Edit tour

Windows Analysis Report
securedoc_20240805T101719.html

Overview

General Information

Sample name:	securedoc_20240805T101719.html
Analysis ID:	1488743
MD5:	2c903428cac0e0fa016b5b0580df8367
SHA1:	0b25be6f3aed2c78095a88101cfea071bf69069e
SHA256:	210fdecd959ea18282025830b35c9e13eb900d71a37361f23420ff64fc124c88
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains password input but no form action

HTML title does not match URL

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20240805T101719.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4952 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6236 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ETPRO EXPLOIT Windows DirectWrite Heap-Based Buffer Overflow Inbound (CVE-2021-24093) - Source IP: 54.208.242.91 - Destination IP: 192.168.2.4

Timestamp:	2024-08-06T14:26:53.809960+0200
SID:	2847446
Severity:	1
Source Port:	443
Destination Port:	49830
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/securedoc_20240805T101719.html

LLM: Score: 10 Reasons: The domain 'file:///C:/Users/user/Desktop/securedoc_20240805T101719.html' is a local file stored on a Windows computer, which is unusual for an email encryption service. The domain does not match the brand name shown on the webpage, which is also unusual. The webpage design is simple and minimalistic, which could be a sign of a basic or amateur service. DOM: 0.0.pages.csv

Source: file:///C:/Users/user/Desktop/securedoc_20240805T101719.html	HTTP Parser: {'name':null,'msgID':'\|1__8f20fe9700000191231dc7c6956fcd86ab9d438e@mail10675.corpmailsvcs.com','keysize':24,'flags':3073,'rid':'ImprbWFydGluQGNvbXBhc3NsbGMuY29tIiA8amttYXJ0aW5AY29tcGFzc2xsYy5jb20+','algnames':{'encryption':{'data':'AES'}},'algparams':{'encryption':{'data':{'IV':'12GDcAg0ond+MZUNyAGlDQ=='}}},'keyserverhost':'res.cisco.com:443','securereplyhost':'res.cisco.com:443','openerhost':'res.cisco.com:443','toc':[['Body-1722871039946.html',1,'','',13,[0,3136],'Body-1722871039946.html','UTF-16'],['6515321_69548206_199326_20240805111709554430_P.docx',2,'','',5,[3136,97051],'6515321_69548206_199326_20240805111709554430_P.docx','ISO-8859-1'],['MessageBar.html',4,'','',1,[100187,66852],'MessageBar.html','UTF-16']],'salt':'5hbEAd6VaQZ1wkyxmsOexBXo4Nw=','data':['','','']}
Source: file:///C:/Users/user/Desktop/securedoc_20240805T101719.html	HTTP Parser: jkmartin@compassllc.com
Source: file:///C:/Users/user/Desktop/securedoc_20240805T101719.html	HTTP Parser: "cyounce@optum.com" <cyounce@optum.com>
Source: file:///C:/Users/user/Desktop/securedoc_20240805T101719.html	HTTP Parser: Secure Message from cyounce@optum.com

Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1650939714&timestamp=1722947223316
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1650939714&timestamp=1722947223316
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1650939714&timestamp=1722947223316
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: Iframe src: /_/bscframe

Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://res.cisco.com/websafe/root

HTTP Parser: Title: Login does not match URL

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/securedoc_20240805T101719.html	HTTP Parser: No favicon
Source: https://res.cisco.com/websafe/root	HTTP Parser: No favicon
Source: https://res.cisco.com/websafe/help	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: No favicon

Source: https://res.cisco.com/websafe/root	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN	HTTP Parser: No <meta name="author".. found

Source: https://res.cisco.com/websafe/root	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S-1089593186%3A1722947218196447&access_type=offline&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com&ddm=0&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&response_type=code&scope=openid+email+profile&service=lso&state=4373E462E56B43EECDC25C4C230D0021&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hANa1NdpBZFcdu9wz8s8ZspGkqj4vdZ3xFz_HN4nedynglLKS6WIyW4JrOzKihgFmm9XsuQQBisFzBaKi58t2L0ltLX7WA12wUpc6vhWGseNUR9YtZ87s2vRpAa-bSJed6OegLTtIh9TiO7agEnA5U1gi3twPunV5m9ao4wze0pU5Gp5t9Mxkphck4WE3dMqSQTYtQoZ65rQCrdtDok2BAAQqLJ62OHZQOid3nabAu-dz5w8F0V9Np21yOZUeTNPUP-oAvotKvbxiP96VIiFlgRr5c59Js3PyJDXm7bT1zudae-PbzIIsB_MpfLwagrSTA8k3hy_VTGBlM8zB8TWO-eo7ZVwcPERlXfFGTrnahYOCzdO-hX7WRxJe_N7Yv9VVoL2P61Mnn1d0GUu5s2SFro_m_RQaois3FdTUxw5ul825LxRheKTAaSS9LLAV1eyL0z3ftHrZTKwFt-ZzqYJk3ypdmRsSw%26flowN...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49789 version: TLS 1.2

Source:

Binary string: _.ODb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PDb=function(a){setTimeout(function(){throw a;},0)};_.VZ.prototype.wK=function(){return!0};_.gr(_.Ll,_.VZ); source: chromecache_199.2.dr, chromecache_256.2.dr

Source: global traffic

TCP traffic: 192.168.2.4:49744 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675%2Ecorpmailsvcs%2Ecom%27,%0D%0A%27keysize%27%3A24,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImprbWFydGluQGNvbXBhc3NsbGMuY29tIiA8amttYXJ0aW5AY29tcGFzc2xsYy5jb20%2B%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%2712GDcAg0ond%2BMZUNyAGlDQ%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1722871039946%2Ehtml%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A13,%5B0,3136%5D,%27Body-1722871039946%2Ehtml%27,%0D%0A%27UTF-16%27%5D,%0D%0A%5B%276515321_69548206_199326_20240805111709554430_P%2Edocx%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B3136,97051%5D,%276515321_69548206_199326_20240805111709554430_P%2Edocx%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B100187,66852%5D,%27MessageBar%2Ehtml%27,%0D%0A%27UTF-16%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%275hbEAd6VaQZ1wkyxmsOexBXo4Nw%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27eMP7na06XmLBVX616y2jLIrqdZlBlLq88WhUF1Y%2BT01RcvMO292fxc0fmVZP9cs4asnvs0gbvpYzF1XNiVghdtWLYZdRW4oKvQXR9fDU%2F%2B2oSyrDUgPOaZmgvbmmC3%2ByyxS3dfR8geAtmodQfhdW3qT5LKGXqFrprR4JmYofczbSSJUJPDs0ZAf8kOLxtqQVgpGeGe7aLumQvHpjZ4iJ5tPTqQFAGXfA8d5iDLeFfE5rXDWrePixYUqMHrRC1uAjsmNUMEsb1xyO57VcCa7%2B3p5MEuWao4OICRCIrRXTCxmi%2BSRGc%2BQpYmEdcm5MFjl1XBhX92g8705q7ARy%2FpOQL3doOoowqM72ZGzmhyHseh%2BzQe90qs53dObmSYmJLSE3Zx1oeqjLr7vY845Aav6AnG%2BRKv3qYHtjLeQs2wLoisJ%2BKp%2BWiXtLCn%2FOCnDwvRx3uuDyBeM0dpMD9JDqCcJuDBVTxtvhIy%2FSqs5KRYTD97ajobaw%2B402q2asxFr8juzMw%2B2R9aF3yPeP0FY5v4AJtT%2B2VV0QFeF%2Ba2eeTHkQFegvZvgibOdwQzhs6jEYdtaboEHkbWeAGbdSfdGNe%2FFQKGoqcLwDJzES8SuYrbe2ybBFbDu4U%2BqReiripeJiQPL9Y9KorHYjQ6vtl6%2BR3jAHSA8btVWgmHvZs2ut8MqCmiTVbkJpQY0BQOvA7HeLd%2B0uX9p8LkYqBpt8%2BfBX6QyZBdhebFJhYlY0fo4zhkq2FCYj6R3peX11qYyW3k6PlgirxXaUCatQFHiIICpSI2ZswNnsUSP03SFyJnIy7QbBlpPzPeQvSX2VfauNR%2F5UWsjPcA%2FOFJNKON5LnygTtg27Z0VDAdY9nzPx1JYxShegD0gqzFfn7%2B28WNDlX1hQR53f%2BRNzCSKD2%2F0cj7tzzzasX8HJ6FA5qeS3kjXRa2jTqQxFepUe%2BlRgupYwrxySs%2FNVj9AmXvUWAnUscXwabzBDnkMnY4EHyEl1seEf0dTF%2FenSQ2ZB7wR3p9JgBu77hBN11XLZfiDt7B8nA50EHySOHTVF9T1GNKfwZofHSoS13jkFkHtVnvkwioCu8IEY8uc%2FP6AoiotrwhnJ31IuIlA7xgwxHOPHwBpcuDsZe3Cshm6kgzHoxBVKklCT9JeBOV6SIL6IJQI8ePHXvxiLi%2BMU0UKAaq5Tn9%2F0JYjA9jLoNloG1YBJPol%2BS9Ecoe0oLZln5mLQZtyTaiRAx3i1LP8cEnp%2Fs4nzdTt5GqmBJdCf46GYAzOX6aAyJRHKD9LDsxQSKc4iAhSD591Uu0D0VWa4SmwACFdVp%2FCtFVyLYCsaMCyukEyen%2FOrVbQJolzGUGh7RHtLRox1dlBd7E%2FRaNPH0nGMkrlWJPlJdVPZVkIvJs%2BrVenB6pFItHB2qvKueUmSSdXQ5wAsJnF8rWCtSnKl%2FTDJ%2FkSztjbCWitdP%2BKpLTlSgEGVIx4J40%2F87Fs24pj1LrAZKHm1da7gEk5HowSshi3zKvwM9

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157

Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /postx.css HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
Source: global traffic	HTTP traffic detected: GET /websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Light.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=JKMARTIN%40COMPASSLLC.COM&df=&tf=&lp=en&v=2&m=%7c1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675.corpmailsvcs.com&s=1&f=0&d=1722947150930&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=tilS6G7O1PdjlzDYm5LFzZG4yTVUoC0yxFYX0sI/5ou2/IzqxZBUWfUfmBQ5qk4FaaB41XR36gN9GD8hkCOTQlPtJafAVr24sZLB++TEsSI4hjjQmcsWWFszW815; AWSALBCORS=tilS6G7O1PdjlzDYm5LFzZG4yTVUoC0yxFYX0sI/5ou2/IzqxZBUWfUfmBQ5qk4FaaB41XR36gN9GD8hkCOTQlPtJafAVr24sZLB++TEsSI4hjjQmcsWWFszW815
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=JKMARTIN%40COMPASSLLC.COM&df=&tf=&lp=en&v=2&m=%7c1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675.corpmailsvcs.com&s=1&f=0&d=1722947150930&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=tilS6G7O1PdjlzDYm5LFzZG4yTVUoC0yxFYX0sI/5ou2/IzqxZBUWfUfmBQ5qk4FaaB41XR36gN9GD8hkCOTQlPtJafAVr24sZLB++TEsSI4hjjQmcsWWFszW815; AWSALBCORS=bFNqSjK9d7Wn3bSBkSj8AUV7moKdPNZGYRPDNYmcgI0kUw5/AmgsGSE3a/zH2rtf0Y6IjLwSC2O5nbBufwFXOVrZmOUMblKlrDiA0Ol7ftcgCe46v1oatyxXjPQA
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=bFNqSjK9d7Wn3bSBkSj8AUV7moKdPNZGYRPDNYmcgI0kUw5/AmgsGSE3a/zH2rtf0Y6IjLwSC2O5nbBufwFXOVrZmOUMblKlrDiA0Ol7ftcgCe46v1oatyxXjPQA
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=hLlTRcvk43K6SpyczKrGPaqlOGHZ/IOaC6qsO5ksx++AaofAEEajB6NwmyxRcuBKeCjmls7jkdUoHijmq9rxuxV+EMUl0W4vIu3nPmJMj6MRVUdLJnuJBiXhgVKa; AWSALBCORS=hLlTRcvk43K6SpyczKrGPaqlOGHZ/IOaC6qsO5ksx++AaofAEEajB6NwmyxRcuBKeCjmls7jkdUoHijmq9rxuxV+EMUl0W4vIu3nPmJMj6MRVUdLJnuJBiXhgVKa
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UKCM33z49a1PfTP&MD=6AMlHy45 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=ovEY88T/m0/10U3MahtLQc3+ubbVTmuXZQf7RI5gW85s4Q20hUK7KnwgM3n2ZWBK7+iWen3V6l4NbuZ//R7LKEYevx8g6/+TJVqlfPEdU4nfOnnYVncl4p6wN9Kl
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=6Ue5JYN6E+Uj8HRG/kgwGFm/uXARFtmtv/EUlEntztRFIYNKMgE01Xe/Ij80vMi/NJYwKp9wj+0fwzbfFRlmlhxJ72p/XD+yqkBw8/POg7RjHPpmRAfg+rhKdf/d
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=gbBcH1cYL6wGL7V00Jw3o79OCkCOEyRDd3z638reBRxto7J/CsB2lqCvRkoZ1ycipAjDQCKIVU14hC+cVrk4wWdc4VaHLjLOfHpp6ZQyRBMXDqFmiD+kNZBcAsQM; AWSALBCORS=6Ue5JYN6E+Uj8HRG/kgwGFm/uXARFtmtv/EUlEntztRFIYNKMgE01Xe/Ij80vMi/NJYwKp9wj+0fwzbfFRlmlhxJ72p/XD+yqkBw8/POg7RjHPpmRAfg+rhKdf/d
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UKCM33z49a1PfTP&MD=6AMlHy45 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /websafe/root HTTP/1.1Host: res.cisco.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=/kqqVsc1rY5vgmBQkDISmjwK65l2nXuzu4bZEj76MD1GvUXBqOIo99e4Hko0h81Gap+SQY23sUJAf+d/CIfDC9dKIYO5Y7IzNSmFnwH+7zvIQdkdBlyS2pDMKNO7; AWSALBCORS=/kqqVsc1rY5vgmBQkDISmjwK65l2nXuzu4bZEj76MD1GvUXBqOIo99e4Hko0h81Gap+SQY23sUJAf+d/CIfDC9dKIYO5Y7IzNSmFnwH+7zvIQdkdBlyS2pDMKNO7
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/postx.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/overrides.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
Source: global traffic	HTTP traffic detected: GET /admin/cisco-fonts.min.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
Source: global traffic	HTTP traffic detected: GET /websafe/templates/standard-scripts.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
Source: global traffic	HTTP traffic detected: GET /websafe/templates/screen-reader.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/templates/screen-reader.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
Source: global traffic	HTTP traffic detected: GET /websafe/templates/standard-scripts.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/Help.svg HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/customLogin.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
Source: global traffic	HTTP traffic detected: GET /websafe/images/skins/close.svg HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
Source: global traffic	HTTP traffic detected: GET /CRES_googleSignIn.png HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/websafe/templates/css/customLogin.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu; AWSALBCORS=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu; AWSALBCORS=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu; AWSALBCORS=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Light.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg; AWSALBCORS=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-SemiBold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg; AWSALBCORS=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/Help.svg HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba; AWSALBCORS=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba
Source: global traffic	HTTP traffic detected: GET /websafe/images/skins/close.svg HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba; AWSALBCORS=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba
Source: global traffic	HTTP traffic detected: GET /admin/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; AWSALB=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba; AWSALBCORS=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba
Source: global traffic	HTTP traffic detected: GET /CRES_googleSignIn.png HTTP/1.1Host: static.cres-aws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/websafe/rootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Lzmf8RNCwdi2bR8T2cRjSZ+xvUd8FrYsrS1rjKpNvIHfUNKgOVhDyDhknw8WEmsfXAHicggrQRE12XuqJIy9KWbTtZGkSim4GD5pVYxG5Q72+fKbIlaS/6aqaKJM; AWSALBCORS=Lzmf8RNCwdi2bR8T2cRjSZ+xvUd8FrYsrS1rjKpNvIHfUNKgOVhDyDhknw8WEmsfXAHicggrQRE12XuqJIy9KWbTtZGkSim4GD5pVYxG5Q72+fKbIlaS/6aqaKJM
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=F+hJxBWPmHz0/Mulj4yRSeMHXFyFCfFznYIRhf9z/jruYrCQxgln2JNB3yPiQ/h9pSXf649SwlzXpWGu8/Sj2mtcfrTa7qRiXf29LRCrKa141b7H+d/B/Ah9WOFl; AWSALBCORS=F+hJxBWPmHz0/Mulj4yRSeMHXFyFCfFznYIRhf9z/jruYrCQxgln2JNB3yPiQ/h9pSXf649SwlzXpWGu8/Sj2mtcfrTa7qRiXf29LRCrKa141b7H+d/B/Ah9WOFl
Source: global traffic	HTTP traffic detected: GET /websafe/help HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=vTlMxPnpWeOnEH2aH8jE5M5Kmi0tHVvONTsOxVvbR/FSoHcgGMtjFX0BQlFpriCgCujxCNcbT0sNPF432JZb1H418bVe2NTbrOsxGEEksEUcBe+MYooKcw5n34p3; AWSALBCORS=vTlMxPnpWeOnEH2aH8jE5M5Kmi0tHVvONTsOxVvbR/FSoHcgGMtjFX0BQlFpriCgCujxCNcbT0sNPF432JZb1H418bVe2NTbrOsxGEEksEUcBe+MYooKcw5n34p3
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/customHelp.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/helpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/postx.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/helpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjDIf-None-Match: "19092496938-1dc45"If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
Source: global traffic	HTTP traffic detected: GET /websafe/templates/standard-scripts.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/helpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjDIf-None-Match: "19092496938-4635"If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
Source: global traffic	HTTP traffic detected: GET /websafe/templates/screen-reader.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/helpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjDIf-None-Match: "19092496938-83f"If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
Source: global traffic	HTTP traffic detected: GET /websafe/templates/standard-scripts.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=ba7VTctmNwColMVDVWpu7SFnw/+2RTtY+9u2xg0JRHF3U3ry/7C5ervsmiHTmPBuJ7HNNrNjtQU/DnIKzthPZcMg7zwjOhj8gHRcnseQ+cmgc6XCwmW8aT/mL4cX; AWSALBCORS=ba7VTctmNwColMVDVWpu7SFnw/+2RTtY+9u2xg0JRHF3U3ry/7C5ervsmiHTmPBuJ7HNNrNjtQU/DnIKzthPZcMg7zwjOhj8gHRcnseQ+cmgc6XCwmW8aT/mL4cXIf-None-Match: "19092496938-4635"If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
Source: global traffic	HTTP traffic detected: GET /admin/fonts/SharpSans/SharpSans-Bold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEuRange: bytes=259318-259318If-Range: W/"309772-1720441203000"
Source: global traffic	HTTP traffic detected: GET /websafe/templates/screen-reader.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEuIf-None-Match: "19092496938-83f"If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEuRange: bytes=259318-309771If-Range: W/"309772-1720441203000"
Source: global traffic	HTTP traffic detected: GET /websafe/google.action HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=U2oUhA+6tPGuZd5g60fCtbJCsPFaCDthz4WJmvsbQ0i1QoJ5/dhAN3obJoNwpOlQCg81XvBsdafS7HZ6/Foyd0X9vbU21iSE+oyDHfOqcCWfhwiZG4y9tYKZuRcY; AWSALBCORS=U2oUhA+6tPGuZd5g60fCtbJCsPFaCDthz4WJmvsbQ0i1QoJ5/dhAN3obJoNwpOlQCg81XvBsdafS7HZ6/Foyd0X9vbU21iSE+oyDHfOqcCWfhwiZG4y9tYKZuRcY
Source: global traffic	HTTP traffic detected: GET /s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://accounts.google.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlEIo9L_XAlorBnd-lsGrFD7C0Ufww/m=_b,_tp HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,gJzDyc,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qmdT9,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,eS2ylb,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,qPfo0c,yRXbo,bTi8wc,ywOR5c,PHUIyb HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,gJzDyc,SpsfSb,aC1iue,tUnxGc,aW3pY,ZakeSe,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,MY7mZe,xBaz7b,GwYlN,eVCnO,EIOG1e,LDQI HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1650939714&timestamp=1722947223316 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/signin/_/AccountsSignInUi/browserinfo?f.sid=-5071007541911337629&bl=boq_identityfrontendauthuiserver_20240730.06_p0&hl=en-US&_reqid=30426&rt=j HTTP/1.1Host: accounts.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Host-GAPS=1:L6JPAWLWp13dnh_s7i1byLDIbkoQcA:D64pAitZxUk4Q2tO
Source: global traffic	HTTP traffic detected: GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk HTTP/1.1Host: www.gstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=0000000000000000000000000000000000000000183391115D HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=GZzjAsUbq0MgfyIllehHMsoRGi6sPyneGfVeTZAfTJoN85qbjuMJHOPXFio08NdNUpBNaGW9zb+QhgZhMLiqTrDSLYyxQt0stMeTdg6XFmQyh5F35LhCjaioFjQ0; AWSALBCORS=IlSkY9aS6qoeTu0wBc+lUM7cyCGMB0n7jS9jUEVRFZlC4Gk54ORWA1WX9ryvXhu0N2OlC6fubjFsOT7195TGlTzpvlXQRxKKUIeFgySX1GtdFWKDEhXZAuddpGGl
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=GZzjAsUbq0MgfyIllehHMsoRGi6sPyneGfVeTZAfTJoN85qbjuMJHOPXFio08NdNUpBNaGW9zb+QhgZhMLiqTrDSLYyxQt0stMeTdg6XFmQyh5F35LhCjaioFjQ0; AWSALBCORS=rkS9/dHfQoAtIm6kh+5VN1IwH6x4FJHKvnBTo6/VxLxWUPcRyWcS0JVntj/2svRJu7a5e4/S9vZUyf+FMmco8w0Te8CgFBesovKBuZD/6l7Pl6w1thwz7tyRp6vd
Source: global traffic	HTTP traffic detected: GET /v3/signin/_/AccountsSignInUi/browserinfo?f.sid=-5071007541911337629&bl=boq_identityfrontendauthuiserver_20240730.06_p0&hl=en-US&_reqid=130426&rt=j HTTP/1.1Host: accounts.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Host-GAPS=1:L6JPAWLWp13dnh_s7i1byLDIbkoQcA:D64pAitZxUk4Q2tO; OTZ=7677387_72_76_104100_72_446760; NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675%2Ecorpmailsvcs%2Ecom%27,%0D%0A%27keysize%27%3A24,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImprbWFydGluQGNvbXBhc3NsbGMuY29tIiA8amttYXJ0aW5AY29tcGFzc2xsYy5jb20%2B%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%2712GDcAg0ond%2BMZUNyAGlDQ%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1722871039946%2Ehtml%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A13,%5B0,3136%5D,%27Body-1722871039946%2Ehtml%27,%0D%0A%27UTF-16%27%5D,%0D%0A%5B%276515321_69548206_199326_20240805111709554430_P%2Edocx%27,2,%0D%0A%27%27,%0D%0A%27%27,%0D%0A5,%5B3136,97051%5D,%276515321_69548206_199326_20240805111709554430_P%2Edocx%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B100187,66852%5D,%27MessageBar%2Ehtml%27,%0D%0A%27UTF-16%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%275hbEAd6VaQZ1wkyxmsOexBXo4Nw%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27eMP7na06XmLBVX616y2jLIrqdZlBlLq88WhUF1Y%2BT01RcvMO292fxc0fmVZP9cs4asnvs0gbvpYzF1XNiVghdtWLYZdRW4oKvQXR9fDU%2F%2B2oSyrDUgPOaZmgvbmmC3%2ByyxS3dfR8geAtmodQfhdW3qT5LKGXqFrprR4JmYofczbSSJUJPDs0ZAf8kOLxtqQVgpGeGe7aLumQvHpjZ4iJ5tPTqQFAGXfA8d5iDLeFfE5rXDWrePixYUqMHrRC1uAjsmNUMEsb1xyO57VcCa7%2B3p5MEuWao4OICRCIrRXTCxmi%2BSRGc%2BQpYmEdcm5MFjl1XBhX92g8705q7ARy%2FpOQL3doOoowqM72ZGzmhyHseh%2BzQe90qs53dObmSYmJLSE3Zx1oeqjLr7vY845Aav6AnG%2BRKv3qYHtjLeQs2wLoisJ%2BKp%2BWiXtLCn%2FOCnDwvRx3uuDyBeM0dpMD9JDqCcJuDBVTxtvhIy%2FSqs5KRYTD97ajobaw%2B402q2asxFr8juzMw%2B2R9aF3yPeP0FY5v4AJtT%2B2VV0QFeF%2Ba2eeTHkQFegvZvgibOdwQzhs6jEYdtaboEHkbWeAGbdSfdGNe%2FFQKGoqcLwDJzES8SuYrbe2ybBFbDu4U%2BqReiripeJiQPL9Y9KorHYjQ6vtl6%2BR3jAHSA8btVWgmHvZs2ut8MqCmiTVbkJpQY0BQOvA7HeLd%2B0uX9p8LkYqBpt8%2BfBX6QyZBdhebFJhYlY0fo4zhkq2FCYj6R3peX11qYyW3k6PlgirxXaUCatQFHiIICpSI2ZswNnsUSP03SFyJnIy7QbBlpPzPeQvSX2VfauNR%2F5UWsjPcA%2FOFJNKON5LnygTtg27Z0VDAdY9nzPx1JYxShegD0gqzFfn7%2B28WNDlX1hQR53f%2BRNzCSKD2%2F0cj7tzzzasX8HJ6FA5qeS3kjXRa2jTqQxFepUe%2BlRgupYwrxySs%2FNVj9AmXvUWAnUscXwabzBDnkMnY4EHyEl1seEf0dTF%2FenSQ2ZB7wR3p9JgBu77hBN11XLZfiDt7B8nA50EHySOHTVF9T1GNKfwZofHSoS13jkFkHtVnvkwioCu8IEY8uc%2FP6AoiotrwhnJ31IuIlA7xgwxHOPHwBpcuDsZe3Cshm6kgzHoxBVKklCT9JeBOV6SIL6IJQI8ePHXvxiLi%2BMU0UKAaq5Tn9%2F0JYjA9jLoNloG1YBJPol%2BS9Ecoe0oLZln5mLQZtyTaiRAx3i1LP8cEnp%2Fs4nzdTt5GqmBJdCf46GYAzOX6aAyJRHKD9LDsxQSKc4iAhSD591Uu0D0VWa4SmwACFdVp%2FCtFVyLYCsaMCyukEyen%2FOrVbQJolzGUGh7RHtLRox1dlBd7E%2FRaNPH0nGMkrlWJPlJdVPZVkIvJs%2BrVenB6pFItHB2qvKueUmSSdXQ5wAsJnF8rWCtSnKl%2FTDJ%2FkSztjbCWitdP%2BKpLTlSgEGVIx4J40%2F87Fs24pj1LrAZKHm1da7gEk5HowSshi3zKvwM9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_230.2.dr

String found in binary or memory: _.Ax(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.Ax(l);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.Ax(_.Ix(c))+"&hl="+_.Ax(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.Ax(l)+"/chromebook/termsofservice.html?languageCode="+_.Ax(d)+"&regionCode="+_.Ax(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded":"")+"?hl="+_.Ax(d)+"&gl="+_.Ax(c)+(g?"&color_scheme="+ equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: static.cres-aws.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: res.cisco.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 519sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Goog-AuthUser: 0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_246.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_246.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_251.2.dr, chromecache_229.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: securedoc_20240805T101719.html	String found in binary or memory: http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV
Source: chromecache_233.2.dr, chromecache_193.2.dr	String found in binary or memory: http://scripts.sil.org/OFLInterLightWeightSlant
Source: chromecache_255.2.dr, chromecache_231.2.dr	String found in binary or memory: http://scripts.sil.org/OFLInterSemiBoldWeightSlant
Source: chromecache_212.2.dr, chromecache_253.2.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlant
Source: chromecache_252.2.dr, chromecache_194.2.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlantRegular
Source: chromecache_248.2.dr, chromecache_254.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_218.2.dr	String found in binary or memory: http://www.sharptype.co
Source: chromecache_218.2.dr	String found in binary or memory: http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w
Source: chromecache_230.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_230.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: securedoc_20240805T101719.html	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: chromecache_197.2.dr, chromecache_244.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: securedoc_20240805T101719.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Source: securedoc_20240805T101719.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Source: chromecache_230.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_200.2.dr, chromecache_181.2.dr, chromecache_237.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_233.2.dr, chromecache_255.2.dr, chromecache_193.2.dr, chromecache_231.2.dr	String found in binary or memory: https://github.com/rsms/inter)Inter
Source: chromecache_252.2.dr, chromecache_194.2.dr	String found in binary or memory: https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter
Source: chromecache_212.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter
Source: chromecache_216.2.dr, chromecache_215.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_200.2.dr, chromecache_181.2.dr, chromecache_237.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_200.2.dr, chromecache_181.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_230.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional/embedded?gl=kr
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/terms/location/embedded
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=authFrame
Source: chromecache_219.2.dr, chromecache_242.2.dr	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=jkmartin
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com/websafe/images/loginbg.gif
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgn
Source: chromecache_242.2.dr	String found in binary or memory: https://res.cisco.com/websafe/register?uuid=0d2f25250000019127a72c53ac2b64b9e9d313a1
Source: chromecache_219.2.dr	String found in binary or memory: https://res.cisco.com/websafe/register?uuid=c18593c00000019127a7327bac2b64b9e9d313a1
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com:443
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com:443/keyserver/Logout
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com:443/keyserver/keyserver
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=AddrNotShown
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=PPNotShown
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=RegEnvelope
Source: securedoc_20240805T101719.html	String found in binary or memory: https://res.cisco.com:443/websafe/pswdForgot.action
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_v1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_dark_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_fork_who_will_use_dark_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_fork_who_will_use_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_0.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_0.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: securedoc_20240805T101719.html, chromecache_187.2.dr	String found in binary or memory: https://static.cres-aws.com/CRES_login_bg.jpg
Source: securedoc_20240805T101719.html	String found in binary or memory: https://static.cres-aws.com/postx.css
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_230.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_197.2.dr, chromecache_244.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_230.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_186.2.dr, chromecache_230.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49789 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.winHTML@38/133@30/23

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\c5ce9268-a8ea-4996-8e89-a1a8b76f63cb.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20240805T101719.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4952 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6236 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4952 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6236 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
securedoc_20240805T101719.html	0%	Virustotal		Browse
securedoc_20240805T101719.html	0%	ReversingLabs

Source	Detection	Scanner	Link
res.cisco.com	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
maxcdn.bootstrapcdn.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
static.cres-aws.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
http://fontawesome.io	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://www.youtube.com/t/terms?chromeless=1&hl=	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://youtube.com/t/terms?gl=	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://play.google/intl/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://support.google.com/accounts?p=new-si-ui	0%	URL Reputation	safe
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	0%	URL Reputation	safe
http://www.bohemiancoding.com/sketch	0%	URL Reputation	safe
https://policies.google.com/privacy/google-partners	0%	URL Reputation	safe
https://policies.google.com/privacy/additional	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe
https://policies.google.com/privacy/additional/embedded?gl=kr	0%	URL Reputation	safe
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en	0%	Avira URL Cloud	safe
https://policies.google.com/terms/location/embedded	0%	URL Reputation	safe
https://support.google.com/accounts?hl=	0%	URL Reputation	safe
https://play.google.com/work/enroll?identifier=	0%	Avira URL Cloud	safe
https://github.com/select2/select2/blob/master/LICENSE.md	0%	Avira URL Cloud	safe
https://res.cisco.com/websafe/images/skins/close.svg	0%	Avira URL Cloud	safe
https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://github.com/select2/select2/blob/master/LICENSE.md	0%	Virustotal		Browse
https://play.google.com/work/enroll?identifier=	0%	Virustotal		Browse
https://res.cisco.com/websafe/register?uuid=c18593c00000019127a7327bac2b64b9e9d313a1	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css	0%	Avira URL Cloud	safe
https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter	0%	Virustotal		Browse
https://www.google.com	0%	Virustotal		Browse
https://res.cisco.com/websafe/images/pullFeature/Help.svg	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://res.cisco.com:443	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css	0%	Virustotal		Browse
https://res.cisco.com:443/keyserver/keyserver	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css	0%	Virustotal		Browse
https://res.cisco.com:443	0%	Virustotal		Browse
https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1	0%	Virustotal		Browse
https://res.cisco.com:443/keyserver/keyserver	0%	Virustotal		Browse
https://res.cisco.com/admin/cisco-fonts.min.css	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js	0%	Virustotal		Browse
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://res.cisco.com/admin/cisco-fonts.min.css	0%	Virustotal		Browse
https://res.cisco.com:443/keyserver/Logout	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/securedoc_20240805T101719.html	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js	0%	Avira URL Cloud	safe
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en	0%	Avira URL Cloud	safe
https://res.cisco.com:443/keyserver/Logout	0%	Virustotal		Browse
https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf	0%	Avira URL Cloud	safe
https://res.cisco.com/favicon.ico	0%	Avira URL Cloud	safe
https://www.google.com/intl/	0%	Avira URL Cloud	safe
https://res.cisco.com/websafe/templates/css/customLogin.css	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Avira URL Cloud	safe
https://res.cisco.com/websafe/custom.action?cmd=authFrame	0%	Avira URL Cloud	safe
https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf	0%	Virustotal		Browse
https://res.cisco.com/admin/fonts/Inter/Inter-SemiBold.ttf	0%	Avira URL Cloud	safe
https://res.cisco.com/favicon.ico	0%	Virustotal		Browse
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Virustotal		Browse
https://res.cisco.com/websafe/custom.action?cmd=authFrame	0%	Virustotal		Browse
http://scripts.sil.org/OFLWeightSlant	0%	Avira URL Cloud	safe
https://res.cisco.com/admin/images/loginbg.gif	0%	Avira URL Cloud	safe
https://res.cisco.com:443/websafe/help?topic=AddrNotShown	0%	Avira URL Cloud	safe
https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLWeightSlant	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js	0%	Virustotal		Browse
https://www.google.com/intl/	1%	Virustotal		Browse
http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w	0%	Avira URL Cloud	safe
https://static.cres-aws.com/CRES_login_bg.jpg	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Virustotal		Browse
http://scripts.sil.org/OFLInterSemiBoldWeightSlant	0%	Avira URL Cloud	safe
https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf	0%	Virustotal		Browse
https://res.cisco.com/websafe/templates/screen-reader.js	0%	Avira URL Cloud	safe
https://res.cisco.com:443/websafe/help?topic=AddrNotShown	0%	Virustotal		Browse
https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf	0%	Avira URL Cloud	safe
https://res.cisco.com/admin/fonts/Inter/Inter-Light.ttf	0%	Avira URL Cloud	safe
https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg	0%	Avira URL Cloud	safe
https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgn	0%	Avira URL Cloud	safe
https://res.cisco.com/websafe/templates/standard-scripts.js	0%	Avira URL Cloud	safe
https://res.cisco.com/admin/fonts/Inter/Inter-Regular.ttf	0%	Avira URL Cloud	safe
https://res.cisco.com/websafe/images/loginbg.gif	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css	0%	Avira URL Cloud	safe
https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Virustotal		Browse
https://static.cres-aws.com/CRES_googleSignIn.png	0%	Avira URL Cloud	safe
https://static.cres-aws.com/postx.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
res.cisco.com	3.210.249.249	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.217.16.196	true	false	0%, Virustotal, Browse	unknown
d2qj7djftjbj85.cloudfront.net	18.66.27.82	true	false		unknown
static.cres-aws.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/images/skins/close.svg	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/images/pullFeature/Help.svg	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://res.cisco.com/admin/cisco-fonts.min.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/securedoc_20240805T101719.html	true	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en	false	Avira URL Cloud: safe	unknown
https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://res.cisco.com/favicon.ico	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/templates/css/customLogin.css	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://res.cisco.com/admin/fonts/Inter/Inter-SemiBold.ttf	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/admin/images/loginbg.gif	false	Avira URL Cloud: safe	unknown
https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://static.cres-aws.com/CRES_login_bg.jpg	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/templates/screen-reader.js	false	Avira URL Cloud: safe	unknown
https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/help	false		unknown
https://res.cisco.com/admin/fonts/Inter/Inter-Light.ttf	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/templates/standard-scripts.js	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/admin/fonts/Inter/Inter-Regular.ttf	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/images/loginbg.gif	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/templates/css/postx.css	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en&try=1	false	Avira URL Cloud: safe	unknown
https://static.cres-aws.com/postx.css	false	Avira URL Cloud: safe	unknown
https://static.cres-aws.com/CRES_googleSignIn.png	false	Avira URL Cloud: safe	unknown
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/keyserver/keyserver?su=JKMARTIN%40COMPASSLLC.COM&df=&tf=&lp=en&v=2&m=%7c1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675.corpmailsvcs.com&s=1&f=0&d=1722947150930&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/templates/css/overrides.css	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/admin/fonts/Inter/Inter-Bold.ttf	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/admin/fonts/SharpSans/SharpSans-Bold.ttf	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/google.action	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	Avira URL Cloud: safe	unknown
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/templates/css/customHelp.css	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?hasfast=true&authuser=0&format=json	false	Avira URL Cloud: safe	unknown
https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/root	false		unknown
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en&try=1	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_246.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://res.cisco.com/websafe/register?uuid=c18593c00000019127a7327bac2b64b9e9d313a1	chromecache_219.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_186.2.dr, chromecache_230.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://policies.google.com/terms/service-specific	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://g.co/recover	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_230.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_216.2.dr, chromecache_215.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_186.2.dr, chromecache_230.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter	chromecache_212.2.dr, chromecache_253.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_200.2.dr, chromecache_181.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://res.cisco.com:443	securedoc_20240805T101719.html	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://res.cisco.com:443/keyserver/keyserver	securedoc_20240805T101719.html	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_251.2.dr, chromecache_229.2.dr	false	URL Reputation: safe	unknown
https://res.cisco.com:443/keyserver/Logout	securedoc_20240805T101719.html	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://youtube.com/t/terms?gl=	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/	chromecache_230.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_197.2.dr, chromecache_244.2.dr	false	URL Reputation: safe	unknown
https://res.cisco.com/websafe/custom.action?cmd=authFrame	securedoc_20240805T101719.html	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_230.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFLWeightSlant	chromecache_212.2.dr, chromecache_253.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://res.cisco.com:443/websafe/help?topic=AddrNotShown	securedoc_20240805T101719.html	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_200.2.dr, chromecache_181.2.dr, chromecache_237.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w	chromecache_218.2.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy	chromecache_230.2.dr	false	URL Reputation: safe	unknown
http://scripts.sil.org/OFLInterSemiBoldWeightSlant	chromecache_255.2.dr, chromecache_231.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google/intl/	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgn	securedoc_20240805T101719.html	false	Avira URL Cloud: safe	unknown
https://policies.google.com/technologies/location-data	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter	chromecache_252.2.dr, chromecache_194.2.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/register?uuid=0d2f25250000019127a72c53ac2b64b9e9d313a1	chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp	securedoc_20240805T101719.html	false	Avira URL Cloud: safe	unknown
https://github.com/rsms/inter)Inter	chromecache_233.2.dr, chromecache_255.2.dr, chromecache_193.2.dr, chromecache_231.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/accounts?p=new-si-ui	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
http://www.bohemiancoding.com/sketch	chromecache_248.2.dr, chromecache_254.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/google-partners	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/additional	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_200.2.dr, chromecache_181.2.dr, chromecache_237.2.dr	false	URL Reputation: safe	unknown
https://res.cisco.com:443/websafe/help?topic=RegEnvelope	securedoc_20240805T101719.html	false	Avira URL Cloud: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_197.2.dr, chromecache_244.2.dr	false	URL Reputation: safe	unknown
http://fontawesome.io/license	chromecache_246.2.dr	false	URL Reputation: safe	unknown
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV	securedoc_20240805T101719.html	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy/additional/embedded?gl=kr	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://res.cisco.com:443/websafe/help?topic=PPNotShown	securedoc_20240805T101719.html	false	Avira URL Cloud: safe	unknown
https://policies.google.com/terms/location/embedded	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
http://scripts.sil.org/OFLWeightSlantRegular	chromecache_252.2.dr, chromecache_194.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/accounts?hl=	chromecache_186.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://res.cisco.com:443/websafe/pswdForgot.action	securedoc_20240805T101719.html	false	Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFLInterLightWeightSlant	chromecache_233.2.dr, chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.99	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
216.58.212.142	unknown	United States	15169	GOOGLEUS	false
64.233.166.84	unknown	United States	15169	GOOGLEUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
142.250.185.163	unknown	United States	15169	GOOGLEUS	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
54.208.242.91	unknown	United States	14618	AMAZON-AESUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false
3.210.249.249	res.cisco.com	United States	14618	AMAZON-AESUS	false
142.250.110.84	unknown	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
13.32.121.40	unknown	United States	16509	AMAZON-02US	false
18.66.27.82	d2qj7djftjbj85.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.227.178.4	unknown	United States	14618	AMAZON-AESUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1488743
Start date and time:	2024-08-06 14:24:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	securedoc_20240805T101719.html
Detection:	MAL
Classification:	mal48.phis.winHTML@38/133@30/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html Browse: https://res.cisco.com/ Browse: https://res.cisco.com/websafe/help Browse: https://res.cisco.com/websafe/google.action

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 172.217.18.14, 173.194.76.84, 142.250.184.202, 216.58.206.42, 34.104.35.123, 199.232.214.172, 192.229.221.95, 172.217.16.138, 142.250.186.138, 172.217.18.106, 172.217.23.106, 142.250.74.202, 172.217.18.10, 216.58.206.74, 142.250.181.234, 142.250.186.42, 142.250.186.106, 172.217.16.202, 142.250.186.74, 142.250.185.74, 142.250.186.170, 142.250.184.234, 142.250.185.202, 142.250.185.138, 216.58.212.138, 142.250.185.170, 142.250.185.106, 64.233.184.84, 172.217.18.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
18.66.27.82	SecuriteInfo.com.Win32.TrojanX-gen.3459.12800.exe	Get hash	malicious	Unknown	Browse
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
239.255.255.250	https://ugo.65d.mywebsitetransfer.com/mm-dk/dk/post.php	Get hash	malicious	Unknown	Browse
	AGENDA.pdf	Get hash	malicious	HTMLPhisher	Browse
	Itv FET91.pdf	Get hash	malicious	Unknown	Browse
	http://pagalfree.com	Get hash	malicious	Unknown	Browse
	Tecom Group Open Benefits Enrollment.pdf	Get hash	malicious	Unknown	Browse
	https://ipfs.io/ipfs/bafkreigf5tdzwmd2vr2asxk3xva2zpao3siztfxbgtv66kw4r7zblxnv3e?filename=Session.html	Get hash	malicious	HTMLPhisher	Browse
	https://ipfs.io/ipfs/bafkreihautmmzqkuyabmbht3wi6czre2h5vr2nu626geog3db3d5676rma?filename=Session.html	Get hash	malicious	Unknown	Browse
	https://ipfs.io/ipfs/bafkreihautmmzqkuyabmbht3wi6czre2h5vr2nu626geog3db3d5676rma?filename=Session.html	Get hash	malicious	Unknown	Browse
	https://ipfs.io/ipfs/bafkreihautmmzqkuyabmbht3wi6czre2h5vr2nu626geog3db3d5676rma?filename=Session.html	Get hash	malicious	Unknown	Browse
	http://sysredirector.com/gex8?q=	Get hash	malicious	Unknown	Browse
13.32.121.40	https://my.visme.co/v/pvmd79je-dj6mqv	Get hash	malicious	Unknown	Browse
13.32.121.40	https://www.taskade.com/d/crGK9SMfKv57uuo3?share=view&view=k886FJ9ztA29Uxye&as=list	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	Tecom Group Open Benefits Enrollment.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://ipfs.io/ipfs/bafybeif5wo2dz54j2hhksclrrocm2juqpqghu5xuluhn5q4jujik75xkme/njjw9k.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://mgmsoftair.com/modules/simpleimportproduct/fire.html#chaewoo.park@hyundaielevator.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	(No subject) (48).eml	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://pub-fd1e80b720f7406fba40462652b23ab0.r2.dev/index.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://pub-1ec5a6f8d6b846f8ab0958c1bef4dae2.r2.dev/cg.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://metasmaskdv.azurewebsites.net/	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://pemulihann-danaaid.techxzaa.mom/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.pemeliharaan.akun.dana.system-online.web.id/	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	104.17.25.14
res.cisco.com	securedoc_20240521T074217.html	Get hash	malicious	Unknown	Browse	54.88.189.149
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	18.233.198.142
	securedoc_20240328T081124.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20240212T082824.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20240207T142952.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	bankozk_securedoc_20231214T140252.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	http://res.cisco.com/envelopeopener/pf/ZGJAUG9zdFhuZXQgVG9rZW46MTAwMDE!/fhj.kysPBL1vCr-Ap0cgAxtf-4oAnvhBQdGWEbLmIsfjOkRt1iRs6AjBPp6q3ex6OVzfkENWZJb6NYNiwEi.uZSk84ZMSx7qDA!!/	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20231101T114817.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20231030T033913.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	https://tinyurl.com/mu4vnty3	Get hash	malicious	HTMLPhisher	Browse	184.94.241.74
maxcdn.bootstrapcdn.com	http://pagalfree.com	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://ipfs.io/ipfs/bafybeif5wo2dz54j2hhksclrrocm2juqpqghu5xuluhn5q4jujik75xkme/njjw9k.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://mgmsoftair.com/modules/simpleimportproduct/fire.html#chaewoo.park@hyundaielevator.com	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://www.pemeliharaan.akun.dana.system-online.web.id/	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	104.18.11.207
	http://pub-0603927d81c44c29945d86c4d44687c5.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.qrcreator.com/qr/4CE4D421	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://ipfs.io/ipfs/QmPKkFtcPE24nNZpwJa4nx9PGkoz9B5fSQ5boyEA4nm9Vu	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	FW Quote.msg	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://content.app-us1.com/LedEn/2024/08/03/19c502f2-d7fc-4021-b067-e9b1cf078dac.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
d2qj7djftjbj85.cloudfront.net	securedoc_20240521T074217.html	Get hash	malicious	Unknown	Browse	13.32.121.110
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	18.160.225.62
	securedoc_20240328T081124.html	Get hash	malicious	Unknown	Browse	108.138.85.20
	securedoc_20240212T082824.html	Get hash	malicious	Unknown	Browse	108.138.85.60
	securedoc_20240207T142952.html	Get hash	malicious	Unknown	Browse	3.163.115.70
	bankozk_securedoc_20231214T140252.html	Get hash	malicious	Unknown	Browse	18.173.166.40

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MIT-GATEWAYSUS	AGENDA.pdf	Get hash	malicious	HTMLPhisher	Browse	18.66.147.57
	http://sysredirector.com/gex8?q=	Get hash	malicious	Unknown	Browse	18.66.112.2
	https://fca-sb2.sig-box.com/index.php/s/FLE5xuOn6eh8Ycj/download	Get hash	malicious	Unknown	Browse	18.66.102.106
	https://www.intimissimi.com/uk/	Get hash	malicious	Unknown	Browse	18.66.122.39
	154.216.17.9-skid.mips-2024-08-04T06_23_09.elf	Get hash	malicious	Mirai, Moobot	Browse	18.165.26.236
	154.216.17.9-skid.x86-2024-08-04T06_23_12.elf	Get hash	malicious	Mirai, Moobot	Browse	18.34.238.234
	45.66.231.148-mips-2024-07-31T23_07_02.elf	Get hash	malicious	Unknown	Browse	19.170.199.21
	45.66.231.148-mipsel-2024-07-30T12_25_27.elf	Get hash	malicious	Unknown	Browse	19.27.14.138
	77.90.35.9-skid.mpsl-2024-07-30T06_23_54.elf	Get hash	malicious	Mirai, Moobot	Browse	19.89.89.188
	77.90.35.9-skid.sh4-2024-07-30T07_10_53.elf	Get hash	malicious	Mirai, Moobot	Browse	19.246.101.2
AMAZON-AESUS	AGENDA.pdf	Get hash	malicious	HTMLPhisher	Browse	54.157.58.70
	http://pagalfree.com	Get hash	malicious	Unknown	Browse	3.219.95.13
	Tecom Group Open Benefits Enrollment.pdf	Get hash	malicious	Unknown	Browse	3.89.57.161
	http://sysredirector.com/gex8?q=	Get hash	malicious	Unknown	Browse	34.229.3.43
	1hdqYXYJkr.exe	Get hash	malicious	Bdaejec	Browse	44.221.84.105
	i2RndFIwSG.lnk	Get hash	malicious	PureLog Stealer	Browse	52.22.41.97
	https://www.intimissimi.com/uk/	Get hash	malicious	Unknown	Browse	34.197.96.27
	154.216.17.9-skid.x86_64-2024-08-04T06_23_14.elf	Get hash	malicious	Mirai, Moobot	Browse	54.139.242.143
	45.66.231.148-mips-2024-07-31T23_07_02.elf	Get hash	malicious	Unknown	Browse	44.223.193.61
	45.66.231.148-mipsel-2024-07-30T12_25_27.elf	Get hash	malicious	Unknown	Browse	54.145.127.6
CLOUDFLARENETUS	Purchase order.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	66.235.200.146
	https://ugo.65d.mywebsitetransfer.com/mm-dk/dk/post.php	Get hash	malicious	Unknown	Browse	188.114.97.3
	AGENDA.pdf	Get hash	malicious	HTMLPhisher	Browse	162.159.138.60
	Itv FET91.pdf	Get hash	malicious	Unknown	Browse	1.1.1.1
	6PHM9GG3zOACOOY.exe	Get hash	malicious	LummaC	Browse	104.21.78.169
	http://pagalfree.com	Get hash	malicious	Unknown	Browse	104.21.79.28
	DHL BILL OF LANDING SHIPPING INVOICE DOCUMENTS.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	Tweak.reg	Get hash	malicious	LummaC	Browse	188.114.97.3
	Tecom Group Open Benefits Enrollment.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://ipfs.io/ipfs/bafkreihautmmzqkuyabmbht3wi6czre2h5vr2nu626geog3db3d5676rma?filename=Session.html	Get hash	malicious	Unknown	Browse	104.26.15.129
AMAZON-AESUS	AGENDA.pdf	Get hash	malicious	HTMLPhisher	Browse	54.157.58.70
	http://pagalfree.com	Get hash	malicious	Unknown	Browse	3.219.95.13
	Tecom Group Open Benefits Enrollment.pdf	Get hash	malicious	Unknown	Browse	3.89.57.161
	http://sysredirector.com/gex8?q=	Get hash	malicious	Unknown	Browse	34.229.3.43
	1hdqYXYJkr.exe	Get hash	malicious	Bdaejec	Browse	44.221.84.105
	i2RndFIwSG.lnk	Get hash	malicious	PureLog Stealer	Browse	52.22.41.97
	https://www.intimissimi.com/uk/	Get hash	malicious	Unknown	Browse	34.197.96.27
	154.216.17.9-skid.x86_64-2024-08-04T06_23_14.elf	Get hash	malicious	Mirai, Moobot	Browse	54.139.242.143
	45.66.231.148-mips-2024-07-31T23_07_02.elf	Get hash	malicious	Unknown	Browse	44.223.193.61
	45.66.231.148-mipsel-2024-07-30T12_25_27.elf	Get hash	malicious	Unknown	Browse	54.145.127.6
AMAZON-02US	AGENDA.pdf	Get hash	malicious	HTMLPhisher	Browse	18.239.94.30
	https://ipfs.io/ipfs/bafkreihautmmzqkuyabmbht3wi6czre2h5vr2nu626geog3db3d5676rma?filename=Session.html	Get hash	malicious	Unknown	Browse	54.188.171.69
	https://ipfs.io/ipfs/bafkreihautmmzqkuyabmbht3wi6czre2h5vr2nu626geog3db3d5676rma?filename=Session.html	Get hash	malicious	Unknown	Browse	63.34.222.109
	http://sysredirector.com/gex8?q=	Get hash	malicious	Unknown	Browse	143.204.98.46
	FedEx Delivery Notification_ ZJ71IL8NH8VZONC.eml	Get hash	malicious	Unknown	Browse	18.158.124.107
	https://fca-sb2.sig-box.com/index.php/s/FLE5xuOn6eh8Ycj/download	Get hash	malicious	Unknown	Browse	13.227.219.3
	i2RndFIwSG.lnk	Get hash	malicious	DcRat, PureLog Stealer, Remcos, zgRAT	Browse	52.216.209.9
	i2RndFIwSG.lnk	Get hash	malicious	PureLog Stealer	Browse	185.166.143.50
	for-nanotest.vbs	Get hash	malicious	Unknown	Browse	185.166.143.49
	https://www.intimissimi.com/uk/	Get hash	malicious	Unknown	Browse	13.225.78.36

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://ugo.65d.mywebsitetransfer.com/mm-dk/dk/post.php	Get hash	malicious	Unknown	Browse	40.68.123.157 184.28.90.27
	http://pagalfree.com	Get hash	malicious	Unknown	Browse	40.68.123.157 184.28.90.27
	Tecom Group Open Benefits Enrollment.pdf	Get hash	malicious	Unknown	Browse	40.68.123.157 184.28.90.27
	https://ipfs.io/ipfs/bafkreigf5tdzwmd2vr2asxk3xva2zpao3siztfxbgtv66kw4r7zblxnv3e?filename=Session.html	Get hash	malicious	HTMLPhisher	Browse	40.68.123.157 184.28.90.27
	https://ipfs.io/ipfs/bafkreihautmmzqkuyabmbht3wi6czre2h5vr2nu626geog3db3d5676rma?filename=Session.html	Get hash	malicious	Unknown	Browse	40.68.123.157 184.28.90.27
	http://sysredirector.com/gex8?q=	Get hash	malicious	Unknown	Browse	40.68.123.157 184.28.90.27
	https://202888urgencemedia-my.sharepoint.com/:b:/g/personal/philippe_attal_urgencemedia_com/EVL__05N_z9EnxJ75_HR3KQBGD4TcC6QlpxobAJX5h7Sgg	Get hash	malicious	Unknown	Browse	40.68.123.157 184.28.90.27
	https://fca-sb2.sig-box.com/index.php/s/FLE5xuOn6eh8Ycj/download	Get hash	malicious	Unknown	Browse	40.68.123.157 184.28.90.27
	https://ipfs.io/ipfs/bafybeif5wo2dz54j2hhksclrrocm2juqpqghu5xuluhn5q4jujik75xkme/njjw9k.html	Get hash	malicious	HTMLPhisher	Browse	40.68.123.157 184.28.90.27
	http://uk.shinydictionary.top/bx4ng7rcoxggna6/g1y0p8nnyk2/ghe35kh63f35h6h4/	Get hash	malicious	Unknown	Browse	40.68.123.157 184.28.90.27

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service\Files\c0a292e3-7820-4f51-a9bc-1e3ef2e5b52d (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	13414
Entropy (8bit):	7.969575176374285
Encrypted:	false
SSDEEP:	192:c6HTcwhOeKSTItVTw6fImdmKK1frxXbHGqCbcPgZRi2g3EzhHEeT//1M7:tiVdIm5KlrtHGqCI0hF/1U
MD5:	2630987060DB38B9BA98ACC6BD32BE8D
SHA1:	BD4665EB60948D49C6497788908F5E7EDFBD9CCA
SHA-256:	47E2C30E1124818247F83796490D4397A3C074E2F714367A1C1EB4550DA0850A
SHA-512:	06558454E2DFD63FF17F42CD2231F6C9B554707ABF03291759CA1D3C07ED8CE07B68DEFC4D77A3EF8872709A13F55072DED52C2D512A13EAECB7523B82DD43A9
Malicious:	false
Reputation:	low
Preview:	Cr24....E.........0.."0....H.............0.........:.2.W.))...I...5_U(I7nz...2[.;..H...S.../...nb%Yx.6.]i.....u...PDF.i.LJK.?....l.....R...\|...j...C..j!.%'..s....[."...Gy...=l)..=.l\....4..Q!$e.=...C.1.%d..B...K.[.l,.....7......y...$7J..G&TT..W.-=jgs[...&.@/.j$....+...yk\|l^..Km)\Y..x..}OCXf.....A5s.7..8..o....L..(p[...^e......?&X..:~,.)..C..n...Hh.....<..N..0.....woa6....'&y....tH..7@..a.t.....F..YQU......<......m!..^.#f.'F".....lt..97U3f...WM....]Lw...)..x...)..Hy Z...l.a.)J~'.y.o.NS.#.,6.D.9UMW..l>.pa.WG.^..L,..B...."p.Y.....<............"..X4t-...W..V..F..%?.._.Qo"..w,..p;.q...7./.~ .~,.'..\|(...s..@.+k..8....u..D...w....@=g.R..k..^n.6..Y).Kj.W.w..m...q..c&'.d.e.5.0.M....Z.y.;.h..9.X...f..H..'......72..u4R8YP..$=._.T...JI......Ox.... W.q..%'/\.....x"....h....p../......1.yQ...8K...$<iA..M./.9...X....]...c..Mx,S.[...V.Q..VCO.hv..@.9.Xv2y..=....I..R..J..Z.ZUL.9...."c.#D...3...l.w....b...@.]{j.d.I...!.Cz...L.$....U.I.hs..mCC... q...z...E......:.

C:\Users\user\Downloads\c5ce9268-a8ea-4996-8e89-a1a8b76f63cb.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	13414
Entropy (8bit):	7.969575176374285
Encrypted:	false
SSDEEP:	192:c6HTcwhOeKSTItVTw6fImdmKK1frxXbHGqCbcPgZRi2g3EzhHEeT//1M7:tiVdIm5KlrtHGqCI0hF/1U
MD5:	2630987060DB38B9BA98ACC6BD32BE8D
SHA1:	BD4665EB60948D49C6497788908F5E7EDFBD9CCA
SHA-256:	47E2C30E1124818247F83796490D4397A3C074E2F714367A1C1EB4550DA0850A
SHA-512:	06558454E2DFD63FF17F42CD2231F6C9B554707ABF03291759CA1D3C07ED8CE07B68DEFC4D77A3EF8872709A13F55072DED52C2D512A13EAECB7523B82DD43A9
Malicious:	false
Reputation:	low
Preview:	Cr24....E.........0.."0....H.............0.........:.2.W.))...I...5_U(I7nz...2[.;..H...S.../...nb%Yx.6.]i.....u...PDF.i.LJK.?....l.....R...\|...j...C..j!.%'..s....[."...Gy...=l)..=.l\....4..Q!$e.=...C.1.%d..B...K.[.l,.....7......y...$7J..G&TT..W.-=jgs[...&.@/.j$....+...yk\|l^..Km)\Y..x..}OCXf.....A5s.7..8..o....L..(p[...^e......?&X..:~,.)..C..n...Hh.....<..N..0.....woa6....'&y....tH..7@..a.t.....F..YQU......<......m!..^.#f.'F".....lt..97U3f...WM....]Lw...)..x...)..Hy Z...l.a.)J~'.y.o.NS.#.,6.D.9UMW..l>.pa.WG.^..L,..B...."p.Y.....<............"..X4t-...W..V..F..%?.._.Qo"..w,..p;.q...7./.~ .~,.'..\|(...s..@.+k..8....u..D...w....@=g.R..k..^n.6..Y).Kj.W.w..m...q..c&'.d.e.5.0.M....Z.y.;.h..9.X...f..H..'......72..u4R8YP..$=._.T...JI......Ox.... W.q..%'/\.....x"....h....p../......1.yQ...8K...$<iA..M./.9...X....]...c..Mx,S.[...V.Q..VCO.hv..@.9.Xv2y..=....I..R..J..Z.ZUL.9...."c.#D...3...l.w....b...@.]{j.d.I...!.Cz...L.$....U.I.hs..mCC... q...z...E......:.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	125394
Entropy (8bit):	5.069062799454485
Encrypted:	false
SSDEEP:	1536:ZrCMDD2MR/9fU2j2L292qgJYq1x2KLLn+mbkQ7ThzeSRwJWL0V8bK/FMGFOFlLn5:HDFfU2j2L292qgZxxv+mAQXhzeSRwzQ
MD5:	A0B4FF216E038470B000B63F5AA39816
SHA1:	319D6BB77F2115DA9F977569477AC010F87E6386
SHA-256:	7A61694ACF36F22050B90F751DBAFC330D5025471F83F5C08F663CD2633448F7
SHA-512:	A3B38E3CC9B204D809DBAEEB1417E878EFA9A2D8AAF9E311051FF6FEDD1C1F92F89901274EBD43A163F03D42567D6586063333A3ECDDC128A64773315BB1B094
Malicious:	false
Reputation:	low
URL:	https://static.cres-aws.com/postx.css
Preview:	/* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 800;. src: url("./fonts/Inter/Inter-ExtraBol

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (405)
Category:	dropped
Size (bytes):	1600
Entropy (8bit):	5.203902281882603
Encrypted:	false
SSDEEP:	48:o79tbNlnkHnHbrUeRSCiyvMw4b2oQ7D9jMrw:oll0SCvSqMw
MD5:	A3C89D2D8648C5DEADB3549761A168D4
SHA1:	9F5AE1115513688A95CEFCE257D5E6C101A8E478
SHA-256:	E84DA0613990736C43500C98C721F11E212A7A1CE109C89AA905242F8FBF292C
SHA-512:	2CB60BD44A44168BD518C639538CA9045DABE65AD7380052376BE09A87E8D1005211EB81F89A5D8F62E0ADDFDCBE7C8FDE237C3C42889C97D33E542D1A73BC1E
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Lf(_.Zja);_.Fw=function(a){_.J.call(this,a.Fa);this.aa=a.Xa.cache};_.B(_.Fw,_.J);_.Fw.Ma=_.J.Ma;_.Fw.Ba=function(){return{Xa:{cache:_.Fp}}};_.Fw.prototype.execute=function(a){_.Ua(a,function(b){var c;_.ze(b)&&(c=b.fb.Yb(b.jb));c&&this.aa.XD(c)},this);return{}};_.gr(_.ska,_.Fw);._.m();._.k("VwDzFe");.var xF=function(a){_.J.call(this,a.Fa);this.aa=a.Da.hp;this.ea=a.Da.metadata;this.da=a.Da.wr};_.B(xF,_.J);xF.Ma=_.J.Ma;xF.Ba=function(){return{Da:{hp:_.YE,metadata:_.lXa,wr:_.VE}}};xF.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.Ua(a,function(c){var d=b.ea.getType(c.Fd())===2?b.aa.Ub(c):b.aa.aa(c);return _.Xj(c,_.ZE)?d.then(function(e){return _.pd(e)}):d},this)};_.gr(_.xka,xF);._.m();._.k("sP4Vbe");._.kXa=new _.Pe(_.tka);._.m();._.k("A7fCU");.var cF=function(a){_.J.call(this,a.Fa);this.aa=a.Da.uM};_.B(cF,_.J);cF.Ma=_.J.Ma;cF.Ba=function(){r

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2111
Entropy (8bit):	5.156495456552832
Encrypted:	false
SSDEEP:	48:vKs/UigMMiqdPXIU70U7kAAakASjKXigO2qXigAgDUYnx7c5MJqDaZbhqm1F:n8iMiS70GRzi7Ji4RoAqibIqF
MD5:	0EF5306CD54F1799C9FA23548762EC4A
SHA1:	6E56D085A9136CBE8EBEC45DA4F18BA0299C5F0C
SHA-256:	CD4EB96D517491FCBA4D0748AD53B58DA9A3644DB226BE8B55FD93473AD8ADDD
SHA-512:	9FAE934C7A32993AF7B88AB294EFC4CA8CAB8552A112697AFFD0F27E916A728F98983D241CAFC0CB25563317120D70B73A0B42BA61FCFECFF8492E654CDBE6A3
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..var screenReaderCalled = false;....function insertForScreenReader(text){...var warning = document.getElementById('timeoutMessage');...warning.innerHTML = text;...warning.style.display = "none";...warning.setAttribute("aria-live","assertive");...warning.setAttribute("role","alert");...warning.setAttribute("aria-invalid","true");...warning.style.display = "block";...warning.focus();..}....function notifyTimeout(){...var t = document.getElementById('sessionTimeout');...var m = document.getElementById('timeoutMessage');...if(t != null && m != null){....var timeout = t.value;....var message = m.innerHTML;....document.getElementById('timeoutMessage').innerHTML = "";....if(timeout != null && message != null && timeout > 60){.....setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',(timeout-60)/60));.....},601000);..........setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',1));.....},(timeout-60)1000);....}...}..}....function updateScree

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1265
Entropy (8bit):	4.587969597231761
Encrypted:	false
SSDEEP:	24:2dPKz70mwuqtO2cJkpoNnqFRyaZ8JGzugNkVarlTHnqt04sKH0++NOi2ZSAWULR8:cSQuGO2cJkEn0ylG+6F/VKUJ2ZNWULR8
MD5:	2DBAB2D7C143EF0DACCB55D142FCD61C
SHA1:	AF132D5F5DBF080F3420FD6378738B03E0F9B669
SHA-256:	57928799C9F52AD009BD3D4DF0C7CCB781659EF99C649744EB6812676C0E8936
SHA-512:	953473500B3B403AA7ED0528EA3C150F73BCBF7F2775F93DCCEE43CA06F9609799E6C547A035257E44400F98901AEADE12921A345580A9E96876C0C2C50E81D2
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg height="20px" width="20px" id="a". xmlns="http://www.w3.org/2000/svg" viewBox="7.875 7.875 20.25 20.25">. <defs>. <style>.b,.c{fill:#f7f7f7;}.c{fill-rule:evenodd;}</style>. </defs>. <path class="b" d="M18,24c.828,0,1.5-.672,1.5-1.5s-.672-1.5-1.5-1.5-1.5,.672-1.5,1.5,.672,1.5,1.5,1.5Z"/>. <path class="b" d="M18.732,12.447c-.727-.145-1.481-.07-2.167,.213-.685,.284-1.271,.764-1.683,1.381-.412,.617-.632,1.342-.632,2.083,0,.621,.504,1.125,1.125,1.125s1.125-.504,1.125-1.125c0-.297,.088-.587,.253-.833,.165-.247,.399-.439,.673-.552,.274-.113,.576-.143,.867-.085,.291,.058,.558,.201,.768,.41,.21,.21,.353,.477,.411,.768,.058,.291,.028,.592-.085,.867-.113,.274-.306,.508-.552,.673-.247,.165-.537,.253-.833,.253-.621,0-1.125,.504-1.125,1.125s.504,1.125,1.125,1.125c.742,0,1.467-.22,2.083-.632,.617-.412,1.097-.998,1.381-1.683,.284-.685,.358-1.439,.213-2.167-.145-.727-.502-1.396-1.026-1.92-.524-.524-1.193-.882-1.92-1.026Z"/>. <path cla

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	dropped
Size (bytes):	58072
Entropy (8bit):	5.247960089226309
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
MD5:	E1D98D47689E00F8ECBC5D9F61BDB42E
SHA1:	6778FED3CF095A318141A31F455C8F4663885BDE
SHA-256:	0A34A87842C539C1F4FEEC56BBA982FD596B73500046A6E6FE38A22260C6577B
SHA-512:	021E615983F30EC5477FD8B611E8C5045AC6D9900F9A9BB8649B56E0C7D282965A727F8CF501C3B7E1DDFF02F5B44924D5481BCEA7A926BE8A9E166314A07ED0
Malicious:	false
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	dropped
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2111
Entropy (8bit):	5.156495456552832
Encrypted:	false
SSDEEP:	48:vKs/UigMMiqdPXIU70U7kAAakASjKXigO2qXigAgDUYnx7c5MJqDaZbhqm1F:n8iMiS70GRzi7Ji4RoAqibIqF
MD5:	0EF5306CD54F1799C9FA23548762EC4A
SHA1:	6E56D085A9136CBE8EBEC45DA4F18BA0299C5F0C
SHA-256:	CD4EB96D517491FCBA4D0748AD53B58DA9A3644DB226BE8B55FD93473AD8ADDD
SHA-512:	9FAE934C7A32993AF7B88AB294EFC4CA8CAB8552A112697AFFD0F27E916A728F98983D241CAFC0CB25563317120D70B73A0B42BA61FCFECFF8492E654CDBE6A3
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/screen-reader.js
Preview:	..var screenReaderCalled = false;....function insertForScreenReader(text){...var warning = document.getElementById('timeoutMessage');...warning.innerHTML = text;...warning.style.display = "none";...warning.setAttribute("aria-live","assertive");...warning.setAttribute("role","alert");...warning.setAttribute("aria-invalid","true");...warning.style.display = "block";...warning.focus();..}....function notifyTimeout(){...var t = document.getElementById('sessionTimeout');...var m = document.getElementById('timeoutMessage');...if(t != null && m != null){....var timeout = t.value;....var message = m.innerHTML;....document.getElementById('timeoutMessage').innerHTML = "";....if(timeout != null && message != null && timeout > 60){.....setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',(timeout-60)/60));.....},601000);..........setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',1));.....},(timeout-60)1000);....}...}..}....function updateScree

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	387
Entropy (8bit):	5.179130709592589
Encrypted:	false
SSDEEP:	6:TMVBd/NFmc4slJUY7BuwTARZARtAUbWDYHsyXIzqVJEgqIzqVNQs1jvpJrEIdHfi:TMHdVFvnNuuAiOYHzXw5jNdHK
MD5:	1F6AF349658BA40D72AA4C87AECC722A
SHA1:	E3ABD390D66D37C5C245C6AD172E5433584E2B39
SHA-256:	042CD20A95524AAAE53879E8D0210E9D79F0EB9E42E7C6E25EE4A8BDE703FAC0
SHA-512:	4A508F8F4AF98DAEC5218A4B38103898661D1B430783DE4DB314F1EA9D1D891B85987DF734D9697A49A03F23E54B8B137E16B64E519658351EBADD7330E4C79D
Malicious:	false
URL:	https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" .viewBox="0 0 16 16">.<defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style>.</defs>.<path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881c.342-.342,.896-.342,1.237,0s.342,.896,0,1.237l-3.5,3.5c-.342,.342-.896,.342-1.237,0l-3.5-3.5c-.342-.342-.342-.896,0-1.237Z"/></svg>

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.746439344671015
Encrypted:	false
SSDEEP:	3:MEICm:M8m
MD5:	623BBAE52B13E3449D00D363B8323EAE
SHA1:	9FB325BC5C22248DCD4FD8DFF654F2A333FF8645
SHA-256:	7AC4E5CA884303826128927D28D6590B53DD6CF4228216A375997E99709B040B
SHA-512:	C7FED7D8D205193AF936E635854323DCF83C9F1614CF81C171624674A0C72BB350E9B1D323D968F709A520F2D15AE3D1C39D119AF50A059E50D2B3A1BB536512
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn8m0WGVOoC-hIFDSFfFoQ=?alt=proto
Preview:	Cg0KCw0hXxaEGgQIZBgC

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22718)
Category:	downloaded
Size (bytes):	810742
Entropy (8bit):	5.738496842366001
Encrypted:	false
SSDEEP:	6144:PL7oR3VYID9UiVjcSSjxokEktMn9qs3k264BICT8BA/yHWWCMdiCdV8+B:PL7w3Vp5VjccMhBAOdT
MD5:	E3E757DFBF9CA8CF8F34046FD5B562EE
SHA1:	E8F11FF2B36CC840BC11CA3AEA85882486D3ACF1
SHA-256:	B80960E2A8BD91F6C0C4D4B9FD92135F55454EF74C303BBCE7EDA5383E2AB4B3
SHA-512:	5C0A7A27E63763800B0A6D02419BD54B2564D6214C3ECE2FFA78CB0F14FC1CD6C7C6FD6E733C450A5E6BBBCC94BEA6D6F99675EACBD338AE8D31221490018446
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,gJzDyc,SpsfSb,aC1iue,tUnxGc,aW3pY,ZakeSe,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,MY7mZe,xBaz7b,GwYlN,eVCnO,EIOG1e,LDQI"
Preview:	"use strict";_F_installCss(".VfPpkd-Sx9Kwc .VfPpkd-P5QLlc{background-color:#fff;background-color:var(--mdc-theme-surface,#fff)}.VfPpkd-Sx9Kwc .VfPpkd-IE5DDf,.VfPpkd-Sx9Kwc .VfPpkd-P5QLlc-GGAcbc{background-color:rgba(0,0,0,.32)}.VfPpkd-Sx9Kwc .VfPpkd-k2Wrsb{color:rgba(0,0,0,.87)}.VfPpkd-Sx9Kwc .VfPpkd-cnG4Wd{color:rgba(0,0,0,.6)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub{color:#000;color:var(--mdc-theme-on-surface,#000)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::after{background-color:#000;background-color:var(--mdc-ripple-color,var(--mdc-theme-on-surface,#000))}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:hover .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub.VfPpkd-ksKsZd-XxIAqe-OWXEXe-ZmdkE .VfPpkd-Bz112c-Jh9lGc::before{opacity:.04;opacity:var(--mdc-ripple-hover-opacity,.04)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub.VfPpkd-ksKsZd-mWPk3d-OWXEXe-AHe6Kc-XpnDCe .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:not(.VfPpkd-ksKsZd-mWPk3d):

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text
Category:	downloaded
Size (bytes):	4236
Entropy (8bit):	5.0501305731847195
Encrypted:	false
SSDEEP:	96:FcJvD3SXg2aOE3m9mSVssO33DeJKePxvOERTZx8zOEW7oFDFSKOEC5OEA1EunYqu:mJvuDVJ9PVIg7oFDF7dNydhu7VwR
MD5:	1DF5BCE0BE7E4912DC884C380B0CFACB
SHA1:	05D58499B2EAFF124BB24FA7056333FE03E370F5
SHA-256:	4647C6BCEF9F5B3290581B4305106A22D1482D818FEB45A6A1824A07F770A118
SHA-512:	BEE0C90DFB05DB0C345485648166A9317DB2D146FE12F592CF04622353AC56D06D25F06CB762B1BD59B0578EB9CD26E179B6C9AE57C408D7C38F8C5EFB706CDE
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/customLogin.css
Preview:	.bg {. background-image: url("https://static.cres-aws.com/CRES_login_bg.jpg"), url("../../../admin/images/loginbg.gif");. height: 100%;. background-position: center;. background-repeat: no-repeat;. background-size: cover;. -webkit-background-size: cover;. -moz-background-size: cover;. -o-background-size: cover;. height: 86.5%;. display: inline-table;.}..btn-info {. min-width: 5rem;. background-color: #58585b;. border-color: #58585b;. font-family: CiscoSans;. font-weight: 400;.}...loginInputStyle {. border: 2px solid #889099;. border-radius: 6px;. padding: 7px 12px;. font-family: "Inter";. font-style: normal;. font-weight: 400;. font-size: 14px;. line-height: 20px;.}./* Styles for modal window on User alert starts*/..modal-footer {. height: 68px;. padding: 20px;.}..modal-content {. color: #39393b;.}..modal-header {. color: #39393b;.}..modal-title {. font-family: "Sharp Sans","Inter";. font-size: 24px;. color: #373C42;. font-weight: 700;.}..modal-body {.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1265
Entropy (8bit):	4.587969597231761
Encrypted:	false
SSDEEP:	24:2dPKz70mwuqtO2cJkpoNnqFRyaZ8JGzugNkVarlTHnqt04sKH0++NOi2ZSAWULR8:cSQuGO2cJkEn0ylG+6F/VKUJ2ZNWULR8
MD5:	2DBAB2D7C143EF0DACCB55D142FCD61C
SHA1:	AF132D5F5DBF080F3420FD6378738B03E0F9B669
SHA-256:	57928799C9F52AD009BD3D4DF0C7CCB781659EF99C649744EB6812676C0E8936
SHA-512:	953473500B3B403AA7ED0528EA3C150F73BCBF7F2775F93DCCEE43CA06F9609799E6C547A035257E44400F98901AEADE12921A345580A9E96876C0C2C50E81D2
Malicious:	false
URL:	https://res.cisco.com/websafe/images/pullFeature/Help.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg height="20px" width="20px" id="a". xmlns="http://www.w3.org/2000/svg" viewBox="7.875 7.875 20.25 20.25">. <defs>. <style>.b,.c{fill:#f7f7f7;}.c{fill-rule:evenodd;}</style>. </defs>. <path class="b" d="M18,24c.828,0,1.5-.672,1.5-1.5s-.672-1.5-1.5-1.5-1.5,.672-1.5,1.5,.672,1.5,1.5,1.5Z"/>. <path class="b" d="M18.732,12.447c-.727-.145-1.481-.07-2.167,.213-.685,.284-1.271,.764-1.683,1.381-.412,.617-.632,1.342-.632,2.083,0,.621,.504,1.125,1.125,1.125s1.125-.504,1.125-1.125c0-.297,.088-.587,.253-.833,.165-.247,.399-.439,.673-.552,.274-.113,.576-.143,.867-.085,.291,.058,.558,.201,.768,.41,.21,.21,.353,.477,.411,.768,.058,.291,.028,.592-.085,.867-.113,.274-.306,.508-.552,.673-.247,.165-.537,.253-.833,.253-.621,0-1.125,.504-1.125,1.125s.504,1.125,1.125,1.125c.742,0,1.467-.22,2.083-.632,.617-.412,1.097-.998,1.381-1.683,.284-.685,.358-1.439,.213-2.167-.145-.727-.502-1.396-1.026-1.92-.524-.524-1.193-.882-1.92-1.026Z"/>. <path cla

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (405)
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	5.203902281882603
Encrypted:	false
SSDEEP:	48:o79tbNlnkHnHbrUeRSCiyvMw4b2oQ7D9jMrw:oll0SCvSqMw
MD5:	A3C89D2D8648C5DEADB3549761A168D4
SHA1:	9F5AE1115513688A95CEFCE257D5E6C101A8E478
SHA-256:	E84DA0613990736C43500C98C721F11E212A7A1CE109C89AA905242F8FBF292C
SHA-512:	2CB60BD44A44168BD518C639538CA9045DABE65AD7380052376BE09A87E8D1005211EB81F89A5D8F62E0ADDFDCBE7C8FDE237C3C42889C97D33E542D1A73BC1E
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Lf(_.Zja);_.Fw=function(a){_.J.call(this,a.Fa);this.aa=a.Xa.cache};_.B(_.Fw,_.J);_.Fw.Ma=_.J.Ma;_.Fw.Ba=function(){return{Xa:{cache:_.Fp}}};_.Fw.prototype.execute=function(a){_.Ua(a,function(b){var c;_.ze(b)&&(c=b.fb.Yb(b.jb));c&&this.aa.XD(c)},this);return{}};_.gr(_.ska,_.Fw);._.m();._.k("VwDzFe");.var xF=function(a){_.J.call(this,a.Fa);this.aa=a.Da.hp;this.ea=a.Da.metadata;this.da=a.Da.wr};_.B(xF,_.J);xF.Ma=_.J.Ma;xF.Ba=function(){return{Da:{hp:_.YE,metadata:_.lXa,wr:_.VE}}};xF.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.Ua(a,function(c){var d=b.ea.getType(c.Fd())===2?b.aa.Ub(c):b.aa.aa(c);return _.Xj(c,_.ZE)?d.then(function(e){return _.pd(e)}):d},this)};_.gr(_.xka,xF);._.m();._.k("sP4Vbe");._.kXa=new _.Pe(_.tka);._.m();._.k("A7fCU");.var cF=function(a){_.J.call(this,a.Fa);this.aa=a.Da.uM};_.B(cF,_.J);cF.Ma=_.J.Ma;cF.Ba=function(){r

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3472
Entropy (8bit):	5.5211359323158264
Encrypted:	false
SSDEEP:	96:o4TyB8b6RZ5Xve69jtZYjURAdeg2Cs6Fjw:3yB8S5YX0g2Wa
MD5:	407D85351C06318592BC5EEA9FA7A6AD
SHA1:	78E4D5687EB9B0086390E3AB1AC356D4220E4B03
SHA-256:	62E12E124C57E48A8BB4A9876C5E6291202AA34D6A1491A430C62E5DFBFBBA8F
SHA-512:	3AEA0D9DC7251459715C4A79A75128D4BAE9A859591AFD6E4C12BDBFBD55DB2FC94A9D054C4979D214DD82D29ECF739549E24E6FCC7AA85288EE499D0626A76A
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var zua=function(){var a=_.pe();return _.Hi(a,1)},Oq=function(a){this.Ea=_.u(a,0,Oq.messageId)};_.B(Oq,_.w);Oq.prototype.Ia=function(){return _.xi(this,1)};Oq.prototype.Ya=function(a){return _.Qi(this,1,a)};Oq.messageId="f.bo";var Rq=function(){_.Nk.call(this)};_.B(Rq,_.Nk);Rq.prototype.Zc=function(){this.TP=!1;Aua(this);_.Nk.prototype.Zc.call(this)};Rq.prototype.aa=function(){Bua(this);if(this.zA)return Cua(this),!1;if(!this.ZR)return Sq(this),!0;this.dispatchEvent("p");if(!this.sL)return Sq(this),!0;this.rJ?(this.dispatchEvent("r"),Sq(this)):Cua(this);return!1};.var Dua=function(a){var b=new _.Cn(a.T0);a.rM!=null&&_.Sl(b,"authuser",a.rM);return b},Cua=function(a){a.zA=!0;var b=Dua(a),c="rt=r&f_uid="+_.Ug(a.sL);_.ll(b,(0,_.Jf)(a.ea,a),"POST",c)};.Rq.prototype.ea=function(a){a=a.target;Bua(this);if(_.sl(a)){this.sH=0;if(this.rJ)this.zA=!1,this.dispatchEvent("r"

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	downloaded
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
URL:	https://res.cisco.com/admin/images/loginbg.gif
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter LightRegular3.019;
Category:	downloaded
Size (bytes):	304092
Entropy (8bit):	6.319721866705066
Encrypted:	false
SSDEEP:	6144:C3jzGK0leqjmxgOqp888TQIPOer74S1/a9cckpRo/iOmL:C3jzGHAq+8IzrUm7o/OL
MD5:	60C8F64064078554B6469EEDA25944EB
SHA1:	732E278A85762A0EDFB4E077E44E3EB39D8AF92E
SHA-256:	7FB161BBEB1C03F21D9A80601400D803E7EA7DD6FC8EA164F2B2A073E7722953
SHA-512:	57F3E7EC496FCA463848AC63E5BD6EC0967A1CC461D0580868B0625DCA78ECEC14FC13391E4B8F1BA08A598DFAF3DD08D721AD2B5AD31C35B9CC9BFAB3CFA03F
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf
Preview:	............GDEF1.1...;l....GPOSDT{6..?...!dGSUB..fx..`...B.OS/2"3nb..n....`STAT.M.?.......Dcmap/....n...e.gasp......;d....glyf...........qhead-.aF..Fp...6hhea......nt...$hmtx......F...'.loca.]........'.maxp........... name5.\.......8post..5r......d.preph..................................!...!...!...!...!...........................@.........................O............!#.3.#.#.!.!..........~...................O.............#..!#.3.#.#.!.!."&54632....!"&54632..............~........3MM37II..3MM37II...........M37II73MM37II73M...O...../.&.......l.4.....O.......&.......f.O.....O.......&.......d.......O.....P.&.......j.,.....O.............&..!#.3.#.#.!.!."&546632......'2654&#"..............~.........p.H{JKzHHzK@WW@@WW............pKzHHzKJ{HuY?@XY?@X...O.......&...............O...'...&.......v.......O.......&.......m.m.....O.......&.......n.4.....O...'...&.......v.......O.....a.&.......s.,.....O.......&...............O.......&...............O.......&.......{.L.....O.....g.&...............O

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (773)
Category:	dropped
Size (bytes):	1477
Entropy (8bit):	5.2708100418170245
Encrypted:	false
SSDEEP:	24:kMYD7xVmU08qrxN82QYIe/HTB+obhzdP7koEYk9nVj6AGbK6LFrGbsSFv6LpDOwu:o7xVmU08ZRsvb/P4F7DGbprGbsSy7Zf8
MD5:	2A2CA09D856767AB5DD7752E3936D127
SHA1:	01886B9AEB80DAE01C0238DAC29DB7D65EA58209
SHA-256:	468AF9CE89366BFB389576EAA8ED2854B9A3C05CDF742B7640EB0C84AF3132C8
SHA-512:	BA99AEC496FFDC052B8918D922AF5822ECF8D0B52E4C46891A2190C7C821D2BFAD05AD86A7508CE8CD92584B16B095B7EAE3527A695D81F8702B310F79BF501B
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("kMFpHd");._.lXa=new _.Pe(_.Sk);._.m();._.k("bm51tf");.var oXa=!!(_.jg[1]&1);var qXa=function(a,b,c,d,e){this.ea=a;this.ta=b;this.ja=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=pXa(this)},rXa=function(a){var b={};_.Ma(a.PO(),function(e){b[e]=!0});var c=a.tO(),d=a.zO();return new qXa(a.pL(),c.aa()1E3,a.bO(),d.aa()1E3,b)},pXa=function(a){return Math.random()Math.min(a.taMath.pow(a.ja,a.aa),a.Ca)},dF=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var eF=function(a){_.J.call(this,a.Fa);this.Lc=null;this.ea=a.Da.UR;this.ja=a.Da.metadata;a=a.Da.Jaa;this.da=a.ea.bind(a)};_.B(eF,_.J);eF.Ma=_.J.Ma;eF.Ba=function(){return{Da:{UR:_.mXa,metadata:_.lXa,Jaa:_.fXa}}};eF.prototype.aa=function(a,b){if(this.ja.getType(a.Fd())!=1)return _.cl(a);var c=this.ea.aa;return(c=c?rXa(c):null)&&dF(c)?_.Qua(a,sXa(this,a,b,c)):_.cl(a)};.var sXa=function(a,b,c,d){return c.then(function(e){ret

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3975)
Category:	dropped
Size (bytes):	19180
Entropy (8bit):	5.373480642270482
Encrypted:	false
SSDEEP:	384:IWy1t4C1hO44oPy0STmp/Cj+ZBEma5YNLjxFT4sI:TGhO44oqNgxgYNLTT4sI
MD5:	B4B259423214FF5814D6CDF6791F89E7
SHA1:	0A7D6D9352C27DF7136A75B5B83A74793AE1B57E
SHA-256:	F48C423F6763D4709963500B0FDF995CEAE99A1E1DAB621AD04BA94698CFE467
SHA-512:	3D6AD458C39541B61C71662FCDCBADEB38484D6DF622D541EE3B05620C57C3900905BBD43F9E70B0E68BB005CB306B9ADAB3A8A89BE241AB0AC199DAC23C194D
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var MDa=_.ea.URL,NDa,ODa,QDa,PDa;try{new MDa("http://example.com"),NDa=!0}catch(a){NDa=!1}ODa=NDa;.QDa=function(a){var b=_.oh("A");try{_.tb(b,new _.eb(a));var c=b.protocol}catch(e){throw Error("uc`"+a);}if(c===""\|\|c===":"\|\|c[c.length-1]!=":")throw Error("uc`"+a);if(!PDa.has(c))throw Error("uc`"+a);if(!b.hostname)throw Error("uc`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};PDa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):.(a.host=b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a};._.RDa=function(a){if(ODa){try{var b=new MDa(a)}catch(d){throw Error("uc`"+a);}var c=PDa.get(b.protocol);if(!c)throw Error("uc`"+a);if(!b.hostname)throw Error("uc`"+a);b.origin=="null"&&(a={href:b.hre

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (770)
Category:	dropped
Size (bytes):	241446
Entropy (8bit):	5.465119877665094
Encrypted:	false
SSDEEP:	1536:7FNtIX5cahKu2Ngh+VYgj/a/5oRDc8f1i9MsGU0TQDdhpm7RO6Y3HbgDjhqEdmEs:7mXAN1m/5IX6L3kgKpmKlI0kWVk9d
MD5:	B2DC614024E4C2050F52A751B3D10091
SHA1:	6C42C74687DA014186A7F43B9BF26D79924A8CE5
SHA-256:	383FC6DBA01FF5F6C5035276E31B0FBFBAB78FF70F3FBDAA63C25A47C6CB8B85
SHA-512:	6D8A30A512A305FAFDB5C9E0206FC11A27015414AA08600707FF681CC92B6B2BADD0F09B5A0F9F67263742BD06B4A74E74911643BC90EEE85D50F7EBEDE0F605
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x3183e84, 0x200db46, 0x1039c3c4, 0x40a280f, 0x32, 0x0, 0x360000, 0x662000, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,gaa,laa,oaa,cb,db,gb,Ib,Lb,Mb,yaa,zaa,Nb,Aaa,Baa,Caa,Rb,Vb,Gaa,Iaa,Kaa,Oaa,Zb,bc,Qaa,Raa,Vaa,cba,dba,hba,kba,eba,jba,iba,gba,fba,lba,uc,oba,sba,tba,qba,uba,yba,zba,Aba,Tc,Dba,Eba,Fba,Gba,Hba,Kba,dd,Nba,Mba,Pba,kd,hd,Rba,Qba,Uba,Tba,nd,Vba,Yba,$ba,aca,cca,dca,Cd,jca,kca,Ld,Bd,Dd,Eca,Bca,Fca,Gca,Jca,Hca,Nca,Oca,Pca,Sca,Tca,zca,Rca,Vca,mda,qe,oda,re,pda,rda,tda,yda,zda,Ada,Bda,Cda,Fda,Hda,Oda,Pda,Qda,Uda,cea,Zda,fea,kf,iea,jea,kea,pe

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	30940
Entropy (8bit):	5.36809569207447
Encrypted:	false
SSDEEP:	768:ZouPTigqWPx6w8fAYO8A2TFpmclabvCUpWBNe5/qp+MEg/u:hWWb8fjdFpmclabvCU83tpu
MD5:	DB669278C7F33250B8E75C2B211636AB
SHA1:	3E307A14DF92D7C3AE7986AC0D25532DA197614B
SHA-256:	70D735FBED26EBECC5C2455991E18B5C0836B77850D04C1C8CC290530B797B0E
SHA-512:	7B5BA335BD066E2C7DA8251B15CCF6BF474DA15B64474C80EFA0D450271BB1B09C252B6034228044188CA09446D29A81282062CE81457FC8D4F4585D19CCAA63
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Pqa=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.Cn("//www.google.com/images/cleardot.gif");_.Tn(c)}this.ja=c};_.h=Pqa.prototype;_.h.Lc=null;_.h.fV=1E4;_.h.Yx=!1;_.h.oM=0;_.h.HG=null;_.h.dR=null;_.h.setTimeout=function(a){this.fV=a};_.h.start=function(){if(this.Yx)throw Error("ob");this.Yx=!0;this.oM=0;Qqa(this)};_.h.stop=function(){Rqa(this);this.Yx=!1};.var Qqa=function(a){a.oM++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Qk((0,_.Jf)(a.mE,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Jf)(a.uda,a),a.aa.onerror=(0,_.Jf)(a.tda,a),a.aa.onabort=(0,_.Jf)(a.sda,a),a.HG=_.Qk(a.vda,a.fV,a),a.aa.src=String(a.ja))};_.h=Pqa.prototype;_.h.uda=function(){this.mE(!0)};_.h.tda=function(){this.mE(!1)};_.h.sda=function(){this.mE(!1)};_.h.vda=function(){this.mE(!1)};._.h.mE=function(a){Rqa(this);a?(this.Yx=!1,this.da.call(this.ea,!0)):this.oM<=0?Qqa(this):(this.Yx=!1,

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (467)
Category:	downloaded
Size (bytes):	1883
Entropy (8bit):	5.275430765695091
Encrypted:	false
SSDEEP:	48:o7eKbS6SvZL3ASFoHxNJvwX7KOQ1f2/36/rsg4xLrw:o6vZLVFoSbQ15w9Xw
MD5:	D158ED7943B4E026EC7FD2FD95303308
SHA1:	644209B4C920A328D80287B739F2A1F1D23C56FE
SHA-256:	44572E1DFB3131117ABA6A0AD38270DA84208A6F57E69027CE91389DCF5EFA6D
SHA-512:	64A93EA087DAFBFDABE4737B8ABC0D81196E9AEB60A65C04D53C151F3330ECDDAC2889057C2941A5CAB8B22DBEEBB57BF31119BAC21340F007972633606D2132
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.VZ=function(a){_.J.call(this,a.Fa);this.window=a.Da.window.get();this.Gc=a.Da.Gc};_.B(_.VZ,_.J);_.VZ.Ma=_.J.Ma;_.VZ.Ba=function(){return{Da:{window:_.jr,Gc:_.VC}}};_.VZ.prototype.wo=function(){};_.VZ.prototype.addEncryptionRecoveryMethod=function(){};_.WZ=function(a){return(a==null?void 0:a.Fq)\|\|function(){}};_.XZ=function(a){return(a==null?void 0:a.k_)\|\|function(){}};_.YZ=function(a){return(a==null?void 0:a.oo)\|\|function(){}};._.ODb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PDb=function(a){setTimeout(function(){throw a;},0)};_.VZ.prototype.wK=function(){return!0};_.gr(_.Ll,_.VZ);._.m();._.k("ziXSP");.var w_=function(a){_.VZ.call(this,a.Fa)};_.B(w_,_.VZ);w_.Ma=_.VZ.Ma;w_.Ba=_.VZ.Ba;w_.prototype.wo=function(a,b,c){var d;i

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	downloaded
Size (bytes):	58072
Entropy (8bit):	5.247960089226309
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
MD5:	E1D98D47689E00F8ECBC5D9F61BDB42E
SHA1:	6778FED3CF095A318141A31F455C8F4663885BDE
SHA-256:	0A34A87842C539C1F4FEEC56BBA982FD596B73500046A6E6FE38A22260C6577B
SHA-512:	021E615983F30EC5477FD8B611E8C5045AC6D9900F9A9BB8649B56E0C7D282965A727F8CF501C3B7E1DDFF02F5B44924D5481BCEA7A926BE8A9E166314A07ED0
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1280 x 808
Category:	downloaded
Size (bytes):	10598
Entropy (8bit):	7.973575732670468
Encrypted:	false
SSDEEP:	192:0Dszh0YIrh919BR4ljLo1af3wHZY4laNGRO+1BMuq:NNohhn4lpfjkRT1BMp
MD5:	C22D6210FC87C4743002CEA8A581D766
SHA1:	F0050B25B3FCBF863695CFD025E611A98A353CC8
SHA-256:	A0DF8C2C2AAF954F3F45E88A82B2F15AB918BA9DA08EB7BE21569C6143BA5262
SHA-512:	2F22F7109C4F45D8760011CC7FD25A0740FA647D3148ABB3C493F9FF162E799B9FD9CE7294ED9730CAE6E6D825EFB5FA23BF127128B020FDE3C134BCFAD0AC5F
Malicious:	false
URL:	https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1
Preview:	GIF89a..(................!.......!..ImageMagick.gamma=0.454545.,......(....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:..]...6=.....R.;.;6l.d.FM;...s.....:.....E.....;..S.....N.z...ok..=..I...V...F.......C...OV...@.......s..GH....."x...1H.w.z.a..7`..\...yp.......x.X..#.h..r........o........m.....Y..j.i[.F..d.K..lO2.elS.Q%lJ^yJ..q)...m..(b.Vf.g..&).6.&.k..g(s.Y'.s.i.\|j...)h.....t"J..^..U8)%.V...Fr.Oh.#.......2.I.."..j......C.j. .........=.,........~..24.l..F[...h.+d....v......-.k.......'.+..k.;...~.."../........j...$...7....G1...Hl...g\.../.....+....\|r...1.....1......L.8..s....0.>......m

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 410 x 410, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	62336
Entropy (8bit):	7.979381724755323
Encrypted:	false
SSDEEP:	1536:5YBs6JfJtdMVvpsTq2TDVJWfju6eyQLOku9Yec8U9L1ZQ:5YW0RtQvCTtDVIjMk59Yec8U9xa
MD5:	CFF524DE6437DC8824753BEDCF6901B3
SHA1:	78E043DDD5A72F02904B4C77505AA777991A1D60
SHA-256:	8FFE73610C4C1E7D09BAA8134741165F2DE6848F191C4D637AFFDAAA253CF519
SHA-512:	CC9CBCD84114EA25C26339032B7FB70BF7042FE3E11EAE74F2CD4A3110F4BA7A342099ACC68358076BF26306334BEA2F53E93042066B9F6E44F07C75AB749C58
Malicious:	false
URL:	https://static.cres-aws.com/CRES_googleSignIn.png
Preview:	.PNG........IHDR.............6..c....iCCPICC Profile..H..W.XS...[R..-..)...] .. .l.$@(.....]Tp."...+"......]Y.{.(.....l..I.]_........9g.3...........T..\a.(&$.....$.............GGG.(#....M.H.kv.X.:._E...s.@.!N........... .C...<)..XS...@.8C...8M.me6q1l.Y.....(...)of!7..Q.rt...B.7C..... ...mn...U..[.}.'.o1.Fcr8..X..L..q^.g.....[rs$#s..F....Hs..;{F..S!n..EFA.....Of/.w3%....~.....0.\|.<N`8.z.3$........\|.=.)(..S.4..E\|.P......,..6.......tAp....#E.q.r..BAB$..w..c.....2.#6"I...).o.E.1r.L;W<..f.......2.B.X._..1.....s.x\|a.....+ F.[.......9!1.u....cG\|........8.3!Z1....897........H`K.3@..t.7.._.`.."....N...H....3...?!..._.l......V.....B.G6x.q......x.\|.`s.=p..?.... b 1..L......s`.........r....-..)...p..M.....Y...tA....L0.t.h......7..]......q.....q0.........3..r...?.'e.}>.......E..a.Z.......`...%..;...Na.....0..X......Jx"....bd.a....c.c......(....?.@.1.g....22...p7.3.\{[....'..].u.a..l.q......R......p.)..w.t&.a....x'W"...1 ...U.U...`.,a>...x.....@....`.\.L..9..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	dropped
Size (bytes):	3157
Entropy (8bit):	5.394520899348405
Encrypted:	false
SSDEEP:	96:of2T/vY74enl57OV6PotgZXDFNa3MJWyZqw:wK/oLnl5UqwgZXDacJtZf
MD5:	E71131B766AE528EE6DEE196C0A4110E
SHA1:	D163B2B3005153DB45DF219FB63BAEF2262944C9
SHA-256:	2F638AFC0DB6218F52471B8728E26A59D90AAD202B9224DD4D60A64E7881C46C
SHA-512:	05ACFA28630EF86657D94EC906F5A15627780DC23E8A331BE125B77CF920782655CFF0F5EEEBF152BEA9CE47BB91FC89D02008D3CFD6EE3364C1B42B1F60EC77
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var Hw=function(a){_.J.call(this,a.Fa)};_.B(Hw,_.J);Hw.Ma=_.J.Ma;Hw.Ba=_.J.Ba;Hw.prototype.jO=function(a){return _.Be(this,{Xa:{rP:_.Jj}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Bh(function(e){window._wjdc=function(f){d(f);e(LFa(f,b,a))}}):LFa(c,b,a)})};var LFa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.rP.jO(c)};.Hw.prototype.aa=function(a,b){var c=_.lua(b).Qi;if(c.startsWith("$")){var d=_.fm.get(a);_.tq[b]&&(d\|\|(d={},_.fm.set(a,d)),d[c]=_.tq[b],delete _.tq[b],_.uq--);if(d)if(a=d[c])b=_.Ae(a);else throw Error("$b`"+b);else b=null}else b=null;return b};_.gr(_.Xea,Hw);._.m();._.k("SNUn3");._.KFa=new _.Pe(_.Mf);._.m();._.k("RMhBfe");.var MFa=function(a,b){a=_.Bsa(a,b);return a.length==0?null:a[0].ctor},NFa=function(){return Object.values(_.qp).reduce(function(a,b){return a+Object.keys(b).length},0)},OFa=function(){return Object.entries

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	30940
Entropy (8bit):	5.36809569207447
Encrypted:	false
SSDEEP:	768:ZouPTigqWPx6w8fAYO8A2TFpmclabvCUpWBNe5/qp+MEg/u:hWWb8fjdFpmclabvCU83tpu
MD5:	DB669278C7F33250B8E75C2B211636AB
SHA1:	3E307A14DF92D7C3AE7986AC0D25532DA197614B
SHA-256:	70D735FBED26EBECC5C2455991E18B5C0836B77850D04C1C8CC290530B797B0E
SHA-512:	7B5BA335BD066E2C7DA8251B15CCF6BF474DA15B64474C80EFA0D450271BB1B09C252B6034228044188CA09446D29A81282062CE81457FC8D4F4585D19CCAA63
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Pqa=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.Cn("//www.google.com/images/cleardot.gif");_.Tn(c)}this.ja=c};_.h=Pqa.prototype;_.h.Lc=null;_.h.fV=1E4;_.h.Yx=!1;_.h.oM=0;_.h.HG=null;_.h.dR=null;_.h.setTimeout=function(a){this.fV=a};_.h.start=function(){if(this.Yx)throw Error("ob");this.Yx=!0;this.oM=0;Qqa(this)};_.h.stop=function(){Rqa(this);this.Yx=!1};.var Qqa=function(a){a.oM++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Qk((0,_.Jf)(a.mE,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Jf)(a.uda,a),a.aa.onerror=(0,_.Jf)(a.tda,a),a.aa.onabort=(0,_.Jf)(a.sda,a),a.HG=_.Qk(a.vda,a.fV,a),a.aa.src=String(a.ja))};_.h=Pqa.prototype;_.h.uda=function(){this.mE(!0)};_.h.tda=function(){this.mE(!1)};_.h.sda=function(){this.mE(!1)};_.h.vda=function(){this.mE(!1)};._.h.mE=function(a){Rqa(this);a?(this.Yx=!1,this.da.call(this.ea,!0)):this.oM<=0?Qqa(this):(this.Yx=!1,

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	downloaded
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
URL:	https://res.cisco.com/websafe/images/loginbg.gif
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3975)
Category:	downloaded
Size (bytes):	19180
Entropy (8bit):	5.373480642270482
Encrypted:	false
SSDEEP:	384:IWy1t4C1hO44oPy0STmp/Cj+ZBEma5YNLjxFT4sI:TGhO44oqNgxgYNLTT4sI
MD5:	B4B259423214FF5814D6CDF6791F89E7
SHA1:	0A7D6D9352C27DF7136A75B5B83A74793AE1B57E
SHA-256:	F48C423F6763D4709963500B0FDF995CEAE99A1E1DAB621AD04BA94698CFE467
SHA-512:	3D6AD458C39541B61C71662FCDCBADEB38484D6DF622D541EE3B05620C57C3900905BBD43F9E70B0E68BB005CB306B9ADAB3A8A89BE241AB0AC199DAC23C194D
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var MDa=_.ea.URL,NDa,ODa,QDa,PDa;try{new MDa("http://example.com"),NDa=!0}catch(a){NDa=!1}ODa=NDa;.QDa=function(a){var b=_.oh("A");try{_.tb(b,new _.eb(a));var c=b.protocol}catch(e){throw Error("uc`"+a);}if(c===""\|\|c===":"\|\|c[c.length-1]!=":")throw Error("uc`"+a);if(!PDa.has(c))throw Error("uc`"+a);if(!b.hostname)throw Error("uc`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};PDa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):.(a.host=b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a};._.RDa=function(a){if(ODa){try{var b=new MDa(a)}catch(d){throw Error("uc`"+a);}var c=PDa.get(b.protocol);if(!c)throw Error("uc`"+a);if(!b.hostname)throw Error("uc`"+a);b.origin=="null"&&(a={href:b.hre

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	17973
Entropy (8bit):	4.90543918232386
Encrypted:	false
SSDEEP:	384:GRE6nE7QxMqwvVvgJo1J6VoFkDtcgueiQXLFiR1I9H+PgpiztB7SxfFERycxK/iE:GpE7QWXxQo1J6ykDlueiQXLFm1I1+PgF
MD5:	12A3CC525DBC9DA661F0531CE4F593AE
SHA1:	313CF3373B3DCBEA4516244D95180F1534D877AD
SHA-256:	225156D328C033B9298FABE49902A9A94925981BC87876AF3283A8C701F137EC
SHA-512:	5841CC2DD62FDFF59C54617F6C794DC0866792B68E7D05EDCCFAD144C6554B9FE6F5C94414B843BAB13F6EFA8F71F25202B203F9A60F9EEE0BCF57D2450378D1
Malicious:	false
Preview:	function onLoadPage().{. // Hide and unhide some things. For now we assume everything that might. // need to be toggled is a div or a... toggleVisibility('div');. toggleVisibility('a');.. // Set the focus on the field identified in our XML. If no field. // was identified then look for the one named focusItem (which. // might not exist). If a field name was provided but is equal. // to 'nofocus' then don't try to focus on anything... var focusID = (typeof focusItemID == 'undefined') ? '' : focusItemID;. var focusElement = '';.. if (focusID). {..if (focusID != 'nofocus')..{.. focusElement = document.getElementById(focusID);. if (!focusElement)... focusElement = document.getElementById('focusItem');. if (!focusElement). focusElement = document.getElementById('focusItemLoginUsername');..}. }. else..focusElement = document.getElementById('focusItem');.. if (focusElement && focusElement.focus)..focusElement.focus

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1280 x 808
Category:	dropped
Size (bytes):	10598
Entropy (8bit):	7.973575732670468
Encrypted:	false
SSDEEP:	192:0Dszh0YIrh919BR4ljLo1af3wHZY4laNGRO+1BMuq:NNohhn4lpfjkRT1BMp
MD5:	C22D6210FC87C4743002CEA8A581D766
SHA1:	F0050B25B3FCBF863695CFD025E611A98A353CC8
SHA-256:	A0DF8C2C2AAF954F3F45E88A82B2F15AB918BA9DA08EB7BE21569C6143BA5262
SHA-512:	2F22F7109C4F45D8760011CC7FD25A0740FA647D3148ABB3C493F9FF162E799B9FD9CE7294ED9730CAE6E6D825EFB5FA23BF127128B020FDE3C134BCFAD0AC5F
Malicious:	false
Preview:	GIF89a..(................!.......!..ImageMagick.gamma=0.454545.,......(....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:..]...6=.....R.;.;6l.d.FM;...s.....:.....E.....;..S.....N.z...ok..=..I...V...F.......C...OV...@.......s..GH....."x...1H.w.z.a..7`..\...yp.......x.X..#.h..r........o........m.....Y..j.i[.F..d.K..lO2.elS.Q%lJ^yJ..q)...m..(b.Vf.g..&).6.&.k..g(s.Y'.s.i.\|j...)h.....t"J..^..U8)%.V...Fr.Oh.#.......2.I.."..j......C.j. .........=.,........~..24.l..F[...h.+d....v......-.k.......'.+..k.;...~.."../........j...$...7....G1...Hl...g\.../.....+....\|r...1.....1......L.8..s....0.>......m

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3410
Entropy (8bit):	4.999641838889194
Encrypted:	false
SSDEEP:	96:lFyElOB4vB4IB4OOB4rO3OBXNOBjY0Zk4UwyKEOnKEOGKaOI:2nhB
MD5:	FFD024A5F355F3A7D58EE4A0989472F0
SHA1:	391284200A85AC7C1A91EED218F929E6625DF107
SHA-256:	8009FACCEF527042BDEF7373469CEFF25079ED17A5328FB0FF9EBF9F3A91D022
SHA-512:	54EAA0AD8D23004181F79EFD31620D1CB4ABF152ECB805DBE3C97AD37CD9BC168FFEC41543C6CF6024C8F88EFB4B511CCAC6A8D61CADEDD8A2C0F5504418BE84
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/customHelp.css
Preview:	.supportTableEntry {. color: #555555;. font-size: 13px;. font-weight: normal;. padding: 2px 15px 10px 8px;. font-size: 14px;. font-family: CiscoSans, CiscoSansTT;. color: #4a4a4d;.}..copyrightLinks a {. font-family: "Inter" !important;. font-style: normal !important;. font-weight: 700 !important;. font-size: 12px !important;. line-height: 18px !important;. color: #326cd1 !important;.}..h3 {. font-family: "SharpSans" !important;. font-style: normal !important;. font-weight: 700 !important;. font-size: 18px !important;. line-height: 24px !important;. color: #373c42 !important;. margin-top: 24px !important;.}.h4 {. font-family: "SharpSans" !important;. font-style: normal !important;. font-weight: 700 !important;. font-size: 16px !important;. line-height: 24px !important;. color: #373c42 !important;. margin-top: 24px !important;.}..copyrightLinks {. font-family: "Inter" !important;. font-style: normal !important;. font-weight: 700 !important;. font-size: 12px

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (532)
Category:	downloaded
Size (bytes):	121925
Entropy (8bit):	5.055744405314516
Encrypted:	false
SSDEEP:	1536:ky0/DEC/9Je2j2L292cghoO/BEKLLnMmbCQd7zWiRcZMLcv0b4zZxMOXObVHndXp:sD1Je2j2L292cgRBPvMm2QpzWiRcvC
MD5:	67D3F3ED0C2B921B328B9D7FCA8F4EB3
SHA1:	1C0A80D092B5432A98592C697A9F9C82A1BBAA83
SHA-256:	54F074248B3BDA320C68BC196D3A7DC618ECD89A2BC66C747BAB576087873D3B
SHA-512:	056783F66030479B7249E4B71FC4EF91AEFDCFCDF4B28D7B9EBC782102594C2E89CBA7EFF5E038B7024BCDD9EEDFEFAA397B2D24A9B7F41905E8AF18CA7230AB
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/postx.css
Preview:	/* General styles /./ $Id: postx.css,v 1.104 2016-03-10 11:36:12 igitskai Exp $ /.html {. background-color: #f7f7f7;.}.body{. background-color: #f7f7f7;. background: #f7f7f7 !important;.}.input:not([disabled]):not(.mds-button):hover {. border-color:#7aa7f5!important;.}.input:not(.mds-button):focus {. border-color:#598ede !important;. box-shadow:0 0 0 2px #326cd133;. outline: none;.}.input:not(.mds-button):focus:hover {. border-color:#598ede !important;. }./to remove browser specific background color when inputs are auto filled */.input:-webkit-autofill . {. -webkit-box-shadow: inset 0 0 0px 9999px white;. }. input:-webkit-autofill:focus. {. -webkit-box-shadow: inset 0 0 0px 9999px white,0 0 0 2px #326cd133 !important;. }.textarea:hover {. border-color: rgba(69, 128, 229, 1) !important;.}.select:focus{. border-color:#598ede !important;. box-shadow:0 0 0 2px #326cd133;. outline: none;.}.select#localeUI{. box-shadow:0 0 0 0 transparent;.}..customDropdownIconEnd:hover{

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	downloaded
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	dropped
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 30 names, Macintosh
Category:	downloaded
Size (bytes):	10948
Entropy (8bit):	5.681032264103322
Encrypted:	false
SSDEEP:	192:mKTaaVor7cHBO9alshdQjZk1QN0g7PFcRI0cEiI/ibp:mKTa7cVqCkOTFcG0cEi5p
MD5:	FD6EC063F4FDB8130A0BB83B8BFEEF1B
SHA1:	1C58C28756170ED365D535C2A4667FA34BDAF2F6
SHA-256:	6D821BFA1C0E286427E0B31DA501B39333E2A3D791CEBF213B2E605393656D8A
SHA-512:	D6973E941027232BABFCD9CE40985C36D1DD246E83B48D36AB6A588E70CC08C6B163D9E6156788F55B294AB467008E29991107D79AB6F9303D4AF95C38E5415E
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/SharpSans/SharpSans-Bold.ttf
Preview:	...........pFFTM..~U.......GDEF.%.....t....GPOS3.$[........GSUB...........fOS/2g.....x...`cmapV..(.......bgasp.......l....glyf.".\........head.o'w.......6hhea...-...4...$hmtx...4........loca...L...L....maxp...4...X... name..".........postC..................~7&^_.<..........~................................................................D.....D.1.................@.........h.......................2..............................SHRP... .z.....;...2 ...M.......... .....@.....M.........)...3...&.S.$.M.....'.Q.#.{.3.6..k..n.+.......@.......@.c.@.L.@.>.....@...E.......@.J.@.F.@...@.G.....@.I.....@.}...y.-...>...................4.^.#...6.e.%...%.\|.%.......%.b.6...$.....Y.6...6...6.c.6...%...6...%...6.........c.5.E.......\...Q...-.)...$...................\...........@........... ...9.Z.z..... ...0.A.a.................................................................................................................. !"#$%&'(......)+,-./0123456789:;<=>?@AB...................................

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (322), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1353
Entropy (8bit):	5.435670535377074
Encrypted:	false
SSDEEP:	24:yVfABdmqLsXcqXGEFwoc85IWW6BvsJcHKoDvwZd9p6PborxoxMdDVZg0llR:yVfABpL2sEOoz5hW6eK6R6cr+Kdfg0lz
MD5:	2A4CFECBE984A1E57BCDA4556F064550
SHA1:	08B3B87BB5DAE647C331AAA141F54CBA97D961ED
SHA-256:	0F5FBAD0D640176CF2DE771ADB07609C978FB02619F39EB5E43463D0E662FD1B
SHA-512:	F7FECF02E870CD4F9E490104A4AD4F7108575CA69E367730F1F6D5623EC7D3CC70598A5D5BD1CFA26F6F4B746192EF45461ECBED0DE0F2970204C62BEE747DD6
Malicious:	false
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qr..,'action':'open'..,'status':11..,'message':'Please enroll before opening this Registered Envelope.'..,'state':1..,'reqTime':1722947150930..,'reqNumber':1..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'recipient':'jkmartin@compassllc.com'..,'sessionId':'852CDD0F44E97E5B14CC0F82EEA2CD64'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=jkmartin@compassllc.com'..,'waitTime':50000..,'minPoll':1000..,'maxPoll':5000..,'totalPoll':1200000..,'supportedLocales':[['en','English (US)'],['nl_NL','Dutch'],['de','Deutsch'],['es','Espa\xf1ol'],['fr','Fran\xe7ais'],['it','Italiano'],['pl','Polski'],['pt','Portugu\xeas'],['ru','\u0420\u0443\u0441\u0441\u043a\u0438\u0439'],['zh_CN','\u4e2d\u6587(\u7b80\u4f53)'],['ja','\u65e5\u672c\u8a9e'],['ko

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3472
Entropy (8bit):	5.5211359323158264
Encrypted:	false
SSDEEP:	96:o4TyB8b6RZ5Xve69jtZYjURAdeg2Cs6Fjw:3yB8S5YX0g2Wa
MD5:	407D85351C06318592BC5EEA9FA7A6AD
SHA1:	78E4D5687EB9B0086390E3AB1AC356D4220E4B03
SHA-256:	62E12E124C57E48A8BB4A9876C5E6291202AA34D6A1491A430C62E5DFBFBBA8F
SHA-512:	3AEA0D9DC7251459715C4A79A75128D4BAE9A859591AFD6E4C12BDBFBD55DB2FC94A9D054C4979D214DD82D29ECF739549E24E6FCC7AA85288EE499D0626A76A
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var zua=function(){var a=_.pe();return _.Hi(a,1)},Oq=function(a){this.Ea=_.u(a,0,Oq.messageId)};_.B(Oq,_.w);Oq.prototype.Ia=function(){return _.xi(this,1)};Oq.prototype.Ya=function(a){return _.Qi(this,1,a)};Oq.messageId="f.bo";var Rq=function(){_.Nk.call(this)};_.B(Rq,_.Nk);Rq.prototype.Zc=function(){this.TP=!1;Aua(this);_.Nk.prototype.Zc.call(this)};Rq.prototype.aa=function(){Bua(this);if(this.zA)return Cua(this),!1;if(!this.ZR)return Sq(this),!0;this.dispatchEvent("p");if(!this.sL)return Sq(this),!0;this.rJ?(this.dispatchEvent("r"),Sq(this)):Cua(this);return!1};.var Dua=function(a){var b=new _.Cn(a.T0);a.rM!=null&&_.Sl(b,"authuser",a.rM);return b},Cua=function(a){a.zA=!0;var b=Dua(a),c="rt=r&f_uid="+_.Ug(a.sL);_.ll(b,(0,_.Jf)(a.ea,a),"POST",c)};.Rq.prototype.ea=function(a){a=a.target;Bua(this);if(_.sl(a)){this.sH=0;if(this.rJ)this.zA=!1,this.dispatchEvent("r"

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
URL:	https://static.cres-aws.com/CRES_login_bg.jpg
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
URL:	https://static.cres-aws.com/CRES_login_bg.jpg
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	387
Entropy (8bit):	5.179130709592589
Encrypted:	false
SSDEEP:	6:TMVBd/NFmc4slJUY7BuwTARZARtAUbWDYHsyXIzqVJEgqIzqVNQs1jvpJrEIdHfi:TMHdVFvnNuuAiOYHzXw5jNdHK
MD5:	1F6AF349658BA40D72AA4C87AECC722A
SHA1:	E3ABD390D66D37C5C245C6AD172E5433584E2B39
SHA-256:	042CD20A95524AAAE53879E8D0210E9D79F0EB9E42E7C6E25EE4A8BDE703FAC0
SHA-512:	4A508F8F4AF98DAEC5218A4B38103898661D1B430783DE4DB314F1EA9D1D891B85987DF734D9697A49A03F23E54B8B137E16B64E519658351EBADD7330E4C79D
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" .viewBox="0 0 16 16">.<defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style>.</defs>.<path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881c.342-.342,.896-.342,1.237,0s.342,.896,0,1.237l-3.5,3.5c-.342,.342-.896,.342-1.237,0l-3.5-3.5c-.342-.342-.342-.896,0-1.237Z"/></svg>

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	dropped
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	3157
Entropy (8bit):	5.394520899348405
Encrypted:	false
SSDEEP:	96:of2T/vY74enl57OV6PotgZXDFNa3MJWyZqw:wK/oLnl5UqwgZXDacJtZf
MD5:	E71131B766AE528EE6DEE196C0A4110E
SHA1:	D163B2B3005153DB45DF219FB63BAEF2262944C9
SHA-256:	2F638AFC0DB6218F52471B8728E26A59D90AAD202B9224DD4D60A64E7881C46C
SHA-512:	05ACFA28630EF86657D94EC906F5A15627780DC23E8A331BE125B77CF920782655CFF0F5EEEBF152BEA9CE47BB91FC89D02008D3CFD6EE3364C1B42B1F60EC77
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var Hw=function(a){_.J.call(this,a.Fa)};_.B(Hw,_.J);Hw.Ma=_.J.Ma;Hw.Ba=_.J.Ba;Hw.prototype.jO=function(a){return _.Be(this,{Xa:{rP:_.Jj}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Bh(function(e){window._wjdc=function(f){d(f);e(LFa(f,b,a))}}):LFa(c,b,a)})};var LFa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.rP.jO(c)};.Hw.prototype.aa=function(a,b){var c=_.lua(b).Qi;if(c.startsWith("$")){var d=_.fm.get(a);_.tq[b]&&(d\|\|(d={},_.fm.set(a,d)),d[c]=_.tq[b],delete _.tq[b],_.uq--);if(d)if(a=d[c])b=_.Ae(a);else throw Error("$b`"+b);else b=null}else b=null;return b};_.gr(_.Xea,Hw);._.m();._.k("SNUn3");._.KFa=new _.Pe(_.Mf);._.m();._.k("RMhBfe");.var MFa=function(a,b){a=_.Bsa(a,b);return a.length==0?null:a[0].ctor},NFa=function(){return Object.values(_.qp).reduce(function(a,b){return a+Object.keys(b).length},0)},OFa=function(){return Object.entries

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	1.7491585968207541
Encrypted:	false
SSDEEP:	12:y0Cf8jAxh0yiK6xNXL0r8V8I55555555555555R:If//0TDy0X
MD5:	E19FDB47503248CA528DCCE82458B722
SHA1:	51CBCBF58B3A7DFF677E3551BC4A3EDBC5DFFC93
SHA-256:	62A8461E328D5BACE3780FF738D0B58F6502592C04AFA564E0A8A792583A7BFB
SHA-512:	543BA079358D7C66FC08F3F929E45AF64300CA6842D6BB283CE77B10151F081CD7FE057E94C38CEBD545BE185488725A1B6EC1D95656F7EB5E6A30BF94190EE7
Malicious:	false
Preview:	............ .h.......(....... ..... .............................................................................................................................................................................................................................................TT......................................................................................................................................................................................................TT...................................................................................................................f/......................f/......................f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/..............f/......f/......f/......f/......f/......f/..............................f/......................f/......................................f/......................f/...............................................................

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20831)
Category:	dropped
Size (bytes):	21004
Entropy (8bit):	5.2169391810760875
Encrypted:	false
SSDEEP:	384:kmQkLrwVOyzirVyKnxRsIB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdOgS:vLsgyziJp3Db5OxHOxvYD73Y5vQzyL9p
MD5:	56456DB9D72A4B380ED3CB63095E6022
SHA1:	6DBCE88AEE15B42F29083DF7A07513CF3B486BA0
SHA-256:	66F3A07E1FA9B64A686B66381E4458DBC8ABF3DBBFF954720C4EEC07B84411C2
SHA-512:	E56BD96B837B26ADD354D0A9E2B8DC04C95CEA94F7959EE05718ED23A224296FAE22D49AFAB160B45963BD99C2C501A3F12517E431EB68A13A327FF8B262B50A
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?pe:10===e?se:pe\|\|se}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent\|\|null;n===o&&e.nextElementSibling;)n

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22718)
Category:	dropped
Size (bytes):	810742
Entropy (8bit):	5.738496842366001
Encrypted:	false
SSDEEP:	6144:PL7oR3VYID9UiVjcSSjxokEktMn9qs3k264BICT8BA/yHWWCMdiCdV8+B:PL7w3Vp5VjccMhBAOdT
MD5:	E3E757DFBF9CA8CF8F34046FD5B562EE
SHA1:	E8F11FF2B36CC840BC11CA3AEA85882486D3ACF1
SHA-256:	B80960E2A8BD91F6C0C4D4B9FD92135F55454EF74C303BBCE7EDA5383E2AB4B3
SHA-512:	5C0A7A27E63763800B0A6D02419BD54B2564D6214C3ECE2FFA78CB0F14FC1CD6C7C6FD6E733C450A5E6BBBCC94BEA6D6F99675EACBD338AE8D31221490018446
Malicious:	false
Preview:	"use strict";_F_installCss(".VfPpkd-Sx9Kwc .VfPpkd-P5QLlc{background-color:#fff;background-color:var(--mdc-theme-surface,#fff)}.VfPpkd-Sx9Kwc .VfPpkd-IE5DDf,.VfPpkd-Sx9Kwc .VfPpkd-P5QLlc-GGAcbc{background-color:rgba(0,0,0,.32)}.VfPpkd-Sx9Kwc .VfPpkd-k2Wrsb{color:rgba(0,0,0,.87)}.VfPpkd-Sx9Kwc .VfPpkd-cnG4Wd{color:rgba(0,0,0,.6)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub{color:#000;color:var(--mdc-theme-on-surface,#000)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::after{background-color:#000;background-color:var(--mdc-ripple-color,var(--mdc-theme-on-surface,#000))}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:hover .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub.VfPpkd-ksKsZd-XxIAqe-OWXEXe-ZmdkE .VfPpkd-Bz112c-Jh9lGc::before{opacity:.04;opacity:var(--mdc-ripple-hover-opacity,.04)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub.VfPpkd-ksKsZd-mWPk3d-OWXEXe-AHe6Kc-XpnDCe .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:not(.VfPpkd-ksKsZd-mWPk3d):

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter SemiBoldRegular3.0
Category:	downloaded
Size (bytes):	309432
Entropy (8bit):	6.313238065412327
Encrypted:	false
SSDEEP:	3072:q2x3CNOVe9tnoIXXsm5IQcuM9xaR4ThDnIQvXPLUkOIvdmULUX/aZMOrwTrVxfN7:sTIQMc4ThYyba/PR41Pa/jtdc0
MD5:	1753A05196ABEEF95C32F10246BD6473
SHA1:	ACDA92ADC6CF8C67C89395C65F371A4D2B05A783
SHA-256:	F5595839DEBDB0D028116ED8A7579F31D1C2F712677A2E794459A5DCE6ECA929
SHA-512:	68AA83B7521EFDD53D810E5BC8A6AC0F211CBB989CBA9C317D5AD196FFA08D439CC096C823305D5316D5B0D17FB9D6ED6E39CD0A28E0B2478A2DCCE01D78B760
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-SemiBold.ttf
Preview:	............GDEF1.1...D.....GPOS...t..H...-.GSUB..fx..u...B.OS/2#_nb..w....`STAT.y.E...t...Dcmap/....x...e.gasp......D.....glyfj.........&.head-.aF..O....6hhea......w....$hmtx$5.9..O...'.loca..)...'...'.maxp......'.... name7\`.......Ppost..5r......d.preph.................C................!...!...!...!...!............................@.........................E............!!.!.!.#.!.!...t.......t......8.......\.......E.....[.......#..!!.!.!.#.!.!."&54632....!"&54632.......t.......t......8...OssOQoo..OssOQoo.....\......pLPmmPLppLPmmPLp...E.....V.&.......l.d.....E.......&.......f.......E.......&.......d.R.....E.....v.&.......j.......E.............&..!!.!.!.#.!.!."&546632......'6654&.".......t.......t......8....}.Q.ST.QQ.T:PO;:OO.....\.......{R.PP.RR.P..O88P.O88P...E.....).&.........B.....E.......&.......v.......E.......&.......m.......E.......&.......n.d.....E.......&.......v.......E.....v.&.......s.......E.......&.........N.....E.......&.........b.....E.......&.......{.......E.......&.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 410 x 410, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	62336
Entropy (8bit):	7.979381724755323
Encrypted:	false
SSDEEP:	1536:5YBs6JfJtdMVvpsTq2TDVJWfju6eyQLOku9Yec8U9L1ZQ:5YW0RtQvCTtDVIjMk59Yec8U9xa
MD5:	CFF524DE6437DC8824753BEDCF6901B3
SHA1:	78E043DDD5A72F02904B4C77505AA777991A1D60
SHA-256:	8FFE73610C4C1E7D09BAA8134741165F2DE6848F191C4D637AFFDAAA253CF519
SHA-512:	CC9CBCD84114EA25C26339032B7FB70BF7042FE3E11EAE74F2CD4A3110F4BA7A342099ACC68358076BF26306334BEA2F53E93042066B9F6E44F07C75AB749C58
Malicious:	false
Preview:	.PNG........IHDR.............6..c....iCCPICC Profile..H..W.XS...[R..-..)...] .. .l.$@(.....]Tp."...+"......]Y.{.(.....l..I.]_........9g.3...........T..\a.(&$.....$.............GGG.(#....M.H.kv.X.:._E...s.@.!N........... .C...<)..XS...@.8C...8M.me6q1l.Y.....(...)of!7..Q.rt...B.7C..... ...mn...U..[.}.'.o1.Fcr8..X..L..q^.g.....[rs$#s..F....Hs..;{F..S!n..EFA.....Of/.w3%....~.....0.\|.<N`8.z.3$........\|.=.)(..S.4..E\|.P......,..6.......tAp....#E.q.r..BAB$..w..c.....2.#6"I...).o.E.1r.L;W<..f.......2.B.X._..1.....s.x\|a.....+ F.[.......9!1.u....cG\|........8.3!Z1....897........H`K.3@..t.7.._.`.."....N...H....3...?!..._.l......V.....B.G6x.q......x.\|.`s.=p..?.... b 1..L......s`.........r....-..)...p..M.....Y...tA....L0.t.h......7..]......q.....q0.........3..r...?.'e.}>.......E..a.Z.......`...%..;...Na.....0..X......Jx"....bd.a....c.c......(....?.@.1.g....22...p7.3.\{[....'..].u.a..l.q......R......p.)..w.t&.a....x'W"...1 ...U.U...`.,a>...x.....@....`.\.L..9..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter LightRegular3.019;
Category:	downloaded
Size (bytes):	304092
Entropy (8bit):	6.319721866705066
Encrypted:	false
SSDEEP:	6144:C3jzGK0leqjmxgOqp888TQIPOer74S1/a9cckpRo/iOmL:C3jzGHAq+8IzrUm7o/OL
MD5:	60C8F64064078554B6469EEDA25944EB
SHA1:	732E278A85762A0EDFB4E077E44E3EB39D8AF92E
SHA-256:	7FB161BBEB1C03F21D9A80601400D803E7EA7DD6FC8EA164F2B2A073E7722953
SHA-512:	57F3E7EC496FCA463848AC63E5BD6EC0967A1CC461D0580868B0625DCA78ECEC14FC13391E4B8F1BA08A598DFAF3DD08D721AD2B5AD31C35B9CC9BFAB3CFA03F
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-Light.ttf
Preview:	............GDEF1.1...;l....GPOSDT{6..?...!dGSUB..fx..`...B.OS/2"3nb..n....`STAT.M.?.......Dcmap/....n...e.gasp......;d....glyf...........qhead-.aF..Fp...6hhea......nt...$hmtx......F...'.loca.]........'.maxp........... name5.\.......8post..5r......d.preph..................................!...!...!...!...!...........................@.........................O............!#.3.#.#.!.!..........~...................O.............#..!#.3.#.#.!.!."&54632....!"&54632..............~........3MM37II..3MM37II...........M37II73MM37II73M...O...../.&.......l.4.....O.......&.......f.O.....O.......&.......d.......O.....P.&.......j.,.....O.............&..!#.3.#.#.!.!."&546632......'2654&#"..............~.........p.H{JKzHHzK@WW@@WW............pKzHHzKJ{HuY?@XY?@X...O.......&...............O...'...&.......v.......O.......&.......m.m.....O.......&.......n.4.....O...'...&.......v.......O.....a.&.......s.,.....O.......&...............O.......&...............O.......&.......{.L.....O.....g.&...............O

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (687)
Category:	dropped
Size (bytes):	4140
Entropy (8bit):	5.366730971301342
Encrypted:	false
SSDEEP:	96:GNHug4stYXP6QQ37Uhe5HZbygSTLTyPEZ8YN7w:YOg4sSfg37UhS5byLL8EZjs
MD5:	70019428BB44FEF08E8CE190220522C5
SHA1:	365E3312D32F444912B86006B58991F58193B371
SHA-256:	B523C18360E99EDB202AEB73E8F914C2E9FAB0E47FEAF168919AB80A32AB5B22
SHA-512:	1D11049EB0DF0553B520D22DB9AF8DCB3E65BBFB779E5B9CF2C328E5D9D810F3CFCFAFC925E8974EF11603AC59BBF1109D897791CEEFECA2A7AF1907D9AF7800
Malicious:	false
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Lf(_.jpa);._.k("sOXFj");.var mr=function(a){_.J.call(this,a.Fa)};_.B(mr,_.J);mr.Ma=_.J.Ma;mr.Ba=_.J.Ba;mr.prototype.aa=function(a){return a()};_.gr(_.ipa,mr);._.m();._.k("oGtAuc");._.Uua=new _.Pe(_.jpa);._.m();._.k("q0xTif");.var Uva=function(a){var b=function(d){_.cm(d)&&(_.cm(d).zc=null,_.zr(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},Lr=function(a){_.Mp.call(this,a.Fa);this.Pa=this.dom=null;if(this.Pi()){var b=_.yk(this.Pf(),[_.Wk,_.Vk]);b=_.Dh([b[_.Wk],b[_.Vk]]).then(function(c){this.Pa=c[0];this.dom=c[1]},null,this);_.ar(this,b)}this.Oa=a.qh.d9};_.B(Lr,_.Mp);Lr.Ba=function(){return{qh:{d9:function(){return _.yf(this)}}}};Lr.prototype.getContext=function(a){return this.Oa.getContext(a)};.Lr.prototype.getData=function(a){return this.Oa.getData(a)};Lr.protot

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1277)
Category:	dropped
Size (bytes):	76656
Entropy (8bit):	5.539011571746158
Encrypted:	false
SSDEEP:	1536:3gSs+Q0ZJJu4xVaQ8HIQUiUzVD4F3WKyJ3nWmu6fzIQJ7Ig:nDBUQ8HIJB4FmznW2fzIQJ7Ig
MD5:	09F6E9D1E23AE78370CB4E01ECC5EB8A
SHA1:	F4E5923C4DF3F42B69544E54916C7273DE69F216
SHA-256:	6A75AFC4D1953D46CF71625832A1B3A8C49A21220F7CB936FE6B0BA5508681E6
SHA-512:	FD58B7501F7DCCF300AA6D6F218A5D45D62413B318E60653917033CD45F832FBD5E719A0F764945269E1C4003E45C6BBD7FFF6FAEB2738EB9A73DC3B9A508C6A
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ltDFwf");.var bxb=_.y("ltDFwf");var hV=function(a){_.K.call(this,a.Fa);var b=this.wa();this.wb=this.Sa("P1ekSe");this.mb=this.Sa("cQwEuf");this.da=b.getData("progressvalue").number(0);this.ja=b.getData("buffervalue").number(1);this.Ca=b.yb("B6Vhqe");this.Oa=b.yb("juhVM");this.ta=b.yb("D6TUi");this.aa=b.yb("qdulke");this.La=this.da!==0;this.Ka=this.ja!==1;this.Ga=[];this.ea=_.Es(this).Ub(function(){this.Ga.length&&(this.Ga.forEach(this.n$,this),this.Ga=[]);this.La&&(this.La=!1,this.wb.setStyle("transform","scaleX("+this.da+")"));.this.Ka&&(this.Ka=!1,this.mb.setStyle("transform","scaleX("+this.ja+")"));_.vr(b,"B6Vhqe",this.Ca);_.vr(b,"D6TUi",this.ta);_.vr(b,"juhVM",this.Oa);_.vr(b,"qdulke",this.aa)}).build();this.ea();_.ah&&_.Es(this).Ub(function(){b.qb("ieri7c")}).Ae().build()();_.HA(this.wa().el(),this.Ra.bind(this))};_.B(hV,_.K);hV.Ba=_.K.Ba;.hV.prototype.Ra=function(a

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1277)
Category:	downloaded
Size (bytes):	97234
Entropy (8bit):	5.53170491102835
Encrypted:	false
SSDEEP:	1536:3gSs+Q0ZJJu4xVaQ8HIQUiUzVD4F3WKyJ3nWmu6fzIQJ7ItboKyxd5:nDBUQ8HIJB4FmznW2fzIQJ7IWKyxd5
MD5:	05A71F2820F067C9ABF7AFEED478E8A7
SHA1:	F24A2154D1F7D39ABD79299147639F4C6689CEDB
SHA-256:	D2816D25CB08873FF5553B9300721972AF823A70E6A1E3BD9F6250506BACB302
SHA-512:	1A89B8715EA90540315F9C0A0758180FB883A96B349855819086C06CAB6AFD50CD71CC64B15EAFA10240034D08C56BF34778069EE265CCF4A445419A1ADE37BB
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,gJzDyc,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qmdT9,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,eS2ylb,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,qPfo0c,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ltDFwf");.var bxb=_.y("ltDFwf");var hV=function(a){_.K.call(this,a.Fa);var b=this.wa();this.wb=this.Sa("P1ekSe");this.mb=this.Sa("cQwEuf");this.da=b.getData("progressvalue").number(0);this.ja=b.getData("buffervalue").number(1);this.Ca=b.yb("B6Vhqe");this.Oa=b.yb("juhVM");this.ta=b.yb("D6TUi");this.aa=b.yb("qdulke");this.La=this.da!==0;this.Ka=this.ja!==1;this.Ga=[];this.ea=_.Es(this).Ub(function(){this.Ga.length&&(this.Ga.forEach(this.n$,this),this.Ga=[]);this.La&&(this.La=!1,this.wb.setStyle("transform","scaleX("+this.da+")"));.this.Ka&&(this.Ka=!1,this.mb.setStyle("transform","scaleX("+this.ja+")"));_.vr(b,"B6Vhqe",this.Ca);_.vr(b,"D6TUi",this.ta);_.vr(b,"juhVM",this.Oa);_.vr(b,"qdulke",this.aa)}).build();this.ea();_.ah&&_.Es(this).Ub(function(){b.qb("ieri7c")}).Ae().build()();_.HA(this.wa().el(),this.Ra.bind(this))};_.B(hV,_.K);hV.Ba=_.K.Ba;.hV.prototype.Ra=function(a

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	155758
Entropy (8bit):	5.06621719317054
Encrypted:	false
SSDEEP:	1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F
MD5:	A15C2AC3234AA8F6064EF9C1F7383C37
SHA1:	6E10354828454898FDA80F55F3DECB347FD9ED21
SHA-256:	60B19E5DA6A9234FF9220668A5EC1125C157A268513256188EE80F2D2C8D8D36
SHA-512:	B435CF71A9AE66C59677A3AC285C87EA702A87F32367FE5893CF13E68F9A31FCA0A8D14F6A7D692F23C5027751CE63961CA4FE8D20F35A926FF24AE3EB1D4B30
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	1.7491585968207541
Encrypted:	false
SSDEEP:	12:y0Cf8jAxh0yiK6xNXL0r8V8I55555555555555R:If//0TDy0X
MD5:	E19FDB47503248CA528DCCE82458B722
SHA1:	51CBCBF58B3A7DFF677E3551BC4A3EDBC5DFFC93
SHA-256:	62A8461E328D5BACE3780FF738D0B58F6502592C04AFA564E0A8A792583A7BFB
SHA-512:	543BA079358D7C66FC08F3F929E45AF64300CA6842D6BB283CE77B10151F081CD7FE057E94C38CEBD545BE185488725A1B6EC1D95656F7EB5E6A30BF94190EE7
Malicious:	false
URL:	https://res.cisco.com/favicon.ico
Preview:	............ .h.......(....... ..... .............................................................................................................................................................................................................................................TT......................................................................................................................................................................................................TT...................................................................................................................f/......................f/......................f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/..............f/......f/......f/......f/......f/......f/..............................f/......................f/......................................f/......................f/...............................................................

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (687)
Category:	downloaded
Size (bytes):	4140
Entropy (8bit):	5.366730971301342
Encrypted:	false
SSDEEP:	96:GNHug4stYXP6QQ37Uhe5HZbygSTLTyPEZ8YN7w:YOg4sSfg37UhS5byLL8EZjs
MD5:	70019428BB44FEF08E8CE190220522C5
SHA1:	365E3312D32F444912B86006B58991F58193B371
SHA-256:	B523C18360E99EDB202AEB73E8F914C2E9FAB0E47FEAF168919AB80A32AB5B22
SHA-512:	1D11049EB0DF0553B520D22DB9AF8DCB3E65BBFB779E5B9CF2C328E5D9D810F3CFCFAFC925E8974EF11603AC59BBF1109D897791CEEFECA2A7AF1907D9AF7800
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Lf(_.jpa);._.k("sOXFj");.var mr=function(a){_.J.call(this,a.Fa)};_.B(mr,_.J);mr.Ma=_.J.Ma;mr.Ba=_.J.Ba;mr.prototype.aa=function(a){return a()};_.gr(_.ipa,mr);._.m();._.k("oGtAuc");._.Uua=new _.Pe(_.jpa);._.m();._.k("q0xTif");.var Uva=function(a){var b=function(d){_.cm(d)&&(_.cm(d).zc=null,_.zr(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},Lr=function(a){_.Mp.call(this,a.Fa);this.Pa=this.dom=null;if(this.Pi()){var b=_.yk(this.Pf(),[_.Wk,_.Vk]);b=_.Dh([b[_.Wk],b[_.Vk]]).then(function(c){this.Pa=c[0];this.dom=c[1]},null,this);_.ar(this,b)}this.Oa=a.qh.d9};_.B(Lr,_.Mp);Lr.Ba=function(){return{qh:{d9:function(){return _.yf(this)}}}};Lr.prototype.getContext=function(a){return this.Oa.getContext(a)};.Lr.prototype.getData=function(a){return this.Oa.getData(a)};Lr.protot

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.453416561671607
Encrypted:	false
SSDEEP:	3:8VKJmQcwVbF7KnZ:BJmjwVbF7KZ
MD5:	491DC96011445194971CFAE6A7A0B191
SHA1:	74BD675A8CBC8AF507C0EB5509727EA3F9B85060
SHA-256:	C3BA6FCBB38A83C87009DEE4BAB93A9B3274553128D77E5B2C04077ECD35C1D3
SHA-512:	38356EF67B6B704F2129828299E516B04B29EA1EEB25CF356E22E3AFEC7A875E2187F70E9E7CF0467DEFA14F11D802ACF00D69B2B13EFEA025942E21383AC35E
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Ch8KBw0ZARP6GgAKCw3oIX6GGgQISxgCCgcN05ioBxoA

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14965)
Category:	downloaded
Size (bytes):	14966
Entropy (8bit):	4.771466859662571
Encrypted:	false
SSDEEP:	192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF
MD5:	9F54E6414F87E0D14B9E966F19A174F9
SHA1:	AE5735562FAABD1A2D9803BBD7BF4C502B5E4F51
SHA-256:	15D6AD4DFDB43D0AFFAD683E70029F97A8F8FC8637A28845009EE0542DCCDF81
SHA-512:	9CC365A6E6833EBAA5125B37217FD0E7A1F7EAABC1012C1BDE2A6EA373317966EC401D7CF35A31D1C46FED43D380196B8AAA329EDDF92A313080651E51720F9F
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Preview:	.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--single .select2-selection__rendered{display:block;padding-left:8px;padding-right:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-container .select2-selection--multiple{box-sizing:border-box;cursor:pointer;display:block;min-height:32px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--multiple .select2-selection__rendered{display:inline-block;overflow:hidden;padding-left:8px;text-overflow:ellipsis;white-space:nowrap}.select2-cont

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (322), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1357
Entropy (8bit):	5.418019576522675
Encrypted:	false
SSDEEP:	24:yVfABdmqLsXcqXGEFwocmXyKzW6BvsJcHKoDvwZd9p6Pborxox9FbdPDVZgtR:yVfABpL2sEOojikW6eK6R6cr+PF5Pfg7
MD5:	9DE92E4222BB25134137B98C3501BA1B
SHA1:	3088E02B579F540196583BE49FDC676478BFE549
SHA-256:	0A842425EFAE32B0924308F787223AB73108D6B67C9B20906BC9B3FCBA3A079B
SHA-512:	246B99A9DC91FCF2C603B5255BC30FAA142F452FF44EA5C51F7E6575F33FBD0E35D336BC91CA80572AB63C9ED1AB00F82992EFE8882091EB13816FDC428DB470
Malicious:	false
URL:	https://res.cisco.com/keyserver/keyserver?su=JKMARTIN%40COMPASSLLC.COM&df=&tf=&lp=en&v=2&m=%7c1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675.corpmailsvcs.com&s=1&f=0&d=1722947150930&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qr..,'action':'open'..,'status':11..,'message':'Please enroll before opening this Registered Envelope.'..,'state':1..,'reqTime':1722947150930..,'reqNumber':1..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'recipient':'jkmartin@compassllc.com'..,'sessionId':'969A294580410867A31417746C0F0B6F'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=jkmartin@compassllc.com'..,'waitTime':50000..,'minPoll':1000..,'maxPoll':5000..,'totalPoll':1200000..,'supportedLocales':[['en','English (US)'],['nl_NL','Dutch'],['de','Deutsch'],['es','Espa\xf1ol'],['fr','Fran\xe7ais'],['it','Italiano'],['pl','Polski'],['pt','Portugu\xeas'],['ru','\u0420\u0443\u0441\u0441\u043a\u0438\u0439'],['zh_CN','\u4e2d\u6587(\u7b80\u4f53)'],['ja','\u65e5\u672c\u8a9e'],['ko

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17973
Entropy (8bit):	4.90543918232386
Encrypted:	false
SSDEEP:	384:GRE6nE7QxMqwvVvgJo1J6VoFkDtcgueiQXLFiR1I9H+PgpiztB7SxfFERycxK/iE:GpE7QWXxQo1J6ykDlueiQXLFm1I1+PgF
MD5:	12A3CC525DBC9DA661F0531CE4F593AE
SHA1:	313CF3373B3DCBEA4516244D95180F1534D877AD
SHA-256:	225156D328C033B9298FABE49902A9A94925981BC87876AF3283A8C701F137EC
SHA-512:	5841CC2DD62FDFF59C54617F6C794DC0866792B68E7D05EDCCFAD144C6554B9FE6F5C94414B843BAB13F6EFA8F71F25202B203F9A60F9EEE0BCF57D2450378D1
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/standard-scripts.js
Preview:	function onLoadPage().{. // Hide and unhide some things. For now we assume everything that might. // need to be toggled is a div or a... toggleVisibility('div');. toggleVisibility('a');.. // Set the focus on the field identified in our XML. If no field. // was identified then look for the one named focusItem (which. // might not exist). If a field name was provided but is equal. // to 'nofocus' then don't try to focus on anything... var focusID = (typeof focusItemID == 'undefined') ? '' : focusItemID;. var focusElement = '';.. if (focusID). {..if (focusID != 'nofocus')..{.. focusElement = document.getElementById(focusID);. if (!focusElement)... focusElement = document.getElementById('focusItem');. if (!focusElement). focusElement = document.getElementById('focusItemLoginUsername');..}. }. else..focusElement = document.getElementById('focusItem');.. if (focusElement && focusElement.focus)..focusElement.focus

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (770)
Category:	downloaded
Size (bytes):	241446
Entropy (8bit):	5.465119877665094
Encrypted:	false
SSDEEP:	1536:7FNtIX5cahKu2Ngh+VYgj/a/5oRDc8f1i9MsGU0TQDdhpm7RO6Y3HbgDjhqEdmEs:7mXAN1m/5IX6L3kgKpmKlI0kWVk9d
MD5:	B2DC614024E4C2050F52A751B3D10091
SHA1:	6C42C74687DA014186A7F43B9BF26D79924A8CE5
SHA-256:	383FC6DBA01FF5F6C5035276E31B0FBFBAB78FF70F3FBDAA63C25A47C6CB8B85
SHA-512:	6D8A30A512A305FAFDB5C9E0206FC11A27015414AA08600707FF681CC92B6B2BADD0F09B5A0F9F67263742BD06B4A74E74911643BC90EEE85D50F7EBEDE0F605
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlEIo9L_XAlorBnd-lsGrFD7C0Ufww/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x3183e84, 0x200db46, 0x1039c3c4, 0x40a280f, 0x32, 0x0, 0x360000, 0x662000, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,gaa,laa,oaa,cb,db,gb,Ib,Lb,Mb,yaa,zaa,Nb,Aaa,Baa,Caa,Rb,Vb,Gaa,Iaa,Kaa,Oaa,Zb,bc,Qaa,Raa,Vaa,cba,dba,hba,kba,eba,jba,iba,gba,fba,lba,uc,oba,sba,tba,qba,uba,yba,zba,Aba,Tc,Dba,Eba,Fba,Gba,Hba,Kba,dd,Nba,Mba,Pba,kd,hd,Rba,Qba,Uba,Tba,nd,Vba,Yba,$ba,aca,cca,dca,Cd,jca,kca,Ld,Bd,Dd,Eca,Bca,Fca,Gca,Jca,Hca,Nca,Oca,Pca,Sca,Tca,zca,Rca,Vca,mda,qe,oda,re,pda,rda,tda,yda,zda,Ada,Bda,Cda,Fda,Hda,Oda,Pda,Qda,Uda,cea,Zda,fea,kf,iea,jea,kea,pe

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (773)
Category:	downloaded
Size (bytes):	1477
Entropy (8bit):	5.2708100418170245
Encrypted:	false
SSDEEP:	24:kMYD7xVmU08qrxN82QYIe/HTB+obhzdP7koEYk9nVj6AGbK6LFrGbsSFv6LpDOwu:o7xVmU08ZRsvb/P4F7DGbprGbsSy7Zf8
MD5:	2A2CA09D856767AB5DD7752E3936D127
SHA1:	01886B9AEB80DAE01C0238DAC29DB7D65EA58209
SHA-256:	468AF9CE89366BFB389576EAA8ED2854B9A3C05CDF742B7640EB0C84AF3132C8
SHA-512:	BA99AEC496FFDC052B8918D922AF5822ECF8D0B52E4C46891A2190C7C821D2BFAD05AD86A7508CE8CD92584B16B095B7EAE3527A695D81F8702B310F79BF501B
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("kMFpHd");._.lXa=new _.Pe(_.Sk);._.m();._.k("bm51tf");.var oXa=!!(_.jg[1]&1);var qXa=function(a,b,c,d,e){this.ea=a;this.ta=b;this.ja=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=pXa(this)},rXa=function(a){var b={};_.Ma(a.PO(),function(e){b[e]=!0});var c=a.tO(),d=a.zO();return new qXa(a.pL(),c.aa()1E3,a.bO(),d.aa()1E3,b)},pXa=function(a){return Math.random()Math.min(a.taMath.pow(a.ja,a.aa),a.Ca)},dF=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var eF=function(a){_.J.call(this,a.Fa);this.Lc=null;this.ea=a.Da.UR;this.ja=a.Da.metadata;a=a.Da.Jaa;this.da=a.ea.bind(a)};_.B(eF,_.J);eF.Ma=_.J.Ma;eF.Ba=function(){return{Da:{UR:_.mXa,metadata:_.lXa,Jaa:_.fXa}}};eF.prototype.aa=function(a,b){if(this.ja.getType(a.Fd())!=1)return _.cl(a);var c=this.ea.aa;return(c=c?rXa(c):null)&&dF(c)?_.Qua(a,sXa(this,a,b,c)):_.cl(a)};.var sXa=function(a,b,c,d){return c.then(function(e){ret

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.182712201946342
Encrypted:	false
SSDEEP:	3:UOKIFMwOGEjBAzKZMA:UOhOGEjBAOv
MD5:	758990A46950375DAF73A6BD55A5865C
SHA1:	5E0AA4F26ECC3BF45FC788F61ACD13AF694DDE1C
SHA-256:	6912EA8572AF5297B6C27533F1A2C02672C0F81A37421FA07D7322288EC9D407
SHA-512:	8D3FD64350E9591D3DFF42E4AE69AA546D5F5D29938398A0CE1E35AD74DBD2C09F7DCE8844702982A5248D2F15E3CA93E937D50B4F2A5B3F276F09563C69B712
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/overrides.css
Preview:	/* Any custom or overridden styles can be included in this file */..

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	5.007902118397868
Encrypted:	false
SSDEEP:	24:2dznnbRLBtAZyF16eaxM2aRht8SN2GkuX+zEtQ6uaHuzyXrciqTvqkaNeY:cTnVEy/L7AGrXVtKaOzyQ7DHasY
MD5:	5D1D544BC99C3AA64D3EF5496FBDACB2
SHA1:	9A2B5237EC134ED86F7A734E7B76C86077178D62
SHA-256:	09783E83152513F4FE128CD2229384BDE3AEE8D1639F7C4F6AA6BD190AB11E72
SHA-512:	0EF097372E5E6EBBA5F2680B1E4D4AB176011FE0DD84532C04EA4574C91B91B438C4327D5221ECD368D8C6C2CFA02965D83439E52FE31EC60A8B76DD2FB6B9B6
Malicious:	false
URL:	https://res.cisco.com/websafe/images/skins/close.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 49.3 (51167) - http://www.bohemiancoding.com/sketch -->. <title>icon-close</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="SBG-Icon-Library" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Actions" transform="translate(-293.000000, -548.000000)" fill="#58585B">. <g id="Cancel/Close" transform="translate(0.000000, 520.000000)">. <g id="Delete" transform="translate(293.000000, 28.000000)">. <path d="M9.25697778,8 L15.7396444,1.51733333 C16.0872,1.16977778 16.0872,0.608 15.7396444,0.260444444 C15.3920889,-0.0871111111 14.8303111,-0.0871111111 14.4827556,0.260444444 L8.00008889,6.74311111 L1.51742222,0.260444444 C1.16986667,-0.0871111111 0.608088889,-0.0871111111 0.260533333,0.2

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2143
Entropy (8bit):	4.907198882670554
Encrypted:	false
SSDEEP:	48:DS7oJrWUkLRg8xTSCQw6KMYS73WOL7VgLxT9C/w6a:DS7oJrWUkLRg8xTSCQw6KMYS73WOLpg/
MD5:	FB2ECA121A12D98402B53355D9EACF7E
SHA1:	4BD42A075D32E7631D6D378FDCB4135DB20BA191
SHA-256:	2E1C61EEC11CFDBC16A55D6433341F9CE2A5253BA94F01FADC2D4BA31A8719EB
SHA-512:	46262D3463C1EF5B93DCB5EEA848643D23A89E94BFE02C8481BB35683852A653C24B697A62153BAF92EF0C5A79D5DC33EE5F09445E7789C8223DF58CEFAB5A75
Malicious:	false
URL:	https://res.cisco.com/admin/cisco-fonts.min.css
Preview:	./* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 800;. src: url("./fonts/Inter/Inter-ExtraBo

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20831)
Category:	downloaded
Size (bytes):	21004
Entropy (8bit):	5.2169391810760875
Encrypted:	false
SSDEEP:	384:kmQkLrwVOyzirVyKnxRsIB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdOgS:vLsgyziJp3Db5OxHOxvYD73Y5vQzyL9p
MD5:	56456DB9D72A4B380ED3CB63095E6022
SHA1:	6DBCE88AEE15B42F29083DF7A07513CF3B486BA0
SHA-256:	66F3A07E1FA9B64A686B66381E4458DBC8ABF3DBBFF954720C4EEC07B84411C2
SHA-512:	E56BD96B837B26ADD354D0A9E2B8DC04C95CEA94F7959EE05718ED23A224296FAE22D49AFAB160B45963BD99C2C501A3F12517E431EB68A13A327FF8B262B50A
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?pe:10===e?se:pe\|\|se}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent\|\|null;n===o&&e.nextElementSibling;)n

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.007902118397868
Encrypted:	false
SSDEEP:	24:2dznnbRLBtAZyF16eaxM2aRht8SN2GkuX+zEtQ6uaHuzyXrciqTvqkaNeY:cTnVEy/L7AGrXVtKaOzyQ7DHasY
MD5:	5D1D544BC99C3AA64D3EF5496FBDACB2
SHA1:	9A2B5237EC134ED86F7A734E7B76C86077178D62
SHA-256:	09783E83152513F4FE128CD2229384BDE3AEE8D1639F7C4F6AA6BD190AB11E72
SHA-512:	0EF097372E5E6EBBA5F2680B1E4D4AB176011FE0DD84532C04EA4574C91B91B438C4327D5221ECD368D8C6C2CFA02965D83439E52FE31EC60A8B76DD2FB6B9B6
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 49.3 (51167) - http://www.bohemiancoding.com/sketch -->. <title>icon-close</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="SBG-Icon-Library" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Actions" transform="translate(-293.000000, -548.000000)" fill="#58585B">. <g id="Cancel/Close" transform="translate(0.000000, 520.000000)">. <g id="Delete" transform="translate(293.000000, 28.000000)">. <path d="M9.25697778,8 L15.7396444,1.51733333 C16.0872,1.16977778 16.0872,0.608 15.7396444,0.260444444 C15.3920889,-0.0871111111 14.8303111,-0.0871111111 14.4827556,0.260444444 L8.00008889,6.74311111 L1.51742222,0.260444444 C1.16986667,-0.0871111111 0.608088889,-0.0871111111 0.260533333,0.2

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter SemiBoldRegular3.0
Category:	downloaded
Size (bytes):	309432
Entropy (8bit):	6.313238065412327
Encrypted:	false
SSDEEP:	3072:q2x3CNOVe9tnoIXXsm5IQcuM9xaR4ThDnIQvXPLUkOIvdmULUX/aZMOrwTrVxfN7:sTIQMc4ThYyba/PR41Pa/jtdc0
MD5:	1753A05196ABEEF95C32F10246BD6473
SHA1:	ACDA92ADC6CF8C67C89395C65F371A4D2B05A783
SHA-256:	F5595839DEBDB0D028116ED8A7579F31D1C2F712677A2E794459A5DCE6ECA929
SHA-512:	68AA83B7521EFDD53D810E5BC8A6AC0F211CBB989CBA9C317D5AD196FFA08D439CC096C823305D5316D5B0D17FB9D6ED6E39CD0A28E0B2478A2DCCE01D78B760
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf
Preview:	............GDEF1.1...D.....GPOS...t..H...-.GSUB..fx..u...B.OS/2#_nb..w....`STAT.y.E...t...Dcmap/....x...e.gasp......D.....glyfj.........&.head-.aF..O....6hhea......w....$hmtx$5.9..O...'.loca..)...'...'.maxp......'.... name7\`.......Ppost..5r......d.preph.................C................!...!...!...!...!............................@.........................E............!!.!.!.#.!.!...t.......t......8.......\.......E.....[.......#..!!.!.!.#.!.!."&54632....!"&54632.......t.......t......8...OssOQoo..OssOQoo.....\......pLPmmPLppLPmmPLp...E.....V.&.......l.d.....E.......&.......f.......E.......&.......d.R.....E.....v.&.......j.......E.............&..!!.!.!.#.!.!."&546632......'6654&.".......t.......t......8....}.Q.ST.QQ.T:PO;:OO.....\.......{R.PP.RR.P..O88P.O88P...E.....).&.........B.....E.......&.......v.......E.......&.......m.......E.......&.......n.d.....E.......&.......v.......E.....v.&.......s.......E.......&.........N.....E.......&.........b.....E.......&.......{.......E.......&.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (467)
Category:	dropped
Size (bytes):	1883
Entropy (8bit):	5.275430765695091
Encrypted:	false
SSDEEP:	48:o7eKbS6SvZL3ASFoHxNJvwX7KOQ1f2/36/rsg4xLrw:o6vZLVFoSbQ15w9Xw
MD5:	D158ED7943B4E026EC7FD2FD95303308
SHA1:	644209B4C920A328D80287B739F2A1F1D23C56FE
SHA-256:	44572E1DFB3131117ABA6A0AD38270DA84208A6F57E69027CE91389DCF5EFA6D
SHA-512:	64A93EA087DAFBFDABE4737B8ABC0D81196E9AEB60A65C04D53C151F3330ECDDAC2889057C2941A5CAB8B22DBEEBB57BF31119BAC21340F007972633606D2132
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.VZ=function(a){_.J.call(this,a.Fa);this.window=a.Da.window.get();this.Gc=a.Da.Gc};_.B(_.VZ,_.J);_.VZ.Ma=_.J.Ma;_.VZ.Ba=function(){return{Da:{window:_.jr,Gc:_.VC}}};_.VZ.prototype.wo=function(){};_.VZ.prototype.addEncryptionRecoveryMethod=function(){};_.WZ=function(a){return(a==null?void 0:a.Fq)\|\|function(){}};_.XZ=function(a){return(a==null?void 0:a.k_)\|\|function(){}};_.YZ=function(a){return(a==null?void 0:a.oo)\|\|function(){}};._.ODb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PDb=function(a){setTimeout(function(){throw a;},0)};_.VZ.prototype.wK=function(){return!0};_.gr(_.Ll,_.VZ);._.m();._.k("ziXSP");.var w_=function(a){_.VZ.call(this,a.Fa)};_.B(w_,_.VZ);w_.Ma=_.VZ.Ma;w_.Ba=_.VZ.Ba;w_.prototype.wo=function(a,b,c){var d;i

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (491), with CRLF, LF line terminators
Entropy (8bit):	6.209588396405315
TrID:	Scalable Vector Graphics (18501/1) 24.18% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (11501/1) 15.03% HyperText Markup Language (11501/1) 15.03%
File name:	securedoc_20240805T101719.html
File size:	277'497 bytes
MD5:	2c903428cac0e0fa016b5b0580df8367
SHA1:	0b25be6f3aed2c78095a88101cfea071bf69069e
SHA256:	210fdecd959ea18282025830b35c9e13eb900d71a37361f23420ff64fc124c88
SHA512:	d9c5394929ffe7d2eba45178c16e794a44eb4450ae8a594d8d899e783bb019f8755ffdd3974e9a126db0b629ebe3d3287dac457074a510a8a635ee5d3dec58cc
SSDEEP:	6144:F/LQIGh0+IHYONivQ25kTeYwraPvQBdRn2s0SQsbBM21:F/LQIGhzayYuamRn+ziBMe
TLSH:	5344D0C96612643202E218F2747B264A39354817050D6DB1FBAC859CBFFAD9A413FFDD
File Content Preview:	saved from url=(0025)https://res.cisco.com:443 -->..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN". "http://www.w3.org/TR/html4/loose.dtd"><html.lang="en"><head><base href="http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNT

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Severity	Source Port	Dest Port	Source IP	Dest IP
2024-08-06T14:26:53.809960+0200	TCP	2847446	ETPRO EXPLOIT Windows DirectWrite Heap-Based Buffer Overflow Inbound (CVE-2021-24093)	1	443	49830	54.208.242.91	192.168.2.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 6, 2024 14:25:33.169998884 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 6, 2024 14:25:42.779149055 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 6, 2024 14:25:50.171345949 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.171436071 CEST	49734	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.171700954 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.171768904 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.171787024 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.171812057 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.171835899 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.171885014 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.172405958 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.172429085 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.172568083 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.172585011 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.176230907 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.176327944 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.176332951 CEST	80	49734	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.176383972 CEST	49734	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.176687002 CEST	49734	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.177073956 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.181556940 CEST	80	49734	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.182511091 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.182542086 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.182568073 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.182595015 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.182621956 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.182620049 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.182647943 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.182674885 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.182710886 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.182773113 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.183605909 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.183634996 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.183664083 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.183703899 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.183741093 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.187582016 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.187649965 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.188504934 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.188533068 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.188576937 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.188580036 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.188605070 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.188608885 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.188631058 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.188679934 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.201572895 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:50.201638937 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:50.201863050 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:50.202028990 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:50.202044964 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:50.230194092 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.230443001 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.278469086 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.278646946 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.326499939 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.326669931 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.374397039 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.374461889 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.422188044 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.422525883 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.470299959 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.470388889 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.518356085 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.518512011 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.552668095 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.552937984 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.558226109 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558255911 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558283091 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558357954 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558403969 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558444023 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558541059 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558618069 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558686972 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558743000 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558788061 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558814049 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558897018 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558923006 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558948994 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.558974981 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559000969 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559040070 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559086084 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559139967 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559185028 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559228897 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559254885 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559294939 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559334993 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559361935 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559386969 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559416056 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.559441090 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.564146996 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.659915924 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.660248995 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.660311937 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.662447929 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.662533045 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.664333105 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.664593935 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.664875031 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.664894104 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.666306973 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.666471958 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.666487932 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.667285919 CEST	80	49734	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.668359041 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.668425083 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.670264959 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.670355082 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.670458078 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.670470953 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.672235966 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.672712088 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.672874928 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.673154116 CEST	49733	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.678184986 CEST	80	49733	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:50.717835903 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.717904091 CEST	49734	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:50.789961100 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:50.790050983 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:50.790083885 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:50.790102959 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:50.790131092 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:50.790191889 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:50.790291071 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:50.790307999 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:50.790397882 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:50.790406942 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:50.809473038 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.809592962 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.809659004 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.809679031 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.809711933 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.809767008 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.809797049 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.810436964 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.810517073 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.810544968 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.810640097 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.810729027 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.810753107 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.811094999 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.811153889 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.811167002 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.813499928 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.813559055 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.813575029 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.813677073 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.813736916 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.813749075 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.813903093 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.813987017 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.814039946 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.814054012 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.814150095 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.814239979 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.814829111 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.814888954 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.814902067 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.815335989 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.815771103 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.815783978 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.819161892 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.819221020 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.819232941 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.819792032 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.819849968 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.819971085 CEST	49736	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.819999933 CEST	443	49736	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.859278917 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.898108959 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.898286104 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.898350954 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.898385048 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.898644924 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.898726940 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.898742914 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.899132013 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.899204969 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.899209976 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.899239063 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.899354935 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.900033951 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.900417089 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.900473118 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.900504112 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.901107073 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.901160002 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.901173115 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.901251078 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.901304007 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.901318073 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.902335882 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.902420044 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.902479887 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.902493954 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.902544022 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.902554989 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.903089046 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.903158903 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.903218985 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.903234005 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.903286934 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.903846025 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.952770948 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:50.952976942 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:50.953001976 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:50.953902006 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.953963041 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.954637051 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:50.954705000 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:50.955517054 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:50.955671072 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:50.955682993 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:50.955760002 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:50.989459038 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.989536047 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.989556074 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.989623070 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.989732027 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.989787102 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.989804983 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.990662098 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.990763903 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.990799904 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.990835905 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.991568089 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.991631031 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.991642952 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.991692066 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.992147923 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.992937088 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.992997885 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.993010044 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.993062019 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.993066072 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.993084908 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.993241072 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:50.993278980 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.993308067 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.993541002 CEST	49735	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:50.993571043 CEST	443	49735	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.009032011 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.009061098 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.009111881 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.009278059 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.009284019 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.060034990 CEST	49744	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.066086054 CEST	53	49744	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.066139936 CEST	49744	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.066199064 CEST	49744	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.066199064 CEST	49744	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.072648048 CEST	53	49744	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.072660923 CEST	53	49744	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.164499998 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.164554119 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.243644953 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.253972054 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.253988981 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.254029989 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.254044056 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.254044056 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.254065990 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.254111052 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.254148006 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.254148006 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.254179001 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.254201889 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.332643032 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.332659006 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.332705021 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.332715034 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.332717896 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.332726002 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.332753897 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.332772017 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.332772017 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.332784891 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.332798004 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.348630905 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.348644972 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.348684072 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.348696947 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.348699093 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.348712921 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.348742008 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.348768950 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.348788023 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.348815918 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.348815918 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.364759922 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.365309954 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.365370035 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.366830111 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.366902113 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.367707968 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.367794037 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.367851019 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.373430014 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.373624086 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.373641968 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.375108957 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.375171900 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.375909090 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.375988960 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.376025915 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.408535957 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.416538954 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.419047117 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.419048071 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.419107914 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.419147968 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.437748909 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.437762022 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.437784910 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.437796116 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.437824011 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.437885046 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.437913895 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.440680981 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.440692902 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.440709114 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.440717936 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.440726042 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.440737009 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.440745115 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.440779924 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.440808058 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.440809011 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.443854094 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.443905115 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.443914890 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.443963051 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.443989038 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.444004059 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.444025993 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.444051027 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.452284098 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.452311993 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.452362061 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.452383995 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.452409029 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.452430964 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.452452898 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.464318991 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.464318991 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.486675978 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.486867905 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.487059116 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.487930059 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.487996101 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.488020897 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.488056898 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.488183975 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.488183975 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.488245964 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.488322973 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.488455057 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.488550901 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.488550901 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.492212057 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.511228085 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.511312008 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.511315107 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.511365891 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.524912119 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.524925947 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.525274992 CEST	49742	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.525337934 CEST	443	49742	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.526393890 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.526458979 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.528971910 CEST	53	49744	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.531630993 CEST	49744	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.532552958 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.532658100 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.535079002 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.535103083 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.537008047 CEST	49738	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.537038088 CEST	443	49738	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.537825108 CEST	53	49744	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.538065910 CEST	49734	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:51.538072109 CEST	49744	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.542978048 CEST	80	49734	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:51.546161890 CEST	49741	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.546221018 CEST	443	49741	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.556716919 CEST	49747	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:51.561706066 CEST	80	49747	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:51.561779022 CEST	49747	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:51.562273026 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:51.562315941 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:51.562371016 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:51.562962055 CEST	49747	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:51.564239025 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:51.564260006 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:51.565473080 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.565500021 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.565571070 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.565876961 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.565917969 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.565983057 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.566144943 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.566165924 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.566299915 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.566313028 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.567801952 CEST	80	49747	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:51.575661898 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.586169004 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:51.586198092 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:51.586288929 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:51.586775064 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:51.586802959 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:51.645610094 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.645652056 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.645709991 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.645752907 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.645930052 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.646013975 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.646023989 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.646058083 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.646059990 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.646074057 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.646099091 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.646121025 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.646754026 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.646759987 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.646779060 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.646846056 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.647197008 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.647228003 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.647257090 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.647264004 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.647275925 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.647305965 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.647387028 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.647409916 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.647475004 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.647701979 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.647739887 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.647998095 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.648015022 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.648268938 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.648293972 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.648902893 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.648920059 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.649185896 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.649341106 CEST	80	49734	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:51.649723053 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:51.649749041 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:51.693021059 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.693048954 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.693131924 CEST	49734	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:51.719929934 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.719966888 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.720030069 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.720335007 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.720350981 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.736294031 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.736334085 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.736368895 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.736418962 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.736466885 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.736469984 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.736499071 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.736707926 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.736722946 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.737149954 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.737183094 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.737212896 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.737231970 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.737313032 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.738104105 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.738181114 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.738219976 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.738262892 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.738277912 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.738347054 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.739068985 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.739586115 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.739617109 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.739645958 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.739669085 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.739675999 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.739691973 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.739700079 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.739798069 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.739811897 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.740545034 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.740581036 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.740612030 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.740633011 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.740641117 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.740653992 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.740655899 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.740710974 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.796864986 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.796962976 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.797118902 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.797285080 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:51.797303915 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:51.827838898 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.828016996 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.828099012 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.828167915 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.828198910 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.828236103 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.828244925 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.828299999 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.828346014 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.828351974 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.828383923 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.828995943 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.829054117 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.829955101 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.830013990 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.830038071 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.830096960 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.830127954 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.830168962 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.830177069 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.830272913 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.830326080 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:51.830338001 CEST	443	49743	104.17.25.14	192.168.2.4
Aug 6, 2024 14:25:51.830353022 CEST	49743	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:25:52.029639006 CEST	80	49747	3.210.249.249	192.168.2.4
Aug 6, 2024 14:25:52.031826019 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.031855106 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.032008886 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.032090902 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.032097101 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.074754953 CEST	49747	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:25:52.136851072 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.140976906 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.141016960 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.142638922 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.142729998 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.143016100 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.143110991 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.143130064 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.148988008 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.149276972 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.149307013 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.149863958 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.150109053 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.150187016 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.150197029 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.179995060 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.180188894 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.180207014 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.181643963 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.181709051 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.181974888 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.182065964 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.182132006 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.182147026 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.184514999 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.192547083 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.198046923 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.198054075 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.198067904 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.229971886 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.245178938 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.272509098 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.272680998 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.272732973 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.273078918 CEST	49748	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.273108006 CEST	443	49748	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.275597095 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.275660038 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.275727987 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.275763988 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.275784969 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.275832891 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.287271023 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.287492037 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.287549019 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.287887096 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.288146973 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.288208961 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.288235903 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.304950953 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.304977894 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.305015087 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.305046082 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.305049896 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.305063963 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.305077076 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.305085897 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.305116892 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.305124044 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.305143118 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.305181980 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.306335926 CEST	49752	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.306343079 CEST	443	49752	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.328514099 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.328702927 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.328901052 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.328915119 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.329590082 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.329855919 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.329951048 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.329956055 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.330101013 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.340711117 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.367860079 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.367885113 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.367933989 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.367971897 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.367994070 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.368060112 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.368132114 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.368182898 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.368232965 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.368299007 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.368310928 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.371757984 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.380019903 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.380042076 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.380090952 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.380104065 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.380141973 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.380271912 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.380271912 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.384253025 CEST	49750	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.384267092 CEST	443	49750	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.393333912 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.393719912 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.393785000 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.395323038 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.395397902 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.395689011 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.395807028 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.395827055 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.399151087 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.399327040 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.399339914 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.400259972 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.400404930 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.400429010 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.400446892 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.400536060 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.400551081 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.400995970 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.401057959 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.401375055 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.401614904 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.401839018 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.401846886 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.401905060 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.401957035 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.402204990 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.402246952 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.402308941 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.402326107 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.402349949 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.402442932 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.402517080 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.402597904 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.402607918 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.402770996 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.403033018 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.403063059 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.403208971 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.404160023 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:52.404172897 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:52.436518908 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.436564922 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.436625957 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.451756001 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.451777935 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.451796055 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.451838970 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.451850891 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.453579903 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.453810930 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.453831911 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.455255032 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.455317974 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.455629110 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.455713034 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.455735922 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.483824015 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.496526957 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.500577927 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.500577927 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.500577927 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.500652075 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:52.548707008 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:52.606542110 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.606861115 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.606884003 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.608546019 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.608608961 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.608895063 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.608974934 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.609013081 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.652575970 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.658673048 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:52.658682108 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:52.704837084 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:53.029691935 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.044637918 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:53.044823885 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:53.044939041 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:53.045209885 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.045227051 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.046556950 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.047411919 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.047528982 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.047537088 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.047590017 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.048976898 CEST	49764	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:53.049002886 CEST	443	49764	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:53.062685966 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:53.062714100 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:53.062782049 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:53.063672066 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:53.063692093 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:53.073591948 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.073652029 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.073719978 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.073879004 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.073898077 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.091214895 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.169301033 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.169367075 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.169394016 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.169430971 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.169441938 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.169461966 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.169471979 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.182003021 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.182024002 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.182056904 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.182063103 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.182080030 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.182099104 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.182125092 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.190329075 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.190355062 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.190365076 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.190407038 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.190416098 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.190418959 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.190429926 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.190483093 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.190529108 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.190530062 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.190530062 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.208942890 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.208992958 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.209011078 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.209059000 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.209083080 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.209095955 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.223521948 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.223567009 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.223584890 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.223601103 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.223618031 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.223627090 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.243841887 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.243901014 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.243923903 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.243943930 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.243985891 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.244004965 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.244087934 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.244087934 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.244087934 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.244087934 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.244159937 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.244226933 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.246388912 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.257827997 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.257834911 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.257875919 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.257901907 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.257910013 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.258009911 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.258009911 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.258009911 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.258083105 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.258117914 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.258162022 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.259512901 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.259546041 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.259582043 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.259665012 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.259673119 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.261822939 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.261867046 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.261882067 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.261898041 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.261930943 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.263560057 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.263581038 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.271368027 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.271430969 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.271439075 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.271456003 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.271497011 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.271580935 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.271625996 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.286237955 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.286258936 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.286413908 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.286415100 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.286478043 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.286530972 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.302655935 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.302678108 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.302722931 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.302746058 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.302772999 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.302793026 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.303544044 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.303617954 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.303618908 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.303653955 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.303670883 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.303700924 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.303700924 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.307764053 CEST	49765	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.307776928 CEST	443	49765	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.310419083 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.316354036 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.316397905 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.316447973 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.316458941 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.316529989 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.316601992 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.316601992 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.319279909 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.319323063 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.319329977 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.325618029 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.333414078 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.333453894 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.333493948 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.333503008 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.333601952 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.338140965 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.338191032 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.338249922 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.338320017 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.338360071 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.341176033 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.341183901 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.341248035 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.352844000 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.352849960 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.352909088 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.352924109 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.352945089 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.352977991 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.354881048 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.354939938 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.354975939 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.354993105 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.355021954 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.358575106 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.358639956 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.358655930 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.358702898 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.360879898 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.360959053 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.360965967 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.361025095 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.361051083 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.361068010 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.373420954 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.383837938 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.383857965 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.383872032 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.383944035 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.383965969 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.383991957 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.384021044 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.384043932 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.384057999 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.384068966 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.384113073 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.390516043 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.390527010 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.390584946 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.390600920 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.390621901 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.390671015 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.390671015 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.392795086 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.392810106 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.392854929 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.392870903 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.392898083 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.392919064 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.395917892 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.395977020 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.396002054 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.396022081 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.396051884 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.396066904 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.399276018 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.399338961 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.399482965 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.399549007 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.399595976 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.399595976 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.409884930 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.436624050 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.437086105 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.443979025 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.444001913 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.444041014 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.444061041 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.444081068 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.444102049 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.444253922 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.444269896 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.444312096 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.444356918 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.444391966 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.444417000 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.445512056 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.445564985 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.445858002 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.449141979 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.449157000 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.449197054 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.449203968 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.449239969 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.449248075 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.450016022 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.450078964 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.450151920 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.450205088 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.450222969 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.450225115 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.450246096 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.450253963 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.450284958 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.450288057 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.450295925 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.450948954 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.450958967 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.451000929 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.451006889 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.451030016 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.451076031 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.451076031 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.451076031 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.451095104 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.451725006 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.451778889 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.451785088 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.451841116 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.454585075 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.454644918 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.454648018 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.454663038 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.454703093 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.454715967 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.454736948 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.454736948 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.454756021 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.454756975 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.454785109 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.457803965 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.457871914 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.457894087 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.457909107 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.457957983 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.458266020 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.458303928 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.458338022 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.458350897 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.458378077 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.458395004 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.458434105 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.459997892 CEST	49749	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.460027933 CEST	443	49749	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.462517023 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.462557077 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.462583065 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.462598085 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.462630987 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.462630987 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.463044882 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.463105917 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.470535994 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.470601082 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.470618963 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.470654964 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.470655918 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.470678091 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.470689058 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.470711946 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.470719099 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.470738888 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.470768929 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.471590996 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.477276087 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.477324963 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.477335930 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.477365971 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.477391005 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.480094910 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.480150938 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.480165958 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.480211020 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.482423067 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.482455015 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.482485056 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.482497931 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.482525110 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.491000891 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.491050005 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.491067886 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.491089106 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.491117001 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.491128922 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.491173029 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.491452932 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.491476059 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.491522074 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.491542101 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.491564035 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.493311882 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.493360996 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.493375063 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.499751091 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.499804020 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.499811888 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.499840021 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.499882936 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.508074045 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.508116961 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.508194923 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.508194923 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.508194923 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.508220911 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.509762049 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.509835005 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.509840012 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.509871960 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.509907007 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.510683060 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.510720015 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.510730982 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.510749102 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.510763884 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.510788918 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.510862112 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.516098976 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.516168118 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.516195059 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.516208887 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.516259909 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.524166107 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.524187088 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.524403095 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.524403095 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.524466038 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.524523973 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.531635046 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.531677008 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.531704903 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.531718969 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.531738997 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.531758070 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.533943892 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.533998966 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.534039021 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.534055948 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.534080029 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.534096956 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.537264109 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.537316084 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.537331104 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.537347078 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.537375927 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.538073063 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.538126945 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.538141012 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.539454937 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.539505005 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.539515972 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.539529085 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.539556026 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.539577007 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.540508986 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.540535927 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.540571928 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.540585995 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.540611982 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.543926954 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.543992043 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.544006109 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.544050932 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.544740915 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.544802904 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.545423985 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.545476913 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.545488119 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.545500994 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.545536995 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.545556068 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.550388098 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.550457954 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.552948952 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.552970886 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.553010941 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.553025961 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.553061008 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.553061008 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.553730965 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.556106091 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.556164026 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.556195021 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.556207895 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.556246042 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.556266069 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.558660984 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.558725119 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.558743954 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.558770895 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.558794975 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.558818102 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.563488007 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.563504934 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.563555956 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.563572884 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.563601017 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.566384077 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.566397905 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.566443920 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.566457033 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.566484928 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.567117929 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.567159891 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.567188025 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.567199945 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.567234039 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.567234039 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.568978071 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.569030046 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.569036961 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.569077969 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.569089890 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.569119930 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.569145918 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.574013948 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.576155901 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.581142902 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.581192017 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.581206083 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.581237078 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.581262112 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.581280947 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.582556009 CEST	49757	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.582577944 CEST	443	49757	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.583636045 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.583710909 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.583724022 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.589485884 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.589499950 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.589560032 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.589572906 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.589644909 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.589725971 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.593039989 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.593139887 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.593189955 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.593226910 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.593256950 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.600668907 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.600681067 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.600732088 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.600745916 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.600769997 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.600790024 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.602094889 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.602158070 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.602170944 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.602185965 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.602215052 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.602233887 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.602552891 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.602611065 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.606314898 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.606379032 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.606403112 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.606424093 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.606450081 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.612413883 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.612426043 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.612498045 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.612514019 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.612567902 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.619611025 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.619621992 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.619663000 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.619678020 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.619710922 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.624103069 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.624118090 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.624171019 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.624183893 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.624217033 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.624237061 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.626072884 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.626128912 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.629731894 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.629793882 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.629816055 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.629833937 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.629869938 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.629869938 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.630784035 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.630841017 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.630867958 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.630884886 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.630908966 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.630924940 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.631941080 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.631984949 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.632018089 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.632029057 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.632055044 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.632074118 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.632828951 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.632842064 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.632914066 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.632932901 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.633182049 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.633224010 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.633259058 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.633270979 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.633296013 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.633311987 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.636183023 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.636223078 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.636240005 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.636253119 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.636290073 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.636307955 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.636334896 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.636349916 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.636378050 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.636396885 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.636420012 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.636444092 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.636444092 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.639800072 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:53.644711971 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.644767046 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.644805908 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.644823074 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.644851923 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.644867897 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.644926071 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.644979954 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.645409107 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:53.666845083 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.666857958 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.666984081 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.666997910 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.673780918 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.673798084 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.673841000 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.673862934 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.673893929 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.677194118 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.677205086 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.677252054 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.677270889 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.677300930 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.679347992 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.679358006 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.679394007 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.679410934 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.679442883 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.693696976 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:53.694153070 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:53.710905075 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.710916042 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.710975885 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.710989952 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.711066008 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.711136103 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.711163044 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.711232901 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.714505911 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.714554071 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.714580059 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.714613914 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.727657080 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.727682114 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.727822065 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.727889061 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.727929115 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.727956057 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.732947111 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.732959986 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.733026028 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.733042955 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.733087063 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.741760015 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.741772890 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.741838932 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.741852999 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.741897106 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.742976904 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.746807098 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.746867895 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.746897936 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.746908903 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.746932983 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:53.756901026 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.756911993 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.756942034 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.756982088 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:53.757184982 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:54.232709885 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:54.233360052 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:54.233393908 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:54.233441114 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:54.233470917 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:54.234312057 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:54.234957933 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:54.234988928 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:54.235269070 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:54.235476017 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:54.235589027 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:54.235764980 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:54.235810041 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:54.235850096 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:54.238071918 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:54.240216970 CEST	49755	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:54.240252972 CEST	443	49755	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:54.246085882 CEST	49758	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:54.246098995 CEST	443	49758	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:54.275703907 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:54.275718927 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:54.276525021 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:54.305859089 CEST	49756	443	192.168.2.4	18.66.27.82
Aug 6, 2024 14:25:54.305896997 CEST	443	49756	18.66.27.82	192.168.2.4
Aug 6, 2024 14:25:54.343861103 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:54.344023943 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:54.344568014 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:54.365591049 CEST	49767	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:25:54.365606070 CEST	443	49767	3.227.178.4	192.168.2.4
Aug 6, 2024 14:25:54.483242989 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:25:54.483344078 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:25:54.483433962 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:25:54.484744072 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:25:54.484790087 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:25:54.623291969 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:54.623452902 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:54.623534918 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:54.624169111 CEST	49768	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:54.624216080 CEST	443	49768	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:55.126734972 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:25:55.128144979 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:25:55.128211021 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:25:55.129889965 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:25:55.129966021 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:25:55.131517887 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:25:55.131617069 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:25:55.173038960 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:25:55.173096895 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:25:55.219300032 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:25:55.284709930 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:55.284773111 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:55.284835100 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:55.286916018 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:55.286943913 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:55.376986980 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:55.377063036 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:55.377140045 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:55.377494097 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:55.377518892 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:55.414176941 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:55.414264917 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:55.414360046 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:55.414587975 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:55.414607048 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:55.823584080 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:55.823668003 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:55.823826075 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:55.824779987 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:55.824814081 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:55.946003914 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:55.946434975 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:55.946496964 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:55.947608948 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:55.947981119 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:55.948137999 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:55.948152065 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:55.948175907 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:55.965297937 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:55.965451956 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:55.968808889 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:55.968820095 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:55.969212055 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:55.996793985 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:56.002201080 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:56.044501066 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:56.065392971 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:56.065553904 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:56.066107035 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:56.066502094 CEST	49771	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:25:56.066529036 CEST	443	49771	54.208.242.91	192.168.2.4
Aug 6, 2024 14:25:56.485203028 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:56.485333920 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:56.485433102 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:56.489128113 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.502675056 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.502711058 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.506266117 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.506364107 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.519777060 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.519958973 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.520000935 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.560523033 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.648266077 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:56.648267031 CEST	49770	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:56.648307085 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:56.648325920 CEST	443	49770	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:56.671195984 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:56.671324968 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:56.720272064 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.720330954 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.779874086 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.779882908 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.779954910 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.779983044 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.779989004 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.780061007 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.780092001 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.780124903 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.780124903 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.780124903 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.780163050 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.841718912 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:56.841797113 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:56.842073917 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:56.858656883 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.858665943 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.858709097 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.858763933 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.858764887 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.858822107 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.858845949 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.858980894 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.863428116 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.863435030 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.863471985 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.863485098 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.863522053 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.863560915 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.863598108 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.863621950 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.889251947 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:56.947242022 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.947248936 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.947289944 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.947448969 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.947448969 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.947513103 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.947963953 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.948501110 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.948523998 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.948565960 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.948580980 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.948611021 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.949299097 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.950624943 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.950638056 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.950695038 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.950707912 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.950761080 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.954651117 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.954663992 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.954746962 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:56.954758883 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:56.954859972 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.025202990 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.025290012 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.025701046 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.029784918 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.029819965 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.035620928 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.035640001 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.035692930 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.035741091 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.035779953 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.035902023 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.036293030 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.036305904 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.036410093 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.036410093 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.036426067 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.036514997 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.037132025 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.037194967 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.037201881 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.037233114 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.037240982 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.037261963 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.037283897 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.052150011 CEST	49772	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:25:57.052181959 CEST	443	49772	13.32.121.40	192.168.2.4
Aug 6, 2024 14:25:57.628936052 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:57.672514915 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.683665991 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.683831930 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.717824936 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.717901945 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.718743086 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.719840050 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.764492035 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.895011902 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895037889 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895046949 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895204067 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895222902 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:57.895293951 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895327091 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895356894 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895361900 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:57.895361900 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:57.895395994 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:57.895411015 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895441055 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:57.895459890 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:57.895843029 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.895885944 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:57.896092892 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:57.959506989 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.959649086 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.959899902 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.960658073 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.960658073 CEST	49774	443	192.168.2.4	184.28.90.27
Aug 6, 2024 14:25:57.960704088 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:57.960736990 CEST	443	49774	184.28.90.27	192.168.2.4
Aug 6, 2024 14:25:58.372211933 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:58.372211933 CEST	49773	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:25:58.372287989 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:25:58.372323990 CEST	443	49773	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:01.088526964 CEST	49723	80	192.168.2.4	199.232.210.172
Aug 6, 2024 14:26:01.094768047 CEST	80	49723	199.232.210.172	192.168.2.4
Aug 6, 2024 14:26:01.094842911 CEST	49723	80	192.168.2.4	199.232.210.172
Aug 6, 2024 14:26:05.041568041 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:26:05.041621923 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:26:05.041790009 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:26:05.958621025 CEST	49769	443	192.168.2.4	172.217.16.196
Aug 6, 2024 14:26:05.958688974 CEST	443	49769	172.217.16.196	192.168.2.4
Aug 6, 2024 14:26:07.441123962 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:07.441200972 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:07.441303015 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:07.442117929 CEST	49759	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:07.442157030 CEST	443	49759	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:07.453463078 CEST	49785	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:07.453526020 CEST	443	49785	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:07.453777075 CEST	49785	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:07.454241037 CEST	49785	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:07.454271078 CEST	443	49785	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:07.559555054 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:07.559724092 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:07.559959888 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:07.560029030 CEST	443	49763	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:07.560060978 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:07.560095072 CEST	49763	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:08.084022999 CEST	443	49785	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:08.118704081 CEST	49786	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:08.118767977 CEST	443	49786	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:08.118879080 CEST	49786	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:08.129059076 CEST	49785	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:08.131644011 CEST	49785	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:08.131654978 CEST	443	49785	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:08.131839037 CEST	49786	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:08.131870031 CEST	443	49786	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:08.133194923 CEST	443	49785	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:08.138325930 CEST	49785	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:08.138530970 CEST	443	49785	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:08.138947010 CEST	49785	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:08.180512905 CEST	443	49785	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:09.040730000 CEST	443	49786	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:09.040887117 CEST	49786	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:09.040903091 CEST	443	49786	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:09.041398048 CEST	443	49786	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:09.041903019 CEST	49786	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:09.041990995 CEST	443	49786	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:09.042001963 CEST	49786	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:09.084532976 CEST	443	49786	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:09.092538118 CEST	49786	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:36.326761007 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:36.326847076 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:36.326936960 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:36.327292919 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:36.327332020 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:36.491060972 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:36.491143942 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:36.491255045 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:36.491749048 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:36.491791010 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:36.491878033 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:36.492345095 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:36.492377996 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:36.492707014 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:36.492737055 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:36.655345917 CEST	49734	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:26:36.660470963 CEST	80	49734	3.210.249.249	192.168.2.4
Aug 6, 2024 14:26:37.043390036 CEST	49747	80	192.168.2.4	3.210.249.249
Aug 6, 2024 14:26:37.049669027 CEST	80	49747	3.210.249.249	192.168.2.4
Aug 6, 2024 14:26:37.069633961 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.069649935 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.069986105 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.070023060 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.070369005 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.070379019 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.070940018 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.071027040 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.071100950 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.071151018 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.071810961 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.071876049 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.072351933 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.072412968 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.072686911 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.072701931 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.124795914 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.126797915 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.126857042 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.131351948 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.131439924 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.143826962 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.143876076 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.144782066 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.160773993 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.169466019 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.194307089 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.194355011 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.194885015 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.195080042 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.195128918 CEST	443	49790	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.195159912 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.195187092 CEST	49790	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.197145939 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.208496094 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.240502119 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.370589972 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.370650053 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.370671034 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.370723963 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.370743990 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.370780945 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.370780945 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.370811939 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.371004105 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.371057034 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.371073008 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.371191025 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.371239901 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.379175901 CEST	49791	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.379200935 CEST	443	49791	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.482014894 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.482074976 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.482117891 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.482175112 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.482242107 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.482292891 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.482319117 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.482348919 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.482367039 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.482392073 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.482775927 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.482847929 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.512531996 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.512577057 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:37.512962103 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.513245106 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.513325930 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:37.513386965 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.513684988 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.513705015 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:37.513763905 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.514548063 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.514581919 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:37.514947891 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.514978886 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:37.515218019 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:37.515243053 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:37.515949965 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.515968084 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.516190052 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.516475916 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.516510963 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.516993046 CEST	49796	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.517014980 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.517554045 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.517573118 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.517576933 CEST	49796	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.517623901 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.517823935 CEST	49796	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.517838955 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.518104076 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.518131018 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.518635035 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.518655062 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.518731117 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.519579887 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.519601107 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.519682884 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.520024061 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.520052910 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.520301104 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:37.520323038 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:37.520620108 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:37.520797968 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:37.520826101 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:37.520972013 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:37.520998001 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:37.532466888 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.532526970 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:37.532589912 CEST	49789	443	192.168.2.4	40.68.123.157
Aug 6, 2024 14:26:37.532608986 CEST	443	49789	40.68.123.157	192.168.2.4
Aug 6, 2024 14:26:38.121579885 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.132546902 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.141040087 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.141316891 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.141350985 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.141784906 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.141828060 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.141881943 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.141900063 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.142354965 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.142426014 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.143120050 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.143188953 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.143254995 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.143327951 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.143384933 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.143824100 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.143913984 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.143940926 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.145648956 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.145720959 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.146549940 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.146713018 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.146899939 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.146902084 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.146929979 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.147053003 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.147069931 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.148655891 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.148720980 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.149115086 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.149200916 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.149256945 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.149271011 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.183491945 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.183516026 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.184382915 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.184410095 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.199115038 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.199116945 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.231456041 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.231462955 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.233908892 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.234359026 CEST	49796	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.234376907 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.234963894 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.235285044 CEST	49796	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.235392094 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.235604048 CEST	49796	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.237524986 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.237835884 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.237848043 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.238626003 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.238918066 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.238939047 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.238955021 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.239013910 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.239238977 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.239897966 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.239968061 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.240348101 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.240417004 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.240483999 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.240497112 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.240546942 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.251616001 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.252630949 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.252655983 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.254601002 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.254662037 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.255290031 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.255376101 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.255858898 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.255873919 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.257352114 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.258122921 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.258138895 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.258881092 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.258944035 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.259354115 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.259409904 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.259565115 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.259577990 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.274934053 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275043011 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275132895 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275137901 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.275161028 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275209904 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.275245905 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275394917 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275448084 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.275463104 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275541067 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275636911 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275686979 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.275702000 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275784969 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.275839090 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.275852919 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.276079893 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.276521921 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.279582977 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.279642105 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.279663086 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.279700994 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.279715061 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.279748917 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.279778004 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.279778004 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.280852079 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.282092094 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282115936 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282145023 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282161951 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282169104 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.282198906 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282222033 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.282243013 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282274961 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282280922 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.282295942 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282340050 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.282357931 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282864094 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.282980919 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.282994986 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.284522057 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.287271976 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.287470102 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.287482977 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.292201996 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.292222023 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.292258978 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.292265892 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.292288065 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.292293072 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.292393923 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.310421944 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.312185049 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312299967 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312382936 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.312385082 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312416077 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312419891 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.312504053 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.312545061 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312676907 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312727928 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.312745094 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312818050 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312874079 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.312886953 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.312956095 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.313023090 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.313072920 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.313086987 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.313133001 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.340440035 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.360955000 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.361002922 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.361073017 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.361099005 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.361133099 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.361280918 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.362688065 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.362868071 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.362958908 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.363029003 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.363048077 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.363079071 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.363131046 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.363156080 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.363209963 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.363229036 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.363357067 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.363421917 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.363472939 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.363495111 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.363548994 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.363678932 CEST	49800	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.363707066 CEST	443	49800	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.363935947 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364051104 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364232063 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.364245892 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364444017 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364512920 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.364526987 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364592075 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364649057 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.364660025 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364681959 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364860058 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.364872932 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.364974022 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.365132093 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.365184069 CEST	49796	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.365513086 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.365585089 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.365643978 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.365650892 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.365674019 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.365725040 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.365994930 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.366029024 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.366086960 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.366103888 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.367131948 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.367192984 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.367216110 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.367232084 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.367436886 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.368361950 CEST	49796	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.368374109 CEST	443	49796	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.370810986 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.370862007 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.370881081 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.370920897 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.370943069 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.370978117 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.370985031 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.371009111 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.375077009 CEST	49801	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.375102043 CEST	443	49801	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.379311085 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.379360914 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.379403114 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.379417896 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.379463911 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.379487038 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.380074024 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.380120993 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.380335093 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.380590916 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.380621910 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.382261038 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.382282972 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.382340908 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.382345915 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.382384062 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.384407043 CEST	49798	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.384418964 CEST	443	49798	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.384942055 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.384975910 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.384994030 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.385021925 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.385032892 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.385076046 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.385092020 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.385142088 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.385185003 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.385189056 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.385227919 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.391318083 CEST	49795	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.391324043 CEST	443	49795	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.395471096 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.395556927 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.395663977 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.395945072 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.395982027 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.396953106 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.396972895 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.397053003 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.397263050 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.397279978 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.405334949 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.405528069 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.405590057 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.405613899 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.405708075 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.405798912 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.405849934 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.405865908 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.405916929 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.405930042 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.406028032 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.406085014 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.406097889 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.406192064 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.406275034 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.406330109 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.406344891 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.406550884 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.406605005 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.406869888 CEST	49792	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.406891108 CEST	443	49792	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.413494110 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.413611889 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.413687944 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.413697004 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.413727045 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.413875103 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.413924932 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.413944006 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.413996935 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.414161921 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.414302111 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.414359093 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.414371967 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.414444923 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.414522886 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.414578915 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.414592981 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.414642096 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.418555021 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.450330973 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.450495005 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.450561047 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.450578928 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.450617075 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.450670958 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.450726032 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.450881958 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.450930119 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.450947046 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.450973034 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.451056957 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.451082945 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.451155901 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.451204062 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.451682091 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.451745987 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.451765060 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.451790094 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.451845884 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.451859951 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.451905966 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.452076912 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.452145100 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.452164888 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.452183008 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.452212095 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.452231884 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.452455044 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.452542067 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.452605009 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.452658892 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.452678919 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.452738047 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.453711033 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.453754902 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.453788042 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.453800917 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.453803062 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.453831911 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.453874111 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.453874111 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.453900099 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.453954935 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.453979015 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.454042912 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.455537081 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.455594063 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.455630064 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.455642939 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.455674887 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.455698013 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.465568066 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.466142893 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.466197968 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.466224909 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.466237068 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.466269016 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.466289043 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.466484070 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.466548920 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.466561079 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.466633081 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.466793060 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.471532106 CEST	49797	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.471566916 CEST	443	49797	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.494211912 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.494458914 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.501827955 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.502013922 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.502095938 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.502103090 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.502147913 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.502207994 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.502223969 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.502298117 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.502376080 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.502429008 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.502444029 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.502799034 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.502870083 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.503014088 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.503070116 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.503084898 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.503514051 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.503575087 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.503587961 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.503669024 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.503736019 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.503791094 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.503804922 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.504369020 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.504426003 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.504441023 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.504518986 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.504530907 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.505059958 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.505127907 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.505139112 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.505165100 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.505215883 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.537983894 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.538073063 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.538125992 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.538182974 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.538258076 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.538319111 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.538362026 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.538420916 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.538454056 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.538508892 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.538542032 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.538605928 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.538964033 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.539030075 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.539071083 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.539133072 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.539156914 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.539213896 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.539330006 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.539395094 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.539809942 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.539869070 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.540070057 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.540128946 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.540150881 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.540210009 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.540273905 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.540476084 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.540730953 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.547144890 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.590828896 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.590950012 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.591018915 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.591042995 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.591131926 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.591187000 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.591200113 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.591248989 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.591262102 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.591289997 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.591355085 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.591367960 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.591538906 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.591593981 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.849239111 CEST	49794	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.849308014 CEST	443	49794	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.850183964 CEST	49793	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:38.850202084 CEST	443	49793	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:38.861942053 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.862000942 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.862174034 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.862699986 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.862719059 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.862801075 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.864809036 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.864836931 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.865262985 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.865288019 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.960994005 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.961067915 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.961178064 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.962363958 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:38.962402105 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:38.992607117 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.994106054 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:38.994129896 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:38.994241953 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:38.994635105 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:38.994647980 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:38.994791031 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.994797945 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.996685982 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.998656034 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:38.998743057 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:38.998769045 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.010669947 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.010704041 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.010787964 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.011073112 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.011091948 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.044517040 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.046608925 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.081643105 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.081898928 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.081926107 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.082232952 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.082458973 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.082720995 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.082787037 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.082855940 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.082879066 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.082964897 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.083352089 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.083679914 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.083765030 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.083769083 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.128494024 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.128498077 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.137944937 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.144359112 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.144530058 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.144587994 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.144598961 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.144675016 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.144723892 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.144730091 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.144812107 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.144893885 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.144927979 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.144934893 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.145010948 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.145016909 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.145457029 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.145509005 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.145515919 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.199067116 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.199075937 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.200761080 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.200773954 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.200788975 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.200793028 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.200802088 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.200830936 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.200856924 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.200860977 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.200886011 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.200886011 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.200891972 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.200923920 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.200923920 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.203521013 CEST	49803	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.203537941 CEST	443	49803	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.212552071 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.212598085 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.212610960 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.212640047 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.212666035 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.212706089 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.212965965 CEST	49804	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.212994099 CEST	443	49804	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.233899117 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.233958006 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.233973026 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.234057903 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.234102011 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.234108925 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.234216928 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.234292984 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.234298944 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.234421015 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.234790087 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.251440048 CEST	49802	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:39.251451015 CEST	443	49802	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:39.462349892 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.462775946 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.462806940 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.463974953 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.464262009 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.464447975 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.464453936 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.464567900 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.465523005 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.465785027 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.465802908 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.466732025 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.466736078 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.466793060 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.467061996 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.467071056 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.467467070 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.467516899 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.467681885 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.467777014 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.467789888 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.468018055 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.468100071 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.468213081 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.508502007 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.513591051 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.513592958 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.557893991 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.586538076 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.586675882 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.586781025 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.595201015 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.595257998 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.595321894 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.595361948 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.595405102 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.595422029 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.595460892 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.596141100 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.596204042 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.599538088 CEST	49806	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.599570036 CEST	443	49806	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.599770069 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.599843979 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.616106987 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.616146088 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.616195917 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.616194963 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.616209030 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.616250992 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.616270065 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.616358995 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.616358995 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.616380930 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.616924047 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.616962910 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.616971016 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.617037058 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.617075920 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.617086887 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.621009111 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.621059895 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.621068954 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.668776035 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.702971935 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703012943 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703031063 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703090906 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.703123093 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703167915 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.703208923 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703485966 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703514099 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703525066 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.703533888 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703572989 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.703586102 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703641891 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.703680038 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.703689098 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.704463005 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.704509020 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.704516888 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.704608917 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.704652071 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.704660892 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.705146074 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.705182076 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.705204010 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.705213070 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.705250025 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.705250978 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.705261946 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.705306053 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.705315113 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.745310068 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.745335102 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.745394945 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.745408058 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.745455027 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.757431030 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:39.789597034 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.789664984 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.789702892 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.789716959 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.789726973 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.789771080 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.789777040 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.790122032 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.790165901 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.790174007 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.790184975 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:39.790214062 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.790234089 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:39.811842918 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:39.860250950 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.860701084 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:39.860728025 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:39.860763073 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.861469984 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.861519098 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.864645958 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:39.864691019 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:39.864722967 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:39.868237019 CEST	49805	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.868307114 CEST	443	49805	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.869605064 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.869663954 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.869729996 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.911354065 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.911375999 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:39.921689034 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.921744108 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.921812057 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.926623106 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:39.926933050 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:39.927970886 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.928000927 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.929807901 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.929826021 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.930227995 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:39.930255890 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:39.971060991 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.971098900 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.971215963 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:39.971237898 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.971303940 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:39.989516973 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.445106983 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.445147038 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.445228100 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.446367979 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.446381092 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.446455002 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.448208094 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.448226929 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.449239969 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.449254036 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.455327034 CEST	49809	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:40.455338955 CEST	443	49809	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:40.457604885 CEST	49807	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.457670927 CEST	443	49807	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.458929062 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.459007978 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.459067106 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.459217072 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.459235907 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.459497929 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.459920883 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.459954977 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.460710049 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.460740089 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.499721050 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.519661903 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.519687891 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.521591902 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.522171974 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.522455931 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.522526026 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.538474083 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.539340019 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.539349079 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.539769888 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.540828943 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.540951014 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.541085005 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.564538002 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.575443983 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.584541082 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.633645058 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.633708954 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.633733034 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.633765936 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.633785963 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.633793116 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.633801937 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.633826971 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.667304993 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.667371988 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.667395115 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.667418003 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.667447090 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.667486906 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.667515993 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.676105976 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.676158905 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.676203012 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.676222086 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.676239014 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.676254034 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.676280022 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.678559065 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.678580999 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.678627014 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.678658009 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.678661108 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.678684950 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.678693056 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.678705931 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.678716898 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.678738117 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.678740025 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.678752899 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.720151901 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.720182896 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.720225096 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.720242977 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.720256090 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.720266104 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.720274925 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.720290899 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.720294952 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.720398903 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.720402956 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.720427990 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.720472097 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.722054005 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.722099066 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.722115040 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.722126961 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.722151995 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.722167015 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.733558893 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.733654976 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.733671904 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.733827114 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.733963013 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.734982967 CEST	49810	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.735003948 CEST	443	49810	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.752870083 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.752924919 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.752943993 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.752954006 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.752978086 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.753731012 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.753772974 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.753791094 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.753798008 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.753829002 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.758337975 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.758373022 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.758409023 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.758434057 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.758443117 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.758471966 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.758491039 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.758495092 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.758557081 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.764312029 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.764353037 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.764365911 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.764379025 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.764400005 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.764414072 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.765640020 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.765690088 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.765706062 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.765718937 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.765736103 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.765757084 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.767431021 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.767502069 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.767512083 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.767604113 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.767647982 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.768511057 CEST	49808	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:40.768524885 CEST	443	49808	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:40.843873024 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.843933105 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.843965054 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.843985081 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.844623089 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.844696999 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.844733953 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.844747066 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.844762087 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.844788074 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.846121073 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.846189022 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.846205950 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.846225023 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.846251011 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.846263885 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.855906010 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.855951071 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.855989933 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.855997086 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.856019974 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.856041908 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.906996012 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.907031059 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.907098055 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.907352924 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.907377005 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.909728050 CEST	49818	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.909735918 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.909795046 CEST	49818	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.910090923 CEST	49818	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.910103083 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.934123039 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.934185982 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.934205055 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.934216976 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.934236050 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.934254885 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.934438944 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.934482098 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.934492111 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.934509993 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.934535980 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.934549093 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.935457945 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.935509920 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.935516119 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.935534000 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.935564041 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.935575008 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.936295986 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.936340094 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.936357021 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.936367035 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.936394930 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.936412096 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.937340975 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.937387943 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.937407970 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.937421083 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.937433958 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.937464952 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.938308001 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.938358068 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.938374043 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.938385963 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.938410044 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.938426018 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.939305067 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.939344883 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.939361095 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.939373016 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.939394951 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.939410925 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.947124004 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.947174072 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.947206974 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:40.947216034 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:40.947262049 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.006324053 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.006408930 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.006472111 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.006649017 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.006665945 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.009421110 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.009444952 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.009640932 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.009923935 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.009952068 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.021120071 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.021332026 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.021342039 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.024863958 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.024923086 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.025249958 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.025455952 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.025461912 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.025610924 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.025677919 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.025690079 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.025708914 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.025728941 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.025762081 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026073933 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026120901 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026143074 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026154041 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026171923 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026185989 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026545048 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026586056 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026616096 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026624918 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026643038 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026660919 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026731968 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026778936 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026792049 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026799917 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026814938 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.026906013 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.026956081 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.027316093 CEST	49811	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.027328014 CEST	443	49811	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.045439005 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.045833111 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.045881033 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.046634912 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.046695948 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.047171116 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.047230959 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.047367096 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.047384024 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.058528900 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.058968067 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.058995962 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.059951067 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.060007095 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.061173916 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.061240911 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.061302900 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.061326027 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.072530985 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.076178074 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.076188087 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.091517925 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.106528044 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.121885061 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.158830881 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.158849001 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.158854961 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.158910036 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.158915043 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.158937931 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.158947945 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.158970118 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.158981085 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.158981085 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.158992052 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.159009933 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.169099092 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.169120073 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.169126987 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.169184923 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.169214010 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.203756094 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.203774929 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.203780890 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.203850031 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.203847885 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.203896046 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.203921080 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.203948021 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.203972101 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.209881067 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.210099936 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.210112095 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.210580111 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.210859060 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.210941076 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.210966110 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.213821888 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.232820988 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.232841015 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.232919931 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.232929945 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.232968092 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.232985973 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.246232986 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.246247053 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.246305943 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.246315002 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.246795893 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.252538919 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.258980989 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.258990049 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.259053946 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.259072065 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.259100914 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.259140015 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.259166002 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.259166002 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.259196997 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.259308100 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.259371042 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.261612892 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.261630058 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.261699915 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.261714935 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.261765957 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.262305975 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.262356997 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.266205072 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.272510052 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.272521973 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.272582054 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.272595882 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.272644043 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.285079956 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.285095930 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.285170078 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.285187960 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.285240889 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.296688080 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.296700954 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.296753883 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.296772957 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.296802998 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.297736883 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.297811985 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.297862053 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.297880888 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.297905922 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.319082022 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.319147110 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.319171906 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.319205999 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.319230080 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.319237947 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.320739031 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.320786953 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.320801020 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.320826054 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.320847034 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.320867062 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.321866989 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.321911097 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.321939945 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.321952105 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.321974993 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.321985960 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.344953060 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.586900949 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.586918116 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.586970091 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.586996078 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.587044001 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.587059021 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.587073088 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.588048935 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.588123083 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.588180065 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.588201046 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.588244915 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.588268995 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.588279963 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.588606119 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.588650942 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.588675022 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.588687897 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.588726044 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.589186907 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.589231968 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.589262009 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.589276075 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.589306116 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.589575052 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.589613914 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.589648962 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.589660883 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.589684963 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.590337038 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.590353012 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.590408087 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.590420008 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.590492010 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.590558052 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.590570927 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.590615034 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.590629101 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.590655088 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.590677977 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.591002941 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591017008 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591088057 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.591100931 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591291904 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.591599941 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591650009 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591664076 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.591671944 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591698885 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.591706991 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.591841936 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591886997 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591893911 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.591914892 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.591938972 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.591959000 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592046976 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592093945 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592106104 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592116117 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592144012 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592152119 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592262983 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592300892 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592322111 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592328072 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592341900 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592359066 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592434883 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592494965 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592510939 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592534065 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.592561007 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.592567921 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.593204021 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.594363928 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.594429970 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.594450951 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.594456911 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.594480991 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.594490051 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.595541000 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.595580101 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.595626116 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.595647097 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.595670938 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.596831083 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.596896887 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.596926928 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.596940041 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.596966028 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.597306967 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.597321033 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.597369909 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.597388983 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.597410917 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.597489119 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.598272085 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.598287106 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.598347902 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.598361969 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.598431110 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.598520041 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.598568916 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.598592043 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.598599911 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.598628044 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.598639011 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.598942041 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.598983049 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.599019051 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.599035025 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.599060059 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.600476027 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.600549936 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.600564003 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.600573063 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.600593090 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.600601912 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.600656986 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.600683928 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.600723982 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.600759983 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.600789070 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.600811958 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.601073027 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.601118088 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.601135015 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.601141930 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.601169109 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.601177931 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.601290941 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.601331949 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.601361990 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.601377964 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.601406097 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.602086067 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602159023 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602310896 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602360010 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.602406979 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602420092 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602478981 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.602498055 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602511883 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602555990 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602555990 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.602579117 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602619886 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.602619886 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.602619886 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.602648020 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602874994 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.602890015 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.603086948 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.603095055 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.603250027 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.603274107 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.603279114 CEST	49818	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.603286982 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.603302002 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.603308916 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.603317022 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.603326082 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.603332996 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.603344917 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.603365898 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.603384018 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.603388071 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.603413105 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.603416920 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.603421926 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.603760004 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.603789091 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.604059935 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.604120016 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.604463100 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.604475975 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.604499102 CEST	49818	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.604564905 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.604577065 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.604588985 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.604631901 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.605010033 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.605051994 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.605098963 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.605108976 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.605115891 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.605123997 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.605154991 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.605175972 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.605464935 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.605504990 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.605535030 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.605555058 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.605585098 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.606360912 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.606472969 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.606971979 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.606987000 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607033968 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.607048988 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607078075 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.607099056 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.607148886 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607191086 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607202053 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.607223988 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607250929 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.607366085 CEST	49813	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.607377052 CEST	443	49813	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607768059 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607781887 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607820988 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.607827902 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.607846022 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.607862949 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.608478069 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.608555079 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.608567953 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.608577013 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.608604908 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.609086990 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.609128952 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.609168053 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.609174967 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.609198093 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.609956980 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.609972954 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.610027075 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.610033989 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.610136986 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.610235929 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.610275984 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.610296965 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.610308886 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.610333920 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.611628056 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.611643076 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.611699104 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.611707926 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.611733913 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.611743927 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.612051010 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612091064 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612114906 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.612123013 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612153053 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.612359047 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612409115 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612422943 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.612438917 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612468004 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.612613916 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612663031 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.612670898 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612711906 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.612768888 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612926960 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612941027 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.612988949 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.613024950 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.613024950 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.613030910 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.613286018 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.613594055 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.613609076 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.613663912 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.613672018 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.613962889 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.614392042 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.614404917 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.614432096 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.614439011 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.614444971 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.614478111 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.614511013 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.614576101 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.616187096 CEST	49818	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.616414070 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.616498947 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.616506100 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.616595984 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.616738081 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.623384953 CEST	49816	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.623410940 CEST	443	49816	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.623675108 CEST	49815	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.623687029 CEST	443	49815	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.652914047 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.660495043 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.660516977 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.664792061 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.678327084 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.678400993 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.678426981 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.678435087 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.678486109 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.679042101 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.679114103 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.679138899 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.679145098 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.679171085 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.679183006 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.683809042 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.683859110 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.683886051 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.683892012 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.683936119 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.683936119 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.689047098 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.689093113 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.689120054 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.689126015 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.689169884 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.724944115 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725136995 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725197077 CEST	49818	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.725373983 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725406885 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725416899 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725471973 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725482941 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.725526094 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725565910 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725589991 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.725610018 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.725611925 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725670099 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725816011 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.725825071 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.725888014 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.726820946 CEST	49818	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.726856947 CEST	443	49818	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.728938103 CEST	49817	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.728946924 CEST	443	49817	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.749428988 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.749718904 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.749738932 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.750036955 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.750648975 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.750711918 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.750757933 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.770632029 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.770704031 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.770725012 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.770741940 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.770760059 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.770778894 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.770986080 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.771038055 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.771064997 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.771071911 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.771090984 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.771111965 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.771503925 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.771558046 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.771563053 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.771591902 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.771637917 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.771748066 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.771903992 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.772319078 CEST	49812	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.772327900 CEST	443	49812	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.792656898 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.792726994 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.792948008 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.793131113 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.793162107 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.796499014 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:41.797765017 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:41.815782070 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.815803051 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.815866947 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.815907955 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.815951109 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.815988064 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.816008091 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.817287922 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.817334890 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.817357063 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.817368984 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.817418098 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.828147888 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.828203917 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.828236103 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.828249931 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.828274965 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.828298092 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.828309059 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.828422070 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:41.828480005 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.828610897 CEST	49819	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:41.828634977 CEST	443	49819	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.036176920 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.036196947 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.036202908 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.036238909 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.036262989 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.036298037 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.036319971 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.036345005 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.036365986 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.123152971 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.123219013 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.123267889 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.123281002 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.123322010 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.125293970 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.125333071 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.125360012 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.125365019 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.125389099 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.125410080 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.127626896 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.127688885 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.130470037 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.130547047 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.210587025 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.210664988 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.210699081 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.210719109 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.210773945 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.234515905 CEST	49820	443	192.168.2.4	13.32.121.40
Aug 6, 2024 14:26:42.234539032 CEST	443	49820	13.32.121.40	192.168.2.4
Aug 6, 2024 14:26:42.369626045 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.416127920 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.420774937 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.420789957 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.422276974 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.443686008 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.444142103 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.444984913 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.488575935 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.759485960 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.759637117 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.759707928 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.760436058 CEST	49821	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.760478973 CEST	443	49821	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.765048981 CEST	49822	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.765077114 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:42.765300989 CEST	49822	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.765474081 CEST	49822	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:42.765481949 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:43.359899044 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:43.360249043 CEST	49822	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:43.360275030 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:43.360599995 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:43.361090899 CEST	49822	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:43.361154079 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:43.361251116 CEST	49822	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:43.404501915 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:43.488424063 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:43.488496065 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:43.488547087 CEST	49822	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:43.489685059 CEST	49822	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:43.489707947 CEST	443	49822	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:50.768191099 CEST	49724	80	192.168.2.4	199.232.210.172
Aug 6, 2024 14:26:50.773554087 CEST	80	49724	199.232.210.172	192.168.2.4
Aug 6, 2024 14:26:50.773602009 CEST	49724	80	192.168.2.4	199.232.210.172
Aug 6, 2024 14:26:50.812428951 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:50.812447071 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:50.812505007 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:50.813036919 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:50.813118935 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:50.813188076 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:50.813617945 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:50.813628912 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:50.813637972 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:50.813654900 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.381308079 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.409229040 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.441960096 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:51.454078913 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:51.736054897 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:51.736069918 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.736088991 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:51.736167908 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.737163067 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.737237930 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.737821102 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:51.737915039 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.738512993 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:51.738593102 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:51.738650084 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:51.779077053 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:51.780544043 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.035499096 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.035558939 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.035624027 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.035630941 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.035682917 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.035701990 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.035825968 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.035876036 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.035876036 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.093755007 CEST	49824	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.093765020 CEST	443	49824	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.120376110 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.121303082 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.121365070 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.121583939 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.122519970 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.122539997 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.123090029 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.123123884 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.123147011 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.123862028 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.123879910 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.124299049 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.124322891 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.124346972 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.124692917 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.124701023 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.160496950 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.241411924 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.241472960 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.241616011 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.241635084 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.241739035 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.243138075 CEST	49825	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.243174076 CEST	443	49825	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.691024065 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.691355944 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.691376925 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.691834927 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.692101955 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.692193031 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.692217112 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.700256109 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.700422049 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.700438023 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.700711966 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.700957060 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.701010942 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.701133013 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.714143038 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.714493990 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.714500904 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.715904951 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.715970039 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.716934919 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.717006922 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.717359066 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.717370033 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.732573032 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.734966993 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.744522095 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.763570070 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.810741901 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.810777903 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.811153889 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.813612938 CEST	49826	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.813673019 CEST	443	49826	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.822086096 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.822227001 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.822287083 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.822401047 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.822422028 CEST	443	49828	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.822446108 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.822472095 CEST	49828	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.841213942 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.841279984 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.841362000 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.845709085 CEST	49827	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.845717907 CEST	443	49827	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.848074913 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.848093987 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:52.848344088 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.848344088 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:52.848357916 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.112654924 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.112663031 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.112869024 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.113778114 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.113786936 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.114981890 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.115010023 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.115087032 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.115272045 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.115283012 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.143376112 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.143385887 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.143529892 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.143767118 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.143776894 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.191708088 CEST	49785	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:53.191718102 CEST	443	49785	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:53.415440083 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.415828943 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.415836096 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.416961908 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.417391062 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.417464972 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.417696953 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.460530996 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.684750080 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.684887886 CEST	443	49829	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.685121059 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.685121059 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.685142040 CEST	49829	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.687282085 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.687537909 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.687546015 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.687793970 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.688055038 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.688111067 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.688226938 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.690068007 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.690386057 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.690445900 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.690941095 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.691266060 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.691342115 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.691353083 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.732495070 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.732573032 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.735765934 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.736123085 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.736145973 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.737267017 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.737554073 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.737728119 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.737765074 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.741081953 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.780513048 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.787386894 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.809799910 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.809814930 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.809860945 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.809874058 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.809958935 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.811000109 CEST	49830	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.811013937 CEST	443	49830	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.818732023 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.818977118 CEST	443	49831	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.819137096 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.819137096 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.819138050 CEST	49831	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.821710110 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.821723938 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.822074890 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.822276115 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.822289944 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.854602098 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.854736090 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.854968071 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.855051041 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.855062962 CEST	443	49832	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:53.855073929 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:53.855117083 CEST	49832	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.088618994 CEST	49786	443	192.168.2.4	3.227.178.4
Aug 6, 2024 14:26:54.088632107 CEST	443	49786	3.227.178.4	192.168.2.4
Aug 6, 2024 14:26:54.398282051 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.398597956 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.398605108 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.398845911 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.399104118 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.399147987 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.399388075 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.440572023 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.705168962 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.705188036 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.705200911 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.705245972 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.705251932 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.705308914 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.705308914 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.707678080 CEST	49834	443	192.168.2.4	142.250.185.132
Aug 6, 2024 14:26:54.707710028 CEST	443	49834	142.250.185.132	192.168.2.4
Aug 6, 2024 14:26:54.707781076 CEST	49834	443	192.168.2.4	142.250.185.132
Aug 6, 2024 14:26:54.707988977 CEST	49834	443	192.168.2.4	142.250.185.132
Aug 6, 2024 14:26:54.707993984 CEST	443	49834	142.250.185.132	192.168.2.4
Aug 6, 2024 14:26:54.717303038 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.717354059 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.717381001 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.717386007 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.717422962 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.719144106 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.719158888 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.719235897 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.719235897 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.719249964 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.720510006 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.720555067 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:54.720699072 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.720699072 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.720788002 CEST	49833	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:54.720801115 CEST	443	49833	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:55.364515066 CEST	443	49834	142.250.185.132	192.168.2.4
Aug 6, 2024 14:26:55.366461039 CEST	49834	443	192.168.2.4	142.250.185.132
Aug 6, 2024 14:26:55.366478920 CEST	443	49834	142.250.185.132	192.168.2.4
Aug 6, 2024 14:26:55.366724968 CEST	443	49834	142.250.185.132	192.168.2.4
Aug 6, 2024 14:26:55.367141008 CEST	49834	443	192.168.2.4	142.250.185.132
Aug 6, 2024 14:26:55.367196083 CEST	443	49834	142.250.185.132	192.168.2.4
Aug 6, 2024 14:26:55.408972025 CEST	49834	443	192.168.2.4	142.250.185.132
Aug 6, 2024 14:26:56.629920959 CEST	49835	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:56.629949093 CEST	443	49835	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:56.630012989 CEST	49835	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:56.630502939 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:56.630517006 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:56.630569935 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:56.633531094 CEST	49837	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:56.633614063 CEST	443	49837	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:56.633687019 CEST	49837	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:56.634368896 CEST	49838	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:56.634375095 CEST	443	49838	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:56.634430885 CEST	49838	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:56.635083914 CEST	49838	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:56.635092974 CEST	443	49838	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:56.635596037 CEST	49837	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:56.635632038 CEST	443	49837	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:56.635869026 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:56.635884047 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:56.636020899 CEST	49835	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:56.636055946 CEST	443	49835	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.092705011 CEST	443	49838	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:57.094299078 CEST	49838	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:57.094315052 CEST	443	49838	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:57.094764948 CEST	443	49838	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:57.095355034 CEST	49838	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:57.095437050 CEST	443	49838	104.18.10.207	192.168.2.4
Aug 6, 2024 14:26:57.119977951 CEST	443	49837	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:57.120320082 CEST	49837	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:57.120379925 CEST	443	49837	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:57.121022940 CEST	443	49837	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:57.121356964 CEST	49837	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:57.121464014 CEST	443	49837	104.17.25.14	192.168.2.4
Aug 6, 2024 14:26:57.136969090 CEST	49838	443	192.168.2.4	104.18.10.207
Aug 6, 2024 14:26:57.175493002 CEST	49837	443	192.168.2.4	104.17.25.14
Aug 6, 2024 14:26:57.206082106 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.207858086 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.207865000 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.208573103 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.209209919 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.209285021 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.209342957 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.229836941 CEST	443	49835	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.230297089 CEST	49835	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.230321884 CEST	443	49835	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.231039047 CEST	443	49835	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.231523037 CEST	49835	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.231801987 CEST	443	49835	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.252280951 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.252285004 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.281084061 CEST	49835	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.325146914 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.325314999 CEST	443	49836	54.208.242.91	192.168.2.4
Aug 6, 2024 14:26:57.326980114 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.329031944 CEST	49836	443	192.168.2.4	54.208.242.91
Aug 6, 2024 14:26:57.329042912 CEST	443	49836	54.208.242.91	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 6, 2024 14:25:50.013051987 CEST	53	56353	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.064997911 CEST	53	61607	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.143085957 CEST	57234	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.143342972 CEST	56143	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.144789934 CEST	65501	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.145188093 CEST	58865	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.146918058 CEST	52414	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.147104979 CEST	61913	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.150007010 CEST	53	51947	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.151892900 CEST	53	65501	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.152863026 CEST	53	58865	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.155432940 CEST	53	52414	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.159360886 CEST	53	61913	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.183691978 CEST	53	57234	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.399107933 CEST	53	56143	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.671669006 CEST	63528	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.671984911 CEST	54125	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.682914019 CEST	53	54125	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.789457083 CEST	53	63528	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:50.997360945 CEST	53067	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:50.997627974 CEST	55702	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.008408070 CEST	53	55702	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.008706093 CEST	53	53067	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.059639931 CEST	53	51270	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.059653997 CEST	53	52213	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.340351105 CEST	53	53501	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.548911095 CEST	52593	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.549196959 CEST	49991	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:51.560820103 CEST	53	52593	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:51.560920954 CEST	53	49991	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:54.445558071 CEST	50724	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:54.445826054 CEST	50750	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:54.453509092 CEST	53	50724	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:54.453526974 CEST	53	50750	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:55.369225979 CEST	65473	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:55.369486094 CEST	58119	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:25:55.394355059 CEST	53	58119	1.1.1.1	192.168.2.4
Aug 6, 2024 14:25:55.406584024 CEST	53	65473	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:01.665709972 CEST	138	138	192.168.2.4	192.168.2.255
Aug 6, 2024 14:26:02.866173983 CEST	53	50435	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:36.473751068 CEST	49324	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:36.474006891 CEST	50085	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:36.481323957 CEST	53	49324	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:36.485781908 CEST	53	50085	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:37.502362013 CEST	55170	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:37.503418922 CEST	57352	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:37.509448051 CEST	53	55170	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:37.510961056 CEST	53	57352	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:37.511584044 CEST	56230	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:37.511826992 CEST	53861	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:37.518237114 CEST	53	50842	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:37.518590927 CEST	53	53861	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:37.518987894 CEST	53	56230	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:38.961481094 CEST	49556	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:38.961606026 CEST	60417	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:38.982959986 CEST	53	49556	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:38.988789082 CEST	53	60417	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:38.999841928 CEST	53432	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:39.000107050 CEST	53614	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:39.007194042 CEST	53	53432	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:39.007833004 CEST	53	53614	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:40.457218885 CEST	53	54901	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:50.774756908 CEST	53	55457	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:52.835354090 CEST	52798	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:52.835526943 CEST	52537	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:52.845812082 CEST	53	52537	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:52.846987009 CEST	53	52798	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:54.498161077 CEST	50161	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:54.498400927 CEST	65099	53	192.168.2.4	1.1.1.1
Aug 6, 2024 14:26:54.706684113 CEST	53	65099	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:54.706954956 CEST	53	50161	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:57.358536959 CEST	53	58356	1.1.1.1	192.168.2.4
Aug 6, 2024 14:26:59.819936991 CEST	53	50775	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 6, 2024 14:25:50.399410963 CEST	192.168.2.4	1.1.1.1	c266	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 6, 2024 14:25:50.143085957 CEST	192.168.2.4	1.1.1.1	0x463b	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.143342972 CEST	192.168.2.4	1.1.1.1	0x465f	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Aug 6, 2024 14:25:50.144789934 CEST	192.168.2.4	1.1.1.1	0x56af	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.145188093 CEST	192.168.2.4	1.1.1.1	0x78a6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 6, 2024 14:25:50.146918058 CEST	192.168.2.4	1.1.1.1	0x57d	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.147104979 CEST	192.168.2.4	1.1.1.1	0x869c	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Aug 6, 2024 14:25:50.671669006 CEST	192.168.2.4	1.1.1.1	0xd40e	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.671984911 CEST	192.168.2.4	1.1.1.1	0x6914	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Aug 6, 2024 14:25:50.997360945 CEST	192.168.2.4	1.1.1.1	0x442	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.997627974 CEST	192.168.2.4	1.1.1.1	0xd300	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 6, 2024 14:25:51.548911095 CEST	192.168.2.4	1.1.1.1	0x84a4	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:51.549196959 CEST	192.168.2.4	1.1.1.1	0x1a57	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Aug 6, 2024 14:25:54.445558071 CEST	192.168.2.4	1.1.1.1	0xcc4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:54.445826054 CEST	192.168.2.4	1.1.1.1	0x1fc7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 6, 2024 14:25:55.369225979 CEST	192.168.2.4	1.1.1.1	0xa44	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:55.369486094 CEST	192.168.2.4	1.1.1.1	0x6bf0	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Aug 6, 2024 14:26:36.473751068 CEST	192.168.2.4	1.1.1.1	0xcbb0	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:36.474006891 CEST	192.168.2.4	1.1.1.1	0x562e	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Aug 6, 2024 14:26:37.502362013 CEST	192.168.2.4	1.1.1.1	0x45e2	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:37.503418922 CEST	192.168.2.4	1.1.1.1	0x211f	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 6, 2024 14:26:37.511584044 CEST	192.168.2.4	1.1.1.1	0xfba1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:37.511826992 CEST	192.168.2.4	1.1.1.1	0x1b8f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 6, 2024 14:26:38.961481094 CEST	192.168.2.4	1.1.1.1	0x7bed	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:38.961606026 CEST	192.168.2.4	1.1.1.1	0x56c5	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Aug 6, 2024 14:26:38.999841928 CEST	192.168.2.4	1.1.1.1	0x2f42	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:39.000107050 CEST	192.168.2.4	1.1.1.1	0x1439	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 6, 2024 14:26:52.835354090 CEST	192.168.2.4	1.1.1.1	0xb48	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:52.835526943 CEST	192.168.2.4	1.1.1.1	0x2269	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Aug 6, 2024 14:26:54.498161077 CEST	192.168.2.4	1.1.1.1	0x8275	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:54.498400927 CEST	192.168.2.4	1.1.1.1	0xb71	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 6, 2024 14:25:50.151892900 CEST	1.1.1.1	192.168.2.4	0x56af	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.151892900 CEST	1.1.1.1	192.168.2.4	0x56af	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.152863026 CEST	1.1.1.1	192.168.2.4	0x78a6	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 6, 2024 14:25:50.155432940 CEST	1.1.1.1	192.168.2.4	0x57d	No error (0)	res.cisco.com		3.210.249.249	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.155432940 CEST	1.1.1.1	192.168.2.4	0x57d	No error (0)	res.cisco.com		54.208.242.91	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.155432940 CEST	1.1.1.1	192.168.2.4	0x57d	No error (0)	res.cisco.com		3.227.178.4	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.183691978 CEST	1.1.1.1	192.168.2.4	0x463b	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 6, 2024 14:25:50.183691978 CEST	1.1.1.1	192.168.2.4	0x463b	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.27.82	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.183691978 CEST	1.1.1.1	192.168.2.4	0x463b	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.27.40	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.183691978 CEST	1.1.1.1	192.168.2.4	0x463b	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.27.128	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.183691978 CEST	1.1.1.1	192.168.2.4	0x463b	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.27.38	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.399107933 CEST	1.1.1.1	192.168.2.4	0x465f	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 6, 2024 14:25:50.789457083 CEST	1.1.1.1	192.168.2.4	0xd40e	No error (0)	res.cisco.com		3.227.178.4	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.789457083 CEST	1.1.1.1	192.168.2.4	0xd40e	No error (0)	res.cisco.com		54.208.242.91	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:50.789457083 CEST	1.1.1.1	192.168.2.4	0xd40e	No error (0)	res.cisco.com		3.210.249.249	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:51.008408070 CEST	1.1.1.1	192.168.2.4	0xd300	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 6, 2024 14:25:51.008706093 CEST	1.1.1.1	192.168.2.4	0x442	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:51.008706093 CEST	1.1.1.1	192.168.2.4	0x442	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:51.560820103 CEST	1.1.1.1	192.168.2.4	0x84a4	No error (0)	res.cisco.com		54.208.242.91	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:51.560820103 CEST	1.1.1.1	192.168.2.4	0x84a4	No error (0)	res.cisco.com		3.227.178.4	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:51.560820103 CEST	1.1.1.1	192.168.2.4	0x84a4	No error (0)	res.cisco.com		3.210.249.249	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:54.453509092 CEST	1.1.1.1	192.168.2.4	0xcc4	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:54.453526974 CEST	1.1.1.1	192.168.2.4	0x1fc7	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 6, 2024 14:25:55.394355059 CEST	1.1.1.1	192.168.2.4	0x6bf0	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 6, 2024 14:25:55.406584024 CEST	1.1.1.1	192.168.2.4	0xa44	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 6, 2024 14:25:55.406584024 CEST	1.1.1.1	192.168.2.4	0xa44	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.40	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:55.406584024 CEST	1.1.1.1	192.168.2.4	0xa44	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.62	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:55.406584024 CEST	1.1.1.1	192.168.2.4	0xa44	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.35	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:25:55.406584024 CEST	1.1.1.1	192.168.2.4	0xa44	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.110	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:36.481323957 CEST	1.1.1.1	192.168.2.4	0xcbb0	No error (0)	res.cisco.com		54.208.242.91	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:36.481323957 CEST	1.1.1.1	192.168.2.4	0xcbb0	No error (0)	res.cisco.com		3.210.249.249	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:36.481323957 CEST	1.1.1.1	192.168.2.4	0xcbb0	No error (0)	res.cisco.com		3.227.178.4	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:37.509448051 CEST	1.1.1.1	192.168.2.4	0x45e2	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:37.509448051 CEST	1.1.1.1	192.168.2.4	0x45e2	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:37.510961056 CEST	1.1.1.1	192.168.2.4	0x211f	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Aug 6, 2024 14:26:37.518590927 CEST	1.1.1.1	192.168.2.4	0x1b8f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 6, 2024 14:26:37.518987894 CEST	1.1.1.1	192.168.2.4	0xfba1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:37.518987894 CEST	1.1.1.1	192.168.2.4	0xfba1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:38.982959986 CEST	1.1.1.1	192.168.2.4	0x7bed	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 6, 2024 14:26:38.982959986 CEST	1.1.1.1	192.168.2.4	0x7bed	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.40	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:38.982959986 CEST	1.1.1.1	192.168.2.4	0x7bed	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.35	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:38.982959986 CEST	1.1.1.1	192.168.2.4	0x7bed	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.62	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:38.982959986 CEST	1.1.1.1	192.168.2.4	0x7bed	No error (0)	d2qj7djftjbj85.cloudfront.net		13.32.121.110	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:38.988789082 CEST	1.1.1.1	192.168.2.4	0x56c5	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 6, 2024 14:26:39.007194042 CEST	1.1.1.1	192.168.2.4	0x2f42	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:39.007194042 CEST	1.1.1.1	192.168.2.4	0x2f42	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:39.007833004 CEST	1.1.1.1	192.168.2.4	0x1439	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Aug 6, 2024 14:26:52.846987009 CEST	1.1.1.1	192.168.2.4	0xb48	No error (0)	res.cisco.com		54.208.242.91	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:52.846987009 CEST	1.1.1.1	192.168.2.4	0xb48	No error (0)	res.cisco.com		3.227.178.4	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:52.846987009 CEST	1.1.1.1	192.168.2.4	0xb48	No error (0)	res.cisco.com		3.210.249.249	A (IP address)	IN (0x0001)	false
Aug 6, 2024 14:26:54.706684113 CEST	1.1.1.1	192.168.2.4	0xb71	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 6, 2024 14:26:54.706954956 CEST	1.1.1.1	192.168.2.4	0x8275	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

static.cres-aws.com

res.cisco.com

https:

maxcdn.bootstrapcdn.com

fonts.gstatic.com

accounts.youtube.com

play.google.com

www.google.com

slscr.update.microsoft.com

fs.microsoft.com

www.gstatic.com

accounts.google.com

clients1.google.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	3.210.249.249	80	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 6, 2024 14:25:50.176687002 CEST	477	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 6, 2024 14:25:50.667285919 CEST	483	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Tue, 06 Aug 2024 12:25:50 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Aug 6, 2024 14:25:51.538065910 CEST	491	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 6, 2024 14:25:51.649341106 CEST	497	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Tue, 06 Aug 2024 12:25:51 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Aug 6, 2024 14:26:36.655345917 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49733	3.210.249.249	80	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 6, 2024 14:25:50.177073956 CEST	12360	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675%2Ecorpmailsvcs%2Ecom%27,%0D%0A%27keysize%27%3A24,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImprbWFydGluQGNvbXBhc3NsbGMuY29tIiA8amttYXJ0aW5AY29tcGFzc2xsYy5jb20%2B%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%2712GDcAg0ond%2BMZUNyAGlDQ%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1722871039946%2Ehtml%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A13,%5B0,3136%5D,%27Body-1722871039946%2Ehtml%27,%0D%0A%27UTF-16%27%5D,%0D%0A%5B%276515321_69548206_199326_20240805111709554430_P [TRUNCATED] Data Raw: Data Ascii:
Aug 6, 2024 14:25:50.182620049 CEST	4944	OUT	Data Raw: 4c 6c 51 36 25 32 46 57 65 48 6e 79 61 6b 50 37 6c 6c 66 38 55 39 6f 34 66 49 65 34 4d 79 25 32 46 66 63 73 76 55 31 56 70 58 32 71 6f 33 6a 47 46 68 52 56 66 79 39 78 67 66 45 75 6a 6c 7a 65 73 41 4f 49 62 69 50 6c 72 61 6a 63 47 6b 73 73 51 51 Data Ascii: LlQ6%2FWeHnyakP7llf8U9o4fIe4My%2FfcsvU1VpX2qo3jGFhRVfy9xgfEujlzesAOIbiPlrajcGkssQQuRt9OQRXw%2Bu9uDF2Yh04OdJxzkgvFaG2xV9CpPqCWy1qmQv4n8zK37wMxs6E03OjrOhqD%2BjGWzl8skIXZszujE%2FJtesXZFavCI%2Fn0SqHhXyBklvNzd52ODdUUHAECDgW7WN80tSeNXwvsTDRlX9rg3n5U
Aug 6, 2024 14:25:50.182710886 CEST	9888	OUT	Data Raw: 50 4d 67 53 57 46 70 4a 52 52 4f 46 71 25 32 42 44 49 55 6d 75 6d 76 4b 54 49 4e 5a 58 58 31 25 32 42 46 39 42 52 67 68 42 37 48 59 52 4d 6c 6d 62 42 47 38 72 50 30 75 32 76 5a 78 79 4f 25 32 42 6d 45 25 32 46 36 4d 4f 6c 49 66 6c 6e 25 32 46 33 Data Ascii: PMgSWFpJRROFq%2BDIUmumvKTINZXX1%2BF9BRghB7HYRMlmbBG8rP0u2vZxyO%2BmE%2F6MOlIfln%2F3tOf6chLxWSpc1kp%2FPzLmMto83NiTXc4LS%2Bsi7moNhBNEXC07SSaIyxtl1%2BzfLx%2FldvwL9ZECtZiFC1%2B9%2BhR6sDD4sMByCOqmcB5lyjvk7md32G1o2d7LfxWJVB%2FE2v%2Bp1bMz%2Fx0SEFJT3kK
Aug 6, 2024 14:25:50.182773113 CEST	2472	OUT	Data Raw: 44 51 52 69 5a 48 76 34 63 77 66 58 32 4b 54 50 6c 34 4e 25 32 46 71 53 74 62 4d 5a 55 77 78 34 4e 31 5a 65 41 33 49 76 43 61 72 67 75 78 72 5a 4b 67 77 31 37 74 6e 4e 6a 6c 4a 45 63 4d 54 33 5a 42 25 32 46 66 73 30 51 31 25 32 46 74 4f 57 34 50 Data Ascii: DQRiZHv4cwfX2KTPl4N%2FqStbMZUwx4N1ZeA3IvCarguxrZKgw17tnNjlJEcMT3ZB%2Ffs0Q1%2FtOW4P8jzekSrflk7Ag0y%2B6ug%2Fj8%2FqprwMdnTj3m7J%2B%2BgvjshesQLsQ5nzGuhpSZF2Mhfkazfuwc7U1yGBgLAo%2B%2BQnhoe0vuevVHVa2PSTAuiiNMMbEVf05WB%2Bwq4PMGXv4yGL0l8ob7YSnJzRz9HM1
Aug 6, 2024 14:25:50.183703899 CEST	4944	OUT	Data Raw: 47 70 66 6c 4f 6f 38 25 32 42 25 32 46 61 42 5a 43 34 48 54 58 68 25 32 46 4f 46 79 50 71 5a 7a 4f 44 74 72 4d 45 25 32 42 69 57 58 47 33 4c 76 25 32 42 37 69 54 4e 58 4b 46 32 35 66 4b 7a 6b 4c 5a 4c 69 71 61 5a 73 33 75 42 33 64 25 32 46 45 46 Data Ascii: GpflOo8%2B%2FaBZC4HTXh%2FOFyPqZzODtrME%2BiWXG3Lv%2B7iTNXKF25fKzkLZLiqaZs3uB3d%2FEF81g4%2FpfM3A8NkSLKWWRZ1fb2knBT7fKA8zT4sX8Z8reOEH5DG7Txf6T87FYj766%2BU2x7dn5TGZRPSnGxAGYpBE4wy4ztp6u9uNLJRcbAr38AcLYyX0KAXOLCYzt2ufzPW6ECC4zhxRnSumlhI17C3B9Os0dtK
Aug 6, 2024 14:25:50.183741093 CEST	2472	OUT	Data Raw: 69 43 78 55 65 7a 59 50 61 37 6f 42 58 77 48 77 55 25 32 42 49 75 49 59 66 68 55 47 63 57 36 4c 45 4f 6e 35 4a 65 45 66 39 57 4e 55 4d 41 64 79 72 4b 4e 72 48 4e 57 25 32 46 64 46 43 52 39 36 33 4f 50 57 55 25 32 42 5a 32 6d 33 64 73 54 72 52 4d Data Ascii: iCxUezYPa7oBXwHwU%2BIuIYfhUGcW6LEOn5JeEf9WNUMAdyrKNrHNW%2FdFCR963OPWU%2BZ2m3dsTrRMhzi0manF%2FTNS3aPzmo0EedZblOw3Z5NPn7Fd6p0jVrW9chpTgTfqov88licsAzkDdgeQGngEGUa3E4lf5M0cucw58TJMQRAmoQyH5KT%2BEmuq%2BB%2FhktaSgS6pV13aYem1aLVg4NYq5JLaT0za3UEJTDTRN
Aug 6, 2024 14:25:50.187649965 CEST	2472	OUT	Data Raw: 42 78 6f 4d 57 49 4a 25 32 42 36 41 61 7a 33 70 49 70 73 4d 43 65 32 65 69 71 33 4f 33 62 66 39 6b 37 49 42 7a 62 73 49 35 48 48 4d 53 6b 5a 35 39 72 66 76 37 30 64 25 32 46 41 6b 73 39 33 4b 56 44 4a 4a 74 6a 79 49 25 32 42 4d 25 32 42 54 43 43 Data Ascii: BxoMWIJ%2B6Aaz3pIpsMCe2eiq3O3bf9k7IBzbsI5HHMSkZ59rfv70d%2FAks93KVDJJtjyI%2BM%2BTCCAUY530Obr%2FKRvH2ucAEFlF%2B%2BMV2HgsNVx6QNq9mxLcaNoNIHE%2BK5d%2BjJ3bIigsr44pBafJLdz7NzWlcZbTAYK4hP0AKg%2FRki60aNPsWKya09I%2FRajmSZfWxB5VFz%2Bm%2FBJw18mjicS2we65Z
Aug 6, 2024 14:25:50.188580036 CEST	2472	OUT	Data Raw: 75 4b 4b 76 33 4a 67 4f 73 46 4b 47 25 32 42 5a 31 57 42 7a 33 76 37 6c 25 32 46 6f 48 4d 70 30 6d 61 25 32 42 56 58 38 4e 62 25 32 46 75 6f 4a 6a 4b 54 7a 53 78 30 5a 39 52 4d 39 76 45 67 71 34 38 56 4c 76 61 55 53 51 4e 25 32 46 4e 70 78 35 74 Data Ascii: uKKv3JgOsFKG%2BZ1WBz3v7l%2FoHMp0ma%2BVX8Nb%2FuoJjKTzSx0Z9RM9vEgq48VLvaUSQN%2FNpx5tYOdM%2Bs3HqR7LMlZm3Vuiy6C1MTwnv9gvUHb1jT7bd7CS9ddeATWoitccNfhX713tvmd9QmCnHoqRDEw6K3CNK%2BwSQH%2F8yDVYNBoJ807Xe5hc%2BO%2BDfVEI1rLbOdAYuKHzKa7HPhp0yUuw%2BLzs0UhWn
Aug 6, 2024 14:25:50.188608885 CEST	2472	OUT	Data Raw: 79 69 72 52 42 47 48 25 32 42 45 50 72 77 79 44 6b 79 72 33 6b 48 61 46 31 5a 4a 44 4f 73 52 62 37 58 4e 6a 4e 45 34 79 77 37 30 61 63 4a 77 6c 67 6a 56 32 38 6e 5a 56 38 59 6f 30 37 54 45 4f 30 45 45 58 39 4c 77 57 34 67 4b 46 32 37 54 5a 4f 31 Data Ascii: yirRBGH%2BEPrwyDkyr3kHaF1ZJDOsRb7XNjNE4yw70acJwlgjV28nZV8Yo07TEO0EEX9LwW4gKF27TZO1Ogihp67lrdlU2%2BzrqZYNkMa91fdMyAGjBvzI%2FZpibxZKbHWjViShv2%2FLEY%2BKKVC1UxiR0%2BveeR4mSmL6DSbLva08EkLTjqljma1xLMBEpx1wMg61qtpRi9GVyFhm83NwzkFEjYKtBIypa9QKk4LYCaD
Aug 6, 2024 14:25:50.188679934 CEST	7416	OUT	Data Raw: 4d 37 33 45 42 41 56 71 46 5a 6e 33 52 4d 79 47 48 69 74 66 38 66 35 73 63 78 25 32 42 66 34 61 58 65 52 54 41 58 55 79 49 4a 37 69 35 36 39 75 4d 38 33 35 4f 57 37 55 6c 4f 65 44 48 46 4e 32 70 50 71 73 6e 69 34 43 6a 52 36 55 76 6f 7a 6d 55 4f Data Ascii: M73EBAVqFZn3RMyGHitf8f5scx%2Bf4aXeRTAXUyIJ7i569uM835OW7UlOeDHFN2pPqsni4CjR6UvozmUOmbj%2F4efRP0qWuMe5%2B0Fem8Y7nML%2BN%2FDzExv7%2B55Yz4hzUye8vF5yoNOgpWDLeTLUvXTexZt3wO2ln%2BlHFYrwIAiZ9F%2BPtVqGbnPX2WnBgdwLySaa%2B4M%2F8d9id8dK6Gh3TUWtbCux4PqeXJY
Aug 6, 2024 14:25:50.230443001 CEST	34608	OUT	Data Raw: 62 25 32 46 6e 52 75 6f 49 6a 52 73 57 54 63 6a 68 36 71 55 4d 67 6b 25 32 46 5a 68 64 35 73 72 7a 46 66 4e 74 62 71 49 4f 54 68 76 57 25 32 46 59 48 45 25 32 42 30 25 32 42 4b 54 4f 25 32 46 25 32 42 63 4f 45 4b 53 4c 39 34 46 7a 74 46 72 54 38 Data Ascii: b%2FnRuoIjRsWTcjh6qUMgk%2FZhd5srzFfNtbqIOThvW%2FYHE%2B0%2BKTO%2F%2BcOEKSL94FztFrT8%2FbMjx7hNNgpVZhTDveEIFNmVYl3wuoJBKWFtGvDHE0wfZQymIeBzZka0icUG8sRsTndaTQsRD%2FsTuM9u1F0lzSbxvFVFUhIUh4t9jJEZNpIS30K0wvgB6sXkosp7%2BYuuKvZkUgnkJd%2B44O2IEO0O%2FTu
Aug 6, 2024 14:25:50.672235966 CEST	302	IN	HTTP/1.1 414 Request-URI Too Large Server: awselb/2.0 Date: Tue, 06 Aug 2024 12:25:50 GMT Content-Type: text/html Content-Length: 142 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 31 34 20 52 65 71 75 65 73 74 2d 55 52 49 20 54 6f 6f 20 4c 61 72 67 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 31 34 20 52 65 71 75 65 73 74 2d 55 52 49 20 54 6f 6f 20 4c 61 72 67 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>414 Request-URI Too Large</title></head><body><center><h1>414 Request-URI Too Large</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49747	3.210.249.249	80	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 6, 2024 14:25:51.562962055 CEST	487	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 6, 2024 14:25:52.029639006 CEST	493	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Tue, 06 Aug 2024 12:25:51 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Aug 6, 2024 14:26:37.043390036 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	104.17.25.14	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:50 UTC	542	OUT	GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:50 UTC	945	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:50 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-3a76" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1110441 Expires: Sun, 27 Jul 2025 12:25:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T5aEeobBhfrUm69xbWBZBjDEjM%2F75vck7Ug%2BnIroKd6XjYl9gsGXD0IOLcYh8syUFdvgpsPIojE1WYxIg%2Fg3p20g18SVVnj2GZ94eUztWuQio681fkuSwZtaejjoc4dAkc5mZa6q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8aef030c2c0cc32c-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:25:50 UTC	424	IN	Data Raw: 33 39 38 36 0d 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 Data Ascii: 3986.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 6c 65 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e Data Ascii: llipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-contain
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 6f 70 64 6f 77 6e 2d 2d 61 62 6f 76 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 20 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 64 6f 77 6e 2d 2d 62 65 6c 6f 77 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 73 65 61 72 63 68 2d 2d 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a Data Ascii: opdown--above{border-bottom:none;border-bottom-left-radius:0;border-bottom-right-radius:0}.select2-container--open .select2-dropdown--below{border-top:none;border-top-left-radius:0;border-top-right-radius:0}.select2-search--dropdown{display:block;padding:
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 7b 68 65 69 67 68 74 3a 32 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 65 6c 65 63 Data Ascii: eight:bold}.select2-container--default .select2-selection--single .select2-selection__placeholder{color:#999}.select2-container--default .select2-selection--single .select2-selection__arrow{height:26px;position:absolute;top:1px;right:1px;width:20px}.selec
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 5f 5f 72 65 6e 64 65 72 65 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 Data Ascii: __rendered{box-sizing:border-box;list-style:none;margin:0;padding:0 5px;width:100%}.select2-container--default .select2-selection--multiple .select2-selection__rendered li{list-style:none}.select2-container--default .select2-selection--multiple .select2-s
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 69 6e 65 72 2d 2d 66 6f 63 75 73 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 62 6c 61 63 6b 20 31 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 65 Data Ascii: iner--focus .select2-selection--multiple{border:solid black 1px;outline:0}.select2-container--default.select2-container--disabled .select2-selection--multiple{background-color:#eee;cursor:default}.select2-container--default.select2-container--disabled .se
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 74 72 75 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e Data Ascii: iner--default .select2-results__option[aria-selected=true]{background-color:#ddd}.select2-container--default .select2-results__option .select2-results__option{padding-left:1em}.select2-container--default .select2-results__option .select2-results__option .
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 67 72 6f 75 70 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 35 30 25 2c Data Ascii: ault .select2-results__group{cursor:default;display:block;padding:6px}.select2-container--classic .select2-selection--single{background-color:#f7f7f7;border:1px solid #aaa;border-radius:4px;outline:0;background-image:-webkit-linear-gradient(top, #fff 50%,
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 65 65 65 20 35 30 25 2c 20 23 63 63 63 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 45 45 45 45 45 45 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 43 43 43 43 43 43 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d Data Ascii: ckground-image:linear-gradient(to bottom, #eee 50%, #ccc 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#FFEEEEEE', endColorstr='#FFCCCCCC', GradientType=0)}.select2-container--classic .select2-selection-
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 Data Ascii: ft-radius:0;border-top-right-radius:0;background-image:-webkit-linear-gradient(top, #fff 0%, #eee 50%);background-image:-o-linear-gradient(top, #fff 0%, #eee 50%);background-image:linear-gradient(to bottom, #fff 0%, #eee 50%);background-repeat:repeat-x;fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	104.17.25.14	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:50 UTC	526	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:50 UTC	961	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:50 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 349748 Expires: Sun, 27 Jul 2025 12:25:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ywwbg3FX%2BqqKsgtYHEvaepabzr%2FhbkdowbCYqJjfie5OhVsVk%2FVMmw9GAsvSasySO6O1MS1S1vu0rsDKbgUoa4AdJAv4GQhHHWgmV9wb3VmTA%2FJL9Fa103Oit1iQjiNi6PCrAzVJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8aef030c2c2d4288-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:25:50 UTC	408	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 7bef/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 29 76 61 72 20 65 3d 75 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 65 5b 73 5d Data Ascii: )var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s]
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 74 75 72 6e 20 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 Data Ascii: turn e=r[1],i&&(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e){var t
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 6f 72 28 22 53 65 65 20 61 6c 6d 6f 6e 64 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 74 75 72 6e 20 6e Data Ascii: or("See almond README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;return n
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 3d Data Ascii: t),n.apply(this,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listeners[e]=
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 3a 22 26 67 74 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 6e 64 28 74 29 7d Data Ascii: :">",'"':""","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.append(t)}
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 63 61 70 65 4d 61 72 6b 75 70 22 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e Data Ascii: capeMarkup");this.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message",this.
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 6e 74 2e 73 65 6c 65 63 74 65 64 7c 7c 6e 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 68 69 6e 67 22 29 Data Ascii: nt.selected\|\|null==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searching")
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 2e 61 70 70 65 6e 64 28 61 29 2c 73 2e 61 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 65 73 28 29 2c 6c Data Ascii: .append(a),s.append(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClasses(),l
2024-08-06 12:25:50 UTC	1369	IN	Data Raw: 28 21 28 6e 3c 3d 30 29 29 7b 76 61 72 20 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: (!(n<=0)){var r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	18.66.27.82	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:50 UTC	506	OUT	GET /postx.css HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:51 UTC	724	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 125394 Connection: close Last-Modified: Sat, 08 Jun 2024 05:00:10 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 05 Aug 2024 18:50:50 GMT ETag: "a0b4ff216e038470b000b63f5aa39816" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 745bd6e0dfe1d054bf9397c4a6fbc612.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P1 X-Amz-Cf-Id: 7unmKK9ww4J6G7ZmpGwcJD-rkwdMYOMEEFip91LCEzevv2ThHJKQ-Q== Age: 63302 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-08-06 12:25:51 UTC	16384	IN	Data Raw: 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 45 78 74 72 61 4c 69 67 68 74 2e 74 74 66 22 29 20 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");}@font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inter-ExtraLight.ttf")
2024-08-06 12:25:51 UTC	16384	IN	Data Raw: 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2e 6c 69 73 74 43 65 6c 6c 4c 69 6e 6b 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 33 33 36 36 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 2e 6c 69 73 74 43 65 6c 6c 45 72 72 6f 72 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 30 30 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2f 2a 20 4f 74 68 65 72 20 73 74 79 6c 65 73 20 28 6f 66 74 65 6e 20 70 61 67 65 20 73 70 65 63 69 66 69 63 29 20 2a 2f 0a 0a 2e 66 6f 72 6d 49 6e 70 75 74 43 65 6c 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 31 30 70 78 20 30 70 Data Ascii: 555; font-size: 8pt;}.listCellLinkText { color: #003366; font-size: 8pt; text-decoration: underline;}.listCellErrorText { color: #cc0000; font-size: 8pt;}/* Other styles (often page specific) */.formInputCell { margin: 0px 10px 0p
2024-08-06 12:25:51 UTC	16384	IN	Data Raw: 68 61 6c 6c 65 6e 67 65 51 75 65 73 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 30 70 78 20 31 30 70 78 20 35 70 78 3b 0a 7d 0a 0a 23 73 75 70 70 6f 72 74 43 6f 6e 74 61 63 74 54 61 62 6c 65 20 7b 7d 0a 0a 2e 73 75 70 70 6f 72 74 54 61 62 6c 65 48 65 61 64 69 6e 67 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 31 35 70 78 20 31 30 70 78 20 35 70 78 3b 0a 7d Data Ascii: hallengeQuestionContainer { color: #555555; font-size: 8pt; font-weight: normal; margin: 0px 0px 10px 5px;}#supportContactTable {}.supportTableHeading { color: #555555; font-size: 8pt; font-weight: bold; padding: 20px 15px 10px 5px;}
2024-08-06 12:25:51 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 23 66 66 64 39 64 63 3b 0a 7d 0a 0a 23 74 69 63 6b 2d 6d 61 72 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 63 63 30 34 61 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 76 77 3b 0a 7d 0a 0a 23 63 6c 6f 73 65 2d 6d 61 72 6b 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6c 69 67 68 74 65 72 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 0a 20 20 2e 65 78 70 69 72 79 4c 6f 63 6b 50 61 67 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 39 33 39 33 62 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 2e 35 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 39 38 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 Data Ascii: lor: #ffd9dc;}#tick-mark { color: #6cc04a; padding-right: 1vw;}#close-mark { font-weight: lighter;}@media screen and (max-width: 600px) { .expiryLockPage { color: #39393b; font-size: 16.5px; font-weight: 398; line-height:
2024-08-06 12:25:51 UTC	16384	IN	Data Raw: 72 2d 70 75 72 70 6c 65 2d 32 3a 20 72 67 62 61 28 32 32 34 2c 20 32 32 30 2c 20 32 35 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 2d 31 3a 20 72 67 62 61 28 32 34 36 2c 20 32 34 35 2c 20 32 35 35 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 31 30 3a 20 72 67 62 61 28 31 35 38 2c 20 34 34 2c 20 32 37 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 39 3a 20 72 67 62 61 28 31 37 36 2c 20 35 37 2c 20 33 39 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 38 3a 20 72 67 62 61 28 31 39 34 2c 20 37 30 2c 20 35 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 37 3a 20 72 67 62 61 28 32 32 34 2c 20 38 38 2c 20 36 37 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 36 3a 20 72 Data Ascii: r-purple-2: rgba(224, 220, 250, 1); --color-purple-1: rgba(246, 245, 255, 1); --color-red-10: rgba(158, 44, 27, 1); --color-red-9: rgba(176, 57, 39, 1); --color-red-8: rgba(194, 70, 50, 1); --color-red-7: rgba(224, 88, 67, 1); --color-red-6: r
2024-08-06 12:25:51 UTC	16384	IN	Data Raw: 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 6f 76 65 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 2d 68 6f 76 65 72 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 73 61 62 6c 65 64 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 2d 64 69 73 61 62 6c 65 64 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e Data Ascii: -background-strong); --mds-button-color-background-hover: var(--color-admin-interact-background-strong-hover); --mds-button-color-background-disabled: var(--color-admin-interact-background-strong-disabled); --mds-button-color-text: var(--color-admin
2024-08-06 12:25:51 UTC	16384	IN	Data Raw: 2d 74 6f 6f 6c 74 69 70 20 2e 6d 64 73 2d 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 20 7b 0a 20 20 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 35 29 3b 0a 7d 0a 0a 2e 6d 64 73 2d 72 61 64 69 6f 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 36 29 3b 0a 20 20 62 6f 72 Data Ascii: -tooltip .mds-tooltip-arrow { fill: var(--color-neutral-15);}.mds-radio { display: flex; flex-direction: column; align-items: flex-start; margin: 0; padding: 0; font-weight: var(--size-font-weight); color: var(--color-neutral-16); bor
2024-08-06 12:25:51 UTC	10706	IN	Data Raw: 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 67 61 70 3a 20 32 30 70 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 2d 66 72 61 6d 65 2d 6d 69 6e 2d 77 69 64 74 68 29 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 2d 66 72 61 6d 65 2d 6d 61 78 2d 77 69 64 74 68 29 3b 0a 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 72 65 62 75 69 6c 64 2d 69 6e 70 75 74 2d 66 72 61 6d 65 2d 6d 61 78 2d 68 65 69 67 68 Data Ascii: flex; flex-direction: row; gap: 20px; align-items: center; box-sizing: border-box; min-width: var(--mds-rebuild-input-frame-min-width); max-width: var(--mds-rebuild-input-frame-max-width); max-height: var(--mds-rebuild-input-frame-max-heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:51 UTC	557	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:51 UTC	742	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:51 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=GOB+6of7BcfPK5kxsQrTY9kRENAOqEog9/eoST86e2ceyL2RfGpo2W0QQn9EkT9WcXP5yw3ci1/3yee5uI7J7BD1p0p0U/9Qsxs7ZRwB6RE4UbEo1ueYO0Qai6Qw; Expires=Tue, 13 Aug 2024 12:25:51 GMT; Path=/ Set-Cookie: AWSALBCORS=GOB+6of7BcfPK5kxsQrTY9kRENAOqEog9/eoST86e2ceyL2RfGpo2W0QQn9EkT9WcXP5yw3ci1/3yee5uI7J7BD1p0p0U/9Qsxs7ZRwB6RE4UbEo1ueYO0Qai6Qw; Expires=Tue, 13 Aug 2024 12:25:51 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-08-06 12:25:51 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:51 UTC	653	OUT	GET /websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:51 UTC	971	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:51 GMT Content-Type: image/gif Content-Length: 10598 Connection: close Set-Cookie: AWSALB=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm; Expires=Tue, 13 Aug 2024 12:25:51 GMT; Path=/ Set-Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm; Expires=Tue, 13 Aug 2024 12:25:51 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=EA00EEF5CA0F53F475FC8F5EDB184838; Path=/websafe; Secure; HttpOnly Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT ETag: "19092496550-2966" Server: unknown
2024-08-06 12:25:51 UTC	8459	IN	Data Raw: 47 49 46 38 39 61 00 05 28 03 f1 00 00 00 00 00 f6 f6 f6 f7 f7 f7 f8 f8 f8 21 f9 04 01 00 00 00 00 21 ff 0b 49 6d 61 67 65 4d 61 67 69 63 6b 0e 67 61 6d 6d 61 3d 30 2e 34 35 34 35 34 35 00 2c 00 00 00 00 00 05 28 03 00 02 ff 84 8f a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a6 ea ca b6 ee 0b c7 f2 4c d7 f6 8d e7 fa ce f7 fe 0f 0c 0a 87 c4 a2 f1 88 4c 2a 97 cc a6 f3 09 8d 4a a7 d4 aa f5 8a cd 6a b7 dc ae f7 0b 0e 8b c7 e4 b2 f9 8c 4e ab d7 ec b6 fb 0d 8f cb e7 f4 ba fd 8e cf eb f7 fc be ff 0f 18 28 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 08 19 29 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 09 1a 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa 0a 1b 2b 3b 4b 5b 6b 7b 8b 9b ab bb cb db eb fb 0b 1c 2c 3c 4c 5c 6c 7c 8c 9c ac bc cc dc ec fc 0c 1d 2d 3d 4d Data Ascii: GIF89a(!!ImageMagickgamma=0.454545,(HLLJjN(8HXhx)9IYiy:JZjz+;K[k{,<L\l\|-=M
2024-08-06 12:25:51 UTC	2139	IN	Data Raw: 90 f8 ba f0 1c c6 f0 00 db 90 ee f8 25 02 39 e0 0d 1f 21 0a 9f 2e 0d e5 0f 0f 67 90 09 e5 a0 03 97 ed 0a 2b a1 04 ff 90 0f dd d0 10 c9 b0 a1 c8 06 73 86 c0 09 c5 07 14 1c 11 6f 1a 4f 10 49 ff 10 11 c3 cf 0f 17 91 d9 1a d1 0e 99 6c 0d 01 ce 08 bb 21 dc 9e 0f 13 af a6 66 14 cc 12 5f 0b 15 3f 31 0c c5 50 15 79 0f 08 4b d1 5d 4e 91 12 bd d0 13 f5 4e 0f f7 90 16 13 b1 9e ea a5 5b 66 51 17 17 0f 18 13 d0 15 c5 41 14 d9 0e 16 2f cd 59 7e d1 16 dd 4f 07 a5 4d 18 63 90 13 e5 0e 19 93 2f 58 02 11 1a 3b 91 19 ed 0f 14 bd c1 d3 7e 90 14 b1 0c f4 7e 20 12 b3 a6 e9 70 71 15 59 b1 15 a5 b1 bb a8 b1 cf 2c 0d 0d cf 71 4f d6 71 1b d3 51 1d b1 11 04 15 f1 0e 11 cd ac e6 11 11 fa b1 f2 b4 31 1c bc d1 f6 4e 70 10 b0 ca 07 06 b2 08 03 d2 a7 48 84 0e a9 21 21 01 b0 1d b3 b1 b8 Data Ascii: %9!.g+soOIl!f_?1PyK]NN[fQA/Y~OMc/X;~~ pqY,qOqQ1NpH!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	104.17.25.14	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:51 UTC	386	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:51 UTC	961	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:51 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 349749 Expires: Sun, 27 Jul 2025 12:25:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Leh2jkHx%2FJj778MiuqU8DsT%2BqVsmwnJRRpqgTQkCzMvQFfiCtSlP3iI%2BPhc5EMZEy4HgmeiZT8Le%2FpFQOD5Ox1oMhH4ueiyEgy5PDz0Mi86UDkN9EfZhkzStq14O3ruyoG1cTQM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8aef03116a520ca0-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:25:51 UTC	408	IN	Data Raw: 33 39 37 38 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 3978/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 29 76 61 72 20 65 3d 75 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 65 5b 73 5d Data Ascii: )var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s]
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 74 75 72 6e 20 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 Data Ascii: turn e=r[1],i&&(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e){var t
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 6f 72 28 22 53 65 65 20 61 6c 6d 6f 6e 64 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 74 75 72 6e 20 6e Data Ascii: or("See almond README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;return n
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 3d Data Ascii: t),n.apply(this,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listeners[e]=
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 3a 22 26 67 74 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 6e 64 28 74 29 7d Data Ascii: :">",'"':""","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.append(t)}
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 63 61 70 65 4d 61 72 6b 75 70 22 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e Data Ascii: capeMarkup");this.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message",this.
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 6e 74 2e 73 65 6c 65 63 74 65 64 7c 7c 6e 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 68 69 6e 67 22 29 Data Ascii: nt.selected\|\|null==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searching")
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 2e 61 70 70 65 6e 64 28 61 29 2c 73 2e 61 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 65 73 28 29 2c 6c Data Ascii: .append(a),s.append(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClasses(),l
2024-08-06 12:25:51 UTC	1369	IN	Data Raw: 28 21 28 6e 3c 3d 30 29 29 7b 76 61 72 20 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: (!(n<=0)){var r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	632	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
2024-08-06 12:25:52 UTC	742	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:52 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=f0gAvEhApGFfDZ0FkoCkh9aSOnO6pS3xLPK+zwgnpLPPcqwDjmdbKMCfjoBtUWohIskp6s0fhND3cyrOrTt64dVbW2L/XInMdtZab8KIC55ZWTxaRseM5fgRrKJl; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/ Set-Cookie: AWSALBCORS=f0gAvEhApGFfDZ0FkoCkh9aSOnO6pS3xLPK+zwgnpLPPcqwDjmdbKMCfjoBtUWohIskp6s0fhND3cyrOrTt64dVbW2L/XInMdtZab8KIC55ZWTxaRseM5fgRrKJl; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-08-06 12:25:52 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	708	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
2024-08-06 12:25:52 UTC	971	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:52 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=g2dqlqeLrnsF5Sa2+kFwFxqMKREOudnUIdFpkJBh6F9a3EXiH93HY8JI00AiiN1mEevgJlmGZI5w968xoGFHOkmecVjP78C+ptBgCZLimbW+utiMBhV+GsRht9hM; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/ Set-Cookie: AWSALBCORS=g2dqlqeLrnsF5Sa2+kFwFxqMKREOudnUIdFpkJBh6F9a3EXiH93HY8JI00AiiN1mEevgJlmGZI5w968xoGFHOkmecVjP78C+ptBgCZLimbW+utiMBhV+GsRht9hM; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=43272F57FF450ABA4CE496579611F067; Path=/websafe; Secure; HttpOnly Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT ETag: "19092496550-c9be" Server: unknown
2024-08-06 12:25:52 UTC	8459	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-08-06 12:25:52 UTC	16384	IN	Data Raw: 01 0e 16 47 a6 50 d8 27 b0 02 c8 c5 a0 ac c0 16 72 1c ba 10 b2 5e 40 34 0d 47 03 01 43 04 86 4a 7b 01 40 20 01 8a 46 00 20 18 01 31 92 89 97 3e 43 01 88 02 00 94 c7 28 4a a3 e0 80 25 11 39 2f 82 25 55 4c 01 52 82 50 70 42 e0 80 a6 10 27 91 e4 00 03 21 20 4b f2 2b 22 4f 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 Data Ascii: GP'r^@4GCJ{@ F 1>C(J%9/%ULRPpB'! K+"O#` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl
2024-08-06 12:25:52 UTC	1616	IN	Data Raw: 90 61 58 fc 88 eb 30 e4 b9 a4 9b f3 37 28 68 cf d0 d1 12 dd 7a b0 22 76 2e a8 c5 77 93 b4 25 8e a6 c9 cc 90 51 87 79 4f d4 bf b4 dc 9f a7 39 28 cb b9 5e 55 f3 17 6e ad 34 b6 2a aa 26 0a ed d9 b6 11 a5 84 3b 08 29 14 9c 12 34 41 4f 0b 04 e5 e8 90 4e c1 5c a0 1f d5 d0 26 dd 09 e3 d5 b1 42 ea 03 72 f6 13 af 92 08 5d 45 1e 60 69 59 d0 a6 8c 92 5d 58 71 5a cb 28 ab 55 35 0f 70 a5 6d 55 1a a2 78 4e 8d 8b f1 cf dc d9 05 5b b5 57 d0 55 a4 35 d1 15 15 dc 2b 58 d1 81 a0 98 d0 32 88 67 9f de fb 99 e8 34 73 3e cd 6c e6 48 30 b7 fb 17 b1 b7 fa 8b 0d cf 90 bf eb d7 a9 5d 9e d7 16 d3 ca 7a 01 b7 35 2a ae 18 ad 4a 3d e1 9c 77 4f 9c 3d 8e 8e 2a d6 86 01 dc 5c 17 d5 94 f7 37 a3 c2 33 b7 69 5f 7c 9b 29 9d 70 51 40 00 00 4b 28 96 04 5b 46 73 6c 74 db 46 73 d6 bc b0 88 3a 69 Data Ascii: aX07(hz"v.w%QyO9(^Un4&;)4AON\&Br]E`iY]XqZ(U5pmUxN[WU5+X2g4s>lH0]z5J=wO=*\73i_\|)pQ@K([FsltFs:i
2024-08-06 12:25:52 UTC	9000	IN	Data Raw: f2 01 48 60 c6 d6 bd 37 27 f3 37 ac 01 b3 d4 9e 52 cc ab 6e 5a 9b 2a ad d0 0e ae 59 d3 db d4 e7 4a a8 df b5 69 61 17 74 71 d2 ce 62 4e db 9c 54 fb 98 56 bc 98 f9 04 02 41 0f 90 73 14 09 a0 38 21 b0 86 77 f6 ad 54 da ae 3c ca 7d d4 ba b2 ab 83 8b 6a 4e da e9 1e 41 f4 5d c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 Data Ascii: H`7'7RnZYJiatqbNTVAs8!wT<}jNA]_\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E
2024-08-06 12:25:52 UTC	16187	IN	Data Raw: c6 2d 04 03 32 ee 5a 32 5d ec aa b2 71 da ce ce 59 54 36 ec 35 66 88 45 20 36 4c de a7 3d 4e 9a e9 82 0d 96 80 4d ae a8 a6 c4 7e 6a ae a5 1a c0 ab ae 4a 90 c0 43 81 40 c1 39 d3 20 15 97 ec 2f 8f 99 09 b4 5a b0 52 6a 37 27 89 69 6e 34 04 f1 6f 71 f1 7d 4a 18 11 0c 72 ca 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b Data Ascii: -2Z2]qYT65fE 6L=NM~jJC@9 /ZRj7'in4oq}Jr\|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	598	OUT	GET /websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
2024-08-06 12:25:52 UTC	971	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:52 GMT Content-Type: image/gif Content-Length: 10598 Connection: close Set-Cookie: AWSALB=tilS6G7O1PdjlzDYm5LFzZG4yTVUoC0yxFYX0sI/5ou2/IzqxZBUWfUfmBQ5qk4FaaB41XR36gN9GD8hkCOTQlPtJafAVr24sZLB++TEsSI4hjjQmcsWWFszW815; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/ Set-Cookie: AWSALBCORS=tilS6G7O1PdjlzDYm5LFzZG4yTVUoC0yxFYX0sI/5ou2/IzqxZBUWfUfmBQ5qk4FaaB41XR36gN9GD8hkCOTQlPtJafAVr24sZLB++TEsSI4hjjQmcsWWFszW815; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; Path=/websafe; Secure; HttpOnly Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT ETag: "19092496550-2966" Server: unknown
2024-08-06 12:25:52 UTC	8459	IN	Data Raw: 47 49 46 38 39 61 00 05 28 03 f1 00 00 00 00 00 f6 f6 f6 f7 f7 f7 f8 f8 f8 21 f9 04 01 00 00 00 00 21 ff 0b 49 6d 61 67 65 4d 61 67 69 63 6b 0e 67 61 6d 6d 61 3d 30 2e 34 35 34 35 34 35 00 2c 00 00 00 00 00 05 28 03 00 02 ff 84 8f a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a6 ea ca b6 ee 0b c7 f2 4c d7 f6 8d e7 fa ce f7 fe 0f 0c 0a 87 c4 a2 f1 88 4c 2a 97 cc a6 f3 09 8d 4a a7 d4 aa f5 8a cd 6a b7 dc ae f7 0b 0e 8b c7 e4 b2 f9 8c 4e ab d7 ec b6 fb 0d 8f cb e7 f4 ba fd 8e cf eb f7 fc be ff 0f 18 28 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 08 19 29 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 09 1a 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa 0a 1b 2b 3b 4b 5b 6b 7b 8b 9b ab bb cb db eb fb 0b 1c 2c 3c 4c 5c 6c 7c 8c 9c ac bc cc dc ec fc 0c 1d 2d 3d 4d Data Ascii: GIF89a(!!ImageMagickgamma=0.454545,(HLLJjN(8HXhx)9IYiy:JZjz+;K[k{,<L\l\|-=M
2024-08-06 12:25:52 UTC	2139	IN	Data Raw: 90 f8 ba f0 1c c6 f0 00 db 90 ee f8 25 02 39 e0 0d 1f 21 0a 9f 2e 0d e5 0f 0f 67 90 09 e5 a0 03 97 ed 0a 2b a1 04 ff 90 0f dd d0 10 c9 b0 a1 c8 06 73 86 c0 09 c5 07 14 1c 11 6f 1a 4f 10 49 ff 10 11 c3 cf 0f 17 91 d9 1a d1 0e 99 6c 0d 01 ce 08 bb 21 dc 9e 0f 13 af a6 66 14 cc 12 5f 0b 15 3f 31 0c c5 50 15 79 0f 08 4b d1 5d 4e 91 12 bd d0 13 f5 4e 0f f7 90 16 13 b1 9e ea a5 5b 66 51 17 17 0f 18 13 d0 15 c5 41 14 d9 0e 16 2f cd 59 7e d1 16 dd 4f 07 a5 4d 18 63 90 13 e5 0e 19 93 2f 58 02 11 1a 3b 91 19 ed 0f 14 bd c1 d3 7e 90 14 b1 0c f4 7e 20 12 b3 a6 e9 70 71 15 59 b1 15 a5 b1 bb a8 b1 cf 2c 0d 0d cf 71 4f d6 71 1b d3 51 1d b1 11 04 15 f1 0e 11 cd ac e6 11 11 fa b1 f2 b4 31 1c bc d1 f6 4e 70 10 b0 ca 07 06 b2 08 03 d2 a7 48 84 0e a9 21 21 01 b0 1d b3 b1 b8 Data Ascii: %9!.g+soOIl!f_?1PyK]NN[fQA/Y~OMc/X;~~ pqY,qOqQ1NpH!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	716	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
2024-08-06 12:26:07 UTC	805	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 06 Aug 2024 12:26:07 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=ovEY88T/m0/10U3MahtLQc3+ubbVTmuXZQf7RI5gW85s4Q20hUK7KnwgM3n2ZWBK7+iWen3V6l4NbuZ//R7LKEYevx8g6/+TJVqlfPEdU4nfOnnYVncl4p6wN9Kl; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/ Set-Cookie: AWSALBCORS=ovEY88T/m0/10U3MahtLQc3+ubbVTmuXZQf7RI5gW85s4Q20hUK7KnwgM3n2ZWBK7+iWen3V6l4NbuZ//R7LKEYevx8g6/+TJVqlfPEdU4nfOnnYVncl4p6wN9Kl; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	18.66.27.82	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	560	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:53 UTC	692	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Tue, 06 Aug 2024 12:25:53 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8fc54d3acff9539327f4d7a6bf40a31e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P1 X-Amz-Cf-Id: vRad_bxro7EOOi8yrPxriRnK_ZuqWpWqN4uUCPWfym8uhAHylgk5Qw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-08-06 12:25:53 UTC	7683	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 8c 1b 99 42 b5 80 ba a5 00 ea 87 01 00 4e d8 d0 32 8a 09 02 77 77 2b 72 01 6d 4c 0a 02 36 f6 09 68 0b 02 77 0d 34 c0 60 00 00 00 00 00 04 d9 80 9f a9 c1 42 4a 09 b3 dc f6 af 88 02 f5 39 e8 8d 01 60 00 00 00 04 d2 25 d0 b0 03 38 68 8b 4b d4 dc 00 e3 75 04 ce a7 54 c8 7c 4b a1 11 0a c6 aa c7 3b 4e af 25 2b 01 d2 06 4a c6 89 c9 54 c0 04 d8 03 64 25 bf 2f 4e 88 17 af 3f b7 f3 34 00 27 6a 28 00 98 0c a2 80 09 97 d4 52 58 01 90 6f 68 bd a8 97 c6 98 0f 7a 2a 4c 9f 17 66 2d 96 41 1b 6d 4c 87 c7 3a 11 ba cb 54 57 d5 03 96 ea 1c 12 6b c9 9c a3 22 0d 2a e1 9d 6a c9 9c 49 9a d4 0e a2 6f 95 06 2d b5 a0 95 b6 e1 4d ac ca ac 53 da ce a9 55 f5 5b 53 9a e9 d5 e7 56 6b c7 1a d8 88 bd af 93 36 c2 ed fc 4d 70 90 b7 23 9b 97 91 bc 74 2a 9d f9 1d b0 b4 26 89 db 15 f8 db f8 13 Data Ascii: BN2ww+rmL6hw4`BJ9`%8hKuT\|K;N%+JTd%/N?4'j(RXohzLf-AmL:TWk"jIo-MSU[SVk6Mp#t*&
2024-08-06 12:25:53 UTC	1024	IN	Data Raw: 36 af b7 bd b3 68 a2 f1 d4 d7 eb 53 8f 1c 69 2f 2d 42 39 2f e0 bc 40 4a 9c 5c 59 f9 9f 7b 09 f3 5b 93 14 4e df 82 34 af b7 ad 73 6f 53 f1 36 dc 96 80 60 bd b5 af ff 00 23 c7 64 6f 5a 53 8f e5 42 76 62 02 9d d9 10 38 90 69 00 0a 07 d0 c6 dc 89 63 a8 1b 42 27 5d 59 54 ca 25 b5 5d 5c 00 34 89 4d b0 76 fb 30 96 fa 00 4f 77 f7 09 5a ab 41 aa 77 0d a9 68 50 bd 4f c0 51 5a f8 b0 88 d7 02 f2 5f 78 0e 2d 7f 23 6a 3a d4 e7 76 fe a7 39 2d b5 18 c0 1d 42 09 1a c9 15 36 a2 b6 1e 4c fe 93 af c8 e3 c3 a1 b8 80 c7 ea 5a 9f 3a f8 a0 56 a7 26 54 7e a6 ac ce dc 55 b6 a8 22 2d c5 d8 96 ad 5d 4b d9 7a 7c ae 57 6b 07 d6 8c 5d 6d fc 50 19 61 f8 0d d5 9b 6d a5 f2 bf 03 3b 57 66 75 02 1e 85 ad 09 7c 89 e1 a3 7a b5 75 a0 18 a6 27 16 d7 06 b1 45 a8 6c ab d1 81 8b ab d7 5c 92 a1 c7 Data Ascii: 6hSi/-B9/@J\Y{[N4soS6`#doZSBvb8icB']YT%]\4Mv0OwZAwhPOQZ_x-#j:v9-B6LZ:V&T~U"-]Kz\|Wk]mPam;Wfu\|zu'El\
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 01 48 c0 09 6a 0a 13 48 04 db e8 27 74 b5 21 dc c1 ad cf 19 64 1a 5b 95 bd 34 26 a9 db 42 f8 f8 23 36 37 d0 76 88 af 1a 5a 96 29 02 aa 80 00 09 45 12 c6 80 66 6c d0 86 02 ae a6 a6 4b 53 50 00 00 00 10 c4 04 b3 36 cd 19 93 20 00 00 22 59 32 17 70 62 f9 52 d0 0d 5b 21 f2 24 60 ee ec 4d 66 f8 aa 76 03 47 76 cc dd e0 e8 af b5 7a f2 38 f0 46 8a dc 7c 3f 22 cf e3 fc 40 e7 a7 b7 e4 be be 95 e3 fc 0d d7 0f 1f 1e 5f ad f8 fd a0 af f7 39 3a 42 f1 2a be de ab 37 7b 98 18 5f dc b7 8e 34 ed e5 85 f7 9a 53 86 d6 53 c9 8f 04 6f 31 a1 2d b6 02 aa e3 e2 c5 50 3e 49 08 42 d8 9f 40 a8 de 86 ac d8 dd 2a 89 71 50 2f cc 4e e9 74 32 76 53 84 25 56 ff 00 10 8b 7c a2 77 6f 4e e4 c5 56 ae 71 a2 07 7d 52 5d 7e 20 5d 27 6e 4c 6d 64 9f df e4 5f 14 ed 73 a9 95 94 b4 e3 b8 1d bc 6f 75 Data Ascii: HjH't!d[4&B#67vZ)EflKSP6 "Y2pbR[!$`MfvGvz8F\|?"@_9:B7{_4SSo1-P>IB@qP/Nt2vS%V\|woNVq}R]~ ]'nLmd_sou
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: d4 d5 52 d3 43 8f 95 ab af 56 72 5a bd ae a5 e0 8e 45 80 37 6c 40 c3 a8 0e 4c ef 68 46 88 c7 90 0c 38 9c d8 eb b5 5d 96 11 c9 c6 a1 ce d6 be 27 4a e5 5d 65 11 5c eb ea 52 55 aa ed 59 d0 db 86 ab 5a e3 c1 9a ae 5a f7 34 dd 57 d5 14 72 fb ab 25 57 26 32 b0 7a 0d 2b 61 a4 d1 0f 86 8f a0 1c 94 e4 86 d6 aa 74 66 bb 55 9c d7 0f b1 5f db 51 39 52 73 dd aa de 3b 20 22 a9 a6 93 35 44 d3 9a b7 8d eb e2 69 b1 a5 3a ae e4 12 b9 5a b6 d7 9a c1 d2 a9 1a 68 70 bf 9e 7c 0e ba b2 8a e4 d0 ae 1f 94 9b b4 d4 3c 78 95 4f 4d 40 e6 e4 8b 5d 74 66 49 34 d4 9a f2 56 b6 7b 9b 86 88 e2 e4 94 95 b2 88 34 4e 0e 7e 4e 7b b9 52 76 3a 62 51 c8 fd bf 25 a5 a5 29 81 34 eb f0 37 df 65 a3 66 6b 8a f5 99 4c 6d 35 aa 03 65 cd 7e e3 fa af aa 46 12 52 8b 6a e0 0d 3e a5 1e b5 1c f1 be eb 04 be Data Ascii: RCVrZE7l@LhF8]'J]e\RUYZZ4Wr%W&2z+atfU_Q9Rs; "5Di:Zhp\|<xOM@]tfI4V{4N~N{Rv:bQ%)47efkLm5e~FRj>
2024-08-06 12:25:53 UTC	2048	IN	Data Raw: b7 56 7b 3e fd c5 0f 17 eb 38 c2 2a 1f d4 bb ee 67 2d 86 fb d8 95 4b 58 2b 7f a6 c2 d4 4b 56 65 f4 f9 3b 9a 3e 0b b0 0a aa f7 12 bd 65 2f 13 5a 7b 7b fc 4d 17 07 22 72 d2 03 bf fe bf 4b ff 00 a8 f4 1b 83 93 d9 56 d5 a3 dd ac 9d 73 01 0b 70 26 34 e4 52 50 e4 24 25 04 a0 09 06 d8 e5 0b 1a 80 b7 14 2c 31 81 e0 fb af f9 19 7c 4f fd ea ae 92 3e 6e 1b 72 5e cd 68 8c f8 7f e6 5e 66 1a 7b 25 21 22 91 a6 54 34 21 a0 a1 ea 08 1e a0 8a 3e 7f fe d3 fe 6f fc 7f 52 ff 00 eb 34 b1 97 fd a7 fc df 03 6f fa df 96 c6 55 e5 72 7c cf cd 85 42 c9 da ce 33 96 75 70 fb 1e 6b fe d8 f3 2a 39 eb f3 2f 34 7a 7f f6 2e 15 57 81 75 ff 00 ae af 1f aa f7 ca 31 ff 00 b2 7f 2f 91 07 97 b8 fa 2f 61 ff 00 0d 4f 9b 3e 97 d8 a8 e1 a9 47 6f 53 43 34 68 8a 11 c5 ee 78 ef 66 d5 5d 57 6e ff 00 79 Data Ascii: V{>8g-KX+KVe;>e/Z{{M"rKVsp&4RP$%,1\|O>nr^h^f{%!"T4!>oR4oUr\|B3upk9/4z.Wu1//aO>GoSC4hxf]Wny
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 52 25 32 91 a6 54 34 21 95 43 d4 10 3d 46 80 f9 bf fb 3f f9 bf f1 3b 7d 85 78 ab c5 3b a5 fe e5 d8 bf 71 ec 2b cf c8 f9 2f 6d b5 d0 db 8f 8f 83 85 45 33 24 1c 6b df 71 51 c7 0f 1e ec eb 06 7e ef 9f dc 27 d6 b4 f0 c1 d3 7f 77 b3 93 e8 f0 51 3b 13 cd c5 ee 79 96 d7 10 06 7c 57 f6 d3 bb d4 fb ce 4e cf 75 4e 2e 6a 45 9a 4e 30 71 70 f0 2e 19 9b 7a 99 d8 f9 17 15 5d de 51 07 93 c5 ff 00 5f 6b c4 b8 5d cf 67 db f1 fd 2a 2a 4c c1 cf cb c8 d5 15 ab a7 27 e0 6f ed a7 62 9c b2 8e a2 d1 05 a2 80 f0 fd ff 00 05 ad cd b9 2c 23 dc ea 79 9c fc 8f 8f 95 a4 9b 20 e3 a5 2e 93 4e 19 34 f6 f7 6d 56 b8 97 9f 03 d5 e2 b5 b9 be 5a aa af 13 4a 7b 7a d1 cd 9c b3 38 ba cb 8f 89 70 45 13 93 b1 56 35 14 a9 84 a5 89 6e 7f 32 49 f8 1a 46 aa 08 b6 f6 f1 10 61 c9 c9 b1 e8 d9 c5 f5 ed 31 Data Ascii: R%2T4!C=F?;}x;q+/mE3$kqQ~'wQ;y\|WNuN.jEN0qp.z]Q_k]g**L'ob,#y .N4mVZJ{z8pEV5n2IFa1
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 74 c1 d9 20 39 68 ad 67 d8 1b b2 71 93 a7 7f 69 09 b3 f0 2a 32 4a f1 20 af 69 89 36 da ba e4 78 41 59 45 aa f0 5a b5 bb 0d bc e8 45 af 64 b0 88 34 91 ca 31 5c 96 fe 96 1f 52 ff 00 d2 51 a5 da 81 d5 ca 32 b5 f1 a4 15 48 6b 00 6a 02 80 8f 10 18 0a 03 20 30 16 42 40 67 3f b9 a5 6f 47 28 db 72 32 e7 69 d1 81 c9 c7 c2 9d 1b e9 d0 8a 38 59 3b f8 5a d8 bc 8c 79 e9 3e a5 f1 20 e5 f6 cf fd e5 e4 cf 58 e1 e1 e0 ae ef a9 d5 1d c2 2d ba 00 00 a8 26 0c ae b3 26 8c 09 42 8c 14 00 51 95 b9 15 73 d8 9a 73 ab 57 73 c1 5c 9c 7b f1 a1 9b e0 f4 ec 9d 40 af af 5e e2 b7 b9 a5 75 71 e6 63 fd 8a 59 4f 26 77 f6 6f 97 d3 77 84 41 d2 bd d5 1b 84 e5 96 b9 93 d0 e5 e3 f6 1f 4d ca b3 c1 ad 29 1a 81 77 e4 4f 0f 06 52 96 8f 25 bc 39 13 79 90 15 6d ea 5d ce 99 67 3a 69 d9 1b 81 36 4d b3 Data Ascii: t 9hgqi*2J i6xAYEZEd41\RQ2Hkj 0B@g?oG(r2i8Y;Zy> X-&&BQssWs\{@^uqcYO&wowAM)wOR%9ym]g:i6M
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 27 9a 93 bb f0 3b 2a d2 c2 03 66 ed ad 61 f8 3f e3 d0 ca be e3 8e d6 d9 6f 45 ff 00 a5 fd b2 68 9c 19 73 71 53 9d 45 d7 93 ea 80 df 6a e8 0a 6b e0 78 b7 b7 37 b2 7a ee e3 7a 3e 9e 5e 07 6f 07 bf a7 2e 1f a5 81 df be 75 35 56 4f 43 9b 6c a9 5a 0b 0b 0b 54 07 6a 50 33 96 bc 96 5a 9a 2e 65 d7 01 5b 81 2a c9 e8 30 18 08 00 60 21 3b 40 14 04 6f 43 dc 03 02 77 3e c2 4e dd 40 b0 92 23 bb 1c 20 07 64 88 dc db c2 29 b4 09 a0 33 bd 9c 44 05 38 c9 6e 59 b2 b2 40 0e a9 11 b1 59 e0 6b d4 6a b0 06 7f 4e a1 b5 d7 43 40 02 77 77 29 39 02 5d 7b 01 40 44 b5 a9 4a c9 80 c0 00 00 00 00 00 0c ed b9 69 0c 0d 04 8c e9 67 67 94 6a 04 db 43 1a 6a 6d 6d 0c 69 a8 1d 04 59 75 2d 13 66 96 ac 07 51 99 d6 e9 b8 4f 26 80 00 00 00 00 00 00 00 00 00 00 00 00 00 4b aa 28 18 19 ba a6 64 eb Data Ascii: ';fa?oEhsqSEjkx7zz>^o.u5VOClZTjP3Z.e[0`!;@oCw>N@# d)3D8nY@YkjNC@ww)9]{@DJiggjCjmmiYu-fQO&K(d
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 45 85 69 d2 3a be e5 f2 db f7 4b 8f fe df 3e ed fd b0 2e 3e 47 54 ec da db e5 f1 c7 8a 58 26 dc 8e c9 ee af a7 5f bf 4f c0 8a 55 d1 5a 3a b7 ac f9 69 fa 85 3d 32 d3 9b 42 73 1e 3f 83 65 6e c5 a1 6c 4e 3f 8b 4f c5 8e d6 86 a3 0e d5 96 ba c7 f1 7d 3c 40 d1 38 55 4d 38 8d 3f cd d3 c7 f8 84 b9 5b bc 6b 8e fd 7f c4 85 16 51 a4 f5 52 e1 af e1 f8 03 aa 94 96 16 3a e2 b5 4a 5f 9b 7e 20 4f 2b b4 d5 f5 89 f2 f8 74 fd 43 91 46 7b 57 18 d5 37 12 da eb e0 65 48 b3 99 85 6d 25 6b 32 6b ca dd ab 5c 3c b6 a1 39 cd 70 a5 fe 20 35 54 bd 4e 7d 2b d3 d9 59 bc 7c 7b 21 73 35 15 69 ca 94 fe ed 5b ff 00 34 f5 15 ec f4 50 aa e1 77 78 d5 f8 47 7f b8 7b 13 bc 55 7a 76 e3 3d fb 77 dd f8 20 27 48 4d 3b 34 b2 9f 8b cb 2b 89 da ce ad 74 b5 b0 fa 47 f0 98 5d d8 ac 9b b3 b2 d1 e2 3b 7d Data Ascii: Ei:K>.>GTX&_OUZ:i=2Bs?enlN?O}<@8UM8?[kQR:J_~ O+tCF{W7eHm%k2k\<9p 5TN}+Y\|{!s5i[4PwxG{Uzv=w 'HM;4+tG];}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49757	18.66.27.82	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	569	OUT	GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:53 UTC	765	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 303504 Connection: close Date: Tue, 06 Aug 2024 12:25:53 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "a4a7379505cd554ea9523594b7c28b2a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3e0d912790c2cd730e222487cbb10f98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P1 X-Amz-Cf-Id: C4mp8OkwPjKzXgHCwZEtmMbd6o-V2lh6b38BAOGJrCFwZnXGfQA1yA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-08-06 12:25:53 UTC	15619	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-08-06 12:25:53 UTC	239	IN	Data Raw: 08 00 02 26 01 99 00 00 00 07 08 62 06 c8 00 00 ff ff 00 88 fd d0 06 88 08 00 02 26 01 99 00 00 00 07 06 89 06 a8 00 00 00 01 00 88 00 00 06 f8 08 00 00 10 00 00 01 15 21 11 23 11 21 22 06 06 15 15 23 35 34 36 33 06 f8 fd 7c f8 fe a4 46 50 22 e0 db bd 08 00 dc f8 dc 07 24 42 68 3a 4c 78 b4 e0 00 02 00 88 fd c0 06 88 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 15 23 22 2e 02 35 35 01 35 21 15 21 11 23 11 04 04 90 60 4c 88 54 9a 78 46 fd 7c 06 00 fd 7c f8 a4 78 48 dc 35 68 98 63 a8 07 24 dc dc f8 dc 07 24 00 02 00 88 fe fc 06 88 09 04 00 03 00 0b 00 00 01 01 33 01 01 35 21 15 21 11 23 11 01 68 03 90 e4 fc 70 fe 3c 06 00 fd 7c f8 fe fc 0a 08 f5 f8 08 28 dc dc f8 dc 07 24 ff ff 00 88 00 00 06 88 08 00 02 06 01 99 Data Ascii: &b&!#!"#5463\|FP"$Bh:Lx!33#".555!!#`LTxF\|\|xH5hc$$35!!#hp<\|($
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 00 00 00 01 00 f8 ff dc 07 30 08 00 00 15 00 00 01 33 11 14 02 04 23 22 24 02 35 11 33 11 14 16 16 33 32 36 36 35 06 38 f8 c5 fe 9a f1 f1 fe 9a c5 f8 84 f5 ab ab f6 83 08 00 fa b4 d2 fe b7 bd bd 01 49 d2 05 4c fa c8 96 e9 85 85 e9 96 00 02 00 f8 ff dc 08 fc 08 7c 00 09 00 1f 00 00 01 33 14 02 04 23 35 32 36 36 25 33 11 14 02 04 23 22 24 02 35 11 33 11 14 16 16 33 32 36 36 35 08 14 e8 75 fe fd d4 8c 9b 3d fe 24 f8 c5 fe 9a f1 f1 fe 9a c5 f8 84 f5 ab ab f6 83 08 7c c4 fe f5 89 c4 5c b4 08 fa b4 d2 fe b7 bd bd 01 49 d2 05 4c fa c8 96 e9 85 85 e9 96 ff ff 00 f8 ff dc 07 30 0a a0 02 26 01 a5 00 00 00 07 06 66 00 c0 02 00 ff ff 00 f8 ff dc 07 30 0a a0 02 26 01 a5 00 00 00 07 06 64 01 78 02 00 ff ff 00 f8 ff dc 07 30 0a 68 02 26 01 a5 00 00 00 07 06 6a 01 94 02 Data Ascii: 03#"$53326658IL\|3#5266%3#"$5332665u=$\|\IL0&f0&dx0h&j
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 62 cc 06 74 e4 fe f4 a8 52 94 f9 ce c6 01 64 ee f0 01 66 c6 c6 fe 9a f0 ee fe 9c c6 d4 a2 01 08 9a 9a 01 0a a4 a4 fe f6 9a 9a fe f8 a2 ff ff 00 90 ff e0 06 00 08 a0 02 26 03 07 00 00 00 06 06 66 f4 00 ff ff 00 90 ff e0 06 00 08 a0 02 26 03 07 00 00 00 07 06 64 00 ac 00 00 ff ff 00 90 ff e0 06 00 08 68 02 26 03 07 00 00 00 07 06 6a 00 c8 00 00 ff ff 00 90 ff e0 06 00 08 00 02 26 03 07 00 00 00 07 06 6d 00 d0 00 00 ff ff 00 90 ff e0 06 00 08 00 02 26 03 07 00 00 00 07 06 6e 00 d0 00 00 ff ff 00 90 ff e0 06 00 08 50 02 26 03 07 00 00 00 07 06 65 01 64 00 10 ff ff 00 90 ff e0 06 00 08 68 02 26 03 07 00 00 00 07 06 73 00 c8 00 00 00 03 00 90 fd a8 06 00 06 14 00 0f 00 1f 00 34 00 00 05 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 27 32 36 12 35 34 02 26 23 22 Data Ascii: btRdf&f&dh&j&m&nP&edh&s4"$54$32'2654&#"
2024-08-06 12:25:53 UTC	13848	IN	Data Raw: 00 00 01 34 24 33 32 16 17 15 26 26 23 22 06 15 14 16 16 17 04 00 11 15 14 02 04 23 22 24 02 35 35 34 12 36 37 35 26 26 13 15 14 16 16 33 32 36 36 35 35 34 26 26 27 22 06 06 01 08 01 16 f6 6c ab 5d 3c ce 66 78 80 2f 83 7e 01 2f 01 15 9f fe d7 d0 d4 fe d5 9d 7a cc 7a 81 97 6c 53 ad 88 86 ac 52 60 ae 76 88 ad 53 06 d6 b1 d7 24 24 ec 18 38 5b 47 24 54 5a 2e 6c fe 80 fe ec 1c ce fe b6 c0 c0 01 4a ce 1c a0 01 0a b4 1e 08 33 c2 fc 87 1c 8a e7 8b 8b e7 8a 1c 70 db a1 18 8f eb 00 02 00 90 ff e4 05 7c 06 14 00 1b 00 35 00 00 01 33 15 23 22 06 06 15 14 16 33 32 36 37 33 0e 03 23 22 24 26 35 34 3e 02 05 23 22 2e 02 35 34 36 24 33 32 04 16 17 23 26 26 23 22 06 15 14 16 33 33 02 d0 d0 b8 6c 9e 56 d2 ae a8 b6 1e f8 0d 64 a6 e0 89 b2 fe e7 a1 2f 7b e3 01 83 d0 af d9 73 Data Ascii: 4$32&&#"#"$554675&&3266554&&'"l]<fx/~/zzlSR`vS$$8[G$TZ.lJ3p\|53#"32673#"$&54>#".546$32#&&#"33lVd/{s
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 14 06 02 07 01 15 21 15 d4 02 a4 77 9a 4b 67 b2 6f 76 af 5f ec a6 01 1f b3 b4 01 16 9e 51 c7 b0 fe 34 03 b8 b4 02 e4 82 c1 ab 5e 6c 9e 56 61 ae 75 b4 01 10 98 98 fe fe 9e 71 d7 fe f9 bd fe 14 10 dc ff ff 00 d4 00 00 06 3a 08 1c 02 26 05 10 00 00 00 07 07 fe 02 0a 00 40 00 01 00 d0 ff e4 06 3c 08 1c 00 33 00 00 05 22 24 26 27 33 1e 02 33 32 36 36 35 34 26 26 23 23 35 33 32 36 36 35 34 26 26 23 22 06 06 07 23 36 36 24 33 32 04 16 15 14 06 07 15 16 12 15 14 02 04 03 88 c6 fe cb b5 08 fc 08 78 c2 76 84 cc 74 70 d8 9c a4 a4 7a b9 69 5c a7 71 6a bb 76 05 f0 06 b6 01 27 b1 be 01 10 92 b5 9b c2 da b5 fe c8 1c 88 f3 a1 63 8f 4e 5c a4 6c 71 ad 62 dc 58 a0 6c 68 9a 56 4d 91 66 a1 f3 88 99 fa 91 ad f4 2f 10 20 fe f7 c3 a7 fe f7 98 00 02 00 a4 00 00 06 6c 08 00 00 09 Data Ascii: !wKgov_Q4^lVauq:&@<3"$&'3326654&&##5326654&&#"#66$32xvtpzi\qjv'cN\lqbXlhVMf/ l
2024-08-06 12:25:53 UTC	15990	IN	Data Raw: 04 a8 c4 f8 48 03 00 fb c0 00 01 00 74 ff f0 03 d0 04 40 00 22 00 00 05 22 26 26 27 33 16 16 33 32 36 35 34 26 23 22 06 07 27 13 21 15 21 03 33 36 36 33 32 16 16 15 14 06 06 02 18 7a bc 6c 02 cc 03 7b 5a 66 86 8a 66 39 69 1e c4 3c 02 c4 fd ec 28 04 24 87 51 68 ad 67 70 c6 10 54 96 62 4e 5e 77 5d 60 74 32 2a 28 02 3c a8 fe c4 30 3c 57 9d 68 6e ac 62 00 02 00 5c ff f0 03 dc 04 54 00 1e 00 2b 00 00 05 22 2e 02 35 34 12 36 33 32 16 17 23 26 26 23 22 06 15 33 36 36 33 32 16 16 15 14 06 06 27 32 36 35 34 26 23 22 06 06 17 16 16 02 2c 5d a7 82 4a 6c d2 9a ab de 0f d0 0c 6b 51 84 84 08 21 b1 66 6a a6 60 6d c3 84 63 85 88 60 42 6c 3c 06 09 7b 10 3e 82 cb 8d a6 01 0a 9c be 8a 45 4f d6 ba 4e 5e 5a 9c 62 6a a8 62 a0 79 57 57 75 39 5f 38 5a 72 00 01 00 48 00 00 03 84 Data Ascii: Ht@""&&'332654&#"'!!36632zl{Zff9i<($QhgpTbN^w]`t2*(<0<Whnb\T+".54632#&&#"36632'2654&#",]JlkQ!fj`mc`Bl<{>EON^ZbjbyWWu9_8ZrH
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: cc fe fe 7a 76 fc ca 01 17 01 15 ff ff 00 a8 fd 98 07 68 08 1c 02 26 00 49 00 00 00 07 06 75 02 b0 ff f0 ff ff 00 a8 00 00 06 28 07 d4 00 06 03 df f0 00 ff ff ff bc 00 00 07 40 08 00 02 06 00 5c 00 00 00 01 00 88 fd a2 06 e0 08 00 00 23 00 00 37 33 1e 02 33 32 36 12 35 34 02 24 23 23 35 01 35 21 35 21 15 01 15 16 04 12 15 14 02 06 04 23 22 24 02 88 fc 0a 9b f8 93 ae ff 8b af fe cc c9 98 02 ac fb a8 05 b0 fd 2c e4 01 5e c6 75 d8 fe d4 b7 db fe 9a db 58 8b d4 77 a6 01 1b b1 c8 01 24 a0 d0 02 c0 10 e0 b4 fd 0c 14 0a db fe 8a f1 ba fe c8 e6 7e b0 01 39 ff ff 00 88 fd a2 06 e0 0a 68 02 26 07 8c 00 00 00 07 06 73 01 40 02 00 00 01 00 a0 fd a2 06 f8 08 00 00 23 00 00 25 06 02 04 23 22 24 26 02 35 34 12 24 37 35 01 35 21 15 21 15 01 15 23 22 04 02 15 14 12 16 33 Data Ascii: zvh&Iu(@\#7332654$##55!5!#"$,^uXw$~9h&s@#%#"$&54$755!!#"3
2024-08-06 12:25:53 UTC	5242	IN	Data Raw: 81 9a bd 78 40 07 b8 32 40 32 92 96 34 18 48 44 32 40 32 ff ff 00 f8 00 00 01 f0 08 00 02 06 00 c5 00 00 ff ff fb 10 06 b8 fe e8 08 34 00 07 06 6b fa 3c 00 00 00 03 00 d0 fd e0 06 20 08 00 00 13 00 29 00 2d 00 00 13 35 34 12 24 33 32 16 16 12 15 15 14 02 04 23 22 26 26 02 25 15 14 1e 02 33 32 3e 02 35 35 34 2e 02 23 22 0e 02 01 11 21 11 d0 a5 01 31 d2 9f fc b0 5d a3 fe cf d4 9d fc b1 5e 01 14 32 64 98 66 66 98 64 32 32 64 98 66 66 98 64 32 01 0c 01 10 02 ec 20 e0 01 5f c9 73 d2 fe e5 a8 20 e0 fe a1 c9 73 d2 01 1b c8 20 73 ca 99 56 56 99 ca 73 20 72 c9 9a 57 57 9a c9 fa 62 0a 20 f5 e0 00 01 01 08 00 00 01 e4 08 00 00 03 00 00 01 11 23 11 01 e4 dc 08 00 f8 00 08 00 ff ff 00 bc 00 00 03 0c 08 00 00 26 08 7c b4 00 00 07 08 7c 01 28 00 00 ff ff ff ba 00 00 03 Data Ascii: x@2@24HD2@24k< )-54$32#"&&%32>554.#"!1]^2dffd22dffd2 _s s sVVs rWWb #&\|\|(
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 00 05 00 fb 00 74 dc dc fe a0 dc dc 00 01 00 68 fd 68 08 8c ff 60 00 10 00 00 01 20 24 24 27 37 16 04 21 32 24 24 37 17 06 04 04 04 78 fe f0 fe 7c fe ec 68 98 8a 01 a4 01 4a dc 01 57 01 03 5e 80 54 fe e7 fe 69 fd 68 67 b3 72 6c 60 84 40 68 3c 6c 6a b4 6e 00 02 00 9c fd c0 06 54 08 1c 00 03 00 21 00 00 01 11 21 11 13 35 24 24 00 12 35 35 34 2e 02 23 22 06 06 07 11 36 36 33 32 04 12 11 15 10 02 00 04 01 bc fe e0 88 01 0e 01 8a 01 00 7c 44 84 c2 7e a2 bd 5f 16 57 df 9c f2 01 6b c9 ca fe 95 fe 1e 08 00 f5 c0 0a 40 f7 08 e4 2a ea 01 4a 01 77 b7 4c a5 ed 96 48 6f c9 88 02 1c 42 4a bb fe 83 fe dc 48 fe f2 fe 24 fe 8a ef 00 02 00 b4 fd a8 06 40 08 1c 00 1a 00 2d 00 00 01 35 36 24 36 36 35 34 26 23 22 06 06 15 21 34 36 24 33 32 04 12 15 14 02 00 04 01 37 1e 02 15 Data Ascii: thh` $$'7!2$$7x\|hJW^Tihgrl`@h<ljnT!!5$$554.#"6632\|D~_Wk@*JwLHoBJH$@-56$6654&#"!46$327

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	18.66.27.82	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	567	OUT	GET /fonts/Inter/Inter-Light.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:53 UTC	765	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 304092 Connection: close Date: Tue, 06 Aug 2024 12:25:53 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "60c8f64064078554b6469eeda25944eb" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 429f4d0dffb8bf0b68cf2d9d500542f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P1 X-Amz-Cf-Id: OISMQ3p6kW466fz0JbN1KH87VO1F5msj07L4JzXhZGHmEOYIaSHKKw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-08-06 12:25:53 UTC	7687	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 6c 00 00 04 12 47 50 4f 53 44 54 7b 36 00 03 3f 80 00 01 21 64 47 53 55 42 be 7f 66 78 00 04 60 e4 00 00 42 b4 4f 53 2f 32 22 33 6e 62 00 02 6e 98 00 00 00 60 53 54 41 54 ee 4d d9 3f 00 04 a3 98 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 6e f8 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3b 64 00 00 00 08 67 6c 79 66 97 e6 ea 0c 00 00 01 0c 00 02 1d 71 68 65 61 64 2d c3 61 46 00 02 46 70 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 74 00 00 00 24 68 6d 74 78 e5 18 e6 d0 00 02 46 a8 00 00 27 ca 6c 6f 63 61 09 5d 8d 80 00 02 1e a0 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 80 00 00 00 20 6e 61 6d 65 35 9c 5c a6 00 02 d4 8c 00 00 02 38 70 6f 73 74 a7 a8 35 72 00 02 d6 c4 00 00 64 9e 70 72 65 Data Ascii: GDEF11;lGPOSDT{6?!dGSUBfx`BOS/2"3nbn`STATM?Dcmap/.negasp;dglyfqhead-aFFp6hheant$hmtxF'loca]'maxp name5\8post5rdpre
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 89 04 7d 00 00 00 06 09 a2 25 00 ff ff 00 e5 fd 73 0a f4 08 05 00 27 00 a1 03 e4 00 00 00 27 09 89 06 c4 00 00 00 06 09 8e 17 00 ff ff 00 bf fd 73 0a 85 08 03 00 27 00 a1 03 75 00 00 00 27 09 89 06 55 00 00 00 06 09 95 cf 00 ff ff 00 ce fd 73 0a 61 08 03 00 27 00 a1 03 51 00 00 00 27 09 89 06 31 00 00 00 06 09 90 09 00 ff ff 00 d1 fd 73 0a 94 08 03 00 27 00 a1 03 84 00 00 00 27 09 89 06 64 00 00 00 06 09 97 19 00 ff ff 00 d2 fd 73 09 cc 09 2b 00 27 00 a1 02 bc 00 00 00 27 09 89 05 9c 00 00 00 06 09 92 5d 30 ff ff 00 d2 fd 73 09 d0 09 2b 00 27 00 a1 02 c0 00 00 00 27 09 89 05 a0 00 00 00 06 09 99 5d 30 ff ff 01 10 fd 73 07 10 08 00 02 26 00 a1 00 00 00 07 09 89 02 df 00 00 00 01 01 10 00 00 01 cb 08 00 00 03 00 00 01 11 23 11 01 cb bb 08 00 f8 00 08 00 00 Data Ascii: }%s''s'u'Usa'Q'1s''ds+'']0s+'']0s&#
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: ff ff 00 9c fe 77 06 9b 08 00 02 26 02 52 00 00 00 27 07 fe 02 8f 03 00 00 07 05 a9 00 d9 ff 1f 00 01 00 9c ff e0 05 c7 06 15 00 26 00 00 05 22 24 02 35 34 12 24 33 32 16 16 12 15 15 21 35 21 34 26 26 23 22 06 02 07 15 14 12 16 33 32 36 36 37 17 0e 02 03 58 d7 fe c6 ab ab 01 2f c7 7d e8 b9 6c fb 50 03 fa 77 d3 8a 92 de 7d 01 7f ea a0 6d a5 71 1d a9 23 9f ed 20 c9 01 65 e9 e8 01 69 cd 5b bb fe e5 c1 58 9d 94 ed 8a 9c ff 00 98 5e b7 fe ef 96 44 73 45 37 61 a4 63 00 03 00 9c ff e0 05 c7 08 08 00 26 00 32 00 3e 00 00 05 22 24 02 35 34 12 24 33 32 16 16 12 15 15 21 35 21 34 26 26 23 22 06 02 07 15 14 12 16 33 32 36 36 37 17 0e 02 01 22 26 35 34 36 33 32 16 15 14 06 21 22 26 35 34 36 33 32 16 15 14 06 03 58 d7 fe c6 ab ab 01 2f c7 7d e8 b9 6c fb 50 03 fa 77 d3 Data Ascii: w&R'&"$54$32!5!4&&#"32667X/}lPw}mq# ei[X^DsE7ac&2>"$54$32!5!4&&#"32667"&54632!"&54632X/}lPw
2024-08-06 12:25:53 UTC	630	IN	Data Raw: 00 00 07 06 71 01 6b 00 00 ff ff 00 70 fd c0 05 90 08 9b 02 26 03 b6 00 00 00 06 06 66 b3 00 ff ff 00 70 fd c0 05 90 06 00 02 26 03 b6 00 00 00 07 06 8b 07 85 ff ab ff ff 00 70 fd c0 05 90 09 0d 02 26 03 b6 00 00 00 07 06 80 06 04 00 2c ff ff 00 70 fd c0 05 90 08 18 02 26 03 b6 00 00 00 06 06 6b 41 00 00 01 00 70 fd c0 05 90 06 00 00 13 00 00 01 22 26 27 37 16 36 36 37 37 01 33 01 33 01 33 01 0e 02 01 67 35 5c 1b 30 5b 8e 6e 2b 38 fd cb c1 01 c8 0e 01 c8 c1 fd 76 29 78 9d fd c0 14 0c 9d 1c 0f 71 74 9c 06 0f fa eb 05 15 f9 0d 6f 95 49 ff ff 00 70 fd c0 05 90 08 00 02 26 03 b6 00 00 00 07 06 6e 00 98 00 00 ff ff 00 70 fd c0 05 90 07 d3 02 26 03 b6 00 00 00 07 06 6d 00 d1 00 00 ff ff 00 70 fd c0 05 90 08 08 02 06 03 b7 00 00 ff ff 00 70 fd c0 05 90 08 50 02 Data Ascii: qkp&fp&p&,p&kAp"&'76677333g5\0[n+8v)xqtoIp&np&mppP
2024-08-06 12:25:53 UTC	1418	IN	Data Raw: 34 26 26 23 21 35 01 21 35 21 15 01 21 32 16 15 15 04 c3 23 58 4f fc c4 03 74 fc 96 04 4e fc 8e 02 58 ad bd fe d5 35 48 6f 3f 9b 04 bd a8 93 fb 3b cc 9e 69 00 02 00 bd fd c1 05 ed 06 00 00 18 00 21 00 00 25 33 32 1e 04 33 32 36 36 37 17 06 06 23 22 2e 04 23 23 37 15 23 35 01 21 35 21 15 01 90 45 83 c0 8d 6d 5f 63 3d 1e 36 32 19 3d 28 78 4c 56 7f 69 68 7d a7 74 34 14 e6 03 74 fc 96 04 4e a8 53 83 93 83 53 0e 1a 11 7d 23 41 53 83 93 83 53 a8 a8 9b 04 bd a8 93 00 02 00 bb fd b1 06 63 06 00 00 10 00 1c 00 00 25 33 15 14 16 16 33 32 36 37 15 06 06 23 22 26 35 25 35 01 35 21 35 21 15 01 15 21 15 04 85 b3 35 60 42 11 30 13 1b 44 1d 9e c4 fc 36 03 78 fc ae 04 37 fc 98 03 88 07 e3 51 5b 24 02 05 9d 07 06 bb b8 dc 8d 04 be 0d a8 93 fb 48 0d a8 ff ff 00 bb 00 00 05 Data Ascii: 4&&#!5!5!!2#XOtNX5Ho?;i!%3232667#".##7#5!5!Em_c=62=(xLVih}t4tNSS}#ASSc%33267#"&5%55!5!!5`B0D6x7Q[$H
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: d2 fe b1 ef 43 d9 ff ff 00 61 00 00 08 35 08 94 00 27 03 e2 00 9b 00 00 00 07 09 a0 ff 37 00 00 ff ff ff ca 00 00 07 7c 08 79 00 26 03 e2 e1 00 00 07 06 67 fe fd 00 00 ff ff ff d3 00 00 08 00 08 1c 00 26 03 e2 65 00 00 07 08 4e fe f0 ff f8 ff ff 00 5f 00 00 08 50 08 1c 00 27 03 e2 00 b5 00 00 00 06 09 a2 8c 00 00 03 ff d7 00 00 0a 20 08 1c 00 2a 00 30 00 3b 00 00 21 35 21 35 26 02 11 34 12 12 24 33 32 04 12 12 15 10 02 07 15 21 15 21 35 36 36 12 37 34 02 24 23 22 04 06 02 15 14 12 16 17 15 01 15 23 01 35 33 21 15 14 06 06 07 27 36 36 35 35 03 3b 01 de e8 f6 82 ed 01 43 c0 c0 01 43 ee 82 f7 e8 01 df fd 44 8f eb 8c 01 b3 fe c4 cf 9a fe fe ba 67 8c ec 8f fc f2 66 fe cf d7 fe e9 32 65 4d 57 44 3c a8 10 89 01 bd 01 2f dd 01 70 01 0e 94 94 fe f2 fe 8f dc fe d2 Data Ascii: Ca5'7\|y&g&eN_P' *0;!5!5&4$32!!56674$#"#53!'6655;CCDgf2eMWD</p
2024-08-06 12:25:53 UTC	1024	IN	Data Raw: 02 04 23 22 26 27 37 32 24 12 03 15 01 35 05 15 01 35 02 88 bb 03 0b bb c0 fe 9a fc 2a 5d 1d a3 b9 01 15 9a c3 fc 80 03 80 fc 80 08 00 f8 00 14 08 14 fb 6c fe cf fe 6f c6 04 04 a8 8f 01 3f 04 91 bc fe 65 bc 2c bc fe 65 bc 00 02 00 5b 00 00 06 af 08 00 00 17 00 1b 00 00 01 21 35 21 32 36 36 35 34 26 26 23 21 11 23 11 21 32 04 12 15 14 02 04 07 15 21 35 04 2d fc 2e 03 d2 94 cc 6a 6a cc 94 fe 16 bb 02 a5 d2 01 1d 93 93 fe e3 da fc 36 03 47 a8 70 c5 7f 7f c5 71 f8 a8 08 00 a2 fe ee a9 a9 fe ee a1 bc a8 a8 00 03 00 50 ff e4 06 a4 08 1c 00 03 00 07 00 27 00 00 01 07 21 37 01 07 21 37 01 07 2e 02 23 22 04 02 11 10 12 04 33 32 36 36 37 17 06 04 23 22 00 02 11 10 12 00 33 32 04 05 ad 48 fa eb 3b 04 6a 48 fb a3 3b 06 19 49 41 94 a4 5a bd fe d6 ac ac 01 2a bd 5b a3 Data Ascii: #"&'72$55]lo?e,e[!5!26654&&#!#!2!5-.jj6GpqP'!7!7.#"32667#"32H;jH;IAZ[
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: ae 01 d0 10 01 d0 d8 01 d0 10 01 d0 bf fd cf c8 fe 25 0d fe 25 c8 fd cf 05 2c a8 a8 fe 21 a8 a8 04 b3 f9 1f 06 e1 f9 1f 06 e1 f8 00 06 c9 f9 37 08 00 00 04 00 c0 00 00 06 20 08 1c 00 03 00 1e 00 22 00 26 00 00 21 21 35 21 01 13 16 06 07 27 3e 02 27 03 26 12 24 33 32 16 16 07 27 36 26 26 23 22 06 06 01 15 21 35 01 15 21 35 06 20 fa a5 05 5b fc 38 1f 03 3e 5f b2 37 42 1d 02 1c 06 9b 01 10 ab ab fa 82 09 b8 08 6b b2 64 68 b4 6d 02 11 fc 58 03 a8 fc 58 ad 05 1f fc 2f 8b de 2b 46 08 6b 94 47 03 d1 b6 01 0a 90 88 ee 97 05 6f 9a 4f 64 ba fe 4f 8d 8d fe 8b 8d 8d 00 03 00 4f 00 00 06 e9 08 00 00 03 00 07 00 0f 00 00 13 35 21 15 01 35 21 15 01 23 01 33 01 23 01 23 68 06 68 f9 98 06 68 fa 43 c4 02 e9 c8 02 e9 c4 fd 7e 0e 04 0b 9a 9a fe 2d 9b 9b fd c8 08 00 f8 00 07 Data Ascii: %%,!7 "&!!5!'>'&$32'6&&#"!5!5 [8>_7BkdhmXX/+FkGoOdOO5!5!#3##hhhC~-
2024-08-06 12:25:53 UTC	8949	IN	Data Raw: 00 00 01 22 26 26 27 33 16 16 33 32 36 35 34 26 23 23 35 33 32 36 35 34 26 23 22 06 07 23 3e 02 33 32 16 16 15 14 06 07 15 16 16 15 14 06 06 02 55 83 cf 7a 01 a8 02 a8 7b 82 a6 b4 94 4e 4e 7b a7 8e 72 71 9f 03 9f 02 73 c3 7a 7b bd 6a 90 6d 8e 9d 78 d2 03 f0 59 9d 66 5d 73 7e 5f 61 7d 7e 72 61 59 76 74 60 66 9c 57 56 97 5f 6c 8f 15 08 17 a2 70 64 9f 5c 00 02 00 71 04 00 04 3c 08 cc 00 09 00 0f 00 00 13 35 01 33 15 23 01 15 21 15 05 11 35 11 33 11 71 02 54 70 49 fe 35 03 1b fe b7 a0 04 f8 80 03 54 c3 fd 7c 06 87 f8 01 20 38 03 74 fb 34 00 01 00 91 03 f0 04 04 08 cc 00 22 00 00 01 22 26 26 27 33 16 16 33 32 36 35 34 26 23 22 06 07 27 13 21 15 21 03 33 36 36 33 32 16 16 15 14 06 06 02 3d 7a c1 6f 02 a3 02 92 75 81 a6 af 7c 45 7a 29 a2 4a 02 d0 fd bb 34 08 2b Data Ascii: "&&'332654&##532654&#"#>32Uz{NN{rqsz{jmxYf]s~_a}~raYvt`fWV_lpd\q<53#!53qTpI5T\| 8t4""&&'332654&#"'!!36632=zou\|Ez)J4+
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 33 03 07 d1 78 fb 32 03 d8 02 fb 0e a7 02 05 eb 77 fb 31 a5 04 f4 fc 29 00 01 01 16 00 00 0d aa 07 00 00 0d 00 00 21 01 01 17 01 21 01 37 01 01 27 01 21 01 04 96 fc 80 03 80 76 fd 48 0a 18 fd 48 76 03 80 fc 80 76 02 b8 f5 e8 02 b8 03 80 03 80 74 fd 48 02 b8 74 fc 80 fc 80 76 02 b6 fd 4a 00 01 01 16 00 00 12 2a 07 00 00 0d 00 00 21 01 01 17 01 21 01 37 01 01 27 01 21 01 04 96 fc 80 03 80 76 fd 48 0e 98 fd 48 76 03 80 fc 80 76 02 b8 f1 68 02 b8 03 80 03 80 74 fd 48 02 b8 74 fc 80 fc 80 76 02 b6 fd 4a 00 04 01 16 00 00 0d aa 07 00 00 05 00 0b 00 0f 00 13 00 00 21 27 01 01 37 09 03 17 09 02 27 21 07 01 37 21 17 0a 2a 76 03 0c fc f4 76 03 80 f6 ec fc 80 03 80 76 fc f4 03 0c fd b3 a7 0a 8f a7 f6 18 a7 09 41 a7 75 03 0b 03 0b 75 fc 80 fc 80 03 80 03 80 75 fc f5 Data Ascii: 3x2w1)!!7'!vHHvvtHtvJ!!7'!vHHvvhtHtvJ!'7'!7!vvvAuuu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	712	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
2024-08-06 12:26:07 UTC	801	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 06 Aug 2024 12:26:07 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=6Ue5JYN6E+Uj8HRG/kgwGFm/uXARFtmtv/EUlEntztRFIYNKMgE01Xe/Ij80vMi/NJYwKp9wj+0fwzbfFRlmlhxJ72p/XD+yqkBw8/POg7RjHPpmRAfg+rhKdf/d; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/ Set-Cookie: AWSALBCORS=6Ue5JYN6E+Uj8HRG/kgwGFm/uXARFtmtv/EUlEntztRFIYNKMgE01Xe/Ij80vMi/NJYwKp9wj+0fwzbfFRlmlhxJ72p/XD+yqkBw8/POg7RjHPpmRAfg+rhKdf/d; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	18.66.27.82	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	570	OUT	GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:53 UTC	765	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309432 Connection: close Date: Tue, 06 Aug 2024 12:25:53 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "1753a05196abeef95c32f10246bd6473" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6d125e47c290f30bf760f976c0325c98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P1 X-Amz-Cf-Id: wSLqpwFO-Sw3dv_B_MMvl2uLLNQMN0QJ-r1Spocv0SmK-fS3PK4FCg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 44 98 00 00 04 12 47 50 4f 53 9b af 91 74 00 03 48 ac 00 01 2d 14 47 53 55 42 be 7f 66 78 00 04 75 c0 00 00 42 b4 4f 53 2f 32 23 5f 6e 62 00 02 77 ac 00 00 00 60 53 54 41 54 ef 79 d9 45 00 04 b8 74 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 78 0c 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 44 90 00 00 00 08 67 6c 79 66 6a 1b 9d 97 00 00 01 0c 00 02 26 86 68 65 61 64 2d c3 61 46 00 02 4f 84 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 77 88 00 00 00 24 68 6d 74 78 24 35 88 39 00 02 4f bc 00 00 27 ca 6c 6f 63 61 09 84 29 ed 00 02 27 b4 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 27 94 00 00 00 20 6e 61 6d 65 37 5c 60 0e 00 02 dd a0 00 00 02 50 70 6f 73 74 a7 a8 35 72 00 02 df f0 00 00 64 9e 70 72 65 Data Ascii: GDEF11DGPOStH-GSUBfxuBOS/2#_nbw`STATyEtDcmap/.xegaspDglyfj&head-aFO6hheaw$hmtx$59O'loca)''maxp' name7\`Ppost5rdpre
2024-08-06 12:25:53 UTC	628	IN	Data Raw: 26 01 a5 00 00 00 07 06 76 02 75 00 02 ff ff 00 ca ff e1 07 48 0a 76 02 26 01 a5 00 00 00 07 06 73 01 26 02 00 ff ff 00 ca ff e1 07 48 0c 00 02 26 01 a5 00 00 00 07 08 0e 07 5c 00 00 ff ff 00 ca ff e1 07 48 0b d1 02 26 01 a5 00 00 00 07 08 08 06 21 00 00 ff ff 00 ca ff e1 07 48 0b 64 02 26 01 a5 00 00 00 07 08 0a 07 72 02 38 ff ff 00 ca ff e1 07 48 0b 0d 02 26 01 a5 00 00 00 07 08 0c 07 6c 02 38 ff ff 00 ca ff e1 07 48 0a 93 02 26 01 a5 00 00 00 07 06 7b 06 dd 02 00 ff ff 00 ca ff e1 07 48 0a 8a 02 26 01 a5 00 00 00 07 06 7f 07 68 02 b6 ff ff 00 ca fd cb 07 48 08 00 02 26 01 a5 00 00 00 07 06 8d 08 16 ff f4 ff ff 00 ca fd dd 07 48 08 00 02 26 01 a5 00 00 00 07 06 90 07 a7 ff f4 ff ff 00 ca fd b6 07 48 08 00 02 26 01 a5 00 00 00 07 06 89 07 5c ff f4 ff ff Data Ascii: &vuHv&s&H&\H&!Hd&r8H&l8H&{H&hH&H&H&\
2024-08-06 12:25:53 UTC	6396	IN	Data Raw: 01 3b 02 00 ff ff 00 45 fd d7 07 b2 08 00 02 26 01 c5 00 00 00 07 06 8b 07 15 00 00 00 01 00 37 00 00 0a dc 08 00 00 0f 00 00 21 01 21 01 33 01 21 01 33 01 21 01 21 01 23 01 02 79 fd be 01 8f 01 71 13 01 8a 01 6b 01 8b 12 01 71 01 8f fd be fe 92 fe 66 10 fe 65 08 00 fa 1f 05 e1 fa 1e 05 e2 f8 00 05 9d fa 63 ff ff 00 37 00 00 0a dc 0a 76 02 26 01 c8 00 00 00 07 06 6a 02 a6 02 00 ff ff 00 37 00 00 0a dc 0a 93 02 26 01 c8 00 00 00 07 06 66 02 37 02 00 ff ff 00 37 00 00 0a dc 0a 93 02 26 01 c8 00 00 00 07 06 64 02 e1 02 00 ff ff 00 37 00 00 0a dc 0a 5b 02 26 01 c8 00 00 00 07 06 69 02 7e 00 20 ff ff 00 37 00 00 0a dc 0a 63 02 26 01 c8 00 00 00 07 06 70 04 08 02 00 ff ff 00 37 fd e1 0a dc 08 00 02 26 01 c8 00 00 00 07 06 8b 08 a3 00 0a 00 01 00 4f 00 00 07 49 Data Ascii: ;E&7!!3!3!!#yqkqfec7v&j7&f77&d7[&i~ 7c&p7&OI
2024-08-06 12:25:53 UTC	12792	IN	Data Raw: 38 02 fe f8 00 f2 38 7d 58 01 29 7d e0 95 95 dc 7a 7e de 8f 90 e1 81 ff ff 00 7b ff e5 08 01 08 66 00 26 02 52 00 00 00 07 07 f8 05 f2 00 00 ff ff 00 7b ff e5 06 26 09 63 02 26 02 52 00 00 00 07 06 70 01 9a 01 00 ff ff 00 7b fd d7 06 26 08 00 02 26 02 52 00 00 00 07 06 8b 06 80 00 00 ff ff 00 7b fe 25 06 26 08 00 02 26 02 52 00 00 00 07 08 62 06 a8 00 00 ff ff 00 7b fd 68 06 26 08 00 02 26 02 52 00 00 00 07 06 77 01 e7 00 00 ff ff 00 7b fd c2 06 26 08 00 02 26 02 52 00 00 00 07 06 89 06 ba 00 00 ff ff 00 7b ff e5 0b 78 08 00 00 26 02 52 00 00 00 07 03 cd 05 e5 00 00 00 03 00 7b ff e5 0b 78 08 00 00 0b 00 22 00 32 00 00 21 35 01 35 21 11 21 15 01 15 21 11 05 22 24 02 35 10 12 24 33 32 16 16 17 33 11 21 11 21 35 23 0e 02 03 32 36 36 35 34 26 26 23 22 06 06 Data Ascii: 88}X)}z~{f&R{&c&Rp{&&R{%&&Rb{h&&Rw{&&R{x&R{x"2!55!!!"$5$323!!5#26654&&#"
2024-08-06 12:25:53 UTC	6087	IN	Data Raw: 6a fe 96 01 5f 10 2a cc 85 3e 68 28 70 1d 46 2c 5e 98 59 fd c0 02 40 fd c0 02 40 06 00 ff 00 85 91 1e 1a fe d4 0e 12 54 95 62 fc 79 ff ff 00 ba 00 00 04 72 08 93 02 26 03 56 00 00 00 06 06 64 be 00 ff ff 00 4d fd 68 04 72 06 16 02 26 03 56 00 00 00 06 06 77 ef 00 ff ff 00 5f 00 00 04 72 08 76 02 26 03 56 00 00 00 06 06 73 84 00 ff ff ff c2 00 00 04 72 08 93 02 26 03 56 00 00 00 07 06 7b 05 3b 00 00 ff ff 00 90 00 00 04 72 08 8a 02 26 03 56 00 00 00 07 06 7f 05 c7 00 b6 ff ff 00 ba 00 00 04 72 08 63 02 26 03 56 00 00 00 07 06 70 00 e6 00 00 ff ff 00 9e fd d7 04 72 06 16 02 26 03 56 00 00 00 07 06 8b 04 89 00 00 ff ff 00 86 fd d7 04 72 08 00 02 26 03 56 00 00 00 27 06 8b 04 89 00 00 00 06 06 6d 82 00 ff ff ff 8e fe 25 04 72 06 16 02 26 03 56 00 00 00 07 08 Data Ascii: j_*>h(pF,^Y@@Tbyr&VdMhr&Vw_rv&Vsr&V{;r&Vrc&Vpr&Vr&V'm%r&V
2024-08-06 12:25:53 UTC	12792	IN	Data Raw: 01 28 50 8d 5b 5c 92 53 00 01 00 ca 00 00 05 ef 08 00 00 05 00 00 01 11 21 11 21 11 05 ef fc 4e fe 8d 08 00 fe c9 f9 37 08 00 00 02 00 45 00 00 07 b2 08 00 00 03 00 07 00 00 33 01 21 01 01 21 01 23 45 02 d1 01 ca 02 d2 fa 85 03 88 fe 44 10 08 00 f8 00 01 37 05 25 00 03 00 96 ff e4 07 f0 08 1c 00 03 00 13 00 23 00 00 01 11 21 11 05 10 02 04 21 20 24 02 11 10 12 24 21 20 04 12 01 34 02 24 23 22 04 02 15 14 12 04 33 32 24 12 05 be fd 0a 05 28 f7 fe 57 fe f3 fe f3 fe 57 f7 f7 01 a9 01 0d 01 0d 01 a9 f7 fe 8b 91 ff 00 a7 a7 ff 00 91 91 01 00 a7 a7 01 00 91 04 82 fe fc 01 04 82 fe b5 fe 29 fa fb 01 d7 01 4a 01 4b 01 d7 fa fa fe 29 fe b5 e9 01 41 a5 a5 fe bf e9 e9 fe bf a5 a5 01 41 00 03 00 ba 00 00 06 0e 08 00 00 03 00 07 00 0b 00 00 33 11 21 11 01 11 21 11 01 Data Ascii: (P[\S!!N7E3!!#ED7%#!! $$! 4$#"32$(WW)JK)AA3!!
2024-08-06 12:25:53 UTC	4616	IN	Data Raw: 68 fd a8 04 b2 06 00 02 26 04 b8 00 00 00 27 07 fe fe d3 ff 15 00 07 08 00 ff 39 00 00 00 02 00 32 fe 42 06 e1 06 00 00 10 00 17 00 00 13 11 33 3e 03 37 13 21 11 33 11 21 11 21 11 13 21 11 21 07 06 02 32 7a 31 42 2b 1c 0b 2c 04 56 ee fe a2 fc 13 8a 02 79 fe 3e 18 14 42 fe 42 02 e8 26 83 b3 df 81 02 1a fb 2a fd 18 01 be fe 42 02 e8 03 b2 f6 f4 fe a4 00 01 00 56 00 00 09 22 06 00 00 15 00 00 33 01 01 21 01 33 11 21 11 33 01 21 01 01 21 01 23 11 21 11 23 01 56 02 37 fd ce 01 a2 01 b5 56 01 6a 54 01 b5 01 a2 fd d1 02 34 fe 55 fe 4b 50 fe 96 50 fe 49 03 19 02 e7 fd 95 02 6b fd 95 02 6b fd 19 fc e7 02 6c fd 94 02 6c fd 94 ff ff 00 56 fe 12 09 c5 06 00 02 26 04 bc 00 00 00 07 08 03 07 ba 00 00 00 01 00 65 ff e2 05 49 06 14 00 2f 00 00 13 21 16 16 33 32 36 35 34 Data Ascii: h&'92B3>7!3!!!!2z1B+,Vy>BB&*BV"3!3!3!!#!#V7VjT4UKPPIkkllV&eI/!32654
2024-08-06 12:25:53 UTC	6396	IN	Data Raw: 11 14 00 23 22 26 27 13 16 16 33 32 36 35 11 23 11 33 35 36 00 33 32 16 17 03 26 26 23 22 06 07 15 04 22 fe db fe ff eb 31 5a 33 14 17 57 17 5a 50 ec ec 01 01 19 ea 3f 80 2f 2f 19 3c 2d 67 72 01 05 d0 fe f2 fb 05 fc fe f5 08 0c 01 25 08 08 77 67 04 fb 01 0e 86 fd 01 09 13 0c fe e1 06 09 6c 6b 86 00 04 00 93 ff e4 06 4f 08 00 00 03 00 10 00 14 00 18 00 00 01 11 05 11 01 21 10 02 04 23 22 26 27 01 32 36 12 03 11 01 11 05 11 01 11 02 f9 fe 90 03 51 01 75 da fe 7c ff 6d bd 3f 01 69 92 dc 7a 7f fc 38 03 c8 fc 38 08 00 f8 00 06 08 06 fb a8 fe c8 fe 52 de 0c 0a 01 22 86 01 20 04 9d fe e7 fe ab 01 18 77 fe e9 fe ab 01 18 00 02 00 7a 00 00 07 8e 08 00 00 17 00 1b 00 00 01 21 11 21 32 36 36 27 36 26 26 23 21 11 21 11 21 32 04 12 15 14 02 04 07 11 21 11 04 ab fb cf Data Ascii: #"&'3265#35632&&#""1Z3WZP?//<-gr%wglkO!#"&'26Qu\|m?iz88R" wz!!266'6&&#!!!2!
2024-08-06 12:25:53 UTC	9988	IN	Data Raw: f7 a9 72 b4 8c 37 32 6c 91 6a 1a fd 90 80 5c 5a 80 80 5a 3d 64 3b ff ff 00 6d ff ea 0b 72 08 1c 00 26 05 35 00 00 00 07 05 35 05 fc 00 00 ff ff 00 6d ff ea 08 8b 08 1c 00 26 05 35 00 00 00 07 05 31 05 fc 00 00 00 02 00 86 fd d5 05 8f 06 07 00 23 00 30 00 00 01 15 0e 02 07 0e 02 15 14 16 16 33 32 36 36 37 21 06 06 04 23 22 24 26 35 34 36 36 37 3e 02 37 35 13 32 16 15 14 06 23 22 26 35 34 36 36 03 e8 01 43 7c 59 3c 62 38 4a 7d 4d 47 7f 54 04 01 64 05 af fe df af bf fe dd a3 49 86 5c 52 66 31 01 9f 5a 82 82 5a 59 83 3d 64 03 97 1a b4 d7 82 38 26 5b 71 46 4f 75 3f 3d 7b 5d be ff 80 86 f7 a8 74 b3 8c 37 32 6c 91 6a 1a 02 70 81 5b 5a 80 80 5a 3d 64 3b 00 03 00 6d ff ea 05 76 08 1c 00 21 00 25 00 32 00 00 01 35 3e 02 37 36 36 35 34 26 26 23 22 06 06 07 21 36 12 Data Ascii: r72lj\ZZ=d;mr&55m&51#032667!#"$&54667>752#"&5466C\|Y<b8J}MGTdI\Rf1ZZY=d8&[qFOu?={]t72ljp[ZZ=d;mv!%25>76654&&#"!6
2024-08-06 12:25:53 UTC	6396	IN	Data Raw: 59 04 00 04 00 fc 00 04 7a 58 3c 3a 59 57 3c 3e 56 00 02 ff d2 02 82 01 92 09 a1 00 0f 00 1b 00 00 13 21 11 14 06 27 22 22 23 27 16 16 33 32 36 35 13 22 26 35 34 36 33 32 16 15 14 06 73 01 11 ca b4 06 1d 10 01 0a 13 07 47 36 88 3c 5a 5a 3c 3e 59 59 08 00 fb cf ae 9f 02 da 03 01 41 3a 04 a5 56 3e 3c 57 57 3c 3c 58 00 03 00 72 04 00 04 35 09 54 00 06 00 0a 00 0e 00 00 01 11 33 01 21 01 23 01 11 21 11 21 01 37 01 01 6a 2b 01 4f 01 3e fe 42 3e fe 4c 01 11 01 6f fe cc b6 01 c1 05 2f 01 46 01 8b fd ff fe 01 05 54 fa ac 01 c2 c0 fd 7e 00 01 00 72 04 00 01 83 09 54 00 03 00 00 01 11 21 11 01 83 fe ef 09 54 fa ac 05 54 00 01 00 72 04 00 06 35 08 0c 00 24 00 00 13 11 21 15 33 36 36 33 32 16 17 33 36 36 33 32 16 15 11 21 11 34 26 23 22 06 15 11 21 11 34 26 23 22 06 Data Ascii: YzX<:YW<>V!'""#'3265"&54632sG6<ZZ<>YYA:V><WW<<Xr5T3!#!!7j+O>B>Lo/FT~rT!TTr5$!3663236632!4&#"!4&#"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	18.66.27.82	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	566	OUT	GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:53 UTC	765	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309772 Connection: close Date: Tue, 06 Aug 2024 12:25:53 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "d17c0274915408cee0308d5476df9f45" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 429f4d0dffb8bf0b68cf2d9d500542f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P1 X-Amz-Cf-Id: EX1qwcD372SsXm99jaQYI8Z6ymKmm1GiUcnG-WSPGKG4dUC9juwuew== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-08-06 12:25:53 UTC	15619	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-08-06 12:25:53 UTC	1393	IN	Data Raw: 02 26 01 99 00 00 00 07 06 73 00 9a 02 00 ff ff 00 64 fd 70 06 f6 08 00 02 26 01 99 00 00 00 07 06 77 02 2c 00 00 ff ff 00 64 00 00 06 f6 0a 75 02 26 01 99 00 00 00 07 06 70 02 14 02 00 ff ff 00 64 fd c1 06 f6 08 00 02 26 01 99 00 00 00 07 06 8b 06 b2 00 00 ff ff 00 64 fe 19 06 f6 08 00 02 26 01 99 00 00 00 07 08 62 06 ff 00 00 ff ff 00 64 fd ba 06 f6 08 00 02 26 01 99 00 00 00 07 06 89 07 19 00 00 00 01 00 64 00 00 07 58 08 00 00 10 00 00 01 11 21 11 21 11 23 22 06 06 15 15 21 35 34 00 21 07 58 fd 8d fe 54 a3 53 58 21 fe 9a 01 21 01 11 08 00 fe 9b f9 65 06 9b 4a 72 3d 78 c5 f5 01 1c 00 02 00 64 fd c0 06 f6 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 83 88 53 55 c6 64 be 99 5b fd 8d 06 92 fd 8d fe 54 5e 5a 39 Data Ascii: &sdp&w,du&pd&d&bd&dX!!#"!54!XTSX!!eJr=xd!33#".55!!!SUd[T^Z9
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 02 00 ff ff 00 43 fd c1 07 f6 08 00 02 26 01 c5 00 00 00 07 06 8b 07 23 00 00 00 01 00 35 00 00 0b 30 08 00 00 0f 00 00 21 01 21 01 33 01 21 01 33 01 21 01 21 01 23 01 02 7f fd b6 01 d9 01 53 11 01 76 01 95 01 75 12 01 53 01 d9 fd b6 fe 5a fe 7a 10 fe 7b 08 00 fa 71 05 8f fa 6e 05 92 f8 00 05 3b fa c5 ff ff 00 35 00 00 0b 30 0a 7e 02 26 01 c8 00 00 00 07 06 6a 02 9e 02 00 ff ff 00 35 00 00 0b 30 0a 8d 02 26 01 c8 00 00 00 07 06 66 02 61 02 00 ff ff 00 35 00 00 0b 30 0a 8d 02 26 01 c8 00 00 00 07 06 64 03 03 02 00 ff ff 00 35 00 00 0b 30 0a 69 02 26 01 c8 00 00 00 07 06 69 02 c2 00 24 ff ff 00 35 00 00 0b 30 0a 75 02 26 01 c8 00 00 00 07 06 70 04 18 02 00 ff ff 00 35 fd c7 0b 30 08 00 02 26 01 c8 00 00 00 07 06 8b 08 b9 00 06 00 01 00 51 00 00 07 8b 08 00 Data Ascii: C&#50!!3!3!!#SvuSZz{qn;50~&j50&fa50&d50i&i$50u&p50&Q
2024-08-06 12:25:53 UTC	1024	IN	Data Raw: 07 07 f2 00 b7 ff d7 ff ff 00 6c ff e2 06 54 09 20 02 26 03 07 00 00 00 06 07 f3 28 d3 ff ff 00 6c fd c1 06 54 08 7e 02 26 03 07 00 00 00 26 06 6a 4b 00 00 07 06 8b 06 66 00 00 ff ff 00 6c ff e2 06 f4 08 8d 02 26 03 0b 00 00 00 07 06 64 00 b1 00 00 ff ff 00 6c ff e2 06 f4 08 8d 02 26 03 0b 00 00 00 06 06 66 0e 00 ff ff 00 6c ff e2 06 f4 09 07 02 26 03 0b 00 00 00 07 06 80 07 08 00 0a ff ff 00 6c ff e2 06 f4 08 51 02 26 03 0b 00 00 00 07 06 6b 00 a0 00 00 ff ff 00 6c fd c1 06 f4 06 5a 02 26 03 0b 00 00 00 07 06 8b 06 66 00 00 ff ff 00 6c ff 9e 06 54 08 8a 02 26 03 0a 00 00 00 07 06 64 00 b1 ff fe ff ff 00 6c ff e2 06 54 06 14 02 06 03 07 00 00 ff ff 00 6c ff e2 06 54 08 a4 02 26 03 07 00 00 00 07 08 cd 01 b3 00 11 ff ff 00 6c ff e2 06 54 08 b0 02 26 03 07 Data Ascii: lT &(lT~&&jKfl&dl&fl&lQ&klZ&flT&dlTlT&lT&
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 08 fe e4 05 0e 01 01 3b f7 83 08 40 fe fe 3e 81 57 af fe a1 fe f8 fe ff fe 9f b5 52 7d 40 fc ca 05 40 89 cc 71 73 cd 86 85 ca 72 6e ca ff ff 00 aa fd c0 06 84 08 8d 02 26 03 3b 00 00 00 07 06 64 01 12 00 00 ff ff 00 aa fd c0 06 84 08 75 02 26 03 3b 00 00 00 07 06 70 02 27 00 00 ff ff 00 aa fd c0 06 84 06 14 02 06 03 3b 00 00 00 02 00 71 fd c0 06 4a 06 14 00 16 00 26 00 00 01 11 23 0e 02 23 22 24 02 11 10 12 24 33 32 16 16 17 33 11 21 11 01 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 04 a1 0d 1e 6d ad 7c af fe e5 a5 aa 01 1b a9 81 ad 6b 1c 12 01 a4 fd 1d 67 8f 4d 4c 90 67 69 90 4a 4b 8f fd c0 03 36 40 7d 52 b5 01 61 01 01 01 08 01 5f af 57 81 3e 01 02 f7 c0 03 7a 71 cc 89 89 ca 6e 72 ca 85 86 cd 73 00 02 00 71 fd c0 07 79 07 97 00 22 00 32 00 00 01 21 11 Data Ascii: ;@>WR}@@qsrn&;du&;p';qJ&##"$$323!26654&&#"m\|kgMLgiJK6@}Ra_W>zqnrsqy"2!
2024-08-06 12:25:53 UTC	1024	IN	Data Raw: 8d 9f 4a 8d ff ff 00 aa fd c0 06 32 08 a4 02 26 04 53 00 00 00 07 08 cd 01 c0 00 11 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 88 02 5e 00 a8 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 a1 01 9c 00 b0 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 8d 00 b4 00 a8 ff ff 00 aa fd c0 06 32 08 ae 02 26 04 53 00 00 00 07 09 94 00 f1 00 ae ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 8f 01 1a 00 b0 ff ff 00 aa fd c0 06 32 08 ae 02 26 04 53 00 00 00 07 09 96 01 06 00 ae ff ff 00 aa fd c0 06 32 09 cd 02 26 04 53 00 00 00 07 09 91 01 81 00 a8 ff ff 00 aa fd c0 06 32 09 cd 02 26 04 53 00 00 00 07 09 98 01 34 00 a8 ff ff 00 aa fd c0 06 32 08 94 02 26 04 53 00 00 00 07 09 9d 01 5a 00 a0 ff ff 00 aa fd 58 06 32 08 b0 02 Data Ascii: J2&S2&S^2&S2&S2&S2&S2&S2&S2&S42&SZX2
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 07 09 96 ff 2f 00 ae ff ff 00 2d ff ee 03 7a 09 cd 02 26 04 6c 00 00 00 07 09 91 ff aa 00 a8 ff ff ff e0 ff ee 03 7a 09 cd 02 26 04 6c 00 00 00 07 09 98 ff 5d 00 a8 ff ff 00 43 ff ee 03 7a 08 94 02 26 04 6c 00 00 00 07 09 9d ff 83 00 a0 ff ff ff a7 ff ee 03 85 08 18 02 26 04 6c 00 00 00 07 06 6e fe ef 00 00 ff ff ff ae ff ee 03 7d 08 00 02 26 04 6c 00 00 00 07 06 6d fe 7a 00 00 ff ff ff 74 ff ee 03 b0 09 87 02 26 04 6c 00 00 00 07 09 9b fe ea 00 a8 ff ff ff 8a ff ee 03 a1 08 f9 02 26 04 6c 00 00 00 07 09 8b fe ef 00 00 ff ff ff 7e ff ee 03 ba 0a 1c 02 26 04 6c 00 00 00 07 09 8c fe f4 00 a8 00 02 00 46 ff e6 06 69 08 1c 00 1b 00 20 00 00 05 22 26 27 01 03 27 2e 02 07 03 36 36 33 32 04 17 01 16 16 33 32 36 37 13 06 06 25 01 01 23 01 05 bf 8b cd 35 fe fc a8 Data Ascii: /-z&lz&l]Cz&l&ln}&lmzt&l&l~&lFi "&''.66323267%#5
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 6c 00 01 00 c1 02 a0 04 67 03 f2 00 03 00 00 01 11 21 11 04 67 fc 5a 03 f2 fe ae 01 52 ff ff 00 c1 02 a0 04 67 03 f2 02 06 05 51 00 00 00 01 00 00 02 a0 05 80 03 f2 00 03 00 00 01 11 21 11 05 80 fa 80 03 f2 fe ae 01 52 00 01 00 00 02 a0 07 80 03 f2 00 03 00 00 01 11 21 11 07 80 f8 80 03 f2 fe ae 01 52 00 01 00 00 02 a0 0b 00 03 f2 00 03 00 00 01 11 21 11 0b 00 f5 00 03 f2 fe ae 01 52 ff ff 00 00 02 a0 0b 00 03 f2 02 06 05 55 00 00 00 01 00 d5 01 78 04 45 04 e8 00 0f 00 00 01 22 26 26 35 34 36 36 33 32 16 16 15 14 06 06 02 8d 79 c8 77 77 c8 79 7a c7 77 77 c7 01 78 77 c8 79 7a c7 77 77 c7 7a 79 c8 77 00 02 00 d5 01 78 04 45 04 e8 00 0f 00 1b 00 00 01 22 26 26 35 34 36 36 33 32 16 16 15 14 06 06 27 32 36 35 34 26 23 22 06 15 14 16 02 8d 79 c8 77 77 c8 79 7a Data Ascii: lg!gZRgQ!R!R!RUxE"&&546632ywwyzwwxwyzwwzywxE"&&546632'2654&#"ywwyz
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 7a 69 95 b1 be 3d 40 3d 40 0d 00 01 00 78 fd c2 02 ba 00 73 00 14 00 00 01 22 26 27 26 36 36 37 05 06 06 17 06 16 33 32 36 37 17 06 06 01 d6 85 b3 17 0f 23 69 58 01 3d 5e 78 01 01 32 30 21 34 14 2c 25 73 fd c2 89 7f 52 a6 8a 27 73 2c 66 48 30 34 11 07 dc 15 27 00 01 00 42 fd 70 02 48 ff 5e 00 03 00 00 13 13 21 03 42 7c 01 8a db fd 70 01 ee fe 12 ff ff fd 72 06 c6 ff d0 08 8d 00 07 06 64 fb 5c 00 00 00 02 fa 46 06 c6 fc 80 08 8d 00 03 00 07 00 00 01 03 21 03 21 03 21 03 fb 00 10 01 90 52 fe 3d 25 01 84 38 06 c6 01 c7 fe 39 01 c7 fe 39 00 01 fa b8 06 95 fd 97 08 40 00 03 00 00 01 01 21 01 fc 81 01 16 fe aa fe 77 08 40 fe 55 01 ab 00 02 fa 4e 06 c6 fe 9b 08 8d 00 03 00 07 00 00 01 01 21 13 33 03 21 13 fb 86 fe c8 01 90 d5 c1 d6 01 84 79 06 c6 01 c7 fe 39 01 Data Ascii: zi=@=@xs"&'&6673267#iX=^x20!4,%sR's,fH04'BpH^!B\|prd\F!!!R=%899@!w@UN!3!y9
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: 00 01 25 34 36 33 32 1e 02 33 32 36 37 05 06 06 07 22 2e 02 23 22 06 01 16 fe ea db 9e 51 75 5d 55 30 42 44 02 01 11 03 d9 9d 56 75 58 52 34 3a 48 03 5e 03 bf cd 2d 3b 2d 55 45 06 be cc 02 2d 3b 2e 52 00 02 fa d8 06 f0 fe 3e 08 e8 00 03 00 0f 00 00 01 13 21 01 01 36 36 33 32 16 07 16 06 23 22 26 fc 40 ca 01 34 fe e8 fd b2 01 6a 55 59 6a 01 01 6a 59 56 69 06 f0 01 60 fe a0 01 54 44 60 61 43 44 60 61 00 02 fb da 06 95 fe c8 0a 46 00 03 00 0f 00 00 01 01 21 01 01 36 36 33 32 16 07 16 06 23 22 26 fb ea 01 18 01 c6 fe 78 fe 9a 02 76 5e 62 74 01 01 75 61 5f 75 06 95 01 ab fe 55 02 f0 54 6d 6e 53 53 6c 6c ff ff 02 32 fe 2e 04 90 ff f5 00 07 06 64 00 1c f7 68 ff ff ff fa 06 c6 02 59 08 8d 00 07 06 64 fd e5 00 00 ff ff fc 92 fe 1a fe f1 ff e0 00 07 06 64 fa 7d f7 Data Ascii: %46323267".#"Qu]U0BDVuXR4:H^-;-UE-;.R>!6632#"&@4jUYjjYVi`TD`aCD`aF!6632#"&xv^btua_uUTmnSSll2.dhYdd}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49764	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:52 UTC	1223	OUT	GET /keyserver/keyserver?su=JKMARTIN%40COMPASSLLC.COM&df=&tf=&lp=en&v=2&m=%7c1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675.corpmailsvcs.com&s=1&f=0&d=1722947150930&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6flhDlgparjTW9E7x/wjbm5itMZOvyIrQLexZOokPaZMgcJ9NqeVGUGBUlmSYPtFU1LnBtI4YI89oubbo3WrnaACj1vTXXD6BwOCHCQ4SGu1bP2/7jx0DbQD8djm
2024-08-06 12:25:53 UTC	885	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:52 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 1357 Connection: close Set-Cookie: AWSALB=bFNqSjK9d7Wn3bSBkSj8AUV7moKdPNZGYRPDNYmcgI0kUw5/AmgsGSE3a/zH2rtf0Y6IjLwSC2O5nbBufwFXOVrZmOUMblKlrDiA0Ol7ftcgCe46v1oatyxXjPQA; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/ Set-Cookie: AWSALBCORS=bFNqSjK9d7Wn3bSBkSj8AUV7moKdPNZGYRPDNYmcgI0kUw5/AmgsGSE3a/zH2rtf0Y6IjLwSC2O5nbBufwFXOVrZmOUMblKlrDiA0Ol7ftcgCe46v1oatyxXjPQA; Expires=Tue, 13 Aug 2024 12:25:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Set-Cookie: JSESSIONID=969A294580410867A31417746C0F0B6F; Path=/keyserver; Secure; HttpOnly Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-08-06 12:25:53 UTC	1357	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 72 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 31 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 50 6c 65 61 73 65 20 65 6e 72 6f 6c 6c 20 62 65 66 6f 72 65 20 6f 70 65 6e 69 6e 67 20 74 68 69 73 20 52 65 67 69 73 74 65 72 65 64 20 45 6e 76 65 6c 6f 70 65 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 31 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 32 32 39 34 37 31 35 30 39 33 30 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 31 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qr,'action':'open','status':11,'message':'Please enroll before opening this Registered Envelope.','state':1,'reqTime':1722947150930,'reqNumber':1,'recipientIdentified':false,'success':true,'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49765	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:53 UTC	686	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=tilS6G7O1PdjlzDYm5LFzZG4yTVUoC0yxFYX0sI/5ou2/IzqxZBUWfUfmBQ5qk4FaaB41XR36gN9GD8hkCOTQlPtJafAVr24sZLB++TEsSI4hjjQmcsWWFszW815; AWSALBCORS=tilS6G7O1PdjlzDYm5LFzZG4yTVUoC0yxFYX0sI/5ou2/IzqxZBUWfUfmBQ5qk4FaaB41XR36gN9GD8hkCOTQlPtJafAVr24sZLB++TEsSI4hjjQmcsWWFszW815
2024-08-06 12:25:53 UTC	881	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:53 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=RKxUxEky9eKrNb7K2O1lqXnKWA1fDIhKbPLqqCAh3JS/r+EXrRcIBiD+fBNaL6c7Csto87WGGQd81A2PuhRqOB4UdOooqWyi+dn/bpRxXzw4bCPrqqdzpIy+6aCj; Expires=Tue, 13 Aug 2024 12:25:53 GMT; Path=/ Set-Cookie: AWSALBCORS=RKxUxEky9eKrNb7K2O1lqXnKWA1fDIhKbPLqqCAh3JS/r+EXrRcIBiD+fBNaL6c7Csto87WGGQd81A2PuhRqOB4UdOooqWyi+dn/bpRxXzw4bCPrqqdzpIy+6aCj; Expires=Tue, 13 Aug 2024 12:25:53 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT ETag: "19092496550-c9be" Server: unknown
2024-08-06 12:25:53 UTC	8549	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-08-06 12:25:53 UTC	9000	IN	Data Raw: 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 d9 2e c2 08 08 91 c0 c2 40 ba e8 24 3a 39 42 40 1c 82 64 20 cd f9 01 6d 23 37 00 e7 71 a4 f6 c0 13 0f 7d 01 26 f6 92 be 95 ff 00 26 56 58 18 42 73 ea 2e 2e 67 69 1c 67 da 35 86 41 9c 7c 87 3d 73 a1 a4 ce a2 e3 d3 a8 54 2a a7 b8 ff 00 1f 98 71 f9 0f 28 06 ab 1b 87 04 0a Data Ascii: #` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl.@$:9B@d m#7q}&&VXBs..gig5A\|=sT*q(
2024-08-06 12:25:53 UTC	9000	IN	Data Raw: 24 a6 48 19 f7 7e d3 9e bf 72 3b 22 45 f8 d1 05 80 01 40 12 20 08 60 20 00 28 91 c8 53 08 27 90 b9 a0 2e 04 67 cc 5c c0 d6 50 a4 ce d8 c9 1c c0 de 45 c8 c3 f2 12 fb a4 1d 1c 85 c8 e7 fc 81 cc 0e d1 88 65 08 45 09 81 2c a2 59 40 03 10 c0 42 63 13 02 44 31 10 4d f0 8c 97 09 c6 19 b3 52 27 55 13 b8 02 70 a0 e7 be a7 4a 4c c9 ce c0 2e da 72 6f 5a 41 9d 65 bc 8d 3c ea 02 75 f3 40 aa b7 62 7a 8d 01 aa 55 aa c1 0f 8e e1 55 91 35 ea 02 fa 07 35 da 03 87 a8 70 0a 96 ff 00 e4 97 b0 13 6f fb 85 6a 28 cb 40 92 ea 82 15 bd 76 34 5a 10 d5 7a ed d0 d2 b1 b4 80 aa db f4 15 ab cb 71 a7 90 b3 c7 40 27 8a 51 2e 42 c9 b5 12 92 81 63 e2 0e ba 4e 35 02 6b 48 ba 72 b4 35 b2 84 db c9 8f 25 ca a9 2d b5 7a 9a 5f 46 06 0a f0 6d 5b a7 83 9c 60 74 c7 40 4e 0c 6b 66 b5 36 56 90 2e 40 Data Ascii: $H~r;"E@ ` (S'.g\PEeE,Y@BcD1MR'UpJL.roZAe<u@bzUU55poj(@v4Zzq@'Q.BcN5kHr5%-z_Fm[`t@Nkf6V.@
2024-08-06 12:25:53 UTC	16384	IN	Data Raw: c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 31 55 e7 9d 0c 38 55 e1 58 e8 bc 25 ae 8a 01 71 93 b2 b5 8b e5 1d 7c 7b 08 a7 15 96 c6 ed 4e a0 f8 6e eb cf e0 2e 49 ff 00 4f d8 8f a5 e9 64 3f c6 f6 68 2f c6 94 4a cf 68 5d 0d ad d0 54 a7 15 06 4e 5b f5 24 45 2a ef be c1 0e 61 3f 1d 43 94 2f 97 ee 3a e9 9d ca 87 6b 71 Data Ascii: _\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E1U8UX%q\|{Nn.IOd?h/Jh]TN[$Ea?C/:kq
2024-08-06 12:25:53 UTC	8713	IN	Data Raw: 80 e7 8a aa f6 fa ff 00 00 2a a5 ee f1 fc 14 de 7d 04 94 4f 48 07 2b ae 54 b4 00 9a 59 f1 2f f6 29 24 97 8d 59 11 ef 65 b9 5e 70 80 99 4d c2 f4 f1 fa 02 c2 9d de 82 49 e9 a7 f3 fc 14 d4 61 78 fd 80 ad 1b e8 4b 6a 1b 7a 0d a6 b2 ba c7 f5 0b 6b 0b c4 7c 80 cf c9 78 43 55 d3 cd 7e a0 d6 dd 7a 79 e4 a5 9d 5f 5f 80 0b 2d e7 4f dc 2c e2 d0 bd 3f 90 57 76 4d b9 97 fa 04 a6 fc 7b 00 56 d6 35 5f 32 de 75 d9 12 d3 6f d8 36 93 96 bd 00 86 dd 9f a4 14 96 7a 09 f5 d8 a8 86 e0 05 85 1e 72 c4 be 9f 6f cb f7 07 09 63 29 0d 44 e7 dc 03 5b b7 bc 04 7a e0 2b e5 bf 89 07 85 e5 1f c0 05 dc fa a2 23 e9 97 9f 1a 94 e1 3f 50 69 b5 1b cf c0 01 a8 49 74 82 a5 bd 36 25 fd bf 4f 96 4a ae dd 37 f6 ec 03 75 9f 22 70 f5 0b 68 d4 c7 97 44 15 ce de df 1f 20 13 b6 98 d7 20 f1 81 ac d7 ab Data Ascii: *}OH+TY/)$Ye^pMIaxKjzk\|xCU~zy__-O,?WvM{V5_2uo6zroc)D[z+#?PiIt6%OJ7u"phD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49768	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:54 UTC	1216	OUT	GET /keyserver/keyserver?su=JKMARTIN%40COMPASSLLC.COM&df=&tf=&lp=en&v=2&m=%7c1__8f20fe9700000191231dc7c6956fcd86ab9d438e%40mail10675.corpmailsvcs.com&s=1&f=0&d=1722947150930&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=tilS6G7O1PdjlzDYm5LFzZG4yTVUoC0yxFYX0sI/5ou2/IzqxZBUWfUfmBQ5qk4FaaB41XR36gN9GD8hkCOTQlPtJafAVr24sZLB++TEsSI4hjjQmcsWWFszW815; AWSALBCORS=bFNqSjK9d7Wn3bSBkSj8AUV7moKdPNZGYRPDNYmcgI0kUw5/AmgsGSE3a/zH2rtf0Y6IjLwSC2O5nbBufwFXOVrZmOUMblKlrDiA0Ol7ftcgCe46v1oatyxXjPQA
2024-08-06 12:25:54 UTC	885	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:54 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 1353 Connection: close Set-Cookie: AWSALB=hLlTRcvk43K6SpyczKrGPaqlOGHZ/IOaC6qsO5ksx++AaofAEEajB6NwmyxRcuBKeCjmls7jkdUoHijmq9rxuxV+EMUl0W4vIu3nPmJMj6MRVUdLJnuJBiXhgVKa; Expires=Tue, 13 Aug 2024 12:25:54 GMT; Path=/ Set-Cookie: AWSALBCORS=hLlTRcvk43K6SpyczKrGPaqlOGHZ/IOaC6qsO5ksx++AaofAEEajB6NwmyxRcuBKeCjmls7jkdUoHijmq9rxuxV+EMUl0W4vIu3nPmJMj6MRVUdLJnuJBiXhgVKa; Expires=Tue, 13 Aug 2024 12:25:54 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Set-Cookie: JSESSIONID=852CDD0F44E97E5B14CC0F82EEA2CD64; Path=/keyserver; Secure; HttpOnly Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-08-06 12:25:54 UTC	1353	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 72 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 31 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 50 6c 65 61 73 65 20 65 6e 72 6f 6c 6c 20 62 65 66 6f 72 65 20 6f 70 65 6e 69 6e 67 20 74 68 69 73 20 52 65 67 69 73 74 65 72 65 64 20 45 6e 76 65 6c 6f 70 65 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 31 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 32 32 39 34 37 31 35 30 39 33 30 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 31 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qr,'action':'open','status':11,'message':'Please enroll before opening this Registered Envelope.','state':1,'reqTime':1722947150930,'reqNumber':1,'recipientIdentified':false,'success':true,'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:54 UTC	722	OUT	GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=bFNqSjK9d7Wn3bSBkSj8AUV7moKdPNZGYRPDNYmcgI0kUw5/AmgsGSE3a/zH2rtf0Y6IjLwSC2O5nbBufwFXOVrZmOUMblKlrDiA0Ol7ftcgCe46v1oatyxXjPQA
2024-08-06 12:25:54 UTC	972	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:54 GMT Content-Type: image/svg+xml Content-Length: 387 Connection: close Set-Cookie: AWSALB=Hor9tE+PEWYEAS4v/e9nF/H1Jr1nJHB2bGh2zhhiYO7w/wpWaj3UQUoTIXlkzciFaaC3kI7AzlunO6wBc/sxD96/6ElZmiqoFpoUDf1UJ2KD4sVidH8r6ZMZKIm4; Expires=Tue, 13 Aug 2024 12:25:54 GMT; Path=/ Set-Cookie: AWSALBCORS=Hor9tE+PEWYEAS4v/e9nF/H1Jr1nJHB2bGh2zhhiYO7w/wpWaj3UQUoTIXlkzciFaaC3kI7AzlunO6wBc/sxD96/6ElZmiqoFpoUDf1UJ2KD4sVidH8r6ZMZKIm4; Expires=Tue, 13 Aug 2024 12:25:54 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=A732C26D6247F54B78D92E32288F467B; Path=/websafe; Secure; HttpOnly Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-183" Server: unknown
2024-08-06 12:25:54 UTC	387	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 0a 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 62 7b 66 69 6c 6c 3a 23 66 66 66 66 66 66 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 2e 38 38 31 2c 36 2e 31 33 31 63 2e 33 34 32 2d 2e 33 34 32 2c 2e 38 39 36 2d 2e 33 34 32 2c 31 2e 32 33 37 2c 30 6c 32 2e 38 38 31 2c 32 2e 38 38 31 2c 32 2e 38 38 31 2d 32 2e 38 38 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style></defs><path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49771	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:55 UTC	700	OUT	GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=hLlTRcvk43K6SpyczKrGPaqlOGHZ/IOaC6qsO5ksx++AaofAEEajB6NwmyxRcuBKeCjmls7jkdUoHijmq9rxuxV+EMUl0W4vIu3nPmJMj6MRVUdLJnuJBiXhgVKa; AWSALBCORS=hLlTRcvk43K6SpyczKrGPaqlOGHZ/IOaC6qsO5ksx++AaofAEEajB6NwmyxRcuBKeCjmls7jkdUoHijmq9rxuxV+EMUl0W4vIu3nPmJMj6MRVUdLJnuJBiXhgVKa
2024-08-06 12:25:56 UTC	882	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:25:56 GMT Content-Type: image/svg+xml Content-Length: 387 Connection: close Set-Cookie: AWSALB=gbBcH1cYL6wGL7V00Jw3o79OCkCOEyRDd3z638reBRxto7J/CsB2lqCvRkoZ1ycipAjDQCKIVU14hC+cVrk4wWdc4VaHLjLOfHpp6ZQyRBMXDqFmiD+kNZBcAsQM; Expires=Tue, 13 Aug 2024 12:25:56 GMT; Path=/ Set-Cookie: AWSALBCORS=gbBcH1cYL6wGL7V00Jw3o79OCkCOEyRDd3z638reBRxto7J/CsB2lqCvRkoZ1ycipAjDQCKIVU14hC+cVrk4wWdc4VaHLjLOfHpp6ZQyRBMXDqFmiD+kNZBcAsQM; Expires=Tue, 13 Aug 2024 12:25:56 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-183" Server: unknown
2024-08-06 12:25:56 UTC	387	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 0a 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 62 7b 66 69 6c 6c 3a 23 66 66 66 66 66 66 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 2e 38 38 31 2c 36 2e 31 33 31 63 2e 33 34 32 2d 2e 33 34 32 2c 2e 38 39 36 2d 2e 33 34 32 2c 31 2e 32 33 37 2c 30 6c 32 2e 38 38 31 2c 32 2e 38 38 31 2c 32 2e 38 38 31 2d 32 2e 38 38 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style></defs><path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49770	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:55 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-06 12:25:56 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=94442 Date: Tue, 06 Aug 2024 12:25:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49772	13.32.121.40	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:56 UTC	360	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:25:56 UTC	699	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Tue, 06 Aug 2024 12:25:53 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d7433132a7c6595c9aab2dc2272e7060.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: a44T_1Zx6Wv_sj9gXxesr9OibFhxbk-riDtvyQxmCk4QNFdzJwD5Vw== Age: 3 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-08-06 12:25:56 UTC	16384	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-08-06 12:25:56 UTC	6002	IN	Data Raw: 78 36 85 56 3b d6 72 82 22 ba 6e 66 0e d2 6f ca e1 2a a3 1d 93 a8 1c bc bc 0a ca d1 fb 8e 5f a2 d5 d7 6a d4 eb 6d a4 df 76 56 e5 30 fa 11 5e 55 25 2a 57 ae f3 b2 9e ee d4 56 6f d4 95 a3 ec ce 8f a5 57 b5 eb 0c e3 e5 f6 ed 27 1d 6c 07 a3 3c 5c d3 57 ac 64 c1 fb 5b f0 e7 85 e3 ad 5e 4e 2e 46 eb f5 1f 91 d1 c7 ee ad c6 d5 5e 52 ac c0 1b f1 fb c7 58 5c 89 f1 bf be bf c8 df 93 87 8b 9d 4b c3 7f b9 09 72 71 73 a4 ad ad b3 0f f8 98 bf 69 6e 2c f0 da 3c 3a 30 30 e5 f6 7c 9c 59 5e aa f7 5f c0 e6 4c f4 29 ef 1d 1c 72 27 47 df f6 ff 00 23 6b f1 71 73 e5 e2 cf f7 54 a3 cd 57 36 ad c5 cb ed 39 38 b3 f3 d7 ba fe 07 3a b1 11 e8 57 90 d9 5a 4f 35 5c da b7 0a ef 91 9c d5 e4 36 56 03 43 0e 6e 1d cb 06 c9 8c 0f 26 b6 b5 1e d6 69 bd 9e 8b a2 b6 a8 36 57 b0 1c f4 dc d4 9b 56 Data Ascii: x6V;r"nfo_jmvV0^U%WVoW'l<\Wd[^N.F^RX\Krqsin,<:00\|Y^_L)r'G#kqsTW698:WZO5\6VCn&i6WV
2024-08-06 12:25:56 UTC	4461	IN	Data Raw: 75 35 36 80 6a 54 11 4b 7e d7 aa 03 48 43 14 8a 40 a0 26 5f 60 8e e0 39 09 14 21 5a d0 80 99 76 b6 3a 17 0c 55 ab 48 a8 03 35 0a d0 69 f0 33 b3 49 a1 bb f6 cb 02 9b 8d 45 b6 75 12 56 99 65 47 88 0f 08 24 50 82 7b 00 e4 9c bf 02 a0 24 04 aa a6 7a 82 49 36 39 33 4d ee f8 01 a8 0b 20 03 21 bf 52 1c 19 d9 24 d0 1a ca 09 27 01 8e c0 54 93 b9 48 b1 d8 cb 72 dd a0 1d 12 12 40 60 0b 91 3d 45 08 4f 50 34 02 3c 98 64 0a 84 26 b0 12 fb 13 67 20 25 4e a3 96 b5 2d 40 c0 9d c8 78 62 75 ec 4e 9a 81 50 45 a8 de 51 71 d8 25 81 29 ad 1e a3 85 dc 2d 0f 52 2b 65 a3 03 4c a2 53 81 5d 76 70 5e 40 25 32 78 dc a8 ec 57 99 96 15 b1 d4 0d c0 9c 86 ee e0 38 42 da 39 43 02 72 82 7b 94 00 29 26 d5 56 d4 6d c1 2e af 5e a0 5c 09 a9 50 25 2b c4 7b 80 c5 a7 4f 23 54 e4 ad 4c 6c b6 3f 00 Data Ascii: u56jTK~HC@&_`9!Zv:UH5i3IEuVeG$P{$zI693M !R$'THr@`=EOP4<d&g %N-@xbuNPEQq%)-R+eLS]vp^@%2xW8B9Cr{)&Vm.^\P%+{O#TLl?
2024-08-06 12:25:56 UTC	16384	IN	Data Raw: f6 ef d8 8a fb 7a 7e e3 55 c3 c7 5e 80 4f d1 ab d0 15 36 8a f5 55 f9 46 9b ea 06 77 49 b3 17 c5 d8 da cf 24 a7 01 0b 8d d9 59 27 a1 dd 6d 0e 7a 65 a3 a5 95 58 08 6c 44 00 00 c0 00 00 06 52 12 19 44 31 03 02 00 62 28 00 68 45 22 89 18 06 d6 10 c9 b5 55 87 94 12 45 62 f8 e0 95 67 53 a4 8b 52 42 15 79 1d b0 cd 76 f8 9c ae ad 3c 17 4e 68 c3 0a e9 49 0c 85 c8 98 b7 94 68 04 e4 00 4d c1 93 d7 06 e6 77 ab d5 00 ea 9f 70 6d af 11 55 63 0c d1 39 01 48 e4 24 97 59 02 80 95 58 ea 10 d7 88 16 63 ca df 44 6b 24 d8 0c 3d 4c 4e 51 b0 11 13 c7 6c c7 73 73 28 cc 95 bd 22 a9 5a d0 62 dc 8e d9 65 d7 8e 56 48 82 b4 9f 03 58 00 92 a8 80 00 00 31 b2 5b a5 1a bc 02 50 02 56 92 b2 4b f4 e4 7b 93 01 c0 04 86 40 62 91 40 d0 0a 7b 03 4d 8c 8b dd 24 06 5c 96 e8 57 1b da 85 4a 3d 59 Data Ascii: z~U^O6UFwI$Y'mzeXlDRD1b(hE"UEbgSRByv<NhIhMwpmUc9H$YXcDk$=LNQlss("ZbeVHX1[PVK{@b@{M$\WJ=Y
2024-08-06 12:25:56 UTC	16384	IN	Data Raw: 40 22 90 51 d0 94 53 12 20 cf 9a d0 91 9d 6d 22 f7 93 b5 43 8c 9c d4 b3 58 6e 40 ec 55 63 da ce 65 6f 12 97 23 02 ef c7 26 89 f4 32 57 45 27 90 86 91 af 06 8c ca 75 36 e1 ea 15 4f 51 8a c3 28 4c 8e 47 a1 6c c7 9e ea a9 4b 80 14 8f 75 c8 4e 50 27 c9 db 04 47 47 13 6e 64 7d 49 e1 51 32 32 a9 93 67 92 8c 79 1c 34 4a 36 a3 c8 5b 53 2e 27 94 68 f5 03 3b 5a 1c 1a 98 5f e6 47 40 0a 00 00 a0 09 00 00 2a a4 95 50 15 b5 24 ab 12 02 be 86 7b 5f 73 6b 68 41 10 ad 3d 18 b8 d3 4f 2c a6 3a ea 06 ac 82 d9 05 51 d0 c2 2d dc e8 e8 64 04 c5 bb 85 77 77 29 8d 11 1b a2 19 48 96 55 24 64 dd a5 9a 90 06 73 7e a6 9c 72 de 42 24 74 59 22 35 42 b1 44 b7 25 54 8e 44 00 12 c7 2c 40 03 96 1b 84 00 3d c3 56 92 02 63 20 68 f4 32 2f 72 68 cd 81 6b 1a 83 bf 44 63 47 2d bf 02 2a e5 81 da Data Ascii: @"QS m"CXn@Uceo#&2WE'u6OQ(LGlKuNP'GGnd}IQ22gy4J6[S.'h;Z_G@P${_skhA=O,:Q-dww)HU$ds~rB$tY"5BD%TD,@=Vc h2/rhkDcG-
2024-08-06 12:25:56 UTC	16384	IN	Data Raw: 68 65 6e 3b 57 a6 0d eb ee 7f a9 47 fa 5f e8 6d 5b d2 fa 35 3f 73 fe 05 4d fc bc fd d0 1b da ca 4e 7c 30 7a 16 e2 4f c3 ed dc c2 dc 16 5a 38 0b b1 3c 7e f2 31 6f fd d8 fc 4e da f3 55 b8 98 7e 27 27 d2 8f 9b d7 e7 84 0b 8e d5 51 4f 47 82 58 7f 79 19 b2 3d 0b 12 73 d1 de b8 79 f2 fe 66 ca c9 99 67 14 02 18 43 43 12 18 47 1f bf 53 c4 d1 e7 7b 2e 35 4b 38 3d 7f 71 55 6a c5 b4 39 6b 4a 56 cb 60 07 bd aa b5 61 9c 35 f6 d4 75 89 3d 2f 71 c9 4a 29 e4 38 79 3d df 1b 51 4a b9 f2 26 aa 5f b1 55 2e be c1 3c 94 bd d5 d2 d1 12 fd c7 23 eb 03 51 af f6 49 75 1f d0 a5 75 b7 e2 78 b7 e6 e4 b3 cd 99 54 ac a9 63 57 1e a5 af c3 5f dd 92 29 ee e9 1b 5a 67 9f 05 ad 50 d1 ed fb 5b fd 4a 6e 88 c9 d2 72 7b 25 fe d2 f8 9d 65 42 80 08 08 28 12 ec 11 d4 12 81 40 0e 01 28 14 30 86 03 Data Ascii: hen;WG_m[5?sMN\|0zOZ8<~1oNU~''QOGXy=syfgCCGS{.5K8=qUj9kJV`a5u=/qJ)8y=QJ&_U.<#QIuuxTcW_)ZgP[Jnr{%eB(@(0
2024-08-06 12:25:56 UTC	16384	IN	Data Raw: f9 fe 07 0d 4e cf 68 e6 ff 00 00 af 59 1a 23 34 5a 02 c9 b6 85 11 7d 00 f2 ea de f7 05 f9 27 26 7c 72 ee e3 53 6b 6f 6b a0 45 a8 89 7a 92 9a 5a a6 52 6e 05 46 d2 ce 40 4a 2c dc af bc 2d 5a a6 b0 56 55 a7 54 16 6e 54 00 59 24 bb 8d 55 44 c8 59 da 30 5f 4d 00 cd 6d 9c 8a ce 92 94 4f c0 aa cc b1 d9 da 54 20 26 f5 a2 ae 83 54 ac 0e ee db 70 bf 12 93 b7 6e 9d c0 8e 2d b1 85 03 ae dd cc ae 37 68 ca 0a bb 3b 3c 7e 20 2b aa ee 52 8d a6 a9 2f 32 5b b2 b2 f4 97 6b 3d 23 a8 56 9c 96 c9 c5 2f 73 51 a9 db 6a bb 1e 73 be 5a 9c 81 b4 e6 20 75 b3 a5 9c 23 15 c9 18 95 25 d2 6e df 80 45 f2 fb da f1 7c d3 9f 00 e3 ff 00 b0 a7 24 b5 d3 ba 2a be df ea 2c f4 60 fd 92 f0 01 f1 7b c5 ca da ae 76 6b 80 5e f5 3d 3f 21 57 da 3a b9 ab 49 94 bd ab ee 05 d3 dc 3b e8 66 fd da 5a d4 b5 Data Ascii: NhY#4Z}'&\|rSkokEzZRnF@J,-ZVUTnTY$UDY0_MmOT &Tpn-7h;<~ +R/2[k=#V/sQjsZ u#%nE\|$*,`{vk^=?!W:I;fZ
2024-08-06 12:25:56 UTC	16384	IN	Data Raw: 13 56 b3 d9 19 f1 7f 0d 4f 57 93 92 b4 75 e4 d2 b6 c3 ef 9d 3c b3 d5 86 6f 17 58 de df 4a 9b 9e b6 f4 a3 8e fe a5 0b a9 af 33 6e cd 5b ec bc 0f 37 97 95 b7 b2 9f 79 56 f1 cb ba be e1 57 15 fd bf 6c fe 88 aa 4d 5c 3d 5e a7 2f b6 8a c5 96 61 fd de 27 67 b8 5a 5d 11 ce dd 5f 2a ca f1 08 da 1c 99 ad 59 56 41 86 48 6e 2b ae a2 76 8c 57 ef fe 06 6d c1 06 8d f5 04 e4 ce 4b 76 54 52 fa 01 9f 3f 2a e3 ac bf b8 f2 2f 77 77 b9 ea 5f 37 23 e5 b6 e7 f0 f0 32 28 06 52 e3 b3 5b 92 6d 1a 53 db f2 df e5 ad 9f c0 2a 11 ad 5f 73 7a fb 1b ac de d4 a2 f1 79 3a b8 d7 b5 e1 d6 db df 96 3e 08 0c f8 78 ed 7f 95 1e 8a e0 6d 43 70 73 df fe cf 8d 68 9d bf 04 71 72 ff 00 d9 5e d8 ac 55 7e 3f 78 47 a3 ee 7d c2 e0 ac 57 36 8c 1e 7d 7d e7 2c 7a ac e5 9c 93 bd a7 32 76 f1 7b 67 7f 55 fd Data Ascii: VOWu<oXJ3n[7yVWlM\=^/a'gZ]_YVAHn+vWmKvTR?/ww_7#2(R[mS*_szy:>xmCpshqr^U~?xG}W6}},z2v{gU
2024-08-06 12:25:57 UTC	16384	IN	Data Raw: a5 b6 be a7 3b ac b3 33 e3 f9 7e 06 b6 5b 14 62 d1 5f 54 61 79 2f 1f c9 22 38 7b cc bf 2d 14 e5 f8 cf 41 73 35 2f 8d 28 76 cb 87 f7 2e de 70 54 52 ab b6 5b 9f a8 de 17 6f dc f3 af 64 0f 91 36 bf ca e3 af c2 bf 05 97 e2 1e a4 a6 9a bf 93 c9 75 cf 56 f2 bb bf 22 b6 ba 57 0f 0d 6b 1d 7a ff 00 88 03 53 d9 ed 7f ba 75 e9 f7 76 1d ae dd 54 2f 55 bf cd f8 f8 77 82 2b 4d 99 70 ec f5 6f 44 bf c3 f1 35 a4 dd 6f 89 9e af 18 5d fb 79 78 49 15 95 b8 d2 ff 00 6e 36 b7 f1 69 75 fb 2c 11 c9 65 66 d4 3c b5 1a e1 2f ff 00 2e a5 df 92 27 92 61 5e 6a bc bb e7 f6 ad 67 56 cc ab 6a fc f1 2a be 95 de 63 13 df c9 01 af 25 61 aa eb b7 ff 00 53 6f 5f 80 f8 b8 ea df f5 2c c3 d2 dd a7 cf a2 ec 73 ef 75 b4 be fe 52 6e d2 e3 aa 6d 6e da a3 c3 72 e9 fc fb a0 07 e8 76 b3 4a ae 3b c9 9b Data Ascii: ;3~[b_Tay/"8{-As5/(v.pTR[od6uV"WkzSuvT/Uw+MpoD5o]yxIn6iu,ef</.'a^jgVj*c%aSo_,suRnmnrvJ;
2024-08-06 12:25:57 UTC	16384	IN	Data Raw: b4 4f cb 39 d5 84 6e ab b9 a6 d2 dd 57 18 d2 cb 6e 12 f8 6a fb e0 cd 56 2d b1 27 11 15 f0 5d fc 1a 7a 96 ac d5 d6 e5 b1 d6 b0 a3 c7 d5 ff 00 bb fc 04 fd 73 69 8c e6 d3 9f 2b 57 ed 38 0a 2b 7a d1 39 8b da ab 6c eb b9 78 2e cb ab 7d 93 63 55 a5 96 1b ae e5 2b fc ce ba 3f 0d b9 c7 53 0a 5e 56 ec ee e3 72 e1 6a 9b fb 2f 04 6c a7 73 56 4e d7 79 5d b1 fb 6d 18 c7 4f c7 50 2f 7c 37 38 87 b9 b8 99 af 75 5f c7 c0 57 8a d9 37 f3 43 6b cb 5c 78 f8 68 0d 67 33 bd c2 b7 78 ce 73 ad 7a 34 83 65 53 af ed c7 aa b1 32 a2 63 c0 23 07 b7 4a 3d 57 a6 5e 65 eb 5f 27 f7 33 6f ae 95 9b 5d d7 a5 cf 45 1b 63 54 d3 9d b6 f1 86 4a e2 5c 9f ee 5d ae 8a 1e 14 68 96 72 93 e8 fa 58 5c 75 74 b3 96 ea b2 be 15 f1 ff 00 ee 0a 9d aa 95 ab 89 4e 5c f4 87 aa 4f c7 b3 fc 19 4e ab 8e 2d 5f 55 Data Ascii: O9nWnjV-']zsi+W8+z9lx.}cU+?S^Vrj/lsVNy]mOP/\|78u_W7Ck\xhg3xsz4eS2c#J=W^e_'3o]EcTJ\]hrX\utN\ON-_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49773	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UKCM33z49a1PfTP&MD=6AMlHy45 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-06 12:25:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 4630f521-dbfe-44bc-8ebb-ae7da9919392 MS-RequestId: 59f46379-ecb4-4d9d-a446-bf6be1149579 MS-CV: Kx0ARx+kNEiTmRZk.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 06 Aug 2024 12:25:57 GMT Connection: close Content-Length: 24490
2024-08-06 12:25:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-06 12:25:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49774	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:25:57 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-06 12:25:57 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=101983 Date: Tue, 06 Aug 2024 12:25:57 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-06 12:25:57 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49785	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:08 UTC	722	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=ovEY88T/m0/10U3MahtLQc3+ubbVTmuXZQf7RI5gW85s4Q20hUK7KnwgM3n2ZWBK7+iWen3V6l4NbuZ//R7LKEYevx8g6/+TJVqlfPEdU4nfOnnYVncl4p6wN9Kl
2024-08-06 12:27:53 UTC	750	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:27:53 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=IlSkY9aS6qoeTu0wBc+lUM7cyCGMB0n7jS9jUEVRFZlC4Gk54ORWA1WX9ryvXhu0N2OlC6fubjFsOT7195TGlTzpvlXQRxKKUIeFgySX1GtdFWKDEhXZAuddpGGl; Expires=Tue, 13 Aug 2024 12:26:08 GMT; Path=/ Set-Cookie: AWSALBCORS=IlSkY9aS6qoeTu0wBc+lUM7cyCGMB0n7jS9jUEVRFZlC4Gk54ORWA1WX9ryvXhu0N2OlC6fubjFsOT7195TGlTzpvlXQRxKKUIeFgySX1GtdFWKDEhXZAuddpGGl; Expires=Tue, 13 Aug 2024 12:26:08 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-08-06 12:27:53 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-08-06 12:27:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49786	3.227.178.4	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:09 UTC	718	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=6Ue5JYN6E+Uj8HRG/kgwGFm/uXARFtmtv/EUlEntztRFIYNKMgE01Xe/Ij80vMi/NJYwKp9wj+0fwzbfFRlmlhxJ72p/XD+yqkBw8/POg7RjHPpmRAfg+rhKdf/d
2024-08-06 12:27:54 UTC	750	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:27:54 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=rkS9/dHfQoAtIm6kh+5VN1IwH6x4FJHKvnBTo6/VxLxWUPcRyWcS0JVntj/2svRJu7a5e4/S9vZUyf+FMmco8w0Te8CgFBesovKBuZD/6l7Pl6w1thwz7tyRp6vd; Expires=Tue, 13 Aug 2024 12:26:09 GMT; Path=/ Set-Cookie: AWSALBCORS=rkS9/dHfQoAtIm6kh+5VN1IwH6x4FJHKvnBTo6/VxLxWUPcRyWcS0JVntj/2svRJu7a5e4/S9vZUyf+FMmco8w0Te8CgFBesovKBuZD/6l7Pl6w1thwz7tyRp6vd; Expires=Tue, 13 Aug 2024 12:26:09 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-08-06 12:27:54 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-08-06 12:27:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49790	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:37 UTC	914	OUT	GET / HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=gbBcH1cYL6wGL7V00Jw3o79OCkCOEyRDd3z638reBRxto7J/CsB2lqCvRkoZ1ycipAjDQCKIVU14hC+cVrk4wWdc4VaHLjLOfHpp6ZQyRBMXDqFmiD+kNZBcAsQM; AWSALBCORS=6Ue5JYN6E+Uj8HRG/kgwGFm/uXARFtmtv/EUlEntztRFIYNKMgE01Xe/Ij80vMi/NJYwKp9wj+0fwzbfFRlmlhxJ72p/XD+yqkBw8/POg7RjHPpmRAfg+rhKdf/d
2024-08-06 12:26:37 UTC	707	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 06 Aug 2024 12:26:37 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 235 Connection: close Set-Cookie: AWSALB=/kqqVsc1rY5vgmBQkDISmjwK65l2nXuzu4bZEj76MD1GvUXBqOIo99e4Hko0h81Gap+SQY23sUJAf+d/CIfDC9dKIYO5Y7IzNSmFnwH+7zvIQdkdBlyS2pDMKNO7; Expires=Tue, 13 Aug 2024 12:26:37 GMT; Path=/ Set-Cookie: AWSALBCORS=/kqqVsc1rY5vgmBQkDISmjwK65l2nXuzu4bZEj76MD1GvUXBqOIo99e4Hko0h81Gap+SQY23sUJAf+d/CIfDC9dKIYO5Y7IzNSmFnwH+7zvIQdkdBlyS2pDMKNO7; Expires=Tue, 13 Aug 2024 12:26:37 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Set-Cookie: Location: https://res.cisco.com/websafe/root Server: unknown
2024-08-06 12:26:37 UTC	235	IN	Data Raw: 0a 0a 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 43 52 45 53 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 49 66 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 72 65 64 69 72 65 63 74 65 64 20 74 6f 20 74 68 65 20 53 65 63 75 72 65 20 4d 65 73 73 61 67 65 20 43 65 6e 74 65 72 20 6c 6f 67 69 6e 0a 20 20 20 20 20 20 20 20 70 61 67 65 20 70 6c 65 61 73 65 20 63 6c 69 63 6b 20 3c 61 20 68 72 65 66 3d 22 2f 77 65 62 73 61 66 65 2f 72 6f 6f 74 22 3e 68 65 72 65 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <title>CRES</title> </head> <body> If you are not automatically redirected to the Secure Message Center login page please click <a href="/websafe/root">here</a>. </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49789	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:37 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UKCM33z49a1PfTP&MD=6AMlHy45 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-06 12:26:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: bd62909a-da03-4ade-b53b-d3b637f5eded MS-RequestId: a8c94804-95e0-41ba-a757-fc368d3b984c MS-CV: HskFG1QMWUOyM8jZ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 06 Aug 2024 12:26:36 GMT Connection: close Content-Length: 30005
2024-08-06 12:26:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-06 12:26:37 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49791	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:37 UTC	971	OUT	GET /websafe/root HTTP/1.1 Host: res.cisco.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=/kqqVsc1rY5vgmBQkDISmjwK65l2nXuzu4bZEj76MD1GvUXBqOIo99e4Hko0h81Gap+SQY23sUJAf+d/CIfDC9dKIYO5Y7IzNSmFnwH+7zvIQdkdBlyS2pDMKNO7; AWSALBCORS=/kqqVsc1rY5vgmBQkDISmjwK65l2nXuzu4bZEj76MD1GvUXBqOIo99e4Hko0h81Gap+SQY23sUJAf+d/CIfDC9dKIYO5Y7IzNSmFnwH+7zvIQdkdBlyS2pDMKNO7
2024-08-06 12:26:37 UTC	906	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:37 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 13091 Connection: close Set-Cookie: AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; Expires=Tue, 13 Aug 2024 12:26:37 GMT; Path=/ Set-Cookie: AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; Expires=Tue, 13 Aug 2024 12:26:37 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Language: en Server: unknown
2024-08-06 12:26:37 UTC	8524	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0a 20 20 20 20 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en"> <head> <title>Login</title> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
2024-08-06 12:26:37 UTC	4567	IN	Data Raw: 20 63 6c 61 73 73 3d 22 72 6f 77 20 6d 78 2d 61 75 74 6f 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 22 3e 0a 3c 68 31 20 63 6c 61 73 73 3d 22 6d 64 73 2d 68 65 61 64 69 6e 67 20 74 65 78 74 2d 63 65 6e 74 65 72 20 6c 6f 67 69 6e 2d 48 65 61 64 69 6e 67 22 3e 53 65 63 75 72 65 20 45 6d 61 69 6c 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 6d 78 2d 61 75 74 6f 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 22 3e 0a 3c 68 31 20 63 6c 61 73 73 3d 22 6d 64 73 2d 68 65 61 64 69 6e 67 20 74 65 78 74 2d 63 65 6e 74 65 72 20 6c 6f 67 69 6e 2d 48 65 61 64 69 6e 67 Data Ascii: class="row mx-auto justify-content-center align-items-center"><h1 class="mds-heading text-center login-Heading">Secure Email</h1></div><div class="row mx-auto justify-content-center align-items-center"><h1 class="mds-heading text-center login-Heading

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49801	104.17.25.14	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	561	OUT	GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:38 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-520c" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 17839 Expires: Sun, 27 Jul 2025 12:26:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KxLOzEJOihNCKWaUGKRt7TptkhxlARIp3BftpsqqGAPzKKG3eZUGQm6lUtsrxz2hvapFWuy9rVwtsF5xLDgvOUpg%2BdSKXNWReqdhkPsAkvcrt8xCJPpgZJIs%2Bwf09cqDA8j5VHsi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8aef0434ee54195d-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:26:38 UTC	414	IN	Data Raw: 35 32 30 63 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 39 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 520c/* Copyright (C) Federico Zivolo 2019 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6e 3d 6f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6e 5b 74 5d 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 Data Ascii: deType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerD
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 69 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e Data Ascii: void 0!==arguments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|i;return r[o]}return e[o]}function f(e,t){var o=2<arguments.len
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 2c 66 3d 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 64 2c 68 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 61 3b 69 66 28 66 7c 7c 68 29 7b 76 61 72 20 75 3d 74 28 65 29 3b 66 2d 3d 6d 28 75 2c 27 78 27 29 2c 68 2d 3d 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 29 2c 73 3d 27 48 54 4d 4c 27 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 75 28 65 29 2c 61 3d 75 28 6f 29 2c 6c 3d 6e 28 65 29 2c 6d 3d 74 28 6f 29 2c 68 3d Data Ascii: ,f=e.offsetWidth-d,h=e.offsetHeight-a;if(f\|\|h){var u=t(e);f-=m(u,'x'),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTML'===o.nodeName,d=u(e),a=u(o),l=n(e),m=t(o),h=
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 34 5d 2c 73 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 2c 64 3d 70 3f 45 28 65 29 3a 61 28 65 2c 74 29 3b 69 66 28 27 76 69 65 77 70 6f 72 74 27 3d 3d 3d 72 29 73 3d 77 28 64 2c 70 29 3b 65 6c 73 65 7b 76 61 72 20 6c 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 72 3f 28 6c 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 6f 77 27 3d 3d 3d 72 3f 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 6c 3d 72 3b 76 61 72 Data Ascii: ngth&&void 0!==arguments[4]&&arguments[4],s={top:0,left:0},d=p?E(e):a(e,t);if('viewport'===r)s=w(d,p);else{var l;'scrollParent'===r?(l=n(o(t)),'BODY'===l.nodeName&&(l=e.ownerDocument.documentElement)):'window'===r?l=e.ownerDocument.documentElement:l=r;var
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6f 3d 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 54 6f 70 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 7c 7c 30 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 4c 65 66 74 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 52 69 67 68 74 7c 7c 30 29 2c 72 3d 7b 77 69 64 74 68 3a 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 69 2c 68 65 69 67 68 74 3a 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2b 6e 7d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 7b 6c 65 66 74 3a 27 72 69 67 68 74 27 2c 72 69 67 68 74 Data Ascii: nt.defaultView,o=t.getComputedStyle(e),n=parseFloat(o.marginTop\|\|0)+parseFloat(o.marginBottom\|\|0),i=parseFloat(o.marginLeft\|\|0)+parseFloat(o.marginRight\|\|0),r={width:e.offsetWidth+i,height:e.offsetHeight+n};return r}function T(e){var t={left:'right',right
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 3d 4f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 64 69 6e 67 29 2c 65 2e 6f 72 69 67 69 6e 61 6c 50 6c 61 63 65 6d 65 6e 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 44 28 Data Ascii: ement=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.padding),e.originalPlacement=e.placement,e.positionFixed=this.options.positionFixed,e.offsets.popper=D(
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 72 2c 27 73 63 72 6f 6c 6c 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 6f 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 29 2c 6f 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 72 2c 6f 2e 65 76 65 6e 74 73 Data Ascii: ddEventListener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scroll',o.updateBound,o.scrollParents),o.scrollElement=r,o.events
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 2c 62 6f 74 74 6f 6d 3a 6d 28 6e 2e 62 6f 74 74 6f 6d 29 2c 72 69 67 68 74 3a 66 28 6e 2e 72 69 67 68 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 43 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 69 3d 21 21 6e 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 6e 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 69 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 Data Ascii: ,bottom:m(n.bottom),right:f(n.right)}}function K(e,t,o){var n=C(e,function(e){var o=e.name;return o===t}),i=!!n&&e.some(function(e){return e.name===o&&e.enabled&&e.order<n.order});if(!i){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 61 3d 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 28 31 3d 3d 3d 6e 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 28 65 2c 69 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e Data Ascii: a=a.map(function(e,n){var i=(1===n?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return _(e,i,t,o)})}),a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49797	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	891	OUT	GET /websafe/templates/css/postx.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
2024-08-06 12:26:38 UTC	882	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: text/css Content-Length: 121925 Connection: close Set-Cookie: AWSALB=wdbCiBIzeM75oO9D3rr/6jkRRyQ2Z2id5D1qb7cB6u77CVz9nY2jbjowtED7nZyTigCJNn2rE2LSTEFRkc2/Zh/EM9SNRr/jWhxprIThqsghP1nzvDx1As/wVKYH; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/ Set-Cookie: AWSALBCORS=wdbCiBIzeM75oO9D3rr/6jkRRyQ2Z2id5D1qb7cB6u77CVz9nY2jbjowtED7nZyTigCJNn2rE2LSTEFRkc2/Zh/EM9SNRr/jWhxprIThqsghP1nzvDx1As/wVKYH; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-1dc45" Server: unknown
2024-08-06 12:26:38 UTC	8548	IN	Data Raw: 2f 2a 20 47 65 6e 65 72 61 6c 20 73 74 79 6c 65 73 20 2a 2f 0a 2f 2a 20 24 49 64 3a 20 70 6f 73 74 78 2e 63 73 73 2c 76 20 31 2e 31 30 34 20 32 30 31 36 2d 30 33 2d 31 30 20 31 31 3a 33 36 3a 31 32 20 69 67 69 74 73 6b 61 69 20 45 78 70 20 24 20 2a 2f 0a 68 74 6d 6c 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 37 66 37 66 37 3b 0a 7d 0a 62 6f 64 79 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 37 66 37 66 37 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 37 66 37 66 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 69 6e 70 75 74 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 2e 6d 64 73 2d 62 75 74 74 6f 6e 29 3a 68 6f 76 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 Data Ascii: /* General styles // $Id: postx.css,v 1.104 2016-03-10 11:36:12 igitskai Exp $ */html { background-color: #f7f7f7;}body{ background-color: #f7f7f7; background: #f7f7f7 !important;}input:not([disabled]):not(.mds-button):hover { border-color
2024-08-06 12:26:38 UTC	9000	IN	Data Raw: 66 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 23 73 65 63 52 65 70 6c 79 49 6e 6e 65 72 43 6f 6e 74 65 6e 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 0a 2f 2a 20 48 65 6c 70 20 61 6e 64 20 65 72 72 6f 72 20 72 65 6c 61 74 65 64 20 73 74 79 6c 65 73 20 2a 2f 0a 0a 2e 65 72 72 6f 72 42 6f 64 79 20 7b 0a 20 20 77 69 64 74 68 3a 20 34 31 33 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 61 34 61 34 64 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 49 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 7d 0a 0a 0a 23 65 72 72 6f 72 50 61 6e 65 6c 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c Data Ascii: f; text-align: left;}#secReplyInnerContent { margin-left: 8px;}/* Help and error related styles */.errorBody { width: 413px; color: #4a4a4d; font-family: Inter; font-size: 14px; line-height: 19px;}#errorPanelContainer { text-al
2024-08-06 12:26:38 UTC	9000	IN	Data Raw: 20 70 72 65 2e 64 65 66 61 75 6c 74 54 65 78 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 7d 0a 0a 2e 64 65 66 61 75 6c 74 48 65 61 64 65 72 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 2e 65 72 72 6f 72 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 65 36 30 30 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2e 6c 6f 67 69 6e 4e 6f 74 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 31 32 64 38 36 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 7d 0a 0a 2e 70 72 6f 66 69 6c 65 4e 6f 74 65 Data Ascii: pre.defaultText { margin: 0px;}.defaultHeaderText { color: #555555; font-size: 8pt; font-weight: bold;}.errorText { color: #e60000; font-size: 8pt;}.loginNote { color: #012d86; font-weight: bold; font-size: 8pt;}.profileNote
2024-08-06 12:26:38 UTC	9000	IN	Data Raw: 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 70 78 3b 0a 7d 0a 0a 2e 6d 65 73 73 61 67 65 42 6f 64 79 43 6f 6e 74 61 69 6e 65 72 20 70 72 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 74 3b 0a 7d 0a 0a 23 61 64 64 72 42 6f 6f 6b 41 63 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 23 61 64 64 72 42 6f 6f 6b 41 63 74 69 6f 6e 73 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 23 61 64 64 72 42 6f 6f 6b 43 6f 6e 74 61 63 74 73 54 61 62 6c 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 70 78 20 31 36 70 78 3b 0a 7d 0a 0a 2e 65 6d 61 69 6c 41 64 64 72 46 6f 72 63 65 57 72 61 70 Data Ascii: tainer { margin: 10px 0px;}.messageBodyContainer pre { color: #555555; font-size: 10pt;}#addrBookActionContainer { width: 100%;}#addrBookActions { float: right;}#addrBookContactsTable { padding: 0px 0px 16px;}.emailAddrForceWrap
2024-08-06 12:26:38 UTC	16384	IN	Data Raw: 3a 20 31 30 30 25 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 30 30 70 78 29 20 7b 0a 20 20 2e 73 68 6f 77 2d 61 63 63 6f 75 6e 74 2d 6f 70 74 69 6f 6e 73 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 38 25 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e Data Ascii: : 100%;}@media screen and (max-width: 1300px) { .show-account-options { background-color: #ffffff; box-shadow: 0 2px 3px 0 rgba(0, 0, 0, 0.1); display: block; margin-left: 18%; padding: 10px; position: absolute; text-align
2024-08-06 12:26:38 UTC	16384	IN	Data Raw: 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 64 65 74 61 69 6c 2d 6e 6f 74 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 65 6d 61 69 6c 43 6f 6e 74 65 6e 74 20 7b 0a 7d 0a 2e 66 6f 6c 64 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 20 6c 69 6e 65 Data Ascii: text-align: center;}.detail-note { background: #ffffff; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #000000; line-height: 12px; text-align: center;}.emailContent {}.folder { margin-left: 10px; line
2024-08-06 12:26:38 UTC	16384	IN	Data Raw: 6f 76 65 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6c 75 65 2d 32 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6d 65 64 69 75 6d 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6c 69 67 68 74 2d 68 6f 76 65 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6c 75 65 2d 32 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 74 65 78 74 2d 73 74 72 6f 6e 67 2d 64 69 73 61 62 6c 65 64 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 74 65 78 74 2d 73 74 72 6f 6e 67 2d 64 65 73 74 72 75 63 74 69 76 Data Ascii: over: var(--color-blue-2); --color-interact-background-medium: var(--color-neutral-1); --color-interact-background-light-hover: var(--color-blue-2); --color-interact-text-strong-disabled: var(--color-white); --color-interact-text-strong-destructiv
2024-08-06 12:26:38 UTC	16384	IN	Data Raw: 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 73 61 62 6c 65 64 3a 20 76 61 72 28 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6c 69 67 68 74 0a 20 20 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 74 65 78 74 2d 6d 65 64 69 75 6d 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 68 6f 76 65 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 64 6d 69 6e 2d 69 6e 74 65 72 61 63 74 2d 74 65 78 74 2d 6d 65 64 69 75 6d 2d 68 6f 76 65 72 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 64 69 73 61 62 Data Ascii: -background-disabled: var( --color-admin-interact-background-light ); --mds-button-color-text: var(--color-admin-interact-text-medium); --mds-button-color-text-hover: var(--color-admin-interact-text-medium-hover); --mds-button-color-text-disab
2024-08-06 12:26:38 UTC	16384	IN	Data Raw: 2e 6d 64 73 2d 73 77 69 74 63 68 2e 6d 64 73 2d 73 77 69 74 63 68 2d 6b 69 6e 64 2d 74 6f 67 67 6c 65 5b 61 72 69 61 2d 63 68 65 63 6b 65 64 3d 5c 22 6d 69 78 65 64 5c 22 5d 20 7b 0a 20 20 2d 2d 6d 64 73 2d 73 77 69 74 63 68 2d 73 76 67 2d 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6c 75 65 2d 37 29 3b 0a 20 20 2d 2d 6d 64 73 2d 73 77 69 74 63 68 2d 73 76 67 2d 66 69 6c 6c 2d 68 6f 76 65 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6c 75 65 2d 39 29 3b 0a 20 20 2d 2d 6d 64 73 2d 73 77 69 74 63 68 2d 73 76 67 2d 66 69 6c 6c 2d 64 69 73 61 62 6c 65 64 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6c 75 65 2d 33 29 3b 0a 7d 0a 2e 6d 64 73 2d 73 77 69 74 63 68 2e 6d 64 73 2d 73 77 69 74 63 68 2d 6b 69 6e 64 2d 74 6f 67 67 6c 65 5b 61 72 69 61 Data Ascii: .mds-switch.mds-switch-kind-toggle[aria-checked=\"mixed\"] { --mds-switch-svg-fill: var(--color-blue-7); --mds-switch-svg-fill-hover: var(--color-blue-9); --mds-switch-svg-fill-disabled: var(--color-blue-3);}.mds-switch.mds-switch-kind-toggle[aria
2024-08-06 12:26:38 UTC	4457	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 70 33 2d 64 65 66 61 75 6c 74 2d 72 65 67 75 6c 61 72 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 34 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 6d 64 73 42 6f 78 48 65 61 64 65 72 54 69 74 6c 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 68 61 72 70 53 61 6e 73 22 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c Data Ascii: portant;}.p3-default-regular { font-family: "Inter"; font-style: normal; font-weight: 400; font-size: 14px; line-height: 20px; color: var(--color-neutral-14) !important;}.mdsBoxHeaderTitle { font-family: "SharpSans"; font-style: normal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49793	104.18.10.207	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	571	OUT	GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:38 UTC	934	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"a15c2ac3234aa8f6064ef9c1f7383c37" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/12/2023 01:20:55 CDN-EdgeStorageId: 1070 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: d05c609d2551096548d410fd498c1b83 CDN-Cache: HIT CF-Cache-Status: HIT Age: 12603220 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8aef0434cd4d192a-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:26:38 UTC	435	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7c0c/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 Data Ascii: oration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{marg
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d Data Ascii: dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button]
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e Data Ascii: m;cursor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a Data Ascii: :.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c Data Ascii: md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 34 7b 2d 6d 73 2d 66 Data Ascii: x:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;order:3}.order-4{-ms-f
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d Data Ascii: -sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;m
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 Data Ascii: .333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49792	104.18.10.207	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	577	OUT	GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:38 UTC	933	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"269550530cc127b6aa5a35925a7de6ce" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-CachedAt: 11/30/2023 17:43:30 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 755 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: ab8626e4b724b111058794b60ba8757c CDN-Cache: HIT CF-Cache-Status: HIT Age: 12589536 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8aef04350a1e440c-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:26:38 UTC	436	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 Data Ascii: me-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b Data Ascii: :rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 Data Ascii: x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:b
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e Data Ascii: }.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d Data Ascii: "}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 Data Ascii: re{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f07
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 Data Ascii: nt:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 Data Ascii: efore,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d Data Ascii: 0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49796	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	895	OUT	GET /websafe/templates/css/overrides.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
2024-08-06 12:26:38 UTC	875	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: text/css Content-Length: 68 Connection: close Set-Cookie: AWSALB=vOBC4KFYQuSeNU8o1nSIDT9cbWoJxsUMgoiEyVgTXDnxX9u1pdakal+qdmsTDtqEcpkBqudHH9/tWMsRYdqLvkJigjL7VCLmGd4QRjVv3tN7iiWTx3TmiXP9Ndn/; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/ Set-Cookie: AWSALBCORS=vOBC4KFYQuSeNU8o1nSIDT9cbWoJxsUMgoiEyVgTXDnxX9u1pdakal+qdmsTDtqEcpkBqudHH9/tWMsRYdqLvkJigjL7VCLmGd4QRjVv3tN7iiWTx3TmiXP9Ndn/; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-44" Server: unknown
2024-08-06 12:26:38 UTC	68	IN	Data Raw: 2f 2a 20 41 6e 79 20 63 75 73 74 6f 6d 20 6f 72 20 6f 76 65 72 72 69 64 64 65 6e 20 73 74 79 6c 65 73 20 63 61 6e 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 20 2a 2f 0d 0a Data Ascii: /* Any custom or overridden styles can be included in this file */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49800	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	840	OUT	GET /admin/cisco-fonts.min.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
2024-08-06 12:26:38 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: text/css Content-Length: 2143 Connection: close Set-Cookie: AWSALB=C+zriyOZshHBF/SazfFeFRp7/RXF8gg0J8JOnaU2QCdMI/Hm9iz1PVBHcRwQSD+J8dxMYLZY2PMj3gi2qOBdY/PSjx7phFwdRg0TZertjq0D0LtNPIsiBd16uNHn; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/ Set-Cookie: AWSALBCORS=C+zriyOZshHBF/SazfFeFRp7/RXF8gg0J8JOnaU2QCdMI/Hm9iz1PVBHcRwQSD+J8dxMYLZY2PMj3gi2qOBdY/PSjx7phFwdRg0TZertjq0D0LtNPIsiBd16uNHn; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"2143-1720441202000" Last-Modified: Mon, 08 Jul 2024 12:20:02 GMT Server: unknown
2024-08-06 12:26:38 UTC	2143	IN	Data Raw: 0a 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 45 78 74 72 61 4c 69 67 68 74 2e 74 74 66 22 29 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");}@font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inter-ExtraLight.ttf")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49795	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	883	OUT	GET /websafe/templates/standard-scripts.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
2024-08-06 12:26:38 UTC	894	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: application/javascript Content-Length: 17973 Connection: close Set-Cookie: AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/ Set-Cookie: AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-4635" Server: unknown
2024-08-06 12:26:38 UTC	15490	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 6e 4c 6f 61 64 50 61 67 65 28 29 0a 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 6e 64 20 75 6e 68 69 64 65 20 73 6f 6d 65 20 74 68 69 6e 67 73 2e 20 46 6f 72 20 6e 6f 77 20 77 65 20 61 73 73 75 6d 65 20 65 76 65 72 79 74 68 69 6e 67 20 74 68 61 74 20 6d 69 67 68 74 0a 20 20 20 20 2f 2f 20 6e 65 65 64 20 74 6f 20 62 65 20 74 6f 67 67 6c 65 64 20 69 73 20 61 20 64 69 76 20 6f 72 20 61 2e 0a 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 64 69 76 27 29 3b 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 61 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 20 53 65 74 20 74 68 65 20 66 6f 63 75 73 20 6f 6e 20 74 68 65 20 66 69 65 6c 64 20 69 64 65 6e 74 69 66 69 65 64 20 69 6e 20 6f 75 72 20 58 4d 4c Data Ascii: function onLoadPage(){ // Hide and unhide some things. For now we assume everything that might // need to be toggled is a div or a. toggleVisibility('div'); toggleVisibility('a'); // Set the focus on the field identified in our XML
2024-08-06 12:26:38 UTC	2483	IN	Data Raw: 65 6e 74 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 6e 6f 73 63 72 69 70 74 45 6c 65 6d 65 6e 74 5b 30 5d 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 6e 6f 73 63 72 69 70 74 45 6c 65 6d 65 6e 74 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 22 22 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 55 70 43 75 73 74 6f 6d 54 6f 6f 6c 74 69 70 28 29 20 7b 0a 20 20 20 20 24 28 27 69 6d 67 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 74 69 74 6c 65 27 2c 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 74 69 74 6c 65 27 29 29 3b 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 74 69 74 6c 65 27 29 3b 0a 20 20 20 20 7d 29 3b 0a 0a Data Ascii: ent != undefined && noscriptElement[0] != undefined) noscriptElement[0].className = "";}function setUpCustomTooltip() { $('img').each(function () { $(this).data('title', $(this).attr('title')); $(this).removeAttr('title'); });

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49798	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	880	OUT	GET /websafe/templates/screen-reader.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M; AWSALBCORS=kgyfUqPSBbF7RffhgIRrzDnf1RdNOQvN7H1fplHSFrISJfcsKP+i1ciRiJMLj120mLQExTGnkM06TvXcG2gmVcZJrVi0vNHr5EZP2TwPjTuvl/XclnodxWu3op+M
2024-08-06 12:26:38 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: application/javascript Content-Length: 2111 Connection: close Set-Cookie: AWSALB=QfDNqvaijhF5oh4RJdtJzAWF3zjRRbxYe7TkcKFbgO0dctlXjGrxK38Ohzf6XpBizHYBW8xXmgg2yHH3nhjpZlHwlvtFyKcHMInygaHoQhDUqALXCyFoqs/ZrjC7; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/ Set-Cookie: AWSALBCORS=QfDNqvaijhF5oh4RJdtJzAWF3zjRRbxYe7TkcKFbgO0dctlXjGrxK38Ohzf6XpBizHYBW8xXmgg2yHH3nhjpZlHwlvtFyKcHMInygaHoQhDUqALXCyFoqs/ZrjC7; Expires=Tue, 13 Aug 2024 12:26:38 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-83f" Server: unknown
2024-08-06 12:26:38 UTC	2111	IN	Data Raw: 0d 0a 76 61 72 20 73 63 72 65 65 6e 52 65 61 64 65 72 43 61 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 73 65 72 74 46 6f 72 53 63 72 65 65 6e 52 65 61 64 65 72 28 74 65 78 74 29 7b 0d 0a 09 76 61 72 20 77 61 72 6e 69 6e 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 27 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 65 78 74 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 61 73 73 65 72 74 69 76 65 22 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e Data Ascii: var screenReaderCalled = false;function insertForScreenReader(text){var warning = document.getElementById('timeoutMessage');warning.innerHTML = text;warning.style.display = "none";warning.setAttribute("aria-live","assertive");warning.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49794	104.18.10.207	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	555	OUT	GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:38 UTC	948	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-CachedAt: 08/21/2023 18:50:34 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1079 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 36ad91b3dfbce66e0ffcc11d89feb8e5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 12589525 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8aef0435bc198cd6-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:26:38 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bff/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 67 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: query","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProper
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 6e 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 22 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 3b 72 65 74 75 72 6e 20 69 7c 7c 6f 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f Data Ascii: romElement:function(t){if(!t)return 0;var e=g(t).css("transition-duration"),n=g(t).css("transition-delay"),i=parseFloat(e),o=parseFloat(n);return i\|\|o?(e=e.split(",")[0],n=n.split(",")[0],1e3*(parseFloat(e)+parseFloat(n))):0},reflow:function(t){return t.o
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 72 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: n i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=this._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){g.removeData(this._element,r),this._elemen
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 2c 62 3d 22 62 74 6e 22 2c 49 3d 22 66 6f 63 75 73 22 2c 44 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 77 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 2c 41 3d 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 2c 4e 3d 22 2e 61 63 74 69 76 65 22 2c 4f 3d 22 2e 62 74 6e 22 2c 6b 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 45 2b 43 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 22 66 6f 63 75 73 22 2b 45 2b 43 2b 22 20 62 6c 75 72 22 2b 45 2b 43 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 6e 2e 70 72 Data Ascii: ,b="btn",I="focus",D='[data-toggle^="button"]',w='[data-toggle="buttons"]',A='input:not([type="hidden"])',N=".active",O=".btn",k={CLICK_DATA_API:"click"+E+C,FOCUS_BLUR_DATA_API:"focus"+E+C+" blur"+E+C},P=function(){function n(t){this._element=t}var t=n.pr
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 74 6f 67 67 6c 65 43 6c 61 73 73 28 49 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 67 2e 66 6e 5b 76 5d 3d 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 67 2e 66 6e 5b 76 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 50 2c 67 2e 66 6e 5b 76 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 66 6e 5b 76 5d 3d 54 2c 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 4c 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6a 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 48 3d 22 2e 22 2b 6a 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 67 2e 66 6e 5b 4c 5d 2c 46 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 Data Ascii: toggleClass(I,/^focus(in)?$/.test(t.type))}),g.fn[v]=P._jQueryInterface,g.fn[v].Constructor=P,g.fn[v].noConflict=function(){return g.fn[v]=T,P._jQueryInterface};var L="carousel",j="bs.carousel",H="."+j,R=".data-api",x=g.fn[L],F={interval:5e3,keyboard:!0,s
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6f 74 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e Data Ascii: s._getConfig(e),this._element=t,this._indicatorsElement=this._element.querySelector(ot),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MSPointerEvent),this.
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6f 66 66 28 48 29 2c 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6a 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 46 2c 74 29 2c 5f 2e 74 79 Data Ascii: off(H),g.removeData(this._element,j),this._items=null,this._config=null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},t._getConfig=function(t){return t=l({},F,t),_.ty
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 55 50 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 4a 29 29 3a 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 48 53 54 41 52 54 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: unction(t){return t.preventDefault()}),this._pointerEvent?(g(this._element).on(Q.POINTERDOWN,function(t){return e(t)}),g(this._element).on(Q.POINTERUP,function(t){return i(t)}),this._element.classList.add(J)):(g(this._element).on(Q.TOUCHSTART,function(t){
2024-08-06 12:26:38 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 5a 29 29 3b 67 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 67 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 6f 2c 72 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 74 29 2c 61 3d 74 68 Data Ascii: lement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(Z));g(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&g(n).addClass(V)}},t._slide=function(t,e){var n,i,o,r=this,s=this._element.querySelector(tt),a=th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49802	104.17.25.14	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:38 UTC	388	OUT	GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:39 UTC	965	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-520c" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 17840 Expires: Sun, 27 Jul 2025 12:26:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ozCF5fwzsfMw7SiW%2Fo%2F7TThB6bTQuL0ekl%2F28Yv3FEXU7QsSmVerPpfv9NT%2FuHivfGmBqdA77OlOrWRFdYdOiWe%2FIj10YlcwOqy%2FXwTC0AQZlDBSvwnmNmN%2BZn6nC8BUI947VJ26"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8aef043a4a0943b7-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:26:39 UTC	404	IN	Data Raw: 35 32 30 63 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 39 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 520c/* Copyright (C) Federico Zivolo 2019 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6e 3d 6f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6e 5b 74 5d 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 Data Ascii: f(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':retur
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 69 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 Data Ascii: s.length&&void 0!==arguments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|i;return r[o]}return e[o]}function f(e,t){var o=2<arg
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 74 74 6f 6d 2d 70 2e 74 6f 70 2c 66 3d 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 64 2c 68 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 61 3b 69 66 28 66 7c 7c 68 29 7b 76 61 72 20 75 3d 74 28 65 29 3b 66 2d 3d 6d 28 75 2c 27 78 27 29 2c 68 2d 3d 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 29 2c 73 3d 27 48 54 4d 4c 27 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 75 28 65 29 2c 61 3d 75 28 6f 29 2c 6c 3d 6e 28 65 29 Data Ascii: ttom-p.top,f=e.offsetWidth-d,h=e.offsetHeight-a;if(f\|\|h){var u=t(e);f-=m(u,'x'),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTML'===o.nodeName,d=u(e),a=u(o),l=n(e)
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 34 5d 2c 73 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 2c 64 3d 70 3f 45 28 65 29 3a 61 28 65 2c 74 29 3b 69 66 28 27 76 69 65 77 70 6f 72 74 27 3d 3d 3d 72 29 73 3d 77 28 64 2c 70 29 3b 65 6c 73 65 7b 76 61 72 20 6c 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 72 3f 28 6c 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 6f 77 27 3d 3d 3d 72 3f 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 Data Ascii: guments.length&&void 0!==arguments[4]&&arguments[4],s={top:0,left:0},d=p?E(e):a(e,t);if('viewport'===r)s=w(d,p);else{var l;'scrollParent'===r?(l=n(o(t)),'BODY'===l.nodeName&&(l=e.ownerDocument.documentElement)):'window'===r?l=e.ownerDocument.documentEleme
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6f 3d 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 54 6f 70 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 7c 7c 30 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 4c 65 66 74 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 52 69 67 68 74 7c 7c 30 29 2c 72 3d 7b 77 69 64 74 68 3a 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 69 2c 68 65 69 67 68 74 3a 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2b 6e 7d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 7b 6c 65 66 74 3a 27 72 69 Data Ascii: wnerDocument.defaultView,o=t.getComputedStyle(e),n=parseFloat(o.marginTop\|\|0)+parseFloat(o.marginBottom\|\|0),i=parseFloat(o.marginLeft\|\|0)+parseFloat(o.marginRight\|\|0),r={width:e.offsetWidth+i,height:e.offsetHeight+n};return r}function T(e){var t={left:'ri
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 65 64 29 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 3d 4f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 64 69 6e 67 29 2c 65 2e 6f 72 69 67 69 6e 61 6c 50 6c 61 63 65 6d 65 6e 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 2c 65 2e 6f 66 66 73 65 74 73 Data Ascii: ed),e.placement=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.padding),e.originalPlacement=e.placement,e.positionFixed=this.options.positionFixed,e.offsets
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 72 2c 27 73 63 72 6f 6c 6c 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 6f 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 29 2c 6f 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d Data Ascii: View:e;p.addEventListener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scroll',o.updateBound,o.scrollParents),o.scrollElement=
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 70 3a 6d 28 6e 2e 74 6f 70 29 2c 62 6f 74 74 6f 6d 3a 6d 28 6e 2e 62 6f 74 74 6f 6d 29 2c 72 69 67 68 74 3a 66 28 6e 2e 72 69 67 68 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 43 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 69 3d 21 21 6e 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 6e 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 69 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 Data Ascii: p:m(n.top),bottom:m(n.bottom),right:f(n.right)}}function K(e,t,o){var n=C(e,function(e){var o=e.name;return o===t}),i=!!n&&e.some(function(e){return e.name===o&&e.enabled&&e.order<n.order});if(!i){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is requi
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 29 5d 3b 72 65 74 75 72 6e 20 61 3d 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 28 31 3d 3d 3d 6e 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 28 65 2c 69 2c 74 Data Ascii: )];return a=a.map(function(e,n){var i=(1===n?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return _(e,i,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49803	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:39 UTC	694	OUT	GET /websafe/templates/screen-reader.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
2024-08-06 12:26:39 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:39 GMT Content-Type: application/javascript Content-Length: 2111 Connection: close Set-Cookie: AWSALB=G8MN5wmKS2X+SuhC+ZFMqXigQl0ImxVrZTYKNT+pRCbhqHYsiCE+DTuU4qi5eAjaNVFnD45G/7XBSP2fqt7xxf0rlB3DVC1WE/qlXnJyX4K9MF1p6l0mP70q67fa; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/ Set-Cookie: AWSALBCORS=G8MN5wmKS2X+SuhC+ZFMqXigQl0ImxVrZTYKNT+pRCbhqHYsiCE+DTuU4qi5eAjaNVFnD45G/7XBSP2fqt7xxf0rlB3DVC1WE/qlXnJyX4K9MF1p6l0mP70q67fa; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-83f" Server: unknown
2024-08-06 12:26:39 UTC	2111	IN	Data Raw: 0d 0a 76 61 72 20 73 63 72 65 65 6e 52 65 61 64 65 72 43 61 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 73 65 72 74 46 6f 72 53 63 72 65 65 6e 52 65 61 64 65 72 28 74 65 78 74 29 7b 0d 0a 09 76 61 72 20 77 61 72 6e 69 6e 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 27 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 65 78 74 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 61 73 73 65 72 74 69 76 65 22 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e Data Ascii: var screenReaderCalled = false;function insertForScreenReader(text){var warning = document.getElementById('timeoutMessage');warning.innerHTML = text;warning.style.display = "none";warning.setAttribute("aria-live","assertive");warning.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49804	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:39 UTC	697	OUT	GET /websafe/templates/standard-scripts.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
2024-08-06 12:26:39 UTC	894	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:39 GMT Content-Type: application/javascript Content-Length: 17973 Connection: close Set-Cookie: AWSALB=jcIXv0dhL9PV5VkEKJgXAJhjNSPdxchVSPGNyrIj4OM/UCjQP5LHscm8seTsTDOO2Dj1SmMwV6N3nw1ZRmvHfMr9ZRSq5Hv0BLPFpojiZrRN5D2aKEl+YlGt+569; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/ Set-Cookie: AWSALBCORS=jcIXv0dhL9PV5VkEKJgXAJhjNSPdxchVSPGNyrIj4OM/UCjQP5LHscm8seTsTDOO2Dj1SmMwV6N3nw1ZRmvHfMr9ZRSq5Hv0BLPFpojiZrRN5D2aKEl+YlGt+569; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-4635" Server: unknown
2024-08-06 12:26:39 UTC	8536	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 6e 4c 6f 61 64 50 61 67 65 28 29 0a 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 6e 64 20 75 6e 68 69 64 65 20 73 6f 6d 65 20 74 68 69 6e 67 73 2e 20 46 6f 72 20 6e 6f 77 20 77 65 20 61 73 73 75 6d 65 20 65 76 65 72 79 74 68 69 6e 67 20 74 68 61 74 20 6d 69 67 68 74 0a 20 20 20 20 2f 2f 20 6e 65 65 64 20 74 6f 20 62 65 20 74 6f 67 67 6c 65 64 20 69 73 20 61 20 64 69 76 20 6f 72 20 61 2e 0a 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 64 69 76 27 29 3b 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 61 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 20 53 65 74 20 74 68 65 20 66 6f 63 75 73 20 6f 6e 20 74 68 65 20 66 69 65 6c 64 20 69 64 65 6e 74 69 66 69 65 64 20 69 6e 20 6f 75 72 20 58 4d 4c Data Ascii: function onLoadPage(){ // Hide and unhide some things. For now we assume everything that might // need to be toggled is a div or a. toggleVisibility('div'); toggleVisibility('a'); // Set the focus on the field identified in our XML
2024-08-06 12:26:39 UTC	9000	IN	Data Raw: 20 20 20 20 20 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 3b 0a 20 20 20 20 7d 0a 7d 0a 2f 2f 0a 2f 2f 20 43 6f 6c 6c 65 63 74 73 20 61 6c 6c 20 65 6c 65 6d 65 6e 74 73 20 77 68 69 63 68 20 6d 61 72 6b 65 64 20 77 69 74 68 20 61 20 73 70 65 63 69 61 6c 20 63 6c 61 73 73 6e 61 6d 65 2e 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 6e 6f 64 65 2c 20 63 6c 61 73 73 6e 61 6d 65 29 0a 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6e 6f 64 65 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 21 6e 6f 64 65 20 7c 7c 0a 09 74 Data Ascii: e.returnValue = confirmationMessage; return confirmationMessage; }}//// Collects all elements which marked with a special classname.function getElementsByClassName(node, classname){ if (typeof node === 'undefined' \|\| !node \|\|t
2024-08-06 12:26:39 UTC	437	IN	Data Raw: 79 28 30 2c 20 2d 31 30 29 3b 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 27 73 63 72 6f 6c 6c 54 6f 54 6f 70 28 29 27 2c 20 35 29 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 6f 6e 52 65 73 69 7a 65 28 29 20 7b 0a 09 76 61 72 20 62 6f 64 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 62 6f 64 79 43 6f 6e 74 61 69 6e 65 72 27 29 3b 0a 09 76 61 72 20 6e 61 76 42 61 72 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6e 61 76 42 61 72 42 75 74 74 6f 6e 27 29 3b 0a 09 69 66 20 28 62 6f 64 79 20 26 26 20 6e 61 76 42 61 72 42 75 74 74 6f 6e 29 20 7b 0a 09 09 2f 2f 20 38 36 30 70 78 20 64 65 76 69 63 65 20 77 69 64 74 68 0a 09 20 20 20 20 Data Ascii: y(0, -10); setTimeout('scrollToTop()', 5); }}function onResize() {var body = document.getElementById('bodyContainer');var navBarButton = document.getElementById('navBarButton');if (body && navBarButton) {// 860px device width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49806	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:39 UTC	941	OUT	GET /websafe/images/pullFeature/Help.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
2024-08-06 12:26:39 UTC	883	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:39 GMT Content-Type: image/svg+xml Content-Length: 1265 Connection: close Set-Cookie: AWSALB=0c0F/8/W7lmJUgxR0eaTo76QE3BSH7i2A8NeztkLrQ/0M5byploHnByQAIIe7uxcBxLKF0GwdljxvE6Bq6gNhVF8EiNy0HaDRFdfagWMnj1otXeHo/uXrafXAwOj; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/ Set-Cookie: AWSALBCORS=0c0F/8/W7lmJUgxR0eaTo76QE3BSH7i2A8NeztkLrQ/0M5byploHnByQAIIe7uxcBxLKF0GwdljxvE6Bq6gNhVF8EiNy0HaDRFdfagWMnj1otXeHo/uXrafXAwOj; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-4f1" Server: unknown
2024-08-06 12:26:39 UTC	1265	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 69 64 3d 22 61 22 0a 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 37 2e 38 37 35 20 37 2e 38 37 35 20 32 30 2e 32 35 20 32 30 2e 32 35 22 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 2e 62 2c 2e 63 7b 66 69 6c 6c 3a 23 66 37 66 37 66 37 3b 7d 2e 63 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg height="20px" width="20px" id="a" xmlns="http://www.w3.org/2000/svg" viewBox="7.875 7.875 20.25 20.25"> <defs> <style>.b,.c{fill:#f7f7f7;}.c{fill-rule:evenodd;}</style> </defs> <path clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49809	104.18.10.207	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:39 UTC	382	OUT	GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:39 UTC	948	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-CachedAt: 08/21/2023 18:50:34 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1079 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 36ad91b3dfbce66e0ffcc11d89feb8e5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 12589526 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8aef043d387f5e64-EWR alt-svc: h3=":443"; ma=86400
2024-08-06 12:26:39 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bff/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 67 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: query","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProper
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 6e 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 22 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 3b 72 65 74 75 72 6e 20 69 7c 7c 6f 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f Data Ascii: romElement:function(t){if(!t)return 0;var e=g(t).css("transition-duration"),n=g(t).css("transition-delay"),i=parseFloat(e),o=parseFloat(n);return i\|\|o?(e=e.split(",")[0],n=n.split(",")[0],1e3*(parseFloat(e)+parseFloat(n))):0},reflow:function(t){return t.o
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 72 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: n i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=this._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){g.removeData(this._element,r),this._elemen
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 2c 62 3d 22 62 74 6e 22 2c 49 3d 22 66 6f 63 75 73 22 2c 44 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 77 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 2c 41 3d 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 2c 4e 3d 22 2e 61 63 74 69 76 65 22 2c 4f 3d 22 2e 62 74 6e 22 2c 6b 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 45 2b 43 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 22 66 6f 63 75 73 22 2b 45 2b 43 2b 22 20 62 6c 75 72 22 2b 45 2b 43 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 6e 2e 70 72 Data Ascii: ,b="btn",I="focus",D='[data-toggle^="button"]',w='[data-toggle="buttons"]',A='input:not([type="hidden"])',N=".active",O=".btn",k={CLICK_DATA_API:"click"+E+C,FOCUS_BLUR_DATA_API:"focus"+E+C+" blur"+E+C},P=function(){function n(t){this._element=t}var t=n.pr
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 74 6f 67 67 6c 65 43 6c 61 73 73 28 49 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 67 2e 66 6e 5b 76 5d 3d 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 67 2e 66 6e 5b 76 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 50 2c 67 2e 66 6e 5b 76 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 66 6e 5b 76 5d 3d 54 2c 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 4c 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6a 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 48 3d 22 2e 22 2b 6a 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 67 2e 66 6e 5b 4c 5d 2c 46 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 Data Ascii: toggleClass(I,/^focus(in)?$/.test(t.type))}),g.fn[v]=P._jQueryInterface,g.fn[v].Constructor=P,g.fn[v].noConflict=function(){return g.fn[v]=T,P._jQueryInterface};var L="carousel",j="bs.carousel",H="."+j,R=".data-api",x=g.fn[L],F={interval:5e3,keyboard:!0,s
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6f 74 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e Data Ascii: s._getConfig(e),this._element=t,this._indicatorsElement=this._element.querySelector(ot),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MSPointerEvent),this.
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 6f 66 66 28 48 29 2c 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6a 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 46 2c 74 29 2c 5f 2e 74 79 Data Ascii: off(H),g.removeData(this._element,j),this._items=null,this._config=null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},t._getConfig=function(t){return t=l({},F,t),_.ty
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 55 50 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 4a 29 29 3a 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 48 53 54 41 52 54 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: unction(t){return t.preventDefault()}),this._pointerEvent?(g(this._element).on(Q.POINTERDOWN,function(t){return e(t)}),g(this._element).on(Q.POINTERUP,function(t){return i(t)}),this._element.classList.add(J)):(g(this._element).on(Q.TOUCHSTART,function(t){
2024-08-06 12:26:39 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 5a 29 29 3b 67 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 67 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 6f 2c 72 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 74 29 2c 61 3d 74 68 Data Ascii: lement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(Z));g(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&g(n).addClass(V)}},t._slide=function(t,e){var n,i,o,r=this,s=this._element.querySelector(tt),a=th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49805	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:39 UTC	897	OUT	GET /websafe/templates/css/customLogin.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
2024-08-06 12:26:39 UTC	879	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:39 GMT Content-Type: text/css Content-Length: 4236 Connection: close Set-Cookie: AWSALB=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/ Set-Cookie: AWSALBCORS=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-108c" Server: unknown
2024-08-06 12:26:39 UTC	4236	IN	Data Raw: 2e 62 67 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 72 65 73 2d 61 77 73 2e 63 6f 6d 2f 43 52 45 53 5f 6c 6f 67 69 6e 5f 62 67 2e 6a 70 67 22 29 2c 20 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 61 64 6d 69 6e 2f 69 6d 61 67 65 73 2f 6c 6f 67 69 6e 62 67 2e 67 69 66 22 29 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 Data Ascii: .bg { background-image: url("https://static.cres-aws.com/CRES_login_bg.jpg"), url("../../../admin/images/loginbg.gif"); height: 100%; background-position: center; background-repeat: no-repeat; background-size: cover; -webkit-background-size:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49807	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:39 UTC	936	OUT	GET /websafe/images/skins/close.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP; AWSALBCORS=LnkCnv6YD0+Ayf5puZKTueniHHMJiWTnWHn11gFFJWxynGn24MzVEwEHSsQhz5YP+Ssa+vcalAhYlBMRmcPrx3QNSYgaETmsix6XqHLRMTWjbf0Hj6h+gQG17wAP
2024-08-06 12:26:39 UTC	883	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:39 GMT Content-Type: image/svg+xml Content-Length: 1608 Connection: close Set-Cookie: AWSALB=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/ Set-Cookie: AWSALBCORS=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg; Expires=Tue, 13 Aug 2024 12:26:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-648" Server: unknown
2024-08-06 12:26:39 UTC	1608	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 34 39 2e 33 20 28 35 31 31 36 37 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 49.3 (51167) - http://www.bohemiancoding.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49808	13.32.121.40	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:39 UTC	597	OUT	GET /CRES_googleSignIn.png HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:40 UTC	690	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 62336 Connection: close Date: Tue, 06 Aug 2024 12:26:41 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "cff524de6437dc8824753bedcf6901b3" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d954dd318e06aa0e69375f36dcd819de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: VvoI9SvlcvIiwwLWJ_EoTUYmy3K7Og9rxNzsY-Lc3J4YmPRDU3H4yg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-08-06 12:26:40 UTC	7686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9a 00 00 01 9a 08 06 00 00 00 36 06 85 63 00 00 0c 15 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 08 09 2d 10 01 29 a1 f7 2e 5d 20 10 aa 20 20 1d 6c 84 24 40 28 11 12 82 8a 1d 5d 54 70 ed 22 82 a2 a2 2b 22 b6 b5 00 b2 a8 88 5d 59 04 7b 7f 28 a2 b2 b2 2e 16 6c a8 bc 49 01 5d 5f fb de f9 be b9 f3 e7 cc 39 67 fe 33 f7 dc c9 0c 00 aa 8e 9c bc bc 1c 54 0d 80 5c 61 81 28 26 24 80 99 94 9c c2 24 f5 00 14 10 01 05 a8 01 94 c3 15 e7 f9 47 47 47 00 28 23 fd df e5 dd 4d 80 48 fb 6b 76 d2 58 ff 3a fe 5f 45 9d c7 17 73 01 40 a2 21 4e e3 89 b9 b9 10 1f 01 00 d7 e6 e6 89 0a 00 20 b4 43 bd c9 cc 82 3c 29 1e 80 58 53 04 09 02 40 c4 a5 38 43 8e b5 a5 38 4d 8e 6d 65 36 71 31 Data Ascii: PNGIHDR6ciCCPICC ProfileHWXS[R-).] l$@(]Tp"+"]Y{(.lI]_9g3T\a(&$$GGG(#MHkvX:_Es@!N C<)XS@8C8Mme6q1
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: 0d 1b 15 70 b8 2e 0f 65 68 5a 30 56 a4 62 02 8d 4a cb 49 9d a4 f5 09 45 6c 0b 33 86 02 06 34 33 a6 a8 8e cc 28 9b 1d 81 86 3d c1 b4 d9 c5 44 09 36 4a 88 35 3a b8 0f 35 39 bc 87 41 4a c1 b5 42 49 8a 30 4b ee 7e f0 3e 29 6c 7a 5a 62 f8 1a cb c2 74 d9 a7 75 19 c1 08 cf a9 fa 02 ce c6 3c e8 d0 93 66 7d e4 8b ed 8a 51 60 0c 14 60 9d 64 e7 87 75 32 ed bb 70 0d 1b 9a 3c 73 9c 8f f7 b0 fe a9 94 9a 1b 25 b7 62 85 b4 5c f2 3a 69 7a fd e5 e2 cd 87 e1 80 c7 e5 ae b1 aa 28 ee 6b 3d 4c 12 73 e9 51 da b6 30 93 28 60 40 33 93 4a eb 28 79 65 23 d4 c6 87 3d 55 66 0a 1a 00 0e b5 0c 42 97 90 40 e4 63 49 e2 10 00 73 f0 ce db a5 7f d3 b3 e2 63 61 b0 2c 27 56 02 5c 74 49 60 58 9b e9 1c 17 98 9f d2 77 2f ad c9 00 5f 06 34 47 a1 b7 5d 1a 1f 05 58 8b d4 c9 a7 a2 05 01 06 f5 14 c7 Data Ascii: p.ehZ0VbJIEl343(=D6J5:59AJBI0K~>)lzZbtu<f}Q``du2p<s%b\:iz(k=LsQ0(`@3J(ye#=UfB@cIsca,'V\tI`Xw/_4G]X
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: a7 4d d5 0f 59 9f 63 84 1c 5f 67 b4 5a 0b 6a c5 8c 4c c5 7d b0 ea 7a d1 93 c1 e7 30 21 72 4f 0e 86 0c 98 79 4f 98 44 be dd 77 30 12 4f b8 c7 37 73 9f 7c 1b 8f 26 2f 38 18 e3 4c 7e 82 78 31 93 91 86 37 be 4d 16 fe de a7 c4 6b 69 83 d0 92 18 00 4c de 0b 2d 25 a3 80 51 c0 28 30 a9 14 98 1c a0 21 be 90 43 23 70 a6 3a b6 60 b9 f0 6d f6 da ff 82 db 97 2f 4b 7d 00 1b ae 10 bd 71 55 eb 38 15 8f 63 cc fa 48 6d 6d 98 7d 7c 0a c1 d2 cb c3 2a 6d 37 96 1c 80 eb 9a 3c 5c d7 04 f9 06 98 15 93 e1 2b 62 e2 2b 9d 6d 9a 93 d2 f8 d5 55 0a a4 2f 92 26 d8 e4 4f 39 49 4e fe f7 ff 59 b2 ab cf c3 9c 19 a8 f5 a0 36 53 03 81 2a bd da 92 35 0a 18 05 8c 02 27 4a 81 c9 03 1a b2 42 30 e9 10 3b 42 89 0f df 66 f9 cd 9f 97 f0 c0 c3 92 a1 9a 0c cc d9 d3 5e 39 22 51 24 a8 c9 e0 be 81 da 3f Data Ascii: MYc_gZjL}z0!rOyODw0O7s\|&/8L~x17MkiL-%Q(0!C#p:`m/K}qU8cHmm}\|m7<\+b+mU/&O9INY6S5'JB0;Bf^9"Q$?
2024-08-06 12:26:40 UTC	13040	IN	Data Raw: 18 10 f3 11 8e c7 6c e3 78 4c 8e 24 15 c0 89 98 ec f2 1b 41 f5 cb 69 32 44 74 03 20 9d 2c fd a4 32 38 bd 86 70 4a ad 26 c1 c1 d0 0b a6 9f 85 cf 9e 75 23 16 4f 98 8f 0a 06 ff 0c 59 26 54 99 4b bf 54 3e 87 9e 02 01 05 c8 e0 d6 4e c5 e5 14 21 6d 5c d8 ec 81 37 ba f0 f3 57 53 38 d4 45 ad 45 a6 08 f2 7c 36 c6 68 f1 84 16 8d c5 9a ac b1 0e a4 a7 e2 f1 28 d0 ad d1 70 48 63 f9 8c 02 be fe d1 26 cc 9b 4c 39 a8 0e 2b bf 02 9d c6 e4 e2 f1 ee 1f e8 b1 61 07 1a 45 09 30 66 51 a4 e3 d4 46 8e d3 fc 23 b0 ff 79 6a 35 f2 13 e1 99 21 06 9a 90 90 69 3e 77 0b 27 35 3e ce c5 c9 5e a0 26 b3 97 93 1a 0b 9c 94 a9 35 18 0c 68 78 5e 33 60 e5 a3 25 90 a1 9c 2e 4b bb ae 68 28 e3 a0 34 34 35 bc ba 58 25 ae 9a 77 09 6e 5d 7a 2d 66 d1 e5 59 a1 3f c3 e4 c1 26 a4 84 df 96 07 05 c4 d7 02 Data Ascii: lxL$Ai2Dt ,28pJ&u#OY&TKT>N!m\7WS8EE\|6h(pHc&L9+aE0fQF#yj5!i>w'5>^&5hx^3`%.Kh(445X%wn]z-fY?&
2024-08-06 12:26:40 UTC	8842	IN	Data Raw: d7 d8 7c 1d 02 8d 34 29 5d 25 a5 a8 a0 8e 2c ff 34 8e 54 15 4f 63 cd b2 04 97 64 6e 44 7d 92 5a 8e ae b2 a8 d3 dc 04 66 bc e0 4d 63 6e 33 2e 81 46 b5 68 8c 40 70 d1 9f 92 58 43 fb fb 53 07 70 cf c6 47 f1 d0 96 67 71 98 9a 4d 9e 63 3c d4 86 c9 a6 61 cf 46 77 fa e4 29 e0 29 50 ba 14 e8 d5 46 d5 4b 94 99 5c 63 b5 b6 ef 70 43 d1 01 a2 59 45 81 3e 87 1a ce 0a 46 81 9e 46 a0 48 f2 da f0 5e c2 80 4d de ce f2 18 35 1e 33 a5 49 06 9c 58 b3 71 b3 ff dd 54 cb 28 9d 8d a4 4f d9 32 e4 14 31 35 b1 3c 2e 5a 12 c7 ed 97 35 60 6a b5 74 28 3e cb e6 f5 f0 7d 36 26 13 be 97 af 18 83 69 dc 01 8d ea 50 80 62 bd 09 61 0c 2b 39 fc d3 b9 3c 23 3e ef ee 3a 84 fb 37 3d 81 87 b7 3d 83 bd d9 83 8e 49 c9 17 51 19 53 7d f2 14 f0 14 28 03 0a b8 0e 64 f7 d8 0a 5b b9 03 11 67 4e 2b 12 74 Data Ascii: \|4)]%,4TOcdnD}ZfMcn3.Fh@pXCSpGgqMc<aFw))PFK\cpCYE>FFH^M53IXqT(O215<.Z5`jt(>}6&iPba+9<#>:7==IQS}(d[gN+t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49810	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:40 UTC	910	OUT	GET /admin/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/websafe/templates/css/customLogin.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu; AWSALBCORS=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu
2024-08-06 12:26:40 UTC	712	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:40 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=PzhlWWUN3ZnqsDfDsufpfaHeF8697SRVn7trrrY46O+oRBskVLeI8z4eU8aMH/+23lNOm+Z0k50SYZR2DsGUZJanpfqch1JRhLNrVvY6RmUIga0pf1H5d/6ip+JS; Expires=Tue, 13 Aug 2024 12:26:40 GMT; Path=/ Set-Cookie: AWSALBCORS=PzhlWWUN3ZnqsDfDsufpfaHeF8697SRVn7trrrY46O+oRBskVLeI8z4eU8aMH/+23lNOm+Z0k50SYZR2DsGUZJanpfqch1JRhLNrVvY6RmUIga0pf1H5d/6ip+JS; Expires=Tue, 13 Aug 2024 12:26:40 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Set-Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; Path=/admin; Secure; HttpOnly Server: unknown
2024-08-06 12:26:40 UTC	8712	IN	Data Raw: 32 32 30 30 0d 0a ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 Data Ascii: 2200JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: 34 36 34 30 0d 0a 00 00 92 64 0a 14 8a 49 6c 06 d9 2e c2 08 08 91 c0 c2 40 ba e8 24 3a 39 42 40 1c 82 64 20 cd f9 01 6d 23 37 00 e7 71 a4 f6 c0 13 0f 7d 01 26 f6 92 be 95 ff 00 26 56 58 18 42 73 ea 2e 2e 67 69 1c 67 da 35 86 41 9c 7c 87 3d 73 a1 a4 ce a2 e3 d3 a8 54 2a a7 b8 ff 00 1f 98 71 f9 0f 28 06 ab 1b 87 04 0a c8 b0 87 45 18 08 cb 0a ea 12 01 09 92 e9 99 5e 30 58 48 19 29 ae 9e 30 5a ee 2b 62 c8 a7 9d 49 b5 26 60 06 aa d7 d8 e5 74 60 ec ad 8b a2 1c d7 43 45 79 c5 82 b3 b7 65 ac d5 c9 9c b5 a9 d2 ea e6 6a fd 8c 4e ca d8 ba cf 8d c0 c9 5c d5 59 32 2d d9 6b 35 c9 94 c0 47 50 49 82 b9 a2 b4 81 a2 1c 90 54 94 50 84 4c 81 63 82 15 8a 56 0a 34 00 6e 44 90 14 56 c4 49 7b 01 00 00 00 00 04 00 c4 32 84 00 04 00 00 14 52 18 90 c0 00 00 00 00 00 0c ed 59 ca 34 Data Ascii: 4640dIl.@$:9B@d m#7q}&&VXBs..gig5A\|=sT*q(E^0XH)0Z+bI&`t`CEyejN\Y2-k5GPITPLcV4nDVI{2RY4
2024-08-06 12:26:40 UTC	1608	IN	Data Raw: 96 04 5b 46 73 6c 74 db 46 73 d6 bc b0 88 3a 69 f6 a2 85 55 09 26 32 80 00 30 10 00 60 25 00 1c dd de f3 ed db 1a 41 d1 2b a9 87 76 8a d9 95 a1 15 5d be e7 35 2d 16 f8 ee 67 da 49 57 05 ec 04 fd 0c 4f b7 2b 06 6d 05 f4 1a 3a 52 8a c1 cd f8 9a d9 1d 2b ec 38 df 7e c9 b4 05 70 b6 c9 10 fb 6f a2 2d 7f b2 f7 45 d7 bf 57 b3 03 1f c7 65 b0 9d 6d 27 4f 3a db 57 03 55 4f 46 06 9d 9f b5 49 a9 14 50 a0 b2 80 43 10 10 c7 50 61 50 2c 04 30 01 31 89 81 0c 96 53 13 20 51 22 5c aa 35 82 93 92 84 9a 79 dc 9e e5 5d 96 0b d3 42 6d 2f 4c 01 c2 ea d6 a1 2d 1d 92 e3 ea 52 66 fb 75 b7 da c8 32 e6 c7 cf c8 6f b6 d6 a4 f1 02 b9 d7 a3 0e 54 7d 48 81 c0 1a 55 ad 99 a2 31 a5 b8 ed 26 8b b8 ba 01 aa 45 2c 6a 64 bb b5 f3 1f e4 af 50 29 e4 8e d6 ac af c8 ba 8b b6 01 dc 31 5a 9d 17 44 Data Ascii: [FsltFs:iU&20`%A+v]5-gIWO+m:R+8~po-EWem'O:WUOFIPCPaP,01S Q"\5y]Bm/L-Rfu2oT}HU1&E,jdP)1ZD
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: 36 31 37 65 0d 0a 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 31 55 e7 9d 0c 38 55 e1 58 e8 bc 25 ae 8a 01 71 93 b2 b5 8b e5 1d 7c 7b 08 a7 15 96 c6 ed 4e a0 f8 6e eb cf e0 2e 49 ff 00 4f d8 8f a5 e9 64 3f c6 f6 68 2f c6 94 4a cf 68 5d 0d ad d0 54 a7 15 06 4e 5b f5 24 45 2a ef be c1 0e 61 3f 1d 43 94 2f 97 ee 3a e9 9d ca 87 6b 71 5c 8c 2c d7 d8 d4 b7 9b 46 32 6a ed 2f ca bf 33 29 4f 2e 33 d5 47 c8 90 c4 db 8b c2 7c 63 a9 9b ed dd 67 ee f4 34 74 f5 f6 65 15 d9 ae 5d b5 8e 85 5a a5 f4 28 9d 33 67 ff 00 f9 34 94 d7 2d 7f 43 2b b6 fe 96 fc df 59 f9 28 f3 1f 6d a4 f8 f5 e9 fb 84 c2 ee 55 ef a9 9a 71 fc 7e fa 23 5b a6 d7 b0 cd 53 77 f4 a0 a9 e5 d3 1f a9 a2 49 66 d8 f9 99 be e2 af d9 ef 7f a1 0a 5b 90 7f 4e da 34 f4 28 cb b7 86 Data Ascii: 617eg;p/qV`=~E1U8UX%q\|{Nn.IOd?h/Jh]TN[$E*a?C/:kq\,F2j/3)O.3G\|cg4te]Z(3g4-C+Y(mUq~#[SwIf[N4(
2024-08-06 12:26:40 UTC	8582	IN	Data Raw: d9 12 d3 6f d8 36 93 96 bd 00 86 dd 9f a4 14 96 7a 09 f5 d8 a8 86 e0 05 85 1e 72 c4 be 9f 6f cb f7 07 09 63 29 0d 44 e7 dc 03 5b b7 bc 04 7a e0 2b e5 bf 89 07 85 e5 1f c0 05 dc fa a2 23 e9 97 9f 1a 94 e1 3f 50 69 b5 1b cf c0 01 a8 49 74 82 a5 bd 36 25 fd bf 4f 96 4a ae dd 37 f6 ec 03 75 9f 22 70 f5 0b 68 d4 c7 97 44 15 ce de df 1f 20 13 b6 98 d7 20 f1 81 ac d7 ab 5e 3c 20 89 d3 db e9 ae be 20 04 b6 f1 ed f7 89 74 d1 f8 cb 1d 71 5f 1e c1 a5 b0 0b 94 a8 5d 7f a8 d3 53 1a 29 f6 85 5f 4c 4a c2 42 b4 d7 3b 57 00 16 70 e7 ae 7c 78 d4 56 d1 36 a1 e9 fc 8d f9 f8 dc a4 a1 46 fb 7a ff 00 20 4a c7 41 a6 9c ce 13 fd 35 15 5c f9 6f 3d 45 fd be 60 35 65 59 cf 99 a7 19 6d 37 eb e3 c4 92 e3 97 9c e7 cf f9 15 7f c6 de 3a 00 a1 66 bd 7e 7e 32 0a cc 6d 4f 49 d4 6e 35 5b 80 Data Ascii: o6zroc)D[z+#?PiIt6%OJ7u"phD ^< tq_]S)_LJB;Wp\|xV6Fz JA5\o=E`5eYm7:f~~2mOIn5[
2024-08-06 12:26:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49811	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:40 UTC	875	OUT	GET /admin/fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu; AWSALBCORS=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu
2024-08-06 12:26:40 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:40 GMT Content-Length: 303504 Connection: close Set-Cookie: AWSALB=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba; Expires=Tue, 13 Aug 2024 12:26:40 GMT; Path=/ Set-Cookie: AWSALBCORS=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba; Expires=Tue, 13 Aug 2024 12:26:40 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"303504-1720441203000" Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT Server: unknown
2024-08-06 12:26:40 UTC	15664	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-08-06 12:26:40 UTC	11046	IN	Data Raw: 00 06 f8 08 00 00 10 00 00 01 15 21 11 23 11 21 22 06 06 15 15 23 35 34 36 33 06 f8 fd 7c f8 fe a4 46 50 22 e0 db bd 08 00 dc f8 dc 07 24 42 68 3a 4c 78 b4 e0 00 02 00 88 fd c0 06 88 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 15 23 22 2e 02 35 35 01 35 21 15 21 11 23 11 04 04 90 60 4c 88 54 9a 78 46 fd 7c 06 00 fd 7c f8 a4 78 48 dc 35 68 98 63 a8 07 24 dc dc f8 dc 07 24 00 02 00 88 fe fc 06 88 09 04 00 03 00 0b 00 00 01 01 33 01 01 35 21 15 21 11 23 11 01 68 03 90 e4 fc 70 fe 3c 06 00 fd 7c f8 fe fc 0a 08 f5 f8 08 28 dc dc f8 dc 07 24 ff ff 00 88 00 00 06 88 08 00 02 06 01 99 00 00 00 01 00 f8 ff dc 07 30 08 00 00 15 00 00 01 33 11 14 02 04 23 22 24 02 35 11 33 11 14 16 16 33 32 36 36 35 06 38 f8 c5 fe 9a f1 f1 fe 9a c5 f8 84 f5 ab ab f6 83 08 00 fa b4 d2 Data Ascii: !#!"#5463\|FP"$Bh:Lx!33#".555!!#`LTxF\|\|xH5hc$$35!!#hp<\|($03#"$53326658
2024-08-06 12:26:40 UTC	9000	IN	Data Raw: 23 11 34 26 23 22 06 06 04 ac ec 3d 6e 91 54 24 49 1b 0f 28 15 60 80 fd 10 e4 3d 6e 91 54 24 49 1b 0f 28 15 40 69 3f 08 ec e4 14 36 dc ae 9c ea 82 ec bc a4 71 b1 66 a4 63 99 6a 36 03 09 c8 03 05 58 78 06 a4 80 63 99 6a 36 03 09 c8 03 05 25 5b 50 fd 1c fc 64 06 00 f0 75 8f 7f fe ff c4 fc 30 03 c0 b5 cb 62 bc 00 02 00 d8 ff e4 09 90 08 00 00 16 00 2c 00 00 33 11 33 11 33 36 36 33 32 16 12 15 15 23 35 34 26 23 22 06 06 15 11 05 22 26 02 35 35 33 15 14 16 16 33 32 36 12 11 35 33 15 10 02 00 d8 ec 14 36 d9 b5 9d ec 83 ec bd a7 74 b7 69 04 f8 8e e9 89 ec 60 89 3b 7d d7 84 ec c0 fe b8 08 00 fd 10 77 8d 7d fe ff c6 d0 c0 b7 c9 62 bc 86 fc 64 1c 85 01 1a dd a0 a0 b4 b8 40 dc 01 f8 01 a8 d0 d0 fe 20 fd aa fe ea 00 01 00 d8 fe 00 05 a8 06 00 00 16 00 00 01 11 33 11 Data Ascii: #4&#"=nT$I(`=nT$I(@i?6qfcj6Xxcj6%[Pdu0b,3336632#54&#""&553326536ti`;}w}bd@ 3
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: 91 6e 3d ec 3b 65 40 15 28 0f 1b 49 fe 4c e4 10 29 dc 8b 40 60 24 50 19 43 2c 70 af 65 fd c0 36 6a 99 63 a4 a4 50 5b 25 05 03 c8 09 03 02 40 06 00 e8 72 8e 1e 1a c8 0d 0f 5e a2 68 fc 34 ff ff ff 98 00 00 04 20 06 18 02 26 03 56 00 00 00 07 07 fe fe d8 ff 00 00 02 00 d8 fd c0 04 20 06 18 00 03 00 17 00 00 13 11 33 11 03 11 33 15 33 36 36 33 32 16 17 07 26 26 23 22 06 06 15 11 d8 ec ec e4 10 29 dc 8b 40 60 24 50 19 43 2c 70 af 65 fd c0 02 40 fd c0 02 40 06 00 e8 72 8e 1e 1a c8 0d 0f 5e a2 68 fc 34 ff ff 00 d8 00 00 04 20 08 a0 02 26 03 56 00 00 00 06 06 64 a8 00 ff ff 00 62 fd 58 04 20 06 18 02 26 03 56 00 00 00 06 06 77 cc 00 ff ff 00 94 00 00 04 20 08 68 02 26 03 56 00 00 00 06 06 73 c4 00 ff ff ff c4 00 00 04 20 08 a0 02 26 03 56 00 00 00 07 06 7b 04 cc Data Ascii: n=;e@(IL)@`$PC,pe6jcP[%@r^h4 &V 3336632&&#")@`$PC,pe@@r^h4 &VdbX &Vw h&Vs &V{
2024-08-06 12:26:40 UTC	10616	IN	Data Raw: 33 11 14 16 16 33 32 36 37 17 06 06 23 22 26 35 05 08 fb 20 01 ec ec 31 47 20 24 43 15 40 45 7d 42 9c a0 06 00 dc dc fb 74 58 49 0f 1d 0f bc 33 1d be de 00 01 00 d8 ff e4 05 98 06 00 00 1b 00 00 13 33 11 14 16 16 33 32 36 12 35 26 02 02 27 33 16 16 12 15 14 02 06 06 23 22 00 11 d8 ec 59 8f 50 80 c5 6f 02 31 4f 2e f8 2a 49 2d 4c a0 fa ae f6 fe ca 06 00 fc 50 96 b1 4d 9e 01 0c a6 72 01 08 01 08 72 54 fc fe e2 86 9d fe dd e3 85 01 2c 01 44 ff ff 00 d8 ff e4 05 98 09 10 02 26 04 88 00 00 00 06 06 74 18 10 ff ff 00 d8 ff e4 05 98 08 40 02 26 04 88 00 00 00 06 06 68 d4 00 ff ff 00 d8 ff e4 05 98 08 80 02 26 04 88 00 00 00 07 08 cd 01 e4 00 00 ff ff 00 d8 ff e4 05 98 08 b0 02 26 04 88 00 00 00 07 09 88 01 cc 00 a8 ff ff 00 d8 ff e4 05 98 08 b0 02 26 04 88 00 00 Data Ascii: 33267#"&5 1G $C@E}BtXI333265&'3#"YPo1O.*I-LPMrrT,D&t@&h&&&
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: fe f7 c3 a7 fe f7 98 00 02 00 a4 00 00 06 6c 08 00 00 09 00 0f 00 00 13 35 01 33 11 23 01 15 21 15 01 11 35 11 33 11 a4 03 84 94 64 fd 58 04 bc fd fc ec 01 a4 cc 05 90 fe c4 fb cc 10 dc fe 5c 01 e2 5f 05 bf f8 00 00 01 00 d8 ff e4 05 f8 08 00 00 24 00 00 05 22 24 26 27 33 16 16 33 32 36 36 35 34 26 26 27 26 06 07 27 13 21 15 21 03 33 36 36 33 32 04 12 15 14 02 04 03 54 b0 fe e6 aa 08 f0 0e e1 9d 7e c5 71 75 cc 83 5e c6 40 e8 7c 04 28 fc a8 48 0c 3f be 67 bc 01 27 a9 af fe ce 1c 8c f4 9c 8b b5 76 cf 83 86 d3 7a 01 01 3b 2e 1c 03 f0 dc fd a4 32 42 b3 fe ca c7 c4 fe cd b1 00 02 00 5c ff e4 05 f8 08 00 00 03 00 28 00 00 01 15 21 35 01 22 24 26 27 33 16 16 33 32 36 36 35 34 26 26 27 26 06 07 27 13 21 15 21 03 33 36 36 33 32 04 12 15 14 02 04 02 18 fe 44 02 f8 Data Ascii: l53#!53dX\_$"$&'3326654&&'&'!!36632T~qu^@\|(H?g'vz;.2B\(!5"$&'3326654&&'&'!!36632D
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: 62 a0 79 57 57 75 39 5f 38 5a 72 00 01 00 48 00 00 03 84 04 40 00 07 00 00 33 01 35 21 35 21 15 01 9c 02 0c fd a0 03 3c fd f4 03 90 08 a8 a8 fc 68 00 03 00 5c ff f0 03 f0 04 50 00 1d 00 2b 00 37 00 00 05 22 26 26 35 34 36 37 35 26 26 35 34 36 36 33 32 16 16 15 14 06 07 15 16 16 15 14 06 06 27 32 36 36 35 34 26 23 22 06 06 15 14 16 13 32 36 35 34 26 23 22 06 15 14 16 02 28 84 d0 78 9b 75 6c 78 6e bc 76 74 bb 6d 78 6c 7b 95 78 ce 82 44 6b 3d 89 63 42 6d 41 87 69 57 79 79 57 5a 76 76 10 52 8c 56 60 9a 12 08 15 8f 54 52 82 4c 4c 82 52 54 8f 15 08 15 9a 5d 56 8c 52 94 30 50 30 48 68 2e 50 32 48 68 01 f0 62 42 42 5e 5e 42 42 62 00 02 00 60 ff f0 03 e0 04 54 00 1e 00 2c 00 00 01 32 1e 02 15 14 02 06 23 22 26 27 33 16 16 33 32 36 35 23 06 06 23 22 26 26 35 34 36 Data Ascii: byWWu9_8ZrH@35!5!<h\P+7"&&54675&&546632'26654&#"2654&#"(xulxnvtmxl{xDk=cBmAiWyyWZvvRV`TRLLRT]VR0P0Hh.P2HhbBB^^BBb`T,2#"&'33265##"&&546
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: e0 7e c9 75 2b 37 12 e8 dc ff ff 00 f8 ff e4 07 e8 08 00 00 26 00 c5 00 00 00 07 01 09 02 e8 00 00 00 03 00 a4 00 00 03 50 05 d0 00 03 00 07 00 0b 00 00 01 15 21 35 21 11 21 11 01 15 21 35 03 50 fd 54 01 dc fe ec 01 e4 fd 54 05 d0 dc dc fa 30 05 d0 fb 0c dc dc ff ff 00 48 00 00 07 6a 0a a0 02 26 04 23 00 00 00 07 06 7b 06 60 02 00 00 03 00 4a ff e4 06 a8 08 1c 00 05 00 1b 00 32 00 00 01 27 13 01 17 03 01 13 36 36 27 26 26 23 22 06 07 37 36 36 33 32 16 17 16 06 07 03 01 22 26 26 35 34 36 37 13 01 03 06 06 15 14 16 33 32 36 37 07 06 06 01 30 28 54 04 84 30 44 fb 3c 66 05 02 03 0a 6c 7a 12 1a 0c 18 1b 36 1b d7 d6 09 02 03 05 4e 03 fc 96 c7 63 0b 09 50 01 40 84 09 07 74 78 12 22 0c 18 1b 31 01 90 10 01 78 03 d4 14 fe 94 fc 34 04 38 2c 4d 21 65 65 03 03 de 04 Data Ascii: ~u+7&P!5!!!5PTT0Hj&#{`J2'66'&&#"76632"&&546732670(T0D<flz6NcP@tx"1x48,M!ee
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: 33 15 14 16 17 07 2e 02 35 c4 e0 5d 3f 80 50 71 3b 08 00 b8 6f c3 5a 68 40 ad b9 52 00 06 00 90 00 c4 06 64 06 9c 00 03 00 07 00 13 00 1f 00 2b 00 37 00 00 01 27 01 17 03 01 37 01 01 34 36 33 32 16 15 14 06 23 22 26 01 34 36 33 32 16 15 14 06 23 22 26 11 34 36 33 32 16 15 14 06 23 22 26 01 34 36 33 32 16 15 14 06 23 22 26 01 c4 b0 04 30 b0 b0 fb d0 b0 04 30 fa 9c 4e 4e 51 4f 4f 51 4e 4e 02 4c 4e 4e 4e 52 52 4e 4e 4e 4e 4e 4e 52 52 4e 4e 4e 02 48 52 4e 4e 52 52 4e 4e 52 01 34 b4 04 44 b4 fb bc 04 44 b4 fb bc 01 d0 42 5a 5a 42 3f 55 55 fd e3 3f 59 59 3f 3f 59 59 04 e7 3f 59 59 3f 3f 59 59 fd f3 42 5a 5a 42 3f 55 55 00 02 00 ba fe 0c 02 5a 05 cc 00 0b 00 19 00 00 01 26 26 02 27 27 21 17 16 12 16 17 03 22 26 26 35 34 36 36 33 32 16 15 14 06 01 a6 18 4a 45 11 Data Ascii: 3.5]?Pq;oZh@Rd+7'74632#"&4632#"&4632#"&4632#"&00NNQOOQNNLNNNRRNNNNNNRRNNNHRNNRRNNR4DDBZZB?UU?YY??YY?YY??YYBZZB?UUZ&&''!"&&546632JE
2024-08-06 12:26:40 UTC	16384	IN	Data Raw: 9f 40 74 08 4b 5d 7c 77 1e 65 76 2c 30 5c 36 5e 60 a6 6a 1c 7e af 5b 00 02 fb e8 06 74 fd e8 0a c8 00 03 00 13 00 00 01 15 21 35 01 23 11 34 36 33 32 16 17 07 26 26 23 22 06 15 fd b0 fe 38 01 40 b8 a2 72 15 2b 24 10 12 1f 0f 2d 43 09 74 94 94 fd 00 03 44 87 89 06 06 8c 03 05 3e 42 00 03 fb e0 06 74 fd c8 0a b4 00 15 00 2b 00 2f 00 00 01 17 14 06 23 22 26 26 23 22 06 15 27 34 36 33 32 16 16 33 32 36 15 17 14 06 23 22 26 26 23 22 06 15 27 34 36 33 32 16 16 33 32 36 01 33 11 23 fd 7c 4c 55 3f 30 38 32 26 1e 2a 4c 52 42 26 3c 3a 24 1e 2a 4c 52 42 30 38 32 26 1e 2a 4c 52 42 26 3c 3a 24 1e 2a ff 00 b4 b4 09 60 18 42 5e 20 20 2e 1e 14 3c 68 22 22 2f af 14 3f 61 20 20 31 1b 10 3f 65 20 20 2e 02 42 fb c0 00 03 fb 1c 05 70 fe 40 09 74 00 03 00 12 00 20 00 00 01 13 Data Ascii: @tK]\|wev,0\6^`j~[t!5#4632&&#"8@r+$-CtD>Bt+/#"&&#"'4632326#"&&#"'46323263#\|LU?082&LRB&<:$LRB082&LRB&<:$`B^ .<h""/?a 1?e .Bp@t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49813	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:41 UTC	872	OUT	GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu; AWSALBCORS=bS2xNXkbahQNx56YxgEGd14LqNlugCrjKWZCYLZ6uR8G8zfIu5AnmVVHUQ46dPHoIokJb7DGHvB/BaCwrvUkJvbVu3ynOFs0kylM3tLyyiX5ZP70Eg1qIID/AiHu
2024-08-06 12:26:41 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:41 GMT Content-Length: 309772 Connection: close Set-Cookie: AWSALB=11CgtAsbKjHbAGyIcTKF6cez2SgeWrq1w5fKYU3Riqbgtn1tsrpFidmuIo/RNiQp9gUkgV+HfdtU5Bwmd9tm72tFL4QtdUytkDaPLQzdvVp5ZerzAKAS2qc27mlq; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/ Set-Cookie: AWSALBCORS=11CgtAsbKjHbAGyIcTKF6cez2SgeWrq1w5fKYU3Riqbgtn1tsrpFidmuIo/RNiQp9gUkgV+HfdtU5Bwmd9tm72tFL4QtdUytkDaPLQzdvVp5ZerzAKAS2qc27mlq; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"309772-1720441203000" Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT Server: unknown
2024-08-06 12:26:41 UTC	15664	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: f6 0a 75 02 26 01 99 00 00 00 07 06 70 02 14 02 00 ff ff 00 64 fd c1 06 f6 08 00 02 26 01 99 00 00 00 07 06 8b 06 b2 00 00 ff ff 00 64 fe 19 06 f6 08 00 02 26 01 99 00 00 00 07 08 62 06 ff 00 00 ff ff 00 64 fd ba 06 f6 08 00 02 26 01 99 00 00 00 07 06 89 07 19 00 00 00 01 00 64 00 00 07 58 08 00 00 10 00 00 01 11 21 11 21 11 23 22 06 06 15 15 21 35 34 00 21 07 58 fd 8d fe 54 a3 53 58 21 fe 9a 01 21 01 11 08 00 fe 9b f9 65 06 9b 4a 72 3d 78 c5 f5 01 1c 00 02 00 64 fd c0 06 f6 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 83 88 53 55 c6 64 be 99 5b fd 8d 06 92 fd 8d fe 54 5e 5a 39 fe b1 28 69 bd 94 5e 06 9b 01 65 fe 9b f9 65 06 9b 00 02 00 64 fe fc 06 f6 09 04 00 03 00 0b 00 00 01 01 21 01 01 11 21 11 21 11 21 11 Data Ascii: u&pd&d&bd&dX!!#"!54!XTSX!!eJr=xd!33#".55!!!SUd[T^Z9(i^eed!!!!
2024-08-06 12:26:41 UTC	430	IN	Data Raw: 8b 06 73 00 00 ff ff 00 aa fe 19 06 32 06 14 02 26 02 f7 00 00 00 07 08 62 06 c0 00 00 ff ff 00 aa fd ba 06 32 06 14 02 26 02 f7 00 00 00 07 06 89 06 da 00 00 ff ff 00 aa fd c0 09 3c 08 75 00 26 02 f7 00 00 00 07 02 c3 06 d7 00 00 00 02 00 6c ff e2 06 54 06 14 00 0f 00 1f 00 00 05 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 03 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 03 60 e9 fe ad b8 b8 01 53 e9 e9 01 53 b8 b8 fe ad e7 6a 8e 49 49 8e 6a 6b 91 49 49 91 1e c7 01 65 ec ee 01 65 c7 c7 fe 9b ee ec fe 9b c7 01 4a 79 d2 86 86 d2 7a 7a d2 86 86 d2 79 00 04 00 6c ff e2 06 54 08 69 00 0f 00 1f 00 2b 00 37 00 00 05 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 03 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 03 22 26 35 34 36 33 32 16 15 14 06 21 22 26 35 34 36 Data Ascii: s2&b2&<u&lT"$54$3226654&&#"`SSjIIjkIIeeJyzzylTi+7"$54$3226654&&#""&54632!"&546
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 15 14 16 16 01 99 c3 04 4f c5 fd 76 e9 fe ad b8 b8 01 53 e9 e9 01 53 b8 b8 fe ad e7 6a 8e 49 49 8e 6a 6b 91 49 49 91 62 84 06 34 84 fa 0e c7 01 64 ed ee 01 65 c7 c7 fe 9b ee ed fe 9c c7 01 4a 79 d2 85 87 d2 7a 7a d2 87 85 d2 79 00 03 00 6c ff e2 06 f4 06 5a 00 08 00 18 00 28 00 00 01 33 14 02 21 35 32 36 36 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 03 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 05 f6 fe f2 fe f4 6a 6e 28 fd 6a e9 fe ad b8 b8 01 53 e9 e9 01 53 b8 b8 fe ad e7 6a 8e 49 49 8e 6a 6b 91 49 49 91 06 5a fe fe e5 aa 59 a4 f9 fa c7 01 65 ec ee 01 65 c7 c7 fe 9b ee ec fe 9b c7 01 4a 79 d2 86 86 d2 7a 7a d2 86 86 d2 79 ff ff 00 6c ff e2 06 54 08 8d 02 26 03 07 00 00 00 06 06 66 0e 00 ff ff 00 6c ff e2 06 54 08 8d 02 26 03 07 00 00 00 07 06 64 Data Ascii: OvSSjIIjkIIb4deJyzzylZ(3!5266"$54$3226654&&#"jn(jSSjIIjkIIZYeeJyzzylT&flT&d
2024-08-06 12:26:41 UTC	13848	IN	Data Raw: 00 00 27 09 89 01 cc 00 00 00 07 09 96 00 f5 00 ae ff ff 00 71 fd 58 06 ba 09 cd 02 26 04 27 00 00 00 27 09 89 01 cc 00 00 00 07 09 91 01 6f 00 a8 ff ff 00 71 fd 58 06 ba 09 cd 02 26 04 27 00 00 00 27 09 89 01 cc 00 00 00 07 09 98 01 22 00 a8 ff ff 00 71 ff e0 06 ba 08 18 02 26 04 27 00 00 00 07 06 6e 00 b4 00 00 ff ff 00 71 ff e0 06 ba 08 00 02 26 04 27 00 00 00 06 06 6d 40 00 ff ff 00 71 fd 58 06 ba 08 94 02 26 04 27 00 00 00 27 09 89 01 cc 00 00 00 07 09 9d 01 49 00 a0 ff ff 00 71 fd 58 06 ba 06 14 02 26 04 27 00 00 00 07 09 89 01 cc 00 00 ff ff 00 71 fd 58 06 ba 08 94 02 26 04 27 00 00 00 27 09 89 01 cc 00 00 00 07 09 9f 01 b9 00 00 ff ff 00 71 ff e0 06 ba 08 f9 02 26 04 27 00 00 00 07 09 8b 00 b4 00 00 ff ff 00 71 fd 58 06 ba 08 f9 02 26 04 27 00 00 Data Ascii: 'qX&''oqX&''"q&'nq&'m@qX&''IqX&'qX&''q&'qX&'
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 20 00 17 11 21 11 26 26 23 21 11 21 21 11 21 11 21 32 36 35 11 21 11 14 00 21 c6 04 31 01 1a 01 07 01 fe 60 01 4e 68 fd a4 fe 60 02 59 01 a0 02 5d 5f 57 01 a0 fe f8 fe e7 06 00 fe f1 f1 fe 01 01 ff 5b 56 fb 4f 03 ff fd 50 4f 62 03 ee fc 12 f1 fe f1 00 02 00 b3 00 00 07 ba 06 00 00 15 00 19 00 00 21 21 35 34 02 26 23 22 06 02 15 15 21 35 10 12 24 21 20 04 12 13 01 11 21 11 07 ba fe 61 7c dc 8f 90 db 7a fe 64 e9 01 96 01 02 01 03 01 97 eb 01 fd 4c fe 60 e9 ce 01 1e 95 95 fe e2 ce e9 e4 01 2f 01 b8 ef ef fe 48 fe d1 05 1c fa 00 06 00 ff ff 00 b2 ff e2 0c 90 08 00 00 26 01 7e 00 00 00 07 03 63 06 c5 00 00 00 05 00 c2 00 00 07 a6 08 00 00 03 00 07 00 0b 00 25 00 29 00 00 01 23 11 33 01 23 11 33 01 11 21 11 25 20 24 02 35 10 12 24 21 20 04 12 11 21 36 26 26 23 Data Ascii: !&&#!!!!!265!!1`Nh`Y]_W[VOPOb!!54&#"!5$! !a\|zdL`/H&~c%)#3#3!% $5$! !6&&#
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: fe a0 01 a8 04 53 02 07 05 d1 00 00 fa a0 ff ff ff ce fd 20 01 a6 04 53 02 07 05 d2 00 00 fa a0 ff ff 00 6a fe a0 04 53 03 f4 02 07 05 d3 00 00 fa a0 ff ff 00 6a fe a0 01 99 03 f4 02 07 05 d4 00 00 fa a0 ff ff 00 6a fe a0 06 4f 02 ac 02 07 05 d5 00 00 fa a0 ff ff 00 6a fe a0 04 2a 02 ac 02 07 05 d6 00 00 fa a0 00 02 00 43 fe 8c 04 3f 02 ac 00 0f 00 1f 00 00 01 22 26 26 35 34 36 36 33 32 16 16 15 14 06 06 27 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 02 42 9e e5 7c 7c e5 9e 9e e4 7b 7b e4 9e 45 59 2c 2a 5a 46 47 5a 2b 2c 5a fe 8c 84 ee 9e 9e ee 84 84 ee 9e 9e ee 84 eb 4e 84 53 52 86 4e 4e 86 52 53 84 4e ff ff 00 6c fd 20 04 63 02 ac 02 07 05 d8 00 00 fa a0 ff ff 00 47 fd 20 04 3e 02 ac 02 07 05 d9 00 00 fa a0 ff ff 00 6a fe a0 03 18 02 ae 02 07 05 da 00 Data Ascii: S SjSjjOjC?"&&546632'26654&&#"B\|\|{{EY,ZFGZ+,ZNSRNNRSNl cG >j
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: ff 00 64 fc c0 0e e4 0b 40 00 27 05 35 04 b3 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 4b 04 12 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 5e 05 10 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 9b 03 bf 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 9c 04 0f 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 9f 03 e7 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a1 03 e7 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a2 03 e7 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a3 03 e7 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a4 03 e7 00 00 00 07 07 07 Data Ascii: d@'5d@'Kd@'^d@'d@'d@'d@'d@'d@'d@'
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 36 25 37 14 02 04 23 22 26 02 35 11 21 11 14 16 16 33 32 36 36 07 fe 01 a5 fe 84 08 85 83 fe fb c1 9a e5 7e 01 a0 37 61 40 7a 90 3f fc 71 8a 83 fe f9 c6 a8 e3 72 01 a1 37 61 40 79 91 40 01 60 06 a0 f8 00 02 b4 04 d0 fe b9 bd 76 01 0c e2 05 b8 fa 48 62 79 37 65 ad 6c 04 d4 fe ba ba 78 01 0c e0 05 b8 fa 48 62 79 37 64 ad 00 01 00 9d 01 73 03 7d 02 74 00 03 00 00 13 21 11 21 9d 02 e0 fd 20 02 74 fe ff ff ff 00 aa fd d3 06 aa 06 00 02 06 03 87 00 00 ff ff 00 9a 00 00 09 09 08 75 00 26 02 a7 00 00 00 07 03 b1 02 fe 00 00 00 01 00 46 00 00 06 68 06 00 00 0d 00 00 21 01 21 01 33 36 1a 02 37 21 02 00 01 02 87 fd bf 01 b8 01 77 10 5b 78 46 24 08 01 9e 08 fe d5 fe e8 06 00 fb a2 95 01 06 01 02 01 19 a8 fe 6a fc e8 fe ae ff ff 00 b0 04 ad 02 4e 08 00 00 06 05 79 1e Data Ascii: 6%7#"&5!3266~7a@z?qr7a@y@`vHby7elxHby7ds}t!! tu&Fh!!367!w[xF$jNy
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 22 5f 07 a8 40 8c 73 69 9f 59 e5 d1 9c d7 89 52 18 aa 1d 5e af 98 8d 7e 5c 57 63 47 0c 0e 84 16 1e 00 02 fa 5a 06 66 fe 8d 07 73 00 0e 00 1d 00 00 01 33 16 06 23 22 26 26 27 33 16 16 33 32 36 25 33 16 06 23 22 26 26 27 33 16 16 33 32 36 fc 07 b7 02 90 90 60 93 52 01 dc 02 36 32 34 34 01 a3 e1 01 b8 91 5f 81 40 01 b5 01 39 32 35 33 07 73 86 87 4b 7a 48 2c 3a 34 32 86 87 4b 7a 48 2c 3a 34 00 03 fa 51 06 60 fe e5 09 79 00 0f 00 25 00 47 00 00 01 35 34 26 23 22 06 15 23 34 36 33 32 16 15 15 27 17 23 22 06 15 14 16 33 32 36 37 17 06 06 23 22 26 35 34 36 33 01 22 26 26 35 35 34 36 36 33 32 16 15 15 21 35 21 35 34 26 23 22 06 15 15 14 16 33 32 36 37 17 06 06 fc 18 36 37 30 34 de b8 96 8a b5 c5 02 78 48 45 36 2a 3c 57 08 2d 1d 7d 6e 71 8c b5 b3 01 e8 7c b0 5e 58 Data Ascii: "_@siYR^~\WcGZfs3#"&&'3326%3#"&&'3326`R6244_@9253sKzH,:42KzH,:4Q`y%G54&#"#4632'#"3267#"&5463"&&5546632!5!54&#"32676704xHE6*<W-}nq\|^X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49815	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:41 UTC	873	OUT	GET /admin/fonts/Inter/Inter-Light.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg; AWSALBCORS=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg
2024-08-06 12:26:41 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:41 GMT Content-Length: 304092 Connection: close Set-Cookie: AWSALB=gMhT8HD4nMun9LarxEMfy0CGB6eVA9f9jSLiWJ4RFbm606Qw+0TQh7jysDYhSAcmQcDQcVFqOyq/iSu4G9FEsbdZuyORGZ/TCVjDiTNMt1FkbEG4oje11xbkjuK1; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/ Set-Cookie: AWSALBCORS=gMhT8HD4nMun9LarxEMfy0CGB6eVA9f9jSLiWJ4RFbm606Qw+0TQh7jysDYhSAcmQcDQcVFqOyq/iSu4G9FEsbdZuyORGZ/TCVjDiTNMt1FkbEG4oje11xbkjuK1; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"304092-1720441203000" Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT Server: unknown
2024-08-06 12:26:41 UTC	8710	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 6c 00 00 04 12 47 50 4f 53 44 54 7b 36 00 03 3f 80 00 01 21 64 47 53 55 42 be 7f 66 78 00 04 60 e4 00 00 42 b4 4f 53 2f 32 22 33 6e 62 00 02 6e 98 00 00 00 60 53 54 41 54 ee 4d d9 3f 00 04 a3 98 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 6e f8 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3b 64 00 00 00 08 67 6c 79 66 97 e6 ea 0c 00 00 01 0c 00 02 1d 71 68 65 61 64 2d c3 61 46 00 02 46 70 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 74 00 00 00 24 68 6d 74 78 e5 18 e6 d0 00 02 46 a8 00 00 27 ca 6c 6f 63 61 09 5d 8d 80 00 02 1e a0 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 80 00 00 00 20 6e 61 6d 65 35 9c 5c a6 00 02 d4 8c 00 00 02 38 70 6f 73 74 a7 a8 35 72 00 02 d6 c4 00 00 64 9e 70 72 65 Data Ascii: GDEF11;lGPOSDT{6?!dGSUBfx`BOS/2"3nbn`STATM?Dcmap/.negasp;dglyfqhead-aFFp6hheant$hmtxF'loca]'maxp name5\8post5rdpre
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 10 09 d3 02 26 00 c5 00 00 00 07 06 6d ff 3f 02 00 ff ff 00 d4 00 00 03 d3 08 00 00 27 00 c5 02 08 00 00 00 06 09 9e 48 00 ff ff 01 65 00 00 03 73 08 94 00 27 00 c5 01 a8 00 00 00 06 09 a0 3b 00 ff ff 01 10 00 00 01 cb 08 00 02 06 00 c5 00 00 ff ff ff ed 00 00 02 ed 0a 08 02 26 00 c5 00 00 00 07 06 68 fe 0d 02 00 00 03 00 94 00 00 03 f4 08 00 00 03 00 07 00 0b 00 00 13 35 21 15 01 35 21 15 01 11 23 11 94 03 60 fc a0 03 60 fe ad ba 07 58 a8 a8 f8 a8 a8 a8 08 00 f8 00 08 00 ff ff 00 94 00 00 03 f4 0a 08 02 26 00 e9 00 00 00 07 06 69 fe e4 00 25 ff ff 00 94 00 00 03 f4 0b 60 02 26 00 e9 00 00 00 07 08 08 04 49 00 00 ff ff 00 94 00 00 03 f4 08 00 02 26 00 e9 00 00 00 06 07 fe dc 40 ff ff 00 94 fe 2e 04 5b 08 00 02 26 00 e9 00 00 00 07 06 90 05 63 00 00 ff ff Data Ascii: &m?'Hes';&h5!5!#``X&i%`&I&@.[&c
2024-08-06 12:26:41 UTC	1616	IN	Data Raw: 09 3d 02 26 02 64 00 00 00 06 07 f3 71 c9 ff ff 00 9c fe 15 05 c7 08 50 02 26 02 64 00 00 00 27 06 6a 00 c4 00 00 00 07 06 8b 06 5f 00 00 ff ff 00 9c ff e0 05 c7 06 15 02 06 02 64 00 00 ff ff 00 9c ff e0 05 c7 08 9b 02 26 02 64 00 00 00 06 06 66 e7 00 ff ff 00 9c ff e0 05 c7 08 08 02 06 02 65 00 00 ff ff 00 9c ff e0 05 c7 08 00 02 26 02 64 00 00 00 07 06 6e 00 cc 00 00 00 01 00 9c ff eb 05 c7 06 20 00 26 00 00 01 32 04 12 15 14 02 04 23 22 26 26 02 35 35 21 15 21 14 16 16 33 32 36 12 37 35 34 02 26 23 22 06 06 07 27 3e 02 03 0b d7 01 3a ab ab fe d1 c8 7c e9 b8 6c 04 b0 fc 05 78 d3 89 94 dd 7d 01 80 e9 a0 6d a6 70 1d aa 24 9e ee 06 20 c9 fe 9b e9 e8 fe 97 cd 5b bb 01 1c c0 58 9d 94 ed 8a 9c 01 00 98 5e b8 01 10 96 44 73 45 37 61 a4 63 00 01 01 5c 00 00 03 Data Ascii: =&dqP&d'j_d&dfe&dn &2#"&&55!!326754&#"'>:\|lx}mp$ [X^DsE7ac\
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 32 16 16 15 11 23 11 34 26 23 22 06 06 04 c3 b2 34 61 82 4e 22 42 18 11 2a 17 64 79 fc d5 ad 32 5e 81 4e 1f 42 1a 12 2c 15 42 62 36 05 b2 ad 10 36 e5 a9 9b eb 83 b2 d3 b1 79 bc 6d bb 5d 91 63 33 05 09 99 04 05 67 7f 06 b0 b2 5c 8b 5f 2f 03 07 9b 03 05 28 5f 51 fd 19 fc 40 06 00 f1 76 8f 81 fa b6 fc 1d 03 d8 bd dc 68 c3 00 02 00 eb ff e5 09 63 08 00 00 16 00 2c 00 00 33 11 33 11 33 36 36 33 32 16 16 15 11 23 35 34 26 23 22 06 06 15 11 05 22 26 02 35 35 33 15 14 16 16 33 32 36 12 11 35 33 15 10 02 00 eb b2 10 37 e3 ad 9c ec 84 b3 d3 b3 7b c0 6f 05 13 8e da 7b b3 5a 90 51 93 e2 80 b3 ae fe ca 08 00 fd 0f 78 8d 80 fa b7 ff 00 f5 be db 68 c3 86 fc 40 1b 86 01 19 db be be ba ce 52 f9 02 1d 01 b4 b1 b9 fe 23 fd 9e fe dd 00 01 00 eb fe 00 05 80 06 00 00 16 00 00 Data Ascii: 2#4&#"4aN"B*dy2^NB,Bb66ym]c3g\_/(_Q@vhc,3336632#54&#""&553326537{o{ZQxh@R#
2024-08-06 12:26:41 UTC	1616	IN	Data Raw: 00 00 00 27 09 89 05 0f 00 00 00 07 09 90 fe f7 00 00 ff ff ff c0 fd 73 09 e1 08 1c 00 27 03 e2 02 47 00 00 00 27 09 89 05 41 00 00 00 07 09 97 ff 08 00 00 ff ff ff c3 fd 73 08 f8 09 2b 00 27 03 e2 01 5d 00 00 00 27 09 89 04 59 00 00 00 07 09 92 ff 4f 00 30 ff ff ff c3 fd 73 08 fc 09 2b 00 27 03 e2 01 61 00 00 00 27 09 89 04 5c 00 00 00 07 09 99 ff 4f 00 30 ff ff 00 b5 fd 73 07 9b 08 1c 02 26 03 e2 00 00 00 07 09 89 02 f8 00 00 00 01 00 b5 ff e4 07 9b 08 00 00 2a 00 00 13 12 12 37 35 21 35 21 15 06 06 02 15 06 12 04 33 32 24 36 12 35 36 02 26 27 35 21 15 21 15 16 12 13 14 02 02 04 23 22 24 02 02 b5 01 f7 e7 fe 21 02 bc 8e ec 8c 01 b3 01 3d ce 9b 01 01 bb 66 01 8d ec 8e 02 bc fe 21 e8 f6 01 83 ed fe be c1 c0 fe bd ed 83 03 d3 01 2e 01 be 89 10 a8 d9 43 ef Data Ascii: 's'G'As+']'YO0s+'a'\O0s&*75!5!32$656&'5!!#"$!=f!.C
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 73 4d 1c 22 fd 3f c9 02 56 02 28 c6 fd 3d 2b 6d b0 90 1c af 37 63 43 52 06 3e fa a4 05 5c f9 38 66 99 55 00 03 00 b4 ff ac 07 c3 08 24 00 11 00 23 00 27 00 00 01 21 32 04 12 15 06 02 04 23 21 22 24 02 35 34 12 24 17 22 04 02 17 14 12 04 33 21 32 24 12 35 34 02 24 23 03 11 23 11 03 b0 01 17 df 01 59 c4 01 c3 fe a9 df fe e8 e0 fe a7 c4 c4 01 59 e0 bb fe fd 85 01 85 01 01 bc 01 17 bb 01 01 84 85 fe fe bc 2a bb 07 04 ca fe 96 ef f0 fe 96 cb ca 01 6a f0 ee 01 6a cc a8 a3 fe df bc b9 fe e3 a2 a2 01 1f bc ba 01 1f a2 01 c8 f7 88 08 78 00 02 01 10 fe 1c 07 83 08 00 00 05 00 0d 00 00 25 03 23 11 23 35 05 11 33 11 21 11 33 11 07 83 1b b8 9b fa fb b3 04 5c b2 b3 fd 69 01 e4 b3 b3 08 00 f8 ad 07 53 f8 00 00 03 00 94 fe 1c 09 35 08 00 00 03 00 09 00 11 00 00 01 15 21 Data Ascii: sM"?V(=+m7cCR>\8fU$#'!2#!"$54$"3!2$54$##YY*jjx%##53!3\iS5!
2024-08-06 12:26:41 UTC	1616	IN	Data Raw: 35 05 15 01 35 03 35 21 15 21 11 23 11 05 63 fc 30 03 d0 fc 30 ff 05 cd fd 77 bb 05 c5 a5 fe 80 9d 1e a6 fe 80 9e 04 c1 a8 a8 f8 a8 07 58 00 03 00 5f fd c0 0d 6f 09 00 00 1b 00 3f 00 67 00 00 05 37 32 36 12 35 35 10 02 24 21 22 04 04 07 35 36 24 33 32 04 12 12 15 15 10 02 04 01 11 14 0e 02 23 22 26 35 34 36 33 32 1e 03 33 07 22 2e 03 07 06 06 15 14 16 33 32 36 35 11 01 11 34 12 24 33 32 16 16 12 15 15 14 02 04 23 22 26 26 27 37 1e 03 33 32 36 12 35 35 34 02 26 23 22 06 02 15 13 05 25 03 a7 ef 81 ac fe a9 fe fd 79 fe f1 fe de 93 cc 01 a8 c9 e7 01 6a fc 83 b4 fe b4 fd 5a 30 60 95 67 a7 d1 d4 94 6e a1 87 90 b8 83 03 9d d9 99 78 76 4b 51 60 5b 4d 61 60 06 05 9e 01 14 b1 92 e8 a3 55 96 fe ee bb 92 d7 95 31 68 02 36 6c a6 73 8f c3 63 63 c5 92 95 c2 5f 06 13 a8 Data Ascii: 555!!#c00wX_o?g72655$!"56$32#"&546323".32654$32#"&&'7326554&#"%yjZ0`gnxvKQ`[Ma`U1h6lscc_
2024-08-06 12:26:41 UTC	9000	IN	Data Raw: 62 5c a8 73 a0 f3 89 94 f5 93 af f9 30 0d 27 fe f3 c3 a4 fe fb 97 00 02 00 b3 00 00 06 31 08 00 00 09 00 0f 00 00 13 35 01 33 15 23 01 15 21 15 01 11 35 11 33 11 b3 03 91 70 53 fd 23 04 ad fe 3e b2 01 b8 98 05 b0 ff fb 6c 0d a8 fe 48 01 e8 46 05 d2 f8 00 00 01 00 df ff e4 05 c8 08 00 00 24 00 00 05 22 24 26 27 33 16 16 33 32 36 36 35 2e 02 23 26 06 07 27 13 21 15 21 03 33 36 36 33 32 04 12 15 14 02 04 03 3b ab fe f3 9f 05 b5 09 ee b0 89 d6 79 01 80 db 88 67 c6 42 bb 7b 03 f4 fc a9 52 0a 44 c3 6d b5 01 21 a9 a9 fe d9 1c 8b f4 9d a3 d1 83 e5 90 96 e5 82 01 46 37 18 03 e3 a8 fd 53 39 48 ae fe cf c6 c2 fe cf b0 00 02 00 59 ff e4 05 b8 08 00 00 03 00 28 00 00 01 15 21 35 01 22 24 26 27 33 16 16 33 32 36 36 35 2e 02 23 26 06 07 27 13 21 15 21 03 33 36 36 33 32 Data Ascii: b\s0'153#!53pS#>lHF$"$&'332665.#&'!!36632;ygB{RDm!F7S9HY(!5"$&'332665.#&'!!36632
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 60 60 fe cb 60 60 fe b5 02 e0 fd 80 60 00 05 00 80 05 20 07 a4 08 00 00 09 00 10 00 14 00 18 00 1c 00 00 13 11 21 15 21 15 21 15 21 11 21 01 33 01 23 03 03 37 35 21 15 17 01 33 01 21 01 33 01 80 01 99 fe d2 01 09 fe f7 01 42 01 2a 64 01 26 6c ee ea 20 01 95 e0 01 f4 79 fe 0a 01 84 fe 0a 79 01 f4 05 20 02 e0 60 f0 60 fe d0 02 e0 fd 20 02 5e fd a2 bd 5b 5b bd 02 e0 fd 20 02 e0 fd 20 00 05 00 80 05 20 06 2f 08 00 00 06 00 0a 00 0e 00 12 00 28 00 00 01 01 33 13 13 33 01 21 11 33 11 21 11 33 11 33 11 33 11 23 35 33 32 36 35 35 34 26 23 23 35 33 32 16 16 15 15 14 06 06 23 01 d3 fe c0 70 f2 f3 6f fe c0 fe 69 6b 02 15 6b 8d 6b 3b d0 56 76 75 57 d3 d3 54 8d 56 56 8d 54 05 20 02 e0 fd bf 02 41 fd 20 02 e0 fd 20 02 e0 fd 20 02 e0 fd 20 60 76 5b 80 5b 74 60 4d 88 5a Data Ascii: ````` !!!!!3#75!3!3B*d&l yy `` ^[[ /(33!3!333#5326554&##532#poikkk;VvuWTVVT A `v[[t`MZ
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 7c ce 7a 04 50 02 60 fd a0 f4 69 01 af 69 fc 6e 96 96 fc 9b 01 af 69 fe 51 fe 5b 02 60 fd a0 01 3c 69 01 af 69 01 b6 96 96 01 e3 01 af 69 fe 51 00 02 00 d0 ff e0 0a 70 08 2c 00 13 00 27 00 00 05 01 26 02 12 37 36 24 04 17 17 37 36 24 04 17 16 12 02 07 01 01 36 36 26 27 26 26 06 07 07 27 26 26 06 07 06 06 16 17 05 a0 fb fc 7b 51 52 7a 7d 01 41 01 41 7d 88 88 7e 01 40 01 41 7d 7a 52 51 7b fb fc 03 8d 5a 3c 3b 5a 5c eb ec 5e fd fd 5d ed eb 5c 5a 3b 3d 59 20 04 04 7b 01 46 01 43 78 7b 51 52 7a 84 84 7a 52 51 7b 78 fe bd fe ba 7b fc ea 03 8d 59 ef ee 57 5b 3c 3d 5b f5 f5 5b 3d 3c 5b 57 ee ef 59 00 01 00 d0 ff e0 0a 70 08 2c 00 13 00 00 05 01 26 02 12 37 36 24 04 17 17 37 36 24 04 17 16 12 02 07 05 a0 fb fc 7b 51 52 7a 7d 01 41 01 41 7d 88 88 7e 01 40 01 41 7d Data Ascii: \|zP`iiniQ[`<iiiQp,'&76$76$66&'&&'&&{QRz}AA}~@A}zRQ{Z<;Z\^]\Z;=Y {FCx{QRzzRQ{x{YW[<=[[=<[WYp,&76$76${QRz}AA}~@A}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49816	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:41 UTC	876	OUT	GET /admin/fonts/Inter/Inter-SemiBold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg; AWSALBCORS=nGUfCXLNe7F+jDdwt7Z70AikxyBI/2u1NX/q1SGxuyASQURuWvg5txUJ0voIevs/fGMONo00ix5F7B9IoOHL5xnjNei9QBwbMti3sYc62p3Cl6uolqeWN7LclMyg
2024-08-06 12:26:41 UTC	720	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:41 GMT Content-Length: 309432 Connection: close Set-Cookie: AWSALB=3P00JUJ+ISJg5F1uDUo5+Ik9VL8gqlBFDOiG29OXkvCWVU++7Yqn74A/hv3YW2+8euxJ9JefF6uoQOGSTVI0lXjHFNkxYk3cAweYGUcOE1YLEvYVmF9E4FPH64op; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/ Set-Cookie: AWSALBCORS=3P00JUJ+ISJg5F1uDUo5+Ik9VL8gqlBFDOiG29OXkvCWVU++7Yqn74A/hv3YW2+8euxJ9JefF6uoQOGSTVI0lXjHFNkxYk3cAweYGUcOE1YLEvYVmF9E4FPH64op; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"309432-1720441203000" Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT Server: unknown
2024-08-06 12:26:41 UTC	15664	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 44 98 00 00 04 12 47 50 4f 53 9b af 91 74 00 03 48 ac 00 01 2d 14 47 53 55 42 be 7f 66 78 00 04 75 c0 00 00 42 b4 4f 53 2f 32 23 5f 6e 62 00 02 77 ac 00 00 00 60 53 54 41 54 ef 79 d9 45 00 04 b8 74 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 78 0c 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 44 90 00 00 00 08 67 6c 79 66 6a 1b 9d 97 00 00 01 0c 00 02 26 86 68 65 61 64 2d c3 61 46 00 02 4f 84 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 77 88 00 00 00 24 68 6d 74 78 24 35 88 39 00 02 4f bc 00 00 27 ca 6c 6f 63 61 09 84 29 ed 00 02 27 b4 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 27 94 00 00 00 20 6e 61 6d 65 37 5c 60 0e 00 02 dd a0 00 00 02 50 70 6f 73 74 a7 a8 35 72 00 02 df f0 00 00 64 9e 70 72 65 Data Ascii: GDEF11DGPOStH-GSUBfxuBOS/2#_nbw`STATyEtDcmap/.xegaspDglyfj&head-aFO6hheaw$hmtx$59O'loca)''maxp' name7\`Ppost5rdpre
2024-08-06 12:26:41 UTC	2046	IN	Data Raw: 00 70 00 00 06 d2 0a 63 02 26 01 99 00 00 00 07 06 70 02 20 02 00 ff ff 00 70 fd d7 06 d2 08 00 02 26 01 99 00 00 00 07 06 8b 06 ba 00 00 ff ff 00 70 fe 25 06 d2 08 00 02 26 01 99 00 00 00 07 08 62 06 ed 00 00 ff ff 00 70 fd c2 06 d2 08 00 02 26 01 99 00 00 00 07 06 89 06 f3 00 00 00 01 00 70 00 00 07 38 08 00 00 10 00 00 01 11 21 11 21 11 23 22 06 06 15 15 21 35 34 00 33 07 38 fd 87 fe 90 e1 4e 55 21 fe c6 01 0a f4 08 00 fe c9 f9 37 06 c9 47 6f 3d 68 ab df 01 08 00 02 00 70 fd c0 06 d2 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 59 8b 56 53 b2 5e b3 8e 53 fd 87 06 62 fd 87 fe 90 76 63 3e fe d7 2d 68 b1 84 76 06 c9 01 37 fe c9 f9 37 06 c9 00 02 00 70 fe fc 06 d2 09 04 00 03 00 0b 00 00 01 01 33 01 01 11 21 11 Data Ascii: pc&p p&p%&bp&p8!!#"!5438NU!7Go=hp!33#".55!!!YVS^Sbvc>-hv77p3!
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 4c 50 6d 6d 50 4c 70 70 4c 50 6d 6d 50 4c 70 ff ff 00 3e 00 00 07 82 0a 00 02 26 01 d5 00 00 00 07 06 6d 00 fb 02 00 ff ff 00 3e 00 00 07 82 0a 63 02 26 01 d5 00 00 00 07 06 70 02 5e 02 00 ff ff 00 3e 00 00 07 82 0a 93 02 26 01 d5 00 00 00 07 06 66 00 8e 02 00 ff ff 00 3e fd d7 07 82 08 00 02 26 01 d5 00 00 00 07 06 8b 06 fa 00 00 ff ff 00 3e 00 00 07 82 0b 09 02 26 01 d5 00 00 00 07 06 80 07 60 02 12 ff ff 00 3e 00 00 07 82 0a 47 02 26 01 d5 00 00 00 07 06 6b 01 20 02 00 00 02 00 13 00 00 07 b2 08 00 00 03 00 0d 00 00 01 15 21 35 13 21 01 33 01 21 01 11 21 11 07 b2 f8 61 2b 01 a3 01 f5 14 01 f5 01 a3 fd 17 fe 8e 06 57 ca ca 01 a9 fc 76 03 8a fa fc fd 04 02 fc ff ff 00 3e 00 00 07 82 08 00 02 06 01 d5 00 00 ff ff 00 2e 00 00 09 86 08 8d 00 27 01 d5 02 04 Data Ascii: LPmmPLppLPmmPLp>&m>c&p^>&f>&>&`>G&k !5!3!!a+Wv>.'
2024-08-06 12:26:41 UTC	1616	IN	Data Raw: 6a 06 14 00 03 00 1a 00 2a 00 00 01 01 07 01 01 11 21 15 33 3e 02 33 32 04 12 11 14 02 04 23 22 26 26 27 23 11 03 14 16 16 33 32 36 36 35 34 26 26 23 22 06 06 04 06 02 08 98 fd f9 fd 51 01 64 16 1b 66 ae 88 b1 01 20 a8 a5 fe e1 b4 84 af 69 1c 10 07 55 a1 74 77 a2 54 53 a2 78 75 a1 54 02 66 fd a1 81 02 5f fb db 08 40 fe 38 7f 5b b5 fe 9f ff 00 fd fe 9e ba 58 7d 38 fc ce 05 40 95 e0 7d 81 e1 90 8f de 7e 7a dc 00 03 00 ba fd c0 06 64 07 89 00 0d 00 24 00 34 00 00 01 21 34 36 33 32 16 17 11 26 26 27 26 06 01 11 21 15 33 3e 02 33 32 04 12 11 14 02 04 23 22 26 26 27 23 11 03 14 16 16 33 32 36 36 35 34 26 26 23 22 06 06 02 1e fe 9c e9 ea 42 63 19 12 40 22 5b 5e fe 9c 01 64 15 1c 66 ae 87 b2 01 1f a9 a6 fe e2 b5 84 ae 69 1d 0f 07 55 a1 73 78 a2 53 52 a2 79 74 a2 Data Ascii: j*!3>32#"&&'#326654&&#"Qdf iUtwTSxuTf_@8[X}8@}~zd$4!4632&&'&!3>32#"&&'#326654&&#"Bc@"[^dfiUsxSRyt
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 00 ff 00 85 91 05 05 fe b3 08 0d 55 96 62 fc 79 ff ff 00 ba 00 00 04 26 08 93 02 26 03 45 00 00 00 06 06 64 bd 00 ff ff 00 4d fd 68 04 26 06 16 02 26 03 45 00 00 00 06 06 77 ef 00 ff ff 00 5e 00 00 04 6e 08 76 02 26 03 45 00 00 00 06 06 73 82 00 ff ff ff c0 00 00 04 26 08 93 02 26 03 45 00 00 00 07 06 7b 05 3a 00 00 ff ff 00 8f 00 00 04 38 08 8a 02 26 03 45 00 00 00 07 06 7f 05 c5 00 b6 ff ff 00 ba 00 00 04 26 08 63 02 26 03 45 00 00 00 07 06 70 00 e4 00 00 ff ff 00 9e fd d7 04 26 06 16 02 26 03 45 00 00 00 07 06 8b 04 89 00 00 ff ff 00 85 fd d7 04 46 08 00 02 26 03 45 00 00 00 27 06 8b 04 89 00 00 00 06 06 6d 81 00 ff ff ff 8e fe 25 04 26 06 16 02 26 03 45 00 00 00 07 08 62 04 bc 00 00 00 01 00 ba 00 00 04 72 06 16 00 13 00 00 33 11 21 11 33 36 36 33 32 Data Ascii: Uby&&EdMh&&Ew^nv&Es&&E{:8&E&c&Ep&&EF&E'm%&&Ebr3!36632
2024-08-06 12:26:41 UTC	10616	IN	Data Raw: 00 a2 fd e2 05 90 08 1c 00 17 00 37 00 00 01 03 26 23 22 06 06 15 14 16 33 33 15 23 22 24 26 35 34 36 24 33 32 16 01 33 15 23 22 06 06 15 14 16 17 17 16 16 07 0e 02 07 27 36 36 35 34 26 27 27 24 02 35 10 00 05 49 38 b9 87 6a 94 4d b7 ac cf d6 e7 fe be a7 aa 01 34 cf 6b c9 fe f6 cf c7 99 d3 6d aa b0 a1 cc b1 01 01 4f 87 58 c5 4d 39 51 5a c2 fe eb fd 01 ac 07 d9 fe e0 34 34 63 48 73 75 d6 6b cf 96 9b e4 7d 22 fc ca d1 53 a3 79 8a b1 29 24 2e 9d 75 50 a9 a0 41 91 4e 73 26 35 44 16 3d 47 01 0c e3 01 30 01 38 00 03 00 99 ff ee 07 33 06 00 00 03 00 07 00 18 00 00 01 11 21 11 21 11 21 11 21 21 11 14 16 16 33 32 36 37 11 06 06 23 22 26 35 07 05 f9 94 02 53 fe 9e 03 2b 01 61 2a 4a 31 23 40 15 2d 77 49 b6 db 06 00 fe e6 01 1a fa 00 06 00 fb bf 41 44 19 08 04 fe e5 Data Ascii: 7&#"33#"$&546$323#"'6654&''$5I8jM4kmOXM9QZ44cHsuk}"Sy)$.uPANs&5D=G083!!!!!3267#"&5S+a*J1#@-wIAD
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 06 00 00 15 00 19 00 00 21 21 35 26 02 26 23 22 06 02 17 15 21 35 02 12 24 33 32 04 12 11 01 11 21 11 07 86 fe 9b 01 82 e6 98 95 e7 84 01 fe 9c 01 e1 01 88 fb fe 01 88 e0 fd 50 fe 98 ef da 01 2c 99 99 fe d4 da ef ec 01 2f 01 b7 ec ec fe 49 fe d1 05 14 fa 00 06 00 ff ff 00 ca ff e2 0c 48 08 00 00 26 01 7e 00 00 00 07 03 63 06 af 00 00 00 05 00 c6 00 00 07 7b 08 00 00 03 00 07 00 0b 00 25 00 29 00 00 01 23 11 33 01 23 11 33 01 11 21 11 25 20 24 02 27 12 12 24 33 32 04 12 03 21 34 02 26 23 22 06 02 07 16 12 16 33 21 37 33 07 05 5c e6 e6 fe 6f e5 e5 fd 00 06 a3 fc bc fe ec fe 7c cb 01 01 da 01 82 fd fd 01 83 db 01 fe 9f 7c e3 9a 96 e2 7d 01 01 79 fb c5 fd 5e 08 2d 03 03 a9 04 57 fb a9 04 57 f8 00 01 2a fe d6 5d e4 01 8d fc 01 0d 01 89 d6 dc fe 69 fe e6 d4 01 Data Ascii: !!5&&#"!5$32!P,/IH&~c{%)#3#3!% $'$32!4&#"3!73\o\|\|}y^-WW*]i
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 0f 00 1f 00 00 01 22 26 26 35 34 36 36 33 32 16 16 15 14 06 06 27 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 02 3e 9a e1 7a 7a e1 9a 98 e0 7b 7b e0 98 49 63 32 32 62 4a 4b 63 32 32 64 fe 8c 85 ed 9e 9e ed 85 85 ed 9e 9e ed 85 d5 53 8f 59 5a 90 54 54 90 5a 59 8f 53 ff ff 00 74 fd 20 04 51 02 ac 02 07 05 d8 00 00 fa a0 ff ff 00 4d fd 20 04 2a 02 ac 02 07 05 d9 00 00 fa a0 ff ff 00 72 fe a0 03 08 02 ae 02 07 05 da 00 00 fa a0 00 01 00 46 fe 8c 03 d2 02 ac 00 28 00 00 01 07 26 26 23 22 06 15 14 16 17 17 16 16 15 14 06 06 23 22 26 27 25 16 16 33 32 36 35 34 26 27 27 26 26 35 34 36 33 32 16 03 ba f9 0a 56 50 40 62 3f 48 b7 8c 99 76 cc 82 c5 f0 13 01 0b 0e 62 4d 4b 63 3f 46 b1 95 8f eb c0 c0 d9 01 82 13 2d 4a 37 31 26 31 10 26 1d 88 72 64 96 54 a6 90 14 41 3f Data Ascii: "&&546632'26654&&#">zz{{Ic22bJKc22dSYZTTZYSt QM *rF(&&#"#"&'%32654&''&&54632VP@b?HvbMKc?F-J71&1&rdTA?
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 9f 03 f1 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a1 03 f1 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a2 03 f1 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a3 03 f1 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a4 03 f1 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 06 ba 02 66 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 06 bb 02 64 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 06 bf 02 8a 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 06 c4 02 40 00 00 00 07 07 07 03 d9 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 06 cd 02 cc 00 60 00 Data Ascii: d@'d@'d@'d@'d@'d@'fd@'dd@'d@'@d@'`
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 01 1f 01 0f 01 1c a4 fe 71 fc ec fe a3 ff ff 00 dc 04 c3 02 4e 08 00 00 06 05 79 3a 00 00 01 00 a1 fd ae 02 87 ff 8d 00 03 00 00 05 03 21 01 02 87 8d fe a7 01 21 73 fe 21 01 df ff ff 00 78 ff e2 06 38 06 14 02 06 03 35 00 00 ff ff 00 78 ff e2 06 38 08 5b 02 26 03 35 00 00 00 06 06 68 4d 00 00 02 00 6b fd c0 07 5a 06 14 00 25 00 2c 00 00 01 32 36 37 11 21 11 0e 02 23 22 24 02 35 35 34 12 24 33 32 16 16 17 11 25 11 26 26 23 22 06 06 15 15 14 16 16 01 11 21 11 05 11 25 03 1e 3d 5c 23 01 74 34 98 d5 92 e4 fe ce 9a 99 01 34 ea 88 d9 9e 2d fe 8c 22 60 42 80 87 31 40 8d 04 af fe 8c fe c1 01 ab 01 0e 21 1d 01 ee fd bf 4e 7d 4a ca 01 55 cf 2c e2 01 66 ce 58 88 49 fe 04 13 01 9e 24 27 89 e1 83 2c 83 cc 75 04 f2 f7 c0 06 8f 91 01 7f c3 00 02 00 d3 ff e4 09 07 06 14 Data Ascii: qNy:!!s!x85x8[&5hMkZ%,267!#"$554$32%&&#"!%=\#t44-"`B1@!N}JU,fXI$',u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49812	13.32.121.40	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:41 UTC	593	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:41 UTC	700	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Tue, 06 Aug 2024 12:25:53 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 91353a8aba9ab05d79e9678e004043bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: yvcBzfikQ9o8dMrafera5wGOa_1urpIoomp1mfAi_T9IWfhsZmdsTQ== Age: 48 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 78 36 85 56 3b d6 72 82 22 ba 6e 66 0e d2 6f ca e1 2a a3 1d 93 a8 1c bc bc 0a ca d1 fb 8e 5f a2 d5 d7 6a d4 eb 6d a4 df 76 56 e5 30 fa 11 5e 55 25 2a 57 ae f3 b2 9e ee d4 56 6f d4 95 a3 ec ce 8f a5 57 b5 eb 0c e3 e5 f6 ed 27 1d 6c 07 a3 3c 5c d3 57 ac 64 c1 fb 5b f0 e7 85 e3 ad 5e 4e 2e 46 eb f5 1f 91 d1 c7 ee ad c6 d5 5e 52 ac c0 1b f1 fb c7 58 5c 89 f1 bf be bf c8 df 93 87 8b 9d 4b c3 7f b9 09 72 71 73 a4 ad ad b3 0f f8 98 bf 69 6e 2c f0 da 3c 3a 30 30 e5 f6 7c 9c 59 5e aa f7 5f c0 e6 4c f4 29 ef 1d 1c 72 27 47 df f6 ff 00 23 6b f1 71 73 e5 e2 cf f7 54 a3 cd 57 36 ad c5 cb ed 39 38 b3 f3 d7 ba fe 07 3a b1 11 e8 57 90 d9 5a 4f 35 5c da b7 0a ef 91 9c d5 e4 36 56 03 43 0e 6e 1d cb 06 c9 8c 0f 26 b6 b5 1e d6 69 bd 9e 8b a2 b6 a8 36 57 b0 1c f4 dc d4 9b 56 Data Ascii: x6V;r"nfo_jmvV0^U%WVoW'l<\Wd[^N.F^RX\Krqsin,<:00\|Y^_L)r'G#kqsTW698:WZO5\6VCn&i6WV
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 79 36 c8 9a 9d 50 04 ee d0 4b 1a a2 6b 87 06 a0 63 6f 4b dc 8d 53 95 20 d2 7a 98 d5 b4 f6 c8 1b 80 b2 82 40 62 c8 e5 06 40 9a b9 d4 6d 48 c2 10 13 ae 19 35 71 86 53 95 9f bc 2c b7 20 2b 53 1b f1 f5 45 56 dd 0d 00 c3 8e c6 cd f4 30 ba da e4 da af 72 90 2b c0 4d aa a9 61 6b 2a a3 04 9d 9c b0 2d 27 67 2f 43 62 5b 04 e4 06 08 48 6d b0 09 0c 89 c8 24 00 9c 8d 28 04 a3 41 80 09 8c 00 00 00 0c ec 49 56 24 0a a9 44 54 d4 09 60 36 20 00 01 00 c0 50 00 30 10 c0 04 dc 0c cf 95 c2 01 3b f7 31 7c b0 2f a7 7b 67 44 55 78 eb 5d 7d 4c 88 85 bb 93 44 5a e1 4b 36 66 de a7 e0 83 6a 41 52 b1 8a a1 ed 7a d9 c9 40 04 ac 74 1e e6 12 4b b8 0e 43 79 2d e2 4c f7 76 08 d5 d9 90 df 72 72 c7 b4 07 5c bc 03 99 2e b7 49 60 89 c8 57 47 1a 8a 9a 19 f1 fc a6 85 00 00 00 10 cb 25 81 9b 34 Data Ascii: y6PKkcoKS z@b@mH5qS, +SEV0r+Mak*-'g/Cb[Hm$(AIV$DT`6 P0;1\|/{gDUx]}LDZK6fjARz@tKCy-Lvrr\.I`WG%4
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 19 a5 79 18 1c dc c9 c6 03 db 52 ea d3 6e c6 bc af 49 2d 2b 51 3b 3d 20 0f 3b dc 5f d4 ce 3b b3 ab 95 27 99 39 dd 24 cb 6c ea 82 d5 34 88 1e d7 d0 2b 0d 06 94 9b fd 32 be 93 e8 11 c9 10 f2 68 96 0d 1f 1b d0 4a 85 0e b5 92 df 00 d6 0e 9e 37 24 1c dc 74 9c 1d 75 a4 23 55 45 a9 69 40 46 6e 98 0a a6 99 a3 ce 0a aa 2a 3a d1 42 43 34 c8 b6 87 98 ea f7 b7 0c f4 ed a1 c5 3c d3 fb 63 c8 95 a9 5a ac 50 f3 5f 3a 4d c9 e9 4b 55 7d cc 2a ee eb 2e aa 4c d8 b2 bc db 73 d5 19 f1 d9 3b 4f 63 d5 dd c8 bf 65 41 f2 59 7f fa 69 fc 42 69 52 eb e8 95 cc f4 f3 46 95 b4 d6 5d 23 c0 ab 67 3b 64 d4 47 04 ad cb 41 ca f0 0b 72 56 73 c5 6f c0 d2 ab 8e fa 51 af 81 8c 6f 60 70 ea 67 c0 e7 92 3c 18 ee f8 eb 09 ab 7d c5 d1 f1 37 89 4e 3b 1a 9d 31 5d 54 f9 99 e0 fb ea b9 6f c4 f6 f8 12 4d Data Ascii: yRnI-+Q;= ;_;'9$l4+2hJ7$tu#UEi@Fn:BC4<cZP_:MKU}.Ls;OceAYiBiRF]#g;dGArVsoQo`pg<}7N;1]ToM
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 2a 5d 19 d3 7f 94 8b 66 38 c7 c7 84 21 d3 42 0c f8 7f e5 5e 67 af c9 f2 b3 c7 e1 ff 00 95 79 9e c7 27 ca cd 44 7c f7 2f b7 77 bb 72 79 f7 7b 5c 23 d2 e6 e6 db 66 a0 f2 dd 5b 2c 1e 8f 1f b7 56 a6 e9 32 a5 f6 bc 9d 7c 17 55 e2 87 a9 e6 d9 ee b7 81 15 a7 2d d3 66 54 ac e6 60 e8 d9 58 c9 c6 93 6f 05 85 74 d6 fc 95 d2 cc fa ca e8 8f 8e df 65 86 7d 7f 1b 9a a2 c4 68 00 05 40 21 88 08 b1 99 ab 21 90 6a b4 18 96 83 28 00 00 00 4c 62 60 67 62 0b b1 99 04 b1 d5 c3 13 0a ea 07 4c 03 40 98 ca 21 2c 1c bc cb 07 62 47 3f 2b 5d 48 39 38 79 6d 5a f7 07 ee 78 f9 31 78 0a d1 35 e9 39 ed ed ec b5 20 d9 7b 7a af 57 0d 9d 7c b4 fb 8d 57 25 96 2e a7 c5 1c 3f 46 d5 ca c1 4b 9e d5 70 f2 51 d6 f8 e9 7d 1e 4c 79 28 f8 f5 58 0d dc 7c 9a fa 59 a5 5d e9 a3 fa 8b c7 52 0e 5f a9 51 ee Data Ascii: *]f8!B^gy'D\|/wry{\#f[,V2\|U-fT`Xote}h@!!j(Lb`gbL@!,bG?+]H98ymZx1x59 {zW\|W%.?FKpQ}Ly(X\|Y]R_Q
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: b6 75 53 db 4a c9 9b e6 4b 4c fe 05 2f 77 64 a1 24 4e 6b 33 23 da f6 74 55 e3 5e 09 99 2a 6c e2 7f e6 65 7b 5e 58 e0 4e dd bf 36 74 59 7a 6a 8c f9 e3 fe 5a 95 cd c6 9a e3 e3 5d ed 6b 7e 66 3e f2 ae cf 8e bd ee 7a 4a 9e 9a 63 a3 33 e4 49 5d 59 af f8 d3 b7 c7 44 66 df f7 4f 87 97 ce f7 7b 8b dd e9 4f d3 08 e3 bd a5 c9 e9 5f 89 46 de ba db cd 98 72 70 55 60 e9 f6 8d 7c 63 b3 dd 39 7c 56 ff 00 3a fc 51 c7 c9 c2 fe ad bf d4 7a 5c 94 9e 2a db fa 5d 59 5c ae b5 bb 96 94 8d 4f 3c 57 81 6e 3b 26 c9 da d6 a7 af 67 5b 38 4e af e2 43 e1 5a c0 fb 7e 61 c3 ca 19 e8 5b db d6 de 04 7f 69 e2 3e d0 c7 10 ce bf ed 2c 2f ed 2c 5d 8b 8a ff 00 af cd ec fc 3f 53 d6 6e 38 ec fc 0e 2f 63 c0 e8 ec fc 8e fb d1 fd 2b 2e e7 39 77 da 3c df 6f ff 00 25 7c cd 39 1c 53 8d 78 59 fe 21 c3 Data Ascii: uSJKL/wd$Nk3#tU^le{^XN6tYzjZ]k~f>zJc3I]YDfO{O_FrpU`\|c9\|V:Qz\]Y\O<Wn;&g[8NCZ~a[i>,/,]?Sn8/c+.9w<o%\|9SxY!
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 71 90 eb ed 9b 3d 1e 3a d7 8f db 5d 5b a4 9e 43 e6 e4 b3 d5 fc 0f 53 d9 7b 7b f2 71 5e 8d 46 ee af c8 67 e5 35 3e eb 9e f6 e4 8a fa 53 4b 3d 74 3c d5 c5 6b da 2a 9d 99 ee df 8f 8e 29 7b 4d de d8 c6 98 39 b9 79 2d 3b 6b 1c 6b fc ba fd e5 6b 3e d1 cd 5f 65 b3 3c b6 54 f0 59 66 8a f5 e3 ff 00 8a bf f9 5b 5f b8 6b 81 fc d6 f4 af ea b3 fb 36 56 da d2 bb a3 72 fe ab 7a 6b f0 fd cc 2e 49 db 9e d6 77 9b 5d bb 25 f7 7f 03 9e 2c 9e eb 2d 7f 23 b6 2f cc b7 72 56 cb 8b a6 c5 f8 b5 a9 d2 b8 1c 6e a3 5c 95 f0 d5 79 a2 a7 17 f8 79 fc 7c 69 2c 69 a9 d7 2b 6c 78 0f 92 a9 4a 5e 44 3c e0 8e 7e bb 63 ee 35 a2 f1 35 f6 5f bb cc c7 9b e7 4f fa 11 b7 b2 f4 d1 be a1 96 dc 89 51 5a fd f0 bc 4e 6a 38 ac bc 22 f9 6c ee e1 98 d9 ce 3a 01 a7 1e bb 99 1c 9c 82 df 08 e7 73 77 0b 2c 09 Data Ascii: q=:][CS{{q^Fg5>SK=t<k*){M9y-;kkk>_e<TYf[_k6Vrzk.Iw]%,-#/rVn\yy\|i,i+lxJ^D<~c55_OQZNj8"l:sw,
2024-08-06 12:26:41 UTC	13232	IN	Data Raw: bd db 79 1b 5b 5b 55 ae 99 8d 3c a0 95 77 c6 b1 09 da 1c f8 75 af 9f 54 05 ee 74 70 9a 95 76 f6 f8 c7 f2 29 53 6d b7 57 e5 bb 9c bd 27 af f0 0b 59 b7 6b 56 b3 48 69 7d f9 6f c7 b1 34 b5 6c eb bf 45 2a 1a cf f9 7f 0d 40 5c 9c 69 db 63 9a 6d 53 dd 63 b7 e6 db 2a d2 e6 dd 3e 6f 2c 6b 8e ef 08 9e 5b c6 db 39 79 73 1f 97 8e de c5 f0 bb 6e 69 c5 e9 16 ae 3a fe e9 8f 88 11 f5 76 bd d5 98 6a 52 7d 5e 93 e6 8b 76 ba 6b 6f ae 3b ad 5c 67 e3 fa 98 2b 6e b4 7c 8a 5c 77 db 6d 7c 30 6b 5b 25 35 4d ca ca 71 d5 4c a4 ba a6 05 52 8a db b8 af 35 7f a6 b2 42 74 76 b2 6f d0 fe 5c 6b a2 7f e2 55 79 2c ef f5 17 fa 5f 6c fc b0 fc 3a a1 5f 92 9a a7 9e 3c 78 26 ed ea f8 30 3a 1c b4 e5 56 32 dd 5f 5e cf c1 99 dd 52 ff 00 ee da 6c 9b aa 9f ea f0 5e 5d d8 d5 ab 7b b4 a7 2b 73 6b b2 Data Ascii: y[[U<wuTtpv)SmW'YkVHi}o4lE@\icmSc>o,k[9ysni:vjR}^vko;\g+n\|\wm\|0k[%5MqLR5Btvo\kUy,_l:_<x&0:V2_^Rl^]{+sk
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 58 dc d9 6e 4a cb 72 6d ce b1 d3 3d 25 f4 40 5d 65 b4 d3 5b 27 d2 df f5 75 d7 2e 3b bc 48 56 6d 8b 37 d6 12 e8 b4 ff 00 d5 c8 cc 9f 1b b3 8b 4e e8 ac f9 bc c7 c1 7d e5 25 78 8a d9 3d af 1f e6 6f f1 4b 3a 81 7b 74 6d 3b 59 62 de 2f fa 7b 25 5d 31 a9 77 7f 4a ad 4a 4b ab 5f b9 fe ea ca fd 8b ef 7a 23 1a 24 ac b7 42 4b 36 d5 b8 ea d7 85 8b ba ad fd 2b 14 ed a4 f6 c7 eb f7 01 b5 55 a3 7d dc 2b ac 6d f9 92 e8 bb 7a 8c 3e a5 6e f6 36 de e7 37 7f 92 5f 0e da bc 1a 72 ab 70 bb 66 5b 49 55 6b 6d 33 e5 0b 07 3d 6f b6 37 42 8c ae f2 f1 0b f8 f4 02 ab 95 15 6d df 45 fe 5a f4 4f e3 f8 9b 71 da cb 09 a9 6a 5c 6a fc 2c f4 49 75 82 2b 66 a6 cb d7 11 d7 1e 5e 2c b4 dd 9c 27 ba b5 4b 11 1e 6d 79 78 84 66 ed 8d bf 32 b2 73 6e b6 7a 2c f4 4b f2 52 55 dd b9 5e aa aa ab 55 f6 Data Ascii: XnJrm=%@]e['u.;HVm7N}%x=oK:{tm;Yb/{%]1wJJK_z#$BK6+U}+mz>n67_rpf[IUkm3=o7BmEZOqj\j,Iu+f^,'Kmyxf2snz,KRU^U
2024-08-06 12:26:41 UTC	10945	IN	Data Raw: 57 d3 3b 66 f5 78 8d 23 c6 7a 89 2c 7a 5e 18 1a b5 4a c3 6e 1f 4b 77 7e 28 4e d6 ab ce bd 1c 61 fc 09 f5 51 4a 86 a7 46 2a d7 fa 16 27 cf 3e 60 35 77 1a fa b5 5f e6 7f c0 71 6d de bc be 9b 71 5f bc 6d aa a6 97 4c 7d 98 2b b8 6b e6 db af 70 22 d5 dd 64 da 49 ad 6c 9e 23 cc d2 aa 5f f4 2c e7 bf c4 cd 55 56 27 45 1a f8 f8 0e a9 d9 61 6e 4f 59 d0 02 bc 9f fb b5 eb a0 6d 76 6d fc 96 7f 14 d7 89 a5 1a ca 7f 2f 66 47 2d 55 d6 1e 35 c7 4f f2 81 a5 ab 69 88 87 d5 78 1c ff 00 55 6e eb 4d dd 7f 91 a6 eb 3a 2b 2e b8 8e a9 0a b2 df a6 bb bf a7 c8 05 65 7c 67 6b d2 ab 59 f8 78 f5 34 a4 ac fc ad 77 d1 d8 8f 55 52 55 5a 74 ec fc cd 1f ae 23 31 af 9b f3 00 e4 a2 59 5a ae 9d 3e 00 92 ca d2 16 8f a8 d3 75 5b 5b dc 9f fe a9 21 bc ca 5e 2a 56 40 9d db 54 43 8c 63 44 5a 89 73 Data Ascii: W;fx#z,z^JnKw~(NaQJF'>`5w_qmq_mL}+kp"dIl#_,UV'EanOYmvm/fG-U5OixUnM:+.e\|gkYx4wURUZt#1YZ>u[[!^V@TCcDZs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49818	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:41 UTC	695	OUT	GET /websafe/images/pullFeature/Help.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba; AWSALBCORS=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba
2024-08-06 12:26:41 UTC	883	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:41 GMT Content-Type: image/svg+xml Content-Length: 1265 Connection: close Set-Cookie: AWSALB=VxFGw6A0JTiQqYoZ31rLqw/h+bPGQMZ7Y2dA7J4KNaRouHNQ8wxL5lUB5Q/DrIA+JgYv0fEE+JRQ0XceKKz7R6tdbZ3RmjOs7F4ch48xc+O65m0BrR3VENP87qHn; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/ Set-Cookie: AWSALBCORS=VxFGw6A0JTiQqYoZ31rLqw/h+bPGQMZ7Y2dA7J4KNaRouHNQ8wxL5lUB5Q/DrIA+JgYv0fEE+JRQ0XceKKz7R6tdbZ3RmjOs7F4ch48xc+O65m0BrR3VENP87qHn; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-4f1" Server: unknown
2024-08-06 12:26:41 UTC	1265	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 69 64 3d 22 61 22 0a 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 37 2e 38 37 35 20 37 2e 38 37 35 20 32 30 2e 32 35 20 32 30 2e 32 35 22 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 2e 62 2c 2e 63 7b 66 69 6c 6c 3a 23 66 37 66 37 66 37 3b 7d 2e 63 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg height="20px" width="20px" id="a" xmlns="http://www.w3.org/2000/svg" viewBox="7.875 7.875 20.25 20.25"> <defs> <style>.b,.c{fill:#f7f7f7;}.c{fill-rule:evenodd;}</style> </defs> <path clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49817	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:41 UTC	690	OUT	GET /websafe/images/skins/close.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba; AWSALBCORS=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba
2024-08-06 12:26:41 UTC	883	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:41 GMT Content-Type: image/svg+xml Content-Length: 1608 Connection: close Set-Cookie: AWSALB=Lzmf8RNCwdi2bR8T2cRjSZ+xvUd8FrYsrS1rjKpNvIHfUNKgOVhDyDhknw8WEmsfXAHicggrQRE12XuqJIy9KWbTtZGkSim4GD5pVYxG5Q72+fKbIlaS/6aqaKJM; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/ Set-Cookie: AWSALBCORS=Lzmf8RNCwdi2bR8T2cRjSZ+xvUd8FrYsrS1rjKpNvIHfUNKgOVhDyDhknw8WEmsfXAHicggrQRE12XuqJIy9KWbTtZGkSim4GD5pVYxG5Q72+fKbIlaS/6aqaKJM; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-648" Server: unknown
2024-08-06 12:26:41 UTC	1608	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 34 39 2e 33 20 28 35 31 31 36 37 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 49.3 (51167) - http://www.bohemiancoding.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49819	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:41 UTC	684	OUT	GET /admin/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; AWSALB=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba; AWSALBCORS=q5VyxDn1I/Qaut1HbGKyDdGDTHujt0I6lNW2jL7J+SAwnBJn3EywohZgTTvAejYE8w34esBspaBPonn0Hh9N2lya2iFXJRxLR3I/FShGvm6kQIiSdlpzDyK5nhba
2024-08-06 12:26:41 UTC	624	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:41 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=fm13wUHwMZdhO4WfcKtBgox0nK4Hh6/GboGdGCU4iB0hwSK6Q0GCqe2H0V2mY4lfbQFN3rL5/HcRgnpeIGzPKUfMNGfZ7kp8NbShKVy1jjMjISMLQ/rqGbbLDesz; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/ Set-Cookie: AWSALBCORS=fm13wUHwMZdhO4WfcKtBgox0nK4Hh6/GboGdGCU4iB0hwSK6Q0GCqe2H0V2mY4lfbQFN3rL5/HcRgnpeIGzPKUfMNGfZ7kp8NbShKVy1jjMjISMLQ/rqGbbLDesz; Expires=Tue, 13 Aug 2024 12:26:41 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Server: unknown
2024-08-06 12:26:41 UTC	8800	IN	Data Raw: 32 32 35 38 0d 0a ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 Data Ascii: 2258JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c
2024-08-06 12:26:41 UTC	16384	IN	Data Raw: 36 39 36 30 0d 0a 1f 98 71 f9 0f 28 06 ab 1b 87 04 0a c8 b0 87 45 18 08 cb 0a ea 12 01 09 92 e9 99 5e 30 58 48 19 29 ae 9e 30 5a ee 2b 62 c8 a7 9d 49 b5 26 60 06 aa d7 d8 e5 74 60 ec ad 8b a2 1c d7 43 45 79 c5 82 b3 b7 65 ac d5 c9 9c b5 a9 d2 ea e6 6a fd 8c 4e ca d8 ba cf 8d c0 c9 5c d5 59 32 2d d9 6b 35 c9 94 c0 47 50 49 82 b9 a2 b4 81 a2 1c 90 54 94 50 84 4c 81 63 82 15 8a 56 0a 34 00 6e 44 90 14 56 c4 49 7b 01 00 00 00 00 04 00 c4 32 84 00 04 00 00 14 52 18 90 c0 00 00 00 00 00 0c ed 59 ca 34 00 32 4c b5 9c 85 ab 3e a4 27 00 6a 02 90 4e 40 60 02 00 7d 06 24 86 00 00 00 4b 41 57 23 9e 84 e9 a0 16 1a 09 39 22 cf 60 12 cb 34 12 50 8a 00 10 c0 05 01 1b 8c 96 c0 2c c9 4b dc 09 49 60 00 00 03 10 04 80 09 ea 31 44 81 40 28 18 00 86 26 e0 00 20 48 60 0c 64 b1 Data Ascii: 6960q(E^0XH)0Z+bI&`t`CEyejN\Y2-k5GPITPLcV4nDVI{2RY42L>'jN@`}$KAW#9"`4P,KI`1D@(& H`d
2024-08-06 12:26:41 UTC	10600	IN	Data Raw: c9 b4 05 70 b6 c9 10 fb 6f a2 2d 7f b2 f7 45 d7 bf 57 b3 03 1f c7 65 b0 9d 6d 27 4f 3a db 57 03 55 4f 46 06 9d 9f b5 49 a9 14 50 a0 b2 80 43 10 10 c7 50 61 50 2c 04 30 01 31 89 81 0c 96 53 13 20 51 22 5c aa 35 82 93 92 84 9a 79 dc 9e e5 5d 96 0b d3 42 6d 2f 4c 01 c2 ea d6 a1 2d 1d 92 e3 ea 52 66 fb 75 b7 da c8 32 e6 c7 cf c8 6f b6 d6 a4 f1 02 b9 d7 a3 0e 54 7d 48 81 c0 1a 55 ad 99 a2 31 a5 b8 ed 26 8b b8 ba 01 aa 45 2c 6a 64 bb b5 f3 1f e4 af 50 29 e4 8e d6 ac af c8 ba 8b b6 01 dc 31 5a 9d 17 44 2a ae 80 30 2b 01 08 a8 90 2b 8f 98 b8 b0 38 93 6b 43 7a 77 bf c8 ca 05 29 6e 15 dc 9f 2f 30 4b a6 0e 0e 69 6e 74 d6 ed ef 88 03 67 9f b9 49 9b ec d5 fd ac 8a ff 00 b5 46 fa 33 6e 55 b0 1c d6 ed ba ea 89 83 b7 2b 4c 91 6a 56 da ca 7e 41 1c b0 65 63 5e e7 fa d7 d6 Data Ascii: po-EWem'O:WUOFIPCPaP,01S Q"\5y]Bm/L-Rfu2oT}HU1&E,jdP)1ZD*0++8kCzw)n/0KintgIF3nU+LjV~Aec^
2024-08-06 12:26:41 UTC	15886	IN	Data Raw: 33 65 30 36 0d 0a 24 ba e5 0a d0 99 55 78 64 15 45 0b 53 43 2e db 35 28 ce da 96 8c ed a9 a2 20 01 00 14 31 31 89 81 16 d0 28 16 d0 8a b6 9c 90 68 c5 23 6a 74 24 07 3d 4c dd 65 e1 c9 44 6e 80 52 d3 49 92 ad f6 9b 69 8f 99 3c 6a e3 60 0a 39 46 5d eb f1 68 de 38 af 69 8f 75 27 12 01 5b 4b f6 a3 6b 99 2a ce 8b a1 bb 59 03 36 da b2 4b 46 5d 2d 36 69 ad 0b 94 32 85 75 28 e2 e3 75 45 8c a6 76 d8 95 65 ac c8 1c fc 6d c9 f4 82 92 fa 21 bc 9d 1c 90 4a d7 60 39 31 c9 fd cf 1e c1 72 4a 93 0e 27 ce 4e de 4b a8 72 5d 40 ce 57 19 58 31 ad 95 a7 ee f6 fe 87 4b b2 25 c3 de 00 e5 ad 9a ab 89 f6 9d 1d b7 35 ca 81 b6 96 e3 57 5b b0 32 b6 a6 56 a3 b4 44 be b0 6d 6d 43 b5 74 9c 10 73 ad 0d 69 a3 21 2c 1a d1 61 81 c7 d8 b3 77 cf 99 5d 9e ed ed 68 6d e8 cd e8 92 7a 05 15 67 08 Data Ascii: 3e06$UxdESC.5( 11(h#jt$=LeDnRIi<j`9F]h8iu'[Kk*Y6KF]-6i2u(uEvem!J`91rJ'NKr]@WX1K%5W[2VDmmCtsi!,aw]hmzg
2024-08-06 12:26:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49820	13.32.121.40	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:41 UTC	364	OUT	GET /CRES_googleSignIn.png HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:26:42 UTC	697	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 62336 Connection: close Date: Tue, 06 Aug 2024 12:26:41 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "cff524de6437dc8824753bedcf6901b3" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 0dec5f752f0f332c449471a83f050dd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: BQv4SGjjFinU9anY9jb4lEeUwks5dS97WtU2BqZX5NM9opl94wnYxQ== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-08-06 12:26:42 UTC	15687	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9a 00 00 01 9a 08 06 00 00 00 36 06 85 63 00 00 0c 15 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 08 09 2d 10 01 29 a1 f7 2e 5d 20 10 aa 20 20 1d 6c 84 24 40 28 11 12 82 8a 1d 5d 54 70 ed 22 82 a2 a2 2b 22 b6 b5 00 b2 a8 88 5d 59 04 7b 7f 28 a2 b2 b2 2e 16 6c a8 bc 49 01 5d 5f fb de f9 be b9 f3 e7 cc 39 67 fe 33 f7 dc c9 0c 00 aa 8e 9c bc bc 1c 54 0d 80 5c 61 81 28 26 24 80 99 94 9c c2 24 f5 00 14 10 01 05 a8 01 94 c3 15 e7 f9 47 47 47 00 28 23 fd df e5 dd 4d 80 48 fb 6b 76 d2 58 ff 3a fe 5f 45 9d c7 17 73 01 40 a2 21 4e e3 89 b9 b9 10 1f 01 00 d7 e6 e6 89 0a 00 20 b4 43 bd c9 cc 82 3c 29 1e 80 58 53 04 09 02 40 c4 a5 38 43 8e b5 a5 38 4d 8e 6d 65 36 71 31 Data Ascii: PNGIHDR6ciCCPICC ProfileHWXS[R-).] l$@(]Tp"+"]Y{(.lI]_9g3T\a(&$$GGG(#MHkvX:_Es@!N C<)XS@8C8Mme6q1
2024-08-06 12:26:42 UTC	303	IN	Data Raw: 31 34 e6 e1 c7 1a 37 4d dc a5 a4 a0 92 e6 87 0c 90 ef 63 14 aa c7 54 d7 a3 12 0f 4e b0 d7 78 1c 87 44 a7 8a 86 06 61 5f af 94 3b 0e 8a ec de 2d 83 58 5b 69 60 e7 0e 89 20 01 49 67 b7 8e 09 e5 40 03 32 db 28 05 39 66 e8 18 81 af 63 d0 77 b8 c3 9a d8 2a 19 92 7c a5 79 4c 33 a6 f7 d0 e9 28 04 18 3b bb 10 93 31 6f fa b0 64 ce 82 09 b3 aa 3e 09 b8 90 70 f1 45 a4 29 a9 aa 00 9e 96 bf 01 4d 4a c6 29 db d7 34 d0 b8 7e 08 15 24 ac 2d 74 92 99 d0 05 7b 5a 9c 70 49 d6 a8 bf 43 06 ee bf 5f ba 7e f0 03 09 0e ee 97 80 16 3c 60 32 87 ab 0d b4 62 6a 33 66 1a b5 d6 a4 92 ef 9a 23 3b b2 4d 57 a6 aa 38 d2 af f6 c1 10 a9 67 67 c9 e8 8f 3d 52 94 63 19 e5 c9 15 83 fc 05 0b 24 7b c6 99 52 b7 72 a5 34 9d 77 be f8 a7 9c 26 7e 4b 2b c6 58 60 19 06 66 83 d1 7a 3c 88 94 d3 04 92 94 Data Ascii: 147McTNxDa_;-X[i` Ig@2(9fcw*\|yL3(;1od>pE)MJ)4~$-t{ZpIC_~<`2bj3f#;MW8gg=Rc${Rr4w&~K+X`fz<
2024-08-06 12:26:42 UTC	10857	IN	Data Raw: c7 89 c9 50 b7 45 fd bd 12 f6 f6 48 f1 c5 5d 32 f0 f4 13 52 de be 43 c2 57 5e 91 08 46 06 14 8c 02 d0 91 e3 94 fc 26 34 19 04 d2 c9 bd 85 1d 30 5e 62 8a 0e 9a f5 25 8c 84 f8 54 4d f2 39 94 45 02 58 ee 46 f5 b7 cc 0f c7 56 74 4c 0a 99 4e cf 75 22 66 b2 56 4c 19 56 82 c1 fa 0d b2 f0 96 8f a9 5b 19 d6 03 d6 19 7e 68 e5 fb f4 ac fa f9 b5 37 8c 4e 81 9a 06 1a d7 a0 b8 65 45 c7 0f 47 d4 41 b3 d2 b1 ab e2 41 45 56 dc fc 5b 39 f4 0f ff 28 f1 f6 9d ce 7c 14 95 52 4d 44 93 86 34 fa e7 db dd a9 a4 00 59 9b 17 51 ba 64 f1 91 79 28 fb 20 1f 53 06 e8 81 71 f0 0a 0d ba f2 b0 d4 2a c2 da ab e1 ac b3 b0 5e c8 79 d2 80 05 aa ea e0 08 31 68 9d 87 b5 43 ea 61 96 cc 1e 3b 0c 56 11 39 a9 11 fa 29 29 83 99 ca ef 9a ca 77 f1 5b 49 23 34 03 fd 29 f0 a8 79 34 cf a1 6a 1b ec 87 64 Data Ascii: PEH]2RCW^F&40^b%TM9EXFVtLNu"fVLV[~h7NeEGAAEV[9(\|RMD4YQdy( Sq*^y1hCa;V9))w[I#4)y4jd
2024-08-06 12:26:42 UTC	12792	IN	Data Raw: 00 9a 36 29 a3 0c 7d 9d ef c4 26 cb 06 c9 59 ba 4e f2 67 7c 0b 46 81 5a a3 00 59 33 55 65 dc 3b a0 81 74 5e 2a cb ca c5 81 7c fa bd f3 65 c5 42 72 1f 2e e2 08 59 5d 91 86 f5 7a 62 e1 c4 25 9a a8 1f 2e f1 ef 83 33 cd 7f c0 e2 9a bb 75 28 c2 27 c2 20 4f 06 34 a3 17 0a 19 17 8b 32 22 30 2f 5e 27 f5 6b 3e 8f 15 34 4f d5 49 ae ae f8 79 17 bd 8a d1 93 b1 bb 53 48 01 2d 33 28 ac c3 30 94 43 98 13 f5 fb 5f de 8d 35 65 1b 70 0e 7f 74 ea 52 88 4e 99 86 9a ef 14 66 cd 5e 65 14 18 37 05 c8 5b 94 0b 51 12 87 ce 2c 2e 47 72 4a 4b 5e 7e f7 9d ad 72 f1 59 75 a8 c9 25 b8 13 23 0f 82 2a 9f f5 9a a8 34 01 86 74 82 40 83 1e 5b b9 4b a2 d7 6e 93 e2 4b df c6 fc 90 6e cd 83 b2 46 64 48 45 b1 71 7f fa dc 79 a0 02 34 58 c0 cc 3b f3 06 a9 5f f1 07 90 66 ea b1 a8 1a fb 10 a0 22 08 Data Ascii: 6)}&YNg\|FZY3Ue;t^\|eBr.Y]zb%.3u(' O42"0/^'k>4OIySH-3(0C_5eptRNf^e7[Q,.GrJK^~rYu%#4t@[KnKnFdHEqy4X;_f"
2024-08-06 12:26:42 UTC	3592	IN	Data Raw: aa 45 28 b1 97 87 20 a3 6c c9 ea 51 5f 59 c0 67 2e a9 c6 55 67 25 51 cb a9 81 d2 06 6d 2c 5d 74 1f c2 bc 0f 09 d0 9c 38 3f ce 0e 88 dc 1e c6 3e fb 5b 14 f6 3e 4c cd 40 63 0d ea 6d 90 7b ac 24 43 59 1c 97 13 3d 5a af 90 0d 57 c4 d4 7c 93 3c 7b 3c 3a c6 71 74 34 93 31 9f 67 d4 e5 07 db b9 40 19 05 75 d6 26 5f 32 36 92 fe 7a 01 e0 d0 e7 ec c4 94 ea cf 99 90 59 34 66 93 e0 8d b3 6b e7 e2 6b 17 dc 8e f3 26 2f 45 d2 3c e4 48 63 96 43 b6 d6 80 c8 fd 79 bc bf d6 53 a0 04 28 20 90 91 de ae 85 03 5d 76 6c 9e 1e f7 65 c4 7e 89 da cc 3f fe e2 10 f6 e4 ea a8 e1 b3 8b 58 d4 f4 03 5d ef 04 e4 e8 d8 1d 4a 80 6c 27 c9 42 81 0e 14 6e c6 3f 65 23 3b ac 51 9a cd 66 d4 a6 f1 3b 1f 9b 80 e5 73 34 ff 88 dd 6a 93 cb a2 e2 d0 52 70 f8 81 86 4c 10 cd 75 20 bf f7 5e a4 b7 7c 07 d1 Data Ascii: E( lQ_Yg.Ug%Qm,]t8?>[>L@cm{$CY=ZW\|<{<:qt41g@u&_26zY4fkk&/E<HcCyS( ]vle~?X]Jl'Bn?e#;Qf;s4jRpLu ^\|
2024-08-06 12:26:42 UTC	6396	IN	Data Raw: a4 c6 12 c5 2e da 71 9e ea a8 c0 33 5d 0d 74 5d ae 45 8a e0 a2 49 9b 34 d6 92 78 ce 6d 40 6c eb d3 89 29 60 da a1 06 4e c9 70 e6 5a 6e f6 33 82 0f 49 28 da 25 f8 b7 64 e2 42 dc ba ec 7a 6a 36 2b 18 11 2e 89 98 bc 7a 78 ce 63 f8 89 e9 ea cf f4 95 02 d2 a6 c9 7f 8e a3 ac dd 76 9b cd c9 8b 9a eb 95 63 67 72 f3 9e 1c ee 7a b1 1d 6b b7 15 d0 c9 d0 ff 32 f7 c8 9c 66 3d 6e df c8 fb 4a ec 63 ae 13 ad 23 f2 f0 a5 57 ef b9 0b a2 f8 da 55 0d 5c e0 cc 2d 8d 22 0b 46 e8 7c 75 cc 8d c3 70 60 54 81 46 33 55 a3 45 3a 2b 17 0e 21 f3 ce 5f 20 b5 ff 29 0a c4 3c b6 90 f9 1e 6a ae c2 cb 9c e5 7f 50 e3 31 04 19 1d 57 6f 5b ee 8d 31 ad 71 e3 19 f0 94 ec 20 12 d9 00 3f c9 a5 75 d4 b5 6e 87 2c 93 52 a7 cd df 82 ea 4d 8c 03 ad 67 34 2d e0 3a 36 37 61 15 c1 46 d1 04 62 e6 6a 2e b0 Data Ascii: .q3]t]EI4xm@l)`NpZn3I(%dBzj6+.zxcvcgrzk2f=nJc#WU\-"F\|up`TF3UE:+!_ )<jP1Wo[1q ?un,RMg4-:67aFbj.
2024-08-06 12:26:42 UTC	12709	IN	Data Raw: 17 cd 65 0a 3a ab 77 ca ba 64 65 d6 7b ed 59 ca 8c 4b 21 2d c2 df a3 b2 55 dd 5a fd 32 a3 8c fa 1c 63 e8 9a 68 d7 d9 0c 61 73 06 35 9d 89 ca bc 51 d3 cc 64 46 d6 b0 6e ac 36 ed dc a8 e4 7b 24 5f 4a fa 48 5b 15 a8 cc 6c 2a 72 79 e6 5a 5c 7c 46 82 e3 99 94 6f 06 b8 aa 67 23 ce 48 e6 aa df ef 2a 4b 8d 46 cd 53 1f 8d d3 a8 f7 27 25 bb 8b f1 98 9e 61 b0 bf 1f bd 7d 1f b6 b7 ed a4 f9 21 e8 15 06 ae b0 bd ab c2 ee d5 fd 3e 95 14 05 ac e3 d0 9d a3 1e b3 88 13 2f a1 86 a2 51 0b c7 01 0e 83 04 08 1a f6 8c a1 c2 b4 9d 46 82 cd 14 cc a0 c6 33 ad 6a 02 a6 d5 4f c6 8c da c9 68 ac aa 47 65 ac c2 ae a9 8c 0b 7c 64 6a d3 93 02 89 cc f7 ba 37 ea 6d ee cf 06 c0 2d 3f bc 86 2f 93 70 d6 5f 37 ff f4 62 2a 97 47 36 fa e0 bc bb c6 e5 53 c7 8c 57 95 61 82 a7 03 4d be 8d 3f dd 9a Data Ascii: e:wde{YK!-UZ2chas5QdFn6{$_JH[lryZ\\|Fog#HKFS'%a}!>/QF3jOhGe\|dj7m-?/p_7b*G6SWaM?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49821	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:42 UTC	872	OUT	GET /favicon.ico HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/websafe/root Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Lzmf8RNCwdi2bR8T2cRjSZ+xvUd8FrYsrS1rjKpNvIHfUNKgOVhDyDhknw8WEmsfXAHicggrQRE12XuqJIy9KWbTtZGkSim4GD5pVYxG5Q72+fKbIlaS/6aqaKJM; AWSALBCORS=Lzmf8RNCwdi2bR8T2cRjSZ+xvUd8FrYsrS1rjKpNvIHfUNKgOVhDyDhknw8WEmsfXAHicggrQRE12XuqJIy9KWbTtZGkSim4GD5pVYxG5Q72+fKbIlaS/6aqaKJM
2024-08-06 12:26:42 UTC	687	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:42 GMT Content-Length: 1150 Connection: close Set-Cookie: AWSALB=F+hJxBWPmHz0/Mulj4yRSeMHXFyFCfFznYIRhf9z/jruYrCQxgln2JNB3yPiQ/h9pSXf649SwlzXpWGu8/Sj2mtcfrTa7qRiXf29LRCrKa141b7H+d/B/Ah9WOFl; Expires=Tue, 13 Aug 2024 12:26:42 GMT; Path=/ Set-Cookie: AWSALBCORS=F+hJxBWPmHz0/Mulj4yRSeMHXFyFCfFznYIRhf9z/jruYrCQxgln2JNB3yPiQ/h9pSXf649SwlzXpWGu8/Sj2mtcfrTa7qRiXf29LRCrKa141b7H+d/B/Ah9WOFl; Expires=Tue, 13 Aug 2024 12:26:42 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"1150-1720407974000" Last-Modified: Mon, 08 Jul 2024 03:06:14 GMT Server: unknown
2024-08-06 12:26:42 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a8 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49822	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:43 UTC	626	OUT	GET /favicon.ico HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=F+hJxBWPmHz0/Mulj4yRSeMHXFyFCfFznYIRhf9z/jruYrCQxgln2JNB3yPiQ/h9pSXf649SwlzXpWGu8/Sj2mtcfrTa7qRiXf29LRCrKa141b7H+d/B/Ah9WOFl; AWSALBCORS=F+hJxBWPmHz0/Mulj4yRSeMHXFyFCfFznYIRhf9z/jruYrCQxgln2JNB3yPiQ/h9pSXf649SwlzXpWGu8/Sj2mtcfrTa7qRiXf29LRCrKa141b7H+d/B/Ah9WOFl
2024-08-06 12:26:43 UTC	687	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:43 GMT Content-Length: 1150 Connection: close Set-Cookie: AWSALB=vTlMxPnpWeOnEH2aH8jE5M5Kmi0tHVvONTsOxVvbR/FSoHcgGMtjFX0BQlFpriCgCujxCNcbT0sNPF432JZb1H418bVe2NTbrOsxGEEksEUcBe+MYooKcw5n34p3; Expires=Tue, 13 Aug 2024 12:26:43 GMT; Path=/ Set-Cookie: AWSALBCORS=vTlMxPnpWeOnEH2aH8jE5M5Kmi0tHVvONTsOxVvbR/FSoHcgGMtjFX0BQlFpriCgCujxCNcbT0sNPF432JZb1H418bVe2NTbrOsxGEEksEUcBe+MYooKcw5n34p3; Expires=Tue, 13 Aug 2024 12:26:43 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"1150-1720407974000" Last-Modified: Mon, 08 Jul 2024 03:06:14 GMT Server: unknown
2024-08-06 12:26:43 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a8 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49824	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:51 UTC	971	OUT	GET /websafe/help HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=vTlMxPnpWeOnEH2aH8jE5M5Kmi0tHVvONTsOxVvbR/FSoHcgGMtjFX0BQlFpriCgCujxCNcbT0sNPF432JZb1H418bVe2NTbrOsxGEEksEUcBe+MYooKcw5n34p3; AWSALBCORS=vTlMxPnpWeOnEH2aH8jE5M5Kmi0tHVvONTsOxVvbR/FSoHcgGMtjFX0BQlFpriCgCujxCNcbT0sNPF432JZb1H418bVe2NTbrOsxGEEksEUcBe+MYooKcw5n34p3
2024-08-06 12:26:52 UTC	905	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:51 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 9548 Connection: close Set-Cookie: AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; Expires=Tue, 13 Aug 2024 12:26:51 GMT; Path=/ Set-Cookie: AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; Expires=Tue, 13 Aug 2024 12:26:51 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Language: en Server: unknown
2024-08-06 12:26:52 UTC	8525	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0a 20 20 20 20 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 53 65 63 75 72 65 20 4d 65 73 73 61 67 65 20 4f 6e 6c 69 6e 65 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 0d 0a 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en"> <head> <title>Secure Message Online Help</title> <meta content="text/html; charset=UTF-8" http-equiv="Co
2024-08-06 12:26:52 UTC	1023	IN	Data Raw: 74 3d 22 5f 62 6c 61 6e 6b 22 3e 41 62 6f 75 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 64 73 2d 62 75 74 74 6f 6e 20 6d 64 73 2d 62 75 74 74 6f 6e 2d 6b 69 6e 64 2d 74 65 72 74 69 61 72 79 20 6d 64 73 2d 62 75 74 74 6f 6e 2d 73 69 7a 65 2d 6d 64 22 20 68 72 65 66 3d 22 74 65 72 6d 73 4f 66 53 65 72 76 69 63 65 22 20 74 69 74 6c 65 3d 22 56 69 65 77 20 74 68 65 20 43 52 45 53 20 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 2e 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 0a Data Ascii: t="_blank">About</a>     <a class="mds-button mds-button-kind-tertiary mds-button-size-md" href="termsOfService" title="View the CRES Terms of Service." target="_blank">Terms of Service</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49825	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:52 UTC	896	OUT	GET /websafe/templates/css/customHelp.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/help Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD
2024-08-06 12:26:52 UTC	878	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:52 GMT Content-Type: text/css Content-Length: 3410 Connection: close Set-Cookie: AWSALB=Epode1CYUui7keXndDMnN0aWcb8ZnBQ2pkVzGXiSQjCEVxG1Ck+RxBwY8K3gAgkncLfXY+hl685Gu8FJRdavR6Q8qdAspAIVdcxXR4Ea+BXDh4qvIBxGjD5PF3k0; Expires=Tue, 13 Aug 2024 12:26:52 GMT; Path=/ Set-Cookie: AWSALBCORS=Epode1CYUui7keXndDMnN0aWcb8ZnBQ2pkVzGXiSQjCEVxG1Ck+RxBwY8K3gAgkncLfXY+hl685Gu8FJRdavR6Q8qdAspAIVdcxXR4Ea+BXDh4qvIBxGjD5PF3k0; Expires=Tue, 13 Aug 2024 12:26:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-d52" Server: unknown
2024-08-06 12:26:52 UTC	3410	IN	Data Raw: 2e 73 75 70 70 6f 72 74 54 61 62 6c 65 45 6e 74 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 31 35 70 78 20 31 30 70 78 20 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 43 69 73 63 6f 53 61 6e 73 2c 20 43 69 73 63 6f 53 61 6e 73 54 54 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 61 34 61 34 64 3b 0a 7d 0a 2e 63 6f 70 79 72 69 67 68 74 4c 69 6e 6b 73 20 61 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c Data Ascii: .supportTableEntry { color: #555555; font-size: 13px; font-weight: normal; padding: 2px 15px 10px 8px; font-size: 14px; font-family: CiscoSans, CiscoSansTT; color: #4a4a4d;}.copyrightLinks a { font-family: "Inter" !important; font-styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49826	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:52 UTC	977	OUT	GET /websafe/templates/css/postx.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/help Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD If-None-Match: "19092496938-1dc45" If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
2024-08-06 12:26:52 UTC	844	IN	HTTP/1.1 304 Not Modified Date: Tue, 06 Aug 2024 12:26:52 GMT Connection: close Set-Cookie: AWSALB=09ujDMAzlAu16+bc32PWyamwRlq+KsaZKEkQrC4+FS7OJlXe56XPjnRXc1asqIpDslnfwrZifANPgGjPpntILPoViJaO33Dj6x2PEoruJOOvPKInCHV/hJwjhpVP; Expires=Tue, 13 Aug 2024 12:26:52 GMT; Path=/ Set-Cookie: AWSALBCORS=09ujDMAzlAu16+bc32PWyamwRlq+KsaZKEkQrC4+FS7OJlXe56XPjnRXc1asqIpDslnfwrZifANPgGjPpntILPoViJaO33Dj6x2PEoruJOOvPKInCHV/hJwjhpVP; Expires=Tue, 13 Aug 2024 12:26:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-1dc45" Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49828	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:52 UTC	968	OUT	GET /websafe/templates/standard-scripts.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/help Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD If-None-Match: "19092496938-4635" If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
2024-08-06 12:26:52 UTC	843	IN	HTTP/1.1 304 Not Modified Date: Tue, 06 Aug 2024 12:26:52 GMT Connection: close Set-Cookie: AWSALB=ba7VTctmNwColMVDVWpu7SFnw/+2RTtY+9u2xg0JRHF3U3ry/7C5ervsmiHTmPBuJ7HNNrNjtQU/DnIKzthPZcMg7zwjOhj8gHRcnseQ+cmgc6XCwmW8aT/mL4cX; Expires=Tue, 13 Aug 2024 12:26:52 GMT; Path=/ Set-Cookie: AWSALBCORS=ba7VTctmNwColMVDVWpu7SFnw/+2RTtY+9u2xg0JRHF3U3ry/7C5ervsmiHTmPBuJ7HNNrNjtQU/DnIKzthPZcMg7zwjOhj8gHRcnseQ+cmgc6XCwmW8aT/mL4cX; Expires=Tue, 13 Aug 2024 12:26:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-4635" Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49827	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:52 UTC	964	OUT	GET /websafe/templates/screen-reader.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/help Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD; AWSALBCORS=C6cX08SCDc3vT6UmVsLbSymzNgVtguEutz7dFpYkVj509KoIm8kQ9NGC4QvUkhff5Fx8a8iKIVRlXa+7MCXCsS0u+PwGZO5RKjtweHwHy5W6z7032FL3pMpaVFjD If-None-Match: "19092496938-83f" If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
2024-08-06 12:26:52 UTC	842	IN	HTTP/1.1 304 Not Modified Date: Tue, 06 Aug 2024 12:26:52 GMT Connection: close Set-Cookie: AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; Expires=Tue, 13 Aug 2024 12:26:52 GMT; Path=/ Set-Cookie: AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; Expires=Tue, 13 Aug 2024 12:26:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-83f" Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49829	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:53 UTC	782	OUT	GET /websafe/templates/standard-scripts.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=ba7VTctmNwColMVDVWpu7SFnw/+2RTtY+9u2xg0JRHF3U3ry/7C5ervsmiHTmPBuJ7HNNrNjtQU/DnIKzthPZcMg7zwjOhj8gHRcnseQ+cmgc6XCwmW8aT/mL4cX; AWSALBCORS=ba7VTctmNwColMVDVWpu7SFnw/+2RTtY+9u2xg0JRHF3U3ry/7C5ervsmiHTmPBuJ7HNNrNjtQU/DnIKzthPZcMg7zwjOhj8gHRcnseQ+cmgc6XCwmW8aT/mL4cX If-None-Match: "19092496938-4635" If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
2024-08-06 12:26:53 UTC	843	IN	HTTP/1.1 304 Not Modified Date: Tue, 06 Aug 2024 12:26:53 GMT Connection: close Set-Cookie: AWSALB=pEgHgPLXGdCy3U5rnjq+yDbo3clLz1/W+LvKSJYNsumxqdKalD8hsiY4016Pg5YPaw/J2FDiftIqahTrrwsuWpInJVXquosv75SB6FeSkVZglMCquyb+K0yguONs; Expires=Tue, 13 Aug 2024 12:26:53 GMT; Path=/ Set-Cookie: AWSALBCORS=pEgHgPLXGdCy3U5rnjq+yDbo3clLz1/W+LvKSJYNsumxqdKalD8hsiY4016Pg5YPaw/J2FDiftIqahTrrwsuWpInJVXquosv75SB6FeSkVZglMCquyb+K0yguONs; Expires=Tue, 13 Aug 2024 12:26:53 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-4635" Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49830	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:53 UTC	925	OUT	GET /admin/fonts/SharpSans/SharpSans-Bold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu
2024-08-06 12:26:53 UTC	718	IN	HTTP/1.1 200 OK Date: Tue, 06 Aug 2024 12:26:53 GMT Content-Length: 10948 Connection: close Set-Cookie: AWSALB=NfDK8S4BY2nJcFeHnyuj8BhjBBbJC6BAmn8PpWAHBbc0r1nMJyBZ0iBv2Eh3vQpKzqvl3zuQoAyrV2L5ocLiBkai+bvg+qpyROQGLqh0nCqi8DK1Ll0Ci9hE/YZd; Expires=Tue, 13 Aug 2024 12:26:53 GMT; Path=/ Set-Cookie: AWSALBCORS=NfDK8S4BY2nJcFeHnyuj8BhjBBbJC6BAmn8PpWAHBbc0r1nMJyBZ0iBv2Eh3vQpKzqvl3zuQoAyrV2L5ocLiBkai+bvg+qpyROQGLqh0nCqi8DK1Ll0Ci9hE/YZd; Expires=Tue, 13 Aug 2024 12:26:53 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"10948-1720441203000" Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT Server: unknown
2024-08-06 12:26:53 UTC	8712	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 81 d5 7e 55 00 00 2a a8 00 00 00 1c 47 44 45 46 00 25 00 00 00 00 1c 74 00 00 00 18 47 50 4f 53 33 a6 24 5b 00 00 1c f4 00 00 0d b2 47 53 55 42 f0 80 0f 94 00 00 1c 8c 00 00 00 66 4f 53 2f 32 67 91 cf 8e 00 00 01 78 00 00 00 60 63 6d 61 70 56 c5 11 28 00 00 02 e8 00 00 01 62 67 61 73 70 ff ff 00 03 00 00 1c 6c 00 00 00 08 67 6c 79 66 c0 22 83 5c 00 00 04 d8 00 00 10 dc 68 65 61 64 0a 6f 27 77 00 00 00 fc 00 00 00 36 68 68 65 61 07 c0 03 2d 00 00 01 34 00 00 00 24 68 6d 74 78 9f 1b 0a 34 00 00 01 d8 00 00 01 10 6c 6f 63 61 90 00 8b 4c 00 00 04 4c 00 00 00 8a 6d 61 78 70 00 89 00 34 00 00 01 58 00 00 00 20 6e 61 6d 65 a7 b2 22 ab 00 00 15 b4 00 00 06 00 70 6f 73 74 43 c6 eb 8f 00 00 1b b4 00 00 00 b5 00 01 00 Data Ascii: pFFTM~U*GDEF%tGPOS3$[GSUBfOS/2gx`cmapV(bgasplglyf"\heado'w6hhea-4$hmtx4locaLLmaxp4X name"postC
2024-08-06 12:26:53 UTC	2236	IN	Data Raw: 00 01 00 00 00 00 ff fd ff fe ff fc ff fd ff f4 ff f3 ff d8 00 00 ff d0 ff c0 ff ff ff fd ff e4 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff fd ff f8 00 00 ff f6 ff f7 ff fb ff fd ff f9 ff fa ff fc ff fb ff f8 ff f5 ff f8 ff f4 ff f1 ff f8 00 00 00 03 00 00 ff fd ff fc ff f4 ff f3 00 00 ff ec ff e9 ff f1 00 11 ff e7 ff f4 ff f2 ff d8 ff ed ff ff ff f9 ff fd 00 00 ff ec ff f9 ff ff 00 00 ff f7 ff f0 ff f6 ff f8 ff f6 ff fd 00 00 ff ff ff eb ff db ff f8 ff fb ff ec 00 00 00 00 ff fd ff f9 00 08 ff fb ff fc ff fd ff f8 ff fc ff ff ff fb 00 00 00 00 ff f7 ff f9 ff ff 00 00 ff fd ff f5 ff fb ff f1 ff ea ff ff 00 00 00 02 00 00 ff fd ff ff ff ee ff f4 00 00 ff d1 ff ff ff ce ff f8 ff c0 ff f9 ff d1 ff b5 ff d8 ff f0 ff ff ff fd 00 00 ff fc 00 02 ff fe 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49831	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:53 UTC	981	OUT	GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu Range: bytes=259318-259318 If-Range: W/"309772-1720441203000"
2024-08-06 12:26:53 UTC	771	IN	HTTP/1.1 206 Partial Content Date: Tue, 06 Aug 2024 12:26:53 GMT Content-Length: 1 Connection: close Set-Cookie: AWSALB=J2qY5MkJoRLMrK5s3QiQVGf4r/0Pmw9HqSbiCRbdXD5c/3DtRpjto03mCPEYwsr+oq2p+mhH0ImhG0dGIbnlfIwgGS07q3LNOWEN7SXxkFLJTCQdKB64U0q9OcfF; Expires=Tue, 13 Aug 2024 12:26:53 GMT; Path=/ Set-Cookie: AWSALBCORS=J2qY5MkJoRLMrK5s3QiQVGf4r/0Pmw9HqSbiCRbdXD5c/3DtRpjto03mCPEYwsr+oq2p+mhH0ImhG0dGIbnlfIwgGS07q3LNOWEN7SXxkFLJTCQdKB64U0q9OcfF; Expires=Tue, 13 Aug 2024 12:26:53 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"309772-1720441203000" Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT Content-Range: bytes 259318-259318/309772 Server: unknown
2024-08-06 12:26:53 UTC	1	IN	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49832	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:53 UTC	778	OUT	GET /websafe/templates/screen-reader.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu If-None-Match: "19092496938-83f" If-Modified-Since: Mon, 08 Jul 2024 12:20:04 GMT
2024-08-06 12:26:53 UTC	842	IN	HTTP/1.1 304 Not Modified Date: Tue, 06 Aug 2024 12:26:53 GMT Connection: close Set-Cookie: AWSALB=U2oUhA+6tPGuZd5g60fCtbJCsPFaCDthz4WJmvsbQ0i1QoJ5/dhAN3obJoNwpOlQCg81XvBsdafS7HZ6/Foyd0X9vbU21iSE+oyDHfOqcCWfhwiZG4y9tYKZuRcY; Expires=Tue, 13 Aug 2024 12:26:53 GMT; Path=/ Set-Cookie: AWSALBCORS=U2oUhA+6tPGuZd5g60fCtbJCsPFaCDthz4WJmvsbQ0i1QoJ5/dhAN3obJoNwpOlQCg81XvBsdafS7HZ6/Foyd0X9vbU21iSE+oyDHfOqcCWfhwiZG4y9tYKZuRcY; Expires=Tue, 13 Aug 2024 12:26:53 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Mon, 08 Jul 2024 12:20:04 GMT ETag: "19092496938-83f" Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49833	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:54 UTC	981	OUT	GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=FCCAD9102443E69A223E9EB3C6FAC194; AWSALB=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu; AWSALBCORS=GaxH7e0Y5NLBW+g2bmzSLwVcvmI9t4XtpwEKDqe6aNTUmyl8YkKCKfTuzC1FVI5FOT4wmZjZJzuTsboNvBWmH/+OCF+8JRppUfgqBRgkKlDJhdAVhgPPjy+dzxEu Range: bytes=259318-309771 If-Range: W/"309772-1720441203000"
2024-08-06 12:26:54 UTC	775	IN	HTTP/1.1 206 Partial Content Date: Tue, 06 Aug 2024 12:26:54 GMT Content-Length: 50454 Connection: close Set-Cookie: AWSALB=eZOpMwwfoDxY8uBEvpAVgcaEtWyG+MKuR4NvVdruvM+IkE7oNfFvHVeuGy35W/j8OAldBfwGI3PhpDNq8e5J3ajlbnlK+jjqHDkN8SJ4F1iZk/JBNefr1AZxbrnM; Expires=Tue, 13 Aug 2024 12:26:54 GMT; Path=/ Set-Cookie: AWSALBCORS=eZOpMwwfoDxY8uBEvpAVgcaEtWyG+MKuR4NvVdruvM+IkE7oNfFvHVeuGy35W/j8OAldBfwGI3PhpDNq8e5J3ajlbnlK+jjqHDkN8SJ4F1iZk/JBNefr1AZxbrnM; Expires=Tue, 13 Aug 2024 12:26:54 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"309772-1720441203000" Last-Modified: Mon, 08 Jul 2024 12:20:03 GMT Content-Range: bytes 259318-309771/309772 Server: unknown
2024-08-06 12:26:54 UTC	15609	IN	Data Raw: 00 00 00 00 00 00 ff b3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 80 00 00 00 00 00 00 00 00 00 00 ff f0 00 00 00 00 00 00 00 00 00 00 ff a0 ff 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff b8 00 00 ff a0 00 00 00 00 00 00 00 00 ff 40 ff a0 00 00 ff 30 ff 04 00 00 00 00 ff 70 00 06 ff dc ff d0 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 ff 02 00 00 00 00 ff 40 ff 30 ff 30 00 80 00 00 00 00 00 00 ff e3 00 00 00 00 00 00 00 00 ff 20 00 00 00 00 00 00 fe f0 00 00 fe e0 ff a0 00 00 00 00 ff a0 ff 38 ff e4 ff a0 00 00 00 00 00 00 fe 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @0p@00 8
2024-08-06 12:26:54 UTC	11046	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff d0 00 00 Data Ascii:
2024-08-06 12:26:54 UTC	16384	IN	Data Raw: 00 29 d8 29 de 00 00 29 d8 29 de 00 00 23 de 23 e4 00 00 29 d8 29 de 00 00 23 ea 24 0e 00 00 29 d8 24 14 00 00 29 d8 29 de 00 00 29 d8 29 de 00 00 29 d8 29 de 00 00 29 d8 29 de 00 00 29 d8 29 de 00 00 29 d8 29 de 00 00 24 1a 29 de 00 00 23 f0 23 f6 00 00 24 1a 29 de 00 00 24 1a 29 de 00 00 23 fc 24 02 00 00 24 08 24 0e 00 00 24 1a 24 14 00 00 24 1a 29 de 00 00 24 1a 29 de 00 00 24 1a 29 de 00 00 24 1a 29 de 00 00 24 1a 29 de 00 00 24 1a 29 de 00 00 29 12 29 18 00 00 29 f6 29 fc 00 00 29 f6 29 fc 00 00 29 f6 29 fc 00 00 29 f6 29 fc 00 00 29 f6 24 20 00 00 29 f6 29 fc 00 00 29 f6 29 fc 00 00 24 32 29 ae 00 00 24 32 24 3e 00 00 24 32 29 ae 00 00 24 32 29 ae 00 00 24 32 29 ae 00 00 24 26 24 2c 00 00 29 a8 29 ae 00 00 24 32 24 f2 00 00 24 32 29 ae 00 00 24 32 Data Ascii: ))))##))#$)$))))))))))))$)##$)$)#$$$$$$)$)$)$)$)$))))))))))))$ ))))$2)$2$>$2)$2)$2)$&$,))$2$$2)$2
2024-08-06 12:26:54 UTC	7415	IN	Data Raw: 0a 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 02 00 00 00 0b 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 02 00 01 00 00 00 00 00 00 00 01 00 0b 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 02 00 00 06 a9 00 02 05 55 06 a9 00 02 05 53 06 a9 00 03 05 55 05 55 06 a9 00 03 05 55 05 53 06 a9 00 03 05 55 05 51 06 a9 00 03 05 53 05 55 06 a9 00 03 05 53 05 53 06 a9 00 03 05 53 05 51 06 a9 00 03 05 51 05 55 06 a9 00 03 05 51 05 53 06 a9 00 03 05 51 05 51 06 aa 00 04 05 55 05 55 05 55 06 aa 00 04 05 55 05 55 05 53 06 aa 00 04 05 55 05 55 05 51 06 aa 00 04 05 55 05 53 05 55 06 aa 00 04 05 55 05 53 05 53 06 aa 00 04 05 55 05 53 05 51 06 aa 00 04 05 55 05 51 05 55 06 aa 00 04 05 55 05 51 05 53 06 aa 00 04 05 55 05 51 Data Ascii: USUUUSUQSUSSSQQUQSQQUUUUUSUUQUSUUSSUSQUQUUQSUQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49836	54.208.242.91	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:26:57 UTC	980	OUT	GET /websafe/google.action HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=B2A2D27238D566BA90A0463D50C18CB6; AWSALB=U2oUhA+6tPGuZd5g60fCtbJCsPFaCDthz4WJmvsbQ0i1QoJ5/dhAN3obJoNwpOlQCg81XvBsdafS7HZ6/Foyd0X9vbU21iSE+oyDHfOqcCWfhwiZG4y9tYKZuRcY; AWSALBCORS=U2oUhA+6tPGuZd5g60fCtbJCsPFaCDthz4WJmvsbQ0i1QoJ5/dhAN3obJoNwpOlQCg81XvBsdafS7HZ6/Foyd0X9vbU21iSE+oyDHfOqcCWfhwiZG4y9tYKZuRcY
2024-08-06 12:26:57 UTC	1153	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 06 Aug 2024 12:26:57 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=GZzjAsUbq0MgfyIllehHMsoRGi6sPyneGfVeTZAfTJoN85qbjuMJHOPXFio08NdNUpBNaGW9zb+QhgZhMLiqTrDSLYyxQt0stMeTdg6XFmQyh5F35LhCjaioFjQ0; Expires=Tue, 13 Aug 2024 12:26:57 GMT; Path=/ Set-Cookie: AWSALBCORS=GZzjAsUbq0MgfyIllehHMsoRGi6sPyneGfVeTZAfTJoN85qbjuMJHOPXFio08NdNUpBNaGW9zb+QhgZhMLiqTrDSLYyxQt0stMeTdg6XFmQyh5F35LhCjaioFjQ0; Expires=Tue, 13 Aug 2024 12:26:57 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Pragma: no-cache Location: https://accounts.google.com/o/oauth2/auth?access_type=offline&scope=openid+email+profile&response_type=code&state=4373E462E56B43EECDC25C4C230D0021&redirect_uri=https%3A%2F%2Fres.cisco.com%2Fwebsafe%2Fgooglewebsafe.action&prompt=select_account&client_id=507313714964-6p88u6grrfv4int8pvujgaimias5ug62.apps.googleusercontent.com Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49843	142.250.185.99	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:00 UTC	1049	OUT	GET /s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 HTTP/1.1 Host: fonts.gstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://accounts.google.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:01 UTC	835	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes" Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} Timing-Allow-Origin: * Content-Length: 52280 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 14:54:23 GMT Expires: Tue, 05 Aug 2025 14:54:23 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 23 May 2023 16:36:38 GMT Content-Type: font/woff2 Age: 77558 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:01 UTC	555	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 cc 38 00 15 00 00 00 02 16 18 00 00 cb be 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 89 5e 1b 81 fe 24 1c a4 34 3f 48 56 41 52 8e 17 3f 4d 56 41 52 39 06 60 3f 53 54 41 54 81 2a 27 2c 00 85 4a 2f 81 00 11 08 0a 81 e6 60 81 b6 28 0b 87 5a 00 30 83 b7 52 01 36 02 24 03 8f 2e 04 20 05 86 12 07 a8 4b 0c 07 5b 93 f8 71 86 96 63 07 92 54 ee cb ae e1 dd c5 98 3e cb 50 de 6a d8 a6 60 b3 77 bd d9 99 23 fb d3 d5 8d 25 cc b3 be 83 db 81 f6 e2 4e bc 22 fb ff ff ff 17 24 15 19 33 cd 30 ed 36 18 0c 04 af ea d5 ff 87 98 20 b8 4c 04 72 58 2f 72 5b 6a ce 79 9c 7c 2a 28 08 34 cc 81 25 23 f7 8c 92 b1 96 32 ae 76 b3 6d c6 14 2d 90 1d 25 bb 89 cd 9c 15 e8 3b 2d 1d 59 d6 7b 1b e1 26 f6 b9 4f 3d 23 6c 40 09 c7 e5 6b Data Ascii: wOF28^$4?HVAR?MVAR9`?STAT',J/`(Z0R6$. K[qcT>Pj`w#%N"$306 LrX/r[jy\|(4%#2vm-%;-Y{&O=#l@k
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: 74 f3 9f 10 dc 18 11 48 20 64 8d cb 65 5f d6 be 4b 2e f3 b2 2f 09 2b 38 00 51 11 50 c4 85 5a 51 0b ae b6 d6 b9 3b 9d 1d ce 55 fd ca af 9d ae 5d bb a7 f8 f7 ba ea bf 0e 5f 14 65 2a b3 b2 a0 f9 03 b2 37 31 e1 8f 3f 8e 37 11 4f 52 76 bf 3f cb d6 ae eb 6c ac b5 d6 47 7c d8 50 94 92 ee 7c 3a fd 9a 19 49 16 58 06 c9 32 b0 2c 93 4c 89 ed 00 c3 ee e6 ff 05 64 e7 67 ef 5d 7d 57 23 75 57 5d 51 6e 75 50 2d 73 e0 3b b1 2d 59 9a e1 9f ef ef e5 5d fb dc df 12 b0 d2 00 43 16 90 6a 5f f8 4d 30 84 11 8a 79 1f cf 1c 0b a7 e5 ec 4a f2 f9 d2 0b ea f4 01 09 c6 b1 e4 94 4e 59 00 0e 40 41 ff fd 9a 2c ed ce d4 9c de 2d 8c 46 95 c0 b5 03 e2 c0 27 fd d0 77 9f 2f 6a 35 67 a6 76 55 53 eb 16 d8 55 dd d6 a1 30 84 26 82 9d 19 79 37 b1 4c 50 f9 1d 91 aa ee 25 7f 89 8e 8c d2 59 0e a1 14 Data Ascii: tH de_K./+8QPZQ;U]_e*71?7ORv?lG\|P\|:IX2,Ldg]}W#uW]QnuP-s;-Y]Cj_M0yJNY@A,-F'w/j5gvUSU0&y7LP%Y
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: 70 0b 00 48 00 80 17 af 3d 8f bc f6 ef 15 6d 69 2f 46 5b e3 dc b8 c0 42 a2 10 af f1 05 07 17 e3 19 43 ce f4 ed dc b8 eb cd f5 a3 d1 e6 bd a3 19 7b e7 d5 df be ff e3 2f ff eb 5b ff 00 8a 19 c1 ff ad 5f ad 8b a0 8b 98 24 cb ee b0 b9 0b ef 63 fd a7 fd 8f bf 02 7f 31 00 94 00 00 05 7d f1 d2 d5 4f 37 ac 5f ae 39 bf 6a 98 bf 6e b8 bf 5e 33 fe bc 61 fc 65 43 ff eb 1b ec ff dd ad 37 8f ac bf bf 14 be 75 e4 be fb f2 f0 bd a3 f1 eb ca bd 6e dc eb 87 e1 f5 4f fc a7 8c 7f f3 d0 bd 79 3c 79 73 a5 bf b9 32 de fc ad 7a e6 e1 eb 1f 94 cf ed 67 cf 43 93 9b 6f 1b b7 57 87 c5 8f d8 8b c1 e6 a5 bf 7f f7 1d f7 fe d7 f3 d7 6c 69 6b 39 6d e4 74 af b4 67 d6 e9 ea 10 36 3c 3f 35 e6 2b 73 fe f5 68 fe 43 7d 33 c6 6e d6 1a db f1 78 a7 68 cb 33 b2 53 ce 76 b1 fe f2 86 b1 bc e1 2e 3f Data Ascii: pH=mi/F[BC{/[_$c1}O7_9jn^3aeC7unOy<ys2zgCoWlik9mtg6<?5+shC}3nxh3Sv.?
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: 50 4e a5 a6 31 f2 fc 72 f4 49 cd 52 b4 4c fb 49 47 76 ce 13 5e ae 7d 2a 5e 38 93 21 c1 46 bc b0 49 aa 45 f6 f7 7b 10 fc 2a 87 6b b3 27 cb 51 28 7a f9 41 7f 8a 56 24 3a 34 2b 5b 14 f8 75 a5 b3 db 6d 5e 8e 34 6d 33 ca c3 61 8c 05 b5 50 36 de 7c 59 e5 fa fb 51 53 c3 ce 79 ab 5e 02 19 f5 55 c0 0d bc 4f e4 c6 93 40 2b 9d 97 a7 6a 33 45 3a d4 24 c0 cc 0c c0 5d f7 a3 fb f1 c5 fc b1 58 87 bf cc 43 e5 9a 0b 3a d0 28 1f 86 c8 ed 5c 0b e7 d8 cb 34 c3 91 1e 7e 48 ea fd 80 5a b3 96 52 aa 92 c6 84 0a f0 21 af 01 6b c1 d1 f0 1c 2d 3f 38 2d 4b b8 f9 ef 72 f4 0c 9d 53 4d b2 e6 6c d3 97 00 ab 75 9b fb a3 c6 a4 b5 de 60 68 b6 ff c8 a7 1f 7f 9c 91 cf 6f 74 18 ee fd 77 b8 28 b1 55 94 6a 67 a6 00 7c c3 57 a4 10 e0 e6 4d bf 20 25 3e f6 f3 5e db 9c 48 e6 06 69 3a 5b 6e da dc 4c Data Ascii: PN1rIRLIGv^}^8!FIE{k'Q(zAV$:4+[um^4m3aP6\|YQSy^UO@+j3E:$]XC:(\4~HZR!k-?8-KrSMlu`hotw(Ujg\|WM %>^Hi:[nL
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: c2 d9 4d af 71 b8 1e 37 e0 46 7d 96 5b 3e 8f 3a b3 83 38 c7 c5 39 61 da 7e 3a 5c 05 7d c3 d3 37 8d be 65 72 41 dd 05 dd 6d b0 47 f7 12 f6 e9 7e e0 d8 95 c7 2b d0 93 01 ce 96 45 bd ae 4b ab ad 5b 4a 0c d6 7b a7 e7 02 3d 0f 7c 8d 8b 7a 3d 81 5b b8 fd f9 4f b9 3c 79 bf c3 7c ad 02 de a0 46 3a e9 66 b2 36 55 c6 56 21 08 2d d8 45 45 95 75 7c c4 37 05 41 38 70 73 43 7a 68 a3 85 02 a1 c2 35 82 cc b0 b4 1d 1d 67 3f 56 1d 59 c3 72 36 e2 f9 e2 7e 0e f1 c0 52 8e a0 ca c2 2e e5 c8 4e b6 20 53 70 41 56 3c 3c 42 86 51 05 8b 87 04 c9 2e 75 1a d3 bc 10 52 a8 40 09 06 6c 40 89 50 dd ef f0 c0 24 21 72 5e 11 7b 1a 65 15 d2 47 d9 fa 64 88 48 1a 4c e7 d8 d8 d1 b4 7a 07 b6 ae 2e 85 86 5b bf 04 23 15 8d 08 a6 03 ac 71 af ce 1e 35 99 a7 b4 90 d0 a0 8d 4e 1f 0c 73 95 64 42 fb 26 Data Ascii: Mq7F}[>:89a~:\}7erAmG~+EK[J{=\|z=[O<y\|F:f6UV!-EEu\|7A8psCzh5g?VYr6~R.N SpAV<<BQ.uR@l@P$!r^{eGdHLz.[#q5NsdB&
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: 8d ea 4d b7 6a d0 77 f5 a9 ab 67 ba 5d ff 83 3b b0 75 0d 9e 08 0e d1 96 06 1e 8a 5e a4 2c 60 44 8b b8 ed 98 d3 14 07 a0 38 61 4f 16 1d 38 5b 84 cb 0d 47 ee 38 f1 88 32 9e bc e8 f2 8e ce 7c 2d c3 12 74 47 0b b6 1c b2 c2 2a 48 84 81 ad c6 5d 24 b4 28 3c 44 c3 13 f3 bf a7 58 f1 b4 25 50 90 4a 94 84 96 2c 15 4f 9a 1c 48 ae 61 26 0f 5a 3e c8 1a fc a9 58 a2 00 5a 61 0b 15 bd b4 86 52 58 6a 3d 81 ca e2 32 1b 6c a4 a3 e2 97 20 db ec 85 35 68 24 b4 cf 7e a6 1d cc e0 d1 7d e6 f8 5e 37 66 80 93 d3 c7 61 3e 16 f7 42 2f 3b 6c 3f c3 f6 4b b2 b1 69 1e af 59 8e 7a f3 8d 0a 81 37 f0 8d 21 f0 07 62 6f 91 78 87 d8 78 94 f8 d3 7b 16 fe c2 d8 04 26 3e 60 6c 32 4d c6 61 2c 2c b3 e8 30 f9 0c 45 89 62 c5 14 30 1a db 82 d7 0c 4e e2 53 89 d9 51 c9 19 93 32 4f aa 8b 9d 74 b1 93 29 Data Ascii: Mjwg];u^,`D8aO8[G82\|-tG*H]$(<DX%PJ,OHa&Z>XZaRXj=2l 5h$~}^7fa>B/;l?KiYz7!boxx{&>`l2Ma,,0Eb0NSQ2Ot)
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: f3 a1 19 84 d7 af d8 df 5c 35 5a b0 ef 4d db 1e e6 80 7c 51 aa f9 b8 66 4c ed 5e 8d c9 9e eb 9c 93 6a 57 4e 5b 78 f6 ca 2b 9e ae 7b 22 d7 0c d0 e9 8a 3b 39 65 98 0e 87 00 bb c5 7d 93 91 37 52 ab e7 69 56 b1 2e b1 9f 65 55 9b e3 95 e3 c5 cd da ab c5 72 ca aa 2d 53 6a 61 7c b0 98 12 5a 98 a4 ca 37 ef 66 e6 b2 0a 55 02 f3 f5 2d 54 aa 7e 39 cf c5 c3 b7 4c 0f 33 85 15 5f aa 19 8d 84 a1 0b 45 58 45 62 10 90 0b c0 6d 8a a0 07 6a 9c 6b 1f 47 8d b1 b5 30 95 5b 75 ad 11 8c d8 22 9c 8b ba 04 19 3c 4c 3e b4 5e 56 93 40 cb a1 0a 80 05 79 e7 76 b6 43 bb c9 cc 1f e1 41 35 ec 54 bb 81 06 ce b3 37 98 0a 0c 0a 34 c2 da 8a d7 00 54 58 b1 89 1c 6d c2 f0 12 a8 70 4d e1 85 86 dd 64 97 03 76 d8 49 38 d6 b5 52 f8 cb ee dd 72 96 ee e9 10 40 4a 21 3c 5e cc 02 a3 b2 d0 92 0f 6f 2e Data Ascii: \5ZM\|QfL^jWN[x+{";9e}7RiV.eUr-Sja\|Z7fU-T~9L3_EXEbmjkG0[u"<L>^V@yvCA5T74TXmpMdvI8Rr@J!<^o.
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: 67 d3 86 5a 06 0c da 8f e0 9a f4 a8 f8 33 d3 ed c1 7d 5d 18 9d a5 f1 c4 1b 3c be f8 51 40 72 a3 40 1f 60 09 14 ea 1f ce 59 10 cc 65 6d 68 68 06 dd 2c 9a 56 8b 6f 25 4d d4 6c 33 c6 57 f5 36 2f a8 7a 6d 6c 8e 48 aa 04 2e a8 b4 b3 6f 29 26 29 7a 95 57 2c 9c d1 ba 73 18 f4 63 37 dd 1a 69 c7 9b b8 46 eb 6d 23 d6 48 55 b5 96 14 4f 3c e5 54 0b 54 e3 52 5c dc 43 b6 34 e7 50 05 5c 63 4d 82 72 aa fc 90 4f 6a b8 0a ca cd c2 a1 46 97 dd 14 50 c1 77 12 d2 54 c7 45 cb 62 bc ec 9e 4e ac 3a 05 4d 39 f3 f2 fb 4e a1 ab 16 79 03 b6 62 fc fa 6a ec ca 27 85 ce bc f2 c7 95 98 0a 83 0e 3e f3 aa 9f 10 84 53 f6 68 f2 f6 cc ab 7f b4 05 6e a1 42 4a e8 9a 03 97 1e d4 74 63 16 4d 98 9e fc 90 07 79 98 de 3c ca e3 3c 49 5f 9e e6 59 7e 4c 7f 7e ca f3 bc c8 40 5e c2 6c 09 33 98 9f a3 ce Data Ascii: gZ3}]<Q@r@`Yemhh,Vo%Ml3W6/zmlH.o)&)zW,sc7iFm#HUO<TTR\C4P\cMrOjFPwTEbN:M9Nybj'>ShnBJtcMy<<I_Y~L~@^l3
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: ef 35 83 5e 1f ff 57 33 7e ab 99 ec 95 62 d4 2f 6f 94 f5 13 65 bd f7 47 bb 40 6c ee 73 6d 7f d1 3b 4b f6 a1 de fa ea ec ff 9f 5f 68 87 cd 4d 38 fa c3 4b 81 76 b9 39 5c 33 dd 27 cb c3 f5 36 3d c6 37 6a ae 3f 9e bd 54 3f f2 dc 34 37 9f f6 d6 ef 55 7b 6d f6 5c 3b d6 9f 9e 3d d0 ce 9f 69 b7 9e 69 df fd 4f 18 c5 e5 c5 93 dc 6a 9f 0f fa 9f 48 9e ea e9 73 7d 75 a3 7f f2 37 59 dc ff dc 95 f1 f9 d9 ae 77 7d 53 4d 5e 57 57 6f 7d 93 f3 73 36 f9 5a fc 62 58 be 1e 59 fc f3 b7 7a eb 3f 0a f7 7b 54 fb 9e ec 7d 6f fd 60 ea cf df 7b 61 49 fd a0 ea f0 0b b7 e3 cf e6 78 16 75 a6 20 70 75 56 f8 d1 93 09 a4 a0 f6 e8 d1 54 a9 c1 dd cb bf 8d 52 ff 01 02 a3 80 82 c6 df 31 c4 b6 ff 01 dc 01 98 42 08 e6 e7 1d 5c 70 c9 bf 7f 55 7e e9 a0 65 af 1d ad b5 58 7f 2f 44 64 aa 65 45 cb f9 Data Ascii: 5^W3~b/oeG@lsm;K_hM8Kv9\3'6=7j?T?47U{m\;=iiOjHs}u7Yw}SM^WWo}s6ZbXYz?{T}o`{aIxu puVTR1B\pU~eX/DdeE
2024-08-06 12:27:01 UTC	1390	IN	Data Raw: 0a 5e 74 58 97 3a a2 67 6c 28 cd 0d 01 d0 02 cf a3 9c a9 f1 5e 52 19 aa 6f 87 43 d2 a0 d1 82 71 e9 82 d6 40 9a 26 37 6e 2e 6d f9 08 d5 77 ac 91 ea 9a a1 30 5d ee 34 74 02 7f 4c ba a7 fd 1e cb 9a 6a e0 c6 c5 4c ba 44 69 60 7b 9b 42 38 9b e6 ed 6a 28 3c 0d 43 2c 64 b2 9a 08 9d 63 a1 bc 2e 6f d2 cc 50 f2 ec 0e dc 07 0a 75 91 7a 2b ef 2d 34 ae 78 67 a2 ea 54 a7 2a 73 42 0c d0 cb e0 50 bd 81 9e eb 59 79 5a 77 5e 2f c3 6f 38 b0 0c 36 6e 2b 73 83 b8 b4 d3 43 10 25 42 29 6c 7b e4 93 fd 37 7a 7c 4d ed 5e 5e 60 df d2 da ac dc 6a 43 90 6b 92 db 4c 73 7c f9 65 cb ba 65 35 23 69 56 57 3f 1f 49 98 88 8c 84 62 f6 4f bf 6e c9 42 ce 08 49 22 92 b4 68 59 ca 42 98 f1 52 9a 72 b3 db 59 fb 97 4a 5a f7 de 2d 56 fc c1 12 38 43 f0 1d 99 cb 52 08 34 b6 89 b6 20 2f 75 8d f9 a3 9c Data Ascii: ^tX:gl(^RoCq@&7n.mw0]4tLjLDi`{B8j(<C,dc.oPuz+-4xgT*sBPYyZw^/o86n+sC%B)l{7z\|M^^`jCkLs\|ee5#iVW?IbOnBI"hYBRrYJZ-V8CR4 /u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49844	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:02 UTC	658	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlEIo9L_XAlorBnd-lsGrFD7C0Ufww/m=_b,_tp HTTP/1.1 Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:02 UTC	946	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 241446 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 06 Aug 2024 03:04:09 GMT Expires: Wed, 06 Aug 2025 03:04:09 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 33773 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:02 UTC	444	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 4d 49 54 0a 2a 2f 0a 76 61 72 20 62 61 61 2c 64 61 61 2c 67 61 61 2c 6c 61 61 2c 6f 61 61 2c 63 62 2c 64 62 2c 67 62 2c 49 62 2c 4c 62 2c 4d 62 2c 79 61 61 2c 7a 61 61 2c 4e 62 2c 41 61 61 2c 42 61 61 2c 43 61 61 2c 52 62 2c 56 62 2c 47 61 61 2c 49 61 61 2c 4b 61 61 2c 4f 61 61 2c 5a 62 2c 62 63 2c 51 61 61 2c 52 61 61 2c 56 61 61 2c 63 62 61 2c 64 62 61 2c 68 62 61 2c 6b 62 61 2c 65 62 61 2c 6a 62 61 2c 69 62 61 2c 67 62 61 2c 66 62 61 2c 6c 62 61 2c Data Ascii: /* SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Identifier: MIT*/var baa,daa,gaa,laa,oaa,cb,db,gb,Ib,Lb,Mb,yaa,zaa,Nb,Aaa,Baa,Caa,Rb,Vb,Gaa,Iaa,Kaa,Oaa,Zb,bc,Qaa,Raa,Vaa,cba,dba,hba,kba,eba,jba,iba,gba,fba,lba,
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 71 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 62 3c 30 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 61 5b 62 5d 7d 3b 0a 5f 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 69 66 28 66 20 69 6e 20 65 26 26 62 2e 63 61 6c 6c 28 63 2c 65 5b 66 5d 2c 66 2c 61 29 29 72 65 74 75 72 6e 20 66 3b 72 65 74 75 72 6e 2d 31 7d 3b 5f 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 30 2c 5f 2e 73 61 29 Data Ascii: function(a,b,c){b=_.qa(a,b,c);return b<0?null:typeof a==="string"?a.charAt(b):a[b]};_.qa=function(a,b,c){for(var d=a.length,e=typeof a==="string"?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return-1};_.ta=function(a,b){return(0,_.sa)
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 7d 3b 5f 2e 65 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 28 30 2c 5f 2e 4d 61 29 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 63 5b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 2c 65 2c 61 29 5d 3d 64 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 0a 67 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4e 61 3f 61 28 5f 2e 4e 61 29 3a 66 61 61 2e 70 75 73 68 28 61 29 7d 3b 5f 2e 53 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 5f 2e 4e 61 26 26 5f 2e 4f 61 26 26 5f 2e 68 61 61 28 28 30 2c 5f 2e 4f 61 29 28 29 29 3b 72 65 74 75 72 6e 20 5f 2e 4e 61 7d 3b 5f 2e 68 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4e 61 3d 61 3b 66 61 61 2e 66 6f 72 45 61 Data Ascii: nction(a,b){return a===b};_.eaa=function(a,b){var c={};(0,_.Ma)(a,function(d,e){c[b.call(void 0,d,e,a)]=d});return c};gaa=function(a){_.Na?a(_.Na):faa.push(a)};_.Sa=function(){!_.Na&&_.Oa&&_.haa((0,_.Oa)());return _.Na};_.haa=function(a){_.Na=a;faa.forEa
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 6e 20 63 7d 3b 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 4f 66 3a 61 7d 2e 76 61 6c 75 65 4f 66 28 29 7d 3b 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 60 22 29 3d 3d 3d 2d 31 7d 3b 0a 5f 2e 66 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 65 62 29 72 65 74 75 72 6e 20 61 2e 61 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 47 22 29 3b 7d 3b 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 70 61 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 Data Ascii: n c};cb=function(a){return{valueOf:a}.valueOf()};db=function(a){return a.toString().indexOf("`")===-1};_.fb=function(a){if(a instanceof _.eb)return a.aa;throw Error("G");};gb=function(a){return new paa(function(b){return b.substr(0,a.length+1).toLowerCas
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 3b 62 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 5f 2e 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 72 63 3d 5f 2e 79 62 28 62 29 3b 5f 2e 78 62 28 61 29 7d 3b 5f 2e 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 6a 62 28 62 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 61 2e 68 72 65 66 3d 62 29 7d 3b 5f 2e 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 6a 62 28 62 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 61 2e 72 65 70 6c 61 63 65 28 62 29 7d 3b 0a 5f 2e 43 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 65 61 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 Data Ascii: erDocument.defaultView\|\|window);b&&a.setAttribute("nonce",b)};_.zb=function(a,b){a.src=_.yb(b);_.xb(a)};_.Ab=function(a,b){b=_.jb(b);b!==void 0&&(a.href=b)};_.Bb=function(a,b){b=_.jb(b);b!==void 0&&a.replace(b)};_.Cb=function(){var a=_.ea.navigator;retur
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 2e 65 78 65 63 28 62 29 2c 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 2e 2a 3f 29 5c 5c 29 29 3f 22 2c 22 67 22 29 3b 63 Data Ascii: .exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\$(.?)\$)?","g");c
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 52 62 28 29 3f 5f 2e 47 62 2e 70 6c 61 74 66 6f 72 6d 3d 3d 3d 22 43 68 72 6f 6d 65 20 4f 53 22 3a 5f 2e 4a 62 28 22 43 72 4f 53 22 29 7d 3b 56 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4e 22 29 3b 7d 3b 47 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 62 29 3b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 62 3a 61 2b 62 7d 3b 0a 49 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 48 61 61 29 72 65 74 75 72 6e 20 5f 2e 57 62 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d Data Ascii: eturn Rb()?_.Gb.platform==="Chrome OS":_.Jb("CrOS")};Vb=function(){throw Error("N");};Gaa=function(a,b){b=String.fromCharCode.apply(null,b);return a==null?b:a+b};Iaa=function(a){if(!Haa)return _.Wb(a);for(var b="",c=0,d=a.length-10240;c<d;)b+=String.from
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 77 20 45 72 72 6f 72 28 29 3b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 61 3d 61 3f 6e 65 77 20 5f 2e 6a 63 28 61 2c 5f 2e 6b 63 29 3a 5f 2e 69 63 28 29 3b 65 6c 73 65 20 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 5f 2e 6a 63 29 69 66 28 5f 2e 59 62 28 61 29 29 61 3d 61 2e 6c 65 6e 67 74 68 3f 6e 65 77 20 5f 2e 6a 63 28 64 3f 61 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 2c 5f 2e 6b 63 29 3a 5f 2e 69 63 28 29 3b 65 6c 73 65 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 61 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 57 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 61 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 Data Ascii: w Error();}else if(typeof a==="string")a=a?new _.jc(a,_.kc):_.ic();else if(a.constructor!==_.jc)if(_.Yb(a))a=a.length?new _.jc(d?a:new Uint8Array(a),_.kc):_.ic();else{if(!b)throw Error();a=void 0}return a};_.Waa=function(a,b){return!!a&&(Array.isArray(a)
2024-08-06 12:27:02 UTC	1390	IN	Data Raw: 29 3b 62 3c 71 26 26 28 61 3d 30 2c 71 3d 62 29 3b 69 66 28 64 29 7b 74 3d 6c 3b 76 3d 67 3b 7a 3d 72 3b 78 3d 70 3b 66 6f 72 28 76 61 72 20 48 20 69 6e 20 64 29 64 3d 2b 48 2c 69 73 4e 61 4e 28 64 29 7c 7c 0a 64 3e 3d 31 30 32 34 7c 7c 28 74 2d 2d 2c 78 2b 2b 2c 7a 2d 3d 48 2e 6c 65 6e 67 74 68 2c 67 3d 65 28 64 2c 78 29 2b 66 28 74 2c 76 2c 7a 29 2c 67 3c 71 26 26 28 61 3d 31 2b 64 2c 71 3d 67 29 29 7d 72 65 74 75 72 6e 20 61 7d 3b 6a 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 2b 61 2a 33 2b 28 61 3e 31 3f 61 2d 31 3a 30 29 7d 3b 69 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 61 3e 31 3f 61 2d 31 3a 30 29 2b 28 61 2d 62 29 2a 34 7d 3b 67 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b Data Ascii: );b<q&&(a=0,q=b);if(d){t=l;v=g;z=r;x=p;for(var H in d)d=+H,isNaN(d)\|\|d>=1024\|\|(t--,x++,z-=H.length,g=e(d,x)+f(t,v,z),g<q&&(a=1+d,q=g))}return a};jba=function(a,b,c){return c+a3+(a>1?a-1:0)};iba=function(a,b){return(a>1?a-1:0)+(a-b)4};gba=function(a,b){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49849	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:03 UTC	1266	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe HTTP/1.1 Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:03 UTC	941	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 30940 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 06 Aug 2024 12:27:02 GMT Expires: Wed, 06 Aug 2025 12:27:02 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:03 UTC	449	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 50 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 64 61 3d 61 3b 74 68 69 73 2e 65 61 3d 62 3b 69 66 28 21 63 29 7b 76 61 72 20 63 3d 6e 65 77 20 5f 2e 43 6e 28 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 63 6c 65 61 72 64 6f 74 2e 67 69 66 22 29 3b 5f 2e 54 6e 28 63 29 7d 74 68 69 73 2e 6a 61 3d 63 7d 3b 5f 2e 68 3d 50 71 61 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{var Pqa=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.Cn("//www.google.com/images/cleardot.gif");_.Tn(c)}this.ja=c};_.h=Pqa.prototype;_.
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 52 71 61 28 74 68 69 73 29 3b 74 68 69 73 2e 59 78 3d 21 31 7d 3b 0a 76 61 72 20 51 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6f 4d 2b 2b 3b 6e 61 76 69 67 61 74 6f 72 21 3d 3d 6e 75 6c 6c 26 26 22 6f 6e 4c 69 6e 65 22 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 21 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 3f 5f 2e 51 6b 28 28 30 2c 5f 2e 4a 66 29 28 61 2e 6d 45 2c 61 2c 21 31 29 2c 30 29 3a 28 61 2e 61 61 3d 6e 65 77 20 49 6d 61 67 65 2c 61 2e 61 61 2e 6f 6e 6c 6f 61 64 3d 28 30 2c 5f 2e 4a 66 29 28 61 2e 75 64 61 2c 61 29 2c 61 2e 61 61 2e 6f 6e 65 72 72 6f 72 3d 28 30 2c 5f 2e 4a 66 29 28 61 2e 74 64 61 2c 61 29 2c 61 2e 61 61 2e 6f 6e 61 62 6f 72 74 3d 28 30 2c 5f 2e 4a 66 29 28 61 2e 73 64 61 2c 61 29 2c 61 Data Ascii: unction(){Rqa(this);this.Yx=!1};var Qqa=function(a){a.oM++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Qk((0,_.Jf)(a.mE,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Jf)(a.uda,a),a.aa.onerror=(0,_.Jf)(a.tda,a),a.aa.onabort=(0,_.Jf)(a.sda,a),a
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 2e 56 71 61 3d 6e 65 77 20 5f 2e 68 6a 28 34 38 34 34 38 33 35 30 2c 5f 2e 69 6f 29 3b 5f 2e 6f 67 28 68 6f 2c 5f 2e 71 67 29 3b 68 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 61 61 3d 6e 75 6c 6c 3b 68 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 65 61 3d 22 61 74 22 3b 68 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 61 3d 6e 75 6c 6c 3b 5f 2e 55 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 74 61 2e 67 65 74 28 5f 2e 48 6a 29 3b 62 2e 74 61 2e 69 6e 63 6c 75 64 65 73 28 61 2e 64 61 29 3b 62 2e 6a 61 28 61 2e 64 61 29 7d 3b 68 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 61 61 3d 61 3b 74 68 69 73 2e 6a 61 3d 62 3b 63 26 26 28 74 68 69 73 2e 65 61 3d 63 29 7d 3b 5f 2e 67 Data Ascii: .Vqa=new _.hj(48448350,_.io);_.og(ho,_.qg);ho.prototype.aa=null;ho.prototype.ea="at";ho.prototype.ja=null;_.Uqa=function(a){var b=a.ta.get(_.Hj);b.ta.includes(a.da);b.ja(a.da)};ho.prototype.configure=function(a,b,c){this.aa=a;this.ja=b;c&&(this.ea=c)};_.g
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 55 71 3d 22 22 7d 3b 5f 2e 68 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 55 71 7d 3b 0a 76 61 72 20 58 71 61 3b 5f 2e 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 61 3d 5b 5d 3b 74 68 69 73 2e 64 61 3d 5b 5d 7d 3b 58 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 61 61 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 28 61 2e 61 61 3d 61 2e 64 61 2c 61 2e 61 61 2e 72 65 76 65 72 73 65 28 29 2c 61 2e 64 61 3d 5b 5d 29 7d 3b 5f 2e 6d 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 71 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 64 61 2e 70 75 73 68 28 61 29 7d 3b 5f 2e 59 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: clear=function(){this.Uq=""};_.h.toString=function(){return this.Uq};var Xqa;_.mo=function(){this.aa=[];this.da=[]};Xqa=function(a){a.aa.length===0&&(a.aa=a.da,a.aa.reverse(),a.da=[])};_.mo.prototype.enqueue=function(a){this.da.push(a)};_.Yqa=function(a)
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6a 57 7c 7c 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6a 57 3d 7b 7d 29 3b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6a 57 5b 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 28 29 5d 3d 74 68 69 73 7d 3b 72 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 68 69 73 2e 47 61 3d 61 29 26 26 5f 2e 71 6f 28 74 68 69 73 2c 74 68 69 73 2e 47 61 2e 72 4c 29 3b 5f 2e 6d 67 28 29 3b 74 68 69 73 2e 65 61 3d 6e 65 77 20 5f 2e 43 6e 3b 74 68 69 73 2e 64 61 3d 22 50 4f 53 54 22 3b 74 68 69 73 2e 44 63 3d 63 72 61 2b 2b 3b 64 72 61 7c 7c 28 61 3d 6e 65 77 20 44 61 74 65 2c 64 72 61 3d 61 2e 67 65 74 48 6f 75 72 73 28 29 2a 33 36 30 30 2b 61 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 2a 36 30 2b 61 2e 67 65 74 53 65 63 Data Ascii: is.constructor.jW\|\|(this.constructor.jW={});this.constructor.jW[this.toString()]=this};ro=function(a){(this.Ga=a)&&_.qo(this,this.Ga.rL);_.mg();this.ea=new _.Cn;this.da="POST";this.Dc=cra++;dra\|\|(a=new Date,dra=a.getHours()3600+a.getMinutes()60+a.getSec
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 64 61 3d 3d 22 44 45 4c 45 54 45 22 29 61 2e 4b 75 28 62 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 62 2e 65 61 3b 62 3d 62 2e 61 61 3b 76 61 72 20 64 3d 61 2e 74 61 3b 64 3f 28 61 3d 64 2e 65 6c 65 6d 65 6e 74 73 5b 63 5d 2c 61 7c 7c 28 61 3d 64 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 2c 21 30 29 2c 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 29 2c 61 2e 76 61 6c 75 65 3d 62 29 3a 61 2e 52 61 7c 7c 61 2e 43 61 28 63 2c 62 29 7d 7d 29 3b 68 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 79 70 65 6f 66 20 62 3d 3d 3d 22 Data Ascii: da=="DELETE")a.Ku(b.aa);else{var c=b.ea;b=b.aa;var d=a.ta;d?(a=d.elements[c],a\|\|(a=d.ownerDocument.createElement("input"),a.setAttribute("name",c),a.setAttribute("hidden",!0),d.appendChild(a)),a.value=b):a.Ra\|\|a.Ca(c,b)}});hra=function(a,b,c){typeof b==="
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 7d 3b 76 61 72 20 6e 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 29 61 3d 21 31 3b 65 6c 73 65 7b 76 61 72 20 62 3b 69 66 28 62 3d 21 21 61 2e 64 61 29 61 3a 73 77 69 74 63 68 28 62 3d 61 2e 64 61 2c 62 2e 74 43 29 7b 63 61 73 65 20 22 52 45 54 52 59 22 3a 62 3d 21 30 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 46 41 49 4c 22 3a 62 3d 21 31 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 42 45 53 54 5f 45 46 46 4f 52 54 22 3a 62 3d 61 2e 6a 61 7c 7c 61 2e 64 61 2e 71 42 3b 62 3d 61 2e 61 61 3e 3d 35 30 30 26 26 62 3c 33 3f 21 30 3a 21 31 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 72 62 60 22 2b 62 2e 74 43 29 3b 7d Data Ascii: function(){return this.ea};var nra=function(a){if(a.ta)a=!1;else{var b;if(b=!!a.da)a:switch(b=a.da,b.tC){case "RETRY":b=!0;break a;case "FAIL":b=!1;break a;case "BEST_EFFORT":b=a.ja\|\|a.da.qB;b=a.aa>=500&&b<3?!0:!1;break a;default:throw Error("rb`"+b.tC);}
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 61 2c 30 2c 5f 2e 79 6f 2e 6d 65 73 73 61 67 65 49 64 29 7d 3b 5f 2e 42 28 5f 2e 79 6f 2c 5f 2e 77 29 3b 5f 2e 79 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 50 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 7a 69 28 74 68 69 73 2c 32 29 7d 3b 5f 2e 79 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 7a 69 28 74 68 69 73 2c 34 29 7d 3b 0a 5f 2e 79 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 46 28 74 68 69 73 2c 5f 2e 74 6a 2c 31 30 29 7d 3b 5f 2e 79 6f 2e 6d 65 73 73 61 67 65 49 64 3d 22 65 72 22 3b 76 61 72 20 7a 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 45 61 3d 5f 2e 75 28 61 2c 30 2c 7a 6f 2e 6d Data Ascii: a,0,_.yo.messageId)};_.B(_.yo,_.w);_.yo.prototype.Pm=function(){return _.zi(this,2)};_.yo.prototype.getData=function(){return _.zi(this,4)};_.yo.prototype.aa=function(){return _.F(this,_.tj,10)};_.yo.messageId="er";var zo=function(a){this.Ea=_.u(a,0,zo.m
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 69 66 28 64 29 7b 76 61 72 20 65 3d 64 2e 65 6c 65 6d 65 6e 74 73 5b 74 68 69 73 2e 6a 61 5d 3b 65 7c 7c 28 65 3d 64 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 74 68 69 73 2e 6a 61 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 2c 21 30 29 2c 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3b 65 2e 76 61 6c 75 65 3d 63 7d 65 6c 73 65 20 61 2e 43 61 28 74 68 69 73 2e 6a 61 2c 63 29 7d 74 68 69 73 2e 4b 6a 2e 73 65 6e 64 28 61 2e 67 65 74 55 72 6c 28 29 2c 61 2e 64 61 2c 74 72 61 28 61 29 2c 62 29 7d 65 6c 73 65 20 74 68 69 73 2e 4b 6a 2e 73 65 6e 64 28 61 2e 67 65 74 55 72 6c 28 29 2c 61 2e Data Ascii: if(d){var e=d.elements[this.ja];e\|\|(e=d.ownerDocument.createElement("input"),e.setAttribute("name",this.ja),e.setAttribute("hidden",!0),d.appendChild(e));e.value=c}else a.Ca(this.ja,c)}this.Kj.send(a.getUrl(),a.da,tra(a),b)}else this.Kj.send(a.getUrl(),a.
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 61 2c 74 68 69 73 2e 61 62 29 3b 74 68 69 73 2e 4c 61 26 26 28 61 2e 4c 61 3d 21 30 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 68 2e 5a 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 52 6b 28 74 68 69 73 2e 4d 73 29 3b 5f 2e 4c 6b 28 74 68 69 73 2e 4b 6a 2c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 77 59 2c 21 31 2c 74 68 69 73 29 3b 44 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 63 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 5f 2e 68 2e 70 53 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 73 30 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 62 3d 61 2e 74 61 3b 72 65 74 75 72 6e 20 62 26 26 6c 72 61 28 62 29 7c 7c 5f 2e 64 68 26 26 21 6a 72 61 28 22 34 32 30 2b 22 29 7c 7c 5f 2e 63 68 26 26 21 6a 72 61 28 22 31 2e 39 22 29 3f 30 3a 61 Data Ascii: a,this.ab);this.La&&(a.La=!0);return a};_.h.Zc=function(){_.Rk(this.Ms);_.Lk(this.Kj,"readystatechange",this.wY,!1,this);Do.prototype.Zc.call(this)};_.h.pS=function(a){if(a.s0)return 0;var b=a.ta;return b&&lra(b)\|\|_.dh&&!jra("420+")\|\|_.ch&&!jra("1.9")?0:a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49850	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:03 UTC	1812	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,gJzDyc,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qmdT9,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9 [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:03 UTC	945	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 97234 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:16 GMT Expires: Tue, 05 Aug 2025 19:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59747 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:03 UTC	445	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 6b 28 22 6c 74 44 46 77 66 22 29 3b 0a 76 61 72 20 62 78 62 3d 5f 2e 79 28 22 6c 74 44 46 77 66 22 29 3b 76 61 72 20 68 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4b 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 3b 76 61 72 20 62 3d 74 68 69 73 2e 77 61 28 29 3b 74 68 69 73 2e 77 62 3d 74 68 69 73 2e 53 61 28 22 50 31 65 6b 53 65 22 29 3b 74 68 69 73 2e 6d 62 3d 74 68 69 73 2e 53 61 28 22 63 51 77 45 75 66 22 29 Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{_.k("ltDFwf");var bxb=_.y("ltDFwf");var hV=function(a){_.K.call(this,a.Fa);var b=this.wa();this.wb=this.Sa("P1ekSe");this.mb=this.Sa("cQwEuf")
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 73 2e 64 61 21 3d 3d 30 3b 74 68 69 73 2e 4b 61 3d 74 68 69 73 2e 6a 61 21 3d 3d 31 3b 74 68 69 73 2e 47 61 3d 5b 5d 3b 74 68 69 73 2e 65 61 3d 5f 2e 45 73 28 74 68 69 73 29 2e 55 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 47 61 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 47 61 2e 66 6f 72 45 61 63 68 28 74 68 69 73 2e 6e 24 2c 74 68 69 73 29 2c 74 68 69 73 2e 47 61 3d 5b 5d 29 3b 74 68 69 73 2e 4c 61 26 26 28 74 68 69 73 2e 4c 61 3d 21 31 2c 74 68 69 73 2e 77 62 2e 73 65 74 53 74 79 6c 65 28 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 73 63 61 6c 65 58 28 22 2b 74 68 69 73 2e 64 61 2b 22 29 22 29 29 3b 0a 74 68 69 73 2e 4b 61 26 26 28 74 68 69 73 2e 4b 61 3d 21 31 2c 74 68 69 73 2e 6d 62 2e 73 65 74 53 74 79 6c 65 28 22 74 72 61 6e 73 66 6f 72 6d Data Ascii: s.da!==0;this.Ka=this.ja!==1;this.Ga=[];this.ea=_.Es(this).Ub(function(){this.Ga.length&&(this.Ga.forEach(this.n$,this),this.Ga=[]);this.La&&(this.La=!1,this.wb.setStyle("transform","scaleX("+this.da+")"));this.Ka&&(this.Ka=!1,this.mb.setStyle("transform
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 22 29 29 3a 28 5f 2e 61 6e 28 74 68 69 73 2e 77 61 28 29 2c 22 61 72 69 61 2d 76 61 6c 75 65 6d 61 78 22 2c 31 29 2c 5f 2e 61 6e 28 74 68 69 73 2e 77 61 28 29 2c 22 61 72 69 61 2d 76 61 6c 75 65 6d 69 6e 22 2c 30 29 2c 5f 2e 61 6e 28 74 68 69 73 2e 77 61 28 29 2c 22 61 72 69 61 2d 76 61 6c 75 65 6e 6f 77 22 2c 74 68 69 73 2e 64 61 29 29 7d 3b 5f 2e 68 2e 52 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 43 61 7d 3b 0a 5f 2e 68 2e 59 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4f 61 7d 3b 5f 2e 68 2e 61 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 7d 3b 5f 2e 68 2e 6e 24 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 77 61 28 29 3b 62 2e Data Ascii: ")):(_.an(this.wa(),"aria-valuemax",1),_.an(this.wa(),"aria-valuemin",0),_.an(this.wa(),"aria-valuenow",this.da))};_.h.Rh=function(){return this.Ca};_.h.YP=function(){return this.Oa};_.h.aJ=function(){return this.ta};_.h.n$=function(a){var b=this.wa();b.
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 5f 2e 6b 28 22 53 44 38 4a 67 62 22 29 3b 0a 5f 2e 6b 58 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4b 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 3b 74 68 69 73 2e 54 61 3d 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 54 61 3b 74 68 69 73 2e 72 64 3d 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 72 64 5b 30 5d 7c 7c 6e 75 6c 6c 3b 74 68 69 73 2e 68 65 61 64 65 72 3d 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 68 65 61 64 65 72 3b 74 68 69 73 2e 6e 61 76 3d 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6e 61 76 3b 76 61 72 20 62 3b 28 62 3d 74 68 69 73 2e 77 61 28 29 2e 66 69 6e 64 28 22 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 74 79 70 65 5d 29 22 29 2e 65 6c 28 29 29 3d 3d 6e 75 6c 6c 7c 7c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 62 75 74 74 6f Data Ascii: _.k("SD8Jgb");_.kX=function(a){_.K.call(this,a.Fa);this.Ta=a.controller.Ta;this.rd=a.controllers.rd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.wa().find("button:not([type])").el())==null\|\|b.setAttribute("type","butto
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 2c 62 29 7d 3b 5f 2e 4c 28 5f 2e 6b 58 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 68 74 78 6c 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 73 7d 29 3b 0a 5f 2e 4c 28 5f 2e 6b 58 2e 70 72 6f 74 6f 74 79 70 65 2c 22 53 45 4b 6b 75 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5a 72 7d 29 3b 5f 2e 4c 28 5f 2e 6b 58 2e 70 72 6f 74 6f 74 79 70 65 2c 22 55 4b 65 56 72 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 59 72 7d 29 3b 5f 2e 4c 28 5f 2e 6b 58 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 6a 4d 72 55 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 73 7d 29 3b 5f 2e 4c 28 5f 2e 6b 58 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5a 6e 58 48 58 63 22 Data Ascii: ,b)};_.L(_.kX.prototype,"dhtxlf",function(){return this.cs});_.L(_.kX.prototype,"SEKku",function(){return this.Zr});_.L(_.kX.prototype,"UKeVrb",function(){return this.Yr});_.L(_.kX.prototype,"ajMrU",function(){return this.gs});_.L(_.kX.prototype,"ZnXHXc"
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 7d 3b 5f 2e 4c 28 79 39 2e 70 72 6f 74 6f 74 79 70 65 2c 22 43 6e 4f 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 65 6e 44 69 61 6c 6f 67 7d 29 3b 5f 2e 71 73 28 5f 2e 49 4a 61 2c 79 39 29 3b 0a 0a 5f 2e 6d 28 29 3b 0a 5f 2e 4b 4c 61 3d 5f 2e 79 28 22 71 50 59 78 71 22 2c 5b 5f 2e 57 6b 5d 29 3b 0a 5f 2e 6b 28 22 71 50 59 78 71 22 29 3b 0a 76 61 72 20 58 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 5f 2e 67 53 61 28 61 2e 72 64 2c 61 2e 50 6e 29 7d 2c 6c 58 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4b 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 3b 74 68 69 73 2e 50 61 3d 61 2e 58 61 2e 50 61 3b 74 68 69 73 2e 66 6f 72 6d 3d 74 68 69 73 2e 77 61 28 29 2e 66 69 Data Ascii: };_.L(y9.prototype,"CnOdef",function(){return this.openDialog});_.qs(_.IJa,y9);_.m();_.KLa=_.y("qPYxq",[_.Wk]);_.k("qPYxq");var XAb=function(a){a=a\|\|{};return _.gSa(a.rd,a.Pn)},lX=function(a){_.K.call(this,a.Fa);this.Pa=a.Xa.Pa;this.form=this.wa().fi
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 29 3b 5f 2e 4c 28 5f 2e 7a 45 2e 70 72 6f 74 6f 74 79 70 65 2c 22 4f 32 32 70 33 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 6c 75 72 7d 29 3b 5f 2e 4c 28 5f 2e 7a 45 2e 70 72 6f 74 6f 74 79 70 65 2c 22 41 48 6d 75 77 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 63 75 73 7d 29 3b 5f 2e 72 73 28 5f 2e 7a 45 29 3b 0a 5f 2e 6d 28 29 3b 0a 5f 2e 4a 4d 61 3d 5f 2e 79 28 22 6b 52 47 77 4b 22 2c 5b 5f 2e 70 79 5d 29 3b 0a 5f 2e 6b 28 22 6b 52 47 77 4b 22 29 3b 0a 5f 2e 42 59 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 7a 45 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 7d 3b 5f 2e 42 28 5f 2e 42 59 2c 5f 2e 7a 45 29 3b 5f 2e 42 59 2e 42 61 3d 5f 2e 7a 45 2e 42 61 3b 5f 2e 42 59 2e 70 Data Ascii: );_.L(_.zE.prototype,"O22p3e",function(){return this.blur});_.L(_.zE.prototype,"AHmuwe",function(){return this.focus});_.rs(_.zE);_.m();_.JMa=_.y("kRGwK",[_.py]);_.k("kRGwK");_.BY=function(a){_.zE.call(this,a.Fa)};_.B(_.BY,_.zE);_.BY.Ba=_.zE.Ba;_.BY.p
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 62 22 29 3b 5f 2e 64 58 28 5f 2e 65 58 28 62 29 2c 61 29 7d 3b 0a 76 61 72 20 48 43 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 21 3d 3d 61 2e 4b 61 29 7b 76 61 72 20 63 3d 61 2e 41 63 28 22 74 4a 48 4a 6a 22 29 2e 66 69 72 73 74 28 29 3b 62 26 26 63 3f 5f 2e 4a 44 28 63 2e 65 6c 28 29 2c 22 68 69 64 64 65 6e 22 2c 21 30 29 3a 63 2e 65 6c 28 29 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 5f 2e 49 44 28 22 68 69 64 64 65 6e 22 29 29 3b 5f 2e 76 72 28 61 2e 77 61 28 29 2c 22 53 37 53 34 4e 22 2c 21 62 29 3b 63 3d 61 2e 4e 6b 28 29 3b 28 62 26 26 63 7c 7c 21 62 26 26 21 63 29 26 26 61 2e 43 61 28 21 31 29 3b 61 2e 4b 61 3d 62 7d 7d 3b 0a 5f 2e 43 59 2e 70 72 6f 74 6f 74 79 70 65 2e 64 46 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 Data Ascii: b");_.dX(_.eX(b),a)};var HCb=function(a,b){if(b!==a.Ka){var c=a.Ac("tJHJj").first();b&&c?_.JD(c.el(),"hidden",!0):c.el().removeAttribute(_.ID("hidden"));_.vr(a.wa(),"S7S4N",!b);c=a.Nk();(b&&c\|\|!b&&!c)&&a.Ca(!1);a.Ka=b}};_.CY.prototype.dF=function(a){var
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 3b 5f 2e 68 2e 53 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 61 28 21 74 68 69 73 2e 64 61 29 7d 3b 5f 2e 68 2e 62 34 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 65 6c 28 29 2e 74 61 67 4e 61 6d 65 21 3d 3d 22 41 22 26 26 74 68 69 73 2e 66 6f 63 75 73 28 29 7d 3b 5f 2e 68 2e 63 34 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 72 69 67 67 65 72 28 5f 2e 41 76 62 29 7d 3b 5f 2e 68 2e 5a 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 61 63 74 69 6f 6e 26 26 74 68 69 73 2e 61 63 74 69 6f 6e 2e 54 63 28 61 29 7d 3b 5f 2e 68 2e 7a 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 6f 6e 3f 74 68 69 73 2e 61 63 74 69 6f 6e 2e 69 73 45 6e 61 62 6c 65 64 Data Ascii: ;_.h.Sp=function(){this.aa(!this.da)};_.h.b4=function(a){a.targetElement.el().tagName!=="A"&&this.focus()};_.h.c4=function(){this.trigger(_.Avb)};_.h.ZE=function(a){this.action&&this.action.Tc(a)};_.h.zP=function(){return this.action?this.action.isEnabled
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 29 3a 5f 2e 44 61 61 28 29 3f 28 62 3d 2f 41 6e 64 72 6f 69 64 5c 73 2b 28 5b 5e 5c 29 3b 5d 2b 29 28 5c 29 7c 3b 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 29 3a 5f 2e 46 61 61 28 29 26 26 28 62 3d 2f 28 3f 3a 43 72 4f 53 5c 73 2b 28 3f 3a 69 36 38 36 7c 78 38 36 5f 36 34 29 5c 73 2b 28 5b 30 2d 39 2e 5d 2b 29 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 29 3b 72 65 74 75 72 6e 20 62 7c 7c 22 22 7d 2c 6f 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6c 70 62 28 61 2e 4c 48 2c 0a 61 2e 73 4a 29 7d 2c 70 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5f 2e 4f 28 61 2e 42 38 29 2b 22 20 63 68 61 72 61 63 74 65 72 73 20 72 65 6d 61 Data Ascii: exec(a))&&a[1]):_.Daa()?(b=/Android\s+([^\);]+)(\)\|;)/,b=(a=b.exec(a))&&a[1]):_.Faa()&&(b=/(?:CrOS\s+(?:i686\|x86_64)\s+([0-9.]+))/,b=(a=b.exec(a))&&a[1]);return b\|\|""},opb=function(a){return _.lpb(a.LH,a.sJ)},ppb=function(a){a=_.O(a.B8)+" characters rema

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49851	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:03 UTC	1705	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGU [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:03 UTC	946	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 810742 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:16 GMT Expires: Tue, 05 Aug 2025 19:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59747 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:03 UTC	444	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 20 2e 56 66 50 70 6b 64 2d 50 35 51 4c 6c 63 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 64 63 2d 74 68 65 6d 65 2d 73 75 72 66 61 63 65 2c 23 66 66 66 29 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 20 2e 56 66 50 70 6b 64 2d 49 45 35 44 44 66 2c 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 20 2e 56 66 50 70 6b 64 2d 50 35 51 4c 6c 63 2d 47 47 41 63 62 63 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 32 29 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 20 2e 56 66 50 70 6b 64 2d 6b 32 57 72 73 Data Ascii: "use strict";_F_installCss(".VfPpkd-Sx9Kwc .VfPpkd-P5QLlc{background-color:#fff;background-color:var(--mdc-theme-surface,#fff)}.VfPpkd-Sx9Kwc .VfPpkd-IE5DDf,.VfPpkd-Sx9Kwc .VfPpkd-P5QLlc-GGAcbc{background-color:rgba(0,0,0,.32)}.VfPpkd-Sx9Kwc .VfPpkd-k2Wrs
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 3a 3a 62 65 66 6f 72 65 2c 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 20 2e 56 66 50 70 6b 64 2d 7a 4d 55 39 75 62 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 6d 64 63 2d 74 68 65 6d 65 2d 6f 6e 2d 73 75 72 66 61 63 65 2c 23 30 30 30 29 29 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 20 2e 56 66 50 70 6b 64 2d 7a 4d 55 39 75 62 3a 68 6f 76 65 72 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 3a 3a 62 65 66 6f 72 65 2c 2e 56 66 50 70 6b 64 2d Data Ascii: pkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::after{background-color:#000;background-color:var(--mdc-ripple-color,var(--mdc-theme-on-surface,#000))}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:hover .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 58 75 48 70 73 62 2d 63 6c 7a 34 49 63 2d 74 4a 48 4a 6a 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 6e 39 6f 45 49 62 20 2e 56 66 50 70 6b 64 2d 6f 63 6c 59 4c 64 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 31 70 78 20 2d 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 32 70 78 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 20 2e 56 66 50 70 6b 64 2d 50 35 51 4c 6c Data Ascii: solid rgba(0,0,0,.12);margin-bottom:0}.VfPpkd-Sx9Kwc.VfPpkd-Sx9Kwc-XuHpsb-clz4Ic-tJHJj.VfPpkd-Sx9Kwc-OWXEXe-n9oEIb .VfPpkd-oclYLd{box-shadow:0 3px 1px -2px rgba(0,0,0,.2),0 2px 2px 0 rgba(0,0,0,.14),0 1px 5px 0 rgba(0,0,0,.12)}.VfPpkd-Sx9Kwc .VfPpkd-P5QLl
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 31 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2c 76 61 72 28 2d 2d 6d 64 63 2d 74 79 70 6f 67 72 61 70 68 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2c 52 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 6d 64 63 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 31 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 72 65 6d 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6d 64 63 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 6f 64 79 31 2d 6c 69 6e 65 2d 68 65 69 67 68 74 2c 31 2e 35 72 65 6d 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: typography-body1-font-family,var(--mdc-typography-font-family,Roboto,sans-serif));font-size:1rem;font-size:var(--mdc-typography-body1-font-size,1rem);line-height:1.5rem;line-height:var(--mdc-typography-body1-line-height,1.5rem);font-weight:400;font-weight
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 6e 39 6f 45 49 62 20 2e 56 66 50 70 6b 64 2d 50 35 51 4c 6c 63 20 2e 56 66 50 70 6b 64 2d 7a 4d 55 39 75 62 7b 72 69 67 68 74 3a 2d 31 32 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 37 32 70 78 29 7b 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 6e 39 6f 45 49 62 20 2e 56 66 50 70 6b 64 2d 50 35 51 4c 6c 63 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 76 77 20 2d 20 31 31 32 70 78 29 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 37 32 70 78 29 7b 2e 56 66 50 70 6b 64 2d Data Ascii: pkd-Sx9Kwc-OWXEXe-n9oEIb .VfPpkd-P5QLlc .VfPpkd-zMU9ub{right:-12px}}@media (max-width:720px) and (max-width:672px){.VfPpkd-Sx9Kwc.VfPpkd-Sx9Kwc-OWXEXe-n9oEIb .VfPpkd-P5QLlc{width:calc(100vw - 112px)}}@media (max-width:720px) and (min-width:672px){.VfPpkd-
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 64 2d 50 35 51 4c 6c 63 20 2e 56 66 50 70 6b 64 2d 7a 4d 55 39 75 62 7b 72 69 67 68 74 3a 2d 31 32 70 78 7d 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2e 56 66 50 70 6b 64 2d 49 45 35 44 44 66 2d 4f 57 58 45 58 65 2d 4c 36 63 54 63 65 20 2e 56 66 50 70 6b 64 2d 49 45 35 44 44 66 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 56 66 50 70 6b 64 2d 49 45 35 44 44 66 7b 6f 70 61 63 69 74 79 3a 30 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 2e 56 66 50 70 6b 64 2d 77 7a 54 73 57 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f Data Ascii: d-P5QLlc .VfPpkd-zMU9ub{right:-12px}}.VfPpkd-Sx9Kwc.VfPpkd-IE5DDf-OWXEXe-L6cTce .VfPpkd-IE5DDf{opacity:0}.VfPpkd-IE5DDf{opacity:0;z-index:-1}.VfPpkd-wzTsW{display:flex;flex-direction:row;align-items:center;justify-content:space-around;box-sizing:border-bo
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 66 50 70 6b 64 2d 6b 32 57 72 73 62 2c 2e 56 66 50 70 6b 64 2d 6b 32 57 72 73 62 5b 64 69 72 3d 72 74 6c 5d 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 73 32 67 51 76 64 20 2e 56 66 50 70 6b 64 2d 6b 32 57 72 73 62 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 6e 39 6f 45 49 62 20 2e 56 66 50 70 6b 64 2d 6f 63 6c 59 4c 64 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 62 61 73 65 6c 69 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 Data Ascii: fPpkd-k2Wrsb,.VfPpkd-k2Wrsb[dir=rtl]{text-align:right}.VfPpkd-Sx9Kwc-OWXEXe-s2gQvd .VfPpkd-k2Wrsb{margin-bottom:1px;padding-bottom:15px}.VfPpkd-Sx9Kwc-OWXEXe-n9oEIb .VfPpkd-oclYLd{align-items:baseline;border-bottom:1px solid transparent;display:inline-fle
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 3a 30 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 73 32 67 51 76 64 20 2e 56 66 50 70 6b 64 2d 6b 32 57 72 73 62 2b 2e 56 66 50 70 6b 64 2d 63 6e 47 34 57 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 56 66 50 70 6b 64 2d 63 6e 47 34 57 64 20 2e 56 66 50 70 6b 64 2d 53 74 72 6e 47 66 2d 72 79 6d 50 68 62 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 3a 36 70 78 20 30 20 30 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 73 32 67 51 76 64 20 2e 56 66 50 70 6b 64 2d 63 6e 47 34 57 64 20 2e 56 66 50 70 6b 64 2d 53 74 72 6e 47 66 2d 72 79 6d 50 68 62 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6c 61 73 74 Data Ascii: :0}.VfPpkd-Sx9Kwc-OWXEXe-s2gQvd .VfPpkd-k2Wrsb+.VfPpkd-cnG4Wd{padding-top:8px;padding-bottom:8px}.VfPpkd-cnG4Wd .VfPpkd-StrnGf-rymPhb:first-child:last-child{padding:6px 0 0}.VfPpkd-Sx9Kwc-OWXEXe-s2gQvd .VfPpkd-cnG4Wd .VfPpkd-StrnGf-rymPhb:first-child:last
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 46 6e 53 65 65 20 2e 56 66 50 70 6b 64 2d 49 45 35 44 44 66 2c 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 46 6e 53 65 65 20 2e 56 66 50 70 6b 64 2d 77 7a 54 73 57 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 37 35 6d 73 20 6c 69 6e 65 61 72 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 46 6e 53 65 65 20 2e 56 66 50 70 6b 64 2d 77 7a 54 73 57 2c 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 46 6e 53 65 65 20 2e 56 66 50 70 6b 64 2d 50 35 51 4c 6c 63 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 56 66 50 70 6b 64 2d 53 78 39 4b 77 63 2d 4f 57 58 45 58 65 2d 52 54 51 Data Ascii: ier(0,0,.2,1)}.VfPpkd-Sx9Kwc-OWXEXe-FnSee .VfPpkd-IE5DDf,.VfPpkd-Sx9Kwc-OWXEXe-FnSee .VfPpkd-wzTsW{transition:opacity 75ms linear}.VfPpkd-Sx9Kwc-OWXEXe-FnSee .VfPpkd-wzTsW,.VfPpkd-Sx9Kwc-OWXEXe-FnSee .VfPpkd-P5QLlc{transform:none}.VfPpkd-Sx9Kwc-OWXEXe-RTQ
2024-08-06 12:27:03 UTC	1390	IN	Data Raw: 66 2d 4f 57 58 45 58 65 2d 75 49 44 4c 62 62 20 2e 56 66 50 70 6b 64 2d 50 35 51 4c 6c 63 2d 47 47 41 63 62 63 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 43 31 65 43 63 7b 7a 2d 69 6e 64 65 78 3a 32 30 30 31 7d 2e 63 43 31 65 43 63 20 2e 56 66 50 70 6b 64 2d 6b 32 57 72 73 62 7b 63 6f 6c 6f 72 3a 23 33 63 34 30 34 33 7d 2e 63 43 31 65 43 63 20 2e 56 66 50 70 6b 64 2d 63 6e 47 34 57 64 7b 63 6f 6c 6f 72 3a 23 35 66 36 33 36 38 7d 2e 63 43 31 65 43 63 20 2e 56 66 50 70 6b 64 2d 7a 4d 55 39 75 62 7b 63 6f 6c 6f 72 3a 72 67 62 28 39 35 2c 39 39 2c 31 30 34 29 7d 2e 63 43 31 65 43 63 20 2e 56 66 50 70 6b 64 2d 7a 4d 55 39 75 62 20 2e 56 66 50 70 6b 64 2d 42 7a 31 31 32 63 2d 4a 68 39 6c 47 63 3a 3a 62 65 66 6f 72 65 2c 2e 63 43 31 65 43 63 20 2e 56 66 50 Data Ascii: f-OWXEXe-uIDLbb .VfPpkd-P5QLlc-GGAcbc{display:none}.cC1eCc{z-index:2001}.cC1eCc .VfPpkd-k2Wrsb{color:#3c4043}.cC1eCc .VfPpkd-cnG4Wd{color:#5f6368}.cC1eCc .VfPpkd-zMU9ub{color:rgb(95,99,104)}.cC1eCc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::before,.cC1eCc .VfP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49859	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:04 UTC	1840	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:04 UTC	944	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 1477 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:16 GMT Expires: Tue, 05 Aug 2025 19:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59748 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:04 UTC	446	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 6b 28 22 6b 4d 46 70 48 64 22 29 3b 0a 5f 2e 6c 58 61 3d 6e 65 77 20 5f 2e 50 65 28 5f 2e 53 6b 29 3b 0a 5f 2e 6d 28 29 3b 0a 5f 2e 6b 28 22 62 6d 35 31 74 66 22 29 3b 0a 76 61 72 20 6f 58 61 3d 21 21 28 5f 2e 6a 67 5b 31 5d 26 31 29 3b 76 61 72 20 71 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 74 68 69 73 2e 65 61 3d 61 3b 74 68 69 73 2e 74 61 3d 62 3b 74 68 69 73 2e 6a 61 3d 63 3b 74 68 69 73 Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{_.k("kMFpHd");_.lXa=new _.Pe(_.Sk);_.m();_.k("bm51tf");var oXa=!!(_.jg[1]&1);var qXa=function(a,b,c,d,e){this.ea=a;this.ta=b;this.ja=c;this
2024-08-06 12:27:04 UTC	1031	IN	Data Raw: 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 4d 61 74 68 2e 6d 69 6e 28 61 2e 74 61 2a 4d 61 74 68 2e 70 6f 77 28 61 2e 6a 61 2c 61 2e 61 61 29 2c 61 2e 43 61 29 7d 2c 64 46 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 61 61 3e 3d 61 2e 65 61 3f 21 31 3a 62 21 3d 6e 75 6c 6c 3f 21 21 61 2e 47 61 5b 62 5d 3a 21 30 7d 3b 76 61 72 20 65 46 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 3b 74 68 69 73 2e 4c 63 3d 6e 75 6c 6c 3b 74 68 69 73 2e 65 61 3d 61 2e 44 61 2e 55 52 3b 74 68 69 73 2e 6a 61 3d 61 2e 44 61 2e 6d 65 74 61 64 61 74 61 3b 61 3d 61 2e 44 61 2e 4a 61 61 3b 74 68 69 73 2e 64 61 3d 61 2e 65 61 2e 62 69 6e 64 28 61 29 7d 3b 5f 2e 42 28 Data Ascii: on(a){return Math.random()Math.min(a.taMath.pow(a.ja,a.aa),a.Ca)},dF=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var eF=function(a){_.J.call(this,a.Fa);this.Lc=null;this.ea=a.Da.UR;this.ja=a.Da.metadata;a=a.Da.Jaa;this.da=a.ea.bind(a)};_.B(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49858	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:04 UTC	1892	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd; [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:04 UTC	944	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 1883 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:16 GMT Expires: Tue, 05 Aug 2025 19:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59748 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:04 UTC	446	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 6b 28 22 69 41 73 6b 79 63 22 29 3b 0a 5f 2e 56 5a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 3b 74 68 69 73 2e 77 69 6e 64 6f 77 3d 61 2e 44 61 2e 77 69 6e 64 6f 77 2e 67 65 74 28 29 3b 74 68 69 73 2e 47 63 3d 61 2e 44 61 2e 47 63 7d 3b 5f 2e 42 28 5f 2e 56 5a 2c 5f 2e 4a 29 3b 5f 2e 56 5a 2e 4d 61 3d 5f 2e 4a 2e 4d 61 3b 5f 2e 56 5a 2e 42 61 3d 66 75 6e 63 74 69 6f Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{_.k("iAskyc");_.VZ=function(a){_.J.call(this,a.Fa);this.window=a.Da.window.get();this.Gc=a.Da.Gc};_.B(_.VZ,_.J);_.VZ.Ma=_.J.Ma;_.VZ.Ba=functio
2024-08-06 12:27:04 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 6b 5f 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 3b 5f 2e 59 5a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 6f 6f 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 3b 0a 5f 2e 4f 44 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4d 61 70 28 41 72 72 61 79 2e 66 72 6f 6d 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5f 2e 6e 28 62 29 3b 62 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 63 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 5b 62 2c 63 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 65 Data Ascii: unction(a){return(a==null?void 0:a.k_)\|\|function(){}};_.YZ=function(a){return(a==null?void 0:a.oo)\|\|function(){}};_.ODb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{e
2024-08-06 12:27:04 UTC	47	IN	Data Raw: 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 29 3b 0a 2f 2f 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a Data Ascii: this.default_AccountsSignInUi);// Google Inc.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49861	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:04 UTC	1859	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQO [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:04 UTC	944	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 1600 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:16 GMT Expires: Tue, 05 Aug 2025 19:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59748 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:04 UTC	446	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 6b 28 22 77 39 68 44 76 22 29 3b 0a 5f 2e 4c 66 28 5f 2e 5a 6a 61 29 3b 5f 2e 46 77 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 3b 74 68 69 73 2e 61 61 3d 61 2e 58 61 2e 63 61 63 68 65 7d 3b 5f 2e 42 28 5f 2e 46 77 2c 5f 2e 4a 29 3b 5f 2e 46 77 2e 4d 61 3d 5f 2e 4a 2e 4d 61 3b 5f 2e 46 77 2e 42 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 58 61 3a 7b 63 Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{_.k("w9hDv");_.Lf(_.Zja);_.Fw=function(a){_.J.call(this,a.Fa);this.aa=a.Xa.cache};_.B(_.Fw,_.J);_.Fw.Ma=_.J.Ma;_.Fw.Ba=function(){return{Xa:{c
2024-08-06 12:27:04 UTC	1154	IN	Data Raw: 29 7b 5f 2e 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 3b 74 68 69 73 2e 61 61 3d 61 2e 44 61 2e 68 70 3b 74 68 69 73 2e 65 61 3d 61 2e 44 61 2e 6d 65 74 61 64 61 74 61 3b 74 68 69 73 2e 64 61 3d 61 2e 44 61 2e 77 72 7d 3b 5f 2e 42 28 78 46 2c 5f 2e 4a 29 3b 78 46 2e 4d 61 3d 5f 2e 4a 2e 4d 61 3b 78 46 2e 42 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 44 61 3a 7b 68 70 3a 5f 2e 59 45 2c 6d 65 74 61 64 61 74 61 3a 5f 2e 6c 58 61 2c 77 72 3a 5f 2e 56 45 7d 7d 7d 3b 78 46 2e 70 72 6f 74 6f 74 79 70 65 2e 65 78 65 63 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 61 3d 74 68 69 73 2e 64 61 2e 63 72 65 61 74 65 28 61 29 3b 72 65 74 75 72 6e 20 5f 2e 55 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 Data Ascii: ){_.J.call(this,a.Fa);this.aa=a.Da.hp;this.ea=a.Da.metadata;this.da=a.Da.wr};_.B(xF,_.J);xF.Ma=_.J.Ma;xF.Ba=function(){return{Da:{hp:_.YE,metadata:_.lXa,wr:_.VE}}};xF.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.Ua(a,function(c){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49860	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:04 UTC	1879	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:04 UTC	944	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 4140 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:16 GMT Expires: Tue, 05 Aug 2025 19:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59748 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:04 UTC	446	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 4e 37 72 42 63 64 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 7d 73 65 6e 74 69 6e 65 6c 7b 7d 22 29 3b 0a 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 4c 66 28 5f 2e 6a 70 61 29 3b 0a 5f 2e 6b 28 22 73 4f 58 46 6a 22 29 3b 0a 76 61 72 20 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 7d 3b 5f 2e 42 28 6d 72 2c 5f 2e 4a 29 3b 6d 72 2e 4d 61 3d 5f 2e 4a 2e 4d Data Ascii: "use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{_.Lf(_.jpa);_.k("sOXFj");var mr=function(a){_.J.call(this,a.Fa)};_.B(mr,_.J);mr.Ma=_.J.M
2024-08-06 12:27:04 UTC	1390	IN	Data Raw: 64 29 2e 7a 63 3d 6e 75 6c 6c 2c 5f 2e 7a 72 28 64 2c 6e 75 6c 6c 29 29 3b 64 2e 58 79 48 69 39 26 26 28 64 2e 58 79 48 69 39 3d 6e 75 6c 6c 29 7d 3b 62 28 61 29 3b 61 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 63 2d 77 69 7a 5d 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 28 61 5b 63 5d 29 7d 2c 4c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4d 70 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 3b 74 68 69 73 2e 50 61 3d 74 68 69 73 2e 64 6f 6d 3d 6e 75 6c 6c 3b 69 66 28 74 68 69 73 2e 50 69 28 29 29 7b 76 61 72 20 62 3d 5f 2e 79 6b 28 74 68 69 73 2e 50 66 28 29 2c 5b 5f 2e 57 6b 2c 5f 2e 56 6b 5d 29 3b 62 3d 5f 2e 44 68 28 5b 62 5b 5f 2e 57 6b 5d 2c 62 5b 5f 2e 56 6b 5d 5d 29 2e Data Ascii: d).zc=null,_.zr(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},Lr=function(a){_.Mp.call(this,a.Fa);this.Pa=this.dom=null;if(this.Pi()){var b=_.yk(this.Pf(),[_.Wk,_.Vk]);b=_.Dh([b[_.Wk],b[_.Vk]]).
2024-08-06 12:27:04 UTC	1390	IN	Data Raw: 7d 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 2c 61 2e 74 61 7c 7c 7b 7d 29 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 2c 61 2e 6a 61 2e 64 61 29 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 2e 63 62 2c 61 2e 6a 61 2e 64 61 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 4e 72 2e 70 72 6f 74 6f 74 79 70 65 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 61 2e 6c 65 6e 67 74 68 21 3d 31 7c 7c 28 62 3d 74 68 69 73 2e 6a 61 2e 69 64 2e 67 65 74 43 68 69 6c 64 72 65 6e 28 29 5b 62 5d 2c 62 26 26 62 2e 43 75 29 3f 5f 2e 57 65 28 61 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 72 28 63 29 7d 29 3a 4f 72 28 61 5b 30 5d 29 3a 4f 72 28 61 29 7d 3b 5f 2e 4e 72 2e Data Ascii: };Object.assign(b,a.ta\|\|{});Object.assign(b,a.ja.da);Object.assign(b.cb,a.ja.da);return b};_.Nr.prototype.Ga=function(a,b){return Array.isArray(a)?a.length!=1\|\|(b=this.ja.id.getChildren()[b],b&&b.Cu)?_.We(a,function(c){return Or(c)}):Or(a[0]):Or(a)};_.Nr.
2024-08-06 12:27:04 UTC	914	IN	Data Raw: 3b 72 65 74 75 72 6e 20 62 28 22 3c 74 69 74 6c 65 3e 22 2b 5f 2e 75 78 28 61 29 2b 22 3c 2f 74 69 74 6c 65 3e 22 29 7d 3b 0a 5f 2e 53 28 22 64 61 22 2c 22 22 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6c 7a 28 29 7d 29 3b 0a 5f 2e 53 28 22 64 61 22 2c 22 22 2c 31 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 30 3f 5f 2e 6c 7a 28 29 3a 22 22 7d 29 3b 0a 5f 2e 6b 28 22 5a 5a 34 57 55 65 22 29 3b 0a 76 61 72 20 70 53 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 69 62 2c 64 3d 5f 2e 4e 3b 61 3d 61 2e 63 62 3b 76 61 72 20 65 3d 5f 2e 4e 2c 66 3d 28 30 2c 5f 2e 4e 29 28 22 22 2b 5f 2e 4f 28 22 53 6f 72 72 79 2c 20 73 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 20 74 68 65 Data Ascii: ;return b("<title>"+_.ux(a)+"</title>")};_.S("da","",0,function(){return _.lz()});_.S("da","",1,function(a){return a.t0?_.lz():""});_.k("ZZ4WUe");var pSa=function(a,b){var c=a.ib,d=_.N;a=a.cb;var e=_.N,f=(0,_.N)(""+_.O("Sorry, something went wrong the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49862	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:04 UTC	1833	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:04 UTC	944	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 3157 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:16 GMT Expires: Tue, 05 Aug 2025 19:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59748 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:04 UTC	446	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 6b 28 22 5a 77 44 6b 39 64 22 29 3b 0a 76 61 72 20 48 77 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 46 61 29 7d 3b 5f 2e 42 28 48 77 2c 5f 2e 4a 29 3b 48 77 2e 4d 61 3d 5f 2e 4a 2e 4d 61 3b 48 77 2e 42 61 3d 5f 2e 4a 2e 42 61 3b 48 77 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 42 65 28 74 68 69 73 2c 7b 58 61 3a 7b Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{_.k("ZwDk9d");var Hw=function(a){_.J.call(this,a.Fa)};_.B(Hw,_.J);Hw.Ma=_.J.Ma;Hw.Ba=_.J.Ba;Hw.prototype.jO=function(a){return _.Be(this,{Xa:{
2024-08-06 12:27:04 UTC	1390	IN	Data Raw: 26 61 5b 63 5d 29 3f 61 3a 62 2e 58 61 2e 72 50 2e 6a 4f 28 63 29 7d 3b 0a 48 77 2e 70 72 6f 74 6f 74 79 70 65 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5f 2e 6c 75 61 28 62 29 2e 51 69 3b 69 66 28 63 2e 73 74 61 72 74 73 57 69 74 68 28 22 24 22 29 29 7b 76 61 72 20 64 3d 5f 2e 66 6d 2e 67 65 74 28 61 29 3b 5f 2e 74 71 5b 62 5d 26 26 28 64 7c 7c 28 64 3d 7b 7d 2c 5f 2e 66 6d 2e 73 65 74 28 61 2c 64 29 29 2c 64 5b 63 5d 3d 5f 2e 74 71 5b 62 5d 2c 64 65 6c 65 74 65 20 5f 2e 74 71 5b 62 5d 2c 5f 2e 75 71 2d 2d 29 3b 69 66 28 64 29 69 66 28 61 3d 64 5b 63 5d 29 62 3d 5f 2e 41 65 28 61 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 24 62 60 22 2b 62 29 3b 65 6c 73 65 20 62 3d 6e 75 6c 6c 7d 65 6c 73 65 20 62 3d 6e 75 Data Ascii: &a[c])?a:b.Xa.rP.jO(c)};Hw.prototype.aa=function(a,b){var c=_.lua(b).Qi;if(c.startsWith("$")){var d=_.fm.get(a);_.tq[b]&&(d\|\|(d={},_.fm.set(a,d)),d[c]=_.tq[b],delete _.tq[b],_.uq--);if(d)if(a=d[c])b=_.Ae(a);else throw Error("$b`"+b);else b=null}else b=nu
2024-08-06 12:27:04 UTC	1321	IN	Data Raw: 63 2c 64 29 7b 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 64 3b 61 3d 4a 77 28 74 68 69 73 2c 61 2c 62 2c 30 29 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 2e 52 46 61 3f 5f 2e 70 64 28 65 29 3a 5f 2e 58 63 28 65 29 7d 29 3a 61 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 3f 5f 2e 70 64 28 65 29 3a 65 2e 63 6c 6f 6e 65 28 29 7d 29 7d 3b 0a 4a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 66 6f 72 28 76 61 72 20 6c 3d 7b 7d 3b 62 26 26 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 3b 6c 3d 7b 6f 4e 3a 76 6f 69 64 20 30 7d 29 7b 69 66 28 51 46 61 28 62 29 29 72 65 74 75 72 6e 20 50 46 61 28 62 29 2e Data Ascii: c,d){d=d===void 0?!1:d;a=Jw(this,a,b,0);return c!==void 0?a.then(function(e){return _.RFa?_.pd(e):_.Xc(e)}):a.then(function(e){return d?_.pd(e):e.clone()})};Jw=function(a,b,c,d,e,f,g){for(var l={};b&&b.getAttribute;l={oN:void 0}){if(QFa(b))return PFa(b).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49864	142.250.184.238	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:05 UTC	1236	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1650939714&timestamp=1722947223316 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:05 UTC	1962	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-MyRy5NlwI4jyXOv6RRMbbQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 06 Aug 2024 12:27:05 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjMtDikmLw1pBikPj6kkkNiJ3SZ7AGAHHSv_OsBUC8JOIi64HEi6znui-xXgJiIR6OmWtPbGUT-DF_xyxGJb2k_ML4zJTUvJLMksqU_NzEzLzk_PzszNTi4tSistSieCMDIxMDcyMLPQOL-AIDAJy8Kx4" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 37 36 36 65 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4d 79 52 79 35 4e 6c 77 49 34 6a 79 58 4f 76 36 52 52 4d 62 62 51 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 766e<html><head><script nonce="MyRy5NlwI4jyXOv6RRMbbQ">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 28 64 29 7b 72 65 74 75 72 6e 20 64 20 69 6e 20 62 7d 29 5d 7c 7c 22 22 7d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 0a 66 61 28 29 3b 69 66 28 61 3d 3d 3d 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 29 7b 69 66 28 6a 61 28 29 29 69 66 28 28 61 3d 2f 72 76 3a 20 2a 28 5b 5c 64 5c 2e 5d 2a 29 2f 2e 65 78 65 63 28 62 29 29 26 26 61 5b 31 5d 29 62 3d 61 5b 31 5d 3b 65 6c 73 65 7b 61 3d 22 22 3b 76 61 72 20 63 3d 2f 4d 53 49 45 20 2b 28 5b 5c 64 5c 2e 5d 2b 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 63 26 26 63 5b 31 5d 29 69 66 28 62 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 Data Ascii: (d){return d in b})]\|\|""}},qa=function(a){var b=fa();if(a==="Internet Explorer"){if(ja())if((a=/rv: ([\d\.])/.exec(b))&&a[1])b=a[1];else{a="";var c=/MSIE +([\d\.]+)/.exec(b);if(c&&c[1])if(b=/Trident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1])
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 29 7b 76 61 72 20 64 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d 2c 64 7c 3d 35 31 32 29 3a 61 3d 5b 5d 3b 62 26 26 28 64 3d 64 26 2d 31 36 37 36 30 38 33 33 7c 28 62 26 31 30 32 33 29 3c 3c 31 34 29 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 22 29 3b 64 3d 7a 28 61 29 3b 69 66 28 64 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6f 22 29 3b 69 66 28 64 26 0a 36 34 29 72 65 74 75 72 6e 20 61 3b 64 7c 3d 36 34 3b 69 66 28 63 26 26 28 64 7c 3d 35 31 32 2c 63 21 3d 3d 61 5b 30 5d 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 22 29 3b 61 3a 7b 63 3d 61 3b 76 61 72 20 65 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 65 29 7b 76 61 72 20 66 3d 65 2d 31 3b 69 66 28 77 61 28 63 5b 66 5d Data Ascii: ){var d=96;c?(a=[c],d\|=512):a=[];b&&(d=d&-16760833\|(b&1023)<<14)}else{if(!Array.isArray(a))throw Error("n");d=z(a);if(d&2048)throw Error("o");if(d&64)return a;d\|=64;if(c&&(d\|=512,c!==a[0]))throw Error("p");a:{c=a;var e=c.length;if(e){var f=e-1;if(wa(c[f]
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 3a 62 29 3b 69 66 28 61 3d 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 62 5b 61 2d 31 5d 2c 68 3d 77 61 28 66 29 3b 68 3f 61 2d 2d 3a 66 3d 76 6f 69 64 20 30 3b 65 3d 2b 21 21 28 65 26 35 31 32 29 2d 31 3b 76 61 72 20 67 3d 62 3b 69 66 28 68 29 7b 62 3a 7b 76 61 72 20 6b 3d 66 3b 76 61 72 20 6c 3d 7b 7d 3b 68 3d 21 31 3b 69 66 28 6b 29 66 6f 72 28 76 61 72 20 6d 20 69 6e 20 6b 29 69 66 28 69 73 4e 61 4e 28 2b 6d 29 29 6c 5b 6d 5d 3d 6b 5b 6d 5d 3b 65 6c 73 65 7b 76 61 72 20 71 3d 6b 5b 6d 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 71 29 26 26 28 41 28 71 2c 64 2c 0a 2b 6d 29 7c 7c 76 61 28 71 29 26 26 71 2e 73 69 7a 65 3d 3d 3d 30 29 26 26 28 71 3d 6e 75 6c 6c 29 3b 71 3d 3d 6e 75 6c 6c 26 26 28 68 3d 21 30 29 3b 71 21 3d 6e 75 6c 6c 26 26 28 6c Data Ascii: :b);if(a=b.length){var f=b[a-1],h=wa(f);h?a--:f=void 0;e=+!!(e&512)-1;var g=b;if(h){b:{var k=f;var l={};h=!1;if(k)for(var m in k)if(isNaN(+m))l[m]=k[m];else{var q=k[m];Array.isArray(q)&&(A(q,d,+m)\|\|va(q)&&q.size===0)&&(q=null);q==null&&(h=!0);q!=null&&(l
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 45 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 61 28 4e 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 0a 76 61 72 20 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 Data Ascii: n"&&typeof d.prototype[a]!="function"&&E(d.prototype,a,{configurable:!0,writable:!0,value:function(){return Qa(Na(this))}})}return a});var Qa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a},G=function(a){var b=typeof Symbol!="
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 28 6b 29 3b 69 66 28 21 48 28 6b 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6b 29 3b 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 3f 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 26 26 48 28 6b 5b 66 5d 2c 74 68 69 73 2e 67 29 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 0a 48 28 6b 2c 66 29 26 26 48 28 6b 5b 66 Data Ascii: (k);if(!H(k,f))throw Error("j`"+k);k[f][this.g]=l;return this};g.prototype.get=function(k){return c(k)&&H(k,f)?k[f][this.g]:void 0};g.prototype.has=function(k){return c(k)&&H(k,f)&&H(k[f],this.g)};g.prototype.delete=function(k){return c(k)&&H(k,f)&&H(k[f
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f 6c 3d 62 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 48 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 71 3d 6d 5b 67 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 71 2e 6b 65 79 21 3d 3d 71 2e 6b 65 79 7c 7c 6b 3d 3d 3d 71 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 67 2c 6c 3a 71 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 6c 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 Data Ascii: l=="function"?b.has(k)?l=b.get(k):(l=""+ ++h,b.set(k,l)):l="p_"+k;var m=g[0][l];if(m&&H(g[0],l))for(g=0;g<m.length;g++){var q=m[g];if(k!==k&&q.key!==q.key\|\|k===q.key)return{id:l,list:m,index:g,l:q}}return{id:l,list:m,index:-1,l:void 0}},e=function(g,k){va
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 68 3d 30 3b 68 3c 66 3b 68 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 68 5d 2c 68 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 76 61 72 20 5a 61 3d 5a 61 7c 7c 7b 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 24 61 28 22 57 49 5a 5f 67 6c 6f 62 61 6c 5f 64 61 74 61 2e 6f 78 4e 33 6e 62 22 29 3b 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 61 3a 62 7d 2c 49 3d 72 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 72 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e Data Ascii: h=0;h<f;h++)e.push(c.call(d,b[h],h));return e}});var Za=Za\|\|{},r=this\|\|self,ab=function(a,b){var c=$a("WIZ_global_data.oxN3nb");a=c&&c[a];return a!=null?a:b},I=r._F_toggles\|\|[],$a=function(a){a=a.split(".");for(var b=r,c=0;c<a.length;c++)if(b=b[a[c]],b==n
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 76 61 72 20 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 72 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 2c 67 2c 6b 2c 6c 29 7b 64 26 26 64 28 66 2c 68 2c 67 2c 6b 2c 6c 29 3b 61 28 7b 6d 65 73 73 61 67 65 3a 66 2c 66 69 6c 65 4e 61 6d 65 3a 68 2c 6c 69 6e 65 3a 67 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 67 2c 61 61 3a 6b 2c 65 72 72 6f 72 3a 6c 7d 29 Data Ascii: ctor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");var jb=function(a,b,c){c=c\|\|r;var d=c.onerror,e=!!b;c.onerror=function(f,h,g,k,l){d&&d(f,h,g,k,l);a({message:f,fileName:h,line:g,lineNumber:g,aa:k,error:l})
2024-08-06 12:27:05 UTC	1962	IN	Data Raw: 74 22 3a 22 6e 75 6c 6c 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 62 72 65 61 6b 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 66 3d 53 74 72 69 6e 67 28 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 66 3d 66 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 66 3d 28 66 3d 6c 62 28 66 29 29 3f 66 3a 22 5b 66 6e 5d 22 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 66 3d 0a 74 79 70 65 6f 66 20 66 7d 66 2e 6c 65 6e 67 74 68 3e 34 30 26 26 28 66 3d 66 2e 73 6c 69 63 65 28 30 2c 34 30 29 2b 22 2e 2e 2e 22 29 3b 63 2e 70 75 73 68 28 66 29 7d 62 2e 70 75 73 68 28 61 29 3b 63 2e 70 75 73 68 28 22 29 5c 6e 22 29 3b 74 72 79 7b 63 2e 70 75 73 68 28 70 62 Data Ascii: t":"null";break;case "string":break;case "number":f=String(f);break;case "boolean":f=f?"true":"false";break;case "function":f=(f=lb(f))?f:"[fn]";break;default:f=typeof f}f.length>40&&(f=f.slice(0,40)+"...");c.push(f)}b.push(a);c.push(")\n");try{c.push(pb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49865	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:05 UTC	1819	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:05 UTC	945	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 19180 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:16 GMT Expires: Tue, 05 Aug 2025 19:51:16 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59749 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:05 UTC	445	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 4d 44 61 3d 5f 2e 65 61 2e 55 52 4c 2c 4e 44 61 2c 4f 44 61 2c 51 44 61 2c 50 44 61 3b 74 72 79 7b 6e 65 77 20 4d 44 61 28 22 68 74 74 70 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 4e 44 61 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 4e 44 61 3d 21 31 7d 4f 44 61 3d 4e 44 61 3b 0a 51 44 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 6f 68 28 22 41 22 29 3b 74 72 79 7b 5f 2e 74 62 28 62 2c 6e Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{var MDa=_.ea.URL,NDa,ODa,QDa,PDa;try{new MDa("http://example.com"),NDa=!0}catch(a){NDa=!1}ODa=NDa;QDa=function(a){var b=_.oh("A");try{_.tb(b,n
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 29 3b 76 61 72 20 64 3d 62 2e 68 72 65 66 3b 61 3d 7b 68 72 65 66 3a 64 2c 70 72 6f 74 6f 63 6f 6c 3a 62 2e 70 72 6f 74 6f 63 6f 6c 2c 75 73 65 72 6e 61 6d 65 3a 22 22 2c 70 61 73 73 77 6f 72 64 3a 22 22 2c 68 6f 73 74 6e 61 6d 65 3a 62 2e 68 6f 73 74 6e 61 6d 65 2c 70 61 74 68 6e 61 6d 65 3a 22 2f 22 2b 62 2e 70 61 74 68 6e 61 6d 65 2c 73 65 61 72 63 68 3a 62 2e 73 65 61 72 63 68 2c 68 61 73 68 3a 62 2e 68 61 73 68 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 3b 50 44 61 2e 67 65 74 28 62 2e 70 72 6f 74 6f 63 6f 6c 29 3d 3d 3d 62 2e 70 6f 72 74 3f 28 61 2e 68 6f 73 74 3d 61 2e 68 6f 73 74 6e 61 6d 65 2c 61 2e 70 6f 72 74 3d 22 22 2c 61 2e 6f 72 69 67 69 6e 3d 61 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b Data Ascii: );var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};PDa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 28 62 3d 62 5b 30 5d 29 7b 73 77 69 74 63 68 28 62 2e 74 79 70 65 29 7b 63 61 73 65 20 22 6e 61 76 69 67 61 74 65 22 3a 63 2e 58 62 28 31 29 3b 0a 62 72 65 61 6b 3b 63 61 73 65 20 22 72 65 6c 6f 61 64 22 3a 63 2e 58 62 28 32 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 62 61 63 6b 5f 66 6f 72 77 61 72 64 22 3a 63 2e 58 62 28 33 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 70 72 65 72 65 6e 64 65 72 22 3a 63 2e 58 62 28 34 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 2e 58 62 28 30 29 7d 76 61 72 20 64 3d 5f 2e 52 69 28 63 2c 32 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 62 2e 73 74 61 72 74 54 69 6d 65 29 29 3b 64 3d 5f 2e 52 69 28 64 2c 33 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 62 2e 66 65 74 63 68 53 74 61 72 74 29 29 3b 64 3d 5f 2e 52 69 28 64 2c 34 2c 4d 61 74 Data Ascii: (b=b[0]){switch(b.type){case "navigate":c.Xb(1);break;case "reload":c.Xb(2);break;case "back_forward":c.Xb(3);break;case "prerender":c.Xb(4);break;default:c.Xb(0)}var d=_.Ri(c,2,Math.round(b.startTime));d=_.Ri(d,3,Math.round(b.fetchStart));d=_.Ri(d,4,Mat
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 26 26 28 28 61 3d 77 69 6e 64 6f 77 2e 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 2e 73 75 70 70 6f 72 74 65 64 45 6e 74 72 79 54 79 70 65 73 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 69 6e 63 6c 75 64 65 73 28 22 70 61 69 6e 74 22 29 29 7d 2c 79 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 72 45 61 28 29 29 7b 76 61 72 20 62 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 70 61 69 6e 74 22 29 3b 0a 69 66 28 62 26 26 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 5f 2e 66 69 28 61 2c 66 77 2c 31 31 29 3f 5f 2e 46 28 61 2c 66 77 2c 31 31 Data Ascii: nction(){var a;return window.PerformanceObserver&&((a=window.PerformanceObserver.supportedEntryTypes)==null?void 0:a.includes("paint"))},yEa=function(a){if(rEa()){var b=performance.getEntriesByType("paint");if(b&&b.length){var c=_.fi(a,fw,11)?_.F(a,fw,11
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 45 61 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 42 28 68 77 2c 5f 2e 77 29 3b 76 61 72 20 46 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 45 61 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 42 28 46 45 61 2c 5f 2e 77 29 3b 76 61 72 20 47 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 45 61 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 42 28 47 45 61 2c 5f 2e 77 29 3b 76 61 72 20 48 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 45 61 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 42 28 48 45 61 2c 5f 2e 77 29 3b 76 61 72 20 49 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 45 61 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 42 28 49 45 61 2c 5f 2e 77 29 3b 76 61 72 20 69 77 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 Data Ascii: ction(a){this.Ea=_.u(a)};_.B(hw,_.w);var FEa=function(a){this.Ea=_.u(a)};_.B(FEa,_.w);var GEa=function(a){this.Ea=_.u(a)};_.B(GEa,_.w);var HEa=function(a){this.Ea=_.u(a)};_.B(HEa,_.w);var IEa=function(a){this.Ea=_.u(a)};_.B(IEa,_.w);var iw=function(a){thi
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 62 2e 74 69 6d 65 53 74 61 6d 70 2c 61 28 62 29 29 7d 2c 21 30 29 7d 3b 76 61 72 20 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 29 7b 62 2e 76 61 6c 75 65 3e 3d 30 26 26 28 67 7c 7c 64 29 26 26 28 28 66 3d 62 2e 76 61 6c 75 65 2d 28 65 7c 7c 30 29 29 7c 7c 65 3d 3d 3d 76 6f 69 64 20 30 29 26 26 28 65 3d 62 2e 76 61 6c 75 65 2c 62 2e 46 76 3d 66 2c 67 3d 62 2e 76 61 6c 75 65 2c 62 2e 70 65 61 3d 67 3e 63 5b 31 5d 3f 22 70 6f 6f 72 22 3a 67 3e 63 5b 30 5d 3f 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 3a 22 67 6f 6f 64 22 2c 61 28 62 29 29 7d 7d 3b 76 61 72 20 70 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6b 77 28 29 3b 72 65 74 75 72 6e Data Ascii: b.timeStamp,a(b))},!0)};var ow=function(a,b,c,d){var e,f;return function(g){b.value>=0&&(g\|\|d)&&((f=b.value-(e\|\|0))\|\|e===void 0)&&(e=b.value,b.Fv=f,g=b.value,b.pea=g>c[1]?"poor":g>c[0]?"needs-improvement":"good",a(b))}};var pw=function(){var a=kw();return
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 7d 3b 76 61 72 20 4f 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 7c 7c 7b 7d 3b 76 61 72 20 63 3d 5b 31 38 30 30 2c 33 45 33 5d 2c 64 3d 4e 45 61 28 29 2c 65 3d 71 77 28 22 46 43 50 22 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 71 29 7b 71 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 2e 6e 61 6d 65 3d 3d 3d 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 26 26 28 6c 26 26 6c 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 72 2e 73 74 61 72 74 54 69 6d 65 3c 64 2e 57 4e 26 26 28 65 2e 76 61 6c 75 65 3d 72 2e 73 74 61 72 74 54 69 6d 65 2d 70 77 28 29 2c 65 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 72 29 2c 70 28 21 30 29 29 29 7d 29 7d 2c 67 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 Data Ascii: };var OEa=function(a,b){b=b\|\|{};var c=[1800,3E3],d=NEa(),e=qw("FCP"),f=function(q){q.forEach(function(r){r.name==="first-contentful-paint"&&(l&&l.disconnect(),r.startTime<d.WN&&(e.value=r.startTime-pw(),e.entries.push(r),p(!0)))})},g=window.performance&&w
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 65 3d 54 45 61 28 64 2e 73 6f 75 72 63 65 73 29 3b 65 26 26 28 63 2e 61 74 74 72 69 62 75 74 69 6f 6e 3d 7b 6b 63 61 3a 6d 77 28 65 2e 6e 6f 64 65 29 2c 6c 63 61 3a 64 2e 73 74 61 72 74 54 69 6d 65 2c 6d 63 61 3a 64 2e 76 61 6c 75 65 2c 56 6d 61 3a 65 2c 55 6d 61 3a 64 2c 6e 4a 3a 6c 77 28 64 2e 73 74 61 72 74 54 69 6d 65 29 7d 29 7d 7d 65 6c 73 65 20 63 2e 61 74 74 72 69 62 75 74 69 6f 6e 3d 7b 7d 3b 61 28 63 29 7d 2c 62 29 7d 3b 76 61 72 20 56 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4f 45 61 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 63 2e 65 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 64 3d 6b 77 28 29 2c 65 3d 63 2e 65 6e 74 72 69 65 73 5b 63 2e 65 6e 74 72 69 65 73 2e 6c 65 6e Data Ascii: es.length){var e=TEa(d.sources);e&&(c.attribution={kca:mw(e.node),lca:d.startTime,mca:d.value,Vma:e,Uma:d,nJ:lw(d.startTime)})}}else c.attribution={};a(c)},b)};var VEa=function(a,b){OEa(function(c){if(c.entries.length){var d=kw(),e=c.entries[c.entries.len
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 2e 57 4e 26 26 28 65 2e 76 61 6c 75 65 3d 71 2e 70 72 6f 63 65 73 73 69 6e 67 53 74 61 72 74 2d 71 2e 73 74 61 72 74 54 69 6d 65 2c 65 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 71 29 2c 70 28 21 30 29 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 71 29 7b 71 2e 66 6f 72 45 61 63 68 28 66 29 7d 2c 6c 3d 72 77 28 22 66 69 72 73 74 2d 69 6e 70 75 74 22 2c 67 29 3b 76 61 72 20 70 3d 6f 77 28 61 2c 65 2c 63 2c 62 2e 47 70 29 3b 6c 26 26 73 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 6c 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 3b 6c 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 7d 2c 21 30 29 3b 6c 26 26 6e 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 71 77 28 22 46 49 44 22 29 3b 70 3d 6f 77 28 61 2c 65 2c 63 2c 62 2e 47 70 29 3b 77 77 3d 5b 5d 3b 76 77 3d 2d 31 3b Data Ascii: .WN&&(e.value=q.processingStart-q.startTime,e.entries.push(q),p(!0))},g=function(q){q.forEach(f)},l=rw("first-input",g);var p=ow(a,e,c,b.Gp);l&&sw(function(){g(l.takeRecords());l.disconnect()},!0);l&&nw(function(){e=qw("FID");p=ow(a,e,c,b.Gp);ww=[];vw=-1;
2024-08-06 12:27:05 UTC	1390	IN	Data Raw: 7c 6a 46 61 28 70 29 29 7d 29 3b 28 6c 3d 41 77 5b 4d 61 74 68 2e 6d 69 6e 28 41 77 2e 6c 65 6e 67 74 68 2d 31 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 28 7a 77 3f 79 77 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 7c 7c 30 29 2d 68 46 61 29 2f 35 30 29 29 5d 29 26 26 6c 2e 6c 61 74 65 6e 63 79 21 3d 3d 64 2e 76 61 6c 75 65 26 26 28 64 2e 76 61 6c 75 65 3d 6c 2e 6c 61 74 65 6e 63 79 2c 64 2e 65 6e 74 72 69 65 73 3d 6c 2e 65 6e 74 72 69 65 73 2c 67 28 29 29 7d 2c 66 3d 72 77 28 22 65 76 65 6e 74 22 2c 65 2c 7b 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 3a 62 2e 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 7c 7c 34 30 7d 29 3b 76 61 72 20 67 3d 6f 77 28 61 2c 64 2c 63 2c 62 2e 47 70 29 3b 66 26 26 28 66 Data Ascii: \|jFa(p))});(l=Aw[Math.min(Aw.length-1,Math.floor(((zw?yw:performance.interactionCount\|\|0)-hFa)/50))])&&l.latency!==d.value&&(d.value=l.latency,d.entries=l.entries,g())},f=rw("event",e,{durationThreshold:b.durationThreshold\|\|40});var g=ow(a,d,c,b.Gp);f&&(f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49867	142.250.185.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:06 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:06 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:27:06 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49868	142.250.185.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:06 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:06 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:27:06 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49870	142.250.185.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:07 UTC	1124	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 519 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:07 UTC	519	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 32 39 34 37 32 32 34 35 38 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1722947224585",null,null,n
2024-08-06 12:27:07 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg; expires=Wed, 05-Feb-2025 12:27:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:27:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 06 Aug 2024 12:27:07 GMT Connection: close Transfer-Encoding: chunked
2024-08-06 12:27:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-08-06 12:27:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49871	142.250.185.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:07 UTC	1124	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 519 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:07 UTC	519	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 32 39 34 37 32 32 34 36 39 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1722947224694",null,null,n
2024-08-06 12:27:07 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=516=BmlZX8Qqip9FxFr5jzBeAIXN3PKk98YnBAOrZwGWISLXIS76biQZ9gdg1eZ944MEU1wHdS3a5ULNLiQ6Y9P4aAsdgKj7FB4Iv3hteCJ-p9lokLiyLX0a3U4d-RK2omSHm0U2MQT5Qfl0PllzJLeCGiHO6IhUiIfp8-YVDaS6jyU; expires=Wed, 05-Feb-2025 12:27:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:27:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 06 Aug 2024 12:27:07 GMT Connection: close Transfer-Encoding: chunked
2024-08-06 12:27:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-08-06 12:27:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49874	64.233.166.84	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:07 UTC	656	OUT	GET /v3/signin/_/AccountsSignInUi/browserinfo?f.sid=-5071007541911337629&bl=boq_identityfrontendauthuiserver_20240730.06_p0&hl=en-US&_reqid=30426&rt=j HTTP/1.1 Host: accounts.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __Host-GAPS=1:L6JPAWLWp13dnh_s7i1byLDIbkoQcA:D64pAitZxUk4Q2tO
2024-08-06 12:27:08 UTC	1298	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 06 Aug 2024 12:27:07 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="AccountsSignInUi" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-06 12:27:08 UTC	92	IN	Data Raw: 38 31 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 38 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 38 2c 22 33 30 33 30 32 36 37 Data Ascii: 81)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",8],["af.httprm",8,"3030267
2024-08-06 12:27:08 UTC	43	IN	Data Raw: 35 35 31 31 33 39 35 39 34 32 34 31 22 2c 38 32 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 32 39 5d 5d 5d 0d 0a Data Ascii: 551139594241",82],["e",4,null,null,129]]]
2024-08-06 12:27:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49875	142.250.185.163	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:08 UTC	1918	OUT	GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.lGp-sKauHKY.es5.O/ck=boq-identity.AccountsSignInUi.2Iy6YXWq2M0.L.B1.O/am=hD4Yg9E2gEA8nAM9oCgQMgAAAAAAAAAAYAMAgJgB/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,WpP9Yc,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,cYShmd,eS2ylb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlE-vPkdvT6bN43bDXpvEzJ6YS3mCA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;J [TRUNCATED] Host: www.gstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-06 12:27:08 UTC	944	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers" Report-To: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]} Content-Length: 3472 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 05 Aug 2024 19:51:17 GMT Expires: Tue, 05 Aug 2025 19:51:17 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 30 Jul 2024 22:51:20 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 59751 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:08 UTC	446	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 6b 28 22 57 74 36 76 6a 66 22 29 3b 0a 76 61 72 20 7a 75 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 70 65 28 29 3b 72 65 74 75 72 6e 20 5f 2e 48 69 28 61 2c 31 29 7d 2c 4f 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 45 61 3d 5f 2e 75 28 61 2c 30 2c 4f 71 2e 6d 65 73 73 61 67 65 49 64 29 7d 3b 5f 2e 42 28 4f 71 2c 5f 2e 77 29 3b 4f 71 2e 70 72 6f 74 6f 74 79 70 65 2e 49 61 3d 66 75 6e 63 Data Ascii: "use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;try{_.k("Wt6vjf");var zua=function(){var a=_.pe();return _.Hi(a,1)},Oq=function(a){this.Ea=_.u(a,0,Oq.messageId)};_.B(Oq,_.w);Oq.prototype.Ia=func
2024-08-06 12:27:08 UTC	1390	IN	Data Raw: 69 73 29 3b 5f 2e 4e 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 63 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 52 71 2e 70 72 6f 74 6f 74 79 70 65 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 42 75 61 28 74 68 69 73 29 3b 69 66 28 74 68 69 73 2e 7a 41 29 72 65 74 75 72 6e 20 43 75 61 28 74 68 69 73 29 2c 21 31 3b 69 66 28 21 74 68 69 73 2e 5a 52 29 72 65 74 75 72 6e 20 53 71 28 74 68 69 73 29 2c 21 30 3b 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 70 22 29 3b 69 66 28 21 74 68 69 73 2e 73 4c 29 72 65 74 75 72 6e 20 53 71 28 74 68 69 73 29 2c 21 30 3b 74 68 69 73 2e 72 4a 3f 28 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 72 22 29 2c 53 71 28 74 68 69 73 29 29 3a 43 75 61 28 74 68 69 73 29 3b 72 65 74 75 72 6e 21 31 7d 3b 0a 76 61 72 Data Ascii: is);_.Nk.prototype.Zc.call(this)};Rq.prototype.aa=function(){Bua(this);if(this.zA)return Cua(this),!1;if(!this.ZR)return Sq(this),!0;this.dispatchEvent("p");if(!this.sL)return Sq(this),!0;this.rJ?(this.dispatchEvent("r"),Sq(this)):Cua(this);return!1};var
2024-08-06 12:27:08 UTC	1390	IN	Data Raw: 48 3d 30 3b 5f 2e 68 2e 73 4b 3d 30 3b 5f 2e 68 2e 6f 48 3d 6e 75 6c 6c 3b 5f 2e 68 2e 72 4a 3d 21 31 3b 5f 2e 68 2e 5a 52 3d 21 31 3b 5f 2e 68 2e 72 4d 3d 6e 75 6c 6c 3b 0a 5f 2e 68 2e 54 30 3d 22 2f 5f 2f 69 64 76 2f 22 3b 5f 2e 68 2e 73 4c 3d 22 22 3b 5f 2e 68 2e 54 50 3d 21 31 3b 5f 2e 68 2e 7a 41 3d 21 31 3b 5f 2e 74 65 28 5f 2e 49 6b 61 2c 52 71 29 3b 5f 2e 53 61 28 29 2e 7a 69 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 52 71 3b 5f 2e 6c 6e 28 61 2c 5f 2e 49 6b 61 2c 62 29 3b 69 66 28 7a 75 61 28 29 29 7b 61 3d 7a 75 61 28 29 3b 76 61 72 20 63 3d 5f 2e 6d 65 28 22 57 5a 73 5a 31 65 22 29 2e 73 74 72 69 6e 67 28 6e 75 6c 6c 29 3b 62 2e 73 4c 3d 61 3b 63 21 3d 3d 76 6f 69 64 20 30 26 26 28 62 2e 6f 48 3d 63 29 3b 61 3d 5f 2e Data Ascii: H=0;_.h.sK=0;_.h.oH=null;_.h.rJ=!1;_.h.ZR=!1;_.h.rM=null;_.h.T0="/_/idv/";_.h.sL="";_.h.TP=!1;_.h.zA=!1;_.te(_.Ika,Rq);_.Sa().zi(function(a){var b=new Rq;_.ln(a,_.Ika,b);if(zua()){a=zua();var c=_.me("WZsZ1e").string(null);b.sL=a;c!==void 0&&(b.oH=c);a=_.
2024-08-06 12:27:08 UTC	246	IN	Data Raw: 69 6e 3a 76 6f 69 64 20 30 2c 73 65 63 75 72 65 3a 74 68 69 73 2e 61 61 2e 67 65 74 28 29 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3d 3d 3d 22 68 74 74 70 73 3a 22 7d 29 7d 7d 3b 5f 2e 42 28 45 77 2c 5f 2e 4a 29 3b 45 77 2e 4d 61 3d 5f 2e 4a 2e 4d 61 3b 45 77 2e 42 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 44 61 3a 7b 77 69 6e 64 6f 77 3a 5f 2e 6a 72 7d 7d 7d 3b 5f 2e 67 72 28 5f 2e 78 6f 61 2c 45 77 29 3b 0a 5f 2e 6d 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 53 69 67 6e 49 6e 55 69 29 3b 0a 2f 2f 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a Data Ascii: in:void 0,secure:this.aa.get().location.protocol==="https:"})}};_.B(Ew,_.J);Ew.Ma=_.J.Ma;Ew.Ba=function(){return{Da:{window:_.jr}}};_.gr(_.xoa,Ew);_.m();}catch(e){_._DumpException(e)}}).call(this,this.default_AccountsSignInUi);// Google Inc.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49876	216.58.212.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:08 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
2024-08-06 12:27:08 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 06 Aug 2024 12:27:08 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:08 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-08-06 12:27:08 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49877	142.250.185.132	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:08 UTC	1206	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
2024-08-06 12:27:08 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 06 Aug 2024 11:15:23 GMT Expires: Wed, 14 Aug 2024 11:15:23 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 4305 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:08 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-08-06 12:27:08 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-08-06 12:27:08 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-08-06 12:27:08 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-08-06 12:27:08 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49878	216.58.212.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:09 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
2024-08-06 12:27:09 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 06 Aug 2024 12:27:09 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:09 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-08-06 12:27:09 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49879	142.250.185.228	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:09 UTC	635	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
2024-08-06 12:27:09 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 06 Aug 2024 11:15:23 GMT Expires: Wed, 14 Aug 2024 11:15:23 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 4306 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:09 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-08-06 12:27:09 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-08-06 12:27:09 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-08-06 12:27:09 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-08-06 12:27:09 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49880	142.250.185.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:13 UTC	1290	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 936 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=Zpm9vsgEMqs_fBzR_Ssfsh-7QXRHnjpv6X5KL42_GOLTXMKQwMzNub9CN3HZHQleCsgiUsDvWJRffKxmSmnWCyZokP4FSg3wvDuTtW4ZCcbNjmj7E8BrZWHfQoxW281GnODluJA-G9p7R5bC-qlnKqhv1EvvxHPVOjZmDtdl7Rg
2024-08-06 12:27:13 UTC	936	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 32 32 39 34 37 32 32 32 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1722947222000",null,null,nu
2024-08-06 12:27:14 UTC	930	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL; expires=Wed, 05-Feb-2025 12:27:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:27:14 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 06 Aug 2024 12:27:14 GMT Connection: close Transfer-Encoding: chunked
2024-08-06 12:27:14 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-08-06 12:27:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49881	216.58.212.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:14 UTC	669	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:27:15 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 06 Aug 2024 12:27:15 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:15 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-08-06 12:27:15 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49882	142.250.181.238	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:20 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=0000000000000000000000000000000000000000183391115D HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-08-06 12:27:20 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-1pScT5AyCCdhuzCeKYGswQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-Hbg2luLAp0c4a_LhC8rFJA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Tue, 06 Aug 2024 12:27:20 GMT Expires: Tue, 06 Aug 2024 12:27:20 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:20 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 31 32 32 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 31 32 32 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 31 32 32 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 31 32 32 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 31 32 32 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 31 32 32 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 31 62 64 32 66 37 64 66 0a Data Ascii: rlzC1: 1C1ONGR_enUS1122rlzC2: 1C2ONGR_enUS1122rlzC7: 1C7ONGR_enUS1122dcc: set_dcc: C1:1C1ONGR_enUS1122,C2:1C2ONGR_enUS1122,C7:1C7ONGR_enUS1122events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: 1bd2f7df

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49883	142.250.185.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:36 UTC	1318	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 981 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:27:36 UTC	981	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 32 39 34 37 32 35 35 30 33 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1722947255035",null,null,n
2024-08-06 12:27:36 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:27:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-06 12:27:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-08-06 12:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49884	142.250.185.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:36 UTC	1318	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 869 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:27:36 UTC	869	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 32 39 34 37 32 35 35 30 35 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1722947255050",null,null,n
2024-08-06 12:27:36 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:27:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-06 12:27:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-08-06 12:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49885	142.250.185.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:37 UTC	1279	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1046 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:27:37 UTC	1046	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 37 33 30 2e 30 36 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_identityfrontendauthuiserver_20240730.06_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,
2024-08-06 12:27:37 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:27:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-06 12:27:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-08-06 12:27:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49886	216.58.212.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:37 UTC	669	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:27:38 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 06 Aug 2024 12:27:38 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:38 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-08-06 12:27:38 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49887	216.58.212.142	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:38 UTC	669	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:27:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 06 Aug 2024 12:27:39 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:27:39 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-08-06 12:27:39 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49888	3.210.249.249	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:53 UTC	785	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=GZzjAsUbq0MgfyIllehHMsoRGi6sPyneGfVeTZAfTJoN85qbjuMJHOPXFio08NdNUpBNaGW9zb+QhgZhMLiqTrDSLYyxQt0stMeTdg6XFmQyh5F35LhCjaioFjQ0; AWSALBCORS=IlSkY9aS6qoeTu0wBc+lUM7cyCGMB0n7jS9jUEVRFZlC4Gk54ORWA1WX9ryvXhu0N2OlC6fubjFsOT7195TGlTzpvlXQRxKKUIeFgySX1GtdFWKDEhXZAuddpGGl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49890	3.210.249.249	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:27:55 UTC	781	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/YDK.X9b9PBPTkTR.CUBW-8LH66IpS9kksNvV5LWKVQ0dSM8ppLMlw1sCLfjzpFBKALnBgyOPBdyuVOlNPeHkoffMRBu3H-pe9A!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=GZzjAsUbq0MgfyIllehHMsoRGi6sPyneGfVeTZAfTJoN85qbjuMJHOPXFio08NdNUpBNaGW9zb+QhgZhMLiqTrDSLYyxQt0stMeTdg6XFmQyh5F35LhCjaioFjQ0; AWSALBCORS=rkS9/dHfQoAtIm6kh+5VN1IwH6x4FJHKvnBTo6/VxLxWUPcRyWcS0JVntj/2svRJu7a5e4/S9vZUyf+FMmco8w0Te8CgFBesovKBuZD/6l7Pl6w1thwz7tyRp6vd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49892	142.250.110.84	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:28:08 UTC	879	OUT	GET /v3/signin/_/AccountsSignInUi/browserinfo?f.sid=-5071007541911337629&bl=boq_identityfrontendauthuiserver_20240730.06_p0&hl=en-US&_reqid=130426&rt=j HTTP/1.1 Host: accounts.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __Host-GAPS=1:L6JPAWLWp13dnh_s7i1byLDIbkoQcA:D64pAitZxUk4Q2tO; OTZ=7677387_72_76_104100_72_446760; NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:28:08 UTC	1298	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 06 Aug 2024 12:28:08 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Report-To: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]} Content-Security-Policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="AccountsSignInUi" Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-06 12:28:08 UTC	92	IN	Data Raw: 38 30 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 38 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 38 2c 22 32 36 36 37 32 38 38 Data Ascii: 80)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",8],["af.httprm",8,"2667288
2024-08-06 12:28:08 UTC	42	IN	Data Raw: 32 30 35 30 37 37 32 35 33 38 38 22 2c 38 32 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 32 38 5d 5d 5d 0d 0a Data Ascii: 20507725388",82],["e",4,null,null,128]]]
2024-08-06 12:28:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49893	142.250.185.78	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:28:15 UTC	1318	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 533 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:28:15 UTC	533	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 32 39 34 37 32 39 34 30 32 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1722947294024",null,null,n
2024-08-06 12:28:15 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:28:15 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-06 12:28:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-08-06 12:28:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49894	172.217.18.110	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:28:16 UTC	669	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:28:16 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 06 Aug 2024 12:28:16 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:28:16 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-08-06 12:28:16 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49896	142.250.185.78	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:28:57 UTC	1318	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:28:57 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 32 39 34 37 33 33 35 39 31 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1722947335914",null,null,n
2024-08-06 12:28:57 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 06 Aug 2024 12:28:57 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-06 12:28:57 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-08-06 12:28:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49897	172.217.18.110	443	5568	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-06 12:28:58 UTC	669	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=516=aqKPlhqV6XKoDSq0n5LhzZf8yKprLYUS6C8hwNbb4KOZw65UqsqGU9j_PHubE07kuB1zRhAZj-GA8F0eTTw2faUIrgKh3tVq09cvKzZkCbAAmrxeQ3U296Q0n77Ar34D1_YBDZKh9wUP8Ph3VoV9EGKnSL_qZfBwNeOcnQ7PX8OiBYVL
2024-08-06 12:28:59 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 06 Aug 2024 12:28:58 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-06 12:28:59 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-08-06 12:28:59 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Target ID:	0
Start time:	08:25:46
Start date:	06/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20240805T101719.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:25:48
Start date:	06/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	08:27:04
Start date:	06/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4952 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	08:27:04
Start date:	06/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6236 --field-trial-handle=1976,i,8845947080949378445,3890463501634841993,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report securedoc_20240805T101719.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service\Files\c0a292e3-7820-4f51-a9bc-1e3ef2e5b52d (copy)

C:\Users\user\Downloads\c5ce9268-a8ea-4996-8e89-a1a8b76f63cb.tmp

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Windows Analysis Report
securedoc_20240805T101719.html