7-3185 HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:34 UTC	581	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 94379 Connection: close Last-Modified: Tue, 19 Mar 2024 02:16:13 GMT Pragma: public Date: Thu, 25 Apr 2024 18:47:11 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8ca7450d970f904109dac7e068234b78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: UTOBvj1XXhC83tmpRwRWJKExWpUTSfaqgg_x4hrtKR5NKF7Ew7AoKg== Age: 95 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-04-25 18:47:34 UTC	15803	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 72 75 73 74 65 5f 65 75 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 67 3d 74 72 75 73 74 65 2e 65 75 2e 62 69 6e 64 4d 61 70 3b 67 2e 66 65 61 74 2e 69 73 43 6f 6e 73 65 6e 74 52 65 74 72 69 65 76 65 64 3d 67 2e 66 65 61 74 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 3f 67 2e 66 65 61 74 2e 69 73 43 6f 6e 73 65 6e 74 52 65 74 72 69 65 76 65 64 3a 21 30 3b 69 66 28 21 74 2e 64 6f 6e 65 26 26 74 72 75 73 74 65 2e 75 74 69 6c 2e 69 73 43 6f 6e 73 65 6e 74 52 65 73 6f 6c 76 65 64 28 29 29 7b 74 2e 64 6f 6e 65 3d 21 30 3b 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 63 3d 74 72 75 73 74 65 2e 75 74 69 6c 2e 72 65 61 64 43 6f 6f 6b 69 Data Ascii: function _truste_eu(){function t(){var g=truste.eu.bindMap;g.feat.isConsentRetrieved=g.feat.crossDomain?g.feat.isConsentRetrieved:!0;if(!t.done&&truste.util.isConsentResolved()){t.done=!0;var k=function(){var a=(new Date).getTime(),c=truste.util.readCooki
2024-04-25 18:47:34 UTC	16384	IN	Data Raw: 2f 5d 22 2c 22 69 67 22 29 2e 65 78 65 63 28 61 29 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 6c 65 6e 67 74 68 3f 21 66 28 61 29 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 52 65 67 45 78 70 28 22 5e 4d 6f 7a 69 6c 6c 61 5b 2f 5d 5b 2e 5c 5c 64 5d 2b 20 5b 28 5d 4d 61 63 69 6e 74 6f 73 68 3b 2e 2a 4d 61 63 20 4f 53 20 58 20 5b 5f 5c 5c 64 5d 2b 5b 29 5d 20 41 70 70 6c 65 57 65 62 4b 69 74 5b 2f 5d 5b 2e 5c 5c 64 5d 2b 20 5b 28 5d 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 5b 29 5d 24 22 2c 22 69 67 22 29 2e 65 78 65 63 28 61 29 29 26 26 61 2e 6c 65 6e 67 74 68 3f 0a 21 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 52 65 67 45 78 70 28 22 43 68 72 6f 6d 28 65 7c 69 75 6d 29 22 Data Ascii: /]","ig").exec(a);return b&&b.length?!f(a):!1}function e(a){return(a=RegExp("^Mozilla[/][.\\d]+ [(]Macintosh;.*Mac OS X [_\\d]+[)] AppleWebKit[/][.\\d]+ [(]KHTML, like Gecko[)]$","ig").exec(a))&&a.length?!0:!1}function f(a){return(a=RegExp("Chrom(e\|ium)"
2024-04-25 18:47:34 UTC	16384	IN	Data Raw: 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 26 26 63 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 65 28 61 29 2c 22 2a 22 29 7d 3b 74 72 75 73 74 65 2e 65 75 2e 61 64 64 43 6c 6f 73 65 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 69 72 6d 22 3d 3d 3d 62 2c 65 3d 74 72 75 73 74 65 2e 75 74 69 6c 2e 76 61 6c 69 64 43 6f 6e 73 65 6e 74 28 61 2e 70 72 65 66 43 6f 6f 6b 69 65 29 7c 7c 61 2e 66 65 61 74 2e 67 70 70 2e 67 70 70 41 70 70 6c 69 65 73 26 26 74 72 75 73 74 65 2e 65 75 2e 69 73 47 50 43 44 4e 54 45 76 65 6e 74 28 29 2c 66 3d 21 64 26 26 61 2e 66 65 61 74 2e 6f 70 74 6f 75 74 43 6c 6f 73 65 26 26 0a 21 65 26 26 22 72 65 71 75 69 72 65 64 22 21 3d 63 3b 69 66 28 61 20 69 6e 73 Data Ascii: w.postMessage&&c.contentWindow.postMessage(e(a),"*")};truste.eu.addCloseButton=function(a,b,c){var d="irm"===b,e=truste.util.validConsent(a.prefCookie)\|\|a.feat.gpp.gppApplies&&truste.eu.isGPCDNTEvent(),f=!d&&a.feat.optoutClose&&!e&&"required"!=c;if(a ins
2024-04-25 18:47:34 UTC	16384	IN	Data Raw: 6c 6f 61 64 3d 6e 75 6c 6c 29 7d 3b 74 72 75 73 74 65 2e 65 75 2e 73 68 6f 77 43 4d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 76 61 72 20 62 2c 63 2c 64 3d 22 66 61 6c 73 65 22 3d 3d 61 3f 22 74 72 75 73 74 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 3a 61 3f 22 74 72 75 73 74 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 76 69 73 69 62 6c 65 22 3a 22 74 72 75 73 74 65 5f 76 69 73 69 62 69 6c 69 74 79 5f 68 69 64 64 65 6e 22 3b 69 66 28 63 3d 28 62 3d 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 72 75 73 74 65 2e 65 75 2e 70 6f 70 64 69 76 29 29 26 26 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 72 75 73 74 65 2e 65 75 2e 70 6f 70 64 69 76 32 29 29 Data Ascii: load=null)};truste.eu.showCM=function(a){try{var b,c,d="false"==a?"truste_visibility_hidden":a?"truste_visibility_visible":"truste_visibility_hidden";if(c=(b=self.document.getElementById(truste.eu.popdiv))&&self.document.getElementById(truste.eu.popdiv2))
2024-04-25 18:47:34 UTC	16384	IN	Data Raw: 49 45 5f 43 50 52 41 5f 47 50 43 49 53 48 4f 4e 4f 52 45 44 3d 22 67 70 63 69 73 68 6f 6e 6f 72 65 64 22 3b 74 72 75 73 74 65 2e 65 75 2e 63 70 72 61 2e 73 68 6f 75 6c 64 53 68 6f 77 46 69 6e 50 72 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 72 75 73 74 65 2e 65 75 2e 62 69 6e 64 4d 61 70 2c 62 3d 74 72 75 73 74 65 2e 75 74 69 6c 2e 72 65 61 64 43 6f 6f 6b 69 65 28 74 72 75 73 74 65 2e 65 75 2e 43 4f 4f 4b 49 45 5f 43 50 52 41 5f 46 49 4e 50 52 4f 47 2c 21 30 29 3b 72 65 74 75 72 6e 20 61 2e 66 65 61 74 2e 65 6e 61 62 6c 65 43 50 52 41 26 26 22 74 72 75 65 22 3d 3d 74 72 75 73 74 65 2e 65 75 2e 6e 6f 74 69 63 65 4c 50 2e 66 69 6e 70 72 6f 67 26 26 0a 28 21 62 7c 7c 22 74 72 75 65 22 3d 3d 3d 62 29 26 26 28 31 3d 3d 74 72 75 73 74 65 2e Data Ascii: IE_CPRA_GPCISHONORED="gpcishonored";truste.eu.cpra.shouldShowFinProg=function(){var a=truste.eu.bindMap,b=truste.util.readCookie(truste.eu.COOKIE_CPRA_FINPROG,!0);return a.feat.enableCPRA&&"true"==truste.eu.noticeLP.finprog&&(!b\|\|"true"===b)&&(1==truste.
2024-04-25 18:47:34 UTC	13040	IN	Data Raw: 20 70 72 65 66 65 72 65 6e 63 65 73 20 6f 66 20 64 6f 6d 61 69 6e 73 20 6e 6f 74 20 79 6f 75 72 20 6f 77 6e 20 72 65 71 75 69 72 65 20 61 6e 20 61 75 74 68 6f 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 2e 20 41 6e 20 27 61 75 74 68 6f 72 69 74 79 27 20 69 73 20 77 68 61 74 65 76 65 72 20 65 6e 74 69 74 79 20 68 61 73 20 61 70 70 72 6f 76 65 64 20 6f 72 20 72 65 71 75 65 73 74 65 64 20 79 6f 75 20 74 6f 20 6d 61 6b 65 20 74 68 69 73 20 63 61 6c 6c 2e 20 45 78 61 6d 70 6c 65 73 20 69 6e 63 6c 75 64 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 79 6f 75 20 61 72 65 20 69 6e 71 75 69 72 69 6e 67 20 61 62 6f 75 74 2c 20 74 68 65 20 77 65 62 20 73 69 74 65 20 79 6f 75 20 61 72 65 20 68 6f 73 74 65 64 20 6f 6e 2c 20 6f 72 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 70 Data Ascii: preferences of domains not your own require an authority parameter. An 'authority' is whatever entity has approved or requested you to make this call. Examples include the domain you are inquiring about, the web site you are hosted on, or a third party p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49764	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:34 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=49bf&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:35 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:47:35 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 932c2b3276a26e6c28876ec88fecf714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: t4eqnYJir-gCBfrEx0EwN8tRPxRBLBeAKAT0zybpAYAB0cIZk84jTA== Vary: Origin
2024-04-25 18:47:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49766	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:34 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070854182 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:35 UTC	984	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:47:35 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: uqarec315uel X-Cloud-Trace-Context: 98d5e6bc9446a7d4a5d94ec359a272d7 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CNG0vqqgw--2dhAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49767	18.238.49.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:34 UTC	731	OUT	GET /get?name=crossdomain.html&domain=sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:35 UTC	468	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2178 Connection: close Date: Thu, 25 Apr 2024 18:47:35 GMT Pragma: public Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1f85764c0bc1f70d16858df07753dfa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: WCs8Y3gWkyEOsNwEuyyYzQKmE1M-Wd4TFGbAI1f0YuUU-24i9fnCkw== Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=2592000 Vary: Origin
2024-04-25 18:47:35 UTC	2178	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 61 2c 72 2c 6e 2c 6f 3d 22 74 72 75 73 74 65 2e 63 6f 6e 73 65 6e 74 2e 22 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 3d 7b 7d 2c 65 3d 61 2e 5f 75 72 6c 3d 65 3b 69 66 28 65 3d 28 61 2e 5f 71 75 65 72 79 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 3b 3f 23 5d 2a 5b 3b 3f 23 5d 2f 2c 22 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 5b 23 3b 3f 26 5d 2b 2f 67 2c 22 26 22 29 29 66 6f 72 28 65 3d 65 2e 73 70 6c 69 74 28 22 26 22 29 2c 74 3d 65 2e 6c 65 6e 67 74 68 3b 30 3c 74 2d 2d 3b 29 7b 76 61 72 20 72 3d 65 5b 74 5d 2e 73 70 6c 69 74 28 22 3d 22 29 2c 6e 3d 72 2e 73 68 69 66 74 28 29 3b 61 5b 6e 5d 7c 7c 28 61 5b 6e 5d Data Ascii: <html><head><script>!function(){var e,t,a,r,n,o="truste.consent.",i=function(e){var t,a={},e=a._url=e;if(e=(a._query=e.replace(/^[^;?#]*[;?#]/,"")).replace(/[#;?&]+/g,"&"))for(e=e.split("&"),t=e.length;0<t--;){var r=e[t].split("="),n=r.shift();a[n]\|\|(a[n]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49769	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:35 UTC	659	OUT	POST /api/v2/sendInsights?1714070854182 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1984 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 6764587678 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:35 UTC	1984	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:47:35 UTC	723	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:35 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: 7aprf1esbrpk X-Cloud-Trace-Context: d76fc4c4159d98a836eb4ea605c53c0e Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CJm9npzxmp7n0AEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:35 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49771	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:35 UTC	829	OUT	GET /en-us HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238
2024-04-25 18:47:35 UTC	569	IN	HTTP/1.1 301 Moved Permanently Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 34271 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:47:35 GMT Etag: "6ce9b7f980412d2a9d8e998de844a8b8-ssl" Location: /en-us/ Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B81Z9JWG55KFDF4AW6S6 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:35 UTC	617	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 Data Ascii: <!DOCTYPE html><html lang="" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="view
2024-04-25 18:47:35 UTC	2372	IN	Data Raw: 6f 6e 74 65 6e 74 3d 22 4c 72 46 51 38 6a 4b 70 50 58 66 74 58 64 75 73 4e 6b 39 70 6d 2d 75 36 5f 55 74 77 75 79 49 4e 33 66 55 52 70 6b 42 67 79 34 45 22 3e 0a 20 20 20 20 0a 0a 20 20 20 20 0a 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 65 6e 74 2e 74 72 75 73 74 61 72 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 20 20 20 20 0a 20 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 6d 61 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 6d 61 Data Ascii: ontent="LrFQ8jKpPXftXdusNk9pm-u6_UtwuyIN3fURpkBgy4E"> <link rel="preconnect" href="https://consent.trustarc.com" crossorigin> <link rel="preload" as="style" href="/assets/main.css"> <link rel="stylesheet" href="/assets/ma
2024-04-25 18:47:35 UTC	538	IN	Data Raw: 61 74 65 2e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 72 65 63 6f 6d 6d 65 6e 64 65 64 22 20 76 61 6c 75 65 3d 22 52 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 70 69 63 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 72 65 6c 61 74 65 64 5f 74 6f 70 69 63 73 22 20 76 61 6c 75 65 3d 22 52 65 6c 61 74 65 64 20 74 6f 70 69 63 73 20 69 6e 20 43 69 74 72 69 78 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 6e 6f 5f 72 65 73 75 6c 74 5f 74 65 63 68 5f 7a 6f 6e 65 22 20 76 61 6c 75 65 3d 22 4e 6f 20 72 65 73 75 6c 74 73 20 66 6f 75 6e 64 20 69 6e 20 Data Ascii: ate."><input type="hidden" id="search_recommended" value="Recommended topics"><input type="hidden" id="search_related_topics" value="Related topics in Citrix Tech Zone"><input type="hidden" id="search_no_result_tech_zone" value="No results found in
2024-04-25 18:47:35 UTC	4744	IN	Data Raw: 75 65 3d 22 53 65 6c 65 63 74 65 64 20 66 69 6c 74 65 72 22 3e 0d 0a 0d 0a 20 20 3c 21 2d 2d 20 4d 6f 64 61 6c 20 2d 2d 3e 0d 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 20 66 61 64 65 22 20 69 64 3d 22 61 6c 67 6f 6c 69 61 4d 6f 64 61 6c 22 20 64 61 74 61 2d 62 61 63 6b 64 72 6f 70 3d 22 66 61 6c 73 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 72 6f 6c 65 3d 22 64 69 61 6c 6f 67 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 61 6c 67 6f 6c 69 61 4d 6f 64 61 6c 4c 61 62 65 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 73 63 72 6f 6c 6c 61 62 6c 65 22 20 72 6f 6c 65 3d 22 64 Data Ascii: ue="Selected filter"> ... Modal --> <div class="modal fade" id="algoliaModal" data-backdrop="false" tabindex="-1" role="dialog" aria-labelledby="algoliaModalLabel" aria-hidden="true"> <div class="modal-dialog modal-dialog-scrollable" role="d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49772	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:35 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=49bf&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:35 UTC	1474	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:47:35 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 2784337ad1bef2f5343cdf0842e12a80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: AFQmIML9XZKtCrgz9j223alYCzKoILnWfwTW4F8fphwzg8k47WEegQ== Vary: Origin
2024-04-25 18:47:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49770	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:36 UTC	830	OUT	GET /en-us/ HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238
2024-04-25 18:47:36 UTC	535	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 34271 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:47:36 GMT Etag: "6ce9b7f980412d2a9d8e998de844a8b8-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9B8C8C8PPSP09XXA8ZKGV X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:36 UTC	651	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 Data Ascii: <!DOCTYPE html><html lang="" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="view
2024-04-25 18:47:36 UTC	2372	IN	Data Raw: 74 77 75 79 49 4e 33 66 55 52 70 6b 42 67 79 34 45 22 3e 0a 20 20 20 20 0a 0a 20 20 20 20 0a 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 65 6e 74 2e 74 72 75 73 74 61 72 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 20 20 20 20 0a 20 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 6d 61 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 6d 61 69 6e 2e 63 73 73 22 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 Data Ascii: twuyIN3fURpkBgy4E"> <link rel="preconnect" href="https://consent.trustarc.com" crossorigin> <link rel="preload" as="style" href="/assets/main.css"> <link rel="stylesheet" href="/assets/main.css"> <link rel="canonic
2024-04-25 18:47:36 UTC	538	IN	Data Raw: 65 61 72 63 68 5f 72 65 63 6f 6d 6d 65 6e 64 65 64 22 20 76 61 6c 75 65 3d 22 52 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 70 69 63 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 72 65 6c 61 74 65 64 5f 74 6f 70 69 63 73 22 20 76 61 6c 75 65 3d 22 52 65 6c 61 74 65 64 20 74 6f 70 69 63 73 20 69 6e 20 43 69 74 72 69 78 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 6e 6f 5f 72 65 73 75 6c 74 5f 74 65 63 68 5f 7a 6f 6e 65 22 20 76 61 6c 75 65 3d 22 4e 6f 20 72 65 73 75 6c 74 73 20 66 6f 75 6e 64 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 Data Ascii: earch_recommended" value="Recommended topics"><input type="hidden" id="search_related_topics" value="Related topics in Citrix Tech Zone"><input type="hidden" id="search_no_result_tech_zone" value="No results found in Tech Zone"><input type="hidden"
2024-04-25 18:47:36 UTC	4744	IN	Data Raw: 64 61 6c 20 2d 2d 3e 0d 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 20 66 61 64 65 22 20 69 64 3d 22 61 6c 67 6f 6c 69 61 4d 6f 64 61 6c 22 20 64 61 74 61 2d 62 61 63 6b 64 72 6f 70 3d 22 66 61 6c 73 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 72 6f 6c 65 3d 22 64 69 61 6c 6f 67 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 61 6c 67 6f 6c 69 61 4d 6f 64 61 6c 4c 61 62 65 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 73 63 72 6f 6c 6c 61 62 6c 65 22 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c Data Ascii: dal --> <div class="modal fade" id="algoliaModal" data-backdrop="false" tabindex="-1" role="dialog" aria-labelledby="algoliaModalLabel" aria-hidden="true"> <div class="modal-dialog modal-dialog-scrollable" role="document"> <div class="modal
2024-04-25 18:47:36 UTC	5930	IN	Data Raw: 61 6e 67 2d 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 53 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 6e 67 20 61 63 74 69 76 65 20 6c 61 6e 67 2d 64 65 73 6b 74 6f 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 22 20 68 72 65 66 3d 22 2f 66 72 2d 66 72 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ang-p"> ES </div> </a> </li> <li class="lang active lang-desktop"> <a class="language-option" href="/fr-fr?lang-switch=true"> <div class="lang-p">
2024-04-25 18:47:36 UTC	7116	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6c 65 61 72 6e 2d 6d 6f 72 65 2d 69 6e 66 6f 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <p class="learn-more-info">Learn more</p> <span class="docs-icon icon-external-link"></span> </div> </div>
2024-04-25 18:47:36 UTC	8302	IN	Data Raw: 27 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 73 68 61 72 65 66 69 6c 65 2e 63 6f 6d 2f 73 2f 63 6f 6d 6d 75 6e 69 74 79 27 2c 20 27 5f 62 6c 61 6e 6b 27 2c 27 6e 6f 6f 70 65 6e 65 72 27 29 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 75 70 70 6f 72 74 2d 63 61 72 64 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 63 74 78 2d 73 75 70 70 6f 72 74 20 63 61 72 64 2d 69 63 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 'https://support.sharefile.com/s/community', '_blank','noopener');"> <div class="support-card-wrapper"> <span class="docs-icon icon-ctx-support card-icon"></span>
2024-04-25 18:47:36 UTC	4618	IN	Data Raw: 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 65 64 69 74 61 72 74 69 63 6c 65 4d 6f 64 61 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 63 65 6e 74 65 72 65 64 20 65 64 69 74 2d 61 72 74 69 63 6c 65 2d 64 69 61 6c 6f 67 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 62 6f 64 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 22 20 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 20 61 Data Ascii: -labelledby="editarticleModal" aria-hidden="true"> <div class="modal-dialog modal-dialog-centered edit-article-dialog"> <div class="modal-content "> <div class="modal-body"> <div class="close" data-dismiss="modal" a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49774	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:36 UTC	794	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:47:37 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:47:37 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9B9DDHZYNN142768EXKHB Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49776	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:36 UTC	786	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:47:37 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:47:37 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9B9EFCTXKF0MJ52ZVMYBR Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49779	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:37 UTC	373	OUT	GET /api/v2/sendInsights?1714070854182 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:37 UTC	581	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:37 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 7apruaom0e95 X-Cloud-Trace-Context: 98c0da6694dcaf73b71ecb00d207d393 Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CNWk1oqaweXrhwEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:37 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49782	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:38 UTC	875	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:38 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e18vikut0l X-Cloud-Trace-Context: 7335e4f400436b1b238cffb6d20ca1d4 Date: Thu, 25 Apr 2024 18:47:38 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:38 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49784	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:38 UTC	998	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; GA1.3.1322026028.1714070856; _gid=GA1.3.2101004329.1714070856; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:47:38 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:47:38 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BB4Y4YEXVB5BY9KSB5XB Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49785	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:38 UTC	1004	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; GA1.3.1322026028.1714070856; _gid=GA1.3.2101004329.1714070856; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:47:38 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:47:38 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BB4N05CNHKR4ZJ4AM1W8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49786	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:38 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:38 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1ri3d1evz X-Cloud-Trace-Context: 60229c8a786954662be9945c501d8dd2 Date: Thu, 25 Apr 2024 18:47:38 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:38 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49788	142.250.105.154	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:39 UTC	850	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&gjid=1071460475&_gid=2101004329.1714070856&_u=YEBAAQAAAAAAACAAs~&z=323130226 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://docs.sharefile.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:39 UTC	596	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 18:47:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:39 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49791	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:39 UTC	993	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; GA1.3.1322026028.1714070856; _gid=GA1.3.2101004329.1714070856; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:47:40 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:47:39 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BC5ZNYG1WSPZ4QZEF8XD Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49792	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:40 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070859592 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:40 UTC	984	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:47:40 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7aprm1d9rw2h X-Cloud-Trace-Context: d421067b01aadf4aa5f1998035c0ad54 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CI-_srDX3qjEORAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49793	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:40 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f07a&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:40 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:47:40 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 8fc65419aa2ed286fa0e10813748c49a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: zOIDKuoYPqBPhsS3pWbSa1Fi70vOmZkHb7hjiDYsgjduYu_aE-9wTg== Vary: Origin
2024-04-25 18:47:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49796	64.233.185.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:40 UTC	797	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&_u=YEBAAQAAAAAAACAAs~&z=1683289489 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:40 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 18:47:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49797	108.177.122.154	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:40 UTC	594	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&gjid=1071460475&_gid=2101004329.1714070856&_u=YEBAAQAAAAAAACAAs~&z=323130226 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:41 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 18:47:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:41 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49798	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:40 UTC	659	OUT	POST /api/v2/sendInsights?1714070859592 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1236 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 2520480266 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:40 UTC	1236	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:47:41 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:41 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: 7apr91gb5mkq X-Cloud-Trace-Context: ab00c4badfd8cf805b8f643798e9b696 Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CO6B5NObxdvXZRAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:41 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49799	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:40 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f07a&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:41 UTC	1482	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:47:40 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 876bec0443fc8f764d98d36e203f84e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: HDjiF21c-TEQ2amOa7U3yGTWYjsO0o0119YPygh3bCVfR_DjKxL71w== Age: 1 Vary: Origin
2024-04-25 18:47:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49800	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:40 UTC	928	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:47:41 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:47:41 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BDD1WNQ0QYF0BQJ2QBG0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49803	108.177.122.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:41 UTC	559	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1322026028.1714070856&jid=363135982&_u=YEBAAQAAAAAAACAAs~&z=1683289489 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:41 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 18:47:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49804	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:41 UTC	406	OUT	GET /api/v2/sendInsights?1714070859592 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:47:41 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:41 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 7aprdc20oral X-Cloud-Trace-Context: 3f3b4614b35726c1f33e2fe6a9a119aa Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:41 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49806	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:41 UTC	747	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _ga=GA1.2.1322026028.1714070856; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:47:41 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:47:41 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BDZGQH057EQ782H91ZQS Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49809	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 45 48 4a 72 79 75 61 4e 37 55 79 67 67 42 51 4e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 31 36 62 33 38 63 30 61 66 36 66 65 61 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: EHJryuaN7UyggBQN.1Context: c416b38c0af6feaf
2024-04-25 18:47:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-25 18:47:44 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 45 48 4a 72 79 75 61 4e 37 55 79 67 67 42 51 4e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 31 36 62 33 38 63 30 61 66 36 66 65 61 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 61 74 48 6d 42 69 45 6b 54 6b 76 39 78 7a 55 6a 37 47 35 62 58 6f 78 45 4f 50 44 7a 48 49 52 4f 2f 67 38 62 41 51 76 57 70 45 35 6d 45 6c 65 54 68 69 47 34 75 78 53 63 30 53 57 4c 57 77 4f 64 74 47 34 55 37 32 6c 6d 49 61 2b 45 67 50 63 2b 39 57 49 37 36 45 34 75 31 72 67 36 4a 45 36 49 66 34 39 44 4c 54 37 4a 47 71 69 61 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: EHJryuaN7UyggBQN.2Context: c416b38c0af6feaf<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASatHmBiEkTkv9xzUj7G5bXoxEOPDzHIRO/g8bAQvWpE5mEleThiG4uxSc0SWLWwOdtG4U72lmIa+EgPc+9WI76E4u1rg6JE6If49DLT7JGqia
2024-04-25 18:47:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 45 48 4a 72 79 75 61 4e 37 55 79 67 67 42 51 4e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 31 36 62 33 38 63 30 61 66 36 66 65 61 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: EHJryuaN7UyggBQN.3Context: c416b38c0af6feaf<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-25 18:47:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-25 18:47:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 49 46 6b 4c 44 51 55 77 67 30 69 5a 51 4f 4d 78 72 79 5a 4e 6c 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: IFkLDQUwg0iZQOMxryZNlg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49851	99.83.254.102	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:50 UTC	606	OUT	OPTIONS /rest/ua/v15/analytics/view?visitor=97fc8b95-1583-4e4e-91f7-b83c892ea259 HTTP/1.1 Host: platform.cloud.coveo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://support.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:50 UTC	1180	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:50 GMT Content-Length: 0 Connection: close X-Request-ID: 59134c4c-efb9-4cdf-854a-95eb2c182eb2 Cache-Control: no-cache, no-store, max-age=0, must-revalidate, private Expires: 0 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding, User-Agent Report-To: {"group":"csp-endpoint","max_age": 10886400,"endpoints":[{"url": "/csp-violation"}]} Reporting-Endpoints: csp-endpoint="/csp-violation" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://static.cloud.coveo.com https://platform.cloud.coveo.com; object-src 'none'; report-to csp-endpoint; report-uri /csp-violation; X-Frame-Options: DENY Access-Control-Allow-Origin: https://support.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Access-Control-Allow-Methods: HEAD, DELETE, POST, GET, OPTIONS, PUT, PATCH Access-Control-Allow-Headers: Authorization, Origin, Accept, X-Requested-With, X-Http-Method-Override, Range, Sentry-Trace, Baggage, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49852	99.83.254.102	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:50 UTC	606	OUT	OPTIONS /rest/ua/v15/analytics/view?visitor=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 HTTP/1.1 Host: platform.cloud.coveo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://support.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:50 UTC	1180	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:50 GMT Content-Length: 0 Connection: close X-Request-ID: b5084b91-1892-4bff-8195-01463bb3c961 Cache-Control: no-cache, no-store, max-age=0, must-revalidate, private Expires: 0 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding, User-Agent Report-To: {"group":"csp-endpoint","max_age": 10886400,"endpoints":[{"url": "/csp-violation"}]} Reporting-Endpoints: csp-endpoint="/csp-violation" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://static.cloud.coveo.com https://platform.cloud.coveo.com; object-src 'none'; report-to csp-endpoint; report-uri /csp-violation; X-Frame-Options: DENY Access-Control-Allow-Origin: https://support.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Access-Control-Allow-Methods: HEAD, DELETE, POST, GET, OPTIONS, PUT, PATCH Access-Control-Allow-Headers: Authorization, Origin, Accept, X-Requested-With, X-Http-Method-Override, Range, Sentry-Trace, Baggage, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49856	99.83.254.102	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:51 UTC	1170	OUT	POST /rest/ua/v15/analytics/view?visitor=97fc8b95-1583-4e4e-91f7-b83c892ea259 HTTP/1.1 Host: platform.cloud.coveo.com Connection: keep-alive Content-Length: 397 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJ1c2VyR3JvdXBzIjpbIkhlbHAgQ2VudGVyIFByb2ZpbGUiXSwidjgiOnRydWUsInRva2VuSWQiOiJ1ZGVnMmdqcmNwdWhsY2xtb3Rob2R3a2JpNCIsIm9yZ2FuaXphdGlvbiI6InNoYXJlZmlsZXByb2R1Y3Rpb242c2wyanFrbSIsInVzZXJJZHMiOlt7InR5cGUiOiJVc2VyIiwibmFtZSI6ImFub255bW91cyIsInByb3ZpZGVyIjoiRW1haWwgU2VjdXJpdHkgUHJvdmlkZXIifV0sInJvbGVzIjpbInF1ZXJ5RXhlY3V0b3IiXSwiaXNzIjoiU2VhcmNoQXBpIiwiZXhwIjoxNzE0MTU3MjY4LCJpYXQiOjE3MTQwNzA4Njh9.7zEGSma5lHcKMFSy3aNDYXXqJURWRWp2siTDEFMvf84 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:51 UTC	397	OUT	Data Raw: 7b 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 73 68 61 72 65 66 69 6c 65 2e 63 6f 6d 2f 73 2f 63 6f 6d 6d 75 6e 69 74 79 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6d 6d 75 6e 69 74 79 22 2c 22 63 6f 6e 74 65 6e 74 49 64 4b 65 79 22 3a 22 40 63 6c 69 63 6b 61 62 6c 65 75 72 69 22 2c 22 63 6f Data Ascii: {"language":"en-US","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","location":"https://support.sharefile.com/s/community","title":"Community","contentIdKey":"@clickableuri","co
2024-04-25 18:47:51 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:51 GMT Content-Type: application/json Content-Length: 151 Connection: close X-Request-ID: 7632ba3f-8d3b-4b4f-b0f5-bf88daae5724 Cache-Control: no-cache, no-store, max-age=0, must-revalidate, private Expires: 0 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding, User-Agent Report-To: {"group":"csp-endpoint","max_age": 10886400,"endpoints":[{"url": "/csp-violation"}]} Reporting-Endpoints: csp-endpoint="/csp-violation" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://static.cloud.coveo.com https://platform.cloud.coveo.com; object-src 'none'; report-to csp-endpoint; report-uri /csp-violation; X-Frame-Options: DENY Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.sharefile.com Access-Control-Expose-Headers: Content-Range P3P: CP="-"
2024-04-25 18:47:51 UTC	151	IN	Data Raw: 7b 22 76 69 73 69 74 49 64 22 3a 22 63 38 30 33 31 39 66 30 2d 34 65 35 63 2d 34 66 33 31 2d 39 39 63 34 2d 66 65 31 62 34 32 35 63 31 62 33 66 22 2c 22 76 69 73 69 74 6f 72 49 64 22 3a 22 39 37 66 63 38 62 39 35 2d 31 35 38 33 2d 34 65 34 65 2d 39 31 66 37 2d 62 38 33 63 38 39 32 65 61 32 35 39 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 39 37 66 63 38 62 39 35 2d 31 35 38 33 2d 34 65 34 65 2d 39 31 66 37 2d 62 38 33 63 38 39 32 65 61 32 35 39 22 7d Data Ascii: {"visitId":"c80319f0-4e5c-4f31-99c4-fe1b425c1b3f","visitorId":"97fc8b95-1583-4e4e-91f7-b83c892ea259","clientId":"97fc8b95-1583-4e4e-91f7-b83c892ea259"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49857	99.83.254.102	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:51 UTC	1170	OUT	POST /rest/ua/v15/analytics/view?visitor=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 HTTP/1.1 Host: platform.cloud.coveo.com Connection: keep-alive Content-Length: 397 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJ1c2VyR3JvdXBzIjpbIkhlbHAgQ2VudGVyIFByb2ZpbGUiXSwidjgiOnRydWUsInRva2VuSWQiOiJ2Y3FpaHlteTRzc291dHh3bng3NjJsY21icSIsIm9yZ2FuaXphdGlvbiI6InNoYXJlZmlsZXByb2R1Y3Rpb242c2wyanFrbSIsInVzZXJJZHMiOlt7InR5cGUiOiJVc2VyIiwibmFtZSI6ImFub255bW91cyIsInByb3ZpZGVyIjoiRW1haWwgU2VjdXJpdHkgUHJvdmlkZXIifV0sInJvbGVzIjpbInF1ZXJ5RXhlY3V0b3IiXSwiaXNzIjoiU2VhcmNoQXBpIiwiZXhwIjoxNzE0MTU3MjY4LCJpYXQiOjE3MTQwNzA4Njh9.qovnur_MC3_BUCA6fed6QhWc5xYvOijvbw_6fJC4TRw User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:51 UTC	397	OUT	Data Raw: 7b 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 73 68 61 72 65 66 69 6c 65 2e 63 6f 6d 2f 73 2f 63 6f 6d 6d 75 6e 69 74 79 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6d 6d 75 6e 69 74 79 22 2c 22 63 6f 6e 74 65 6e 74 49 64 4b 65 79 22 3a 22 40 63 6c 69 63 6b 61 62 6c 65 75 72 69 22 2c 22 63 6f Data Ascii: {"language":"en-US","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","location":"https://support.sharefile.com/s/community","title":"Community","contentIdKey":"@clickableuri","co
2024-04-25 18:47:51 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:51 GMT Content-Type: application/json Content-Length: 151 Connection: close X-Request-ID: bdad216f-8911-4987-9037-8989f1f08731 Cache-Control: no-cache, no-store, max-age=0, must-revalidate, private Expires: 0 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding, User-Agent Report-To: {"group":"csp-endpoint","max_age": 10886400,"endpoints":[{"url": "/csp-violation"}]} Reporting-Endpoints: csp-endpoint="/csp-violation" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://static.cloud.coveo.com https://platform.cloud.coveo.com; object-src 'none'; report-to csp-endpoint; report-uri /csp-violation; X-Frame-Options: DENY Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.sharefile.com Access-Control-Expose-Headers: Content-Range P3P: CP="-"
2024-04-25 18:47:51 UTC	151	IN	Data Raw: 7b 22 76 69 73 69 74 49 64 22 3a 22 31 32 30 65 64 64 65 36 2d 38 38 35 33 2d 34 65 32 62 2d 62 36 38 30 2d 61 61 38 66 61 39 37 65 65 64 37 33 22 2c 22 76 69 73 69 74 6f 72 49 64 22 3a 22 64 63 61 33 37 38 39 31 2d 65 31 61 64 2d 34 63 66 30 2d 38 39 62 32 2d 38 62 33 30 36 61 39 34 62 39 61 37 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 64 63 61 33 37 38 39 31 2d 65 31 61 64 2d 34 63 66 30 2d 38 39 62 32 2d 38 62 33 30 36 61 39 34 62 39 61 37 22 7d Data Ascii: {"visitId":"120edde6-8853-4e2b-b680-aa8fa97eed73","visitorId":"dca37891-e1ad-4cf0-89b2-8b306a94b9a7","clientId":"dca37891-e1ad-4cf0-89b2-8b306a94b9a7"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49870	99.83.254.102	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:51 UTC	419	OUT	GET /rest/ua/v15/analytics/view?visitor=97fc8b95-1583-4e4e-91f7-b83c892ea259 HTTP/1.1 Host: platform.cloud.coveo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:52 UTC	888	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 25 Apr 2024 18:47:52 GMT Content-Type: application/json Content-Length: 56 Connection: close X-Request-ID: c0265c14-7ecd-4adf-94b8-f27e512fd342 Cache-Control: no-cache, no-store, max-age=0, must-revalidate, private Expires: 0 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding, User-Agent Report-To: {"group":"csp-endpoint","max_age": 10886400,"endpoints":[{"url": "/csp-violation"}]} Reporting-Endpoints: csp-endpoint="/csp-violation" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://static.cloud.coveo.com https://platform.cloud.coveo.com; object-src 'none'; report-to csp-endpoint; report-uri /csp-violation; X-Frame-Options: DENY P3P: CP="-"
2024-04-25 18:47:52 UTC	56	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 2c 22 74 79 70 65 22 3a 22 49 6e 76 61 6c 69 64 52 65 71 75 65 73 74 22 7d Data Ascii: {"message":"Method Not Allowed","type":"InvalidRequest"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49871	99.83.254.102	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:51 UTC	419	OUT	GET /rest/ua/v15/analytics/view?visitor=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 HTTP/1.1 Host: platform.cloud.coveo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:52 UTC	888	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 25 Apr 2024 18:47:52 GMT Content-Type: application/json Content-Length: 56 Connection: close X-Request-ID: f651618d-6732-4f17-bcf9-a2639cff8027 Cache-Control: no-cache, no-store, max-age=0, must-revalidate, private Expires: 0 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding, User-Agent Report-To: {"group":"csp-endpoint","max_age": 10886400,"endpoints":[{"url": "/csp-violation"}]} Reporting-Endpoints: csp-endpoint="/csp-violation" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: script-src 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js https://static.cloud.coveo.com https://platform.cloud.coveo.com; object-src 'none'; report-to csp-endpoint; report-uri /csp-violation; X-Frame-Options: DENY P3P: CP="-"
2024-04-25 18:47:52 UTC	56	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 2c 22 74 79 70 65 22 3a 22 49 6e 76 61 6c 69 64 52 65 71 75 65 73 74 22 7d Data Ascii: {"message":"Method Not Allowed","type":"InvalidRequest"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49879	136.146.25.2	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:52 UTC	552	OUT	GET /embeddedservice/5.0/esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:52 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 10:15:03 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 10:15:03 GMT Last-Modified: Tue, 04 Jul 2023 00:26:54 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 30769 Content-Length: 30813 Connection: close
2024-04-25 18:47:52 UTC	12288	IN	Data Raw: 2f 2a 0a 20 57 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2c 20 77 65 20 63 68 61 6e 67 65 64 20 6e 6f 6e 69 6e 63 6c 75 73 69 76 65 20 74 65 72 6d 73 20 74 6f 20 61 6c 69 67 6e 20 77 69 74 68 20 6f 75 72 20 63 6f 6d 70 61 6e 79 20 76 61 6c 75 65 20 6f 66 20 45 71 75 61 6c 69 74 79 2e 20 57 65 20 6d 61 69 6e 74 61 69 6e 65 64 20 63 65 72 74 61 69 6e 20 74 65 72 6d 73 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 65 66 66 65 63 74 20 6f 6e 20 63 75 73 74 6f 6d 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 21 31 2c 62 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 7b 61 70 70 65 6e 64 48 65 6c 70 42 75 74 74 6f 6e 3a 21 30 2c 64 69 73 70 6c 61 79 Data Ascii: /* Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. */(function(l){function d(){var a=!1,b;this.settings={appendHelpButton:!0,display
2024-04-25 18:47:52 UTC	14600	IN	Data Raw: 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 67 65 74 45 53 57 46 72 61 6d 65 28 29 3b 74 68 69 73 2e 6f 75 74 62 6f 75 6e 64 4d 65 73 73 61 67 65 73 41 77 61 69 74 69 6e 67 49 66 72 61 6d 65 4c 6f 61 64 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 65 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 69 66 72 61 6d 65 55 52 4c 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 74 68 69 73 2e 6f 75 74 62 6f 75 6e 64 4d 65 73 73 61 67 65 73 41 77 61 69 74 69 6e 67 49 66 72 61 6d 65 4c 6f 61 64 3d 5b 5d 3b 74 68 69 73 2e 69 66 72 61 6d 65 53 63 72 69 70 74 73 54 6f 4c 6f 61 64 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6c 6f 61 64 53 74 6f 72 Data Ascii: oad=function(){var c=this.getESWFrame();this.outboundMessagesAwaitingIframeLoad.forEach(function(e){c.postMessage(e,this.settings.iframeURL)}.bind(this));this.outboundMessagesAwaitingIframeLoad=[];this.iframeScriptsToLoad.forEach(function(e){this.loadStor
2024-04-25 18:47:52 UTC	3925	IN	Data Raw: 63 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 69 72 65 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6c 6f 67 69 6e 54 61 72 67 65 74 51 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3b 74 68 69 73 2e 69 73 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 52 65 71 75 69 72 65 64 3d 21 30 3b 69 66 28 22 68 74 74 70 73 3a 22 21 3d 3d 77 69 6e 64 6f 77 2e 6c Data Ascii: c)}.bind(this))};d.prototype.requireAuthentication=function(){var a=document.createElement("script"),b=document.createElement("style"),c=document.querySelector(this.settings.loginTargetQuerySelector);this.isAuthenticationRequired=!0;if("https:"!==window.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49882	18.67.65.9	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:52 UTC	597	OUT	GET /searchui/v2.10111/2/fonts/lato.woff2 HTTP/1.1 Host: static.cloud.coveo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:53 UTC	721	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 24428 Connection: close Date: Thu, 25 Apr 2024 18:47:53 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 X-Amz-Replication-Status: COMPLETED Last-Modified: Mon, 17 Jul 2023 15:23:20 GMT Etag: "a1b0a8a177e3f9e8fae22aa0dedd1aaa" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: hU2uz1Zijzq6Aq5BGyva0qc7k5jQ0guc Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 a7a1b4c19abc42d237405ce4c4069f10.cloudfront.net (CloudFront) Cache-Control: public, max-age=86400; X-Cache: Miss from cloudfront X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: TZHMrNJZp8PuLEpqXLS2N5wymkJq_tUYcEnM0GxWnpvtz1MymkumiQ==
2024-04-25 18:47:53 UTC	8220	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 5f 6c 00 12 00 00 00 00 f7 70 00 00 5f 06 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b a5 14 1c 81 5a 06 60 00 83 5a 08 32 09 8d 65 11 08 0a 83 88 74 82 ed 5f 0b 83 46 00 01 36 02 24 03 86 7c 04 20 05 98 14 07 85 16 0c 4b 1b d6 e6 17 f0 9c 49 ca ef 76 30 bf f6 3a bb ed 6c 44 ed 76 40 d5 66 6d 83 45 47 73 b7 03 49 79 fa 3d 5c f6 ff ff 79 49 43 0e 4b 52 cb 9d b6 0a c6 7e f6 b0 03 e1 cc 4c 31 27 a2 b6 a0 84 8d ec 4b 8a 31 32 b9 d9 5e 8d 6d 8f e1 6a 98 8e 13 6f 39 c4 89 0c 69 4b 5b da ca 74 29 a3 ca fb b3 60 34 e3 48 19 96 76 e9 6d b9 fd 85 a8 18 08 ae 68 7c e4 54 e7 f9 a5 14 27 0d aa 4f 4c 72 fd fe 61 6e 46 37 27 9b ad 7f 6c cc 6a 15 51 bc 3f 15 95 9c 5f b9 98 16 3e 02 8f b4 Data Ascii: wOF2_lp_?FFTM*Z`Z2et_F6$\| KIv0:lDv@fmEGsIy=\yICKR~L1'K12^mjo9iK[t)`4Hvmh\|T'OLranF7'ljQ?_>
2024-04-25 18:47:53 UTC	16208	IN	Data Raw: d7 0b d1 96 f1 1d f7 03 a6 0b 94 63 14 4b 1e 73 22 4b cf 9d 6f ac 3b cc cd cf db cb aa a9 67 1c 2a ca 90 5d 4f a9 32 3f bf 8a 40 4f bc 2b f5 a9 c1 06 1e 64 fb 17 27 4a 0b 70 5c 9e 05 9f 24 c5 15 32 38 c1 45 62 51 61 20 93 67 21 4a 92 82 f2 b6 32 2f 8e 49 7c 5e d6 63 20 7b be fb c5 bf 01 33 33 f1 ed fc aa 57 c0 9d c0 2a 33 c3 25 f7 00 a5 21 87 3d 92 d1 bd 6e a1 0d 53 14 58 32 5b 2a 8e ed 2a 36 4e 44 65 ea b6 46 25 b8 26 71 a9 65 b6 30 b0 0d b3 33 d7 9d c1 19 a9 cf 39 40 31 f7 71 0a b0 89 9c 80 cc 18 3e d1 94 44 cf 45 45 47 e7 a2 04 62 fc 98 59 4e 5c af 0a 7b 1f 27 33 28 96 e3 9e 1a 4a 42 ab 68 74 2d 86 46 0b 42 37 23 85 5a 8e f5 37 d2 0b 7e 02 e9 40 78 be 89 b6 51 9f c1 9e ae ab da c3 36 65 ef 60 56 54 d1 e6 b3 e3 60 05 c1 39 31 a6 ec b4 cf 8b 9f bc 66 0e Data Ascii: cKs"Ko;g]O2?@O+d'Jp\$28EbQa g!J2/I\|^c {33W3%!=nSX2[**6NDeF%&qe039@1q>DEEGbYN\{'3(JBht-FB7#Z7~@xQ6e`VT`91f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49884	136.146.25.2	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:53 UTC	561	OUT	GET /embeddedservice/5.0/utils/common.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:53 UTC	411	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 12:47:38 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 12:47:38 GMT Last-Modified: Thu, 17 Feb 2022 23:57:30 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 21615 Content-Length: 4933 Connection: close
2024-04-25 18:47:53 UTC	4933	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 74 68 69 73 2e 65 76 65 6e 74 48 61 6e 64 6c 65 72 73 3d 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 7d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 22 4d 61 63 69 6e 74 6f 73 68 22 2c 22 4d 61 63 49 6e 74 65 6c 22 2c 22 4d 61 63 50 50 43 22 2c 22 4d 61 63 36 38 4b 22 5d 2c 62 3d 5b 22 57 69 6e 33 32 22 2c 22 57 69 6e 36 34 22 2c 22 57 69 6e 31 36 22 2c 22 57 69 6e 64 6f 77 73 22 2c 22 57 69 6e 43 45 22 5d 2c 64 3d 5b 22 69 50 68 6f 6e 65 22 2c 22 69 50 61 64 22 2c 22 69 50 6f 64 22 5d 2c 65 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 2c 63 3d 22 22 3b 65 26 26 28 2d 31 21 3d 3d 61 2e 69 6e 64 65 78 4f Data Ascii: (function(){function f(){this.eventHandlers={}}function g(){}f.prototype.getOS=function(){var a=["Macintosh","MacIntel","MacPPC","Mac68K"],b=["Win32","Win64","Win16","Windows","WinCE"],d=["iPhone","iPad","iPod"],e=navigator.platform,c="";e&&(-1!==a.indexO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49886	136.146.25.2	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:53 UTC	569	OUT	GET /embeddedservice/5.0/client/liveagent.esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:54 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:33:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 11:33:26 GMT Last-Modified: Wed, 17 Aug 2022 20:11:18 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 26067 Content-Length: 20598 Connection: close
2024-04-25 18:47:54 UTC	4096	IN	Data Raw: 2f 2a 0a 20 57 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2c 20 77 65 20 63 68 61 6e 67 65 64 20 6e 6f 6e 69 6e 63 6c 75 73 69 76 65 20 74 65 72 6d 73 20 74 6f 20 61 6c 69 67 6e 20 77 69 74 68 20 6f 75 72 20 63 6f 6d 70 61 6e 79 20 76 61 6c 75 65 20 6f 66 20 45 71 75 61 6c 69 74 79 2e 20 57 65 20 6d 61 69 6e 74 61 69 6e 65 64 20 63 65 72 74 61 69 6e 20 74 65 72 6d 73 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 65 66 66 65 63 74 20 6f 6e 20 63 75 73 74 6f 6d 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 0a 2a 2f 0a 65 6d 62 65 64 64 65 64 5f 73 76 63 2e 64 65 66 69 6e 65 46 65 61 74 75 72 65 28 22 4c 69 76 65 41 67 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 61 2c 63 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 61 3b Data Ascii: /* Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. */embedded_svc.defineFeature("LiveAgent",function(b){function r(a,c){this.name=a;
2024-04-25 18:47:54 UTC	8192	IN	Data Raw: 65 74 4f 6e 6c 69 6e 65 53 74 61 74 65 28 61 2e 69 73 41 76 61 69 6c 61 62 6c 65 29 29 7d 76 61 72 20 71 2c 70 3d 30 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 63 7c 7c 7b 7d 3b 63 3d 22 56 69 73 69 74 6f 72 22 3b 76 61 72 20 65 3d 22 22 2c 66 3d 21 31 3b 69 66 28 74 68 69 73 2e 70 69 6e 67 53 63 72 69 70 74 29 74 68 69 73 2e 6f 6e 45 72 72 6f 72 28 22 53 43 52 54 20 64 69 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 72 65 73 70 6f 6e 73 65 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 61 6e 6f 74 68 65 72 20 6d 65 73 73 61 67 65 2e 22 29 3b 65 6c 73 65 7b 31 3c 61 2e 6c 65 6e 67 74 68 3f 28 63 3d 22 53 79 73 74 65 6d 22 2c 65 3d 22 4d 75 6c 74 69 4e 6f 75 6e 22 2c 64 2e 6e 6f 75 6e 73 3d Data Ascii: etOnlineState(a.isAvailable))}var q,p=0;k.prototype.send=function(a,c){var d=c\|\|{};c="Visitor";var e="",f=!1;if(this.pingScript)this.onError("SCRT did not handle response before sending another message.");else{1<a.length?(c="System",e="MultiNoun",d.nouns=
2024-04-25 18:47:54 UTC	8310	IN	Data Raw: 74 22 2c 64 29 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 75 73 74 6f 6d 45 76 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 2e 61 64 64 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 22 6c 69 76 65 61 67 65 6e 74 2e 67 65 74 43 75 73 74 6f 6d 45 76 65 6e 74 73 52 65 73 75 6c 74 22 2c 61 29 3b 62 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 63 68 61 73 69 74 6f 72 2e 67 65 74 43 75 73 74 6f 6d 45 76 65 6e 74 73 22 29 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 75 73 74 6f 6d 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 2e 61 64 64 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 22 6c 69 76 65 61 67 65 6e 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 52 65 63 65 69 76 65 64 22 2c 63 29 3b 62 2e 70 6f Data Ascii: t",d)};g.prototype.getCustomEvents=function(a){b.addMessageHandler("liveagent.getCustomEventsResult",a);b.postMessage("chasitor.getCustomEvents")};g.prototype.addCustomEventListener=function(a,c){b.addMessageHandler("liveagent.customEventReceived",c);b.po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49888	136.146.37.11	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:54 UTC	782	OUT	GET /embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:54 UTC	1272	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:47:54 GMT Set-Cookie: CookieConsentPolicy=0:0; path=/; expires=Fri, 25-Apr-2025 18:47:54 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 25-Apr-2025 18:47:54 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=86400 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Set-Cookie: BrowserId=U45ElQM0Ee-MHUvOz0i49A; domain=.force.com; path=/; expires=Fri, 25-Apr-2025 18:47:54 GMT; Max-Age=31536000 Set-Cookie: BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A; domain=.force.com; path=/; expires=Fri, 25-Apr-2025 18:47:54 GMT; Max-Age=31536000; secure; SameSite=None Expires: Fri, 26 Apr 2024 18:47:54 GMT Last-Modified: Thu, 14 Sep 2023 00:07:46 GMT Content-Type: text/html;charset=UTF-8 Accept-Ranges: bytes Transfer-Encoding: chunked Connection: close
2024-04-25 18:47:54 UTC	386	IN	Data Raw: 31 37 62 0d 0a 3c 21 2d 2d 20 53 68 61 72 65 64 20 64 6f 63 75 6d 65 6e 74 20 66 6f 72 20 45 6d 62 65 64 64 65 64 20 53 65 72 76 69 63 65 20 66 6f 72 20 57 65 62 20 68 6f 73 74 65 64 20 69 6e 20 53 61 6c 65 73 66 6f 72 63 65 20 64 6f 6d 61 69 6e 2e 20 2d 2d 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 2a 2e 73 61 6c 65 73 66 6f 72 63 65 2e 63 6f 6d 20 2a 2e 73 61 6c 65 73 66 6f 72 63 65 6c 69 76 65 61 67 65 6e 74 2e 63 6f 6d 20 2a 2e 73 66 64 63 2e 6e 65 74 20 2a 2e 73 61 6c 65 73 66 6f 72 63 65 73 63 72 74 2e 63 6f 6d 20 2a 2e 73 61 Data Ascii: 17b... Shared document for Embedded Service for Web hosted in Salesforce domain. --><html><head> <meta http-equiv="Content-Security-Policy" content="script-src 'self' .salesforce.com .salesforceliveagent.com .sfdc.net .salesforcescrt.com *.sa
2024-04-25 18:47:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49889	136.146.37.11	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:55 UTC	735	OUT	GET /embeddedservice/5.0/eswFrame.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
2024-04-25 18:47:55 UTC	411	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 02:50:57 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 02:50:57 GMT Last-Modified: Thu, 06 Oct 2022 23:37:30 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 57418 Content-Length: 5328 Connection: close
2024-04-25 18:47:55 UTC	4096	IN	Data Raw: 2f 2a 0a 20 57 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2c 20 77 65 20 63 68 61 6e 67 65 64 20 6e 6f 6e 69 6e 63 6c 75 73 69 76 65 20 74 65 72 6d 73 20 74 6f 20 61 6c 69 67 6e 20 77 69 74 68 20 6f 75 72 20 63 6f 6d 70 61 6e 79 20 76 61 6c 75 65 20 6f 66 20 45 71 75 61 6c 69 74 79 2e 20 57 65 20 6d 61 69 6e 74 61 69 6e 65 64 20 63 65 72 74 61 69 6e 20 74 65 72 6d 73 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 65 66 66 65 63 74 20 6f 6e 20 63 75 73 74 6f 6d 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4f 72 69 67 69 6e 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 3d 7b 7d 3b 74 68 69 73 2e Data Ascii: /* Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. */(function(){function e(){this.parentOrigin=void 0;this.messageHandlers={};this.
2024-04-25 18:47:55 UTC	1232	IN	Data Raw: 65 6e 74 4f 72 69 67 69 6e 2e 73 75 62 73 74 72 28 30 2c 61 2e 6f 72 69 67 69 6e 2e 6c 65 6e 67 74 68 29 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4d 65 73 73 61 67 65 20 6f 72 69 67 69 6e 20 6d 75 73 74 20 6d 61 74 63 68 20 70 61 72 65 6e 74 20 6f 72 69 67 69 6e 21 22 29 2c 21 31 3b 69 66 28 64 3d 3d 3d 63 7c 7c 64 2e 65 6e 64 73 57 69 74 68 28 22 2e 22 2b 63 29 29 72 65 74 75 72 6e 21 30 3b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 73 74 6f 72 61 67 65 44 6f 6d 61 69 6e 20 28 22 2b 62 2e 64 6f 6d 61 69 6e 2b 22 29 20 6d 75 73 74 20 62 65 20 61 20 70 61 72 65 6e 74 20 6f 66 20 6d 65 73 73 61 67 65 20 6f 72 69 67 69 6e 20 64 6f 6d 61 69 6e 20 28 22 2b 64 2b 22 29 21 22 29 3b 0a 72 65 74 75 72 6e 21 31 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 Data Ascii: entOrigin.substr(0,a.origin.length))return console.log("Message origin must match parent origin!"),!1;if(d===c\|\|d.endsWith("."+c))return!0;console.log("storageDomain ("+b.domain+") must be a parent of message origin domain ("+d+")!");return!1};e.prototyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49891	136.146.37.11	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:55 UTC	744	OUT	GET /embeddedservice/5.0/frame/session.esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
2024-04-25 18:47:55 UTC	411	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 07:01:08 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 07:01:08 GMT Last-Modified: Wed, 17 Aug 2022 20:10:20 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 42407 Content-Length: 2547 Connection: close
2024-04-25 18:47:55 UTC	2547	IN	Data Raw: 2f 2a 0a 20 57 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2c 20 77 65 20 63 68 61 6e 67 65 64 20 6e 6f 6e 69 6e 63 6c 75 73 69 76 65 20 74 65 72 6d 73 20 74 6f 20 61 6c 69 67 6e 20 77 69 74 68 20 6f 75 72 20 63 6f 6d 70 61 6e 79 20 76 61 6c 75 65 20 6f 66 20 45 71 75 61 6c 69 74 79 2e 20 57 65 20 6d 61 69 6e 74 61 69 6e 65 64 20 63 65 72 74 61 69 6e 20 74 65 72 6d 73 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 65 66 66 65 63 74 20 6f 6e 20 63 75 73 74 6f 6d 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 0a 2a 2f 0a 77 69 6e 64 6f 77 2e 65 73 77 2e 64 65 66 69 6e 65 46 65 61 74 75 72 65 28 22 53 65 73 73 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 74 68 69 73 2e 74 72 61 63 6b 65 64 4b 65 79 73 3d 5b 5d Data Ascii: /* Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. */window.esw.defineFeature("Session",function(a){function h(){this.trackedKeys=[]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49890	136.146.37.11	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:55 UTC	746	OUT	GET /embeddedservice/5.0/frame/broadcast.esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
2024-04-25 18:47:55 UTC	411	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:02:49 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 06:02:49 GMT Last-Modified: Thu, 18 Feb 2021 00:07:24 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 45906 Content-Length: 2250 Connection: close
2024-04-25 18:47:55 UTC	2250	IN	Data Raw: 77 69 6e 64 6f 77 2e 65 73 77 2e 64 65 66 69 6e 65 46 65 61 74 75 72 65 28 22 42 72 6f 61 64 63 61 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 65 73 77 3d 65 3b 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 3d 7b 7d 3b 65 2e 6e 6f 4c 6f 63 61 6c 53 74 6f 72 61 67 65 41 76 61 69 6c 61 62 6c 65 3f 65 2e 6e 6f 53 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 41 76 61 69 6c 61 62 6c 65 7c 7c 28 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 3a 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3b 74 68 69 73 2e 70 72 65 66 69 78 3d 22 5f 5f 62 72 6f 61 64 63 61 73 74 41 50 49 3a 22 3b 74 68 69 73 2e 71 75 65 75 Data Ascii: window.esw.defineFeature("Broadcast",function(e){function c(){this.esw=e;this.callbacks={};e.noLocalStorageAvailable?e.noSessionStorageAvailable\|\|(this.storage=window.sessionStorage):this.storage=window.localStorage;this.prefix="__broadcastAPI:";this.queu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49894	136.146.37.11	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:56 UTC	745	OUT	GET /embeddedservice/5.0/frame/chasitor.esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
2024-04-25 18:47:56 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 05:37:35 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 05:37:35 GMT Last-Modified: Wed, 01 Feb 2023 22:50:32 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 47421 Content-Length: 23514 Connection: close
2024-04-25 18:47:56 UTC	12288	IN	Data Raw: 2f 2a 0a 20 57 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2c 20 77 65 20 63 68 61 6e 67 65 64 20 6e 6f 6e 69 6e 63 6c 75 73 69 76 65 20 74 65 72 6d 73 20 74 6f 20 61 6c 69 67 6e 20 77 69 74 68 20 6f 75 72 20 63 6f 6d 70 61 6e 79 20 76 61 6c 75 65 20 6f 66 20 45 71 75 61 6c 69 74 79 2e 20 57 65 20 6d 61 69 6e 74 61 69 6e 65 64 20 63 65 72 74 61 69 6e 20 74 65 72 6d 73 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 65 66 66 65 63 74 20 6f 6e 20 63 75 73 74 6f 6d 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 0a 2a 2f 0a 77 69 6e 64 6f 77 2e 65 73 77 2e 64 65 66 69 6e 65 46 65 61 74 75 72 65 28 22 43 68 61 73 69 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 65 73 77 3d 63 3b 74 68 69 73 2e 72 65 Data Ascii: /* Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. */window.esw.defineFeature("Chasitor",function(c){function e(){this.esw=c;this.re
2024-04-25 18:47:56 UTC	11226	IN	Data Raw: 2c 6c 61 6e 67 75 61 67 65 3a 74 68 69 73 2e 6c 69 76 65 41 67 65 6e 74 43 68 61 73 69 74 6f 72 2e 67 65 74 4c 61 6e 67 75 61 67 65 28 29 2c 6c 61 73 74 55 72 6c 3a 74 68 69 73 2e 6c 69 76 65 41 67 65 6e 74 43 68 61 73 69 74 6f 72 2e 67 65 74 4c 61 73 74 55 72 6c 28 29 2c 74 72 61 6e 73 63 72 69 70 74 53 61 76 65 45 6e 61 62 6c 65 64 3a 74 68 69 73 2e 6c 69 76 65 41 67 65 6e 74 43 68 61 73 69 74 6f 72 2e 67 65 74 54 72 61 6e 73 63 72 69 70 74 53 61 76 65 45 6e 61 62 6c 65 64 28 29 7d 3b 61 26 26 28 62 2e 69 73 53 6e 61 70 69 6e 73 53 65 63 6f 6e 64 61 72 79 54 61 62 3d 21 30 2c 74 68 69 73 2e 73 65 6e 64 42 72 6f 61 64 63 61 73 74 45 76 65 6e 74 54 6f 53 65 63 6f 6e 64 61 72 79 54 61 62 73 28 22 63 68 61 73 69 74 6f 72 53 65 73 73 69 6f 6e 44 61 74 61 52 Data Ascii: ,language:this.liveAgentChasitor.getLanguage(),lastUrl:this.liveAgentChasitor.getLastUrl(),transcriptSaveEnabled:this.liveAgentChasitor.getTranscriptSaveEnabled()};a&&(b.isSnapinsSecondaryTab=!0,this.sendBroadcastEventToSecondaryTabs("chasitorSessionDataR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49898	136.146.37.11	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:56 UTC	749	OUT	GET /embeddedservice/5.0/frame/filetransfer.esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://service.force.com/embeddedservice/5.0/esw.html?parent=https://support.sharefile.com/s/community Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
2024-04-25 18:47:56 UTC	410	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 05:27:55 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 05:27:55 GMT Last-Modified: Tue, 18 Aug 2020 17:12:46 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 48001 Content-Length: 473 Connection: close
2024-04-25 18:47:56 UTC	473	IN	Data Raw: 77 69 6e 64 6f 77 2e 65 73 77 2e 64 65 66 69 6e 65 46 65 61 74 75 72 65 28 22 46 69 6c 65 54 72 61 6e 73 66 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 72 65 67 69 73 74 65 72 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 28 29 7d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 67 69 73 74 65 72 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 61 64 64 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 22 66 69 6c 65 54 72 61 6e 73 66 65 72 2e 75 70 6c 6f 61 64 46 69 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 6d 65 74 68 6f 64 3a 22 6c 69 76 65 61 67 65 6e 74 2e 66 69 6c 65 54 72 61 6e 73 66 65 72 2e 75 Data Ascii: window.esw.defineFeature("FileTransfer",function(a){function b(){this.registerMessageHandlers()}b.prototype.registerMessageHandlers=function(){a.addMessageHandler("fileTransfer.uploadFile",function(b,c){parent.postMessage({method:"liveagent.fileTransfer.u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49899	136.146.25.2	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:56 UTC	670	OUT	GET /embeddedservice/5.0/client/invite.esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
2024-04-25 18:47:56 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:44:38 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 11:44:38 GMT Last-Modified: Fri, 24 Sep 2021 16:25:36 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 25398 Content-Length: 19104 Connection: close
2024-04-25 18:47:56 UTC	12536	IN	Data Raw: 65 6d 62 65 64 64 65 64 5f 73 76 63 2e 64 65 66 69 6e 65 46 65 61 74 75 72 65 28 22 49 6e 76 69 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 76 61 72 20 62 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 73 74 79 6c 65 2e 61 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 5b 22 57 65 62 6b 69 74 22 2c 22 4d 6f 7a 22 2c 22 4f 22 2c 22 6d 73 22 2c 22 4b 68 74 6d 6c 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 6f 69 64 20 30 21 3d 3d 61 2e 73 74 79 6c 65 5b 63 2b 22 41 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 22 5d 26 26 28 62 3d 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 2c 62 2c 63 29 7b 69 66 28 61 Data Ascii: embedded_svc.defineFeature("Invite",function(f){function J(a){var b;if(void 0!==a.style.animationName)return"";["Webkit","Moz","O","ms","Khtml"].forEach(function(c){void 0!==a.style[c+"AnimationName"]&&(b=c.toLowerCase())});return b}function K(a,b,c){if(a
2024-04-25 18:47:56 UTC	6568	IN	Data Raw: 63 65 6e 74 3a 31 2c 78 50 6f 73 69 74 69 6f 6e 3a 2d 31 2c 78 4f 66 66 73 65 74 3a 2d 31 2c 79 50 65 72 63 65 6e 74 3a 31 2c 79 50 6f 73 69 74 69 6f 6e 3a 30 2c 79 4f 66 66 73 65 74 3a 31 7d 2c 42 6f 74 74 6f 6d 3a 7b 78 50 65 72 63 65 6e 74 3a 2e 35 2c 78 50 6f 73 69 74 69 6f 6e 3a 2d 2e 35 2c 78 4f 66 66 73 65 74 3a 30 2c 79 50 65 72 63 65 6e 74 3a 31 2c 79 50 6f 73 69 74 69 6f 6e 3a 30 2c 79 4f 66 66 73 65 74 3a 31 7d 2c 42 6f 74 74 6f 6d 4c 65 66 74 42 6f 74 74 6f 6d 3a 7b 78 50 65 72 63 65 6e 74 3a 30 2c 78 50 6f 73 69 74 69 6f 6e 3a 30 2c 78 4f 66 66 73 65 74 3a 31 2c 79 50 65 72 63 65 6e 74 3a 31 2c 79 50 6f 73 69 74 69 6f 6e 3a 30 2c 79 4f 66 66 73 65 74 3a 31 7d 2c 42 6f 74 74 6f 6d 4c 65 66 74 3a 7b 78 50 65 72 63 65 6e 74 3a 30 2c 78 50 6f 73 Data Ascii: cent:1,xPosition:-1,xOffset:-1,yPercent:1,yPosition:0,yOffset:1},Bottom:{xPercent:.5,xPosition:-.5,xOffset:0,yPercent:1,yPosition:0,yOffset:1},BottomLeftBottom:{xPercent:0,xPosition:0,xOffset:1,yPercent:1,yPosition:0,yOffset:1},BottomLeft:{xPercent:0,xPos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49902	136.146.24.66	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:56 UTC	798	OUT	GET /chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp?Settings.prefix=EmbeddedService&org_id=00DDn00000AvI1G&EmbeddedServiceConfig.configName=Service_Group&callback=embedded_svc.liveAgentAPI.handleChatSettings&version=48&EmbeddedServiceConfig.language=en-US HTTP/1.1 Host: d.la1-c1-ia6.salesforceliveagent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:57 UTC	365	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Expires: -1 Content-Type: text/javascript X-Content-Type-Options: nosniff Set-Cookie: X-Salesforce-CHAT=!2bivQspOgl49EBdIFTrNQacpTeruYrl9PyGPTLnx87oqJohp1HyAmIOuyABU9f1oxNPuuVH3UxGc; path=/; Httponly; Secure
2024-04-25 18:47:57 UTC	16019	IN	Data Raw: 2f 2a 2a 2f 65 6d 62 65 64 64 65 64 5f 73 76 63 2e 6c 69 76 65 41 67 65 6e 74 41 50 49 2e 68 61 6e 64 6c 65 43 68 61 74 53 65 74 74 69 6e 67 73 28 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 45 6d 62 65 64 64 65 64 53 65 72 76 69 63 65 43 6f 6e 66 69 67 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 7b 22 6c 61 62 65 6c 73 22 3a 5b 7b 22 6c 61 62 65 6c 56 61 6c 75 65 22 3a 22 57 65 e2 80 99 6c 6c 20 62 65 20 77 69 74 68 20 79 6f 75 20 73 68 6f 72 74 6c 79 21 22 2c 22 73 65 63 74 69 6f 6e 4e 61 6d 65 22 3a 22 4c 69 76 65 41 67 65 6e 74 43 68 61 74 57 69 6e 64 6f 77 22 2c 22 6c 61 62 65 6c 4e 61 6d 65 22 3a 22 51 75 65 75 65 50 6f 73 69 74 69 6f 6e 4d 61 78 4d 65 73 73 61 67 65 53 65 63 6f 6e 64 4c 69 6e 65 22 7d 2c 7b 22 6c 61 62 65 6c 56 61 Data Ascii: /**/embedded_svc.liveAgentAPI.handleChatSettings({"messages":[{"type":"EmbeddedServiceConfig", "message":{"labels":[{"labelValue":"Well be with you shortly!","sectionName":"LiveAgentChatWindow","labelName":"QueuePositionMaxMessageSecondLine"},{"labelVa
2024-04-25 18:47:57 UTC	135	IN	Data Raw: 70 72 65 63 68 65 63 6b 69 6e 2d 73 75 62 6d 69 74 74 65 72 3a 6d 61 73 74 65 72 3a 63 65 6e 74 37 33 2d 6c 76 6d 3a 32 34 38 3a 66 72 65 65 7a 65 3a 34 36 30 36 36 35 33 39 3a 31 39 66 38 32 30 32 64 2d 65 61 64 61 2d 34 64 62 35 2d 38 33 31 37 2d 31 61 35 33 34 62 37 66 30 36 32 63 20 27 40 57 2d 31 35 35 32 32 36 35 32 20 3a 20 41 64 64 20 6f 6e 65 20 6d 6f 72 65 20 75 73 65 72 27 22 2c 22 6c 69 76 Data Ascii: precheckin-submitter:master:cent73-lvm:248:freeze:46066539:19f8202d-eada-4db5-8317-1a534b7f062c '@W-15522652 : Add one more user'","liv
2024-04-25 18:47:57 UTC	193	IN	Data Raw: 65 41 67 65 6e 74 43 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 2e 6c 61 31 2d 63 31 2d 69 61 36 2e 73 61 6c 65 73 66 6f 72 63 65 6c 69 76 65 61 67 65 6e 74 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 22 2c 22 6d 61 78 4c 69 76 65 43 68 61 74 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 2c 22 69 73 45 73 73 65 6e 74 69 61 6c 73 45 64 69 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 6c 61 74 65 73 74 43 68 61 73 69 74 6f 72 56 65 72 73 69 6f 6e 22 3a 22 36 30 2e 30 22 2c 22 6c 61 62 65 6c 73 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 7d 7d 7d 5d 7d 29 3b Data Ascii: eAgentContentUrl":"https://c.la1-c1-ia6.salesforceliveagent.com/content","maxLiveChatFileSize":5242880,"isEssentialsEdition":false,"latestChasitorVersion":"60.0","labelsLanguage":"en-US"}}}]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49905	136.146.25.2	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:57 UTC	664	OUT	GET /embeddedservice/5.0/utils/inert.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=U45ElQM0Ee-MHUvOz0i49A
2024-04-25 18:47:57 UTC	411	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 12:47:42 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 26 Apr 2024 12:47:42 GMT Last-Modified: Tue, 18 Aug 2020 17:12:46 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 21615 Content-Length: 8294 Connection: close
2024-04-25 18:47:57 UTC	8294	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 66 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 69 6e 65 72 74 22 2c 66 29 3a 66 28 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 61 2c 64 29 7b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 29 7b 61 26 26 61 28 62 29 3b 76 61 72 20 63 3d 62 2e 73 68 61 64 6f 77 52 6f 6f 74 7c 7c 62 2e 77 65 62 6b 69 74 53 68 61 64 6f 77 52 6f 6f 74 3b 69 66 28 Data Ascii: (function(e,f){"object"===typeof exports&&"undefined"!==typeof module?f():"function"===typeof define&&define.amd?define("inert",f):f()})(this,function(){function e(b,a,d){if(b.nodeType==Node.ELEMENT_NODE){a&&a(b);var c=b.shadowRoot\|\|b.webkitShadowRoot;if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49904	136.146.24.66	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:57 UTC	783	OUT	GET /chat/rest/Visitor/Settings.jsonp?Settings.prefix=Visitor&Settings.buttonIds=[573Dn000000hOkW]&Settings.updateBreadcrumb=1&callback=embedded_svc.liveAgentAPI.connection.handlePing&deployment_id=572Dn000000hP8x&org_id=00DDn00000AvI1G&version=48 HTTP/1.1 Host: d.la1-c1-ia6.salesforceliveagent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:57 UTC	369	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Expires: -1 Content-Type: text/javascript X-Content-Type-Options: nosniff Set-Cookie: X-Salesforce-CHAT=!8XzQ7tm6ucc+ef9IFTrNQacpTeruYmS6PWBPRtebBNklU1tSu/jAu85BZzBltg4v6Q5N33zbRDRmNw==; path=/; Httponly; Secure
2024-04-25 18:47:57 UTC	345	IN	Data Raw: 2f 2a 2a 2f 65 6d 62 65 64 64 65 64 5f 73 76 63 2e 6c 69 76 65 41 67 65 6e 74 41 50 49 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2e 68 61 6e 64 6c 65 50 69 6e 67 28 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 53 65 74 74 69 6e 67 73 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 7b 22 70 72 65 66 69 78 4b 65 79 22 3a 22 34 39 61 35 32 32 34 34 64 35 37 31 36 64 38 63 66 63 64 66 38 63 33 38 66 62 61 64 64 34 38 37 64 35 33 37 31 32 34 34 22 2c 22 63 6f 6e 74 65 6e 74 53 65 72 76 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 37 34 6e 7a 2e 6c 61 31 2d 63 31 2d 69 61 36 2e 73 61 6c 65 73 66 6f 72 63 65 6c 69 76 65 61 67 65 6e 74 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 22 2c 22 70 69 6e 67 52 61 74 65 22 3a 35 30 30 30 30 2e 30 2c 22 62 75 74 74 6f 6e 73 Data Ascii: /**/embedded_svc.liveAgentAPI.connection.handlePing({"messages":[{"type":"Settings", "message":{"prefixKey":"49a52244d5716d8cfcdf8c38fbadd487d5371244","contentServerUrl":"https://74nz.la1-c1-ia6.salesforceliveagent.com/content","pingRate":50000.0,"buttons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49907	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:57 UTC	1185	OUT	GET /en-us/sharefile/whats-new HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:57 UTC	536	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 195334 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:47:57 GMT Etag: "fd6096f2156b1830a04c3a40b84f3867-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BXJMS42NVNWGQHK0VK9Y X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:57 UTC	650	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:47:57 UTC	2372	IN	Data Raw: 3d 22 63 74 78 5f 70 72 6f 64 75 63 74 22 20 63 6f 6e 74 65 6e 74 3d 22 73 68 61 72 65 66 69 6c 65 5f 6d 61 69 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 41 70 72 69 6c 20 32 32 2c 20 32 30 32 34 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 74 5f 66 6c 79 5f 70 72 6f 76 69 64 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 5f 63 6f 64 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 3e 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 72 46 51 38 6a 4b 70 50 58 66 74 58 64 75 73 4e 6b 39 Data Ascii: ="ctx_product" content="sharefile_main"> <meta name="lastModified" content="April 22, 2024"><meta name="mt_fly_provider" content=""> <meta name="lang_code" content="en-us"> <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9
2024-04-25 18:47:57 UTC	538	IN	Data Raw: 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 69 74 72 69 78 5f 70 72 6f 5f 64 6f 63 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 50 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 22 20 76 61 6c 75 65 3d 22 54 72 79 20 61 20 64 69 66 66 65 72 65 6e 74 20 6f 72 20 6c 65 73 73 20 73 70 65 63 69 66 69 63 20 71 75 65 72 79 2e 20 52 65 6d 6f 76 65 20 61 6e 79 20 73 65 6c 65 63 74 65 64 20 66 69 6c 74 65 72 73 2e 20 45 78 61 6d 70 6c 65 20 71 75 65 72 69 65 73 20 69 6e 63 6c 75 64 65 20 75 70 67 72 61 64 65 2c 20 77 6f 72 6b 73 70 61 63 65 2c 20 63 65 72 74 69 66 69 63 61 74 65 2e 22 3e 0d 0a 3c Data Ascii: ype="hidden" id="search_citrix_pro_doc" value="Search Product documentation"><input type="hidden" id="search_query" value="Try a different or less specific query. Remove any selected filters. Example queries include upgrade, workspace, certificate."><
2024-04-25 18:47:57 UTC	4744	IN	Data Raw: 22 73 65 61 72 63 68 5f 73 68 6f 77 5f 6d 6f 72 65 22 20 76 61 6c 75 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 69 6e 20 61 6c 6c 20 70 72 6f 64 75 63 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 66 65 61 74 75 72 65 64 22 20 76 61 6c 75 65 3d 22 46 65 61 74 75 72 65 64 20 74 6f 70 69 63 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 61 63 74 69 76 65 5f 66 69 6c 74 65 72 22 20 76 61 6c 75 65 3d 22 53 65 6c 65 63 Data Ascii: "search_show_more" value="Show more in Tech Zone"><input type="hidden" id="search_query_all" value="Search in all products"><input type="hidden" id="search_featured" value="Featured topics"><input type="hidden" id="search_active_filter" value="Selec
2024-04-25 18:47:58 UTC	5930	IN	Data Raw: 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 73 68 61 72 65 66 69 6c 65 2f 77 68 61 74 73 2d 6e 65 77 2e 68 74 6d 6c 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 74 78 74 22 3e 44 45 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 6d 74 22 3e 3c 2f 73 70 61 6e 3e Data Ascii: <a class="language-option mt-lang" href="/de-de/sharefile/whats-new.html?lang-switch=true"> <div class="lang-p"> <span class="lang-txt">DE</span> <span class="docs-icon icon-mt"></span>
2024-04-25 18:47:58 UTC	7116	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 68 61 74 27 73 20 6e 65 77 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 68 61 73 2d 73 75 62 2d 6e 61 76 2d 6c 69 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: What's new </p> </li> <li class="has-sub-nav-li">
2024-04-25 18:47:58 UTC	8302	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 6f 6e 66 69 67 75 72 65 2f 61 64 6d 69 6e 2d 73 65 74 74 69 6e 67 73 2f 73 74 6f 72 61 67 65 2d 7a 6f 6e 65 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <li> <p> <a href='/en-us/sharefile/configure/admin-settings/storage-zones'>
2024-04-25 18:47:58 UTC	6085	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 3c 21 2d 2d 20 72 65 6e 64 65 72 69 6e 67 20 73 65 63 6f 6e 64 20 6c 65 76 65 6c 20 63 68 69 6c 64 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 74 78 2d 73 75 62 2d 6d 65 6e 75 2d 67 72 6f 75 70 2d 6c 69 6e 6b 20 68 61 73 2d 73 75 62 2d 6e 61 76 20 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 72 6f 75 6e 64 65 64 22 3e 3c 2f 73 70 61 6e 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d Data Ascii: <p> ... rendering second level child --> <span class="ctx-sub-menu-group-link has-sub-nav docs-icon icon-arrow-down-rounded"></span> <a class=
2024-04-25 18:47:58 UTC	10674	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 Data Ascii: </p> </li> <li> <p> <a href='/en-us/shar
2024-04-25 18:47:58 UTC	11860	IN	Data Raw: 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 70 70 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 6e 64 72 6f 69 64 2f 75 70 6c 6f 61 64 2d 63 72 65 61 74 65 2d 66 69 6c 65 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <li> <p> <a href='/en-us/sharefile/citrix-files-app/citrix-files-android/upload-create-files'>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49906	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:57 UTC	1149	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:47:58 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:47:58 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BXS32S63V9500NQWRZR6 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49908	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:58 UTC	1141	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:47:58 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:47:58 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BYD2C32DFPP58D7D0D2R Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49909	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:58 UTC	1158	OUT	GET /en-us/sharefile/media/captcha.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:58 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 19563 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:58 GMT Etag: "108c3c04c2c927dc602f6aec71ebc50e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BYCX7KAZ1FFDQN6CH0JX X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:58 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 47 00 00 01 c2 08 02 00 00 00 f3 56 9c 57 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 07 74 49 4d 45 07 e7 0b 01 0f 1e 12 24 5d de 44 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 5c d5 9d 3f fc 73 6e 99 5e 34 a3 32 ea bd 5a b2 e5 2a b9 77 30 bd 43 42 48 48 36 d9 65 49 b2 d9 27 0e 09 09 f9 b1 84 7d 36 09 79 d8 df 86 ec 6e 0a 90 06 a1 85 04 02 21 06 6c 8c 71 95 ab 6c f5 de eb 8c 34 55 9a 7e db 79 fe b8 58 28 c6 96 5c 24 cf e8 fa fb 7e f1 e2 25 8d ee dc 39 33 9e cf 3d e7 9e 7b ee 39 98 10 82 00 00 0a 42 c5 ba 00 00 80 39 06 a9 06 40 69 20 d5 00 28 0d a4 1a 00 a5 81 54 03 a0 34 90 6a 00 94 06 52 0d 80 d2 40 aa 01 50 1a 48 35 00 4a 03 a9 06 40 69 20 d5 00 28 0d a4 1a 00 a5 81 54 Data Ascii: PNGIHDRGVWpHYs%%IR$tIME$]D IDATxw\|\?sn^42Z*w0CBHH6eI'}6yn!lql4U~yX(\$~%93={9B9@i (T4jR@PH5J@i (T
2024-04-25 18:47:58 UTC	2372	IN	Data Raw: c9 e3 f5 b5 b5 b7 7b 3d de b1 f1 f1 0d 1b d6 a5 a6 d8 4e 9e ac 75 b9 dc 89 89 d6 c2 82 7c 8c f1 b8 d3 d9 d1 d9 e5 f5 fa 1c 8e b1 75 6b d7 94 2f 2a 3d 78 e8 48 69 69 71 aa cd d6 d1 d1 e9 9d 98 58 5d b5 aa a5 b5 ed c4 a9 5a 15 cb 6e de b8 21 33 33 63 7a 39 9b 5b 5a fd fe 40 ff e0 60 28 14 ba 6e fb d6 ec cc 4c 86 61 58 96 e1 38 6e df 81 83 83 83 43 b9 39 d9 5b 36 6d 64 59 f6 e8 f1 13 4d 2d ad 26 a3 f1 fa 6d 5b 93 92 12 3b bb ba 0f d7 1c 65 18 66 eb e6 8d 59 99 99 a3 a3 f6 fd 87 0e 87 c3 e1 aa 95 2b 96 2c ae 90 77 2e 08 e2 91 a3 47 3b bb ba 53 92 93 af df be 35 1a e5 1a 9b 9b 27 fd fe 91 91 d1 75 6b d6 14 16 e4 1d 3d 7e b2 ab bb c7 68 34 de 74 c3 8e ae 9e 9e 63 c7 4e d0 0c b3 65 d3 c6 ac cc 8c da 33 75 2e a7 5b 10 f9 ed 5b b7 6a 34 ea 33 67 ea 18 95 6a 49 45 Data Ascii: {=Nu\|uk/*=xHiiqX]Zn!33cz9[Z@`(nLaX8nC9[6mdYM-&m[;efY+,w.G;S5'uk=~h4tcNe3u.[[j43gjIE
2024-04-25 18:47:58 UTC	538	IN	Data Raw: 9e 25 49 64 df 81 83 43 c3 c3 33 6c d3 d0 d8 74 aa f6 f4 9c 14 12 5c 65 90 ea 79 91 68 b5 dc 79 fb ad 09 09 66 51 14 a3 d1 a8 63 6c 4c be 55 ab b7 b7 77 dc e5 da ba 69 53 59 49 31 42 28 18 0c da ed 0e 8e e3 11 42 82 20 4a 92 e4 f7 fb 03 81 a0 28 8a a2 28 3a 9d ae 50 28 8c 10 9a 98 98 70 7b 3e a9 36 3d 1e ef b8 d3 29 ff 3c 3c 32 52 d7 d0 d0 3f 30 68 36 9a ee b8 fd 56 8b 25 01 21 34 39 39 69 77 8c c9 fd 58 82 20 48 92 34 39 39 e9 74 b9 a6 97 90 10 42 08 71 b9 3d be 69 87 1e 7f 20 e0 70 8c c9 97 a3 89 44 c4 b3 83 bd 5d 2e b7 fc 74 42 48 28 1c 96 7f 90 db 05 92 24 85 42 21 38 8f 8b 2b d0 5b 36 2f c2 e1 f0 e9 ba fa 15 cb 96 d5 1c 3d 1e 0a 87 7c be 09 93 c9 78 f7 1d b7 35 b7 b6 f6 f6 f6 bf b7 fb 83 1d db b7 d1 34 b5 7b ef 3e 51 14 f4 7a dd 1d b7 dd 16 0a 85 f6 Data Ascii: %IdC3lt\eyhyfQclLUwiSYI1B(B J((:P(p{>6=)<<2R?0h6V%!499iwX H499tBq=i pD].tBH($B!8+[6/=\|x54{>Qz
2024-04-25 18:47:58 UTC	4744	IN	Data Raw: b1 13 27 33 d2 d3 47 46 ed 5b b7 6c 2c 5f b4 68 df fe fd 99 99 19 05 79 f9 81 40 f0 9e bb ee 60 59 a6 ae a1 31 c1 6c fe e8 c0 c1 eb b7 6f db bc 71 7d 6f 7f bf 63 6c 5c ad 56 d5 37 35 7d e6 be bb 4b 8a 0a 0f 1e ae 29 2c c8 d3 eb f5 18 e3 c3 35 c7 34 1a f5 7d 77 df 95 92 9c 74 e0 d0 11 5b 72 ca 9e bd 1f e6 64 67 2f ad 5c 72 aa f6 0c c7 f3 6a 95 9a 10 12 0c 06 eb 1a 1a 1f b8 ff 33 95 8b 2b 0e d7 1c d5 6a 34 5e af d7 64 34 8e 8f bb 0e 1e ae 59 be ac b2 b3 ab 07 63 aa a4 b8 28 d6 1f 39 f8 04 d4 d5 f3 02 63 4c d3 34 91 24 9b 2d a5 ac a4 c4 64 32 66 65 65 46 39 4e ad 56 ab d5 6a b3 d9 3c 32 3c c2 30 cc f2 a5 95 34 4d af 5a b9 e2 6f ef be 3f 39 e9 2f 2f 2b cb c9 ce 42 08 e9 f5 fa f2 b2 12 a3 d1 98 9a 62 8b 84 23 16 4b 02 45 53 18 61 9a a1 33 33 33 0e 1d 39 4a 61 Data Ascii: '3GF[l,_hy@`Y1loq}ocl\V75}K),54}wt[rdg/\rj3+j4^d4Yc(9cL4$-d2feeF9NVj<2<04MZo?9//+Bb#KESa3339Ja
2024-04-25 18:47:58 UTC	5189	IN	Data Raw: 70 70 30 25 25 c5 e3 f1 6c dd ba d5 ee 70 d4 d6 d6 6e dd b2 45 92 a4 0f 3e f8 a0 ba ba 3a 33 33 f3 d4 a9 53 c7 4f 9c 28 2e 2a da b2 75 ab 4a 89 f3 c2 03 25 59 00 a9 06 00 5c 92 05 d0 02 07 00 5c 12 48 35 00 4a b3 30 ae 6c 21 84 24 49 8a 75 11 80 a2 28 72 2d 1e d9 02 48 75 94 e3 c6 c7 9d 91 bf 1f 31 0a c0 95 c0 18 a9 55 ea d4 94 64 58 13 33 06 44 51 1c 18 1a d6 eb 74 09 09 30 f0 03 cc 25 8f d7 1b 89 70 d9 59 19 b4 e2 2a ed 78 af ab fd 81 20 45 d3 b6 94 e4 58 17 04 28 4d 9a cd d6 37 30 14 08 04 cd 26 63 ac cb 32 c7 e2 fd 28 25 08 02 45 c1 02 b7 60 5e 50 14 56 e4 3d b9 f1 9e 6a 84 10 8e eb 53 04 00 e2 ce 02 48 35 00 e0 92 40 aa 01 50 1a 48 35 00 4a 03 a9 06 40 69 20 d5 00 28 0d a4 1a 00 a5 81 54 03 a0 34 90 6a 00 94 06 52 0d 80 d2 40 aa 01 50 1a 48 35 00 4a Data Ascii: pp0%%lpnE>:33SO(.uJ%Y\\H5J0l!$Iu(r-Hu1UdX3DQt0%pYx EX(M70&c2(%E`^PV=jSH5@PH5J@i (T4jR@PH5J
2024-04-25 18:47:58 UTC	6055	IN	Data Raw: 75 75 f5 a9 53 a7 ee bf ff fe af 7c e5 2b d7 5d 77 5d 4d 4d 4d 28 14 5a ba 74 e9 17 bf f8 c5 9d 3b 77 3a 1c 8e 83 07 0f 86 42 a1 47 1e 79 e4 1b df f8 46 62 62 62 67 67 67 55 55 d5 d2 a5 4b 0b 0a 0a 14 f6 6d 26 84 b0 2c 9b 9f 9f bf 7c f9 f2 d2 b2 32 8d 56 cb 71 dc d4 7b c4 67 c9 5b 4a 92 c4 71 9c c9 6c ae 58 bc 44 a7 d3 29 ec a3 b8 6c d0 02 ff 3b d3 eb bd a9 d3 66 bd 5e 2f f7 9c 4d 3f ef c5 18 6b 34 1a f9 29 2a 95 8a e7 f9 a9 bf d2 34 1d 8d 46 39 8e 9b da 1b c3 30 a7 4e 9d 3a 76 ec d8 97 bf fc e5 50 28 e4 74 3a a7 f6 23 d7 fc d1 68 14 21 24 ef 50 ad 56 cb 07 02 79 87 0c c3 c8 27 96 0c c3 c8 c5 50 a9 54 1c c7 45 22 11 41 10 14 b6 94 0c 42 88 10 92 99 99 29 b7 bd d3 52 53 35 6a 75 4f 4f 8f cb e5 e2 78 9e 9a 96 67 84 90 fc 11 65 66 66 16 16 16 9a 4c 26 18 8c Data Ascii: uuS\|+]w]MMM(Zt;w:BGyFbbbgggUUKm&,\|2Vq{g[JqlXD)l;f^/M?k4)*4F90N:vP(t:#h!$PVy'PTE"AB)RS5juOOxgeffL&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49911	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:58 UTC	1158	OUT	GET /en-us/sharefile/media/rb-logo.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:58 UTC	517	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1185 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 4263 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:58 GMT Etag: "44db86ab81d6cbf0e57bc6a6a2d1791d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BYH364GXB860C1K8PPK5 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:58 UTC	669	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e4 00 00 00 3c 08 06 00 00 00 76 3a 16 cf 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 05 03 2a 31 ae 7e 7d 00 00 10 46 49 44 41 54 78 9c ed 9d 79 54 15 e5 ff c7 df 17 b7 14 17 4c 4d 94 90 0e 98 52 4a 88 92 5b 18 2e 48 88 e6 9a 92 0b 01 29 82 a8 60 21 a8 a4 e6 c9 3a e1 71 8d 8e 4a 85 1a e2 72 dc 17 c4 dc c5 05 e1 0f 93 44 5c 11 83 34 34 8c 50 f4 b2 88 fa f9 fd c1 8f 69 9e b9 db dc b9 f7 e2 b5 ef f3 3a 67 8e 77 e6 f3 79 3e cf 67 86 79 cf 3c f3 cc f3 8c 2a 22 22 70 38 1c ab c0 e6 45 27 c0 e1 70 fe 85 0b 92 c3 b1 22 b8 20 39 1c 2b 82 0b 92 c3 b1 22 b8 20 39 1c 2b 82 0b 92 c3 b1 22 b8 20 39 1c 2b 82 0b 92 c3 b1 22 b8 20 39 1c 2b 82 0b 92 c3 b1 22 ea Data Ascii: PNGIHDR<v:pHYs+tIME1~}FIDATxyTLMRJ[.H)`!:qJrD\44Pi:gwy>gy<""p8E'p" 9+" 9+" 9+" 9+"
2024-04-25 18:47:58 UTC	2372	IN	Data Raw: b6 45 46 46 be 88 dd 36 0a b3 0a f2 ee dd bb c2 ce 8f 1e 3d 9a 88 88 aa aa aa 84 6d ef bf ff 3e e3 5f 51 51 21 d8 fa f5 eb 67 ce 54 34 28 2d 2d 55 7c 02 b8 b9 b9 e9 8c cb 05 29 9f fc fc 7c b3 08 72 e3 c6 8d 42 4c a9 6d d5 aa 55 4c 9d 2f 9b 20 4d 6a b2 26 26 26 a2 77 ef de e8 d6 ad 1b 80 9a a6 5e 78 78 38 12 13 13 b1 7b f7 6e 94 94 94 20 3c 3c 5c f0 df bb 77 2f 53 7e ec d8 b1 c2 ef 13 27 4e 98 92 8a 41 c4 4d 1b 00 e8 d0 a1 03 96 2f 5f 8e d1 a3 47 c3 c6 e6 df b7 3f 67 cf 9e c5 8a 15 2b b0 67 cf 1e 61 db a5 4b 97 30 6e dc 38 6c df be dd a2 39 fe af 11 10 10 00 0f 0f 0f 3c 79 f2 44 76 99 f2 f2 72 78 7a 7a 0a eb 39 39 39 18 33 66 0c 6e df be 8d b0 b0 30 44 45 45 59 22 55 9d dc bc 79 13 c9 c9 c9 b0 b3 b3 83 93 93 13 fa f5 eb 87 ad 5b b7 62 d6 ac 59 8a e2 29 ee Data Ascii: EFF6=m>_QQ!gT4(--U\|)\|rBLmUL/ Mj&&&w^xx8{n <<\w/S~'NAM/_G?g+gaK0n8l9<yDvrxzz9993fn0DEEY"Uy[bY)
2024-04-25 18:47:58 UTC	538	IN	Data Raw: 10 0c 51 5c 5c 8c 0d 1b 36 60 f3 e6 cd 58 bb 76 ad 59 73 32 27 d2 f9 b1 ab 57 af 96 5d 76 d7 ae 5d d8 bc 79 33 d6 af 5f 2f ab f7 dd 28 94 be 2f 81 82 77 48 0f 1e 3c 60 62 48 67 43 b8 ba ba ea ac 47 fa 4e cb 18 9c 9c 9c 98 7a 52 52 52 8c 2a df ba 75 6b a1 6c d3 a6 4d 19 9b 92 e9 57 e2 d9 27 2a 95 8a b1 6d d8 b0 81 c9 35 22 22 c2 60 bc b2 b2 32 8d 63 6d e8 3d a4 21 8a 8a 8a 8c 1e 18 40 a4 39 ba 47 8c 25 86 ce 49 87 be 49 11 db a4 ef 21 3f f8 e0 03 c6 5e 5a 5a 6a b0 be 7b f7 ee 31 65 12 12 12 4c de 07 31 8a 2f fd d2 1e 48 29 b6 b6 b6 c8 ca ca 12 7a 63 a3 a3 a3 99 de b6 ec ec 6c 1c 3a 74 08 40 4d f3 e8 da b5 6b b8 76 ed 1a 76 ed da 85 31 63 c6 08 7e 09 09 09 88 8c 8c 44 7e 7e 3e 8a 8a 8a d0 be 7d 7b a3 73 dd b8 71 23 bc bd bd 85 f5 c0 c0 40 14 15 15 21 36 36 Data Ascii: Q\\6`XvYs2'W]v]y3_/(/wH<`bHgCGNzRRRuklMW'm5""`2cm=!@9G%II!?^ZZj{1eL1/H)zcl:t@Mkvv1c~D~~>}{sq#@!66
2024-04-25 18:47:58 UTC	684	IN	Data Raw: 10 b6 c5 c5 c5 59 24 a7 19 33 66 28 6a 6a d7 2e fb f6 ed d3 88 69 09 41 12 11 4d 9f 3e 5d 6b 0e 36 36 36 d4 ac 59 33 8d ed 09 09 09 d4 b8 71 63 b3 0a 92 88 28 27 27 47 e7 f1 10 8f c9 95 2e 57 af 5e d5 88 65 8d 82 24 22 1a 32 64 88 d6 7d 68 d8 b0 a1 d6 63 0d 80 86 0e 1d 6a 72 ee da b0 98 20 6b 13 77 72 72 d2 69 eb d0 a1 03 b3 bd 57 af 5e 04 80 ec ec ec 2c 95 16 65 64 64 68 5c e9 0c 2d 8d 1a 35 a2 ac ac 2c ad f1 fa f6 ed 2b f8 35 6b d6 4c 56 0e 13 26 4c 90 25 0e b9 93 66 6b 2f 60 e2 6d 9f 7d f6 19 13 eb 87 1f 7e 50 24 48 a2 9a af 09 ca 9d e7 d9 b2 65 4b 9d b3 72 ae 5f bf ce f8 9a 63 6c b2 74 0c af 14 b1 6d da b4 69 3a e3 2c 5e bc 58 f6 f9 10 1d 1d 6d 72 de ba b0 88 20 c5 df 61 cd c9 c9 61 6c e2 39 81 52 db 1f 7f fc 41 4b 97 2e b5 44 4a 1a fc fa eb af 14 1a Data Ascii: Y$3f(jj.iAM>]k666Y3qc(''G.W^e$"2d}hcjr kwrriW^,eddh\-5,+5kLV&L%fk/`m}~P$HeKr_cltmi:,^Xmr aal9RAK.DJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49910	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:58 UTC	1177	OUT	GET /en-us/sharefile/media/sf-win-access-dashboard-rf.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:58 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 21734 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:58 GMT Etag: "958df485e35916b37c8f19018db85c68-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BYHEHCKJ8XPGG4XFKEJ0 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:58 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7c 00 00 01 cc 08 06 00 00 00 d6 2d 13 bf 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 06 1c 15 05 13 b1 3e 48 1d 00 00 20 00 49 44 41 54 78 9c ec dd 7d 7c 53 e5 c1 3f fe 4f 81 22 4f 02 2a 95 b4 2a 96 62 a2 b4 95 06 c6 74 53 d7 de ad 34 89 0f 68 d4 aa 1b d1 6c df df 94 04 dd 3a 69 50 99 d3 df 2f db fc 6e 53 9b ce bb 3e 34 11 6f 37 33 83 9b eb 2d 71 6c b3 49 b1 ac f5 69 8a 93 a0 b4 9b 89 94 4e 94 a6 56 05 1f b0 20 0f fd fd d1 9d e3 39 79 6e 9b 34 b5 e7 f3 7e bd 78 bd 48 ce 39 d7 b9 ce 49 fa b9 ae 73 5d 27 49 ce ea d5 ab 07 41 44 44 13 de 14 00 70 b9 5c d9 ae 07 11 11 65 90 c5 62 c1 a4 6c 57 82 88 88 c6 06 03 9f 88 48 21 18 f8 44 44 0a c1 c0 27 22 52 08 Data Ascii: PNGIHDR\|-pHYs+tIME>H IDATx}\|S?O"O**btS4hl:iP/nS>4o73-qlIiNV 9yn4~xH9Is]'IADDp\eblWH!DD'"R
2024-04-25 18:47:58 UTC	2372	IN	Data Raw: d6 88 eb f2 c2 0b 2f e0 ec b3 cf 86 d3 e9 c4 6d b7 dd 86 17 5e 78 01 df fa d6 b7 46 5c 1e 51 36 34 3e ff 1a cc cb 4b b1 e1 6a 43 cc e5 ba 47 9e c2 dd 5b 5e c6 ca 12 35 0a 4f 98 33 c6 b5 fb 6a c8 58 e0 b7 ff ed 6f b8 fb e7 3f c7 f4 e9 d3 f1 cb 5f fe 12 d7 7e fb db 98 3c 79 32 00 e0 f0 e1 c3 f8 fb df ff 8e ad 6d 6d 38 e1 84 13 32 55 85 ac fa fc c0 01 00 c0 1f 9b 9b 71 ea a9 a7 c6 5c 67 ca e4 c9 28 38 e5 14 00 c0 49 f3 e6 61 c9 92 25 98 35 6b d6 a8 c2 3d 96 9c 9c 1c 0c 0e 0e 42 a3 56 23 27 27 07 93 26 71 ae 9e be 9a 16 cc 9d 1d 77 d9 86 ab f5 a8 76 fd 01 3a d7 53 b8 fe 6b 25 29 97 59 78 e2 9c 61 ad ff 55 96 b1 c0 7f f4 d1 47 31 38 38 88 5f dd 73 0f ae ba ea 2a d9 b2 dc dc 5c 7c eb 5b df 52 44 2f b3 a0 a0 00 0b 16 2c 48 ba de 71 c7 1d 87 bf fc f5 af 19 a9 c3 Data Ascii: /m^xF\Q64>KjCG[^5O3jXo?_~<y2mm82Uq\g(8Ia%5k=BV#''&qwv:Sk%)YxaUG188_s*\\|[RD/,Hq
2024-04-25 18:47:58 UTC	538	IN	Data Raw: 4f 3e 19 4b e2 8c c5 4f 9b 3e 1d cb 96 2d c3 59 8b 17 cb 9e 5f b0 60 01 b6 6e dd 0a b7 db 0d bf df 8f 70 6f 2f f6 ef df 8f b9 73 e7 e2 ac b3 ce c2 f2 e5 cb 71 e9 ca 95 28 28 28 90 6d 77 de 79 e7 e1 dd 77 df 4d 78 3b e8 f5 d7 5f 8f a5 4b 97 e2 c1 07 1e 40 57 57 17 ba ba ba 70 f2 c9 27 a3 bc a2 02 d5 2b 56 e0 e2 4b 2e 89 da e6 82 0b 2e c0 a1 2f be 88 da 5f 22 e7 9d 7f 3e 66 4b 7e e9 4a fa fc cc 18 9f 3a 5e be 7c 39 fe d6 de 0e 47 7d 3d 5e 7f fd 75 fc eb ad b7 30 67 f6 6c 2c 29 2b 43 79 79 39 2e b9 e4 12 86 3d 4d 18 d7 7d ad 04 0f be f8 0f b8 5f db 99 f6 b2 7f 78 c1 b2 b4 97 39 1e e5 ac 5e bd 7a d0 e5 72 65 bb 1e 44 44 09 0d 0e 0e c2 fd da 4e fc 7b 5f 7a 7b f9 4b 0a f2 70 79 89 7a 5c fd 88 39 90 fe df 06 b1 58 2c d9 bd 2d 93 88 28 55 39 39 39 30 2f 2f cd 58 Data Ascii: O>KO>-Y_`npo/sq(((mwywMx;_K@WWp'+VK../_">fK~J:^\|9G}=^u0gl,)+Cyy9.=M}_x9^zreDDN{_z{Kpyz\9X,-(U9990//X
2024-04-25 18:47:58 UTC	4744	IN	Data Raw: 00 70 3a 9d 28 2f 2f 47 38 1c 1e 8b 5d c7 e4 74 3a 11 0a 85 e0 70 38 12 ae d7 d1 d1 01 8d 46 23 7b 2e d9 36 e3 81 d5 6a c5 8e 1d 3b 10 0c 06 31 7b f6 6c 00 c0 33 cf 3c 03 8d 46 83 a7 9f 7e 1a e7 9d 77 5e 96 6b 48 44 d9 30 e6 43 3a 42 f0 8f c7 5e f1 44 f0 cc 33 cf 60 c7 8e 1d f0 f9 7c 62 d8 03 c0 e5 97 5f 0e 97 cb 85 07 1e 78 20 8b b5 23 a2 6c 1a 17 63 f8 06 83 41 1c 7a 90 0e 97 00 80 df ef 97 0d 4d f8 fd 7e 71 99 f4 79 a7 d3 29 2b 2f 72 3b a1 81 b1 d9 6c b0 db ed f0 78 3c 51 e5 a5 c2 e9 74 46 d5 51 4a 3a 84 65 30 18 64 cb e2 d5 37 9d 9e 7d f6 59 fc f0 87 3f 94 85 bd e0 eb 5f ff 3a 02 81 00 7a 7b 7b b1 77 ef 5e 2c 5e bc 18 bd bd bd e2 f2 67 9e 79 06 df f9 ce 77 64 db 9c 7f fe f9 62 9d 7f f6 b3 9f 89 cf 5b ad 56 6c dc b8 51 7c 1c ab 3c ab d5 2a 6e 1b 59 2e Data Ascii: p:(//G8]t:p8F#{.6j;1{l3<F~w^kHD0C:B^D3`\|b_x #lcAzM~qy)+/r;lx<QtFQJ:e0d7}Y?_:z{{w^,^gywdb[VlQ\|<*nY.
2024-04-25 18:47:58 UTC	5930	IN	Data Raw: d6 26 6d a5 f6 ef df 87 a7 7e bf 11 1f 7e f8 01 8e 3f 7e 36 ae be 66 15 66 cf 9e 93 b1 fd 39 1c 0e 71 9c 3b 99 c8 09 cb 64 a1 3f dc 49 c8 44 62 85 77 2c 55 55 55 a8 ad ad 45 51 51 11 4c 26 93 6c 99 4a a5 4a 5a 27 a1 17 1d d9 fb 05 52 0f c3 c2 c2 c2 a8 e7 6c 36 1b f4 7a 7d d4 95 51 51 51 91 ac 21 8c 14 b9 2c 14 0a c9 1a 81 58 c7 e4 f7 fb 11 08 04 c4 e1 16 e9 ba c9 26 9c 23 af 9c e2 35 5e a9 90 ce 53 00 88 79 4e 89 b2 65 5c f4 f0 ff d6 f6 1c ba bb df c6 71 d3 a6 e1 da 6f 9b b0 b8 b8 04 39 39 39 69 2b df ef f7 cb 7a af c2 78 73 32 91 63 db c9 c6 e3 4d 26 53 da 26 e8 aa aa aa 60 b7 db 53 6a 94 84 fa f9 7c 3e 71 d2 14 18 0a dc 78 43 0a 91 c3 32 76 bb 1d 45 45 45 e2 76 c2 72 a3 d1 28 1b a3 6e 68 68 88 39 64 04 c8 83 33 d6 f0 86 40 98 40 15 d6 11 c2 5a a7 d3 89 Data Ascii: &m~~?~6ff9q;d?IDbw,UUUEQQL&lJJZ'Rl6z}QQQ!,X&#5^SyNe\qo999i+zxs2cM&S&`Sj\|>qxC2vEEEvr(nhh9d3@@Z
2024-04-25 18:47:58 UTC	7116	IN	Data Raw: 9f b4 1d 18 18 c0 9b 6f bc 01 00 98 3a 75 2a 4e 3d 6d 41 5a cb 17 c6 c9 e3 8d 57 0a 3d 30 8d 46 03 ad 56 8b 9e 9e 1e 00 43 bd 2f e1 8d 1b 6b 1c 52 da 3b b3 db ed b0 58 2c e2 63 a3 d1 28 eb 29 9b cd e6 84 3d 5e 29 a7 d3 09 93 c9 24 db b7 f4 0f 32 10 08 44 5d 79 08 7f 78 d2 3a 45 86 77 e4 30 80 5e af 17 97 b7 b5 b5 c1 68 34 42 a3 d1 20 10 08 20 18 0c 22 18 0c 46 5d 1d 49 d9 ed 76 71 99 5e af 47 67 67 67 cc fa 0b a1 2b 90 86 ae b0 dc 64 32 c1 ef f7 a3 b0 b0 50 1c 42 f1 fb fd 30 1a 8d e2 e3 9e 9e 1e 18 8d 46 00 40 49 49 89 ec fc 26 62 b5 5a c5 61 8b 92 92 12 f1 1c 04 02 01 d9 70 4b 49 49 89 d8 40 0a c3 1e a9 0e 97 e9 f5 7a 59 6f da e3 f1 c4 1c 1e 32 9b cd b2 f7 89 f4 ea 52 af d7 27 1d ef 6e 68 68 48 e9 4a c0 e9 74 a2 b3 b3 33 66 79 91 e1 9e 28 9c a5 af 9b c9 Data Ascii: o:u*N=mAZW=0FVC/kR;X,c()=^)$2D]yx:Ew0^h4B "F]Ivq^Gggg+d2PB0F@II&bZapKII@zYo2R'nhhHJt3fy(
2024-04-25 18:47:58 UTC	369	IN	Data Raw: 1f 57 af 5e cd 19 f8 2d 2d 2d a6 72 c8 dc dc 5c de 31 b9 dd 6e d3 2e 1d 59 96 b3 c6 09 20 ef 8c db e5 72 19 0b c3 7a fb cc 1a 7e e6 42 ac 24 49 59 df 7b 18 1e 1e ce da a5 93 ef 3c 11 51 75 d5 0c 0d 0d ed 58 55 cf de 4e 27 70 f9 b5 a7 51 83 9a 8a 6e 73 9c 79 a7 cd 72 ef c7 23 0a 49 92 10 0c 06 f7 b5 e8 4b 44 47 9f db ed b6 76 5b 66 5d ed ee cd cf b6 1f 7f 8c eb 77 7b 11 4f 46 4b 3e 36 b2 15 2e ab ec 43 44 44 85 59 be 0f df de e0 c0 cb 97 16 b0 83 1d fc 64 ea eb 78 69 e1 72 c1 e0 4f a5 13 98 5c 19 c5 95 3f 3f b3 7b 0f fd 4b 0b 0c 7b 22 a2 2a 38 90 27 5e e9 f7 b6 d7 9f 64 f5 d6 07 53 70 3c d9 81 33 4f b4 19 3b 78 52 e9 04 36 1e ad 22 fc 70 f7 7e 39 3f 68 73 17 7d 58 0a a1 a4 2f 80 11 11 01 07 f8 4c 5b fd 49 56 ca b9 6b 58 da bc 87 c5 cd 7b 78 5b 9b c2 76 fa Data Ascii: W^---r\1n.Y rz~B$IY{<QuXUN'pQnsyr#IKDGv[f]w{OFK>6.CDDYdxirO\??{K{"*8'^dSp<3O;xR6"p~9?hs}X/L[IVkX{x[v

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49912	54.156.13.12	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:58 UTC	1180	OUT	GET /en-us/sharefile/media/sf-win-access-dashboard-queue.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:58 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 12137 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:58 GMT Etag: "03146d907d3df73a4ed1a6e6be49dd80-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BYJX7P6XQNV70J21EEVF X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:58 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7c 00 00 01 cc 08 06 00 00 00 d6 2d 13 bf 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 06 1c 15 05 20 0e ee 29 0b 00 00 20 00 49 44 41 54 78 9c ed dd 79 7c 54 f5 bd ff f1 f7 4c 26 01 92 40 44 10 12 44 84 00 11 c5 40 a0 dc 6b 15 4c 15 31 80 62 a5 78 8b 42 6a ec fd 59 49 14 f1 16 d3 52 6b 6b 1f a9 52 17 6a 84 4b 41 93 6a eb 35 35 d2 d2 fe fc 89 da 4a 72 05 d9 5c b1 1a 16 2d 04 05 4a 11 13 40 b6 b0 65 99 99 df 1f 93 39 66 c8 64 9f 2d f9 be 9e 8f 07 4a ce fa 9d c9 f0 3e df f3 39 df 39 c7 36 67 ce 1c b7 00 00 5d 9e 43 92 0a 0b 0b c3 dd 0e 00 40 10 65 67 67 cb 1e ee 46 00 00 42 83 c0 07 00 43 10 f8 00 60 08 02 1f 00 0c 41 e0 03 80 21 08 7c 00 30 04 81 0f 00 Data Ascii: PNGIHDR\|-pHYs+tIME ) IDATxy\|TL&@DD@kL1bxBjYIRkkRjKAj55Jr\-J@e9fd-J>996g]C@eggFBC`A!\|0
2024-04-25 18:47:58 UTC	2372	IN	Data Raw: c3 d2 8d 1f 2a 6b dc e5 7a f6 bb 53 fc ce cf f8 ed 4a 2d 7c f3 5d dd 34 72 b8 06 f7 4e 08 71 eb 3a 87 a0 05 fe fa 75 eb b4 f0 91 47 d4 a3 47 0f 3d f6 d8 63 ba f5 b6 db 14 15 15 25 49 aa ad ad d5 7b ef bd a7 b7 d6 ae 55 ef de bd 83 d5 84 b0 3a 7d ea 94 24 e9 cf 7f f9 8b 06 0e 1c e8 77 19 47 54 94 06 5c 78 a1 24 a9 4f df be 1a 35 6a 94 e2 e3 e3 3b 14 ee fe d8 6c 36 b9 dd 6e a5 0c 1f 2e 9b cd 26 bb 9d 6b f5 e8 9c 06 9d d7 ab c9 79 cf 7e 77 b2 ae 2f fc 93 32 0a 57 ea f6 6f 8c 6c f5 36 07 9f 9f d0 a6 e5 3b b3 a0 05 fe 73 cf 3d 27 b7 db ad c7 9f 78 42 b7 dc 72 8b cf bc e8 e8 68 5d 7d f5 d5 46 f4 32 07 0c 18 a0 41 83 06 b5 b8 5c b7 6e dd f4 d7 bf fd 2d 28 6d 98 30 61 82 4a 4b 4b 35 24 39 59 ef be fb ae a6 4d 9b 16 94 fd 00 e1 74 71 ef 04 3d fb dd 29 f5 3d fd 77 Data Ascii: *kzSJ-\|]4rNq:uGG=c%I{U:}$wGT\x$O5j;l6n.&ky~w/2Wol6;s='xBrh]}F2A\n-(m0aJKK5$9YMtq=)=w
2024-04-25 18:47:58 UTC	538	IN	Data Raw: ce 3b 4f 23 46 8c d0 b8 71 e3 34 ed a6 9b 34 60 c0 00 9f f5 ae ba ea 2a ed df bf bf d9 e1 a0 b7 df 7e bb c6 8c 19 a3 65 bf f9 8d 3e fd f4 53 7d fa e9 a7 ea d7 af 9f d2 bf f5 2d 5d 3f 69 92 6e b8 f1 c6 46 eb 4c 98 30 41 d5 35 35 8d f6 d7 9c ab c6 8f 57 af 06 4f ba 6a 38 3d ce cf b7 8e c7 8d 1b a7 75 eb d7 2b ff c9 27 f5 d1 47 1f 69 c7 ce 9d 4a e8 d5 4b a3 46 8f 56 7a 7a ba 6e bc f1 46 c2 1e 5d c6 f7 be 31 52 cb de fe bb 8a 3e dc 1e f0 6d cf 9b 30 36 e0 db 8c 44 b6 39 73 e6 b8 0b 0b 0b c3 dd 0e 00 68 96 db ed 56 d1 87 db f5 cf a3 81 ed e5 8f 1a 70 81 6e 1e 39 3c a2 1e 62 2e 05 fe d9 20 d9 d9 d9 e1 1d 96 09 00 ad 65 b3 d9 94 35 ee f2 a0 6d bb 3d eb 04 2b f4 83 f5 20 28 02 1f 40 a7 11 69 4f c4 8b b4 f6 b4 84 a7 59 03 80 21 08 7c 00 30 04 81 0f 00 86 20 f0 01 Data Ascii: ;O#Fq44`*~e>S}-]?inFL0A55WOj8=u+'GiJKFVzznF]1R>m06D9shVpn9<b. e5m=+ (@iOY!\|0
2024-04-25 18:47:58 UTC	4744	IN	Data Raw: ae ba ea aa 30 b7 10 40 38 84 bc a4 e3 0d fe 48 ec 15 77 05 ab 56 ad d2 96 2d 5b 54 52 52 62 85 bd 24 dd 7c f3 cd 2a 2c 2c d4 6f 7e f3 9b 30 b6 0e 40 38 45 44 0d 7f ca 94 29 56 e9 a1 61 b9 44 92 4a 4b 4b 7d 4a 13 a5 a5 a5 d6 bc 86 d3 0b 0a 0a 7c b6 77 ee 7a de 03 4c 6e 6e ae f2 f2 f2 54 5c 5c dc 68 7b ad 51 50 50 d0 a8 8d 0d 35 2c 61 4d 99 32 c5 67 5e 53 ed 0d a4 37 de 78 43 f3 e6 cd f3 09 7b af 7f fb b7 7f 53 59 59 99 be fc f2 4b 1d 38 70 40 97 5e 7a a9 be fc f2 4b 6b fe aa 55 ab 34 6b d6 2c 9f 75 c6 8f 1f 6f b5 f9 e1 87 1f b6 a6 e7 e4 e4 e8 a5 97 5e b2 7e f6 b7 bd 9c 9c 1c 6b dd 73 b7 0b 20 f4 42 1e f8 b9 b9 b9 ca cc cc b4 4a 25 53 a6 4c d1 f4 e9 d3 55 51 51 a1 8a 8a 0a 7d f2 c9 27 56 08 97 96 96 2a 2b 2b cb 9a b7 61 c3 06 6b 3b 89 89 89 2a 2a 2a b2 e6 Data Ascii: 0@8HwV-[TRRb$\|,,o~0@8ED)VaDJKK}J\|wzLnnT\\h{QPP5,aM2g^S7xC{SYYK8p@^zKkU4k,uo^~ks BJ%SLUQQ}'V++ak;***
2024-04-25 18:47:59 UTC	3818	IN	Data Raw: b8 a4 6a b7 54 53 27 85 ab ea 63 97 e7 41 eb 3d ec f5 25 1b bb 67 1a a3 6e 10 e9 08 7c 44 34 9b 24 5b 83 5e 7f 37 b7 14 2f c9 19 ed e9 f1 3b 5d 52 8d 82 7b 00 70 d8 a4 e8 28 29 c6 e6 39 00 c5 d8 24 3b 21 8f 4e 88 c0 47 a7 e1 0d 7f c9 53 1f 8f b6 4b 6e b7 e4 96 e7 00 e0 72 7b 4a 40 4e 97 27 fc eb e4 99 ef 74 7f fd ff 73 35 0c ed 28 fb d7 e5 98 e8 fa 70 77 d4 ff df 56 bf ac 8d 72 0d 3a 31 02 1f 9d d6 b9 07 00 b7 3c 5f 68 72 ab fe 4f fd c1 40 e7 fc fd dc 6d 58 7f 6f 10 e6 de e0 27 e0 d1 95 10 f8 e8 32 1a 1e 00 ac 09 00 2c dc 1e 19 00 0c 41 e0 03 80 21 08 7c 00 30 04 81 0f 00 86 20 f0 01 c0 10 04 3e 00 18 82 c0 07 00 43 10 f8 00 60 08 02 1f 00 0c 41 e0 03 80 21 08 7c 00 30 04 81 0f 00 86 20 f0 01 c0 10 04 3e 00 18 82 c0 07 00 43 10 f8 00 60 08 02 1f 00 0c 41 Data Ascii: jTS'cA=%gn\|D4$[^7/;]R{p()9$;!NGSKnr{J@N'ts5(pwVr:1<_hrO@mXo'2,A!\|0 >C`A!\|0 >C`A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49913	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:58 UTC	1180	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:47:58 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:47:58 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BYM6G93E4A4Y6DX5ECNB Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49914	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:58 UTC	1125	OUT	HEAD /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:59 UTC	529	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 23057345 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:47:59 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BYYXV6335RT6WPCFV5RC X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49915	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	1175	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:47:59 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:47:59 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BZ2EPZPWCWN4JBBTXRPJ Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49916	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	894	OUT	GET /en-us/sharefile/media/rb-logo.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:59 UTC	516	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 401 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 4263 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:59 GMT Etag: "44db86ab81d6cbf0e57bc6a6a2d1791d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BZ2ERHNV775KBKVEWQHV X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:59 UTC	670	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e4 00 00 00 3c 08 06 00 00 00 76 3a 16 cf 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 05 03 2a 31 ae 7e 7d 00 00 10 46 49 44 41 54 78 9c ed 9d 79 54 15 e5 ff c7 df 17 b7 14 17 4c 4d 94 90 0e 98 52 4a 88 92 5b 18 2e 48 88 e6 9a 92 0b 01 29 82 a8 60 21 a8 a4 e6 c9 3a e1 71 8d 8e 4a 85 1a e2 72 dc 17 c4 dc c5 05 e1 0f 93 44 5c 11 83 34 34 8c 50 f4 b2 88 fa f9 fd c1 8f 69 9e b9 db dc b9 f7 e2 b5 ef f3 3a 67 8e 77 e6 f3 79 3e cf 67 86 79 cf 3c f3 cc f3 8c 2a 22 22 70 38 1c ab c0 e6 45 27 c0 e1 70 fe 85 0b 92 c3 b1 22 b8 20 39 1c 2b 82 0b 92 c3 b1 22 b8 20 39 1c 2b 82 0b 92 c3 b1 22 b8 20 39 1c 2b 82 0b 92 c3 b1 22 b8 20 39 1c 2b 82 0b 92 c3 b1 22 ea Data Ascii: PNGIHDR<v:pHYs+tIME1~}FIDATxyTLMRJ[.H)`!:qJrD\44Pi:gwy>gy<""p8E'p" 9+" 9+" 9+" 9+"
2024-04-25 18:47:59 UTC	2372	IN	Data Raw: 45 46 46 be 88 dd 36 0a b3 0a f2 ee dd bb c2 ce 8f 1e 3d 9a 88 88 aa aa aa 84 6d ef bf ff 3e e3 5f 51 51 21 d8 fa f5 eb 67 ce 54 34 28 2d 2d 55 7c 02 b8 b9 b9 e9 8c cb 05 29 9f fc fc 7c b3 08 72 e3 c6 8d 42 4c a9 6d d5 aa 55 4c 9d 2f 9b 20 4d 6a b2 26 26 26 a2 77 ef de e8 d6 ad 1b 80 9a a6 5e 78 78 38 12 13 13 b1 7b f7 6e 94 94 94 20 3c 3c 5c f0 df bb 77 2f 53 7e ec d8 b1 c2 ef 13 27 4e 98 92 8a 41 c4 4d 1b 00 e8 d0 a1 03 96 2f 5f 8e d1 a3 47 c3 c6 e6 df b7 3f 67 cf 9e c5 8a 15 2b b0 67 cf 1e 61 db a5 4b 97 30 6e dc 38 6c df be dd a2 39 fe af 11 10 10 00 0f 0f 0f 3c 79 f2 44 76 99 f2 f2 72 78 7a 7a 0a eb 39 39 39 18 33 66 0c 6e df be 8d b0 b0 30 44 45 45 59 22 55 9d dc bc 79 13 c9 c9 c9 b0 b3 b3 83 93 93 13 fa f5 eb 87 ad 5b b7 62 d6 ac 59 8a e2 29 ee 65 Data Ascii: EFF6=m>_QQ!gT4(--U\|)\|rBLmUL/ Mj&&&w^xx8{n <<\w/S~'NAM/_G?g+gaK0n8l9<yDvrxzz9993fn0DEEY"Uy[bY)e
2024-04-25 18:47:59 UTC	538	IN	Data Raw: 0c 51 5c 5c 8c 0d 1b 36 60 f3 e6 cd 58 bb 76 ad 59 73 32 27 d2 f9 b1 ab 57 af 96 5d 76 d7 ae 5d d8 bc 79 33 d6 af 5f 2f ab f7 dd 28 94 be 2f 81 82 77 48 0f 1e 3c 60 62 48 67 43 b8 ba ba ea ac 47 fa 4e cb 18 9c 9c 9c 98 7a 52 52 52 8c 2a df ba 75 6b a1 6c d3 a6 4d 19 9b 92 e9 57 e2 d9 27 2a 95 8a b1 6d d8 b0 81 c9 35 22 22 c2 60 bc b2 b2 32 8d 63 6d e8 3d a4 21 8a 8a 8a 8c 1e 18 40 a4 39 ba 47 8c 25 86 ce 49 87 be 49 11 db a4 ef 21 3f f8 e0 03 c6 5e 5a 5a 6a b0 be 7b f7 ee 31 65 12 12 12 4c de 07 31 8a 2f fd d2 1e 48 29 b6 b6 b6 c8 ca ca 12 7a 63 a3 a3 a3 99 de b6 ec ec 6c 1c 3a 74 08 40 4d f3 e8 da b5 6b b8 76 ed 1a 76 ed da 85 31 63 c6 08 7e 09 09 09 88 8c 8c 44 7e 7e 3e 8a 8a 8a d0 be 7d 7b a3 73 dd b8 71 23 bc bd bd 85 f5 c0 c0 40 14 15 15 21 36 36 d6 Data Ascii: Q\\6`XvYs2'W]v]y3_/(/wH<`bHgCGNzRRRuklMW'm5""`2cm=!@9G%II!?^ZZj{1eL1/H)zcl:t@Mkvv1c~D~~>}{sq#@!66
2024-04-25 18:47:59 UTC	683	IN	Data Raw: b6 c5 c5 c5 59 24 a7 19 33 66 28 6a 6a d7 2e fb f6 ed d3 88 69 09 41 12 11 4d 9f 3e 5d 6b 0e 36 36 36 d4 ac 59 33 8d ed 09 09 09 d4 b8 71 63 b3 0a 92 88 28 27 27 47 e7 f1 10 8f c9 95 2e 57 af 5e d5 88 65 8d 82 24 22 1a 32 64 88 d6 7d 68 d8 b0 a1 d6 63 0d 80 86 0e 1d 6a 72 ee da b0 98 20 6b 13 77 72 72 d2 69 eb d0 a1 03 b3 bd 57 af 5e 04 80 ec ec ec 2c 95 16 65 64 64 68 5c e9 0c 2d 8d 1a 35 a2 ac ac 2c ad f1 fa f6 ed 2b f8 35 6b d6 4c 56 0e 13 26 4c 90 25 0e b9 93 66 6b 2f 60 e2 6d 9f 7d f6 19 13 eb 87 1f 7e 50 24 48 a2 9a af 09 ca 9d e7 d9 b2 65 4b 9d b3 72 ae 5f bf ce f8 9a 63 6c b2 74 0c af 14 b1 6d da b4 69 3a e3 2c 5e bc 58 f6 f9 10 1d 1d 6d 72 de ba b0 88 20 c5 df 61 cd c9 c9 61 6c e2 39 81 52 db 1f 7f fc 41 4b 97 2e b5 44 4a 1a fc fa eb af 14 1a 1a Data Ascii: Y$3f(jj.iAM>]k666Y3qc(''G.W^e$"2d}hcjr kwrriW^,eddh\-5,+5kLV&L%fk/`m}~P$HeKr_cltmi:,^Xmr aal9RAK.DJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49917	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	894	OUT	GET /en-us/sharefile/media/captcha.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:59 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 19563 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:59 GMT Etag: "108c3c04c2c927dc602f6aec71ebc50e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BZ34QHVV5X76HKAASFSG X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:59 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 47 00 00 01 c2 08 02 00 00 00 f3 56 9c 57 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 07 74 49 4d 45 07 e7 0b 01 0f 1e 12 24 5d de 44 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 5c d5 9d 3f fc 73 6e 99 5e 34 a3 32 ea bd 5a b2 e5 2a b9 77 30 bd 43 42 48 48 36 d9 65 49 b2 d9 27 0e 09 09 f9 b1 84 7d 36 09 79 d8 df 86 ec 6e 0a 90 06 a1 85 04 02 21 06 6c 8c 71 95 ab 6c f5 de eb 8c 34 55 9a 7e db 79 fe b8 58 28 c6 96 5c 24 cf e8 fa fb 7e f1 e2 25 8d ee dc 39 33 9e cf 3d e7 9e 7b ee 39 98 10 82 00 00 0a 42 c5 ba 00 00 80 39 06 a9 06 40 69 20 d5 00 28 0d a4 1a 00 a5 81 54 03 a0 34 90 6a 00 94 06 52 0d 80 d2 40 aa 01 50 1a 48 35 00 4a 03 a9 06 40 69 20 d5 00 28 0d a4 1a 00 a5 81 54 Data Ascii: PNGIHDRGVWpHYs%%IR$tIME$]D IDATxw\|\?sn^42Z*w0CBHH6eI'}6yn!lql4U~yX(\$~%93={9B9@i (T4jR@PH5J@i (T
2024-04-25 18:47:59 UTC	2372	IN	Data Raw: c9 e3 f5 b5 b5 b7 7b 3d de b1 f1 f1 0d 1b d6 a5 a6 d8 4e 9e ac 75 b9 dc 89 89 d6 c2 82 7c 8c f1 b8 d3 d9 d1 d9 e5 f5 fa 1c 8e b1 75 6b d7 94 2f 2a 3d 78 e8 48 69 69 71 aa cd d6 d1 d1 e9 9d 98 58 5d b5 aa a5 b5 ed c4 a9 5a 15 cb 6e de b8 21 33 33 63 7a 39 9b 5b 5a fd fe 40 ff e0 60 28 14 ba 6e fb d6 ec cc 4c 86 61 58 96 e1 38 6e df 81 83 83 83 43 b9 39 d9 5b 36 6d 64 59 f6 e8 f1 13 4d 2d ad 26 a3 f1 fa 6d 5b 93 92 12 3b bb ba 0f d7 1c 65 18 66 eb e6 8d 59 99 99 a3 a3 f6 fd 87 0e 87 c3 e1 aa 95 2b 96 2c ae 90 77 2e 08 e2 91 a3 47 3b bb ba 53 92 93 af df be 35 1a e5 1a 9b 9b 27 fd fe 91 91 d1 75 6b d6 14 16 e4 1d 3d 7e b2 ab bb c7 68 34 de 74 c3 8e ae 9e 9e 63 c7 4e d0 0c b3 65 d3 c6 ac cc 8c da 33 75 2e a7 5b 10 f9 ed 5b b7 6a 34 ea 33 67 ea 18 95 6a 49 45 Data Ascii: {=Nu\|uk/*=xHiiqX]Zn!33cz9[Z@`(nLaX8nC9[6mdYM-&m[;efY+,w.G;S5'uk=~h4tcNe3u.[[j43gjIE
2024-04-25 18:47:59 UTC	538	IN	Data Raw: 9e 25 49 64 df 81 83 43 c3 c3 33 6c d3 d0 d8 74 aa f6 f4 9c 14 12 5c 65 90 ea 79 91 68 b5 dc 79 fb ad 09 09 66 51 14 a3 d1 a8 63 6c 4c be 55 ab b7 b7 77 dc e5 da ba 69 53 59 49 31 42 28 18 0c da ed 0e 8e e3 11 42 82 20 4a 92 e4 f7 fb 03 81 a0 28 8a a2 28 3a 9d ae 50 28 8c 10 9a 98 98 70 7b 3e a9 36 3d 1e ef b8 d3 29 ff 3c 3c 32 52 d7 d0 d0 3f 30 68 36 9a ee b8 fd 56 8b 25 01 21 34 39 39 69 77 8c c9 fd 58 82 20 48 92 34 39 39 e9 74 b9 a6 97 90 10 42 08 71 b9 3d be 69 87 1e 7f 20 e0 70 8c c9 97 a3 89 44 c4 b3 83 bd 5d 2e b7 fc 74 42 48 28 1c 96 7f 90 db 05 92 24 85 42 21 38 8f 8b 2b d0 5b 36 2f c2 e1 f0 e9 ba fa 15 cb 96 d5 1c 3d 1e 0a 87 7c be 09 93 c9 78 f7 1d b7 35 b7 b6 f6 f6 f6 bf b7 fb 83 1d db b7 d1 34 b5 7b ef 3e 51 14 f4 7a dd 1d b7 dd 16 0a 85 f6 Data Ascii: %IdC3lt\eyhyfQclLUwiSYI1B(B J((:P(p{>6=)<<2R?0h6V%!499iwX H499tBq=i pD].tBH($B!8+[6/=\|x54{>Qz
2024-04-25 18:47:59 UTC	4744	IN	Data Raw: b1 13 27 33 d2 d3 47 46 ed 5b b7 6c 2c 5f b4 68 df fe fd 99 99 19 05 79 f9 81 40 f0 9e bb ee 60 59 a6 ae a1 31 c1 6c fe e8 c0 c1 eb b7 6f db bc 71 7d 6f 7f bf 63 6c 5c ad 56 d5 37 35 7d e6 be bb 4b 8a 0a 0f 1e ae 29 2c c8 d3 eb f5 18 e3 c3 35 c7 34 1a f5 7d 77 df 95 92 9c 74 e0 d0 11 5b 72 ca 9e bd 1f e6 64 67 2f ad 5c 72 aa f6 0c c7 f3 6a 95 9a 10 12 0c 06 eb 1a 1a 1f b8 ff 33 95 8b 2b 0e d7 1c d5 6a 34 5e af d7 64 34 8e 8f bb 0e 1e ae 59 be ac b2 b3 ab 07 63 aa a4 b8 28 d6 1f 39 f8 04 d4 d5 f3 02 63 4c d3 34 91 24 9b 2d a5 ac a4 c4 64 32 66 65 65 46 39 4e ad 56 ab d5 6a b3 d9 3c 32 3c c2 30 cc f2 a5 95 34 4d af 5a b9 e2 6f ef be 3f 39 e9 2f 2f 2b cb c9 ce 42 08 e9 f5 fa f2 b2 12 a3 d1 98 9a 62 8b 84 23 16 4b 02 45 53 18 61 9a a1 33 33 33 0e 1d 39 4a 61 Data Ascii: '3GF[l,_hy@`Y1loq}ocl\V75}K),54}wt[rdg/\rj3+j4^d4Yc(9cL4$-d2feeF9NVj<2<04MZo?9//+Bb#KESa3339Ja
2024-04-25 18:47:59 UTC	5930	IN	Data Raw: 70 70 30 25 25 c5 e3 f1 6c dd ba d5 ee 70 d4 d6 d6 6e dd b2 45 92 a4 0f 3e f8 a0 ba ba 3a 33 33 f3 d4 a9 53 c7 4f 9c 28 2e 2a da b2 75 ab 4a 89 f3 c2 03 25 59 00 a9 06 00 5c 92 05 d0 02 07 00 5c 12 48 35 00 4a b3 30 ae 6c 21 84 24 49 8a 75 11 80 a2 28 72 2d 1e d9 02 48 75 94 e3 c6 c7 9d 91 bf 1f 31 0a c0 95 c0 18 a9 55 ea d4 94 64 58 13 33 06 44 51 1c 18 1a d6 eb 74 09 09 30 f0 03 cc 25 8f d7 1b 89 70 d9 59 19 b4 e2 2a ed 78 af ab fd 81 20 45 d3 b6 94 e4 58 17 04 28 4d 9a cd d6 37 30 14 08 04 cd 26 63 ac cb 32 c7 e2 fd 28 25 08 02 45 c1 02 b7 60 5e 50 14 56 e4 3d b9 f1 9e 6a 84 10 8e eb 53 04 00 e2 ce 02 48 35 00 e0 92 40 aa 01 50 1a 48 35 00 4a 03 a9 06 40 69 20 d5 00 28 0d a4 1a 00 a5 81 54 03 a0 34 90 6a 00 94 06 52 0d 80 d2 40 aa 01 50 1a 48 35 00 4a Data Ascii: pp0%%lpnE>:33SO(.uJ%Y\\H5J0l!$Iu(r-Hu1UdX3DQt0%pYx EX(M70&c2(%E`^PV=jSH5@PH5J@i (T4jR@PH5J
2024-04-25 18:47:59 UTC	5314	IN	Data Raw: 6c b6 4f 1f dd 31 c6 2c cb ca dd e0 f2 cf 82 20 48 92 a4 52 a9 e4 07 55 2a 95 7c 91 09 9d bd a3 93 e3 38 8a a2 18 86 e1 38 6e fa 65 30 8e e3 e4 4b 5f 53 db cb 9b 4d df e0 9c 57 9c 7e a9 8c e7 f9 e9 a3 50 08 21 f2 5a 50 53 ed ed a9 d7 95 ff 74 f1 9f c0 c2 35 75 3a 3d e5 ca 6f 95 57 ea bc 65 d0 02 ff 04 21 84 3b 3b fa 74 fa cf 9f fe 01 21 34 75 31 49 ee b0 39 e7 af e8 ef 2f 4a 4f 6d 76 ce 20 d0 e9 af 32 75 34 91 37 38 e7 e9 08 a1 73 d2 3b f5 ba d7 08 98 ee e2 e2 2d e0 54 cb e7 57 97 f4 94 98 1f 8f 67 fd 5e 5e e3 5f dc a9 16 cd f4 16 93 3c 8c 67 fa 18 9e a9 15 a7 a7 77 2b ca 7d 87 18 63 79 08 da d4 0f 34 4d 5f 53 87 3f b4 a0 53 4d 51 54 28 14 1a 1c 1c bc c8 ed e5 fb ab 15 d9 6f bc 40 d1 34 4d 51 94 9c 52 f9 87 70 38 dc dc dc 1c 8d 46 cb ca ca 92 92 92 02 81 Data Ascii: lO1, HRU*\|88ne0K_SMW~P!ZPSt5u:=oWe!;;t!4u1I9/JOmv 2u478s;-TWg^^_<gw+}cy4M_S?SMQT(o@4MQRp8F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49918	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	889	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: sharefile_main sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:59 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1cmrxml2f X-Cloud-Trace-Context: 3b11b6e12f4b34b823414b97714d59ed Date: Thu, 25 Apr 2024 18:47:59 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:59 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49919	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	1163	OUT	GET /en-us/sharefile/media/password-5-a.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:59 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 59073 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:59 GMT Etag: "d0db34ad7211a0ce2934afc4a01f4f62-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BZ6Q68WT4K746B615R8N X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:59 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 02 08 08 06 00 00 00 96 f8 8a 87 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 05 10 0f 1e 26 52 7c a4 6a 00 00 20 00 49 44 41 54 78 9c ec dd 77 bc 5c 67 7d ef fb cf b3 ca f4 be bb b6 a4 ad de ab 65 cb 96 e5 2a 77 63 6c 30 c5 d8 04 42 80 04 48 38 81 13 4e 48 4e 6e 72 02 f7 26 27 e7 a6 dc 14 12 4a 20 40 30 dd 36 d8 60 8a bb 2d 37 59 b6 8a 2d ab 17 ab ef de a6 cf ac f2 dc 3f d6 d6 de 92 25 d9 26 68 6f 59 e6 f7 7e bd 86 97 99 bd 66 66 ad d1 bc d6 5a df e7 f7 14 a5 b5 d6 08 21 84 38 93 de a1 94 ba ef 6c ef c4 9b 9d ef fb ef 54 4a fd e8 6c ef 87 10 42 88 89 65 9c ed 1d 10 42 08 21 84 10 42 fc e6 90 00 22 84 10 42 08 21 84 98 30 12 40 84 10 42 08 21 Data Ascii: PNGIHDR pHYs+tIME&R\|j IDATxw\g}e*wcl0BH8NHNnr&'J @06`-7Y-?%&hoY~ffZ!8lTJlBeB!B"B!0@B!
2024-04-25 18:47:59 UTC	2372	IN	Data Raw: 21 93 a6 a4 3d ba 7d d5 39 f9 38 1d 4f d3 9b af 63 1a 8a 54 d4 64 a8 ec a1 d0 34 26 43 58 a6 42 03 75 c7 07 05 61 2b 78 ad a9 14 ab 66 a5 68 4e 87 98 d3 7a 72 a5 a9 e6 fa 18 4a 61 9b 63 fb 5d ae 7b f4 17 1c e2 11 8b 5c dc 62 a8 ec 32 5c 76 c9 c4 2d d2 d1 d7 fd e7 16 42 88 37 9d 75 db ab 7c e9 fe 3c 0d 29 83 bf fd 68 e3 e8 4d 78 cd d1 7c fb e1 02 4f 6f ad f2 89 b7 a7 58 b3 6c 7c 2b f2 67 cb cf d7 97 f8 cf 87 0a bc f7 b2 04 1f ba 36 85 21 19 44 08 71 8e 7b 43 77 a4 ae af c9 c6 6d ae 5a 90 63 52 26 a8 76 28 a5 d8 7a b8 c4 f3 af 14 b8 65 45 33 eb f6 0e f3 c3 75 3d 2c 99 1a a7 6b b8 ce 81 be 2a 1f 58 dd ca f5 4b 1a d8 76 a4 c4 0f 9f eb 21 5f 71 99 94 0d 71 e5 fc 1c cb 3b 12 18 86 a2 ee 69 be f2 d8 11 ca 75 9f cf de 38 95 b6 4c 18 80 6f 3d d5 c9 d3 bb f3 fc fe Data Ascii: !=}98OcTd4&CXBua+xfhNzrJac]{\b2\v-B7u\|<)hMx\|OoXl\|+g6!Dq{CwmZcR&v(zeE3u=,k*XKv!_qq;iu8Lo=
2024-04-25 18:47:59 UTC	538	IN	Data Raw: 5f c7 c9 c5 6d ea 5e 50 8a 3e f6 f9 8a 60 bb e0 bf d5 c8 45 2c 18 bf b2 62 5a 8a cf dd 3a 9d 6f ac ed a4 af e8 70 cf 0b bd 94 eb 1e 7f fc b6 a9 64 62 36 af 36 ba 8f 5b 06 c8 c6 fb 29 54 3d fe f0 ba c9 e4 46 b6 3d 76 9c 61 cb 24 1d b5 50 40 53 32 cd e4 5c 98 e6 54 08 df d7 f8 1a 52 31 8b 64 64 ec 6b 6f 4a d9 fc f9 2d d3 f8 b7 87 0f b3 a7 ab c2 cb 87 4b fc d9 5d 7b f9 eb f7 cc 60 7a 73 0c 75 5c 68 50 2a f8 9f b0 a5 98 db 16 a3 35 1d 62 41 7b 8c 4c cc c6 f5 34 5a 07 71 45 03 8d 09 7b 74 30 7b cd f5 df c8 3f b3 10 42 bc 69 79 23 a7 b1 4f dd 9a e6 b9 1d 55 fe fa fb 83 2c 9e 11 e2 d8 90 3d db 50 d4 5d cd 0f 1e 2f b2 fd a0 c3 c7 6f 4a b3 6c 56 88 2d fb ea fc cb bd c3 7c ed 17 79 56 2d 88 70 e1 82 28 cf bd 58 e1 ee a7 4a 5c be 24 ca be 4e 87 6a de e3 c7 4f 97 f9 Data Ascii: _m^P>`E,bZ:opdb66[)T=F=va$P@S2\TR1ddkoJ-K]{`zsu\hP*5bA{L4ZqE{t0{?Biy#OU,=P]/oJlV-\|yV-p(XJ\$NjO
2024-04-25 18:47:59 UTC	4744	IN	Data Raw: af ca 43 2f 0f 90 89 59 dc bb a1 97 62 cd c3 32 15 ae e7 73 68 a0 8e e7 6b d6 2c c8 32 5c f1 f8 e1 73 3d fc 74 53 1f 37 2c 6d e0 92 39 a7 5e 6f e3 da 45 59 ee df d4 c7 4f 37 f5 33 bb 35 c6 95 f3 b2 a3 95 95 19 cd 31 94 86 6c dc 62 cd 82 2c 96 a9 70 3c 4d 3a 6a 06 b3 51 8d 4c a3 eb fb 1a cf 1f 0b 55 bd 85 3a 9d 43 35 96 75 24 98 dd 1a e3 99 dd c3 fc e2 c5 7e 1e de 3a c8 ef 34 44 4e e8 2e 75 ec d8 3b 87 6b dc f5 5c 0f be 86 a7 77 0f b3 e5 70 91 3b 56 b5 06 d5 8e ee 4a f0 ef f0 aa cf 11 42 88 73 9d a7 a1 a3 d9 e2 2f de 9f e5 f6 ff dd cd 3f dc 3d 84 d6 60 28 85 61 42 ad ae 39 d8 e3 e0 56 34 3f 7e aa c8 43 1b 0c f2 65 1f af ec 73 a0 c7 61 b0 e8 b1 72 5e 84 64 ce e2 67 4f 97 78 f7 25 71 86 4b 1e ab 96 c5 f8 d9 73 25 e6 4d b1 f1 35 ac 9c 73 ea eb dc fc a9 36 6b Data Ascii: C/Yb2shk,2\s=tS7,m9^oEYO7351lb,p<M:jQLU:C5u$~:4DN.u;k\wp;VJBs/?=`(aB9V4?~Cesar^dgOx%qKs%M5s6k
2024-04-25 18:47:59 UTC	5930	IN	Data Raw: 66 ed 8e 21 ea ae 0f 40 63 d2 66 de a4 38 e9 a8 39 da 40 34 58 72 d8 d7 53 19 7d ad 10 42 08 71 26 6d 79 a5 c6 8e 83 0e 5e 70 a9 0b 68 cd 8c 36 8b 77 5d 9a 60 66 db e9 2b 1f 43 45 9f e7 77 56 79 68 63 99 8d bb 6b 0c 97 fc d3 6e 1b b2 15 d7 ac 88 72 f3 aa 04 a1 90 0a 66 d5 02 30 15 b5 82 cf 33 5b 2b af f9 7a 21 de 8c 64 0c 88 38 e3 2a 75 8f c3 03 55 8a 35 0f d0 28 20 15 35 69 4e 8d 9d 8c f7 f5 54 d8 d9 59 a6 ee 05 2d 3c 5a 43 22 6a 72 fd 92 06 de 77 51 33 ad 99 30 dd c3 35 be f9 54 27 f7 6f ec a7 ee 69 0c 05 86 01 83 25 97 8d fb 0b dc b0 a4 81 49 d9 30 61 cb 60 4a 43 84 78 d8 1c 9d 77 bd 50 f3 38 d0 57 c5 f3 7d 2c 53 72 b6 10 42 88 33 6b fd ae 1a 87 7a 9d b1 27 34 28 43 71 de ec 10 d7 9c 17 3b ed eb 0e 74 3b 7c f9 67 79 ee 7f b6 c4 50 c9 a7 35 67 72 cb aa Data Ascii: f!@cf89@4XrS}Bq&my^ph6w]`f+CEwVyhcknrf03[+z!d8*uU5( 5iNTY-<ZC"jrwQ305T'oi%I0a`JCxwP8W},SrB3kz'4(Cq;t;\|gyP5gr
2024-04-25 18:47:59 UTC	7116	IN	Data Raw: fa fa e8 e9 e9 a1 50 28 30 38 38 48 c8 b6 49 a6 52 24 13 09 d2 99 0c e9 74 9a 74 3a fd 9a 37 89 5a 6b ba bb bb 39 70 e0 00 99 4c 86 69 d3 a6 11 0e 87 27 f0 48 de 3a 5c d7 a5 58 2c e2 ba ee af b4 a0 a1 d6 1a db b6 49 24 12 98 e6 af 3e 10 b0 5a ad b2 67 cf 1e 00 66 cd 9a 45 24 32 be 0b 49 d5 6a 35 06 fa fb 29 95 cb f8 be 4f 63 63 23 b9 5c 6e 5c 3f 53 08 21 44 a0 ad c1 e2 96 8b 2d 6e b9 38 4e b5 ae e9 1e 74 29 55 35 bd c3 1e d5 ba a6 31 6d 90 4b 9a b4 64 2d 62 61 49 1c e2 ad 4f 02 c8 04 a8 56 ab ec dc b9 93 27 d7 ae 65 dd ba 75 1c 3e 72 84 5a b5 4a bd 5e c7 30 0c 6c db c6 b6 6d 92 c9 24 73 e6 cc e1 fc 0b 2e 60 f9 f2 e5 74 74 74 10 8b c5 4e 7a bf 52 a9 c4 8f ee b9 87 1f fc e0 07 cc 9f 3f 9f 4f 7c e2 13 2c 5d b6 ec 2c 1c d9 b9 6d 70 70 90 27 1e 7f 9c 27 9f 7a Data Ascii: P(088HIR$tt:7Zk9pLi'H:\X,I$>ZgfE$2Ij5)Occ#\n\?S!D-n8Nt)U51mKd-baIOV'eu>rZJ^0lm$s.`tttNzR?O\|,],mpp''z
2024-04-25 18:47:59 UTC	8302	IN	Data Raw: 0f bb 43 17 fd d6 d6 56 9a 9b 9b 47 f5 39 43 fb 24 a5 a5 91 99 99 79 c5 89 eb 70 75 01 6d b2 0c 05 90 da da 5a ce 9d 3b 37 aa 7d 0c 06 03 46 45 21 21 31 91 a4 51 96 a2 14 42 88 f1 62 b3 d9 b8 f5 d6 5b d9 b0 61 03 ed ed ed 54 57 57 53 55 55 45 7d 7d 3d ad ad ad 34 36 36 52 5b 5b 4b 5f 5f 1f 87 0f 1f e6 c4 89 13 1c 3c 78 90 47 1f 7d 94 9b 6e ba 69 cc 43 7a af 74 2d 37 99 4c 1f 98 cc ad aa 2a d1 68 94 c1 c1 41 02 81 40 bc 87 dd 6c 36 d3 d8 d8 88 df ef bf e2 0b b6 a1 55 c8 47 53 a9 ea d4 a9 53 d4 d7 d7 93 96 96 c6 f4 e9 d3 e3 f3 5b 86 6b b7 a2 28 58 2c 16 32 33 33 89 44 22 f1 97 80 23 b5 c1 6e b7 b3 7a f5 6a 0a 0a 0a e2 65 e6 87 33 34 97 71 e9 d2 a5 13 b6 e6 4a 67 67 27 8d 8d 8d 84 42 21 b2 b3 b3 71 b9 5c 23 9e 27 10 5f 43 c6 66 b3 e1 f7 fb 47 7d cf 13 d7 27 Data Ascii: CVG9C$ypumZ;7}FE!!1QBb[aTWWSUUE}}=466R[[K__<xG}niCzt-7L*hA@l6UGSS[k(X,233D"#nzje34qJgg'B!q\#'_CfG}'
2024-04-25 18:47:59 UTC	3101	IN	Data Raw: cc 27 14 0a a1 75 0f e0 4d cc c2 1c f6 31 18 ee c6 5d 90 21 37 61 21 c4 47 92 5c fb 84 10 42 7c a4 e9 b1 08 ad 2d 8d 24 2c ff 0c 8f dc 31 eb d2 0d 02 55 34 ab 09 e4 2e 5a 42 91 0b 42 f5 7d f8 dc 39 14 e4 a4 63 c6 47 e7 a0 13 6b a2 97 64 47 3f 67 76 1d e2 9d 86 6e 5c 4e 1b 36 63 14 5f 7f 98 e0 f4 34 1c d6 20 5d 6d 26 92 66 39 40 0d a0 0d 9a f0 26 5b 27 ff 64 85 10 62 0a 90 00 22 84 10 e2 23 4d d5 7c f8 7b 22 a4 cd 18 7e 40 54 ac af 0b cd 16 21 6b 7a 1a 00 03 fe 6e 8c 6e 17 49 c9 76 88 74 d2 63 32 62 48 49 c5 11 a8 e7 c5 37 4f a1 df fe 59 ee 5b 9d 0d d1 76 de da ba 95 d3 96 64 ec 5a 08 9f d1 4e 9a 0d 42 81 28 c1 c1 0c f2 13 27 f3 2c 85 10 62 ea 90 00 22 84 10 e2 23 4d 0d 34 d0 d8 10 c2 5a d4 4d 4d 5d 04 03 3a ba a6 61 30 db 48 4e 4f 25 da e3 83 80 81 0c 8f Data Ascii: 'uM1]!7a!G\B\|-$,1U4.ZBB}9cGkdG?gvn\N6c_4 ]m&f9@&['db"#M\|{"~@T!kznnIvtc2bHI7OY[vdZNB(',b"#M4ZMM]:a0HNO%
2024-04-25 18:47:59 UTC	10674	IN	Data Raw: bf c3 c1 99 5f e7 5f ff d2 23 a4 2b 27 f9 e2 7f fa df f8 e6 59 17 e5 04 3c f1 d4 cb 9c ff cc 17 f8 c8 2e 97 a7 ff ea cf f9 ea e1 39 b4 55 61 f1 eb fb 19 f9 dc ff c8 2f 0c 1f e7 1b 7f f6 12 1b 3f d3 cd a6 47 15 fb bf f2 87 7c 75 6e 98 5f ff 8d 7f c6 83 d9 b3 fc fd ef fc ef 9c fb c4 9f f0 c0 70 98 57 fe fe 3f f3 87 df 38 4e c3 b1 08 be ff 0c 27 3e f6 0a 46 5b 0a 00 00 20 00 49 44 41 54 79 fe e9 a7 ee a5 72 e4 fb fc d1 7f f8 1a a5 3d bb d8 b6 32 42 ea 23 ff 8a 0e a3 c2 13 7f fe bf f2 8d d3 0d 06 76 ee a5 c3 7d 85 73 f3 7d bc 57 19 af 05 0b 33 4c a2 6f 2b 9d b7 ef a6 b0 6c a3 3b b7 13 ed e9 23 11 b3 25 7c 08 21 6e 1a 12 40 84 10 42 dc 32 82 c0 c7 f5 3c 40 33 7f f2 09 9e 3a b9 4c cf ee 8f b0 b1 3d c1 c2 c0 bd fc c2 5d b7 73 e7 ce 28 cf fd c1 bf e5 bf 3e f3 0c Data Ascii: __#+'Y<.9Ua/?G\|un_pW?8N'>F[ IDATyr=2B#v}s}W3Lo+l;#%\|!n@B2<@3:L=]s(>
2024-04-25 18:47:59 UTC	11860	IN	Data Raw: 31 ba 58 a5 23 ee 70 cf 40 9a e9 95 3a c7 66 4b 34 bc 00 d3 68 2d 9a 57 ac 7b 44 6c 83 a5 e5 26 11 c7 64 df 50 86 44 d8 24 57 6a 30 53 a8 32 5d 68 30 5f 6a 60 28 83 88 65 22 53 ea 08 71 e3 28 56 03 9e 3c 5a e3 fc 82 2b 95 49 71 ed 5c 3c dc 55 5d 74 db 95 7c 2b 5e e9 f6 84 f8 49 29 38 35 d9 e4 9b cf 57 f8 67 1f 4b 5d 56 53 37 de e8 65 71 d3 d3 ba 15 42 32 51 9b e1 8e 28 7b fa 13 ec e9 4b 92 0c db ad 6e 53 11 9b 64 c8 c2 32 15 8e 69 30 90 89 52 6c b8 8c 2e d5 b0 ad 56 35 62 74 a9 42 ae 52 a7 58 f7 28 37 7d 2a 4d 1f d3 50 f4 a4 23 24 c2 16 6d 51 9b de 54 98 95 aa cb f9 e5 3a c9 90 4d 3a ea ac 6f df 34 14 5d 49 87 ed dd 09 f6 6e 48 d3 9f 8a e0 f9 9a f6 68 88 74 c4 a6 3b 19 c2 54 8a 62 dd 03 56 bb 38 1a 8a 00 28 35 3c d2 51 8b ae a4 43 d4 31 c9 26 43 a4 63 0e Data Ascii: 1X#p@:fK4h-W{Dl&dPD$Wj0S2]h0_j`(e"Sq(V<Z+Iq\<U]t\|+^I)85WgK]VS7eqB2Q({KnSd2i0Rl.V5btBRX(7}*MP#$mQT:M:o4]InHht;TbV8(5<QC1&Cc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49920	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	913	OUT	GET /en-us/sharefile/media/sf-win-access-dashboard-rf.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:59 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 21734 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:59 GMT Etag: "958df485e35916b37c8f19018db85c68-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BZ84QR9QBR5D6868MPNT X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:59 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7c 00 00 01 cc 08 06 00 00 00 d6 2d 13 bf 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 06 1c 15 05 13 b1 3e 48 1d 00 00 20 00 49 44 41 54 78 9c ec dd 7d 7c 53 e5 c1 3f fe 4f 81 22 4f 02 2a 95 b4 2a 96 62 a2 b4 95 06 c6 74 53 d7 de ad 34 89 0f 68 d4 aa 1b d1 6c df df 94 04 dd 3a 69 50 99 d3 df 2f db fc 6e 53 9b ce bb 3e 34 11 6f 37 33 83 9b eb 2d 71 6c b3 49 b1 ac f5 69 8a 93 a0 b4 9b 89 94 4e 94 a6 56 05 1f b0 20 0f fd fd d1 9d e3 39 79 6e 9b 34 b5 e7 f3 7e bd 78 bd 48 ce 39 d7 b9 ce 49 fa b9 ae 73 5d 27 49 ce ea d5 ab 07 41 44 44 13 de 14 00 70 b9 5c d9 ae 07 11 11 65 90 c5 62 c1 a4 6c 57 82 88 88 c6 06 03 9f 88 48 21 18 f8 44 44 0a c1 c0 27 22 52 08 Data Ascii: PNGIHDR\|-pHYs+tIME>H IDATx}\|S?O"O**btS4hl:iP/nS>4o73-qlIiNV 9yn4~xH9Is]'IADDp\eblWH!DD'"R
2024-04-25 18:47:59 UTC	2372	IN	Data Raw: d6 88 eb f2 c2 0b 2f e0 ec b3 cf 86 d3 e9 c4 6d b7 dd 86 17 5e 78 01 df fa d6 b7 46 5c 1e 51 36 34 3e ff 1a cc cb 4b b1 e1 6a 43 cc e5 ba 47 9e c2 dd 5b 5e c6 ca 12 35 0a 4f 98 33 c6 b5 fb 6a c8 58 e0 b7 ff ed 6f b8 fb e7 3f c7 f4 e9 d3 f1 cb 5f fe 12 d7 7e fb db 98 3c 79 32 00 e0 f0 e1 c3 f8 fb df ff 8e ad 6d 6d 38 e1 84 13 32 55 85 ac fa fc c0 01 00 c0 1f 9b 9b 71 ea a9 a7 c6 5c 67 ca e4 c9 28 38 e5 14 00 c0 49 f3 e6 61 c9 92 25 98 35 6b d6 a8 c2 3d 96 9c 9c 1c 0c 0e 0e 42 a3 56 23 27 27 07 93 26 71 ae 9e be 9a 16 cc 9d 1d 77 d9 86 ab f5 a8 76 fd 01 3a d7 53 b8 fe 6b 25 29 97 59 78 e2 9c 61 ad ff 55 96 b1 c0 7f f4 d1 47 31 38 38 88 5f dd 73 0f ae ba ea 2a d9 b2 dc dc 5c 7c eb 5b df 52 44 2f b3 a0 a0 00 0b 16 2c 48 ba de 71 c7 1d 87 bf fc f5 af 19 a9 c3 Data Ascii: /m^xF\Q64>KjCG[^5O3jXo?_~<y2mm82Uq\g(8Ia%5k=BV#''&qwv:Sk%)YxaUG188_s*\\|[RD/,Hq
2024-04-25 18:47:59 UTC	538	IN	Data Raw: 4f 3e 19 4b e2 8c c5 4f 9b 3e 1d cb 96 2d c3 59 8b 17 cb 9e 5f b0 60 01 b6 6e dd 0a b7 db 0d bf df 8f 70 6f 2f f6 ef df 8f b9 73 e7 e2 ac b3 ce c2 f2 e5 cb 71 e9 ca 95 28 28 28 90 6d 77 de 79 e7 e1 dd 77 df 4d 78 3b e8 f5 d7 5f 8f a5 4b 97 e2 c1 07 1e 40 57 57 17 ba ba ba 70 f2 c9 27 a3 bc a2 02 d5 2b 56 e0 e2 4b 2e 89 da e6 82 0b 2e c0 a1 2f be 88 da 5f 22 e7 9d 7f 3e 66 4b 7e e9 4a fa fc cc 18 9f 3a 5e be 7c 39 fe d6 de 0e 47 7d 3d 5e 7f fd 75 fc eb ad b7 30 67 f6 6c 2c 29 2b 43 79 79 39 2e b9 e4 12 86 3d 4d 18 d7 7d ad 04 0f be f8 0f b8 5f db 99 f6 b2 7f 78 c1 b2 b4 97 39 1e e5 ac 5e bd 7a d0 e5 72 65 bb 1e 44 44 09 0d 0e 0e c2 fd da 4e fc 7b 5f 7a 7b f9 4b 0a f2 70 79 89 7a 5c fd 88 39 90 fe df 06 b1 58 2c d9 bd 2d 93 88 28 55 39 39 39 30 2f 2f cd 58 Data Ascii: O>KO>-Y_`npo/sq(((mwywMx;_K@WWp'+VK../_">fK~J:^\|9G}=^u0gl,)+Cyy9.=M}_x9^zreDDN{_z{Kpyz\9X,-(U9990//X
2024-04-25 18:47:59 UTC	4744	IN	Data Raw: 00 70 3a 9d 28 2f 2f 47 38 1c 1e 8b 5d c7 e4 74 3a 11 0a 85 e0 70 38 12 ae d7 d1 d1 01 8d 46 23 7b 2e d9 36 e3 81 d5 6a c5 8e 1d 3b 10 0c 06 31 7b f6 6c 00 c0 33 cf 3c 03 8d 46 83 a7 9f 7e 1a e7 9d 77 5e 96 6b 48 44 d9 30 e6 43 3a 42 f0 8f c7 5e f1 44 f0 cc 33 cf 60 c7 8e 1d f0 f9 7c 62 d8 03 c0 e5 97 5f 0e 97 cb 85 07 1e 78 20 8b b5 23 a2 6c 1a 17 63 f8 06 83 41 1c 7a 90 0e 97 00 80 df ef 97 0d 4d f8 fd 7e 71 99 f4 79 a7 d3 29 2b 2f 72 3b a1 81 b1 d9 6c b0 db ed f0 78 3c 51 e5 a5 c2 e9 74 46 d5 51 4a 3a 84 65 30 18 64 cb e2 d5 37 9d 9e 7d f6 59 fc f0 87 3f 94 85 bd e0 eb 5f ff 3a 02 81 00 7a 7b 7b b1 77 ef 5e 2c 5e bc 18 bd bd bd e2 f2 67 9e 79 06 df f9 ce 77 64 db 9c 7f fe f9 62 9d 7f f6 b3 9f 89 cf 5b ad 56 6c dc b8 51 7c 1c ab 3c ab d5 2a 6e 1b 59 2e Data Ascii: p:(//G8]t:p8F#{.6j;1{l3<F~w^kHD0C:B^D3`\|b_x #lcAzM~qy)+/r;lx<QtFQJ:e0d7}Y?_:z{{w^,^gywdb[VlQ\|<*nY.
2024-04-25 18:47:59 UTC	5930	IN	Data Raw: d6 26 6d a5 f6 ef df 87 a7 7e bf 11 1f 7e f8 01 8e 3f 7e 36 ae be 66 15 66 cf 9e 93 b1 fd 39 1c 0e 71 9c 3b 99 c8 09 cb 64 a1 3f dc 49 c8 44 62 85 77 2c 55 55 55 a8 ad ad 45 51 51 11 4c 26 93 6c 99 4a a5 4a 5a 27 a1 17 1d d9 fb 05 52 0f c3 c2 c2 c2 a8 e7 6c 36 1b f4 7a 7d d4 95 51 51 51 91 ac 21 8c 14 b9 2c 14 0a c9 1a 81 58 c7 e4 f7 fb 11 08 04 c4 e1 16 e9 ba c9 26 9c 23 af 9c e2 35 5e a9 90 ce 53 00 88 79 4e 89 b2 65 5c f4 f0 ff d6 f6 1c ba bb df c6 71 d3 a6 e1 da 6f 9b b0 b8 b8 04 39 39 39 69 2b df ef f7 cb 7a af c2 78 73 32 91 63 db c9 c6 e3 4d 26 53 da 26 e8 aa aa aa 60 b7 db 53 6a 94 84 fa f9 7c 3e 71 d2 14 18 0a dc 78 43 0a 91 c3 32 76 bb 1d 45 45 45 e2 76 c2 72 a3 d1 28 1b a3 6e 68 68 88 39 64 04 c8 83 33 d6 f0 86 40 98 40 15 d6 11 c2 5a a7 d3 89 Data Ascii: &m~~?~6ff9q;d?IDbw,UUUEQQL&lJJZ'Rl6z}QQQ!,X&#5^SyNe\qo999i+zxs2cM&S&`Sj\|>qxC2vEEEvr(nhh9d3@@Z
2024-04-25 18:47:59 UTC	7116	IN	Data Raw: 9f b4 1d 18 18 c0 9b 6f bc 01 00 98 3a 75 2a 4e 3d 6d 41 5a cb 17 c6 c9 e3 8d 57 0a 3d 30 8d 46 03 ad 56 8b 9e 9e 1e 00 43 bd 2f e1 8d 1b 6b 1c 52 da 3b b3 db ed b0 58 2c e2 63 a3 d1 28 eb 29 9b cd e6 84 3d 5e 29 a7 d3 09 93 c9 24 db b7 f4 0f 32 10 08 44 5d 79 08 7f 78 d2 3a 45 86 77 e4 30 80 5e af 17 97 b7 b5 b5 c1 68 34 42 a3 d1 20 10 08 20 18 0c 22 18 0c 46 5d 1d 49 d9 ed 76 71 99 5e af 47 67 67 67 cc fa 0b a1 2b 90 86 ae b0 dc 64 32 c1 ef f7 a3 b0 b0 50 1c 42 f1 fb fd 30 1a 8d e2 e3 9e 9e 1e 18 8d 46 00 40 49 49 89 ec fc 26 62 b5 5a c5 61 8b 92 92 12 f1 1c 04 02 01 d9 70 4b 49 49 89 d8 40 0a c3 1e a9 0e 97 e9 f5 7a 59 6f da e3 f1 c4 1c 1e 32 9b cd b2 f7 89 f4 ea 52 af d7 27 1d ef 6e 68 68 48 e9 4a c0 e9 74 a2 b3 b3 33 66 79 91 e1 9e 28 9c a5 af 9b c9 Data Ascii: o:u*N=mAZW=0FVC/kR;X,c()=^)$2D]yx:Ew0^h4B "F]Ivq^Gggg+d2PB0F@II&bZapKII@zYo2R'nhhHJt3fy(
2024-04-25 18:47:59 UTC	369	IN	Data Raw: 1f 57 af 5e cd 19 f8 2d 2d 2d a6 72 c8 dc dc 5c de 31 b9 dd 6e d3 2e 1d 59 96 b3 c6 09 20 ef 8c db e5 72 19 0b c3 7a fb cc 1a 7e e6 42 ac 24 49 59 df 7b 18 1e 1e ce da a5 93 ef 3c 11 51 75 d5 0c 0d 0d ed 58 55 cf de 4e 27 70 f9 b5 a7 51 83 9a 8a 6e 73 9c 79 a7 cd 72 ef c7 23 0a 49 92 10 0c 06 f7 b5 e8 4b 44 47 9f db ed b6 76 5b 66 5d ed ee cd cf b6 1f 7f 8c eb 77 7b 11 4f 46 4b 3e 36 b2 15 2e ab ec 43 44 44 85 59 be 0f df de e0 c0 cb 97 16 b0 83 1d fc 64 ea eb 78 69 e1 72 c1 e0 4f a5 13 98 5c 19 c5 95 3f 3f b3 7b 0f fd 4b 0b 0c 7b 22 a2 2a 38 90 27 5e e9 f7 b6 d7 9f 64 f5 d6 07 53 70 3c d9 81 33 4f b4 19 3b 78 52 e9 04 36 1e ad 22 fc 70 f7 7e 39 3f 68 73 17 7d 58 0a a1 a4 2f 80 11 11 01 07 f8 4c 5b fd 49 56 ca b9 6b 58 da bc 87 c5 cd 7b 78 5b 9b c2 76 fa Data Ascii: W^---r\1n.Y rz~B$IY{<QuXUN'pQnsyr#IKDGv[f]w{OFK>6.CDDYdxirO\??{K{"*8'^dSp<3O;xR6"p~9?hs}X/L[IVkX{x[v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49921	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	1186	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:47:59 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:47:59 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BZ9Z21EMCHW2HH3SCFV3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49922	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	916	OUT	GET /en-us/sharefile/media/sf-win-access-dashboard-queue.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:47:59 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 12137 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:47:59 GMT Etag: "03146d907d3df73a4ed1a6e6be49dd80-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9BZBAYPWJDD7J4RF3B4VB X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:47:59 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7c 00 00 01 cc 08 06 00 00 00 d6 2d 13 bf 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 06 1c 15 05 20 0e ee 29 0b 00 00 20 00 49 44 41 54 78 9c ed dd 79 7c 54 f5 bd ff f1 f7 4c 26 01 92 40 44 10 12 44 84 00 11 c5 40 a0 dc 6b 15 4c 15 31 80 62 a5 78 8b 42 6a ec fd 59 49 14 f1 16 d3 52 6b 6b 1f a9 52 17 6a 84 4b 41 93 6a eb 35 35 d2 d2 fe fc 89 da 4a 72 05 d9 5c b1 1a 16 2d 04 05 4a 11 13 40 b6 b0 65 99 99 df 1f 93 39 66 c8 64 9f 2d f9 be 9e 8f 07 4a ce fa 9d c9 f0 3e df f3 39 df 39 c7 36 67 ce 1c b7 00 00 5d 9e 43 92 0a 0b 0b c3 dd 0e 00 40 10 65 67 67 cb 1e ee 46 00 00 42 83 c0 07 00 43 10 f8 00 60 08 02 1f 00 0c 41 e0 03 80 21 08 7c 00 30 04 81 0f 00 Data Ascii: PNGIHDR\|-pHYs+tIME ) IDATxy\|TL&@DD@kL1bxBjYIRkkRjKAj55Jr\-J@e9fd-J>996g]C@eggFBC`A!\|0
2024-04-25 18:47:59 UTC	2372	IN	Data Raw: c3 d2 8d 1f 2a 6b dc e5 7a f6 bb 53 fc ce cf f8 ed 4a 2d 7c f3 5d dd 34 72 b8 06 f7 4e 08 71 eb 3a 87 a0 05 fe fa 75 eb b4 f0 91 47 d4 a3 47 0f 3d f6 d8 63 ba f5 b6 db 14 15 15 25 49 aa ad ad d5 7b ef bd a7 b7 d6 ae 55 ef de bd 83 d5 84 b0 3a 7d ea 94 24 e9 cf 7f f9 8b 06 0e 1c e8 77 19 47 54 94 06 5c 78 a1 24 a9 4f df be 1a 35 6a 94 e2 e3 e3 3b 14 ee fe d8 6c 36 b9 dd 6e a5 0c 1f 2e 9b cd 26 bb 9d 6b f5 e8 9c 06 9d d7 ab c9 79 cf 7e 77 b2 ae 2f fc 93 32 0a 57 ea f6 6f 8c 6c f5 36 07 9f 9f d0 a6 e5 3b b3 a0 05 fe 73 cf 3d 27 b7 db ad c7 9f 78 42 b7 dc 72 8b cf bc e8 e8 68 5d 7d f5 d5 46 f4 32 07 0c 18 a0 41 83 06 b5 b8 5c b7 6e dd f4 d7 bf fd 2d 28 6d 98 30 61 82 4a 4b 4b 35 24 39 59 ef be fb ae a6 4d 9b 16 94 fd 00 e1 74 71 ef 04 3d fb dd 29 f5 3d fd 77 Data Ascii: *kzSJ-\|]4rNq:uGG=c%I{U:}$wGT\x$O5j;l6n.&ky~w/2Wol6;s='xBrh]}F2A\n-(m0aJKK5$9YMtq=)=w
2024-04-25 18:47:59 UTC	538	IN	Data Raw: ce 3b 4f 23 46 8c d0 b8 71 e3 34 ed a6 9b 34 60 c0 00 9f f5 ae ba ea 2a ed df bf bf d9 e1 a0 b7 df 7e bb c6 8c 19 a3 65 bf f9 8d 3e fd f4 53 7d fa e9 a7 ea d7 af 9f d2 bf f5 2d 5d 3f 69 92 6e b8 f1 c6 46 eb 4c 98 30 41 d5 35 35 8d f6 d7 9c ab c6 8f 57 af 06 4f ba 6a 38 3d ce cf b7 8e c7 8d 1b a7 75 eb d7 2b ff c9 27 f5 d1 47 1f 69 c7 ce 9d 4a e8 d5 4b a3 46 8f 56 7a 7a ba 6e bc f1 46 c2 1e 5d c6 f7 be 31 52 cb de fe bb 8a 3e dc 1e f0 6d cf 9b 30 36 e0 db 8c 44 b6 39 73 e6 b8 0b 0b 0b c3 dd 0e 00 68 96 db ed 56 d1 87 db f5 cf a3 81 ed e5 8f 1a 70 81 6e 1e 39 3c a2 1e 62 2e 05 fe d9 20 d9 d9 d9 e1 1d 96 09 00 ad 65 b3 d9 94 35 ee f2 a0 6d bb 3d eb 04 2b f4 83 f5 20 28 02 1f 40 a7 11 69 4f c4 8b b4 f6 b4 84 a7 59 03 80 21 08 7c 00 30 04 81 0f 00 86 20 f0 01 Data Ascii: ;O#Fq44`*~e>S}-]?inFL0A55WOj8=u+'GiJKFVzznF]1R>m06D9shVpn9<b. e5m=+ (@iOY!\|0
2024-04-25 18:47:59 UTC	4744	IN	Data Raw: ae ba ea aa 30 b7 10 40 38 84 bc a4 e3 0d fe 48 ec 15 77 05 ab 56 ad d2 96 2d 5b 54 52 52 62 85 bd 24 dd 7c f3 cd 2a 2c 2c d4 6f 7e f3 9b 30 b6 0e 40 38 45 44 0d 7f ca 94 29 56 e9 a1 61 b9 44 92 4a 4b 4b 7d 4a 13 a5 a5 a5 d6 bc 86 d3 0b 0a 0a 7c b6 77 ee 7a de 03 4c 6e 6e ae f2 f2 f2 54 5c 5c dc 68 7b ad 51 50 50 d0 a8 8d 0d 35 2c 61 4d 99 32 c5 67 5e 53 ed 0d a4 37 de 78 43 f3 e6 cd f3 09 7b af 7f fb b7 7f 53 59 59 99 be fc f2 4b 1d 38 70 40 97 5e 7a a9 be fc f2 4b 6b fe aa 55 ab 34 6b d6 2c 9f 75 c6 8f 1f 6f b5 f9 e1 87 1f b6 a6 e7 e4 e4 e8 a5 97 5e b2 7e f6 b7 bd 9c 9c 1c 6b dd 73 b7 0b 20 f4 42 1e f8 b9 b9 b9 ca cc cc b4 4a 25 53 a6 4c d1 f4 e9 d3 55 51 51 a1 8a 8a 0a 7d f2 c9 27 56 08 97 96 96 2a 2b 2b cb 9a b7 61 c3 06 6b 3b 89 89 89 2a 2a 2a b2 e6 Data Ascii: 0@8HwV-[TRRb$\|,,o~0@8ED)VaDJKK}J\|wzLnnT\\h{QPP5,aM2g^S7xC{SYYK8p@^zKkU4k,uo^~ks BJ%SLUQQ}'V++ak;***
2024-04-25 18:47:59 UTC	3818	IN	Data Raw: b8 a4 6a b7 54 53 27 85 ab ea 63 97 e7 41 eb 3d ec f5 25 1b bb 67 1a a3 6e 10 e9 08 7c 44 34 9b 24 5b 83 5e 7f 37 b7 14 2f c9 19 ed e9 f1 3b 5d 52 8d 82 7b 00 70 d8 a4 e8 28 29 c6 e6 39 00 c5 d8 24 3b 21 8f 4e 88 c0 47 a7 e1 0d 7f c9 53 1f 8f b6 4b 6e b7 e4 96 e7 00 e0 72 7b 4a 40 4e 97 27 fc eb e4 99 ef 74 7f fd ff 73 35 0c ed 28 fb d7 e5 98 e8 fa 70 77 d4 ff df 56 bf ac 8d 72 0d 3a 31 02 1f 9d d6 b9 07 00 b7 3c 5f 68 72 ab fe 4f fd c1 40 e7 fc fd dc 6d 58 7f 6f 10 e6 de e0 27 e0 d1 95 10 f8 e8 32 1a 1e 00 ac 09 00 2c dc 1e 19 00 0c 41 e0 03 80 21 08 7c 00 30 04 81 0f 00 86 20 f0 01 c0 10 04 3e 00 18 82 c0 07 00 43 10 f8 00 60 08 02 1f 00 0c 41 e0 03 80 21 08 7c 00 30 04 81 0f 00 86 20 f0 01 c0 10 04 3e 00 18 82 c0 07 00 43 10 f8 00 60 08 02 1f 00 0c 41 Data Ascii: jTS'cA=%gn\|D4$[^7/;]R{p()9$;!NGSKnr{J@N'ts5(pwVr:1<_hrO@mXo'2,A!\|0 >C`A!\|0 >C`A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49923	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:47:59 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1qzsnxd28 X-Cloud-Trace-Context: 675edd5af23a9af3e75c3917fba02741 Date: Thu, 25 Apr 2024 18:47:59 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:47:59 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49924	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:47:59 UTC	945	OUT	GET /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
2024-04-25 18:48:00 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:00 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9BZSG4MN6RG7BBMKBRMZR Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49925	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:00 UTC	899	OUT	GET /en-us/sharefile/media/password-5-a.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7
2024-04-25 18:48:00 UTC	517	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 402 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 59073 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:00 GMT Etag: "d0db34ad7211a0ce2934afc4a01f4f62-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C00WKJAEE50VDWGPMGQC X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:00 UTC	669	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 02 08 08 06 00 00 00 96 f8 8a 87 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 05 10 0f 1e 26 52 7c a4 6a 00 00 20 00 49 44 41 54 78 9c ec dd 77 bc 5c 67 7d ef fb cf b3 ca f4 be bb b6 a4 ad de ab 65 cb 96 e5 2a 77 63 6c 30 c5 d8 04 42 80 04 48 38 81 13 4e 48 4e 6e 72 02 f7 26 27 e7 a6 dc 14 12 4a 20 40 30 dd 36 d8 60 8a bb 2d 37 59 b6 8a 2d ab 17 ab ef de a6 cf ac f2 dc 3f d6 d6 de 92 25 d9 26 68 6f 59 e6 f7 7e bd 86 97 99 bd 66 66 ad d1 bc d6 5a df e7 f7 14 a5 b5 d6 08 21 84 38 93 de a1 94 ba ef 6c ef c4 9b 9d ef fb ef 54 4a fd e8 6c ef 87 10 42 88 89 65 9c ed 1d 10 42 08 21 84 10 42 fc e6 90 00 22 84 10 42 08 21 84 98 30 12 40 84 10 42 08 21 Data Ascii: PNGIHDR pHYs+tIME&R\|j IDATxw\g}e*wcl0BH8NHNnr&'J @06`-7Y-?%&hoY~ffZ!8lTJlBeB!B"B!0@B!
2024-04-25 18:48:00 UTC	2372	IN	Data Raw: 3d ba 7d d5 39 f9 38 1d 4f d3 9b af 63 1a 8a 54 d4 64 a8 ec a1 d0 34 26 43 58 a6 42 03 75 c7 07 05 61 2b 78 ad a9 14 ab 66 a5 68 4e 87 98 d3 7a 72 a5 a9 e6 fa 18 4a 61 9b 63 fb 5d ae 7b f4 17 1c e2 11 8b 5c dc 62 a8 ec 32 5c 76 c9 c4 2d d2 d1 d7 fd e7 16 42 88 37 9d 75 db ab 7c e9 fe 3c 0d 29 83 bf fd 68 e3 e8 4d 78 cd d1 7c fb e1 02 4f 6f ad f2 89 b7 a7 58 b3 6c 7c 2b f2 67 cb cf d7 97 f8 cf 87 0a bc f7 b2 04 1f ba 36 85 21 19 44 08 71 8e 7b 43 77 a4 ae af c9 c6 6d ae 5a 90 63 52 26 a8 76 28 a5 d8 7a b8 c4 f3 af 14 b8 65 45 33 eb f6 0e f3 c3 75 3d 2c 99 1a a7 6b b8 ce 81 be 2a 1f 58 dd ca f5 4b 1a d8 76 a4 c4 0f 9f eb 21 5f 71 99 94 0d 71 e5 fc 1c cb 3b 12 18 86 a2 ee 69 be f2 d8 11 ca 75 9f cf de 38 95 b6 4c 18 80 6f 3d d5 c9 d3 bb f3 fc fe d5 93 e8 1c Data Ascii: =}98OcTd4&CXBua+xfhNzrJac]{\b2\v-B7u\|<)hMx\|OoXl\|+g6!Dq{CwmZcR&v(zeE3u=,k*XKv!_qq;iu8Lo=
2024-04-25 18:48:00 UTC	538	IN	Data Raw: 6d ea 5e 50 8a 3e f6 f9 8a 60 bb e0 bf d5 c8 45 2c 18 bf b2 62 5a 8a cf dd 3a 9d 6f ac ed a4 af e8 70 cf 0b bd 94 eb 1e 7f fc b6 a9 64 62 36 af 36 ba 8f 5b 06 c8 c6 fb 29 54 3d fe f0 ba c9 e4 46 b6 3d 76 9c 61 cb 24 1d b5 50 40 53 32 cd e4 5c 98 e6 54 08 df d7 f8 1a 52 31 8b 64 64 ec 6b 6f 4a d9 fc f9 2d d3 f8 b7 87 0f b3 a7 ab c2 cb 87 4b fc d9 5d 7b f9 eb f7 cc 60 7a 73 0c 75 5c 68 50 2a f8 9f b0 a5 98 db 16 a3 35 1d 62 41 7b 8c 4c cc c6 f5 34 5a 07 71 45 03 8d 09 7b 74 30 7b cd f5 df c8 3f b3 10 42 bc 69 79 23 a7 b1 4f dd 9a e6 b9 1d 55 fe fa fb 83 2c 9e 11 e2 d8 90 3d db 50 d4 5d cd 0f 1e 2f b2 fd a0 c3 c7 6f 4a b3 6c 56 88 2d fb ea fc cb bd c3 7c ed 17 79 56 2d 88 70 e1 82 28 cf bd 58 e1 ee a7 4a 5c be 24 ca be 4e 87 6a de e3 c7 4f 97 f9 e0 d5 49 5e Data Ascii: m^P>`E,bZ:opdb66[)T=F=va$P@S2\TR1ddkoJ-K]{`zsu\hP*5bA{L4ZqE{t0{?Biy#OU,=P]/oJlV-\|yV-p(XJ\$NjOI^
2024-04-25 18:48:00 UTC	4744	IN	Data Raw: 0f 90 89 59 dc bb a1 97 62 cd c3 32 15 ae e7 73 68 a0 8e e7 6b d6 2c c8 32 5c f1 f8 e1 73 3d fc 74 53 1f 37 2c 6d e0 92 39 a7 5e 6f e3 da 45 59 ee df d4 c7 4f 37 f5 33 bb 35 c6 95 f3 b2 a3 95 95 19 cd 31 94 86 6c dc 62 cd 82 2c 96 a9 70 3c 4d 3a 6a 06 b3 51 8d 4c a3 eb fb 1a cf 1f 0b 55 bd 85 3a 9d 43 35 96 75 24 98 dd 1a e3 99 dd c3 fc e2 c5 7e 1e de 3a c8 ef 34 44 4e e8 2e 75 ec d8 3b 87 6b dc f5 5c 0f be 86 a7 77 0f b3 e5 70 91 3b 56 b5 06 d5 8e ee 4a f0 ef f0 aa cf 11 42 88 73 9d a7 a1 a3 d9 e2 2f de 9f e5 f6 ff dd cd 3f dc 3d 84 d6 60 28 85 61 42 ad ae 39 d8 e3 e0 56 34 3f 7e aa c8 43 1b 0c f2 65 1f af ec 73 a0 c7 61 b0 e8 b1 72 5e 84 64 ce e2 67 4f 97 78 f7 25 71 86 4b 1e ab 96 c5 f8 d9 73 25 e6 4d b1 f1 35 ac 9c 73 ea eb dc fc a9 36 6b 96 c5 d8 ba Data Ascii: Yb2shk,2\s=tS7,m9^oEYO7351lb,p<M:jQLU:C5u$~:4DN.u;k\wp;VJBs/?=`(aB9V4?~Cesar^dgOx%qKs%M5s6k
2024-04-25 18:48:00 UTC	5930	IN	Data Raw: ea ae 0f 40 63 d2 66 de a4 38 e9 a8 39 da 40 34 58 72 d8 d7 53 19 7d ad 10 42 08 71 26 6d 79 a5 c6 8e 83 0e 5e 70 a9 0b 68 cd 8c 36 8b 77 5d 9a 60 66 db e9 2b 1f 43 45 9f e7 77 56 79 68 63 99 8d bb 6b 0c 97 fc d3 6e 1b b2 15 d7 ac 88 72 f3 aa 04 a1 90 0a 66 d5 02 30 15 b5 82 cf 33 5b 2b af f9 7a 21 de 8c 64 0c 88 38 e3 2a 75 8f c3 03 55 8a 35 0f d0 28 20 15 35 69 4e 8d 9d 8c f7 f5 54 d8 d9 59 a6 ee 05 2d 3c 5a 43 22 6a 72 fd 92 06 de 77 51 33 ad 99 30 dd c3 35 be f9 54 27 f7 6f ec a7 ee 69 0c 05 86 01 83 25 97 8d fb 0b dc b0 a4 81 49 d9 30 61 cb 60 4a 43 84 78 d8 1c 9d 77 bd 50 f3 38 d0 57 c5 f3 7d 2c 53 72 b6 10 42 88 33 6b fd ae 1a 87 7a 9d b1 27 34 28 43 71 de ec 10 d7 9c 17 3b ed eb 0e 74 3b 7c f9 67 79 ee 7f b6 c4 50 c9 a7 35 67 72 cb aa 38 bf 7d 4d Data Ascii: @cf89@4XrS}Bq&my^ph6w]`f+CEwVyhcknrf03[+z!d8*uU5( 5iNTY-<ZC"jrwQ305T'oi%I0a`JCxwP8W},SrB3kz'4(Cq;t;\|gyP5gr8}M
2024-04-25 18:48:00 UTC	7116	IN	Data Raw: e9 a1 50 28 30 38 38 48 c8 b6 49 a6 52 24 13 09 d2 99 0c e9 74 9a 74 3a fd 9a 37 89 5a 6b ba bb bb 39 70 e0 00 99 4c 86 69 d3 a6 11 0e 87 27 f0 48 de 3a 5c d7 a5 58 2c e2 ba ee af b4 a0 a1 d6 1a db b6 49 24 12 98 e6 af 3e 10 b0 5a ad b2 67 cf 1e 00 66 cd 9a 45 24 32 be 0b 49 d5 6a 35 06 fa fb 29 95 cb f8 be 4f 63 63 23 b9 5c 6e 5c 3f 53 08 21 44 a0 ad c1 e2 96 8b 2d 6e b9 38 4e b5 ae e9 1e 74 29 55 35 bd c3 1e d5 ba a6 31 6d 90 4b 9a b4 64 2d 62 61 49 1c e2 ad 4f 02 c8 04 a8 56 ab ec dc b9 93 27 d7 ae 65 dd ba 75 1c 3e 72 84 5a b5 4a bd 5e c7 30 0c 6c db c6 b6 6d 92 c9 24 73 e6 cc e1 fc 0b 2e 60 f9 f2 e5 74 74 74 10 8b c5 4e 7a bf 52 a9 c4 8f ee b9 87 1f fc e0 07 cc 9f 3f 9f 4f 7c e2 13 2c 5d b6 ec 2c 1c d9 b9 6d 70 70 90 27 1e 7f 9c 27 9f 7a 8a 52 a9 f4 Data Ascii: P(088HIR$tt:7Zk9pLi'H:\X,I$>ZgfE$2Ij5)Occ#\n\?S!D-n8Nt)U51mKd-baIOV'eu>rZJ^0lm$s.`tttNzR?O\|,],mpp''zR
2024-04-25 18:48:00 UTC	8302	IN	Data Raw: fd d6 d6 56 9a 9b 9b 47 f5 39 43 fb 24 a5 a5 91 99 99 79 c5 89 eb 70 75 01 6d b2 0c 05 90 da da 5a ce 9d 3b 37 aa 7d 0c 06 03 46 45 21 21 31 91 a4 51 96 a2 14 42 88 f1 62 b3 d9 b8 f5 d6 5b d9 b0 61 03 ed ed ed 54 57 57 53 55 55 45 7d 7d 3d ad ad ad 34 36 36 52 5b 5b 4b 5f 5f 1f 87 0f 1f e6 c4 89 13 1c 3c 78 90 47 1f 7d 94 9b 6e ba 69 cc 43 7a af 74 2d 37 99 4c 1f 98 cc ad aa 2a d1 68 94 c1 c1 41 02 81 40 bc 87 dd 6c 36 d3 d8 d8 88 df ef bf e2 0b b6 a1 55 c8 47 53 a9 ea d4 a9 53 d4 d7 d7 93 96 96 c6 f4 e9 d3 e3 f3 5b 86 6b b7 a2 28 58 2c 16 32 33 33 89 44 22 f1 97 80 23 b5 c1 6e b7 b3 7a f5 6a 0a 0a 0a e2 65 e6 87 33 34 97 71 e9 d2 a5 13 b6 e6 4a 67 67 27 8d 8d 8d 84 42 21 b2 b3 b3 71 b9 5c 23 9e 27 10 5f 43 c6 66 b3 e1 f7 fb 47 7d cf 13 d7 27 09 20 53 c8 Data Ascii: VG9C$ypumZ;7}FE!!1QBb[aTWWSUUE}}=466R[[K__<xG}niCzt-7L*hA@l6UGSS[k(X,233D"#nzje34qJgg'B!q\#'_CfG}' S
2024-04-25 18:48:00 UTC	6075	IN	Data Raw: a1 75 0f e0 4d cc c2 1c f6 31 18 ee c6 5d 90 21 37 61 21 c4 47 92 5c fb 84 10 42 7c a4 e9 b1 08 ad 2d 8d 24 2c ff 0c 8f dc 31 eb d2 0d 02 55 34 ab 09 e4 2e 5a 42 91 0b 42 f5 7d f8 dc 39 14 e4 a4 63 c6 47 e7 a0 13 6b a2 97 64 47 3f 67 76 1d e2 9d 86 6e 5c 4e 1b 36 63 14 5f 7f 98 e0 f4 34 1c d6 20 5d 6d 26 92 66 39 40 0d a0 0d 9a f0 26 5b 27 ff 64 85 10 62 0a 90 00 22 84 10 e2 23 4d d5 7c f8 7b 22 a4 cd 18 7e 40 54 ac af 0b cd 16 21 6b 7a 1a 00 03 fe 6e 8c 6e 17 49 c9 76 88 74 d2 63 32 62 48 49 c5 11 a8 e7 c5 37 4f a1 df fe 59 ee 5b 9d 0d d1 76 de da ba 95 d3 96 64 ec 5a 08 9f d1 4e 9a 0d 42 81 28 c1 c1 0c f2 13 27 f3 2c 85 10 62 ea 90 00 22 84 10 e2 23 4d 0d 34 d0 d8 10 c2 5a d4 4d 4d 5d 04 03 3a ba a6 61 30 db 48 4e 4f 25 da e3 83 80 81 0c 8f 0d d0 e8 ef Data Ascii: uM1]!7a!G\B\|-$,1U4.ZBB}9cGkdG?gvn\N6c_4 ]m&f9@&['db"#M\|{"~@T!kznnIvtc2bHI7OY[vdZNB(',b"#M4ZMM]:a0HNO%
2024-04-25 18:48:00 UTC	10674	IN	Data Raw: e4 8e 3b 76 93 b1 03 e6 a7 e6 99 6e a4 d9 b6 7d 03 19 c7 40 91 20 11 db 48 bf d9 49 26 2e f5 0f 21 c4 8d 49 02 88 10 42 88 77 34 ed d5 59 aa d4 d8 f2 e1 5f e1 57 df bd 19 53 81 d6 60 da 61 62 f1 08 7a f6 05 fe f6 2f be c3 ca f0 47 f8 a7 ff ee 71 9c ea 39 9e fc da d3 b8 8e 43 d3 f7 f0 b3 77 f1 8b bf b6 87 47 5e f8 22 7f fb 8f 7f ca 97 22 ff 86 5f da d7 85 1b 1e e2 c3 9f ff 4d 6e 7f f9 07 7c ef 87 df e5 1b df 6f e7 53 0f 0c e0 9b 0e cb e7 ce 10 8a c7 b0 77 ed 66 d3 8b af 30 96 3f c3 64 a2 93 cd 5b 37 10 2e 1e c2 ad d9 24 a3 89 d5 0f e9 1a 0b 53 b3 98 76 27 7e b3 81 5b e9 62 43 97 05 7e 99 95 52 01 37 16 a5 2d 11 6e 75 b7 d2 35 1a 7e 8a 54 47 07 89 eb fa aa 0a 21 c4 9b 93 31 20 42 08 21 de d1 7c 77 81 fc bc c1 60 ff 46 3a 32 6d b4 b5 b5 91 c9 b4 91 4a 44 b0 Data Ascii: ;vn}@ HI&.!IBw4Y_WS`abz/Gq9CwG^""_Mn\|oSwf0?d[7.$Sv'~[bC~R7-nu5~TG!1 B!\|w`F:2mJD
2024-04-25 18:48:00 UTC	11860	IN	Data Raw: ee f8 08 df bc be 80 1b 66 c4 b0 cf f3 a4 1e 0a 20 22 22 72 49 0a 05 0c ee be 32 41 55 89 c5 7f bc 92 e4 b5 77 fa d9 77 c8 1d e8 d3 7c e2 42 6f 22 22 9f 65 47 bb a9 ba 3e 18 30 6c 50 90 05 93 23 dc 7d 55 82 99 a3 c2 58 e7 b8 e6 c7 e9 28 80 88 88 c8 25 cb b6 0c 16 4c 8a 31 bc 26 c8 95 13 22 bc bc ba 9f e5 9b d2 ec 3c e0 80 e3 0f 0c 1a 51 10 11 91 cf 2a 1f f0 07 5a 87 47 0c 09 32 73 74 84 6b a6 44 99 33 36 cc a0 32 fb 82 7d 3d 2a 80 88 88 c8 25 cd 30 a0 a1 3a c0 e0 72 9b 39 a3 c3 bc d7 92 e5 9d 6d 19 36 b4 64 d9 b6 3f cb fe c3 1e dd 49 17 c7 b9 d8 25 15 11 c9 8f 60 10 8a 0b 2c 6a 4a 2c 1a aa 83 4c 68 08 32 a1 21 c4 d8 a1 41 6a cb 02 58 17 78 cc 9c 02 88 88 88 7c 26 04 6d 83 a6 c1 41 1a 6b 83 cc 9f 14 a1 bd d3 e5 50 8f 4b 77 9f 4f 3a eb e1 78 17 bb 84 22 22 Data Ascii: f ""rI2AUww\|Bo""eG>0lP#}UX(%L1&"<QZG2stkD362}=%0:r9m6d?I%`,jJ,Lh2!AjXx\|&mAkPKwO:x""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49926	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:00 UTC	1131	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/whats-new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:00 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:00 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C015JXJXDVDW4WQQ2KYW Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49927	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:00 UTC	931	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; GA1.3.831988832.1714070860; _gid=GA1.3.524000618.1714070860; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; _ga=GA1.1.1322026028.1714070856; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:01 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:48:01 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C0VMHGWSKK25H2N1J1DE Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49928	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:01 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070880641 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:01 UTC	986	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:48:01 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7aproq45h7ju X-Cloud-Trace-Context: 2ade7a35af60eec32ce0d35ab8deadd6 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CPfF0JmpwLjDkAEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49929	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:01 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=d124&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:01 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:01 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 7933995c46b01504206ecd6d3dfa5d10.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 09Ut9yyRosz6yL0JhBTaQTXjvYZLCb9_tryqPTfd0tB0cPM1IWaqjQ== Vary: Origin
2024-04-25 18:48:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49932	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:01 UTC	659	OUT	POST /api/v2/sendInsights?1714070880641 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1424 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 3548524663 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:01 UTC	1424	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:48:02 UTC	723	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:02 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: p48z3gqracf0 X-Cloud-Trace-Context: a5803bcd6f0320832c4e488ce1f51189 Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CK-snOngg9mBuwEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:02 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49933	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 71 74 49 4f 58 53 65 45 63 55 79 79 35 42 4f 51 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 35 36 32 35 39 63 36 33 66 36 62 37 65 31 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: qtIOXSeEcUyy5BOQ.1Context: 156259c63f6b7e14
2024-04-25 18:48:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-25 18:48:02 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 71 74 49 4f 58 53 65 45 63 55 79 79 35 42 4f 51 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 35 36 32 35 39 63 36 33 66 36 62 37 65 31 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 61 74 48 6d 42 69 45 6b 54 6b 76 39 78 7a 55 6a 37 47 35 62 58 6f 78 45 4f 50 44 7a 48 49 52 4f 2f 67 38 62 41 51 76 57 70 45 35 6d 45 6c 65 54 68 69 47 34 75 78 53 63 30 53 57 4c 57 77 4f 64 74 47 34 55 37 32 6c 6d 49 61 2b 45 67 50 63 2b 39 57 49 37 36 45 34 75 31 72 67 36 4a 45 36 49 66 34 39 44 4c 54 37 4a 47 71 69 61 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: qtIOXSeEcUyy5BOQ.2Context: 156259c63f6b7e14<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASatHmBiEkTkv9xzUj7G5bXoxEOPDzHIRO/g8bAQvWpE5mEleThiG4uxSc0SWLWwOdtG4U72lmIa+EgPc+9WI76E4u1rg6JE6If49DLT7JGqia
2024-04-25 18:48:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 71 74 49 4f 58 53 65 45 63 55 79 79 35 42 4f 51 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 35 36 32 35 39 63 36 33 66 36 62 37 65 31 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: qtIOXSeEcUyy5BOQ.3Context: 156259c63f6b7e14<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-25 18:48:02 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-25 18:48:02 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 51 34 7a 74 31 6c 42 2f 55 61 75 50 41 73 39 5a 4b 4b 69 5a 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: AQ4zt1lB/UauPAs9ZKKiZg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49936	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:02 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=d124&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:03 UTC	1482	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:01 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 79edbcc14c21322a469003752cc30af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: E8X_5dGuDsliWi1Ld6H4c3liaUdodq5FppJ6DYnPJPQaXPcxV9tl5w== Age: 2 Vary: Origin
2024-04-25 18:48:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49937	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:02 UTC	406	OUT	GET /api/v2/sendInsights?1714070880641 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:48:03 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:03 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 7aprxmhx45pa X-Cloud-Trace-Context: b58d30d8db47f044f5090c6054d11e28 Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:03 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49939	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:03 UTC	1192	OUT	GET /en-us/sharefile/getting-started HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:03 UTC	534	IN	HTTP/1.1 301 Moved Permanently Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 56 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/plain; charset=utf-8 Date: Thu, 25 Apr 2024 18:48:03 GMT Location: /en-us/sharefile/get-started/buy-now.html Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C31DPGCNJFH71EPHVVN3 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:03 UTC	56	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 67 65 74 2d 73 74 61 72 74 65 64 2f 62 75 79 2d 6e 6f 77 2e 68 74 6d 6c Data Ascii: Redirecting to /en-us/sharefile/get-started/buy-now.html

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49938	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:03 UTC	1201	OUT	GET /en-us/sharefile/get-started/buy-now.html HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:03 UTC	536	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 138941 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:48:03 GMT Etag: "c765fecd367ddadcb1a174e4fa3345b2-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C36JMP8JAV23Y7BVMSZQ X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:03 UTC	650	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:48:03 UTC	2372	IN	Data Raw: 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 74 78 5f 70 72 6f 64 75 63 74 22 20 63 6f 6e 74 65 6e 74 3d 22 73 68 61 72 65 66 69 6c 65 5f 6d 61 69 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 63 74 6f 62 65 72 20 31 38 2c 20 32 30 32 33 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 74 5f 66 6c 79 5f 70 72 6f 76 69 64 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 5f 63 6f Data Ascii: <meta name="ctx_product" content="sharefile_main"> <meta name="lastModified" content="October 18, 2023"><meta name="googlebot" content="noindex"><meta name="robots" content="noindex"><meta name="mt_fly_provider" content=""> <meta name="lang_co
2024-04-25 18:48:03 UTC	538	IN	Data Raw: 72 65 66 69 6e 65 22 20 76 61 6c 75 65 3d 22 52 65 66 69 6e 65 20 72 65 73 75 6c 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 6c 65 61 72 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 43 6c 65 61 72 20 41 6c 6c 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 69 74 72 69 78 5f 70 72 6f 5f 64 6f 63 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 50 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 22 20 76 61 6c 75 65 3d 22 54 72 79 20 61 20 64 69 66 66 65 72 65 6e 74 20 6f 72 20 6c 65 73 73 20 73 70 Data Ascii: refine" value="Refine results"><input type="hidden" id="search_clear_all" value="Clear All"><input type="hidden" id="search_citrix_pro_doc" value="Search Product documentation"><input type="hidden" id="search_query" value="Try a different or less sp
2024-04-25 18:48:03 UTC	4744	IN	Data Raw: 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 6e 6f 5f 72 65 73 75 6c 74 5f 74 65 63 68 5f 7a 6f 6e 65 22 20 76 61 6c 75 65 3d 22 4e 6f 20 72 65 73 75 6c 74 73 20 66 6f 75 6e 64 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 73 68 6f 77 5f 6d 6f 72 65 22 20 76 61 6c 75 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 69 6e 20 61 6c 6c 20 70 72 6f 64 75 63 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 Data Ascii: hidden" id="search_no_result_tech_zone" value="No results found in Tech Zone"><input type="hidden" id="search_show_more" value="Show more in Tech Zone"><input type="hidden" id="search_query_all" value="Search in all products"><input type="hidden" id
2024-04-25 18:48:03 UTC	5930	IN	Data Raw: 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 6e 67 20 61 63 74 69 76 65 20 6c 61 6e 67 2d 6d 6f 62 69 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 73 68 61 72 65 66 69 6c 65 2f 67 65 74 2d 73 74 61 72 74 65 64 2f 62 75 79 2d 6e 6f 77 2e 68 74 6d 6c 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </p> </div> </a> </li> <li class="lang active lang-mobile"> <a class="language-option mt-lang" href="/de-de/sharefile/get-started/buy-now.html?lang-switch=true">
2024-04-25 18:48:03 UTC	7116	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a> </p> </li> <li> <p>
2024-04-25 18:48:03 UTC	8302	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 6f 6e 66 69 67 75 72 65 2f 61 64 6d 69 6e 2d 73 65 74 74 69 6e 67 73 2f 63 6f 6e 6e 65 63 74 6f 72 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6e 65 63 74 6f 72 73 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <p> <a href='/en-us/sharefile/configure/admin-settings/connectors'> Connectors </a>
2024-04-25 18:48:03 UTC	6085	IN	Data Raw: 2d 6d 65 6e 75 2d 67 72 6f 75 70 2d 74 69 74 6c 65 27 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 61 70 70 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 65 46 69 6c 65 20 61 70 70 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 69 64 3d 22 63 74 78 2d 73 75 62 2d 6d 65 Data Ascii: -menu-group-title' href='/en-us/sharefile/sharefile-app'> ShareFile apps </a> </p> <ul id="ctx-sub-me
2024-04-25 18:48:03 UTC	10674	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 61 70 70 2f 73 68 61 72 65 66 69 6c 65 2d 77 65 62 2f 65 64 69 74 27 3e 0a 20 20 20 20 20 20 20 Data Ascii: </li> <li> <p> <a href='/en-us/sharefile/sharefile-app/sharefile-web/edit'>
2024-04-25 18:48:03 UTC	11860	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 70 70 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 6e 64 72 6f 69 64 2f 73 68 61 72 65 2d 66 69 6c 65 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 69 6e 67 20 66 69 6c 65 73 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a href='/en-us/sharefile/citrix-files-app/citrix-files-android/share-files'> Sharing files </a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49940	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:03 UTC	1165	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:04 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:04 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C3SXBNT07SJMX3BH91SR Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49941	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:04 UTC	1157	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:48:04 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:04 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C4E5P747NJ79J5YESRKF Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49942	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:04 UTC	1183	OUT	GET /en-us/sharefile/media/rb-get-started-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:05 UTC	522	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 110080 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:05 GMT Etag: "8969e78b38e29d17eb6d0d5a95e43fdc-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C4KFRJKMQD77DQGJFSKK X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:05 UTC	664	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 01 c0 08 06 00 00 00 40 b2 bb 64 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0a 13 2c 17 46 1a 8a 1f 00 00 20 00 49 44 41 54 78 9c ec 9d 79 78 14 55 f6 f7 bf 55 dd 9d ee ec 09 09 64 5f d8 45 51 56 51 10 47 19 05 15 f5 51 41 06 70 9f 41 96 71 19 d9 44 44 9d 51 09 f2 73 61 97 51 10 15 5f 45 91 65 54 54 04 41 70 00 47 14 23 3b 42 08 04 b2 07 92 10 c8 9e ee aa f3 fe d1 dd 45 77 52 95 74 25 9d 74 02 e7 f3 3c 3c 40 75 d5 bd a7 aa 6e dd 3a 75 ee 59 04 22 22 30 0c c3 30 0c c3 30 4c 1b c2 66 b3 a1 bc bc 1c 82 20 d4 bb 5f 48 48 88 20 b6 90 4c 0c c3 30 0c c3 30 0c e3 13 8c be 16 80 61 18 86 61 18 a6 b5 d3 90 15 91 69 79 ac 56 6b 9d 6d a2 28 42 96 e5 Data Ascii: PNGIHDR@dpHYs+tIME,F IDATxyxUUd_EQVQGQApAqDDQsaQ_EeTTApG#;BEwRt%t<<@un:uY""000Lf _HH L00aaiyVkm(B
2024-04-25 18:48:05 UTC	2372	IN	Data Raw: a6 25 b0 5a ad 98 36 6d 1a 86 0d 1b 76 59 2a bb 00 f0 cb 2f bf 60 ec d8 b1 18 39 72 24 72 73 73 5b b4 6f af 29 bc 36 9b 0d c5 c5 c5 9c aa 83 61 18 86 61 18 c6 85 b3 67 cf e2 81 07 1e c0 fc f9 f3 21 49 92 af c5 f1 39 5f 7d f5 15 ee b9 e7 1e 1c 39 72 a4 c5 fa f4 9a c2 fb c9 27 9f 60 d8 b0 61 38 7f fe bc b7 9a 64 18 86 61 18 86 69 d3 54 56 56 e2 81 07 1e c0 ba 75 eb 7c 2d 4a ab e2 b7 df 7e c3 1d 77 dc 81 53 a7 4e b5 48 7f 5e 51 78 8b 8a 8a 30 7d fa 74 0c 18 30 00 61 61 61 38 7e fc 38 b6 6e dd da a8 b6 ce 9f 3f 8f c2 c2 42 54 56 56 aa fe 5e 50 50 80 87 1e 7a 08 53 a7 4e 55 52 4d b4 65 aa aa aa f0 dd 77 df 29 5f 39 59 59 59 18 33 66 0c 66 cc 98 e1 63 c9 18 86 61 18 86 69 2a 33 67 ce 6c b4 4e 74 a9 93 99 99 89 bf fe f5 af 2d 92 95 a2 51 41 6b 85 85 85 58 be 7c Data Ascii: %Z6mvY/`9r$rss[o)6aag!I9_}9r'`a8daiTVVu\|-J~wSNH^Qx0}t0aaa8~8n?BTVV^PPzSNURMew)_9YYY3ffcai3glNt-QAkX\|
2024-04-25 18:48:05 UTC	538	IN	Data Raw: 80 7d 49 d6 df df 1f 27 4e 9c c0 91 23 47 f0 cd 37 df e0 f0 e1 c3 d8 bf 7f 3f ee bb ef 3e ec db b7 4f f1 07 26 22 4c 99 32 05 1b 37 6e c4 ad b7 de 8a dd bb 77 e3 d0 a1 43 38 70 e0 00 06 0f 1e 8c 09 13 26 40 92 24 44 44 44 00 b0 bb 22 98 4c 26 bc f5 d6 5b 98 3b 77 2e ee bd f7 5e cc 9f 3f 1f 63 c7 8e c5 6f bf fd 86 31 63 c6 e0 cc 99 33 58 b1 62 05 0e 1d 3a 84 c3 87 0f e3 d5 57 5f c5 f1 e3 c7 f1 d8 63 8f e1 ec d9 b3 6e e7 a6 95 45 c2 b9 ac ec 7a cd 42 42 42 34 af fb e4 c9 93 b1 7a f5 6a 8c 1a 35 0a fb f6 ed c3 c1 83 07 b1 65 cb 16 f4 ea d5 0b 0b 17 2e c4 fb ef bf af 7d d3 98 4b 02 3f 3f 3f 24 27 27 23 22 22 02 31 31 31 48 4e 4e 86 2c cb d8 b7 6f 1f 1e 7f fc 71 ec df bf 1f c5 c5 c5 98 3b 77 2e b6 6d db 86 9d 3b 77 62 d6 ac 59 a8 ae ae c6 96 2d 5b 30 7f fe 7c Data Ascii: }I'N#G7?>O&"L27nwC8p&@$DDD"L&[;w.^?co1c3Xb:W_cnEzBBB4zj5e.}K???$''#""111HNN,oq;w.m;wbY-[0\|
2024-04-25 18:48:05 UTC	4744	IN	Data Raw: 2e 5d 8a 55 ab 56 21 35 35 15 b3 67 cf c6 89 13 27 f0 e3 8f 3f a2 a2 a2 02 73 e6 cc c1 d2 a5 4b 71 e8 d0 21 bc f4 d2 4b c8 cd cd c5 c9 93 27 f1 f2 cb 2f e3 e0 c1 83 98 3d 7b 36 5e 79 e5 15 8f 65 0b 0c 0c 44 78 78 38 8c 46 23 c2 c2 c2 14 77 8b ea ea 6a bc f5 d6 5b 38 7a f4 28 7e fd f5 57 bc f3 ce 3b a8 a8 a8 c0 92 25 4b 70 e0 c0 01 ec dc b9 13 73 e6 cc 41 4d 4d 0d de 7b ef 3d 7c f2 c9 27 38 78 f0 20 66 cd 9a 85 82 82 02 ec dc b9 13 9b 37 6f 06 00 1c 3f 7e 1c 9f 7e fa 29 ca cb cb 31 6d da 34 fc e7 3f ff 41 69 69 29 36 6c d8 80 f9 f3 e7 e3 c8 91 23 78 f9 e5 97 91 9e 9e 8e 0d 1b 36 e0 8b 2f be 40 6e 6e 2e 16 2c 58 80 ec ec 6c fc f7 bf ff c5 aa 55 ab 90 93 93 83 17 5f 7c d1 6d b9 38 30 30 10 1b 36 6c 50 0d 96 5e b6 6c 19 0e 1d 3a d4 64 ab 1d d3 7a 11 04 01 01 Data Ascii: .]UV!55g'?sKq!K'/={6^yeDxx8F#wj[8z(~W;%KpsAMM{=\|'8x f7o?~~)1m4?Aii)6l#x6/@nn.,XlU_\|m8006lP^l:dz
2024-04-25 18:48:05 UTC	5930	IN	Data Raw: e2 17 7e d3 4d 37 a1 73 e7 ce c8 cc cc 44 df be 7d 61 b1 58 30 7c f8 70 5c 79 e5 95 c8 ca ca c2 d5 57 5f 8d b0 b0 30 a5 0a e5 a9 53 a7 70 e5 95 57 aa ce c5 ae d7 9b b9 7c f0 f3 f3 c3 94 29 53 90 95 95 05 59 96 e1 e7 e7 87 ae 5d bb 62 ea d4 a9 d8 b3 67 0f ba 77 ef 8e b8 b8 38 9c 38 71 02 83 06 0d 52 fc fc 5d 5d 62 82 82 82 f0 c8 23 8f c0 df df 1f 23 47 8e 54 8c 58 93 27 4f d6 95 97 da 60 30 20 30 30 50 d5 15 4c 0f 67 ce 9c 51 9e af 35 6b d6 60 fe fc f9 e8 d3 a7 0f 3e ff fc 73 14 17 17 e3 fc f9 f3 38 74 e8 10 ac 56 2b ca ca ca d0 bb 77 ef 3a fa cb 90 21 43 70 e8 d0 21 bc fb ee bb 78 f7 dd 77 f1 eb af bf e2 ce 3b ef 84 d5 6a 85 d5 6a c5 63 8f 3d 06 93 c9 84 27 9f 7c 12 cb 96 2d 83 c1 60 70 33 26 3a 7d ee 45 51 44 79 79 39 8e 1e 3d 8a 92 92 12 e4 e7 e7 e3 d1 Data Ascii: ~M7sD}aX0\|p\yW_0SpW\|)SY]bgw88qR]]b##GTX'O`0 00PLgQ5k`>s8tV+w:!Cp!xw;jjc='\|-`p3&:}EQDyy9=
2024-04-25 18:48:05 UTC	7116	IN	Data Raw: cf 51 89 9e a0 b5 54 dc dc 7d ba e5 eb 6e 81 db e4 ea 48 72 e9 29 1b ae 67 e4 cb 42 ac de 7b fe 0a 0b 8b 1c 56 59 87 75 36 33 5b b1 d4 16 e4 9f f1 86 b0 ba f1 33 fb 29 29 bc 62 e3 ec 4a 6d 6c 7c 0c 12 12 13 10 13 1f 5b 6f b1 05 86 61 18 46 1f ae ba 82 dd 9d b3 e5 fa 6e 03 0a 2f c3 30 6d 01 49 92 70 3a 33 4b f1 9f cd cb c9 43 a6 e2 7a 90 ed db 92 b8 6e 99 0e ec 25 71 63 e2 62 10 a5 51 12 97 61 18 86 b9 b4 d0 50 78 85 16 b1 0a 7a 4a f3 c9 e2 9d 4f 8b d6 74 ad 2e 07 3c af b4 a6 7d 7f f9 9e 79 8e eb b5 2a 39 57 62 57 68 b3 b2 1d 01 62 39 c8 cc cc 42 56 66 96 cf ac b4 06 83 41 b1 d2 26 24 da 15 da 84 c4 04 c5 b7 d6 d5 4a 4b 22 3f f3 0c c3 30 ba d0 31 e1 79 63 6e f4 34 49 9d de be 8c a2 4a 86 01 fb 22 a6 e7 75 d1 45 97 5e 5d a3 ce b5 5e 2e ce 85 51 f7 c5 52 f5 Data Ascii: QT}nHr)gB{VYu63[3))bJml\|[oaFn/0mIp:3KCzn%qcbQaPxzJOt.<}y*9WbWhb9BVfA&$JK"?01ycn4IJ"uE^]^.QR
2024-04-25 18:48:05 UTC	8302	IN	Data Raw: 7d c3 2f ce 90 35 09 2c 46 42 03 f0 da 11 82 5c 26 43 3e 97 ab 2e f6 a0 06 d0 a1 01 f3 bd e4 7b 02 ad 01 e0 e8 a3 8f 0e bc ba 4f 3d f5 14 2f bf fc 72 6c d9 05 0b 16 90 cd 66 69 6b 6b e3 d4 53 4f 05 86 0e 06 db b8 71 23 3f ff f9 cf 83 cf 5f fc e2 17 39 fe f8 e3 63 cb 8f 1d 3b 96 ef 7d ef 7b 81 d7 f3 89 27 9e e0 2f 7f f9 cb a0 7e bc fe fa eb 00 cc 9c 39 93 2b ae b8 22 b6 be 59 b3 66 f1 a5 2f 7d a9 6c 1f 01 7e f1 8b 5f b0 79 f3 66 c0 04 e3 5d 73 cd 35 65 cb 5f 7b ed b5 01 15 e1 d9 67 9f 0d 74 89 e3 70 f8 e1 87 f3 85 2f 7c 61 c8 7e f8 68 6c 6c e4 ea ab af 2e 32 74 c3 68 6b 6b e3 82 0b 2e 08 3e af 5d bb 76 8f b9 26 13 24 a8 04 d2 9f 69 0b 2f d5 22 aa 8e 72 f5 d4 a2 cd 5d 81 9d d7 ef dd 69 54 a2 b1 bb 9e e3 1d 89 d1 34 26 a6 7d 89 c8 59 c8 7e 8b 94 6f 10 ea f0 Data Ascii: }/5,FB\&C>.{O=/rlfikkSOq#?_9c;}{'/~9+"Yf/}l~_yf]s5e_{gtp/\|a~hll.2thkk.>]v&$i/"r]iT4&}Y~o
2024-04-25 18:48:05 UTC	3102	IN	Data Raw: 88 25 4b 96 d0 dd dd 4d 7b 7b 3b 47 1f 7d 34 6f 7f fb db 39 f3 cc 33 e9 e8 e8 18 56 dd 4f 3c f1 04 2f bc f0 02 00 b3 67 cf e6 c8 23 8f 2c 5b fe b5 d7 5e e3 be fb ee 63 d1 a2 45 bc f4 d2 4b f4 f5 f5 31 79 f2 64 8e 39 e6 18 e6 ce 9d cb e9 a7 9f 5e 64 7c 96 42 6b cd c2 85 0b 59 bd 7a 35 4d 4d 4d 9c 7b ee b9 d4 d5 d5 b1 76 ed 5a 7e f3 9b df f0 d8 63 8f f1 dc 73 cf e1 38 0e 07 1c 70 00 6f 7b db db 38 e3 8c 33 98 3d 7b f6 a0 ba 7a 7b 7b f9 c3 1f fe 40 7f 7f 3f cf 3d f7 5c b0 fd c1 07 1f c4 71 1c 00 0e 38 e0 00 4e 3a e9 a4 e1 0c 4d 82 04 09 6a 04 f1 fa e3 bf 09 6e f9 43 bd c5 c6 bf 01 14 2c fd 22 0a 40 35 4f ed 18 dd 35 3f d2 b9 14 55 bd 43 88 f0 b4 7e 75 9e da 70 e0 db 70 93 5d c4 ea b8 fa d3 e7 60 5c 5d 25 88 1b ef ea 29 0d d1 0f da 6a ea 19 5a 87 77 e8 48 74 Data Ascii: %KM{{;G}4o93VO</g#,[^cEK1yd9^d\|BkYz5MMM{vZ~cs8po{83={z{{@?=\q8N:MjnC,"@5O5?UC~upp]`\]%)jZwHt
2024-04-25 18:48:05 UTC	10674	IN	Data Raw: 6d 21 5d 85 72 14 ca 02 5c 8d 72 15 42 0a 2c 4b e0 3a 16 ae 23 71 84 f2 e8 26 0a c7 71 d0 5e 56 34 94 42 68 65 38 61 42 60 69 01 39 c9 8b 2b d7 d2 36 73 3c b3 4f 9b 49 be bf 0f 34 b8 d2 65 bf 63 9b 99 70 60 1b 2b 17 af e7 c5 a7 56 d1 fa ec 46 c6 1f 33 99 b6 37 8f a3 a9 39 8d 23 5c 72 f9 1c 38 02 2d 75 94 f2 e0 a8 c5 86 0d 1b e8 ee ee 06 a0 ad ad 6d bc 1a 93 4c 00 00 20 00 49 44 41 54 97 72 50 57 ad 5a 15 ac a7 52 29 9e 7e fa e9 8a 92 5d 84 65 cb 96 2e 5d ca c0 c0 40 ac 02 c4 b8 71 e3 aa ea d3 ae 9c 71 49 90 20 c1 f0 90 18 bc 09 12 d4 18 02 b0 85 60 c3 a6 6d 58 b2 9e fa 86 3a dc 7c 7f c5 82 0c 12 69 8c de d1 62 f1 46 40 ba 80 cc d1 34 a5 0e d1 a4 e8 5a d3 c7 d2 7f e5 68 dd d2 4a c7 84 7a 5a c7 42 2a 65 a3 64 58 88 c2 37 63 bd 4f 22 30 6b 83 63 15 96 2c 91 Data Ascii: m!]r\rB,K:#q&q^V4Bhe8aB`i9+6s<OI4ecp`+VF379#\r8-umL IDATrPWZR)~]e.]@qqI `mX:\|ibF@4ZhJzZB*edX7cO"0kc,
2024-04-25 18:48:05 UTC	11860	IN	Data Raw: ba 98 75 84 10 5c 71 c5 15 d6 fb 4f 3f fd 14 5d af 8f f5 bc 74 e9 52 72 73 73 01 53 0f 1b 49 c2 9c 70 e1 85 17 72 ec b1 c7 02 a6 a5 32 bc bd 53 ff e7 9d 77 5e 93 6d c6 c2 9a 35 6b 58 bd 7a 35 60 3a e1 5d 7f fd f5 4d 6e 73 fe f9 e7 5b d2 86 4d 9b 36 d9 6a 88 23 31 71 e2 44 5b 4d 75 18 69 69 69 f4 ee dd db 7a df 50 82 50 59 59 69 3d e8 28 8a c2 75 d7 5d 17 b3 3d 80 6b ae b9 86 07 1e 78 80 7f ff fb df 3c f8 e0 83 d6 e7 1f 7e f8 a1 45 d0 87 0e 1d 1a f3 01 24 8c ab ae ba ca 5a 55 f8 fc f3 cf a3 9c e5 bc 5e af b5 e2 b5 7e fd 7a 5b d9 4d 18 8a a2 f0 fa eb af b3 6c d9 b2 98 56 65 17 87 17 94 e8 3b 9d 59 c2 37 e0 86 25 51 d8 b5 91 14 87 35 c0 f6 ae ed 34 8e 58 a5 f1 ee ef 67 34 1e 77 38 10 93 2d 31 b1 81 d3 be 24 d2 67 32 c6 9d 2c 48 6b 0e 22 4b b2 da 76 9a 27 a7 Data Ascii: u\qO?]tRrssSIpr2Sw^m5kXz5`:]Mns[M6j#1qD[MuiiizPPYYi=(u]=kx<~E$ZU^~z[MlVe;Y7%Q54Xg4w8-1$g2,Hk"Kv'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49944	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:04 UTC	1184	OUT	GET /en-us/sharefile/media/rb-plan-pricing-2.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:05 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 70843 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:05 GMT Etag: "e6135c8ed4697d7e3b5aed1dca1f71bd-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C4KFGXGZ7Z9XS7KT9DKX X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:05 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 01 a7 08 06 00 00 00 55 43 84 86 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0a 13 2e 25 bc fb b9 1d 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 14 d5 fa c0 f1 ef 6c df 24 a4 10 92 10 20 40 80 50 42 09 dd d0 a4 77 69 0a 28 62 45 e4 da af 5e b0 c0 cf 8b 78 2f 5e 0b f6 06 88 28 45 a5 48 ef d2 6b e8 2d b4 10 4a 20 21 90 90 de b6 ef ce ef 8f 84 48 80 50 14 45 e2 fb f1 91 87 67 67 e6 cc 99 33 b3 cb bb 67 cf 79 8f a2 aa aa 8a 10 42 08 21 84 10 77 29 ab d5 8a c3 e1 40 51 94 6b 6e d7 fc c9 f5 11 42 08 21 84 10 e2 4f 25 01 af 10 42 08 21 84 28 53 14 45 29 d1 db 2b 01 af 10 42 08 21 84 28 33 34 1a 0d 6e b7 1b 8f c7 83 46 53 18 ea 4a c0 2b 84 10 42 08 Data Ascii: PNGIHDRUCpHYs+tIME.% IDATxwxl$ @PBwi(bE^x/^(EHk-J !HPEgg3gyB!w)@QknB!O%B!(SE)+B!(34nFSJ+B
2024-04-25 18:48:05 UTC	2372	IN	Data Raw: cb 69 df be fd 0d f7 75 3a 9d c4 c5 c5 71 fe fc 79 f4 7a fd 55 db af 3b 86 f7 c7 1f 7f c4 60 30 e0 e7 e7 87 dd 6e 67 c4 88 11 8c 18 31 82 fb ef bf bf d4 80 37 3e 3e 9e e7 9f 7f 9e b8 b8 38 4c 26 13 4e a7 93 47 1f 7d 94 b7 df 7e 1b 8d 46 c3 8f 3f fe 88 97 97 d7 9f 12 f0 ee d8 b1 83 c7 1e 7b 0c 45 51 d0 68 34 a8 aa 8a c7 e3 a1 5c b9 72 4c 9c 38 91 17 5e 78 81 88 88 08 be f8 e2 0b 3e f8 e0 03 ea d6 ad 2b 01 af 10 42 08 21 ca 84 d7 5f 7f fd ae 0d 76 01 0a 0a 0a 18 3e 7c 38 7b f6 ec c1 cf cf ef 86 fb 6b 34 1a 74 3a dd 35 7b 78 af 19 f0 ae 5e bd 9a ac ac 2c 5a b7 6e cd d3 4f 3f 4d 5e 5e 1e 93 26 4d 62 d9 b2 65 ac 5a b5 8a f0 f0 70 0e 1f 3e 8c aa aa 74 e9 d2 85 26 4d 9a 00 a0 aa 2a a3 46 8d 22 3d 3d 9d b9 73 e7 52 a1 42 05 36 6e dc c8 88 11 23 d0 6a b5 8c 1b 37 Data Ascii: iu:qyzU;`0ng17>>8L&NG}~F?{EQh4\rL8^x>+B!_v>\|8{k4t:5{x^,ZnO?M^^&MbeZp>t&M*F"==sRB6n#j7
2024-04-25 18:48:05 UTC	538	IN	Data Raw: b4 eb d7 07 6d ea 21 96 2f ff 85 65 8b e6 e3 aa 12 4d a7 c6 f5 ae 39 0e cb a5 2f cf 90 ff 7c 4c 93 2a 5e 9c 8c 8d 25 fe d8 7e f6 25 86 f0 c4 eb 2f 31 34 a2 1a 49 7b 4e e1 31 e8 d0 e9 8d 78 fb 98 d1 bb b4 f8 06 86 d3 b2 51 34 b5 c3 83 d1 15 a4 b1 fb 78 39 86 8c f9 27 4f 34 8c 20 71 67 1c 41 4d fb f1 ec f3 c3 a9 1e 5e 0e ff 9a 2d 08 52 9d e4 a7 6b 09 31 28 80 42 b5 46 ad 68 d7 c0 97 95 0b 96 b0 76 d5 52 b6 9f b4 d2 f9 be 5e 94 37 95 36 04 ca 4d 76 66 2a 17 2f 5a 68 ff c8 a3 d4 0c 09 a4 65 ef fb 69 db b0 12 4e 4b 26 f1 c7 b6 d2 eb a1 61 3c f8 f4 7d 54 0b d4 61 b3 39 a9 54 bd 16 23 9e 1f c1 a3 15 83 d9 75 64 0d 7e 7d 87 f0 e2 cb 03 09 a9 68 2a f5 d6 68 3c 6e 6c 96 5c f6 2d f8 0a 47 70 04 0d 83 73 58 76 64 17 b9 05 6e ec 09 76 2a 45 b6 a5 9c 25 17 97 c5 0f 4f Data Ascii: m!/eM9/\|L^%~%/14I{N1xQ4x9'O4 qgAM^-Rk1(BFhvR^76Mvf/ZheiNK&a<}Ta9T#ud~}hh<nl\-GpsXvdnvE%O
2024-04-25 18:48:05 UTC	4744	IN	Data Raw: f3 67 cf 9e 3d ac 58 b1 82 b6 6d db 92 95 95 75 d5 f6 57 5e 79 85 cd 9b 37 f3 da 6b af 11 19 19 59 62 9b 8f 8f 0f af bf fe 3a 23 47 8e 64 eb d6 ad ac 5e bd 9a 2f bf fc 92 2d 5b b6 b0 7c f9 72 54 55 a5 41 83 06 25 86 10 04 06 06 a2 aa 2a a7 4f 9f a6 72 e5 ca 54 ae 5c b9 78 5b d7 ae 5d 09 0d 0d c5 e9 74 e2 f1 78 a8 58 b1 22 8f 3f fe 38 50 38 fc c1 e9 74 b2 6c d9 32 36 6e dc 88 cb e5 42 af d7 53 b1 62 45 32 32 32 08 0b 0b c3 c7 c7 a7 78 18 86 aa aa b8 dd 6e 42 43 43 01 ae 1a a6 a0 d7 eb 39 7c f8 30 0e 87 83 a7 9f 7e 1a 97 cb 85 a2 28 e4 e6 e6 e2 f1 78 b0 d9 6c 32 9e 57 08 00 7b 01 ce 8a 35 18 32 6c 28 85 23 4f 9d 38 2c b9 38 0b 54 bc 6a 55 64 c3 fa 69 9c b2 9c c3 b7 46 6b aa bb e2 58 bc 7a 11 47 0e ef e1 9e 3a 5d c9 3d b8 8d 15 1e 1d a7 4f 39 88 6e 12 c6 8e Data Ascii: g=XmuW^y7kYb:#Gd^/-[\|rTUA%*OrT\x[]txX"?8P8tl26nBSbE222xnBCC9\|0~(xl2W{52l(#O8,8TjUdiFkXzG:]=O9n
2024-04-25 18:48:05 UTC	5930	IN	Data Raw: 8b 23 d3 4f 32 67 d4 44 1a fc f2 5f 1a 04 5a 99 39 66 32 3b 0e 7b 08 b9 af 2f d1 4d ab e0 c0 71 3b 1a f8 1a 2d e8 42 6b f6 c2 e4 55 98 23 c1 6d 73 51 98 33 22 9b 99 7d 46 b2 2c d9 c8 9b cb df e2 fc cc ef f8 fe f3 0d 58 bc 83 e8 fc f4 20 86 8f 7e 84 e4 d5 13 78 73 c4 6a aa 75 e9 c2 bf a7 be 82 17 79 b8 50 d1 62 46 47 2e 3b 97 2d 67 db fc ad ec fe e5 10 59 05 6e 2a 35 89 a2 f5 fd 1d e8 f6 78 57 c2 fc f4 58 71 61 42 cf ae 0f 3e e6 c3 89 5b a9 db e7 1f fc df 97 bd d0 e2 c1 99 7a 84 f7 ee 79 93 f3 ed 3a f1 e9 0f af 70 7a e5 7c 16 4e 5e c5 de ad 09 78 4c be 34 ec de 96 76 43 3b d3 a1 53 03 b4 d8 2e eb 5d 56 30 61 22 eb ec 11 7e f9 6e 35 5b 17 6f 22 e1 74 1e fe 75 23 e8 f4 d4 20 86 3e d9 82 99 cf 8f 65 fd ea b3 bc b2 72 32 ad 23 03 b0 de 6a cf b9 10 42 08 51 46 Data Ascii: #O2gD_Z9f2;{/Mq;-BkU#msQ3"}F,X ~xsjuyPbFG.;-gYn*5xWXqaB>[zy:pz\|N^xL4vC;S.]V0a"~n5[o"tu# >er2#jBQF
2024-04-25 18:48:05 UTC	7116	IN	Data Raw: f4 6d a9 70 60 4f 36 55 ab d7 e4 42 ec 7a 96 7c b7 95 5c 97 8e a8 01 3d e9 de b9 09 09 ab 17 b3 f9 70 1e fe da 6c 8e c6 66 11 fd 8f 81 b4 6f 59 1d 17 4e f4 e8 39 bd eb 17 36 6d 4b 40 c9 5c 4f 7c df 06 04 15 1c 67 de 57 eb c9 b2 a8 d4 e9 d9 8d 3e 7d 5b 70 f6 97 25 ec 3d 96 49 66 f2 45 22 1e e8 47 bb e8 ea a8 28 e4 27 1e 62 de 4f 87 28 17 e0 21 6e e7 39 1a 3e d8 93 ca 9a 0b ac 99 bd 8b c0 36 1d 18 3c ac 23 46 fb 45 d6 7c b7 90 03 87 d2 f1 ae 54 83 de 2f f6 21 dc cf 9b cc b3 07 99 fe f9 72 1c de 95 d1 9c 4f c7 d4 c0 8c 11 2d 87 d6 2d 66 d9 9c 7d 78 ca 05 d3 f5 d9 81 dc 53 2b 80 2d cb e6 73 e2 9c 85 fc 14 0b f5 db 37 22 e5 60 22 26 7f 95 e3 5b 4f 10 da b6 03 03 1e 6f 83 4e 71 70 e5 40 19 1d 3a 2e 1c de c1 ca e9 5b c9 b2 ea 68 d4 a7 1b 1d bb 37 40 e7 48 63 e5 Data Ascii: mp`O6UBz\|\=plfoYN96mK@\O\|gW>}[p%=IfE"G('bO(!n9>6<#FE\|T/!rO--f}xS+-s7"`"&[OoNqp@:.[h7@Hc
2024-04-25 18:48:05 UTC	8302	IN	Data Raw: ad c2 6e 74 74 34 99 99 99 b8 5c 2e 2c cb 8a c8 b0 0b a0 aa 2a 8a a2 e0 f3 f9 7e f0 2d d7 42 88 c8 22 81 57 08 71 42 14 17 17 13 0c 06 4f bb db dd aa aa 92 9e 9e 8e ae eb ad 2d a0 91 4c 51 14 14 45 21 10 08 9c ec a2 08 21 44 2b 09 bc 42 88 ef 5d 4d 4d 0d 75 75 75 47 1d 76 1d 40 d5 5c 78 bd 5e bc 5e 0f ba a6 86 7f f9 5f 29 b8 3c 6e 74 4d c5 71 40 77 b9 70 e9 e1 9f bf 6e e1 aa a6 a1 e9 7a b8 c5 b9 79 7d ba ae a3 1e a7 c6 67 cb b2 48 48 48 20 3a 3a fa a8 c3 ae 03 b8 3c e1 87 db a2 a3 a2 d0 54 e5 ff df 74 c7 41 d5 74 3c 6e 17 df b0 93 fe cb fa 14 74 5d c7 e5 72 a1 6b da 31 2d a3 c5 e1 fd 7a 85 10 e2 54 20 0f ad 09 21 be 77 d5 d5 d5 d8 b6 7d d4 4f f1 6b aa 4a 53 4d 29 5b f6 57 60 38 3a 59 b9 1d 48 4f 8a 41 55 54 1c c7 c4 b2 00 c7 06 55 05 db 06 4c 4a 76 ee c7 Data Ascii: ntt4\.,*~-B"WqBO-LQE!!D+B]MMuuuGv@\x^^_)<ntMq@wpnzy}gHHH ::<TtAt<nt]rk1-zT !w}OkJSM)[W`8:YHOAUTULJv
2024-04-25 18:48:05 UTC	3101	IN	Data Raw: 6d 3f 88 4b 2f 39 07 ff b6 79 4c 9d f9 05 9e 2e e7 f1 db 9f ff 88 11 c3 fb b1 6f d9 27 bc fb c9 1c f6 fa 93 99 74 dd 55 f4 ea d1 87 9e 69 3e de 79 f3 7d f6 87 12 e9 33 60 08 03 86 f6 23 eb 34 be 17 b8 61 c3 06 34 4d a3 67 cf 9e ad e7 83 6f d2 32 dd 97 5f 7e 49 7e 7e 3e a9 a9 a9 df 7a 7d 15 25 7b 49 ef 32 8c fc dc 23 e7 b1 03 f5 94 37 ea 0c 1e d6 8f 98 98 74 86 f4 6e c7 82 a9 af 31 63 ee 97 a8 b9 c3 b9 fe d2 31 84 2a 8a 70 65 e6 33 a8 77 16 a1 c6 4a 6a 49 61 c4 80 9e 10 6a 64 7f 9d ca c0 01 5d 68 a8 6d 62 f4 f8 09 f4 c9 74 f1 c1 5b 53 a9 75 52 c9 ef 37 98 ee 7d f2 89 0f d6 91 d0 79 00 bd 3a 25 d3 54 73 00 23 2e 97 21 f9 1d b1 1a 6b 38 60 c6 32 72 58 ef ff 63 ef be e3 a4 aa ee ff 8f bf ee 9d de b6 57 b6 2f cb 56 ca d2 7b 15 04 54 b0 9b a8 31 6a 2c f9 26 31 Data Ascii: m?K/9yL.o'tUi>y}3`#4a4Mgo2_~I~~>z}%{I2#7tn1c1*pe3wJjIajd]hmbt[SuR7}y:%Ts#.!k8`2rXcW/V{T1j,&1
2024-04-25 18:48:05 UTC	10674	IN	Data Raw: 0e de d6 03 f8 27 ff 94 c7 7e 35 8e 9d 07 d6 a2 c4 0c 63 fa 8c 5c 00 9c 2a 33 d9 09 c1 ec 5f b3 14 5b 78 32 99 91 1e 36 e6 15 30 6b e2 08 f6 7d fa 38 f3 37 ec a7 e2 d0 e7 2c 5d bf 9b 9d 2b de 63 c7 a1 56 fa 8f 98 42 94 51 c1 de 52 19 d0 d7 44 10 fe 9b 28 78 03 46 85 a7 bb 9d dd 5b 37 b2 29 2f 9f e0 8c 34 32 27 66 60 77 b9 e9 17 9b 8a 29 2a 02 93 bb 23 af f1 e4 00 00 20 00 49 44 41 54 85 fc ce 06 b4 9e 06 0a 2a ca 01 70 74 75 22 05 25 12 1c e4 e4 91 c7 9f a2 2e 25 9b c4 10 0d 2e 7b cf f4 03 8f d7 4b 70 b8 89 f6 b2 12 5a 9b 9d 18 24 2f 4e a7 84 49 ed 27 ff b3 f7 68 77 06 11 6f d0 e3 f1 2a f8 5c 6e dc 5e 3f 12 32 78 9c 74 da 3c 8c c8 9d 8b 67 e7 72 5e 5e b9 1b 9f 72 e9 2e 17 1b 50 92 1a 97 bd 8e 9d 5f 7c ce 9a 7d c7 88 1a 30 89 11 fd e2 70 7a dd 24 f7 8b 24 Data Ascii: '~5c\3_[x260k}87,]+cVBQRD(xF[7)/42'f`w)# IDATptu"%.%.{KpZ$/NI'hwo\n^?2xt<gr^^r.P_\|}0pz$$
2024-04-25 18:48:05 UTC	11860	IN	Data Raw: 63 18 3f 69 06 4a bd 85 cf 97 af 01 59 83 39 38 08 b3 d9 8c 45 ad a6 b2 a1 80 ac 49 7f 62 7a 62 27 db 0a b6 51 51 b1 85 06 3f 98 b5 46 2c 66 3f ba f0 08 f4 6e 3b 0e e7 f9 3d 29 b3 ef f3 e3 74 aa 98 7a d5 1d fc fa e7 d3 00 a8 df b7 82 ad 35 f5 84 54 54 61 8e 94 b1 b5 36 70 e0 70 01 f8 ad 78 bc 31 98 2d 21 24 c7 86 12 6a b1 63 d4 58 30 99 14 8c 2a 19 29 32 82 c1 23 86 63 ea da c0 96 aa 06 fa d5 84 a3 09 f2 31 7c d4 1c 8c 3b d7 b3 6f 77 3e f6 c8 21 64 a6 c4 a0 48 32 7a ad 1a 39 28 9c cc 91 13 19 1f dd c4 a7 95 65 94 37 15 33 74 ce dd cc cc 0c a2 ad 68 33 0b 3e 3b 86 5a 63 24 28 c8 82 c9 64 c2 dc 69 65 7f b3 cc b8 9b 67 33 ea 58 2b 1f ef 6a 64 d7 9e 3a e4 74 35 d1 1a 2d 1a 8d 4c 68 44 3f 1c b6 2e 3c fe f3 7b 72 55 9f e7 07 9b a4 63 ea ed 3f e6 c1 cb c7 00 b0 Data Ascii: c?iJY98EIbzb'QQ?F,f?n;=)tz5TTa6ppx1-!$jcX0*)2#c1\|;ow>!dH2z9(e73th3>;Zc$(dieg3X+jd:t5-LhD?.<{rUc?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49945	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:04 UTC	1184	OUT	GET /en-us/sharefile/media/rb-plan-buy-now-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:05 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 15238 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:05 GMT Etag: "00f008cc5fcd4097a6d0aea452a0d99d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C4KSRTJEM3Y1588XW2F7 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:05 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 83 00 00 00 da 08 06 00 00 00 85 1c f1 59 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0a 13 37 0b fb 2d 1d ca 00 00 20 00 49 44 41 54 78 9c ed 9d 77 78 55 55 ba ff 3f bb 9d 9e 46 2a 29 24 90 50 42 40 08 1d e9 08 0a 62 d7 51 ec 8e de d1 eb 8c 33 f7 ce dc b9 53 75 46 47 67 bc 77 ae 33 3f c7 de c0 ee a8 a0 a2 28 08 04 e9 bd 27 21 04 02 21 09 49 48 af a7 ef f6 fb 23 90 11 09 25 92 40 c4 f3 79 9e 3c 1c d6 de 67 ed f7 9c fd 3d 6b ad fd ae 77 bd 4b 30 4d d3 24 44 08 10 c4 0b 6d 41 88 9e 43 48 0c 21 da 09 89 21 44 3b 21 31 84 68 47 fe 66 41 68 3c 79 71 23 08 c2 29 8f b5 8b e1 eb 22 38 fe 3a 24 8c 8b 83 e3 02 10 04 a1 fd 9e 76 24 0a 19 da 6e ba 61 18 08 82 Data Ascii: PNGIHDRYpHYs+tIME7- IDATxwxUU?F*)$PB@bQ3SuFGgw3?('!!IH#%@y<g=kwK0M$DmACH!!D;!1hGfAh<yq#)"8:$v$na
2024-04-25 18:48:05 UTC	2372	IN	Data Raw: d1 df f6 25 be cb 84 d0 d1 45 44 d0 cc b6 3f ab 04 9a d1 f6 fa 9b c8 22 60 76 7c ec 4c 28 22 e8 c6 bf ee 7b 0f e5 9c bb 09 49 b1 92 98 92 4a 64 64 24 00 57 de 72 0b ff 78 e7 19 f6 ef dd c5 87 9f ad a5 25 58 89 2d 63 16 ff 36 25 9c a7 fe fe 3c d5 6e 81 31 b3 7f c8 03 37 4f 64 fd c2 a7 c9 29 01 67 f3 61 0a 9a 23 b9 f7 f6 6b 28 5a ff 31 cb 76 57 73 cf 2f 9f e4 ca 94 7a 3e fc 6c 03 d7 4d 19 cc c2 15 79 3c f8 9f f7 13 81 ca fb cf fe 83 a8 49 37 63 16 7c c8 f6 1a 1b fa 91 3c 8e da 06 72 ef b5 13 d8 b0 f4 9f 6c 29 35 f9 e9 ef 1e 63 42 46 e4 a9 0d 17 04 90 75 5e fd f1 01 9c d7 26 71 db 35 e1 bc f9 e4 7e 2a d3 e3 f9 ed ad 51 e0 35 69 6f 26 6c 32 b5 db 2b d9 dc a8 70 f5 f8 28 50 8e 35 21 c6 b1 53 24 da 5e 0b c7 ca 05 da fe 82 26 d8 45 72 3f 2d c3 ec 1f c7 b0 41 36 Data Ascii: %ED?"`v\|L("{IJdd$Wrx%X-c6%<n17Od)ga#k(Z1vWs/z>lMy<I7c\|<rl)5cBFu^&q5~*Q5io&l2+p(P5!S$^&Er?-A6
2024-04-25 18:48:05 UTC	538	IN	Data Raw: 0e ee 41 76 8a 80 c0 55 53 ae c3 16 9d 80 96 12 cd b6 12 81 a9 33 87 d2 32 65 22 61 d6 b6 7a e3 fb 4d a1 df 10 3b 0f 5f 97 4d 56 aa c2 a0 b4 91 98 ce 14 12 9c d1 fc e0 df ee 63 c5 da 7c d2 47 4d 21 59 19 cb a6 3d 05 a4 f6 1e 86 cb e9 46 74 46 22 ea 1a ba 62 45 4c 4d 45 17 c7 82 24 e3 37 4c 8c 80 8d b8 18 81 f8 e8 4b 18 29 ba 90 b5 fe 48 d6 70 24 0c 46 0d f7 b0 e0 c5 17 59 bf bb 98 9b a7 27 76 c1 d7 fa dd e4 fb 37 37 d1 11 ee 1a 56 af dc 8c 3b 2a 85 cb 27 65 63 e9 09 8e c9 6e 20 34 37 71 36 b8 e2 98 7a ed 35 17 da 8a 0b ce f7 b7 83 0c 71 12 21 31 84 68 27 24 86 10 ed 84 c4 10 a2 9d 90 18 42 b4 13 12 43 88 76 42 62 08 d1 4e 48 0c 21 da 69 17 c3 e9 f6 48 0e 71 71 70 7c 67 e3 53 21 1e 3f a1 b4 b4 14 8b c5 42 74 74 f4 79 34 2f c4 f9 a4 a8 a8 88 ac ac ac f6 9d Data Ascii: AvUS32e"azM;_MVc\|GM!Y=FtF"bELME$7LK)Hp$FY'v77V;*'ecn 47q6z5q!1h'$BCvBbNH!iHqqp\|gS!?Btty4/
2024-04-25 18:48:05 UTC	4744	IN	Data Raw: b0 25 44 27 78 f5 d5 57 bb bc ce 73 1a 40 6a 9a 46 4e 4e 4e 57 d9 d2 35 a4 64 f2 9b 5f fd 9c b0 aa 72 64 bb c4 3f fe fa 47 2a bf dd 22 ee 1e cd 9e 3d 7b 38 74 e8 10 e9 e9 e9 5d 56 e7 39 89 c1 ef f7 53 50 50 d0 55 b6 74 0d bd fb 32 6b da 58 16 fc 78 11 03 6f bb 9f 5f fe f6 07 e4 6e f2 b3 7d 8f c1 9c 1f 0c a4 b6 74 29 8b ab a2 b9 32 26 82 37 3f f9 82 f4 1b ee e2 fe f1 99 68 75 47 79 e5 a5 37 e8 73 db 03 cc 49 b2 b1 7e cb 11 1c e2 0e aa fd 7d 70 19 b5 58 93 86 90 bb 72 11 07 8f 34 5c e8 4f 08 c0 d1 a3 47 39 7c f8 70 cf 11 83 20 08 b8 dd ee ae b2 a5 6b 08 f8 71 eb 32 03 46 0d 43 0a ec c1 32 e4 52 6e 75 89 f8 6a 75 66 5e e3 a2 64 7f 5f c6 f9 5d f8 8e 2c e0 4d 60 e8 6d 77 33 ba 68 2b c5 c9 97 f2 d0 fb bd 89 29 b3 b3 75 c3 61 1e fa fb ef a9 28 28 c2 65 88 44 1d Data Ascii: %D'xWs@jFNNNW5d_rd?G*"={8t]V9SPPUt2kXxo_n}t)2&7?huGy7sI~}pXr4\OG9\|p kq2FC2Rnujuf^d_],M`mw3h+)ua((eD
2024-04-25 18:48:05 UTC	5930	IN	Data Raw: 69 65 ca d5 37 60 af 58 cb d2 bc 26 06 5d 79 33 03 ea 76 b1 b5 b8 96 fa 84 de 28 92 04 9c 5d bf 3f 6b d6 2c e2 e3 e3 4f b8 f9 c7 c3 e9 7f f1 8b 5f 9c ed ad 3c 25 67 dd 32 98 a6 89 d5 6a 25 21 21 81 e5 cb 97 b3 7c f9 72 46 8f 1e 4d 6c 6c 2c ba ae 77 58 b5 22 04 d8 f1 c5 a7 6c ca db c7 17 8b 56 71 a8 a6 15 9b d2 d6 fc eb 86 49 ef be a3 99 71 c9 25 84 c7 f6 e6 c6 fb fe 93 c9 ee a3 7c fc d6 46 a2 2e 19 4d 3f 87 46 b3 c7 c0 5b 95 c7 8a c2 2a c6 4d 99 86 d1 54 ca 3b 6f bc c0 bb 4b 0e 30 6c c2 08 9c a2 0b 4f 55 03 5b 57 6d a4 3a 6a 16 4f fc fe 26 f4 d6 06 fc be 0c ee 7d e0 0e 12 02 7b c8 ad d2 c9 e8 13 8f 5c 17 20 fd d2 91 0c 1c d2 0f 49 f5 a3 28 22 ee e6 26 ac d6 4b 18 16 6e 63 5f 99 c0 e4 a9 7d d1 ea 4d b2 c6 0e c1 66 38 69 ae 6c c4 12 9d 41 a2 d5 c2 aa 35 fb Data Ascii: ie7`X&]y3v(]?k,O_<%g2j%!!\|rFMll,wX"lVqIq%\|F.M?F[*MT;oK0lOU[Wm:jO&}{\ I("&Knc_}Mf8ilA5
2024-04-25 18:48:05 UTC	989	IN	Data Raw: 11 43 63 58 b3 78 05 0d a6 8a d7 eb a7 b5 b9 01 4f f4 44 ee 9c 35 92 4b 46 65 11 1d 28 e3 ad 7f 3c c7 07 4b 56 e1 8c 89 a6 ec c0 06 ca 2b 4c ac d6 68 62 ed 02 55 8d 3e 7a 0d 8f c4 2a c5 61 68 d5 08 b2 8c bb b8 89 46 c9 a0 a9 bc 0a 67 df 61 a4 2a 8d a8 c9 49 84 95 95 23 27 0f 20 d9 5a c7 fc 3f fe 9e 35 85 a5 ac 2d ac a1 6f b8 8b 86 83 15 ec cb db 48 b3 b5 17 75 f5 f9 e4 ee 6b c1 5a 5a c4 21 45 22 35 ad 17 1b 57 ee 45 ea d3 8b aa 8f 17 f1 d5 ae 9d 2c db 5e 4c f6 c4 29 24 ba da d6 6b 7e 97 e9 32 77 34 c0 94 29 53 58 be 7c 39 8b 17 2f 66 e6 cc 99 88 a2 d8 71 a8 bc 20 10 f4 b6 62 4d bb 94 3f 3e fe 04 8e ba 35 bc b2 62 27 e9 83 2f e3 97 8f 3e c2 cf 1e b8 97 ec 94 5e 34 94 ed 27 00 e4 ad 5e c8 82 4d f9 f4 8a 8d c5 e5 74 61 97 4c 82 b1 7d b9 fd 3f 7e c7 8f 6e 9f Data Ascii: CcXxOD5KFe(<KV+LhbU>zahFgaI#' Z?5-oHukZZ!E"5WE,^L)$k~2w4)SX\|9/fq bM?>5b'/>^4'^MtaL}?~n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49946	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:04 UTC	1184	OUT	GET /en-us/sharefile/media/rb-plan-details-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:05 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 24472 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:05 GMT Etag: "c440c9b6fee597d8184b373b7137101b-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C4KT39MV1AQ1Q65FE4JR X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:05 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8d 00 00 00 de 08 06 00 00 00 c1 ca 5c 3c 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 03 1b 11 06 33 73 b2 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 1c d5 a1 f7 f1 ef d4 9d d9 a2 6a 4b b6 e4 a2 6a cb 72 ef c6 b8 17 dc c0 a6 83 29 b9 69 04 12 92 4b ca cd 9b dc 37 b9 09 29 f7 de 5c 42 00 27 a1 c5 40 20 06 6c 53 5c c0 b8 83 8d 7b ef dd 96 2d 5b 92 65 d9 ea 5a 6d 9b f6 fe 21 e3 00 21 f7 15 c8 60 48 ce e7 79 fc 3c 2b ef ee ec 99 99 dd f9 cd 9c 73 e6 1c c9 f3 3c 0f 41 10 04 41 68 05 f9 4a 17 40 10 04 41 f8 e2 10 a1 21 08 82 20 b4 9a 08 0d 41 10 04 a1 d5 3e 10 1a 56 75 29 f3 9f 7d 8e e7 9e 7b 8e b5 07 2b ff ce 5b e2 1c d9 b2 85 ca 46 eb 13 7e a4 4b c9 Data Ascii: PNGIHDR\<pHYs+tIME3s IDATxwxjKjr)iK7)\B'@ lS\{-[eZm!!`Hy<+s<AAhJ@A! A>Vu)}{+[F~K
2024-04-25 18:48:05 UTC	2372	IN	Data Raw: 9e 7d f1 79 4a 2b cf 61 14 8e e2 fe 99 d3 48 d1 a5 2b b6 b3 04 41 10 ae b4 4b 57 1a 69 45 93 98 ec 6f e2 b6 eb ef e1 9e 2f cd e4 e5 63 d0 b3 28 9b b2 93 07 38 50 5e 0f c0 c1 9d bb 39 71 ae 89 86 86 30 c9 57 4d e6 87 df fd 3a 3b e7 ce 67 fe cb 7f e2 f1 b5 55 7c e7 07 3f e3 ce 91 45 24 9a ab 79 7a f6 43 28 23 ee e6 87 3f b8 97 0e 4a 33 5b 56 2d e2 bc dc 8d af cd 9c c4 e9 dd ab 39 7e e2 38 f3 16 ae a5 df 3d f7 73 ff f8 4e cc fa f5 3c 52 86 8f 63 f0 e8 d1 8c 1e d6 91 13 ef 6e 62 f3 92 79 fc 65 c9 31 be f3 83 1f 32 39 2b cc ef 9e 58 46 55 d9 51 de d9 72 96 db 7f f8 43 86 2a 07 79 f2 cd f5 97 56 66 cd dc 87 d9 65 e7 f2 c3 1f 7e 93 74 af 1a 49 8e b2 ea 4f 7f 20 9e 73 23 ff f9 9f 3f e7 d8 c2 17 d9 5a 99 cc f4 b1 43 b8 fd ea de bc bb fa 6d 8a ae bf 8f 9b ae 1d c6 Data Ascii: }yJ+aH+AKWiEo/c(8P^9q0WM:;gU\|?E$yzC(#?J3[V-9~8=sN<Rcnbye129+XFUQrC*yVfe~tIO s#?ZCm
2024-04-25 18:48:05 UTC	538	IN	Data Raw: 66 5e 3e 45 3d 7a 92 93 e6 c7 75 5d 24 45 25 18 30 00 50 34 03 7f 28 48 bb 50 88 9d ef 2e e2 94 d5 81 1b a7 4d a2 7a f7 bb 6c 3a 6d d2 3e 90 20 bd 7d 2a 3b de dc c7 c9 88 9f 91 13 ef 60 ec a0 c1 e4 07 83 2c 7f e5 6d 1a 92 0b 18 73 cd 18 4c 2f 81 2b 6a a8 04 41 f8 27 72 59 ba dc 7a f1 08 64 77 e7 67 f7 4f 62 de ac 59 1c ac 06 9f 02 96 ed 22 6b 0a aa a6 41 1c 90 24 54 d5 20 01 d8 4a 08 5f 48 03 c2 d8 ae 82 aa 80 e6 4b c6 d0 00 cb c1 b6 3c 9a a2 31 62 4e 9c 8a d3 a5 d4 c9 e9 8c be 76 18 26 0a e0 e2 61 e1 01 78 2e ae 24 e1 33 34 00 14 35 80 86 1f cb 49 90 88 c7 b1 de 2b a3 eb 60 7b 2e 3a a0 a8 50 dd 68 33 e3 5b df e3 37 ff 76 1b 17 76 2e e4 e7 0f fc 98 03 95 36 71 64 ce 95 97 52 d1 14 60 ea b4 51 a4 05 c1 f3 59 b8 9e c7 5d df 7b 94 5f 7e 63 38 47 56 ce e1 ce Data Ascii: f^>E=zu]$E%0P4(HP.Mzl:m> }*;`,msL/+jA'rYzdwgObY"kA$T J_HK<1bNv&ax.$345I+`{.:Ph3[7vv.6qdR`QY]{_~c8GV
2024-04-25 18:48:05 UTC	4744	IN	Data Raw: 5d 90 ac 04 81 f4 6c 0a 3a a6 90 48 d8 74 ee 52 4c 4e 5e 7b 1a 4f ef 62 47 89 c7 cc fb ef 65 58 ff be a4 69 17 98 3b ff 4d 2a a5 74 be 74 d7 14 74 2b 41 72 56 16 79 59 21 1c c7 c5 b2 5d 72 7a f5 a7 bd 77 90 c5 2b b7 92 56 38 85 6f 5c 3f 02 3b d2 4c a0 43 3e 79 39 99 b8 56 1c 23 2d 9b 8e c1 30 2b 96 af a3 5d c1 60 c6 0d 1d 4a 7e 6e 2a cb 16 ce 65 eb ae 63 f4 9b f1 65 ae bd 66 08 85 e9 f5 cc 7b e9 0d 8e d7 49 dc 31 f3 16 52 35 0b 23 a9 03 85 59 ed a0 f9 1c cb 5f 5b c4 d6 43 e7 18 7f c7 57 18 9e 9f 4a 3c 61 7f 4a bb 46 10 04 e1 ca d3 75 fd 03 b9 20 79 17 fb 8d 46 22 11 6c db fe 78 a1 81 07 b2 86 df 6f 10 6b 6e c2 71 41 d1 4c 02 a6 46 24 dc 84 a4 9b 98 ba 8a eb 78 c8 9e 4b d4 b2 30 0c 85 e6 a6 28 8a cf 44 97 6c 9a 63 36 7e 7f 10 d7 8e a3 ea be 96 86 65 49 22 Data Ascii: ]l:HtRLN^{ObGeXi;Mttt+ArVyY!]rzw+V8o\?;LC>y9V#-0+]`J~necef{I1R5#Y_[CWJ<aJFu yF"lxoknqALF$xK0(Dlc6~eI"
2024-04-25 18:48:05 UTC	5930	IN	Data Raw: 82 a6 48 84 68 03 e4 0d ef c1 d2 77 17 71 f0 c4 49 5e 5f b6 91 fc dc 61 a4 ca 11 1a 9b 5b e6 39 49 c4 e2 c4 9a 6b 39 76 c2 a5 c7 d5 33 e8 9b 51 ce a2 3f 6f a2 a6 da c6 72 a2 c4 2d 07 a9 65 da 14 02 29 29 94 ee 3f c8 9e c3 25 ac 58 b5 85 f2 5a 99 fd db 36 70 48 ca e7 4b 5f bf 8b 9c bc 46 1a 94 6c ae ee 9b 4d 56 e1 48 66 8c ed 8e 44 2d ba df 24 da d8 84 a7 68 5c 38 b6 83 25 fb 62 cc bc fb ab 8c eb dd 83 ca 53 95 a0 28 a8 46 80 da 23 cb f9 d6 0f ff 95 6d c7 6b 38 7e b8 9a de 99 3a 09 54 62 e5 47 38 15 6c a2 43 76 47 5c db 06 3c 64 7c 48 21 99 0d db 77 73 72 ff 6a de d9 7e 18 37 56 cb 9a 45 9b c9 9a 74 17 77 dc 35 86 c6 78 39 5d 7b 0f a4 7b 07 3f 23 ae bd 95 de ed 5c 6c 3d 81 9c b0 08 47 ad 96 f9 60 00 9f ea 72 e0 48 39 1d fc ed 49 0f 4a 2d 6d 0c 12 78 6e 82 Data Ascii: HhwqI^_a[9Ik9v3Q?or-e))?%XZ6pHK_FlMVHfD-$h\8%bS(F#mk8~:TbG8lCvG\<d\|H!wsrj~7VEtw5x9]{{?#\l=G`rH9IJ-mxn
2024-04-25 18:48:05 UTC	7116	IN	Data Raw: e4 49 7c 59 43 f9 ca ad 53 48 cf cc a2 5b b6 41 69 79 84 f1 b7 dc c1 c8 7e b9 74 2c 28 24 ab 6b 27 fc 46 cb fd 16 8e eb 92 d1 ad 17 7d 0b 3b 51 5e dd c0 35 33 bf c4 c0 82 0c d2 32 d2 c9 cd ed 44 e7 82 3c b2 f2 0a e8 da 39 87 2e 9d 73 c8 c9 ce a6 b0 b0 2b 79 5d d3 09 fa 74 32 bb 16 d0 b1 63 07 d2 da a7 20 d9 1e 92 22 a1 25 a5 32 7e d8 d5 28 4e 0c 47 0d 31 6c 58 5f 22 15 25 d4 58 41 ae 9a 74 0d 5d d3 82 1c da bd 1d f2 47 70 dd b0 6e 64 14 0e a2 53 4a 82 13 67 2e d0 b5 cf 08 c6 f6 ed 49 5a e7 2e 74 1f 34 9c bc 0c 8f 23 47 cb e9 36 76 2a d3 86 17 12 8f 25 3e 8d ef 83 20 08 c2 07 e8 ba fe 81 5c 90 bc 8b 77 a8 45 22 11 6c db fe d8 a1 01 2d f5 fd 3e 23 88 4f 93 00 97 48 73 33 b6 2b 63 f8 0d ec 68 33 f6 ff 6b ef ce 03 a3 28 ef c7 8f bf e7 da 6b 36 27 49 48 42 c8 Data Ascii: I\|YCSH[Aiy~t,($k'F};Q^532D<9.s+y]t2c "%2~(NG1lX_"%XAt]GpndSJg.IZ.t4#G6v*%> \wE"l->#OHs3+ch3k(k6'IHB
2024-04-25 18:48:05 UTC	3107	IN	Data Raw: e1 70 30 6c d8 30 14 45 61 c5 8a 15 67 3b 64 e1 2c 69 d6 a4 b1 7a d1 22 e2 f2 07 d0 b3 7d 17 86 17 24 f3 de 82 c5 0d ff 3b b0 63 29 cf 4e 9d 47 46 bf ab 79 f0 be 31 ac 7e eb 7f f9 e7 92 62 70 c1 c7 ef 4d e5 9d d5 87 19 31 f6 a7 8c e9 1b cf 93 4f 3e c6 9e 20 04 0e 7f cd c6 c2 ed 1c 2b e7 53 7d 70 37 cb 0b 8b 51 b1 98 fe 97 ff 61 ce 0e f8 c9 ff 3c c2 a3 3f bf 91 25 33 ff cc 6b 6b 0e c3 49 d7 bc 6d 22 11 85 cc b6 19 ac 5f f5 2e eb f6 47 7f 41 16 af fa 88 55 7b ea c8 4e 3e 7f 3a 8b 7d 3e 1f 07 0e 1c a0 7d fb f6 a7 7c 8a df a2 45 0b e2 e3 e3 d9 b9 73 e7 0f 14 dd 99 11 36 42 b4 ee 31 90 36 8e fd 2c d9 70 18 80 ba 9d ab d9 2f a5 33 a0 20 97 60 c8 42 02 16 ff e3 09 9e 59 b0 93 d1 f7 dc c7 b8 b1 97 f2 c1 f3 bf e1 85 45 45 48 6e 9b 4f 3f 9a c8 9c 2f aa b9 76 ec bd Data Ascii: p0l0Eag;d,iz"}$;c)NGFy1~bpM1O> +S}p7Qa<?%3kkIm"_.GAU{N>:}>}\|Es6B16,p/3 `BYEEHnO?/v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49943	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:04 UTC	1189	OUT	GET /en-us/sharefile/media/rb-plan-account-info-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:05 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 31571 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:05 GMT Etag: "1ad7baf88e8266fcb68ddc78ee3184bb-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C4KY2MY6G6H5SEV84WAW X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:05 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c2 00 00 01 a0 08 06 00 00 00 39 24 67 14 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0a 14 06 34 8e 59 21 c0 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 15 55 de c7 f1 cf ad c9 bd e9 bd 43 0a 21 84 2e 55 20 82 10 8a 20 4d 54 ec 0d 17 5d 74 2d eb 62 dd c7 fe d8 96 75 75 7d b0 ec 0a 2e 56 b0 21 08 88 f4 5e a5 13 4a 20 21 90 04 48 ef b7 97 f3 fc 11 88 84 04 44 d7 7e 7f ef d7 8b 97 66 e6 cc cc 99 73 6f e6 3b 67 66 ce 44 a3 94 52 08 21 84 10 3e 4a fb 4b 57 40 08 21 84 f8 25 49 10 0a 21 84 f0 69 12 84 42 08 21 7c 9a 04 a1 10 42 08 9f 26 41 28 84 10 c2 a7 fd e0 20 f4 78 3c d8 ed f6 1f b3 2e 42 08 21 c4 cf ee 07 07 e1 cb 2f bf cc 8c 19 33 7e cc ba 00 e0 72 Data Ascii: PNGIHDR9$gpHYs+tIME4Y! IDATxw\|UC!.U MT]t-buu}.V!^J !HD~fso;gfDR!>JKW@!%I!iB!\|B&A( x<.B!/3~r
2024-04-25 18:48:05 UTC	2372	IN	Data Raw: 79 5e af 17 af d7 4b 9b 36 6d 88 8f 8f 67 ca 94 29 0c 1c 38 10 9d 4e 87 5e af c7 cf cf af 29 34 85 10 42 fc fa 9d 37 08 75 3a 1d ef bf ff 3e 5b b6 6c e1 e9 a7 9f 66 e9 d2 a5 3c ff fc f3 bc f4 d2 4b a4 a6 a6 f2 bf ff fb bf 58 2c 16 16 2c 58 c0 a2 45 8b 70 bb dd 58 ad 56 ae bf fe 7a 9e 78 e2 89 a6 f5 d8 ed 76 66 cc 98 41 b7 6e dd f8 f4 d3 4f 09 08 08 00 e0 d6 5b 6f 25 26 26 86 97 5e 7a 89 cf 3f ff 9c 29 53 a6 a0 d5 6a d1 e9 74 e8 74 3a 0a 0a 0a 58 b3 66 0d 21 21 21 64 65 65 11 15 15 d5 ac 7e 15 15 15 ac 5f bf 9e b2 b2 32 2e ba e8 22 7a f7 ee 4d 7d 7d 3d f5 f5 f5 c4 c7 c7 53 5d 5d 8d dd 6e 27 2e 2e 8e ba ba 3a f2 f3 f3 49 48 48 20 3a 3a 1a 80 9c 9c 1c b6 6c d9 82 c9 64 a2 7f ff fe 24 27 27 37 db 77 a3 d1 c8 d4 a9 53 19 3c 78 70 ab ed e3 72 b9 78 f8 e1 87 89 Data Ascii: y^K6mg)8N^)4B7u:>[lf<KX,,XEpXVzxvfAnO[o%&&^z?)Sjtt:Xf!!!dee~_2."zM}}=S]]n'..:IHH ::ld$''7wS<xprx
2024-04-25 18:48:05 UTC	538	IN	Data Raw: e1 49 bd a8 ae f1 60 28 b1 33 72 58 28 9d 12 1b 43 cf 1c d9 86 ee dd 0b 58 3c e7 63 d4 95 d7 d2 33 3d 9c 6f d6 7c c9 da 5c 07 e3 c6 64 11 78 9e 23 58 f2 25 57 d3 ff c0 7f 78 e5 d1 fb 71 1a 22 99 f4 a7 47 09 2e d9 c4 b2 35 39 dc 7a ef 54 3c 07 17 f0 c9 d6 55 5c d3 26 1e b3 d9 48 7d 45 19 0d 0d b1 e0 36 50 50 5c 40 fa c0 81 5c 36 ea 1a 92 db b5 23 77 c5 62 8e d6 5a 29 a8 a9 e4 b2 c9 0f 12 56 b8 81 af e6 ae c6 dc b6 01 8f 5f 30 93 ef ba 89 b9 ef ff 9b 4d fb 0b 29 f8 e6 30 81 5d 33 19 d0 a9 3b 11 e6 53 91 a7 0f a6 7b 8f be 7c 3e 7f 09 1f bb 3d dc 90 dd 9d ba bc 1d 7c f6 f5 06 52 b2 46 90 12 71 8e 10 02 30 f8 e1 2c 39 c8 bc 8f 3e a1 7d 18 ec db 9b 4b d7 a1 fd 39 59 fc 09 85 71 19 dc 71 d5 20 d6 fd f3 ef e4 6e df 46 69 fe 51 46 de f6 18 a9 7e 76 ac 75 47 58 76 Data Ascii: I`(3rX(CX<c3=o\|\dx#X%Wxq"G.59zT<U\&H}E6PP\@\6#wbZ)V_0M)0]3;S{\|>=\|RFq0,9>}K9Yqq nFiQF~vuGXv
2024-04-25 18:48:05 UTC	4744	IN	Data Raw: 34 ef be fb 2e af bf fe 3a 83 07 0f c6 e3 f1 60 32 99 c8 cc cc 6c b6 7c 6c 6c 2c 87 0e 1d c2 66 b3 71 f0 e0 41 12 12 12 e8 d7 af 5f b3 32 3d 7a f4 20 23 23 a3 e9 c1 16 a7 d3 89 5e af e7 ba eb ae 6b aa f3 a1 43 87 28 2d 2d 25 3f 3f 9f 1b 6e b8 01 9b cd 86 4e a7 43 a3 d1 50 56 56 46 4e 4e 0e 2e 97 0b 8d 46 83 46 a3 a1 7b f7 ee a4 a6 a6 36 05 a1 db ed 26 3e 3e 1e 83 c1 d0 ea 58 47 9d 4e 87 c3 e1 e0 d0 a1 43 00 bc f9 e6 9b cc 9a 35 0b b7 db 8d d1 68 a4 b0 b0 10 8b c5 c2 ce 9d 3b 25 08 c5 6f 86 46 ab c5 61 a9 e7 44 71 11 26 ad 86 81 97 5d 4b cf b8 40 0e 1a c2 68 93 d4 06 c7 d1 75 44 98 c2 48 8d 89 22 bc 7b 3a 0b 57 ef a2 aa b8 86 5e c3 da 11 db 26 90 4e e9 9b d1 28 27 06 3f 33 41 41 1a 4c e6 10 8c 7a 37 f5 c7 8a 49 1f 38 98 d8 c8 68 62 23 a1 bc e2 28 7e fe c1 Data Ascii: 4.:`2l\|ll,fqA_2=z ##^kC(--%??nNCPVVFNN.FF{6&>>XGNC5h;%oFaDq&]K@huDH"{:W^&N('?3AALz7I8hb#(~
2024-04-25 18:48:05 UTC	5930	IN	Data Raw: f8 8a 35 0f f5 d5 95 78 fd 42 08 31 b7 fe 7e 4c 21 84 10 e2 d7 46 de 35 2a 84 10 c2 a7 c9 4d 37 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 f4 3f 68 29 4f 3d eb 96 2c e5 d0 89 06 d2 7b 5c c2 c0 1e a9 3f 72 b5 7e db 94 52 68 34 9a f3 96 f1 d6 97 b3 76 e9 32 8e da 4d 64 0d 1b 41 bb 68 f3 7f b5 cd d2 82 dd ac df b2 87 5a bb 97 88 a4 34 06 f4 cf 22 d2 Data Ascii: 5xB1~L!F5*M7!>MP!O B$B4B!>MP!O B$B4B!>MP!O B$B4B!>MP!O B$B4B!>MP!O B$B4B!>MP!O B?h)O=,{\?r~Rh4v2MdAhZ4"
2024-04-25 18:48:05 UTC	7116	IN	Data Raw: d2 c9 4c 89 05 6c ec df b8 1d 47 70 02 9d 3a a6 60 d4 42 6d f1 11 f6 1f 2e 22 bc 7d 27 32 12 22 9b af c3 6b 27 ff c0 76 8a 1a 82 e8 da a5 23 e1 e6 6f cf 27 ca 8b 0e 72 f0 c8 09 94 2e 84 8e dd ba 10 19 d4 7a bd 95 bd 81 43 7b 73 28 75 19 e9 d0 b9 33 d1 c1 46 f0 3a 29 3c b8 8f a3 d5 1e da 75 ed 4a fc 59 cb ba 1a ca d8 b9 37 17 7d 60 1b 3a 77 6c 8b 51 07 5e 7b 0d bb f7 ec c7 a9 8d a2 4b b7 74 cc ad 74 40 6b 4e 14 90 5b 50 8c c3 a3 23 ba 4d 3b 3a 24 47 b7 2c 53 76 84 fd b9 c5 84 c7 77 a2 43 5a 44 b3 79 d6 f2 e3 ec 3d 90 87 39 b1 1d 1d 53 13 9a 0d 93 b0 d5 14 b1 77 5f 1e 7e d1 1d e8 92 1e d7 ec 5a 7b 5d c5 31 f6 1d 3c 4a 60 54 1a 1d 33 12 bf 5d ce 59 47 ce fe 83 94 57 db 30 07 45 d0 ae 73 26 11 fe 3a c0 4d fe fe 9d 1c af f4 92 d1 a9 1b 31 4d 63 6e 14 c7 0e ec Data Ascii: LlGp:`Bm."}'2"k'v#o'r.zC{s(u3F:)<uJY7}`:wlQ^{Ktt@kN[P#M;:$G,SvwCZDy=9Sw_~Z{]1<J`T3]YGW0Es&:M1Mcn
2024-04-25 18:48:05 UTC	8302	IN	Data Raw: 41 fa 0d 42 4d d1 33 71 c6 7c e6 2c 9c 80 c1 68 25 5a 6b 41 17 13 c7 a2 e5 b7 d0 71 e8 65 ba 86 5e c7 f8 14 2f 05 4d 8d b8 72 6d 98 cc 0a aa 5d a5 b5 a5 07 35 53 45 f5 ab e8 2d 56 86 e4 a5 5c 8d cf 23 84 10 42 5c 94 7e 83 30 e0 f5 62 8e 8b 20 21 3e 0e 4d 53 50 db fc 60 08 12 d4 a9 f8 34 15 c5 08 3e bf 46 b0 bb 85 f7 b7 7b 88 4b 88 c4 12 ec 20 18 d4 11 08 a8 f8 fc 5e 02 fe 80 8c 93 11 42 08 31 28 f5 1b 84 89 39 c3 d8 bb 7f 0b bf 6b 3a 8a 16 8c 60 c2 d8 31 64 8f 1c 47 a4 c5 82 9a 3e 02 6f 54 18 b6 d4 a1 0c 89 8f 24 a6 bb 92 a2 6a 07 39 63 73 88 4b 37 e0 48 34 92 6c ea 25 18 17 2f 21 28 84 10 62 50 52 34 4d d3 fa 6b e4 f3 ba f1 f9 83 68 9a 82 c9 6c c1 6c d2 7f 42 4b 15 af c7 87 c9 62 91 e0 13 42 08 71 4d b8 a0 20 14 42 08 21 3e ab 64 66 19 21 84 10 21 4d 82 Data Ascii: ABM3q\|,h%ZkAqe^/Mrm]5SE-V\#B\~0b !>MSP`4>F{K ^B1(9k:`1dG>oT$j9csK7H4l%/!(bPR4MkhllBKbBqM B!>df!!M
2024-04-25 18:48:05 UTC	1904	IN	Data Raw: e9 18 39 31 0f 7f 62 14 96 f8 0c c6 4d 8a c0 a8 c4 31 6d f9 7c 86 44 0f c3 1a 9b c6 c4 09 33 38 56 ef 22 7d ea 2c 72 87 8f 24 6f 58 0a af fd f5 af bc a5 e5 70 f7 37 ef 67 7c 56 06 db cf ba 48 b1 7c f8 fb a8 90 3a 32 8f 60 20 81 0f 57 03 61 2c b8 ed 4e 5e 5b f5 22 bb 83 59 dc 77 d7 5c 9c 5d 16 9a 9d 36 6c 2e 2f 63 66 ce c4 a2 bc c5 3b af ae 22 77 ee 6d cc 9f 31 81 f8 c8 0d 44 8f 48 ff a8 f6 a9 53 a7 62 b3 d9 e8 ed ed fd d8 f3 69 55 55 65 ee dc b9 8c 19 33 e6 aa 6d c7 4b d1 67 10 c6 c7 c7 a3 aa 2a ed ed ed 97 34 bd 5a 58 e2 50 a6 4c 4b e2 d0 e6 17 29 da 69 44 d3 82 c4 67 8c e2 c9 67 be c5 d4 b4 48 5c b7 7f 8f 2f d4 fd 8c df 3f fd 14 39 e3 a6 32 e5 ce af 10 51 e6 c4 69 d7 b8 e5 1b 3f c4 61 f8 1d af fc fe d7 e8 6d 89 3c f4 bd ff 62 f9 a4 6c 9a 73 f3 70 c7 18 Data Ascii: 91bM1m\|D38V"},r$oXp7g\|VH\|:2` Wa,N^["Yw\]6l./cf;"wm1DHSbiUUe3mKg*4ZXPLK)iDggH\/?92Qi?am<blsp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49947	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:05 UTC	1188	OUT	GET /en-us/sharefile/media/rb-buy-account-info-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:05 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 19504 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:05 GMT Etag: "3752f0f2fcdb80f416e4bb918351f7c6-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C4ZPANEPESYR9A2CG57Z X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:05 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6a 00 00 01 f9 08 06 00 00 00 a8 2a 74 0e 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 04 1d c7 90 27 82 00 00 20 00 49 44 41 54 78 9c ec dd 4f 6c 1b e7 9d 3f fe b7 7e df 16 d8 8d d6 28 03 68 88 26 17 d3 97 34 9e 31 50 65 5d e7 ca e1 35 6e 10 07 e0 30 db bd 48 be ec c2 24 01 db 68 9b 1c 87 93 c3 1e b6 29 6c 03 22 09 e4 62 a9 97 62 39 04 22 a3 5d e7 c8 e1 71 d7 db 8d 02 68 18 24 17 53 97 78 77 46 40 54 b8 f6 1e e7 77 50 3f 4f 86 43 52 ff 6c 99 8f e4 f7 0b 10 6c 92 f3 e7 99 67 1e 7e f8 f0 e1 f3 99 99 4b 92 24 01 11 11 69 eb ff 9b 75 01 88 88 68 6f 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 9e 29 50 97 4a 25 0c 87 c3 e7 54 14 22 22 9a e4 c8 Data Ascii: PNGIHDRj*tpHYs+tIME' IDATxOl?~(h&41Pe]5n0H$h)l"bb9"]qh$SxwF@TwP?OCRllg~K$iuhoDDc&"5)PJ%T""
2024-04-25 18:48:05 UTC	2372	IN	Data Raw: 67 d3 9e 3f e8 f9 9a 64 df a1 8f 5c 2e 87 1b 37 6e e0 e6 cd 9b 00 00 d7 75 b1 bc bc 8c 42 a1 00 00 e8 f5 7a 78 f8 f0 e1 d8 9f f4 94 a7 49 0f 71 88 a5 a5 25 d8 b6 3d 36 dc e1 79 9e 1a 1a 79 ff fd f7 f1 d6 5b 6f 61 63 63 43 bd 2e 43 29 6f bd f5 16 ae 5e bd 8a 52 a9 84 73 e7 ce 61 7d 7d 1d e7 ce 9d 53 db 3b 77 ee 1c ee dd bb 87 9b 37 6f e2 d5 57 5f 45 a9 54 1a 59 bf 54 2a a1 52 a9 a0 52 a9 20 9f cf 23 08 82 fd aa 67 cc 85 0b 17 50 ab d5 26 be 16 c7 31 4a a5 12 2e 5c b8 30 b2 9f 7a bd 7e e8 fd d0 e9 e1 79 1e 06 83 01 3a 9d ce a1 da 42 bf df 3f d0 72 41 10 4c 6c cb 71 1c 1f 78 5f 87 e1 fb 3e 7c df 47 10 04 6a 18 30 6b 5a d9 bb dd ee 73 2d cb 71 1d 63 bd 5e 9f 7a ce e2 38 46 14 45 cf 75 7f fb 0e 7d 00 c0 f5 eb d7 b1 ba ba 8a 3b 77 ee e0 fa f5 eb 23 41 58 02 f6 Data Ascii: g?d\.7nuBzxIq%=6yy[oaccC.C)o^Rsa}}S;w7oW_ETYT*RR #gP&1J.\0z~y:B?rALlqx_>\|Gj0kZs-qc^z8FEu};w#AX
2024-04-25 18:48:05 UTC	538	IN	Data Raw: 0a 85 02 86 c3 21 76 76 76 b0 b1 b1 81 2f bf fc 12 3f fa d1 8f d0 ef f7 e1 ba 2e ae 5e bd 8a f7 de 7b 0f c3 e1 10 e7 ce 9d c3 f5 eb d7 91 cb e5 e0 ba 2e 76 76 76 90 cb e5 d4 36 d7 d7 d7 11 04 01 0a 85 02 d6 d6 d6 b0 b4 b4 a4 b6 5b 28 14 00 ec 06 e9 30 0c f7 9c 06 46 44 f4 a2 69 d7 a3 fe ec b3 cf 70 f6 ec 59 78 9e 87 7b f7 ee c1 b6 6d 14 0a 05 2c 2e 2e 62 7d 7d 1d 5b 5b 5b c8 e5 72 2a c0 de b8 71 03 b7 6f df 1e e9 39 03 bb c3 17 d2 0b 07 80 7b f7 ee e1 f6 ed db b8 71 e3 06 72 b9 1c 16 17 17 51 28 14 70 e5 ca 15 00 40 1c c7 e8 f7 fb 70 1c 07 71 1c 23 8e e3 17 79 d8 44 44 53 69 17 a8 65 e8 e3 ee dd bb 23 81 36 97 cb a1 50 28 c0 75 5d 5c bf 7e 1d 8b 8b 8b 6a 0c 5a 7a dd c0 ee d0 c8 da da 1a 96 97 97 f1 de 7b ef a9 65 a4 77 9e de 5e 56 b1 58 c4 60 30 00 00 84 Data Ascii: !vvv/?.^{.vvv6[(0FDipYx{m,..b}}[[[r*qo9{qrQ(p@pq#yDDSie#6P(u]\~jZz{ew^VX`0
2024-04-25 18:48:05 UTC	4744	IN	Data Raw: 40 e9 66 c7 f7 7d f8 be 7f a8 75 c2 30 84 ef fb a7 be 6e 88 74 a7 65 a0 de d9 d9 c1 70 38 9c fa 97 0d c6 62 63 63 03 e7 ce 9d c3 b9 73 e7 d4 32 6b 6b 6b 28 95 4a e8 f7 fb 6a b9 52 a9 84 ab 57 af aa c7 37 6f de c4 85 0b 17 50 2a 95 8e f7 c0 66 a8 52 a9 a0 52 a9 1c 6a 9d 6e b7 8b 4a a5 82 6e b7 7b 4c a5 22 a2 83 d0 32 50 df b9 73 47 05 dc 49 7f af be fa 2a ce 9d 3b 87 b5 b5 b5 91 f5 fa fd be 0a f2 1b 1b 1b 07 de df fa fa 3a 80 d3 df ab 26 a2 93 e9 07 b3 2e c0 5e 6c db 46 a1 50 18 7b 7e 67 67 07 eb eb eb 58 5e 5e c6 70 38 84 eb ba 00 80 a5 a5 25 0c 87 43 9c 3d 7b 16 b6 6d 1f 78 3f 9f 7d f6 19 fe e5 5f fe 05 d5 6a f5 39 95 9c 88 e8 f9 d1 3a 50 2f 2f 2f 63 69 69 69 e2 6b c3 e1 10 6f bd f5 16 1a 8d 06 ae 5f bf 8e 5c 2e 87 5c 2e 87 5b b7 6e 1d 7a 3f 8b 8b 8b e8 Data Ascii: @f}u0ntep8bccs2kkk(JjRW7oPfRRjnJn{L"2PsGI;:&.^lFP{~ggX^^p8%C={mx?}_j9:P///ciiiko_\.\.[nz?
2024-04-25 18:48:05 UTC	5930	IN	Data Raw: 88 48 73 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 18 a8 89 88 34 c7 40 4d 44 a4 39 06 6a 22 22 cd 31 50 13 11 69 8e 81 9a 88 48 73 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 18 a8 89 88 34 c7 40 4d 44 a4 39 06 6a 22 22 cd fd 60 d6 05 48 33 4d 13 9e e7 cd ba 18 44 74 0a 99 a6 39 eb 22 1c d9 5c 92 24 c9 ac 0b 41 44 44 d3 71 e8 83 88 48 73 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 18 a8 89 88 34 c7 40 4d 44 a4 39 06 6a 22 22 cd 31 50 13 11 69 8e 81 9a 88 48 73 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 18 a8 89 88 34 a7 65 a0 0e 82 00 be ef 23 0c 43 00 80 ef fb 88 e3 58 3d 26 da 4f b6 0d ed d5 76 d8 ae 48 77 da 05 ea 56 ab 85 20 08 60 9a 26 82 20 40 ab d5 52 d7 91 6d b7 db 08 c3 70 e4 8d c5 37 19 65 f9 be af da 90 e7 79 08 c3 50 b5 1d Data Ascii: HsDDc&"54@MD9j""1PiHsDDc&"54@MD9j""`H3MDt9"\$ADDqHsDDc&"54@MD9j""1PiHsDDc&"54e#CX=&OvHwV `& @Rmp7eyP
2024-04-25 18:48:05 UTC	5255	IN	Data Raw: 6f 7e 03 00 ea d7 ff a7 4f 9f 8e 1c a7 dc a2 2b 5d 5e b9 c2 60 1c c7 78 fa f4 29 e6 e7 e7 d5 73 72 3d ec fb f7 ef ab 5f ee 65 1b 85 42 41 25 c9 48 7d cb b6 27 d5 af ec 73 7e 7e 5e cd ed cd 96 25 9f cf a3 50 28 a8 63 4e 9f 93 6c dd 04 7f bd fd d2 db 6f bf ad 66 4b 64 cb 94 5d e7 93 4f 3e 41 1c c7 28 14 0a 23 c7 29 f5 9c 2d 93 2c 6f 9a a6 ba 96 75 ba 1e d2 eb a6 cf 85 d4 b5 fc 3b 37 37 37 b2 3f 29 d7 93 27 4f c6 d6 93 f2 3e 79 f2 04 86 61 4c 3d c7 52 07 e9 fa 93 b2 a4 cf e7 83 07 0f 46 da 62 fa 1c 4b db 94 f3 29 eb cb 8c 21 d9 4e 7a ff b2 7e ba ce 64 f9 ec f9 cc be 1f 27 d5 ad 9c 0b 9a ec d4 f5 a8 d3 3d 2a cf f3 d0 ed 76 d1 6c 36 11 c7 31 1a 8d 06 4c d3 54 3d a2 4a a5 a2 12 32 7c df 57 59 77 fb 91 2c 30 cf f3 54 e3 94 9b ea a6 3f f7 e4 be 71 32 ed 4c e6 69 Data Ascii: o~O+]^`x)sr=_eBA%H}'s~~^%P(cNlofKd]O>A(#)-,ou;777?)'O>yaL=RFbK)!Nz~d'=*vl61LT=J2\|WYw,0T?q2Li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49948	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:05 UTC	889	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: sharefile_main sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:05 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1184l9su1 X-Cloud-Trace-Context: 0cb036d492258d01723dbb1c5f648f6a Date: Thu, 25 Apr 2024 18:48:05 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:05 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49954	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:06 UTC	1141	OUT	HEAD /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:07 UTC	529	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 23057345 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:48:06 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C68EH6DCC4SW1E6747XH X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49950	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:06 UTC	1188	OUT	GET /en-us/sharefile/media/rb-buy-account-info-2.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:06 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 27686 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:06 GMT Etag: "eacc235326080918586184f6ef441745-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C681JQQK75SVTKZV9TJS X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:06 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ec 00 00 01 8d 08 06 00 00 00 d3 82 42 9f 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 07 38 a7 b9 a0 06 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 54 e5 dd f0 ff cf 99 35 93 7d 83 90 b0 ef ab 06 44 11 59 cc c4 ad 0a 6a 15 97 de 96 f6 b1 75 6b b5 d6 47 db bb 77 6d 7f de cd a4 ad 4f 69 7b f7 b6 d5 b6 58 eb 52 16 45 45 45 14 44 dc 32 41 2c a2 b2 09 c8 be 08 24 04 b2 ef b3 9e f3 fb 23 9e 71 32 4c 92 49 48 42 0e 7c df af d7 bc 20 73 96 eb 3a d7 9c 39 df b9 96 73 1d 45 d3 34 0d 21 84 10 42 f4 69 a6 33 9d 01 21 84 10 42 74 4c 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 90 80 2d 84 10 42 18 80 04 6c 21 84 10 c2 00 ba 25 60 bb dd ee ee d8 8d 10 42 08 21 Data Ascii: PNGIHDRBpHYs+tIME8 IDATxy\|T5}DYjukGwmOi{XREEED2A,$#q2LIHB\| s:9sE4!Bi3!BtLBaB-Bl!%`B!
2024-04-25 18:48:06 UTC	2372	IN	Data Raw: 51 7b df d5 ae 88 e5 ba 14 4d 5f 1d dc 19 5e 3e 1d 95 4b 71 71 71 87 d7 dc f0 6b 44 5f 3d e6 d3 11 79 2e b5 75 4d 6c ef d8 dd 6e 77 af 95 4d 4c 4d e2 45 45 45 a1 03 2a 2a 2a 0a 05 f0 f0 e0 19 4b 73 6e 47 c2 9b 77 dd 6e 77 9b fb d3 bf 64 d1 9a 83 db fa 02 eb 4d e9 e1 b7 9e e9 41 35 92 3e d8 ad a3 2f 73 5b 69 b5 f5 be be 5f bd 0c 7b 43 5b c7 08 d1 cb 44 88 be 2e f2 da a3 28 4a 9f 1b 68 d9 de f5 2b 96 e5 5d a1 07 1b bd 2c f4 ef 7d 77 a5 d3 93 65 1c 4b 79 f4 44 99 41 eb e3 ca cf cf 8f 3a b0 b9 bd 63 77 3a 9d bd 76 fe c5 7c 5b 97 7e 71 d7 03 51 4f f4 1f 87 07 fd fc fc fc 36 7f f1 14 14 14 b4 ea df 0e a7 07 5a 4d d3 42 af f0 7e f0 70 e1 fb 2e 2a 2a 3a 65 9b f6 02 b6 5e 1e fa 7a fa 07 16 5e 46 91 fb d4 f7 d7 9d 35 ed 8e 84 7f 69 c3 f3 a2 07 e9 68 b7 87 09 61 44 Data Ascii: Q{M_^>KqqqkD_=y.uMlnwMLMEEE*KsnGwnwdMA5>/s[i_{C[D.(Jh+],}weKyDA:cw:v\|[~qQO6ZMB~p.:e^z^F5ihaD
2024-04-25 18:48:06 UTC	538	IN	Data Raw: 03 90 80 2d 84 10 42 18 80 04 6c 21 84 10 c2 00 24 60 0b 21 84 10 06 20 01 5b 08 21 84 30 00 09 d8 42 08 21 84 01 48 c0 16 42 08 21 0c 40 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 90 80 2d 84 10 42 18 80 04 6c 21 84 10 c2 00 24 60 0b 21 84 10 06 20 01 5b 08 21 84 30 00 09 d8 42 08 21 84 01 48 c0 16 42 08 21 0c 40 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 90 80 2d 84 10 42 18 80 04 6c 21 84 10 c2 00 24 60 0b 21 84 10 06 20 01 5b 08 21 84 30 00 09 d8 42 08 21 84 01 48 c0 16 42 08 21 0c 40 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 b0 9c e9 0c 08 d1 db dc 6e 37 c5 c5 c5 00 14 14 14 9c e1 dc 9c 3e b7 db 8d d3 e9 6c f5 5e 61 61 21 00 79 79 79 a7 2c 13 42 18 93 a2 69 9a 76 a6 33 21 44 6f 06 98 c2 c2 42 5c 2e 17 00 3d 75 fa f7 c6 f1 b8 dd 6e f2 f3 f3 01 70 3a 9d Data Ascii: -Bl!$`! [!0B!HB!@BaB-Bl!$`! [!0B!HB!@BaB-Bl!$`! [!0B!HB!@BaBn7>l^aa!yyy,Biv3!DoB\.=unp:
2024-04-25 18:48:06 UTC	4744	IN	Data Raw: ac bd 57 51 51 51 9b db c5 42 5f d7 e9 74 9e 92 2f 97 cb d5 2a 8f 1d e5 a1 a3 3c 87 a7 11 a9 a8 a8 a8 4b c7 1b 99 df 58 f6 13 99 8f 58 d2 ed cc 67 1b cb 67 17 59 b6 d1 c4 52 f6 d1 ca 24 96 6d 5c 2e 57 b7 a4 15 99 66 e4 7e db 7a ff 74 3e 6f 21 c4 99 25 01 bb 8d f7 9d 4e e7 29 17 ad c8 8b 6b f8 f2 f0 65 1d 5d ec c2 2f 9a d1 f6 11 1e 78 da bb c0 3b 9d ce d0 ba d1 f2 1b be 9f 68 41 3b f2 e2 dd 51 30 69 ab 3c da cb 6f 51 51 51 bb cb 75 1d 2d ef 48 e4 b1 b6 f7 d9 b5 f7 e3 2a bc 4c 3a 7b 0e 74 f6 78 3a 4a 2b b2 ec a2 a5 d5 d9 80 dd de fe 22 8f 4d 08 d1 b7 18 fa 5b d9 d5 80 dd d6 45 a9 bd e0 a6 0b bf c8 b6 75 91 6c 6f fb f6 f2 1d 19 54 62 d9 be a3 75 db 0b 4e 9d 3d de c8 f5 62 0d 5e b1 a4 75 3a 01 bb bd 3c b6 b5 5e b4 32 e9 ca 7e 4e e7 78 62 3d 5f da 5b af b3 01 Data Ascii: WQQQB_t/<KXXggYR$m\.Wf~zt>o!%N)ke]/x;hA;Q0i<oQQQu-HL:{tx:J+"M[EuloTbuN=b^u:<^2~Nxb=_[
2024-04-25 18:48:06 UTC	5930	IN	Data Raw: c4 9c bc e8 61 67 7d c0 ee c9 59 8e 84 10 c6 73 d9 f4 64 3c 1e 95 f1 23 1d a4 24 59 c8 48 b3 f0 83 ff c8 62 d6 85 49 64 a6 59 f1 07 34 aa 6a fc 5c 30 31 91 9b af 4e a7 f8 93 3a 1e b8 7d 00 3f b8 2d 0b 45 81 8b 27 27 62 b7 99 a8 6f 0c 92 96 d2 ce 25 d4 62 26 ee ae db f0 bd bf 1e ad a2 75 2d 3b 70 c2 86 f7 50 02 f6 f1 1e 02 a3 53 4f dd 56 31 63 1e 98 8f 79 c8 95 9d 3b 38 05 46 66 da b9 62 6c 32 5f 56 f9 d0 d0 b0 98 14 9a 7c 2a 49 36 13 b3 47 24 90 60 37 63 42 e3 50 95 8f 94 78 0b 17 0e 4e e0 fc 41 0e 06 a7 5a 39 58 e5 e3 cd ed b5 7c 6b 4a 1a c7 eb fd ec ab 68 e8 5c fa a2 47 19 b2 0f 5b 08 21 3a 12 ad 0f bb 27 b4 d5 87 dd 92 09 95 c0 a7 5b a8 ff fe 43 04 77 1f 6c b5 9d 29 33 81 c4 47 2f 24 68 fb 37 68 e1 b3 25 2a 58 86 5e 83 65 7a 21 4a fc 80 56 db b4 d7 87 Data Ascii: ag}Ysd<#$YHbIdY4j\01N:}?-E''bo%b&u-;pPSOV1cy;8Ffbl2_V\|I6G$`7cBPxNAZ9X\|kJh\G[!:'[Cwl)3G/$h7h%X^ez!JV
2024-04-25 18:48:06 UTC	7116	IN	Data Raw: 93 13 71 4c 9e 40 fa 03 f3 a9 fc f3 12 14 ab 19 fb a4 51 00 24 ce 99 8d 67 cb 6e ea 5e 5a 4b dc a4 31 24 5e 33 8b ba 95 ef 93 7c f3 95 60 32 63 4e 88 27 f1 1b b3 68 de b8 9d 9a 45 2b 89 9f 39 35 74 2c b6 d1 43 5b f2 3e 7a 30 49 df cc c7 b3 75 37 6a 6d 1d f6 09 a3 b0 0d ce 69 59 67 ec 70 00 e2 26 8d c6 9c 96 84 75 78 0e 55 4f be 4c bc f3 22 e2 67 4c 46 ab 6f a2 ee d5 77 b1 0c cc 22 ee c2 89 bd f8 49 08 21 84 e8 2d 32 71 8a 10 42 08 61 00 86 ac 61 0b 21 84 10 e7 1a 09 d8 42 08 21 84 01 48 c0 16 42 08 21 0c 40 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 90 80 2d 84 10 42 18 80 21 03 76 30 18 c4 ef f7 87 5e 1d dd 99 a6 69 1a 87 0e 1d 42 55 d5 98 d3 08 04 02 7c f1 c5 17 51 97 f9 7c be 0e b7 57 9b 9a 63 4e 4b 08 9d cf e7 23 10 08 74 bc 62 07 34 4d a3 ba ba 1a 4d Data Ascii: qL@Q$gn^ZK1$^3\|`2cN'hE+95t,C[>z0Iu7jmiYgp&uxUOL"gLFow"I!-2qBaa!B!HB!@BaB-B!v0^iBU\|Q\|WcNK#tb4MM
2024-04-25 18:48:06 UTC	6321	IN	Data Raw: c5 c5 c5 fc e3 3f fe 23 6b d6 ac 21 29 29 09 38 fa 41 e3 c1 07 1f 24 36 36 96 c6 c6 46 5e 7a e9 25 d2 d2 d2 4e 78 5e 54 55 65 c9 92 25 f4 e9 d3 87 fe fd fb b3 69 d3 26 7e fd eb 5f 13 89 44 b8 fe fa eb 51 14 e5 dc ff 70 84 10 42 9c 13 ba 0c ec 55 ab 56 31 6f de 3c 2d 80 14 45 e1 de 7b ef 25 2e 2e 8e 39 73 e6 f0 f0 c3 0f 73 f9 e5 97 f3 e1 87 1f 32 7b f6 6c 92 92 92 88 8e 8e e6 8d 37 de a0 a2 a2 82 25 4b 96 f0 e2 8b 2f 32 77 ee 5c 1e 79 e4 11 1a 1b 1b d9 b1 63 07 4f 3c f1 04 8d 8d 8d bc f6 da 6b f4 eb d7 8f 65 cb 96 f1 fa eb af 03 30 67 ce 1c 6e b8 e1 06 66 ce 9c 49 7e 7e 3e d9 d9 d9 c0 d1 90 fc e3 1f ff c8 bd f7 de cb b8 71 e3 78 f3 cd 37 f9 e6 9b 6f 38 7c f8 30 2b 56 ac e0 c9 27 9f c4 6c 36 f3 e5 97 5f f2 c8 23 8f e0 f5 7a 99 38 71 22 89 89 89 3c f3 cc 33 Data Ascii: ?#k!))8A$66F^z%Nx^TUe%i&~_DQpBUV1o<-E{%..9ss2{l7%K/2w\ycO<ke0gnfI~~>qx7o8\|0+V'l6_#z8q"<3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49952	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:06 UTC	1183	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:06 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 45374 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:06 GMT Etag: "9aeee1e7a7ddf80af51ad3c82bef1cff-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C68907GC4DY817XAVC7S X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:06 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0b 00 00 01 90 08 06 00 00 00 b9 f4 45 d2 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 1f 18 1e cc 18 97 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 54 f5 bd ff f1 d7 39 67 f6 99 ec fb 1e 12 20 2c 49 80 10 56 45 11 44 b1 2e d8 52 6d b5 15 95 de b6 da 5b bc da d6 db db fe ae d5 de da da 45 ab b6 f5 da 56 6d af 56 14 44 2d 9b 28 20 48 d8 13 48 80 04 b2 40 80 ec fb 36 99 cc 7e 66 ce ef 8f 09 a9 c8 62 54 68 21 7e 9f 3c 22 86 99 39 73 66 7b cf f7 7c cf f7 fb f9 4a 9a a6 69 08 82 20 7c 0c f9 5f bd 03 82 20 5c 1e 44 58 08 82 30 2c 22 2c 04 41 18 16 11 16 82 20 0c 8b 08 0b 41 10 86 e5 53 85 45 30 18 bc d0 fb 21 08 c2 25 ee 13 87 c5 d1 a3 47 79 e6 99 67 Data Ascii: PNGIHDREpHYs+tIME IDATxy\|T9g ,IVED.Rm[EVmVD-( HH@6~fbTh!~<"9sf{\|Ji \|_ \DX0,",A ASE0!%Gyg
2024-04-25 18:48:06 UTC	2372	IN	Data Raw: 97 8b a4 a4 24 4c 26 13 2e 97 0b 93 c9 84 d7 eb c5 64 32 21 49 12 3d 3d 3d d8 6c 36 0c 06 03 3e 9f 8f e6 96 16 0c 7a 3d 29 29 29 43 db e9 e8 e8 a0 a0 a0 80 47 1e 79 04 09 d0 08 b5 2c e2 62 63 89 8b 8b e3 ff fe ef ff 98 3c 69 12 d5 55 55 58 cc e6 d3 1e 4b 7b 7b 3b 4e a7 93 f8 f8 78 6c 36 db 85 79 f6 05 e1 32 72 de b0 08 0b 0b c3 66 b5 f2 97 bf fe 95 ef 3d f4 10 c7 4f 9c e0 da 6b af c5 6c 36 f3 5f ff f5 5f 48 92 84 24 49 a8 aa ca 98 31 63 60 b0 69 7f 4a 5b 7b 3b 6e 8f 87 ab af be 9a 84 84 04 00 7e fa e8 a3 34 34 34 60 b7 db c9 1c 35 0a bd 5e cf 3b eb d7 f3 fa 6b af 51 7a e0 00 29 c9 c9 fc ea 57 bf 62 d6 cc 99 04 02 01 fe f7 f9 e7 f9 e3 1f ff 08 c0 9c 2b af 64 c6 8c 19 b4 b7 b7 f3 9d ef 7c 87 17 5e 78 81 f8 84 04 5a 9a 9b 59 b3 6e 1d 2f be f0 02 46 bd 9e ff Data Ascii: $L&.d2!I===l6>z=)))CGy,bc<iUUXK{{;Nxl6y2rf=Okl6__H$I1c`iJ[{;n~444`5^;kQz)Wb+d\|^xZYn/F
2024-04-25 18:48:06 UTC	538	IN	Data Raw: b9 d3 20 3e 1e 75 ef 2e f0 fb f8 f8 99 05 c2 e5 4e 84 c5 48 21 49 04 83 01 fc f8 51 19 7e cb 42 43 43 42 42 8f 11 3d 0a 32 7e fc 6e 37 95 35 55 54 35 b6 b2 af ab 9b e2 ce 1e da 93 52 70 27 8e 82 f0 70 f4 91 11 98 01 b7 bd 1f 25 18 00 e9 cc 8e d5 4f d3 87 21 89 19 48 97 34 11 16 9f 73 16 2c e8 d1 70 74 77 d2 d2 d1 cd be ea 4a f6 d4 37 53 a9 33 70 d2 62 23 90 32 0a 26 cf 40 a7 28 18 8d 06 24 55 05 97 0b 14 05 b4 b3 07 82 01 23 0a 3a ce d6 da 90 90 ce 1a 24 12 12 01 02 78 f1 5c e8 87 28 5c 20 22 2c 3e 67 0c 18 91 51 50 51 09 68 3e 8e 55 96 73 f0 d8 09 4a 5a 5b 29 b3 bb e8 48 4e c5 9b 93 0b b1 71 18 a2 22 d1 fb 7c e0 f3 a2 f5 f6 a0 9d 38 01 c7 8f 43 5a 1a d2 15 57 80 e7 f4 c3 1d 69 f0 cf 89 63 35 34 1e 3d 81 ac 57 4e cf 0b 09 14 45 47 30 a0 86 02 43 fb 47 4b Data Ascii: >u.NH!IQ~BCCBB=2~n75UT5Rp'p%O!H4s,ptwJ7S3pb#2&@($U#:$x\(\ ",>gQPQh>UsJZ[)HNq"\|8CZWic54=WNEG0CGK
2024-04-25 18:48:06 UTC	4744	IN	Data Raw: ae 80 ad db 36 70 70 7f 31 56 a3 11 dc 6e 88 88 40 ab a8 40 d9 b3 07 25 10 40 32 18 50 62 63 c1 60 00 9d 0e 0d d0 24 09 cd eb 3d 67 5f 05 80 24 49 a0 81 db e3 c2 89 0b df e0 99 19 19 19 9f cf 47 40 55 71 7b 3c a7 5d a6 a0 c3 e9 1c 40 d3 34 24 59 cc 40 b8 54 89 b0 18 e1 0c 18 e9 6a 6b a7 b6 a2 92 63 87 8e 30 76 62 2e 16 83 81 f0 88 48 1c 9d ed 60 34 86 06 71 49 12 5a 67 27 3a 9d 0e 65 d4 28 00 34 75 f0 50 e0 d4 df 3a dd b0 07 7c 49 1f fa f3 e1 df 43 ff ff d1 df a5 50 c8 08 97 34 11 16 23 98 0e 3d ed 2d cd 1c 3d 7c 18 a3 c9 44 c6 e8 31 14 ad 7f 97 43 91 7b d1 9b 0c 4c 9a 5a c0 96 b2 ca d0 95 35 0d c9 60 00 9b 0d 82 41 b4 40 e0 5f bb f3 c2 25 47 b4 f9 46 28 19 19 7f c0 cf be ed 3b 68 6f 69 01 09 0c 26 03 b6 c8 70 54 4d 63 e1 17 16 91 92 9a 89 df ef 63 68 b8 Data Ascii: 6pp1Vn@@%@2Pbc`$=g_$IG@Uq{<]@4$Y@Tjkc0vb.H`4qIZg':e(4uP:\|ICP4#=-=\|D1C{LZ5`A@_%GF(;hoi&pTMcch
2024-04-25 18:48:06 UTC	5930	IN	Data Raw: ca ca ca 86 7d 9b c6 c6 46 7e f0 fd ef d3 d1 d1 c1 c2 eb af 27 33 23 83 47 1f 7b 8c bf fe f5 af 68 9a c6 ca 95 2b 39 78 e8 d0 05 df 57 9f cf c7 8b 2f bd 44 55 75 35 a9 29 29 44 47 47 13 1d 13 43 58 58 18 92 24 21 4b 12 92 24 b1 79 d3 26 d6 ad 5b c7 f9 2a 23 ee 2f 2b e3 e9 a7 9f c6 6e b7 5f f0 fd 14 3e 5f ce db b2 d0 e9 74 5c 35 67 0e fb f7 ef 47 d3 34 da db db e9 1f 18 e0 f6 db 6f a7 e2 f0 61 00 9a 9a 9a 90 24 89 ab af be 1a 0d d8 bc 69 13 c5 25 25 a4 a7 a7 73 db 97 bf 8c c5 62 c1 6c 36 63 b5 5a 81 d0 87 76 cd 9a 35 54 55 55 51 50 50 c0 4d 37 dd 84 24 49 34 35 35 f1 d6 db 6f e3 70 38 b8 66 ee 5c ae b8 e2 0a 3c 1e 0f 95 95 95 f8 55 95 a2 a2 22 32 d2 d3 59 78 fd f5 6c fd e0 03 2a 2b 2b b9 e5 96 5b c8 cb cb 03 a0 ba aa 8a 35 eb d6 21 49 12 d7 5f 77 1d 93 26 Data Ascii: }F~'3#G{h+9xW/DUu5))DGGCXX$!K$y&[#/+n_>_t\5gG4oa$i%%sbl6cZv5TUUQPPM7$I455op8f\<U"2Yxl++[5!I_w&
2024-04-25 18:48:06 UTC	7116	IN	Data Raw: 25 35 2d 8d b7 de 7a 8b aa aa 2a e6 5c 75 15 59 a3 46 f1 de a6 4d 94 96 95 61 b7 db 4f eb ff 18 95 99 c9 f1 da 5a 8e 54 56 92 9b 9b 4b 76 76 36 e5 87 0f 63 30 18 88 89 89 c1 6c b1 10 13 1d 4d 56 76 36 b9 13 27 86 0a 12 f9 7c e8 06 ab cb 2b b2 4c 78 58 58 e8 79 19 3f 9e b1 63 c6 0c 6d db 16 16 46 54 54 14 89 09 09 8c 1b 6c 9a d7 d6 d6 52 30 65 0a 76 bb 9d ce ae 2e 0c 06 03 75 f5 f5 1c 3d 7a 94 e2 e2 62 bc 3e 1f 01 55 a5 af af 8f ee ee 6e 6c 36 1b b1 31 31 24 27 25 91 33 76 2c 99 99 99 d8 ed 76 7a 7b 7a 68 6d 69 19 fa 02 01 08 a8 2a 9d 9d 9d 28 b2 8c aa aa f4 f5 f6 d2 dc dc 3c b4 36 0c 80 df e7 a3 a5 b9 99 9e 9e 1e 3a 3b 3a 88 88 88 c0 68 34 12 1e 1e 4e 7a 46 06 93 27 4d c2 3c f8 25 2a 49 52 e8 7d dc d0 40 63 53 13 31 d1 d1 bc f5 f6 db 1c 3f 7e 9c c8 88 08 Data Ascii: %5-z\uYFMaOZTVKvv6c0lMVv6'\|+LxXXy?cmFTTlR0ev.u=zb>Unl611$'%3v,vz{zhmi(<6:;:h4NzF'M<%*IR}@cS1?~
2024-04-25 18:48:06 UTC	8302	IN	Data Raw: 7f fb db 58 ac 56 ba ba ba c8 cb cd a5 a8 a8 88 d3 0d 0d 04 02 01 d6 56 56 d2 d3 d7 c7 d0 d0 10 b9 39 39 f8 fd 7e bc 5e 2f 39 39 39 e4 e5 e6 52 7f ea 14 b3 3e 1f ab 56 ad c2 eb f1 30 30 38 88 c9 68 44 af d7 13 08 04 a8 ac ac c4 e1 70 d0 da d6 c6 a2 e2 62 f2 f3 f3 3f 8e 73 20 08 42 1c ce 1b 16 9a a6 61 32 1a 31 9b cd 28 8a 42 7a 5a 1a ae e9 69 be ff fd ef e3 f5 7a f9 d2 17 bf 48 4f 4f 0f 4f fc f6 b7 84 43 21 ee ba eb 2e 0e 1c 3c c8 d0 d0 10 5f b8 eb 2e de 78 e3 0d 0a 8b 8a 70 4d 4f f3 9d ef 7c 87 dd bb 77 f3 de b1 63 dc b4 79 33 33 33 33 9c 69 6c 04 20 21 21 81 40 20 c0 1d 77 dc 41 53 63 23 dd 3d 3d a4 a6 a6 f2 ff fc ef ff 4d 5e 5e de c7 72 22 04 41 38 bf f3 56 43 64 59 26 1c 89 30 31 3e 4e 38 1c 26 10 0c 62 36 99 c8 c9 c9 21 14 0c 72 a6 b1 91 37 76 ec c0 Data Ascii: XVVV99~^/999R>V008hDpb?s Ba21(BzZizHOOOC!.<_.xpMO\|wcy3333il !!@ wASc#==M^^r"A8VCdY&01>N8&b6!r7v
2024-04-25 18:48:06 UTC	3101	IN	Data Raw: 33 38 34 48 4d 4d 0d a1 50 88 86 86 06 26 26 26 48 4c 4c c4 6a b5 e2 f3 f9 a8 a9 a9 c1 eb f5 92 90 90 80 d1 68 8c 05 d8 fc 71 eb 74 3a fa fb fb 69 6a 6a c2 64 32 a1 d7 eb 91 24 09 b3 c9 8c c9 64 8a ad ca 36 1f 44 46 a3 11 b3 d9 1c 5b 71 de 60 34 d0 d5 d5 c5 ab af be c6 f4 f4 34 89 89 89 b1 ed 74 73 6b e8 ea f5 fa d8 7d ff f9 55 ed f5 7a 7d 2c e0 ce 7d 1f 79 6e 09 4d 45 f9 e0 fe 01 c2 47 43 84 c5 47 68 be 24 51 7f aa 9e 07 b6 3d 40 fd a9 7a de 7e fb 6d 76 bc b9 03 49 82 96 d6 16 26 26 26 30 9b cd 38 9c 0e 5a 5a 5a 08 85 42 18 8d 46 86 ce 0e f1 fa 8e d7 f9 e5 af 7e 89 1a 56 31 9b 4c 3c fd f4 d3 6c df be 9d be be 3e 24 49 42 55 55 5a db 5b 99 9e 76 32 3a 3a c2 6f 9e f8 0d 23 a3 c3 4c 4f 3b 69 6d 6b 25 1c 0e d3 d2 dc c2 1f fe f0 07 9a 9a 9a f8 af ff fa 2f 26 Data Ascii: 384HMMP&&&HLLjhqt:ijjd2$d6DF[q`44tsk}Uz},}ynMEGCGh$Q=@z~mvI&&&08ZZZBF~V1L<l>$IBUUZ[v2::o#LO;imk%/&
2024-04-25 18:48:07 UTC	10674	IN	Data Raw: ff 80 66 bb c9 eb af bf 4e 14 45 cc cf cd b1 bf 7f c0 3b ef bc c3 ab af bd ca dc dc 1c ef be fb 2e ed 76 1b 4d d7 b8 7c e5 32 97 af 5c e6 1b 7f f5 0d b2 d9 2c 0f 3c f0 00 61 18 72 fd c6 75 ae 5c bd 82 6d d9 7c e3 af bf 81 28 89 68 9a 8a a2 28 5c bc 74 91 cd 8d 4d 34 4d e3 bf fc 9f ff 05 d7 75 79 f4 d1 d3 ec ee ee 71 ee ad 73 cc cc cc 30 35 35 f5 b3 c0 38 06 9f 00 00 20 00 49 44 41 54 6c d6 3f 55 fc 38 63 f1 81 31 38 7f 91 e0 fb 3e c5 62 91 33 8f 9d 61 6d 7d 0d 51 14 99 9d 9d c5 c8 1a bc fa ea ab ac 6f ac 33 37 3b 87 6d db ec ec ec 70 70 78 80 69 9a 00 78 be c7 37 be f1 0d 9a ad 26 cf 3f fb 3c a6 69 d2 6c 36 f9 d1 8f 7e c4 ce f6 0e 61 18 b2 7f b0 cf 2b af bc c2 c9 93 27 79 e3 cd 37 78 f6 33 cf b2 b1 b1 81 28 89 bc fe c6 eb d8 96 cd ca 89 15 6c db a6 d3 e9 Data Ascii: fNE;.vM\|2\,<aru\m\|(h(\tM4Muyqs0558 IDATl?U8c18>b3am}Qo37;mppxix7&?<il6~a+'y7x3(l
2024-04-25 18:48:07 UTC	1932	IN	Data Raw: 8f de 1b 8c 34 d6 68 24 ed d1 8e 13 bb bb 65 04 e1 96 51 4a 90 d4 53 e2 59 48 3a 6b e2 09 b8 e5 85 10 d2 ce 9d 58 f8 db 22 67 0d cb 36 29 23 6f 48 86 df 6a 13 b7 a2 6e 71 47 3e 47 3f df 59 ce 77 96 e9 6d b2 fe a1 e7 e4 b8 69 8c 96 5b f2 2f 19 04 e2 df 6e 79 ee ee 56 5f 77 4a de 93 f6 76 67 9d bf 57 be ff 41 75 fe de ef ef f6 f7 a8 11 4f ca fc ce 77 ba 1b 46 db f3 71 f1 6f be eb f4 6e 85 38 c6 fb 43 92 44 4c d3 e6 d2 95 2b 14 8b 85 58 9e 2c c4 aa 51 88 3d 1f 8a a2 52 ad 94 d3 46 92 6c c8 8a 67 0b 22 82 00 8e eb 92 d1 75 5c cf 63 77 77 77 b8 83 55 a2 5a a9 c4 cc 7e 10 20 c9 32 b2 14 f3 04 96 65 71 d4 6c 11 46 21 d3 93 93 a9 82 73 d4 cd 9c 78 b7 14 45 4e 67 0e 89 2e 20 26 2a 43 dc 21 7f 35 39 51 07 88 d7 e5 a5 62 3a c3 88 a2 08 55 55 7f 36 85 3b c6 87 c2 78 Data Ascii: 4h$eQJSYH:kX"g6)#oHjnqG>G?Ywmi[/nyV_wJvgWAuOwFqon8CDL+X,Q=RFlg"u\cwwwUZ~ 2eqlF!sxENg. &*C!59Qb:UU6;x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49953	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:06 UTC	1183	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-3.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:06 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 21812 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:06 GMT Etag: "f4a847b05e94526859f77d8c5adb970e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C689PG41NVVP5M1N73G0 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:06 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ca 00 00 01 d4 08 06 00 00 00 ba 40 68 37 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 24 07 af 76 fa 5a 00 00 20 00 49 44 41 54 78 9c ec dd 6f 90 e3 e6 7d 27 f8 6f 67 1d 79 2a 9a 1e d0 b9 b3 47 b5 d3 03 6e 12 ef b8 ac 6e c0 b9 4d 8d 76 33 0d 64 f7 85 b4 c9 10 cc 5d 6d ac a4 d4 a4 ea ae 2a 4e 32 24 e7 de ac bd a5 26 e7 c5 9e 9d 3a 35 38 a9 b5 f3 c6 0d ce c6 76 6a b3 69 70 ee 1c 4b f7 a2 c9 b9 c4 65 d7 a5 1a 54 5c 89 bc 75 6a 70 b4 ce 3a 71 dc 80 94 58 d6 66 3d c0 48 ba b2 e4 54 9e 7b d1 c0 63 90 0d a2 7b fe a9 e7 cf f7 53 35 25 36 01 3c 78 00 52 fc f2 01 40 fc e6 be f5 ad 6f 09 10 11 11 51 ae 1f 39 ec 0e 10 11 11 dd cd e6 4e 7d e8 43 1c 51 12 Data Ascii: PNGIHDR@h7pHYs+tIME$vZ IDATxo}'ogyGnnMv3d]mN2$&:58vjipKeT\ujp:qXf=HT{c{S5%6<xR@oQ9N}CQ
2024-04-25 18:48:06 UTC	2372	IN	Data Raw: 9c 16 86 21 56 6a 35 f8 be 8f 66 ab 85 2b c3 e1 8d 6d e5 5d e6 ca 70 58 38 0a 2e ab 2a ca aa 2a b7 f3 5e 19 31 13 11 dd 8f 0e 14 94 8a a2 4c 8c 1e 4d d3 44 ab d5 82 e3 38 e8 74 3a 50 55 15 71 1c c3 ed f7 51 2e 97 31 4a 0e c3 66 c5 96 55 18 94 be ef 23 8e 63 98 a6 39 11 92 c0 6e 50 5c 19 0e b1 b8 b4 04 cf f3 e0 79 9e 3c 1f 9a 15 45 11 86 c3 21 82 30 dc 37 98 3d cf c3 38 39 d7 a7 69 9a 6c cf f7 7d 00 90 23 62 cf f3 a0 28 8a fc 3b 08 02 84 61 08 5d d7 e5 a8 2f 8a 22 8c c7 e3 dc f6 f2 a8 e5 32 ca b7 39 fc d2 ed 89 e2 18 ba a6 41 d3 b4 7b 76 e4 4d 44 74 57 11 07 14 45 91 38 b1 b0 20 9e 5d 5b 93 7f 9f 59 5e 3e e8 e2 fb da da da 12 47 e7 e7 0b db 5c 5d 5d 15 8b 4b 4b 62 73 73 73 62 99 47 17 17 c5 da da 9a 38 3a 3f 3f f1 ef d1 c5 45 b1 bd bd 3d d1 c6 ce ce 8e 38 Data Ascii: !Vj5f+m]pX8.**^1LMD8t:PUqQ.1JfU#c9nP\y<E!07=89il}#b(;a]/"29A{vMDtWE8 ][Y^>G\]]KKbsssbG8:??E=8
2024-04-25 18:48:06 UTC	538	IN	Data Raw: e6 e8 fc bc 38 b1 b0 20 9e 59 5d 15 9b 9b 9b 22 8a a2 dc d7 27 dd 66 06 25 d1 fd 87 41 39 c3 b9 46 63 22 e0 f6 93 06 65 36 64 84 d8 0d bd 47 17 17 85 10 3f 0c b7 6d df df b3 7c 36 c0 b2 23 d5 ac cf 26 a3 98 28 8a e4 07 7d 76 c4 b5 bd bd 2d 3f e4 d3 d1 d2 ac 36 f2 6c 6c 6c ec e9 7f ba 5d 79 7d 16 62 37 28 f3 f6 d3 b3 c9 c8 5a 88 dd a0 cc 0b e7 a7 56 56 f6 8c c8 b3 eb df de de 96 d3 d3 ed c9 6e ef d6 d6 d6 cc ed 4d f7 61 ba ef 85 10 e2 cc 99 33 f2 8b 4d 36 84 b3 d2 80 4d 03 fd e8 fc fc 9e d7 e2 6c a5 32 73 9b 19 94 44 f7 1f 9e a3 bc cd 94 9c f3 6e 29 79 6e 4d d3 f6 4c ab 56 ab f2 bc a0 ef fb b0 2c 6b cf 3c bf 58 ad a2 dd 6e 23 08 43 e8 ba 8e 56 ab 85 25 4d 43 b5 5a 45 d5 b2 60 59 16 2e 76 bb 00 00 6f 34 02 b0 7b 9e 35 2b 8e 63 c4 71 8c 20 0c 51 56 d5 89 69 Data Ascii: 8 Y]"'f%A9Fc"e6dG?m\|6#&(}v-?6lll]y}b7(ZVVnMa3M6Ml2sDn)ynMLV,k<Xn#CV%MCZE`Y.vo4{5+cq QVi
2024-04-25 18:48:06 UTC	4744	IN	Data Raw: dd 34 4d 78 a3 11 3c cf 43 b9 5c 86 a6 69 d0 75 1d 83 c1 00 a3 d1 08 e5 72 f9 a6 c2 ec a0 af e9 ad bc f6 44 74 f7 e2 88 72 86 74 64 e1 38 0e 5a ad d6 9e e9 41 10 c0 f3 3c 9c cf 99 36 8b 9a fe bc c4 f7 f7 5c d1 e9 79 1e aa d5 2a 80 dd 80 4b 47 72 d3 f3 a4 d3 7d df 47 18 86 a8 56 ab 68 b5 5a 68 b5 5a 70 1c 07 ab ed 36 5a ad 16 34 4d c3 60 30 c0 95 e1 70 4f bf 47 c9 68 73 da ba e3 a0 db ed 4e 6c d3 7e 5f 16 00 e4 b6 e7 27 57 ae 96 93 ab 83 e7 e6 e6 70 75 6a 9b 9c 5e 4f 86 4b 10 04 18 8f c7 13 db e3 ba 2e 1a cd 26 ac 6a 55 7e 39 30 4d 13 17 bb 5d 5c ec 76 b1 da 6e a3 d1 6c e2 65 d3 84 a2 28 30 0c 03 a3 d1 08 71 1c cb 51 ae 65 59 b2 7f d9 91 af 5a 2e e7 f7 3b d9 de a2 ab 83 67 2e 9b f3 9a 11 d1 bd 8f 23 ca 19 54 55 45 ab d5 c2 9a 6d c3 75 dd 89 69 41 10 60 a5 Data Ascii: 4Mx<C\iurDtrtd8ZA<6\y*KGr}GVhZhZp6Z4M`0pOGhsNl~_'Wpuj^OK.&jU~90M]\vnle(0qQeYZ.;g.#TUEmuiA`
2024-04-25 18:48:06 UTC	5930	IN	Data Raw: 3d 61 78 bb a5 23 d2 61 32 a2 b3 6d 1b ad 56 4b 1e 62 05 00 6f 34 42 df 75 d1 69 b7 61 77 bb f0 3c 0f 5d db c6 e5 7e 1f 8d 66 13 8a a2 a0 5c 2e a3 df ef e3 42 a7 03 cf f3 10 5f bf 0e 5d d3 a0 96 cb f2 bc a3 37 1a c9 20 4f e9 9a 26 c3 73 30 18 e4 f6 f1 a1 53 c5 35 dd 88 88 ee 45 3c 47 39 c3 a5 5e 0f 6b b6 8d a5 64 c4 d7 6a b5 50 af d7 11 c7 31 56 db 6d 2c 69 1a 54 55 c5 a5 5e 0f be ef 4f 8c 24 d3 c7 a6 69 ca f6 d2 c7 d9 e7 54 55 95 87 31 d3 11 29 00 68 ba be 67 54 39 18 0e d1 ee 74 a0 69 1a ea f5 3a 82 30 44 bb dd 86 a2 28 a8 56 ab 18 0e 06 d0 35 4d 9e 93 ac d5 6a d0 92 bf b3 a3 c0 7a ad 26 83 b0 5e af 4f 6c 6f a3 d9 9c d8 ae 34 9c 01 a0 5a ad c2 1b 8d b0 6c 18 d0 34 4d 8e 3e 89 88 ee 77 ac 47 79 0f 98 3f 76 0c 6f 5c bf 7e d8 dd 20 22 7a 20 f1 d0 eb 3d a0 Data Ascii: =ax#a2mVKbo4Buiaw<]~f\.B_]7 O&s0S5E<G9^kdjP1Vm,iTU^O$iTU1)hgT9ti:0D(V5Mjz&^Olo4Zl4M>wGy?vo\~ "z =
2024-04-25 18:48:06 UTC	7116	IN	Data Raw: 30 44 a3 d9 44 14 45 b2 ee 63 b6 5d b9 ed c3 21 dc 7e 5f 8e 88 66 99 de af 07 31 fd 1a a5 af 87 a6 69 70 1c 07 66 f2 9a 0d 86 43 39 e2 4e fb aa aa 2a 7e ce 34 77 d7 9d 94 28 8b 33 87 36 d3 fd 92 7d ed d2 75 5d ea f5 e4 e1 7e df f7 67 b6 9b 75 fd fa f5 99 fb 68 7a 9b 8a fa 48 f4 a0 60 50 e6 78 f5 fa 6b b7 ad 70 73 d5 b2 e4 73 aa aa ca 02 c1 83 c1 00 c0 0f 0b 37 5f e8 74 a0 28 4a 6e e1 e6 6c 91 e6 6c 81 df ec 73 fb 15 6e f6 46 23 44 51 04 7f 3c be e1 c2 cd 79 b2 eb 77 1c 47 7e 70 7b 9e 27 47 40 61 18 a2 ac aa 88 af 5f df 3d 74 1c 04 70 fb 7d fc 9c 69 c2 aa 56 11 c7 31 8c a4 b8 72 5e fb 83 c1 00 41 10 a0 56 af 23 4c 46 67 e9 68 29 1d ad ad b6 db 30 0c 03 f5 5a 0d e3 f1 78 66 bb e9 07 7e ba ed b3 2e 6e 2a 97 cb 18 8d 46 f0 7d 1f 9e e7 4d 8c 28 8b a4 23 dd 74 Data Ascii: 0DDEc]!~_f1ipfC9N~4w(36}u]~guhzH`Pxkpss7_t(JnllsnF#DQ<ywG~p{'G@a_=tp}iV1r^AV#LFgh)0Zxf~.nF}M(#t
2024-04-25 18:48:06 UTC	447	IN	Data Raw: bc a4 93 1f dd 7e 3d 8e ed 1d 4b f4 f7 4f 2e d7 fa 08 13 08 00 30 5f 04 e5 3c 8d 9d ae 5c 26 ee e4 c7 b7 76 4d d5 ca 55 21 ad 77 42 ea de b5 ec 8e 3d 29 09 00 6e 06 82 f2 1b 38 5b 98 d1 b9 73 33 0d 5d 93 f5 66 ba 37 b2 44 7f b1 3a c4 09 3b 00 b0 00 08 4a 00 00 2c 38 68 05 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 c5 d2 c5 1e 00 70 97 a0 f3 0c b8 4d 11 94 c0 cd 41 9d 1d 70 9b 62 ea 15 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b Data Ascii: ~=KO.0_<\&vMU!wB=)n8[s3]f7D:;J,8hAAAAAAAAAAAApMApb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49949	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:06 UTC	1183	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-4.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:06 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 32776 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:06 GMT Etag: "62034c956a495c5408c1c8d418ace2f2-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C682V0SDF1BJ825HH5B1 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:06 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 2e 08 06 00 00 00 a0 7f 44 c9 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 27 1b 90 5a f5 d6 00 00 20 00 49 44 41 54 78 9c ec dc 77 78 54 55 e2 ff f1 f7 f4 99 4c 7a ef 9d 10 92 40 20 74 15 15 04 54 84 45 05 ac d8 75 d5 5d 1b ae 6b 5b 5d 51 d7 8e 2e a2 e8 0a 0a 02 82 f4 26 d2 11 54 20 20 01 42 48 81 04 d2 49 ef 65 66 32 ed fc fe 48 98 25 02 8a 59 5d d9 df f7 bc 9e c7 c7 87 3b f7 9e 7b ee 9d 3b e7 73 cf 39 f7 46 e1 e1 e9 29 90 24 49 92 a4 5f 48 31 f3 fd f7 65 80 48 92 24 49 bf 98 42 08 21 03 44 92 24 49 fa c5 94 bf 77 05 24 49 92 a4 ff 4d 32 40 24 49 92 a4 1e 91 01 22 49 92 24 f5 88 0c 10 49 92 24 a9 47 64 80 48 92 24 49 3d 22 03 44 Data Ascii: PNGIHDR.DpHYs+tIME'Z IDATxwxTULz@ tTEu]k[]Q.&T BHIef2H%Y];{;s9F)$I_H1eH$IB!D$Iw$IM2@$I"I$I$GdH$I="D
2024-04-25 18:48:06 UTC	2372	IN	Data Raw: 79 27 56 ab 95 eb 27 4e c4 cf df 9f 86 86 06 32 32 32 b8 e5 d6 5b 99 36 6d 1a 6f bd f9 26 1a 8d 06 85 42 01 80 52 79 f1 cc fd db 6c 36 0e 1d 3e cc d1 a3 47 49 4b 4b c3 d7 d7 17 bb dd ee fa bc a3 a3 83 80 c0 40 d4 6a 35 83 07 0f a6 a4 a4 84 b4 b4 34 14 0a 05 4a a5 12 b5 4a e5 3a 2e 49 92 a4 ff 25 17 1c 20 e5 a7 4e f1 97 bf fe 95 f7 ff f9 4f 6e bb ed 36 f6 a6 a7 f3 da 6b af 71 ef 7d f7 71 f5 d8 b1 a4 a7 a7 b3 79 f3 66 74 3a 1d 4f 3f fd 34 4e a7 13 a7 d3 89 d5 66 e3 93 8f 3f 26 39 39 f9 9c e5 7e fc f1 c7 34 36 36 32 77 ee 5c 26 4f 9a e4 5a 7e ec d8 31 ee be e7 1e e6 cf 9f cf f8 f1 e3 19 35 72 a4 ab a1 55 ab 3b ab dd d8 d8 48 45 45 05 01 01 01 04 06 06 9e b3 7c 8b c5 42 7e 7e 3e 5e 5e 5e 44 45 45 01 60 36 99 40 a1 c0 60 30 e0 70 38 30 9b cd b8 bb bb bb b6 69 Data Ascii: y'V'N222[6mo&BRyl6>GIKK@j54JJ:.I% NOn6kq}qyft:O?4Nf?&99~4662w\&OZ~15rU;HEE\|B~~>^^^DEE`6@`0p80i
2024-04-25 18:48:06 UTC	538	IN	Data Raw: e1 70 60 77 38 b0 db ed c4 c6 c6 f2 f7 17 5f e4 a5 e9 d3 b9 ed b6 db 18 31 62 04 5a 8d 86 3d 7b f7 52 5f 57 87 5e af 77 bd ec 77 fa 0f 1a fe 78 b8 2b 2d 2d 8d 69 d3 a6 f1 dc 73 cf 71 c3 8d 37 32 66 f4 68 f4 06 03 fb f6 ed 63 f7 ee dd dc 79 e7 9d 24 24 24 60 36 9b b1 db ed 38 1c 8e 9f 0d 11 47 57 fd 4e af e7 70 38 5c cb 3c 3c 3c 78 eb cd 37 79 f8 4f 7f e2 b6 db 6f 67 e4 c8 91 f8 f8 f8 90 9f 9f cf f6 ed db 99 38 71 22 97 fe a8 37 25 49 92 f4 7b ba e0 00 f9 f1 f0 d2 b6 6d db 88 8e 8e e6 96 5b 6e e1 bb ef be 63 e3 c6 8d cc 9c 39 93 6b af b9 06 83 c1 40 50 50 10 06 83 c1 f5 9e c8 f9 f4 eb d7 8f 35 ab 57 b3 70 e1 42 d6 ae 5b c7 ce 9d 3b 5d 6f 68 27 25 25 f1 f8 63 8f 31 6e dc 38 00 c2 23 23 19 39 6a 14 e1 e1 e1 dd ca d0 68 34 0c 1e 3c 18 8d 46 e3 7a 7b 7c da b4 Data Ascii: p`w8_1bZ={R_W^wwx+--isq72fhcy$$$`68GWNp8\<<<x7yOog8q"7%I{m[nc9k@PP5WpB[;]oh'%%c1n8##9jh4<Fz{\|
2024-04-25 18:48:06 UTC	4744	IN	Data Raw: 08 b4 3f aa 73 47 47 07 16 8b 05 a7 d3 89 56 ab c5 68 34 fe e2 73 29 49 92 f4 5b eb 71 80 9c 56 59 59 c9 87 b3 67 73 fd c4 89 0c 1e 3c f8 d7 aa 97 24 49 92 74 91 fb 8f 03 44 92 24 49 fa bf 49 fe 61 25 49 92 24 a9 47 64 80 48 92 24 49 3d 22 03 44 92 24 49 ea 11 19 20 92 24 49 52 8f c8 00 91 24 49 92 7a 44 06 88 24 49 92 d4 23 32 40 24 49 92 a4 1e 91 01 22 49 92 24 f5 88 0c 10 49 92 24 a9 47 64 80 48 92 24 49 3d 22 03 44 92 24 49 ea 11 19 20 92 24 49 52 8f c8 00 91 24 49 92 7a 44 06 88 24 49 92 d4 23 32 40 24 49 92 a4 1e 91 01 22 49 92 24 f5 88 0c 10 49 92 24 a9 47 64 80 48 92 24 49 3d 22 03 44 92 24 49 ea 11 19 20 92 24 49 52 8f c8 00 91 24 49 92 7a 44 06 88 24 49 92 d4 23 32 40 24 49 92 a4 1e 91 01 22 49 92 24 f5 88 0c 10 49 92 24 a9 47 64 80 48 92 24 49 Data Ascii: ?sGGVh4s)I[qVYYgs<$ItD$IIa%I$GdH$I="D$I $IR$IzD$I#2@$I"I$I$GdH$I="D$I $IR$IzD$I#2@$I"I$I$GdH$I="D$I $IR$IzD$I#2@$I"I$I$GdH$I
2024-04-25 18:48:06 UTC	5930	IN	Data Raw: 38 70 20 89 89 89 64 64 64 b0 67 cf 1e 0e 1f 3e 8c dd e1 e0 85 17 5e a0 5f bf 7e 74 74 74 50 52 52 c2 88 11 23 08 0f 0b 3b ab 9e a7 1f 7b dd bd 67 0f 87 0e 1d 22 7d ef 5e 46 5c 7e 39 61 a1 a1 34 36 34 30 6e dc 38 e2 e3 e2 c8 38 78 90 2d 5b b6 70 24 33 93 d0 d0 50 46 8d 1c 49 df 94 14 c2 c3 c3 f1 f5 f5 c5 a0 d7 b3 69 d3 26 1a 1a 1a 18 3b 76 2c 15 15 15 44 45 46 ba de da 16 42 50 53 5d 4d 68 48 08 a9 a9 a9 0c 1e 3c 18 bb c3 c1 ba b5 6b d9 9b 9e 4e 56 56 16 13 ff f0 07 ee bc f3 4e ac 56 2b 45 c5 c5 0c 1c 38 90 b8 ae 79 1b ab d5 4a 79 79 39 83 06 0f 26 2e 2e 0e 3f 3f 3f 94 2a 15 ab 57 ad c2 cd 68 24 b5 7f 7f 4e 95 97 93 92 92 42 62 62 22 69 69 69 34 37 37 b3 7a cd 1a 32 33 33 c9 3a 7a 94 f1 e3 c7 33 f5 f6 db f1 f2 f2 22 24 24 84 6f be f9 86 fd fb f7 73 34 2b Data Ascii: 8p dddg>^_~tttPRR#;{g"}^F\~9a4640n88x-[p$3PFIi&;v,DEFBPS]MhH<kNVVNV+E8yJyy9&..???*Wh$NBbb"iii477z233:z3"$$os4+
2024-04-25 18:48:06 UTC	7116	IN	Data Raw: d7 5f 7f 1d 01 b8 bb bb 73 ed b5 d7 92 77 ec 18 6f bc f9 26 55 55 55 24 27 27 33 66 f4 68 e6 cf 9f cf f4 e9 d3 69 6e 6e c6 60 30 a0 d3 6a 5d f3 57 5a ad 16 85 42 41 60 60 20 7a 9d 8e 05 0b 17 32 79 d2 24 7c 7c 7c 3a e7 12 0f 1c 40 a1 50 d0 dc d4 c4 1f 26 4e e4 e4 89 13 64 1e 3e 8c 5a a3 c1 db cb 8b 81 69 69 1c 39 72 84 37 de 7c 13 8b d9 4c 64 54 14 43 87 0c 61 ce dc b9 94 bd fa 2a 19 07 0e 70 f7 3d f7 60 31 9b b1 5a ad a8 d5 6a ae bd e6 1a 56 ae 5a d5 39 bf d2 de ce 80 b4 34 e6 cd 9f 4f 6a df be 0c 1c 34 88 8b 95 42 fc 2e 8f 44 5c 18 a7 d3 49 5e 5e 1e 31 31 31 b8 b9 b9 51 56 56 e6 ba 4b 03 c8 cd cd a5 aa aa 0a 5f 5f 5f 7a f7 ee 8d c1 60 c0 e1 70 50 5e 5e 8e 97 97 17 26 93 09 5f 5f 5f 57 28 9c 6e b4 bc bc bc 48 1b 30 80 d6 d6 56 b2 b3 b3 b1 db ed c4 c6 c5 Data Ascii: _swo&UUU$''3fhinn`0j]WZBA`` z2y$\|\|\|:@P&Nd>Zii9r7\|LdTCa*p=`1ZjVZ94Oj4B.D\I^^111QVVK___z`pP^^&___W(nH0V
2024-04-25 18:48:06 UTC	8302	IN	Data Raw: 3b f1 78 3c 24 25 25 f1 f0 6f 7f 4b 44 44 04 00 a7 0a 0b 79 f1 c5 17 f9 d9 cf 7e 46 7a 5a 1a f5 75 75 3c f1 87 3f 70 c7 b2 65 b4 b7 b7 f3 ca ab af a2 56 a9 e8 71 b9 b8 e7 9e 7b 98 37 6f 1e 7f ff c7 3f 48 4e 4a e2 96 5b 6e a1 be be 9e 67 56 ad e2 de 7b ee 21 2d 2d 2d 50 3e 8d 5a 8d 24 49 74 75 76 22 01 e1 e1 e1 a8 55 2a 82 82 82 68 69 69 61 f9 f2 e5 5c 75 d5 55 44 44 44 f0 c4 8a 15 1c 3f 7e 9c e0 e0 60 46 8e 18 c1 03 0f 3c 10 28 df be 7d fb 78 ef bd f7 b0 3b 1c 3c f4 d0 43 fc f1 8f 7f c4 6a b5 f2 dc 73 cf d1 e3 72 21 cb 32 df be e9 26 be fd ed 6f a3 d5 6a 01 38 7d fa 34 9b 36 6f c6 eb f1 50 58 58 c8 ca 95 2b d9 b3 67 0f ef 6e da 44 50 50 10 29 29 29 fc e4 27 3f 21 39 29 89 35 6b d6 f0 f6 3b ef 60 36 9b 91 80 fb ef bf 9f 59 b3 66 91 97 97 c7 f3 cf 3f 8f dd Data Ascii: ;x<$%%oKDDy~FzZuu<?peVq{7o?HNJ[ngV{!---P>Z$Ituv"U*hiia\uUDDD?~`F<(}x;<Cjsr!2&oj8}46oPXX+gnDPP)))'?!9)5k;`6Yf?
2024-04-25 18:48:06 UTC	3101	IN	Data Raw: 02 1d ec 6e 8f 87 96 d6 56 54 6a 35 a9 a9 a9 24 24 24 f0 5f b7 de 4a 7a 5a 1a d0 3b 8a ab 22 ff 7f 8b 47 25 49 58 3b 3a 38 76 ec 18 41 66 33 43 52 53 b1 58 2c 28 7d fb 56 fa 26 61 12 04 41 f8 ba 1a b4 01 32 34 35 85 1e 77 ef 74 ab 3d 2e 17 5e 9f 0f 8f c7 43 41 61 11 ad 1d 1d 0c 1b 9a 7a c1 c7 79 27 4f 9a 44 4d 4d 0d 31 31 31 84 84 84 30 6e ec 58 72 73 73 59 ff f6 db fc ed f9 e7 99 3e 7d 3a 7a bd 1e 93 d1 c8 84 f1 e3 c9 c9 c9 61 e3 c6 8d fc ed 6f 7f 23 d4 62 61 f2 a4 49 34 36 34 e0 f5 78 38 79 f2 24 fe be 19 fe 86 0c 19 42 78 78 38 7f ff fb df f9 f0 c3 0f 79 f9 95 57 b0 db ed 54 57 57 e3 f5 7a 71 3a 9d 54 57 57 d3 de de 8e c9 68 44 ad 56 a3 d3 e9 ce 2b 9f 20 08 c2 d7 c5 a0 1e ce bd a3 b3 93 bc 13 27 f1 f9 fc e8 0d 7a dc 6e 0f 6a 95 c4 98 b4 d1 24 c4 c5 5e Data Ascii: nVTj5$$$_JzZ;"G%IX;:8vAf3CRSX,(}V&aA245wt=.^CAazy'ODMM1110nXrssY>}:zao#baI464x8y$Bxx8yWTWWzq:TWWhDV+ 'znj$^
2024-04-25 18:48:06 UTC	8	IN	Data Raw: 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49951	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:06 UTC	1184	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-5a.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:06 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 17040 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:06 GMT Etag: "80678bba82fdbec8a197271f7c8001c7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C689XKHEQZGEEF2BQX1F X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:06 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 06 08 06 00 00 00 4b 80 c3 92 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 2e 32 03 2a d6 f3 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 54 d5 fd ff f1 d7 9d 35 93 7d 5f 48 48 20 21 6c 01 c2 2e 8b ec 82 20 0a b8 e0 d6 d6 a5 b6 62 6d 6d ad da 6a d5 aa fd 7e 5d be d4 e5 d7 56 51 d4 af 5a 77 2d 2e 20 8a a2 b2 2f 12 08 5b c2 96 40 20 09 49 08 d9 b7 49 66 b9 73 cf ef 8f 90 29 91 e5 0b 53 14 85 cf f3 f1 e0 d1 e6 ce bd e7 9e 73 67 bc ef 7b ce b9 77 46 4b 4e 49 51 08 21 84 10 a7 c9 62 b1 58 ce 76 1d 84 10 42 fc 08 69 5f 2f 5b 26 3d 10 21 84 10 a7 4d 53 4a 49 80 08 21 84 38 6d a6 b3 5d 01 21 84 10 3f 4e 12 20 42 08 21 02 22 01 22 84 10 22 20 Data Ascii: PNGIHDRKpHYs+tIME.2* IDATxy\|T5}_HH !l. bmmj~]VQZw-. /[@ IIfs)Ssg{wFKNIQ!bXvBi_/[&=!MSJI!8m]!?N B!"""
2024-04-25 18:48:06 UTC	2372	IN	Data Raw: 26 d3 0f 63 9a e6 c0 81 03 7c f6 f9 e7 74 49 4c 24 25 25 05 e3 a8 1e 59 c7 ff 0f 0a 0a 62 c8 90 21 d4 d6 d5 91 96 96 86 32 0c 4c 26 d3 0f a6 0d 42 08 71 46 a9 93 58 b6 6c 99 1a 37 6e 9c 2a 28 28 50 e5 e5 e5 6a d0 e0 c1 0a 50 0b 17 2e 54 1e 8f 47 5d 77 fd f5 2a 2c 3c 5c 8d 9f 38 51 4d 99 3a 55 4d 9c 34 49 8d 1b 3f 5e 7d f2 c9 27 c7 2d cf 30 0c 35 78 c8 10 d5 37 2b 4b ed df bf df bf dc e3 f1 a8 e7 e6 cd 53 80 ba f7 de 7b 95 cf e7 53 fb f7 ef 57 21 21 21 ea 9e 3f fe 51 29 a5 54 59 59 99 da bc 79 b3 aa aa aa 3a 61 7d f7 ee dd ab 36 6f de ac 9a 9a 9a fc fb 6b 6c 6c 54 86 61 28 5d d7 55 7d 7d bd f2 7a bd fe f5 eb eb eb 95 c7 e3 f1 ff 5d 55 55 a5 b6 6c d9 a2 0a 0a 0a 8e 29 fb 9f af bf ae e2 13 12 d4 6b af bd a6 7c 3e 9f f2 7a bd ca e3 f1 f8 ff 79 bd 5e 65 18 86 Data Ascii: &c\|tIL$%%Yb!2L&BqFXl7n((PjP.TG]w,<\8QM:UM4I?^}'-05x7+KS{SW!!!?Q)TYYy:a}6okllTa(]U}}z]UUl)k\|>zy^e
2024-04-25 18:48:06 UTC	538	IN	Data Raw: eb f5 32 68 e0 40 5e 7e f1 45 1e 7a f8 61 c6 8f 1f 4f 4a 4a 0a 3e c3 e0 d2 4b 2e 61 ea d4 a9 6c de bc 19 00 b3 c9 44 58 58 d8 31 f3 33 49 5d ba f0 e4 5f ff ca 3d f7 dc c3 35 d7 5e eb 1f c6 aa ae ae e6 17 bf fc 25 0f 3c f0 40 7b dd 35 8d 90 90 10 82 8e cc cd 9c 88 cd 66 23 34 34 14 ab d5 8a c9 64 22 24 24 04 47 50 10 5e 5d 67 d0 a0 41 bc f4 e2 8b dc ff e0 83 4c bb e4 12 62 62 62 68 6e 6e 26 34 24 84 c7 1f 7f 9c d1 a3 47 9f b4 6c 21 84 f8 21 d1 d4 89 26 19 be a5 b1 b1 91 7f 2d 58 c0 f0 61 c3 e8 d6 ad 1b 33 66 ce e4 92 69 d3 b8 f7 de 7b a9 ad ad c5 eb f5 92 90 90 70 ca 57 d0 5b b6 6c 61 fb f6 ed d4 d7 d7 63 18 06 b1 71 71 8c 19 33 86 8c f4 74 00 9a 9b 9b f9 7a d9 32 7a f5 ec 49 df be 7d fd db b5 b5 b5 b1 29 37 17 ab c5 c2 b0 61 c3 fc bd 9d 1d 3b 76 b0 6c d9 Data Ascii: 2h@^~EzaOJJ>K.alDXX13I]_=5^%<@{5f#44d"$$GP^]gALbbbhnn&4$Gl!!&-Xa3fi{pW[lacqq3tz2zI})7a;vl
2024-04-25 18:48:06 UTC	4744	IN	Data Raw: 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 02 e4 72 b9 d0 bd 5e ff df ba ae b3 67 cf 1e f2 f2 f3 71 3a 9d 67 b1 66 67 46 63 63 23 87 2a 2b 51 4a 9d ed aa 7c 2f 7c 86 c1 c1 b2 32 5a 5b 5b cf 76 55 84 f8 d1 38 e7 03 44 29 c5 37 df 7c 43 ee e6 cd c7 bc e6 76 bb 59 bc 78 31 7b 76 ef 3e ad 32 4b 4a 4a b8 e5 17 bf e0 d3 cf 3e 03 da 4f b6 7f fe f3 9f 79 e8 e1 87 79 eb ad b7 a8 aa aa 3a 23 75 3f 9b be f8 e2 0b 9e 7c ea 29 bc 47 85 e4 b9 cc e9 74 f2 c0 03 Data Ascii: $@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@r^gq:gfgFcc#*+QJ\|/\|2Z[[vU8D)7\|CvYx1{v>2KJJ>Oyy:#u?\|)Gt
2024-04-25 18:48:06 UTC	5930	IN	Data Raw: 5f 78 81 77 df 7d 97 d6 d6 56 a0 3d 44 9d 4e 27 d0 7e 85 dd b1 fc f0 e1 c3 1c 38 70 c0 5f 6e 5b 5b 9b ff ea bb 63 fd 0e 1e 8f 87 45 9f 7c 42 ce 86 0d 54 55 57 f3 f2 cb 2f 93 93 93 e3 6f c3 be 7d fb fc eb ba dd 6e aa aa aa 28 28 28 f0 2f 53 4a 51 52 52 42 55 55 15 bb 77 ef ee 74 4c 3b da d8 f1 fe 75 70 b9 5c 34 36 36 52 5e 5e de a9 ec 1d 3b 76 f8 db ea 72 b9 50 4a a1 eb 3a fa 91 8b 8f 86 86 86 4e bd 88 83 07 0f fa 8f d7 d1 c7 b0 b9 b9 d9 ff 77 53 53 13 c5 c5 c5 94 97 97 b3 6e fd 7a a0 3d 30 8f 57 2f 21 7e 4c ce 8b 1e 88 d5 6a 65 ec d8 b1 fc e2 96 5b fc cb 3e fa e8 23 76 ec dc 49 5c 6c 2c 1f 2f 5c c8 c4 09 13 d8 b3 67 0f 6e 8f 87 19 97 5d c6 d7 cb 96 d1 d8 d0 40 6b 6b 2b 23 46 8c c0 64 32 b1 7a f5 6a 12 93 92 f8 c5 2d b7 a0 eb 3a f9 3b 76 90 bf 63 07 5b b7 Data Ascii: _xw}V=DN'~8p_n[[cE\|BTUW/o}n(((/SJQRRBUUwtL;up\466R^^;vrPJ:NwSSnz=0W/!~Lje[>#vI\l,/\gn]@kk+#Fd2zj-:;vc[
2024-04-25 18:48:06 UTC	2791	IN	Data Raw: 71 91 41 5d ad a2 b1 c1 60 e1 fb 1e 92 bb 9a 02 7e c2 dc 11 ac 61 b1 82 7e d4 10 96 52 d0 ea 54 27 1d 32 32 99 21 21 49 63 c9 42 2f e5 a5 8a c3 15 3e 0e 16 2b d2 7b 98 49 4c d6 f8 ec 63 2f 53 67 5a c8 1e 6a a6 5f b6 85 25 1f 7b 18 34 cc 42 5a 77 13 25 07 0c ca 4a 0d da 5a 21 b5 bb 09 bb 1d 1a 1b 14 95 7b 0d 7a f4 32 e1 33 14 55 95 8a 92 fd 90 d9 c7 44 44 a4 46 af be 26 b6 6e d2 b9 60 b4 85 92 fd 3e 0e 95 29 cc 27 f9 64 b5 b4 c8 44 ba 10 e7 82 73 3e 40 a0 fd f9 88 6f 8f fb 9f 2a af b7 7d 3e 62 f8 28 33 56 9b c6 f2 a5 3a 21 a1 1a e5 a5 8a b4 ee 26 5a 9a a0 b1 c1 c0 1e 04 dd 7b 98 d0 bd 8a 36 97 c2 dd 06 4d 4d 8a b0 46 15 70 78 b5 b5 29 74 2f 58 8f 7a 97 da 6f 8d d5 d0 38 f1 49 58 19 50 57 a3 c8 ec 63 e2 50 b9 22 31 49 63 d4 78 0b ce 16 68 69 82 e2 03 3e 3c Data Ascii: qA]`~a~RT'22!!IcB/>+{ILc/SgZj_%{4BZw%JZ!{z23UDDF&n`>)'dDs>@o*}>b(3V:!&Z{6MMFpx)t/Xzo8IXPWcP"1Icxhi><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49955	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:07 UTC	1183	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-6.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:07 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 24055 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:07 GMT Etag: "fd475ac7525fc0e9b040fc56a4c29229-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C725EYDERVFQXRJKCXCG X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:07 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 37 08 06 00 00 00 84 a6 17 9a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 32 3a eb 86 03 9c 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 15 55 c2 ff f1 cf 4d ee bd b9 e9 bd 92 06 24 40 02 49 08 3d 52 25 54 69 2a ac 08 ae 8a 2e f6 15 2c 8b 8a 0a 62 5d 74 1f 57 59 3b f6 82 b2 82 08 48 6f 21 21 02 a1 24 d4 90 02 84 f4 de 6f c9 ad e7 f7 07 66 1e 22 45 cd 4f 1f dc f5 bc 5f 2f 5e 24 53 cf 4c e6 ce 77 e6 9c 99 7b 54 11 91 91 02 49 92 24 49 fa 85 d4 76 87 e3 6a 97 41 92 24 49 fa 0f a4 fa 76 ed 5a 79 07 22 49 92 24 fd 62 2a 21 84 0c 10 49 92 24 e9 17 73 ba da 05 90 24 49 92 fe 33 c9 00 91 24 49 92 3a 45 06 88 24 49 92 d4 29 32 40 24 49 92 a4 Data Ascii: PNGIHDR7pHYs+tIME2: IDATxw\|UM$@I=R%Ti.,b]tWY;Ho!!$of"EO_/^$SLw{TI$IvjA$IvZy"I$b!I$s$I3$I:E$I)2@$I
2024-04-25 18:48:07 UTC	2372	IN	Data Raw: 01 d2 aa d7 f3 3f ff f8 07 c3 87 0f 67 e8 d0 a1 84 85 85 f1 d7 bf fe 95 a6 a6 26 de 79 fb 6d 1c 0e 07 2f fd fd ef d8 6c 36 8a 8b 8b 79 eb ed b7 b1 d9 6c 68 34 1a c6 8e 19 43 6c 6c ec 25 57 f6 cf d7 5e e3 ad b7 de e2 2f 77 de c9 dd 77 df 8d bb bb 3b 4d 4d 4d 7c f6 d9 67 2c 7f ff 7d 2c 16 0b 9f 7e f2 09 5a ad 16 67 67 67 00 34 1a cd 6f b7 f5 bf 50 73 73 33 81 81 81 2c 5e bc 98 c0 80 80 0e e1 66 b3 d9 08 0d 0d 25 2c 2c 8c 0f 3e f8 80 d3 a7 4f 93 9a 9a 4a 4d 4d 0d 6a b5 5a d9 1e 49 92 a4 ff 16 97 0c 10 17 17 17 6a 6a 6b 59 fa f2 cb 6c de b4 89 87 e6 cf 67 fa 8c 19 5c 37 71 22 63 c7 8e e5 c8 d1 a3 d8 2c 16 e2 e2 e2 c8 c8 c8 c0 e1 70 60 b7 d9 70 71 71 a1 77 7c fc 65 03 e4 fb cc 4c fc fc fc 78 fd f5 d7 71 75 75 55 86 f7 ef df 9f ca aa 2a 36 6c d8 c0 ce 5d bb 98 Data Ascii: ?g&ym/l6ylh4Cll%W^/ww;MMM\|g,},~Zggg4oPss3,^f%,,>OJMMjZIjjkYlg\7q"c,p`pqqw\|eLxquuU*6l]
2024-04-25 18:48:07 UTC	538	IN	Data Raw: 86 eb af 67 f9 f2 e5 bc f8 d2 4b 98 cd 66 86 0d 1b 86 93 b3 33 df 7d f7 1d 1f bc ff 3e 0b 1e 7b ec 8a ef 98 48 92 24 fd 5e 5c 32 40 9c 9c 9c 08 09 09 51 7e df 9f 95 c5 f1 63 c7 f8 d7 bf fe 85 4a a5 e2 8d 37 df 64 d8 b0 61 3c ff fc f3 04 04 04 d0 50 5f 8f bb 9b 1b 93 27 4d ba e2 ca 6e bb ed 36 82 82 83 f9 e0 fd f7 79 f6 b9 e7 30 19 8d 68 5d 5c b0 98 cd f4 1f 30 80 37 96 2d e3 fa eb af 07 20 20 30 90 2e e1 e1 17 55 15 b9 bb b9 11 19 11 81 ef 0f 2f f8 0d 19 32 84 f7 de 7b 8f a5 2f bf cc bd f7 de 8b ab bb 3b 9e 1e 1e 3c f0 c0 03 24 26 26 72 f0 e0 41 34 1a 0d 4e 4e 4e 84 87 87 13 14 1c 8c 4a f5 bf df 62 a5 56 ab 99 33 67 0e 2a 95 8a 57 5e 79 85 59 b3 66 e1 e9 e9 89 d9 6c 66 c2 84 09 3c b3 78 31 d1 d1 d1 d8 ed 76 42 42 42 50 a9 54 97 ac a2 bb 90 8f af 2f 91 91 Data Ascii: gKf3}>{H$^\2@Q~cJ7da<P_'Mn6y0h]\07- 0.U/2{/;<$&&rA4NNNJbV3g*W^yYflf<x1vBBBPT/
2024-04-25 18:48:07 UTC	4744	IN	Data Raw: 78 ee b9 e7 3a 5c c9 4b 92 24 49 7f 2c bf 28 40 84 10 98 4c 26 b4 5a ed 4f 56 e3 48 92 24 49 ff dd 7e 51 80 48 92 24 49 52 3b d9 27 ba 24 49 92 d4 29 32 40 24 49 92 a4 4e 91 01 22 49 92 24 75 8a 0c 10 49 92 24 a9 53 64 80 48 92 24 49 9d 22 03 44 92 24 49 ea 14 19 20 92 24 49 52 a7 c8 00 91 24 49 92 3a 45 06 88 24 49 92 d4 29 32 40 24 49 92 a4 4e 91 01 22 49 92 24 75 8a 0c 10 49 92 24 a9 53 64 80 48 92 24 49 9d 22 03 44 92 24 49 ea 14 19 20 92 24 49 52 a7 c8 00 91 24 49 92 3a 45 06 88 24 49 92 d4 29 32 40 24 49 92 a4 4e 91 01 22 49 92 24 75 8a 0c 10 49 92 24 a9 53 64 80 48 92 24 49 9d 22 03 44 92 24 49 ea 14 19 20 92 24 49 52 a7 c8 00 91 24 49 92 3a 45 06 88 24 49 92 d4 29 32 40 24 49 92 a4 4e 91 01 22 49 92 24 75 8a 0c 10 49 92 24 a9 53 64 80 48 92 24 49 Data Ascii: x:\K$I,(@L&ZOVH$I~QH$IR;'$I)2@$IN"I$uI$SdH$I"D$I $IR$I:E$I)2@$IN"I$uI$SdH$I"D$I $IR$I:E$I)2@$IN"I$uI$SdH$I"D$I $IR$I:E$I)2@$IN"I$uI$SdH$I
2024-04-25 18:48:07 UTC	5930	IN	Data Raw: 58 d2 2f a2 12 57 aa 40 96 80 f3 57 d0 99 99 99 e4 e7 e7 e3 e9 e9 c9 80 01 03 48 4a 4a 52 ae 72 5b 5b 5b 29 28 28 20 3e 3e 5e f9 50 d6 d7 d7 53 52 52 42 52 52 12 4e 4e 4e d8 6c 36 0e 1d 3a c4 fe fd fb 71 77 77 67 c4 88 11 f4 ec d9 53 59 87 dd 6e 27 27 27 87 83 07 0f e2 ea ea 4a 4a 4a 4a 87 f1 cd cd cd ec da b5 8b b3 67 cf e2 ef ef cf c4 89 13 09 0e 0e 06 ce bf 3f 92 99 99 c9 91 23 47 e8 d2 a5 0b a9 a9 a9 f8 fb fb 5f 76 7b 16 2d 5a c4 d6 ad 5b d9 b4 69 13 01 01 01 ca 70 b3 d9 4c 5a 5a 1a b9 b9 b9 74 eb d6 8d 6b af bd b6 c3 fb 10 75 75 75 6c da b4 89 96 96 16 c6 8c 19 83 4e a7 c3 dd dd 1d 5f 5f 5f 4e 9f 3e 8d a7 a7 e7 15 df 25 d8 bb 77 2f 47 8f 1e 45 a3 d1 30 78 f0 60 12 12 12 94 71 79 79 79 1c 3e 7c 98 da da 5a 06 0e 1c c8 d0 a1 43 3b cc 9b 9d 9d cd fe fd Data Ascii: X/W@WHJJRr[[[)(( >>^PSRRBRRNNNl6:qwwgSYn'''JJJJg?#G_v{-Z[ipLZZtkuuulN___N>%w/GE0x`qyyy>\|ZC;
2024-04-25 18:48:07 UTC	7116	IN	Data Raw: 76 bb 9d ca ca 4a 4a 4a 4b 29 28 28 40 df da 8a ce d5 95 9b 67 ce e4 a3 8f 3e 22 21 21 81 d4 d4 54 0e 1e 3c c8 e7 9f 7f 4e 60 50 10 d5 55 55 f4 eb df 9f e6 a6 26 66 ce 9c c9 a1 43 87 68 6e 6e c6 d5 cd 8d d3 85 85 18 4d 26 86 0c 1e 8c c1 60 e0 d8 f1 e3 b8 b8 b8 10 1d 15 45 69 69 29 35 35 35 8c 1a 35 0a 17 17 17 f2 f3 f3 f9 f7 bf ff 8d 00 b6 6d db c6 9f ff fc 67 fe f9 cf 7f e2 e6 ea 4a 53 73 33 37 de 70 83 d2 eb 9f 24 49 d2 cf 21 2f 39 2f a3 57 af 5e 3c f6 d8 63 54 55 57 b3 ee bb ef 68 a8 af 67 eb d6 ad e7 bb a0 6d 69 61 d3 e6 cd bc b7 7c 39 6d 6d 6d cc 9f 37 8f 19 33 66 60 34 1a 29 2b 2b c3 66 b3 d1 d8 d4 44 65 55 15 a7 4e 9d 22 28 38 98 c1 83 07 93 9f 97 77 be 4b ce 01 03 18 35 6a 14 63 c6 8c e1 c8 91 23 64 66 66 b2 3f 2b 8b d8 d8 58 00 be f8 e2 0b 42 42 Data Ascii: vJJJK)((@g>"!!T<N`PUU&fChnnM&`Eii)5555mgJSs37p$I!/9/W^<cTUWhgmia\|9mmm73f`4)++fDeUN"(8wK5jc#dff?+XBB
2024-04-25 18:48:07 UTC	2690	IN	Data Raw: ef b5 39 5a 11 c7 e7 87 96 66 0b d3 05 0f 3f ea 26 29 c9 60 df ee 18 1b 1e f3 4c 58 ec 1e 8f 65 81 cf 67 5c 32 cc 33 d1 74 dd 91 05 84 67 9b 2d 06 fa 6d 9e f8 13 37 9f 54 59 ac 59 e7 e6 6c b3 4d 4f b7 4d f1 3d 2e 86 c3 36 b6 0d 9d ed 36 5e 5f 22 24 dc 6e 30 5d 10 8d 25 86 dd ce 75 c5 b1 2f aa 75 fb 93 12 61 da db 03 8b 97 9a dc b3 d2 24 7b 86 49 7d ad 45 d6 34 03 d3 84 e1 48 a2 77 64 18 57 18 c3 9a 40 4f 4f 0f 7b f7 ee e5 c3 0f 3f a4 bc bc 9c f2 f2 72 36 6d da c4 d6 ad 5b 1d 1d 4f 44 c6 a7 00 19 47 de 6c 93 c6 fa 18 b6 ed 6c 8d 84 3f c9 a0 68 99 8b 53 f5 71 5c 2e 83 87 1e f1 30 33 cf 64 df ee 18 a6 09 ab ef 77 93 9e 69 e0 f1 c0 fe 8f e2 78 bd b0 7c 85 8b 58 3c b1 fa 3a 67 86 8b 7d 7b a2 44 87 6d 3c 0e 7a 42 fd e7 13 1f c4 7e ff d8 db 03 41 83 f8 04 35 7a Data Ascii: 9Zf?&)`LXeg\23tg-m7TYYlMOM=.66^_"$n0]%u/ua${I}E4HwdW@OO{?r6m[ODGll?hSq\.03dwix\|X<:g}{Dm<zB~A5z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49957	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:07 UTC	1186	OUT	GET /en-us/sharefile/media/rb-try-now-sf-hello.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856
2024-04-25 18:48:07 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 48317 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:07 GMT Etag: "cebfa44c1df57374e83054c3e9f52786-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C725YBQHZX22A5CZRQAP X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:07 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 90 00 00 02 8c 08 06 00 00 00 9d 2f 57 70 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0b 12 27 1d fc 45 b7 98 00 00 20 00 49 44 41 54 78 9c ec dd 7b 70 1b d7 9d 2f f8 2f f8 a6 9e 04 65 5b b6 43 02 16 65 c9 63 8b 9e 64 6d 25 1a 72 80 dc d9 b2 e3 2d 91 4e d5 56 46 a2 76 09 ff 91 3f 56 63 82 55 71 99 d2 ec ac a0 b9 55 93 ad 8a 09 ce 4c 51 f2 4d aa 4c cd 78 b7 ee dd ba 02 37 a2 98 dc da 9b 90 9a f8 31 b5 ab c6 90 51 2c f9 26 b1 6c c7 92 48 b9 9b 8a 25 59 22 41 3d 2c 82 2f f4 fe 01 9e 66 37 d0 78 12 4f f2 fb a9 62 91 68 74 9f 3e dd 44 1f f4 af cf cb 32 36 36 a6 82 88 88 88 88 88 88 28 81 92 7c 67 80 88 88 88 88 88 88 8a 43 99 d9 c2 f3 e7 cf e7 3a 1f 44 Data Ascii: PNGIHDR/WppHYs+tIME'E IDATx{p//e[Cecdm%r-NVFv?VcUqULQMLx71Q,&lH%Y"A=,/f7xObht>D266(\|gC:D
2024-04-25 18:48:07 UTC	2372	IN	Data Raw: 71 b8 0e ec 67 f0 48 54 44 f6 ec 7e 1e af 75 1c c4 bf bc fb 1e ce 9d bf 90 ef ec 10 11 15 9d 9c 36 61 f5 f9 7c 70 38 1c b0 db ed 90 65 19 3e 9f 0f 1e 8f 07 36 9b 4d ab 8d 74 b9 5c 38 ea f1 a4 95 be 2c cb e8 ef ef 87 e4 f7 6b cb 6c 36 1b 5c ed ed 5a 90 aa 27 49 52 da c7 92 0f 92 24 19 8e 2d 9e a3 1e 0f 24 49 d2 02 e4 e1 a1 21 38 9d 4e c8 8a 02 49 92 e0 70 38 b2 99 55 a2 55 ed cc bb ef 03 aa 8a bd 2f bd 98 ef ac 10 51 9a 5c 07 f6 e3 cc 3b e1 20 92 4d 5a 89 88 92 97 d3 00 d2 db d3 03 9b cd 86 e1 a1 21 b8 3b 3b 61 b7 db b5 60 d1 db d3 03 8b c5 82 57 d2 6c ca ea f5 7a d1 ed f5 9a be e7 f3 f9 e0 72 b9 70 a2 af 2f ed bc 17 02 c9 ef 87 37 c6 31 46 3a ea f1 18 82 4d 45 51 b2 95 2d a2 35 85 c1 23 d1 ea b1 f7 a5 17 e1 3b 75 1a b5 56 2b 5b 12 10 11 25 29 ab 01 a4 2c Data Ascii: qgHTD~u6a\|p8e>6Mt\8,kl6\Z'IR$-$I!8NIp8UU/Q\; MZ!;;a`Wlzrp/71F:MEQ-5#;uV+[%),
2024-04-25 18:48:07 UTC	538	IN	Data Raw: ee 55 27 fa fa 20 49 12 14 45 41 eb cb 2f c3 d5 de 6e 88 2b 7c 3e 9f 36 f0 67 64 cb 47 f1 b7 d9 39 f7 f5 f7 6b b1 91 cd 66 83 c3 e1 48 7a de f7 7c c9 6a 00 f9 8a cb 65 98 52 23 19 e2 83 ed f5 7a 63 f6 67 4c b4 bd cd 66 5b 1e 34 67 a9 19 aa 68 2e aa 02 29 07 a6 c0 f2 85 ea 48 f1 78 84 c8 20 55 1f 90 a5 da f9 56 cc a5 99 09 22 88 f5 f9 7c 79 ef 90 4b 44 85 c7 e9 70 68 37 25 91 62 f5 2b d7 13 7d ca c4 cf 54 20 80 93 3f 3d 8d 3d df 0c 07 31 df 5a 6a 2e 29 06 28 3a 77 fe 02 a6 a6 02 78 72 7b 03 f6 ec b6 62 ca a4 6f 62 ad d5 1a 15 e4 98 ad 97 8e 5a eb 72 53 5a 7d ba df da fd 3c f6 7c 33 1c 28 fe f8 c4 db 86 fe 89 62 6e d0 27 b7 37 a0 e5 a5 06 43 70 67 16 8c 4d 05 a6 53 ce 53 2a 41 9d 08 9c 6b ad 56 ec d9 fd 9c 76 8e f5 c7 a3 4f af d6 6a c5 6b 1d 07 71 ee fc 05 Data Ascii: U' IEA/n+\|>6gdG9kfHz\|jeR#zcgLf[4gh.)Hx UV"\|yKDph7%b+}T ?==1Zj.)(:wxr{bobZrSZ}<\|3(bn'7CpgMSS*AkVvOjkq
2024-04-25 18:48:07 UTC	4744	IN	Data Raw: fb a2 a6 33 dc 77 f3 ea 52 1a 0d 5a bf c7 48 67 de 7d 1f e7 ce 5f d0 8e 2d 53 c1 38 11 e5 86 cd 66 d3 06 42 f4 fb fd a6 b5 57 62 e4 6c 51 83 96 ab 71 2d fc 7e 7f d4 6c 0b 2e 97 4b bb 6f f7 7a bd 90 24 49 9b 3b 5e 1f fc 8a b8 c0 eb f5 c2 e5 72 c1 6e b7 c3 dd d9 09 55 55 b5 a0 2b 97 c4 3c f6 40 38 f6 88 0c 10 4f f4 f5 69 fd 13 c5 71 25 c3 6e b3 c1 db d3 a3 8d ac eb f3 f9 b4 7b 7f 11 48 47 a6 15 2f f6 c9 85 ac d6 40 4a 92 14 b7 0a d6 ae 9b e0 be bf bf 1f dd 5e af 36 f0 8d a8 c6 4e 66 f0 16 51 83 17 6f c4 d2 13 7d 7d 2b aa 61 13 4d 39 7d 3e 5f cc 26 b8 66 4f 4b 62 d1 7f e8 12 cd 4b a9 aa 6a 4a 79 4d 85 be 4a 3d 56 3e d8 7c 95 28 dc 8c 70 ad 8e c2 aa 7d 29 fa fd 70 38 1c da 48 d1 76 bb 3d e1 48 70 62 40 16 31 1d c5 8e ed 0d da 79 7c cd 7d 10 67 de 79 0f 93 53 Data Ascii: 3wRZHg}_-S8fBWblQq-~l.Koz$I;^rnUU+<@8Oiq%n{HG/@J^6NfQo}}+aM9}>_&fOKbKjJyMJ=V>\|(p})p8Hv=Hpb@1y\|}gyS
2024-04-25 18:48:07 UTC	5930	IN	Data Raw: 70 3a bc 4e 73 73 33 46 46 47 70 6a e0 14 7a 8f f5 62 f0 f4 a0 21 f0 dc b7 6f 5f 38 5f 2a 0c db 0c 9e 1e c4 b1 de 70 7f 8a 2f fe f8 85 69 3e bb ba ba 30 71 6d 02 e7 7e 7d 2e a9 e3 22 22 22 a2 e2 71 ac f7 58 54 17 a0 e6 d3 d1 f7 25 d7 26 ae 01 00 ea ea eb c2 0f a1 9b c2 db 36 0f 26 6e 16 9b ce 78 12 66 db 64 7a 5c 8a 58 c4 b1 e6 03 03 48 2a 68 aa 69 bd e3 d2 7b a1 45 7c f1 e9 28 6e 4d dd 47 55 59 25 aa 4b cb 51 53 b1 80 c7 9f 7c 0c 37 be f8 02 f7 27 af 63 ee ee 57 68 f9 c6 93 b0 cc 3e 40 d9 3a 3b 16 67 6f c0 b2 38 07 55 55 4d 07 e5 b1 c0 82 07 0f a2 6b 28 b3 49 04 8f 87 0f 1f 46 db fe 36 d4 d7 d7 6b 41 65 ef b1 5e d4 d7 d7 a7 34 c2 ea c4 c4 04 5e ef 7a 1d f5 f5 f5 18 1c 1c d4 02 3f 7d 9a 4d cd c9 8d 74 76 f8 50 38 30 8c d5 27 41 e4 af a9 29 ba ef a3 08 62 Data Ascii: p:Nss3FFGpjzb!o_8_p/i>0qm~}."""qXT%&6&nxfdz\XHhi{E\|(nMGUY%KQS\|7'cWh>@:;go8UUMk(IF6kAe^4^z?}MtvP80'A)b
2024-04-25 18:48:07 UTC	7116	IN	Data Raw: ef 1e 1a 96 06 c9 23 22 a2 dc 90 65 05 1b 36 6c 40 79 79 79 d6 1e e8 dd ba f5 a5 e1 75 59 a6 12 3e f3 ce fb 86 d7 be 53 83 51 01 e4 b9 0f 2e e0 35 f7 41 d4 5a ad da 74 1f 0c 20 73 af 90 6b 1e 81 fc 74 06 26 22 22 81 2d 40 88 88 8a 4d 51 0e a2 33 15 88 dd 6c 55 4f 8c ce 5a 6b b5 62 2a 4e 53 57 ca 8e cb 63 e3 05 1d 3c 0a 0c 1e 89 88 f2 2b 95 e6 50 ec 76 40 44 94 5f b9 2c 87 33 56 03 b9 f7 3b 2f 84 6b b6 96 d4 5a ad f8 b1 c9 e8 9e 67 de 7d 1f 4f 36 6c 83 ef d4 20 f6 be c4 c1 5b 72 6d c7 f6 86 a2 a9 f5 e5 0d 09 11 51 3e 58 d2 7a 88 c7 32 9b 88 28 7f 72 59 f9 92 b9 00 f2 a5 17 51 5b 6b c5 b9 0f 2e 60 c7 f6 06 ec 7d e9 c5 a8 f9 05 77 6c 6f 80 ef d4 69 9c b9 32 86 bd 2f bd 10 d5 c4 95 48 2f 9f b5 90 92 24 01 08 8f c8 4b 44 b4 16 25 5b 06 5b 2c e9 05 9c 6b 99 24 Data Ascii: #"e6l@yyyuY>SQ.5AZt skt&""-@MQ3lUOZkb*NSWc<+Pv@D_,3V;/kZg}O6l [rmQ>Xz2(rYQ[k.`}wloi2/H/$KD%[[,k$
2024-04-25 18:48:07 UTC	8302	IN	Data Raw: 69 09 3f 3c f1 46 64 df 47 3b 7a 65 49 f8 6c 66 08 d9 a1 ce ae e0 18 44 12 1b 9a 5b 71 f4 8b 47 30 6f 18 ce ca 93 11 5a b5 ac ea 8a a1 bd 37 67 af 91 91 9c 84 d3 7f 38 17 f9 71 e7 0d a3 e7 33 e1 42 36 33 84 83 c3 c3 b1 cc 87 5c b8 bc 98 a8 20 9c 81 23 11 51 ef 88 ba ce ee da 22 3a 57 af 2d 41 fd b7 1f e3 f8 37 be 86 07 0e df 8f ef 2a ff bd 63 fb 7e f8 d8 b1 a6 01 a1 69 9a 50 2b 95 ba d7 47 0b 85 8e 1d 5f 68 74 9c 28 df df 8e 07 0e 8f e0 cb 4f 3c 9e e8 20 b2 97 1a 2e 07 0f 0c c3 b6 53 91 35 38 bd c1 63 52 1a 9a 9d f0 f8 63 8f 62 de 30 23 0b 22 c5 79 ec d5 f9 a3 8d a4 d3 69 27 2b 1e 61 10 29 82 c7 ed 12 84 03 4e 10 19 f5 3d bd 70 d9 99 cb dc cb f7 74 2f d5 db 44 44 db 4d d4 d3 08 ba 16 40 fe fb af 7f 83 07 46 ee af 06 2c 5f c2 5f 3c f1 25 7c 72 fe c2 96 f7 Data Ascii: i?<FdG;zeIlfD[qG0oZ7g8q3B63\ #Q":W-A7*c~iP+G_ht(O< .S58cRcb0#"yi'+a)N=pt/DDM@F,__<%\|r
2024-04-25 18:48:07 UTC	3101	IN	Data Raw: f2 20 ce 9d b9 e3 0e 21 04 9c 39 68 4f 3e dd 5e 23 6c 69 79 b9 67 16 d1 d9 ca 33 2b 9d c0 7b a0 ee 35 ef dc 52 f1 0c be 76 86 5d ae 5a 56 cf 04 e2 80 78 24 4a f0 f2 3e f7 c2 6e 4c fd ed 7f ba 8f 89 39 f2 d0 0e bc fa 9d c6 8f f5 f0 ae c8 1a 5a 0f c5 12 61 87 02 8b f3 b2 ff de 94 33 74 35 64 70 1d d4 aa 65 75 ec 11 23 61 79 17 c5 49 6a 5d 4c 44 44 f1 61 00 49 89 95 c4 1e ed b0 59 9f 56 0d f4 27 e5 9d ee 5c be e7 9e df 8d cf aa f3 a9 c4 ff c3 58 5a 5e c1 e7 0f 0c 87 7a 4f 9c da 79 86 21 50 3b 8f f4 83 f7 6f e3 27 d5 95 59 ff f5 9f 6d 77 8e e4 56 1e 3b b1 bc b2 d2 13 cf 80 04 80 91 43 39 5c b8 68 84 0e 78 5f 7a 79 10 3f 7a 7d cd 3d 5f 8d d4 ac 24 1a 32 40 8a 33 f0 69 47 66 68 08 96 65 05 9e 43 fc c1 fb b7 23 99 63 bb dc c6 f3 52 3b 89 d9 47 22 a2 de 20 3a fb Data Ascii: !9hO>^#liyg3+{5Rv]ZVx$J>nL9Za3t5dpeu#ayIj]LDDaIYV'\XZ^zOy!P;o'YmwV;C9\hx_zy?z}=_$2@3iGfheC#cR;G" :
2024-04-25 18:48:07 UTC	10674	IN	Data Raw: 40 53 64 d3 05 ef 3e fc d7 0e 00 bc e9 99 2f 0a a0 66 28 37 e0 09 4e 55 b5 e1 f9 11 c1 ac 9f ff bb 30 3c f7 80 bf 5c 49 20 3a 28 44 00 37 5e 2a b9 e7 d7 f0 8c 0a f0 df 93 e2 7e f6 9f b7 cd 78 cf 85 38 ff 41 ae df 28 88 0e 3c 0e 49 25 22 4a 3e ef bc f5 a8 ea 6d ce 81 a4 44 8a ba 27 45 d3 75 77 d8 aa 6d db 9b 36 6e 4f ce cd d5 0d 23 15 64 59 46 71 6c 5a 40 ec 1c 00 00 20 00 49 44 41 54 0c 53 e5 32 52 70 02 4f 59 96 03 cf fd aa 54 2a 6e 63 56 64 89 84 b2 27 53 a6 78 32 25 22 1b 22 b2 53 7e aa aa e2 c4 ec 2c e4 7c be 61 63 3f 29 d4 4a 05 27 66 67 6b 82 73 59 96 a1 aa 2a 74 5d 87 2c cb 98 f2 65 25 c5 eb cd 88 f3 91 93 24 98 d5 a1 ad 62 ff aa aa 26 26 eb b3 99 46 e5 17 d7 86 ff 35 cd 73 7e bc d7 83 f7 da c9 49 12 34 5d 77 b3 90 82 f7 1a 11 c3 66 01 d4 64 14 bd Data Ascii: @Sd>/f(7NU0<\I :(D7^~x8A(<I%"J>mD'Euwm6nO#dYFqlZ@ IDATS2RpOYTncVd'Sx2%""S~,\|ac?)J'fgksY*t],e%$b&&F5s~I4]wfd
2024-04-25 18:48:07 UTC	4875	IN	Data Raw: d7 ef c3 68 74 b9 16 c4 b0 5f b1 5e 3c 55 46 e3 f1 38 4c 26 03 41 64 c9 7c 37 ec 34 7d 67 53 58 69 25 d3 a7 00 f2 30 78 b7 9b ab ab 62 2d 78 1c 8d 2e 37 4e 59 7d f3 66 bc c8 44 92 c6 68 74 19 de bc 79 9c 4e 1c a7 b2 56 95 d1 3c d3 f5 b6 72 0d 1e fb 51 15 e0 c7 32 aa 9a b2 1a eb 9a e9 c6 73 d6 40 d2 69 29 47 50 00 a8 d6 64 10 4f 9b 3d ef c4 96 83 c7 c9 64 12 06 83 61 b8 b9 b9 0d 57 57 c5 5a 20 a2 f3 9b 56 51 14 61 3c 7e bb 54 46 d3 e9 34 8c c7 6f 17 d9 c6 d5 b2 98 4f 95 7c 97 fa 52 3b 6b 3a 9d 86 c1 60 39 23 1f b3 c0 83 c1 b0 32 88 34 10 f3 28 65 e2 45 00 09 00 ac 11 14 d6 17 83 93 b2 f2 0e ac d7 d7 ef c3 74 3a 59 eb 00 0f 06 c3 ca 9d 5a 49 ab 3c 65 b5 2a 13 29 c8 4f a3 28 de 6d dc 61 75 3c 1e 87 37 6f c6 6b d9 62 e5 13 42 08 e9 13 2f 02 48 5a c7 86 0c 00 Data Ascii: ht_^<UF8L&Ad\|74}gSXi%0xb-x.7NY}fDhtyNV<rQ2s@i)GPdO=daWWZ VQa<~TF4oO\|R;k:`9#24(eEt:YZI<e*)O(mau<7okbB/HZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49956	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:07 UTC	1181	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:48:07 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:07 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C7280F051QV0NZQ9229T Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49958	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:07 UTC	1187	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:48:07 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:07 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C72S98QN9MW5TX3NRWTM Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49960	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:07 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070886925 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:07 UTC	986	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:48:07 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7apraaadwjzy X-Cloud-Trace-Context: f8222ed485d119569990bbebcb77cb34 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CKS5-467t9LRyQEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49959	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:07 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7b43&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:07 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:07 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 255e8a45aff6633687f7e4911e918abc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: EK4jFvQ6_ITLSUwK_6hvlj0fhU4HUdE7ZQOCB0qZklsK9860nQXxOA== Vary: Origin
2024-04-25 18:48:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49961	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:07 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:07 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1tj6mdwlc X-Cloud-Trace-Context: 02e871f6309182861d256511cfc6b123 Date: Thu, 25 Apr 2024 18:48:07 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:07 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49962	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:07 UTC	1176	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; GA1.3.1048297747.1714070881; _gid=GA1.3.256634718.1714070881; _ga=GA1.2.1322026028.1714070856 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:48:08 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:08 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C7N58ZMAQ6V9PMEY9TBG Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49966	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:08 UTC	903	OUT	GET /en-us/sharefile/media/rb-get-started-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:08 UTC	519	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1132 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 110080 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:08 GMT Etag: "8969e78b38e29d17eb6d0d5a95e43fdc-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C80FXNRBD2TARBZK1SS4 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:08 UTC	667	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 01 c0 08 06 00 00 00 40 b2 bb 64 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0a 13 2c 17 46 1a 8a 1f 00 00 20 00 49 44 41 54 78 9c ec 9d 79 78 14 55 f6 f7 bf 55 dd 9d ee ec 09 09 64 5f d8 45 51 56 51 10 47 19 05 15 f5 51 41 06 70 9f 41 96 71 19 d9 44 44 9d 51 09 f2 73 61 97 51 10 15 5f 45 91 65 54 54 04 41 70 00 47 14 23 3b 42 08 04 b2 07 92 10 c8 9e ee aa f3 fe d1 dd 45 77 52 95 74 25 9d 74 02 e7 f3 3c 3c 40 75 d5 bd a7 aa 6e dd 3a 75 ee 59 04 22 22 30 0c c3 30 0c c3 30 4c 1b c2 66 b3 a1 bc bc 1c 82 20 d4 bb 5f 48 48 88 20 b6 90 4c 0c c3 30 0c c3 30 0c e3 13 8c be 16 80 61 18 86 61 18 a6 b5 d3 90 15 91 69 79 ac 56 6b 9d 6d a2 28 42 96 e5 Data Ascii: PNGIHDR@dpHYs+tIME,F IDATxyxUUd_EQVQGQApAqDDQsaQ_EeTTApG#;BEwRt%t<<@un:uY""000Lf _HH L00aaiyVkm(B
2024-04-25 18:48:08 UTC	2372	IN	Data Raw: 5a ad 98 36 6d 1a 86 0d 1b 76 59 2a bb 00 f0 cb 2f bf 60 ec d8 b1 18 39 72 24 72 73 73 5b b4 6f af 29 bc 36 9b 0d c5 c5 c5 9c aa 83 61 18 86 61 18 c6 85 b3 67 cf e2 81 07 1e c0 fc f9 f3 21 49 92 af c5 f1 39 5f 7d f5 15 ee b9 e7 1e 1c 39 72 a4 c5 fa f4 9a c2 fb c9 27 9f 60 d8 b0 61 38 7f fe bc b7 9a 64 18 86 61 18 86 69 d3 54 56 56 e2 81 07 1e c0 ba 75 eb 7c 2d 4a ab e2 b7 df 7e c3 1d 77 dc 81 53 a7 4e b5 48 7f 5e 51 78 8b 8a 8a 30 7d fa 74 0c 18 30 00 61 61 61 38 7e fc 38 b6 6e dd da a8 b6 ce 9f 3f 8f c2 c2 42 54 56 56 aa fe 5e 50 50 80 87 1e 7a 08 53 a7 4e 55 52 4d b4 65 aa aa aa f0 dd 77 df 29 5f 39 59 59 59 18 33 66 0c 66 cc 98 e1 63 c9 18 86 61 18 86 69 2a 33 67 ce 6c b4 4e 74 a9 93 99 99 89 bf fe f5 af 2d 92 95 a2 51 41 6b 85 85 85 58 be 7c 39 1e 7f Data Ascii: Z6mvY/`9r$rss[o)6aag!I9_}9r'`a8daiTVVu\|-J~wSNH^Qx0}t0aaa8~8n?BTVV^PPzSNURMew)_9YYY3ffcai3glNt-QAkX\|9
2024-04-25 18:48:08 UTC	538	IN	Data Raw: d6 df df 1f 27 4e 9c c0 91 23 47 f0 cd 37 df e0 f0 e1 c3 d8 bf 7f 3f ee bb ef 3e ec db b7 4f f1 07 26 22 4c 99 32 05 1b 37 6e c4 ad b7 de 8a dd bb 77 e3 d0 a1 43 38 70 e0 00 06 0f 1e 8c 09 13 26 40 92 24 44 44 44 00 b0 bb 22 98 4c 26 bc f5 d6 5b 98 3b 77 2e ee bd f7 5e cc 9f 3f 1f 63 c7 8e c5 6f bf fd 86 31 63 c6 e0 cc 99 33 58 b1 62 05 0e 1d 3a 84 c3 87 0f e3 d5 57 5f c5 f1 e3 c7 f1 d8 63 8f e1 ec d9 b3 6e e7 a6 95 45 c2 b9 ac ec 7a cd 42 42 42 34 af fb e4 c9 93 b1 7a f5 6a 8c 1a 35 0a fb f6 ed c3 c1 83 07 b1 65 cb 16 f4 ea d5 0b 0b 17 2e c4 fb ef bf af 7d d3 98 4b 02 3f 3f 3f 24 27 27 23 22 22 02 31 31 31 48 4e 4e 86 2c cb d8 b7 6f 1f 1e 7f fc 71 ec df bf 1f c5 c5 c5 98 3b 77 2e b6 6d db 86 9d 3b 77 62 d6 ac 59 a8 ae ae c6 96 2d 5b 30 7f fe 7c 1c 3c 78 Data Ascii: 'N#G7?>O&"L27nwC8p&@$DDD"L&[;w.^?co1c3Xb:W_cnEzBBB4zj5e.}K???$''#""111HNN,oq;w.m;wbY-[0\|<x
2024-04-25 18:48:08 UTC	4744	IN	Data Raw: 55 ab 56 21 35 35 15 b3 67 cf c6 89 13 27 f0 e3 8f 3f a2 a2 a2 02 73 e6 cc c1 d2 a5 4b 71 e8 d0 21 bc f4 d2 4b c8 cd cd c5 c9 93 27 f1 f2 cb 2f e3 e0 c1 83 98 3d 7b 36 5e 79 e5 15 8f 65 0b 0c 0c 44 78 78 38 8c 46 23 c2 c2 c2 14 77 8b ea ea 6a bc f5 d6 5b 38 7a f4 28 7e fd f5 57 bc f3 ce 3b a8 a8 a8 c0 92 25 4b 70 e0 c0 01 ec dc b9 13 73 e6 cc 41 4d 4d 0d de 7b ef 3d 7c f2 c9 27 38 78 f0 20 66 cd 9a 85 82 82 02 ec dc b9 13 9b 37 6f 06 00 1c 3f 7e 1c 9f 7e fa 29 ca cb cb 31 6d da 34 fc e7 3f ff 41 69 69 29 36 6c d8 80 f9 f3 e7 e3 c8 91 23 78 f9 e5 97 91 9e 9e 8e 0d 1b 36 e0 8b 2f be 40 6e 6e 2e 16 2c 58 80 ec ec 6c fc f7 bf ff c5 aa 55 ab 90 93 93 83 17 5f 7c d1 6d b9 38 30 30 10 1b 36 6c 50 0d 96 5e b6 6c 19 0e 1d 3a d4 64 ab 1d d3 7a 11 04 01 01 01 01 6e Data Ascii: UV!55g'?sKq!K'/={6^yeDxx8F#wj[8z(~W;%KpsAMM{=\|'8x f7o?~~)1m4?Aii)6l#x6/@nn.,XlU_\|m8006lP^l:dzn
2024-04-25 18:48:08 UTC	5930	IN	Data Raw: d3 4d 37 a1 73 e7 ce c8 cc cc 44 df be 7d 61 b1 58 30 7c f8 70 5c 79 e5 95 c8 ca ca c2 d5 57 5f 8d b0 b0 30 a5 0a e5 a9 53 a7 70 e5 95 57 aa ce c5 ae d7 9b b9 7c f0 f3 f3 c3 94 29 53 90 95 95 05 59 96 e1 e7 e7 87 ae 5d bb 62 ea d4 a9 d8 b3 67 0f ba 77 ef 8e b8 b8 38 9c 38 71 02 83 06 0d 52 fc fc 5d 5d 62 82 82 82 f0 c8 23 8f c0 df df 1f 23 47 8e 54 8c 58 93 27 4f d6 95 97 da 60 30 20 30 30 50 d5 15 4c 0f 67 ce 9c 51 9e af 35 6b d6 60 fe fc f9 e8 d3 a7 0f 3e ff fc 73 14 17 17 e3 fc f9 f3 38 74 e8 10 ac 56 2b ca ca ca d0 bb 77 ef 3a fa cb 90 21 43 70 e8 d0 21 bc fb ee bb 78 f7 dd 77 f1 eb af bf e2 ce 3b ef 84 d5 6a 85 d5 6a c5 63 8f 3d 06 93 c9 84 27 9f 7c 12 cb 96 2d 83 c1 60 70 33 26 3a 7d ee 45 51 44 79 79 39 8e 1e 3d 8a 92 92 12 e4 e7 e7 e3 d1 47 1f 55 Data Ascii: M7sD}aX0\|p\yW_0SpW\|)SY]bgw88qR]]b##GTX'O`0 00PLgQ5k`>s8tV+w:!Cp!xw;jjc='\|-`p3&:}EQDyy9=GU
2024-04-25 18:48:08 UTC	7116	IN	Data Raw: 9e a0 b5 54 dc dc 7d ba e5 eb 6e 81 db e4 ea 48 72 e9 29 1b ae 67 e4 cb 42 ac de 7b fe 0a 0b 8b 1c 56 59 87 75 36 33 5b b1 d4 16 e4 9f f1 86 b0 ba f1 33 fb 29 29 bc 62 e3 ec 4a 6d 6c 7c 0c 12 12 13 10 13 1f 5b 6f b1 05 86 61 18 46 1f ae ba 82 dd 9d b3 e5 fa 6e 03 0a 2f c3 30 6d 01 49 92 70 3a 33 4b f1 9f cd cb c9 43 a6 e2 7a 90 ed db 92 b8 6e 99 0e ec 25 71 63 e2 62 10 a5 51 12 97 61 18 86 b9 b4 d0 50 78 85 16 b1 0a 7a 4a f3 c9 e2 9d 4f 8b d6 74 ad 2e 07 3c af b4 a6 7d 7f f9 9e 79 8e eb b5 2a 39 57 62 57 68 b3 b2 1d 01 62 39 c8 cc cc 42 56 66 96 cf ac b4 06 83 41 b1 d2 26 24 da 15 da 84 c4 04 c5 b7 d6 d5 4a 4b 22 3f f3 0c c3 30 ba d0 31 e1 79 63 6e f4 34 49 9d de be 8c a2 4a 86 01 fb 22 a6 e7 75 d1 45 97 5e 5d a3 ce b5 5e 2e ce 85 51 f7 c5 52 f5 6c 07 9a Data Ascii: T}nHr)gB{VYu63[3))bJml\|[oaFn/0mIp:3KCzn%qcbQaPxzJOt.<}y*9WbWhb9BVfA&$JK"?01ycn4IJ"uE^]^.QRl
2024-04-25 18:48:08 UTC	8302	IN	Data Raw: ce 90 35 09 2c 46 42 03 f0 da 11 82 5c 26 43 3e 97 ab 2e f6 a0 06 d0 a1 01 f3 bd e4 7b 02 ad 01 e0 e8 a3 8f 0e bc ba 4f 3d f5 14 2f bf fc 72 6c d9 05 0b 16 90 cd 66 69 6b 6b e3 d4 53 4f 05 86 0e 06 db b8 71 23 3f ff f9 cf 83 cf 5f fc e2 17 39 fe f8 e3 63 cb 8f 1d 3b 96 ef 7d ef 7b 81 d7 f3 89 27 9e e0 2f 7f f9 cb a0 7e bc fe fa eb 00 cc 9c 39 93 2b ae b8 22 b6 be 59 b3 66 f1 a5 2f 7d a9 6c 1f 01 7e f1 8b 5f b0 79 f3 66 c0 04 e3 5d 73 cd 35 65 cb 5f 7b ed b5 01 15 e1 d9 67 9f 0d 74 89 e3 70 f8 e1 87 f3 85 2f 7c 61 c8 7e f8 68 6c 6c e4 ea ab af 2e 32 74 c3 68 6b 6b e3 82 0b 2e 08 3e af 5d bb 76 8f b9 26 13 24 a8 04 d2 9f 69 0b 2f d5 22 aa 8e 72 f5 d4 a2 cd 5d 81 9d d7 ef dd 69 54 a2 b1 bb 9e e3 1d 89 d1 34 26 a6 7d 89 c8 59 c8 7e 8b 94 6f 10 ea f0 f7 de 7a Data Ascii: 5,FB\&C>.{O=/rlfikkSOq#?_9c;}{'/~9+"Yf/}l~_yf]s5e_{gtp/\|a~hll.2thkk.>]v&$i/"r]iT4&}Y~oz
2024-04-25 18:48:08 UTC	6075	IN	Data Raw: 96 d0 dd dd 4d 7b 7b 3b 47 1f 7d 34 6f 7f fb db 39 f3 cc 33 e9 e8 e8 18 56 dd 4f 3c f1 04 2f bc f0 02 00 b3 67 cf e6 c8 23 8f 2c 5b fe b5 d7 5e e3 be fb ee 63 d1 a2 45 bc f4 d2 4b f4 f5 f5 31 79 f2 64 8e 39 e6 18 e6 ce 9d cb e9 a7 9f 5e 64 7c 96 42 6b cd c2 85 0b 59 bd 7a 35 4d 4d 4d 9c 7b ee b9 d4 d5 d5 b1 76 ed 5a 7e f3 9b df f0 d8 63 8f f1 dc 73 cf e1 38 0e 07 1c 70 00 6f 7b db db 38 e3 8c 33 98 3d 7b f6 a0 ba 7a 7b 7b f9 c3 1f fe 40 7f 7f 3f cf 3d f7 5c b0 fd c1 07 1f c4 71 1c 00 0e 38 e0 00 4e 3a e9 a4 e1 0c 4d 82 04 09 6a 04 f1 fa e3 bf 09 6e f9 43 bd c5 c6 bf 01 14 2c fd 22 0a 40 35 4f ed 18 dd 35 3f d2 b9 14 55 bd 43 88 f0 b4 7e 75 9e da 70 e0 db 70 93 5d c4 ea b8 fa d3 e7 60 5c 5d 25 88 1b ef ea 29 0d d1 0f da 6a ea 19 5a 87 77 e8 48 74 e5 ef 32 Data Ascii: M{{;G}4o93VO</g#,[^cEK1yd9^d\|BkYz5MMM{vZ~cs8po{83={z{{@?=\q8N:MjnC,"@5O5?UC~upp]`\]%)jZwHt2
2024-04-25 18:48:08 UTC	10674	IN	Data Raw: a3 ab ab 2b 28 3f 67 ce 1c 7e f0 83 1f 0c 4a f0 10 70 ae 63 de c2 2a d1 fc bd e6 9a 6b e8 eb eb e3 bb df fd 2e 00 f7 dd 77 1f f7 dd 77 1f 1d 1d 1d 48 29 51 4a d1 d9 d9 59 b4 ff c7 3f fe 71 ae b8 e2 8a 21 db ac 04 95 f4 71 d6 ac 59 c1 fa aa 55 ab 38 f3 cc 33 a9 af af 67 ca 94 29 bc ed 6d 6f 63 ec d8 b1 55 b5 99 20 c1 e8 85 0e dd 29 77 8f 7b 65 62 f0 d6 10 02 82 67 65 30 9b 3d 08 e5 0d 4a 31 74 91 32 48 0c 5e d8 b5 06 af 89 9f 8a 33 09 bd 22 15 a8 2b 54 c4 15 0d 66 96 c5 20 3e 8b 10 02 29 cc 14 bf 46 0f 5d 9f 2e 50 41 8c f9 ec 73 2e e2 a5 b8 7c d5 86 20 a8 4e 94 0a 77 15 82 ee 7c 5a 84 d2 ca b4 a5 3d 2d 5f 0c 5f 16 4c 76 33 8d 46 a4 41 d6 59 c8 56 41 bd d4 f4 a5 fb 69 3f a0 95 43 0e 9b cc f6 9e 66 b2 d9 3c ae 03 4a 99 5b ae 02 a4 10 08 4b 90 4a a7 a9 ab af Data Ascii: +(?g~Jpc*k.wwH)QJY?q!qYU83g)mocU )w{ebge0=J1t2H^3"+Tf >)F].PAs.\| Nw\|Z=-__Lv3FAYVAi?Cf<J[KJ
2024-04-25 18:48:08 UTC	11860	IN	Data Raw: 05 0c c5 fc 1d 47 c6 e7 0d bf 97 8a e2 50 42 f1 80 43 89 2c 0c ab 7d 25 62 7c 00 8a 35 56 45 a8 18 9a a4 aa ba ba fe b2 91 d0 e9 73 80 7f 7f 09 23 91 71 1d ea fb 12 3f 7a f5 ea 65 c5 6f ad ac ac b4 ac 5d 4d 61 cd 9a 35 dc 7c f3 cd 3c fe f8 e3 cc 9b 37 0f bf df df a8 4e 59 59 19 7f fc e3 1f 2d 6f fe 5f fd ea 57 8c 1f 3f 9e d3 4f 3f 3d 2a 54 d9 ef 7f ff fb 46 1a 4c 3b 6c dc b8 31 66 f4 81 30 be f8 e2 0b 2b 8c d6 a0 41 83 a2 2c a6 91 72 84 a5 4b 97 c6 d5 2f 98 c4 fc 0f 7f f8 03 af be fa 2a 1b 37 6e 8c 6b 9b e6 62 d8 b0 61 96 0e 78 dd ba 75 51 91 2d 62 e1 85 17 5e e0 f6 db 6f e7 e5 97 5f e6 ab af be da 9f 43 a4 6f df be 56 58 b0 92 92 92 98 61 d0 c2 d8 be 7d 3b 2f be f8 22 4f 3f fd 34 77 dc 71 07 95 95 95 00 9c 74 d2 49 56 9d cf 3f ff 3c 2e 4d 6f 6d 6d 2d f7 Data Ascii: GPBC,}%b\|5VEs#q?zeo]Ma5\|<7NYY-o_W?O?=TFL;l1f0+A,rK/7nkbaxuQ-b^o_CoVXa};/"O?4wqtIV?<.Momm-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49963	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:08 UTC	659	OUT	POST /api/v2/sendInsights?1714070886925 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1440 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 3863846402 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:08 UTC	1440	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:48:08 UTC	723	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:08 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: 7aprock9zzaf X-Cloud-Trace-Context: c234ddae8f64f0e16d4db84cb834a043 Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CO_p8_-moO690QEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:08 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49967	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:08 UTC	904	OUT	GET /en-us/sharefile/media/rb-plan-details-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:08 UTC	518	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1132 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 24472 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:08 GMT Etag: "c440c9b6fee597d8184b373b7137101b-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C827C3VD6XXR9RK7WWDT X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:08 UTC	668	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8d 00 00 00 de 08 06 00 00 00 c1 ca 5c 3c 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 03 1b 11 06 33 73 b2 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 1c d5 a1 f7 f1 ef d4 9d d9 a2 6a 4b b6 e4 a2 6a cb 72 ef c6 b8 17 dc c0 a6 83 29 b9 69 04 12 92 4b ca cd 9b dc 37 b9 09 29 f7 de 5c 42 00 27 a1 c5 40 20 06 6c 53 5c c0 b8 83 8d 7b ef dd 96 2d 5b 92 65 d9 ea 5a 6d 9b f6 fe 21 e3 00 21 f7 15 c8 60 48 ce e7 79 fc 3c 2b ef ee ec 99 99 dd f9 cd 9c 73 e6 1c c9 f3 3c 0f 41 10 04 41 68 05 f9 4a 17 40 10 04 41 f8 e2 10 a1 21 08 82 20 b4 9a 08 0d 41 10 04 a1 d5 3e 10 1a 56 75 29 f3 9f 7d 8e e7 9e 7b 8e b5 07 2b ff ce 5b e2 1c d9 b2 85 ca 46 eb 13 7e a4 4b c9 Data Ascii: PNGIHDR\<pHYs+tIME3s IDATxwxjKjr)iK7)\B'@ lS\{-[eZm!!`Hy<+s<AAhJ@A! A>Vu)}{+[F~K
2024-04-25 18:48:08 UTC	2372	IN	Data Raw: 79 4a 2b cf 61 14 8e e2 fe 99 d3 48 d1 a5 2b b6 b3 04 41 10 ae b4 4b 57 1a 69 45 93 98 ec 6f e2 b6 eb ef e1 9e 2f cd e4 e5 63 d0 b3 28 9b b2 93 07 38 50 5e 0f c0 c1 9d bb 39 71 ae 89 86 86 30 c9 57 4d e6 87 df fd 3a 3b e7 ce 67 fe cb 7f e2 f1 b5 55 7c e7 07 3f e3 ce 91 45 24 9a ab 79 7a f6 43 28 23 ee e6 87 3f b8 97 0e 4a 33 5b 56 2d e2 bc dc 8d af cd 9c c4 e9 dd ab 39 7e e2 38 f3 16 ae a5 df 3d f7 73 ff f8 4e cc fa f5 3c 52 86 8f 63 f0 e8 d1 8c 1e d6 91 13 ef 6e 62 f3 92 79 fc 65 c9 31 be f3 83 1f 32 39 2b cc ef 9e 58 46 55 d9 51 de d9 72 96 db 7f f8 43 86 2a 07 79 f2 cd f5 97 56 66 cd dc 87 d9 65 e7 f2 c3 1f 7e 93 74 af 1a 49 8e b2 ea 4f 7f 20 9e 73 23 ff f9 9f 3f e7 d8 c2 17 d9 5a 99 cc f4 b1 43 b8 fd ea de bc bb fa 6d 8a ae bf 8f 9b ae 1d c6 ea e7 fe Data Ascii: yJ+aH+AKWiEo/c(8P^9q0WM:;gU\|?E$yzC(#?J3[V-9~8=sN<Rcnbye129+XFUQrC*yVfe~tIO s#?ZCm
2024-04-25 18:48:08 UTC	538	IN	Data Raw: 45 3d 7a 92 93 e6 c7 75 5d 24 45 25 18 30 00 50 34 03 7f 28 48 bb 50 88 9d ef 2e e2 94 d5 81 1b a7 4d a2 7a f7 bb 6c 3a 6d d2 3e 90 20 bd 7d 2a 3b de dc c7 c9 88 9f 91 13 ef 60 ec a0 c1 e4 07 83 2c 7f e5 6d 1a 92 0b 18 73 cd 18 4c 2f 81 2b 6a a8 04 41 f8 27 72 59 ba dc 7a f1 08 64 77 e7 67 f7 4f 62 de ac 59 1c ac 06 9f 02 96 ed 22 6b 0a aa a6 41 1c 90 24 54 d5 20 01 d8 4a 08 5f 48 03 c2 d8 ae 82 aa 80 e6 4b c6 d0 00 cb c1 b6 3c 9a a2 31 62 4e 9c 8a d3 a5 d4 c9 e9 8c be 76 18 26 0a e0 e2 61 e1 01 78 2e ae 24 e1 33 34 00 14 35 80 86 1f cb 49 90 88 c7 b1 de 2b a3 eb 60 7b 2e 3a a0 a8 50 dd 68 33 e3 5b df e3 37 ff 76 1b 17 76 2e e4 e7 0f fc 98 03 95 36 71 64 ce 95 97 52 d1 14 60 ea b4 51 a4 05 c1 f3 59 b8 9e c7 5d df 7b 94 5f 7e 63 38 47 56 ce e1 ce 5f fe 9e Data Ascii: E=zu]$E%0P4(HP.Mzl:m> }*;`,msL/+jA'rYzdwgObY"kA$T J_HK<1bNv&ax.$345I+`{.:Ph3[7vv.6qdR`QY]{_~c8GV_
2024-04-25 18:48:08 UTC	4744	IN	Data Raw: 04 81 f4 6c 0a 3a a6 90 48 d8 74 ee 52 4c 4e 5e 7b 1a 4f ef 62 47 89 c7 cc fb ef 65 58 ff be a4 69 17 98 3b ff 4d 2a a5 74 be 74 d7 14 74 2b 41 72 56 16 79 59 21 1c c7 c5 b2 5d 72 7a f5 a7 bd 77 90 c5 2b b7 92 56 38 85 6f 5c 3f 02 3b d2 4c a0 43 3e 79 39 99 b8 56 1c 23 2d 9b 8e c1 30 2b 96 af a3 5d c1 60 c6 0d 1d 4a 7e 6e 2a cb 16 ce 65 eb ae 63 f4 9b f1 65 ae bd 66 08 85 e9 f5 cc 7b e9 0d 8e d7 49 dc 31 f3 16 52 35 0b 23 a9 03 85 59 ed a0 f9 1c cb 5f 5b c4 d6 43 e7 18 7f c7 57 18 9e 9f 4a 3c 61 7f 4a bb 46 10 04 e1 ca d3 75 fd 03 b9 20 79 17 fb 8d 46 22 11 6c db fe 78 a1 81 07 b2 86 df 6f 10 6b 6e c2 71 41 d1 4c 02 a6 46 24 dc 84 a4 9b 98 ba 8a eb 78 c8 9e 4b d4 b2 30 0c 85 e6 a6 28 8a cf 44 97 6c 9a 63 36 7e 7f 10 d7 8e a3 ea be 96 86 65 49 22 11 8b 10 Data Ascii: l:HtRLN^{ObGeXi;Mttt+ArVyY!]rzw+V8o\?;LC>y9V#-0+]`J~necef{I1R5#Y_[CWJ<aJFu yF"lxoknqALF$xK0(Dlc6~eI"
2024-04-25 18:48:08 UTC	5930	IN	Data Raw: 84 68 03 e4 0d ef c1 d2 77 17 71 f0 c4 49 5e 5f b6 91 fc dc 61 a4 ca 11 1a 9b 5b e6 39 49 c4 e2 c4 9a 6b 39 76 c2 a5 c7 d5 33 e8 9b 51 ce a2 3f 6f a2 a6 da c6 72 a2 c4 2d 07 a9 65 da 14 02 29 29 94 ee 3f c8 9e c3 25 ac 58 b5 85 f2 5a 99 fd db 36 70 48 ca e7 4b 5f bf 8b 9c bc 46 1a 94 6c ae ee 9b 4d 56 e1 48 66 8c ed 8e 44 2d ba df 24 da d8 84 a7 68 5c 38 b6 83 25 fb 62 cc bc fb ab 8c eb dd 83 ca 53 95 a0 28 a8 46 80 da 23 cb f9 d6 0f ff 95 6d c7 6b 38 7e b8 9a de 99 3a 09 54 62 e5 47 38 15 6c a2 43 76 47 5c db 06 3c 64 7c 48 21 99 0d db 77 73 72 ff 6a de d9 7e 18 37 56 cb 9a 45 9b c9 9a 74 17 77 dc 35 86 c6 78 39 5d 7b 0f a4 7b 07 3f 23 ae bd 95 de ed 5c 6c 3d 81 9c b0 08 47 ad 96 f9 60 00 9f ea 72 e0 48 39 1d fc ed 49 0f 4a 2d 6d 0c 12 78 6e 82 a6 a6 66 Data Ascii: hwqI^_a[9Ik9v3Q?or-e))?%XZ6pHK_FlMVHfD-$h\8%bS(F#mk8~:TbG8lCvG\<d\|H!wsrj~7VEtw5x9]{{?#\l=G`rH9IJ-mxnf
2024-04-25 18:48:08 UTC	7116	IN	Data Raw: 59 43 f9 ca ad 53 48 cf cc a2 5b b6 41 69 79 84 f1 b7 dc c1 c8 7e b9 74 2c 28 24 ab 6b 27 fc 46 cb fd 16 8e eb 92 d1 ad 17 7d 0b 3b 51 5e dd c0 35 33 bf c4 c0 82 0c d2 32 d2 c9 cd ed 44 e7 82 3c b2 f2 0a e8 da 39 87 2e 9d 73 c8 c9 ce a6 b0 b0 2b 79 5d d3 09 fa 74 32 bb 16 d0 b1 63 07 d2 da a7 20 d9 1e 92 22 a1 25 a5 32 7e d8 d5 28 4e 0c 47 0d 31 6c 58 5f 22 15 25 d4 58 41 ae 9a 74 0d 5d d3 82 1c da bd 1d f2 47 70 dd b0 6e 64 14 0e a2 53 4a 82 13 67 2e d0 b5 cf 08 c6 f6 ed 49 5a e7 2e 74 1f 34 9c bc 0c 8f 23 47 cb e9 36 76 2a d3 86 17 12 8f 25 3e 8d ef 83 20 08 c2 07 e8 ba fe 81 5c 90 bc 8b 77 a8 45 22 11 6c db fe d8 a1 01 2d f5 fd 3e 23 88 4f 93 00 97 48 73 33 b6 2b 63 f8 0d ec 68 33 f6 ff 6b ef ce 03 a3 28 ef c7 8f bf e7 da 6b 36 27 49 48 42 c8 45 b8 43 Data Ascii: YCSH[Aiy~t,($k'F};Q^532D<9.s+y]t2c "%2~(NG1lX_"%XAt]GpndSJg.IZ.t4#G6v*%> \wE"l->#OHs3+ch3k(k6'IHBEC
2024-04-25 18:48:08 UTC	3104	IN	Data Raw: 6c d8 30 14 45 61 c5 8a 15 67 3b 64 e1 2c 69 d6 a4 b1 7a d1 22 e2 f2 07 d0 b3 7d 17 86 17 24 f3 de 82 c5 0d ff 3b b0 63 29 cf 4e 9d 47 46 bf ab 79 f0 be 31 ac 7e eb 7f f9 e7 92 62 70 c1 c7 ef 4d e5 9d d5 87 19 31 f6 a7 8c e9 1b cf 93 4f 3e c6 9e 20 04 0e 7f cd c6 c2 ed 1c 2b e7 53 7d 70 37 cb 0b 8b 51 b1 98 fe 97 ff 61 ce 0e f8 c9 ff 3c c2 a3 3f bf 91 25 33 ff cc 6b 6b 0e c3 49 d7 bc 6d 22 11 85 cc b6 19 ac 5f f5 2e eb f6 47 7f 41 16 af fa 88 55 7b ea c8 4e 3e 7f 3a 8b 7d 3e 1f 07 0e 1c a0 7d fb f6 a7 7c 8a df a2 45 0b e2 e3 e3 d9 b9 73 e7 0f 14 dd 99 11 36 42 b4 ee 31 90 36 8e fd 2c d9 70 18 80 ba 9d ab d9 2f a5 33 a0 20 97 60 c8 42 02 16 ff e3 09 9e 59 b0 93 d1 f7 dc c7 b8 b1 97 f2 c1 f3 bf e1 85 45 45 48 6e 9b 4f 3f 9a c8 9c 2f aa b9 76 ec bd dc dc c3 Data Ascii: l0Eag;d,iz"}$;c)NGFy1~bpM1O> +S}p7Qa<?%3kkIm"_.GAU{N>:}>}\|Es6B16,p/3 `BYEEHnO?/v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49968	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:08 UTC	904	OUT	GET /en-us/sharefile/media/rb-plan-pricing-2.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:08 UTC	520	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 70843 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:08 GMT Etag: "e6135c8ed4697d7e3b5aed1dca1f71bd-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C82CXJJ9QHYMRT9K1A7V X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:08 UTC	666	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 01 a7 08 06 00 00 00 55 43 84 86 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0a 13 2e 25 bc fb b9 1d 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 14 d5 fa c0 f1 ef 6c df 24 a4 10 92 10 20 40 80 50 42 09 dd d0 a4 77 69 0a 28 62 45 e4 da af 5e b0 c0 cf 8b 78 2f 5e 0b f6 06 88 28 45 a5 48 ef d2 6b e8 2d b4 10 4a 20 21 90 90 de b6 ef ce ef 8f 84 48 80 50 14 45 e2 fb f1 91 87 67 67 e6 cc 99 33 b3 cb bb 67 cf 79 8f a2 aa aa 8a 10 42 08 21 84 10 77 29 ab d5 8a c3 e1 40 51 94 6b 6e d7 fc c9 f5 11 42 08 21 84 10 e2 4f 25 01 af 10 42 08 21 84 28 53 14 45 29 d1 db 2b 01 af 10 42 08 21 84 28 33 34 1a 0d 6e b7 1b 8f c7 83 46 53 18 ea 4a c0 2b 84 10 42 08 Data Ascii: PNGIHDRUCpHYs+tIME.% IDATxwxl$ @PBwi(bE^x/^(EHk-J !HPEgg3gyB!w)@QknB!O%B!(SE)+B!(34nFSJ+B
2024-04-25 18:48:08 UTC	2372	IN	Data Raw: 69 df be fd 0d f7 75 3a 9d c4 c5 c5 71 fe fc 79 f4 7a fd 55 db af 3b 86 f7 c7 1f 7f c4 60 30 e0 e7 e7 87 dd 6e 67 c4 88 11 8c 18 31 82 fb ef bf bf d4 80 37 3e 3e 9e e7 9f 7f 9e b8 b8 38 4c 26 13 4e a7 93 47 1f 7d 94 b7 df 7e 1b 8d 46 c3 8f 3f fe 88 97 97 d7 9f 12 f0 ee d8 b1 83 c7 1e 7b 0c 45 51 d0 68 34 a8 aa 8a c7 e3 a1 5c b9 72 4c 9c 38 91 17 5e 78 81 88 88 08 be f8 e2 0b 3e f8 e0 03 ea d6 ad 2b 01 af 10 42 08 21 ca 84 d7 5f 7f fd ae 0d 76 01 0a 0a 0a 18 3e 7c 38 7b f6 ec c1 cf cf ef 86 fb 6b 34 1a 74 3a dd 35 7b 78 af 19 f0 ae 5e bd 9a ac ac 2c 5a b7 6e cd d3 4f 3f 4d 5e 5e 1e 93 26 4d 62 d9 b2 65 ac 5a b5 8a f0 f0 70 0e 1f 3e 8c aa aa 74 e9 d2 85 26 4d 9a 00 a0 aa 2a a3 46 8d 22 3d 3d 9d b9 73 e7 52 a1 42 05 36 6e dc c8 88 11 23 d0 6a b5 8c 1b 37 0e Data Ascii: iu:qyzU;`0ng17>>8L&NG}~F?{EQh4\rL8^x>+B!_v>\|8{k4t:5{x^,ZnO?M^^&MbeZp>t&M*F"==sRB6n#j7
2024-04-25 18:48:08 UTC	538	IN	Data Raw: eb d7 07 6d ea 21 96 2f ff 85 65 8b e6 e3 aa 12 4d a7 c6 f5 ae 39 0e cb a5 2f cf 90 ff 7c 4c 93 2a 5e 9c 8c 8d 25 fe d8 7e f6 25 86 f0 c4 eb 2f 31 34 a2 1a 49 7b 4e e1 31 e8 d0 e9 8d 78 fb 98 d1 bb b4 f8 06 86 d3 b2 51 34 b5 c3 83 d1 15 a4 b1 fb 78 39 86 8c f9 27 4f 34 8c 20 71 67 1c 41 4d fb f1 ec f3 c3 a9 1e 5e 0e ff 9a 2d 08 52 9d e4 a7 6b 09 31 28 80 42 b5 46 ad 68 d7 c0 97 95 0b 96 b0 76 d5 52 b6 9f b4 d2 f9 be 5e 94 37 95 36 04 ca 4d 76 66 2a 17 2f 5a 68 ff c8 a3 d4 0c 09 a4 65 ef fb 69 db b0 12 4e 4b 26 f1 c7 b6 d2 eb a1 61 3c f8 f4 7d 54 0b d4 61 b3 39 a9 54 bd 16 23 9e 1f c1 a3 15 83 d9 75 64 0d 7e 7d 87 f0 e2 cb 03 09 a9 68 2a f5 d6 68 3c 6e 6c 96 5c f6 2d f8 0a 47 70 04 0d 83 73 58 76 64 17 b9 05 6e ec 09 76 2a 45 b6 a5 9c 25 17 97 c5 0f 4f ce Data Ascii: m!/eM9/\|L^%~%/14I{N1xQ4x9'O4 qgAM^-Rk1(BFhvR^76Mvf/ZheiNK&a<}Ta9T#ud~}hh<nl\-GpsXvdnvE%O
2024-04-25 18:48:08 UTC	4744	IN	Data Raw: 67 cf 9e 3d ac 58 b1 82 b6 6d db 92 95 95 75 d5 f6 57 5e 79 85 cd 9b 37 f3 da 6b af 11 19 19 59 62 9b 8f 8f 0f af bf fe 3a 23 47 8e 64 eb d6 ad ac 5e bd 9a 2f bf fc 92 2d 5b b6 b0 7c f9 72 54 55 a5 41 83 06 25 86 10 04 06 06 a2 aa 2a a7 4f 9f a6 72 e5 ca 54 ae 5c b9 78 5b d7 ae 5d 09 0d 0d c5 e9 74 e2 f1 78 a8 58 b1 22 8f 3f fe 38 50 38 fc c1 e9 74 b2 6c d9 32 36 6e dc 88 cb e5 42 af d7 53 b1 62 45 32 32 32 08 0b 0b c3 c7 c7 a7 78 18 86 aa aa b8 dd 6e 42 43 43 01 ae 1a a6 a0 d7 eb 39 7c f8 30 0e 87 83 a7 9f 7e 1a 97 cb 85 a2 28 e4 e6 e6 e2 f1 78 b0 d9 6c 32 9e 57 08 00 7b 01 ce 8a 35 18 32 6c 28 85 23 4f 9d 38 2c b9 38 0b 54 bc 6a 55 64 c3 fa 69 9c b2 9c c3 b7 46 6b aa bb e2 58 bc 7a 11 47 0e ef e1 9e 3a 5d c9 3d b8 8d 15 1e 1d a7 4f 39 88 6e 12 c6 8e fd Data Ascii: g=XmuW^y7kYb:#Gd^/-[\|rTUA%*OrT\x[]txX"?8P8tl26nBSbE222xnBCC9\|0~(xl2W{52l(#O8,8TjUdiFkXzG:]=O9n
2024-04-25 18:48:08 UTC	5930	IN	Data Raw: 23 d3 4f 32 67 d4 44 1a fc f2 5f 1a 04 5a 99 39 66 32 3b 0e 7b 08 b9 af 2f d1 4d ab e0 c0 71 3b 1a f8 1a 2d e8 42 6b f6 c2 e4 55 98 23 c1 6d 73 51 98 33 22 9b 99 7d 46 b2 2c d9 c8 9b cb df e2 fc cc ef f8 fe f3 0d 58 bc 83 e8 fc f4 20 86 8f 7e 84 e4 d5 13 78 73 c4 6a aa 75 e9 c2 bf a7 be 82 17 79 b8 50 d1 62 46 47 2e 3b 97 2d 67 db fc ad ec fe e5 10 59 05 6e 2a 35 89 a2 f5 fd 1d e8 f6 78 57 c2 fc f4 58 71 61 42 cf ae 0f 3e e6 c3 89 5b a9 db e7 1f fc df 97 bd d0 e2 c1 99 7a 84 f7 ee 79 93 f3 ed 3a f1 e9 0f af 70 7a e5 7c 16 4e 5e c5 de ad 09 78 4c be 34 ec de 96 76 43 3b d3 a1 53 03 b4 d8 2e eb 5d 56 30 61 22 eb ec 11 7e f9 6e 35 5b 17 6f 22 e1 74 1e fe 75 23 e8 f4 d4 20 86 3e d9 82 99 cf 8f 65 fd ea b3 bc b2 72 32 ad 23 03 b0 de 6a cf b9 10 42 08 51 46 48 Data Ascii: #O2gD_Z9f2;{/Mq;-BkU#msQ3"}F,X ~xsjuyPbFG.;-gYn*5xWXqaB>[zy:pz\|N^xL4vC;S.]V0a"~n5[o"tu# >er2#jBQFH
2024-04-25 18:48:08 UTC	7116	IN	Data Raw: 6d a9 70 60 4f 36 55 ab d7 e4 42 ec 7a 96 7c b7 95 5c 97 8e a8 01 3d e9 de b9 09 09 ab 17 b3 f9 70 1e fe da 6c 8e c6 66 11 fd 8f 81 b4 6f 59 1d 17 4e f4 e8 39 bd eb 17 36 6d 4b 40 c9 5c 4f 7c df 06 04 15 1c 67 de 57 eb c9 b2 a8 d4 e9 d9 8d 3e 7d 5b 70 f6 97 25 ec 3d 96 49 66 f2 45 22 1e e8 47 bb e8 ea a8 28 e4 27 1e 62 de 4f 87 28 17 e0 21 6e e7 39 1a 3e d8 93 ca 9a 0b ac 99 bd 8b c0 36 1d 18 3c ac 23 46 fb 45 d6 7c b7 90 03 87 d2 f1 ae 54 83 de 2f f6 21 dc cf 9b cc b3 07 99 fe f9 72 1c de 95 d1 9c 4f c7 d4 c0 8c 11 2d 87 d6 2d 66 d9 9c 7d 78 ca 05 d3 f5 d9 81 dc 53 2b 80 2d cb e6 73 e2 9c 85 fc 14 0b f5 db 37 22 e5 60 22 26 7f 95 e3 5b 4f 10 da b6 03 03 1e 6f 83 4e 71 70 e5 40 19 1d 3a 2e 1c de c1 ca e9 5b c9 b2 ea 68 d4 a7 1b 1d bb 37 40 e7 48 63 e5 97 Data Ascii: mp`O6UBz\|\=plfoYN96mK@\O\|gW>}[p%=IfE"G('bO(!n9>6<#FE\|T/!rO--f}xS+-s7"`"&[OoNqp@:.[h7@Hc
2024-04-25 18:48:08 UTC	8302	IN	Data Raw: c2 6e 74 74 34 99 99 99 b8 5c 2e 2c cb 8a c8 b0 0b a0 aa 2a 8a a2 e0 f3 f9 7e f0 2d d7 42 88 c8 22 81 57 08 71 42 14 17 17 13 0c 06 4f bb db dd aa aa 92 9e 9e 8e ae eb ad 2d a0 91 4c 51 14 14 45 21 10 08 9c ec a2 08 21 44 2b 09 bc 42 88 ef 5d 4d 4d 0d 75 75 75 47 1d 76 1d 40 d5 5c 78 bd 5e bc 5e 0f ba a6 86 7f f9 5f 29 b8 3c 6e 74 4d c5 71 40 77 b9 70 e9 e1 9f bf 6e e1 aa a6 a1 e9 7a b8 c5 b9 79 7d ba ae a3 1e a7 c6 67 cb b2 48 48 48 20 3a 3a fa a8 c3 ae 03 b8 3c e1 87 db a2 a3 a2 d0 54 e5 ff df 74 c7 41 d5 74 3c 6e 17 df b0 93 fe cb fa 14 74 5d c7 e5 72 a1 6b da 31 2d a3 c5 e1 fd 7a 85 10 e2 54 20 0f ad 09 21 be 77 d5 d5 d5 d8 b6 7d d4 4f f1 6b aa 4a 53 4d 29 5b f6 57 60 38 3a 59 b9 1d 48 4f 8a 41 55 54 1c c7 c4 b2 00 c7 06 55 05 db 06 4c 4a 76 ee c7 95 Data Ascii: ntt4\.,*~-B"WqBO-LQE!!D+B]MMuuuGv@\x^^_)<ntMq@wpnzy}gHHH ::<TtAt<nt]rk1-zT !w}OkJSM)[W`8:YHOAUTULJv
2024-04-25 18:48:08 UTC	6085	IN	Data Raw: 3f 88 4b 2f 39 07 ff b6 79 4c 9d f9 05 9e 2e e7 f1 db 9f ff 88 11 c3 fb b1 6f d9 27 bc fb c9 1c f6 fa 93 99 74 dd 55 f4 ea d1 87 9e 69 3e de 79 f3 7d f6 87 12 e9 33 60 08 03 86 f6 23 eb 34 be 17 b8 61 c3 06 34 4d a3 67 cf 9e ad e7 83 6f d2 32 dd 97 5f 7e 49 7e 7e 3e a9 a9 a9 df 7a 7d 15 25 7b 49 ef 32 8c fc dc 23 e7 b1 03 f5 94 37 ea 0c 1e d6 8f 98 98 74 86 f4 6e c7 82 a9 af 31 63 ee 97 a8 b9 c3 b9 fe d2 31 84 2a 8a 70 65 e6 33 a8 77 16 a1 c6 4a 6a 49 61 c4 80 9e 10 6a 64 7f 9d ca c0 01 5d 68 a8 6d 62 f4 f8 09 f4 c9 74 f1 c1 5b 53 a9 75 52 c9 ef 37 98 ee 7d f2 89 0f d6 91 d0 79 00 bd 3a 25 d3 54 73 00 23 2e 97 21 f9 1d b1 1a 6b 38 60 c6 32 72 58 ef ff 63 ef be e3 a4 aa ee ff 8f bf ee 9d de b6 57 b6 2f cb 56 ca d2 7b 15 04 54 b0 9b a8 31 6a 2c f9 26 31 cd Data Ascii: ?K/9yL.o'tUi>y}3`#4a4Mgo2_~I~~>z}%{I2#7tn1c1*pe3wJjIajd]hmbt[SuR7}y:%Ts#.!k8`2rXcW/V{T1j,&1
2024-04-25 18:48:08 UTC	10674	IN	Data Raw: a3 ae 86 10 6d 1b 4f 3d f6 32 8d 8e 40 a7 3a f7 aa ab ab c9 cb cb e3 b2 cb 2e 0b 74 14 e1 24 44 c1 1b 40 f9 f9 f9 81 8e f0 75 6a 0b 93 e7 5e 89 ea 83 df 52 6b b8 9d c9 bf 9f 89 e6 73 1f e5 9f 96 32 e8 b6 24 f4 5e 17 ef 7c 5e cd 9c e1 b9 ac 5f b2 88 b6 90 f1 fc fa 37 d7 11 aa 73 90 b7 ec 9f e4 77 8c e3 17 77 8d a4 f6 cb ed 58 4d 46 36 97 d6 32 36 31 8c a3 56 3d 83 ac 65 bc b9 63 6f a0 b7 10 e8 29 1a 4a 4a 4a 7a 75 c1 5b 58 58 18 e8 08 5f 23 6b 92 b8 fa aa e9 bc f2 f0 4f 19 75 dd bd 8c bb ec d7 0c 57 aa 58 51 58 c1 ac b1 57 12 56 b9 9f 8d db f2 19 73 c3 18 16 be fa 1e 31 03 c7 72 ef 0f af 45 ab 75 b0 f4 8d 7f 11 92 71 35 93 27 07 b3 7f df 41 34 1d 3e ca fc 5a fa b7 d6 e3 8a cc c4 5d bd 94 75 05 bd a7 b8 ef 75 ef cb ff e2 74 3a 29 2e 2e 0e 74 8c af 8b 4d 61 Data Ascii: mO=2@:.t$D@uj^Rks2$^\|^_7swwXMF6261V=eco)JJJzu[XX_#kOuWXQXWVs1rEuq5'A4>Z]uut:)..tMa
2024-04-25 18:48:08 UTC	7298	IN	Data Raw: 09 92 9b 91 45 58 57 70 6c 0b db f5 00 81 aa 69 c8 78 d8 9e 87 ef 79 80 8c 24 09 24 59 02 cf c5 b2 5d 74 5d c7 77 6d 2c c7 05 40 51 35 14 59 c2 b6 2d 84 90 91 65 19 d7 36 71 85 82 2e b9 0c 74 f6 13 c8 cd 22 a0 2a f8 9e 0b 92 0c 78 c8 b2 8a 24 5c 6c cb 43 39 2d 2d 2c 29 32 c2 b5 e8 ed 6a 42 c9 98 44 6e 46 18 cf b5 b0 5d 3f e9 3c c9 30 3a d8 cf a0 a9 50 59 9c 03 7e b2 24 16 b2 8a 26 4b 38 ae 83 73 fa bc ae 47 ce d8 86 24 49 58 96 45 3c 1e 27 33 33 f3 6c 9d 79 21 21 79 71 6a b7 55 33 8a 0c ae 45 20 23 9f 49 a5 53 29 c9 0f 60 1a 36 b2 a2 e0 fb 1e 42 92 91 f1 30 2c 1b 45 d3 51 24 81 67 c6 e8 19 33 c8 08 45 50 85 8f a2 85 f0 12 83 0c 4d d8 64 e6 16 a0 2b 02 cf b1 18 9e 18 01 35 4c 76 38 80 24 7c 4c 23 99 20 a9 48 3e 89 d1 09 12 f1 04 43 c2 21 27 23 9f ac 90 86 Data Ascii: EXWplixy$$Y]t]wm,@Q5Y-e6q.t"*x$\lC9--,)2jBDnF]?<0:PY~$&K8sG$IXE<'33ly!!yqjU3E #IS)`6B0,EQ$g3EPMd+5Lv8$\|L# H>C!'#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49969	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:08 UTC	904	OUT	GET /en-us/sharefile/media/rb-plan-buy-now-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:08 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 15238 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:08 GMT Etag: "00f008cc5fcd4097a6d0aea452a0d99d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C82A974YM7VPS1E8PWAG X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:08 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 83 00 00 00 da 08 06 00 00 00 85 1c f1 59 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0a 13 37 0b fb 2d 1d ca 00 00 20 00 49 44 41 54 78 9c ed 9d 77 78 55 55 ba ff 3f bb 9d 9e 46 2a 29 24 90 50 42 40 08 1d e9 08 0a 62 d7 51 ec 8e de d1 eb 8c 33 f7 ce dc b9 53 75 46 47 67 bc 77 ae 33 3f c7 de c0 ee a8 a0 a2 28 08 04 e9 bd 27 21 04 02 21 09 49 48 af a7 ef f6 fb 23 90 11 09 25 92 40 c4 f3 79 9e 3c 1c d6 de 67 ed f7 9c fd 3d 6b ad fd ae 77 bd 4b 30 4d d3 24 44 08 10 c4 0b 6d 41 88 9e 43 48 0c 21 da 09 89 21 44 3b 21 31 84 68 47 fe 66 41 68 3c 79 71 23 08 c2 29 8f b5 8b e1 eb 22 38 fe 3a 24 8c 8b 83 e3 02 10 04 a1 fd 9e 76 24 0a 19 da 6e ba 61 18 08 82 Data Ascii: PNGIHDRYpHYs+tIME7- IDATxwxUU?F*)$PB@bQ3SuFGgw3?('!!IH#%@y<g=kwK0M$DmACH!!D;!1hGfAh<yq#)"8:$v$na
2024-04-25 18:48:08 UTC	2372	IN	Data Raw: d1 df f6 25 be cb 84 d0 d1 45 44 d0 cc b6 3f ab 04 9a d1 f6 fa 9b c8 22 60 76 7c ec 4c 28 22 e8 c6 bf ee 7b 0f e5 9c bb 09 49 b1 92 98 92 4a 64 64 24 00 57 de 72 0b ff 78 e7 19 f6 ef dd c5 87 9f ad a5 25 58 89 2d 63 16 ff 36 25 9c a7 fe fe 3c d5 6e 81 31 b3 7f c8 03 37 4f 64 fd c2 a7 c9 29 01 67 f3 61 0a 9a 23 b9 f7 f6 6b 28 5a ff 31 cb 76 57 73 cf 2f 9f e4 ca 94 7a 3e fc 6c 03 d7 4d 19 cc c2 15 79 3c f8 9f f7 13 81 ca fb cf fe 83 a8 49 37 63 16 7c c8 f6 1a 1b fa 91 3c 8e da 06 72 ef b5 13 d8 b0 f4 9f 6c 29 35 f9 e9 ef 1e 63 42 46 e4 a9 0d 17 04 90 75 5e fd f1 01 9c d7 26 71 db 35 e1 bc f9 e4 7e 2a d3 e3 f9 ed ad 51 e0 35 69 6f 26 6c 32 b5 db 2b d9 dc a8 70 f5 f8 28 50 8e 35 21 c6 b1 53 24 da 5e 0b c7 ca 05 da fe 82 26 d8 45 72 3f 2d c3 ec 1f c7 b0 41 36 Data Ascii: %ED?"`v\|L("{IJdd$Wrx%X-c6%<n17Od)ga#k(Z1vWs/z>lMy<I7c\|<rl)5cBFu^&q5~*Q5io&l2+p(P5!S$^&Er?-A6
2024-04-25 18:48:08 UTC	538	IN	Data Raw: 0e ee 41 76 8a 80 c0 55 53 ae c3 16 9d 80 96 12 cd b6 12 81 a9 33 87 d2 32 65 22 61 d6 b6 7a e3 fb 4d a1 df 10 3b 0f 5f 97 4d 56 aa c2 a0 b4 91 98 ce 14 12 9c d1 fc e0 df ee 63 c5 da 7c d2 47 4d 21 59 19 cb a6 3d 05 a4 f6 1e 86 cb e9 46 74 46 22 ea 1a ba 62 45 4c 4d 45 17 c7 82 24 e3 37 4c 8c 80 8d b8 18 81 f8 e8 4b 18 29 ba 90 b5 fe 48 d6 70 24 0c 46 0d f7 b0 e0 c5 17 59 bf bb 98 9b a7 27 76 c1 d7 fa dd e4 fb 37 37 d1 11 ee 1a 56 af dc 8c 3b 2a 85 cb 27 65 63 e9 09 8e c9 6e 20 34 37 71 36 b8 e2 98 7a ed 35 17 da 8a 0b ce f7 b7 83 0c 71 12 21 31 84 68 27 24 86 10 ed 84 c4 10 a2 9d 90 18 42 b4 13 12 43 88 76 42 62 08 d1 4e 48 0c 21 da 69 17 c3 e9 f6 48 0e 71 71 70 7c 67 e3 53 21 1e 3f a1 b4 b4 14 8b c5 42 74 74 f4 79 34 2f c4 f9 a4 a8 a8 88 ac ac ac f6 9d Data Ascii: AvUS32e"azM;_MVc\|GM!Y=FtF"bELME$7LK)Hp$FY'v77V;*'ecn 47q6z5q!1h'$BCvBbNH!iHqqp\|gS!?Btty4/
2024-04-25 18:48:08 UTC	4744	IN	Data Raw: b0 25 44 27 78 f5 d5 57 bb bc ce 73 1a 40 6a 9a 46 4e 4e 4e 57 d9 d2 35 a4 64 f2 9b 5f fd 9c b0 aa 72 64 bb c4 3f fe fa 47 2a bf dd 22 ee 1e cd 9e 3d 7b 38 74 e8 10 e9 e9 e9 5d 56 e7 39 89 c1 ef f7 53 50 50 d0 55 b6 74 0d bd fb 32 6b da 58 16 fc 78 11 03 6f bb 9f 5f fe f6 07 e4 6e f2 b3 7d 8f c1 9c 1f 0c a4 b6 74 29 8b ab a2 b9 32 26 82 37 3f f9 82 f4 1b ee e2 fe f1 99 68 75 47 79 e5 a5 37 e8 73 db 03 cc 49 b2 b1 7e cb 11 1c e2 0e aa fd 7d 70 19 b5 58 93 86 90 bb 72 11 07 8f 34 5c e8 4f 08 c0 d1 a3 47 39 7c f8 70 cf 11 83 20 08 b8 dd ee ae b2 a5 6b 08 f8 71 eb 32 03 46 0d 43 0a ec c1 32 e4 52 6e 75 89 f8 6a 75 66 5e e3 a2 64 7f 5f c6 f9 5d f8 8e 2c e0 4d 60 e8 6d 77 33 ba 68 2b c5 c9 97 f2 d0 fb bd 89 29 b3 b3 75 c3 61 1e fa fb ef a9 28 28 c2 65 88 44 1d Data Ascii: %D'xWs@jFNNNW5d_rd?G*"={8t]V9SPPUt2kXxo_n}t)2&7?huGy7sI~}pXr4\OG9\|p kq2FC2Rnujuf^d_],M`mw3h+)ua((eD
2024-04-25 18:48:08 UTC	5930	IN	Data Raw: 69 65 ca d5 37 60 af 58 cb d2 bc 26 06 5d 79 33 03 ea 76 b1 b5 b8 96 fa 84 de 28 92 04 9c 5d bf 3f 6b d6 2c e2 e3 e3 4f b8 f9 c7 c3 e9 7f f1 8b 5f 9c ed ad 3c 25 67 dd 32 98 a6 89 d5 6a 25 21 21 81 e5 cb 97 b3 7c f9 72 46 8f 1e 4d 6c 6c 2c ba ae 77 58 b5 22 04 d8 f1 c5 a7 6c ca db c7 17 8b 56 71 a8 a6 15 9b d2 d6 fc eb 86 49 ef be a3 99 71 c9 25 84 c7 f6 e6 c6 fb fe 93 c9 ee a3 7c fc d6 46 a2 2e 19 4d 3f 87 46 b3 c7 c0 5b 95 c7 8a c2 2a c6 4d 99 86 d1 54 ca 3b 6f bc c0 bb 4b 0e 30 6c c2 08 9c a2 0b 4f 55 03 5b 57 6d a4 3a 6a 16 4f fc fe 26 f4 d6 06 fc be 0c ee 7d e0 0e 12 02 7b c8 ad d2 c9 e8 13 8f 5c 17 20 fd d2 91 0c 1c d2 0f 49 f5 a3 28 22 ee e6 26 ac d6 4b 18 16 6e 63 5f 99 c0 e4 a9 7d d1 ea 4d b2 c6 0e c1 66 38 69 ae 6c c4 12 9d 41 a2 d5 c2 aa 35 fb Data Ascii: ie7`X&]y3v(]?k,O_<%g2j%!!\|rFMll,wX"lVqIq%\|F.M?F[*MT;oK0lOU[Wm:jO&}{\ I("&Knc_}Mf8ilA5
2024-04-25 18:48:08 UTC	989	IN	Data Raw: 11 43 63 58 b3 78 05 0d a6 8a d7 eb a7 b5 b9 01 4f f4 44 ee 9c 35 92 4b 46 65 11 1d 28 e3 ad 7f 3c c7 07 4b 56 e1 8c 89 a6 ec c0 06 ca 2b 4c ac d6 68 62 ed 02 55 8d 3e 7a 0d 8f c4 2a c5 61 68 d5 08 b2 8c bb b8 89 46 c9 a0 a9 bc 0a 67 df 61 a4 2a 8d a8 c9 49 84 95 95 23 27 0f 20 d9 5a c7 fc 3f fe 9e 35 85 a5 ac 2d ac a1 6f b8 8b 86 83 15 ec cb db 48 b3 b5 17 75 f5 f9 e4 ee 6b c1 5a 5a c4 21 45 22 35 ad 17 1b 57 ee 45 ea d3 8b aa 8f 17 f1 d5 ae 9d 2c db 5e 4c f6 c4 29 24 ba da d6 6b 7e 97 e9 32 77 34 c0 94 29 53 58 be 7c 39 8b 17 2f 66 e6 cc 99 88 a2 d8 71 a8 bc 20 10 f4 b6 62 4d bb 94 3f 3e fe 04 8e ba 35 bc b2 62 27 e9 83 2f e3 97 8f 3e c2 cf 1e b8 97 ec 94 5e 34 94 ed 27 00 e4 ad 5e c8 82 4d f9 f4 8a 8d c5 e5 74 61 97 4c 82 b1 7d b9 fd 3f 7e c7 8f 6e 9f Data Ascii: CcXxOD5KFe(<KV+LhbU>zahFgaI#' Z?5-oHukZZ!E"5WE,^L)$k~2w4)SX\|9/fq bM?>5b'/>^4'^MtaL}?~n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49970	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:08 UTC	909	OUT	GET /en-us/sharefile/media/rb-plan-account-info-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:08 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 31571 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:08 GMT Etag: "1ad7baf88e8266fcb68ddc78ee3184bb-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C82MBB4FZX6KM104SHFE X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:08 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c2 00 00 01 a0 08 06 00 00 00 39 24 67 14 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0a 14 06 34 8e 59 21 c0 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 15 55 de c7 f1 cf ad c9 bd e9 bd 43 0a 21 84 2e 55 20 82 10 8a 20 4d 54 ec 0d 17 5d 74 2d eb 62 dd c7 fe d8 96 75 75 7d b0 ec 0a 2e 56 b0 21 08 88 f4 5e a5 13 4a 20 21 90 04 48 ef b7 97 f3 fc 11 88 84 04 44 d7 7e 7f ef d7 8b 97 66 e6 cc cc 99 73 6f e6 3b 67 66 ce 44 a3 94 52 08 21 84 10 3e 4a fb 4b 57 40 08 21 84 f8 25 49 10 0a 21 84 f0 69 12 84 42 08 21 7c 9a 04 a1 10 42 08 9f 26 41 28 84 10 c2 a7 fd e0 20 f4 78 3c d8 ed f6 1f b3 2e 42 08 21 c4 cf ee 07 07 e1 cb 2f bf cc 8c 19 33 7e cc ba 00 e0 72 Data Ascii: PNGIHDR9$gpHYs+tIME4Y! IDATxw\|UC!.U MT]t-buu}.V!^J !HD~fso;gfDR!>JKW@!%I!iB!\|B&A( x<.B!/3~r
2024-04-25 18:48:08 UTC	2372	IN	Data Raw: 79 5e af 17 af d7 4b 9b 36 6d 88 8f 8f 67 ca 94 29 0c 1c 38 10 9d 4e 87 5e af c7 cf cf af 29 34 85 10 42 fc fa 9d 37 08 75 3a 1d ef bf ff 3e 5b b6 6c e1 e9 a7 9f 66 e9 d2 a5 3c ff fc f3 bc f4 d2 4b a4 a6 a6 f2 bf ff fb bf 58 2c 16 16 2c 58 c0 a2 45 8b 70 bb dd 58 ad 56 ae bf fe 7a 9e 78 e2 89 a6 f5 d8 ed 76 66 cc 98 41 b7 6e dd f8 f4 d3 4f 09 08 08 00 e0 d6 5b 6f 25 26 26 86 97 5e 7a 89 cf 3f ff 9c 29 53 a6 a0 d5 6a d1 e9 74 e8 74 3a 0a 0a 0a 58 b3 66 0d 21 21 21 64 65 65 11 15 15 d5 ac 7e 15 15 15 ac 5f bf 9e b2 b2 32 2e ba e8 22 7a f7 ee 4d 7d 7d 3d f5 f5 f5 c4 c7 c7 53 5d 5d 8d dd 6e 27 2e 2e 8e ba ba 3a f2 f3 f3 49 48 48 20 3a 3a 1a 80 9c 9c 1c b6 6c d9 82 c9 64 a2 7f ff fe 24 27 27 37 db 77 a3 d1 c8 d4 a9 53 19 3c 78 70 ab ed e3 72 b9 78 f8 e1 87 89 Data Ascii: y^K6mg)8N^)4B7u:>[lf<KX,,XEpXVzxvfAnO[o%&&^z?)Sjtt:Xf!!!dee~_2."zM}}=S]]n'..:IHH ::ld$''7wS<xprx
2024-04-25 18:48:08 UTC	538	IN	Data Raw: e1 49 bd a8 ae f1 60 28 b1 33 72 58 28 9d 12 1b 43 cf 1c d9 86 ee dd 0b 58 3c e7 63 d4 95 d7 d2 33 3d 9c 6f d6 7c c9 da 5c 07 e3 c6 64 11 78 9e 23 58 f2 25 57 d3 ff c0 7f 78 e5 d1 fb 71 1a 22 99 f4 a7 47 09 2e d9 c4 b2 35 39 dc 7a ef 54 3c 07 17 f0 c9 d6 55 5c d3 26 1e b3 d9 48 7d 45 19 0d 0d b1 e0 36 50 50 5c 40 fa c0 81 5c 36 ea 1a 92 db b5 23 77 c5 62 8e d6 5a 29 a8 a9 e4 b2 c9 0f 12 56 b8 81 af e6 ae c6 dc b6 01 8f 5f 30 93 ef ba 89 b9 ef ff 9b 4d fb 0b 29 f8 e6 30 81 5d 33 19 d0 a9 3b 11 e6 53 91 a7 0f a6 7b 8f be 7c 3e 7f 09 1f bb 3d dc 90 dd 9d ba bc 1d 7c f6 f5 06 52 b2 46 90 12 71 8e 10 02 30 f8 e1 2c 39 c8 bc 8f 3e a1 7d 18 ec db 9b 4b d7 a1 fd 39 59 fc 09 85 71 19 dc 71 d5 20 d6 fd f3 ef e4 6e df 46 69 fe 51 46 de f6 18 a9 7e 76 ac 75 47 58 76 Data Ascii: I`(3rX(CX<c3=o\|\dx#X%Wxq"G.59zT<U\&H}E6PP\@\6#wbZ)V_0M)0]3;S{\|>=\|RFq0,9>}K9Yqq nFiQF~vuGXv
2024-04-25 18:48:08 UTC	4744	IN	Data Raw: 34 ef be fb 2e af bf fe 3a 83 07 0f c6 e3 f1 60 32 99 c8 cc cc 6c b6 7c 6c 6c 2c 87 0e 1d c2 66 b3 71 f0 e0 41 12 12 12 e8 d7 af 5f b3 32 3d 7a f4 20 23 23 a3 e9 c1 16 a7 d3 89 5e af e7 ba eb ae 6b aa f3 a1 43 87 28 2d 2d 25 3f 3f 9f 1b 6e b8 01 9b cd 86 4e a7 43 a3 d1 50 56 56 46 4e 4e 0e 2e 97 0b 8d 46 83 46 a3 a1 7b f7 ee a4 a6 a6 36 05 a1 db ed 26 3e 3e 1e 83 c1 d0 ea 58 47 9d 4e 87 c3 e1 e0 d0 a1 43 00 bc f9 e6 9b cc 9a 35 0b b7 db 8d d1 68 a4 b0 b0 10 8b c5 c2 ce 9d 3b 25 08 c5 6f 86 46 ab c5 61 a9 e7 44 71 11 26 ad 86 81 97 5d 4b cf b8 40 0e 1a c2 68 93 d4 06 c7 d1 75 44 98 c2 48 8d 89 22 bc 7b 3a 0b 57 ef a2 aa b8 86 5e c3 da 11 db 26 90 4e e9 9b d1 28 27 06 3f 33 41 41 1a 4c e6 10 8c 7a 37 f5 c7 8a 49 1f 38 98 d8 c8 68 62 23 a1 bc e2 28 7e fe c1 Data Ascii: 4.:`2l\|ll,fqA_2=z ##^kC(--%??nNCPVVFNN.FF{6&>>XGNC5h;%oFaDq&]K@huDH"{:W^&N('?3AALz7I8hb#(~
2024-04-25 18:48:08 UTC	5930	IN	Data Raw: f8 8a 35 0f f5 d5 95 78 fd 42 08 31 b7 fe 7e 4c 21 84 10 e2 d7 46 de 35 2a 84 10 c2 a7 c9 4d 37 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 24 08 85 10 42 f8 34 09 42 21 84 10 3e 4d 82 50 08 21 84 4f 93 20 14 42 08 e1 d3 f4 3f 68 29 4f 3d eb 96 2c e5 d0 89 06 d2 7b 5c c2 c0 1e a9 3f 72 b5 7e db 94 52 68 34 9a f3 96 f1 d6 97 b3 76 e9 32 8e da 4d 64 0d 1b 41 bb 68 f3 7f b5 cd d2 82 dd ac df b2 87 5a bb 97 88 a4 34 06 f4 cf 22 d2 Data Ascii: 5xB1~L!F5*M7!>MP!O B$B4B!>MP!O B$B4B!>MP!O B$B4B!>MP!O B$B4B!>MP!O B$B4B!>MP!O B?h)O=,{\?r~Rh4v2MdAhZ4"
2024-04-25 18:48:08 UTC	7116	IN	Data Raw: d2 c9 4c 89 05 6c ec df b8 1d 47 70 02 9d 3a a6 60 d4 42 6d f1 11 f6 1f 2e 22 bc 7d 27 32 12 22 9b af c3 6b 27 ff c0 76 8a 1a 82 e8 da a5 23 e1 e6 6f cf 27 ca 8b 0e 72 f0 c8 09 94 2e 84 8e dd ba 10 19 d4 7a bd 95 bd 81 43 7b 73 28 75 19 e9 d0 b9 33 d1 c1 46 f0 3a 29 3c b8 8f a3 d5 1e da 75 ed 4a fc 59 cb ba 1a ca d8 b9 37 17 7d 60 1b 3a 77 6c 8b 51 07 5e 7b 0d bb f7 ec c7 a9 8d a2 4b b7 74 cc ad 74 40 6b 4e 14 90 5b 50 8c c3 a3 23 ba 4d 3b 3a 24 47 b7 2c 53 76 84 fd b9 c5 84 c7 77 a2 43 5a 44 b3 79 d6 f2 e3 ec 3d 90 87 39 b1 1d 1d 53 13 9a 0d 93 b0 d5 14 b1 77 5f 1e 7e d1 1d e8 92 1e d7 ec 5a 7b 5d c5 31 f6 1d 3c 4a 60 54 1a 1d 33 12 bf 5d ce 59 47 ce fe 83 94 57 db 30 07 45 d0 ae 73 26 11 fe 3a c0 4d fe fe 9d 1c af f4 92 d1 a9 1b 31 4d 63 6e 14 c7 0e ec Data Ascii: LlGp:`Bm."}'2"k'v#o'r.zC{s(u3F:)<uJY7}`:wlQ^{Ktt@kN[P#M;:$G,SvwCZDy=9Sw_~Z{]1<J`T3]YGW0Es&:M1Mcn
2024-04-25 18:48:08 UTC	8302	IN	Data Raw: 41 fa 0d 42 4d d1 33 71 c6 7c e6 2c 9c 80 c1 68 25 5a 6b 41 17 13 c7 a2 e5 b7 d0 71 e8 65 ba 86 5e c7 f8 14 2f 05 4d 8d b8 72 6d 98 cc 0a aa 5d a5 b5 a5 07 35 53 45 f5 ab e8 2d 56 86 e4 a5 5c 8d cf 23 84 10 42 5c 94 7e 83 30 e0 f5 62 8e 8b 20 21 3e 0e 4d 53 50 db fc 60 08 12 d4 a9 f8 34 15 c5 08 3e bf 46 b0 bb 85 f7 b7 7b 88 4b 88 c4 12 ec 20 18 d4 11 08 a8 f8 fc 5e 02 fe 80 8c 93 11 42 08 31 28 f5 1b 84 89 39 c3 d8 bb 7f 0b bf 6b 3a 8a 16 8c 60 c2 d8 31 64 8f 1c 47 a4 c5 82 9a 3e 02 6f 54 18 b6 d4 a1 0c 89 8f 24 a6 bb 92 a2 6a 07 39 63 73 88 4b 37 e0 48 34 92 6c ea 25 18 17 2f 21 28 84 10 62 50 52 34 4d d3 fa 6b e4 f3 ba f1 f9 83 68 9a 82 c9 6c c1 6c d2 7f 42 4b 15 af c7 87 c9 62 91 e0 13 42 08 71 4d b8 a0 20 14 42 08 21 3e ab 64 66 19 21 84 10 21 4d 82 Data Ascii: ABM3q\|,h%ZkAqe^/Mrm]5SE-V\#B\~0b !>MSP`4>F{K ^B1(9k:`1dG>oT$j9csK7H4l%/!(bPR4MkhllBKbBqM B!>df!!M
2024-04-25 18:48:08 UTC	1904	IN	Data Raw: e9 18 39 31 0f 7f 62 14 96 f8 0c c6 4d 8a c0 a8 c4 31 6d f9 7c 86 44 0f c3 1a 9b c6 c4 09 33 38 56 ef 22 7d ea 2c 72 87 8f 24 6f 58 0a af fd f5 af bc a5 e5 70 f7 37 ef 67 7c 56 06 db cf ba 48 b1 7c f8 fb a8 90 3a 32 8f 60 20 81 0f 57 03 61 2c b8 ed 4e 5e 5b f5 22 bb 83 59 dc 77 d7 5c 9c 5d 16 9a 9d 36 6c 2e 2f 63 66 ce c4 a2 bc c5 3b af ae 22 77 ee 6d cc 9f 31 81 f8 c8 0d 44 8f 48 ff a8 f6 a9 53 a7 62 b3 d9 e8 ed ed fd d8 f3 69 55 55 65 ee dc b9 8c 19 33 e6 aa 6d c7 4b d1 67 10 c6 c7 c7 a3 aa 2a ed ed ed 97 34 bd 5a 58 e2 50 a6 4c 4b e2 d0 e6 17 29 da 69 44 d3 82 c4 67 8c e2 c9 67 be c5 d4 b4 48 5c b7 7f 8f 2f d4 fd 8c df 3f fd 14 39 e3 a6 32 e5 ce af 10 51 e6 c4 69 d7 b8 e5 1b 3f c4 61 f8 1d af fc fe d7 e8 6d 89 3c f4 bd ff 62 f9 a4 6c 9a 73 f3 70 c7 18 Data Ascii: 91bM1m\|D38V"},r$oXp7g\|VH\|:2` Wa,N^["Yw\]6l./cf;"wm1DHSbiUUe3mKg*4ZXPLK)iDggH\/?92Qi?am<blsp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49971	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:08 UTC	908	OUT	GET /en-us/sharefile/media/rb-buy-account-info-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:08 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 19504 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:08 GMT Etag: "3752f0f2fcdb80f416e4bb918351f7c6-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C82P1M24CA1R8077V8J3 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:08 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6a 00 00 01 f9 08 06 00 00 00 a8 2a 74 0e 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 04 1d c7 90 27 82 00 00 20 00 49 44 41 54 78 9c ec dd 4f 6c 1b e7 9d 3f fe b7 7e df 16 d8 8d d6 28 03 68 88 26 17 d3 97 34 9e 31 50 65 5d e7 ca e1 35 6e 10 07 e0 30 db bd 48 be ec c2 24 01 db 68 9b 1c 87 93 c3 1e b6 29 6c 03 22 09 e4 62 a9 97 62 39 04 22 a3 5d e7 c8 e1 71 d7 db 8d 02 68 18 24 17 53 97 78 77 46 40 54 b8 f6 1e e7 77 50 3f 4f 86 43 52 ff 6c 99 8f e4 f7 0b 10 6c 92 f3 e7 99 67 1e 7e f8 f0 e1 f3 99 99 4b 92 24 01 11 11 69 eb ff 9b 75 01 88 88 68 6f 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 9e 29 50 97 4a 25 0c 87 c3 e7 54 14 22 22 9a e4 c8 Data Ascii: PNGIHDRj*tpHYs+tIME' IDATxOl?~(h&41Pe]5n0H$h)l"bb9"]qh$SxwF@TwP?OCRllg~K$iuhoDDc&"5)PJ%T""
2024-04-25 18:48:08 UTC	2372	IN	Data Raw: 67 d3 9e 3f e8 f9 9a 64 df a1 8f 5c 2e 87 1b 37 6e e0 e6 cd 9b 00 00 d7 75 b1 bc bc 8c 42 a1 00 00 e8 f5 7a 78 f8 f0 e1 d8 9f f4 94 a7 49 0f 71 88 a5 a5 25 d8 b6 3d 36 dc e1 79 9e 1a 1a 79 ff fd f7 f1 d6 5b 6f 61 63 63 43 bd 2e 43 29 6f bd f5 16 ae 5e bd 8a 52 a9 84 73 e7 ce 61 7d 7d 1d e7 ce 9d 53 db 3b 77 ee 1c ee dd bb 87 9b 37 6f e2 d5 57 5f 45 a9 54 1a 59 bf 54 2a a1 52 a9 a0 52 a9 20 9f cf 23 08 82 fd aa 67 cc 85 0b 17 50 ab d5 26 be 16 c7 31 4a a5 12 2e 5c b8 30 b2 9f 7a bd 7e e8 fd d0 e9 e1 79 1e 06 83 01 3a 9d ce a1 da 42 bf df 3f d0 72 41 10 4c 6c cb 71 1c 1f 78 5f 87 e1 fb 3e 7c df 47 10 04 6a 18 30 6b 5a d9 bb dd ee 73 2d cb 71 1d 63 bd 5e 9f 7a ce e2 38 46 14 45 cf 75 7f fb 0e 7d 00 c0 f5 eb d7 b1 ba ba 8a 3b 77 ee e0 fa f5 eb 23 41 58 02 f6 Data Ascii: g?d\.7nuBzxIq%=6yy[oaccC.C)o^Rsa}}S;w7oW_ETYT*RR #gP&1J.\0z~y:B?rALlqx_>\|Gj0kZs-qc^z8FEu};w#AX
2024-04-25 18:48:08 UTC	538	IN	Data Raw: 0a 85 02 86 c3 21 76 76 76 b0 b1 b1 81 2f bf fc 12 3f fa d1 8f d0 ef f7 e1 ba 2e ae 5e bd 8a f7 de 7b 0f c3 e1 10 e7 ce 9d c3 f5 eb d7 91 cb e5 e0 ba 2e 76 76 76 90 cb e5 d4 36 d7 d7 d7 11 04 01 0a 85 02 d6 d6 d6 b0 b4 b4 a4 b6 5b 28 14 00 ec 06 e9 30 0c f7 9c 06 46 44 f4 a2 69 d7 a3 fe ec b3 cf 70 f6 ec 59 78 9e 87 7b f7 ee c1 b6 6d 14 0a 05 2c 2e 2e 62 7d 7d 1d 5b 5b 5b c8 e5 72 2a c0 de b8 71 03 b7 6f df 1e e9 39 03 bb c3 17 d2 0b 07 80 7b f7 ee e1 f6 ed db b8 71 e3 06 72 b9 1c 16 17 17 51 28 14 70 e5 ca 15 00 40 1c c7 e8 f7 fb 70 1c 07 71 1c 23 8e e3 17 79 d8 44 44 53 69 17 a8 65 e8 e3 ee dd bb 23 81 36 97 cb a1 50 28 c0 75 5d 5c bf 7e 1d 8b 8b 8b 6a 0c 5a 7a dd c0 ee d0 c8 da da 1a 96 97 97 f1 de 7b ef a9 65 a4 77 9e de 5e 56 b1 58 c4 60 30 00 00 84 Data Ascii: !vvv/?.^{.vvv6[(0FDipYx{m,..b}}[[[r*qo9{qrQ(p@pq#yDDSie#6P(u]\~jZz{ew^VX`0
2024-04-25 18:48:08 UTC	4744	IN	Data Raw: 40 e9 66 c7 f7 7d f8 be 7f a8 75 c2 30 84 ef fb a7 be 6e 88 74 a7 65 a0 de d9 d9 c1 70 38 9c fa 97 0d c6 62 63 63 03 e7 ce 9d c3 b9 73 e7 d4 32 6b 6b 6b 28 95 4a e8 f7 fb 6a b9 52 a9 84 ab 57 af aa c7 37 6f de c4 85 0b 17 50 2a 95 8e f7 c0 66 a8 52 a9 a0 52 a9 1c 6a 9d 6e b7 8b 4a a5 82 6e b7 7b 4c a5 22 a2 83 d0 32 50 df b9 73 47 05 dc 49 7f af be fa 2a ce 9d 3b 87 b5 b5 b5 91 f5 fa fd be 0a f2 1b 1b 1b 07 de df fa fa 3a 80 d3 df ab 26 a2 93 e9 07 b3 2e c0 5e 6c db 46 a1 50 18 7b 7e 67 67 07 eb eb eb 58 5e 5e c6 70 38 84 eb ba 00 80 a5 a5 25 0c 87 43 9c 3d 7b 16 b6 6d 1f 78 3f 9f 7d f6 19 fe e5 5f fe 05 d5 6a f5 39 95 9c 88 e8 f9 d1 3a 50 2f 2f 2f 63 69 69 69 e2 6b c3 e1 10 6f bd f5 16 1a 8d 06 ae 5f bf 8e 5c 2e 87 5c 2e 87 5b b7 6e 1d 7a 3f 8b 8b 8b e8 Data Ascii: @f}u0ntep8bccs2kkk(JjRW7oPfRRjnJn{L"2PsGI;:&.^lFP{~ggX^^p8%C={mx?}_j9:P///ciiiko_\.\.[nz?
2024-04-25 18:48:08 UTC	5930	IN	Data Raw: 88 48 73 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 18 a8 89 88 34 c7 40 4d 44 a4 39 06 6a 22 22 cd 31 50 13 11 69 8e 81 9a 88 48 73 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 18 a8 89 88 34 c7 40 4d 44 a4 39 06 6a 22 22 cd fd 60 d6 05 48 33 4d 13 9e e7 cd ba 18 44 74 0a 99 a6 39 eb 22 1c d9 5c 92 24 c9 ac 0b 41 44 44 d3 71 e8 83 88 48 73 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 18 a8 89 88 34 c7 40 4d 44 a4 39 06 6a 22 22 cd 31 50 13 11 69 8e 81 9a 88 48 73 0c d4 44 44 9a 63 a0 26 22 d2 1c 03 35 11 91 e6 18 a8 89 88 34 a7 65 a0 0e 82 00 be ef 23 0c 43 00 80 ef fb 88 e3 58 3d 26 da 4f b6 0d ed d5 76 d8 ae 48 77 da 05 ea 56 ab 85 20 08 60 9a 26 82 20 40 ab d5 52 d7 91 6d b7 db 08 c3 70 e4 8d c5 37 19 65 f9 be af da 90 e7 79 08 c3 50 b5 1d Data Ascii: HsDDc&"54@MD9j""1PiHsDDc&"54@MD9j""`H3MDt9"\$ADDqHsDDc&"54@MD9j""1PiHsDDc&"54e#CX=&OvHwV `& @Rmp7eyP
2024-04-25 18:48:08 UTC	5255	IN	Data Raw: 6f 7e 03 00 ea d7 ff a7 4f 9f 8e 1c a7 dc a2 2b 5d 5e b9 c2 60 1c c7 78 fa f4 29 e6 e7 e7 d5 73 72 3d ec fb f7 ef ab 5f ee 65 1b 85 42 41 25 c9 48 7d cb b6 27 d5 af ec 73 7e 7e 5e cd ed cd 96 25 9f cf a3 50 28 a8 63 4e 9f 93 6c dd 04 7f bd fd d2 db 6f bf ad 66 4b 64 cb 94 5d e7 93 4f 3e 41 1c c7 28 14 0a 23 c7 29 f5 9c 2d 93 2c 6f 9a a6 ba 96 75 ba 1e d2 eb a6 cf 85 d4 b5 fc 3b 37 37 37 b2 3f 29 d7 93 27 4f c6 d6 93 f2 3e 79 f2 04 86 61 4c 3d c7 52 07 e9 fa 93 b2 a4 cf e7 83 07 0f 46 da 62 fa 1c 4b db 94 f3 29 eb cb 8c 21 d9 4e 7a ff b2 7e ba ce 64 f9 ec f9 cc be 1f 27 d5 ad 9c 0b 9a ec d4 f5 a8 d3 3d 2a cf f3 d0 ed 76 d1 6c 36 11 c7 31 1a 8d 06 4c d3 54 3d a2 4a a5 a2 12 32 7c df 57 59 77 fb 91 2c 30 cf f3 54 e3 94 9b ea a6 3f f7 e4 be 71 32 ed 4c e6 69 Data Ascii: o~O+]^`x)sr=_eBA%H}'s~~^%P(cNlofKd]O>A(#)-,ou;777?)'O>yaL=RFbK)!Nz~d'=*vl61LT=J2\|WYw,0T?q2Li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49972	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	1146	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/get-started/buy-now.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:09 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:09 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C8YVHHCD04S36YCYD9GY Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49973	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	908	OUT	GET /en-us/sharefile/media/rb-buy-account-info-2.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:09 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 27686 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:09 GMT Etag: "eacc235326080918586184f6ef441745-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C927RRXPD90CA2WVPB28 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:09 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ec 00 00 01 8d 08 06 00 00 00 d3 82 42 9f 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 07 38 a7 b9 a0 06 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 54 e5 dd f0 ff cf 99 35 93 7d 83 90 b0 ef ab 06 44 11 59 cc c4 ad 0a 6a 15 97 de 96 f6 b1 75 6b b5 d6 47 db bb 77 6d 7f de cd a4 ad 4f 69 7b f7 b6 d5 b6 58 eb 52 16 45 45 45 14 44 dc 32 41 2c a2 b2 09 c8 be 08 24 04 b2 ef b3 9e f3 fb 23 9e 71 32 4c 92 49 48 42 0e 7c df af d7 bc 20 73 96 eb 3a d7 9c 39 df b9 96 73 1d 45 d3 34 0d 21 84 10 42 f4 69 a6 33 9d 01 21 84 10 42 74 4c 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 90 80 2d 84 10 42 18 80 04 6c 21 84 10 c2 00 ba 25 60 bb dd ee ee d8 8d 10 42 08 21 Data Ascii: PNGIHDRBpHYs+tIME8 IDATxy\|T5}DYjukGwmOi{XREEED2A,$#q2LIHB\| s:9sE4!Bi3!BtLBaB-Bl!%`B!
2024-04-25 18:48:09 UTC	2372	IN	Data Raw: 51 7b df d5 ae 88 e5 ba 14 4d 5f 1d dc 19 5e 3e 1d 95 4b 71 71 71 87 d7 dc f0 6b 44 5f 3d e6 d3 11 79 2e b5 75 4d 6c ef d8 dd 6e 77 af 95 4d 4c 4d e2 45 45 45 a1 03 2a 2a 2a 0a 05 f0 f0 e0 19 4b 73 6e 47 c2 9b 77 dd 6e 77 9b fb d3 bf 64 d1 9a 83 db fa 02 eb 4d e9 e1 b7 9e e9 41 35 92 3e d8 ad a3 2f 73 5b 69 b5 f5 be be 5f bd 0c 7b 43 5b c7 08 d1 cb 44 88 be 2e f2 da a3 28 4a 9f 1b 68 d9 de f5 2b 96 e5 5d a1 07 1b bd 2c f4 ef 7d 77 a5 d3 93 65 1c 4b 79 f4 44 99 41 eb e3 ca cf cf 8f 3a b0 b9 bd 63 77 3a 9d bd 76 fe c5 7c 5b 97 7e 71 d7 03 51 4f f4 1f 87 07 fd fc fc fc 36 7f f1 14 14 14 b4 ea df 0e a7 07 5a 4d d3 42 af f0 7e f0 70 e1 fb 2e 2a 2a 3a 65 9b f6 02 b6 5e 1e fa 7a fa 07 16 5e 46 91 fb d4 f7 d7 9d 35 ed 8e 84 7f 69 c3 f3 a2 07 e9 68 b7 87 09 61 44 Data Ascii: Q{M_^>KqqqkD_=y.uMlnwMLMEEE*KsnGwnwdMA5>/s[i_{C[D.(Jh+],}weKyDA:cw:v\|[~qQO6ZMB~p.:e^z^F5ihaD
2024-04-25 18:48:09 UTC	538	IN	Data Raw: 03 90 80 2d 84 10 42 18 80 04 6c 21 84 10 c2 00 24 60 0b 21 84 10 06 20 01 5b 08 21 84 30 00 09 d8 42 08 21 84 01 48 c0 16 42 08 21 0c 40 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 90 80 2d 84 10 42 18 80 04 6c 21 84 10 c2 00 24 60 0b 21 84 10 06 20 01 5b 08 21 84 30 00 09 d8 42 08 21 84 01 48 c0 16 42 08 21 0c 40 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 90 80 2d 84 10 42 18 80 04 6c 21 84 10 c2 00 24 60 0b 21 84 10 06 20 01 5b 08 21 84 30 00 09 d8 42 08 21 84 01 48 c0 16 42 08 21 0c 40 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 b0 9c e9 0c 08 d1 db dc 6e 37 c5 c5 c5 00 14 14 14 9c e1 dc 9c 3e b7 db 8d d3 e9 6c f5 5e 61 61 21 00 79 79 79 a7 2c 13 42 18 93 a2 69 9a 76 a6 33 21 44 6f 06 98 c2 c2 42 5c 2e 17 00 3d 75 fa f7 c6 f1 b8 dd 6e f2 f3 f3 01 70 3a 9d Data Ascii: -Bl!$`! [!0B!HB!@BaB-Bl!$`! [!0B!HB!@BaB-Bl!$`! [!0B!HB!@BaBn7>l^aa!yyy,Biv3!DoB\.=unp:
2024-04-25 18:48:09 UTC	4744	IN	Data Raw: ac bd 57 51 51 51 9b db c5 42 5f d7 e9 74 9e 92 2f 97 cb d5 2a 8f 1d e5 a1 a3 3c 87 a7 11 a9 a8 a8 a8 4b c7 1b 99 df 58 f6 13 99 8f 58 d2 ed cc 67 1b cb 67 17 59 b6 d1 c4 52 f6 d1 ca 24 96 6d 5c 2e 57 b7 a4 15 99 66 e4 7e db 7a ff 74 3e 6f 21 c4 99 25 01 bb 8d f7 9d 4e e7 29 17 ad c8 8b 6b f8 f2 f0 65 1d 5d ec c2 2f 9a d1 f6 11 1e 78 da bb c0 3b 9d ce d0 ba d1 f2 1b be 9f 68 41 3b f2 e2 dd 51 30 69 ab 3c da cb 6f 51 51 51 bb cb 75 1d 2d ef 48 e4 b1 b6 f7 d9 b5 f7 e3 2a bc 4c 3a 7b 0e 74 f6 78 3a 4a 2b b2 ec a2 a5 d5 d9 80 dd de fe 22 8f 4d 08 d1 b7 18 fa 5b d9 d5 80 dd d6 45 a9 bd e0 a6 0b bf c8 b6 75 91 6c 6f fb f6 f2 1d 19 54 62 d9 be a3 75 db 0b 4e 9d 3d de c8 f5 62 0d 5e b1 a4 75 3a 01 bb bd 3c b6 b5 5e b4 32 e9 ca 7e 4e e7 78 62 3d 5f da 5b af b3 01 Data Ascii: WQQQB_t/<KXXggYR$m\.Wf~zt>o!%N)ke]/x;hA;Q0i<oQQQu-HL:{tx:J+"M[EuloTbuN=b^u:<^2~Nxb=_[
2024-04-25 18:48:09 UTC	5930	IN	Data Raw: c4 9c bc e8 61 67 7d c0 ee c9 59 8e 84 10 c6 73 d9 f4 64 3c 1e 95 f1 23 1d a4 24 59 c8 48 b3 f0 83 ff c8 62 d6 85 49 64 a6 59 f1 07 34 aa 6a fc 5c 30 31 91 9b af 4e a7 f8 93 3a 1e b8 7d 00 3f b8 2d 0b 45 81 8b 27 27 62 b7 99 a8 6f 0c 92 96 d2 ce 25 d4 62 26 ee ae db f0 bd bf 1e ad a2 75 2d 3b 70 c2 86 f7 50 02 f6 f1 1e 02 a3 53 4f dd 56 31 63 1e 98 8f 79 c8 95 9d 3b 38 05 46 66 da b9 62 6c 32 5f 56 f9 d0 d0 b0 98 14 9a 7c 2a 49 36 13 b3 47 24 90 60 37 63 42 e3 50 95 8f 94 78 0b 17 0e 4e e0 fc 41 0e 06 a7 5a 39 58 e5 e3 cd ed b5 7c 6b 4a 1a c7 eb fd ec ab 68 e8 5c fa a2 47 19 b2 0f 5b 08 21 3a 12 ad 0f bb 27 b4 d5 87 dd 92 09 95 c0 a7 5b a8 ff fe 43 04 77 1f 6c b5 9d 29 33 81 c4 47 2f 24 68 fb 37 68 e1 b3 25 2a 58 86 5e 83 65 7a 21 4a fc 80 56 db b4 d7 87 Data Ascii: ag}Ysd<#$YHbIdY4j\01N:}?-E''bo%b&u-;pPSOV1cy;8Ffbl2_V\|I6G$`7cBPxNAZ9X\|kJh\G[!:'[Cwl)3G/$h7h%X^ez!JV
2024-04-25 18:48:09 UTC	7116	IN	Data Raw: 93 13 71 4c 9e 40 fa 03 f3 a9 fc f3 12 14 ab 19 fb a4 51 00 24 ce 99 8d 67 cb 6e ea 5e 5a 4b dc a4 31 24 5e 33 8b ba 95 ef 93 7c f3 95 60 32 63 4e 88 27 f1 1b b3 68 de b8 9d 9a 45 2b 89 9f 39 35 74 2c b6 d1 43 5b f2 3e 7a 30 49 df cc c7 b3 75 37 6a 6d 1d f6 09 a3 b0 0d ce 69 59 67 ec 70 00 e2 26 8d c6 9c 96 84 75 78 0e 55 4f be 4c bc f3 22 e2 67 4c 46 ab 6f a2 ee d5 77 b1 0c cc 22 ee c2 89 bd f8 49 08 21 84 e8 2d 32 71 8a 10 42 08 61 00 86 ac 61 0b 21 84 10 e7 1a 09 d8 42 08 21 84 01 48 c0 16 42 08 21 0c 40 02 b6 10 42 08 61 00 12 b0 85 10 42 08 03 90 80 2d 84 10 42 18 80 21 03 76 30 18 c4 ef f7 87 5e 1d dd 99 a6 69 1a 87 0e 1d 42 55 d5 98 d3 08 04 02 7c f1 c5 17 51 97 f9 7c be 0e b7 57 9b 9a 63 4e 4b 08 9d cf e7 23 10 08 74 bc 62 07 34 4d a3 ba ba 1a 4d Data Ascii: qL@Q$gn^ZK1$^3\|`2cN'hE+95t,C[>z0Iu7jmiYgp&uxUOL"gLFow"I!-2qBaa!B!HB!@BaB-B!v0^iBU\|Q\|WcNK#tb4MM
2024-04-25 18:48:09 UTC	6321	IN	Data Raw: c5 c5 c5 fc e3 3f fe 23 6b d6 ac 21 29 29 09 38 fa 41 e3 c1 07 1f 24 36 36 96 c6 c6 46 5e 7a e9 25 d2 d2 d2 4e 78 5e 54 55 65 c9 92 25 f4 e9 d3 87 fe fd fb b3 69 d3 26 7e fd eb 5f 13 89 44 b8 fe fa eb 51 14 e5 dc ff 70 84 10 42 9c 13 ba 0c ec 55 ab 56 31 6f de 3c 2d 80 14 45 e1 de 7b ef 25 2e 2e 8e 39 73 e6 f0 f0 c3 0f 73 f9 e5 97 f3 e1 87 1f 32 7b f6 6c 92 92 92 88 8e 8e e6 8d 37 de a0 a2 a2 82 25 4b 96 f0 e2 8b 2f 32 77 ee 5c 1e 79 e4 11 1a 1b 1b d9 b1 63 07 4f 3c f1 04 8d 8d 8d bc f6 da 6b f4 eb d7 8f 65 cb 96 f1 fa eb af 03 30 67 ce 1c 6e b8 e1 06 66 ce 9c 49 7e 7e 3e d9 d9 d9 c0 d1 90 fc e3 1f ff c8 bd f7 de cb b8 71 e3 78 f3 cd 37 f9 e6 9b 6f 38 7c f8 30 2b 56 ac e0 c9 27 9f c4 6c 36 f3 e5 97 5f f2 c8 23 8f e0 f5 7a 99 38 71 22 89 89 89 3c f3 cc 33 Data Ascii: ?#k!))8A$66F^z%Nx^TUe%i&~_DQpBUV1o<-E{%..9ss2{l7%K/2w\ycO<ke0gnfI~~>qx7o8\|0+V'l6_#z8q"<3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49975	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	903	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-4.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:09 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 32776 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:09 GMT Etag: "62034c956a495c5408c1c8d418ace2f2-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C9293973E872SNE2TMDD X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:09 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 2e 08 06 00 00 00 a0 7f 44 c9 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 27 1b 90 5a f5 d6 00 00 20 00 49 44 41 54 78 9c ec dc 77 78 54 55 e2 ff f1 f7 f4 99 4c 7a ef 9d 10 92 40 20 74 15 15 04 54 84 45 05 ac d8 75 d5 5d 1b ae 6b 5b 5d 51 d7 8e 2e a2 e8 0a 0a 02 82 f4 26 d2 11 54 20 20 01 42 48 81 04 d2 49 ef 65 66 32 ed fc fe 48 98 25 02 8a 59 5d d9 df f7 bc 9e c7 c7 87 3b f7 9e 7b ee 9d 3b e7 73 cf 39 f7 46 e1 e1 e9 29 90 24 49 92 a4 5f 48 31 f3 fd f7 65 80 48 92 24 49 bf 98 42 08 21 03 44 92 24 49 fa c5 94 bf 77 05 24 49 92 a4 ff 4d 32 40 24 49 92 a4 1e 91 01 22 49 92 24 f5 88 0c 10 49 92 24 a9 47 64 80 48 92 24 49 3d 22 03 44 Data Ascii: PNGIHDR.DpHYs+tIME'Z IDATxwxTULz@ tTEu]k[]Q.&T BHIef2H%Y];{;s9F)$I_H1eH$IB!D$Iw$IM2@$I"I$I$GdH$I="D
2024-04-25 18:48:09 UTC	2372	IN	Data Raw: 79 27 56 ab 95 eb 27 4e c4 cf df 9f 86 86 06 32 32 32 b8 e5 d6 5b 99 36 6d 1a 6f bd f9 26 1a 8d 06 85 42 01 80 52 79 f1 cc fd db 6c 36 0e 1d 3e cc d1 a3 47 49 4b 4b c3 d7 d7 17 bb dd ee fa bc a3 a3 83 80 c0 40 d4 6a 35 83 07 0f a6 a4 a4 84 b4 b4 34 14 0a 05 4a a5 12 b5 4a e5 3a 2e 49 92 a4 ff 25 17 1c 20 e5 a7 4e f1 97 bf fe 95 f7 ff f9 4f 6e bb ed 36 f6 a6 a7 f3 da 6b af 71 ef 7d f7 71 f5 d8 b1 a4 a7 a7 b3 79 f3 66 74 3a 1d 4f 3f fd 34 4e a7 13 a7 d3 89 d5 66 e3 93 8f 3f 26 39 39 f9 9c e5 7e fc f1 c7 34 36 36 32 77 ee 5c 26 4f 9a e4 5a 7e ec d8 31 ee be e7 1e e6 cf 9f cf f8 f1 e3 19 35 72 a4 ab a1 55 ab 3b ab dd d8 d8 48 45 45 05 01 01 01 04 06 06 9e b3 7c 8b c5 42 7e 7e 3e 5e 5e 5e 44 45 45 01 60 36 99 40 a1 c0 60 30 e0 70 38 30 9b cd b8 bb bb bb b6 69 Data Ascii: y'V'N222[6mo&BRyl6>GIKK@j54JJ:.I% NOn6kq}qyft:O?4Nf?&99~4662w\&OZ~15rU;HEE\|B~~>^^^DEE`6@`0p80i
2024-04-25 18:48:09 UTC	538	IN	Data Raw: e1 70 60 77 38 b0 db ed c4 c6 c6 f2 f7 17 5f e4 a5 e9 d3 b9 ed b6 db 18 31 62 04 5a 8d 86 3d 7b f7 52 5f 57 87 5e af 77 bd ec 77 fa 0f 1a fe 78 b8 2b 2d 2d 8d 69 d3 a6 f1 dc 73 cf 71 c3 8d 37 32 66 f4 68 f4 06 03 fb f6 ed 63 f7 ee dd dc 79 e7 9d 24 24 24 60 36 9b b1 db ed 38 1c 8e 9f 0d 11 47 57 fd 4e af e7 70 38 5c cb 3c 3c 3c 78 eb cd 37 79 f8 4f 7f e2 b6 db 6f 67 e4 c8 91 f8 f8 f8 90 9f 9f cf f6 ed db 99 38 71 22 97 fe a8 37 25 49 92 f4 7b ba e0 00 f9 f1 f0 d2 b6 6d db 88 8e 8e e6 96 5b 6e e1 bb ef be 63 e3 c6 8d cc 9c 39 93 6b af b9 06 83 c1 40 50 50 10 06 83 c1 f5 9e c8 f9 f4 eb d7 8f 35 ab 57 b3 70 e1 42 d6 ae 5b c7 ce 9d 3b 5d 6f 68 27 25 25 f1 f8 63 8f 31 6e dc 38 00 c2 23 23 19 39 6a 14 e1 e1 e1 dd ca d0 68 34 0c 1e 3c 18 8d 46 e3 7a 7b 7c da b4 Data Ascii: p`w8_1bZ={R_W^wwx+--isq72fhcy$$$`68GWNp8\<<<x7yOog8q"7%I{m[nc9k@PP5WpB[;]oh'%%c1n8##9jh4<Fz{\|
2024-04-25 18:48:09 UTC	4744	IN	Data Raw: 08 b4 3f aa 73 47 47 07 16 8b 05 a7 d3 89 56 ab c5 68 34 fe e2 73 29 49 92 f4 5b eb 71 80 9c 56 59 59 c9 87 b3 67 73 fd c4 89 0c 1e 3c f8 d7 aa 97 24 49 92 74 91 fb 8f 03 44 92 24 49 fa bf 49 fe 61 25 49 92 24 a9 47 64 80 48 92 24 49 3d 22 03 44 92 24 49 ea 11 19 20 92 24 49 52 8f c8 00 91 24 49 92 7a 44 06 88 24 49 92 d4 23 32 40 24 49 92 a4 1e 91 01 22 49 92 24 f5 88 0c 10 49 92 24 a9 47 64 80 48 92 24 49 3d 22 03 44 92 24 49 ea 11 19 20 92 24 49 52 8f c8 00 91 24 49 92 7a 44 06 88 24 49 92 d4 23 32 40 24 49 92 a4 1e 91 01 22 49 92 24 f5 88 0c 10 49 92 24 a9 47 64 80 48 92 24 49 3d 22 03 44 92 24 49 ea 11 19 20 92 24 49 52 8f c8 00 91 24 49 92 7a 44 06 88 24 49 92 d4 23 32 40 24 49 92 a4 1e 91 01 22 49 92 24 f5 88 0c 10 49 92 24 a9 47 64 80 48 92 24 49 Data Ascii: ?sGGVh4s)I[qVYYgs<$ItD$IIa%I$GdH$I="D$I $IR$IzD$I#2@$I"I$I$GdH$I="D$I $IR$IzD$I#2@$I"I$I$GdH$I="D$I $IR$IzD$I#2@$I"I$I$GdH$I
2024-04-25 18:48:09 UTC	5930	IN	Data Raw: 38 70 20 89 89 89 64 64 64 b0 67 cf 1e 0e 1f 3e 8c dd e1 e0 85 17 5e a0 5f bf 7e 74 74 74 50 52 52 c2 88 11 23 08 0f 0b 3b ab 9e a7 1f 7b dd bd 67 0f 87 0e 1d 22 7d ef 5e 46 5c 7e 39 61 a1 a1 34 36 34 30 6e dc 38 e2 e3 e2 c8 38 78 90 2d 5b b6 70 24 33 93 d0 d0 50 46 8d 1c 49 df 94 14 c2 c3 c3 f1 f5 f5 c5 a0 d7 b3 69 d3 26 1a 1a 1a 18 3b 76 2c 15 15 15 44 45 46 ba de da 16 42 50 53 5d 4d 68 48 08 a9 a9 a9 0c 1e 3c 18 bb c3 c1 ba b5 6b d9 9b 9e 4e 56 56 16 13 ff f0 07 ee bc f3 4e ac 56 2b 45 c5 c5 0c 1c 38 90 b8 ae 79 1b ab d5 4a 79 79 39 83 06 0f 26 2e 2e 0e 3f 3f 3f 94 2a 15 ab 57 ad c2 cd 68 24 b5 7f 7f 4e 95 97 93 92 92 42 62 62 22 69 69 69 34 37 37 b3 7a cd 1a 32 33 33 c9 3a 7a 94 f1 e3 c7 33 f5 f6 db f1 f2 f2 22 24 24 84 6f be f9 86 fd fb f7 73 34 2b Data Ascii: 8p dddg>^_~tttPRR#;{g"}^F\~9a4640n88x-[p$3PFIi&;v,DEFBPS]MhH<kNVVNV+E8yJyy9&..???*Wh$NBbb"iii477z233:z3"$$os4+
2024-04-25 18:48:09 UTC	7116	IN	Data Raw: d7 5f 7f 1d 01 b8 bb bb 73 ed b5 d7 92 77 ec 18 6f bc f9 26 55 55 55 24 27 27 33 66 f4 68 e6 cf 9f cf f4 e9 d3 69 6e 6e c6 60 30 a0 d3 6a 5d f3 57 5a ad 16 85 42 41 60 60 20 7a 9d 8e 05 0b 17 32 79 d2 24 7c 7c 7c 3a e7 12 0f 1c 40 a1 50 d0 dc d4 c4 1f 26 4e e4 e4 89 13 64 1e 3e 8c 5a a3 c1 db cb 8b 81 69 69 1c 39 72 84 37 de 7c 13 8b d9 4c 64 54 14 43 87 0c 61 ce dc b9 94 bd fa 2a 19 07 0e 70 f7 3d f7 60 31 9b b1 5a ad a8 d5 6a ae bd e6 1a 56 ae 5a d5 39 bf d2 de ce 80 b4 34 e6 cd 9f 4f 6a df be 0c 1c 34 88 8b 95 42 fc 2e 8f 44 5c 18 a7 d3 49 5e 5e 1e 31 31 31 b8 b9 b9 51 56 56 e6 ba 4b 03 c8 cd cd a5 aa aa 0a 5f 5f 5f 7a f7 ee 8d c1 60 c0 e1 70 50 5e 5e 8e 97 97 17 26 93 09 5f 5f 5f 57 28 9c 6e b4 bc bc bc 48 1b 30 80 d6 d6 56 b2 b3 b3 b1 db ed c4 c6 c5 Data Ascii: _swo&UUU$''3fhinn`0j]WZBA`` z2y$\|\|\|:@P&Nd>Zii9r7\|LdTCa*p=`1ZjVZ94Oj4B.D\I^^111QVVK___z`pP^^&___W(nH0V
2024-04-25 18:48:09 UTC	8302	IN	Data Raw: 3b f1 78 3c 24 25 25 f1 f0 6f 7f 4b 44 44 04 00 a7 0a 0b 79 f1 c5 17 f9 d9 cf 7e 46 7a 5a 1a f5 75 75 3c f1 87 3f 70 c7 b2 65 b4 b7 b7 f3 ca ab af a2 56 a9 e8 71 b9 b8 e7 9e 7b 98 37 6f 1e 7f ff c7 3f 48 4e 4a e2 96 5b 6e a1 be be 9e 67 56 ad e2 de 7b ee 21 2d 2d 2d 50 3e 8d 5a 8d 24 49 74 75 76 22 01 e1 e1 e1 a8 55 2a 82 82 82 68 69 69 61 f9 f2 e5 5c 75 d5 55 44 44 44 f0 c4 8a 15 1c 3f 7e 9c e0 e0 60 46 8e 18 c1 03 0f 3c 10 28 df be 7d fb 78 ef bd f7 b0 3b 1c 3c f4 d0 43 fc f1 8f 7f c4 6a b5 f2 dc 73 cf d1 e3 72 21 cb 32 df be e9 26 be fd ed 6f a3 d5 6a 01 38 7d fa 34 9b 36 6f c6 eb f1 50 58 58 c8 ca 95 2b d9 b3 67 0f ef 6e da 44 50 50 10 29 29 29 fc e4 27 3f 21 39 29 89 35 6b d6 f0 f6 3b ef 60 36 9b 91 80 fb ef bf 9f 59 b3 66 91 97 97 c7 f3 cf 3f 8f dd Data Ascii: ;x<$%%oKDDy~FzZuu<?peVq{7o?HNJ[ngV{!---P>Z$Ituv"U*hiia\uUDDD?~`F<(}x;<Cjsr!2&oj8}46oPXX+gnDPP)))'?!9)5k;`6Yf?
2024-04-25 18:48:09 UTC	3101	IN	Data Raw: 02 1d ec 6e 8f 87 96 d6 56 54 6a 35 a9 a9 a9 24 24 24 f0 5f b7 de 4a 7a 5a 1a d0 3b 8a ab 22 ff 7f 8b 47 25 49 58 3b 3a 38 76 ec 18 41 66 33 43 52 53 b1 58 2c 28 7d fb 56 fa 26 61 12 04 41 f8 ba 1a b4 01 32 34 35 85 1e 77 ef 74 ab 3d 2e 17 5e 9f 0f 8f c7 43 41 61 11 ad 1d 1d 0c 1b 9a 7a c1 c7 79 27 4f 9a 44 4d 4d 0d 31 31 31 84 84 84 30 6e ec 58 72 73 73 59 ff f6 db fc ed f9 e7 99 3e 7d 3a 7a bd 1e 93 d1 c8 84 f1 e3 c9 c9 c9 61 e3 c6 8d fc ed 6f 7f 23 d4 62 61 f2 a4 49 34 36 34 e0 f5 78 38 79 f2 24 fe be 19 fe 86 0c 19 42 78 78 38 7f ff fb df f9 f0 c3 0f 79 f9 95 57 b0 db ed 54 57 57 e3 f5 7a 71 3a 9d 54 57 57 d3 de de 8e c9 68 44 ad 56 a3 d3 e9 ce 2b 9f 20 08 c2 d7 c5 a0 1e ce bd a3 b3 93 bc 13 27 f1 f9 fc e8 0d 7a dc 6e 0f 6a 95 c4 98 b4 d1 24 c4 c5 5e Data Ascii: nVTj5$$$_JzZ;"G%IX;:8vAf3CRSX,(}V&aA245wt=.^CAazy'ODMM1110nXrssY>}:zao#baI464x8y$Bxx8yWTWWzq:TWWhDV+ 'znj$^
2024-04-25 18:48:09 UTC	8	IN	Data Raw: 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49974	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	903	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-3.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:09 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 21812 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:09 GMT Etag: "f4a847b05e94526859f77d8c5adb970e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C92GST55ZFER86516AJK X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:09 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ca 00 00 01 d4 08 06 00 00 00 ba 40 68 37 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 24 07 af 76 fa 5a 00 00 20 00 49 44 41 54 78 9c ec dd 6f 90 e3 e6 7d 27 f8 6f 67 1d 79 2a 9a 1e d0 b9 b3 47 b5 d3 03 6e 12 ef b8 ac 6e c0 b9 4d 8d 76 33 0d 64 f7 85 b4 c9 10 cc 5d 6d ac a4 d4 a4 ea ae 2a 4e 32 24 e7 de ac bd a5 26 e7 c5 9e 9d 3a 35 38 a9 b5 f3 c6 0d ce c6 76 6a b3 69 70 ee 1c 4b f7 a2 c9 b9 c4 65 d7 a5 1a 54 5c 89 bc 75 6a 70 b4 ce 3a 71 dc 80 94 58 d6 66 3d c0 48 ba b2 e4 54 9e 7b d1 c0 63 90 0d a2 7b fe a9 e7 cf f7 53 35 25 36 01 3c 78 00 52 fc f2 01 40 fc e6 be f5 ad 6f 09 10 11 11 51 ae 1f 39 ec 0e 10 11 11 dd cd e6 4e 7d e8 43 1c 51 12 Data Ascii: PNGIHDR@h7pHYs+tIME$vZ IDATxo}'ogyGnnMv3d]mN2$&:58vjipKeT\ujp:qXf=HT{c{S5%6<xR@oQ9N}CQ
2024-04-25 18:48:09 UTC	2372	IN	Data Raw: 9c 16 86 21 56 6a 35 f8 be 8f 66 ab 85 2b c3 e1 8d 6d e5 5d e6 ca 70 58 38 0a 2e ab 2a ca aa 2a b7 f3 5e 19 31 13 11 dd 8f 0e 14 94 8a a2 4c 8c 1e 4d d3 44 ab d5 82 e3 38 e8 74 3a 50 55 15 71 1c c3 ed f7 51 2e 97 31 4a 0e c3 66 c5 96 55 18 94 be ef 23 8e 63 98 a6 39 11 92 c0 6e 50 5c 19 0e b1 b8 b4 04 cf f3 e0 79 9e 3c 1f 9a 15 45 11 86 c3 21 82 30 dc 37 98 3d cf c3 38 39 d7 a7 69 9a 6c cf f7 7d 00 90 23 62 cf f3 a0 28 8a fc 3b 08 02 84 61 08 5d d7 e5 a8 2f 8a 22 8c c7 e3 dc f6 f2 a8 e5 32 ca b7 39 fc d2 ed 89 e2 18 ba a6 41 d3 b4 7b 76 e4 4d 44 74 57 11 07 14 45 91 38 b1 b0 20 9e 5d 5b 93 7f 9f 59 5e 3e e8 e2 fb da da da 12 47 e7 e7 0b db 5c 5d 5d 15 8b 4b 4b 62 73 73 73 62 99 47 17 17 c5 da da 9a 38 3a 3f 3f f1 ef d1 c5 45 b1 bd bd 3d d1 c6 ce ce 8e 38 Data Ascii: !Vj5f+m]pX8.**^1LMD8t:PUqQ.1JfU#c9nP\y<E!07=89il}#b(;a]/"29A{vMDtWE8 ][Y^>G\]]KKbsssbG8:??E=8
2024-04-25 18:48:09 UTC	538	IN	Data Raw: e6 e8 fc bc 38 b1 b0 20 9e 59 5d 15 9b 9b 9b 22 8a a2 dc d7 27 dd 66 06 25 d1 fd 87 41 39 c3 b9 46 63 22 e0 f6 93 06 65 36 64 84 d8 0d bd 47 17 17 85 10 3f 0c b7 6d df df b3 7c 36 c0 b2 23 d5 ac cf 26 a3 98 28 8a e4 07 7d 76 c4 b5 bd bd 2d 3f e4 d3 d1 d2 ac 36 f2 6c 6c 6c ec e9 7f ba 5d 79 7d 16 62 37 28 f3 f6 d3 b3 c9 c8 5a 88 dd a0 cc 0b e7 a7 56 56 f6 8c c8 b3 eb df de de 96 d3 d3 ed c9 6e ef d6 d6 d6 cc ed 4d f7 61 ba ef 85 10 e2 cc 99 33 f2 8b 4d 36 84 b3 d2 80 4d 03 fd e8 fc fc 9e d7 e2 6c a5 32 73 9b 19 94 44 f7 1f 9e a3 bc cd 94 9c f3 6e 29 79 6e 4d d3 f6 4c ab 56 ab f2 bc a0 ef fb b0 2c 6b cf 3c bf 58 ad a2 dd 6e 23 08 43 e8 ba 8e 56 ab 85 25 4d 43 b5 5a 45 d5 b2 60 59 16 2e 76 bb 00 00 6f 34 02 b0 7b 9e 35 2b 8e 63 c4 71 8c 20 0c 51 56 d5 89 69 Data Ascii: 8 Y]"'f%A9Fc"e6dG?m\|6#&(}v-?6lll]y}b7(ZVVnMa3M6Ml2sDn)ynMLV,k<Xn#CV%MCZE`Y.vo4{5+cq QVi
2024-04-25 18:48:09 UTC	4744	IN	Data Raw: dd 34 4d 78 a3 11 3c cf 43 b9 5c 86 a6 69 d0 75 1d 83 c1 00 a3 d1 08 e5 72 f9 a6 c2 ec a0 af e9 ad bc f6 44 74 f7 e2 88 72 86 74 64 e1 38 0e 5a ad d6 9e e9 41 10 c0 f3 3c 9c cf 99 36 8b 9a fe bc c4 f7 f7 5c d1 e9 79 1e aa d5 2a 80 dd 80 4b 47 72 d3 f3 a4 d3 7d df 47 18 86 a8 56 ab 68 b5 5a 68 b5 5a 70 1c 07 ab ed 36 5a ad 16 34 4d c3 60 30 c0 95 e1 70 4f bf 47 c9 68 73 da ba e3 a0 db ed 4e 6c d3 7e 5f 16 00 e4 b6 e7 27 57 ae 96 93 ab 83 e7 e6 e6 70 75 6a 9b 9c 5e 4f 86 4b 10 04 18 8f c7 13 db e3 ba 2e 1a cd 26 ac 6a 55 7e 39 30 4d 13 17 bb 5d 5c ec 76 b1 da 6e a3 d1 6c e2 65 d3 84 a2 28 30 0c 03 a3 d1 08 71 1c cb 51 ae 65 59 b2 7f d9 91 af 5a 2e e7 f7 3b d9 de a2 ab 83 67 2e 9b f3 9a 11 d1 bd 8f 23 ca 19 54 55 45 ab d5 c2 9a 6d c3 75 dd 89 69 41 10 60 a5 Data Ascii: 4Mx<C\iurDtrtd8ZA<6\y*KGr}GVhZhZp6Z4M`0pOGhsNl~_'Wpuj^OK.&jU~90M]\vnle(0qQeYZ.;g.#TUEmuiA`
2024-04-25 18:48:09 UTC	5930	IN	Data Raw: 3d 61 78 bb a5 23 d2 61 32 a2 b3 6d 1b ad 56 4b 1e 62 05 00 6f 34 42 df 75 d1 69 b7 61 77 bb f0 3c 0f 5d db c6 e5 7e 1f 8d 66 13 8a a2 a0 5c 2e a3 df ef e3 42 a7 03 cf f3 10 5f bf 0e 5d d3 a0 96 cb f2 bc a3 37 1a c9 20 4f e9 9a 26 c3 73 30 18 e4 f6 f1 a1 53 c5 35 dd 88 88 ee 45 3c 47 39 c3 a5 5e 0f 6b b6 8d a5 64 c4 d7 6a b5 50 af d7 11 c7 31 56 db 6d 2c 69 1a 54 55 c5 a5 5e 0f be ef 4f 8c 24 d3 c7 a6 69 ca f6 d2 c7 d9 e7 54 55 95 87 31 d3 11 29 00 68 ba be 67 54 39 18 0e d1 ee 74 a0 69 1a ea f5 3a 82 30 44 bb dd 86 a2 28 a8 56 ab 18 0e 06 d0 35 4d 9e 93 ac d5 6a d0 92 bf b3 a3 c0 7a ad 26 83 b0 5e af 4f 6c 6f a3 d9 9c d8 ae 34 9c 01 a0 5a ad c2 1b 8d b0 6c 18 d0 34 4d 8e 3e 89 88 ee 77 ac 47 79 0f 98 3f 76 0c 6f 5c bf 7e d8 dd 20 22 7a 20 f1 d0 eb 3d a0 Data Ascii: =ax#a2mVKbo4Buiaw<]~f\.B_]7 O&s0S5E<G9^kdjP1Vm,iTU^O$iTU1)hgT9ti:0D(V5Mjz&^Olo4Zl4M>wGy?vo\~ "z =
2024-04-25 18:48:09 UTC	7116	IN	Data Raw: 30 44 a3 d9 44 14 45 b2 ee 63 b6 5d b9 ed c3 21 dc 7e 5f 8e 88 66 99 de af 07 31 fd 1a a5 af 87 a6 69 70 1c 07 66 f2 9a 0d 86 43 39 e2 4e fb aa aa 2a 7e ce 34 77 d7 9d 94 28 8b 33 87 36 d3 fd 92 7d ed d2 75 5d ea f5 e4 e1 7e df f7 67 b6 9b 75 fd fa f5 99 fb 68 7a 9b 8a fa 48 f4 a0 60 50 e6 78 f5 fa 6b b7 ad 70 73 d5 b2 e4 73 aa aa ca 02 c1 83 c1 00 c0 0f 0b 37 5f e8 74 a0 28 4a 6e e1 e6 6c 91 e6 6c 81 df ec 73 fb 15 6e f6 46 23 44 51 04 7f 3c be e1 c2 cd 79 b2 eb 77 1c 47 7e 70 7b 9e 27 47 40 61 18 a2 ac aa 88 af 5f df 3d 74 1c 04 70 fb 7d fc 9c 69 c2 aa 56 11 c7 31 8c a4 b8 72 5e fb 83 c1 00 41 10 a0 56 af 23 4c 46 67 e9 68 29 1d ad ad b6 db 30 0c 03 f5 5a 0d e3 f1 78 66 bb e9 07 7e ba ed b3 2e 6e 2a 97 cb 18 8d 46 f0 7d 1f 9e e7 4d 8c 28 8b a4 23 dd 74 Data Ascii: 0DDEc]!~_f1ipfC9N~4w(36}u]~guhzH`Pxkpss7_t(JnllsnF#DQ<ywG~p{'G@a_=tp}iV1r^AV#LFgh)0Zxf~.nF}M(#t
2024-04-25 18:48:09 UTC	447	IN	Data Raw: bc a4 93 1f dd 7e 3d 8e ed 1d 4b f4 f7 4f 2e d7 fa 08 13 08 00 30 5f 04 e5 3c 8d 9d ae 5c 26 ee e4 c7 b7 76 4d d5 ca 55 21 ad 77 42 ea de b5 ec 8e 3d 29 09 00 6e 06 82 f2 1b 38 5b 98 d1 b9 73 33 0d 5d 93 f5 66 ba 37 b2 44 7f b1 3a c4 09 3b 00 b0 00 08 4a 00 00 2c 38 68 05 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 05 41 09 00 80 c5 d2 c5 1e 00 70 97 a0 f3 0c b8 4d 11 94 c0 cd 41 9d 1d 70 9b 62 ea 15 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b 82 12 00 00 0b Data Ascii: ~=KO.0_<\&vMU!wB=)n8[s3]f7D:;J,8hAAAAAAAAAAAApMApb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49976	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	904	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-5a.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:09 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 17040 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:09 GMT Etag: "80678bba82fdbec8a197271f7c8001c7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C92HJGBBH4D0XGCTDJW5 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:09 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 06 08 06 00 00 00 4b 80 c3 92 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 2e 32 03 2a d6 f3 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 54 d5 fd ff f1 d7 9d 35 93 7d 5f 48 48 20 21 6c 01 c2 2e 8b ec 82 20 0a b8 e0 d6 d6 a5 b6 62 6d 6d ad da 6a d5 aa fd 7e 5d be d4 e5 d7 56 51 d4 af 5a 77 2d 2e 20 8a a2 b2 2f 12 08 5b c2 96 40 20 09 49 08 d9 b7 49 66 b9 73 cf ef 8f 90 29 91 e5 0b 53 14 85 cf f3 f1 e0 d1 e6 ce bd e7 9e 73 67 bc ef 7b ce b9 77 46 4b 4e 49 51 08 21 84 10 a7 c9 62 b1 58 ce 76 1d 84 10 42 fc 08 69 5f 2f 5b 26 3d 10 21 84 10 a7 4d 53 4a 49 80 08 21 84 38 6d a6 b3 5d 01 21 84 10 3f 4e 12 20 42 08 21 02 22 01 22 84 10 22 20 Data Ascii: PNGIHDRKpHYs+tIME.2* IDATxy\|T5}_HH !l. bmmj~]VQZw-. /[@ IIfs)Ssg{wFKNIQ!bXvBi_/[&=!MSJI!8m]!?N B!"""
2024-04-25 18:48:09 UTC	2372	IN	Data Raw: 26 d3 0f 63 9a e6 c0 81 03 7c f6 f9 e7 74 49 4c 24 25 25 05 e3 a8 1e 59 c7 ff 0f 0a 0a 62 c8 90 21 d4 d6 d5 91 96 96 86 32 0c 4c 26 d3 0f a6 0d 42 08 71 46 a9 93 58 b6 6c 99 1a 37 6e 9c 2a 28 28 50 e5 e5 e5 6a d0 e0 c1 0a 50 0b 17 2e 54 1e 8f 47 5d 77 fd f5 2a 2c 3c 5c 8d 9f 38 51 4d 99 3a 55 4d 9c 34 49 8d 1b 3f 5e 7d f2 c9 27 c7 2d cf 30 0c 35 78 c8 10 d5 37 2b 4b ed df bf df bf dc e3 f1 a8 e7 e6 cd 53 80 ba f7 de 7b 95 cf e7 53 fb f7 ef 57 21 21 21 ea 9e 3f fe 51 29 a5 54 59 59 99 da bc 79 b3 aa aa aa 3a 61 7d f7 ee dd ab 36 6f de ac 9a 9a 9a fc fb 6b 6c 6c 54 86 61 28 5d d7 55 7d 7d bd f2 7a bd fe f5 eb eb eb 95 c7 e3 f1 ff 5d 55 55 a5 b6 6c d9 a2 0a 0a 0a 8e 29 fb 9f af bf ae e2 13 12 d4 6b af bd a6 7c 3e 9f f2 7a bd ca e3 f1 f8 ff 79 bd 5e 65 18 86 Data Ascii: &c\|tIL$%%Yb!2L&BqFXl7n((PjP.TG]w,<\8QM:UM4I?^}'-05x7+KS{SW!!!?Q)TYYy:a}6okllTa(]U}}z]UUl)k\|>zy^e
2024-04-25 18:48:09 UTC	538	IN	Data Raw: eb f5 32 68 e0 40 5e 7e f1 45 1e 7a f8 61 c6 8f 1f 4f 4a 4a 0a 3e c3 e0 d2 4b 2e 61 ea d4 a9 6c de bc 19 00 b3 c9 44 58 58 d8 31 f3 33 49 5d ba f0 e4 5f ff ca 3d f7 dc c3 35 d7 5e eb 1f c6 aa ae ae e6 17 bf fc 25 0f 3c f0 40 7b dd 35 8d 90 90 10 82 8e cc cd 9c 88 cd 66 23 34 34 14 ab d5 8a c9 64 22 24 24 04 47 50 10 5e 5d 67 d0 a0 41 bc f4 e2 8b dc ff e0 83 4c bb e4 12 62 62 62 68 6e 6e 26 34 24 84 c7 1f 7f 9c d1 a3 47 9f b4 6c 21 84 f8 21 d1 d4 89 26 19 be a5 b1 b1 91 7f 2d 58 c0 f0 61 c3 e8 d6 ad 1b 33 66 ce e4 92 69 d3 b8 f7 de 7b a9 ad ad c5 eb f5 92 90 90 70 ca 57 d0 5b b6 6c 61 fb f6 ed d4 d7 d7 63 18 06 b1 71 71 8c 19 33 86 8c f4 74 00 9a 9b 9b f9 7a d9 32 7a f5 ec 49 df be 7d fd db b5 b5 b5 b1 29 37 17 ab c5 c2 b0 61 c3 fc bd 9d 1d 3b 76 b0 6c d9 Data Ascii: 2h@^~EzaOJJ>K.alDXX13I]_=5^%<@{5f#44d"$$GP^]gALbbbhnn&4$Gl!!&-Xa3fi{pW[lacqq3tz2zI})7a;vl
2024-04-25 18:48:09 UTC	4744	IN	Data Raw: 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 84 10 42 04 44 02 44 08 21 44 40 24 40 02 e4 72 b9 d0 bd 5e ff df ba ae b3 67 cf 1e f2 f2 f3 71 3a 9d 67 b1 66 67 46 63 63 23 87 2a 2b 51 4a 9d ed aa 7c 2f 7c 86 c1 c1 b2 32 5a 5b 5b cf 76 55 84 f8 d1 38 e7 03 44 29 c5 37 df 7c 43 ee e6 cd c7 bc e6 76 bb 59 bc 78 31 7b 76 ef 3e ad 32 4b 4a 4a b8 e5 17 bf e0 d3 cf 3e 03 da 4f b6 7f fe f3 9f 79 e8 e1 87 79 eb ad b7 a8 aa aa 3a 23 75 3f 9b be f8 e2 0b 9e 7c ea 29 bc 47 85 e4 b9 cc e9 74 f2 c0 03 Data Ascii: $@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@BDD!D@$@r^gq:gfgFcc#*+QJ\|/\|2Z[[vU8D)7\|CvYx1{v>2KJJ>Oyy:#u?\|)Gt
2024-04-25 18:48:09 UTC	5930	IN	Data Raw: 5f 78 81 77 df 7d 97 d6 d6 56 a0 3d 44 9d 4e 27 d0 7e 85 dd b1 fc f0 e1 c3 1c 38 70 c0 5f 6e 5b 5b 9b ff ea bb 63 fd 0e 1e 8f 87 45 9f 7c 42 ce 86 0d 54 55 57 f3 f2 cb 2f 93 93 93 e3 6f c3 be 7d fb fc eb ba dd 6e aa aa aa 28 28 28 f0 2f 53 4a 51 52 52 42 55 55 15 bb 77 ef ee 74 4c 3b da d8 f1 fe 75 70 b9 5c 34 36 36 52 5e 5e de a9 ec 1d 3b 76 f8 db ea 72 b9 50 4a a1 eb 3a fa 91 8b 8f 86 86 86 4e bd 88 83 07 0f fa 8f d7 d1 c7 b0 b9 b9 d9 ff 77 53 53 13 c5 c5 c5 94 97 97 b3 6e fd 7a a0 3d 30 8f 57 2f 21 7e 4c ce 8b 1e 88 d5 6a 65 ec d8 b1 fc e2 96 5b fc cb 3e fa e8 23 76 ec dc 49 5c 6c 2c 1f 2f 5c c8 c4 09 13 d8 b3 67 0f 6e 8f 87 19 97 5d c6 d7 cb 96 d1 d8 d0 40 6b 6b 2b 23 46 8c c0 64 32 b1 7a f5 6a 12 93 92 f8 c5 2d b7 a0 eb 3a f9 3b 76 90 bf 63 07 5b b7 Data Ascii: _xw}V=DN'~8p_n[[cE\|BTUW/o}n(((/SJQRRBUUwtL;up\466R^^;vrPJ:NwSSnz=0W/!~Lje[>#vI\l,/\gn]@kk+#Fd2zj-:;vc[
2024-04-25 18:48:09 UTC	2791	IN	Data Raw: 71 91 41 5d ad a2 b1 c1 60 e1 fb 1e 92 bb 9a 02 7e c2 dc 11 ac 61 b1 82 7e d4 10 96 52 d0 ea 54 27 1d 32 32 99 21 21 49 63 c9 42 2f e5 a5 8a c3 15 3e 0e 16 2b d2 7b 98 49 4c d6 f8 ec 63 2f 53 67 5a c8 1e 6a a6 5f b6 85 25 1f 7b 18 34 cc 42 5a 77 13 25 07 0c ca 4a 0d da 5a 21 b5 bb 09 bb 1d 1a 1b 14 95 7b 0d 7a f4 32 e1 33 14 55 95 8a 92 fd 90 d9 c7 44 44 a4 46 af be 26 b6 6e d2 b9 60 b4 85 92 fd 3e 0e 95 29 cc 27 f9 64 b5 b4 c8 44 ba 10 e7 82 73 3e 40 a0 fd f9 88 6f 8f fb 9f 2a af b7 7d 3e 62 f8 28 33 56 9b c6 f2 a5 3a 21 a1 1a e5 a5 8a b4 ee 26 5a 9a a0 b1 c1 c0 1e 04 dd 7b 98 d0 bd 8a 36 97 c2 dd 06 4d 4d 8a b0 46 15 70 78 b5 b5 29 74 2f 58 8f 7a 97 da 6f 8d d5 d0 38 f1 49 58 19 50 57 a3 c8 ec 63 e2 50 b9 22 31 49 63 d4 78 0b ce 16 68 69 82 e2 03 3e 3c Data Ascii: qA]`~a~RT'22!!IcB/>+{ILc/SgZj_%{4BZw%JZ!{z23UDDF&n`>)'dDs>@o*}>b(3V:!&Z{6MMFpx)t/Xzo8IXPWcP"1Icxhi><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49977	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	945	OUT	GET /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
2024-04-25 18:48:09 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:48:09 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C92XQ8384NEM9ZPB8CJC Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49978	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	903	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:09 UTC	518	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1133 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 45374 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:09 GMT Etag: "9aeee1e7a7ddf80af51ad3c82bef1cff-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C933A7ZS5CBM35VE2GRC X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:09 UTC	668	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0b 00 00 01 90 08 06 00 00 00 b9 f4 45 d2 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 1f 18 1e cc 18 97 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 54 f5 bd ff f1 d7 39 67 f6 99 ec fb 1e 12 20 2c 49 80 10 56 45 11 44 b1 2e d8 52 6d b5 15 95 de b6 da 5b bc da d6 db db fe ae d5 de da da 45 ab b6 f5 da 56 6d af 56 14 44 2d 9b 28 20 48 d8 13 48 80 04 b2 40 80 ec fb 36 99 cc 7e 66 ce ef 8f 09 a9 c8 62 54 68 21 7e 9f 3c 22 86 99 39 73 66 7b cf f7 7c cf f7 fb f9 4a 9a a6 69 08 82 20 7c 0c f9 5f bd 03 82 20 5c 1e 44 58 08 82 30 2c 22 2c 04 41 18 16 11 16 82 20 0c 8b 08 0b 41 10 86 e5 53 85 45 30 18 bc d0 fb 21 08 c2 25 ee 13 87 c5 d1 a3 47 79 e6 99 67 Data Ascii: PNGIHDREpHYs+tIME IDATxy\|T9g ,IVED.Rm[EVmVD-( HH@6~fbTh!~<"9sf{\|Ji \|_ \DX0,",A ASE0!%Gyg
2024-04-25 18:48:09 UTC	2372	IN	Data Raw: a4 24 4c 26 13 2e 97 0b 93 c9 84 d7 eb c5 64 32 21 49 12 3d 3d 3d d8 6c 36 0c 06 03 3e 9f 8f e6 96 16 0c 7a 3d 29 29 29 43 db e9 e8 e8 a0 a0 a0 80 47 1e 79 04 09 d0 08 b5 2c e2 62 63 89 8b 8b e3 ff fe ef ff 98 3c 69 12 d5 55 55 58 cc e6 d3 1e 4b 7b 7b 3b 4e a7 93 f8 f8 78 6c 36 db 85 79 f6 05 e1 32 72 de b0 08 0b 0b c3 66 b5 f2 97 bf fe 95 ef 3d f4 10 c7 4f 9c e0 da 6b af c5 6c 36 f3 5f ff f5 5f 48 92 84 24 49 a8 aa ca 98 31 63 60 b0 69 7f 4a 5b 7b 3b 6e 8f 87 ab af be 9a 84 84 04 00 7e fa e8 a3 34 34 34 60 b7 db c9 1c 35 0a bd 5e cf 3b eb d7 f3 fa 6b af 51 7a e0 00 29 c9 c9 fc ea 57 bf 62 d6 cc 99 04 02 01 fe f7 f9 e7 f9 e3 1f ff 08 c0 9c 2b af 64 c6 8c 19 b4 b7 b7 f3 9d ef 7c 87 17 5e 78 81 f8 84 04 5a 9a 9b 59 b3 6e 1d 2f be f0 02 46 bd 9e ff 7e e4 11 Data Ascii: $L&.d2!I===l6>z=)))CGy,bc<iUUXK{{;Nxl6y2rf=Okl6__H$I1c`iJ[{;n~444`5^;kQz)Wb+d\|^xZYn/F~
2024-04-25 18:48:09 UTC	538	IN	Data Raw: 3e 1e 75 ef 2e f0 fb f8 f8 99 05 c2 e5 4e 84 c5 48 21 49 04 83 01 fc f8 51 19 7e cb 42 43 43 42 42 8f 11 3d 0a 32 7e fc 6e 37 95 35 55 54 35 b6 b2 af ab 9b e2 ce 1e da 93 52 70 27 8e 82 f0 70 f4 91 11 98 01 b7 bd 1f 25 18 00 e9 cc 8e d5 4f d3 87 21 89 19 48 97 34 11 16 9f 73 16 2c e8 d1 70 74 77 d2 d2 d1 cd be ea 4a f6 d4 37 53 a9 33 70 d2 62 23 90 32 0a 26 cf 40 a7 28 18 8d 06 24 55 05 97 0b 14 05 b4 b3 07 82 01 23 0a 3a ce d6 da 90 90 ce 1a 24 12 12 01 02 78 f1 5c e8 87 28 5c 20 22 2c 3e 67 0c 18 91 51 50 51 09 68 3e 8e 55 96 73 f0 d8 09 4a 5a 5b 29 b3 bb e8 48 4e c5 9b 93 0b b1 71 18 a2 22 d1 fb 7c e0 f3 a2 f5 f6 a0 9d 38 01 c7 8f 43 5a 1a d2 15 57 80 e7 f4 c3 1d 69 f0 cf 89 63 35 34 1e 3d 81 ac 57 4e cf 0b 09 14 45 47 30 a0 86 02 43 fb 47 4b 22 e0 57 Data Ascii: >u.NH!IQ~BCCBB=2~n75UT5Rp'p%O!H4s,ptwJ7S3pb#2&@($U#:$x\(\ ",>gQPQh>UsJZ[)HNq"\|8CZWic54=WNEG0CGK"W
2024-04-25 18:48:09 UTC	4744	IN	Data Raw: db 36 70 70 7f 31 56 a3 11 dc 6e 88 88 40 ab a8 40 d9 b3 07 25 10 40 32 18 50 62 63 c1 60 00 9d 0e 0d d0 24 09 cd eb 3d 67 5f 05 80 24 49 a0 81 db e3 c2 89 0b df e0 99 19 19 19 9f cf 47 40 55 71 7b 3c a7 5d a6 a0 c3 e9 1c 40 d3 34 24 59 cc 40 b8 54 89 b0 18 e1 0c 18 e9 6a 6b a7 b6 a2 92 63 87 8e 30 76 62 2e 16 83 81 f0 88 48 1c 9d ed 60 34 86 06 71 49 12 5a 67 27 3a 9d 0e 65 d4 28 00 34 75 f0 50 e0 d4 df 3a dd b0 07 7c 49 1f fa f3 e1 df 43 ff ff d1 df a5 50 c8 08 97 34 11 16 23 98 0e 3d ed 2d cd 1c 3d 7c 18 a3 c9 44 c6 e8 31 14 ad 7f 97 43 91 7b d1 9b 0c 4c 9a 5a c0 96 b2 ca d0 95 35 0d c9 60 00 9b 0d 82 41 b4 40 e0 5f bb f3 c2 25 47 b4 f9 46 28 19 19 7f c0 cf be ed 3b 68 6f 69 01 09 0c 26 03 b6 c8 70 54 4d 63 e1 17 16 91 92 9a 89 df ef 63 68 b8 a6 a6 c1 Data Ascii: 6pp1Vn@@%@2Pbc`$=g_$IG@Uq{<]@4$Y@Tjkc0vb.H`4qIZg':e(4uP:\|ICP4#=-=\|D1C{LZ5`A@_%GF(;hoi&pTMcch
2024-04-25 18:48:09 UTC	5930	IN	Data Raw: 86 7d 9b c6 c6 46 7e f0 fd ef d3 d1 d1 c1 c2 eb af 27 33 23 83 47 1f 7b 8c bf fe f5 af 68 9a c6 ca 95 2b 39 78 e8 d0 05 df 57 9f cf c7 8b 2f bd 44 55 75 35 a9 29 29 44 47 47 13 1d 13 43 58 58 18 92 24 21 4b 12 92 24 b1 79 d3 26 d6 ad 5b c7 f9 2a 23 ee 2f 2b e3 e9 a7 9f c6 6e b7 5f f0 fd 14 3e 5f ce db b2 d0 e9 74 5c 35 67 0e fb f7 ef 47 d3 34 da db db e9 1f 18 e0 f6 db 6f a7 e2 f0 61 00 9a 9a 9a 90 24 89 ab af be 1a 0d d8 bc 69 13 c5 25 25 a4 a7 a7 73 db 97 bf 8c c5 62 c1 6c 36 63 b5 5a 81 d0 87 76 cd 9a 35 54 55 55 51 50 50 c0 4d 37 dd 84 24 49 34 35 35 f1 d6 db 6f e3 70 38 b8 66 ee 5c ae b8 e2 0a 3c 1e 0f 95 95 95 f8 55 95 a2 a2 22 32 d2 d3 59 78 fd f5 6c fd e0 03 2a 2b 2b b9 e5 96 5b c8 cb cb 03 a0 ba aa 8a 35 eb d6 21 49 12 d7 5f 77 1d 93 26 4d 3a ed Data Ascii: }F~'3#G{h+9xW/DUu5))DGGCXX$!K$y&[#/+n_>_t\5gG4oa$i%%sbl6cZv5TUUQPPM7$I455op8f\<U"2Yxl++[5!I_w&M:
2024-04-25 18:48:09 UTC	7116	IN	Data Raw: 8d b7 de 7a 8b aa aa 2a e6 5c 75 15 59 a3 46 f1 de a6 4d 94 96 95 61 b7 db 4f eb ff 18 95 99 c9 f1 da 5a 8e 54 56 92 9b 9b 4b 76 76 36 e5 87 0f 63 30 18 88 89 89 c1 6c b1 10 13 1d 4d 56 76 36 b9 13 27 86 0a 12 f9 7c e8 06 ab cb 2b b2 4c 78 58 58 e8 79 19 3f 9e b1 63 c6 0c 6d db 16 16 46 54 54 14 89 09 09 8c 1b 6c 9a d7 d6 d6 52 30 65 0a 76 bb 9d ce ae 2e 0c 06 03 75 f5 f5 1c 3d 7a 94 e2 e2 62 bc 3e 1f 01 55 a5 af af 8f ee ee 6e 6c 36 1b b1 31 31 24 27 25 91 33 76 2c 99 99 99 d8 ed 76 7a 7b 7a 68 6d 69 19 fa 02 01 08 a8 2a 9d 9d 9d 28 b2 8c aa aa f4 f5 f6 d2 dc dc 3c b4 36 0c 80 df e7 a3 a5 b9 99 9e 9e 1e 3a 3b 3a 88 88 88 c0 68 34 12 1e 1e 4e 7a 46 06 93 27 4d c2 3c f8 25 2a 49 52 e8 7d dc d0 40 63 53 13 31 d1 d1 bc f5 f6 db 1c 3f 7e 9c c8 88 08 02 aa 8a Data Ascii: z\uYFMaOZTVKvv6c0lMVv6'\|+LxXXy?cmFTTlR0ev.u=zb>Unl611$'%3v,vz{zhmi(<6:;:h4NzF'M<%*IR}@cS1?~
2024-04-25 18:48:09 UTC	8302	IN	Data Raw: 58 ac 56 ba ba ba c8 cb cd a5 a8 a8 88 d3 0d 0d 04 02 01 d6 56 56 d2 d3 d7 c7 d0 d0 10 b9 39 39 f8 fd 7e bc 5e 2f 39 39 39 e4 e5 e6 52 7f ea 14 b3 3e 1f ab 56 ad c2 eb f1 30 30 38 88 c9 68 44 af d7 13 08 04 a8 ac ac c4 e1 70 d0 da d6 c6 a2 e2 62 f2 f3 f3 3f 8e 73 20 08 42 1c ce 1b 16 9a a6 61 32 1a 31 9b cd 28 8a 42 7a 5a 1a ae e9 69 be ff fd ef e3 f5 7a f9 d2 17 bf 48 4f 4f 0f 4f fc f6 b7 84 43 21 ee ba eb 2e 0e 1c 3c c8 d0 d0 10 5f b8 eb 2e de 78 e3 0d 0a 8b 8a 70 4d 4f f3 9d ef 7c 87 dd bb 77 f3 de b1 63 dc b4 79 33 33 33 33 9c 69 6c 04 20 21 21 81 40 20 c0 1d 77 dc 41 53 63 23 dd 3d 3d a4 a6 a6 f2 ff fc ef ff 4d 5e 5e de c7 72 22 04 41 38 bf f3 56 43 64 59 26 1c 89 30 31 3e 4e 38 1c 26 10 0c 62 36 99 c8 c9 c9 21 14 0c 72 a6 b1 91 37 76 ec c0 eb f5 62 Data Ascii: XVVV99~^/999R>V008hDpb?s Ba21(BzZizHOOOC!.<_.xpMO\|wcy3333il !!@ wASc#==M^^r"A8VCdY&01>N8&b6!r7vb
2024-04-25 18:48:09 UTC	6075	IN	Data Raw: 48 4d 4d 0d a1 50 88 86 86 06 26 26 26 48 4c 4c c4 6a b5 e2 f3 f9 a8 a9 a9 c1 eb f5 92 90 90 80 d1 68 8c 05 d8 fc 71 eb 74 3a fa fb fb 69 6a 6a c2 64 32 a1 d7 eb 91 24 09 b3 c9 8c c9 64 8a ad ca 36 1f 44 46 a3 11 b3 d9 1c 5b 71 de 60 34 d0 d5 d5 c5 ab af be c6 f4 f4 34 89 89 89 b1 ed 74 73 6b e8 ea f5 fa d8 7d ff f9 55 ed f5 7a 7d 2c e0 ce 7d 1f 79 6e 09 4d 45 f9 e0 fe 01 c2 47 43 84 c5 47 68 be 24 51 7f aa 9e 07 b6 3d 40 fd a9 7a de 7e fb 6d 76 bc b9 03 49 82 96 d6 16 26 26 26 30 9b cd 38 9c 0e 5a 5a 5a 08 85 42 18 8d 46 86 ce 0e f1 fa 8e d7 f9 e5 af 7e 89 1a 56 31 9b 4c 3c fd f4 d3 6c df be 9d be be 3e 24 49 42 55 55 5a db 5b 99 9e 76 32 3a 3a c2 6f 9e f8 0d 23 a3 c3 4c 4f 3b 69 6d 6b 25 1c 0e d3 d2 dc c2 1f fe f0 07 9a 9a 9a f8 af ff fa 2f 26 26 26 d0 Data Ascii: HMMP&&&HLLjhqt:ijjd2$d6DF[q`44tsk}Uz},}ynMEGCGh$Q=@z~mvI&&&08ZZZBF~V1L<l>$IBUUZ[v2::o#LO;imk%/&&&
2024-04-25 18:48:09 UTC	9629	IN	Data Raw: 55 64 59 fe d0 46 f7 e3 88 f1 cc e2 18 48 0c c5 a5 2b 57 91 a4 f8 10 64 23 9b 65 6e 76 96 6e af 87 2c 4b c3 0e 13 e1 b9 2e 61 18 b1 b6 be 81 91 37 d0 55 95 66 ab cd 89 e5 25 5c cf a3 56 ad b2 b3 bb 47 21 9f 23 42 60 67 77 37 6e c4 be 4f b7 db 23 93 cd 50 2c 14 d0 35 1d 04 d0 35 9d 4e a7 c3 e6 f6 36 a2 24 32 37 3b 8b 91 c9 d0 ef 0f 38 6a 35 39 79 e2 04 41 18 d2 ed 76 29 16 8b f1 a1 cc ae 4f 18 85 14 8b 05 a2 30 40 10 44 da 83 01 b6 6d d3 68 1c 51 af d7 99 a8 d7 69 34 0e d9 d9 db a7 54 2c 60 9a 16 99 6c 86 89 5a 0d 6f 78 f0 6f b1 58 a4 d5 6c 82 20 b0 bd b3 c3 7d 2b 2b f4 fa 7d 2e 5f bd 46 21 9f a7 58 28 60 59 16 53 53 93 4c 4d 4e 72 73 6d 9d c1 a0 8f a2 a8 cc ce 4c 23 08 02 9a 16 77 50 cb b4 28 57 ca b8 ae 8b aa 28 5c b9 76 1d df f3 38 b1 b2 82 ac 48 58 a6 Data Ascii: UdYFH+Wd#envn,K.a7Uf%\VG!#B`gw7nO#P,55N6$27;8j59yAv)O0@DmhQi4T,`lZoxoXl }++}._F!X(`YSSLMNrsmL#wP(W(\v8HX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49982	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	406	OUT	GET /api/v2/sendInsights?1714070886925 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:48:09 UTC	530	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:09 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 0xaxk3ol3b1k X-Cloud-Trace-Context: 6ea9ba769768c1cbc3c7c24c6477b533;o=1 Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:09 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49979	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7b43&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:09 UTC	1482	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:07 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 ff278a71a35448622a3b931c58f6a0ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: Rzegz6t_2L3oFdBZsebWBqL67K-HUasfSqYiBGAuWYwEvPI7lA_h3A== Age: 2 Vary: Origin
2024-04-25 18:48:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49984	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:09 UTC	903	OUT	GET /en-us/sharefile/media/rb-buy-sign-on-6.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:10 UTC	518	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1134 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 24055 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:10 GMT Etag: "fd475ac7525fc0e9b040fc56a4c29229-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C9PJXYC773A7V8DP8FAE X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:10 UTC	668	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 37 08 06 00 00 00 84 a6 17 9a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0c 04 32 3a eb 86 03 9c 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 15 55 c2 ff f1 cf 4d ee bd b9 e9 bd 92 06 24 40 02 49 08 3d 52 25 54 69 2a ac 08 ae 8a 2e f6 15 2c 8b 8a 0a 62 5d 74 1f 57 59 3b f6 82 b2 82 08 48 6f 21 21 02 a1 24 d4 90 02 84 f4 de 6f c9 ad e7 f7 07 66 1e 22 45 cd 4f 1f dc f5 bc 5f 2f 5e 24 53 cf 4c e6 ce 77 e6 9c 99 7b 54 11 91 91 02 49 92 24 49 fa 85 d4 76 87 e3 6a 97 41 92 24 49 fa 0f a4 fa 76 ed 5a 79 07 22 49 92 24 fd 62 2a 21 84 0c 10 49 92 24 e9 17 73 ba da 05 90 24 49 92 fe 33 c9 00 91 24 49 92 3a 45 06 88 24 49 92 d4 29 32 40 24 49 92 a4 Data Ascii: PNGIHDR7pHYs+tIME2: IDATxw\|UM$@I=R%Ti.,b]tWY;Ho!!$of"EO_/^$SLw{TI$IvjA$IvZy"I$b!I$s$I3$I:E$I)2@$I
2024-04-25 18:48:10 UTC	2372	IN	Data Raw: d7 f3 3f ff f8 07 c3 87 0f 67 e8 d0 a1 84 85 85 f1 d7 bf fe 95 a6 a6 26 de 79 fb 6d 1c 0e 07 2f fd fd ef d8 6c 36 8a 8b 8b 79 eb ed b7 b1 d9 6c 68 34 1a c6 8e 19 43 6c 6c ec 25 57 f6 cf d7 5e e3 ad b7 de e2 2f 77 de c9 dd 77 df 8d bb bb 3b 4d 4d 4d 7c f6 d9 67 2c 7f ff 7d 2c 16 0b 9f 7e f2 09 5a ad 16 67 67 67 00 34 1a cd 6f b7 f5 bf 50 73 73 33 81 81 81 2c 5e bc 98 c0 80 80 0e e1 66 b3 d9 08 0d 0d 25 2c 2c 8c 0f 3e f8 80 d3 a7 4f 93 9a 9a 4a 4d 4d 0d 6a b5 5a d9 1e 49 92 a4 ff 16 97 0c 10 17 17 17 6a 6a 6b 59 fa f2 cb 6c de b4 89 87 e6 cf 67 fa 8c 19 5c 37 71 22 63 c7 8e e5 c8 d1 a3 d8 2c 16 e2 e2 e2 c8 c8 c8 c0 e1 70 60 b7 d9 70 71 71 a1 77 7c fc 65 03 e4 fb cc 4c fc fc fc 78 fd f5 d7 71 75 75 55 86 f7 ef df 9f ca aa 2a 36 6c d8 c0 ce 5d bb 98 38 61 82 Data Ascii: ?g&ym/l6ylh4Cll%W^/ww;MMM\|g,},~Zggg4oPss3,^f%,,>OJMMjZIjjkYlg\7q"c,p`pqqw\|eLxquuU*6l]8a
2024-04-25 18:48:10 UTC	538	IN	Data Raw: 67 f9 f2 e5 bc f8 d2 4b 98 cd 66 86 0d 1b 86 93 b3 33 df 7d f7 1d 1f bc ff 3e 0b 1e 7b ec 8a ef 98 48 92 24 fd 5e 5c 32 40 9c 9c 9c 08 09 09 51 7e df 9f 95 c5 f1 63 c7 f8 d7 bf fe 85 4a a5 e2 8d 37 df 64 d8 b0 61 3c ff fc f3 04 04 04 d0 50 5f 8f bb 9b 1b 93 27 4d ba e2 ca 6e bb ed 36 82 82 83 f9 e0 fd f7 79 f6 b9 e7 30 19 8d 68 5d 5c b0 98 cd f4 1f 30 80 37 96 2d e3 fa eb af 07 20 20 30 90 2e e1 e1 17 55 15 b9 bb b9 11 19 11 81 ef 0f 2f f8 0d 19 32 84 f7 de 7b 8f a5 2f bf cc bd f7 de 8b ab bb 3b 9e 1e 1e 3c f0 c0 03 24 26 26 72 f0 e0 41 34 1a 0d 4e 4e 4e 84 87 87 13 14 1c 8c 4a f5 bf df 62 a5 56 ab 99 33 67 0e 2a 95 8a 57 5e 79 85 59 b3 66 e1 e9 e9 89 d9 6c 66 c2 84 09 3c b3 78 31 d1 d1 d1 d8 ed 76 42 42 42 50 a9 54 97 ac a2 bb 90 8f af 2f 91 91 91 e8 74 Data Ascii: gKf3}>{H$^\2@Q~cJ7da<P_'Mn6y0h]\07- 0.U/2{/;<$&&rA4NNNJbV3g*W^yYflf<x1vBBBPT/t
2024-04-25 18:48:10 UTC	4744	IN	Data Raw: e7 3a 5c c9 4b 92 24 49 7f 2c bf 28 40 84 10 98 4c 26 b4 5a ed 4f 56 e3 48 92 24 49 ff dd 7e 51 80 48 92 24 49 52 3b d9 27 ba 24 49 92 d4 29 32 40 24 49 92 a4 4e 91 01 22 49 92 24 75 8a 0c 10 49 92 24 a9 53 64 80 48 92 24 49 9d 22 03 44 92 24 49 ea 14 19 20 92 24 49 52 a7 c8 00 91 24 49 92 3a 45 06 88 24 49 92 d4 29 32 40 24 49 92 a4 4e 91 01 22 49 92 24 75 8a 0c 10 49 92 24 a9 53 64 80 48 92 24 49 9d 22 03 44 92 24 49 ea 14 19 20 92 24 49 52 a7 c8 00 91 24 49 92 3a 45 06 88 24 49 92 d4 29 32 40 24 49 92 a4 4e 91 01 22 49 92 24 75 8a 0c 10 49 92 24 a9 53 64 80 48 92 24 49 9d 22 03 44 92 24 49 ea 14 19 20 92 24 49 52 a7 c8 00 91 24 49 92 3a 45 06 88 24 49 92 d4 29 32 40 24 49 92 a4 4e 91 01 22 49 92 24 75 8a 0c 10 49 92 24 a9 53 64 80 48 92 24 49 9d 22 03 Data Ascii: :\K$I,(@L&ZOVH$I~QH$IR;'$I)2@$IN"I$uI$SdH$I"D$I $IR$I:E$I)2@$IN"I$uI$SdH$I"D$I $IR$I:E$I)2@$IN"I$uI$SdH$I"D$I $IR$I:E$I)2@$IN"I$uI$SdH$I"
2024-04-25 18:48:10 UTC	5930	IN	Data Raw: a2 12 57 aa 40 96 80 f3 57 d0 99 99 99 e4 e7 e7 e3 e9 e9 c9 80 01 03 48 4a 4a 52 ae 72 5b 5b 5b 29 28 28 20 3e 3e 5e f9 50 d6 d7 d7 53 52 52 42 52 52 12 4e 4e 4e d8 6c 36 0e 1d 3a c4 fe fd fb 71 77 77 67 c4 88 11 f4 ec d9 53 59 87 dd 6e 27 27 27 87 83 07 0f e2 ea ea 4a 4a 4a 4a 87 f1 cd cd cd ec da b5 8b b3 67 cf e2 ef ef cf c4 89 13 09 0e 0e 06 ce bf 3f 92 99 99 c9 91 23 47 e8 d2 a5 0b a9 a9 a9 f8 fb fb 5f 76 7b 16 2d 5a c4 d6 ad 5b d9 b4 69 13 01 01 01 ca 70 b3 d9 4c 5a 5a 1a b9 b9 b9 74 eb d6 8d 6b af bd b6 c3 fb 10 75 75 75 6c da b4 89 96 96 16 c6 8c 19 83 4e a7 c3 dd dd 1d 5f 5f 5f 4e 9f 3e 8d a7 a7 e7 15 df 25 d8 bb 77 2f 47 8f 1e 45 a3 d1 30 78 f0 60 12 12 12 94 71 79 79 79 1c 3e 7c 98 da da 5a 06 0e 1c c8 d0 a1 43 3b cc 9b 9d 9d cd fe fd fb 71 76 Data Ascii: W@WHJJRr[[[)(( >>^PSRRBRRNNNl6:qwwgSYn'''JJJJg?#G_v{-Z[ipLZZtkuuulN___N>%w/GE0x`qyyy>\|ZC;qv
2024-04-25 18:48:10 UTC	7116	IN	Data Raw: ca ca 4a 4a 4a 4b 29 28 28 40 df da 8a ce d5 95 9b 67 ce e4 a3 8f 3e 22 21 21 81 d4 d4 54 0e 1e 3c c8 e7 9f 7f 4e 60 50 10 d5 55 55 f4 eb df 9f e6 a6 26 66 ce 9c c9 a1 43 87 68 6e 6e c6 d5 cd 8d d3 85 85 18 4d 26 86 0c 1e 8c c1 60 e0 d8 f1 e3 b8 b8 b8 10 1d 15 45 69 69 29 35 35 35 8c 1a 35 0a 17 17 17 f2 f3 f3 f9 f7 bf ff 8d 00 b6 6d db c6 9f ff fc 67 fe f9 cf 7f e2 e6 ea 4a 53 73 33 37 de 70 83 d2 eb 9f 24 49 d2 cf 21 2f 39 2f a3 57 af 5e 3c f6 d8 63 54 55 57 b3 ee bb ef 68 a8 af 67 eb d6 ad e7 bb a0 6d 69 61 d3 e6 cd bc b7 7c 39 6d 6d 6d cc 9f 37 8f 19 33 66 60 34 1a 29 2b 2b c3 66 b3 d1 d8 d4 44 65 55 15 a7 4e 9d 22 28 38 98 c1 83 07 93 9f 97 77 be 4b ce 01 03 18 35 6a 14 63 c6 8c e1 c8 91 23 64 66 66 b2 3f 2b 8b d8 d8 58 00 be f8 e2 0b 42 42 42 98 f7 Data Ascii: JJJK)((@g>"!!T<N`PUU&fChnnM&`Eii)5555mgJSs37p$I!/9/W^<cTUWhgmia\|9mmm73f`4)++fDeUN"(8wK5jc#dff?+XBBB
2024-04-25 18:48:10 UTC	2687	IN	Data Raw: 5a 11 c7 e7 87 96 66 0b d3 05 0f 3f ea 26 29 c9 60 df ee 18 1b 1e f3 4c 58 ec 1e 8f 65 81 cf 67 5c 32 cc 33 d1 74 dd 91 05 84 67 9b 2d 06 fa 6d 9e f8 13 37 9f 54 59 ac 59 e7 e6 6c b3 4d 4f b7 4d f1 3d 2e 86 c3 36 b6 0d 9d ed 36 5e 5f 22 24 dc 6e 30 5d 10 8d 25 86 dd ce 75 c5 b1 2f aa 75 fb 93 12 61 da db 03 8b 97 9a dc b3 d2 24 7b 86 49 7d ad 45 d6 34 03 d3 84 e1 48 a2 77 64 18 57 18 c3 9a 40 4f 4f 0f 7b f7 ee e5 c3 0f 3f a4 bc bc 9c f2 f2 72 36 6d da c4 d6 ad 5b 1d 1d 4f 44 c6 a7 00 19 47 de 6c 93 c6 fa 18 b6 ed 6c 8d 84 3f c9 a0 68 99 8b 53 f5 71 5c 2e 83 87 1e f1 30 33 cf 64 df ee 18 a6 09 ab ef 77 93 9e 69 e0 f1 c0 fe 8f e2 78 bd b0 7c 85 8b 58 3c b1 fa 3a 67 86 8b 7d 7b a2 44 87 6d 3c 0e 7a 42 fd e7 13 1f c4 7e ff d8 db 03 41 83 f8 04 35 7a b7 1b 7a Data Ascii: Zf?&)`LXeg\23tg-m7TYYlMOM=.66^_"$n0]%u/ua${I}E4HwdW@OO{?r6m[ODGll?hSq\.03dwix\|X<:g}{Dm<zB~A5zz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49985	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:10 UTC	906	OUT	GET /en-us/sharefile/media/rb-try-now-sf-hello.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:10 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 48317 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:10 GMT Etag: "cebfa44c1df57374e83054c3e9f52786-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9C9RZH3TB9QE0391EWVHR X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:10 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 90 00 00 02 8c 08 06 00 00 00 9d 2f 57 70 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0a 0b 12 27 1d fc 45 b7 98 00 00 20 00 49 44 41 54 78 9c ec dd 7b 70 1b d7 9d 2f f8 2f f8 a6 9e 04 65 5b b6 43 02 16 65 c9 63 8b 9e 64 6d 25 1a 72 80 dc d9 b2 e3 2d 91 4e d5 56 46 a2 76 09 ff 91 3f 56 63 82 55 71 99 d2 ec ac a0 b9 55 93 ad 8a 09 ce 4c 51 f2 4d aa 4c cd 78 b7 ee dd ba 02 37 a2 98 dc da 9b 90 9a f8 31 b5 ab c6 90 51 2c f9 26 b1 6c c7 92 48 b9 9b 8a 25 59 22 41 3d 2c 82 2f f4 fe 01 9e 66 37 d0 78 12 4f f2 fb a9 62 91 68 74 9f 3e dd 44 1f f4 af cf cb 32 36 36 a6 82 88 88 88 88 88 88 28 81 92 7c 67 80 88 88 88 88 88 88 8a 43 99 d9 c2 f3 e7 cf e7 3a 1f 44 Data Ascii: PNGIHDR/WppHYs+tIME'E IDATx{p//e[Cecdm%r-NVFv?VcUqULQMLx71Q,&lH%Y"A=,/f7xObht>D266(\|gC:D
2024-04-25 18:48:10 UTC	2372	IN	Data Raw: 71 b8 0e ec 67 f0 48 54 44 f6 ec 7e 1e af 75 1c c4 bf bc fb 1e ce 9d bf 90 ef ec 10 11 15 9d 9c 36 61 f5 f9 7c 70 38 1c b0 db ed 90 65 19 3e 9f 0f 1e 8f 07 36 9b 4d ab 8d 74 b9 5c 38 ea f1 a4 95 be 2c cb e8 ef ef 87 e4 f7 6b cb 6c 36 1b 5c ed ed 5a 90 aa 27 49 52 da c7 92 0f 92 24 19 8e 2d 9e a3 1e 0f 24 49 d2 02 e4 e1 a1 21 38 9d 4e c8 8a 02 49 92 e0 70 38 b2 99 55 a2 55 ed cc bb ef 03 aa 8a bd 2f bd 98 ef ac 10 51 9a 5c 07 f6 e3 cc 3b e1 20 92 4d 5a 89 88 92 97 d3 00 d2 db d3 03 9b cd 86 e1 a1 21 b8 3b 3b 61 b7 db b5 60 d1 db d3 03 8b c5 82 57 d2 6c ca ea f5 7a d1 ed f5 9a be e7 f3 f9 e0 72 b9 70 a2 af 2f ed bc 17 02 c9 ef 87 37 c6 31 46 3a ea f1 18 82 4d 45 51 b2 95 2d a2 35 85 c1 23 d1 ea b1 f7 a5 17 e1 3b 75 1a b5 56 2b 5b 12 10 11 25 29 ab 01 a4 2c Data Ascii: qgHTD~u6a\|p8e>6Mt\8,kl6\Z'IR$-$I!8NIp8UU/Q\; MZ!;;a`Wlzrp/71F:MEQ-5#;uV+[%),
2024-04-25 18:48:10 UTC	538	IN	Data Raw: ee 55 27 fa fa 20 49 12 14 45 41 eb cb 2f c3 d5 de 6e 88 2b 7c 3e 9f 36 f0 67 64 cb 47 f1 b7 d9 39 f7 f5 f7 6b b1 91 cd 66 83 c3 e1 48 7a de f7 7c c9 6a 00 f9 8a cb 65 98 52 23 19 e2 83 ed f5 7a 63 f6 67 4c b4 bd cd 66 5b 1e 34 67 a9 19 aa 68 2e aa 02 29 07 a6 c0 f2 85 ea 48 f1 78 84 c8 20 55 1f 90 a5 da f9 56 cc a5 99 09 22 88 f5 f9 7c 79 ef 90 4b 44 85 c7 e9 70 68 37 25 91 62 f5 2b d7 13 7d ca c4 cf 54 20 80 93 3f 3d 8d 3d df 0c 07 31 df 5a 6a 2e 29 06 28 3a 77 fe 02 a6 a6 02 78 72 7b 03 f6 ec b6 62 ca a4 6f 62 ad d5 1a 15 e4 98 ad 97 8e 5a eb 72 53 5a 7d ba df da fd 3c f6 7c 33 1c 28 fe f8 c4 db 86 fe 89 62 6e d0 27 b7 37 a0 e5 a5 06 43 70 67 16 8c 4d 05 a6 53 ce 53 2a 41 9d 08 9c 6b ad 56 ec d9 fd 9c 76 8e f5 c7 a3 4f af d6 6a c5 6b 1d 07 71 ee fc 05 Data Ascii: U' IEA/n+\|>6gdG9kfHz\|jeR#zcgLf[4gh.)Hx UV"\|yKDph7%b+}T ?==1Zj.)(:wxr{bobZrSZ}<\|3(bn'7CpgMSS*AkVvOjkq
2024-04-25 18:48:10 UTC	4744	IN	Data Raw: fb a2 a6 33 dc 77 f3 ea 52 1a 0d 5a bf c7 48 67 de 7d 1f e7 ce 5f d0 8e 2d 53 c1 38 11 e5 86 cd 66 d3 06 42 f4 fb fd a6 b5 57 62 e4 6c 51 83 96 ab 71 2d fc 7e 7f d4 6c 0b 2e 97 4b bb 6f f7 7a bd 90 24 49 9b 3b 5e 1f fc 8a b8 c0 eb f5 c2 e5 72 c1 6e b7 c3 dd d9 09 55 55 b5 a0 2b 97 c4 3c f6 40 38 f6 88 0c 10 4f f4 f5 69 fd 13 c5 71 25 c3 6e b3 c1 db d3 a3 8d ac eb f3 f9 b4 7b 7f 11 48 47 a6 15 2f f6 c9 85 ac d6 40 4a 92 14 b7 0a d6 ae 9b e0 be bf bf 1f dd 5e af 36 f0 8d a8 c6 4e 66 f0 16 51 83 17 6f c4 d2 13 7d 7d 2b aa 61 13 4d 39 7d 3e 5f cc 26 b8 66 4f 4b 62 d1 7f e8 12 cd 4b a9 aa 6a 4a 79 4d 85 be 4a 3d 56 3e d8 7c 95 28 dc 8c 70 ad 8e c2 aa 7d 29 fa fd 70 38 1c da 48 d1 76 bb 3d e1 48 70 62 40 16 31 1d c5 8e ed 0d da 79 7c cd 7d 10 67 de 79 0f 93 53 Data Ascii: 3wRZHg}_-S8fBWblQq-~l.Koz$I;^rnUU+<@8Oiq%n{HG/@J^6NfQo}}+aM9}>_&fOKbKjJyMJ=V>\|(p})p8Hv=Hpb@1y\|}gyS
2024-04-25 18:48:10 UTC	5930	IN	Data Raw: 70 3a bc 4e 73 73 33 46 46 47 70 6a e0 14 7a 8f f5 62 f0 f4 a0 21 f0 dc b7 6f 5f 38 5f 2a 0c db 0c 9e 1e c4 b1 de 70 7f 8a 2f fe f8 85 69 3e bb ba ba 30 71 6d 02 e7 7e 7d 2e a9 e3 22 22 22 a2 e2 71 ac f7 58 54 17 a0 e6 d3 d1 f7 25 d7 26 ae 01 00 ea ea eb c2 0f a1 9b c2 db 36 0f 26 6e 16 9b ce 78 12 66 db 64 7a 5c 8a 58 c4 b1 e6 03 03 48 2a 68 aa 69 bd e3 d2 7b a1 45 7c f1 e9 28 6e 4d dd 47 55 59 25 aa 4b cb 51 53 b1 80 c7 9f 7c 0c 37 be f8 02 f7 27 af 63 ee ee 57 68 f9 c6 93 b0 cc 3e 40 d9 3a 3b 16 67 6f c0 b2 38 07 55 55 4d 07 e5 b1 c0 82 07 0f a2 6b 28 b3 49 04 8f 87 0f 1f 46 db fe 36 d4 d7 d7 6b 41 65 ef b1 5e d4 d7 d7 a7 34 c2 ea c4 c4 04 5e ef 7a 1d f5 f5 f5 18 1c 1c d4 02 3f 7d 9a 4d cd c9 8d 74 76 f8 50 38 30 8c d5 27 41 e4 af a9 29 ba ef a3 08 62 Data Ascii: p:Nss3FFGpjzb!o_8_p/i>0qm~}."""qXT%&6&nxfdz\XHhi{E\|(nMGUY%KQS\|7'cWh>@:;go8UUMk(IF6kAe^4^z?}MtvP80'A)b
2024-04-25 18:48:10 UTC	7116	IN	Data Raw: ef 1e 1a 96 06 c9 23 22 a2 dc 90 65 05 1b 36 6c 40 79 79 79 d6 1e e8 dd ba f5 a5 e1 75 59 a6 12 3e f3 ce fb 86 d7 be 53 83 51 01 e4 b9 0f 2e e0 35 f7 41 d4 5a ad da 74 1f 0c 20 73 af 90 6b 1e 81 fc 74 06 26 22 22 81 2d 40 88 88 8a 4d 51 0e a2 33 15 88 dd 6c 55 4f 8c ce 5a 6b b5 62 2a 4e 53 57 ca 8e cb 63 e3 05 1d 3c 0a 0c 1e 89 88 f2 2b 95 e6 50 ec 76 40 44 94 5f b9 2c 87 33 56 03 b9 f7 3b 2f 84 6b b6 96 d4 5a ad f8 b1 c9 e8 9e 67 de 7d 1f 4f 36 6c 83 ef d4 20 f6 be c4 c1 5b 72 6d c7 f6 86 a2 a9 f5 e5 0d 09 11 51 3e 58 d2 7a 88 c7 32 9b 88 28 7f 72 59 f9 92 b9 00 f2 a5 17 51 5b 6b c5 b9 0f 2e 60 c7 f6 06 ec 7d e9 c5 a8 f9 05 77 6c 6f 80 ef d4 69 9c b9 32 86 bd 2f bd 10 d5 c4 95 48 2f 9f b5 90 92 24 01 08 8f c8 4b 44 b4 16 25 5b 06 5b 2c e9 05 9c 6b 99 24 Data Ascii: #"e6l@yyyuY>SQ.5AZt skt&""-@MQ3lUOZkb*NSWc<+Pv@D_,3V;/kZg}O6l [rmQ>Xz2(rYQ[k.`}wloi2/H/$KD%[[,k$
2024-04-25 18:48:10 UTC	8302	IN	Data Raw: 69 09 3f 3c f1 46 64 df 47 3b 7a 65 49 f8 6c 66 08 d9 a1 ce ae e0 18 44 12 1b 9a 5b 71 f4 8b 47 30 6f 18 ce ca 93 11 5a b5 ac ea 8a a1 bd 37 67 af 91 91 9c 84 d3 7f 38 17 f9 71 e7 0d a3 e7 33 e1 42 36 33 84 83 c3 c3 b1 cc 87 5c b8 bc 98 a8 20 9c 81 23 11 51 ef 88 ba ce ee da 22 3a 57 af 2d 41 fd b7 1f e3 f8 37 be 86 07 0e df 8f ef 2a ff bd 63 fb 7e f8 d8 b1 a6 01 a1 69 9a 50 2b 95 ba d7 47 0b 85 8e 1d 5f 68 74 9c 28 df df 8e 07 0e 8f e0 cb 4f 3c 9e e8 20 b2 97 1a 2e 07 0f 0c c3 b6 53 91 35 38 bd c1 63 52 1a 9a 9d f0 f8 63 8f 62 de 30 23 0b 22 c5 79 ec d5 f9 a3 8d a4 d3 69 27 2b 1e 61 10 29 82 c7 ed 12 84 03 4e 10 19 f5 3d bd 70 d9 99 cb dc cb f7 74 2f d5 db 44 44 db 4d d4 d3 08 ba 16 40 fe fb af 7f 83 07 46 ee af 06 2c 5f c2 5f 3c f1 25 7c 72 fe c2 96 f7 Data Ascii: i?<FdG;zeIlfD[qG0oZ7g8q3B63\ #Q":W-A7*c~iP+G_ht(O< .S58cRcb0#"yi'+a)N=pt/DDM@F,__<%\|r
2024-04-25 18:48:10 UTC	3101	IN	Data Raw: f2 20 ce 9d b9 e3 0e 21 04 9c 39 68 4f 3e dd 5e 23 6c 69 79 b9 67 16 d1 d9 ca 33 2b 9d c0 7b a0 ee 35 ef dc 52 f1 0c be 76 86 5d ae 5a 56 cf 04 e2 80 78 24 4a f0 f2 3e f7 c2 6e 4c fd ed 7f ba 8f 89 39 f2 d0 0e bc fa 9d c6 8f f5 f0 ae c8 1a 5a 0f c5 12 61 87 02 8b f3 b2 ff de 94 33 74 35 64 70 1d d4 aa 65 75 ec 11 23 61 79 17 c5 49 6a 5d 4c 44 44 f1 61 00 49 89 95 c4 1e ed b0 59 9f 56 0d f4 27 e5 9d ee 5c be e7 9e df 8d cf aa f3 a9 c4 ff c3 58 5a 5e c1 e7 0f 0c 87 7a 4f 9c da 79 86 21 50 3b 8f f4 83 f7 6f e3 27 d5 95 59 ff f5 9f 6d 77 8e e4 56 1e 3b b1 bc b2 d2 13 cf 80 04 80 91 43 39 5c b8 68 84 0e 78 5f 7a 79 10 3f 7a 7d cd 3d 5f 8d d4 ac 24 1a 32 40 8a 33 f0 69 47 66 68 08 96 65 05 9e 43 fc c1 fb b7 23 99 63 bb dc c6 f3 52 3b 89 d9 47 22 a2 de 20 3a fb Data Ascii: !9hO>^#liyg3+{5Rv]ZVx$J>nL9Za3t5dpeu#ayIj]LDDaIYV'\XZ^zOy!P;o'YmwV;C9\hx_zy?z}=_$2@3iGfheC#cR;G" :
2024-04-25 18:48:10 UTC	10674	IN	Data Raw: 40 53 64 d3 05 ef 3e fc d7 0e 00 bc e9 99 2f 0a a0 66 28 37 e0 09 4e 55 b5 e1 f9 11 c1 ac 9f ff bb 30 3c f7 80 bf 5c 49 20 3a 28 44 00 37 5e 2a b9 e7 d7 f0 8c 0a f0 df 93 e2 7e f6 9f b7 cd 78 cf 85 38 ff 41 ae df 28 88 0e 3c 0e 49 25 22 4a 3e ef bc f5 a8 ea 6d ce 81 a4 44 8a ba 27 45 d3 75 77 d8 aa 6d db 9b 36 6e 4f ce cd d5 0d 23 15 64 59 46 71 6c 5a 40 ec 1c 00 00 20 00 49 44 41 54 0c 53 e5 32 52 70 02 4f 59 96 03 cf fd aa 54 2a 6e 63 56 64 89 84 b2 27 53 a6 78 32 25 22 1b 22 b2 53 7e aa aa e2 c4 ec 2c e4 7c be 61 63 3f 29 d4 4a 05 27 66 67 6b 82 73 59 96 a1 aa 2a 74 5d 87 2c cb 98 f2 65 25 c5 eb cd 88 f3 91 93 24 98 d5 a1 ad 62 ff aa aa 26 26 eb b3 99 46 e5 17 d7 86 ff 35 cd 73 7e bc d7 83 f7 da c9 49 12 34 5d 77 b3 90 82 f7 1a 11 c3 66 01 d4 64 14 bd Data Ascii: @Sd>/f(7NU0<\I :(D7^~x8A(<I%"J>mD'Euwm6nO#dYFqlZ@ IDATS2RpOYTncVd'Sx2%""S~,\|ac?)J'fgksY*t],e%$b&&F5s~I4]wfd
2024-04-25 18:48:10 UTC	4875	IN	Data Raw: d7 ef c3 68 74 b9 16 c4 b0 5f b1 5e 3c 55 46 e3 f1 38 4c 26 03 41 64 c9 7c 37 ec 34 7d 67 53 58 69 25 d3 a7 00 f2 30 78 b7 9b ab ab 62 2d 78 1c 8d 2e 37 4e 59 7d f3 66 bc c8 44 92 c6 68 74 19 de bc 79 9c 4e 1c a7 b2 56 95 d1 3c d3 f5 b6 72 0d 1e fb 51 15 e0 c7 32 aa 9a b2 1a eb 9a e9 c6 73 d6 40 d2 69 29 47 50 00 a8 d6 64 10 4f 9b 3d ef c4 96 83 c7 c9 64 12 06 83 61 b8 b9 b9 0d 57 57 c5 5a 20 a2 f3 9b 56 51 14 61 3c 7e bb 54 46 d3 e9 34 8c c7 6f 17 d9 c6 d5 b2 98 4f 95 7c 97 fa 52 3b 6b 3a 9d 86 c1 60 39 23 1f b3 c0 83 c1 b0 32 88 34 10 f3 28 65 e2 45 00 09 00 ac 11 14 d6 17 83 93 b2 f2 0e ac d7 d7 ef c3 74 3a 59 eb 00 0f 06 c3 ca 9d 5a 49 ab 3c 65 b5 2a 13 29 c8 4f a3 28 de 6d dc 61 75 3c 1e 87 37 6f c6 6b d9 62 e5 13 42 08 e9 13 2f 02 48 5a c7 86 0c 00 Data Ascii: ht_^<UF8L&Ad\|74}gSXi%0xb-x.7NY}fDhtyNV<rQ2s@i)GPdO=daWWZ VQa<~TF4oO\|R;k:`9#24(eEt:YZI<e*)O(mau<7okbB/HZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.6	49986	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:10 UTC	931	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:10 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:48:10 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9C9S17PS5JCWF2HB4P4CZ Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.6	49987	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:11 UTC	1189	OUT	GET /en-us/sharefile/configuration HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:11 UTC	536	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 139349 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:48:11 GMT Etag: "37aaec0e8464029e03aca057d09c0739-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CB1ZY129CYF5TD3P25M3 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:11 UTC	650	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:48:11 UTC	2372	IN	Data Raw: 6e 20 61 63 63 6f 75 6e 74 20 6f 77 6e 65 72 2e 22 3e 0a 09 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 74 78 5f 70 72 6f 64 75 63 74 22 20 63 6f 6e 74 65 6e 74 3d 22 73 68 61 72 65 66 69 6c 65 5f 6d 61 69 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 72 63 68 20 31 34 2c 20 32 30 32 34 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 74 5f 66 6c 79 5f 70 72 6f 76 69 64 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 5f 63 6f 64 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 3e 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 Data Ascii: n account owner."> <meta name="ctx_product" content="sharefile_main"> <meta name="lastModified" content="March 14, 2024"><meta name="mt_fly_provider" content=""> <meta name="lang_code" content="en-us"> <meta name="google-site-verific
2024-04-25 18:48:11 UTC	538	IN	Data Raw: 63 6c 65 61 72 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 43 6c 65 61 72 20 41 6c 6c 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 69 74 72 69 78 5f 70 72 6f 5f 64 6f 63 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 50 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 22 20 76 61 6c 75 65 3d 22 54 72 79 20 61 20 64 69 66 66 65 72 65 6e 74 20 6f 72 20 6c 65 73 73 20 73 70 65 63 69 66 69 63 20 71 75 65 72 79 2e 20 52 65 6d 6f 76 65 20 61 6e 79 20 73 65 6c 65 63 74 65 64 20 66 69 6c 74 65 72 73 2e 20 45 78 61 6d 70 6c 65 20 71 75 65 72 69 65 73 20 69 6e 63 6c 75 64 Data Ascii: clear_all" value="Clear All"><input type="hidden" id="search_citrix_pro_doc" value="Search Product documentation"><input type="hidden" id="search_query" value="Try a different or less specific query. Remove any selected filters. Example queries includ
2024-04-25 18:48:11 UTC	4744	IN	Data Raw: 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 73 68 6f 77 5f 6d 6f 72 65 22 20 76 61 6c 75 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 69 6e 20 61 6c 6c 20 70 72 6f 64 75 63 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 66 65 61 74 75 72 65 64 22 20 76 61 6c 75 65 3d 22 46 65 61 74 75 72 65 64 20 74 6f 70 69 63 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 Data Ascii: n Tech Zone"><input type="hidden" id="search_show_more" value="Show more in Tech Zone"><input type="hidden" id="search_query_all" value="Search in all products"><input type="hidden" id="search_featured" value="Featured topics"><input type="hidden"
2024-04-25 18:48:11 UTC	5930	IN	Data Raw: 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 6e 67 20 61 63 74 69 76 65 20 6c 61 6e 67 2d 6d 6f 62 69 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 73 68 61 72 65 66 69 6c 65 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 68 74 6d 6c 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 74 78 74 22 3e 44 45 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: <li class="lang active lang-mobile"> <a class="language-option mt-lang" href="/de-de/sharefile/configuration.html?lang-switch=true"> <div class="lang-p"> <span class="lang-txt">DE</span>
2024-04-25 18:48:11 UTC	7116	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 77 68 61 74 73 2d 6e 65 77 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <li> <p> <a href='/en-us/sharefile/whats-new'>
2024-04-25 18:48:11 UTC	8302	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 6f 6e 66 69 67 75 72 65 2f 61 64 6d 69 6e 2d 73 65 74 74 69 6e 67 73 2f 73 74 6f 72 61 Data Ascii: </li> <li> <p> <a href='/en-us/sharefile/configure/admin-settings/stora
2024-04-25 18:48:11 UTC	6085	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 68 61 73 2d 73 75 62 2d 6e 61 76 2d 6c 69 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 3c 21 2d 2d 20 72 65 6e 64 65 72 69 6e 67 20 73 65 63 6f 6e 64 20 6c 65 76 65 6c 20 63 68 69 6c 64 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 74 78 2d 73 75 62 2d 6d 65 6e 75 2d 67 72 6f 75 70 2d 6c 69 6e 6b 20 68 61 73 2d 73 75 62 2d 6e 61 76 20 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 72 6f 75 6e 64 65 64 22 3e 3c 2f 73 70 61 6e 3e 20 20 0a 20 20 20 20 Data Ascii: <li class="has-sub-nav-li"> <p> ... rendering second level child --> <span class="ctx-sub-menu-group-link has-sub-nav docs-icon icon-arrow-down-rounded"></span>
2024-04-25 18:48:11 UTC	10674	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > </p> </li> <li> <p>
2024-04-25 18:48:11 UTC	11860	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 70 70 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 6e 64 72 6f 69 64 2f 75 70 6c 6f 61 64 2d 63 72 65 61 74 65 2d 66 69 6c 65 73 27 3e 0a 20 Data Ascii: <li> <p> <a href='/en-us/sharefile/citrix-files-app/citrix-files-android/upload-create-files'>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.6	49988	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:11 UTC	1153	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/sharefile/configuration Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:11 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:11 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CB7P75F95A21ZMN2028W Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.6	49991	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:12 UTC	1145	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/sharefile/configuration Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:48:12 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:12 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CBTJVW2S7ECWFDCX432R Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.6	49990	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:12 UTC	1180	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:48:12 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:12 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CBTD7CQBRPW1W1SHBKWP Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.6	49992	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:12 UTC	1186	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:48:12 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:12 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CC091VZ6D45FBAZP74VN Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.6	49993	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:12 UTC	1175	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:48:12 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:12 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CCC3CNVG2W74BAG5JEBT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.6	49994	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:12 UTC	889	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: sharefile_main sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:13 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1dh6171wu X-Cloud-Trace-Context: 8e97ebbcd509da10836b569b4da18136 Date: Thu, 25 Apr 2024 18:48:12 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:13 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.6	49995	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:12 UTC	1129	OUT	HEAD /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/configuration Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; insight_referer=aHR0cHM6Ly9kb2NzLnNoYXJlZmlsZS5jb20vZW4tdXMv; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887
2024-04-25 18:48:13 UTC	529	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 23057345 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:48:13 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CCFNJBK6KVFZHNNFDN4F X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.6	49996	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:13 UTC	1073	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/configuration Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:13 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:13 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CCY1TZA1WMH578J9ZVKW Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.6	49997	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:13 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:13 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1j3qmx55v X-Cloud-Trace-Context: 7565cfdd2fef233b61a5aee7d73584e9 Date: Thu, 25 Apr 2024 18:48:13 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:13 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.6	49998	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:13 UTC	883	OUT	GET /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
2024-04-25 18:48:13 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:13 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CDAJKGFPP30NMRQ5GFF0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.6	49999	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:13 UTC	869	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.384844780.1714070887; _gid=GA1.3.247595168.1714070887 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:14 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:48:14 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CDFC38SPFGRR1E6BHXHN Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.6	50000	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:14 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070894183 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:15 UTC	984	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:48:15 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7apr2berfjwd X-Cloud-Trace-Context: 8cf4baff5f202468e9bcbfd3e0988fc7 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CKza8_bJ1JfifxAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.6	50001	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:14 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7e33&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:15 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:15 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 932c2b3276a26e6c28876ec88fecf714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: d74p05aXp-2ddAbwJ6Wdvm38S3Yvn0bGL3e3wlBXCkwXKRf_ULCGkA== Vary: Origin
2024-04-25 18:48:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.6	50004	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:15 UTC	659	OUT	POST /api/v2/sendInsights?1714070894183 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 1887831087 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:15 UTC	1336	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:48:15 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:15 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: 7apreqijz2lc X-Cloud-Trace-Context: 608c073fa4ab679a725bb597b5208eeb Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CNW74f35qrigRhAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:15 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.6	50007	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:15 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=7e33&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:16 UTC	1482	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:15 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 932eefec422d884c28f3c110319f29fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: CSlNj1iLtJdo1suWoC9Pisstauf_HmMd6pOB6BDpiA4OIcJ__AOS_Q== Age: 1 Vary: Origin
2024-04-25 18:48:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.6	50010	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:15 UTC	1142	OUT	GET /en-us/sharefile/catalog/integrations/export HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:16 UTC	536	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 139667 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:48:16 GMT Etag: "d35b84f6ffa9c7c11de934569f6d0d75-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CFG1EAQNQHPT2P814N0C X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:16 UTC	650	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:48:16 UTC	2372	IN	Data Raw: 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 74 78 5f 70 72 6f 64 75 63 74 22 20 63 6f 6e 74 65 6e 74 3d 22 73 68 61 72 65 66 69 6c 65 5f 6d 61 69 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 41 70 72 69 6c 20 38 2c 20 32 30 32 34 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 74 5f 66 6c 79 5f 70 72 6f 76 69 64 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 5f 63 6f 64 65 22 Data Ascii: <meta name="ctx_product" content="sharefile_main"> <meta name="lastModified" content="April 8, 2024"><meta name="googlebot" content="noindex"><meta name="robots" content="noindex"><meta name="mt_fly_provider" content=""> <meta name="lang_code"
2024-04-25 18:48:16 UTC	538	IN	Data Raw: 61 72 63 68 5f 72 65 66 69 6e 65 22 20 76 61 6c 75 65 3d 22 52 65 66 69 6e 65 20 72 65 73 75 6c 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 6c 65 61 72 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 43 6c 65 61 72 20 41 6c 6c 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 69 74 72 69 78 5f 70 72 6f 5f 64 6f 63 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 50 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 22 20 76 61 6c 75 65 3d 22 54 72 79 20 61 20 64 69 66 66 65 72 65 6e 74 20 6f 72 20 6c 65 Data Ascii: arch_refine" value="Refine results"><input type="hidden" id="search_clear_all" value="Clear All"><input type="hidden" id="search_citrix_pro_doc" value="Search Product documentation"><input type="hidden" id="search_query" value="Try a different or le
2024-04-25 18:48:16 UTC	4744	IN	Data Raw: 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 6e 6f 5f 72 65 73 75 6c 74 5f 74 65 63 68 5f 7a 6f 6e 65 22 20 76 61 6c 75 65 3d 22 4e 6f 20 72 65 73 75 6c 74 73 20 66 6f 75 6e 64 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 73 68 6f 77 5f 6d 6f 72 65 22 20 76 61 6c 75 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 69 6e 20 61 6c 6c 20 70 72 6f 64 75 63 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 Data Ascii: ype="hidden" id="search_no_result_tech_zone" value="No results found in Tech Zone"><input type="hidden" id="search_show_more" value="Show more in Tech Zone"><input type="hidden" id="search_query_all" value="Search in all products"><input type="hidde
2024-04-25 18:48:16 UTC	5930	IN	Data Raw: 73 63 72 69 70 74 69 6f 6e 22 3e 4d 61 63 68 69 6e 65 20 54 72 61 6e 73 6c 61 74 65 64 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 6e 67 20 61 63 74 69 76 65 20 6c 61 6e 67 2d 6d 6f 62 69 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 73 68 61 72 65 66 69 6c 65 2f 63 61 74 61 6c 6f 67 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 2f 65 78 70 6f 72 74 2e 68 74 6d 6c Data Ascii: scription">Machine Translated</p> </div> </a> </li> <li class="lang active lang-mobile"> <a class="language-option mt-lang" href="/de-de/sharefile/catalog/integrations/export.html
2024-04-25 18:48:16 UTC	7116	IN	Data Raw: 72 65 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 65 46 69 6c 65 20 43 6f 6d 6d 75 6e 69 74 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: rer" target="_blank"> ShareFile Community </a> </p> </li> <li>
2024-04-25 18:48:16 UTC	8302	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 6f 6e 66 69 67 75 72 65 2f 61 64 6d 69 6e 2d 73 65 74 74 69 6e 67 73 2f 63 6f 6e 6e 65 63 74 6f 72 73 27 3e 0a 20 20 20 Data Ascii: </li> <li> <p> <a href='/en-us/sharefile/configure/admin-settings/connectors'>
2024-04-25 18:48:16 UTC	6085	IN	Data Raw: 27 63 74 78 2d 73 75 62 2d 6d 65 6e 75 2d 67 72 6f 75 70 2d 74 69 74 6c 65 27 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 61 70 70 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 65 46 69 6c 65 20 61 70 70 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 69 64 3d 22 63 74 Data Ascii: 'ctx-sub-menu-group-title' href='/en-us/sharefile/sharefile-app'> ShareFile apps </a> </p> <ul id="ct
2024-04-25 18:48:16 UTC	10674	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 61 70 70 2f 73 68 61 72 65 66 69 6c 65 2d 77 65 62 2f 65 64 69 74 27 3e Data Ascii: </li> <li> <p> <a href='/en-us/sharefile/sharefile-app/sharefile-web/edit'>
2024-04-25 18:48:16 UTC	11860	IN	Data Raw: 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 70 70 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 6e 64 72 6f 69 64 2f 73 68 61 72 65 2d 66 69 6c 65 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 69 6e 67 20 66 69 6c 65 73 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <p> <a href='/en-us/sharefile/citrix-files-app/citrix-files-android/share-files'> Sharing files </a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.6	50011	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:16 UTC	406	OUT	GET /api/v2/sendInsights?1714070894183 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:48:16 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:16 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 7aprk54i043c X-Cloud-Trace-Context: 78fc197498ec4bdc3db4f0e2fe2df557 Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:16 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.6	50009	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:16 UTC	1106	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:16 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:16 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CFQ1XSEB3GZDV139JQCC Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.6	50012	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:17 UTC	1098	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:48:17 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:17 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CGJXMF8S0DGA13MS2YBC Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.6	50013	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:17 UTC	1120	OUT	GET /en-us/sharefile/media/int-export-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:17 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 39752 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:17 GMT Etag: "d97473a8ba29cff04c13abfb1a9f365e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CGJXJ4WDVB75QMRP9RNG X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:17 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 52 08 06 00 00 00 2e 15 a1 27 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 2a 29 a2 05 77 c1 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 54 55 fa c0 f1 ef 9d 9e c9 a4 f7 0e 84 16 08 a1 49 17 59 69 0a d8 40 45 d4 df ba 56 74 75 5d 5d d7 5d 7b d7 d5 b5 f7 ba ea ba 56 6c 14 45 91 22 10 a4 04 12 48 20 85 84 f4 de 33 93 99 4c 9f 39 bf 3f 02 51 14 a9 41 14 cf e7 79 78 1e 92 b9 f7 9e 37 77 66 ee 7d ef 7b ce 3d 57 f1 f9 7c a2 b4 b4 94 c5 8b 17 53 51 51 81 df ef 47 51 14 24 49 92 24 49 92 a4 c3 a0 28 38 1d 0e 62 63 63 b9 e0 c2 0b 19 3d 6a 14 4a 79 79 b9 b8 fc f2 cb d9 95 9f 8f 4e a7 43 a6 56 92 24 49 92 24 49 47 46 00 1e 8f 87 f8 f8 78 de 7b Data Ascii: PNGIHDRXR.'pHYsttfxtIME*)w IDATxwxTUIYi@EVtu]]]{VlE"H 3L9?QAyx7wf}{=W\|SQQGQ$I$I(8bcc=jJyyNCV$I$IGFx{
2024-04-25 18:48:17 UTC	2372	IN	Data Raw: e1 c2 85 ec dc b9 f3 17 8b 4f 3a b9 d5 d5 37 a0 d5 6a 49 49 4a 94 c9 95 74 dc 18 0c 7a 12 13 e2 31 99 4c d4 d6 d5 23 84 38 d1 21 49 d2 49 e5 98 2b 58 ef bc f3 0e 67 9f 7d 36 2e 97 8b b9 73 e7 e2 f1 78 58 ba 74 29 ef bf ff 3e 9b 36 6d e2 a6 9b 6e 62 dd ba 75 00 a4 a7 a7 ff a4 9a 55 5f 5f cf d4 a9 53 89 8c 8c e4 ba eb ae c3 e7 f3 f1 d6 5b 6f 31 71 e2 44 36 6f de cc c8 91 23 09 0e 0e c6 66 b3 1d 6b a8 87 4d 08 c1 87 1f 7e 48 58 58 18 d3 a6 4d eb f9 bd a2 28 f4 eb d7 8f a8 a8 28 6e b8 e1 06 26 4c 98 80 c7 e3 01 40 2b c7 33 48 bd a0 a5 b5 15 b5 5a 43 54 64 c4 89 0e 45 fa 9d 08 0b 0d c1 2f fc 34 34 35 11 1f 1b 7b a2 c3 91 a4 93 c6 31 27 58 1b 36 6c 60 fd fa f5 bc f5 d6 5b bc f2 ca 2b 9c 7f fe f9 f4 e9 d3 87 e7 9f 7f 9e 49 93 26 f1 c2 0b 2f e0 f7 fb f1 fb fd dc Data Ascii: O:7jIIJtz1L#8!II+Xg}6.sxXt)>6mnbuU__S[o1qD6o#fkM~HXXM((n&L@+3HZCTdE/445{1'X6l`[+I&/
2024-04-25 18:48:17 UTC	538	IN	Data Raw: 9d 4e 87 63 6f 05 67 df 85 87 d3 e1 20 21 21 01 6b 67 27 49 49 49 4c 98 30 01 87 c3 41 78 78 38 8a a2 60 77 38 68 6b 6b 43 00 b3 67 cd 42 a7 d3 91 93 9d cd 39 e7 9c c3 a4 49 93 8e 68 ce be ac ac 2c da db db 29 28 28 a0 b8 a4 84 a8 c8 48 a6 4d 9b d6 7d 61 52 57 c7 e4 c9 93 99 35 6b 16 cd cd cd 8c 1c 39 92 d0 d0 50 ac 87 79 21 20 84 d8 af 6b b3 b3 b3 93 d9 b3 67 13 1d 1d cd d6 6d db 98 75 e6 99 4c 9f 3e bd e7 7c ae ec dd 07 00 0e bb 1d ad 56 8b 5a ad 46 51 14 0c 06 03 19 19 19 3f b9 a0 3c 98 63 ae 60 bd f7 de 7b dd 1b d2 fc 74 53 05 05 05 fc f3 9f ff e4 d3 4f 3f a5 a0 a0 80 fe fd fb ff 64 19 b3 d9 8c 56 ab 25 2d 2d 8d b4 b4 34 6e bf fd 76 8a 8a 8a b8 f6 da 6b 59 b0 60 01 2d 2d 2d 68 b5 5a 7e 3c 57 97 cf e7 43 ab d5 f6 ec 8c 1f f7 41 c7 c6 c6 f6 ac e3 f5 7a Data Ascii: Ncog !!kg'IIIL0Axx8`w8hkkCgB9Ih,)((HM}aRW5k9Py! kgmuL>\|VZFQ?<c`{tSO?dV%--4nvkY`---hZ~<WCAz
2024-04-25 18:48:17 UTC	4744	IN	Data Raw: ec 6c 2a 2b 2b 49 48 48 e8 39 ee 44 45 45 31 68 d0 20 82 83 83 69 68 68 40 08 21 27 8b 95 8e 88 10 82 94 e4 64 d2 d3 d3 b1 5a ad e4 e4 e4 90 9a 9a 4a 69 69 29 89 89 89 08 21 e8 ec ec 64 e7 ce 9d b4 b5 b7 93 94 98 78 c4 17 69 83 06 0d a2 bc bc 9c 8f 3e fa 08 87 d3 c9 29 a3 47 d3 d4 d4 84 56 a7 c3 e5 76 a3 d5 e9 c8 cd cb 23 24 38 98 8e 8e 0e fc 7e 3f 9d 16 0b fd fa f5 c3 d2 d9 c9 9b 6f bd 45 7c 7c 3c b3 66 cd e2 f3 c5 8b 69 69 69 61 f0 a0 41 87 d5 76 a7 d5 8a d1 68 e4 c2 0b 2f a4 a1 a1 81 fc fc 7c 5a 5a 5b f9 e0 c3 0f 31 99 4c 0c e8 df 9f c5 4b 96 10 16 1a ca f0 e1 c3 69 69 69 a1 b2 aa 8a 90 d0 c3 ab f4 eb f5 7a ca cb cb 59 b4 68 11 03 06 0c 20 25 25 85 b7 de 7e 9b b0 d0 50 ce 9a 33 87 af 96 2f a7 cb 6e 27 76 ef cd 1d 63 c6 8c e1 db 6f bf 45 a7 d3 11 12 12 Data Ascii: l*++IHH9DEE1h ihh@!'dZJii)!dxi>)GVv#$8~?oE\|\|<fiiiaAvh/\|ZZ[1LKiiizYh %%~P3/n'vcoE
2024-04-25 18:48:17 UTC	5930	IN	Data Raw: c1 e3 16 b8 dd 30 70 88 9a eb 6e d2 13 97 70 f4 e7 66 99 60 9d 60 32 c1 92 7e ed fc e2 f8 b7 a1 fa 0d f6 a4 15 e5 fb 78 e6 5f ce ee ab 6a 40 ab 83 bf dd 61 60 70 ba 4c ae a4 93 83 c3 e3 e7 a9 2c 1b 8b 0a bd d8 bd 5a 0c 2a 15 e3 e3 05 77 4d d4 d0 2f f2 fb 29 7d 3a 2d ad ac 5f f5 05 86 00 2d e9 e9 43 71 b8 1c b4 b6 7b c8 18 3e 16 43 40 c0 11 b7 fb c9 7b 6e 3e ff c8 4d a0 49 39 61 cf eb ec b2 09 a2 63 55 fc f3 7e 03 b1 47 d9 6d 28 bb 08 7f a3 8a b6 6f 20 3b bf 1c 9f df 8f df ef 47 51 19 18 3d 69 0a 19 03 12 7f b1 18 3e 7d f3 09 3e fa ae 82 57 5f 7e 89 c8 80 83 9f 21 d7 2d ff 8c 0d 39 bb d0 1a c3 98 7a c6 59 8c 1d 96 7a e8 ed bf f8 2f 3e dc d1 ca eb 2f 3f 4d c4 31 4c 7e dd 50 b9 93 35 1b f2 f0 f9 7c 78 7c 3e 62 12 fb 31 65 ca 69 04 1b 0e ef 9b 9b b3 76 05 65 Data Ascii: 0pnpf``2~x_j@a`pL,Z*wM/)}:-_-Cq{>C@{n>MI9acU~Gm(o ;GQ=i>}>W_~!-9zYz/>/?M1L~P5\|x\|>b1eive
2024-04-25 18:48:17 UTC	7116	IN	Data Raw: 17 57 dc f4 30 c3 87 ad 20 ae df 08 6e b8 fd 61 5e 7a fa 51 3e 59 b1 91 a1 0b f7 75 59 a9 79 f0 a5 f7 09 08 bb 85 c7 ef ff 0b 2f e9 83 08 d0 6a f0 b8 5c dc fe af 67 18 9d 1a d9 13 9f d1 14 4c f0 0f f6 23 40 67 a7 15 25 3c 06 93 a7 99 ab 2f 3e 17 af d7 8b cd e6 e1 89 8f 57 72 eb 85 53 78 7f d1 67 5c fa 7f 57 30 73 da 54 fc 42 c5 d5 77 3c cd ed 97 4d c3 d1 b8 83 c0 d0 48 8c 9d 9d 5c fb 7f 73 f1 fa fc d8 ac 56 9e 7a 77 39 b7 fc f5 31 9e 6d b7 f3 e0 b3 f7 f0 e9 2b 0f e3 74 38 38 f5 82 85 3c 75 db 35 3f fb 39 13 1c 78 a2 51 8f 07 3c de ee 44 a9 bd 0b 4c 71 31 dc b9 20 02 af 1d ac 7b 57 dc 57 19 15 fb fa 4e 45 77 e2 c5 de 83 db 3e bf c4 44 a6 47 ca ef 87 d7 9f 73 b2 6d b3 b7 27 b9 9a 32 5d cb 9f ae 95 c9 95 74 b2 53 98 34 a6 2f 0f 3d f2 0c ad 35 2d 18 8c 82 f8 Data Ascii: W0 na^zQ>YuYy/j\gL#@g%</>WrSxg\W0sTBw<MH\sVzw91m+t88<u5?9xQ<DLq1 {WWNEw>DGsm'2]tS4/=5-
2024-04-25 18:48:17 UTC	8302	IN	Data Raw: 56 eb ce 1d 99 83 25 49 e7 ca a4 e1 6f bf 95 a1 a4 1c 36 dc a9 53 53 27 f3 ac 24 49 ba be 5c 56 0d d6 c8 d8 18 e1 60 10 af d7 4b 32 99 c2 e7 cb 3e e5 c4 e2 71 22 39 39 57 bb 8c 92 24 bd 4f f1 b8 e0 ef 9e c8 10 9b 12 38 ce fc ae 61 50 d4 6c 12 fb 07 1f 33 d8 fc 41 d9 a7 92 24 49 d7 a7 4b 06 58 cd ad 6d 8c 4f 4e e2 d8 0e 8e 10 18 9a 86 a2 28 8c 8c 8d 31 32 36 ce b2 86 3a d6 af 59 7d 5d bd 7e 90 a4 9b 8d 63 43 6b 93 83 df af 50 56 39 bf bf ab 66 06 9a 8f 39 98 e6 5c 97 44 92 24 69 f6 2e 1a 60 d9 b6 cd d8 c4 24 1b d6 ad e5 58 53 0b 96 6d d1 b8 6c 29 a3 63 e3 ec 3f 7c 04 55 55 69 eb e8 62 f5 8a 15 e7 f6 de 2b 5c 6c 57 a0 6b da a9 24 31 21 5c 1c 07 74 fd ac d7 61 8e c9 e0 d8 34 25 45 05 00 64 e2 63 34 b7 f6 13 29 2c a4 a4 a4 78 c6 bd 28 cf 95 e9 e9 18 ba ae 11 Data Ascii: V%Io6SS'$I\V`K2>q"99W$O8aPl3A$IKXmON(126:Y}]~cCkPV9f9\D$i.`$XSml)c?\|UUib+\lWk$1!\ta4%Edc4),x(
2024-04-25 18:48:17 UTC	3101	IN	Data Raw: cb b6 d1 74 0d 5d 83 a1 81 7e 42 d1 62 22 21 8d 89 d1 71 d2 ae 41 71 61 18 2b 65 d2 3f 34 4e 51 49 09 1e 0d 06 06 fb 09 46 8a 09 f9 b4 f3 06 79 d2 99 84 63 63 3a 2e 86 c7 83 ae 67 03 75 47 08 f4 d3 1e d6 5c c7 c2 76 c1 e3 31 b0 2c 3b 5b a1 e0 5a 0c f4 0c 11 8c 96 10 09 e9 98 d6 7b e7 99 6d 8b 53 01 b9 6b 3b f4 f4 0d 92 5f 50 86 df a3 20 44 f6 ba a2 69 27 fb 32 bc f9 8e 91 00 3c 86 c2 d8 f0 10 8a 37 87 bc 1c 3f 99 74 9a a9 8c 43 5e 4e 90 8c 69 a3 1b d9 27 85 b4 69 e1 f3 79 48 c6 a7 51 3d 01 cc f8 38 c2 08 53 98 e7 27 31 1d 67 38 96 a1 b4 34 1f 6c c1 40 ff 00 d1 82 32 bc 86 82 70 05 e9 b4 89 c7 eb b9 70 de cb 35 72 d1 56 84 9a a6 51 5c 58 48 59 49 31 a5 c5 45 67 fc 94 97 96 10 0e 5d 28 c1 5d ba 5c 57 b2 15 a1 61 28 f4 f7 b8 bc f6 82 8d 6d 43 26 0d 89 04 44 Data Ascii: t]~Bb"!qAqa+e?4NQIFycc:.guG\v1,;[Z{mSk;_P Di'2<7?tC^Ni'iyHQ=8S'1g84l@2pp5rVQ\XHYI1Eg](]\Wa(mC&D
2024-04-25 18:48:17 UTC	6984	IN	Data Raw: b9 41 68 5b 88 62 86 4b b9 f7 0b 1f a1 6d e7 56 7c 33 16 23 43 03 54 d7 ad 67 e7 eb cf 73 64 28 ca ed cb 6d f2 cb 6a 69 dd b9 9d 8d a3 07 29 2a af 64 eb ef 9e c1 2b 5c 4e 2a e5 f1 c9 bb ef 63 bc bb 95 99 c4 10 e1 a0 75 c6 95 f3 1f a4 73 96 69 90 8b 2f 93 65 1a 82 21 83 f6 56 87 ef fe af 18 59 d9 06 e1 f0 89 fb 79 1e fc b7 ff 11 a6 69 a5 45 22 7e 22 7a 9a 35 fa 00 00 1a b7 49 44 41 54 69 e5 85 0c fe eb 73 df e2 a7 ef 6e 24 1c c8 02 d2 13 ba 3d 3c 7c a6 45 ca 71 f0 f0 28 cb 2e e2 77 5f fa 29 15 39 85 24 3d 8f d8 5c 14 c7 f0 93 93 1d 02 03 e6 a6 c7 e9 ec ee 26 98 5d 48 73 53 23 a6 e7 91 88 c7 88 c5 53 78 a6 47 4e 76 2e 73 d1 28 96 df c4 f1 4c 8a f3 b3 e9 6a 3f cc bc 13 62 45 53 3d 38 1e b3 33 33 d8 9e 4b 56 24 17 27 36 0f fe 30 91 ac 00 b8 0e 47 8f 1c c0 f6 Data Ascii: Ah[bKmV\|3#CTgsd(mji)d+\Ncusi/e!VYyiE"~"z5IDATisn$=<\|Eq(.w_)9$=\&]HsS#SxGNv.s(Lj?bES=833KV$'60G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.6	50015	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:17 UTC	1124	OUT	GET /en-us/sharefile/media/int-export-1-frb.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:17 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 50389 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:17 GMT Etag: "29fef73a1717e9cb9c42df816fbbf53b-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CGK6T457WR862K3THP8Y X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:17 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 8a 08 06 00 00 00 fa fe b3 3b 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 2c 2a 6d 56 81 fd 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 54 f5 a1 ff ff d7 59 66 cd 64 df 43 16 92 90 40 d8 41 41 40 40 10 41 a3 e0 5e c5 5d ab f6 5e db de d6 5a bf bf d6 7a 6f eb 43 6b ed b5 6e ad d7 ad 45 5c 41 70 61 15 10 91 55 76 50 08 24 ac 21 84 ec fb 9e cc 76 96 df 1f 03 29 11 82 80 60 42 f8 3c 1f 8f 40 72 66 e6 cc 67 ce cc 9c f7 f9 2c e7 73 a4 17 5e 78 c1 44 e8 f6 24 49 a2 a2 b2 0a 45 51 88 8d 89 c2 30 4c 4c 53 bc 75 82 20 74 1d 49 92 90 24 89 f2 8a 4a 14 45 21 26 2a 12 43 ec 97 ba 8c dc d5 05 10 4e 5f 6c 4c 34 7e bf 9f 8a aa 6a 64 49 42 96 a4 ae Data Ascii: PNGIHDR;pHYsttfxtIME,mV IDATxy\|TYfdC@AA@@A^]^ZzoCknE\ApaUvP$!v)`B<@rfg,s^xD$IEQ0LLSu tI$JE!&CN_lL4~jdIB
2024-04-25 18:48:17 UTC	2372	IN	Data Raw: 07 ba 08 6c 41 10 84 9e e9 fb f6 ef 22 f0 3b ba e0 02 5d 04 b8 20 08 82 00 27 cf 83 8b 39 e4 bb 7d a0 8b 00 17 04 41 10 4e d7 77 33 e3 62 0a f8 6e 3b 28 ce 34 4d 11 e6 82 20 08 c2 0f 72 31 e5 88 da 9d 8e 5e 8e df f0 dd a9 5c 82 20 08 42 cf d1 53 f3 45 f5 7a bd 5d 5d 86 76 17 d3 91 94 20 08 82 d0 35 7a 6c a0 77 87 10 ed 0e 65 10 04 41 10 2e 0e c7 32 a7 a7 05 bb aa 28 4a 97 16 40 84 b9 20 08 82 d0 55 7a 52 a8 77 59 a0 8b 20 17 04 41 10 ba 83 9e 12 ea dd fe b4 b5 73 45 1c 40 08 82 20 5c 38 7e cc 90 35 4d b3 47 84 fa 8f 3e ca fd 7c f4 5d 9c 4e 58 f7 84 37 4b 10 04 41 f8 b7 73 bd 5f bf d0 73 e2 47 ad a1 9f 8b 5a f2 b9 ac 69 8b 5a bb 20 08 42 d7 3b db 20 3d d7 93 c8 5c e8 35 f5 0b aa c9 fd 4c 02 58 84 b5 20 08 c2 85 e1 5c cd d9 7e 2e 5a 80 2f e4 50 ff 51 02 fd Data Ascii: lA";] '9}ANw3bn;(4M r1^\ BSEz]]v 5zlweA.2(J@ UzRwY AsE@ \8~5MG>\|]NX7KAs_sGZiZ B; =\5LX \~.Z/PQ
2024-04-25 18:48:17 UTC	538	IN	Data Raw: 1f df e9 e9 5e 77 dd 75 17 77 de 79 e7 39 3b 1d ec 62 ad 78 8a a9 d8 04 41 10 84 f3 ee fb c2 ba bb 9e db 7d 21 11 81 2e 08 82 20 08 3d 80 08 f4 d3 94 9b 9b cb d8 71 e3 c8 ca ca 22 b3 6f 5f fa f6 eb 47 46 66 26 bd 53 53 99 35 6b 56 97 96 ed b3 79 f3 e8 3f 60 00 6b d6 ac e9 d2 72 08 82 20 08 5d 47 f4 a1 9f a6 d6 b6 36 b6 6d df 4e ff ac 2c 46 8e 1c 89 ae eb 98 86 81 a6 69 44 47 47 53 5b 5b 4b 4b 4b 0b bd 7a f5 6a 1f d4 d1 d2 d2 42 6d 6d 2d f1 f1 f1 e8 ba 4e 73 73 33 31 31 31 40 60 d4 a7 d3 e9 24 34 34 f4 84 e7 6a 68 68 a0 a5 a5 85 f0 f0 f0 0e 93 2e d4 d5 d7 23 4b 12 61 61 61 b4 b5 b5 e1 f5 7a 91 24 89 bc bc 3c f6 ee d9 c3 de bd 7b c9 cc cc 24 3a 3a 1a 8b c5 f2 e3 6c 18 41 10 04 a1 5b 10 35 f4 d3 24 cb 32 b2 2c 73 ff fd f7 f3 d6 9b 6f 32 e3 5f ff e2 ed b7 df Data Ascii: ^wuwy9;bxA}!. =q"o_GFf&SS5kVy?`kr ]G6mN,FiDGGS[[KKKzjBmm-Nss3111@`$44jhh.#Kaaaz$<{$::lA[5$2,so2_
2024-04-25 18:48:17 UTC	4744	IN	Data Raw: 84 cf 97 2c e1 ae 3b ef 64 e4 c8 91 ed ad 00 82 20 08 c2 c5 43 04 fa 69 92 00 a7 c3 c1 cc 99 33 79 e7 9d 77 30 8f ce 82 d7 a7 4f 1f 56 ac 58 41 ef de bd 79 f2 0f 7f 60 e7 8e 1d dc 7b cf 3d 20 49 3c fb ec b3 4c 9a 34 a9 7d 1d 86 ae 73 f7 9d 77 f2 ec b3 cf 02 70 db 6d b7 31 6a f4 68 e6 cc 99 43 9f f4 74 66 cd 9a c5 83 0f 3e c8 8c 7f fd 0b 80 9f fd c7 7f 90 9d 9d cd bf 66 cc e0 9e 7b ef c5 6a b1 a0 e9 3a 4f fd e9 4f dc 7f ff fd ed eb 2d 2a 2e e6 b3 79 f3 b8 e5 96 5b b8 ee ba eb 7e cc cd 22 08 82 20 74 13 22 d0 4f 93 09 b8 dd 6e ee bd e7 1e ee b8 e3 0e 74 5d c7 30 0c 6c 36 1b 51 51 51 00 84 86 86 f2 f3 9f ff 9c 9b 6e ba 89 81 83 06 f1 d0 83 0f b6 3f de 30 4d 24 59 66 cc 98 31 ed cb 92 92 92 18 31 62 04 4d 4d 4d 14 14 14 80 69 72 f9 e5 97 b7 df 6e b3 5a b9 6c Data Ascii: ,;d Ci3yw0OVXAy`{= I<L4}swpm1jhCtf>f{j:OO-*.y[~" t"Ont]0l6QQQn?0M$Yf11bMMMirnZl
2024-04-25 18:48:17 UTC	2733	IN	Data Raw: 31 bc fe c6 1b f8 7c 3e a6 4f 9f 8e a6 69 54 54 54 60 51 55 4a 4a 4a 50 14 85 ac ac 2c 0e e4 e7 33 68 50 a0 1f ce 7e b4 f5 60 cd da b5 dc 72 cb 2d 4c 9c 38 11 00 8b aa b2 74 d9 32 fa 66 66 92 98 98 c8 6d b7 dd 46 44 44 04 0e 87 83 f7 de 7b 0f 4d d3 be b7 c9 bf cd ed a6 a5 a5 15 e9 fb 36 a6 20 74 29 93 88 88 70 2c ea a9 77 a5 ba de 79 ab 9d 69 9a b8 5c 2e ac 56 2b 65 65 65 ac 5f bf 81 20 97 8b 41 03 07 74 fa 38 d3 34 31 0c a3 d3 75 aa aa ca be 03 f9 f8 fc 7e 74 c3 40 91 15 c6 5f 3e 9a f8 b8 58 ae bd fa 2a 3e 99 bf 90 6f 73 76 31 f5 9a 29 84 86 86 e0 f3 fb c8 4c 4f 67 f4 65 23 00 88 8c 08 67 fe a2 25 ec 3f 78 88 c6 c6 26 ee bd f3 76 ec 76 3b 19 e9 e9 54 54 55 b1 ff 60 3e 8a aa 32 74 c8 20 46 0c 1f 06 80 2c 4b 84 84 04 93 d9 27 fd bc 37 ef 0b 27 27 02 fd 34 Data Ascii: 1\|>OiTTT`QUJJJP,3hP~`r-L8t2ffmFDD{M6 t)p,wyi\.V+eee_ At841u~t@_>X*>osv1)LOge#g%?x&vv;TTU`>2t F,K'7''4
2024-04-25 18:48:17 UTC	7116	IN	Data Raw: 0c b6 6e dd 8a d7 eb 6d ff 5c 49 92 d4 be bf fc ee ff a7 fa fd 54 ba db fe f7 18 79 e2 c4 2b 99 74 e5 44 46 5f 32 10 a9 f1 10 db 76 ec 43 93 54 24 09 54 8b 05 cd dd 48 59 69 29 d5 f5 cd a0 58 50 a4 40 ae cb aa 05 49 f7 50 55 5e 46 79 75 1d ba a4 a2 2a 12 a6 a9 e3 f5 fa 69 8f 64 09 34 af 1b bf 66 82 a9 a3 1b 06 98 1a b5 55 65 54 d6 35 82 6a c1 a2 42 4b 7d 35 65 15 d5 78 0c 29 10 ec 80 a2 aa e8 9e 16 2a ca cb a8 6d 68 c5 94 bb ee 6a af bb 76 ed e2 a5 97 5e 22 67 d7 2e 76 e5 e4 b0 63 c7 0e 0e 1f 3e 7c 5e 9f 53 96 65 e6 cc 99 43 5d 5d 1d 00 83 06 0e 64 da b4 69 dd f2 3a c9 6e b7 9b f2 f2 f2 ae 2e c6 39 b5 76 dd 3a ee bb ef 3e 5e 7e f9 65 62 63 63 db 97 d7 d5 d5 31 fb a3 8f da df 87 ca ca 4a 9a 9b 9b cf 7b 79 6a 6a 6a a8 6f 68 38 ab c7 6e d9 b2 85 af 56 ae 3c Data Ascii: nm\ITy+tDF_2vCT$THYi)XP@IPU^Fyuid4fUeT5jBK}5ex)mhjv^"g.vc>\|^SeC]]di:n.9v:>^~ebcc1J{yjjjoh8nV<
2024-04-25 18:48:17 UTC	8302	IN	Data Raw: be b4 0f 3b 24 24 84 90 d0 50 0e 1c 38 40 ab 5e cf 3d f7 de 4b 72 52 12 82 20 60 b6 58 88 8e 8a fa 52 14 be ab 8b 0b 9e 9e 9e 1c 3b 76 8c c4 c4 44 9c 9d 9d 09 0c 0c 74 44 82 9b cd 66 02 02 03 89 8f 8b 23 38 38 98 83 07 0f d2 d2 d2 c2 dd 77 df 4d 7c 3f 7f bc 97 97 17 31 b1 b1 ec df bf 9f f2 b2 32 6e bf fd 76 12 87 0c 21 29 29 09 ab d5 ca 81 03 07 70 73 77 e7 81 fb ef c7 cd d5 95 9e 9e 1e fc 03 02 88 8d 89 21 29 31 91 63 c7 8e 51 56 5e ce 8d 37 dc 40 46 46 06 0a 85 82 51 a3 46 51 5d 55 c5 c9 93 27 49 4a 4a 62 c1 bd f7 da 17 35 a1 a1 5c 6a 6d a5 a6 ba 9a d1 a3 47 33 72 d4 28 ca ca ca 38 7e ec 18 a9 a9 a9 dc f6 ab 5f a1 52 a9 18 39 72 24 65 65 65 14 16 16 32 65 ca 14 d2 d3 d3 09 e8 8d fc ef c3 6c 36 13 14 14 44 40 40 00 a2 28 62 13 04 06 0d 1a 84 4c 26 c3 c7 Data Ascii: ;$$P8@^=KrR `XR;vDtDf#88wM\|?12nv!))psw!)1cQV^7@FFQFQ]U'IJJb5\jmG3r(8~_R9r$eee2el6D@@(bL&
2024-04-25 18:48:17 UTC	9142	IN	Data Raw: 7f 7f 7f 3c 3d 3d 09 0f 0f 77 b4 5d 5f d4 76 64 44 04 67 73 73 71 75 73 63 fe bc 79 68 9c 9c 08 0e 0a 22 21 21 01 ab d5 8a 5e af 27 b9 37 12 3d 2c 34 94 41 71 71 04 06 06 92 9f 97 87 af 9f 1f 8f 3c fc b0 a3 df f5 f5 43 b0 bb 79 42 42 42 f0 f4 f4 c4 66 b3 31 64 c8 10 87 a5 4c a1 50 0c 78 97 72 b9 9c c4 c4 44 82 83 83 19 d4 5b df a4 a4 24 0a 0b 0b b1 5a ad dc b7 60 01 c1 41 41 5c bc 78 91 99 33 66 e0 ec ec 4c 58 58 18 1d 9d 9d 44 45 46 12 15 15 85 d9 6c a6 ad ad 8d e4 e4 e4 01 42 d8 cf cf 8f a3 47 8e 30 6d da 34 87 e5 6f d4 a8 51 58 ad 56 4a 4a 4b 19 39 72 24 77 dd 75 17 72 b9 9c f8 f8 78 64 d8 ad 6c 99 99 99 4c 1c 3f 1e 9d 4e 87 53 af 65 a5 6f 6c f5 ed 78 08 0c 0c 74 cc 07 3f 46 7e e9 51 ee b2 d7 df 78 49 ec 31 80 42 09 4e 4e 60 ea 81 e3 39 36 3a da 45 c6 Data Ascii: <==w]_vdDgssquscyh"!!^'7=,4Aqq<CyBBBf1dLPxrD[$Z`AA\x3fLXXDEFlBG0m4oQXVJJK9r$wurxdlL?NSeolxt?F~QxI1BNN`96:E
2024-04-25 18:48:17 UTC	10674	IN	Data Raw: 2e 63 f2 a4 49 18 86 71 dc 34 db ec 47 4d 0d 7f fc d3 9f 48 4c 4c 64 c6 8c 19 b8 5c 2e 16 2c 58 40 61 61 21 bf f8 c5 2f a8 ac ac e4 cd bf fe 95 91 23 46 70 d9 a5 97 b2 7c c5 0a fe f0 e4 93 3c f6 fb df 13 14 14 c4 b3 73 e6 60 e8 3a d7 5f 77 1d 9a a6 f1 e9 7f fe c3 c1 82 02 ee be eb 2e 4c 47 04 f5 03 07 0e a0 b4 04 f4 aa aa 2a 66 cf 9e cd d0 61 c3 08 0f 0f 67 f7 ee dd c4 c6 c5 71 ed 35 d7 a0 28 0a 87 0f 1f e6 8d 37 df e4 d7 33 67 92 94 94 d4 7c 7e 34 0d 55 55 03 fb 03 e0 f7 fb 31 9b cd d8 6c b6 c0 32 b7 db 8d a2 28 d8 ed 76 0c c3 40 d7 f5 36 f9 68 7d 8f 10 42 b4 37 f9 25 3a 0d ba 61 90 18 16 83 c7 ef a5 dc 59 43 6c 48 24 56 93 19 af e6 43 41 a1 de d3 88 49 51 69 f2 37 b7 93 77 8a 4e 26 bf e6 30 3e cd 7f 4a 15 ed c9 49 49 0c 1f 3e 3c 10 50 e2 62 63 79 e9 e5 Data Ascii: .cIq4GMHLLd\.,X@aa!/#Fp\|<s`:_w.LG*fagq5(73g\|~4UU1l2(v@6h}B7%:aYClH$VCAIQi7wN&0>JII><Pbcy
2024-04-25 18:48:17 UTC	4103	IN	Data Raw: 61 d5 52 8d d7 9f f3 d2 50 ff c3 eb c2 ab 2b 0d be f9 42 63 f0 08 13 17 5e 6c 3e 27 82 f9 d1 22 22 15 a6 5d 67 21 d1 a1 f2 c5 c7 3e 3c 9e 73 ac b3 83 10 42 fc 00 12 d0 4f 43 6d 8d c1 1b 2f 7a 39 74 d0 20 38 e4 dc 69 27 ff 3e 14 15 82 43 60 f3 7a 9d b7 ff ec c5 ef ff fe 69 b9 dd f0 e5 a7 7e 06 0f 37 d1 b5 fb b9 ff 91 1a 3c dc 44 42 a2 ca c2 cf 7f c0 4e 0b 21 c4 39 e6 dc ff f5 3d 87 2c f8 d8 cf ee 1d 7a 87 e9 58 a5 28 10 14 0c 6b 96 eb ac 5c fc fd 83 db da 15 7e 12 92 55 ba 74 fb f1 7c 9c 86 8d 36 d1 e8 82 5d 79 7a 7b 67 45 08 21 ce 88 1f cf 2f 70 3b 2b 2a 30 58 be 58 c3 1e 74 76 8b e5 86 01 5e 6f 73 cf f9 ff 05 55 6d 0e ec 0b bf f0 e3 72 9e 7e 15 74 4d b5 41 e9 61 83 d1 e3 4c ff 83 dc fd ef 28 0a 8c ba d0 c4 f6 cd da 0f aa 9d 10 42 88 73 85 04 f4 53 b4 6e Data Ascii: aRP+Bc^l>'""]g!><sBOCm/z9t 8i'>C`zi~7<DBN!9=,zX(k\~Ut\|6]yz{gE!/p;+*0XXtv^osUmr~tMAaL(BsSn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.6	50014	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:17 UTC	1123	OUT	GET /en-us/sharefile/media/int-export-1-pd.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:17 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 47903 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:17 GMT Etag: "8cfac45c7b11090b9fea569fdb715845-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CGJV1WZYNXKPAHV08PX2 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:17 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 9e 08 06 00 00 00 62 b9 f3 b6 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 12 0f 1f 10 50 c2 8f 4c 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 55 75 82 ff ff d7 29 b7 e5 e6 de f4 5e 80 10 42 e8 20 1d a4 88 a0 82 28 38 80 08 8e 52 04 75 c6 b2 ce 6f 76 9d b2 b3 8f 75 74 67 7f b3 33 ee ce b8 ea cc 58 66 2d a0 cc c8 28 43 57 41 90 40 28 d2 7b 0f a4 87 90 7a 53 6e ee bd a7 7c ff 08 89 04 12 da 20 29 7c 9e 8f 87 0f c9 2d e7 7c ee b9 f7 9c f7 f9 94 f3 39 d2 ab af be 6a 22 b4 0b 92 24 e1 0f 04 c8 2f 28 24 31 3e 0e 8b c5 82 69 8a af 4f 10 84 b6 47 96 65 6a bd 5e ce 15 9f 27 39 31 01 59 96 c5 f1 ea 3b 26 b7 76 01 84 6b 67 9a 26 36 ab 15 67 50 10 e7 Data Ascii: PNGIHDRbpHYsttfxtIMEPL IDATxw\|Uu)^B (8Ruovutg3Xf-(CWA@({zSn\| )\|-\|9j"$/($1>iOGej^'91Y;&vkg&6gP
2024-04-25 18:48:17 UTC	2372	IN	Data Raw: 82 d0 75 1d 6f 5d 1d 3e 9f 8f 40 40 c3 6f e8 ad 5d 44 41 10 da 3d 09 45 91 b1 5a ad b8 5c 2e 1c 76 7b e3 28 76 d1 c4 de fa 44 a0 77 30 46 7d 3b 3c 92 24 11 ec 74 e2 0a 0e 6e ec eb 12 04 41 f8 47 35 8c df 31 0d 53 d4 c8 db 18 11 e8 1d 98 d8 d1 04 41 10 6e 1f e2 b2 35 41 10 04 41 e8 00 44 a0 0b 82 20 08 42 07 20 02 5d 10 04 41 10 3a 00 11 e8 82 20 08 82 d0 01 88 40 17 04 41 10 84 0e 40 04 ba 20 08 82 20 74 00 22 d0 05 41 10 04 a1 03 10 81 2e 08 82 20 08 1d 80 08 74 41 10 04 41 e8 00 6e ab 99 e2 c4 ed 44 05 41 10 da 37 71 e7 c8 96 a9 1d 25 e4 3a ca e7 10 04 41 10 5a 76 ad c7 fa db 31 f8 55 9f cf d7 da 65 b8 21 22 c0 05 41 10 84 6b 75 3b 04 bc aa 28 4a 6b 97 e1 9a 5c 1a e0 0d 7f df 0e 5f 92 20 08 82 70 63 9a cb 8a 8e 9a 1b aa 2c b7 8f 71 71 a2 46 2e 08 82 20 Data Ascii: uo]>@@o]DA=EZ\.v{(vDw0F};<$tnAG51SAn5AAD B ]A: @A@ t"A. tAAnDA7q%:AZv1Ue!"Aku;(Jk\_ pc,qqF.
2024-04-25 18:48:17 UTC	538	IN	Data Raw: 64 15 2b 1a 32 fa cd da 0e d7 cd 34 4d 64 59 6e 31 cc 01 fe ff 5f ff 9a 82 82 02 26 4c 98 c0 6f 7e fb 5b 06 0e 1c c8 90 21 43 90 65 19 c3 30 58 b6 6c 19 b3 67 cf a6 7b 5a 1a a7 4e 9d e2 8b 2f be 20 2e 2e 8e 9e 3d 7b d2 af 5f 3f 3e 5c b4 88 0d 1b 37 32 61 fc 78 02 81 00 9f 7d f6 19 81 40 80 81 83 06 35 9e ca e8 7a 33 db 40 92 f0 78 3c d4 d5 d5 61 b7 db bf 9b 0d 20 08 82 20 b4 29 17 02 5d c2 62 b3 52 53 74 9a 6d 19 19 7c 73 f8 28 e7 ca bc 4d 5e 28 5b 82 49 48 49 63 d0 f0 91 0c e9 9b 86 43 f6 5f 56 7b b6 da ed 78 b3 0f f1 d7 d7 3f e0 54 c0 20 ac fb 50 9e 9c fb 28 f1 76 3f fe 66 2a 8d 8a c5 86 bf ec 2c 5f ad fb 82 6d fb 8e 53 ee bd 28 b8 6d 6e 52 7b 0f 62 c2 f8 31 a4 44 3a f0 fb 03 f5 e5 50 2c 50 57 ca ce cd 1b 78 e8 7b df 23 3a 36 fe a6 6e 90 6b 61 9a 26 86 Data Ascii: d+24MdYn1_&Lo~[!Ce0Xlg{ZN/ ..={_?>\72ax}@5z3@x<a )]bRStm\|s(M^([IHIcC_V{x?T P(v?f*,_mS(mnR{b1D:P,PWx{#:6nka&
2024-04-25 18:48:17 UTC	4744	IN	Data Raw: fd 2a 8a 42 ff 7e fd 28 2f 2b 63 c3 86 0d 18 86 81 44 fd 84 33 12 50 5c 5c cc aa d5 ab 79 68 ea 54 9e 78 e2 09 42 dc 6e 5e 7e e5 15 7e fe b3 9f b1 61 c3 06 7a f7 ee 8d 69 9a 3c f5 e4 93 24 25 25 f1 fa 1b 6f 10 13 13 c3 2b 2f bf cc 94 29 53 00 e8 d5 ab 17 9f 7d f6 19 7f fc c3 1f f8 72 dd 3a 22 23 22 78 f3 cd 37 99 35 6b 16 56 8b 05 d5 62 61 d0 a0 41 24 27 27 37 29 9b d5 62 e1 a5 97 5e c2 e9 74 f2 d5 86 0d 9c bf d0 a7 2f 08 82 20 74 6c d2 ef 5e 7b dd f4 15 1f e2 c3 f7 16 71 a4 a0 16 14 1b c9 3d 87 30 76 e4 20 ba 24 46 13 64 91 a8 2e 2b e4 d4 e1 5d 6c da bc 9b 82 ca 3a 50 dc 0c 9f f2 28 d3 c6 f6 c4 a6 d5 72 f2 f8 61 4e 9d 2d a2 bc f0 24 7b 0e 9f 21 20 5b 91 02 7e c2 7a 0c e7 89 c7 67 d5 d7 d0 b5 8b 6a f3 92 8c 4d d5 d8 bd 66 11 1f 7d 79 08 4d b2 10 97 7a 07 Data Ascii: *B~(/+cD3P\\yhTxBn^~~azi<$%%o+/)S}r:"#"x75kVbaA$''7)b^t/ tl^{q=0v $Fd.+]l:P(raN-${! [~zgjMf}yMz
2024-04-25 18:48:17 UTC	5930	IN	Data Raw: 19 c4 c6 c6 32 64 c8 20 54 d5 82 df df fc f5 e6 a6 69 a2 5a 2c 28 6a cb 5d 76 a6 69 12 e2 72 37 5b 53 f6 f9 02 a8 aa 8a 24 d5 ef 97 56 ab 15 c3 30 a8 ab fb 76 80 ab 3f e0 47 96 64 6c 36 1b a5 65 e5 8d 8f eb 86 81 61 1a a8 16 15 e5 c2 49 7d 03 e3 c2 f5 ba 2d 7d 4e e1 e6 13 81 7e 03 a2 e3 24 82 5d 10 08 70 c5 c9 64 64 b9 be 09 fe 4a 99 a5 eb 10 1a 0e 11 91 2d bf 48 d3 34 ea 2e d4 aa cb cb cb f9 64 e9 52 4c d3 64 e8 d0 a1 78 3c 1e 62 62 63 19 30 60 00 5d bb 76 65 d3 a6 4d d4 d6 d6 72 fc f8 71 96 2f 5f ce 8f 5e 78 81 29 53 a6 f0 d2 2f 7f 49 71 71 31 c1 c1 c1 94 96 95 51 57 57 87 aa aa 8d c1 aa eb 7a e3 25 2d 0d eb 34 4d 93 82 82 02 5c 6e 37 53 a7 4c 21 2f 2f 8f b3 d9 d9 0c b9 a8 56 5e 54 54 74 e1 73 e8 f8 fd 7e 7a f6 ec c9 f2 e5 cb 59 b7 6e 1d 63 c7 8c 61 c5 Data Ascii: 2d TiZ,(j]vir7[S$V0v?Gdl6eaI}-}N~$]pddJ-H4.dRLdx<bbc0`]veMrq/_^x)S/Iqq1QWWz%-4M\n7SL!//V^TTts~zYnca
2024-04-25 18:48:17 UTC	7116	IN	Data Raw: bc a1 6c aa aa 62 b3 db 39 72 e4 08 21 a1 a1 cc 98 31 83 d8 d8 58 1e 7b ec 31 06 0c 18 80 61 18 3c fc f0 c3 0c 1e 3c 98 93 27 4f 62 52 df 77 2e 4b 12 91 91 91 b8 dd 6e e2 e2 e2 b0 5a ad 8d 21 b7 7b d7 2e 46 8e 1c c9 b0 61 c3 e8 d4 a9 13 73 e7 ce 25 37 27 87 82 82 02 12 13 13 79 e0 81 07 88 8b 8d 65 fc f8 f1 48 92 84 a7 aa ea 1a 8f 96 c2 ad 54 ff 0b 41 42 92 64 30 74 4c d3 c0 12 9a c0 d0 d4 74 62 5d 32 9a 6e 22 c9 2a aa 22 23 9b 01 94 d0 ce 0c 19 16 47 79 49 3e a7 4f 1f a0 f0 5c 2a fd fb 25 5f 18 d9 de d0 17 67 20 5b dd f4 bc 63 28 35 9e 32 ce 64 9d 61 6f 41 21 bd fa f6 26 d4 a1 60 b4 f3 7e f4 40 20 40 54 64 24 73 e6 cc 69 b2 03 37 e8 9e 9e 4e 4e 4e 0e 49 c9 c9 40 7d 9f 65 54 54 14 41 17 bd 36 28 28 88 aa ea 6a 34 5d 27 f8 92 83 80 69 9a 68 9a 46 78 58 58 Data Ascii: lb9r!1X{1a<<'ObRw.KnZ!{.Fas%7'yeHTABd0tLtb]2n""#GyI>O\%_g [c(52daoA!&`~@ @Td$si7NNNI@}eTTA6((j4]'ihFxXX
2024-04-25 18:48:17 UTC	8302	IN	Data Raw: d3 f9 f9 04 04 06 72 ef bd f7 52 5b 5b 4b 7f 7f 3f 4b 97 2e 65 59 76 36 eb d6 ad 23 35 35 f5 aa f7 5a bd 7a 35 6f 6e df 8e cb e5 62 64 64 84 71 bb 9d ac ac 2c b6 6f df ce ea d5 ab 59 b7 6e 1d 00 2f 6d de cc a9 53 a7 08 0d 0b c3 cf cf 4f fa bd af af 2f 82 20 a0 56 ab 59 bd 7a 35 2a 95 0a f1 43 1e c8 63 c7 8e 11 16 1a ca cf 7f fe 73 00 72 4f 9e a4 b6 b6 96 c5 8b 16 11 13 1b cb 7d f7 dd 47 78 78 38 e1 61 61 94 96 96 92 92 92 42 49 69 29 8f 3c fc 30 89 49 49 d8 ed 76 fe f0 87 3f 70 fe fc 79 2a 2a 2a c8 ca ca e2 9e 7b ee 01 e0 ad b7 df e6 f8 89 13 ac 58 be 1c ab d5 ca 6d b7 dd 46 60 60 20 87 8f 1c e1 62 73 33 65 65 65 fc e7 7f fe 27 51 91 91 b4 b6 b6 f2 c2 0b 2f 90 7d dd 75 92 26 35 36 36 c6 8d 37 dc c0 9a 35 6b 00 58 bf 7e 3d 75 75 75 04 04 04 10 1e 1e ce 5d Data Ascii: rR[[K?K.eYv6#55Zz5onbddq,oYn/mSO/ VYz5CcsrO}Gxx8aaBIi)<0IIv?py**{XmF`` bs3eee'Q/}u&56675kX~=uuu]
2024-04-25 18:48:17 UTC	6081	IN	Data Raw: 91 91 c1 f1 e3 c7 e9 eb eb c3 64 32 21 78 3c 98 da db 51 28 95 68 34 1a a2 a3 a3 a9 a8 a8 e0 df 7e f6 33 6f 2c fa 82 02 0e 1d 3a c4 e2 c5 8b 19 1b 1b 23 21 21 81 1f de 7f 3f 16 8b 85 a7 9e 7a 8a c1 c1 41 1e 7a e8 21 dc 1e 0f 8f 3c fc f0 34 bf 8d 95 2b 57 72 c7 b7 be c5 9c 39 73 58 b6 6c 19 a7 f2 f2 a8 af af e7 37 8f 3d 86 bf bf 3f 27 72 73 79 ff c0 01 66 65 66 62 98 d0 d4 0f 1f 3e cc 8c 90 10 1e 7b ec 31 00 9e 7a ea 29 ce 9f 3f cf f7 be fb 5d 5e 7e e5 15 86 87 86 18 1e 1e e6 de 7b ee c1 e5 72 d1 d1 d1 e1 cd 2b 7e eb ad 8c 8d 8d f1 c4 13 4f 70 e6 cc 19 2a 2b 2b 49 4e 4e e6 de 7b ef 05 e0 0f 4f 3e 49 6e 6e 2e c9 c9 c9 58 ad 56 7e fe e8 a3 52 8a d4 3b ef bc 93 c0 a0 20 be 7e cb 2d 52 d9 fd fd fd f9 e1 7d f7 61 34 1a f9 c5 cf 7f 0e 80 6d 6c 8c 39 b3 67 f3 6f Data Ascii: d2!x<Q(h4~3o,:#!!?zAz!<4+Wr9sXl7=?'rsyfefb>{1z)?]^~{r+~Op*++INN{O>Inn.XV~R; ~-R}a4ml9go
2024-04-25 18:48:17 UTC	10674	IN	Data Raw: ef 51 5d 5d dd a0 5c e3 c7 8f 67 fd 86 0d b4 6a dd 9a e4 e4 64 fc 3e 1f 96 65 61 5a 16 77 dc 71 07 b1 b1 b1 fc e7 6f 7e c3 86 8d 1b 43 5d 21 03 06 0c a0 aa aa 8a c2 a3 47 19 34 70 e0 e9 3f 50 21 84 b8 c4 24 d0 2f 80 aa 28 e8 a6 49 6e f1 11 0c cb 24 dc e1 c6 a8 0d 00 9f 1e c0 d4 03 f8 75 3f ff 5a 3d 8b 15 39 df 30 ae cb 10 1e ed 3f 09 87 cd 0e 67 69 76 77 d8 ed dc 7e db 6d dc 73 f7 dd 3c f8 c0 03 8c 1d 3b 16 77 ed 08 6e 68 d8 1c 6f 59 16 4b bf fa 8a f4 f4 f4 53 06 7a dd 73 ea 82 d5 34 4d 2c cb 6a 50 43 b5 2c 0b 8f c7 83 a2 28 0d 06 81 1d 39 72 84 b8 d8 d8 d3 96 b3 7e 58 9f b8 ce 8e 1d 3b 72 fc d8 31 36 6d da d4 e0 35 0b 16 2c 60 f3 a6 4d 78 bd 5e 5e 7e e5 15 8e 1d 3b 86 cd 66 63 40 ff fe fc f8 c7 3f 66 ff fe fd c4 c6 c6 12 16 1e 1e 1a e9 3f 72 c4 08 ee b9 Data Ascii: Q]]\gjd>eaZwqo~C]!G4p?P!$/(In$u?Z=90?givw~ms<;wnhoYKSzs4M,jPC,(9r~X;r16m5,`Mx^^~;fc@?f?r
2024-04-25 18:48:17 UTC	1481	IN	Data Raw: d4 aa 8d ca c3 3f b1 33 74 a4 86 aa 05 6b b9 86 de f8 4b a5 5e 0e 75 03 df ea 06 ca d9 ed 30 62 b4 c6 83 3f b2 93 94 7c 31 02 4d a3 4d 5b 27 63 26 18 ec fa d6 c7 87 d3 03 e4 ee 6b 5a b5 f5 dc 1c 93 0f a7 07 d8 b1 dd c7 98 09 06 6d db 39 01 99 bf 5d 08 71 f5 92 f6 c5 8b a0 65 8a ca 03 8f d9 e9 d5 5f 65 e5 52 93 7d bb 0d 6a bc b5 a7 64 19 4d ab 8f 5d 51 40 d3 82 53 d1 86 85 43 c7 ce c1 69 53 bb f6 50 cf 7b 22 99 33 b3 91 92 ea e2 ce 07 7c 6c de e0 63 f9 12 8d ec 15 1a 6d da 6a 24 26 29 78 c2 ce 3e e7 fb c5 64 59 c1 29 67 8f 16 58 1c d8 6f 10 08 18 a4 77 30 18 33 41 21 2c cc 85 fc 29 08 21 ae 76 f2 2b 76 91 b8 dc 0a fd 06 da c8 ec 6e 71 f8 90 c6 fe bd 16 85 05 16 d5 55 16 56 13 aa 9c 2a 2a 84 87 2b b4 48 52 68 d7 51 21 29 59 c5 e3 51 2e 49 4b b3 82 0d 8f 47 Data Ascii: ?3tkK^u0b?\|1MM['c&kZm9]qe_eR}jdM]Q@SCiSP{"3\|lcmj$&)x>dY)gXow03A!,)!v+vnqUV**+HRhQ!)YQ.IKG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.6	50017	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:17 UTC	1123	OUT	GET /en-us/sharefile/media/int-export-1-qb.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:17 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 48518 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:17 GMT Etag: "3094aee7112e7c602fa7f306c997b576-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CGKRG64KA3MTQ3KEGMY6 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:17 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 9e 08 06 00 00 00 62 b9 f3 b6 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 12 0e 23 23 9d 23 fd 92 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 55 75 82 ff ff d7 29 b7 e5 e6 de f4 5e 80 10 42 e8 20 1d a4 88 a0 82 28 38 80 08 8e 52 04 75 c6 b2 ce 6f 76 9d b2 b3 8f 75 74 67 7f b3 33 ee ce b8 ea cc 58 66 2d a0 cc c8 28 43 57 41 90 40 28 d2 7b 0f a4 87 90 7a 53 6e ee bd a7 7c ff 08 89 04 12 da 20 29 7c 9e 8f 87 0f c9 2d e7 7c ee b9 f7 9c f7 f9 94 f3 39 d2 ab af be 6a 22 b4 0b 92 24 e1 0f 04 c8 2f 28 24 31 3e 0e 8b c5 82 69 8a af 4f 10 84 b6 47 96 65 6a bd 5e ce 15 9f 27 39 31 01 59 96 c5 f1 ea 3b 26 b7 76 01 84 6b 67 9a 26 36 ab 15 67 50 10 e7 Data Ascii: PNGIHDRbpHYsttfxtIME### IDATxw\|Uu)^B (8Ruovutg3Xf-(CWA@({zSn\| )\|-\|9j"$/($1>iOGej^'91Y;&vkg&6gP
2024-04-25 18:48:17 UTC	2372	IN	Data Raw: 82 d0 75 1d 6f 5d 1d 3e 9f 8f 40 40 c3 6f e8 ad 5d 44 41 10 da 3d 09 45 91 b1 5a ad b8 5c 2e 1c 76 7b e3 28 76 d1 c4 de fa 44 a0 77 30 46 7d 3b 3c 92 24 11 ec 74 e2 0a 0e 6e ec eb 12 04 41 f8 47 35 8c df 31 0d 53 d4 c8 db 18 11 e8 1d 98 d8 d1 04 41 10 6e 1f e2 b2 35 41 10 04 41 e8 00 44 a0 0b 82 20 08 42 07 20 02 5d 10 04 41 10 3a 00 11 e8 82 20 08 82 d0 01 88 40 17 04 41 10 84 0e 40 04 ba 20 08 82 20 74 00 22 d0 05 41 10 04 a1 03 10 81 2e 08 82 20 08 1d 80 08 74 41 10 04 41 e8 00 6e ab 99 e2 c4 ed 44 05 41 10 da 37 71 e7 c8 96 a9 1d 25 e4 3a ca e7 10 04 41 10 5a 76 ad c7 fa db 31 f8 55 9f cf d7 da 65 b8 21 22 c0 05 41 10 84 6b 75 3b 04 bc aa 28 4a 6b 97 e1 9a 5c 1a e0 0d 7f df 0e 5f 92 20 08 82 70 63 9a cb 8a 8e 9a 1b aa 2c b7 8f 71 71 a2 46 2e 08 82 20 Data Ascii: uo]>@@o]DA=EZ\.v{(vDw0F};<$tnAG51SAn5AAD B ]A: @A@ t"A. tAAnDA7q%:AZv1Ue!"Aku;(Jk\_ pc,qqF.
2024-04-25 18:48:17 UTC	538	IN	Data Raw: 64 15 2b 1a 32 fa cd da 0e d7 cd 34 4d 64 59 6e 31 cc 01 fe ff 5f ff 9a 82 82 02 26 4c 98 c0 6f 7e fb 5b 06 0e 1c c8 90 21 43 90 65 19 c3 30 58 b6 6c 19 b3 67 cf a6 7b 5a 1a a7 4e 9d e2 8b 2f be 20 2e 2e 8e 9e 3d 7b d2 af 5f 3f 3e 5c b4 88 0d 1b 37 32 61 fc 78 02 81 00 9f 7d f6 19 81 40 80 81 83 06 35 9e ca e8 7a 33 db 40 92 f0 78 3c d4 d5 d5 61 b7 db bf 9b 0d 20 08 82 20 b4 29 17 02 5d c2 62 b3 52 53 74 9a 6d 19 19 7c 73 f8 28 e7 ca bc 4d 5e 28 5b 82 49 48 49 63 d0 f0 91 0c e9 9b 86 43 f6 5f 56 7b b6 da ed 78 b3 0f f1 d7 d7 3f e0 54 c0 20 ac fb 50 9e 9c fb 28 f1 76 3f fe 66 2a 8d 8a c5 86 bf ec 2c 5f ad fb 82 6d fb 8e 53 ee bd 28 b8 6d 6e 52 7b 0f 62 c2 f8 31 a4 44 3a f0 fb 03 f5 e5 50 2c 50 57 ca ce cd 1b 78 e8 7b df 23 3a 36 fe a6 6e 90 6b 61 9a 26 86 Data Ascii: d+24MdYn1_&Lo~[!Ce0Xlg{ZN/ ..={_?>\72ax}@5z3@x<a )]bRStm\|s(M^([IHIcC_V{x?T P(v?f*,_mS(mnR{b1D:P,PWx{#:6nka&
2024-04-25 18:48:17 UTC	4744	IN	Data Raw: fd 2a 8a 42 ff 7e fd 28 2f 2b 63 c3 86 0d 18 86 81 44 fd 84 33 12 50 5c 5c cc aa d5 ab 79 68 ea 54 9e 78 e2 09 42 dc 6e 5e 7e e5 15 7e fe b3 9f b1 61 c3 06 7a f7 ee 8d 69 9a 3c f5 e4 93 24 25 25 f1 fa 1b 6f 10 13 13 c3 2b 2f bf cc 94 29 53 00 e8 d5 ab 17 9f 7d f6 19 7f fc c3 1f f8 72 dd 3a 22 23 22 78 f3 cd 37 99 35 6b 16 56 8b 05 d5 62 61 d0 a0 41 24 27 27 37 29 9b d5 62 e1 a5 97 5e c2 e9 74 f2 d5 86 0d 9c bf d0 a7 2f 08 82 20 74 6c d2 ef 5e 7b dd f4 15 1f e2 c3 f7 16 71 a4 a0 16 14 1b c9 3d 87 30 76 e4 20 ba 24 46 13 64 91 a8 2e 2b e4 d4 e1 5d 6c da bc 9b 82 ca 3a 50 dc 0c 9f f2 28 d3 c6 f6 c4 a6 d5 72 f2 f8 61 4e 9d 2d a2 bc f0 24 7b 0e 9f 21 20 5b 91 02 7e c2 7a 0c e7 89 c7 67 d5 d7 d0 b5 8b 6a f3 92 8c 4d d5 d8 bd 66 11 1f 7d 79 08 4d b2 10 97 7a 07 Data Ascii: *B~(/+cD3P\\yhTxBn^~~azi<$%%o+/)S}r:"#"x75kVbaA$''7)b^t/ tl^{q=0v $Fd.+]l:P(raN-${! [~zgjMf}yMz
2024-04-25 18:48:17 UTC	5930	IN	Data Raw: 19 c4 c6 c6 32 64 c8 20 54 d5 82 df df fc f5 e6 a6 69 a2 5a 2c 28 6a cb 5d 76 a6 69 12 e2 72 37 5b 53 f6 f9 02 a8 aa 8a 24 d5 ef 97 56 ab 15 c3 30 a8 ab fb 76 80 ab 3f e0 47 96 64 6c 36 1b a5 65 e5 8d 8f eb 86 81 61 1a a8 16 15 e5 c2 49 7d 03 e3 c2 f5 ba 2d 7d 4e e1 e6 13 81 7e 03 a2 e3 24 82 5d 10 08 70 c5 c9 64 64 b9 be 09 fe 4a 99 a5 eb 10 1a 0e 11 91 2d bf 48 d3 34 ea 2e d4 aa cb cb cb f9 64 e9 52 4c d3 64 e8 d0 a1 78 3c 1e 62 62 63 19 30 60 00 5d bb 76 65 d3 a6 4d d4 d6 d6 72 fc f8 71 96 2f 5f ce 8f 5e 78 81 29 53 a6 f0 d2 2f 7f 49 71 71 31 c1 c1 c1 94 96 95 51 57 57 87 aa aa 8d c1 aa eb 7a e3 25 2d 0d eb 34 4d 93 82 82 02 5c 6e 37 53 a7 4c 21 2f 2f 8f b3 d9 d9 0c b9 a8 56 5e 54 54 74 e1 73 e8 f8 fd 7e 7a f6 ec c9 f2 e5 cb 59 b7 6e 1d 63 c7 8c 61 c5 Data Ascii: 2d TiZ,(j]vir7[S$V0v?Gdl6eaI}-}N~$]pddJ-H4.dRLdx<bbc0`]veMrq/_^x)S/Iqq1QWWz%-4M\n7SL!//V^TTts~zYnca
2024-04-25 18:48:17 UTC	7116	IN	Data Raw: bc a1 6c aa aa 62 b3 db 39 72 e4 08 21 a1 a1 cc 98 31 83 d8 d8 58 1e 7b ec 31 06 0c 18 80 61 18 3c fc f0 c3 0c 1e 3c 98 93 27 4f 62 52 df 77 2e 4b 12 91 91 91 b8 dd 6e e2 e2 e2 b0 5a ad 8d 21 b7 7b d7 2e 46 8e 1c c9 b0 61 c3 e8 d4 a9 13 73 e7 ce 25 37 27 87 82 82 02 12 13 13 79 e0 81 07 88 8b 8d 65 fc f8 f1 48 92 84 a7 aa ea 1a 8f 96 c2 ad 54 ff 0b 41 42 92 64 30 74 4c d3 c0 12 9a c0 d0 d4 74 62 5d 32 9a 6e 22 c9 2a aa 22 23 9b 01 94 d0 ce 0c 19 16 47 79 49 3e a7 4f 1f a0 f0 5c 2a fd fb 25 5f 18 d9 de d0 17 67 20 5b dd f4 bc 63 28 35 9e 32 ce 64 9d 61 6f 41 21 bd fa f6 26 d4 a1 60 b4 f3 7e f4 40 20 40 54 64 24 73 e6 cc 69 b2 03 37 e8 9e 9e 4e 4e 4e 0e 49 c9 c9 40 7d 9f 65 54 54 14 41 17 bd 36 28 28 88 aa ea 6a 34 5d 27 f8 92 83 80 69 9a 68 9a 46 78 58 58 Data Ascii: lb9r!1X{1a<<'ObRw.KnZ!{.Fas%7'yeHTABd0tLtb]2n""#GyI>O\%_g [c(52daoA!&`~@ @Td$si7NNNI@}eTTA6((j4]'ihFxXX
2024-04-25 18:48:17 UTC	8302	IN	Data Raw: d3 f9 f9 04 04 06 72 ef bd f7 52 5b 5b 4b 7f 7f 3f 4b 97 2e 65 59 76 36 eb d6 ad 23 35 35 f5 aa f7 5a bd 7a 35 6f 6e df 8e cb e5 62 64 64 84 71 bb 9d ac ac 2c b6 6f df ce ea d5 ab 59 b7 6e 1d 00 2f 6d de cc a9 53 a7 08 0d 0b c3 cf cf 4f fa bd af af 2f 82 20 a0 56 ab 59 bd 7a 35 2a 95 0a f1 43 1e c8 63 c7 8e 11 16 1a ca cf 7f fe 73 00 72 4f 9e a4 b6 b6 96 c5 8b 16 11 13 1b cb 7d f7 dd 47 78 78 38 e1 61 61 94 96 96 92 92 92 42 49 69 29 8f 3c fc 30 89 49 49 d8 ed 76 fe f0 87 3f 70 fe fc 79 2a 2a 2a c8 ca ca e2 9e 7b ee 01 e0 ad b7 df e6 f8 89 13 ac 58 be 1c ab d5 ca 6d b7 dd 46 60 60 20 87 8f 1c e1 62 73 33 65 65 65 fc e7 7f fe 27 51 91 91 b4 b6 b6 f2 c2 0b 2f 90 7d dd 75 92 26 35 36 36 c6 8d 37 dc c0 9a 35 6b 00 58 bf 7e 3d 75 75 75 04 04 04 10 1e 1e ce 5d Data Ascii: rR[[K?K.eYv6#55Zz5onbddq,oYn/mSO/ VYz5CcsrO}Gxx8aaBIi)<0IIv?py**{XmF`` bs3eee'Q/}u&56675kX~=uuu]
2024-04-25 18:48:17 UTC	3101	IN	Data Raw: 91 91 c1 f1 e3 c7 e9 eb eb c3 64 32 21 78 3c 98 da db 51 28 95 68 34 1a a2 a3 a3 a9 a8 a8 e0 df 7e f6 33 6f 2c fa 82 02 0e 1d 3a c4 e2 c5 8b 19 1b 1b 23 21 21 81 1f de 7f 3f 16 8b 85 a7 9e 7a 8a c1 c1 41 1e 7a e8 21 dc 1e 0f 8f 3c fc f0 34 bf 8d 95 2b 57 72 c7 b7 be c5 9c 39 73 58 b6 6c 19 a7 f2 f2 a8 af af e7 37 8f 3d 86 bf bf 3f 27 72 73 79 ff c0 01 66 65 66 62 98 d0 d4 0f 1f 3e cc 8c 90 10 1e 7b ec 31 00 9e 7a ea 29 ce 9f 3f cf f7 be fb 5d 5e 7e e5 15 86 87 86 18 1e 1e e6 de 7b ee c1 e5 72 d1 d1 d1 e1 cd 2b 7e eb ad 8c 8d 8d f1 c4 13 4f 70 e6 cc 19 2a 2b 2b 49 4e 4e e6 de 7b ef 05 e0 0f 4f 3e 49 6e 6e 2e c9 c9 c9 58 ad 56 7e fe e8 a3 52 8a d4 3b ef bc 93 c0 a0 20 be 7e cb 2d 52 d9 fd fd fd f9 e1 7d f7 61 34 1a f9 c5 cf 7f 0e 80 6d 6c 8c 39 b3 67 f3 6f Data Ascii: d2!x<Q(h4~3o,:#!!?zAz!<4+Wr9sXl7=?'rsyfefb>{1z)?]^~{r+~Op*++INN{O>Inn.XV~R; ~-R}a4ml9go
2024-04-25 18:48:17 UTC	10674	IN	Data Raw: de 9d aa aa 2a 1c 0e 07 97 8d 1d 4b 58 58 18 11 11 11 cc 9c 35 8b e5 cb 97 93 dd b3 27 0d 0d 0d 28 4d ef 65 97 2e 5d e8 d8 b1 23 86 61 50 58 58 48 66 66 26 1d 3b 76 0c 05 4f 72 72 72 ab cf 4a e7 ce 9d 99 3b 77 2e fb f6 ed e3 8a 2b ae 20 39 29 89 77 df 7b 8f 05 0b 16 d0 25 25 85 db 6f bf 3d d4 15 01 04 4f 72 1a 1b 99 f1 e6 9b 2c 5a b4 88 5e 39 39 f4 57 d4 27 dc 00 00 20 00 49 44 41 54 ea d5 8b 85 0b 17 32 7e dc 38 b2 7b f4 40 37 0c 76 ee dc 49 6a 5a 1a fb f7 ef 27 25 39 99 0f 3f fa 88 2d 9b 37 73 d3 cd 37 d3 a3 47 0f 32 32 32 a8 ac ac 64 d6 cc 99 6c da b4 89 09 e3 c7 73 e9 a5 97 52 51 51 41 63 63 23 fd fb f7 0f 7d 46 93 92 93 59 b4 68 11 5b b7 6c 61 c8 90 21 a1 93 d7 88 a6 11 ed 73 e6 cc 21 2b 2b 0b af d7 4b 87 0e 1d 48 4b 4b 0b bd fe ae 5d bb 92 9d 9d 4d Data Ascii: *KXX5'(Me.]#aPXXHff&;vOrrrJ;w.+ 9)w{%%o=Or,Z^99W' IDAT2~8{@7vIjZ'%9?-7s7G222dlsRQQAcc#}FYh[la!s!++KHKK]M
2024-04-25 18:48:17 UTC	5076	IN	Data Raw: b8 a0 45 4f 97 38 03 24 d0 4f 82 a2 40 f7 6c 0d bf 1f 36 ac 6e db 5d c8 84 10 e2 87 a4 30 cf e4 db ad 26 89 89 0a 5d d2 24 72 ce 24 39 ba 27 69 c0 60 8d b0 70 85 ef 76 98 6c dd 24 b5 74 21 84 38 96 65 8b 75 3c f5 16 19 99 2a 29 12 e8 67 94 1c dd 93 d4 b5 bb ca e0 8b 35 ca 4b 2d 3e 98 e5 a7 ae f6 ac 5c f5 27 84 10 17 9c e5 8b 75 96 2f d6 09 8f 54 b8 6c a2 0d 55 12 e7 8c 92 c3 7b 92 6c 36 b8 6a aa 8d b4 0c 95 6d 9b 4d de 78 21 40 7d 9d 84 ba 10 42 b4 b4 61 b5 c1 db 6f 04 f0 36 c2 98 71 1a 7d 07 69 e7 ba 48 ed 9e 04 7a 1b a4 77 55 b9 fd 3e 3b 71 1d 14 96 2e 32 78 ea cf 7e b6 6c 94 e6 77 21 84 a8 ad b1 f8 f0 ed 00 cf ff cb 4f 59 89 c5 c5 a3 6c 5c 77 8b bd cd 97 fa 8a 13 27 d7 a1 b7 d1 c0 21 1a d3 1f 72 30 e3 c5 00 1b d7 1a 14 ef 35 c9 ea a9 32 70 88 46 5a ba Data Ascii: EO8$O@l6n]0&]$r$9'i`pvl$t!8eu<*)g5K->\'u/TlU{l6jmMx!@}Bao6q}iHzwU>;q.2x~lw!OYl\w'!r052pFZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.6	50016	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:17 UTC	1123	OUT	GET /en-us/sharefile/media/int-export-1-sf.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:17 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 48081 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:17 GMT Etag: "342e58ad2ad1ed33d90e60baeca47518-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CGKS4Z23NS3AFRP2TY2S X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:17 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 9e 08 06 00 00 00 62 b9 f3 b6 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 12 0f 22 2c 15 45 bb 75 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 55 75 82 ff ff d7 29 b7 e5 e6 de f4 5e 80 10 42 e8 20 1d a4 88 a0 82 28 38 80 08 8e 52 04 75 c6 b2 ce 6f 76 9d b2 b3 8f 75 74 67 7f b3 33 ee ce b8 ea cc 58 66 2d a0 cc c8 28 43 57 41 90 40 28 d2 7b 0f a4 87 90 7a 53 6e ee bd a7 7c ff 08 89 04 12 da 20 29 7c 9e 8f 87 0f c9 2d e7 7c ee b9 f7 9c f7 f9 94 f3 39 d2 ab af be 6a 22 b4 0b 92 24 e1 0f 04 c8 2f 28 24 31 3e 0e 8b c5 82 69 8a af 4f 10 84 b6 47 96 65 6a bd 5e ce 15 9f 27 39 31 01 59 96 c5 f1 ea 3b 26 b7 76 01 84 6b 67 9a 26 36 ab 15 67 50 10 e7 Data Ascii: PNGIHDRbpHYsttfxtIME",Eu IDATxw\|Uu)^B (8Ruovutg3Xf-(CWA@({zSn\| )\|-\|9j"$/($1>iOGej^'91Y;&vkg&6gP
2024-04-25 18:48:17 UTC	2372	IN	Data Raw: 82 d0 75 1d 6f 5d 1d 3e 9f 8f 40 40 c3 6f e8 ad 5d 44 41 10 da 3d 09 45 91 b1 5a ad b8 5c 2e 1c 76 7b e3 28 76 d1 c4 de fa 44 a0 77 30 46 7d 3b 3c 92 24 11 ec 74 e2 0a 0e 6e ec eb 12 04 41 f8 47 35 8c df 31 0d 53 d4 c8 db 18 11 e8 1d 98 d8 d1 04 41 10 6e 1f e2 b2 35 41 10 04 41 e8 00 44 a0 0b 82 20 08 42 07 20 02 5d 10 04 41 10 3a 00 11 e8 82 20 08 82 d0 01 88 40 17 04 41 10 84 0e 40 04 ba 20 08 82 20 74 00 22 d0 05 41 10 04 a1 03 10 81 2e 08 82 20 08 1d 80 08 74 41 10 04 41 e8 00 6e ab 99 e2 c4 ed 44 05 41 10 da 37 71 e7 c8 96 a9 1d 25 e4 3a ca e7 10 04 41 10 5a 76 ad c7 fa db 31 f8 55 9f cf d7 da 65 b8 21 22 c0 05 41 10 84 6b 75 3b 04 bc aa 28 4a 6b 97 e1 9a 5c 1a e0 0d 7f df 0e 5f 92 20 08 82 70 63 9a cb 8a 8e 9a 1b aa 2c b7 8f 71 71 a2 46 2e 08 82 20 Data Ascii: uo]>@@o]DA=EZ\.v{(vDw0F};<$tnAG51SAn5AAD B ]A: @A@ t"A. tAAnDA7q%:AZv1Ue!"Aku;(Jk\_ pc,qqF.
2024-04-25 18:48:17 UTC	538	IN	Data Raw: 64 15 2b 1a 32 fa cd da 0e d7 cd 34 4d 64 59 6e 31 cc 01 fe ff 5f ff 9a 82 82 02 26 4c 98 c0 6f 7e fb 5b 06 0e 1c c8 90 21 43 90 65 19 c3 30 58 b6 6c 19 b3 67 cf a6 7b 5a 1a a7 4e 9d e2 8b 2f be 20 2e 2e 8e 9e 3d 7b d2 af 5f 3f 3e 5c b4 88 0d 1b 37 32 61 fc 78 02 81 00 9f 7d f6 19 81 40 80 81 83 06 35 9e ca e8 7a 33 db 40 92 f0 78 3c d4 d5 d5 61 b7 db bf 9b 0d 20 08 82 20 b4 29 17 02 5d c2 62 b3 52 53 74 9a 6d 19 19 7c 73 f8 28 e7 ca bc 4d 5e 28 5b 82 49 48 49 63 d0 f0 91 0c e9 9b 86 43 f6 5f 56 7b b6 da ed 78 b3 0f f1 d7 d7 3f e0 54 c0 20 ac fb 50 9e 9c fb 28 f1 76 3f fe 66 2a 8d 8a c5 86 bf ec 2c 5f ad fb 82 6d fb 8e 53 ee bd 28 b8 6d 6e 52 7b 0f 62 c2 f8 31 a4 44 3a f0 fb 03 f5 e5 50 2c 50 57 ca ce cd 1b 78 e8 7b df 23 3a 36 fe a6 6e 90 6b 61 9a 26 86 Data Ascii: d+24MdYn1_&Lo~[!Ce0Xlg{ZN/ ..={_?>\72ax}@5z3@x<a )]bRStm\|s(M^([IHIcC_V{x?T P(v?f*,_mS(mnR{b1D:P,PWx{#:6nka&
2024-04-25 18:48:17 UTC	4744	IN	Data Raw: fd 2a 8a 42 ff 7e fd 28 2f 2b 63 c3 86 0d 18 86 81 44 fd 84 33 12 50 5c 5c cc aa d5 ab 79 68 ea 54 9e 78 e2 09 42 dc 6e 5e 7e e5 15 7e fe b3 9f b1 61 c3 06 7a f7 ee 8d 69 9a 3c f5 e4 93 24 25 25 f1 fa 1b 6f 10 13 13 c3 2b 2f bf cc 94 29 53 00 e8 d5 ab 17 9f 7d f6 19 7f fc c3 1f f8 72 dd 3a 22 23 22 78 f3 cd 37 99 35 6b 16 56 8b 05 d5 62 61 d0 a0 41 24 27 27 37 29 9b d5 62 e1 a5 97 5e c2 e9 74 f2 d5 86 0d 9c bf d0 a7 2f 08 82 20 74 6c d2 ef 5e 7b dd f4 15 1f e2 c3 f7 16 71 a4 a0 16 14 1b c9 3d 87 30 76 e4 20 ba 24 46 13 64 91 a8 2e 2b e4 d4 e1 5d 6c da bc 9b 82 ca 3a 50 dc 0c 9f f2 28 d3 c6 f6 c4 a6 d5 72 f2 f8 61 4e 9d 2d a2 bc f0 24 7b 0e 9f 21 20 5b 91 02 7e c2 7a 0c e7 89 c7 67 d5 d7 d0 b5 8b 6a f3 92 8c 4d d5 d8 bd 66 11 1f 7d 79 08 4d b2 10 97 7a 07 Data Ascii: *B~(/+cD3P\\yhTxBn^~~azi<$%%o+/)S}r:"#"x75kVbaA$''7)b^t/ tl^{q=0v $Fd.+]l:P(raN-${! [~zgjMf}yMz
2024-04-25 18:48:17 UTC	5930	IN	Data Raw: 19 c4 c6 c6 32 64 c8 20 54 d5 82 df df fc f5 e6 a6 69 a2 5a 2c 28 6a cb 5d 76 a6 69 12 e2 72 37 5b 53 f6 f9 02 a8 aa 8a 24 d5 ef 97 56 ab 15 c3 30 a8 ab fb 76 80 ab 3f e0 47 96 64 6c 36 1b a5 65 e5 8d 8f eb 86 81 61 1a a8 16 15 e5 c2 49 7d 03 e3 c2 f5 ba 2d 7d 4e e1 e6 13 81 7e 03 a2 e3 24 82 5d 10 08 70 c5 c9 64 64 b9 be 09 fe 4a 99 a5 eb 10 1a 0e 11 91 2d bf 48 d3 34 ea 2e d4 aa cb cb cb f9 64 e9 52 4c d3 64 e8 d0 a1 78 3c 1e 62 62 63 19 30 60 00 5d bb 76 65 d3 a6 4d d4 d6 d6 72 fc f8 71 96 2f 5f ce 8f 5e 78 81 29 53 a6 f0 d2 2f 7f 49 71 71 31 c1 c1 c1 94 96 95 51 57 57 87 aa aa 8d c1 aa eb 7a e3 25 2d 0d eb 34 4d 93 82 82 02 5c 6e 37 53 a7 4c 21 2f 2f 8f b3 d9 d9 0c b9 a8 56 5e 54 54 74 e1 73 e8 f8 fd 7e 7a f6 ec c9 f2 e5 cb 59 b7 6e 1d 63 c7 8c 61 c5 Data Ascii: 2d TiZ,(j]vir7[S$V0v?Gdl6eaI}-}N~$]pddJ-H4.dRLdx<bbc0`]veMrq/_^x)S/Iqq1QWWz%-4M\n7SL!//V^TTts~zYnca
2024-04-25 18:48:17 UTC	7116	IN	Data Raw: bc a1 6c aa aa 62 b3 db 39 72 e4 08 21 a1 a1 cc 98 31 83 d8 d8 58 1e 7b ec 31 06 0c 18 80 61 18 3c fc f0 c3 0c 1e 3c 98 93 27 4f 62 52 df 77 2e 4b 12 91 91 91 b8 dd 6e e2 e2 e2 b0 5a ad 8d 21 b7 7b d7 2e 46 8e 1c c9 b0 61 c3 e8 d4 a9 13 73 e7 ce 25 37 27 87 82 82 02 12 13 13 79 e0 81 07 88 8b 8d 65 fc f8 f1 48 92 84 a7 aa ea 1a 8f 96 c2 ad 54 ff 0b 41 42 92 64 30 74 4c d3 c0 12 9a c0 d0 d4 74 62 5d 32 9a 6e 22 c9 2a aa 22 23 9b 01 94 d0 ce 0c 19 16 47 79 49 3e a7 4f 1f a0 f0 5c 2a fd fb 25 5f 18 d9 de d0 17 67 20 5b dd f4 bc 63 28 35 9e 32 ce 64 9d 61 6f 41 21 bd fa f6 26 d4 a1 60 b4 f3 7e f4 40 20 40 54 64 24 73 e6 cc 69 b2 03 37 e8 9e 9e 4e 4e 4e 0e 49 c9 c9 40 7d 9f 65 54 54 14 41 17 bd 36 28 28 88 aa ea 6a 34 5d 27 f8 92 83 80 69 9a 68 9a 46 78 58 58 Data Ascii: lb9r!1X{1a<<'ObRw.KnZ!{.Fas%7'yeHTABd0tLtb]2n""#GyI>O\%_g [c(52daoA!&`~@ @Td$si7NNNI@}eTTA6((j4]'ihFxXX
2024-04-25 18:48:17 UTC	8302	IN	Data Raw: d3 f9 f9 04 04 06 72 ef bd f7 52 5b 5b 4b 7f 7f 3f 4b 97 2e 65 59 76 36 eb d6 ad 23 35 35 f5 aa f7 5a bd 7a 35 6f 6e df 8e cb e5 62 64 64 84 71 bb 9d ac ac 2c b6 6f df ce ea d5 ab 59 b7 6e 1d 00 2f 6d de cc a9 53 a7 08 0d 0b c3 cf cf 4f fa bd af af 2f 82 20 a0 56 ab 59 bd 7a 35 2a 95 0a f1 43 1e c8 63 c7 8e 11 16 1a ca cf 7f fe 73 00 72 4f 9e a4 b6 b6 96 c5 8b 16 11 13 1b cb 7d f7 dd 47 78 78 38 e1 61 61 94 96 96 92 92 92 42 49 69 29 8f 3c fc 30 89 49 49 d8 ed 76 fe f0 87 3f 70 fe fc 79 2a 2a 2a c8 ca ca e2 9e 7b ee 01 e0 ad b7 df e6 f8 89 13 ac 58 be 1c ab d5 ca 6d b7 dd 46 60 60 20 87 8f 1c e1 62 73 33 65 65 65 fc e7 7f fe 27 51 91 91 b4 b6 b6 f2 c2 0b 2f 90 7d dd 75 92 26 35 36 36 c6 8d 37 dc c0 9a 35 6b 00 58 bf 7e 3d 75 75 75 04 04 04 10 1e 1e ce 5d Data Ascii: rR[[K?K.eYv6#55Zz5onbddq,oYn/mSO/ VYz5CcsrO}Gxx8aaBIi)<0IIv?py**{XmF`` bs3eee'Q/}u&56675kX~=uuu]
2024-04-25 18:48:17 UTC	3101	IN	Data Raw: 91 91 c1 f1 e3 c7 e9 eb eb c3 64 32 21 78 3c 98 da db 51 28 95 68 34 1a a2 a3 a3 a9 a8 a8 e0 df 7e f6 33 6f 2c fa 82 02 0e 1d 3a c4 e2 c5 8b 19 1b 1b 23 21 21 81 1f de 7f 3f 16 8b 85 a7 9e 7a 8a c1 c1 41 1e 7a e8 21 dc 1e 0f 8f 3c fc f0 34 bf 8d 95 2b 57 72 c7 b7 be c5 9c 39 73 58 b6 6c 19 a7 f2 f2 a8 af af e7 37 8f 3d 86 bf bf 3f 27 72 73 79 ff c0 01 66 65 66 62 98 d0 d4 0f 1f 3e cc 8c 90 10 1e 7b ec 31 00 9e 7a ea 29 ce 9f 3f cf f7 be fb 5d 5e 7e e5 15 86 87 86 18 1e 1e e6 de 7b ee c1 e5 72 d1 d1 d1 e1 cd 2b 7e eb ad 8c 8d 8d f1 c4 13 4f 70 e6 cc 19 2a 2b 2b 49 4e 4e e6 de 7b ef 05 e0 0f 4f 3e 49 6e 6e 2e c9 c9 c9 58 ad 56 7e fe e8 a3 52 8a d4 3b ef bc 93 c0 a0 20 be 7e cb 2d 52 d9 fd fd fd f9 e1 7d f7 61 34 1a f9 c5 cf 7f 0e 80 6d 6c 8c 39 b3 67 f3 6f Data Ascii: d2!x<Q(h4~3o,:#!!?zAz!<4+Wr9sXl7=?'rsyfefb>{1z)?]^~{r+~Op*++INN{O>Inn.XV~R; ~-R}a4ml9go
2024-04-25 18:48:17 UTC	10674	IN	Data Raw: 38 1c 0e ae 1f 3a 94 c0 c0 40 82 83 83 99 31 73 26 2b 57 ae a4 43 c7 8e 54 56 56 a2 d4 7e 96 cd 9b 37 27 36 36 16 c3 30 c8 cc cc a4 4d 9b 36 c4 c6 c6 fa 83 27 31 31 b1 c1 77 25 3e 3e 9e 79 f3 e6 91 9d 9d cd 0d 37 dc 40 62 42 02 1f cd 9e cd c2 85 0b 69 9e 94 c4 3d f7 dc e3 ef 8a 00 7c 07 39 55 55 4c 9b 3e 9d 25 4b 96 d0 29 35 95 4e 9d 3a f1 f5 d7 5f 7b 6b db 0d 00 00 20 00 49 44 41 54 33 fc c6 1b e9 d0 be 3d ba 61 b0 67 cf 1e 5a b4 6c 49 6e 6e 2e 49 89 89 7c fa d9 67 6c db ba 95 db ef b8 83 f6 ed db 93 92 92 42 51 51 11 33 67 cc 60 cb 96 2d 8c 18 3e 9c 6b af bd 96 a3 47 8f 52 55 55 45 f7 ee dd fd df d1 84 c4 44 96 2c 59 c2 f6 6d db e8 d3 a7 8f ff e0 35 b8 76 44 fb 9c 39 73 68 db b6 2d 35 35 35 44 47 47 d3 b2 65 4b ff f6 b7 6a d5 8a 0e 1d 3a e0 f5 7a 99 3a Data Ascii: 8:@1s&+WCTVV~7'660M6'11w%>>y7@bBi=\|9UUL>%K)5N:_{k IDAT3=agZlInn.I\|glBQQ3g`->kGRUUED,Ym5vD9sh-555DGGeKj:z:
2024-04-25 18:48:17 UTC	4639	IN	Data Raw: d1 52 a9 b9 d4 24 d0 2f 00 55 85 f6 9d 54 da 77 52 01 3b e5 65 e0 ae 91 81 72 42 88 a6 cf c2 f7 1b 18 12 a2 e0 08 b8 dc a5 f9 61 93 40 bf 08 42 42 21 24 54 8e 4e 85 10 42 5c 3a 32 ca 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 2e 9f 7a 91 e4 1f 31 29 2d 01 b7 db c2 32 41 b9 02 ae a6 6a 59 a0 a8 e0 74 2a 84 45 40 6c b3 4b 7b 3c 67 9a 90 73 d8 a4 e8 18 54 57 59 98 97 68 bf d4 6d b7 2b 50 21 2a 0a 12 9a ab 68 da c5 7f 5f 21 84 b8 94 24 d0 2f a0 ca 4a 8b b5 ab 0c b6 6c 30 c9 cd 32 29 2a b2 a8 a9 Data Ascii: R$/UTwR;erBa@BB!$TNB\:2]!h$B&@]!h$B&@]!h$B&@]!h$B&@]!h$B&@]!h$B&@]!h$B&@.z1)-2AjYtE@lK{<gsTWYhm+P!h_!$/Jl02)*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.6	50018	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:17 UTC	1122	OUT	GET /en-us/sharefile/media/int-export-1-x.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:17 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 47350 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:17 GMT Etag: "6f11d28133ccc8894c4e20dd0b6e6a39-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CH48QZTENDQ0NKN3MC7D X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:17 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 9e 08 06 00 00 00 62 b9 f3 b6 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 12 0f 24 1f fc cf 7d e5 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 55 75 82 ff ff d7 29 b7 e5 e6 de f4 5e 80 10 42 e8 20 1d a4 88 a0 82 28 38 80 08 8e 52 04 75 c6 b2 ce 6f 76 9d b2 b3 8f 75 74 67 7f b3 33 ee ce b8 ea cc 58 66 2d a0 cc c8 28 43 57 41 90 40 28 d2 7b 0f a4 87 90 7a 53 6e ee bd a7 7c ff 08 89 04 12 da 20 29 7c 9e 8f 87 0f c9 2d e7 7c ee b9 f7 9c f7 f9 94 f3 39 d2 ab af be 6a 22 b4 0b 92 24 e1 0f 04 c8 2f 28 24 31 3e 0e 8b c5 82 69 8a af 4f 10 84 b6 47 96 65 6a bd 5e ce 15 9f 27 39 31 01 59 96 c5 f1 ea 3b 26 b7 76 01 84 6b 67 9a 26 36 ab 15 67 50 10 e7 Data Ascii: PNGIHDRbpHYsttfxtIME$} IDATxw\|Uu)^B (8Ruovutg3Xf-(CWA@({zSn\| )\|-\|9j"$/($1>iOGej^'91Y;&vkg&6gP
2024-04-25 18:48:17 UTC	2372	IN	Data Raw: 82 d0 75 1d 6f 5d 1d 3e 9f 8f 40 40 c3 6f e8 ad 5d 44 41 10 da 3d 09 45 91 b1 5a ad b8 5c 2e 1c 76 7b e3 28 76 d1 c4 de fa 44 a0 77 30 46 7d 3b 3c 92 24 11 ec 74 e2 0a 0e 6e ec eb 12 04 41 f8 47 35 8c df 31 0d 53 d4 c8 db 18 11 e8 1d 98 d8 d1 04 41 10 6e 1f e2 b2 35 41 10 04 41 e8 00 44 a0 0b 82 20 08 42 07 20 02 5d 10 04 41 10 3a 00 11 e8 82 20 08 82 d0 01 88 40 17 04 41 10 84 0e 40 04 ba 20 08 82 20 74 00 22 d0 05 41 10 04 a1 03 10 81 2e 08 82 20 08 1d 80 08 74 41 10 04 41 e8 00 6e ab 99 e2 c4 ed 44 05 41 10 da 37 71 e7 c8 96 a9 1d 25 e4 3a ca e7 10 04 41 10 5a 76 ad c7 fa db 31 f8 55 9f cf d7 da 65 b8 21 22 c0 05 41 10 84 6b 75 3b 04 bc aa 28 4a 6b 97 e1 9a 5c 1a e0 0d 7f df 0e 5f 92 20 08 82 70 63 9a cb 8a 8e 9a 1b aa 2c b7 8f 71 71 a2 46 2e 08 82 20 Data Ascii: uo]>@@o]DA=EZ\.v{(vDw0F};<$tnAG51SAn5AAD B ]A: @A@ t"A. tAAnDA7q%:AZv1Ue!"Aku;(Jk\_ pc,qqF.
2024-04-25 18:48:17 UTC	538	IN	Data Raw: 64 15 2b 1a 32 fa cd da 0e d7 cd 34 4d 64 59 6e 31 cc 01 fe ff 5f ff 9a 82 82 02 26 4c 98 c0 6f 7e fb 5b 06 0e 1c c8 90 21 43 90 65 19 c3 30 58 b6 6c 19 b3 67 cf a6 7b 5a 1a a7 4e 9d e2 8b 2f be 20 2e 2e 8e 9e 3d 7b d2 af 5f 3f 3e 5c b4 88 0d 1b 37 32 61 fc 78 02 81 00 9f 7d f6 19 81 40 80 81 83 06 35 9e ca e8 7a 33 db 40 92 f0 78 3c d4 d5 d5 61 b7 db bf 9b 0d 20 08 82 20 b4 29 17 02 5d c2 62 b3 52 53 74 9a 6d 19 19 7c 73 f8 28 e7 ca bc 4d 5e 28 5b 82 49 48 49 63 d0 f0 91 0c e9 9b 86 43 f6 5f 56 7b b6 da ed 78 b3 0f f1 d7 d7 3f e0 54 c0 20 ac fb 50 9e 9c fb 28 f1 76 3f fe 66 2a 8d 8a c5 86 bf ec 2c 5f ad fb 82 6d fb 8e 53 ee bd 28 b8 6d 6e 52 7b 0f 62 c2 f8 31 a4 44 3a f0 fb 03 f5 e5 50 2c 50 57 ca ce cd 1b 78 e8 7b df 23 3a 36 fe a6 6e 90 6b 61 9a 26 86 Data Ascii: d+24MdYn1_&Lo~[!Ce0Xlg{ZN/ ..={_?>\72ax}@5z3@x<a )]bRStm\|s(M^([IHIcC_V{x?T P(v?f*,_mS(mnR{b1D:P,PWx{#:6nka&
2024-04-25 18:48:17 UTC	4744	IN	Data Raw: fd 2a 8a 42 ff 7e fd 28 2f 2b 63 c3 86 0d 18 86 81 44 fd 84 33 12 50 5c 5c cc aa d5 ab 79 68 ea 54 9e 78 e2 09 42 dc 6e 5e 7e e5 15 7e fe b3 9f b1 61 c3 06 7a f7 ee 8d 69 9a 3c f5 e4 93 24 25 25 f1 fa 1b 6f 10 13 13 c3 2b 2f bf cc 94 29 53 00 e8 d5 ab 17 9f 7d f6 19 7f fc c3 1f f8 72 dd 3a 22 23 22 78 f3 cd 37 99 35 6b 16 56 8b 05 d5 62 61 d0 a0 41 24 27 27 37 29 9b d5 62 e1 a5 97 5e c2 e9 74 f2 d5 86 0d 9c bf d0 a7 2f 08 82 20 74 6c d2 ef 5e 7b dd f4 15 1f e2 c3 f7 16 71 a4 a0 16 14 1b c9 3d 87 30 76 e4 20 ba 24 46 13 64 91 a8 2e 2b e4 d4 e1 5d 6c da bc 9b 82 ca 3a 50 dc 0c 9f f2 28 d3 c6 f6 c4 a6 d5 72 f2 f8 61 4e 9d 2d a2 bc f0 24 7b 0e 9f 21 20 5b 91 02 7e c2 7a 0c e7 89 c7 67 d5 d7 d0 b5 8b 6a f3 92 8c 4d d5 d8 bd 66 11 1f 7d 79 08 4d b2 10 97 7a 07 Data Ascii: *B~(/+cD3P\\yhTxBn^~~azi<$%%o+/)S}r:"#"x75kVbaA$''7)b^t/ tl^{q=0v $Fd.+]l:P(raN-${! [~zgjMf}yMz
2024-04-25 18:48:18 UTC	5930	IN	Data Raw: 19 c4 c6 c6 32 64 c8 20 54 d5 82 df df fc f5 e6 a6 69 a2 5a 2c 28 6a cb 5d 76 a6 69 12 e2 72 37 5b 53 f6 f9 02 a8 aa 8a 24 d5 ef 97 56 ab 15 c3 30 a8 ab fb 76 80 ab 3f e0 47 96 64 6c 36 1b a5 65 e5 8d 8f eb 86 81 61 1a a8 16 15 e5 c2 49 7d 03 e3 c2 f5 ba 2d 7d 4e e1 e6 13 81 7e 03 a2 e3 24 82 5d 10 08 70 c5 c9 64 64 b9 be 09 fe 4a 99 a5 eb 10 1a 0e 11 91 2d bf 48 d3 34 ea 2e d4 aa cb cb cb f9 64 e9 52 4c d3 64 e8 d0 a1 78 3c 1e 62 62 63 19 30 60 00 5d bb 76 65 d3 a6 4d d4 d6 d6 72 fc f8 71 96 2f 5f ce 8f 5e 78 81 29 53 a6 f0 d2 2f 7f 49 71 71 31 c1 c1 c1 94 96 95 51 57 57 87 aa aa 8d c1 aa eb 7a e3 25 2d 0d eb 34 4d 93 82 82 02 5c 6e 37 53 a7 4c 21 2f 2f 8f b3 d9 d9 0c b9 a8 56 5e 54 54 74 e1 73 e8 f8 fd 7e 7a f6 ec c9 f2 e5 cb 59 b7 6e 1d 63 c7 8c 61 c5 Data Ascii: 2d TiZ,(j]vir7[S$V0v?Gdl6eaI}-}N~$]pddJ-H4.dRLdx<bbc0`]veMrq/_^x)S/Iqq1QWWz%-4M\n7SL!//V^TTts~zYnca
2024-04-25 18:48:18 UTC	7116	IN	Data Raw: bc a1 6c aa aa 62 b3 db 39 72 e4 08 21 a1 a1 cc 98 31 83 d8 d8 58 1e 7b ec 31 06 0c 18 80 61 18 3c fc f0 c3 0c 1e 3c 98 93 27 4f 62 52 df 77 2e 4b 12 91 91 91 b8 dd 6e e2 e2 e2 b0 5a ad 8d 21 b7 7b d7 2e 46 8e 1c c9 b0 61 c3 e8 d4 a9 13 73 e7 ce 25 37 27 87 82 82 02 12 13 13 79 e0 81 07 88 8b 8d 65 fc f8 f1 48 92 84 a7 aa ea 1a 8f 96 c2 ad 54 ff 0b 41 42 92 64 30 74 4c d3 c0 12 9a c0 d0 d4 74 62 5d 32 9a 6e 22 c9 2a aa 22 23 9b 01 94 d0 ce 0c 19 16 47 79 49 3e a7 4f 1f a0 f0 5c 2a fd fb 25 5f 18 d9 de d0 17 67 20 5b dd f4 bc 63 28 35 9e 32 ce 64 9d 61 6f 41 21 bd fa f6 26 d4 a1 60 b4 f3 7e f4 40 20 40 54 64 24 73 e6 cc 69 b2 03 37 e8 9e 9e 4e 4e 4e 0e 49 c9 c9 40 7d 9f 65 54 54 14 41 17 bd 36 28 28 88 aa ea 6a 34 5d 27 f8 92 83 80 69 9a 68 9a 46 78 58 58 Data Ascii: lb9r!1X{1a<<'ObRw.KnZ!{.Fas%7'yeHTABd0tLtb]2n""#GyI>O\%_g [c(52daoA!&`~@ @Td$si7NNNI@}eTTA6((j4]'ihFxXX
2024-04-25 18:48:18 UTC	8302	IN	Data Raw: d3 f9 f9 04 04 06 72 ef bd f7 52 5b 5b 4b 7f 7f 3f 4b 97 2e 65 59 76 36 eb d6 ad 23 35 35 f5 aa f7 5a bd 7a 35 6f 6e df 8e cb e5 62 64 64 84 71 bb 9d ac ac 2c b6 6f df ce ea d5 ab 59 b7 6e 1d 00 2f 6d de cc a9 53 a7 08 0d 0b c3 cf cf 4f fa bd af af 2f 82 20 a0 56 ab 59 bd 7a 35 2a 95 0a f1 43 1e c8 63 c7 8e 11 16 1a ca cf 7f fe 73 00 72 4f 9e a4 b6 b6 96 c5 8b 16 11 13 1b cb 7d f7 dd 47 78 78 38 e1 61 61 94 96 96 92 92 92 42 49 69 29 8f 3c fc 30 89 49 49 d8 ed 76 fe f0 87 3f 70 fe fc 79 2a 2a 2a c8 ca ca e2 9e 7b ee 01 e0 ad b7 df e6 f8 89 13 ac 58 be 1c ab d5 ca 6d b7 dd 46 60 60 20 87 8f 1c e1 62 73 33 65 65 65 fc e7 7f fe 27 51 91 91 b4 b6 b6 f2 c2 0b 2f 90 7d dd 75 92 26 35 36 36 c6 8d 37 dc c0 9a 35 6b 00 58 bf 7e 3d 75 75 75 04 04 04 10 1e 1e ce 5d Data Ascii: rR[[K?K.eYv6#55Zz5onbddq,oYn/mSO/ VYz5CcsrO}Gxx8aaBIi)<0IIv?py**{XmF`` bs3eee'Q/}u&56675kX~=uuu]
2024-04-25 18:48:18 UTC	3101	IN	Data Raw: 91 91 c1 f1 e3 c7 e9 eb eb c3 64 32 21 78 3c 98 da db 51 28 95 68 34 1a a2 a3 a3 a9 a8 a8 e0 df 7e f6 33 6f 2c fa 82 02 0e 1d 3a c4 e2 c5 8b 19 1b 1b 23 21 21 81 1f de 7f 3f 16 8b 85 a7 9e 7a 8a c1 c1 41 1e 7a e8 21 dc 1e 0f 8f 3c fc f0 34 bf 8d 95 2b 57 72 c7 b7 be c5 9c 39 73 58 b6 6c 19 a7 f2 f2 a8 af af e7 37 8f 3d 86 bf bf 3f 27 72 73 79 ff c0 01 66 65 66 62 98 d0 d4 0f 1f 3e cc 8c 90 10 1e 7b ec 31 00 9e 7a ea 29 ce 9f 3f cf f7 be fb 5d 5e 7e e5 15 86 87 86 18 1e 1e e6 de 7b ee c1 e5 72 d1 d1 d1 e1 cd 2b 7e eb ad 8c 8d 8d f1 c4 13 4f 70 e6 cc 19 2a 2b 2b 49 4e 4e e6 de 7b ef 05 e0 0f 4f 3e 49 6e 6e 2e c9 c9 c9 58 ad 56 7e fe e8 a3 52 8a d4 3b ef bc 93 c0 a0 20 be 7e cb 2d 52 d9 fd fd fd f9 e1 7d f7 61 34 1a f9 c5 cf 7f 0e 80 6d 6c 8c 39 b3 67 f3 6f Data Ascii: d2!x<Q(h4~3o,:#!!?zAz!<4+Wr9sXl7=?'rsyfefb>{1z)?]^~{r+~Op*++INN{O>Inn.XV~R; ~-R}a4ml9go
2024-04-25 18:48:18 UTC	10674	IN	Data Raw: 93 93 93 c3 a0 41 83 e8 d3 a7 0f 45 45 45 d8 6c 36 ae 9c 32 05 a7 d3 49 44 44 04 0b 16 2e 64 ed da b5 f4 eb df 9f f2 f2 72 94 aa f7 b2 6b d7 ae 24 26 26 a2 eb 3a 39 39 39 f4 ea d5 8b c4 c4 c4 60 f0 a4 a4 a4 d4 f8 ac 74 e9 d2 85 a5 4b 97 92 9b 9b cb d5 57 5f 4d 4a 72 32 ef 2e 5a c4 f2 e5 cb e9 9a 9a ca 5d 77 dd 15 ec 8a 00 fc 07 39 15 15 cc 7f e3 0d da 59 9b f8 00 00 20 00 49 44 41 54 56 ae 5c c9 80 8c 0c 06 0c 18 c0 8a 15 2b b8 f6 9a 6b e8 d7 b7 2f 3e 5d 67 ff fe fd 74 eb de 9d bc bc 3c 52 53 52 78 ff 83 0f d8 b9 63 07 b7 dc 7a 2b 7d fb f6 25 3d 3d 9d c2 c2 42 16 2e 58 c0 f6 ed db 99 7a ed b5 5c 71 c5 15 9c 39 73 86 8a 8a 0a 86 0e 1d 1a fc 8c 26 a7 a4 b0 72 e5 4a 76 ed dc c9 a8 51 a3 82 07 af 11 55 23 da 17 2f 5e 4c ef de bd a9 ac ac a4 53 a7 4e 74 ef de Data Ascii: AEEEl62IDD.drk$&&:999`tKW_MJr2.Z]w9Y IDATV\+k/>]gt<RSRxcz+}%==B.Xz\q9s&rJvQU#/^LSNt
2024-04-25 18:48:18 UTC	3908	IN	Data Raw: b5 30 6e 82 46 69 a9 49 44 a4 c2 e6 af 75 be fc cc 87 cf 07 1e b7 89 5e 95 1f 76 bb 7f 54 7c a5 cb 0c d6 ea fd fd f1 0a 53 a6 6a f4 ee ab f1 ea bf 3c d8 1d d0 29 41 c1 ed f1 d7 d4 03 61 6f 0b 53 50 55 f0 78 4c 1c 0e 7f a1 5c 15 26 36 9b 7f 94 7d 65 a5 7f bd 9a c5 bf ad fa 46 de 2b 8a 7f a0 df e6 4c 9d 2b a7 5a 82 4d f1 4d dd 2f 79 b9 06 37 de de f8 93 bc 5e d8 bc 5e 67 df 1e 03 c3 30 e9 9c a4 30 f1 2a 0b 51 17 e0 34 32 dd 07 07 f7 19 38 23 34 22 a3 ea 7f dc e0 e1 2a ef 2d f4 52 51 01 4e 67 ab 17 43 08 21 2e 28 09 f4 16 c8 ce d2 39 73 da 6c b0 49 d9 e7 83 09 93 2d 4c 9b 61 e1 a3 0f bc 6c db 6c 30 78 b8 ca 9c db ad 78 dc 26 ab 3e d3 99 32 cd 42 6a 57 15 af 07 d6 ad f6 51 5c 64 32 76 a2 85 88 48 85 d8 38 85 e3 c7 4c 8e 1f 33 98 38 c5 42 97 54 85 e2 42 2b c7 Data Ascii: 0nFiIDu^vT\|Sj<)AaoSPUxL\&6}eF+L+ZMM/y7^^g00Q428#4"-RQNgC!.(9slI-Lall0xx&>2BjWQ\d2vH8L38BTB+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.6	50019	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:18 UTC	1119	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:48:18 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:18 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CHHQB573F9YGFBGBZ610 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.6	50020	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:18 UTC	1125	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:48:18 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:18 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CHHXVA94SFXDPC4MF6PQ Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.6	50021	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:18 UTC	889	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: sharefile_main sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:18 UTC	420	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1l2k6zia9 X-Cloud-Trace-Context: 0b00f54dfa523453b7a26e3f77f0943b;o=1 Date: Thu, 25 Apr 2024 18:48:18 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:18 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.6	50022	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:18 UTC	1082	OUT	HEAD /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:18 UTC	525	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 19 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 23057345 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:48:18 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CJ0AHKYEA3CB7C3AS1Q0 X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.6	50023	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:18 UTC	1114	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:48:19 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:19 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CJADZDZ0P1KHE97WXW1B Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.6	50025	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:19 UTC	842	OUT	GET /en-us/sharefile/media/int-export-1-frb.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:19 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 50389 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:19 GMT Etag: "29fef73a1717e9cb9c42df816fbbf53b-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CK3QAH0K21A4CRMS15VV X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:19 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 8a 08 06 00 00 00 fa fe b3 3b 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 2c 2a 6d 56 81 fd 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 54 f5 a1 ff ff d7 59 66 cd 64 df 43 16 92 90 40 d8 41 41 40 40 10 41 a3 e0 5e c5 5d ab f6 5e db de d6 5a bf bf d6 7a 6f eb 43 6b ed b5 6e ad d7 ad 45 5c 41 70 61 15 10 91 55 76 50 08 24 ac 21 84 ec fb 9e cc 76 96 df 1f 03 29 11 82 80 60 42 f8 3c 1f 8f 40 72 66 e6 cc 67 ce cc 9c f7 f9 2c e7 73 a4 17 5e 78 c1 44 e8 f6 24 49 a2 a2 b2 0a 45 51 88 8d 89 c2 30 4c 4c 53 bc 75 82 20 74 1d 49 92 90 24 89 f2 8a 4a 14 45 21 26 2a 12 43 ec 97 ba 8c dc d5 05 10 4e 5f 6c 4c 34 7e bf 9f 8a aa 6a 64 49 42 96 a4 ae Data Ascii: PNGIHDR;pHYsttfxtIME,mV IDATxy\|TYfdC@AA@@A^]^ZzoCknE\ApaUvP$!v)`B<@rfg,s^xD$IEQ0LLSu tI$JE!&CN_lL4~jdIB
2024-04-25 18:48:19 UTC	2372	IN	Data Raw: 07 ba 08 6c 41 10 84 9e e9 fb f6 ef 22 f0 3b ba e0 02 5d 04 b8 20 08 82 00 27 cf 83 8b 39 e4 bb 7d a0 8b 00 17 04 41 10 4e d7 77 33 e3 62 0a f8 6e 3b 28 ce 34 4d 11 e6 82 20 08 c2 0f 72 31 e5 88 da 9d 8e 5e 8e df f0 dd a9 5c 82 20 08 42 cf d1 53 f3 45 f5 7a bd 5d 5d 86 76 17 d3 91 94 20 08 82 d0 35 7a 6c a0 77 87 10 ed 0e 65 10 04 41 10 2e 0e c7 32 a7 a7 05 bb aa 28 4a 97 16 40 84 b9 20 08 82 d0 55 7a 52 a8 77 59 a0 8b 20 17 04 41 10 ba 83 9e 12 ea dd fe b4 b5 73 45 1c 40 08 82 20 5c 38 7e cc 90 35 4d b3 47 84 fa 8f 3e ca fd 7c f4 5d 9c 4e 58 f7 84 37 4b 10 04 41 f8 b7 73 bd 5f bf d0 73 e2 47 ad a1 9f 8b 5a f2 b9 ac 69 8b 5a bb 20 08 42 d7 3b db 20 3d d7 93 c8 5c e8 35 f5 0b aa c9 fd 4c 02 58 84 b5 20 08 c2 85 e1 5c cd d9 7e 2e 5a 80 2f e4 50 ff 51 02 fd Data Ascii: lA";] '9}ANw3bn;(4M r1^\ BSEz]]v 5zlweA.2(J@ UzRwY AsE@ \8~5MG>\|]NX7KAs_sGZiZ B; =\5LX \~.Z/PQ
2024-04-25 18:48:19 UTC	538	IN	Data Raw: 1f df e9 e9 5e 77 dd 75 17 77 de 79 e7 39 3b 1d ec 62 ad 78 8a a9 d8 04 41 10 84 f3 ee fb c2 ba bb 9e db 7d 21 11 81 2e 08 82 20 08 3d 80 08 f4 d3 94 9b 9b cb d8 71 e3 c8 ca ca 22 b3 6f 5f fa f6 eb 47 46 66 26 bd 53 53 99 35 6b 56 97 96 ed b3 79 f3 e8 3f 60 00 6b d6 ac e9 d2 72 08 82 20 08 5d 47 f4 a1 9f a6 d6 b6 36 b6 6d df 4e ff ac 2c 46 8e 1c 89 ae eb 98 86 81 a6 69 44 47 47 53 5b 5b 4b 4b 4b 0b bd 7a f5 6a 1f d4 d1 d2 d2 42 6d 6d 2d f1 f1 f1 e8 ba 4e 73 73 33 31 31 31 40 60 d4 a7 d3 e9 24 34 34 f4 84 e7 6a 68 68 a0 a5 a5 85 f0 f0 f0 0e 93 2e d4 d5 d7 23 4b 12 61 61 61 b4 b5 b5 e1 f5 7a 91 24 89 bc bc 3c f6 ee d9 c3 de bd 7b c9 cc cc 24 3a 3a 1a 8b c5 f2 e3 6c 18 41 10 04 a1 5b 10 35 f4 d3 24 cb 32 b2 2c 73 ff fd f7 f3 d6 9b 6f 32 e3 5f ff e2 ed b7 df Data Ascii: ^wuwy9;bxA}!. =q"o_GFf&SS5kVy?`kr ]G6mN,FiDGGS[[KKKzjBmm-Nss3111@`$44jhh.#Kaaaz$<{$::lA[5$2,so2_
2024-04-25 18:48:19 UTC	4744	IN	Data Raw: 84 cf 97 2c e1 ae 3b ef 64 e4 c8 91 ed ad 00 82 20 08 c2 c5 43 04 fa 69 92 00 a7 c3 c1 cc 99 33 79 e7 9d 77 30 8f ce 82 d7 a7 4f 1f 56 ac 58 41 ef de bd 79 f2 0f 7f 60 e7 8e 1d dc 7b cf 3d 20 49 3c fb ec b3 4c 9a 34 a9 7d 1d 86 ae 73 f7 9d 77 f2 ec b3 cf 02 70 db 6d b7 31 6a f4 68 e6 cc 99 43 9f f4 74 66 cd 9a c5 83 0f 3e c8 8c 7f fd 0b 80 9f fd c7 7f 90 9d 9d cd bf 66 cc e0 9e 7b ef c5 6a b1 a0 e9 3a 4f fd e9 4f dc 7f ff fd ed eb 2d 2a 2e e6 b3 79 f3 b8 e5 96 5b b8 ee ba eb 7e cc cd 22 08 82 20 74 13 22 d0 4f 93 09 b8 dd 6e ee bd e7 1e ee b8 e3 0e 74 5d c7 30 0c 6c 36 1b 51 51 51 00 84 86 86 f2 f3 9f ff 9c 9b 6e ba 89 81 83 06 f1 d0 83 0f b6 3f de 30 4d 24 59 66 cc 98 31 ed cb 92 92 92 18 31 62 04 4d 4d 4d 14 14 14 80 69 72 f9 e5 97 b7 df 6e b3 5a b9 6c Data Ascii: ,;d Ci3yw0OVXAy`{= I<L4}swpm1jhCtf>f{j:OO-*.y[~" t"Ont]0l6QQQn?0M$Yf11bMMMirnZl
2024-04-25 18:48:20 UTC	5930	IN	Data Raw: 31 bc fe c6 1b f8 7c 3e a6 4f 9f 8e a6 69 54 54 54 60 51 55 4a 4a 4a 50 14 85 ac ac 2c 0e e4 e7 33 68 50 a0 1f ce 7e b4 f5 60 cd da b5 dc 72 cb 2d 4c 9c 38 11 00 8b aa b2 74 d9 32 fa 66 66 92 98 98 c8 6d b7 dd 46 44 44 04 0e 87 83 f7 de 7b 0f 4d d3 be b7 c9 bf cd ed a6 a5 a5 15 e9 fb 36 a6 20 74 29 93 88 88 70 2c ea a9 77 a5 ba de 79 ab 9d 69 9a b8 5c 2e ac 56 2b 65 65 65 ac 5f bf 81 20 97 8b 41 03 07 74 fa 38 d3 34 31 0c a3 d3 75 aa aa ca be 03 f9 f8 fc 7e 74 c3 40 91 15 c6 5f 3e 9a f8 b8 58 ae bd fa 2a 3e 99 bf 90 6f 73 76 31 f5 9a 29 84 86 86 e0 f3 fb c8 4c 4f 67 f4 65 23 00 88 8c 08 67 fe a2 25 ec 3f 78 88 c6 c6 26 ee bd f3 76 ec 76 3b 19 e9 e9 54 54 55 b1 ff 60 3e 8a aa 32 74 c8 20 46 0c 1f 06 80 2c 4b 84 84 04 93 d9 27 fd bc 37 ef 0b 27 27 02 fd 34 Data Ascii: 1\|>OiTTT`QUJJJP,3hP~`r-L8t2ffmFDD{M6 t)p,wyi\.V+eee_ At841u~t@_>X*>osv1)LOge#g%?x&vv;TTU`>2t F,K'7''4
2024-04-25 18:48:20 UTC	7116	IN	Data Raw: 96 2f 5f ce b5 d9 d9 0c 1c 38 90 f4 f4 74 de 78 e3 0d ae cd ce c6 6a b5 a2 aa 2a ab 56 ad c2 30 4d ae be fa 6a 64 59 a6 a2 a2 82 65 5f 7c c1 d8 b1 63 a9 ae ae e6 d9 67 9f 45 96 65 ae 9e 32 85 b7 de 7a 8b a8 c8 48 ae cd ce a6 b6 b6 96 eb af bf 9e 1d 3b 77 b2 67 ef 5e 7e f9 8b 5f 10 12 12 82 09 7c fe f9 e7 84 86 86 52 5a 5a ca 9f 9f 79 06 97 cb 45 79 79 39 7b f6 ec e9 30 20 70 e0 80 01 4c ba f2 4a 62 62 62 c8 ce ce a6 b1 b1 11 ab d5 8a 2c cb 98 92 84 d5 6a 65 fb 37 df 50 5c 5c cc af 7e f5 2b ec 76 3b 6e 8f 87 4f 3f fd 94 4b 2e b9 04 49 92 b0 5a 2c 5c 7f fd f5 14 17 17 f3 c8 7f fe 27 ba ae b3 6a d5 2a 7e fd ab 5f 91 95 95 05 c0 5f 9e 7b 8e d5 ab 57 33 75 ea d4 c0 e7 4b d3 c8 ce ce 66 c8 e0 c1 78 bd 5e dc 1e 0f 3b 76 ee 64 d4 a8 51 58 2c 16 a6 4d 9b c6 c8 91 Data Ascii: /_8txjV0MjdYe_\|cgEe2zH;wg^~_\|RZZyEyy9{0 pLJbbb,je7P\\~+v;nO?K.IZ,\'j~__{W3uKfx^;vdQX,M
2024-04-25 18:48:20 UTC	8302	IN	Data Raw: 18 8d 46 fe f5 af 7f d1 d0 d0 40 66 66 26 b9 67 cf f2 ee bb ef 62 35 9b c9 da b7 8f 8b 2d 2d 80 5d 98 ec cd ca a2 bd bd 9d a0 a0 20 86 0d 1b f6 7f fa bd b6 6d db c6 aa d5 ab 49 4e 4e c6 c5 d5 95 17 5e 78 01 bd 5e 8f 46 a3 61 f7 ee dd 88 a2 48 72 52 12 1f ac 58 41 69 59 19 75 75 75 fc fb c5 17 d1 e9 74 24 27 25 f1 e1 ca 95 ec cb ce 46 10 04 5e 5a bc 98 8a 8a 0a 32 32 32 28 2e 29 e1 ad a5 4b b1 09 02 6b d7 ac a1 4d af 27 3d 3d 9d 8f d7 af e7 f8 89 13 d4 d4 d4 f0 ee f2 e5 0c 1e 3c 98 21 83 07 f3 ce 3b ef 50 55 55 e5 28 57 4f 4f 0f 2f 2d 5e 4c 6b 6b 2b e3 c7 8f e7 c0 81 03 7c b6 6d 9b a3 cc 1f 7c f0 01 e1 e1 e1 b8 ba ba f2 e6 9b 6f 0e d0 1e 6a 6a 6a 78 f1 a5 97 08 0a 0c 24 25 25 85 95 ab 56 51 5e 5e 8e c5 62 e1 95 57 5f 65 db 67 9f 91 92 92 42 57 67 27 cf 2f Data Ascii: F@ff&gb5--] mINN^x^FaHrRXAiYuuut$'%F^Z222(.)KkM'==<!;PUU(WOO/-^Lkk+\|m\|ojjjx$%%VQ^^bW_egBWg'/
2024-04-25 18:48:20 UTC	3101	IN	Data Raw: d3 26 0c 46 23 d3 a7 4d e3 a6 9b 6e 72 2c 2e 5a 5b 5b 59 b2 64 09 47 8e 1e e5 be fb ef 67 fe bc 79 8e 8b 77 82 82 82 90 c9 e5 28 14 0a 3a 3b 3b 59 b9 6a 15 67 cf 9e c5 cf d7 97 07 1e 78 e0 4b 27 4a 4a 48 f4 47 f1 e0 23 d3 ff 1e 11 2d 27 32 46 4e 70 a8 1c 27 ed d7 fb cc 7f 28 cc 66 33 e1 e1 e1 8e 2b 0c af 15 fb bd d7 67 09 0c 0c e4 95 57 96 50 5f df 40 78 58 28 56 8b 8d a7 9e 7a 8c c8 c8 f0 2b fe 6e e5 ca 95 78 78 78 f0 9b df fc 86 53 a7 4e d1 d5 dd 8d ce cf 8f 45 2f bc 40 4c 4c 8c fd 28 45 99 8c 35 6b d6 90 99 91 c1 b6 6d db e8 e8 e8 e0 e9 a7 9f 26 24 24 84 75 eb d6 31 6c d8 30 b6 6f df ce e9 d3 a7 79 ec b1 c7 48 1c 32 84 55 bd e7 62 b7 b4 b4 50 52 52 c2 b4 eb ae 43 06 78 fb f8 f0 bb df fd 8e a8 a8 28 72 0e 1f c6 6c 36 13 1f 1f cf 85 0b 17 f8 fc f3 cf 99 Data Ascii: &F#Mnr,.Z[[YdGgyw(:;;YjgxK'JJHG#-'2FNp'(f3+gWP_@xX(Vz+nxxxSNE/@LL(E5km&$$u1l0oyH2UbPRRCx(rl6
2024-04-25 18:48:20 UTC	10674	IN	Data Raw: 2d 5b e8 de bd 3b fe 96 8e 91 df 75 fc b2 b3 b3 31 74 9d d7 ff fc 67 52 53 53 09 0a 0a a2 73 97 2e ac 58 b9 32 10 0c 97 2c 59 82 aa aa a4 a5 a5 51 57 57 17 98 fa 77 ef de bd 34 b5 4c f3 d9 2a 2d 35 15 b7 db cd c2 85 0b c9 ca ca 22 35 35 95 8f 3f fe 98 a4 a4 24 4c 26 13 8b 17 2f 66 fc b8 71 dc 79 e7 9d 8c 19 3d 9a fa 96 e3 da 7a 6c 8e 97 57 ed a8 fd 23 2f 24 4f 00 00 20 00 49 44 41 54 68 a5 a8 6a 20 8f 9d 3a 75 a2 a6 a6 86 35 6b d7 02 cd 77 3c 6c df b6 8d 6e 47 04 bf ce 9d 3b 13 1c 14 c4 f8 71 e3 98 3a 65 0a 3d 7a f4 a0 b8 b8 18 68 6e 06 bb 75 c6 0c aa ab aa d8 b9 73 27 56 ab 95 c3 c5 c5 81 5e f4 86 61 b0 74 e9 52 ba 74 e9 42 cf 5e bd 58 b5 7a 75 e0 38 2c 5f b6 0c 03 48 72 38 f0 78 3c 6d f2 aa 28 ca 71 3f 5f 8a a2 e0 f3 f9 02 fb de 3a ff 7b ab d6 cf 71 66 Data Ascii: -[;u1tgRSSs.X2,YQWWw4L*-5"55?$L&/fqy=zlW#/$O IDAThj :u5kw<lnG;q:e=zhnus'V^atRtB^Xzu8,_Hr8x<m(q?_:{qf
2024-04-25 18:48:20 UTC	6947	IN	Data Raw: 31 fb 6d b1 58 d8 be 6d 1b 1f 7e f8 21 83 72 72 98 3a 75 2a ff f8 c7 3f 28 29 29 c1 dd d8 c8 92 a5 4b 01 f0 f9 7c 7c f3 cd 37 c4 c4 c4 30 77 ee dc e6 8b 86 5b 6e 61 d0 a0 41 bc f6 da 6b 54 54 54 50 5c 5c cc 8e 1d 3b f0 fb fd bc f0 c2 0b 34 35 35 f1 93 9f fc 84 e0 e0 60 9e 79 e6 19 ea ea ea 98 3b 77 2e 2e 97 8b 07 ee bf 9f d4 94 14 de 7c f3 4d dc d2 fb 46 88 1f cc 6a b1 30 76 e4 70 ca 2a 2b d9 be 73 57 60 b9 df ef 67 c9 8a 55 64 a4 a7 d2 ab 7b 66 3b e6 50 7c 17 29 a1 9f 41 66 b3 99 e5 cb 97 53 56 5e 8e aa 28 18 c0 8c 19 33 08 0f 0b a3 6b d7 ae dc 7e fb ed 58 ad 56 9e 7f fe 79 5c 2e 17 87 0e 1d 02 a0 b6 ae 8e c5 4b 96 90 9d 95 85 cf eb a5 b6 b6 96 bb ee ba 0b 8f c7 83 d3 e9 a4 6b 97 2e cc 98 31 83 f8 f8 78 22 23 23 f9 e0 83 0f 70 3a 9d c4 44 47 73 eb ad b7 Data Ascii: 1mXm~!rr:u?())K\|\|70w[naAkTTTP\\;455`y;w..\|MFj0vp+sW`gUd{f;P\|)AfSV^(3k~XVy\.Kk.1x"##p:DGs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.6	50030	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:19 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:19 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1i2ugmyb7 X-Cloud-Trace-Context: f97a9c6f1876f6b0ad861368bc4ab6e9 Date: Thu, 25 Apr 2024 18:48:19 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:19 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.6	50031	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:19 UTC	1088	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/catalog/integrations/export Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:19 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:19 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CK3QNJ9SGG983PD9W1WQ Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.6	50029	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:19 UTC	838	OUT	GET /en-us/sharefile/media/int-export-1.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:19 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 39752 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:19 GMT Etag: "d97473a8ba29cff04c13abfb1a9f365e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CK3PK5DDG1ZJ5C3Q2HQJ X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:19 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 52 08 06 00 00 00 2e 15 a1 27 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 0e 13 2a 29 a2 05 77 c1 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 54 55 fa c0 f1 ef 9d 9e c9 a4 f7 0e 84 16 08 a1 49 17 59 69 0a d8 40 45 d4 df ba 56 74 75 5d 5d d7 5d 7b d7 d5 b5 f7 ba ea ba 56 6c 14 45 91 22 10 a4 04 12 48 20 85 84 f4 de 33 93 99 4c 9f 39 bf 3f 02 51 14 a9 41 14 cf e7 79 78 1e 92 b9 f7 9e 37 77 66 ee 7d ef 7b ce 3d 57 f1 f9 7c a2 b4 b4 94 c5 8b 17 53 51 51 81 df ef 47 51 14 24 49 92 24 49 92 a4 c3 a0 28 38 1d 0e 62 63 63 b9 e0 c2 0b 19 3d 6a 14 4a 79 79 b9 b8 fc f2 cb d9 95 9f 8f 4e a7 43 a6 56 92 24 49 92 24 49 47 46 00 1e 8f 87 f8 f8 78 de 7b Data Ascii: PNGIHDRXR.'pHYsttfxtIME*)w IDATxwxTUIYi@EVtu]]]{VlE"H 3L9?QAyx7wf}{=W\|SQQGQ$I$I(8bcc=jJyyNCV$I$IGFx{
2024-04-25 18:48:19 UTC	2372	IN	Data Raw: e1 c2 85 ec dc b9 f3 17 8b 4f 3a b9 d5 d5 37 a0 d5 6a 49 49 4a 94 c9 95 74 dc 18 0c 7a 12 13 e2 31 99 4c d4 d6 d5 23 84 38 d1 21 49 d2 49 e5 98 2b 58 ef bc f3 0e 67 9f 7d 36 2e 97 8b b9 73 e7 e2 f1 78 58 ba 74 29 ef bf ff 3e 9b 36 6d e2 a6 9b 6e 62 dd ba 75 00 a4 a7 a7 ff a4 9a 55 5f 5f cf d4 a9 53 89 8c 8c e4 ba eb ae c3 e7 f3 f1 d6 5b 6f 31 71 e2 44 36 6f de cc c8 91 23 09 0e 0e c6 66 b3 1d 6b a8 87 4d 08 c1 87 1f 7e 48 58 58 18 d3 a6 4d eb f9 bd a2 28 f4 eb d7 8f a8 a8 28 6e b8 e1 06 26 4c 98 80 c7 e3 01 40 2b c7 33 48 bd a0 a5 b5 15 b5 5a 43 54 64 c4 89 0e 45 fa 9d 08 0b 0d c1 2f fc 34 34 35 11 1f 1b 7b a2 c3 91 a4 93 c6 31 27 58 1b 36 6c 60 fd fa f5 bc f5 d6 5b bc f2 ca 2b 9c 7f fe f9 f4 e9 d3 87 e7 9f 7f 9e 49 93 26 f1 c2 0b 2f e0 f7 fb f1 fb fd dc Data Ascii: O:7jIIJtz1L#8!II+Xg}6.sxXt)>6mnbuU__S[o1qD6o#fkM~HXXM((n&L@+3HZCTdE/445{1'X6l`[+I&/
2024-04-25 18:48:19 UTC	538	IN	Data Raw: 9d 4e 87 63 6f 05 67 df 85 87 d3 e1 20 21 21 01 6b 67 27 49 49 49 4c 98 30 01 87 c3 41 78 78 38 8a a2 60 77 38 68 6b 6b 43 00 b3 67 cd 42 a7 d3 91 93 9d cd 39 e7 9c c3 a4 49 93 8e 68 ce be ac ac 2c da db db 29 28 28 a0 b8 a4 84 a8 c8 48 a6 4d 9b d6 7d 61 52 57 c7 e4 c9 93 99 35 6b 16 cd cd cd 8c 1c 39 92 d0 d0 50 ac 87 79 21 20 84 d8 af 6b b3 b3 b3 93 d9 b3 67 13 1d 1d cd d6 6d db 98 75 e6 99 4c 9f 3e bd e7 7c ae ec dd 07 00 0e bb 1d ad 56 8b 5a ad 46 51 14 0c 06 03 19 19 19 3f b9 a0 3c 98 63 ae 60 bd f7 de 7b dd 1b d2 fc 74 53 05 05 05 fc f3 9f ff e4 d3 4f 3f a5 a0 a0 80 fe fd fb ff 64 19 b3 d9 8c 56 ab 25 2d 2d 8d b4 b4 34 6e bf fd 76 8a 8a 8a b8 f6 da 6b 59 b0 60 01 2d 2d 2d 68 b5 5a 7e 3c 57 97 cf e7 43 ab d5 f6 ec 8c 1f f7 41 c7 c6 c6 f6 ac e3 f5 7a Data Ascii: Ncog !!kg'IIIL0Axx8`w8hkkCgB9Ih,)((HM}aRW5k9Py! kgmuL>\|VZFQ?<c`{tSO?dV%--4nvkY`---hZ~<WCAz
2024-04-25 18:48:19 UTC	4744	IN	Data Raw: ec 6c 2a 2b 2b 49 48 48 e8 39 ee 44 45 45 31 68 d0 20 82 83 83 69 68 68 40 08 21 27 8b 95 8e 88 10 82 94 e4 64 d2 d3 d3 b1 5a ad e4 e4 e4 90 9a 9a 4a 69 69 29 89 89 89 08 21 e8 ec ec 64 e7 ce 9d b4 b5 b7 93 94 98 78 c4 17 69 83 06 0d a2 bc bc 9c 8f 3e fa 08 87 d3 c9 29 a3 47 d3 d4 d4 84 56 a7 c3 e5 76 a3 d5 e9 c8 cd cb 23 24 38 98 8e 8e 0e fc 7e 3f 9d 16 0b fd fa f5 c3 d2 d9 c9 9b 6f bd 45 7c 7c 3c b3 66 cd e2 f3 c5 8b 69 69 69 61 f0 a0 41 87 d5 76 a7 d5 8a d1 68 e4 c2 0b 2f a4 a1 a1 81 fc fc 7c 5a 5a 5b f9 e0 c3 0f 31 99 4c 0c e8 df 9f c5 4b 96 10 16 1a ca f0 e1 c3 69 69 69 a1 b2 aa 8a 90 d0 c3 ab f4 eb f5 7a ca cb cb 59 b4 68 11 03 06 0c 20 25 25 85 b7 de 7e 9b b0 d0 50 ce 9a 33 87 af 96 2f a7 cb 6e 27 76 ef cd 1d 63 c6 8c e1 db 6f bf 45 a7 d3 11 12 12 Data Ascii: l*++IHH9DEE1h ihh@!'dZJii)!dxi>)GVv#$8~?oE\|\|<fiiiaAvh/\|ZZ[1LKiiizYh %%~P3/n'vcoE
2024-04-25 18:48:20 UTC	5930	IN	Data Raw: c1 e3 16 b8 dd 30 70 88 9a eb 6e d2 13 97 70 f4 e7 66 99 60 9d 60 32 c1 92 7e ed fc e2 f8 b7 a1 fa 0d f6 a4 15 e5 fb 78 e6 5f ce ee ab 6a 40 ab 83 bf dd 61 60 70 ba 4c ae a4 93 83 c3 e3 e7 a9 2c 1b 8b 0a bd d8 bd 5a 0c 2a 15 e3 e3 05 77 4d d4 d0 2f f2 fb 29 7d 3a 2d ad ac 5f f5 05 86 00 2d e9 e9 43 71 b8 1c b4 b6 7b c8 18 3e 16 43 40 c0 11 b7 fb c9 7b 6e 3e ff c8 4d a0 49 39 61 cf eb ec b2 09 a2 63 55 fc f3 7e 03 b1 47 d9 6d 28 bb 08 7f a3 8a b6 6f 20 3b bf 1c 9f df 8f df ef 47 51 19 18 3d 69 0a 19 03 12 7f b1 18 3e 7d f3 09 3e fa ae 82 57 5f 7e 89 c8 80 83 9f 21 d7 2d ff 8c 0d 39 bb d0 1a c3 98 7a c6 59 8c 1d 96 7a e8 ed bf f8 2f 3e dc d1 ca eb 2f 3f 4d c4 31 4c 7e dd 50 b9 93 35 1b f2 f0 f9 7c 78 7c 3e 62 12 fb 31 65 ca 69 04 1b 0e ef 9b 9b b3 76 05 65 Data Ascii: 0pnpf``2~x_j@a`pL,Z*wM/)}:-_-Cq{>C@{n>MI9acU~Gm(o ;GQ=i>}>W_~!-9zYz/>/?M1L~P5\|x\|>b1eive
2024-04-25 18:48:20 UTC	7116	IN	Data Raw: 17 57 dc f4 30 c3 87 ad 20 ae df 08 6e b8 fd 61 5e 7a fa 51 3e 59 b1 91 a1 0b f7 75 59 a9 79 f0 a5 f7 09 08 bb 85 c7 ef ff 0b 2f e9 83 08 d0 6a f0 b8 5c dc fe af 67 18 9d 1a d9 13 9f d1 14 4c f0 0f f6 23 40 67 a7 15 25 3c 06 93 a7 99 ab 2f 3e 17 af d7 8b cd e6 e1 89 8f 57 72 eb 85 53 78 7f d1 67 5c fa 7f 57 30 73 da 54 fc 42 c5 d5 77 3c cd ed 97 4d c3 d1 b8 83 c0 d0 48 8c 9d 9d 5c fb 7f 73 f1 fa fc d8 ac 56 9e 7a 77 39 b7 fc f5 31 9e 6d b7 f3 e0 b3 f7 f0 e9 2b 0f e3 74 38 38 f5 82 85 3c 75 db 35 3f fb 39 13 1c 78 a2 51 8f 07 3c de ee 44 a9 bd 0b 4c 71 31 dc b9 20 02 af 1d ac 7b 57 dc 57 19 15 fb fa 4e 45 77 e2 c5 de 83 db 3e bf c4 44 a6 47 ca ef 87 d7 9f 73 b2 6d b3 b7 27 b9 9a 32 5d cb 9f ae 95 c9 95 74 b2 53 98 34 a6 2f 0f 3d f2 0c ad 35 2d 18 8c 82 f8 Data Ascii: W0 na^zQ>YuYy/j\gL#@g%</>WrSxg\W0sTBw<MH\sVzw91m+t88<u5?9xQ<DLq1 {WWNEw>DGsm'2]tS4/=5-
2024-04-25 18:48:20 UTC	8302	IN	Data Raw: 56 eb ce 1d 99 83 25 49 e7 ca a4 e1 6f bf 95 a1 a4 1c 36 dc a9 53 53 27 f3 ac 24 49 ba be 5c 56 0d d6 c8 d8 18 e1 60 10 af d7 4b 32 99 c2 e7 cb 3e e5 c4 e2 71 22 39 39 57 bb 8c 92 24 bd 4f f1 b8 e0 ef 9e c8 10 9b 12 38 ce fc ae 61 50 d4 6c 12 fb 07 1f 33 d8 fc 41 d9 a7 92 24 49 d7 a7 4b 06 58 cd ad 6d 8c 4f 4e e2 d8 0e 8e 10 18 9a 86 a2 28 8c 8c 8d 31 32 36 ce b2 86 3a d6 af 59 7d 5d bd 7e 90 a4 9b 8d 63 43 6b 93 83 df af 50 56 39 bf bf ab 66 06 9a 8f 39 98 e6 5c 97 44 92 24 69 f6 2e 1a 60 d9 b6 cd d8 c4 24 1b d6 ad e5 58 53 0b 96 6d d1 b8 6c 29 a3 63 e3 ec 3f 7c 04 55 55 69 eb e8 62 f5 8a 15 e7 f6 de 2b 5c 6c 57 a0 6b da a9 24 31 21 5c 1c 07 74 fd ac d7 61 8e c9 e0 d8 34 25 45 05 00 64 e2 63 34 b7 f6 13 29 2c a4 a4 a4 78 c6 bd 28 cf 95 e9 e9 18 ba ae 11 Data Ascii: V%Io6SS'$I\V`K2>q"99W$O8aPl3A$IKXmON(126:Y}]~cCkPV9f9\D$i.`$XSml)c?\|UUib+\lWk$1!\ta4%Edc4),x(
2024-04-25 18:48:20 UTC	3101	IN	Data Raw: cb b6 d1 74 0d 5d 83 a1 81 7e 42 d1 62 22 21 8d 89 d1 71 d2 ae 41 71 61 18 2b 65 d2 3f 34 4e 51 49 09 1e 0d 06 06 fb 09 46 8a 09 f9 b4 f3 06 79 d2 99 84 63 63 3a 2e 86 c7 83 ae 67 03 75 47 08 f4 d3 1e d6 5c c7 c2 76 c1 e3 31 b0 2c 3b 5b a1 e0 5a 0c f4 0c 11 8c 96 10 09 e9 98 d6 7b e7 99 6d 8b 53 01 b9 6b 3b f4 f4 0d 92 5f 50 86 df a3 20 44 f6 ba a2 69 27 fb 32 bc f9 8e 91 00 3c 86 c2 d8 f0 10 8a 37 87 bc 1c 3f 99 74 9a a9 8c 43 5e 4e 90 8c 69 a3 1b d9 27 85 b4 69 e1 f3 79 48 c6 a7 51 3d 01 cc f8 38 c2 08 53 98 e7 27 31 1d 67 38 96 a1 b4 34 1f 6c c1 40 ff 00 d1 82 32 bc 86 82 70 05 e9 b4 89 c7 eb b9 70 de cb 35 72 d1 56 84 9a a6 51 5c 58 48 59 49 31 a5 c5 45 67 fc 94 97 96 10 0e 5d 28 c1 5d ba 5c 57 b2 15 a1 61 28 f4 f7 b8 bc f6 82 8d 6d 43 26 0d 89 04 44 Data Ascii: t]~Bb"!qAqa+e?4NQIFycc:.guG\v1,;[Z{mSk;_P Di'2<7?tC^Ni'iyHQ=8S'1g84l@2pp5rVQ\XHYI1Eg](]\Wa(mC&D
2024-04-25 18:48:20 UTC	6984	IN	Data Raw: b9 41 68 5b 88 62 86 4b b9 f7 0b 1f a1 6d e7 56 7c 33 16 23 43 03 54 d7 ad 67 e7 eb cf 73 64 28 ca ed cb 6d f2 cb 6a 69 dd b9 9d 8d a3 07 29 2a af 64 eb ef 9e c1 2b 5c 4e 2a e5 f1 c9 bb ef 63 bc bb 95 99 c4 10 e1 a0 75 c6 95 f3 1f a4 73 96 69 90 8b 2f 93 65 1a 82 21 83 f6 56 87 ef fe af 18 59 d9 06 e1 f0 89 fb 79 1e fc b7 ff 11 a6 69 a5 45 22 7e 22 7a 9a 35 fa 00 00 1a b7 49 44 41 54 69 e5 85 0c fe eb 73 df e2 a7 ef 6e 24 1c c8 02 d2 13 ba 3d 3c 7c a6 45 ca 71 f0 f0 28 cb 2e e2 77 5f fa 29 15 39 85 24 3d 8f d8 5c 14 c7 f0 93 93 1d 02 03 e6 a6 c7 e9 ec ee 26 98 5d 48 73 53 23 a6 e7 91 88 c7 88 c5 53 78 a6 47 4e 76 2e 73 d1 28 96 df c4 f1 4c 8a f3 b3 e9 6a 3f cc bc 13 62 45 53 3d 38 1e b3 33 33 d8 9e 4b 56 24 17 27 36 0f fe 30 91 ac 00 b8 0e 47 8f 1c c0 f6 Data Ascii: Ah[bKmV\|3#CTgsd(mji)d+\Ncusi/e!VYyiE"~"z5IDATisn$=<\|Eq(.w_)9$=\&]HsS#SxGNv.s(Lj?bES=833KV$'60G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.6	50027	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:19 UTC	841	OUT	GET /en-us/sharefile/media/int-export-1-sf.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:19 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 48081 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:19 GMT Etag: "342e58ad2ad1ed33d90e60baeca47518-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CK3P54EFS4MKTG3HCW77 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:19 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 9e 08 06 00 00 00 62 b9 f3 b6 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 12 0f 22 2c 15 45 bb 75 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 55 75 82 ff ff d7 29 b7 e5 e6 de f4 5e 80 10 42 e8 20 1d a4 88 a0 82 28 38 80 08 8e 52 04 75 c6 b2 ce 6f 76 9d b2 b3 8f 75 74 67 7f b3 33 ee ce b8 ea cc 58 66 2d a0 cc c8 28 43 57 41 90 40 28 d2 7b 0f a4 87 90 7a 53 6e ee bd a7 7c ff 08 89 04 12 da 20 29 7c 9e 8f 87 0f c9 2d e7 7c ee b9 f7 9c f7 f9 94 f3 39 d2 ab af be 6a 22 b4 0b 92 24 e1 0f 04 c8 2f 28 24 31 3e 0e 8b c5 82 69 8a af 4f 10 84 b6 47 96 65 6a bd 5e ce 15 9f 27 39 31 01 59 96 c5 f1 ea 3b 26 b7 76 01 84 6b 67 9a 26 36 ab 15 67 50 10 e7 Data Ascii: PNGIHDRbpHYsttfxtIME",Eu IDATxw\|Uu)^B (8Ruovutg3Xf-(CWA@({zSn\| )\|-\|9j"$/($1>iOGej^'91Y;&vkg&6gP
2024-04-25 18:48:19 UTC	2372	IN	Data Raw: 82 d0 75 1d 6f 5d 1d 3e 9f 8f 40 40 c3 6f e8 ad 5d 44 41 10 da 3d 09 45 91 b1 5a ad b8 5c 2e 1c 76 7b e3 28 76 d1 c4 de fa 44 a0 77 30 46 7d 3b 3c 92 24 11 ec 74 e2 0a 0e 6e ec eb 12 04 41 f8 47 35 8c df 31 0d 53 d4 c8 db 18 11 e8 1d 98 d8 d1 04 41 10 6e 1f e2 b2 35 41 10 04 41 e8 00 44 a0 0b 82 20 08 42 07 20 02 5d 10 04 41 10 3a 00 11 e8 82 20 08 82 d0 01 88 40 17 04 41 10 84 0e 40 04 ba 20 08 82 20 74 00 22 d0 05 41 10 04 a1 03 10 81 2e 08 82 20 08 1d 80 08 74 41 10 04 41 e8 00 6e ab 99 e2 c4 ed 44 05 41 10 da 37 71 e7 c8 96 a9 1d 25 e4 3a ca e7 10 04 41 10 5a 76 ad c7 fa db 31 f8 55 9f cf d7 da 65 b8 21 22 c0 05 41 10 84 6b 75 3b 04 bc aa 28 4a 6b 97 e1 9a 5c 1a e0 0d 7f df 0e 5f 92 20 08 82 70 63 9a cb 8a 8e 9a 1b aa 2c b7 8f 71 71 a2 46 2e 08 82 20 Data Ascii: uo]>@@o]DA=EZ\.v{(vDw0F};<$tnAG51SAn5AAD B ]A: @A@ t"A. tAAnDA7q%:AZv1Ue!"Aku;(Jk\_ pc,qqF.
2024-04-25 18:48:19 UTC	538	IN	Data Raw: 64 15 2b 1a 32 fa cd da 0e d7 cd 34 4d 64 59 6e 31 cc 01 fe ff 5f ff 9a 82 82 02 26 4c 98 c0 6f 7e fb 5b 06 0e 1c c8 90 21 43 90 65 19 c3 30 58 b6 6c 19 b3 67 cf a6 7b 5a 1a a7 4e 9d e2 8b 2f be 20 2e 2e 8e 9e 3d 7b d2 af 5f 3f 3e 5c b4 88 0d 1b 37 32 61 fc 78 02 81 00 9f 7d f6 19 81 40 80 81 83 06 35 9e ca e8 7a 33 db 40 92 f0 78 3c d4 d5 d5 61 b7 db bf 9b 0d 20 08 82 20 b4 29 17 02 5d c2 62 b3 52 53 74 9a 6d 19 19 7c 73 f8 28 e7 ca bc 4d 5e 28 5b 82 49 48 49 63 d0 f0 91 0c e9 9b 86 43 f6 5f 56 7b b6 da ed 78 b3 0f f1 d7 d7 3f e0 54 c0 20 ac fb 50 9e 9c fb 28 f1 76 3f fe 66 2a 8d 8a c5 86 bf ec 2c 5f ad fb 82 6d fb 8e 53 ee bd 28 b8 6d 6e 52 7b 0f 62 c2 f8 31 a4 44 3a f0 fb 03 f5 e5 50 2c 50 57 ca ce cd 1b 78 e8 7b df 23 3a 36 fe a6 6e 90 6b 61 9a 26 86 Data Ascii: d+24MdYn1_&Lo~[!Ce0Xlg{ZN/ ..={_?>\72ax}@5z3@x<a )]bRStm\|s(M^([IHIcC_V{x?T P(v?f*,_mS(mnR{b1D:P,PWx{#:6nka&
2024-04-25 18:48:19 UTC	4744	IN	Data Raw: fd 2a 8a 42 ff 7e fd 28 2f 2b 63 c3 86 0d 18 86 81 44 fd 84 33 12 50 5c 5c cc aa d5 ab 79 68 ea 54 9e 78 e2 09 42 dc 6e 5e 7e e5 15 7e fe b3 9f b1 61 c3 06 7a f7 ee 8d 69 9a 3c f5 e4 93 24 25 25 f1 fa 1b 6f 10 13 13 c3 2b 2f bf cc 94 29 53 00 e8 d5 ab 17 9f 7d f6 19 7f fc c3 1f f8 72 dd 3a 22 23 22 78 f3 cd 37 99 35 6b 16 56 8b 05 d5 62 61 d0 a0 41 24 27 27 37 29 9b d5 62 e1 a5 97 5e c2 e9 74 f2 d5 86 0d 9c bf d0 a7 2f 08 82 20 74 6c d2 ef 5e 7b dd f4 15 1f e2 c3 f7 16 71 a4 a0 16 14 1b c9 3d 87 30 76 e4 20 ba 24 46 13 64 91 a8 2e 2b e4 d4 e1 5d 6c da bc 9b 82 ca 3a 50 dc 0c 9f f2 28 d3 c6 f6 c4 a6 d5 72 f2 f8 61 4e 9d 2d a2 bc f0 24 7b 0e 9f 21 20 5b 91 02 7e c2 7a 0c e7 89 c7 67 d5 d7 d0 b5 8b 6a f3 92 8c 4d d5 d8 bd 66 11 1f 7d 79 08 4d b2 10 97 7a 07 Data Ascii: *B~(/+cD3P\\yhTxBn^~~azi<$%%o+/)S}r:"#"x75kVbaA$''7)b^t/ tl^{q=0v $Fd.+]l:P(raN-${! [~zgjMf}yMz
2024-04-25 18:48:20 UTC	5930	IN	Data Raw: 19 c4 c6 c6 32 64 c8 20 54 d5 82 df df fc f5 e6 a6 69 a2 5a 2c 28 6a cb 5d 76 a6 69 12 e2 72 37 5b 53 f6 f9 02 a8 aa 8a 24 d5 ef 97 56 ab 15 c3 30 a8 ab fb 76 80 ab 3f e0 47 96 64 6c 36 1b a5 65 e5 8d 8f eb 86 81 61 1a a8 16 15 e5 c2 49 7d 03 e3 c2 f5 ba 2d 7d 4e e1 e6 13 81 7e 03 a2 e3 24 82 5d 10 08 70 c5 c9 64 64 b9 be 09 fe 4a 99 a5 eb 10 1a 0e 11 91 2d bf 48 d3 34 ea 2e d4 aa cb cb cb f9 64 e9 52 4c d3 64 e8 d0 a1 78 3c 1e 62 62 63 19 30 60 00 5d bb 76 65 d3 a6 4d d4 d6 d6 72 fc f8 71 96 2f 5f ce 8f 5e 78 81 29 53 a6 f0 d2 2f 7f 49 71 71 31 c1 c1 c1 94 96 95 51 57 57 87 aa aa 8d c1 aa eb 7a e3 25 2d 0d eb 34 4d 93 82 82 02 5c 6e 37 53 a7 4c 21 2f 2f 8f b3 d9 d9 0c b9 a8 56 5e 54 54 74 e1 73 e8 f8 fd 7e 7a f6 ec c9 f2 e5 cb 59 b7 6e 1d 63 c7 8c 61 c5 Data Ascii: 2d TiZ,(j]vir7[S$V0v?Gdl6eaI}-}N~$]pddJ-H4.dRLdx<bbc0`]veMrq/_^x)S/Iqq1QWWz%-4M\n7SL!//V^TTts~zYnca
2024-04-25 18:48:20 UTC	7116	IN	Data Raw: bc a1 6c aa aa 62 b3 db 39 72 e4 08 21 a1 a1 cc 98 31 83 d8 d8 58 1e 7b ec 31 06 0c 18 80 61 18 3c fc f0 c3 0c 1e 3c 98 93 27 4f 62 52 df 77 2e 4b 12 91 91 91 b8 dd 6e e2 e2 e2 b0 5a ad 8d 21 b7 7b d7 2e 46 8e 1c c9 b0 61 c3 e8 d4 a9 13 73 e7 ce 25 37 27 87 82 82 02 12 13 13 79 e0 81 07 88 8b 8d 65 fc f8 f1 48 92 84 a7 aa ea 1a 8f 96 c2 ad 54 ff 0b 41 42 92 64 30 74 4c d3 c0 12 9a c0 d0 d4 74 62 5d 32 9a 6e 22 c9 2a aa 22 23 9b 01 94 d0 ce 0c 19 16 47 79 49 3e a7 4f 1f a0 f0 5c 2a fd fb 25 5f 18 d9 de d0 17 67 20 5b dd f4 bc 63 28 35 9e 32 ce 64 9d 61 6f 41 21 bd fa f6 26 d4 a1 60 b4 f3 7e f4 40 20 40 54 64 24 73 e6 cc 69 b2 03 37 e8 9e 9e 4e 4e 4e 0e 49 c9 c9 40 7d 9f 65 54 54 14 41 17 bd 36 28 28 88 aa ea 6a 34 5d 27 f8 92 83 80 69 9a 68 9a 46 78 58 58 Data Ascii: lb9r!1X{1a<<'ObRw.KnZ!{.Fas%7'yeHTABd0tLtb]2n""#GyI>O\%_g [c(52daoA!&`~@ @Td$si7NNNI@}eTTA6((j4]'ihFxXX
2024-04-25 18:48:20 UTC	8302	IN	Data Raw: d3 f9 f9 04 04 06 72 ef bd f7 52 5b 5b 4b 7f 7f 3f 4b 97 2e 65 59 76 36 eb d6 ad 23 35 35 f5 aa f7 5a bd 7a 35 6f 6e df 8e cb e5 62 64 64 84 71 bb 9d ac ac 2c b6 6f df ce ea d5 ab 59 b7 6e 1d 00 2f 6d de cc a9 53 a7 08 0d 0b c3 cf cf 4f fa bd af af 2f 82 20 a0 56 ab 59 bd 7a 35 2a 95 0a f1 43 1e c8 63 c7 8e 11 16 1a ca cf 7f fe 73 00 72 4f 9e a4 b6 b6 96 c5 8b 16 11 13 1b cb 7d f7 dd 47 78 78 38 e1 61 61 94 96 96 92 92 92 42 49 69 29 8f 3c fc 30 89 49 49 d8 ed 76 fe f0 87 3f 70 fe fc 79 2a 2a 2a c8 ca ca e2 9e 7b ee 01 e0 ad b7 df e6 f8 89 13 ac 58 be 1c ab d5 ca 6d b7 dd 46 60 60 20 87 8f 1c e1 62 73 33 65 65 65 fc e7 7f fe 27 51 91 91 b4 b6 b6 f2 c2 0b 2f 90 7d dd 75 92 26 35 36 36 c6 8d 37 dc c0 9a 35 6b 00 58 bf 7e 3d 75 75 75 04 04 04 10 1e 1e ce 5d Data Ascii: rR[[K?K.eYv6#55Zz5onbddq,oYn/mSO/ VYz5CcsrO}Gxx8aaBIi)<0IIv?py**{XmF`` bs3eee'Q/}u&56675kX~=uuu]
2024-04-25 18:48:20 UTC	3101	IN	Data Raw: 91 91 c1 f1 e3 c7 e9 eb eb c3 64 32 21 78 3c 98 da db 51 28 95 68 34 1a a2 a3 a3 a9 a8 a8 e0 df 7e f6 33 6f 2c fa 82 02 0e 1d 3a c4 e2 c5 8b 19 1b 1b 23 21 21 81 1f de 7f 3f 16 8b 85 a7 9e 7a 8a c1 c1 41 1e 7a e8 21 dc 1e 0f 8f 3c fc f0 34 bf 8d 95 2b 57 72 c7 b7 be c5 9c 39 73 58 b6 6c 19 a7 f2 f2 a8 af af e7 37 8f 3d 86 bf bf 3f 27 72 73 79 ff c0 01 66 65 66 62 98 d0 d4 0f 1f 3e cc 8c 90 10 1e 7b ec 31 00 9e 7a ea 29 ce 9f 3f cf f7 be fb 5d 5e 7e e5 15 86 87 86 18 1e 1e e6 de 7b ee c1 e5 72 d1 d1 d1 e1 cd 2b 7e eb ad 8c 8d 8d f1 c4 13 4f 70 e6 cc 19 2a 2b 2b 49 4e 4e e6 de 7b ef 05 e0 0f 4f 3e 49 6e 6e 2e c9 c9 c9 58 ad 56 7e fe e8 a3 52 8a d4 3b ef bc 93 c0 a0 20 be 7e cb 2d 52 d9 fd fd fd f9 e1 7d f7 61 34 1a f9 c5 cf 7f 0e 80 6d 6c 8c 39 b3 67 f3 6f Data Ascii: d2!x<Q(h4~3o,:#!!?zAz!<4+Wr9sXl7=?'rsyfefb>{1z)?]^~{r+~Op*++INN{O>Inn.XV~R; ~-R}a4ml9go
2024-04-25 18:48:20 UTC	10674	IN	Data Raw: 38 1c 0e ae 1f 3a 94 c0 c0 40 82 83 83 99 31 73 26 2b 57 ae a4 43 c7 8e 54 56 56 a2 d4 7e 96 cd 9b 37 27 36 36 16 c3 30 c8 cc cc a4 4d 9b 36 c4 c6 c6 fa 83 27 31 31 b1 c1 77 25 3e 3e 9e 79 f3 e6 91 9d 9d cd 0d 37 dc 40 62 42 02 1f cd 9e cd c2 85 0b 69 9e 94 c4 3d f7 dc e3 ef 8a 00 7c 07 39 55 55 4c 9b 3e 9d 25 4b 96 d0 29 35 95 4e 9d 3a f1 f5 d7 5f 7b 6b db 0d 00 00 20 00 49 44 41 54 33 fc c6 1b e9 d0 be 3d ba 61 b0 67 cf 1e 5a b4 6c 49 6e 6e 2e 49 89 89 7c fa d9 67 6c db ba 95 db ef b8 83 f6 ed db 93 92 92 42 51 51 11 33 67 cc 60 cb 96 2d 8c 18 3e 9c 6b af bd 96 a3 47 8f 52 55 55 45 f7 ee dd fd df d1 84 c4 44 96 2c 59 c2 f6 6d db e8 d3 a7 8f ff e0 35 b8 76 44 fb 9c 39 73 68 db b6 2d 35 35 35 44 47 47 d3 b2 65 4b ff f6 b7 6a d5 8a 0e 1d 3a e0 f5 7a 99 3a Data Ascii: 8:@1s&+WCTVV~7'660M6'11w%>>y7@bBi=\|9UUL>%K)5N:_{k IDAT3=agZlInn.I\|glBQQ3g`->kGRUUED,Ym5vD9sh-555DGGeKj:z:
2024-04-25 18:48:20 UTC	4639	IN	Data Raw: d1 52 a9 b9 d4 24 d0 2f 00 55 85 f6 9d 54 da 77 52 01 3b e5 65 e0 ae 91 81 72 42 88 a6 cf c2 f7 1b 18 12 a2 e0 08 b8 dc a5 f9 61 93 40 bf 08 42 42 21 24 54 8e 4e 85 10 42 5c 3a 32 ca 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 02 5d 08 21 84 68 02 24 d0 85 10 42 88 26 40 2e 9f 7a 91 e4 1f 31 29 2d 01 b7 db c2 32 41 b9 02 ae a6 6a 59 a0 a8 e0 74 2a 84 45 40 6c b3 4b 7b 3c 67 9a 90 73 d8 a4 e8 18 54 57 59 98 97 68 bf d4 6d b7 2b 50 21 2a 0a 12 9a ab 68 da c5 7f 5f 21 84 b8 94 24 d0 2f a0 ca 4a 8b b5 ab 0c b6 6c 30 c9 cd 32 29 2a b2 a8 a9 Data Ascii: R$/UTwR;erBa@BB!$TNB\:2]!h$B&@]!h$B&@]!h$B&@]!h$B&@]!h$B&@]!h$B&@]!h$B&@.z1)-2AjYtE@lK{<gsTWYhm+P!h_!$/Jl02)*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.6	50024	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:19 UTC	841	OUT	GET /en-us/sharefile/media/int-export-1-pd.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:19 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 47903 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:19 GMT Etag: "8cfac45c7b11090b9fea569fdb715845-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CK3Q8F7JT5ECS5CZXE46 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:19 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 9e 08 06 00 00 00 62 b9 f3 b6 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 12 0f 1f 10 50 c2 8f 4c 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 55 75 82 ff ff d7 29 b7 e5 e6 de f4 5e 80 10 42 e8 20 1d a4 88 a0 82 28 38 80 08 8e 52 04 75 c6 b2 ce 6f 76 9d b2 b3 8f 75 74 67 7f b3 33 ee ce b8 ea cc 58 66 2d a0 cc c8 28 43 57 41 90 40 28 d2 7b 0f a4 87 90 7a 53 6e ee bd a7 7c ff 08 89 04 12 da 20 29 7c 9e 8f 87 0f c9 2d e7 7c ee b9 f7 9c f7 f9 94 f3 39 d2 ab af be 6a 22 b4 0b 92 24 e1 0f 04 c8 2f 28 24 31 3e 0e 8b c5 82 69 8a af 4f 10 84 b6 47 96 65 6a bd 5e ce 15 9f 27 39 31 01 59 96 c5 f1 ea 3b 26 b7 76 01 84 6b 67 9a 26 36 ab 15 67 50 10 e7 Data Ascii: PNGIHDRbpHYsttfxtIMEPL IDATxw\|Uu)^B (8Ruovutg3Xf-(CWA@({zSn\| )\|-\|9j"$/($1>iOGej^'91Y;&vkg&6gP
2024-04-25 18:48:19 UTC	2372	IN	Data Raw: 82 d0 75 1d 6f 5d 1d 3e 9f 8f 40 40 c3 6f e8 ad 5d 44 41 10 da 3d 09 45 91 b1 5a ad b8 5c 2e 1c 76 7b e3 28 76 d1 c4 de fa 44 a0 77 30 46 7d 3b 3c 92 24 11 ec 74 e2 0a 0e 6e ec eb 12 04 41 f8 47 35 8c df 31 0d 53 d4 c8 db 18 11 e8 1d 98 d8 d1 04 41 10 6e 1f e2 b2 35 41 10 04 41 e8 00 44 a0 0b 82 20 08 42 07 20 02 5d 10 04 41 10 3a 00 11 e8 82 20 08 82 d0 01 88 40 17 04 41 10 84 0e 40 04 ba 20 08 82 20 74 00 22 d0 05 41 10 04 a1 03 10 81 2e 08 82 20 08 1d 80 08 74 41 10 04 41 e8 00 6e ab 99 e2 c4 ed 44 05 41 10 da 37 71 e7 c8 96 a9 1d 25 e4 3a ca e7 10 04 41 10 5a 76 ad c7 fa db 31 f8 55 9f cf d7 da 65 b8 21 22 c0 05 41 10 84 6b 75 3b 04 bc aa 28 4a 6b 97 e1 9a 5c 1a e0 0d 7f df 0e 5f 92 20 08 82 70 63 9a cb 8a 8e 9a 1b aa 2c b7 8f 71 71 a2 46 2e 08 82 20 Data Ascii: uo]>@@o]DA=EZ\.v{(vDw0F};<$tnAG51SAn5AAD B ]A: @A@ t"A. tAAnDA7q%:AZv1Ue!"Aku;(Jk\_ pc,qqF.
2024-04-25 18:48:19 UTC	538	IN	Data Raw: 64 15 2b 1a 32 fa cd da 0e d7 cd 34 4d 64 59 6e 31 cc 01 fe ff 5f ff 9a 82 82 02 26 4c 98 c0 6f 7e fb 5b 06 0e 1c c8 90 21 43 90 65 19 c3 30 58 b6 6c 19 b3 67 cf a6 7b 5a 1a a7 4e 9d e2 8b 2f be 20 2e 2e 8e 9e 3d 7b d2 af 5f 3f 3e 5c b4 88 0d 1b 37 32 61 fc 78 02 81 00 9f 7d f6 19 81 40 80 81 83 06 35 9e ca e8 7a 33 db 40 92 f0 78 3c d4 d5 d5 61 b7 db bf 9b 0d 20 08 82 20 b4 29 17 02 5d c2 62 b3 52 53 74 9a 6d 19 19 7c 73 f8 28 e7 ca bc 4d 5e 28 5b 82 49 48 49 63 d0 f0 91 0c e9 9b 86 43 f6 5f 56 7b b6 da ed 78 b3 0f f1 d7 d7 3f e0 54 c0 20 ac fb 50 9e 9c fb 28 f1 76 3f fe 66 2a 8d 8a c5 86 bf ec 2c 5f ad fb 82 6d fb 8e 53 ee bd 28 b8 6d 6e 52 7b 0f 62 c2 f8 31 a4 44 3a f0 fb 03 f5 e5 50 2c 50 57 ca ce cd 1b 78 e8 7b df 23 3a 36 fe a6 6e 90 6b 61 9a 26 86 Data Ascii: d+24MdYn1_&Lo~[!Ce0Xlg{ZN/ ..={_?>\72ax}@5z3@x<a )]bRStm\|s(M^([IHIcC_V{x?T P(v?f*,_mS(mnR{b1D:P,PWx{#:6nka&
2024-04-25 18:48:19 UTC	4744	IN	Data Raw: fd 2a 8a 42 ff 7e fd 28 2f 2b 63 c3 86 0d 18 86 81 44 fd 84 33 12 50 5c 5c cc aa d5 ab 79 68 ea 54 9e 78 e2 09 42 dc 6e 5e 7e e5 15 7e fe b3 9f b1 61 c3 06 7a f7 ee 8d 69 9a 3c f5 e4 93 24 25 25 f1 fa 1b 6f 10 13 13 c3 2b 2f bf cc 94 29 53 00 e8 d5 ab 17 9f 7d f6 19 7f fc c3 1f f8 72 dd 3a 22 23 22 78 f3 cd 37 99 35 6b 16 56 8b 05 d5 62 61 d0 a0 41 24 27 27 37 29 9b d5 62 e1 a5 97 5e c2 e9 74 f2 d5 86 0d 9c bf d0 a7 2f 08 82 20 74 6c d2 ef 5e 7b dd f4 15 1f e2 c3 f7 16 71 a4 a0 16 14 1b c9 3d 87 30 76 e4 20 ba 24 46 13 64 91 a8 2e 2b e4 d4 e1 5d 6c da bc 9b 82 ca 3a 50 dc 0c 9f f2 28 d3 c6 f6 c4 a6 d5 72 f2 f8 61 4e 9d 2d a2 bc f0 24 7b 0e 9f 21 20 5b 91 02 7e c2 7a 0c e7 89 c7 67 d5 d7 d0 b5 8b 6a f3 92 8c 4d d5 d8 bd 66 11 1f 7d 79 08 4d b2 10 97 7a 07 Data Ascii: *B~(/+cD3P\\yhTxBn^~~azi<$%%o+/)S}r:"#"x75kVbaA$''7)b^t/ tl^{q=0v $Fd.+]l:P(raN-${! [~zgjMf}yMz
2024-04-25 18:48:20 UTC	5930	IN	Data Raw: 19 c4 c6 c6 32 64 c8 20 54 d5 82 df df fc f5 e6 a6 69 a2 5a 2c 28 6a cb 5d 76 a6 69 12 e2 72 37 5b 53 f6 f9 02 a8 aa 8a 24 d5 ef 97 56 ab 15 c3 30 a8 ab fb 76 80 ab 3f e0 47 96 64 6c 36 1b a5 65 e5 8d 8f eb 86 81 61 1a a8 16 15 e5 c2 49 7d 03 e3 c2 f5 ba 2d 7d 4e e1 e6 13 81 7e 03 a2 e3 24 82 5d 10 08 70 c5 c9 64 64 b9 be 09 fe 4a 99 a5 eb 10 1a 0e 11 91 2d bf 48 d3 34 ea 2e d4 aa cb cb cb f9 64 e9 52 4c d3 64 e8 d0 a1 78 3c 1e 62 62 63 19 30 60 00 5d bb 76 65 d3 a6 4d d4 d6 d6 72 fc f8 71 96 2f 5f ce 8f 5e 78 81 29 53 a6 f0 d2 2f 7f 49 71 71 31 c1 c1 c1 94 96 95 51 57 57 87 aa aa 8d c1 aa eb 7a e3 25 2d 0d eb 34 4d 93 82 82 02 5c 6e 37 53 a7 4c 21 2f 2f 8f b3 d9 d9 0c b9 a8 56 5e 54 54 74 e1 73 e8 f8 fd 7e 7a f6 ec c9 f2 e5 cb 59 b7 6e 1d 63 c7 8c 61 c5 Data Ascii: 2d TiZ,(j]vir7[S$V0v?Gdl6eaI}-}N~$]pddJ-H4.dRLdx<bbc0`]veMrq/_^x)S/Iqq1QWWz%-4M\n7SL!//V^TTts~zYnca
2024-04-25 18:48:20 UTC	7116	IN	Data Raw: bc a1 6c aa aa 62 b3 db 39 72 e4 08 21 a1 a1 cc 98 31 83 d8 d8 58 1e 7b ec 31 06 0c 18 80 61 18 3c fc f0 c3 0c 1e 3c 98 93 27 4f 62 52 df 77 2e 4b 12 91 91 91 b8 dd 6e e2 e2 e2 b0 5a ad 8d 21 b7 7b d7 2e 46 8e 1c c9 b0 61 c3 e8 d4 a9 13 73 e7 ce 25 37 27 87 82 82 02 12 13 13 79 e0 81 07 88 8b 8d 65 fc f8 f1 48 92 84 a7 aa ea 1a 8f 96 c2 ad 54 ff 0b 41 42 92 64 30 74 4c d3 c0 12 9a c0 d0 d4 74 62 5d 32 9a 6e 22 c9 2a aa 22 23 9b 01 94 d0 ce 0c 19 16 47 79 49 3e a7 4f 1f a0 f0 5c 2a fd fb 25 5f 18 d9 de d0 17 67 20 5b dd f4 bc 63 28 35 9e 32 ce 64 9d 61 6f 41 21 bd fa f6 26 d4 a1 60 b4 f3 7e f4 40 20 40 54 64 24 73 e6 cc 69 b2 03 37 e8 9e 9e 4e 4e 4e 0e 49 c9 c9 40 7d 9f 65 54 54 14 41 17 bd 36 28 28 88 aa ea 6a 34 5d 27 f8 92 83 80 69 9a 68 9a 46 78 58 58 Data Ascii: lb9r!1X{1a<<'ObRw.KnZ!{.Fas%7'yeHTABd0tLtb]2n""#GyI>O\%_g [c(52daoA!&`~@ @Td$si7NNNI@}eTTA6((j4]'ihFxXX
2024-04-25 18:48:20 UTC	8302	IN	Data Raw: d3 f9 f9 04 04 06 72 ef bd f7 52 5b 5b 4b 7f 7f 3f 4b 97 2e 65 59 76 36 eb d6 ad 23 35 35 f5 aa f7 5a bd 7a 35 6f 6e df 8e cb e5 62 64 64 84 71 bb 9d ac ac 2c b6 6f df ce ea d5 ab 59 b7 6e 1d 00 2f 6d de cc a9 53 a7 08 0d 0b c3 cf cf 4f fa bd af af 2f 82 20 a0 56 ab 59 bd 7a 35 2a 95 0a f1 43 1e c8 63 c7 8e 11 16 1a ca cf 7f fe 73 00 72 4f 9e a4 b6 b6 96 c5 8b 16 11 13 1b cb 7d f7 dd 47 78 78 38 e1 61 61 94 96 96 92 92 92 42 49 69 29 8f 3c fc 30 89 49 49 d8 ed 76 fe f0 87 3f 70 fe fc 79 2a 2a 2a c8 ca ca e2 9e 7b ee 01 e0 ad b7 df e6 f8 89 13 ac 58 be 1c ab d5 ca 6d b7 dd 46 60 60 20 87 8f 1c e1 62 73 33 65 65 65 fc e7 7f fe 27 51 91 91 b4 b6 b6 f2 c2 0b 2f 90 7d dd 75 92 26 35 36 36 c6 8d 37 dc c0 9a 35 6b 00 58 bf 7e 3d 75 75 75 04 04 04 10 1e 1e ce 5d Data Ascii: rR[[K?K.eYv6#55Zz5onbddq,oYn/mSO/ VYz5CcsrO}Gxx8aaBIi)<0IIv?py**{XmF`` bs3eee'Q/}u&56675kX~=uuu]
2024-04-25 18:48:20 UTC	3101	IN	Data Raw: 91 91 c1 f1 e3 c7 e9 eb eb c3 64 32 21 78 3c 98 da db 51 28 95 68 34 1a a2 a3 a3 a9 a8 a8 e0 df 7e f6 33 6f 2c fa 82 02 0e 1d 3a c4 e2 c5 8b 19 1b 1b 23 21 21 81 1f de 7f 3f 16 8b 85 a7 9e 7a 8a c1 c1 41 1e 7a e8 21 dc 1e 0f 8f 3c fc f0 34 bf 8d 95 2b 57 72 c7 b7 be c5 9c 39 73 58 b6 6c 19 a7 f2 f2 a8 af af e7 37 8f 3d 86 bf bf 3f 27 72 73 79 ff c0 01 66 65 66 62 98 d0 d4 0f 1f 3e cc 8c 90 10 1e 7b ec 31 00 9e 7a ea 29 ce 9f 3f cf f7 be fb 5d 5e 7e e5 15 86 87 86 18 1e 1e e6 de 7b ee c1 e5 72 d1 d1 d1 e1 cd 2b 7e eb ad 8c 8d 8d f1 c4 13 4f 70 e6 cc 19 2a 2b 2b 49 4e 4e e6 de 7b ef 05 e0 0f 4f 3e 49 6e 6e 2e c9 c9 c9 58 ad 56 7e fe e8 a3 52 8a d4 3b ef bc 93 c0 a0 20 be 7e cb 2d 52 d9 fd fd fd f9 e1 7d f7 61 34 1a f9 c5 cf 7f 0e 80 6d 6c 8c 39 b3 67 f3 6f Data Ascii: d2!x<Q(h4~3o,:#!!?zAz!<4+Wr9sXl7=?'rsyfefb>{1z)?]^~{r+~Op*++INN{O>Inn.XV~R; ~-R}a4ml9go
2024-04-25 18:48:20 UTC	10674	IN	Data Raw: c7 8e 94 94 94 e0 70 38 18 39 62 04 1e 8f 87 f0 f0 70 a6 4d 9f ce ca 95 2b e9 dc a5 0b 55 55 55 28 b5 9f 65 ab 56 ad 48 4c 4c c4 30 0c 0e 1c 38 40 fb f6 ed 49 4c 4c 0c 05 4f 4a 4a 4a 83 ef 4a cb 96 2d 99 3b 77 2e 87 0e 1d e2 fa eb af 27 25 39 99 0f 66 cd 62 c1 82 05 b4 4a 4d e5 be fb ee 0b 75 45 00 c1 83 9c ea 6a a6 be fb 2e 4b 96 2c 21 33 23 83 cc 89 42 eb 60 00 00 20 00 49 44 41 54 cc 4c 16 2f 5e cc a8 1b 6e a0 73 a7 4e e8 86 c1 ae 5d bb 68 dd a6 0d 87 0f 1f 26 35 25 85 8f 3f f9 84 ad 5b b6 70 c7 9d 77 d2 a9 53 27 da b6 6d 4b 71 71 31 d3 a7 4d 63 f3 e6 cd 8c 1e 35 8a 6b af bd 96 e3 c7 8f 53 5d 5d 4d 8f 1e 3d 42 df d1 e4 94 14 96 2c 59 c2 b6 ad 5b e9 d7 af 5f e8 e0 35 bc 76 44 fb ec d9 b3 e9 d0 a1 03 35 35 35 c4 c7 c7 d3 a6 4d 9b d0 fb 6f d7 ae 1d 9d 3b Data Ascii: p89bpM+UUU(eVHLL08@ILLOJJJJ-;w.'%9fbJMuEj.K,!3#B` IDATL/^nsN]h&5%?[pwS'mKqq1Mc5kS]]M=B,Y[_5vD555Mo;
2024-04-25 18:48:20 UTC	4461	IN	Data Raw: 70 35 55 cb 02 45 05 97 4b 21 2a 06 12 5b 5c de e3 39 d3 84 fc 83 26 c5 45 e0 ad b6 30 2f d3 7e a9 7b df 6e 8f 42 5c 1c 24 b7 52 d1 b4 4b bf 5d 21 84 b8 9c 24 d0 2f a2 aa 2a 8b b5 ab 0c 36 6f 30 39 9c 67 52 5c 6c 51 53 6d 61 59 57 ba 64 df 51 54 70 bb 15 62 e3 15 52 5a ab f4 e8 a3 d2 6f 90 86 cb 75 e9 92 b5 bc cc 62 e3 5a 83 43 07 4c 3c 61 0a 2e 8f 82 5d 03 8b cb 17 e8 28 50 5a 64 b1 7f 8f 45 e5 62 9d d4 d6 2a bd fa 6b 44 45 35 81 23 2d 21 84 b8 08 24 d0 2f 92 75 ab 0d 16 cc d6 c9 d9 6b 12 f0 5b d8 ed 0a 9a 0d 9c 2e a5 49 d4 ce eb 58 16 18 06 14 e4 5b e4 e5 ea 6c fc 5a 61 f9 97 06 e3 26 da e8 d1 e7 e2 57 5b bf 5e 61 b0 eb 5b 83 e4 56 2a d7 8d b5 13 13 a7 e0 74 5e f4 cd 9c 33 bf 0f 8a 8b 2c b6 6d 36 f8 e4 bd 00 9d ba 68 0c 1c 2a d5 75 21 c4 d5 4f 02 fd 02 Data Ascii: p5UEK![\9&E0/~{nB\$RK]!$/6o09gR\lQSmaYWdQTpbRZoubZCL<a.](PZdEbkDE5#-!$/uk[.IX[lZa&W[^a[Vt^3,m6h*u!O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.6	50028	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:19 UTC	841	OUT	GET /en-us/sharefile/media/int-export-1-qb.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:19 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 48518 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:19 GMT Etag: "3094aee7112e7c602fa7f306c997b576-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CK3QMANN611T595GXNKR X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:19 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 9e 08 06 00 00 00 62 b9 f3 b6 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 12 0e 23 23 9d 23 fd 92 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 55 75 82 ff ff d7 29 b7 e5 e6 de f4 5e 80 10 42 e8 20 1d a4 88 a0 82 28 38 80 08 8e 52 04 75 c6 b2 ce 6f 76 9d b2 b3 8f 75 74 67 7f b3 33 ee ce b8 ea cc 58 66 2d a0 cc c8 28 43 57 41 90 40 28 d2 7b 0f a4 87 90 7a 53 6e ee bd a7 7c ff 08 89 04 12 da 20 29 7c 9e 8f 87 0f c9 2d e7 7c ee b9 f7 9c f7 f9 94 f3 39 d2 ab af be 6a 22 b4 0b 92 24 e1 0f 04 c8 2f 28 24 31 3e 0e 8b c5 82 69 8a af 4f 10 84 b6 47 96 65 6a bd 5e ce 15 9f 27 39 31 01 59 96 c5 f1 ea 3b 26 b7 76 01 84 6b 67 9a 26 36 ab 15 67 50 10 e7 Data Ascii: PNGIHDRbpHYsttfxtIME### IDATxw\|Uu)^B (8Ruovutg3Xf-(CWA@({zSn\| )\|-\|9j"$/($1>iOGej^'91Y;&vkg&6gP
2024-04-25 18:48:19 UTC	2372	IN	Data Raw: 82 d0 75 1d 6f 5d 1d 3e 9f 8f 40 40 c3 6f e8 ad 5d 44 41 10 da 3d 09 45 91 b1 5a ad b8 5c 2e 1c 76 7b e3 28 76 d1 c4 de fa 44 a0 77 30 46 7d 3b 3c 92 24 11 ec 74 e2 0a 0e 6e ec eb 12 04 41 f8 47 35 8c df 31 0d 53 d4 c8 db 18 11 e8 1d 98 d8 d1 04 41 10 6e 1f e2 b2 35 41 10 04 41 e8 00 44 a0 0b 82 20 08 42 07 20 02 5d 10 04 41 10 3a 00 11 e8 82 20 08 82 d0 01 88 40 17 04 41 10 84 0e 40 04 ba 20 08 82 20 74 00 22 d0 05 41 10 04 a1 03 10 81 2e 08 82 20 08 1d 80 08 74 41 10 04 41 e8 00 6e ab 99 e2 c4 ed 44 05 41 10 da 37 71 e7 c8 96 a9 1d 25 e4 3a ca e7 10 04 41 10 5a 76 ad c7 fa db 31 f8 55 9f cf d7 da 65 b8 21 22 c0 05 41 10 84 6b 75 3b 04 bc aa 28 4a 6b 97 e1 9a 5c 1a e0 0d 7f df 0e 5f 92 20 08 82 70 63 9a cb 8a 8e 9a 1b aa 2c b7 8f 71 71 a2 46 2e 08 82 20 Data Ascii: uo]>@@o]DA=EZ\.v{(vDw0F};<$tnAG51SAn5AAD B ]A: @A@ t"A. tAAnDA7q%:AZv1Ue!"Aku;(Jk\_ pc,qqF.
2024-04-25 18:48:19 UTC	538	IN	Data Raw: 64 15 2b 1a 32 fa cd da 0e d7 cd 34 4d 64 59 6e 31 cc 01 fe ff 5f ff 9a 82 82 02 26 4c 98 c0 6f 7e fb 5b 06 0e 1c c8 90 21 43 90 65 19 c3 30 58 b6 6c 19 b3 67 cf a6 7b 5a 1a a7 4e 9d e2 8b 2f be 20 2e 2e 8e 9e 3d 7b d2 af 5f 3f 3e 5c b4 88 0d 1b 37 32 61 fc 78 02 81 00 9f 7d f6 19 81 40 80 81 83 06 35 9e ca e8 7a 33 db 40 92 f0 78 3c d4 d5 d5 61 b7 db bf 9b 0d 20 08 82 20 b4 29 17 02 5d c2 62 b3 52 53 74 9a 6d 19 19 7c 73 f8 28 e7 ca bc 4d 5e 28 5b 82 49 48 49 63 d0 f0 91 0c e9 9b 86 43 f6 5f 56 7b b6 da ed 78 b3 0f f1 d7 d7 3f e0 54 c0 20 ac fb 50 9e 9c fb 28 f1 76 3f fe 66 2a 8d 8a c5 86 bf ec 2c 5f ad fb 82 6d fb 8e 53 ee bd 28 b8 6d 6e 52 7b 0f 62 c2 f8 31 a4 44 3a f0 fb 03 f5 e5 50 2c 50 57 ca ce cd 1b 78 e8 7b df 23 3a 36 fe a6 6e 90 6b 61 9a 26 86 Data Ascii: d+24MdYn1_&Lo~[!Ce0Xlg{ZN/ ..={_?>\72ax}@5z3@x<a )]bRStm\|s(M^([IHIcC_V{x?T P(v?f*,_mS(mnR{b1D:P,PWx{#:6nka&
2024-04-25 18:48:19 UTC	4744	IN	Data Raw: fd 2a 8a 42 ff 7e fd 28 2f 2b 63 c3 86 0d 18 86 81 44 fd 84 33 12 50 5c 5c cc aa d5 ab 79 68 ea 54 9e 78 e2 09 42 dc 6e 5e 7e e5 15 7e fe b3 9f b1 61 c3 06 7a f7 ee 8d 69 9a 3c f5 e4 93 24 25 25 f1 fa 1b 6f 10 13 13 c3 2b 2f bf cc 94 29 53 00 e8 d5 ab 17 9f 7d f6 19 7f fc c3 1f f8 72 dd 3a 22 23 22 78 f3 cd 37 99 35 6b 16 56 8b 05 d5 62 61 d0 a0 41 24 27 27 37 29 9b d5 62 e1 a5 97 5e c2 e9 74 f2 d5 86 0d 9c bf d0 a7 2f 08 82 20 74 6c d2 ef 5e 7b dd f4 15 1f e2 c3 f7 16 71 a4 a0 16 14 1b c9 3d 87 30 76 e4 20 ba 24 46 13 64 91 a8 2e 2b e4 d4 e1 5d 6c da bc 9b 82 ca 3a 50 dc 0c 9f f2 28 d3 c6 f6 c4 a6 d5 72 f2 f8 61 4e 9d 2d a2 bc f0 24 7b 0e 9f 21 20 5b 91 02 7e c2 7a 0c e7 89 c7 67 d5 d7 d0 b5 8b 6a f3 92 8c 4d d5 d8 bd 66 11 1f 7d 79 08 4d b2 10 97 7a 07 Data Ascii: *B~(/+cD3P\\yhTxBn^~~azi<$%%o+/)S}r:"#"x75kVbaA$''7)b^t/ tl^{q=0v $Fd.+]l:P(raN-${! [~zgjMf}yMz
2024-04-25 18:48:20 UTC	5930	IN	Data Raw: 19 c4 c6 c6 32 64 c8 20 54 d5 82 df df fc f5 e6 a6 69 a2 5a 2c 28 6a cb 5d 76 a6 69 12 e2 72 37 5b 53 f6 f9 02 a8 aa 8a 24 d5 ef 97 56 ab 15 c3 30 a8 ab fb 76 80 ab 3f e0 47 96 64 6c 36 1b a5 65 e5 8d 8f eb 86 81 61 1a a8 16 15 e5 c2 49 7d 03 e3 c2 f5 ba 2d 7d 4e e1 e6 13 81 7e 03 a2 e3 24 82 5d 10 08 70 c5 c9 64 64 b9 be 09 fe 4a 99 a5 eb 10 1a 0e 11 91 2d bf 48 d3 34 ea 2e d4 aa cb cb cb f9 64 e9 52 4c d3 64 e8 d0 a1 78 3c 1e 62 62 63 19 30 60 00 5d bb 76 65 d3 a6 4d d4 d6 d6 72 fc f8 71 96 2f 5f ce 8f 5e 78 81 29 53 a6 f0 d2 2f 7f 49 71 71 31 c1 c1 c1 94 96 95 51 57 57 87 aa aa 8d c1 aa eb 7a e3 25 2d 0d eb 34 4d 93 82 82 02 5c 6e 37 53 a7 4c 21 2f 2f 8f b3 d9 d9 0c b9 a8 56 5e 54 54 74 e1 73 e8 f8 fd 7e 7a f6 ec c9 f2 e5 cb 59 b7 6e 1d 63 c7 8c 61 c5 Data Ascii: 2d TiZ,(j]vir7[S$V0v?Gdl6eaI}-}N~$]pddJ-H4.dRLdx<bbc0`]veMrq/_^x)S/Iqq1QWWz%-4M\n7SL!//V^TTts~zYnca
2024-04-25 18:48:20 UTC	7116	IN	Data Raw: bc a1 6c aa aa 62 b3 db 39 72 e4 08 21 a1 a1 cc 98 31 83 d8 d8 58 1e 7b ec 31 06 0c 18 80 61 18 3c fc f0 c3 0c 1e 3c 98 93 27 4f 62 52 df 77 2e 4b 12 91 91 91 b8 dd 6e e2 e2 e2 b0 5a ad 8d 21 b7 7b d7 2e 46 8e 1c c9 b0 61 c3 e8 d4 a9 13 73 e7 ce 25 37 27 87 82 82 02 12 13 13 79 e0 81 07 88 8b 8d 65 fc f8 f1 48 92 84 a7 aa ea 1a 8f 96 c2 ad 54 ff 0b 41 42 92 64 30 74 4c d3 c0 12 9a c0 d0 d4 74 62 5d 32 9a 6e 22 c9 2a aa 22 23 9b 01 94 d0 ce 0c 19 16 47 79 49 3e a7 4f 1f a0 f0 5c 2a fd fb 25 5f 18 d9 de d0 17 67 20 5b dd f4 bc 63 28 35 9e 32 ce 64 9d 61 6f 41 21 bd fa f6 26 d4 a1 60 b4 f3 7e f4 40 20 40 54 64 24 73 e6 cc 69 b2 03 37 e8 9e 9e 4e 4e 4e 0e 49 c9 c9 40 7d 9f 65 54 54 14 41 17 bd 36 28 28 88 aa ea 6a 34 5d 27 f8 92 83 80 69 9a 68 9a 46 78 58 58 Data Ascii: lb9r!1X{1a<<'ObRw.KnZ!{.Fas%7'yeHTABd0tLtb]2n""#GyI>O\%_g [c(52daoA!&`~@ @Td$si7NNNI@}eTTA6((j4]'ihFxXX
2024-04-25 18:48:20 UTC	8302	IN	Data Raw: d3 f9 f9 04 04 06 72 ef bd f7 52 5b 5b 4b 7f 7f 3f 4b 97 2e 65 59 76 36 eb d6 ad 23 35 35 f5 aa f7 5a bd 7a 35 6f 6e df 8e cb e5 62 64 64 84 71 bb 9d ac ac 2c b6 6f df ce ea d5 ab 59 b7 6e 1d 00 2f 6d de cc a9 53 a7 08 0d 0b c3 cf cf 4f fa bd af af 2f 82 20 a0 56 ab 59 bd 7a 35 2a 95 0a f1 43 1e c8 63 c7 8e 11 16 1a ca cf 7f fe 73 00 72 4f 9e a4 b6 b6 96 c5 8b 16 11 13 1b cb 7d f7 dd 47 78 78 38 e1 61 61 94 96 96 92 92 92 42 49 69 29 8f 3c fc 30 89 49 49 d8 ed 76 fe f0 87 3f 70 fe fc 79 2a 2a 2a c8 ca ca e2 9e 7b ee 01 e0 ad b7 df e6 f8 89 13 ac 58 be 1c ab d5 ca 6d b7 dd 46 60 60 20 87 8f 1c e1 62 73 33 65 65 65 fc e7 7f fe 27 51 91 91 b4 b6 b6 f2 c2 0b 2f 90 7d dd 75 92 26 35 36 36 c6 8d 37 dc c0 9a 35 6b 00 58 bf 7e 3d 75 75 75 04 04 04 10 1e 1e ce 5d Data Ascii: rR[[K?K.eYv6#55Zz5onbddq,oYn/mSO/ VYz5CcsrO}Gxx8aaBIi)<0IIv?py**{XmF`` bs3eee'Q/}u&56675kX~=uuu]
2024-04-25 18:48:20 UTC	3101	IN	Data Raw: 91 91 c1 f1 e3 c7 e9 eb eb c3 64 32 21 78 3c 98 da db 51 28 95 68 34 1a a2 a3 a3 a9 a8 a8 e0 df 7e f6 33 6f 2c fa 82 02 0e 1d 3a c4 e2 c5 8b 19 1b 1b 23 21 21 81 1f de 7f 3f 16 8b 85 a7 9e 7a 8a c1 c1 41 1e 7a e8 21 dc 1e 0f 8f 3c fc f0 34 bf 8d 95 2b 57 72 c7 b7 be c5 9c 39 73 58 b6 6c 19 a7 f2 f2 a8 af af e7 37 8f 3d 86 bf bf 3f 27 72 73 79 ff c0 01 66 65 66 62 98 d0 d4 0f 1f 3e cc 8c 90 10 1e 7b ec 31 00 9e 7a ea 29 ce 9f 3f cf f7 be fb 5d 5e 7e e5 15 86 87 86 18 1e 1e e6 de 7b ee c1 e5 72 d1 d1 d1 e1 cd 2b 7e eb ad 8c 8d 8d f1 c4 13 4f 70 e6 cc 19 2a 2b 2b 49 4e 4e e6 de 7b ef 05 e0 0f 4f 3e 49 6e 6e 2e c9 c9 c9 58 ad 56 7e fe e8 a3 52 8a d4 3b ef bc 93 c0 a0 20 be 7e cb 2d 52 d9 fd fd fd f9 e1 7d f7 61 34 1a f9 c5 cf 7f 0e 80 6d 6c 8c 39 b3 67 f3 6f Data Ascii: d2!x<Q(h4~3o,:#!!?zAz!<4+Wr9sXl7=?'rsyfefb>{1z)?]^~{r+~Op*++INN{O>Inn.XV~R; ~-R}a4ml9go
2024-04-25 18:48:20 UTC	10674	IN	Data Raw: de 9d aa aa 2a 1c 0e 07 97 8d 1d 4b 58 58 18 11 11 11 cc 9c 35 8b e5 cb 97 93 dd b3 27 0d 0d 0d 28 4d ef 65 97 2e 5d e8 d8 b1 23 86 61 50 58 58 48 66 66 26 1d 3b 76 0c 05 4f 72 72 72 ab cf 4a e7 ce 9d 99 3b 77 2e fb f6 ed e3 8a 2b ae 20 39 29 89 77 df 7b 8f 05 0b 16 d0 25 25 85 db 6f bf 3d d4 15 01 04 4f 72 1a 1b 99 f1 e6 9b 2c 5a b4 88 5e 39 39 f4 57 d4 27 dc 00 00 20 00 49 44 41 54 ea d5 8b 85 0b 17 32 7e dc 38 b2 7b f4 40 37 0c 76 ee dc 49 6a 5a 1a fb f7 ef 27 25 39 99 0f 3f fa 88 2d 9b 37 73 d3 cd 37 d3 a3 47 0f 32 32 32 a8 ac ac 64 d6 cc 99 6c da b4 89 09 e3 c7 73 e9 a5 97 52 51 51 41 63 63 23 fd fb f7 0f 7d 46 93 92 93 59 b4 68 11 5b b7 6c 61 c8 90 21 a1 93 d7 88 a6 11 ed 73 e6 cc 21 2b 2b 0b af d7 4b 87 0e 1d 48 4b 4b 0b bd fe ae 5d bb 92 9d 9d 4d Data Ascii: *KXX5'(Me.]#aPXXHff&;vOrrrJ;w.+ 9)w{%%o=Or,Z^99W' IDAT2~8{@7vIjZ'%9?-7s7G222dlsRQQAcc#}FYh[la!s!++KHKK]M
2024-04-25 18:48:20 UTC	5076	IN	Data Raw: b8 a0 45 4f 97 38 03 24 d0 4f 82 a2 40 f7 6c 0d bf 1f 36 ac 6e db 5d c8 84 10 e2 87 a4 30 cf e4 db ad 26 89 89 0a 5d d2 24 72 ce 24 39 ba 27 69 c0 60 8d b0 70 85 ef 76 98 6c dd 24 b5 74 21 84 38 96 65 8b 75 3c f5 16 19 99 2a 29 12 e8 67 94 1c dd 93 d4 b5 bb ca e0 8b 35 ca 4b 2d 3e 98 e5 a7 ae f6 ac 5c f5 27 84 10 17 9c e5 8b 75 96 2f d6 09 8f 54 b8 6c a2 0d 55 12 e7 8c 92 c3 7b 92 6c 36 b8 6a aa 8d b4 0c 95 6d 9b 4d de 78 21 40 7d 9d 84 ba 10 42 b4 b4 61 b5 c1 db 6f 04 f0 36 c2 98 71 1a 7d 07 69 e7 ba 48 ed 9e 04 7a 1b a4 77 55 b9 fd 3e 3b 71 1d 14 96 2e 32 78 ea cf 7e b6 6c 94 e6 77 21 84 a8 ad b1 f8 f0 ed 00 cf ff cb 4f 59 89 c5 c5 a3 6c 5c 77 8b bd cd 97 fa 8a 13 27 d7 a1 b7 d1 c0 21 1a d3 1f 72 30 e3 c5 00 1b d7 1a 14 ef 35 c9 ea a9 32 70 88 46 5a ba Data Ascii: EO8$O@l6n]0&]$r$9'i`pvl$t!8eu<*)g5K->\'u/TlU{l6jmMx!@}Bao6q}iHzwU>;q.2x~lw!OYl\w'!r052pFZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.6	50026	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:19 UTC	840	OUT	GET /en-us/sharefile/media/int-export-1-x.png HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.607868412.1714070894; _gid=GA1.3.1407328298.1714070894
2024-04-25 18:48:19 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 47350 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: image/png Date: Thu, 25 Apr 2024 18:48:19 GMT Etag: "6f11d28133ccc8894c4e20dd0b6e6a39-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CK46YM7MK11RR9EBRS6G X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:19 UTC	665	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 9e 08 06 00 00 00 62 b9 f3 b6 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 00 07 74 49 4d 45 07 e8 03 12 0f 24 1f fc cf 7d e5 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 55 75 82 ff ff d7 29 b7 e5 e6 de f4 5e 80 10 42 e8 20 1d a4 88 a0 82 28 38 80 08 8e 52 04 75 c6 b2 ce 6f 76 9d b2 b3 8f 75 74 67 7f b3 33 ee ce b8 ea cc 58 66 2d a0 cc c8 28 43 57 41 90 40 28 d2 7b 0f a4 87 90 7a 53 6e ee bd a7 7c ff 08 89 04 12 da 20 29 7c 9e 8f 87 0f c9 2d e7 7c ee b9 f7 9c f7 f9 94 f3 39 d2 ab af be 6a 22 b4 0b 92 24 e1 0f 04 c8 2f 28 24 31 3e 0e 8b c5 82 69 8a af 4f 10 84 b6 47 96 65 6a bd 5e ce 15 9f 27 39 31 01 59 96 c5 f1 ea 3b 26 b7 76 01 84 6b 67 9a 26 36 ab 15 67 50 10 e7 Data Ascii: PNGIHDRbpHYsttfxtIME$} IDATxw\|Uu)^B (8Ruovutg3Xf-(CWA@({zSn\| )\|-\|9j"$/($1>iOGej^'91Y;&vkg&6gP
2024-04-25 18:48:19 UTC	2372	IN	Data Raw: 82 d0 75 1d 6f 5d 1d 3e 9f 8f 40 40 c3 6f e8 ad 5d 44 41 10 da 3d 09 45 91 b1 5a ad b8 5c 2e 1c 76 7b e3 28 76 d1 c4 de fa 44 a0 77 30 46 7d 3b 3c 92 24 11 ec 74 e2 0a 0e 6e ec eb 12 04 41 f8 47 35 8c df 31 0d 53 d4 c8 db 18 11 e8 1d 98 d8 d1 04 41 10 6e 1f e2 b2 35 41 10 04 41 e8 00 44 a0 0b 82 20 08 42 07 20 02 5d 10 04 41 10 3a 00 11 e8 82 20 08 82 d0 01 88 40 17 04 41 10 84 0e 40 04 ba 20 08 82 20 74 00 22 d0 05 41 10 04 a1 03 10 81 2e 08 82 20 08 1d 80 08 74 41 10 04 41 e8 00 6e ab 99 e2 c4 ed 44 05 41 10 da 37 71 e7 c8 96 a9 1d 25 e4 3a ca e7 10 04 41 10 5a 76 ad c7 fa db 31 f8 55 9f cf d7 da 65 b8 21 22 c0 05 41 10 84 6b 75 3b 04 bc aa 28 4a 6b 97 e1 9a 5c 1a e0 0d 7f df 0e 5f 92 20 08 82 70 63 9a cb 8a 8e 9a 1b aa 2c b7 8f 71 71 a2 46 2e 08 82 20 Data Ascii: uo]>@@o]DA=EZ\.v{(vDw0F};<$tnAG51SAn5AAD B ]A: @A@ t"A. tAAnDA7q%:AZv1Ue!"Aku;(Jk\_ pc,qqF.
2024-04-25 18:48:19 UTC	538	IN	Data Raw: 64 15 2b 1a 32 fa cd da 0e d7 cd 34 4d 64 59 6e 31 cc 01 fe ff 5f ff 9a 82 82 02 26 4c 98 c0 6f 7e fb 5b 06 0e 1c c8 90 21 43 90 65 19 c3 30 58 b6 6c 19 b3 67 cf a6 7b 5a 1a a7 4e 9d e2 8b 2f be 20 2e 2e 8e 9e 3d 7b d2 af 5f 3f 3e 5c b4 88 0d 1b 37 32 61 fc 78 02 81 00 9f 7d f6 19 81 40 80 81 83 06 35 9e ca e8 7a 33 db 40 92 f0 78 3c d4 d5 d5 61 b7 db bf 9b 0d 20 08 82 20 b4 29 17 02 5d c2 62 b3 52 53 74 9a 6d 19 19 7c 73 f8 28 e7 ca bc 4d 5e 28 5b 82 49 48 49 63 d0 f0 91 0c e9 9b 86 43 f6 5f 56 7b b6 da ed 78 b3 0f f1 d7 d7 3f e0 54 c0 20 ac fb 50 9e 9c fb 28 f1 76 3f fe 66 2a 8d 8a c5 86 bf ec 2c 5f ad fb 82 6d fb 8e 53 ee bd 28 b8 6d 6e 52 7b 0f 62 c2 f8 31 a4 44 3a f0 fb 03 f5 e5 50 2c 50 57 ca ce cd 1b 78 e8 7b df 23 3a 36 fe a6 6e 90 6b 61 9a 26 86 Data Ascii: d+24MdYn1_&Lo~[!Ce0Xlg{ZN/ ..={_?>\72ax}@5z3@x<a )]bRStm\|s(M^([IHIcC_V{x?T P(v?f*,_mS(mnR{b1D:P,PWx{#:6nka&
2024-04-25 18:48:19 UTC	4744	IN	Data Raw: fd 2a 8a 42 ff 7e fd 28 2f 2b 63 c3 86 0d 18 86 81 44 fd 84 33 12 50 5c 5c cc aa d5 ab 79 68 ea 54 9e 78 e2 09 42 dc 6e 5e 7e e5 15 7e fe b3 9f b1 61 c3 06 7a f7 ee 8d 69 9a 3c f5 e4 93 24 25 25 f1 fa 1b 6f 10 13 13 c3 2b 2f bf cc 94 29 53 00 e8 d5 ab 17 9f 7d f6 19 7f fc c3 1f f8 72 dd 3a 22 23 22 78 f3 cd 37 99 35 6b 16 56 8b 05 d5 62 61 d0 a0 41 24 27 27 37 29 9b d5 62 e1 a5 97 5e c2 e9 74 f2 d5 86 0d 9c bf d0 a7 2f 08 82 20 74 6c d2 ef 5e 7b dd f4 15 1f e2 c3 f7 16 71 a4 a0 16 14 1b c9 3d 87 30 76 e4 20 ba 24 46 13 64 91 a8 2e 2b e4 d4 e1 5d 6c da bc 9b 82 ca 3a 50 dc 0c 9f f2 28 d3 c6 f6 c4 a6 d5 72 f2 f8 61 4e 9d 2d a2 bc f0 24 7b 0e 9f 21 20 5b 91 02 7e c2 7a 0c e7 89 c7 67 d5 d7 d0 b5 8b 6a f3 92 8c 4d d5 d8 bd 66 11 1f 7d 79 08 4d b2 10 97 7a 07 Data Ascii: *B~(/+cD3P\\yhTxBn^~~azi<$%%o+/)S}r:"#"x75kVbaA$''7)b^t/ tl^{q=0v $Fd.+]l:P(raN-${! [~zgjMf}yMz
2024-04-25 18:48:19 UTC	2733	IN	Data Raw: 19 c4 c6 c6 32 64 c8 20 54 d5 82 df df fc f5 e6 a6 69 a2 5a 2c 28 6a cb 5d 76 a6 69 12 e2 72 37 5b 53 f6 f9 02 a8 aa 8a 24 d5 ef 97 56 ab 15 c3 30 a8 ab fb 76 80 ab 3f e0 47 96 64 6c 36 1b a5 65 e5 8d 8f eb 86 81 61 1a a8 16 15 e5 c2 49 7d 03 e3 c2 f5 ba 2d 7d 4e e1 e6 13 81 7e 03 a2 e3 24 82 5d 10 08 70 c5 c9 64 64 b9 be 09 fe 4a 99 a5 eb 10 1a 0e 11 91 2d bf 48 d3 34 ea 2e d4 aa cb cb cb f9 64 e9 52 4c d3 64 e8 d0 a1 78 3c 1e 62 62 63 19 30 60 00 5d bb 76 65 d3 a6 4d d4 d6 d6 72 fc f8 71 96 2f 5f ce 8f 5e 78 81 29 53 a6 f0 d2 2f 7f 49 71 71 31 c1 c1 c1 94 96 95 51 57 57 87 aa aa 8d c1 aa eb 7a e3 25 2d 0d eb 34 4d 93 82 82 02 5c 6e 37 53 a7 4c 21 2f 2f 8f b3 d9 d9 0c b9 a8 56 5e 54 54 74 e1 73 e8 f8 fd 7e 7a f6 ec c9 f2 e5 cb 59 b7 6e 1d 63 c7 8c 61 c5 Data Ascii: 2d TiZ,(j]vir7[S$V0v?Gdl6eaI}-}N~$]pddJ-H4.dRLdx<bbc0`]veMrq/_^x)S/Iqq1QWWz%-4M\n7SL!//V^TTts~zYnca
2024-04-25 18:48:20 UTC	7116	IN	Data Raw: e7 9d 77 72 ec d8 31 32 33 33 b9 ff fe fb d9 b7 6f 1f 86 69 b2 e1 ab af 40 92 98 3b 67 0e bd 7b f7 06 60 d3 a6 4d ac 5a b5 0a 6f 5d 1d a3 47 8d 62 ea d4 a9 54 55 55 b1 7a cd 1a 14 45 a1 b0 a0 80 51 a3 46 f1 c1 07 1f 70 e6 cc 19 2a 2a 2a 78 ea a9 a7 50 55 95 a0 a0 20 d6 af 5f 4f 75 75 35 a7 4f 9f e6 c8 d1 a3 cc 7c f8 61 26 4c 98 80 69 9a ac 59 b3 86 d5 6b d6 90 10 1f cf 80 01 03 08 04 02 4c 9d 3a b5 b1 cc 59 59 59 bc f7 fe fb 94 9c 3f cf 5d e3 c6 f1 d0 d4 a9 58 2c 16 b6 6d db c6 d2 a5 4b f1 fb fd 4c 9d 3a 95 f1 e3 c7 73 3a 2b 8b ed db b6 a1 28 0a 19 9b 37 d3 35 25 85 85 0b 17 e2 76 bb 39 71 f2 24 ef be fb 2e 01 bf 9f a1 c3 86 a1 1b 06 0e 87 83 b2 b2 32 de 7d f7 5d 4e 9f 3e cd e0 21 43 78 74 f6 6c 1c 0e 47 e3 fa 2b 2b 2b f9 e8 a3 8f d8 b5 7b 37 29 29 29 cc Data Ascii: wr1233oi@;g{`MZo]GbTUUzEQFp***xPU _Ouu5O\|a&LiYkL:YYY?]X,mKL:s:+(75%v9q$.2}]N>!CxtlG+++{7)))
2024-04-25 18:48:20 UTC	8302	IN	Data Raw: ab bd 91 e3 dc 2e 27 6e cf 95 66 a9 7f 46 81 fe 49 b1 58 2c bc f6 fa eb fc eb 8f 7e 44 e0 94 35 ed cf 9a f2 f2 72 76 ee dc 49 42 62 22 4e 87 03 4b 7f 3f f7 dd 7b ef 35 bf e5 64 e3 f3 cf 73 fd ca 95 d2 e4 64 92 92 92 12 8e 1c 3d 8a dd 6e e7 67 3f fd e9 3f c5 d8 91 b9 f6 70 38 1c 3c b7 69 13 77 7d e7 3b c4 c5 c6 4e fb ee dc f9 f3 54 54 54 f0 af 3f fa d1 e7 54 ba 6b 8f 2f 93 40 57 3b a6 98 50 a7 22 8a 02 2e a7 83 2b c3 56 88 78 dc 4e 3c 57 f1 81 11 05 37 0e 87 f7 0b 85 02 04 8f 1b e7 c4 89 5f 66 27 0a 7f 7f 7f be 7d e7 9d d3 f6 1c ff 23 98 3f 7f 3e e1 e1 e1 14 9d 3d 8b 4a a5 e2 fb df ff fe 55 35 a3 6b 8d db d7 ad 23 e8 2a 13 27 bd 5e 4f 4a 4a 0a d7 2d 5d 2a 0b 73 99 cf 0d b5 5a cd 9d df fa 16 a1 13 16 b5 a9 a4 a7 a7 13 15 19 f9 39 94 4a e6 5a 40 fd d1 a7 c8 Data Ascii: .'nfFIX,~D5rvIBb"NK?{5dsd=ng??p8<iw};NTTT?Tk/@W;P".+VxN<W7_f'}#?>=JU5k#'^OJJ-]sZ9JZ@
2024-04-25 18:48:20 UTC	9142	IN	Data Raw: 7c a0 0d 46 a1 f8 eb 9f 69 c7 3f 05 2b b7 52 a5 41 70 0c d0 3f de 4f 44 c4 42 14 97 40 f0 38 b0 0e 0d e1 74 09 18 62 92 88 4c 0e 03 57 33 88 20 22 a2 51 80 63 6c 84 21 bb 13 8f a8 61 66 7a 26 a1 ba 2f de 1a 86 8c 8c 8c 8c 8c cc e7 c1 47 46 8a fb b0 cf 1f 1f 11 51 54 a0 52 6b f0 f5 f1 c1 61 1b e2 dc a9 7c 46 48 e0 c6 e4 70 06 07 22 88 1a f7 65 d1 ea af 10 aa b4 52 5d 5e 81 53 ad 46 e9 16 70 bb dd f8 05 44 10 14 16 8b 31 65 36 cb 67 46 62 6d 6f a0 ba b9 1f f1 53 31 15 c8 c8 c8 c8 c8 c8 fc f3 f3 a1 02 fd f2 c0 2f 1f 19 08 e6 03 50 aa d4 e0 e9 23 ff d0 bb 54 fb fb 82 12 7c f5 31 dc f0 d5 85 e8 3c 1e 7c 67 cd 26 c6 71 9e 23 3b fe 82 07 0f be 86 70 16 27 1a 50 59 40 89 88 e0 17 c6 e2 99 09 9c ad c8 e3 9d 72 0f 2e 97 8a c8 a4 59 e8 7c 65 81 2e 23 23 23 23 23 03 Data Ascii: \|Fi?+RAp?ODB@8tbLW3 "Qcl!afz&/GFQTRka\|FHp"eR]^SFpD1e6gFbmoS1/P#T\|1<\|g&q#;p'PY@r.Y\|e.#####
2024-04-25 18:48:20 UTC	10674	IN	Data Raw: 07 98 a6 49 58 58 18 a9 55 c1 0c 60 b7 db 6b b4 10 44 47 47 53 5a 5a 1a 0c c5 80 82 82 02 56 af 59 43 45 45 05 76 bb 9d 07 ee bf 9f 97 5e 7a 89 87 1e 7c 90 ad 5b b6 30 6f fe 7c c2 c3 c3 f1 78 3c 54 54 54 a0 28 0a 91 51 51 74 ed da 95 03 07 0f f2 e4 53 4f 51 52 52 12 5c 9f c5 62 e1 c0 81 03 f4 ee dd 9b 67 fe fc 67 16 2f 5e cc d1 a3 47 01 f0 f9 7c c4 c6 c6 f2 c4 e3 8f f3 7f ff f7 7f fc ed af 7f 65 fa f5 d7 f3 f6 db 6f 53 51 51 51 a3 5c 33 66 cc 60 f3 96 2d 74 ed d6 8d e4 e4 64 3c 6e 37 a6 69 62 98 26 b7 dc 72 0b 71 71 71 fc e6 b7 bf 65 cb d6 ad c1 ae 90 31 63 c6 50 5e 5e 4e fe a9 53 8c 1b 3b b6 fe 37 54 08 21 2e 30 09 f4 f3 a0 2a 0a 3e c3 20 bb f0 04 ba 69 10 61 73 a0 57 05 80 db e7 c5 f0 79 f1 f8 3c 3c bf 7e 11 5f 65 7d c3 f4 fe 13 78 70 f4 1c 6c 16 2b 34 Data Ascii: IXXU`kDGGSZZVYCEEv^z\|[0o\|x<TTT(QQtSOQRR\bgg/^G\|eoSQQQ\3f`-td<n7ib&rqqqe1cP^^NS;7T!.0*> iasWy<<~_e}xpl+4
2024-04-25 18:48:20 UTC	1064	IN	Data Raw: 6e 77 44 ed 32 d0 85 10 42 88 f6 aa bd 86 7f 87 0d 74 45 51 50 2f f6 15 46 84 10 42 74 28 ed 35 7c 2f 84 0e 95 88 b5 df 98 f2 f2 f2 36 2a 89 10 42 88 8e a0 b2 b2 f2 92 a9 fc b5 8b 57 d9 dc be 0c 55 55 31 4d 93 8d 1b 37 e2 f3 f9 2e 64 d1 84 10 42 74 50 59 59 59 64 65 65 11 16 16 56 63 79 53 32 a7 23 d6 ec 3b c4 e5 53 15 45 c1 ac 75 61 71 8b c5 c2 ae 5d bb 00 18 35 6a 14 4e a7 33 78 5f ed c7 0a 21 84 08 7d d5 43 f8 d8 b1 63 ac 5e bd 9a 8a 8a 8a 73 02 3d 54 75 88 40 87 73 43 5d 55 55 6c 36 1b bb 77 ef 66 cf 9e 3d 00 18 86 51 e3 ff da c1 2e 41 2f 84 10 1d 5b 7d b5 e9 da 3f 81 e5 36 9b ed 9c c7 85 aa 8b 16 e8 75 d5 b2 9b f3 f8 ea 6f 42 60 79 20 d4 75 5d c7 34 cd 60 3f 49 e0 ff 40 b0 d7 7e 9e 10 42 88 8e ab b1 53 9b c1 9f 03 9a a6 d5 08 f7 a6 3c bf f6 fd 1d 49 Data Ascii: nwD2BtEQP/FBt(5\|/6*BWUU1M7.dBtPYYYdeeVcyS2#;SEuaq]5jN3x_!}Cc^s=Tu@sC]UUl6wf=Q.A/[}?6uoB`y u]4`?I@~BS<I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.6	50032	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:20 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070899607 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:20 UTC	984	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:48:20 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7aprapj6ovow X-Cloud-Trace-Context: 4605e50fa4c82db6cd8fcaa8e1a3f4bc Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CMPt4YXE2suFNhAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.6	50033	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:20 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=eb81&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:20 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:20 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 def26d054ec95b961e8352e3cd4fae7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: oKldawDl5CmoW_b06NhNCl5Z0K15BDwbS6B2YGDhfSh7S4-73dC2bw== Vary: Origin
2024-04-25 18:48:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.6	50036	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:20 UTC	884	OUT	GET /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
2024-04-25 18:48:20 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:20 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CM0VSY5VHKV1FBBXJ9EB Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.6	50037	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:20 UTC	659	OUT	POST /api/v2/sendInsights?1714070899607 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1452 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 1711877603 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:20 UTC	1452	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:48:21 UTC	723	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:21 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: uqard973m9n2 X-Cloud-Trace-Context: 2da03f7abd3cc42a2758b39d3df4cca1 Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CKPvxq-hoq_B-QEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:21 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.6	50039	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:21 UTC	870	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:21 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:21 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CMNHBC4KKMW91C4S3YAJ Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.6	50041	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:21 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=eb81&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:21 UTC	1482	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:20 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 38d213e81ab517fd857234c4eccd4632.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 6rJWj7SKcC8q8AgyFI9ZrSlgg2DjwInrSSIU6wwkat9t12GWOhl2IQ== Age: 1 Vary: Origin
2024-04-25 18:48:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.6	50043	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:22 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 44 67 4d 45 31 63 64 72 45 30 6d 77 7a 75 6f 38 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 37 63 38 35 63 65 61 34 61 39 63 65 65 65 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: DgME1cdrE0mwzuo8.1Context: 67c85cea4a9ceee1
2024-04-25 18:48:22 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-25 18:48:22 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 44 67 4d 45 31 63 64 72 45 30 6d 77 7a 75 6f 38 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 37 63 38 35 63 65 61 34 61 39 63 65 65 65 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 61 74 48 6d 42 69 45 6b 54 6b 76 39 78 7a 55 6a 37 47 35 62 58 6f 78 45 4f 50 44 7a 48 49 52 4f 2f 67 38 62 41 51 76 57 70 45 35 6d 45 6c 65 54 68 69 47 34 75 78 53 63 30 53 57 4c 57 77 4f 64 74 47 34 55 37 32 6c 6d 49 61 2b 45 67 50 63 2b 39 57 49 37 36 45 34 75 31 72 67 36 4a 45 36 49 66 34 39 44 4c 54 37 4a 47 71 69 61 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: DgME1cdrE0mwzuo8.2Context: 67c85cea4a9ceee1<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASatHmBiEkTkv9xzUj7G5bXoxEOPDzHIRO/g8bAQvWpE5mEleThiG4uxSc0SWLWwOdtG4U72lmIa+EgPc+9WI76E4u1rg6JE6If49DLT7JGqia
2024-04-25 18:48:22 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 44 67 4d 45 31 63 64 72 45 30 6d 77 7a 75 6f 38 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 37 63 38 35 63 65 61 34 61 39 63 65 65 65 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: DgME1cdrE0mwzuo8.3Context: 67c85cea4a9ceee1<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-25 18:48:22 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-25 18:48:22 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 59 66 30 34 56 70 79 2b 55 53 37 64 33 6a 53 54 69 75 4e 47 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TYf04Vpy+US7d3jSTiuNGA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.6	50044	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:22 UTC	406	OUT	GET /api/v2/sendInsights?1714070899607 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:48:23 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:23 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 7aprxvjjxuey X-Cloud-Trace-Context: cc1e03bda0f5139b81c5e18e37de7744 Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:23 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.6	50046	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:23 UTC	1128	OUT	GET /en-us/sharefile/sharefile-app HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900
2024-04-25 18:48:23 UTC	536	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 135929 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:48:23 GMT Etag: "b7befbe5bc441ce33d28944e6de4edfa-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CPMMH6T3ESNC7TK6NCQV X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:23 UTC	650	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:48:23 UTC	2372	IN	Data Raw: 5f 70 72 6f 64 75 63 74 22 20 63 6f 6e 74 65 6e 74 3d 22 73 68 61 72 65 66 69 6c 65 5f 6d 61 69 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 46 65 62 72 75 61 72 79 20 31 35 2c 20 32 30 32 34 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 74 5f 66 6c 79 5f 70 72 6f 76 69 64 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 5f 63 6f 64 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 3e 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 72 46 51 38 6a 4b 70 50 58 66 74 58 64 75 73 4e 6b 39 70 6d Data Ascii: _product" content="sharefile_main"> <meta name="lastModified" content="February 15, 2024"><meta name="mt_fly_provider" content=""> <meta name="lang_code" content="en-us"> <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm
2024-04-25 18:48:23 UTC	538	IN	Data Raw: 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 69 74 72 69 78 5f 70 72 6f 5f 64 6f 63 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 50 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 22 20 76 61 6c 75 65 3d 22 54 72 79 20 61 20 64 69 66 66 65 72 65 6e 74 20 6f 72 20 6c 65 73 73 20 73 70 65 63 69 66 69 63 20 71 75 65 72 79 2e 20 52 65 6d 6f 76 65 20 61 6e 79 20 73 65 6c 65 63 74 65 64 20 66 69 6c 74 65 72 73 2e 20 45 78 61 6d 70 6c 65 20 71 75 65 72 69 65 73 20 69 6e 63 6c 75 64 65 20 75 70 67 72 61 64 65 2c 20 77 6f 72 6b 73 70 61 63 65 2c 20 63 65 72 74 69 66 69 63 61 74 65 2e 22 3e 0d Data Ascii: type="hidden" id="search_citrix_pro_doc" value="Search Product documentation"><input type="hidden" id="search_query" value="Try a different or less specific query. Remove any selected filters. Example queries include upgrade, workspace, certificate.">
2024-04-25 18:48:23 UTC	4744	IN	Data Raw: 64 3d 22 73 65 61 72 63 68 5f 73 68 6f 77 5f 6d 6f 72 65 22 20 76 61 6c 75 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 69 6e 20 61 6c 6c 20 70 72 6f 64 75 63 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 66 65 61 74 75 72 65 64 22 20 76 61 6c 75 65 3d 22 46 65 61 74 75 72 65 64 20 74 6f 70 69 63 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 61 63 74 69 76 65 5f 66 69 6c 74 65 72 22 20 76 61 6c 75 65 3d 22 53 65 6c Data Ascii: d="search_show_more" value="Show more in Tech Zone"><input type="hidden" id="search_query_all" value="Search in all products"><input type="hidden" id="search_featured" value="Featured topics"><input type="hidden" id="search_active_filter" value="Sel
2024-04-25 18:48:23 UTC	5930	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 61 70 70 2e 68 74 6d 6c 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 74 78 74 22 3e 44 45 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 69 63 6f Data Ascii: <a class="language-option mt-lang" href="/de-de/sharefile/sharefile-app.html?lang-switch=true"> <div class="lang-p"> <span class="lang-txt">DE</span> <span class="docs-ico
2024-04-25 18:48:23 UTC	7116	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 77 68 61 74 73 2d 6e 65 77 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 68 61 74 27 73 20 6e 65 77 0a 20 20 20 20 20 20 20 20 20 Data Ascii: <p> <a href='/en-us/sharefile/whats-new'> What's new
2024-04-25 18:48:23 UTC	8302	IN	Data Raw: 72 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6e 65 63 74 6f 72 73 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: rs'> Connectors </a> </p> </li> <li>
2024-04-25 18:48:23 UTC	6085	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 3c 21 2d 2d 20 72 65 6e 64 65 72 69 6e 67 20 73 65 63 6f 6e 64 20 6c 65 76 65 6c 20 63 68 69 6c 64 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 74 78 2d 73 75 62 2d 6d 65 6e 75 2d 67 72 6f 75 70 2d 6c 69 6e 6b 20 68 61 73 2d 73 75 62 2d 6e 61 76 20 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 72 6f 75 6e 64 65 64 22 3e 3c 2f 73 70 61 6e 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: > <p> ... rendering second level child --> <span class="ctx-sub-menu-group-link has-sub-nav docs-icon icon-arrow-down-rounded"></span> <
2024-04-25 18:48:23 UTC	10674	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e Data Ascii: </p> </li> <li> <p> <a href='/en
2024-04-25 18:48:23 UTC	11860	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 70 70 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 6e 64 72 6f 69 64 2f 75 70 6c 6f 61 64 2d 63 72 65 61 74 65 2d 66 69 6c 65 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <li> <p> <a href='/en-us/sharefile/citrix-files-app/citrix-files-android/upload-create-files'>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.6	50045	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:23 UTC	1092	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/sharefile/sharefile-app Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:23 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:23 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CPW6CWRCFHZNMJPPJ2MA Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.6	50047	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:24 UTC	1084	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/sharefile/sharefile-app Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:48:24 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:24 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CQEF9CN2WH12XGZ0KRPC Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.6	50048	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:24 UTC	1119	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:48:24 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:24 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CQENWFNGF2EY501B45ET Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.6	50049	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:24 UTC	1125	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:48:24 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:24 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CQKV5V961KE3D1NRPK4S Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.6	50050	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:24 UTC	1114	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:48:24 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:24 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CR03EYB3C7XGE59SACM9 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.6	50051	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:24 UTC	889	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: sharefile_main sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:24 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1vwm1rx54 X-Cloud-Trace-Context: b4951230bf9205e04afd26e348050050 Date: Thu, 25 Apr 2024 18:48:24 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:24 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.6	50052	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:24 UTC	1068	OUT	HEAD /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/sharefile-app Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900
2024-04-25 18:48:25 UTC	525	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 25 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 23057345 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:48:24 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CR3X2MGKZDJ6TAHPV7S5 X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.6	50054	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:25 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:25 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1of5k4kum X-Cloud-Trace-Context: 00bdb515816cfb2625db527af20e9331 Date: Thu, 25 Apr 2024 18:48:25 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:25 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.6	50055	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:25 UTC	1074	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/sharefile-app Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:25 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:25 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CRNQ48XYPZ4MRNG71G49 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.6	50056	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:25 UTC	884	OUT	GET /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
2024-04-25 18:48:25 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:25 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CRP700JV72ZSN23P82HB Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.6	50057	44.217.247.226	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:26 UTC	870	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1939322493.1714070900; _gid=GA1.3.690103615.1714070900 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:26 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:26 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CSK4G5RAQDRFTTZRMB7H Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.6	50058	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:26 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070906059 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:26 UTC	986	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:48:26 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7aprz389jy4c X-Cloud-Trace-Context: ea9d81bc7840e646366c12fe43cdb7e0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CJn8-_fIwfHxogEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.6	50060	18.238.49.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:26 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f0fa&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:27 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:27 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 9d75edcf5a40394118428c99809b7ff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: MG3NqVBVte3KN7E5OZxopX4xKEAUlYMgK6UdRPfvO87963QH-BPKiQ== Vary: Origin
2024-04-25 18:48:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.6	50063	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:27 UTC	659	OUT	POST /api/v2/sendInsights?1714070906059 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1368 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 4612613366 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:27 UTC	1368	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:48:27 UTC	723	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:27 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: 0xaxj7jbr1tj X-Cloud-Trace-Context: 409ef22adee0aaa4a026bcc998b68b84 Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CInP9e7hodSOhgEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:27 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.6	50064	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:27 UTC	1127	OUT	GET /en-us/sharefile/sharefile-vdr HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906
2024-04-25 18:48:27 UTC	536	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 135687 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:48:27 GMT Etag: "c360c3795d506f48a4ed89606ff54a58-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CTQNHYFSTVGFJH24BV7D X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:27 UTC	650	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:48:27 UTC	2372	IN	Data Raw: e2 80 99 73 20 79 6f 75 72 20 63 6f 6d 70 6c 65 74 65 20 64 75 65 20 64 69 6c 69 67 65 6e 63 65 20 73 6f 6c 75 74 69 6f 6e 2e 22 3e 0a 09 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 74 78 5f 70 72 6f 64 75 63 74 22 20 63 6f 6e 74 65 6e 74 3d 22 73 68 61 72 65 66 69 6c 65 5f 6d 61 69 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 6f 76 65 6d 62 65 72 20 32 30 2c 20 32 30 32 33 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d Data Ascii: s your complete due diligence solution."> <meta name="ctx_product" content="sharefile_main"> <meta name="lastModified" content="November 20, 2023"><meta name="googlebot" content="noindex"><meta name="robots" content="noindex"><meta name="m
2024-04-25 18:48:27 UTC	538	IN	Data Raw: 3d 22 46 69 6c 74 65 72 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 72 65 66 69 6e 65 22 20 76 61 6c 75 65 3d 22 52 65 66 69 6e 65 20 72 65 73 75 6c 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 6c 65 61 72 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 43 6c 65 61 72 20 41 6c 6c 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 69 74 72 69 78 5f 70 72 6f 5f 64 6f 63 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 50 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 Data Ascii: ="Filters"><input type="hidden" id="search_refine" value="Refine results"><input type="hidden" id="search_clear_all" value="Clear All"><input type="hidden" id="search_citrix_pro_doc" value="Search Product documentation"><input type="hidden" id="se
2024-04-25 18:48:27 UTC	4744	IN	Data Raw: 64 20 74 6f 70 69 63 73 20 69 6e 20 43 69 74 72 69 78 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 6e 6f 5f 72 65 73 75 6c 74 5f 74 65 63 68 5f 7a 6f 6e 65 22 20 76 61 6c 75 65 3d 22 4e 6f 20 72 65 73 75 6c 74 73 20 66 6f 75 6e 64 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 73 68 6f 77 5f 6d 6f 72 65 22 20 76 61 6c 75 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 61 72 Data Ascii: d topics in Citrix Tech Zone"><input type="hidden" id="search_no_result_tech_zone" value="No results found in Tech Zone"><input type="hidden" id="search_show_more" value="Show more in Tech Zone"><input type="hidden" id="search_query_all" value="Sear
2024-04-25 18:48:27 UTC	5930	IN	Data Raw: 72 69 70 74 69 6f 6e 22 3e 4d 61 63 68 69 6e 65 20 54 72 61 6e 73 6c 61 74 65 64 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 6e 67 20 61 63 74 69 76 65 20 6c 61 6e 67 2d 6d 6f 62 69 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 76 64 72 2e 68 74 6d 6c 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 Data Ascii: ription">Machine Translated</p> </div> </a> </li> <li class="lang active lang-mobile"> <a class="language-option mt-lang" href="/de-de/sharefile/sharefile-vdr.html?lang-switch=tru
2024-04-25 18:48:27 UTC	7116	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a> </p> </li> <li> <p>
2024-04-25 18:48:27 UTC	8302	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 6f 6e 66 69 67 75 72 65 2f 61 64 6d 69 6e 2d 73 65 74 74 69 6e 67 73 2f 63 6f 6e 6e 65 63 74 6f 72 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6e 65 63 74 6f 72 73 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <p> <a href='/en-us/sharefile/configure/admin-settings/connectors'> Connectors </a>
2024-04-25 18:48:27 UTC	6085	IN	Data Raw: 6c 65 27 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 61 70 70 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 65 46 69 6c 65 20 61 70 70 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 69 64 3d 22 63 74 78 2d 73 75 62 2d 6d 65 6e 75 2d 63 68 69 6c 64 72 65 6e 22 20 63 6c Data Ascii: le' href='/en-us/sharefile/sharefile-app'> ShareFile apps </a> </p> <ul id="ctx-sub-menu-children" cl
2024-04-25 18:48:27 UTC	10674	IN	Data Raw: 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 73 68 61 72 65 66 69 6c 65 2d 61 70 70 2f 73 68 61 72 65 66 69 6c 65 2d 77 65 62 2f 65 64 69 74 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: /li> <li> <p> <a href='/en-us/sharefile/sharefile-app/sharefile-web/edit'>
2024-04-25 18:48:27 UTC	11860	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 68 61 72 65 66 69 6c 65 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 70 70 2f 63 69 74 72 69 78 2d 66 69 6c 65 73 2d 61 6e 64 72 6f 69 64 2f 73 68 61 72 65 2d 66 69 6c 65 73 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 68 61 72 69 6e 67 20 66 69 6c 65 73 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 Data Ascii: <a href='/en-us/sharefile/citrix-files-app/citrix-files-android/share-files'> Sharing files </a> </p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.6	50067	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:27 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=f0fa&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:27 UTC	1474	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:27 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 ef47ae4ce1b368bee741646b5277e5cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 2XWV6ZT86h7BXyOdaWkYMAiRQuQQ9YGQwcTCtUwVlS5rWqUE55rWaA== Vary: Origin
2024-04-25 18:48:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.6	50068	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:27 UTC	406	OUT	GET /api/v2/sendInsights?1714070906059 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:48:28 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:27 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 7apr7qhoa5tk X-Cloud-Trace-Context: 78e0a895b09f43ac087b5c44884967e9 Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:28 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.6	50065	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:27 UTC	1091	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/sharefile/sharefile-vdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:27 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:27 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CTXHJHCSDKAK3N9X7PDY Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.6	50070	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:28 UTC	1083	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/sharefile/sharefile-vdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:48:28 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:28 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CVGE10V62G4352EP5J2Q Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.6	50069	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:28 UTC	1118	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:48:28 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:28 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CVGA49R8EPNNH8VAY8T5 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.6	50071	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:28 UTC	1124	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:48:28 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:28 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CVRSEXVGDV63HTA3MT28 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.6	50072	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:28 UTC	1113	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:48:29 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:28 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CW1FBS598DBENH8V85RH Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.6	50073	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:28 UTC	889	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: sharefile_main sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:29 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1mry1j7ak X-Cloud-Trace-Context: e2411e2ab74a47b74258db780d5de627 Date: Thu, 25 Apr 2024 18:48:29 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:29 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.6	50074	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:28 UTC	1067	OUT	HEAD /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/sharefile-vdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906
2024-04-25 18:48:29 UTC	525	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 30 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 23057345 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:48:29 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CW5D48GPRXH5XY7HP5Y2 X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.6	50076	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:29 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:29 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e100gc0dkg X-Cloud-Trace-Context: deca86672b31577179cab203fa8eb008 Date: Thu, 25 Apr 2024 18:48:29 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:29 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.6	50075	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:29 UTC	1073	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/sharefile/sharefile-vdr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:29 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:29 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CWMDQ2F6VGAB09Z1DBCB Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.6	50077	3.212.91.35	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:29 UTC	883	OUT	GET /en-us/sharefile/sharefile.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906 If-None-Match: "6574ef3c7b52cd510bd0fd6024b588e9-ssl"
2024-04-25 18:48:29 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:48:29 GMT Etag: "6574ef3c7b52cd510bd0fd6024b588e9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CWVG03R518CVH17VKHYZ Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.6	50078	3.212.91.35	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:30 UTC	869	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.986732273.1714070906; _gid=GA1.3.577470983.1714070906 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:30 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Thu, 25 Apr 2024 18:48:30 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CXBHC6RZQK7DYKMZTVPY Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.6	50079	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:30 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070910275 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:31 UTC	984	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:48:31 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7apraj5xsklm X-Cloud-Trace-Context: cdc53168070d4420db2ee09e1a60623b Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CJHK9YLBs5zYfxAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.6	50080	18.238.49.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:30 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=3d27&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:31 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:31 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 777bb716b31e5bbc92d320e733371d3a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 6qaYSbPkvBl5M1eidlNhTchs7-qv1-pBovHB4fGA-WFAfUoCZIboaw== Vary: Origin
2024-04-25 18:48:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.6	50083	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:31 UTC	659	OUT	POST /api/v2/sendInsights?1714070910275 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1356 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 5452073074 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:31 UTC	1356	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:48:31 UTC	723	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:31 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: 7apr347jju9g X-Cloud-Trace-Context: 4cb0cec2b99255b825cef268c51585d0 Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=COOJgpjGycny6gEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:31 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.6	50085	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:31 UTC	1125	OUT	GET /en-us/electronic-signature HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910
2024-04-25 18:48:31 UTC	535	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 75592 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:48:31 GMT Etag: "a63ee6a4904a1d2ca3d8e22cbb9c2d18-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9CYVFSB71KCJ1QB8GP7NK X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:31 UTC	651	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:48:31 UTC	2372	IN	Data Raw: 80 94 20 61 20 6d 61 72 6b 20 6f 6e 20 61 6e 20 65 6c 65 63 74 72 6f 6e 69 63 20 63 6f 6e 74 72 61 63 74 20 6f 72 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 6d 61 6b 65 20 74 6f 20 64 65 6d 6f 6e 73 74 72 61 74 65 20 79 6f 75 72 20 69 6e 74 65 6e 74 20 74 6f 20 61 67 72 65 65 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 61 74 20 64 6f 63 75 6d 65 6e 74 2e 22 3e 0a 09 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 74 78 5f 70 72 6f 64 75 63 74 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6c 65 63 74 72 6f 6e 69 63 5f 73 69 67 6e 61 74 75 72 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 44 65 63 65 6d 62 65 72 20 38 2c 20 32 30 32 33 22 3e 0a 3c 6d 65 74 61 20 6e 61 Data Ascii: a mark on an electronic contract or document you make to demonstrate your intent to agree to the terms of that document."> <meta name="ctx_product" content="electronic_signature"> <meta name="lastModified" content="December 8, 2023"><meta na
2024-04-25 18:48:31 UTC	538	IN	Data Raw: 75 65 3d 22 46 69 6c 74 65 72 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 72 65 66 69 6e 65 22 20 76 61 6c 75 65 3d 22 52 65 66 69 6e 65 20 72 65 73 75 6c 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 6c 65 61 72 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 43 6c 65 61 72 20 41 6c 6c 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 63 69 74 72 69 78 5f 70 72 6f 5f 64 6f 63 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 50 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 Data Ascii: ue="Filters"><input type="hidden" id="search_refine" value="Refine results"><input type="hidden" id="search_clear_all" value="Clear All"><input type="hidden" id="search_citrix_pro_doc" value="Search Product documentation"><input type="hidden" id="
2024-04-25 18:48:31 UTC	4744	IN	Data Raw: 74 65 64 20 74 6f 70 69 63 73 20 69 6e 20 43 69 74 72 69 78 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 6e 6f 5f 72 65 73 75 6c 74 5f 74 65 63 68 5f 7a 6f 6e 65 22 20 76 61 6c 75 65 3d 22 4e 6f 20 72 65 73 75 6c 74 73 20 66 6f 75 6e 64 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 73 68 6f 77 5f 6d 6f 72 65 22 20 76 61 6c 75 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 20 54 65 63 68 20 5a 6f 6e 65 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 Data Ascii: ted topics in Citrix Tech Zone"><input type="hidden" id="search_no_result_tech_zone" value="No results found in Tech Zone"><input type="hidden" id="search_show_more" value="Show more in Tech Zone"><input type="hidden" id="search_query_all" value="Se
2024-04-25 18:48:32 UTC	5930	IN	Data Raw: 22 3e 4d 61 63 68 69 6e 65 20 54 72 61 6e 73 6c 61 74 65 64 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 6e 67 20 61 63 74 69 76 65 20 6c 61 6e 67 2d 6d 6f 62 69 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 65 6c 65 63 74 72 6f 6e 69 63 2d 73 69 67 6e 61 74 75 72 65 2e 68 74 6d 6c 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 65 22 3e 0a 20 20 20 20 20 20 Data Ascii: ">Machine Translated</p> </div> </a> </li> <li class="lang active lang-mobile"> <a class="language-option mt-lang" href="/de-de/electronic-signature.html?lang-switch=true">
2024-04-25 18:48:32 UTC	7116	IN	Data Raw: 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 65 6c 65 63 74 72 6f 6e 69 63 2d 73 69 67 6e 61 74 75 72 65 2f 67 65 74 2d 73 74 61 72 74 65 64 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 65 74 74 69 6e 67 20 73 74 61 72 74 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: <a href='/en-us/electronic-signature/get-started'> Getting started <
2024-04-25 18:48:32 UTC	8302	IN	Data Raw: 6e 69 63 2d 73 69 67 6e 61 74 75 72 65 2f 68 65 6c 70 2f 73 69 67 6e 2d 79 6f 75 72 2d 6f 77 6e 27 3e 53 69 67 6e 20 79 6f 75 72 20 6f 77 6e 20 64 6f 63 75 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 65 6c 65 63 74 72 6f 6e 69 63 2d 73 69 67 6e 61 Data Ascii: nic-signature/help/sign-your-own'>Sign your own document</a> </p></li> <li> <p> <a href='/en-us/electronic-signa
2024-04-25 18:48:32 UTC	6085	IN	Data Raw: 38 2c 20 32 30 32 33 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 72 69 62 75 74 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 74 72 69 62 75 74 65 64 20 62 79 3a c2 a0 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 72 69 62 75 74 6f 72 2d 69 6e 6c 69 6e 65 22 3e 0a 20 20 20 Data Ascii: 8, 2023</span> <div class="contributor"> Contributed by: <div class="contributor-inline">
2024-04-25 18:48:32 UTC	10674	IN	Data Raw: 53 2c 20 54 41 4e 54 4f 20 49 4d 50 4c c3 8d 43 49 54 41 53 20 43 4f 4d 4f 20 45 58 50 4c c3 8d 43 49 54 41 53 2c 20 49 4e 43 4c 55 49 44 41 53 20 4c 41 53 20 47 41 52 41 4e 54 c3 8d 41 53 20 44 45 20 45 58 41 43 54 49 54 55 44 2c 20 46 49 41 42 49 4c 49 44 41 44 20 59 20 4f 54 52 41 53 20 47 41 52 41 4e 54 c3 8d 41 53 20 49 4d 50 4c c3 8d 43 49 54 41 53 20 44 45 20 43 4f 4d 45 52 43 49 41 42 49 4c 49 44 41 44 2c 20 49 44 4f 4e 45 49 44 41 44 20 50 41 52 41 20 55 4e 20 46 49 4e 20 45 4e 20 50 41 52 54 49 43 55 4c 41 52 20 59 20 41 55 53 45 4e 43 49 41 20 44 45 20 49 4e 46 52 41 43 43 49 c3 93 4e 20 44 45 20 44 45 52 45 43 48 4f 53 2e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 2d 7a 68 2d 63 6e 2d 67 6c 2d 64 Data Ascii: S, TANTO IMPLCITAS COMO EXPLCITAS, INCLUIDAS LAS GARANTAS DE EXACTITUD, FIABILIDAD Y OTRAS GARANTAS IMPLCITAS DE COMERCIABILIDAD, IDONEIDAD PARA UN FIN EN PARTICULAR Y AUSENCIA DE INFRACCIN DE DERECHOS. </div> <div class="mt-zh-cn-gl-d
2024-04-25 18:48:32 UTC	11860	IN	Data Raw: 63 2d 73 69 67 6e 61 74 75 72 65 2e 68 74 6d 6c 27 29 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 64 61 74 61 2d 63 6f 6e 74 65 6e 74 3d 22 45 64 69 74 20 74 68 69 73 20 61 72 74 69 63 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 65 64 69 74 22 3e 3c 2f 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 69 20 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 65 64 69 74 2d 66 69 6c 6c 65 64 22 3e 3c 2f 69 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: c-signature.html'))"> <span data-content="Edit this article"> <i class="docs-icon icon-edit"></i> </span> ... <i class="docs-icon icon-edit-filled"></i> --> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.6	50087	18.238.49.47	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:31 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=3d27&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:31 UTC	1474	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:31 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 7933995c46b01504206ecd6d3dfa5d10.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: rexBpkRWx9VfGAZjJc289QwZPbZYHSZ0M_Z5xZXOxqNOjSEHZCetkQ== Vary: Origin
2024-04-25 18:48:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.6	50089	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:31 UTC	406	OUT	GET /api/v2/sendInsights?1714070910275 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:48:32 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:32 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 7aprrqksjaso X-Cloud-Trace-Context: f14a6152f4e5e90a57a21bd4ba8939de Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:32 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.6	50086	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:31 UTC	1089	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/electronic-signature Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:32 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:32 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CZ1FP8XRTV9A330AAWPZ Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.6	50090	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:32 UTC	1081	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/electronic-signature Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:48:32 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:32 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CZN6JXYPZME8NNQSYF8R Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.6	50091	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:32 UTC	1119	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:48:32 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:32 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CZN5B2RAHAJPTXTZN52C Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.6	50092	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:32 UTC	1125	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:48:32 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:32 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9CZQD81K2FKHR97EDKAXM Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.6	50093	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:33 UTC	1114	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:48:33 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:33 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D06K8W2B1BM969HPDMGF Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.6	50094	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:33 UTC	1081	OUT	HEAD /en-us/electronic-signature/rightsignature.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/electronic-signature Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910
2024-04-25 18:48:33 UTC	529	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=stale Content-Length: 2226817 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:48:33 GMT Etag: "5248a4b54f54f278bba84076b5654eef-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9D0BHD2T1WQAC4ZWBPKVY X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.6	50095	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:33 UTC	895	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: electronic_signature sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:33 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1g1e3yvln X-Cloud-Trace-Context: 3a7c1f02f2b68c57f2ad484940ea64e9 Date: Thu, 25 Apr 2024 18:48:33 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:33 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.6	50096	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:33 UTC	1071	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/electronic-signature Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:33 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:33 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D0QX6PJERAENXXFYJ76D Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.6	50097	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:33 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:34 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1d6r0d5t3 X-Cloud-Trace-Context: 2deb191fc0e90b60f68d89545a6e2124 Date: Thu, 25 Apr 2024 18:48:34 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:34 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.6	50098	3.212.91.35	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:33 UTC	845	OUT	GET /en-us/electronic-signature/rightsignature.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910
2024-04-25 18:48:34 UTC	528	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 2226817 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: application/pdf Date: Thu, 25 Apr 2024 18:48:34 GMT Etag: "5248a4b54f54f278bba84076b5654eef-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9D15CH6S3EV4R2SYGP264 X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:34 UTC	658	IN	Data Raw: 25 50 44 46 2d 31 2e 35 0a 25 e4 f0 ed f8 0a 34 20 30 20 6f 62 6a 0a 3c 3c 2f 54 79 70 65 2f 58 4f 62 6a 65 63 74 2f 53 75 62 74 79 70 65 2f 49 6d 61 67 65 2f 57 69 64 74 68 20 32 38 31 36 2f 48 65 69 67 68 74 20 35 31 32 2f 43 6f 6c 6f 72 53 70 61 63 65 2f 44 65 76 69 63 65 47 72 61 79 2f 42 69 74 73 50 65 72 43 6f 6d 70 6f 6e 65 6e 74 0a 38 2f 44 65 63 6f 64 65 50 61 72 6d 73 3c 3c 2f 42 69 74 73 50 65 72 43 6f 6d 70 6f 6e 65 6e 74 20 38 2f 43 6f 6c 6f 72 73 20 31 2f 43 6f 6c 75 6d 6e 73 20 32 38 31 36 2f 50 72 65 64 69 63 74 6f 72 20 32 3e 3e 2f 46 69 6c 74 65 72 2f 46 6c 61 74 65 44 65 63 6f 64 65 2f 4c 65 6e 67 74 68 0a 32 36 34 35 37 3e 3e 0a 73 74 72 65 61 6d 0a 78 da ed bd 8b 59 1c 57 f2 b8 3d 7c 09 b8 d9 04 d4 38 01 0d 9b 80 46 4e 40 c3 26 00 38 Data Ascii: %PDF-1.5%4 0 obj<</Type/XObject/Subtype/Image/Width 2816/Height 512/ColorSpace/DeviceGray/BitsPerComponent8/DecodeParms<</BitsPerComponent 8/Colors 1/Columns 2816/Predictor 2>>/Filter/FlateDecode/Length26457>>streamxYW=\|8FN@&8
2024-04-25 18:48:34 UTC	2372	IN	Data Raw: 00 00 00 00 3d 62 7c e6 f4 63 14 bf 01 00 00 00 40 11 d0 fb 0c 00 00 00 00 7a 84 5b ef b3 e6 7d c3 a9 02 00 00 00 80 fc a9 2f 6a 97 1f a3 f7 19 00 00 00 00 14 01 c5 6f 00 00 00 00 d0 23 e8 7d 06 00 00 00 00 7d e2 6c ec f2 53 93 35 ce 14 00 00 00 00 14 80 5b f1 1b bd cf 00 00 00 00 a0 0c e8 7d 06 00 00 00 00 3d 62 77 cf e5 a7 e8 7d 06 00 00 00 00 45 e0 d8 fb 8c e2 37 00 00 00 00 28 02 7a 9f 01 00 00 00 40 8f 70 ec 7d b6 36 e1 54 01 00 00 00 40 01 5c 0e 5d 7e 8a e2 37 00 00 00 00 28 02 7a 9f 41 89 5c 74 ff 95 13 32 dc 01 00 f2 63 b4 db fd 77 76 66 9c b7 be e3 d6 fb 6c 7f 8f 33 05 39 f1 b5 fb af 70 93 03 00 64 88 63 1c ef 11 ef a7 9c b7 9e 43 ef 33 c0 7f f1 5f 00 00 fc 17 7a 84 63 f1 1b bd cf 00 ff 05 00 00 fc 17 8a 20 50 ef b3 aa e5 54 03 fe 0b 00 00 f8 2f Data Ascii: =b\|c@z[}/jo#}}lS5[}=bw}E7(z@p}6T@\]~7(zA\t2cwvfl39pdcC3_zc PT/
2024-04-25 18:48:34 UTC	538	IN	Data Raw: 59 1d f5 29 50 ef 33 fc 02 fd 0d 26 c0 f8 2f 00 e0 bf c1 fd 57 5b b1 22 7a 4d 8c ff 96 82 5b 09 9c d3 4d 12 a8 2a 8d de 67 9e b8 1c 96 fb dd 3c df 0e f8 2f 00 e0 bf c1 fd 57 1b 00 16 bd 26 c6 7f 4b c1 ae 07 5a a8 de 67 61 0e d3 3f 0e b6 4b fe 76 7e 05 18 ff 05 00 fc 37 bc ff ea 8a 56 64 55 42 f8 6f 31 9c 39 75 bf 73 e8 81 e6 b6 0e 9b ac 29 3f 2f bd cf fc b0 75 58 f6 f7 53 ef b9 82 ff 02 00 fe 9b 96 ff aa 5a 40 08 c3 22 f8 6f 39 0f 9a db f2 e9 d5 78 6a a0 aa b4 e1 a5 d3 8f ad ce b8 b2 8c b7 8f 98 bd f7 27 c0 f8 2f 00 30 1e 47 f0 5f 4d e2 de 8e 2c ea 83 ff 96 83 db f2 a9 5d 79 c5 1e 02 f5 3e 0b 74 98 de 0d b7 e5 d6 be 85 b8 29 f0 5f 00 c0 7f 63 f8 af 3c 03 42 3a 25 e0 bf e5 50 5d 3a a9 cf 2b f3 b5 db eb 73 75 16 26 bd cf 3c b9 e1 ba ff 63 b4 ed a0 b9 fd f7 Data Ascii: Y)P3&/W["zM[M*g</W&KZga?Kv~7VdUBo19us)?/uXSZ@"o9xj'/0G_M,]y>t)_c<B:%P]:+su&<c
2024-04-25 18:48:34 UTC	4744	IN	Data Raw: 6b 99 fd d0 9c 4f 4c 9e f3 6a 34 7e 57 7b f8 b2 7e 6a e0 f0 5f 00 c0 7f a3 f9 6f c7 1c e0 76 4d 33 4d e1 bf e9 b0 b5 57 a9 13 5e 95 3d d0 dc de 9f ab 67 7c 7a 9f 79 c1 ae f7 43 7b 34 b5 7c c8 47 e3 0f f6 0a ec 65 18 c2 7f 01 00 ff 8d 38 50 77 e9 02 a1 6c 44 85 ff a6 c2 e8 b8 0e a7 96 87 3b 73 ff b1 63 55 5a 98 de 67 7e 37 ba 2d 10 c9 b3 3c 97 e9 be fd 13 3e da b0 8e 02 7b 49 01 c6 7f 01 00 ff 8d e8 bf 1d 9a d8 1f ed e9 26 01 fc 37 91 a7 e4 78 74 fb 9f af ee 4e f1 aa 67 b8 95 c0 cd 4d 2d 08 54 95 e6 78 77 ef 1c 72 5b 78 58 fa bc 46 7b 74 e8 69 7b b5 f1 fa d8 f4 ef a9 77 e0 c6 7f 01 20 3d ff 2d aa ef 51 2b 98 4f dc de 63 37 9b 5a 15 c5 7f 53 a0 da fa 3e 87 be 10 99 75 47 d1 03 2d 50 ef b3 40 87 e9 1b 26 e1 df e6 f0 d4 df e6 c2 83 7a cf 34 08 ec 61 85 84 ff Data Ascii: kOLj4~W{~j_ovM3MW^=g\|zyC{4\|Ge8PwlD;scUZg~7-<>{I&7xtNgM-Txwr[xXF{ti{w =-Q+Oc7ZS>uG-P@&z4a
2024-04-25 18:48:34 UTC	5930	IN	Data Raw: 33 11 be 40 4b 9e ec d2 d8 1e 0b 70 17 63 09 e4 bf 83 e5 e7 d1 0e 59 77 6c 9f fe 9b ab fe 7a 15 60 fc 17 ff 2d 58 7f 3d 68 84 63 09 dc aa b2 a3 e7 93 f1 73 75 36 80 2c c7 ee 75 e9 6f ce de b7 9c 3e 0b ff cd a6 d8 2b c8 15 cf ac 88 79 f0 b4 3b 72 87 ed 2f 82 f9 ef f3 d2 64 c7 bd 42 03 fa 6f be fa eb 33 07 18 ff c5 7f 4b d6 5f 0f 02 1c a8 07 da a3 4a 3b 7a 9f e5 8a b0 03 b0 c9 2d 84 ff de f8 af c7 48 9c 35 01 52 80 b3 59 0c 3c 14 e0 87 81 f1 2e 0f 54 28 ff 7d d6 d4 cf 6b 9f 7c 91 ff e6 ac bf 1e 05 18 ff c5 7f 8b d6 5f fb a8 8a e3 23 63 da 03 8d de 67 b9 e2 58 30 39 17 56 3d 06 fe 7b 92 cf 96 3d 01 36 fe cb 62 db 8b 67 3c 6c 0e d7 a5 a2 34 94 ff 3e 6d ea e7 b8 51 68 40 ff cd 5b 7f fd 09 30 fe 8b ff 96 ad bf d7 02 bc 6a fb f7 1c 7b a0 69 1b 7a 3e 18 e8 e9 7d Data Ascii: 3@KpcYwlz`-X=hcsu6,uo>+y;r/dBo3K_J;z-H5RY<.T(}k\|_#cgX09V={=6bg<l4>mQh@[0j{iz>}
2024-04-25 18:48:34 UTC	7116	IN	Data Raw: b2 f2 b7 e5 e4 df c0 08 3b a0 c5 f0 df f0 eb ad a5 ff 75 8f 8e 27 db fd 4c 7a b5 85 a7 1d ff ed b9 ff 0a 4a 6b 93 4e 17 93 dc d0 0f ee 88 0b cb cf e2 76 6a 9b d5 62 13 00 e8 81 e6 9f 6a 34 4e 6c 77 b8 e6 bd 2f 05 10 8c be 49 0d 56 be fd 57 56 fe 96 c1 f3 27 d4 94 08 fe 1b a1 95 9c 60 f7 8b 84 bb 9f 09 af b6 f0 1d 06 fe db 73 ff 15 64 56 a5 9d 2e 26 48 1e 7a 90 3c ff 35 c2 27 2e b7 02 cc 71 74 59 9b a0 b1 ba 85 56 62 f5 70 be 42 c0 82 a7 33 a9 d6 b6 be fd 57 56 fe e6 65 03 cc f8 a3 7a 1c ff 8d d0 d0 52 52 fe f6 ef a4 ab 4e 04 52 22 3c ef f8 6f bf fd 57 72 fd 53 4e ff 15 a5 8a 3d a8 e7 8b e1 bf 05 57 80 b9 65 d7 14 1c 01 0f a7 c0 e3 0f 09 29 b0 a7 10 b0 e0 e9 4c 2a b8 e9 db 7f 65 7d c2 72 c8 3f 92 25 00 47 f0 df f0 b9 81 92 f2 b7 64 37 3f be 43 90 c6 2e 0c Data Ascii: ;u'LzJkNvjbj4Nlw/IVWV'`sdV.&Hz<5'.qtYVbpB3WVezRRNR"<oWrSN=We)L*e}r?%Gd7?C.
2024-04-25 18:48:34 UTC	8302	IN	Data Raw: ff e2 bf b6 21 83 d9 5a 13 f4 8a c8 c7 cd b9 23 bb c8 54 aa 2a c0 17 ad bd df 6d 77 63 df b6 fb 61 dc 43 c5 21 1e ba 74 4b e0 ac 32 20 6e 4e fc de 69 ec 2f 53 ed 2a 33 6c e4 93 16 fe 1b 7e ed 15 66 40 b7 dc f5 0d ff 55 95 c0 5d 73 f9 9f 80 93 f8 ca 9f e2 25 9a be ea 03 ff c5 7f 9f 39 e0 48 35 43 07 ed d6 af a8 42 4f b7 67 ac e2 41 d5 5e 7d c7 c3 7c 53 18 b7 3b 65 b2 16 e2 86 4c 26 39 60 9e 32 9a 6d 28 72 fd 7c 6d c6 f5 fc e1 99 f2 bb 28 06 44 fc 37 f4 68 1e 66 40 af 8f 47 5e fe 6e 6f fd 57 55 02 77 cd d5 2f c1 06 d3 d5 3f e4 e3 89 3a fc 8b ff e2 bf cf ef 09 65 cb fe 9d 60 09 f4 9a 32 9c c8 1b d6 75 1e 91 ea 20 5f ca ad f7 d9 bd d1 06 8a cc 3a 0c 52 d3 fd 69 ca 57 cf b4 b1 69 cc ef 5a 6d a9 7d 52 31 69 e1 bf e1 47 f3 c1 a0 dd f6 fc ce 41 bd a4 c2 7f 9f 7d Data Ascii: !Z#TmwcaC!tK2 nNi/S3l~f@U]s%9H5CBOgA^}\|S;eL&9`2m(r\|m(D7hf@G^noWUw/?:e`2u _:RiWiZm}R1iGA}
2024-04-25 18:48:34 UTC	6085	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-25 18:48:34 UTC	10674	IN	Data Raw: 22 2a bd 53 a6 b0 2d d3 41 c5 88 df a4 9f 4d fe d4 e5 89 4a 33 97 b5 c4 57 95 7c 70 46 28 a9 2a 4b b8 58 51 e1 4b de aa 6e a1 43 a3 c4 61 ef cc 29 72 a9 55 79 90 c7 94 f1 89 71 a8 8c e7 61 e9 59 a4 89 ea 15 5f a7 42 cd 62 9d e7 03 f2 fd 6e 43 4b 58 5e 1a 73 4b a6 70 f3 0b 19 01 df c1 5b 7c f7 da 4d bf 7d da 20 be 6d a9 4b a3 e9 2c ba c6 a8 af 7b b9 85 6f 9a d0 3d 60 42 a3 ad b0 66 64 09 96 78 e1 ed 42 59 3f bc 67 b1 d7 c4 b7 ee b8 20 0c b8 c1 71 95 8c 38 c8 92 9b 84 cc 7e d6 f2 79 d6 92 db 39 b9 83 ee 36 98 15 1f 95 ec 9e 3d e4 5c e9 b8 96 3a 5f 0b cf 0d a7 d5 c2 03 1a 41 59 cc 2a 00 c4 8e 9e 93 fa b2 72 75 fd 5c 88 ad ca 0a 1c 2d be 5e 8b 83 64 57 2b 14 53 3f 5d 66 42 68 f4 85 83 d6 42 1b 4f 8b 3b 5c c5 57 56 97 2a 33 b3 e2 4b 95 19 f2 e3 83 06 43 be 77 Data Ascii: "S-AMJ3W\|pF(KXQKnCa)rUyqaY_BbnCKX^sKp[\|M} mK,{o=`BfdxBY?g q8~y96=\:_AYru\-^dW+S?]fBhBO;\WV3KCw
2024-04-25 18:48:34 UTC	11860	IN	Data Raw: 7d 74 b6 fd db a1 f1 fd 93 8d 68 da 99 98 f7 1b da 6f f0 fa 56 fb e7 de f3 31 21 76 d9 16 bb 64 db f4 b3 48 4d cd de b7 8b d8 d3 e5 38 af 3e 43 ce b0 b6 db bf 38 a6 9e c3 29 b3 51 2a be e9 5b f8 40 1b 47 c8 e4 9d 70 fd 78 51 d3 fa a1 28 e8 aa cf 07 31 55 c2 28 cc 19 ed c3 b2 af 69 b6 e0 d7 49 73 2a 56 76 ea da 19 d3 ba 73 d8 f9 e1 ce 7b 94 47 fa 89 fe dd ab c8 db f2 b5 f1 01 af 13 b5 44 4a d2 bb 46 8f 4f fc 94 3c 53 c7 1d 34 08 95 b0 5a 30 ee 5c cd 33 1f 30 7d ed 87 49 dd de ae 88 2f 87 3c 64 f9 5b cd 9f 23 de de 31 76 56 e6 73 2c 16 ca 4e ef 98 c9 a5 83 eb ae 44 24 af a6 4c 7a 78 98 00 40 4d da 4d 49 20 ea dd 60 b9 5b 19 6b a2 11 54 06 1f e5 54 e7 0d 0e 92 ed 65 d5 a8 20 12 e3 88 20 56 e9 eb fa 25 f1 40 13 f3 b2 7b 4d 1c 87 e6 2f 8a 8f 7f 7f f9 e1 ff 0e Data Ascii: }thoV1!vdHM8>C8)Q[@GpxQ(1U(iIsVvs{GDJFO<S4Z0\30}I/<d[#1vVs,ND$Lzx@MMI `[kTTe V%@{M/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.6	50099	3.212.91.35	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:34 UTC	870	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1269784869.1714070910; _gid=GA1.3.327195210.1714070910 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:34 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:34 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D19GF0ZY2NN3RS46G7N8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.6	50100	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:35 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070914468 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:35 UTC	986	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:48:35 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7aprfy13bvu1 X-Cloud-Trace-Context: 3716da8d9ce133d6adb7b98689438369 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CKfqqdHgvs6k2AEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.6	50101	18.238.49.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:35 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=c5d9&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:35 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:35 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 79edbcc14c21322a469003752cc30af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 1ZtuvqMs5b9fYNTdZqNqpO_GrtF5UU_EI92hlyfkdui0elqRGMAgPw== Vary: Origin
2024-04-25 18:48:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.6	50105	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:35 UTC	1154	OUT	GET /en-us/storage-zones-controller/storage-zones-controller HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915
2024-04-25 18:48:35 UTC	535	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 65231 Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 18:48:35 GMT Etag: "e017d0fa8985f69964772db0bb5476f2-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9D2HQBJZ78S0CGCCNM7PV X-Xss-Protection: 1; mode=block Connection: close
2024-04-25 18:48:35 UTC	651	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 Data Ascii: <!DOCTYPE html><html lang="en" class="theme" style="visibility:hidden"> <head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="vi
2024-04-25 18:48:35 UTC	2372	IN	Data Raw: 66 6c 79 5f 70 72 6f 76 69 64 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 5f 63 6f 64 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 75 73 22 3e 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 72 46 51 38 6a 4b 70 50 58 66 74 58 64 75 73 4e 6b 39 70 6d 2d 75 36 5f 55 74 77 75 79 49 4e 33 66 55 52 70 6b 42 67 79 34 45 22 3e 0a 20 20 20 20 0a 0a 20 20 20 20 0a 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 65 6e 74 2e 74 72 75 73 74 61 72 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 Data Ascii: fly_provider" content=""> <meta name="lang_code" content="en-us"> <meta name="google-site-verification" content="LrFQ8jKpPXftXdusNk9pm-u6_UtwuyIN3fURpkBgy4E"> <link rel="preconnect" href="https://consent.trustarc.com" crossori
2024-04-25 18:48:35 UTC	538	IN	Data Raw: 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 71 75 65 72 79 22 20 76 61 6c 75 65 3d 22 54 72 79 20 61 20 64 69 66 66 65 72 65 6e 74 20 6f 72 20 6c 65 73 73 20 73 70 65 63 69 66 69 63 20 71 75 65 72 79 2e 20 52 65 6d 6f 76 65 20 61 6e 79 20 73 65 6c 65 63 74 65 64 20 66 69 6c 74 65 72 73 2e 20 45 78 61 6d 70 6c 65 20 71 75 65 72 69 65 73 20 69 6e 63 6c 75 64 65 20 75 70 67 72 61 64 65 2c 20 77 6f 72 6b 73 70 61 63 65 2c 20 63 65 72 74 69 66 69 63 61 74 65 2e 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 72 65 63 6f 6d 6d 65 6e 64 65 64 22 20 76 61 6c 75 65 3d 22 52 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 70 69 63 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 Data Ascii: put type="hidden" id="search_query" value="Try a different or less specific query. Remove any selected filters. Example queries include upgrade, workspace, certificate."><input type="hidden" id="search_recommended" value="Recommended topics"><input ty
2024-04-25 18:48:35 UTC	4744	IN	Data Raw: 68 5f 71 75 65 72 79 5f 61 6c 6c 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 20 69 6e 20 61 6c 6c 20 70 72 6f 64 75 63 74 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 66 65 61 74 75 72 65 64 22 20 76 61 6c 75 65 3d 22 46 65 61 74 75 72 65 64 20 74 6f 70 69 63 73 22 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 73 65 61 72 63 68 5f 61 63 74 69 76 65 5f 66 69 6c 74 65 72 22 20 76 61 6c 75 65 3d 22 53 65 6c 65 63 74 65 64 20 66 69 6c 74 65 72 22 3e 0d 0a 0d 0a 20 20 3c 21 2d 2d 20 4d 6f 64 61 6c 20 2d 2d 3e 0d 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 20 66 61 64 65 22 20 69 64 3d 22 61 6c 67 6f 6c 69 61 4d 6f 64 61 6c 22 20 64 61 74 61 Data Ascii: h_query_all" value="Search in all products"><input type="hidden" id="search_featured" value="Featured topics"><input type="hidden" id="search_active_filter" value="Selected filter"> ... Modal --> <div class="modal fade" id="algoliaModal" data
2024-04-25 18:48:35 UTC	5930	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6f 70 74 69 6f 6e 20 6d 74 2d 6c 61 6e 67 22 20 68 72 65 66 3d 22 2f 64 65 2d 64 65 2f 73 74 6f 72 61 67 65 2d 7a 6f 6e 65 73 2d 63 6f 6e 74 72 6f 6c 6c 65 72 2f 73 74 6f 72 61 67 65 2d 7a 6f 6e 65 73 2d 63 6f 6e 74 72 6f 6c 6c 65 72 2e 68 74 6d 6c 3f 6c 61 6e 67 2d 73 77 69 74 63 68 3d 74 72 75 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 61 6e 67 2d 74 78 74 22 3e 44 45 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: <a class="language-option mt-lang" href="/de-de/storage-zones-controller/storage-zones-controller.html?lang-switch=true"> <div class="lang-p"> <span class="lang-txt">DE</span> <
2024-04-25 18:48:35 UTC	7116	IN	Data Raw: 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 2f 65 6e 2d 75 73 2f 73 74 6f 72 61 67 65 2d 7a 6f 6e 65 73 2d 63 6f 6e 74 72 6f 6c 6c 65 72 2f 35 2d 30 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 74 6f 72 61 67 65 20 7a 6f 6e 65 73 20 63 6f 6e 74 72 6f 6c 6c 65 72 20 35 2e 78 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 Data Ascii: <a href='/en-us/storage-zones-controller/5-0'> Storage zones controller 5.x </a>
2024-04-25 18:48:35 UTC	8302	IN	Data Raw: 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 4c 69 72 65 20 65 6e 20 61 6e 67 6c 61 69 73 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 65 73 2d 65 73 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 4c 65 65 72 20 65 6e 20 69 6e 67 6c c3 a9 73 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6a 61 2d 6a 70 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e e8 8b b1 e8 aa 9e e3 81 ab e5 88 87 e3 82 8a e6 9b bf e3 81 88 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: le="display:none">Lire en anglais</span> <span class="es-es" style="display:none">Leer en ingls</span> <span class="ja-jp" style="display:none"></span>
2024-04-25 18:48:35 UTC	6085	IN	Data Raw: 78 3d 22 30 20 30 20 31 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 32 22 20 64 3d 22 4d 31 20 30 4c 31 20 32 30 22 20 73 74 72 6f 6b 65 3d 22 62 6c 61 63 6b 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 6c 69 6b 65 22 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 62 6f 78 3d 22 30 20 30 20 32 36 20 32 35 22 20 66 69 6c 6c 3d 22 23 46 Data Ascii: x="0 0 1 20" fill="none" xmlns="http://www.w3.org/2000/svg"> <path opacity="0.2" d="M1 0L1 20" stroke="black"></path> </svg> <svg class="like" width="16px" height="16px" viewbox="0 0 26 25" fill="#F
2024-04-25 18:48:36 UTC	10674	IN	Data Raw: 2d 69 63 6f 6e 2d 74 65 78 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 70 72 69 6e 74 22 3e 3c 2f 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 69 20 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 69 63 6f 6e 20 69 63 6f 6e 2d 70 72 69 6e 74 2d 66 69 6c 6c 65 64 22 3e 3c 2f 69 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 68 61 72 65 20 64 6f 63 73 2d 61 63 74 69 6f 6e 73 2d 69 74 65 6d 22 3e 0a 20 20 20 Data Ascii: -icon-text"> <i class="docs-icon icon-print"></i> ... <i class="docs-icon icon-print-filled"></i> --> </span> </div> <div class="share docs-actions-item">
2024-04-25 18:48:36 UTC	11860	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 43 69 74 72 69 78 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 65 74 61 2f 54 65 63 68 20 50 72 65 76 69 65 77 20 41 67 72 65 65 6d 65 6e 74 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 64 65 73 63 22 3e 54 68 65 20 64 65 76 65 6c 6f 70 6d 65 6e 74 2c 20 72 65 6c 65 61 73 65 20 61 6e 64 20 74 69 6d 69 6e 67 20 6f 66 20 61 6e 79 20 66 65 61 74 75 72 65 73 20 6f 72 20 66 75 6e 63 Data Ascii: <span>Citrix</span> Beta/Tech Preview Agreement. </p> <p class="modal-desc">The development, release and timing of any features or func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.6	50106	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:35 UTC	659	OUT	POST /api/v2/sendInsights?1714070914468 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1292 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 8375244160 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:35 UTC	1292	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:48:35 UTC	723	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:35 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: 7aprg12tpnrm X-Cloud-Trace-Context: 3275683458a26fe069f27e7fc0df1ce1 Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CKbdltLM7ODv9AEQAw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:35 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.6	50104	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:35 UTC	1118	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controller Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:35 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:35 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D2QV3CM2WRTN6CYK71SW Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.6	50109	52.85.132.96	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:35 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=c5d9&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:36 UTC	1482	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:35 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 07b0e28d0c589c8a26610bbc5dcd660a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 X-Amz-Cf-Id: spWc95QxVvfYVV9UFJycKtHK47B_kUWeGCXhZBhiEJ0cURcdKWMpgA== Age: 1 Vary: Origin
2024-04-25 18:48:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.6	50112	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:36 UTC	406	OUT	GET /api/v2/sendInsights?1714070914468 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:48:36 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:36 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 7aprjpjzq380 X-Cloud-Trace-Context: 5da7965eebe15c71482164f37fddbe5d Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:36 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.6	50110	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:36 UTC	1110	OUT	GET /assets/dist/bundle.js HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controller Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915 If-None-Match: "41ba42aa24f0854b2593d883ec396143-ssl"
2024-04-25 18:48:36 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:36 GMT Etag: "41ba42aa24f0854b2593d883ec396143-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D3B6YJSFM3YNJCP16M2S Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.6	50111	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:36 UTC	1119	OUT	GET /assets/fonts/sharefile-icons.ttf?ptbtl7 HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915 If-None-Match: "53b06bc873109fca30f4f3b535ed3389-ssl"
2024-04-25 18:48:36 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:36 GMT Etag: "53b06bc873109fca30f4f3b535ed3389-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D3B5W9MKX3ZRKDAVCVKY Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.6	50113	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:36 UTC	1125	OUT	GET /assets/fonts/custom-fonts/PPMori-Regular.woff HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gat_gtag_UA_142592_2=1; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915 If-None-Match: "07999d2467258d3ca1b0cef81c89abb3-ssl"
2024-04-25 18:48:36 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:36 GMT Etag: "07999d2467258d3ca1b0cef81c89abb3-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D3CV38CVQWM9C55Y5M60 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.6	50115	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:36 UTC	899	OUT	POST /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" query_suggestion_index: en-us-production-sharefile_query_suggestions sec-ch-ua-mobile: ?0 index_name: en-us-production-sharefile Authorization: kYjzVAFSY0ZFDpccABxSWbWouYSQ2pTgmZeNu2VS4cg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 lang_code: en-us product_name: storage_zones_controller sec-ch-ua-platform: "Windows" Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:37 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1u8xj2idc X-Cloud-Trace-Context: 57607333a19d498bbfaeb518f001b7ac Date: Thu, 25 Apr 2024 18:48:37 GMT Server: Google Frontend Content-Length: 321 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:37 UTC	321	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 45 64 69 74 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 22 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 4d 7a 4a 6d 4f 57 52 68 4e 6d 4d 32 4e 44 45 79 59 32 56 6c 4f 54 46 6a 59 6a 55 35 4f 54 67 32 5a 54 6b 78 59 54 63 79 59 32 51 7a 5a 6a 55 77 59 7a 52 69 4d 47 4e 69 59 6a 63 77 4d 47 51 34 4f 54 64 6d 59 6d 55 79 5a 6a 55 79 4f 54 6c 6d 4d 6a 4d 33 4e 58 4a 6c 63 33 52 79 61 57 4e 30 53 57 35 6b 61 57 4e 6c 63 7a 31 6c 62 69 31 31 63 79 31 77 63 6d 39 6b 64 57 4e 30 61 57 39 75 4c 58 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 55 79 51 32 56 75 4c 58 56 7a 4c 58 42 79 62 32 52 31 59 33 52 70 62 32 34 74 63 32 68 68 63 6d 56 6d Data Ascii: {"allowedPageEdit":false,"message":"Page Edit not allowed!","ALGOLIA_API_KEY":"MzJmOWRhNmM2NDEyY2VlOTFjYjU5OTg2ZTkxYTcyY2QzZjUwYzRiMGNiYjcwMGQ4OTdmYmUyZjUyOTlmMjM3NXJlc3RyaWN0SW5kaWNlcz1lbi11cy1wcm9kdWN0aW9uLXNoYXJlZmlsZSUyQ2VuLXVzLXByb2R1Y3Rpb24tc2hhcmVm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.6	50114	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:36 UTC	1089	OUT	GET /assets/fonts/docs-icons.ttf?kuflrc HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docs.sharefile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://docs.sharefile.com/assets/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915 If-None-Match: "d4a9d13b1c53242e196bad714b144494-ssl"
2024-04-25 18:48:37 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:37 GMT Etag: "d4a9d13b1c53242e196bad714b144494-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D3Z9YR98JS9240FWGDH8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.6	50116	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:36 UTC	1099	OUT	HEAD /en-us/storage-zones-controller/storage-zones-controller.pdf HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controller Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915
2024-04-25 18:48:37 UTC	473	IN	HTTP/1.1 404 Not Found Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Security-Policy: frame-ancestors https://docs.sharefile.com Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 18:48:37 GMT Etag: 1680810075-ssl Server: Netlify Strict-Transport-Security: max-age=31536000 X-Frame-Options: DENY X-Nf-Request-Id: 01HWB9D3ZQ9ZN8PTT25VZ9XX1G X-Xss-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.6	50117	216.239.36.54	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:37 UTC	398	OUT	GET /allowedPageEdit HTTP/1.1 Host: us-central1-citrix-product-documentation.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:37 UTC	368	IN	HTTP/1.1 401 Unauthorized Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Function-Execution-Id: n6e1tediqg6f X-Cloud-Trace-Context: b5f11215ab662d5a982e11b42eba4701 Date: Thu, 25 Apr 2024 18:48:37 GMT Server: Google Frontend Content-Length: 81 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:37 UTC	81	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 50 61 67 65 45 64 69 74 22 3a 66 61 6c 73 65 2c 22 41 4c 47 4f 4c 49 41 5f 41 50 49 5f 4b 45 59 22 3a 22 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 21 20 22 7d Data Ascii: {"allowedPageEdit":false,"ALGOLIA_API_KEY":"","message":"Invalid access token! "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.6	50118	54.156.13.12	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:37 UTC	1075	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/en-us/storage-zones-controller/storage-zones-controller Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:37 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:37 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D4GPNVQQEG2FQHMF0HZ7 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.6	50119	3.212.91.35	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:38 UTC	845	OUT	GET /assets/main.css HTTP/1.1 Host: docs.sharefile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAsessionID=db4dc810-f3ba-4393-8abb-a849d8d257c1\|NEW; notice_behavior=implied,us; insight_session=c2940a03-b7e3-457c-a253-1040cc116120; insight_selfsvc_session=1714070854238; _gid=GA1.2.609490862.1714070856; _ga_W95SLW9E4W=GS1.1.1714070870.1.0.1714070870.0.0.0; LSKey-CoveoV2$coveo_visitorId=dca37891-e1ad-4cf0-89b2-8b306a94b9a7; _ga=GA1.2.1322026028.1714070856; GA1.3.1054691145.1714070915; _gid=GA1.3.897562853.1714070915 If-None-Match: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl"
2024-04-25 18:48:38 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Thu, 25 Apr 2024 18:48:38 GMT Etag: "ef6d4a78d7bae2ee125c6ecbca1e3f12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HWB9D5CW2M73FKP7GK17ESB7 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.6	50122	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:39 UTC	541	OUT	OPTIONS /api/v2/sendInsights?1714070918377 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: insights-csrf Origin: https://docs.sharefile.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:39 UTC	984	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 18:48:39 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Referrer-Policy: no-referrer-when-downgrade Access-Control-Allow-Headers: Access-Control-Allow-Headers,Insights-csrf,Access-Control-Allow-Origin, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Referrer-Policy Etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk" Function-Execution-Id: 7apr7rrcxwdk X-Cloud-Trace-Context: 0b927ffdd1feddc62b262f50411ab9a0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CO6fwd7W3sPwKRAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.6	50121	18.238.49.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:39 UTC	741	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=8a97&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:39 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:39 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Miss from cloudfront Via: 1.1 145a3c1a881b9a37bb761d4b0890859a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: BDu_1JgfLmpqYH_S4qybL6jHitBvLTA1SeGnJ4x-jrClt8gMHOv-fQ== Vary: Origin
2024-04-25 18:48:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.6	50125	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:39 UTC	659	OUT	POST /api/v2/sendInsights?1714070918377 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive Content-Length: 1400 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: text/plain Insights-Csrf: 3546720446 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.sharefile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:39 UTC	1400	OUT	Data Raw: 65 77 6f 67 49 43 4a 70 5a 43 49 36 49 43 4a 6b 62 32 4e 7a 4c 6e 4e 6f 59 58 4a 6c 5a 6d 6c 73 5a 53 35 6a 62 32 30 69 4c 41 6f 67 49 43 4a 68 59 33 52 76 63 69 49 36 49 48 73 4b 49 43 41 67 49 43 4a 76 63 47 56 75 61 57 51 69 4f 69 41 69 59 57 35 76 62 6e 6c 74 62 33 56 7a 49 69 77 4b 49 43 41 67 49 43 4a 7a 5a 58 4e 7a 61 57 39 75 61 57 51 69 4f 69 41 69 59 7a 49 35 4e 44 42 68 4d 44 4d 74 59 6a 64 6c 4d 79 30 30 4e 54 64 6a 4c 57 45 79 4e 54 4d 74 4d 54 41 30 4d 47 4e 6a 4d 54 45 32 4d 54 49 77 49 67 6f 67 49 48 30 73 43 69 41 67 49 6e 5a 6c 63 6d 49 69 4f 69 42 37 43 69 41 67 49 43 41 69 5a 47 6c 7a 63 47 78 68 65 53 49 36 49 43 4a 32 61 58 4e 70 64 47 56 6b 49 67 6f 67 49 48 30 73 43 69 41 67 49 6d 39 69 61 6d 56 6a 64 43 49 36 49 48 73 4b 49 43 41 Data Ascii: ewogICJpZCI6ICJkb2NzLnNoYXJlZmlsZS5jb20iLAogICJhY3RvciI6IHsKICAgICJvcGVuaWQiOiAiYW5vbnltb3VzIiwKICAgICJzZXNzaW9uaWQiOiAiYzI5NDBhMDMtYjdlMy00NTdjLWEyNTMtMTA0MGNjMTE2MTIwIgogIH0sCiAgInZlcmIiOiB7CiAgICAiZGlzcGxheSI6ICJ2aXNpdGVkIgogIH0sCiAgIm9iamVjdCI6IHsKICA
2024-04-25 18:48:39 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:39 GMT Server: Google Frontend Access-Control-Allow-Origin: https://docs.sharefile.com Access-Control-Allow-Credentials: true Referrer-Policy: no-referrer-when-downgrade Content-Type: text/html; charset=utf-8 Etag: W/"26-ZC0yWgTrXkuUT0DszyU1TgafbQE" Function-Execution-Id: 7aprvr3qkwta X-Cloud-Trace-Context: cbd29cebd6c11e662765b29a1381da36 Content-Length: 38 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Set-Cookie: GCLB=CPf6lJ_TwYm6DxAD; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:39 UTC	38	IN	Data Raw: 53 75 63 63 65 73 73 20 3a 3a 20 4d 65 73 73 61 67 65 20 70 75 62 6c 69 73 68 65 64 20 6f 6e 20 50 75 62 53 75 62 Data Ascii: Success :: Message published on PubSub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.6	50126	52.85.132.96	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:39 UTC	503	OUT	GET /log?domain=sharefile.com&country=us&state=&behavior=implied&session=db4dc810-f3ba-4393-8abb-a849d8d257c1&userType=NEW&c=8a97&referer=https://docs.sharefile.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:40 UTC	1474	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 18:48:39 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Content-Security-Policy: object-src 'none'; frame-ancestors https://.trustarc.com https://.prod.internal.trustarc.com https://.trustarc.eu https://.prod.internal.trustarc.eu https://.staging.internal.trustarc.com https://.trustarc-svc.net https://.truste-svc.net https://.qa.truste-svc.net https://.dev.truste-svc.net http://localhost: https://.nymity.com https://.qanym;; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp-reporter.tools.trustarc-svc.net/report Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: cross-origin Expect-CT: enforce, max-age=60 Permissions-Policy: geolocation=(), camera=(), speaker=(), microphone=(), vibrate=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Cache: Hit from cloudfront Via: 1.1 ec22576e88e707bf58c11e0ee75d019c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 X-Amz-Cf-Id: 1IYoDLV6fqMlYxLQDg962wHQ7O9TBmFKxJefPzHDBEjm9cOaVtCADA== Vary: Origin
2024-04-25 18:48:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.6	50127	108.177.122.157	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:40 UTC	850	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&gjid=980149886&_gid=979624069.1714070919&_u=YEBAAQAAAAAAACAAs~&z=1563054629 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://docs.sharefile.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:40 UTC	596	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.sharefile.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 18:48:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:40 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.6	50130	130.211.22.189	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:40 UTC	406	OUT	GET /api/v2/sendInsights?1714070918377 HTTP/1.1 Host: titan.citrix.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GCLB=CNWk1oqaweXrhwEQAw
2024-04-25 18:48:40 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 18:48:40 GMT Server: Google Frontend Content-Type: text/html; charset=utf-8 Etag: W/"10-FeCK+iAmTj9s8ihf+TYOdmHArBQ" Function-Execution-Id: 0xaxt5swlz94 X-Cloud-Trace-Context: 5a1fe73bc258adf9e295705dfca44ea3 Content-Length: 16 X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors self Strict-Transport-Security: max-age=604800 X-XSS-Protection: 1; mode=block Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:40 UTC	16	IN	Data Raw: 53 75 63 63 65 73 73 2e 2e 47 43 46 20 55 70 21 Data Ascii: Success..GCF Up!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.6	50131	64.233.185.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:40 UTC	797	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&_u=YEBAAQAAAAAAACAAs~&z=124763840 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:40 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 18:48:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.6	50132	108.177.122.154	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:40 UTC	594	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&gjid=980149886&_gid=979624069.1714070919&_u=YEBAAQAAAAAAACAAs~&z=1563054629 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 18:48:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:40 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.6	50133	108.177.122.99	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:40 UTC	559	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-142592-2&cid=1161923243.1714070919&jid=1950814838&_u=YEBAAQAAAAAAACAAs~&z=124763840 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:41 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 18:48:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 18:48:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
269	192.168.2.6	50134	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 47 73 73 6e 6c 4b 77 7a 6b 45 47 32 2b 5a 67 72 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 33 39 64 35 34 65 35 64 34 63 34 38 31 30 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: GssnlKwzkEG2+Zgr.1Context: d39d54e5d4c48100
2024-04-25 18:48:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-25 18:48:44 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 47 73 73 6e 6c 4b 77 7a 6b 45 47 32 2b 5a 67 72 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 33 39 64 35 34 65 35 64 34 63 34 38 31 30 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 61 74 48 6d 42 69 45 6b 54 6b 76 39 78 7a 55 6a 37 47 35 62 58 6f 78 45 4f 50 44 7a 48 49 52 4f 2f 67 38 62 41 51 76 57 70 45 35 6d 45 6c 65 54 68 69 47 34 75 78 53 63 30 53 57 4c 57 77 4f 64 74 47 34 55 37 32 6c 6d 49 61 2b 45 67 50 63 2b 39 57 49 37 36 45 34 75 31 72 67 36 4a 45 36 49 66 34 39 44 4c 54 37 4a 47 71 69 61 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: GssnlKwzkEG2+Zgr.2Context: d39d54e5d4c48100<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASatHmBiEkTkv9xzUj7G5bXoxEOPDzHIRO/g8bAQvWpE5mEleThiG4uxSc0SWLWwOdtG4U72lmIa+EgPc+9WI76E4u1rg6JE6If49DLT7JGqia
2024-04-25 18:48:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 47 73 73 6e 6c 4b 77 7a 6b 45 47 32 2b 5a 67 72 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 33 39 64 35 34 65 35 64 34 63 34 38 31 30 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: GssnlKwzkEG2+Zgr.3Context: d39d54e5d4c48100<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-25 18:48:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-25 18:48:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4f 70 5a 74 44 74 66 72 39 6b 2b 63 6b 76 34 32 41 53 2b 36 6b 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: OpZtDtfr9k+ckv42AS+6kQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.6	50135	136.146.24.66	443	5636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:48:48 UTC	781	OUT	GET /chat/rest/Visitor/Availability.jsonp?sid=undefined&r=759&Availability.prefix=Visitor&Availability.ids=[573Dn000000hOkW]&callback=embedded_svc.liveAgentAPI.connection.handlePing&deployment_id=572Dn000000hP8x&org_id=00DDn00000AvI1G&version=48 HTTP/1.1 Host: d.la1-c1-ia6.salesforceliveagent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.sharefile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 18:48:48 UTC	369	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Expires: -1 Content-Type: text/javascript X-Content-Type-Options: nosniff Set-Cookie: X-Salesforce-CHAT=!N9sueA5eFIOi6TZIFTrNQacpTeruYhl4F4d0twmspNTnIou23QzAiIMbN8uyqzOKoo8r/Y5V69nCKA==; path=/; Httponly; Secure
2024-04-25 18:48:48 UTC	161	IN	Data Raw: 2f 2a 2a 2f 65 6d 62 65 64 64 65 64 5f 73 76 63 2e 6c 69 76 65 41 67 65 6e 74 41 50 49 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2e 68 61 6e 64 6c 65 50 69 6e 67 28 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 41 76 61 69 6c 61 62 69 6c 69 74 79 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 69 64 22 3a 22 35 37 33 44 6e 30 30 30 30 30 30 68 4f 6b 57 22 2c 22 69 73 41 76 61 69 6c 61 62 6c 65 22 3a 74 72 75 65 7d 5d 7d 7d 5d 7d 29 3b Data Ascii: /**/embedded_svc.liveAgentAPI.connection.handlePing({"messages":[{"type":"Availability", "message":{"results":[{"id":"573Dn000000hOkW","isAvailable":true}]}}]});

Session ID	Source IP	Source Port	Destination IP	Destination Port
271	192.168.2.6	50137	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 18:49:13 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 55 53 44 68 57 41 4b 69 6b 61 62 66 4a 57 6b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 31 36 65 62 61 35 30 38 38 34 62 61 66 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: RUSDhWAKikabfJWk.1Context: b916eba50884baf2
2024-04-25 18:49:13 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-25 18:49:13 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 52 55 53 44 68 57 41 4b 69 6b 61 62 66 4a 57 6b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 31 36 65 62 61 35 30 38 38 34 62 61 66 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 61 74 48 6d 42 69 45 6b 54 6b 76 39 78 7a 55 6a 37 47 35 62 58 6f 78 45 4f 50 44 7a 48 49 52 4f 2f 67 38 62 41 51 76 57 70 45 35 6d 45 6c 65 54 68 69 47 34 75 78 53 63 30 53 57 4c 57 77 4f 64 74 47 34 55 37 32 6c 6d 49 61 2b 45 67 50 63 2b 39 57 49 37 36 45 34 75 31 72 67 36 4a 45 36 49 66 34 39 44 4c 54 37 4a 47 71 69 61 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: RUSDhWAKikabfJWk.2Context: b916eba50884baf2<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASatHmBiEkTkv9xzUj7G5bXoxEOPDzHIRO/g8bAQvWpE5mEleThiG4uxSc0SWLWwOdtG4U72lmIa+EgPc+9WI76E4u1rg6JE6If49DLT7JGqia
2024-04-25 18:49:13 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 55 53 44 68 57 41 4b 69 6b 61 62 66 4a 57 6b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 31 36 65 62 61 35 30 38 38 34 62 61 66 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: RUSDhWAKikabfJWk.3Context: b916eba50884baf2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-25 18:49:13 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-25 18:49:13 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 75 35 33 75 34 73 65 58 52 45 36 62 52 36 6f 7a 65 6f 66 72 71 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: u53u4seXRE6bR6ozeofrqA.0Payload parsing failed.

Target ID:	0
Start time:	20:47:15
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:47:19
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2216,i,4007318040339904038,1145951052867774334,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:47:22
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://clicks.sharefile.com/f/a/HoE2mwkT6iX9tTPZBYNKQA~~/AACuKQA~/RgRoDLGfP4QxAWh0dHBzOi8vY2FtcGFpZ25zdHVkaW8uc2hhcmVmaWxlLmNvbS9yLzExYjg2YzlmZTY4Yjg3YTM1ZTM3YTkzMGU_Y3Q9WVRvMU9udHpPalk2SW5OdmRYSmpaU0k3WVRveU9udHBPakE3Y3pvMU9pSmxiV0ZwYkNJN2FUb3hPMms2TWpFNE8zMXpPalU2SW1WdFlXbHNJanRwT2pJeE9EdHpPalE2SW5OMFlYUWlPM002TWpJNklqWTJNbUV5WXprNE9ETmhNVGMyTWpjNE56STBPRGNpTzNNNk5Eb2liR1ZoWkNJN2N6bzJPaUl4TmpVd09EUWlPM002TnpvaVkyaGhibTVsYkNJN1lUb3hPbnR6T2pVNkltVnRZV2xzSWp0cE9qSXhPRHQ5ZlElM0QlM0QmVwNzcGNCCmYonywqZgIFPr1SGWttcXVpY2tAYXVndXN0YWhlYWx0aC5jb21YBAAABt8~"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194