Edit tour

Windows Analysis Report
securedoc_20241209T071703.html

Overview

General Information

Sample name:	securedoc_20241209T071703.html
Analysis ID:	1571689
MD5:	a1a267bc6ca80b136bfc200841eebecb
SHA1:	56ec4d0d6124416237e81a1df76a1bd00af5dcf1
SHA256:	5da0e8cfcc982e287d25aad58f374b0513d778e25320a5a2fafd8d7425e5ccbd
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML document with suspicious title

HTML file submission containing password form

Suspicious Javascript code found in HTML file

Detected hidden input values containing email addresses (often used in phishing pages)

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Submit button contains javascript call

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241209T071703.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1620 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1836,i,12948313699533765524,5541752893857998931,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html

Joe Sandbox AI: Score: 10 Reasons: HTML file with login form DOM: 1.0.pages.csv

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html

Tab title: Secure Registered Envelope: KEY123 ELAVON: Sales Automation Tool login credentials

Suspicious Javascript code found in HTML file

Source: securedoc_20241209T071703.html	HTTP Parser: document.write
Source: securedoc_20241209T071703.html	HTTP Parser: location.href
Source: securedoc_20241209T071703.html	HTTP Parser: .location
Source: securedoc_20241209T071703.html	HTTP Parser: .location

Source: securedoc_20241209T071703.html	HTTP Parser: "Cox, Dylan W" <Dylan.Cox@elavon.com>
Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	HTTP Parser: {'name':null,'msgID':'\|1__022ea7ce00000193ab5a02e70a67814293085d0d@vmamnaj9c01dtt.servers.global.prv','flags':3073,'rid':'ImJyaWFuLmN1bW1pbmdzQGViaXpjaGFyZ2UuY29tIiA8YnJpYW4uY3VtbWluZ3NAZWJpemNoYXJnZS5jb20+','algnames':{'encryption':{'data':'AES'},'keyHash':'SHA-256'},'algparams':{'encryption':{'data':{'IV':'YO1d/DYKlTgiwTcGN/2+Tw=='}}},'keyserverhost':'res.cisco.com:443','securereplyhost':'res.cisco.com:443','openerhost':'res.cisco.com:443','toc':[['Body-1733746623211.txt',1,'','',3,[0,4946],'Body-1733746623211.txt','ISO-8859-1'],['MessageBar.html',4,'','',1,[4946,32418],'MessageBar.html','ISO-8859-1']],'salt':'l9o5D2AuIS/1bGsLngZ0GQNpn2A=','data':['','','']}
Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	HTTP Parser: brian.cummings@ebizcharge.com

Source: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: securedoc_20241209T071703.html

HTTP Parser: Base64 decoded: Zeppelin rules!

Source: securedoc_20241209T071703.html	HTTP Parser: Title: Secure Registered Envelope:KEY123 ELAVON: Sales Automation Tool login credentials does not match URL
Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	HTTP Parser: Title: Secure Registered Envelope:KEY123 ELAVON: Sales Automation Tool login credentials does not match URL
Source: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en	HTTP Parser: Title: New User Registration does not match URL

Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html

HTTP Parser: On click: ph()

Source: securedoc_20241209T071703.html	HTTP Parser: <input type="password" .../> found
Source: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en	HTTP Parser: <input type="password" .../> found

Source: securedoc_20241209T071703.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	HTTP Parser: No favicon
Source: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en	HTTP Parser: No favicon

Source: securedoc_20241209T071703.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	HTTP Parser: No <meta name="author".. found
Source: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en	HTTP Parser: No <meta name="author".. found

Source: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49903 version: TLS 1.0

Source: global traffic

HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt%2Eservers%2Eglobal%2Eprv%27,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImJyaWFuLmN1bW1pbmdzQGViaXpjaGFyZ2UuY29tIiA8YnJpYW4uY3VtbWluZ3NAZWJpemNoYXJnZS5jb20%2B%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D,%27keyHash%27%3A%27SHA-256%27%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27YO1d%2FDYKlTgiwTcGN%2F2%2BTw%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1733746623211%2Etxt%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A3,%5B0,4946%5D,%27Body-1733746623211%2Etxt%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B4946,32418%5D,%27MessageBar%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%27l9o5D2AuIS%2F1bGsLngZ0GQNpn2A%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27KVMG6gmi0LZWbA0DkFidCvkZ9sxpXvama1pAgkXAh0DeZzDLAsnteICIGQb%2FaxxNeCvs80EHJsEUO1OgGjrCZVUqwL3M81Y4Yh1%2FMDhT4Yo2uIJlVBxbqBGGZJWGMNnA0pXPiumdPzmHsnmBUhcx4yoGczZBYFhO2NIUU%2BSd8z7QoVr0AzB23jNW7fR68W8Gz5mDVeCervi80SFzNiFt0JMbDYquB642zdDeFBQf%2BDf6SjiyeE4GPbuCFzNXGu4xcErBtR91sNcRtyt8NP1gk%2B9g6GskpEwoVgSspoq4ykJHPr80V%2FFtxAPQwsB9YkcwTBvT2cuHltr%2BCOJOpIKahuvP9Fa0HLAjYm1UQrTX%2BTD2f8XQ7OeAGfpC%2FJ6BPcaE0cW4SdjZER%2FbziqMnH%2FtTNO5U4JTQ6owVuG7q2d2daomnq5LXeEESFdAiR3Vw0aTpO9qWN7LX9bkxMUNvKRRHKztn3YQ0GFGc9XhGYaf7tOVbuDLb7Sk%2F%2F7H7ftVffy%2Fx%2F4XW50TY%2FlYqz8DrdNoDN3QntzjGFISEzXwaNIlgUtCBwyiT%2BtqpKk%2BlHOf%2BHLsTrzbz1%2Bnqy2IMAcaMM5Srqtvl3vno%2B%2FOHEa8lA9hP2gG1eifX0ylFc6Ite6z%2F%2BF3bR9nNw8q1utNtnfFXCxpsVmgCxbyKNJERbtTMdBurVhODrIA4s4jtbUyeSTVoKiBLKmTSHjBkaqXeScseVmgrZJX520eQlFLmacG1mds7BHXVTjoSe62MfTg8oaZea0JEtzim5sXRAbtUteR%2Bg2RwU5Y%2FH%2BbB2bQoUDAYndfXwavVvvs2NXh%2FE7AIxPYzfh72lHB6ayUftH6iUre97SM1zc4fykRlThrexLWKXK%2BrQMrMerVtQVSgSFrSKfKch5qlLLF8whDeoFtD2xPYYt49Muei1Qcvzls1KZEQkbarxpr8JwTCmnaHx1o9HGuNiTfFo1PKUJjzA4llyxWtmA5MX9CnnTyJzw0tJBzT%2BwwBvm55zDrksDIyKUGOxx6FvcgOVJ%2FAInWRm%2Fz%2FIgIzRGDgnKnMOEsCka9mXwQmSJmcexjVIrRXGPsx0E4oxBrXNZaGUeENLjwMWfoX7dfEGgXvgqPjAjLcwTnBXaGfJZ9iFBJ5sResCSiOBbGARvm0Z9Mel9lpfzKuiqJ3RmuDTys7z37sb2y5pyGxeL4R87LqgkYoYrBnklepuqOl6jO8bIreo%2FEDXrPfu0QeVinmgARvrdsjOBlnR%2F97J%2BUSh6g021I%2FmPAtA69TJuGHBiu1LWjzpelzxT1F%2FEgGhgSsPtBXjjK9tE%2F803%2Bn4Hi%2FakH%2BYnOAd8vz58Ksp8aF1lV0O1kmRhBByoYZ2xcMWaTUA%2BKhg62RMZi903d%2Fr6fE9hMoqB%2Fm2nHPAE8XdT%2FKrriSSosSgzX6XJFFhGofWqsKLAx9eHxEaC%2FDg5PkhCbQwL54XB9OeMdMIBsLShRaJOYt3nFkKUDIUIHzk%2BD1h1Wsk3SCPeeXXo8KoXBx%2BpYvquOq13YoO7Z5MPaMVmgGPyBapBtnC58Kv6thd%2BmQKS4L2XevVFvP2u3RJ9APd6RYIWssfJpR%2F2IAe04wZT7RncKPGyKIVO6dCZEvySMCClZJzZmFHoHjyWDa%2Bs2uax9%2Bu6MUZNNUDujteG%

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207
Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 1138de370e523e824bbca92d049a3777

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49903 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /postx.css HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/logo/LTk2lS4u7RqcSCZrxmQJ9zr2DY9UroP8JVH6F0CPERii05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
Source: global traffic	HTTP traffic detected: GET /websafe/logo/LTk2lS4u7RqcSCZrxmQJ9zr2DY9UroP8JVH6F0CPERii05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=brian.cummings%40ebizcharge.com&df=&tf=&lp=en&v=2&m=%7c1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt.servers.global.prv&s=1&f=0&d=1733757391016&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=HJhhEm14DkGevsHHvzFq+gzbySJx4CluXKQ+zTFGEGlTACUcMdD1S2h//85iWTeoYln5BygO4ozq+HrshawffLAT4pSpYiIMpFM0s9EMwqIS35dlh/W8zGvT7ZAG
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; AWSALB=SL5pyR09m4Kz4fFKFe/h7awybpYhl2L2juYqBL/l+a6XCG6NYjK4eztBxKpw8NaDCWwQn9CJAKnNfEYRPGVSMOi9wEBvL6k5o+F1H4V6RSKwidWQ1kiWbpsZYlE+; AWSALBCORS=HJhhEm14DkGevsHHvzFq+gzbySJx4CluXKQ+zTFGEGlTACUcMdD1S2h//85iWTeoYln5BygO4ozq+HrshawffLAT4pSpYiIMpFM0s9EMwqIS35dlh/W8zGvT7ZAG
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Light.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=oh9LVNR9ucQpArZdSUBX7WQoWp3W+SveOd43EyETKU+b8xNr3cfEVyK77DVzoeN69DOcv51m6q+vKt1AdA+yGJzeUwd+qcJvjL4J0V/vRGL8JXwjxYN9yEnwkbR7
Source: global traffic	HTTP traffic detected: GET /keyserver/keyserver?su=brian.cummings%40ebizcharge.com&df=&tf=&lp=en&v=2&m=%7c1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt.servers.global.prv&s=1&f=0&d=1733757391016&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=mettDyv3/kJ5l7HQjdgDpK7YTn8qJ0riTHt0Eu0bnyHl5WYfgD+8BFRB7fp2I6K5m/b4UG6ERRrGcyS4PKanTrRKxLyi6lNfU2rQsmcN2W7GEeXoS14493vSp6l9; AWSALBCORS=oh9LVNR9ucQpArZdSUBX7WQoWp3W+SveOd43EyETKU+b8xNr3cfEVyK77DVzoeN69DOcv51m6q+vKt1AdA+yGJzeUwd+qcJvjL4J0V/vRGL8JXwjxYN9yEnwkbR7
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; AWSALB=mettDyv3/kJ5l7HQjdgDpK7YTn8qJ0riTHt0Eu0bnyHl5WYfgD+8BFRB7fp2I6K5m/b4UG6ERRrGcyS4PKanTrRKxLyi6lNfU2rQsmcN2W7GEeXoS14493vSp6l9; AWSALBCORS=0jBHMMQ1Tv4hXQNlp8XYbNaMWrhMJVZsKgO1nsP+Fii0fnbs4+vOS2OvgsrueG5Ru8gdB+f0GI9NaMrKnchhl+mDx+XhEEqw63SPXDnHSJDuvWiZIv8dCLqRXbNi
Source: global traffic	HTTP traffic detected: GET /websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; AWSALB=5CyJxn8EnRdBQpowzFxqlSO7RkYGGUR3ibq4phfJxGDJwiKUp1p5k3BlnFiKSeEzmuE0u7+QktoODCENJEUskwmyjeozkau99shPkIq1LsEFsavFGV8b5irO4YUj; AWSALBCORS=5CyJxn8EnRdBQpowzFxqlSO7RkYGGUR3ibq4phfJxGDJwiKUp1p5k3BlnFiKSeEzmuE0u7+QktoODCENJEUskwmyjeozkau99shPkIq1LsEFsavFGV8b5irO4YUj
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/postx.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/overrides.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/postx-registration.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
Source: global traffic	HTTP traffic detected: GET /admin/cisco-fonts.min.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
Source: global traffic	HTTP traffic detected: GET /websafe/templates/standard-scripts.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
Source: global traffic	HTTP traffic detected: GET /websafe/templates/screen-reader.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=qOOB6mxmSGECKq2rafced9MwAiibX7oHf3+5Mn/M+m8/DbGqAo2J0E10Ekw1jFFIT0eTFbayXABooXyy+GKVOX223rSFsuWKYDHB7/R6L09hGaKxXloboeM0utLa
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=VOFqE3O50+H3/XSRxrs7McgH/xtYNO3SPOE6O8/I5WjXZyBMGjOqBXf/0Cbfd7aX8goqjQTqP+T4hLZELYTUni/TOrRdgjckGYjtRUJduZFBVseSUw2R8vi7EvEU
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/templates/screen-reader.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/Help.svg HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
Source: global traffic	HTTP traffic detected: GET /websafe/templates/jquery-3.7.1.min.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
Source: global traffic	HTTP traffic detected: GET /websafe/templates/standard-scripts.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=yf2DMJYnMfWs5kp2KQAAlqsn0ERytaneZuazoSelD6ijxJyO+nzMhGyZiID7HyvbudfKwG1VdJc8s1Hbrm6DmT0RHLjdLHFsMWA8Rz7rgOo/5EgoIkNTlTZamrEd; AWSALBCORS=yf2DMJYnMfWs5kp2KQAAlqsn0ERytaneZuazoSelD6ijxJyO+nzMhGyZiID7HyvbudfKwG1VdJc8s1Hbrm6DmT0RHLjdLHFsMWA8Rz7rgOo/5EgoIkNTlTZamrEd
Source: global traffic	HTTP traffic detected: GET /websafe/images/pullFeature/Help.svg HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve; AWSALBCORS=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve
Source: global traffic	HTTP traffic detected: GET /websafe/templates/jquery-3.7.1.min.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve; AWSALBCORS=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve
Source: global traffic	HTTP traffic detected: GET /admin/fonts/SharpSans/SharpSans-Bold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY; AWSALBCORS=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-SemiBold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY; AWSALBCORS=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=ic1Og2s4jbk9DIMfceRCmVhCClU2XEDIYjZXB5gYRmQ0ZeorwBs5kBlqjcVCHaAUx8l4SkTJC+x94Rc3YMlRlIrLp61wOnaQeJ4w2w9xm8iRfUMso730i/66+woY; AWSALBCORS=ic1Og2s4jbk9DIMfceRCmVhCClU2XEDIYjZXB5gYRmQ0ZeorwBs5kBlqjcVCHaAUx8l4SkTJC+x94Rc3YMlRlIrLp61wOnaQeJ4w2w9xm8iRfUMso730i/66+woY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=W9GtwmoyPdYAVqkmqIHhbnUBS6xy7xLf+rWdnGHKg97njbhzpe8/JzxyEClfn3EQWVbdfYaKvs7dHbVaJeyUuITpMLxLAkaPQIvHAT0I/cZzlAuudiSHPQGNsY9u; AWSALBCORS=W9GtwmoyPdYAVqkmqIHhbnUBS6xy7xLf+rWdnGHKg97njbhzpe8/JzxyEClfn3EQWVbdfYaKvs7dHbVaJeyUuITpMLxLAkaPQIvHAT0I/cZzlAuudiSHPQGNsY9u
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Mzve+mETWspS7MNq1Z0Ju3SL78+TjaEy9SMoBXA+zvrkO9WLSZbrmGnmEZJwZE+L0TosLHsfsgCVds4irfhjGD0ttD6tPasYMYjWP5csCZIBkTlHFisZS0h+DTUu; AWSALBCORS=J+3t8QR8eRM7Nh9EdBVofBSXUmAaa7Fx9TMbTugz1OPni7+m4clPeyiljhd5arLwmWxw4MUs/kb7pDXjiAfCNZ/TxyO4cgnVJLOBwBBWRlXrepNMfLKFVMWVF1k/
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Mzve+mETWspS7MNq1Z0Ju3SL78+TjaEy9SMoBXA+zvrkO9WLSZbrmGnmEZJwZE+L0TosLHsfsgCVds4irfhjGD0ttD6tPasYMYjWP5csCZIBkTlHFisZS0h+DTUu; AWSALBCORS=J+3t8QR8eRM7Nh9EdBVofBSXUmAaa7Fx9TMbTugz1OPni7+m4clPeyiljhd5arLwmWxw4MUs/kb7pDXjiAfCNZ/TxyO4cgnVJLOBwBBWRlXrepNMfLKFVMWVF1k/
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt%2Eservers%2Eglobal%2Eprv%27,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImJyaWFuLmN1bW1pbmdzQGViaXpjaGFyZ2UuY29tIiA8YnJpYW4uY3VtbWluZ3NAZWJpemNoYXJnZS5jb20%2B%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D,%27keyHash%27%3A%27SHA-256%27%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27YO1d%2FDYKlTgiwTcGN%2F2%2BTw%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1733746623211%2Etxt%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A3,%5B0,4946%5D,%27Body-1733746623211%2Etxt%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B4946,32418%5D,%27MessageBar%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%27l9o5D2AuIS%2F1bGsLngZ0GQNpn2A%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27KVMG6gmi0LZWbA0DkFidCvkZ9sxpXvama1pAgkXAh0DeZzDLAsnteICIGQb%2FaxxNeCvs80EHJsEUO1OgGjrCZVUqwL3M81Y4Yh1%2FMDhT4Yo2uIJlVBxbqBGGZJWGMNnA0pXPiumdPzmHsnmBUhcx4yoGczZBYFhO2NIUU%2BSd8z7QoVr0AzB23jNW7fR68W8Gz5mDVeCervi80SFzNiFt0JMbDYquB642zdDeFBQf%2BDf6SjiyeE4GPbuCFzNXGu4xcErBtR91sNcRtyt8NP1gk%2B9g6GskpEwoVgSspoq4ykJHPr80V%2FFtxAPQwsB9YkcwTBvT2cuHltr%2BCOJOpIKahuvP9Fa0HLAjYm1UQrTX%2BTD2f8XQ7OeAGfpC%2FJ6BPcaE0cW4SdjZER%2FbziqMnH%2FtTNO5U4JTQ6owVuG7q2d2daomnq5LXeEESFdAiR3Vw0aTpO9qWN7LX9bkxMUNvKRRHKztn3YQ0GFGc9XhGYaf7tOVbuDLb7Sk%2F%2F7H7ftVffy%2Fx%2F4XW50TY%2FlYqz8DrdNoDN3QntzjGFISEzXwaNIlgUtCBwyiT%2BtqpKk%2BlHOf%2BHLsTrzbz1%2Bnqy2IMAcaMM5Srqtvl3vno%2B%2FOHEa8lA9hP2gG1eifX0ylFc6Ite6z%2F%2BF3bR9nNw8q1utNtnfFXCxpsVmgCxbyKNJERbtTMdBurVhODrIA4s4jtbUyeSTVoKiBLKmTSHjBkaqXeScseVmgrZJX520eQlFLmacG1mds7BHXVTjoSe62MfTg8oaZea0JEtzim5sXRAbtUteR%2Bg2RwU5Y%2FH%2BbB2bQoUDAYndfXwavVvvs2NXh%2FE7AIxPYzfh72lHB6ayUftH6iUre97SM1zc4fykRlThrexLWKXK%2BrQMrMerVtQVSgSFrSKfKch5qlLLF8whDeoFtD2xPYYt49Muei1Qcvzls1KZEQkbarxpr8JwTCmnaHx1o9HGuNiTfFo1PKUJjzA4llyxWtmA5MX9CnnTyJzw0tJBzT%2BwwBvm55zDrksDIyKUGOxx6FvcgOVJ%2FAInWRm%2Fz%2FIgIzRGDgnKnMOEsCka9mXwQmSJmcexjVIrRXGPsx0E4oxBrXNZaGUeENLjwMWfoX7dfEGgXvgqPjAjLcwTnBXaGfJZ9iFBJ5sResCSiOBbGARvm0Z9Mel9lpfzKuiqJ3RmuDTys7z37sb2y5pyGxeL4R87LqgkYoYrBnklepuqOl6jO8bIreo%2FEDXrPfu0QeVinmgARvrdsjOBlnR%2F97J%2BUSh6g021I%2FmPAtA69TJuGHBiu1LWjzpelzxT1F%2FEgGhgSsPtBXjjK9tE%2F803%2Bn4Hi%2FakH%2BYnOAd8vz58Ksp8aF1lV0O1kmRhBByoYZ2xcMWaTUA%2BKhg62RMZi903d%2Fr6fE9hMoqB%2Fm2nHPAE8XdT%2FKrriSSosSgzX6XJFFhGofWqsKLAx9eHxEaC%2FDg5PkhCbQwL54XB9OeMdMIBsLShRaJOYt3nFkKUDIUIHzk%2BD1h1Wsk3SCPeeXXo8KoXBx%2BpYvquOq13YoO7Z5MPaMVmgGPyBapBtnC58Kv6thd%2BmQKS4L2XevVFvP2u3RJ9APd6RYIWssfJpR%2F2IAe04wZT7RncKPGyKIVO6dCZEvySMCClZJzZmFHoHjyWDa%2Bs2uax9%2Bu6MUZNNUDujteG%
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: static.cres-aws.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: res.cisco.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com

Source: chromecache_141.4.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_141.4.dr	String found in binary or memory: http://fontawesome.io/license
Source: securedoc_20241209T071703.html	String found in binary or memory: http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wI
Source: chromecache_114.4.dr	String found in binary or memory: http://scripts.sil.org/OFLInterLightWeightSlant
Source: chromecache_146.4.dr, chromecache_133.4.dr	String found in binary or memory: http://scripts.sil.org/OFLInterSemiBoldWeightSlant
Source: chromecache_120.4.dr, chromecache_145.4.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlant
Source: chromecache_115.4.dr, chromecache_144.4.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlantRegular
Source: securedoc_20241209T071703.html	String found in binary or memory: http://www.elavon.com
Source: chromecache_126.4.dr	String found in binary or memory: http://www.sharptype.co
Source: chromecache_126.4.dr	String found in binary or memory: http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w
Source: securedoc_20241209T071703.html	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: securedoc_20241209T071703.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Source: securedoc_20241209T071703.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Source: chromecache_135.4.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_146.4.dr, chromecache_133.4.dr, chromecache_114.4.dr	String found in binary or memory: https://github.com/rsms/inter)Inter
Source: chromecache_115.4.dr, chromecache_144.4.dr	String found in binary or memory: https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter
Source: chromecache_120.4.dr, chromecache_145.4.dr	String found in binary or memory: https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter
Source: chromecache_124.4.dr, chromecache_123.4.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_135.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=authFrame
Source: chromecache_137.4.dr, chromecache_131.4.dr	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=brian.cummings
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com/websafe/images/loginbg.gif
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com/websafe/logo/LTk2lS4u7RqcSCZrxmQJ9zr2DY9UroP8JVH6F0CPERii05Qmaa6IqnJQCO0RFhUVe
Source: chromecache_137.4.dr	String found in binary or memory: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705
Source: chromecache_131.4.dr	String found in binary or memory: https://res.cisco.com/websafe/register?uuid=7c8c370300000193abfe6c4dac2b6421fc261705
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com:443
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com:443/keyserver/Logout
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com:443/keyserver/keyserver
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=AddrNotShown
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=PPNotShown
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=RegEnvelope
Source: securedoc_20241209T071703.html	String found in binary or memory: https://res.cisco.com:443/websafe/pswdForgot.action
Source: securedoc_20241209T071703.html	String found in binary or memory: https://static.cres-aws.com/CRES_login_bg.jpg
Source: securedoc_20241209T071703.html	String found in binary or memory: https://static.cres-aws.com/postx.css

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: classification engine

Classification label: mal60.phis.winHTML@29/76@22/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241209T071703.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1836,i,12948313699533765524,5541752893857998931,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1836,i,12948313699533765524,5541752893857998931,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html

HTTP Parser: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	0%	Avira URL Cloud	safe
http://www.elavon.com	0%	Avira URL Cloud	safe
http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLWeightSlant	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLWeightSlantRegular	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLInterLightWeightSlant	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLInterSemiBoldWeightSlant	0%	Avira URL Cloud	safe
http://www.sharptype.co	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
res.cisco.com	54.208.49.75	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
www.google.com	142.250.181.68	true	false	high
d2qj7djftjbj85.cloudfront.net	18.66.161.34	true	false	unknown
static.cres-aws.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en	false		high
https://res.cisco.com/websafe/templates/standard-scripts.js	false		high
https://res.cisco.com/admin/fonts/Inter/Inter-Regular.ttf	false		high
https://res.cisco.com/websafe/images/loginbg.gif	false		high
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css	false		high
https://res.cisco.com/websafe/templates/jquery-3.7.1.min.js	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en	false		high
https://res.cisco.com/websafe/templates/css/postx.css	false		high
https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css	false		high
https://res.cisco.com/websafe/images/pullFeature/Help.svg	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css	false		high
https://static.cres-aws.com/postx.css	false		high
https://res.cisco.com/admin/cisco-fonts.min.css	false		high
https://res.cisco.com/websafe/templates/css/postx-registration.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js	false		high
https://res.cisco.com/websafe/templates/css/overrides.css	false		high
https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en&try=1	false		high
https://res.cisco.com/favicon.ico	false		high
file:///C:/Users/user/Desktop/securedoc_20241209T071703.html	true	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/logo/LTk2lS4u7RqcSCZrxmQJ9zr2DY9UroP8JVH6F0CPERii05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1	false		high
https://res.cisco.com/keyserver/keyserver?su=brian.cummings%40ebizcharge.com&df=&tf=&lp=en&v=2&m=%7c1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt.servers.global.prv&s=1&f=0&d=1733757391016&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36	false		high
https://res.cisco.com/admin/fonts/Inter/Inter-Bold.ttf	false		high
https://res.cisco.com/admin/fonts/SharpSans/SharpSans-Bold.ttf	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en	false		high
https://res.cisco.com/admin/fonts/Inter/Inter-SemiBold.ttf	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en	false		high
https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en	false		high
https://static.cres-aws.com/CRES_login_bg.jpg	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en&try=1	false		high
https://res.cisco.com/websafe/templates/screen-reader.js	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_141.4.dr	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wI	securedoc_20241209T071703.html	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_124.4.dr, chromecache_123.4.dr	false		high
https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter	chromecache_115.4.dr, chromecache_144.4.dr	false		high
https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter	chromecache_120.4.dr, chromecache_145.4.dr	false		high
https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp	securedoc_20241209T071703.html	false		high
https://res.cisco.com:443	securedoc_20241209T071703.html	false		high
https://res.cisco.com:443/keyserver/keyserver	securedoc_20241209T071703.html	false		high
https://github.com/rsms/inter)Inter	chromecache_146.4.dr, chromecache_133.4.dr, chromecache_114.4.dr	false		high
https://res.cisco.com:443/keyserver/Logout	securedoc_20241209T071703.html	false		high
http://www.elavon.com	securedoc_20241209T071703.html	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/logo/LTk2lS4u7RqcSCZrxmQJ9zr2DY9UroP8JVH6F0CPERii05Qmaa6IqnJQCO0RFhUVe	securedoc_20241209T071703.html	false		high
https://getbootstrap.com/)	chromecache_135.4.dr	false		high
https://res.cisco.com:443/websafe/help?topic=RegEnvelope	securedoc_20241209T071703.html	false		high
https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705	chromecache_137.4.dr	false		high
https://res.cisco.com/websafe/custom.action?cmd=authFrame	securedoc_20241209T071703.html	false		high
http://fontawesome.io/license	chromecache_141.4.dr	false		high
http://scripts.sil.org/OFLWeightSlant	chromecache_120.4.dr, chromecache_145.4.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443/websafe/help?topic=PPNotShown	securedoc_20241209T071703.html	false		high
http://scripts.sil.org/OFLWeightSlantRegular	chromecache_115.4.dr, chromecache_144.4.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443/websafe/help?topic=AddrNotShown	securedoc_20241209T071703.html	false		high
https://res.cisco.com:443/websafe/pswdForgot.action	securedoc_20241209T071703.html	false		high
http://scripts.sil.org/OFLInterLightWeightSlant	chromecache_114.4.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com/websafe/register?uuid=7c8c370300000193abfe6c4dac2b6421fc261705	chromecache_131.4.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_135.4.dr	false		high
http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w	chromecache_126.4.dr	false	Avira URL Cloud: safe	unknown
http://www.sharptype.co	chromecache_126.4.dr	false	Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFLInterSemiBoldWeightSlant	chromecache_146.4.dr, chromecache_133.4.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
54.208.49.75	res.cisco.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.196.63.232	unknown	United States	14618	AMAZON-AESUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
18.66.161.47	unknown	United States	3	MIT-GATEWAYSUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
18.66.161.34	d2qj7djftjbj85.cloudfront.net	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.9
192.168.2.6
192.168.2.24
192.168.2.15

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1571689
Start date and time:	2024-12-09 16:15:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	securedoc_20241209T071703.html
Detection:	MAL
Classification:	mal60.phis.winHTML@29/76@22/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.19.238, 64.233.162.84, 216.58.208.234, 142.250.181.142, 172.217.19.10, 172.217.17.46, 142.250.181.74, 142.250.181.106, 142.250.181.138, 172.217.17.42, 172.217.17.74, 172.217.19.202, 172.217.21.42, 172.217.19.234, 142.250.181.42, 142.250.181.10, 172.217.19.170, 192.229.221.95, 172.217.17.35, 13.107.246.63, 4.175.87.197, 23.218.208.109
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, otelrules.azureedge.net, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: securedoc_20241209T071703.html

Input	Output
URL: https://cisco.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://cisco.com
URL: file:///C:/Users/user/Desktop/securedoc_20241209T0... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This is a benign script using the Select2 jQuery plugin for enhanced dropdown functionality. It implements standard search/filtering behavior and keyboard navigation. The commented-out code at the bottom, while using unclear variable names, appears to be simple DOM manipulation for toggling disabled states. No external data transmission, suspicious domains, or potentially harmful operations are present." }
$("#toSelect").select2({ placeholder: "Select email address", allowClear: false, matcher: function (params, data) { // If there are no search terms, return all of the data if (jQuery.trim(params.term) === '') { return data; } var myTerm = jQuery.trim(params.term); // `params.term` should be the term that is used for searching // `data.text` is the text that is displayed for the data object if (data.text.toLowerCase().indexOf(myTerm.toLowerCase()) > -1) { // You can return modified objects from here // This includes matching the `children` how you want in nested data sets return data; } // Return `null` if the term should not be displayed return null; } }); document.addEventListener('keydown', function(event) { const container = document.querySelector('.select2-dropdown'); const scrollAmount = 35; if (event.key === 'ArrowDown') { container.scrollBy(0, scrollAmount); } else if (event.key === 'ArrowUp') { container.scrollBy(0, -scrollAmount); } }); var eq=am('toSelect');if(eq){eq.onchange=qE; document.getElementById("emailTo").parentElement.parentElement.classList.toggle("inputDisabled");}//-->
URL: file:///C:/Users/user/Desktop/securedoc_20241209T0... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "Script shows moderate risk behaviors: form submission handling with POST method, keypress monitoring, and external communication with Cisco's keyserver. While the domain (cisco.com) is trusted (-1 point), the script uses event listeners for keyboard tracking (+2) and contains obfuscated variable names (+2). The presence of payload handling and form manipulation warrants monitoring, but the legitimate domain and standard form submission patterns prevent a higher risk score." }
ew('browserLoading','');if(typeof ag=='function')ag();window.onload=pv; window.onkeydown=pv;var ey=document.forms[0];ey.method='POST'; ey.onsubmit=function(){return qg(ey,payload)};ey.onkeyup= function(oj){ql(ey,oj)};p5();if(!fP){qt();setTimeout(function(){i9(0,'payloadValue','payloadImage', 'metaPayloadValue','metaPayloadImage',"qJ(0,'key1',payload,"+ '"https://res.cisco.com:443/keyserver/keyserver")' ,{'progressFn':fq,'progressArgs':{'progressBar':{'bgColor':'#808080', 'borderColor':'#000000'}}})},125)}//-->
URL: file:///C:/Users/user/Desktop/securedoc_20241209T0... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "Script shows several concerning behaviors: DOM manipulation through form creation, hidden input fields, and event message listeners. Uses obfuscated variable names (e.g., pj, ez, oR) and contains suspicious timestamp manipulation. While it appears to be a password recovery system, the code structure and obfuscation raise moderate security concerns." }
var registeration_url;window.addEventListener('message',function(event){if(document.getElementById ('forgotPasswordForm')!=null){document.getElementById('forgotPasswordForm'). remove()}var pj=event.data.email,ez=event.data.href,oR=event.data.titleText, _H=event.data.value,qc=document.getElementById('forgotPwdDiv');qc. appendChild(pb(pj,oR,ez,_H))});function pb(pj,oR,ez,_H){if(oR==null){oR= 'Click here to recover a lost password.'}if(_H==null){_H='Forgot password?'} var oA=document.createElement('input');oA.name='forgotPasswordSubmit';oA.id= 'forgotPwdSubmit';oA.title=oR;oA.type='submit';oA.value=_H;if(window. navigator.userAgent.indexOf('Firefox')!=-1){oA.style='margin-top: 10px;'}if( window.navigator.userAgent.indexOf('Edge')!=-1){oA.style='margin-top: 5px;'} var o6=document.createElement('input');o6.name='forgotPswdEmail';o6.value=pj ;o6.type='hidden';var ey=document.createElement('form');ey.action=ez;ey. method='POST';ey.name='forgotPassword';ey.id='forgotPasswordForm';ey. autocomplete='off';ey.appendChild(oA);ey.appendChild(o6);return ey} function pbnew(pj, oR, ez, _H) {if (oR == null) {oR = 'Click here to recover a lost password.'} if (_H == null) {_H = 'Forgot password?'}var afp = document.createElement('a'); afp.title = oR;afp.name = 'forgotPwd';afp.href = ez + '?forgotPswdEmail=' + pj; afp.innerHTML = _H;return afp} function qQ(_l,ey,qu){mm(_l,{'error':p7,'success':p7},{'form':ey,'signature':qu})} function p7(status,qP,eu){if(!eu)eu=gUserArg;if(eu){var f5=eu.signature;if( status==ib\|\|status==ic){e3(eu.form,0);if(f5)et(f5, '\x3cspan class="error mds-text mds-text-p3 mds-text-weight-regular mds-text-color-regular mds-notification-content mds-notification mds-notification-negative"\x3eBad '+(status==ib?'postmark':'signature')+ '\x3c/span\x3e')}else if(f5){var c=qP,b=-1;for(_=0;_<3;_++)if((b=c.indexOf( ' ',b+1))==-1)break;if(b!=-1)c=c.substring(0,b)+'<br>'+c.substring(b+1);et( f5,c)}}}function pE(_l,iY,la,iG,eu,qV){var c;if(iG==jn&&_l.userKey){fa(fw,eu );gB(_l.userkeyname);_l.userKey='';oM(_l,true)}else if(iG== RPC_STATUS_NO_RECORD_FOUND){c=er('RPCMessageKeyRemoved','',iG,_l.msgID)}else if(iG!=iZ)c=er('RPCError','',iG,_l.msgID);if(c)alert(c)}var js,ok='passMsg', ol='',oC='initMsg',pm='',po='';function pv(dq){ if(!dq)dq=window.event;if(dq){if(dq.type=='keydown')window.onkeydown='';else if(js&&dq.type=='load')return;js={'ctrlKey':dq.ctrlKey?1:0,'altKey':dq. altKey?1:0,'shiftKey':dq.shiftKey?1:0}}} function qt(){pR();fp('passwordRow1');fp ('forgotPasswordRow');pl();fD(oC,'RPCWaiting')}function qJ(ey,eC, _l,ge,oj){if(OSMacOS9&&(_l.flags&iF)&&!(_l.flags&iM)){fa(fv);return;}window. onkeydown='';_l.rpc={'url':ge};_l.form.index=ey;_l.form.focusField=eC;_l. secureReplyAlg='';if(!oj)oj=js\|\|window.event; if(c=am( 'timeStampLocation'))if(payload.signature)c.innerHTML= '\x3cspan class=timestamp id=signature\x3e'+'\x3ca href="javascript:'+"qQ"+ '('+"payload"+',\''+ey+'\',\'signature\')'+ '"\x3eVerify this envelope\x3c/a\x3e'+'\x3c/span\x3e';else c.innerHTML= '\x3cspan class=timestamp\x3e12/09/2024'+ '\x3cbr\x3e12:17:03 PM GMT\x3c/span\x3e';if(_l.sessionKey)document.forms[ey ].sessionkey.value=_h.encodeToString(_l.sessionKey);if((_l.userKey\|\|_l. sessionKey)&&(_l.flags&hP)&&(!oj\|\|!oj.altKey))oK(document.forms[ey],_l,'',oj );else if(_l.userKey\|\|_l.sessionKey\|\|_l.encryptedSessionKey){ ew(oC,'');if(_l.selectedID)o7(_l.selectedID);oM(_l)}else pi();} function eB(qv){var dq,c,_l=payload; if(oF&&am('authFrame')&&(c=eU('iframeLocation')))c .appendChild(oF);pR();if(c=am('emailTo')){if(dq=am('toSelect')){ _l.selectNode=dq;c.removeChild(dq)}if(qv&&_l.selectedID)ew(c,_l.selectedID); else ew(c,'\"brian.cummings@ebizcharge.com\" <brian.cummings@ebizcharge.com>')}ew(oC,'');fp('bccRow');fp('passwordRow1');fp( 'forgotPasswordRow');ew('openButtonLocation','');ew('saveButtonLocation','') ;oq(0);if(c=ew('checkboxesLocation',''))fp('checkboxRow', 'addressSentinelRow')}function oM(_l,pd){px(_l);pw(_l,pd);ov(oE); oq(oU\|or);py();e4(_l.form.index,_l.
URL: file:///C:/Users/user/Desktop/securedoc_20241209T0... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "Script shows moderate risk due to: 1) DOM manipulation using innerHTML (+2), 2) obfuscated variable names (p4, e5, qT) suggesting potential code hiding (+1), 3) use of hex-encoded strings (\\x3c) (+1). However, functionality appears to be related to browser state management and doesn't show clear malicious intent. No high-risk behaviors like eval() or external data transmission detected." }
if(am('ff_saved'))alert(er('SavedPage'));var p4;if(p4=am('ff_trash'))p4. innerHTML='\x3cspan id=ff_saved\x3e\x3c/span\x3e';fD('browserLoading', 'BrowserParsing');e5(true);window.onfocus=qT;//-->
URL: file:///C:/Users/user/Desktop/securedoc_20241209T0... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be legitimate Cisco Systems code (based on copyright notice) that handles cookies and basic string manipulation. While it contains some obfuscated variable names, this is likely due to minification. The code performs standard operations like URL encoding, cookie management, and string utilities. No high-risk behaviors like eval() or suspicious data transmission are present." }
'$Serial: 6261 $ $Revision: 1.16 $'; 'Copyright (c) 2001-2019, Cisco Systems, Inc. All rights reserved.'; 'Protected by United States patent numbers 6,014,688, 6,304,897,'; '7,533,422, 7,694,297, 7,802,096, 7,814,317, 8,005,920 and others.'; '$Serial: 3328 $ $Revision: 1.7 $';'Version: 2.3'; '$Serial: 6248 $ $Revision: 1.15 $';var ad='EnvelopeTools51',db='PostXBPC', dd='PostXPreferences',dc='PostXCookieCheck',ac='PostXCarbon.',de= 'PostXSessionKey.',df='PostXUserKey.',dk=315360000000,dg='',di= 'Tue, 19-Jan-2038 03:14:07 GMT',dh=315360000000,dj=315360000000,dl= 315360000000; '$Serial: 0478 $ $Revision: 1.9 $';var ae='appletHolder',f0='appletHolder', fE='undefined',aG='object',dv='string';try{if(typeof Array.prototype.push== fE)Array.prototype.push=function(){for(var _=0;_<arguments.length;_++)this[ this.length]=arguments[_];return this.length}}catch(fx){}try{if(typeof String.prototype.trim==fE)String.prototype.trim=function(){return this. replace(/^\s+\|\s+$/g,'')}}catch(fx){} '$Serial: 3888 $ $Revision: 1.23 $';function _w(a8){var gS= /^\sfunction\s+([^(]+)/,cS;if((cS=gS.exec(a8)))return cS[1];return''} function mp(i){i=i.toString(16);if(i.length&1)i='0'+i;return'%'+i}function _N(c,mr){c+='';var au,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);if( au>='A'&&au<='Z'\|\|au>='a'&&au<='z'\|\|au>='0'&&au<='9'\|\|au=='.'\|\|au=='-'\|\|au== ''\|\|au=='_')aw+=au;else{au=au.charCodeAt(0);if(mr\|\|au<128){aw+=mp(au&255)} else if(au<2048){aw+=mp(192\|au>>>6);aw+=mp(128\|au&63)}else{aw+=mp(224\|au>>> 12);aw+=mp(128\|(au>>>6)&63);aw+=mp(128\|au&63)}}}return aw}function a_(c,mr){ c+='';var au,dE,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);switch(au ){default:aw+=au;break;case'+':aw+=' ';break;case'%':if(c.charAt(_+1)=='u'){ au=c.substr(_+2,4);_+=5;dE=parseInt(au,16)}else{au=c.substr(_+1,2);_+=2;dE= parseInt(au,16);if(mr\|\|dE<128){}else if(dE<224){if(d-_<4\|\|c.charAt(_+1)!='%' ){}else{au=c.substr(_+2,2);_+=3;dE=((dE&31)<<6)\|(parseInt(au,16)&63)}}else{ if(d-_<7\|\|c.charAt(_+1)!='%'\|\|c.charAt(_+4)!='%'){}else{au=c.substr(_+2,2);_ +=3;dE=((dE&15)<<6)\|(parseInt(au,16)&63);au=c.substr(_+2,2);_+=3;dE=(dE<<6)\| (parseInt(au,16)&63)}}}aw+=String.fromCharCode(dE);break}}return aw}function _Y(c){c+='';var au,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);if(au< ' '\|\|au>'~'\|\|au=='\''\|\|au=='"')aw+='&#'+c.charCodeAt(_)+';';else aw+=au} return aw}function mv(my,mu){var k0=arguments.length,j=[],_;if(k0==3&& arguments[2].elements){var ey=arguments[2],eq;for(_=1;eq=ey['key'+_];_++)if( eq.value!='')j[j.length]=eq.value}else{for(_=2;_<k0;_++)if(arguments[_]!='') j[j.length]=arguments[_]}j=j.join(my);if(mu)j=j.toLowerCase();return j} function go(cN,mq){if(!mq)mq=72;var _,b,d=cN.length;if('\ '=='')return cN;var cS=new Array(Math.floor((d+mq-1)/mq));for(_=b=0;_<d;_+= mq+1,b++)cS[b]=cN.substr(_,mq);cS.length=b;return cS.join('')}var mt=0; function mw(ir){var c;if(fM)c=ir+new Date().getTime()+mt++;else do{c=ir+mt++ }while(document.getElementById(c));return c}function jy(hq){var mo='',_,d=hq .length;for(_=0;_<d;_++){var au=hq.charCodeAt(_);if(au<128)mo+=String. fromCharCode(au);else if(au<2048){mo+=String.fromCharCode(192\|(au>>>6));mo+= String.fromCharCode(128\|(au&63))}else{mo+=String.fromCharCode(224\|(au>>>12)) ;mo+=String.fromCharCode(128\|((au>>>6)&63));mo+=String.fromCharCode(128\|(au& 63))}}return mo}function mz(ge,gM){var iS=ge.indexOf('#');if(iS<0)iS=ge. length;var mn=ge.substring(0,iS),ms='&',mx=mn.indexOf('?');if(mx<0)ms='?'; for(var j in gM){mn+=ms;ms='&';mn+=_N(j);mn+='=';mn+=_N(gM[j])}mn+=ge. substring(iS);return mn}zw=formKey=mv;zj=fixMultilineString=go;zi=genId=mw; attrEsc=_Y; '$Serial: 0611 $ $Revision: 1.6 $';function du(_8){var e=new Date().getTime( );if(!_8)_8=dc;_9(_8,e,'','/');if((e=(al(_8)==e)))aj(_8,'/');return e} function al(_8){_8=_N(_8);var c=document.cookie,dr=c.indexOf(_8+'=');if(dr== -1)return null;var ds=dr+_8.length+1,dp=c.indexOf(';',ds);if(dp==-1)dp=c. length;return a_(c.substring(ds,dp))}function _9(_8,_H,dm,_S,dn,dt){var c=_N (_8)+'='+_N(_
URL: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Email Encryption Service", "prominent_button_name": "unknown", "text_input_field_labels": [ "brian.cummings@ebizcnarge.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Email Encryption Service", "prominent_button_name": "unknown", "text_input_field_labels": [ "brian.cummings@ebizcnarge.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter Personal Information", "prominent_button_name": "Register", "text_input_field_labels": [ "Email Address", "First Name", "Last Name", "Password", "Confirm Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html Model: Joe Sandbox AI	{ "brands": [ "Elavon" ] }
	{ "brands": [ "Elavon" ] }
URL: file:///C:/Users/user/Desktop/securedoc_20241209T071703.html Model: Joe Sandbox AI	{ "brands": [ "Elavon" ] }
	{ "brands": [ "Elavon" ] }
URL: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Model: Joe Sandbox AI	{ "brands": [ "Cisco" ] }
	{ "brands": [ "Cisco" ] }
URL: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Model: Joe Sandbox AI	```json{ "legit_domain": "cisco.com", "classification": "wellknown", "reasons": [ "The brand 'Cisco' is a well-known technology company.", "The URL 'res.cisco.com' is a subdomain of 'cisco.com', which is the legitimate domain for Cisco.", "The use of a subdomain 'res' is common for legitimate purposes such as resource management or specific services.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions." ], "riskscore": 1}
URL: res.cisco.com Brands: Cisco Input Fields: Email Address, First Name, Last Name, Password, Confirm Password

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.11.207	http://googlle.com	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.1.0/fonts/fontawesome-webfont.woff?v=4.1.0
	https://city-of-goodyear.webnode.page/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap-theme.min.css
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
	http://185.67.82.114	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js
	SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
239.255.255.250	http://www.cargoforce.co.uk/media/system/js/core.js?1399aaee86665a1dd2ea810af52638f9	Get hash	malicious	Unknown	Browse
	_.html	Get hash	malicious	Unknown	Browse
	W-2Updated.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse
	Tarun Loomba Signature Required.pdf	Get hash	malicious	Unknown	Browse
	https://workdrive.zohoexternal.com/file/lljmvdd647cc1e09d478685331856e3375fea	Get hash	malicious	Unknown	Browse
	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse
	https://sendgb.com/vdRYC6Nal34?utm_medium=HlyZfLISdD8Bj1i	Get hash	malicious	Unknown	Browse
	https://reader.egress.com/remote.aspx/s/storage.phe.gov.uk/email/e0599f812894d1904a8fe3cf7f605bcb	Get hash	malicious	Unknown	Browse
	https://reader.egress.com/remote.aspx/s/storage.phe.gov.uk/email/e0599f812894d1904a8fe3cf7f605bcb	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
res.cisco.com	securedoc_20241104T081116.html	Get hash	malicious	Unknown	Browse	54.161.165.135
	securedoc_20241028T070148.html	Get hash	malicious	Unknown	Browse	34.235.221.210
	securedoc_20241008T101508.html	Get hash	malicious	Unknown	Browse	50.17.52.147
	https://07d6b6-35.myshopify.com/pages/enternal/#1aWdvYmVsaUBoaWxjb3JwLmNvbQ0=	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	35.168.85.253
	https://fb1f1d-d3.myshopify.com/pages/fb1f1d-d3-scanning#0YnJhbmRpLnRyeW9uQGFjYWRlbWljcGFydG5lcnNoaXBzLmNvbQ0=	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	54.243.162.14
	securedoc_20240805T101719.html	Get hash	malicious	Unknown	Browse	3.210.249.249
	securedoc_20240521T074217.html	Get hash	malicious	Unknown	Browse	54.88.189.149
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	18.233.198.142
	securedoc_20240328T081124.html	Get hash	malicious	Unknown	Browse	184.94.241.74
	securedoc_20240212T082824.html	Get hash	malicious	Unknown	Browse	184.94.241.74
maxcdn.bootstrapcdn.com	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://jdjdhjh.uscourtdocuments.com/A3RjQ	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://newkr-projectx.glitch.me/#brian.ruane@phillyshipyard.com&c=E,1,vVA-mg8r52Zblu_rhig7GFt2mCpLF9PVkeDHz-A9beseyk-7hG6M7GtCamglxWILhEciDIA3yPk4yeJAXNdlExpv1QvST_9_UAM_sKTiUoTphPpfNtY,&typo=1	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://www.sbh.co.uk/	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	104.18.10.207
	https://www.scribd.com/document/801519291/Advice-Notification#fullscreen&from_embed	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://docs.google.com/presentation/d/e/2PACX-1vQdSuwONgWFnuoaK9jWkn4a4T1fFD4ixA3V2X7f5aWnD4sHxk2b10z2j2TMxkq3G15FQX3bbwReJ2PF/pub?start=false&loop=false&delayms=3000	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://docs.google.com/presentation/d/e/2PACX-1vQdSuwONgWFnuoaK9jWkn4a4T1fFD4ixA3V2X7f5aWnD4sHxk2b10z2j2TMxkq3G15FQX3bbwReJ2PF/pub?start=false&loop=false&delayms=3000	Get hash	malicious	Unknown	Browse	104.18.11.207
	MOV-3912968547-(Cstolfi)MMS028.mp4.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://jet.cloudhostingworks.com/CetQr/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	Pr9cqW75nY.lnk	Get hash	malicious	Unknown	Browse	104.18.10.207
d2qj7djftjbj85.cloudfront.net	securedoc_20241104T081116.html	Get hash	malicious	Unknown	Browse	13.32.121.62
	securedoc_20241028T070148.html	Get hash	malicious	Unknown	Browse	13.32.121.40
	securedoc_20241008T101508.html	Get hash	malicious	Unknown	Browse	13.32.121.110
	securedoc_20240805T101719.html	Get hash	malicious	Unknown	Browse	18.66.27.82
	securedoc_20240521T074217.html	Get hash	malicious	Unknown	Browse	13.32.121.110
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	18.160.225.62
	securedoc_20240328T081124.html	Get hash	malicious	Unknown	Browse	108.138.85.20
	securedoc_20240212T082824.html	Get hash	malicious	Unknown	Browse	108.138.85.60
	securedoc_20240207T142952.html	Get hash	malicious	Unknown	Browse	3.163.115.70
	bankozk_securedoc_20231214T140252.html	Get hash	malicious	Unknown	Browse	18.173.166.40
cdnjs.cloudflare.com	_.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://jdjdhjh.uscourtdocuments.com/A3RjQ	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	http://www.sbh.co.uk/	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	104.17.24.14
	http://www.pixelpromo.ru/bitrix/redirect.php?event1=click_to_call&event2=&event3=&goto=https://oR.smelsgycz.ru/OP4lIHE/#Dinfo@test.uk.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://74.50.69.234/	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://74.50.69.234/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://u48644047.ct.sendgrid.net/ls/click?upn=u001.3irT40U-2BlTtWVjPO1bgMkUPMRV7HMaBj-2FcZe3i1L5jDR7G1Ks0wP9YDqpnyIpxjZeIBaCeYZtGJgliwzSaJhwg-3D-3Dg90K_vPQ7onHR3f0o8KfOdBDFScd6URBvV6dRJTvL1FnCMOJp3bqQS0z8XYrmZvQsYKgv9M18uyN4otj9SHTsh0jVVVuVPoownVxKSao-2Fy-2F5zkA0ggrGoSd-2BVIld1mpIeS3DUcNNIvsq7yFDKM7DHebzUtokLUwZtE0mCsLz1Bm0-2B1LrSQGv4FTM1s6ckzg8R6Atlvbv-2BxwILwC6PQXifnpXLjP04W47PCxVuKYY5jyS-2FXWc-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	IMPORTANT DOCUMENT.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	IMPORTANT DOCUMENT.html	Get hash	malicious	Unknown	Browse	104.17.25.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	http://www.cargoforce.co.uk/media/system/js/core.js?1399aaee86665a1dd2ea810af52638f9	Get hash	malicious	Unknown	Browse	1.1.1.1
	_.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	1733755327131807265395c8beb00b001ee74b7ae39a6579109a5e4a352d4399291272954e392.dat-decoded.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.67.152
	W-2Updated.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.249.203
	1733755327131807265395c8beb00b001ee74b7ae39a6579109a5e4a352d4399291272954e392.dat-decoded.exe	Get hash	malicious	Snake Keylogger	Browse	172.67.177.134
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	jXN37dkptv.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	172.67.177.134
AMAZON-AESUS	jew.arm.elf	Get hash	malicious	Unknown	Browse	18.208.17.74
	Fantazy.arm7.elf	Get hash	malicious	Mirai	Browse	54.54.23.85
	W-2Updated.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	34.194.161.16
	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse	34.200.110.203
	https://sendgb.com/vdRYC6Nal34?utm_medium=HlyZfLISdD8Bj1i	Get hash	malicious	Unknown	Browse	44.194.37.91
	https://newkr-projectx.glitch.me/#brian.ruane@phillyshipyard.com&c=E,1,vVA-mg8r52Zblu_rhig7GFt2mCpLF9PVkeDHz-A9beseyk-7hG6M7GtCamglxWILhEciDIA3yPk4yeJAXNdlExpv1QvST_9_UAM_sKTiUoTphPpfNtY,&typo=1	Get hash	malicious	HTMLPhisher	Browse	34.198.85.26
	https://app.droplet.io/form/yelEz0	Get hash	malicious	Unknown	Browse	52.3.93.48
	Private.txt.scr.exe	Get hash	malicious	Unknown	Browse	54.224.7.177
	https://www.egencia.com/conversations/cp/connect.html/?id=9445ace5-416d-4fb9-b151-bab0770ccdde	Get hash	malicious	Unknown	Browse	34.196.82.111
	Owari.sh4.elf	Get hash	malicious	Unknown	Browse	54.54.152.22
AMAZON-AESUS	jew.arm.elf	Get hash	malicious	Unknown	Browse	18.208.17.74
	Fantazy.arm7.elf	Get hash	malicious	Mirai	Browse	54.54.23.85
	W-2Updated.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	34.194.161.16
	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse	34.200.110.203
	https://sendgb.com/vdRYC6Nal34?utm_medium=HlyZfLISdD8Bj1i	Get hash	malicious	Unknown	Browse	44.194.37.91
	https://newkr-projectx.glitch.me/#brian.ruane@phillyshipyard.com&c=E,1,vVA-mg8r52Zblu_rhig7GFt2mCpLF9PVkeDHz-A9beseyk-7hG6M7GtCamglxWILhEciDIA3yPk4yeJAXNdlExpv1QvST_9_UAM_sKTiUoTphPpfNtY,&typo=1	Get hash	malicious	HTMLPhisher	Browse	34.198.85.26
	https://app.droplet.io/form/yelEz0	Get hash	malicious	Unknown	Browse	52.3.93.48
	Private.txt.scr.exe	Get hash	malicious	Unknown	Browse	54.224.7.177
	https://www.egencia.com/conversations/cp/connect.html/?id=9445ace5-416d-4fb9-b151-bab0770ccdde	Get hash	malicious	Unknown	Browse	34.196.82.111
	Owari.sh4.elf	Get hash	malicious	Unknown	Browse	54.54.152.22
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	http://www.cargoforce.co.uk/media/system/js/core.js?1399aaee86665a1dd2ea810af52638f9	Get hash	malicious	Unknown	Browse	1.1.1.1
	_.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	1733755327131807265395c8beb00b001ee74b7ae39a6579109a5e4a352d4399291272954e392.dat-decoded.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.67.152
	W-2Updated.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.249.203
	1733755327131807265395c8beb00b001ee74b7ae39a6579109a5e4a352d4399291272954e392.dat-decoded.exe	Get hash	malicious	Snake Keylogger	Browse	172.67.177.134
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	jXN37dkptv.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	172.67.177.134

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	clipboardmasterinst.exe	Get hash	malicious	Unknown	Browse	23.206.229.209
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.206.229.209
	https://inboxsender.gxsearch.club/redir6/serial.php	Get hash	malicious	Unknown	Browse	23.206.229.209
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.206.229.209
	IABrPTTzHo.exe	Get hash	malicious	Unknown	Browse	23.206.229.209
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.206.229.209
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.206.229.209
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.206.229.209
	S1NrYNOYhZ.exe	Get hash	malicious	Stealc, Vidar	Browse	23.206.229.209
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.206.229.209

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 14:16:29 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.986283628081095
Encrypted:	false
SSDEEP:	48:8xdzTg5HjidAKZdA1P4ehwiZUklqehWy+3:8fMLOJy
MD5:	C2BA8CF509C65F269BD8F389E728C46A
SHA1:	06C1877A7ADDF449094F3E4327E90F20C4304A5E
SHA-256:	9E791859BA602A6831BAE525326FB2B7C53E96DD372300F50332B5CC20A5267E
SHA-512:	AE5AFD23FCEA7EADE5D734DC11986673703291852E3A166521D46C5DD5242B489E252EBDB3E6A4E8B5521E42B0F35F11266BD5B3D1D08DCDE5FB0C3CDD73737F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....6<RMJ....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.z....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.z....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.z....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.z.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.z...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 14:16:28 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.002418663378431
Encrypted:	false
SSDEEP:	48:8BdzTg5HjidAKZdA1+4eh/iZUkAQkqeh5y+2:8vM6F9Q0y
MD5:	ECF1BB682624B7D439D79662389B1560
SHA1:	170E11CB03F55C3BDC9E44DD6C652B543FEB10DD
SHA-256:	0B6B49B2126D478A689E020D869D75C82DBDD86BF4A96B2B82359A08C77AEF4B
SHA-512:	6201DFA5A350DCDE5624EE6DF5DD869A75BFE5638C8209691E86FB8DC3F6B46E00202D80E5A225FE6445D7D36D61D488E30914331C678F389E3AA9B9205810AE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....>/RMJ....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.z....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.z....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.z....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.z.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.z...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.01041442755119
Encrypted:	false
SSDEEP:	48:8PdzTgVHjidAKZdA1404eh7sFiZUkmgqeh7s3y+BX:8xM7InNy
MD5:	1E172651025E55B0E6D7DEDB38B13DC1
SHA1:	F554C1CEC44AB5FD7AB0257F125654593636672B
SHA-256:	1FF7D8EFE0D4CC0042CF386C343FAF1D5DF469BF26FFE7B0FAB9E0AB2060ED83
SHA-512:	654DF140B78B59C2B7131D0E1C20B7B49D7DE6A1719F2C00D0FACC6CFA8E405891B272FA3AAA27675AC36C20A7922C76776951CF2D434BBB572055FDB7FAF30F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.z....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.z....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.z....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.z.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 14:16:28 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9998417839950204
Encrypted:	false
SSDEEP:	48:8xdzTg5HjidAKZdA1p4ehDiZUkwqehVy+R:8fMt5/y
MD5:	2D8F6D3F23714F29F3B45BD2F50D075F
SHA1:	44455EA8E70C64525393F914E31D911BF8C25A67
SHA-256:	C48F67F3720393D69B2DEAA4377A2D2D6773B8033EF700E8F2901D54C3952CC5
SHA-512:	1315DB632DCD54D0B7C76891C4775689DD0D7065EBCB225344C4DEB4190B5ADB4020FCB6570AA3F0C51D6F7A8A0100E00105025C21000EDD4C2B04BFA1A8AB54
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....v.(RMJ....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.z....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.z....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.z....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.z.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.z...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 14:16:28 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.988261387898153
Encrypted:	false
SSDEEP:	48:8ddzTg5HjidAKZdA1X4ehBiZUk1W1qehry+C:8DMTb9Ly
MD5:	43021D70D6FCC4A533318166555EA404
SHA1:	E666EC2F5BE28D90907DF9066055746D3372022B
SHA-256:	189526137FD82A85EB18915A9F9F170BCAB0E80F8FA2C31C865F5C926A102D23
SHA-512:	4C930C885B6B431E6A1D6A1E0517C7647BE526B4CDEB573A61DD335E9384CC476EF758BFB76C5DD60F4F530B515CF1BBF295052EA7EE796650BA071D063DB486
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....t.5RMJ....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.z....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.z....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.z....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.z.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.z...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 14:16:28 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9931591889012563
Encrypted:	false
SSDEEP:	48:8aGdzTg5HjidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbNy+yT+:8ayM8TcJTbxWOvTbNy7T
MD5:	1B3BD3BCCFBB1A2CBB6E73440FDCC548
SHA1:	C8C4F2B1409BFEADB6EE8E8FA31A6A0ECAB51F4D
SHA-256:	0A5F5C96175D28FB4AC7C3FF6F90AAE3711976368CA09E80E55041A5127CDF6E
SHA-512:	C505B3A0F95276738E78C2F462A7A80C5078DDA7DFF9B3C4A5490E929B9BC6081FC5CA9C76136F2ACA9F467EDA3470BEDA2E1FC71A4D5611DB552C4020B427A5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......RMJ....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.z....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.z....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.z....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.z.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.z...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	125394
Entropy (8bit):	5.069062799454485
Encrypted:	false
SSDEEP:	1536:ZrCMDD2MR/9fU2j2L292qgJYq1x2KLLn+mbkQ7ThzeSRwJWL0V8bK/FMGFOFlLn5:HDFfU2j2L292qgZxxv+mAQXhzeSRwzQ
MD5:	A0B4FF216E038470B000B63F5AA39816
SHA1:	319D6BB77F2115DA9F977569477AC010F87E6386
SHA-256:	7A61694ACF36F22050B90F751DBAFC330D5025471F83F5C08F663CD2633448F7
SHA-512:	A3B38E3CC9B204D809DBAEEB1417E878EFA9A2D8AAF9E311051FF6FEDD1C1F92F89901274EBD43A163F03D42567D6586063333A3ECDDC128A64773315BB1B094
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://static.cres-aws.com/postx.css
Preview:	/* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 800;. src: url("./fonts/Inter/Inter-ExtraBol

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2111
Entropy (8bit):	5.156495456552832
Encrypted:	false
SSDEEP:	48:vKs/UigMMiqdPXIU70U7kAAakASjKXigO2qXigAgDUYnx7c5MJqDaZbhqm1F:n8iMiS70GRzi7Ji4RoAqibIqF
MD5:	0EF5306CD54F1799C9FA23548762EC4A
SHA1:	6E56D085A9136CBE8EBEC45DA4F18BA0299C5F0C
SHA-256:	CD4EB96D517491FCBA4D0748AD53B58DA9A3644DB226BE8B55FD93473AD8ADDD
SHA-512:	9FAE934C7A32993AF7B88AB294EFC4CA8CAB8552A112697AFFD0F27E916A728F98983D241CAFC0CB25563317120D70B73A0B42BA61FCFECFF8492E654CDBE6A3
Malicious:	false
Preview:	..var screenReaderCalled = false;....function insertForScreenReader(text){...var warning = document.getElementById('timeoutMessage');...warning.innerHTML = text;...warning.style.display = "none";...warning.setAttribute("aria-live","assertive");...warning.setAttribute("role","alert");...warning.setAttribute("aria-invalid","true");...warning.style.display = "block";...warning.focus();..}....function notifyTimeout(){...var t = document.getElementById('sessionTimeout');...var m = document.getElementById('timeoutMessage');...if(t != null && m != null){....var timeout = t.value;....var message = m.innerHTML;....document.getElementById('timeoutMessage').innerHTML = "";....if(timeout != null && message != null && timeout > 60){.....setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',(timeout-60)/60));.....},601000);..........setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',1));.....},(timeout-60)1000);....}...}..}....function updateScree

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1265
Entropy (8bit):	4.587969597231761
Encrypted:	false
SSDEEP:	24:2dPKz70mwuqtO2cJkpoNnqFRyaZ8JGzugNkVarlTHnqt04sKH0++NOi2ZSAWULR8:cSQuGO2cJkEn0ylG+6F/VKUJ2ZNWULR8
MD5:	2DBAB2D7C143EF0DACCB55D142FCD61C
SHA1:	AF132D5F5DBF080F3420FD6378738B03E0F9B669
SHA-256:	57928799C9F52AD009BD3D4DF0C7CCB781659EF99C649744EB6812676C0E8936
SHA-512:	953473500B3B403AA7ED0528EA3C150F73BCBF7F2775F93DCCEE43CA06F9609799E6C547A035257E44400F98901AEADE12921A345580A9E96876C0C2C50E81D2
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg height="20px" width="20px" id="a". xmlns="http://www.w3.org/2000/svg" viewBox="7.875 7.875 20.25 20.25">. <defs>. <style>.b,.c{fill:#f7f7f7;}.c{fill-rule:evenodd;}</style>. </defs>. <path class="b" d="M18,24c.828,0,1.5-.672,1.5-1.5s-.672-1.5-1.5-1.5-1.5,.672-1.5,1.5,.672,1.5,1.5,1.5Z"/>. <path class="b" d="M18.732,12.447c-.727-.145-1.481-.07-2.167,.213-.685,.284-1.271,.764-1.683,1.381-.412,.617-.632,1.342-.632,2.083,0,.621,.504,1.125,1.125,1.125s1.125-.504,1.125-1.125c0-.297,.088-.587,.253-.833,.165-.247,.399-.439,.673-.552,.274-.113,.576-.143,.867-.085,.291,.058,.558,.201,.768,.41,.21,.21,.353,.477,.411,.768,.058,.291,.028,.592-.085,.867-.113,.274-.306,.508-.552,.673-.247,.165-.537,.253-.833,.253-.621,0-1.125,.504-1.125,1.125s.504,1.125,1.125,1.125c.742,0,1.467-.22,2.083-.632,.617-.412,1.097-.998,1.381-1.683,.284-.685,.358-1.439,.213-2.167-.145-.727-.502-1.396-1.026-1.92-.524-.524-1.193-.882-1.92-1.026Z"/>. <path cla

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2111
Entropy (8bit):	5.156495456552832
Encrypted:	false
SSDEEP:	48:vKs/UigMMiqdPXIU70U7kAAakASjKXigO2qXigAgDUYnx7c5MJqDaZbhqm1F:n8iMiS70GRzi7Ji4RoAqibIqF
MD5:	0EF5306CD54F1799C9FA23548762EC4A
SHA1:	6E56D085A9136CBE8EBEC45DA4F18BA0299C5F0C
SHA-256:	CD4EB96D517491FCBA4D0748AD53B58DA9A3644DB226BE8B55FD93473AD8ADDD
SHA-512:	9FAE934C7A32993AF7B88AB294EFC4CA8CAB8552A112697AFFD0F27E916A728F98983D241CAFC0CB25563317120D70B73A0B42BA61FCFECFF8492E654CDBE6A3
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/screen-reader.js
Preview:	..var screenReaderCalled = false;....function insertForScreenReader(text){...var warning = document.getElementById('timeoutMessage');...warning.innerHTML = text;...warning.style.display = "none";...warning.setAttribute("aria-live","assertive");...warning.setAttribute("role","alert");...warning.setAttribute("aria-invalid","true");...warning.style.display = "block";...warning.focus();..}....function notifyTimeout(){...var t = document.getElementById('sessionTimeout');...var m = document.getElementById('timeoutMessage');...if(t != null && m != null){....var timeout = t.value;....var message = m.innerHTML;....document.getElementById('timeoutMessage').innerHTML = "";....if(timeout != null && message != null && timeout > 60){.....setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',(timeout-60)/60));.....},601000);..........setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',1));.....},(timeout-60)1000);....}...}..}....function updateScree

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	387
Entropy (8bit):	5.179130709592589
Encrypted:	false
SSDEEP:	6:TMVBd/NFmc4slJUY7BuwTARZARtAUbWDYHsyXIzqVJEgqIzqVNQs1jvpJrEIdHfi:TMHdVFvnNuuAiOYHzXw5jNdHK
MD5:	1F6AF349658BA40D72AA4C87AECC722A
SHA1:	E3ABD390D66D37C5C245C6AD172E5433584E2B39
SHA-256:	042CD20A95524AAAE53879E8D0210E9D79F0EB9E42E7C6E25EE4A8BDE703FAC0
SHA-512:	4A508F8F4AF98DAEC5218A4B38103898661D1B430783DE4DB314F1EA9D1D891B85987DF734D9697A49A03F23E54B8B137E16B64E519658351EBADD7330E4C79D
Malicious:	false
URL:	https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" .viewBox="0 0 16 16">.<defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style>.</defs>.<path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881c.342-.342,.896-.342,1.237,0s.342,.896,0,1.237l-3.5,3.5c-.342,.342-.896,.342-1.237,0l-3.5-3.5c-.342-.342-.342-.896,0-1.237Z"/></svg>

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1265
Entropy (8bit):	4.587969597231761
Encrypted:	false
SSDEEP:	24:2dPKz70mwuqtO2cJkpoNnqFRyaZ8JGzugNkVarlTHnqt04sKH0++NOi2ZSAWULR8:cSQuGO2cJkEn0ylG+6F/VKUJ2ZNWULR8
MD5:	2DBAB2D7C143EF0DACCB55D142FCD61C
SHA1:	AF132D5F5DBF080F3420FD6378738B03E0F9B669
SHA-256:	57928799C9F52AD009BD3D4DF0C7CCB781659EF99C649744EB6812676C0E8936
SHA-512:	953473500B3B403AA7ED0528EA3C150F73BCBF7F2775F93DCCEE43CA06F9609799E6C547A035257E44400F98901AEADE12921A345580A9E96876C0C2C50E81D2
Malicious:	false
URL:	https://res.cisco.com/websafe/images/pullFeature/Help.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg height="20px" width="20px" id="a". xmlns="http://www.w3.org/2000/svg" viewBox="7.875 7.875 20.25 20.25">. <defs>. <style>.b,.c{fill:#f7f7f7;}.c{fill-rule:evenodd;}</style>. </defs>. <path class="b" d="M18,24c.828,0,1.5-.672,1.5-1.5s-.672-1.5-1.5-1.5-1.5,.672-1.5,1.5,.672,1.5,1.5,1.5Z"/>. <path class="b" d="M18.732,12.447c-.727-.145-1.481-.07-2.167,.213-.685,.284-1.271,.764-1.683,1.381-.412,.617-.632,1.342-.632,2.083,0,.621,.504,1.125,1.125,1.125s1.125-.504,1.125-1.125c0-.297,.088-.587,.253-.833,.165-.247,.399-.439,.673-.552,.274-.113,.576-.143,.867-.085,.291,.058,.558,.201,.768,.41,.21,.21,.353,.477,.411,.768,.058,.291,.028,.592-.085,.867-.113,.274-.306,.508-.552,.673-.247,.165-.537,.253-.833,.253-.621,0-1.125,.504-1.125,1.125s.504,1.125,1.125,1.125c.742,0,1.467-.22,2.083-.632,.617-.412,1.097-.998,1.381-1.683,.284-.685,.358-1.439,.213-2.167-.145-.727-.502-1.396-1.026-1.92-.524-.524-1.193-.882-1.92-1.026Z"/>. <path cla

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x70, components 3
Category:	dropped
Size (bytes):	4574
Entropy (8bit):	7.816843704687424
Encrypted:	false
SSDEEP:	96:TEgfQZ4FqYSv09n8Rf/LLfxdSf32m+wqBeUmY4eMa:T8KFC090f/HfyBxK4k
MD5:	C2DEE3A4FD3869E0079CB1C55964D677
SHA1:	0C43B15A5CBF4BEB21403AE5F31702A9A4519AA0
SHA-256:	AAA2D2253F427B5C0EC8D2C3B4BD2420152A77820F402C7EC71D416002DD9769
SHA-512:	4A25576FBC7D9842304A942CCF091E6BA66E7210CF56D9D4B4C0E76766B86339F08432185E8870701FB73A8D6D4CBEC74FE218EA67C818B8CC1E85651D1331F4
Malicious:	false
Preview:	......JFIF.............C....................................................................C.......................................................................F...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(....._._...j.F.......;b...e.7.Y...N..G@j..T\|.Wbm-.a.?..7...f.{Q.x.P.....Y.d..>.\|..?......[.#..?......0..,p......k............Y'....4....Y..E..-QF?.......j.).....[.......)M:t.~......#....~.O...uK....R\O...X.1.@.....g..~......z6..<.eiH.......5.G..b..\|....^....j..D.m.].,R.`.!cS..={W...\|u.........o...3w.M#I...#\|...3+0.3....p..G..R...3.j

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter LightRegular3.019;
Category:	downloaded
Size (bytes):	304092
Entropy (8bit):	6.319721866705066
Encrypted:	false
SSDEEP:	6144:C3jzGK0leqjmxgOqp888TQIPOer74S1/a9cckpRo/iOmL:C3jzGHAq+8IzrUm7o/OL
MD5:	60C8F64064078554B6469EEDA25944EB
SHA1:	732E278A85762A0EDFB4E077E44E3EB39D8AF92E
SHA-256:	7FB161BBEB1C03F21D9A80601400D803E7EA7DD6FC8EA164F2B2A073E7722953
SHA-512:	57F3E7EC496FCA463848AC63E5BD6EC0967A1CC461D0580868B0625DCA78ECEC14FC13391E4B8F1BA08A598DFAF3DD08D721AD2B5AD31C35B9CC9BFAB3CFA03F
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf
Preview:	............GDEF1.1...;l....GPOSDT{6..?...!dGSUB..fx..`...B.OS/2"3nb..n....`STAT.M.?.......Dcmap/....n...e.gasp......;d....glyf...........qhead-.aF..Fp...6hhea......nt...$hmtx......F...'.loca.]........'.maxp........... name5.\.......8post..5r......d.preph..................................!...!...!...!...!...........................@.........................O............!#.3.#.#.!.!..........~...................O.............#..!#.3.#.#.!.!."&54632....!"&54632..............~........3MM37II..3MM37II...........M37II73MM37II73M...O...../.&.......l.4.....O.......&.......f.O.....O.......&.......d.......O.....P.&.......j.,.....O.............&..!#.3.#.#.!.!."&546632......'2654&#"..............~.........p.H{JKzHHzK@WW@@WW............pKzHHzKJ{HuY?@XY?@X...O.......&...............O...'...&.......v.......O.......&.......m.m.....O.......&.......n.4.....O...'...&.......v.......O.....a.&.......s.,.....O.......&...............O.......&...............O.......&.......{.L.....O.....g.&...............O

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	5.3347758095460005
Encrypted:	false
SSDEEP:	3:chV3VAnaWLgzhR+g24QrK5ssQ/QO85cAFYHgKjvYn:chVCnaDNRe4O05cAF4gmYn
MD5:	DFE7716B746BE523F8BCBB235D984932
SHA1:	8239B40F84F4A6E9BF9402FA4C045EA840FFEEB4
SHA-256:	09FE9438D976E54D9574A63B631631C9525816E21CBB61350ECBF8B80B166FEF
SHA-512:	96D735CC339AAB15EC9326603F1D219DD79FDE02E51F747AF38BD4C4E809092E1B90248D34C875FA5EA861BE946A4E6042DA95224A2C6FD0CC10A5F0F2C48956
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSLAnHz3PN6ym9uRIFDWtomm4SBQ1Pnif4EgUNITV2YRIFDc5BTHoSBQ04NomH?alt=proto
Preview:	ClwKCw1raJpuGgQIAxgBCgsNT54n+BoECAUYAQoHDSE1dmEaAAoqDc5BTHoaBAhMGAIqHQgKUhkKDyFAJCMqLl8tPyYlKy9eOhABGP////8PCgsNODaJhxoECF8YAg==

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	downloaded
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
URL:	https://res.cisco.com/websafe/images/loginbg.gif
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7929
Entropy (8bit):	5.26287000902218
Encrypted:	false
SSDEEP:	192:Cn13uRQ+j0Z8aD88ZB7wKf0GQUZGzjQWA3YZU8:+13uRrj0Z/D88ZxN8NzHA3YZR
MD5:	33324DCFDD062F0A8DE8EED8FF502D3D
SHA1:	045DE377840FD9483F96BEDA8E31CE21A1AFB891
SHA-256:	BB7DC3ACAC065441D1AF2D501E6491FA30A72119BA6C5F844C89290D04A0EF7E
SHA-512:	A4DBED13C3414332DC841F41440175411979835C186C8BED6E1B84E3D623C010508C3B979B8C2552E2819E447B359F3133C19DA84D2462386FF2999E007DCB1F
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/postx-registration.css
Preview:	body {...margin: 0;...padding: 0;...min-width: 100%;..}....img {...height: auto;...}....#wideCenteredContainer {...width: 100%;...margin: 0;..}.....inlineSetLocaleRowId,div:empty {...display: none..}.....formInputRow {...margin-top: 1px;...margin-bottom: 1px;..}.....formInputLabelCell, .formRequiredInputLabelCell {...min-width: 100px;...vertical-align: middle;...color: #626469;.. font-family: CiscoSans;.. font-size: 14px;.. line-height: 21px;.. padding-left: 0px;.. padding-bottom: 0px;..}.....emailCell {...border: 1px solid #C6C7CA;...border-radius: 3px;...background-color: #E9E9E9;...color: #39393B;...font-family: CiscoSans;...font-size: 14px;...line-height: 19px;...padding: 5px;...word-break: break-word;...float: left;..}..../* .emailWidth{...min-width: 104%;..} */.....formInputCell input {.. box-sizing: border-box;.. height: 28px;.. width: 250px;.. border: 1px solid #9E9EA2;.. border-radius: 3px;.. background-color: #FFFFFF;.. font-family: CiscoSa

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	18445
Entropy (8bit):	4.897847983137727
Encrypted:	false
SSDEEP:	384:GRERfnE7QxMqwvVvgJo1J6VoFkDtcgueiQXLFiR1I9H+PgpiztB7SxfFERycxK/Y:GSE7QWXxQo1J6ykDlueiQXLFm1I1+Pgc
MD5:	096CE0B8694339B10AA989E61521A9CA
SHA1:	4834282EA07AFF4A2D83684E9538F51475077297
SHA-256:	252FC0DEE0B0A65A653A09D20E388C3A9B2D201ACCEAE55FDB19B5ACDD5A75FE
SHA-512:	48E6B0F57746E131C077EE247BA0F481E88D97128DA229EFB0B521CE8AE9E60A3795D93625C3E6D7E9749A464353900F3EE19860C22A47C7FF9716A026C9D9D5
Malicious:	false
Preview:	function onLoadPage().{. // Hide and unhide some things. For now we assume everything that might. // need to be toggled is a div or a... toggleVisibility('div');. toggleVisibility('a');.. // Set the focus on the field identified in our XML. If no field. // was identified then look for the one named focusItem (which. // might not exist). If a field name was provided but is equal. // to 'nofocus' then don't try to focus on anything... var focusID = (typeof focusItemID == 'undefined') ? '' : focusItemID;. var focusElement = '';.. if (focusID). {..if (focusID != 'nofocus')..{. var focusIds = focusID.split(" ").. //break at firstMatch. for (let i = 0; i < focusIds.length; i++) {. focusElement = document.getElementById(focusIds[i]);. if (focusElement){. break;. }. }. if (!focusElement)... focusElement = document.getElementById('focusItem');. if (!focusElement).

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (532)
Category:	downloaded
Size (bytes):	122633
Entropy (8bit):	5.0561485054636455
Encrypted:	false
SSDEEP:	1536:Hy0/DEC/9Je2j2L292cghoO/BEKLLnMcbCQd7zWiRcZELcv0b4zZxMOXObVHndFp:BD1Je2j2L292cgRBPvMc2QpzWiRcDi
MD5:	327455C921FD609119557C0E6C125F1A
SHA1:	313B51FF43F674A6D3C912B5F7BE6D161382CA05
SHA-256:	ED17CD34424CD1231D8AEAF80F0DC27F604BE4AE9A8C61D82581B2984FD1E1AF
SHA-512:	069D3E086845BE2671E791A429D9E111058D1D0396F0770F426F6759FA200170CB33FC4A0DC17CDA7BFC67DF3FC88329A237140E7BBC2A267D47ADD057DB935F
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/postx.css
Preview:	/* General styles /./ $Id: postx.css,v 1.104 2016-03-10 11:36:12 igitskai Exp $ /.@media (forced-colors: active) and (prefers-color-scheme: light) {. .headericons {. filter: brightness(0) saturate(100%);. }. #localeUI {. filter: invert(1);. }. svg{. filter: brightness(0) saturate(100%);. }.}.html {. background-color: #f7f7f7;.}.body{. background-color: #f7f7f7;. background: #f7f7f7 !important;.}.input:not([disabled]):not(.mds-button):hover {. border-color:#7aa7f5!important;.}.input:not(.mds-button):focus {. border-color:#598ede !important;. box-shadow:0 0 0 2px #326cd133;. outline: none;.}.input:not(.mds-button):focus:hover {. border-color:#598ede !important;. }./to remove browser specific background color when inputs are auto filled */.input:-webkit-autofill . {. -webkit-box-shadow: inset 0 0 0px 9999px white;. }. input:-webkit-autofill:focus. {. -webkit-box-shadow: inset 0 0 0px 9999px white,0 0 0 2px #326cd133 !important;. }.textarea:hover {. border-

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	136794
Entropy (8bit):	7.936019945947513
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042op1:y2i/34ZIcB25tt+VA+LC40YsVlkky
MD5:	7F8C572AFC83D4BCDA1AEAD13E25639A
SHA1:	85F0FAEFF998D2E2DC0E15792A95CC6C8863E655
SHA-256:	A32F5FA5584C61C985B519314A88B3B857FCBA470DAFB0C6AC0A1BDB03567244
SHA-512:	7FD717B64258CB1CEAD53B5B277BF460D6F7D13906DDAE2C91D14CC7482277F9E345B97A4BA58E2F5B55A9543D6BA029F3E874E0DC02571B7155EF9495F7E708
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	downloaded
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	dropped
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 30 names, Macintosh
Category:	downloaded
Size (bytes):	10948
Entropy (8bit):	5.681032264103322
Encrypted:	false
SSDEEP:	192:mKTaaVor7cHBO9alshdQjZk1QN0g7PFcRI0cEiI/ibp:mKTa7cVqCkOTFcG0cEi5p
MD5:	FD6EC063F4FDB8130A0BB83B8BFEEF1B
SHA1:	1C58C28756170ED365D535C2A4667FA34BDAF2F6
SHA-256:	6D821BFA1C0E286427E0B31DA501B39333E2A3D791CEBF213B2E605393656D8A
SHA-512:	D6973E941027232BABFCD9CE40985C36D1DD246E83B48D36AB6A588E70CC08C6B163D9E6156788F55B294AB467008E29991107D79AB6F9303D4AF95C38E5415E
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/SharpSans/SharpSans-Bold.ttf
Preview:	...........pFFTM..~U.......GDEF.%.....t....GPOS3.$[........GSUB...........fOS/2g.....x...`cmapV..(.......bgasp.......l....glyf.".\........head.o'w.......6hhea...-...4...$hmtx...4........loca...L...L....maxp...4...X... name..".........postC..................~7&^_.<..........~................................................................D.....D.1.................@.........h.......................2..............................SHRP... .z.....;...2 ...M.......... .....@.....M.........)...3...&.S.$.M.....'.Q.#.{.3.6..k..n.+.......@.......@.c.@.L.@.>.....@...E.......@.J.@.F.@...@.G.....@.I.....@.}...y.-...>...................4.^.#...6.e.%...%.\|.%.......%.b.6...$.....Y.6...6...6.c.6...%...6...%...6.........c.5.E.......\...Q...-.)...$...................\...........@........... ...9.Z.z..... ...0.A.a.................................................................................................................. !"#$%&'(......)+,-./0123456789:;<=>?@AB...................................

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
URL:	https://static.cres-aws.com/CRES_login_bg.jpg
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	387
Entropy (8bit):	5.179130709592589
Encrypted:	false
SSDEEP:	6:TMVBd/NFmc4slJUY7BuwTARZARtAUbWDYHsyXIzqVJEgqIzqVNQs1jvpJrEIdHfi:TMHdVFvnNuuAiOYHzXw5jNdHK
MD5:	1F6AF349658BA40D72AA4C87AECC722A
SHA1:	E3ABD390D66D37C5C245C6AD172E5433584E2B39
SHA-256:	042CD20A95524AAAE53879E8D0210E9D79F0EB9E42E7C6E25EE4A8BDE703FAC0
SHA-512:	4A508F8F4AF98DAEC5218A4B38103898661D1B430783DE4DB314F1EA9D1D891B85987DF734D9697A49A03F23E54B8B137E16B64E519658351EBADD7330E4C79D
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" .viewBox="0 0 16 16">.<defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style>.</defs>.<path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881c.342-.342,.896-.342,1.237,0s.342,.896,0,1.237l-3.5,3.5c-.342,.342-.896,.342-1.237,0l-3.5-3.5c-.342-.342-.342-.896,0-1.237Z"/></svg>

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	dropped
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (322), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1399
Entropy (8bit):	5.4610908770853825
Encrypted:	false
SSDEEP:	24:yVfABdmqLsXc9XGEFnHyXWsVW6Bv+yXW5cHKoDvwZd9p6PborxoxjhHQ+NDnl7gR:yVfABpL25EVHymWW6syma6R6cr+ldQsk
MD5:	BCA5B3F9C22DE97F16EDA2A74A81F3AA
SHA1:	CBC1E6087D8BD2ADA45483738BFA75A7D9F3A823
SHA-256:	AAC419DDB17FF0C7F1F32857932FDE485DE2E83112B7256DEBD8DBF1CF708EAA
SHA-512:	5AFDF11A23CCEA1E754BDCAEF375D873918F4470F884EA6FCEC210A125D877EA396F4463934268C3B2B1A4E1A4DC30588DADF16E7D65CF152CFEFEA4B94E7E03
Malicious:	false
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qr..,'action':'open'..,'status':11..,'message':'Please enroll before opening this Registered Envelope.'..,'state':1..,'reqTime':1733757391016..,'reqNumber':1..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'recipient':'brian.cummings@ebizcharge.com'..,'sessionId':'39E61E26EEB40535AD779556AFBBCF81'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=brian.cummings@ebizcharge.com'..,'waitTime':50000..,'minPoll':1000..,'maxPoll':5000..,'totalPoll':1200000..,'supportedLocales':[['en','English (US)'],['nl_NL','Dutch'],['de','Deutsch'],['es','Espa\xf1ol'],['fr','Fran\xe7ais'],['it','Italiano'],['pl','Polski'],['pt','Portugu\xeas'],['ru','\u0420\u0443\u0441\u0441\u043a\u0438\u0439'],['zh_CN','\u4e2d\u6587(\u7b80\u4f53)'],['ja','\u65e5\u672c\

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	1.7491585968207541
Encrypted:	false
SSDEEP:	12:y0Cf8jAxh0yiK6xNXL0r8V8I55555555555555R:If//0TDy0X
MD5:	E19FDB47503248CA528DCCE82458B722
SHA1:	51CBCBF58B3A7DFF677E3551BC4A3EDBC5DFFC93
SHA-256:	62A8461E328D5BACE3780FF738D0B58F6502592C04AFA564E0A8A792583A7BFB
SHA-512:	543BA079358D7C66FC08F3F929E45AF64300CA6842D6BB283CE77B10151F081CD7FE057E94C38CEBD545BE185488725A1B6EC1D95656F7EB5E6A30BF94190EE7
Malicious:	false
Preview:	............ .h.......(....... ..... .............................................................................................................................................................................................................................................TT......................................................................................................................................................................................................TT...................................................................................................................f/......................f/......................f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/..............f/......f/......f/......f/......f/......f/..............................f/......................f/......................................f/......................f/...............................................................

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter SemiBoldRegular3.0
Category:	downloaded
Size (bytes):	309432
Entropy (8bit):	6.313238065412327
Encrypted:	false
SSDEEP:	3072:q2x3CNOVe9tnoIXXsm5IQcuM9xaR4ThDnIQvXPLUkOIvdmULUX/aZMOrwTrVxfN7:sTIQMc4ThYyba/PR41Pa/jtdc0
MD5:	1753A05196ABEEF95C32F10246BD6473
SHA1:	ACDA92ADC6CF8C67C89395C65F371A4D2B05A783
SHA-256:	F5595839DEBDB0D028116ED8A7579F31D1C2F712677A2E794459A5DCE6ECA929
SHA-512:	68AA83B7521EFDD53D810E5BC8A6AC0F211CBB989CBA9C317D5AD196FFA08D439CC096C823305D5316D5B0D17FB9D6ED6E39CD0A28E0B2478A2DCCE01D78B760
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-SemiBold.ttf
Preview:	............GDEF1.1...D.....GPOS...t..H...-.GSUB..fx..u...B.OS/2#_nb..w....`STAT.y.E...t...Dcmap/....x...e.gasp......D.....glyfj.........&.head-.aF..O....6hhea......w....$hmtx$5.9..O...'.loca..)...'...'.maxp......'.... name7\`.......Ppost..5r......d.preph.................C................!...!...!...!...!............................@.........................E............!!.!.!.#.!.!...t.......t......8.......\.......E.....[.......#..!!.!.!.#.!.!."&54632....!"&54632.......t.......t......8...OssOQoo..OssOQoo.....\......pLPmmPLppLPmmPLp...E.....V.&.......l.d.....E.......&.......f.......E.......&.......d.R.....E.....v.&.......j.......E.............&..!!.!.!.#.!.!."&546632......'6654&.".......t.......t......8....}.Q.ST.QQ.T:PO;:OO.....\.......{R.PP.RR.P..O88P.O88P...E.....).&.........B.....E.......&.......v.......E.......&.......m.......E.......&.......n.d.....E.......&.......v.......E.....v.&.......s.......E.......&.........N.....E.......&.........b.....E.......&.......{.......E.......&.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x70, components 3
Category:	downloaded
Size (bytes):	4574
Entropy (8bit):	7.816843704687424
Encrypted:	false
SSDEEP:	96:TEgfQZ4FqYSv09n8Rf/LLfxdSf32m+wqBeUmY4eMa:T8KFC090f/HfyBxK4k
MD5:	C2DEE3A4FD3869E0079CB1C55964D677
SHA1:	0C43B15A5CBF4BEB21403AE5F31702A9A4519AA0
SHA-256:	AAA2D2253F427B5C0EC8D2C3B4BD2420152A77820F402C7EC71D416002DD9769
SHA-512:	4A25576FBC7D9842304A942CCF091E6BA66E7210CF56D9D4B4C0E76766B86339F08432185E8870701FB73A8D6D4CBEC74FE218EA67C818B8CC1E85651D1331F4
Malicious:	false
URL:	https://res.cisco.com/websafe/logo/LTk2lS4u7RqcSCZrxmQJ9zr2DY9UroP8JVH6F0CPERii05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1
Preview:	......JFIF.............C....................................................................C.......................................................................F...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(....._._...j.F.......;b...e.7.Y...N..G@j..T\|.Wbm-.a.?..7...f.{Q.x.P.....Y.d..>.\|..?......[.#..?......0..,p......k............Y'....4....Y..E..-QF?.......j.).....[.......)M:t.~......#....~.O...uK....R\O...X.1.@.....g..~......z6..<.eiH.......5.G..b..\|....^....j..D.m.].,R.`.!cS..={W...\|u.........o...3w.M#I...#\|...3+0.3....p..G..R...3.j

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	155758
Entropy (8bit):	5.06621719317054
Encrypted:	false
SSDEEP:	1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F
MD5:	A15C2AC3234AA8F6064EF9C1F7383C37
SHA1:	6E10354828454898FDA80F55F3DECB347FD9ED21
SHA-256:	60B19E5DA6A9234FF9220668A5EC1125C157A268513256188EE80F2D2C8D8D36
SHA-512:	B435CF71A9AE66C59677A3AC285C87EA702A87F32367FE5893CF13E68F9A31FCA0A8D14F6A7D692F23C5027751CE63961CA4FE8D20F35A926FF24AE3EB1D4B30
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	1.7491585968207541
Encrypted:	false
SSDEEP:	12:y0Cf8jAxh0yiK6xNXL0r8V8I55555555555555R:If//0TDy0X
MD5:	E19FDB47503248CA528DCCE82458B722
SHA1:	51CBCBF58B3A7DFF677E3551BC4A3EDBC5DFFC93
SHA-256:	62A8461E328D5BACE3780FF738D0B58F6502592C04AFA564E0A8A792583A7BFB
SHA-512:	543BA079358D7C66FC08F3F929E45AF64300CA6842D6BB283CE77B10151F081CD7FE057E94C38CEBD545BE185488725A1B6EC1D95656F7EB5E6A30BF94190EE7
Malicious:	false
URL:	https://res.cisco.com/favicon.ico
Preview:	............ .h.......(....... ..... .............................................................................................................................................................................................................................................TT......................................................................................................................................................................................................TT...................................................................................................................f/......................f/......................f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/..............f/......f/......f/......f/......f/......f/..............................f/......................f/......................................f/......................f/...............................................................

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (322), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1407
Entropy (8bit):	5.43951077168761
Encrypted:	false
SSDEEP:	24:yVfABdmqLsXc9XGEFnHyXWsZjW6Bv+yXW5cHKoDvwZd9p6PborxoxqOGp4vEDnlx:yVfABpL25EVHymOjW6syma6R6cr+U54C
MD5:	0869176CC6F260EB42C0AF347C04654D
SHA1:	4EB868F0AD551B761D87B621590E5C6D8AEC1222
SHA-256:	AB4DD6102666111EDBD0B7916274ABE902A8A7EAE24767FCC910648300493A92
SHA-512:	0E8FA197D241DBE481ABEA07A33E5296FC67C9A1BC0C43ADAAA9663A3A6EEC2B1383229E6FFA39BE82EA2E17AA5FCE54395A8CD841D9D892BB1AE9190A5A3E72
Malicious:	false
URL:	https://res.cisco.com/keyserver/keyserver?su=brian.cummings%40ebizcharge.com&df=&tf=&lp=en&v=2&m=%7c1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt.servers.global.prv&s=1&f=0&d=1733757391016&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36
Preview:	if(l_)..l_({.."RPCRef":payload.rpc,."callback":qr..,'action':'open'..,'status':11..,'message':'Please enroll before opening this Registered Envelope.'..,'state':1..,'reqTime':1733757391016..,'reqNumber':1..,'recipientIdentified':false..,'success':true..,'cookiesEnabled':true..,'hadRememberMe':false..,'hadEnablePSP':false..,'openOnline':false..,'recipient':'brian.cummings@ebizcharge.com'..,'sessionId':'B3923C4A05FB8D47B858F3B177E117E6'..,'lp':'en'..,'credentialsExpiredWarning':false..,'credentialsExpiredDays':-1..,'pswdExpLink':'https://res.cisco.com/websafe/custom.action?cmd=changeExpiredPassword&id=brian.cummings@ebizcharge.com'..,'waitTime':50000..,'minPoll':1000..,'maxPoll':5000..,'totalPoll':1200000..,'supportedLocales':[['en','English (US)'],['nl_NL','Dutch'],['de','Deutsch'],['es','Espa\xf1ol'],['fr','Fran\xe7ais'],['it','Italiano'],['pl','Polski'],['pt','Portugu\xeas'],['ru','\u0420\u0443\u0441\u0441\u043a\u0438\u0439'],['zh_CN','\u4e2d\u6587(\u7b80\u4f53)'],['ja','\u65e5\u672c\

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/jquery-3.7.1.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14965)
Category:	downloaded
Size (bytes):	14966
Entropy (8bit):	4.771466859662571
Encrypted:	false
SSDEEP:	192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF
MD5:	9F54E6414F87E0D14B9E966F19A174F9
SHA1:	AE5735562FAABD1A2D9803BBD7BF4C502B5E4F51
SHA-256:	15D6AD4DFDB43D0AFFAD683E70029F97A8F8FC8637A28845009EE0542DCCDF81
SHA-512:	9CC365A6E6833EBAA5125B37217FD0E7A1F7EAABC1012C1BDE2A6EA373317966EC401D7CF35A31D1C46FED43D380196B8AAA329EDDF92A313080651E51720F9F
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Preview:	.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--single .select2-selection__rendered{display:block;padding-left:8px;padding-right:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-container .select2-selection--multiple{box-sizing:border-box;cursor:pointer;display:block;min-height:32px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--multiple .select2-selection__rendered{display:inline-block;overflow:hidden;padding-left:8px;text-overflow:ellipsis;white-space:nowrap}.select2-cont

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18445
Entropy (8bit):	4.897847983137727
Encrypted:	false
SSDEEP:	384:GRERfnE7QxMqwvVvgJo1J6VoFkDtcgueiQXLFiR1I9H+PgpiztB7SxfFERycxK/Y:GSE7QWXxQo1J6ykDlueiQXLFm1I1+Pgc
MD5:	096CE0B8694339B10AA989E61521A9CA
SHA1:	4834282EA07AFF4A2D83684E9538F51475077297
SHA-256:	252FC0DEE0B0A65A653A09D20E388C3A9B2D201ACCEAE55FDB19B5ACDD5A75FE
SHA-512:	48E6B0F57746E131C077EE247BA0F481E88D97128DA229EFB0B521CE8AE9E60A3795D93625C3E6D7E9749A464353900F3EE19860C22A47C7FF9716A026C9D9D5
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/standard-scripts.js
Preview:	function onLoadPage().{. // Hide and unhide some things. For now we assume everything that might. // need to be toggled is a div or a... toggleVisibility('div');. toggleVisibility('a');.. // Set the focus on the field identified in our XML. If no field. // was identified then look for the one named focusItem (which. // might not exist). If a field name was provided but is equal. // to 'nofocus' then don't try to focus on anything... var focusID = (typeof focusItemID == 'undefined') ? '' : focusItemID;. var focusElement = '';.. if (focusID). {..if (focusID != 'nofocus')..{. var focusIds = focusID.split(" ").. //break at firstMatch. for (let i = 0; i < focusIds.length; i++) {. focusElement = document.getElementById(focusIds[i]);. if (focusElement){. break;. }. }. if (!focusElement)... focusElement = document.getElementById('focusItem');. if (!focusElement).

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.182712201946342
Encrypted:	false
SSDEEP:	3:UOKIFMwOGEjBAzKZMA:UOhOGEjBAOv
MD5:	758990A46950375DAF73A6BD55A5865C
SHA1:	5E0AA4F26ECC3BF45FC788F61ACD13AF694DDE1C
SHA-256:	6912EA8572AF5297B6C27533F1A2C02672C0F81A37421FA07D7322288EC9D407
SHA-512:	8D3FD64350E9591D3DFF42E4AE69AA546D5F5D29938398A0CE1E35AD74DBD2C09F7DCE8844702982A5248D2F15E3CA93E937D50B4F2A5B3F276F09563C69B712
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/overrides.css
Preview:	/* Any custom or overridden styles can be included in this file */..

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2143
Entropy (8bit):	4.907198882670554
Encrypted:	false
SSDEEP:	48:DS7oJrWUkLRg8xTSCQw6KMYS73WOL7VgLxT9C/w6a:DS7oJrWUkLRg8xTSCQw6KMYS73WOLpg/
MD5:	FB2ECA121A12D98402B53355D9EACF7E
SHA1:	4BD42A075D32E7631D6D378FDCB4135DB20BA191
SHA-256:	2E1C61EEC11CFDBC16A55D6433341F9CE2A5253BA94F01FADC2D4BA31A8719EB
SHA-512:	46262D3463C1EF5B93DCB5EEA848643D23A89E94BFE02C8481BB35683852A653C24B697A62153BAF92EF0C5A79D5DC33EE5F09445E7789C8223DF58CEFAB5A75
Malicious:	false
URL:	https://res.cisco.com/admin/cisco-fonts.min.css
Preview:	./* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 800;. src: url("./fonts/Inter/Inter-ExtraBo

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter SemiBoldRegular3.0
Category:	downloaded
Size (bytes):	309432
Entropy (8bit):	6.313238065412327
Encrypted:	false
SSDEEP:	3072:q2x3CNOVe9tnoIXXsm5IQcuM9xaR4ThDnIQvXPLUkOIvdmULUX/aZMOrwTrVxfN7:sTIQMc4ThYyba/PR41Pa/jtdc0
MD5:	1753A05196ABEEF95C32F10246BD6473
SHA1:	ACDA92ADC6CF8C67C89395C65F371A4D2B05A783
SHA-256:	F5595839DEBDB0D028116ED8A7579F31D1C2F712677A2E794459A5DCE6ECA929
SHA-512:	68AA83B7521EFDD53D810E5BC8A6AC0F211CBB989CBA9C317D5AD196FFA08D439CC096C823305D5316D5B0D17FB9D6ED6E39CD0A28E0B2478A2DCCE01D78B760
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf
Preview:	............GDEF1.1...D.....GPOS...t..H...-.GSUB..fx..u...B.OS/2#_nb..w....`STAT.y.E...t...Dcmap/....x...e.gasp......D.....glyfj.........&.head-.aF..O....6hhea......w....$hmtx$5.9..O...'.loca..)...'...'.maxp......'.... name7\`.......Ppost..5r......d.preph.................C................!...!...!...!...!............................@.........................E............!!.!.!.#.!.!...t.......t......8.......\.......E.....[.......#..!!.!.!.#.!.!."&54632....!"&54632.......t.......t......8...OssOQoo..OssOQoo.....\......pLPmmPLppLPmmPLp...E.....V.&.......l.d.....E.......&.......f.......E.......&.......d.R.....E.....v.&.......j.......E.............&..!!.!.!.#.!.!."&546632......'6654&.".......t.......t......8....}.Q.ST.QQ.T:PO;:OO.....\.......{R.PP.RR.P..O88P.O88P...E.....).&.........B.....E.......&.......v.......E.......&.......m.......E.......&.......n.d.....E.......&.......v.......E.....v.&.......s.......E.......&.........N.....E.......&.........b.....E.......&.......{.......E.......&.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (491), with CRLF, LF line terminators
Entropy (8bit):	5.908403526207575
TrID:	Scalable Vector Graphics (18501/1) 24.18% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (11501/1) 15.03% HyperText Markup Language (11501/1) 15.03%
File name:	securedoc_20241209T071703.html
File size:	145'297 bytes
MD5:	a1a267bc6ca80b136bfc200841eebecb
SHA1:	56ec4d0d6124416237e81a1df76a1bd00af5dcf1
SHA256:	5da0e8cfcc982e287d25aad58f374b0513d778e25320a5a2fafd8d7425e5ccbd
SHA512:	8b8b89190482572d7c26b004d2a045382e42f8b9a3960c5e831ee4f4cd050c7da9a5f82871dc96262278ba16d5244b33dd18ca12dfdf5acee88336da2396ecba
SSDEEP:	3072:sil/LQISQGjA4RPe1J4s+IHYONivQ2W/UA+xq:1/LQIGgJ4s+IHYONivQ2Opl
TLSH:	ECE37DC97252602202D718F7747B158A3A3194070509A9B1FBACC9ACBFB9DD6427FF8D
File Content Preview:	saved from url=(0025)https://res.cisco.com:443 -->..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN". "http://www.w3.org/TR/html4/loose.dtd"><html.lang="en"><head><base href="http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOT

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 16:16:07.163172960 CET	49676	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:16:07.163619041 CET	49675	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:16:07.413192034 CET	49674	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:16:09.163198948 CET	49677	443	192.168.2.9	20.189.173.11
Dec 9, 2024 16:16:10.366410017 CET	49673	443	192.168.2.9	204.79.197.203
Dec 9, 2024 16:16:16.772650003 CET	49676	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:16:16.772676945 CET	49675	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:16:17.022587061 CET	49674	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:16:18.772608995 CET	49677	443	192.168.2.9	20.189.173.11
Dec 9, 2024 16:16:19.567526102 CET	443	49705	23.206.229.209	192.168.2.9
Dec 9, 2024 16:16:19.567692995 CET	49705	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:16:27.957257032 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:27.957279921 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:27.957371950 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:27.957381964 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:27.957417965 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:27.957467079 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:27.957648993 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:27.957654953 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:27.958045006 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:27.958055973 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:27.997422934 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:27.997837067 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.077646017 CET	49762	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.117351055 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.117475986 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.117638111 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.117712021 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.117714882 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.118133068 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.197664976 CET	80	49762	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.197729111 CET	49762	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.237993956 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238359928 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238425016 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.238554955 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238607883 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:28.238626957 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238648891 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238748074 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238770008 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238842010 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238852978 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238945007 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.238970041 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.358340979 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.358371019 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.358489037 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.358530045 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:28.483012915 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:28.483062983 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:28.483129978 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:28.483385086 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:28.483397961 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:29.174169064 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.174362898 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.174541950 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.174565077 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.174804926 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.174830914 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.175909042 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.175975084 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.176062107 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.176116943 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.178566933 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.178639889 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.184240103 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.184248924 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.184566021 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.184675932 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.187416077 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.187434912 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.214006901 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:29.254426003 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:29.323262930 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:29.323268890 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:29.338607073 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.338756084 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.366374969 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:29.366424084 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:29.366631985 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:29.366657972 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:29.366677046 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:29.366787910 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:29.367052078 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:29.367063046 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:29.367322922 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:29.367338896 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:29.618469954 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.618527889 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.618552923 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.618581057 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.618611097 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.618617058 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.618642092 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.618660927 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.618680954 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.626717091 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.635174990 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.635222912 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.635222912 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.635251045 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.635293961 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.643635035 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.652100086 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.652157068 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.652182102 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.652213097 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.652451992 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.658633947 CET	49754	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.658660889 CET	443	49754	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.750524044 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.750572920 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.750607014 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.750617981 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.750632048 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.750669003 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.750709057 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.750709057 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.750720978 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.750752926 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.758873940 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.758965969 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.758975029 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.775635004 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.777550936 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.777559042 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.837757111 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.869637012 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.938200951 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.938231945 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.945909977 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.946034908 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.946060896 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.955635071 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.955715895 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.955781937 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.955811977 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.955851078 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.963613987 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.971549034 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.971646070 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.971667051 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.971694946 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.971980095 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.979579926 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.987533092 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.987653017 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.987677097 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.995400906 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:29.995711088 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:29.995738983 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.003597975 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.003644943 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.003671885 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.011435986 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.011496067 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.011521101 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.024312973 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.024390936 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.024447918 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.024477005 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.024528027 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.030869961 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.100338936 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:30.124730110 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:30.124763012 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:30.126063108 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:30.126128912 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:30.127737999 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:30.127830982 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:30.128324986 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:30.128338099 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:30.130518913 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.134042978 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.136364937 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.136462927 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.136491060 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.142767906 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.142891884 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.142918110 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.142946959 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.142997980 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.147557020 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.156889915 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.157051086 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.157080889 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.157215118 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.161254883 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.161264896 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.161317110 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.165472984 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.165527105 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.174177885 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.174195051 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.174246073 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.174271107 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.174299955 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.174324036 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.174365997 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.174521923 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.196228027 CET	49755	443	192.168.2.9	104.17.24.14
Dec 9, 2024 16:16:30.196266890 CET	443	49755	104.17.24.14	192.168.2.9
Dec 9, 2024 16:16:30.233712912 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:30.426951885 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:30.427006960 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:30.427122116 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:30.427325964 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:30.427339077 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:30.798206091 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.798544884 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.798564911 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.799561977 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.799689054 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.799828053 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.800185919 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.800208092 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.801194906 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.801279068 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.801381111 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.801398039 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.801512003 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.801559925 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.802469015 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.802539110 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.802753925 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.802762032 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:30.856209040 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:30.933820963 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.179513931 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:31.179549932 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:31.179620981 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:31.179841042 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:31.179850101 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:31.248629093 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.248730898 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.248876095 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.249689102 CET	49767	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.249707937 CET	443	49767	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.251115084 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.251144886 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.251158953 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.251192093 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.251224995 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.251240969 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.251244068 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.251288891 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.252840996 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.254214048 CET	49768	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.254232883 CET	443	49768	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.292443037 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.372492075 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.411811113 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.431569099 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:31.431602001 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:31.431693077 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:31.431812048 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:31.431840897 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:31.431925058 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:31.432209969 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:31.432221889 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:31.432356119 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:31.432377100 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:31.497294903 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.497322083 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.497330904 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.497363091 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.497380972 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.497389078 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.497394085 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.497421980 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.497457027 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.497468948 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.572449923 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.576275110 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.576320887 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.576466084 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.576814890 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.576826096 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.612139940 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.614623070 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.614677906 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.614805937 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.615190029 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.615211964 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:31.621928930 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.626832008 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.646080971 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:31.646339893 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:31.646361113 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:31.647615910 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:31.647674084 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:31.648061037 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:31.648108959 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:31.648211956 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:31.653812885 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:31.691675901 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.691731930 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.691751957 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.691755056 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.691766977 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.691790104 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.691812992 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.691837072 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.695329905 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:31.697825909 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:31.697849035 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:31.744010925 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:31.746030092 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.746045113 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.746078014 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.746109962 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.746114016 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.746133089 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.746162891 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.840488911 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.840524912 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.852092028 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.852108002 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.852144003 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.852154970 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.852181911 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.852209091 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.858589888 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.858666897 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.858688116 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.899307966 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.899327993 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.899344921 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.899353027 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.899369001 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.899399042 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.899452925 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.935218096 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.935234070 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.935252905 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.935261965 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.935282946 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.935328007 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.935348034 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.938170910 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.938302994 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.938329935 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.977005005 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.977015972 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.977029085 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.977065086 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.977080107 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:31.977112055 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:31.977128029 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.028836012 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.028868914 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.041815996 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.041826963 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.041861057 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.041873932 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.041886091 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.041907072 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.041929960 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.041950941 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.042956114 CET	49763	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.042980909 CET	443	49763	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.086741924 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.086791039 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.086850882 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.087040901 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:32.087104082 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:32.087171078 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:32.087338924 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:32.087352037 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:32.087752104 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:32.087765932 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:32.099375963 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.099442005 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.099483013 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.099493980 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.099520922 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.099560022 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.099601984 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.099608898 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.099644899 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.107827902 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.114106894 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.114229918 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.114255905 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.122518063 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.122580051 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.122605085 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.172871113 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.218689919 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.261895895 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.316338062 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.320086002 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.320143938 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.320162058 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.327636957 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.327681065 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.327689886 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.338349104 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.338395119 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.338404894 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.346054077 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.346113920 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.346126080 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.353751898 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.353827953 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.353830099 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.353842974 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.353883028 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.360734940 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.367795944 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.367851973 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.367871046 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.374744892 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.374809027 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.374829054 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.381692886 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.381894112 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.381901026 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.395757914 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.395939112 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.395945072 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.402518034 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.402595997 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.402604103 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.409671068 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.409754992 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.409760952 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.463733912 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.523504019 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.526104927 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.526187897 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.526220083 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.531023979 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.531523943 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.531537056 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.540791988 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.540880919 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.540904999 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.541708946 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.550353050 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.550360918 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.550419092 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.555378914 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.555387020 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.555444002 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.564713001 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.564719915 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.564775944 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.564784050 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.564795971 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.564820051 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.564847946 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.567677975 CET	49772	443	192.168.2.9	104.17.25.14
Dec 9, 2024 16:16:32.567687988 CET	443	49772	104.17.25.14	192.168.2.9
Dec 9, 2024 16:16:32.846456051 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.846478939 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.865937948 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.865968943 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.866266012 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.866278887 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.867125988 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.867204905 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.867693901 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.867752075 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.875335932 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.875427961 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.875798941 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.875900984 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.875956059 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.875972986 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.876271009 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.876281023 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:32.894838095 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:32.910690069 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:32.910717964 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:32.911895037 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:32.911962032 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:32.917083979 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:32.917170048 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:32.924002886 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.924036026 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:32.964119911 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:32.964150906 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:33.012037992 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:33.056618929 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.057079077 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.057106972 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.057476044 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.057996988 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.058079004 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.058141947 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.074090958 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.074503899 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.074568987 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.074954033 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.075474024 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.075542927 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.075680017 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.099334002 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.104024887 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.119333029 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.295839071 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:33.295931101 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:33.296010017 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:33.297080040 CET	49777	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:33.297103882 CET	443	49777	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:33.298501015 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:33.298527002 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:33.298535109 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:33.298621893 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:33.298621893 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:33.298693895 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:33.300441027 CET	49778	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:33.300472975 CET	443	49778	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:33.513117075 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.513421059 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.513438940 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.514493942 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.514556885 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.515050888 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.515115023 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.515321016 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.515328884 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.555329084 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.669574022 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:33.669826031 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:33.669862032 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:33.670212984 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:33.670602083 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:33.670677900 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:33.670764923 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:33.715337992 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:33.975572109 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.975624084 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.975680113 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.975703001 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.975728035 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:33.975752115 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:33.975785017 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.009154081 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.009246111 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.009299040 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.009321928 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.009387016 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.160650015 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.160664082 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.160753012 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.160783052 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.191350937 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.191386938 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.191397905 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.191436052 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.191467047 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.191485882 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.191648960 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.219193935 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.219202042 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.219273090 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.219290972 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.233870029 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.233942032 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.233957052 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.233969927 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.233997107 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.234026909 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.263581991 CET	49783	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.263622046 CET	443	49783	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.297173977 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.297211885 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.297293901 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.297605991 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:34.297620058 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:34.298269987 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:34.298315048 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:34.298722982 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:34.298916101 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:34.298930883 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:34.298999071 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:34.299217939 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:34.299237967 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:34.299417019 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:34.299434900 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:34.361362934 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:34.361407042 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:34.361473083 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:34.361721039 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:34.361730099 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:34.990520000 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:34.990556955 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:34.990634918 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:34.990664959 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.032191992 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.136225939 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.136244059 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.136377096 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.136413097 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.181476116 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.203033924 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.203053951 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.203075886 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.203083038 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.203094006 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.203136921 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.203149080 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.203188896 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.247298002 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.247339964 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.247495890 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.247523069 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.247544050 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.247567892 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.329560041 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.329627991 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.382430077 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.382462025 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.382510900 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.382541895 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.382559061 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.382595062 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.387880087 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.421385050 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.421408892 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.421452999 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.421484947 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.421500921 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.459914923 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.459949017 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.459994078 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.460017920 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.460047960 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.510303974 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.510325909 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.548523903 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.548538923 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.548557043 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.548566103 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.548599958 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.548635006 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.548650980 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.571302891 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.571319103 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.571346045 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.571355104 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.571381092 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.571393013 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.571405888 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.571429968 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.594281912 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.594291925 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.594337940 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.594342947 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.594367027 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.594378948 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.594393015 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.594410896 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.596381903 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.596445084 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.596451044 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.596482038 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.596525908 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.596755028 CET	49782	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.596769094 CET	443	49782	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.690454960 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.690516949 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.690570116 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.690848112 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.690860987 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.692043066 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.692095041 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.692146063 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.692511082 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.692524910 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.706574917 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:35.706998110 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:35.707014084 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:35.707372904 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:35.707674980 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:35.707791090 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:35.707817078 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:35.747826099 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:35.747839928 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:35.793479919 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:35.793742895 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:35.793756962 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:35.794135094 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:35.794496059 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:35.794573069 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:35.794929981 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:35.839327097 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:35.848918915 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:35.848948002 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:35.849029064 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:35.849265099 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:35.849283934 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:35.908879995 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.909096956 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.909135103 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.909471035 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.909672976 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.909687996 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.910248041 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.910384893 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.910614014 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.910712004 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.910727024 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.910785913 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.910876036 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.911200047 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.911282063 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.911343098 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.955323935 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.955333948 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.963773966 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.963778019 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:35.963787079 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:35.963805914 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:36.013165951 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:36.013215065 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:36.249833107 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.249866962 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.249897003 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.249916077 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.249922991 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.249938965 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.273720026 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:36.273802042 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:36.275568962 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:36.276009083 CET	49798	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:36.276024103 CET	443	49798	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:36.283226967 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.283284903 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.283296108 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.283308029 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.283341885 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.293183088 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:36.293216944 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:36.293307066 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:36.293513060 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:36.293525934 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:36.295173883 CET	49812	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.295226097 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.295285940 CET	49812	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.295471907 CET	49812	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.295486927 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.437360048 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.437450886 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.437462091 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.465967894 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.466012001 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.466053009 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.466061115 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.466155052 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.488377094 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.488393068 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.488444090 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.488475084 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.488483906 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.503180981 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.503243923 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.503257990 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.503288984 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:36.503305912 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.503340960 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.594019890 CET	49801	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:36.594043016 CET	443	49801	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:37.240035057 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.274528980 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.274565935 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.279594898 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.279611111 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.279696941 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.279701948 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.279715061 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.279721975 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.279748917 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.279750109 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.279773951 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.279787064 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.279798031 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.286334038 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.286355019 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.286572933 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.286603928 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.287480116 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.287543058 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.287755013 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.287807941 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.294044018 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.309851885 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.309952021 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.310467005 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.310604095 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.311240911 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.311259031 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.311295986 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.311330080 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.321132898 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.321158886 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.346599102 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.346955061 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.346966982 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.347003937 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.347018003 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.347028971 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.347043991 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.347060919 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.347130060 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.347130060 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.347141981 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.359165907 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.359201908 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.371280909 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.395771027 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.438967943 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:37.478228092 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.478245020 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.478267908 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.478277922 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.478306055 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.478310108 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.478317976 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.478432894 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.489021063 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:37.522455931 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.522468090 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.522505999 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.522522926 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.522542953 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.522562027 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.522609949 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.522609949 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.527476072 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.527488947 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.527513981 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.527532101 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.527542114 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.527554989 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.527570963 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.527604103 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.527611971 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.527652025 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.579277039 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:37.579288006 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:37.580224037 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.580234051 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.580260038 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.580269098 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.580322027 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.580338001 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.580380917 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.582159042 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:37.582236052 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:37.586772919 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:37.587100983 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:37.589617014 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:37.589626074 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:37.644498110 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:37.651451111 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.651463985 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.651506901 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.651542902 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.651551008 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.651567936 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.651597023 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.651633978 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.656858921 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.656922102 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.692501068 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.692523003 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.692605019 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.692616940 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.692641973 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.702841997 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:37.703069925 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:37.703087091 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:37.703465939 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:37.703860998 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:37.703960896 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:37.703986883 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:37.704788923 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:37.704983950 CET	49812	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:37.704998970 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:37.705121040 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.705142975 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.705183983 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.705199003 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.705224991 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.705250978 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.705378056 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:37.705714941 CET	49812	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:37.705780029 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:37.706468105 CET	49812	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:37.710541964 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.728019953 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.728089094 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.728096962 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.728111029 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.728157043 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.728157043 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.747348070 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.747397900 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.747425079 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.747440100 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.747471094 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.751329899 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:37.751333952 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:37.752198935 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:37.783626080 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.783652067 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.783691883 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.783708096 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.783742905 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.815836906 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.815952063 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.815953970 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.815974951 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.816025972 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.818432093 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.818495989 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.838690042 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.843971968 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.843998909 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.844074965 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.844109058 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.844130993 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.844192982 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.866239071 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.866265059 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.866323948 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.866337061 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.866352081 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.870059967 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.870074034 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.870115042 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.870127916 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.870155096 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.870183945 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.870183945 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.870203972 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.870223045 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.870223045 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.872137070 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.872183084 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.872190952 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.883681059 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.883699894 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.883805037 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.883805037 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.883817911 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.885577917 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.885639906 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.885648966 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.898633003 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.898648977 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.898663044 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.898670912 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.898721933 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.898731947 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.898762941 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.898772001 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.898782015 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.898802042 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.911730051 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.911747932 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.911798000 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.911819935 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.911863089 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.921773911 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.921791077 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.921832085 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.921845913 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.921858072 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.921891928 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.921920061 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.922861099 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.922888994 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.922930956 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.922955990 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.922977924 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.942094088 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.942125082 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.942161083 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.942177057 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.942193985 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.942226887 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.955413103 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.955436945 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.955502033 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.955516100 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.955534935 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.965470076 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.968849897 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.968902111 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.968943119 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.968955994 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.968985081 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.982235909 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.982255936 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.982299089 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:37.982312918 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:37.982362986 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.011003017 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.011019945 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.011069059 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.011070013 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.011091948 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.011164904 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.011172056 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.011219025 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.022943974 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.022969007 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.023057938 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.023057938 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.023070097 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.023102999 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.032351971 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.032380104 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.032438040 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.032452106 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.032563925 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.042064905 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.042093992 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.042148113 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.042155981 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.042217016 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.042217970 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.050143957 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.050219059 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.050234079 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.050240993 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.050255060 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.050302029 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.050302029 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.050765038 CET	49799	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.050777912 CET	443	49799	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.064372063 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.064416885 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.064465046 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.064483881 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.064512968 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.064531088 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.066257000 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.077084064 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.077105045 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.077141047 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.077153921 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.077203035 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.078676939 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.078723907 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.078797102 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.089963913 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.089982986 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.090042114 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.090051889 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.090116978 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.099776983 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.099801064 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.099841118 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.099853992 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.099890947 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.105437994 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.105496883 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.105524063 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.105532885 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.105545044 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.105583906 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.105986118 CET	49800	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.106000900 CET	443	49800	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.144021034 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:38.144088030 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:38.144145966 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:38.154128075 CET	49811	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:38.154141903 CET	443	49811	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:38.159965992 CET	49818	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:38.160034895 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:38.160280943 CET	49818	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:38.160336971 CET	49818	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:38.160346031 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:38.255762100 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:38.255842924 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:38.255898952 CET	49812	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:38.258976936 CET	49812	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:38.259004116 CET	443	49812	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:38.565557003 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.565582991 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.565591097 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.565615892 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.565627098 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.565642118 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.565648079 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.565666914 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.565696001 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.565721035 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.637537003 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.637562037 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.637577057 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.637593985 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.637609005 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.637617111 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.637639999 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.637681961 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.637706041 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.637729883 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.678428888 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.704042912 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.704068899 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.704076052 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.704108953 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.704128027 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.704138994 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.704149961 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.704166889 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.704197884 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.704197884 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.704217911 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.728966951 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.739979982 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.739994049 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.740021944 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.740066051 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.740088940 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.740138054 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.740238905 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.758721113 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.793828011 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.793848038 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.793914080 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.793939114 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.793984890 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.806344032 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.808788061 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.808854103 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.819338083 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.819350958 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.819399118 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.819437981 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.819493055 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.819504023 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.819557905 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.833374977 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.833535910 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.865154028 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.865175009 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.865227938 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.865253925 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.865267992 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.865463972 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.874073029 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.901885033 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.901912928 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.901956081 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.901979923 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.901998997 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.902015924 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.926788092 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.927263975 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.927326918 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.927335978 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.927350998 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.927388906 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.940306902 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.940381050 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.942280054 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.945117950 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:38.945173025 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:38.955131054 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.955183029 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.955205917 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.955223083 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:38.955255032 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:38.955267906 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.200690031 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.200709105 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.200753927 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.200804949 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.200829983 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.201003075 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.201003075 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.320501089 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.320518017 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.320565939 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.320604086 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.320657969 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.320677996 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.320709944 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.321295023 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.321351051 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.321368933 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.321378946 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.321419001 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.321420908 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.321438074 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.321448088 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.321458101 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.321475983 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.323673010 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.323698997 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.323775053 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.323785067 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.328150034 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.328174114 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.328252077 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.328265905 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.328325987 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.328463078 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.328469038 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.328495026 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.328516960 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.328551054 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.328562021 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.331238031 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.331289053 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.331336975 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.331362009 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.331373930 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.331408978 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.338411093 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.338430882 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.338485003 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.338488102 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.338506937 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.338536978 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.338536978 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.339463949 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.339518070 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.339528084 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.339553118 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.339576006 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.339601040 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.343543053 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.343578100 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.343609095 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.343632936 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.343725920 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.343725920 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.344331026 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.344383955 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.344413042 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.344504118 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.344504118 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.344513893 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.357867956 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.357892036 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.357939959 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.357971907 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.357997894 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.385797024 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.386758089 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.401086092 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.439990997 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.445121050 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.445149899 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.445204020 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.445225000 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.445240021 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.445266962 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.448997021 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.449059010 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.454348087 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.454379082 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.454437971 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.454452038 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.454468012 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.454499960 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.472589970 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.472635031 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.472659111 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.472708941 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.472743034 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.472758055 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.478066921 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.478096008 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.478152037 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.478177071 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.478193045 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.493031979 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.493053913 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.493097067 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.493124008 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.493138075 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.493216991 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.497275114 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.497314930 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.497361898 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.497380972 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.497404099 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.500447989 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.500488043 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.500499964 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.500515938 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.500539064 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.500569105 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.503777027 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.503856897 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.503890991 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.503890991 CET	49808	443	192.168.2.9	18.66.161.47
Dec 9, 2024 16:16:39.503911018 CET	443	49808	18.66.161.47	192.168.2.9
Dec 9, 2024 16:16:39.513653040 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.513691902 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.513726950 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.513746977 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.513760090 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.513788939 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.516508102 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.516570091 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.525130033 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.525152922 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.525187969 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.525213957 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.525230885 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.525253057 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.535823107 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.535851955 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.535907984 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.535928965 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.535963058 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.535986900 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.559400082 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.559433937 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.559437990 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.559482098 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.559484005 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.559495926 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.559499025 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.559529066 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.559572935 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.559576988 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.559607983 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.559618950 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.560720921 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.560782909 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.563416004 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.570663929 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:39.570975065 CET	49818	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:39.571005106 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:39.571372032 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:39.571711063 CET	49818	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:39.571778059 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:39.571851969 CET	49818	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:39.578643084 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.578661919 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.578716040 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.578722000 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.578762054 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.578778028 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.580073118 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.580100060 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.580140114 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.580142021 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.580158949 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.580187082 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.599257946 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.599298954 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.599330902 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.599339962 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.599373102 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.604823112 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.604856014 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.604867935 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.604887009 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.604922056 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.604927063 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.604973078 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.608247995 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.614449978 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.614497900 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.614514112 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.614522934 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.614545107 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.614546061 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.614587069 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.614974976 CET	49805	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.614990950 CET	443	49805	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.615329981 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:39.632848978 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.632865906 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.632922888 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.632949114 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.632971048 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.654848099 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.654876947 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.654921055 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.654937983 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.654953957 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.675364971 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.675389051 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.675437927 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.675465107 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.675482988 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.678103924 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.678196907 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.678208113 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.691971064 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.691999912 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.692039967 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.692049980 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.692075968 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.700385094 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.700427055 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.700459003 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.700462103 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.700472116 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.700512886 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.700512886 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.700520992 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:39.700680971 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.700834036 CET	49806	443	192.168.2.9	18.66.161.34
Dec 9, 2024 16:16:39.700846910 CET	443	49806	18.66.161.34	192.168.2.9
Dec 9, 2024 16:16:40.051094055 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:40.051175117 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:40.051270962 CET	49818	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:40.067840099 CET	49818	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:40.067868948 CET	443	49818	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:42.584216118 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:42.584279060 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:42.584381104 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:43.314016104 CET	49775	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:16:43.314048052 CET	443	49775	142.250.181.68	192.168.2.9
Dec 9, 2024 16:16:46.311259985 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:46.311327934 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:46.311405897 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:46.311844110 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:46.311862946 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:46.320743084 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:46.320780039 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:46.320842028 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:46.321403980 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:46.321415901 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.722675085 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.722985983 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.723020077 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.724067926 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.724133968 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.724556923 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.724621058 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.724752903 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.732245922 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.732842922 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.732861042 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.734154940 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.734222889 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.734597921 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.734677076 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.771332026 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.775595903 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.775604963 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.775614977 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.775623083 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:47.821707010 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:47.821930885 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.260900974 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.260931969 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.260941029 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.260971069 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.261010885 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.261050940 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.261077881 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.289271116 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.289983988 CET	49849	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.290029049 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.290101051 CET	49849	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.290553093 CET	49849	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.290566921 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.291064978 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.291099072 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.291332960 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.291563988 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.291574001 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.292365074 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.292395115 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.292465925 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.292860031 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.292874098 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.293411016 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.293445110 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.293513060 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.293678045 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.293690920 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.294454098 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.294464111 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.294501066 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.294528008 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.294555902 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.294590950 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.302824020 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.302890062 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.303165913 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.303323030 CET	49840	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.303340912 CET	443	49840	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.303750038 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.303786993 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.303848028 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.305037975 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.305051088 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.331326008 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.432902098 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:48.432954073 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:48.433135033 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:48.433346033 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:48.433355093 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:48.499910116 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.500010014 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.500063896 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.500591040 CET	49779	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.500616074 CET	443	49779	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.502171993 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.502209902 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.502286911 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.502547979 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.502558947 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.516954899 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.517030954 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.517220974 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.517551899 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.517584085 CET	443	49780	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.517601967 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.517657042 CET	49780	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.519387007 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.519402027 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.519467115 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.519692898 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.519701958 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.753503084 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.753530979 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.753540039 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.753582001 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.753587961 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.753612995 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.753633976 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.786886930 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.786899090 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.786936045 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.786957979 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.786978006 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.787053108 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.936450005 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.936465025 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.936553955 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.936580896 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.957984924 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.957997084 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.958039045 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.958058119 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.958081007 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.958324909 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.986816883 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.986829042 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:48.986896992 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.986939907 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:48.986943960 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.015146971 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.015216112 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.015242100 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.015268087 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.015274048 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.015341997 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.115617037 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.115631104 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.115724087 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.115731955 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.129900932 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.129909992 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.129951000 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.129985094 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.129997969 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.130047083 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.151530981 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.151540041 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.151609898 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.151617050 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.166480064 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.166512966 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.166555882 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.166563988 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.166589975 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.199152946 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.199208021 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.199224949 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.199230909 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.199265957 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.199279070 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.199285030 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.199318886 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.199318886 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.213237047 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.213244915 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.213316917 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.213323116 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.213365078 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.308886051 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.308974028 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.309004068 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.309048891 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.438107967 CET	49841	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.438136101 CET	443	49841	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.660038948 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:49.660351992 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:49.660370111 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:49.662888050 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:49.662956953 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:49.664163113 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:49.664336920 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:49.664344072 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:49.664568901 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:49.706373930 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.706401110 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.706434011 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.706653118 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.706676960 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.706774950 CET	49849	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.706784964 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.706825018 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.707058907 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.707072020 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.707180023 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.707200050 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.707252026 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.707434893 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.707777023 CET	49849	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.707863092 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.707880974 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.707895994 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.707952976 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.707973003 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.708054066 CET	49849	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.708303928 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.708369017 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.708373070 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.708379984 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.708436966 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.708446980 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.708456039 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.708874941 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.708935022 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.709108114 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.709115982 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.714575052 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.714798927 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.714827061 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.715435028 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:49.715450048 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:49.715831995 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.715888977 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.716208935 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.716279030 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.716324091 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.755327940 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.755332947 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.761302948 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:49.761317015 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.761332989 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.761337996 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.761363029 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.807718992 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.913737059 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.913986921 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.914015055 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.914495945 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.915007114 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.915098906 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.915163994 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.933207035 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.933753967 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.933773994 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.934494972 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.934927940 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.935033083 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.935844898 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.959332943 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:49.965178967 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:49.983331919 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.307602882 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.307642937 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.307670116 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.307702065 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.307709932 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.307730913 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.307748079 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.307765961 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.307806969 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.307813883 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.308365107 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.308392048 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.308409929 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.308417082 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.308605909 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.308612108 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.311609983 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.311683893 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.311728001 CET	49849	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.313446999 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.313468933 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.313520908 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.313524961 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.313565016 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.314218044 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.314240932 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.314292908 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.314295053 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.314510107 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.315017939 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315022945 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315042019 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315049887 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315051079 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315079927 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315089941 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315108061 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315141916 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.315154076 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.315181017 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.315192938 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.317481041 CET	49849	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.317504883 CET	443	49849	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.318762064 CET	49851	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.318775892 CET	443	49851	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.321923971 CET	49853	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.321937084 CET	443	49853	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.327092886 CET	49850	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.327101946 CET	443	49850	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.330473900 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.330502033 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.330563068 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.330908060 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.330914974 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.330980062 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.331288099 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.331298113 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.331455946 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.331463099 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.333237886 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:50.333245993 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:50.333318949 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:50.333574057 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:50.333584070 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:50.355380058 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.355632067 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.382359982 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.426887035 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.426935911 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.426945925 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.431101084 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.431111097 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.431163073 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.431169987 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.431194067 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.431230068 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.431237936 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.431289911 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.431854963 CET	49852	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.431871891 CET	443	49852	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.439449072 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.439512968 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.439521074 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.440567970 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.440651894 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.440725088 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.441028118 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.441051006 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.443840027 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:50.443861961 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:50.443926096 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:50.444154978 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:50.444163084 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:50.447830915 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.447864056 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.447911024 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.447920084 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.447962046 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.456177950 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.464601994 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.464684010 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.464693069 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.473095894 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.473154068 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.473161936 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.481791019 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.481880903 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.481888056 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.489594936 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.489671946 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.489679098 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.542968988 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.542979956 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.551764965 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.551809072 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.551866055 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.551875114 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.551934004 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.559607029 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.567986965 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.568021059 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.568048954 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.568059921 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.568160057 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.576306105 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.584690094 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.584826946 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.584832907 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.593144894 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.593195915 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.593202114 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.609972000 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.609982014 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.610064030 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.610073090 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.626557112 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.626636028 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.626643896 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.626698971 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.634821892 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.667001963 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.667056084 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.667072058 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.667123079 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.673307896 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.673317909 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.673363924 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.681376934 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.681385994 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.681442022 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.689841986 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.689851046 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.689937115 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.693927050 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.693937063 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.693985939 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.702893972 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.702903032 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.702940941 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.710949898 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.711016893 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.715013027 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.715070963 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.723289967 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.723357916 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.731957912 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.732016087 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.735785007 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.735843897 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.744002104 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.744064093 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.752058983 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.752151966 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.760133982 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.760185957 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.787195921 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.787257910 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.792053938 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.792105913 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.795712948 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.795768023 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.801944971 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.802014112 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.808309078 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.808356047 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.814300060 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.814353943 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.817331076 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.817385912 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.823308945 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.823380947 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.823508978 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.823554039 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.823564053 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.823601961 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.823772907 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.823781967 CET	443	49854	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:50.823791027 CET	49854	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:50.887868881 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.887907982 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:50.887978077 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.888741970 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:50.888758898 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.651521921 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:51.654210091 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:51.654237986 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:51.654594898 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:51.654896975 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:51.654958963 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:51.655188084 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:51.695332050 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:51.754142046 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.754245996 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.754612923 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:51.794554949 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:51.794610977 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:51.796955109 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:51.796968937 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:51.797116041 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:51.797121048 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.797460079 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:51.797548056 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:51.797553062 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.797560930 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.797950983 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.798466921 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:51.798532009 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:51.798777103 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:51.798840046 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.799163103 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:51.799245119 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.800494909 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:51.800569057 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:51.800669909 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:51.843341112 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:51.847331047 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.847337008 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:51.852446079 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:51.902899981 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.014189959 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.014255047 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.014785051 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.020257950 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.020509958 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.022039890 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.067328930 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.099025965 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.099081993 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.099108934 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.099256992 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.099258900 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.099282026 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.099329948 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.099330902 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.099340916 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.099379063 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.107400894 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.107598066 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.107605934 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.124161959 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.124265909 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.124283075 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.182878971 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.193486929 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.193511009 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.193564892 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.193582058 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.193739891 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.194139004 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.194212914 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.194255114 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.213479042 CET	49864	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.213521957 CET	443	49864	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.217638969 CET	49863	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.217647076 CET	443	49863	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.218586922 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.220700026 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.220729113 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.220767975 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.220798969 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.220815897 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.220829010 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.223299980 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.223340034 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.223408937 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.224111080 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.224123955 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.254204988 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.254251957 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.254268885 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.254288912 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.254375935 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.267784119 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.267807007 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.294851065 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.294929981 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.294948101 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.304282904 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.304335117 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.304343939 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.306298971 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.306587934 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.306598902 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.308398962 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.308454037 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.308784962 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.308950901 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.308958054 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.309200048 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.312339067 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.312479973 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.312500000 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.312506914 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.312540054 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.320333958 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.328221083 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.328277111 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.328285933 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.336122990 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.336184978 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.336194038 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.336246014 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.336287975 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.338309050 CET	49865	443	192.168.2.9	104.18.11.207
Dec 9, 2024 16:16:52.338330984 CET	443	49865	104.18.11.207	192.168.2.9
Dec 9, 2024 16:16:52.354357958 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.354387045 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.362200975 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.362224102 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.362251997 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.362262964 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.362277985 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.362308979 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.362323999 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.395622015 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.395659924 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.395690918 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.395709038 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.395720959 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.395778894 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.395998001 CET	49866	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.396012068 CET	443	49866	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.400609970 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.403067112 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.403080940 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.403136015 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.403146982 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.425318003 CET	49874	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.425354958 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.425420046 CET	49874	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.425627947 CET	49874	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.425645113 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.432702065 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.432748079 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.432794094 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.432821035 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.432893038 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.455117941 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.455132961 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.455188990 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.455215931 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.484874010 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.484926939 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.484949112 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.484966993 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.484993935 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.485008955 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.485044003 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.584090948 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.584110975 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.584178925 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.584208965 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.604028940 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.604079962 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.604093075 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.604131937 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.604156971 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.604176998 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.604264975 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.620970011 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.620985031 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.621071100 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.621084929 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.636982918 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.637047052 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.637070894 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.637089014 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.637129068 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.661493063 CET	49861	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.661529064 CET	443	49861	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.667725086 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.667752981 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.667903900 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.668219090 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:52.668229103 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:52.766674995 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.766700983 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.766710043 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.766732931 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.766760111 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.766783953 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.766809940 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.800035000 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.800052881 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.800085068 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.800117970 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.800142050 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.800189018 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.949788094 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.949801922 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.949836016 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.949847937 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.949868917 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.950356007 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.978533030 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.978543043 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.978589058 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.978642941 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:52.978652000 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:52.978693008 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.000408888 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.000418901 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.000483990 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.000497103 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.022945881 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.022988081 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.023020983 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.023044109 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.023083925 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.127151966 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.127218008 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.127408028 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.128030062 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.128070116 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.128247976 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.128274918 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.128279924 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.128526926 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.128540039 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.130949974 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.130966902 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.131046057 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.131058931 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.141966105 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.142020941 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.142039061 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.142060041 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.142231941 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.157530069 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.157545090 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.157614946 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.157643080 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.168801069 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.168864965 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.168880939 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.193546057 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.193583965 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.193618059 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.193640947 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.193669081 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.193691969 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.202116013 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.202188015 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.202198029 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.202243090 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.324100971 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.324137926 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.324174881 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.324204922 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.324227095 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.324245930 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.336740017 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.336756945 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.336913109 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.336942911 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.336993933 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.350697041 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.350727081 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.350774050 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.350801945 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.350819111 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.350848913 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.363734007 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.363754988 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.363800049 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.363827944 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.363847017 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.363869905 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.377846956 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.377868891 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.377927065 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.377959013 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.377979040 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.377998114 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.389662027 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.389681101 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.389736891 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.389761925 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.389796972 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.389815092 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.401314020 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.401331902 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.401407957 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.401437998 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.401498079 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.517133951 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.517168045 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.517211914 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.517245054 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.517257929 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.517313957 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.528141022 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.528162003 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.528223991 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.528235912 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.528265953 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.528281927 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.538347960 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.538362980 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.538424969 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.538435936 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.538475037 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.548651934 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.548670053 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.548722982 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.548732042 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.548768997 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.554409981 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.554478884 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.554487944 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.554508924 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.554534912 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.554548979 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.554889917 CET	49869	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.554913998 CET	443	49869	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.634533882 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.635140896 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.635155916 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.635516882 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.635833025 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.635893106 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.635961056 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.679336071 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:53.684875965 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:53.835757971 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:53.835995913 CET	49874	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:53.836021900 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:53.836371899 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:53.836683989 CET	49874	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:53.836745024 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:53.836824894 CET	49874	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:53.883325100 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.082390070 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.087270021 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.087308884 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.087671041 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.088674068 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.088740110 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.088824034 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.091212034 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.091238976 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.091248035 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.091335058 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.091351986 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.130151987 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.130204916 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.130239964 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.130251884 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.130321026 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.135322094 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.135580063 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.275649071 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.275738001 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.275975943 CET	49874	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.277755976 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.277766943 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.277837992 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.277864933 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.277873993 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.306238890 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.306288958 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.306304932 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.306313038 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.306334019 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.306365013 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.306382895 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.311788082 CET	49874	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.311825037 CET	443	49874	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.326706886 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.326720953 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.326824903 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.326838970 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.348865032 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.348925114 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.348969936 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.348998070 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.351722002 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.458828926 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.458846092 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.458929062 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.458945036 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.469358921 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.469408035 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.469428062 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.469482899 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.469482899 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.469495058 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.469537973 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.484816074 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.484826088 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.484877110 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.484888077 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.495897055 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.495996952 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.496006966 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.519735098 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.519759893 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.519794941 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.519809961 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.519824982 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.519850969 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.528058052 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.528099060 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.528166056 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.528182983 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.528232098 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.544766903 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.545383930 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.546211958 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.546238899 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.546251059 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.546298027 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.546312094 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.546346903 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.546365023 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.580535889 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.580610037 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.580616951 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.580650091 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.583576918 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.587044001 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.587049007 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.600541115 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.600563049 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.600816011 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.600830078 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.601231098 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.601427078 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.608102083 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.608203888 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.618065119 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.618275881 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.624669075 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.624731064 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.654555082 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.654582977 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.654690027 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.654706001 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.655049086 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.667326927 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.667330980 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.669106960 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.669135094 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.669193029 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.669203997 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.669214964 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.669249058 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.681335926 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.681359053 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.681421041 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.681435108 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.681472063 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.681472063 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.695462942 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.695553064 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.695888996 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.695972919 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.711693048 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.711713076 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.711766005 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.711776972 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.711802006 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.711817026 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.728414059 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.728437901 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.728502989 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.728514910 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.728573084 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.732621908 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.732639074 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.732692003 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.732719898 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.736975908 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.736994982 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.737080097 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.737088919 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.737407923 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.749114990 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.749141932 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.749294043 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.749305964 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.749358892 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.749358892 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.769495964 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.769546986 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.769562960 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.769572020 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.769598961 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.769634962 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.769653082 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.786329985 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.786343098 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.786401033 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.786434889 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.806135893 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.806191921 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.806195021 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.806205988 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.806225061 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.806242943 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.806269884 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.851608992 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.851632118 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.851711988 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.851735115 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.853430033 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.866194963 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.866257906 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.866266012 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.866278887 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.866333961 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.872308969 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.872330904 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.872407913 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.872427940 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.872548103 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.882276058 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.882332087 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.882353067 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.882366896 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.882383108 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.882391930 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.882426977 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.882956028 CET	49873	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:54.882975101 CET	443	49873	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:54.912875891 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.912899017 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.912952900 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.912986994 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.924207926 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.924220085 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.924268961 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.924283981 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.924307108 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.924530983 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.941215038 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.941227913 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.941297054 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.941314936 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.953095913 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.953162909 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.953178883 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.953197002 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:54.953224897 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.953248978 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.953413010 CET	49876	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:54.953433990 CET	443	49876	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:55.001007080 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.001034021 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.001041889 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.001066923 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.001108885 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.001137972 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.001164913 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.006330013 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.006351948 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.006360054 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.006382942 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.006419897 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.006447077 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.006458044 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.009315014 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.009377003 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.009397984 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.009411097 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.009447098 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.009865046 CET	49879	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.009881973 CET	443	49879	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.039521933 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.039568901 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.039601088 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.039628029 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.039664030 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.188765049 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.188779116 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.188847065 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.188874006 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.217451096 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.217489004 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.217500925 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.217520952 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.217545986 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.217564106 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.217585087 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.239036083 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.239051104 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.239125967 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.239154100 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.290811062 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.296005964 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.296009064 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.296044111 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.296072006 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.296072960 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.296118975 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.368993044 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.369012117 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.369096041 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.369122982 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.386243105 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.386256933 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.386286974 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.386320114 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.386348963 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.386549950 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.407852888 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.407867908 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.407932043 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.407953024 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.423823118 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.423870087 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.423914909 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.423943043 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.423954964 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.443931103 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.443964005 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.443974972 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.443985939 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.444032907 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.444063902 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.444077969 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.455617905 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.455658913 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.455684900 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.455697060 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.455812931 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.561512947 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.561544895 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.561589003 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.561623096 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.561646938 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.561675072 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.577748060 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.577769995 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.577848911 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.577882051 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.578032017 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.592680931 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.592705965 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.592746019 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.592770100 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.592784882 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.592801094 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.604583025 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.604605913 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.604656935 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.604686975 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.604764938 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.618413925 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.618442059 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.618484020 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.618506908 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.618524075 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.618540049 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.631273031 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.631300926 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.631334066 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.631352901 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.631381989 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.631395102 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.644984007 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.645001888 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.645145893 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.645159006 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.645246029 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.658740997 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.658757925 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.658807039 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.658818007 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.658899069 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.758063078 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.758091927 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.758140087 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.758156061 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.758183956 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.758199930 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.768569946 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.768604994 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.768646002 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.768655062 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.768683910 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.768702030 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.778296947 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.778323889 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.778363943 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.778372049 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.778409958 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.786426067 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.786456108 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.786487103 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.786497116 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.786525011 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.786530018 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.786539078 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.786569118 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.786864996 CET	49878	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.786880970 CET	443	49878	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.807692051 CET	49886	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.807756901 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:55.807823896 CET	49886	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.808552027 CET	49886	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:55.808567047 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.221007109 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.227834940 CET	49886	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:57.227876902 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.228437901 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.230952024 CET	49886	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:57.231079102 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.231426001 CET	49886	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:57.275326967 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.660115004 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.660211086 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.660826921 CET	49886	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:57.661447048 CET	49886	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:16:57.661468983 CET	443	49886	54.208.49.75	192.168.2.9
Dec 9, 2024 16:16:57.665069103 CET	49892	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:57.665110111 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:57.665301085 CET	49892	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:57.665508986 CET	49892	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:57.665527105 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.094719887 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.095097065 CET	49892	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:59.095114946 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.095473051 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.095844030 CET	49892	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:59.095928907 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.096010923 CET	49892	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:59.143335104 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.513973951 CET	49704	80	192.168.2.9	199.232.210.172
Dec 9, 2024 16:16:59.534404993 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.534490108 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.534595966 CET	49892	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:59.604105949 CET	49892	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:16:59.604127884 CET	443	49892	34.196.63.232	192.168.2.9
Dec 9, 2024 16:16:59.634188890 CET	80	49704	199.232.210.172	192.168.2.9
Dec 9, 2024 16:16:59.637604952 CET	49704	80	192.168.2.9	199.232.210.172
Dec 9, 2024 16:17:02.483979940 CET	49705	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:17:02.484101057 CET	49705	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:17:02.484491110 CET	49903	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:17:02.484533072 CET	443	49903	23.206.229.209	192.168.2.9
Dec 9, 2024 16:17:02.484688044 CET	49903	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:17:02.485023022 CET	49903	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:17:02.485033035 CET	443	49903	23.206.229.209	192.168.2.9
Dec 9, 2024 16:17:02.603399992 CET	443	49705	23.206.229.209	192.168.2.9
Dec 9, 2024 16:17:02.603414059 CET	443	49705	23.206.229.209	192.168.2.9
Dec 9, 2024 16:17:03.832045078 CET	443	49903	23.206.229.209	192.168.2.9
Dec 9, 2024 16:17:03.832123041 CET	49903	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:17:13.209865093 CET	49762	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:17:13.329477072 CET	80	49762	54.208.49.75	192.168.2.9
Dec 9, 2024 16:17:16.585344076 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:17:16.615689039 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:17:16.704855919 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:17:16.737617970 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:17:23.216293097 CET	443	49903	23.206.229.209	192.168.2.9
Dec 9, 2024 16:17:23.216388941 CET	49903	443	192.168.2.9	23.206.229.209
Dec 9, 2024 16:17:29.058130026 CET	49762	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:17:29.178551912 CET	80	49762	54.208.49.75	192.168.2.9
Dec 9, 2024 16:17:29.178613901 CET	49762	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:17:31.106395960 CET	49971	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:17:31.106451035 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:17:31.106547117 CET	49971	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:17:31.106803894 CET	49971	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:17:31.106817007 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:17:32.798518896 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:17:32.798821926 CET	49971	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:17:32.798851967 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:17:32.799216986 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:17:32.799525976 CET	49971	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:17:32.799586058 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:17:32.854513884 CET	49971	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:17:34.962124109 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:17:34.962147951 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:17:34.995191097 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:17:34.995201111 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:17:42.501808882 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:17:42.501885891 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:17:42.502008915 CET	49971	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:17:44.076530933 CET	49971	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:17:44.076555967 CET	443	49971	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:01.712891102 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:01.743451118 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:01.833205938 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:01.862966061 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:19.969584942 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:19.969608068 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:20.001811028 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:20.001821995 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:31.168576956 CET	50055	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:18:31.168622017 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:31.168699980 CET	50055	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:18:31.169032097 CET	50055	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:18:31.169045925 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:32.860646009 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:32.860989094 CET	50055	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:18:32.861010075 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:32.861293077 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:32.861589909 CET	50055	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:18:32.861649036 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:32.916590929 CET	50055	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:18:35.629477978 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:35.629606009 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:35.629677057 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:35.630851030 CET	49855	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:35.630875111 CET	443	49855	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:35.630881071 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:35.631017923 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:35.631057978 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:35.632046938 CET	49856	443	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:35.632055998 CET	443	49856	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:35.780061960 CET	50056	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:35.780122995 CET	443	50056	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:35.780190945 CET	50056	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:35.780390024 CET	50057	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:35.780450106 CET	443	50057	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:35.780503988 CET	50057	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:35.780706882 CET	50056	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:35.780718088 CET	443	50056	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:35.780867100 CET	50057	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:35.780883074 CET	443	50057	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.191871881 CET	443	50057	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.192172050 CET	50057	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:37.192198038 CET	443	50057	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.192600965 CET	443	50057	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.192898989 CET	50057	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:37.192969084 CET	443	50057	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.193048954 CET	50057	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:37.193182945 CET	443	50056	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.193351984 CET	50056	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:37.193366051 CET	443	50056	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.193733931 CET	443	50056	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.194009066 CET	50056	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:37.194083929 CET	50056	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:37.194088936 CET	443	50056	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.235335112 CET	443	50056	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.239326000 CET	443	50057	34.196.63.232	192.168.2.9
Dec 9, 2024 16:18:37.243712902 CET	50056	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:18:42.571374893 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:42.571450949 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:42.571569920 CET	50055	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:18:44.073805094 CET	50055	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:18:44.073843956 CET	443	50055	142.250.181.68	192.168.2.9
Dec 9, 2024 16:18:46.837804079 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:46.869050980 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:18:46.957525969 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:18:46.988395929 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:19:22.243695021 CET	50056	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:19:22.243696928 CET	50057	443	192.168.2.9	34.196.63.232
Dec 9, 2024 16:19:22.243712902 CET	443	50056	34.196.63.232	192.168.2.9
Dec 9, 2024 16:19:22.243721008 CET	443	50057	34.196.63.232	192.168.2.9
Dec 9, 2024 16:19:31.230161905 CET	50058	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:19:31.230221033 CET	443	50058	142.250.181.68	192.168.2.9
Dec 9, 2024 16:19:31.230324984 CET	50058	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:19:31.230582952 CET	50058	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:19:31.230597019 CET	443	50058	142.250.181.68	192.168.2.9
Dec 9, 2024 16:19:31.573281050 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:19:31.573385000 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:19:31.611732960 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:19:31.611886024 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:19:32.073673964 CET	49757	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:19:32.073734999 CET	49756	80	192.168.2.9	54.208.49.75
Dec 9, 2024 16:19:32.193070889 CET	80	49757	54.208.49.75	192.168.2.9
Dec 9, 2024 16:19:32.193089962 CET	80	49756	54.208.49.75	192.168.2.9
Dec 9, 2024 16:19:32.921335936 CET	443	50058	142.250.181.68	192.168.2.9
Dec 9, 2024 16:19:32.921668053 CET	50058	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:19:32.921694040 CET	443	50058	142.250.181.68	192.168.2.9
Dec 9, 2024 16:19:32.922050953 CET	443	50058	142.250.181.68	192.168.2.9
Dec 9, 2024 16:19:32.922420979 CET	50058	443	192.168.2.9	142.250.181.68
Dec 9, 2024 16:19:32.922525883 CET	443	50058	142.250.181.68	192.168.2.9
Dec 9, 2024 16:19:32.962713003 CET	50058	443	192.168.2.9	142.250.181.68

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 16:16:27.686570883 CET	53	57972	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:27.764049053 CET	53	64640	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:27.815465927 CET	54009	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:27.815634966 CET	56960	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:27.816159964 CET	65399	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:27.817135096 CET	54566	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:27.817987919 CET	52041	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:27.818129063 CET	58352	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:27.954112053 CET	53	54993	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:27.954178095 CET	53	65399	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:27.956693888 CET	53	54566	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:27.956852913 CET	53	52041	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:28.030706882 CET	53	58352	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:28.482269049 CET	53	54009	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:28.482378006 CET	53	56960	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:29.226588964 CET	57802	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:29.226975918 CET	57118	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:29.364082098 CET	53	57802	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:29.364104986 CET	53	57118	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:30.268769979 CET	50233	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:30.269731998 CET	60163	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:30.426315069 CET	53	50233	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:30.426352978 CET	53	60163	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:30.509042978 CET	53	61441	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:30.971239090 CET	53	54531	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:31.041297913 CET	50620	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:31.041660070 CET	58505	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:31.178411007 CET	53	50620	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:31.178436995 CET	53	58505	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:31.293162107 CET	49856	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:31.293555975 CET	57297	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:31.430870056 CET	53	49856	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:31.431133032 CET	53	57297	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:32.770256042 CET	53	51803	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:35.711010933 CET	61412	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:35.711155891 CET	62101	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:35.848177910 CET	53	61412	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:35.848469019 CET	53	62101	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:46.172499895 CET	56692	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:46.172751904 CET	57322	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:46.309740067 CET	53	56692	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:46.310656071 CET	53	57322	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:47.758300066 CET	53	50639	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:48.294171095 CET	60561	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:48.294343948 CET	57192	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:16:48.432173014 CET	53	57192	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:48.432395935 CET	53	60561	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:53.495007038 CET	53	50553	1.1.1.1	192.168.2.9
Dec 9, 2024 16:16:59.252770901 CET	138	138	192.168.2.9	192.168.2.255
Dec 9, 2024 16:17:06.590118885 CET	53	57691	1.1.1.1	192.168.2.9
Dec 9, 2024 16:17:27.268199921 CET	53	54346	1.1.1.1	192.168.2.9
Dec 9, 2024 16:17:29.196158886 CET	53	58935	1.1.1.1	192.168.2.9
Dec 9, 2024 16:17:59.553318024 CET	53	61631	1.1.1.1	192.168.2.9
Dec 9, 2024 16:18:35.638840914 CET	53424	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:18:35.639022112 CET	53865	53	192.168.2.9	1.1.1.1
Dec 9, 2024 16:18:35.777471066 CET	53	53424	1.1.1.1	192.168.2.9
Dec 9, 2024 16:18:35.779589891 CET	53	53865	1.1.1.1	192.168.2.9
Dec 9, 2024 16:18:46.372617006 CET	53	52290	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 9, 2024 16:16:28.030805111 CET	192.168.2.9	1.1.1.1	c23c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 9, 2024 16:16:27.815465927 CET	192.168.2.9	1.1.1.1	0x1ad5	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:27.815634966 CET	192.168.2.9	1.1.1.1	0x9e86	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:27.816159964 CET	192.168.2.9	1.1.1.1	0xa935	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:27.817135096 CET	192.168.2.9	1.1.1.1	0x4962	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:27.817987919 CET	192.168.2.9	1.1.1.1	0xc78f	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:27.818129063 CET	192.168.2.9	1.1.1.1	0x17bb	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:29.226588964 CET	192.168.2.9	1.1.1.1	0x1c70	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:29.226975918 CET	192.168.2.9	1.1.1.1	0x21d	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:30.268769979 CET	192.168.2.9	1.1.1.1	0xbf00	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:30.269731998 CET	192.168.2.9	1.1.1.1	0x1dcc	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:31.041297913 CET	192.168.2.9	1.1.1.1	0x4712	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:31.041660070 CET	192.168.2.9	1.1.1.1	0xb17	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:31.293162107 CET	192.168.2.9	1.1.1.1	0xfe6d	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:31.293555975 CET	192.168.2.9	1.1.1.1	0xeea1	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:35.711010933 CET	192.168.2.9	1.1.1.1	0xe5e2	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:35.711155891 CET	192.168.2.9	1.1.1.1	0x40e5	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:46.172499895 CET	192.168.2.9	1.1.1.1	0xa547	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:46.172751904 CET	192.168.2.9	1.1.1.1	0x83da	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 9, 2024 16:16:48.294171095 CET	192.168.2.9	1.1.1.1	0x2d03	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:48.294343948 CET	192.168.2.9	1.1.1.1	0xfbba	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 9, 2024 16:18:35.638840914 CET	192.168.2.9	1.1.1.1	0x2b12	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:18:35.639022112 CET	192.168.2.9	1.1.1.1	0x70da	Standard query (0)	res.cisco.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 9, 2024 16:16:27.954178095 CET	1.1.1.1	192.168.2.9	0xa935	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:27.954178095 CET	1.1.1.1	192.168.2.9	0xa935	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:27.956693888 CET	1.1.1.1	192.168.2.9	0x4962	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 9, 2024 16:16:27.956852913 CET	1.1.1.1	192.168.2.9	0xc78f	No error (0)	res.cisco.com		54.208.49.75	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:27.956852913 CET	1.1.1.1	192.168.2.9	0xc78f	No error (0)	res.cisco.com		52.22.181.189	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:27.956852913 CET	1.1.1.1	192.168.2.9	0xc78f	No error (0)	res.cisco.com		34.196.63.232	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:28.482269049 CET	1.1.1.1	192.168.2.9	0x1ad5	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 16:16:28.482269049 CET	1.1.1.1	192.168.2.9	0x1ad5	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.34	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:28.482269049 CET	1.1.1.1	192.168.2.9	0x1ad5	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.59	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:28.482269049 CET	1.1.1.1	192.168.2.9	0x1ad5	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.47	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:28.482269049 CET	1.1.1.1	192.168.2.9	0x1ad5	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.126	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:28.482378006 CET	1.1.1.1	192.168.2.9	0x9e86	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 16:16:29.364082098 CET	1.1.1.1	192.168.2.9	0x1c70	No error (0)	res.cisco.com		54.208.49.75	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:29.364082098 CET	1.1.1.1	192.168.2.9	0x1c70	No error (0)	res.cisco.com		52.22.181.189	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:29.364082098 CET	1.1.1.1	192.168.2.9	0x1c70	No error (0)	res.cisco.com		34.196.63.232	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:30.426315069 CET	1.1.1.1	192.168.2.9	0xbf00	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:30.426315069 CET	1.1.1.1	192.168.2.9	0xbf00	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:30.426352978 CET	1.1.1.1	192.168.2.9	0x1dcc	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 9, 2024 16:16:31.178411007 CET	1.1.1.1	192.168.2.9	0x4712	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:31.178436995 CET	1.1.1.1	192.168.2.9	0xb17	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 9, 2024 16:16:31.430870056 CET	1.1.1.1	192.168.2.9	0xfe6d	No error (0)	res.cisco.com		34.196.63.232	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:31.430870056 CET	1.1.1.1	192.168.2.9	0xfe6d	No error (0)	res.cisco.com		52.22.181.189	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:31.430870056 CET	1.1.1.1	192.168.2.9	0xfe6d	No error (0)	res.cisco.com		54.208.49.75	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:35.848177910 CET	1.1.1.1	192.168.2.9	0xe5e2	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 16:16:35.848177910 CET	1.1.1.1	192.168.2.9	0xe5e2	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.47	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:35.848177910 CET	1.1.1.1	192.168.2.9	0xe5e2	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.59	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:35.848177910 CET	1.1.1.1	192.168.2.9	0xe5e2	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.34	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:35.848177910 CET	1.1.1.1	192.168.2.9	0xe5e2	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.126	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:35.848469019 CET	1.1.1.1	192.168.2.9	0x40e5	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 16:16:46.309740067 CET	1.1.1.1	192.168.2.9	0xa547	No error (0)	res.cisco.com		54.208.49.75	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:46.309740067 CET	1.1.1.1	192.168.2.9	0xa547	No error (0)	res.cisco.com		34.196.63.232	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:46.309740067 CET	1.1.1.1	192.168.2.9	0xa547	No error (0)	res.cisco.com		52.22.181.189	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:48.432173014 CET	1.1.1.1	192.168.2.9	0xfbba	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 9, 2024 16:16:48.432395935 CET	1.1.1.1	192.168.2.9	0x2d03	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:16:48.432395935 CET	1.1.1.1	192.168.2.9	0x2d03	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:18:35.777471066 CET	1.1.1.1	192.168.2.9	0x2b12	No error (0)	res.cisco.com		34.196.63.232	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:18:35.777471066 CET	1.1.1.1	192.168.2.9	0x2b12	No error (0)	res.cisco.com		52.22.181.189	A (IP address)	IN (0x0001)	false
Dec 9, 2024 16:18:35.777471066 CET	1.1.1.1	192.168.2.9	0x2b12	No error (0)	res.cisco.com		54.208.49.75	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

static.cres-aws.com

res.cisco.com

https:

maxcdn.bootstrapcdn.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49756	54.208.49.75	80	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 9, 2024 16:16:28.117712021 CET	477	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 9, 2024 16:16:29.214006901 CET	483	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 09 Dec 2024 15:16:29 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 9, 2024 16:16:31.292443037 CET	487	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 9, 2024 16:16:31.612139940 CET	493	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 09 Dec 2024 15:16:31 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 9, 2024 16:17:16.615689039 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 9, 2024 16:18:01.743451118 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 9, 2024 16:18:46.869050980 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49757	54.208.49.75	80	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 9, 2024 16:16:28.118133068 CET	12360	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt%2Eservers%2Eglobal%2Eprv%27,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImJyaWFuLmN1bW1pbmdzQGViaXpjaGFyZ2UuY29tIiA8YnJpYW4uY3VtbWluZ3NAZWJpemNoYXJnZS5jb20%2B%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D,%27keyHash%27%3A%27SHA-256%27%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27YO1d%2FDYKlTgiwTcGN%2F2%2BTw%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1733746623211%2Etxt%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A3,%5B0,4946%5D,%27Body-1733746623211%2Etxt%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar% [TRUNCATED] Data Raw: Data Ascii:
Dec 9, 2024 16:16:28.238425016 CET	2472	OUT	Data Raw: 76 6a 45 6b 74 52 33 67 53 70 75 61 6f 4b 61 38 25 32 42 61 4a 57 71 32 73 79 75 7a 54 5a 54 7a 4a 25 32 42 79 72 53 58 73 25 32 42 31 77 62 62 54 4c 57 70 4e 62 38 7a 32 25 32 42 4e 4a 34 35 5a 53 63 41 42 67 25 32 42 63 4b 6d 41 54 35 46 4c 6e Data Ascii: vjEktR3gSpuaoKa8%2BaJWq2syuzTZTzJ%2ByrSXs%2B1wbbTLWpNb8z2%2BNJ45ZScABg%2BcKmAT5FLn7suGznrkzHkByt7LGHZFJ5mNBwvpYfBlj3rCbPTG2AoNqt7di%2F7osQ4g4UNVuyUwWXYvsN%2FxRkay9jA%2FzTgE5kG6O9wG%2FQ2FBNoId91ZDo%2BfgRk40yx1D4bCQ%2BK6e%2Bzwd%2BSY6pylOCedPP1Sn
Dec 9, 2024 16:16:28.238607883 CET	1717	OUT	Data Raw: 46 66 42 45 63 37 67 68 73 25 32 42 65 50 77 4d 72 72 79 73 34 5a 6d 51 73 77 42 69 73 72 72 33 42 52 44 58 55 55 4c 4b 52 39 41 25 32 42 35 66 72 6b 31 7a 25 32 46 62 6d 54 54 78 44 39 42 46 34 50 66 70 42 4c 6f 72 44 79 78 35 43 42 41 77 52 68 Data Ascii: FfBEc7ghs%2BePwMrrys4ZmQswBisrr3BRDXUULKR9A%2B5frk1z%2FbmTTxD9BF4PfpBLorDyx5CBAwRhTY8DzBx%2BJZPTwlDdlPcniyx0Sk9R9O84p4faNi8TaYbJNOg0v1D9BmTxx1alNhG8iFdwQCGUNplkO0D87bCFBBsrGOQfwvgwzUN%2BiiVRc7nPp3N%2FJ2owmxd8SzNQUVGl9x953IKVEQjJqaA6mcW21ZdTuDd
Dec 9, 2024 16:16:29.254426003 CET	137	IN	HTTP/1.1 507 Insufficient Storage Server: awselb/2.0 Date: Mon, 09 Dec 2024 15:16:29 GMT Content-Length: 0 Connection: keep-alive
Dec 9, 2024 16:16:31.252840996 CET	491	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 9, 2024 16:16:31.572449923 CET	497	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 09 Dec 2024 15:16:31 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 9, 2024 16:17:16.585344076 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 9, 2024 16:18:01.712891102 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 9, 2024 16:18:46.837804079 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49762	54.208.49.75	80	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 9, 2024 16:17:13.209865093 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49754	104.17.24.14	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:29 UTC	542	OUT	GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:29 UTC	946	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:29 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-3a76" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 837020 Expires: Sat, 29 Nov 2025 15:16:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0qIb0jQdX1JlccPvXB1jjlbIjN4iMdMOx5cexscKYeNnSazx2f4tHLEHwBu%2Fqx%2BQTssBzTKyeCXZJdHtMmAosZkqeiyCucwK%2F9ybQ%2FM3gBgQa5TOkGQdmshEAoPCKRAmz8q0cSkY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef5f4e408d441cf-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 15:16:29 UTC	423	IN	Data Raw: 33 61 37 36 0d 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 Data Ascii: 3a76.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 6c 65 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 Data Ascii: ellipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-contai
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 72 6f 70 64 6f 77 6e 2d 2d 61 62 6f 76 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 20 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 64 6f 77 6e 2d 2d 62 65 6c 6f 77 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 73 65 61 72 63 68 2d 2d 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 Data Ascii: ropdown--above{border-bottom:none;border-bottom-left-radius:0;border-bottom-right-radius:0}.select2-container--open .select2-dropdown--below{border-top:none;border-top-left-radius:0;border-top-right-radius:0}.select2-search--dropdown{display:block;padding
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 7b 68 65 69 67 68 74 3a 32 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 65 6c 65 Data Ascii: weight:bold}.select2-container--default .select2-selection--single .select2-selection__placeholder{color:#999}.select2-container--default .select2-selection--single .select2-selection__arrow{height:26px;position:absolute;top:1px;right:1px;width:20px}.sele
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 6e 5f 5f 72 65 6e 64 65 72 65 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d Data Ascii: n__rendered{box-sizing:border-box;list-style:none;margin:0;padding:0 5px;width:100%}.select2-container--default .select2-selection--multiple .select2-selection__rendered li{list-style:none}.select2-container--default .select2-selection--multiple .select2-
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 61 69 6e 65 72 2d 2d 66 6f 63 75 73 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 62 6c 61 63 6b 20 31 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 Data Ascii: ainer--focus .select2-selection--multiple{border:solid black 1px;outline:0}.select2-container--default.select2-container--disabled .select2-selection--multiple{background-color:#eee;cursor:default}.select2-container--default.select2-container--disabled .s
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 74 72 75 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 Data Ascii: ainer--default .select2-results__option[aria-selected=true]{background-color:#ddd}.select2-container--default .select2-results__option .select2-results__option{padding-left:1em}.select2-container--default .select2-results__option .select2-results__option
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 67 72 6f 75 70 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 35 30 25 Data Ascii: fault .select2-results__group{cursor:default;display:block;padding:6px}.select2-container--classic .select2-selection--single{background-color:#f7f7f7;border:1px solid #aaa;border-radius:4px;outline:0;background-image:-webkit-linear-gradient(top, #fff 50%
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 65 65 65 20 35 30 25 2c 20 23 63 63 63 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 45 45 45 45 45 45 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 43 43 43 43 43 43 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e Data Ascii: ackground-image:linear-gradient(to bottom, #eee 50%, #ccc 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#FFEEEEEE', endColorstr='#FFCCCCCC', GradientType=0)}.select2-container--classic .select2-selection
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 Data Ascii: eft-radius:0;border-top-right-radius:0;background-image:-webkit-linear-gradient(top, #fff 0%, #eee 50%);background-image:-o-linear-gradient(top, #fff 0%, #eee 50%);background-image:linear-gradient(to bottom, #fff 0%, #eee 50%);background-repeat:repeat-x;f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49755	104.17.24.14	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:29 UTC	526	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:29 UTC	951	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:29 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sat, 29 Nov 2025 15:16:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iGDQrBSVM3imUUUz%2Bn6Pt%2B6Emig7onEOty65ddVQuCfOhLxBNJw7foRgqUnio63r6Wb24IIqdJ6PZ7%2FqDgiYI0mx0TsIdQxtshKtO0kj9JXL0ymmMJWZxseHX5z%2F%2FyzlgiFxh0p1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef5f4e40b287271-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 15:16:29 UTC	418	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 7bf9/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 65 5b 73 5d 2e 72 65 70 6c 61 63 65 28 77 Data Ascii: n.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 5d 2c 69 26 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6d 5b 65 5d 3b 72 65 74 75 Data Ascii: ],i&&(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e){var t=m[e];retu
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 6d 6f 6e 64 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 26 26 63 6f Data Ascii: mond README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;return null==e&&co
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 3d 5b 74 5d 7d 2c 65 2e 70 72 6f Data Ascii: (this,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listeners[e]=[t]},e.pro
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 6e 64 28 74 29 7d 2c 69 2e 5f 5f 63 61 63 68 65 Data Ascii: ':""","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.append(t)},i.__cache
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 22 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 2c 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 Data Ascii: ");this.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message",this.$results.a
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 64 7c 7c 6e 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 68 69 6e 67 22 29 28 65 29 7d 2c 6e 3d 74 68 69 Data Ascii: d\|\|null==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searching")(e)},n=thi
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 2c 73 2e 61 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 65 73 28 29 2c 6c 2e 68 69 67 68 6c 69 67 68 74 Data Ascii: ,s.append(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClasses(),l.highlight
2024-12-09 15:16:29 UTC	1369	IN	Data Raw: 76 61 72 20 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 2e 67 65 74 48 69 67 Data Ascii: var r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(){var e=l.getHig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49763	18.66.161.34	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:30 UTC	506	OUT	GET /postx.css HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:31 UTC	714	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 125394 Connection: close Date: Mon, 09 Dec 2024 15:16:32 GMT Last-Modified: Sat, 08 Jun 2024 05:00:10 GMT ETag: "a0b4ff216e038470b000b63f5aa39816" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c3ae0fb6fa0fe401f27d2841c609ccee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: XaDltAj9PIaCpt2howkG0gaNLyEiYvW0gnnafvuWQaHkrLcSwvANMg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-09 15:16:31 UTC	15670	IN	Data Raw: 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 45 78 74 72 61 4c 69 67 68 74 2e 74 74 66 22 29 20 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");}@font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inter-ExtraLight.ttf")
2024-12-09 15:16:31 UTC	1318	IN	Data Raw: 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32 36 63 64 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 65 73 20 72 65 6c 61 74 65 64 20 74 6f 20 73 65 61 72 63 68 20 72 65 73 75 6c 74 73 20 2a 2f 0a 0a 2e 6c 69 73 74 48 65 61 64 65 72 4c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0a 20 20 66 6f 6e 74 Data Ascii: ont-style: normal !important; font-weight: 700 !important; font-size: 12px !important; line-height: 18px !important; color: #326cd1 !important;}/* Styles related to search results */.listHeaderLink { color: #555555; font-size: 8pt; font
2024-12-09 15:16:31 UTC	16384	IN	Data Raw: 2c 0a 2e 66 6f 72 6d 49 6e 70 75 74 44 65 73 63 43 65 6c 6c 2c 0a 2e 66 6f 72 6d 49 6e 70 75 74 45 72 72 6f 72 43 65 6c 6c 2c 0a 2e 66 6f 72 6d 52 65 71 75 69 72 65 64 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 2c 0a 2e 61 74 74 46 6f 72 6d 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 2c 0a 2e 61 74 74 46 6f 72 6d 49 6e 70 75 74 44 65 73 63 43 65 6c 6c 2c 0a 2e 66 6f 72 6d 4c 61 62 65 6c 43 65 6c 6c 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 39 70 78 20 39 70 78 20 35 70 78 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f Data Ascii: ,.formInputDescCell,.formInputErrorCell,.formRequiredInputLabelCell,.attFormInputLabelCell,.attFormInputDescCell,.formLabelCell { padding: 9px 9px 9px 5px; vertical-align: middle; color: #555555; text-align: left; font-weight: normal; fo
2024-12-09 15:16:31 UTC	1024	IN	Data Raw: 6f 6c 73 2e 0a 49 45 20 68 61 6e 64 6c 65 73 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 20 70 61 67 65 2c 20 73 6f 20 69 74 20 6d 61 79 20 73 68 6f 77 20 75 70 20 63 6f 72 72 65 63 74 6c 79 20 28 62 65 63 61 75 73 65 20 49 45 20 74 72 69 65 73 0a 74 6f 20 70 69 63 6b 20 74 68 65 20 62 65 73 74 20 66 6f 6e 74 20 74 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 74 65 78 74 29 2c 20 62 75 74 20 74 68 65 20 64 72 6f 70 2d 64 6f 77 6e 73 20 73 68 6f 77 20 75 70 20 77 69 74 68 0a 62 6f 78 65 73 20 69 6e 73 74 65 61 64 20 6f 66 20 63 68 61 72 61 63 74 65 72 73 2c 20 62 65 63 61 75 73 65 20 57 69 6e 64 6f 77 73 20 64 6f 65 73 6e 27 74 20 74 72 79 20 74 6f 20 70 69 63 6b 20 74 68 65 20 6d 6f 73 74 0a 61 70 70 72 6f 70 72 69 61 74 65 20 66 6f 6e 74 2e 20 20 53 6f Data Ascii: ols.IE handles the rest of the page, so it may show up correctly (because IE triesto pick the best font to display the text), but the drop-downs show up withboxes instead of characters, because Windows doesn't try to pick the mostappropriate font. So
2024-12-09 15:16:31 UTC	16384	IN	Data Raw: 77 6e 20 7b 7d 0a 0a 2e 73 62 42 61 6e 6e 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 65 64 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 4d 6f 63 63 61 73 69 6e 3b 0a 7d 0a 0a 2e 73 62 42 61 6e 6e 65 72 54 65 78 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 35 70 78 20 32 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 70 74 32 30 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 7d 0a 0a 2e 70 6c 35 70 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 25 3b 0a 7d 0a 0a 2e 6d 62 31 35 20 7b 0a 20 20 6d 61 72 Data Ascii: wn {}.sbBanner { border-style: solid; border-color: red; border-width: 2px; background-color: Moccasin;}.sbBannerText { margin: 5px 5px 2px; text-align: left;}.pt20 { padding-top: 20px;}.pl5p { padding-left: 5%;}.mb15 { mar
2024-12-09 15:16:31 UTC	1024	IN	Data Raw: 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 49 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 65 78 70 69 72 65 4c 6f 63 6b 54 61 62 6c 65 20 74 72 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 66 64 66 64 66 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 39 34 61 34 63 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 49 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f Data Ascii: ; font-family: Inter; font-size: 14px; line-height: 19px; border-right: none;}.expireLockTable tr td:first-child { border-left: 1px solid #dfdfdf; color: #494a4c; font-size: 13px; font-family: Inter; font-weight: 300; text-decoratio
2024-12-09 15:16:31 UTC	8126	IN	Data Raw: 20 23 31 64 36 39 63 63 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 74 69 74 6c 65 2c 0a 68 33 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 33 33 36 36 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 7d 0a 0a 70 2e 64 65 66 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 Data Ascii: #1d69cc !important;}title,h3 { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 16px; font-weight: bold; color: #003366; line-height: 16px;}p.defp { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 15px;
2024-12-09 15:16:31 UTC	2604	IN	Data Raw: 0a 20 20 2d 2d 73 69 7a 65 2d 73 65 6c 65 63 74 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 2d 73 6d 2d 73 70 65 63 69 61 6c 3a 20 36 70 78 3b 0a 20 20 2d 2d 73 69 7a 65 2d 73 65 6c 65 63 74 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 2d 73 6d 2d 72 61 72 65 3a 20 36 70 78 3b 0a 20 20 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 33 78 6c 3a 20 36 30 70 78 3b 0a 20 20 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 32 78 6c 3a 20 34 38 70 78 3b 0a 20 20 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 78 6c 3a 20 34 30 70 78 3b 0a 20 20 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 6c 67 3a 20 33 32 70 78 3b 0a 20 20 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 6d 64 3a 20 32 34 70 78 3b 0a 20 20 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 73 6d 3a 20 31 38 70 78 3b 0a 20 20 2d 2d 73 69 7a 65 2d 66 6f 6e 74 2d 78 73 3a Data Ascii: --size-select-padding-horiz-sm-special: 6px; --size-select-padding-horiz-sm-rare: 6px; --size-font-3xl: 60px; --size-font-2xl: 48px; --size-font-xl: 40px; --size-font-lg: 32px; --size-font-md: 24px; --size-font-sm: 18px; --size-font-xs:
2024-12-09 15:16:31 UTC	16384	IN	Data Raw: 72 61 63 74 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 64 65 73 74 72 75 63 74 69 76 65 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 68 6f 76 65 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6d 65 64 69 75 6d 2d 64 65 73 74 72 75 63 74 69 76 65 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 Data Ascii: ract-border-strong-destructive: rgba(0, 0, 0, 0); --color-interact-border-strong-hover: rgba(0, 0, 0, 0); --color-interact-border-strong: rgba(0, 0, 0, 0); --color-interact-background-medium-destructive: rgba(0, 0, 0, 0); --color-interact-backgrou
2024-12-09 15:16:31 UTC	16384	IN	Data Raw: 6f 6c 6f 72 2d 62 6f 72 64 65 72 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 69 6e 74 65 72 61 63 74 2d 73 74 72 6f 6b 65 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 29 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 69 6e 74 65 72 61 63 74 2d 72 61 64 69 75 73 2d 62 6f 72 64 65 72 29 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 2c 20 30 2e 33 2c 20 30 2e 31 2c 20 31 29 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: olor-border); border: var(--size-interact-stroke) solid var(--mds-button-color-border); border-radius: 6px; border-radius: var(--size-interact-radius-border); box-shadow: none; transition: all 0.3s cubic-bezier(0.7, 0.3, 0.1, 1); font-family:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49767	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:30 UTC	557	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:31 UTC	742	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:31 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=Jt96LPWaOdhyqjW6u/h6jo3Fbw5Hm/9/Go5tl9eUJG2C14wYgd4bAqokkeQ4Zwlt6SkMe8yoqAkeHFDF+YA0amswfr7GgDmwctgNAvBMQQWwOzHjrEZGAsyckYSw; Expires=Mon, 16 Dec 2024 15:16:31 GMT; Path=/ Set-Cookie: AWSALBCORS=Jt96LPWaOdhyqjW6u/h6jo3Fbw5Hm/9/Go5tl9eUJG2C14wYgd4bAqokkeQ4Zwlt6SkMe8yoqAkeHFDF+YA0amswfr7GgDmwctgNAvBMQQWwOzHjrEZGAsyckYSw; Expires=Mon, 16 Dec 2024 15:16:31 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-09 15:16:31 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49768	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:30 UTC	653	OUT	GET /websafe/logo/LTk2lS4u7RqcSCZrxmQJ9zr2DY9UroP8JVH6F0CPERii05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:31 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:31 GMT Content-Type: image/jpeg Content-Length: 4574 Connection: close Set-Cookie: AWSALB=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07; Expires=Mon, 16 Dec 2024 15:16:31 GMT; Path=/ Set-Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07; Expires=Mon, 16 Dec 2024 15:16:31 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=86895520CE422555CA9B33C0CAC7F199; Path=/websafe; Secure; HttpOnly Last-Modified: Fri, 11 Jan 2019 00:00:01 GMT ETag: "1683a355400-11de" Server: unknown
2024-12-09 15:16:31 UTC	4574	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 46 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCF"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49772	104.17.25.14	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:31 UTC	386	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:32 UTC	962	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2 Expires: Sat, 29 Nov 2025 15:16:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mp70SeRoZ%2FP27m0o0y0v8%2FS89b%2FwHu6s%2F7OQpj4N%2BHQOp4QDLaq8KnAItPLdf0eW4CBu3krvdGmNWVdkCbe%2BwM6%2BUJu9SLqloIFLC1CUq0DjcNWsB059KZlPI99yKOIo3PvOL6Tw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef5f4f38fac41fb-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 15:16:32 UTC	407	IN	Data Raw: 33 39 37 66 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 397f/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 64 29 76 61 72 20 65 3d 75 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 65 5b 73 Data Ascii: d)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 Data Ascii: eturn e=r[1],i&&(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e){var
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 72 6f 72 28 22 53 65 65 20 61 6c 6d 6f 6e 64 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 74 75 72 6e 20 Data Ascii: ror("See almond README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;return
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 2c 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d Data Ascii: ,t),n.apply(this,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listeners[e]
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 22 3a 22 26 67 74 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 6e 64 28 74 29 Data Ascii: ":">",'"':""","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.append(t)
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 73 63 61 70 65 4d 61 72 6b 75 70 22 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 2c 74 68 69 73 Data Ascii: scapeMarkup");this.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message",this
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 65 6e 74 2e 73 65 6c 65 63 74 65 64 7c 7c 6e 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 68 69 6e 67 22 Data Ascii: ent.selected\|\|null==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searching"
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 73 2e 61 70 70 65 6e 64 28 61 29 2c 73 2e 61 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 65 73 28 29 2c Data Ascii: s.append(a),s.append(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClasses(),
2024-12-09 15:16:32 UTC	1369	IN	Data Raw: 66 28 21 28 6e 3c 3d 30 29 29 7b 76 61 72 20 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: f(!(n<=0)){var r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49777	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:32 UTC	632	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
2024-12-09 15:16:33 UTC	742	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:33 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=K4p3aMxTxikwnkFbpKEVUf0ovTEK+ACBOVsZBcZK9tu1Bp57DQo2dU/3QSMhkAM0dhLEv+bCmbHHtZo9rgquNZUPRBzfky5RqTQJ+krh2+LndVhk1d2lekdRIbF/; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/ Set-Cookie: AWSALBCORS=K4p3aMxTxikwnkFbpKEVUf0ovTEK+ACBOVsZBcZK9tu1Bp57DQo2dU/3QSMhkAM0dhLEv+bCmbHHtZo9rgquNZUPRBzfky5RqTQJ+krh2+LndVhk1d2lekdRIbF/; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-09 15:16:33 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49778	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:32 UTC	598	OUT	GET /websafe/logo/LTk2lS4u7RqcSCZrxmQJ9zr2DY9UroP8JVH6F0CPERii05Qmaa6IqnJQCO0RFhUVevahTQ!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
2024-12-09 15:16:33 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:33 GMT Content-Type: image/jpeg Content-Length: 4574 Connection: close Set-Cookie: AWSALB=SL5pyR09m4Kz4fFKFe/h7awybpYhl2L2juYqBL/l+a6XCG6NYjK4eztBxKpw8NaDCWwQn9CJAKnNfEYRPGVSMOi9wEBvL6k5o+F1H4V6RSKwidWQ1kiWbpsZYlE+; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/ Set-Cookie: AWSALBCORS=SL5pyR09m4Kz4fFKFe/h7awybpYhl2L2juYqBL/l+a6XCG6NYjK4eztBxKpw8NaDCWwQn9CJAKnNfEYRPGVSMOi9wEBvL6k5o+F1H4V6RSKwidWQ1kiWbpsZYlE+; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; Path=/websafe; Secure; HttpOnly Last-Modified: Fri, 11 Jan 2019 00:00:01 GMT ETag: "1683a355400-11de" Server: unknown
2024-12-09 15:16:33 UTC	4574	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 46 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCF"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49779	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:33 UTC	716	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
2024-12-09 15:16:48 UTC	805	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 09 Dec 2024 15:16:48 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=qOOB6mxmSGECKq2rafced9MwAiibX7oHf3+5Mn/M+m8/DbGqAo2J0E10Ekw1jFFIT0eTFbayXABooXyy+GKVOX223rSFsuWKYDHB7/R6L09hGaKxXloboeM0utLa; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/ Set-Cookie: AWSALBCORS=qOOB6mxmSGECKq2rafced9MwAiibX7oHf3+5Mn/M+m8/DbGqAo2J0E10Ekw1jFFIT0eTFbayXABooXyy+GKVOX223rSFsuWKYDHB7/R6L09hGaKxXloboeM0utLa; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49780	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:33 UTC	712	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
2024-12-09 15:16:48 UTC	801	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 09 Dec 2024 15:16:48 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=VOFqE3O50+H3/XSRxrs7McgH/xtYNO3SPOE6O8/I5WjXZyBMGjOqBXf/0Cbfd7aX8goqjQTqP+T4hLZELYTUni/TOrRdgjckGYjtRUJduZFBVseSUw2R8vi7EvEU; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/ Set-Cookie: AWSALBCORS=VOFqE3O50+H3/XSRxrs7McgH/xtYNO3SPOE6O8/I5WjXZyBMGjOqBXf/0Cbfd7aX8goqjQTqP+T4hLZELYTUni/TOrRdgjckGYjtRUJduZFBVseSUw2R8vi7EvEU; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49783	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:33 UTC	708	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=idqnzGz7QlZh2PJ4SUfN9JLdOxOLOCf+DAPa/fnTy5k3FnFb2yLKDUcjjBH3D/qS81TGdyb77LxoqUL7+1UXfYj/meVszKJ7jTo1NipoWxIAT0eHGtIdpG5eAG07
2024-12-09 15:16:33 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:33 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=HJhhEm14DkGevsHHvzFq+gzbySJx4CluXKQ+zTFGEGlTACUcMdD1S2h//85iWTeoYln5BygO4ozq+HrshawffLAT4pSpYiIMpFM0s9EMwqIS35dlh/W8zGvT7ZAG; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/ Set-Cookie: AWSALBCORS=HJhhEm14DkGevsHHvzFq+gzbySJx4CluXKQ+zTFGEGlTACUcMdD1S2h//85iWTeoYln5BygO4ozq+HrshawffLAT4pSpYiIMpFM0s9EMwqIS35dlh/W8zGvT7ZAG; Expires=Mon, 16 Dec 2024 15:16:33 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=19BC6E621AD021F7BB2693881C111756; Path=/websafe; Secure; HttpOnly Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-c9be" Server: unknown
2024-12-09 15:16:33 UTC	8459	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-09 15:16:34 UTC	9000	IN	Data Raw: 01 0e 16 47 a6 50 d8 27 b0 02 c8 c5 a0 ac c0 16 72 1c ba 10 b2 5e 40 34 0d 47 03 01 43 04 86 4a 7b 01 40 20 01 8a 46 00 20 18 01 31 92 89 97 3e 43 01 88 02 00 94 c7 28 4a a3 e0 80 25 11 39 2f 82 25 55 4c 01 52 82 50 70 42 e0 80 a6 10 27 91 e4 00 03 21 20 4b f2 2b 22 4f 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 Data Ascii: GP'r^@4GCJ{@ F 1>C(J%9/%ULRPpB'! K+"O#` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl
2024-12-09 15:16:34 UTC	9000	IN	Data Raw: a0 1b 10 d8 80 8c f5 1d 75 18 2d 40 b2 4a 24 00 00 00 02 40 00 24 68 91 72 87 00 36 13 00 c8 9c 01 a5 5c 8d 93 42 98 10 f0 2c 0d 92 44 50 d6 a2 1a d4 aa b1 31 83 02 19 2c a6 44 10 5e 35 26 59 49 04 ae a0 4a 43 81 f2 5d 4c dd 98 17 c4 a5 a9 87 26 69 db 72 ca 35 00 04 02 24 a6 48 19 f7 7e d3 9e bf 72 3b 22 45 f8 d1 05 80 01 40 12 20 08 60 20 00 28 91 c8 53 08 27 90 b9 a0 2e 04 67 cc 5c c0 d6 50 a4 ce d8 c9 1c c0 de 45 c8 c3 f2 12 fb a4 1d 1c 85 c8 e7 fc 81 cc 0e d1 88 65 08 45 09 81 2c a2 59 40 03 10 c0 42 63 13 02 44 31 10 4d f0 8c 97 09 c6 19 b3 52 27 55 13 b8 02 70 a0 e7 be a7 4a 4c c9 ce c0 2e da 72 6f 5a 41 9d 65 bc 8d 3c ea 02 75 f3 40 aa b7 62 7a 8d 01 aa 55 aa c1 0f 8e e1 55 91 35 ea 02 fa 07 35 da 03 87 a8 70 0a 96 ff 00 e4 97 b0 13 6f fb 85 6a 28 Data Ascii: u-@J$@$hr6\B,DP1,D^5&YIJC]L&ir5$H~r;"E@ ` (S'.g\PEeE,Y@BcD1MR'UpJL.roZAe<u@bzUU55poj(
2024-12-09 15:16:34 UTC	9000	IN	Data Raw: f2 01 48 60 c6 d6 bd 37 27 f3 37 ac 01 b3 d4 9e 52 cc ab 6e 5a 9b 2a ad d0 0e ae 59 d3 db d4 e7 4a a8 df b5 69 61 17 74 71 d2 ce 62 4e db 9c 54 fb 98 56 bc 98 f9 04 02 41 0f 90 73 14 09 a0 38 21 b0 86 77 f6 ad 54 da ae 3c ca 7d d4 ba b2 ab 83 8b 6a 4e da e9 1e 41 f4 5d c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 Data Ascii: H`7'7RnZYJiatqbNTVAs8!wT<}jNA]_\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E
2024-12-09 15:16:34 UTC	9000	IN	Data Raw: c6 2d 04 03 32 ee 5a 32 5d ec aa b2 71 da ce ce 59 54 36 ec 35 66 88 45 20 36 4c de a7 3d 4e 9a e9 82 0d 96 80 4d ae a8 a6 c4 7e 6a ae a5 1a c0 ab ae 4a 90 c0 43 81 40 c1 39 d3 20 15 97 ec 2f 8f 99 09 b4 5a b0 52 6a 37 27 89 69 6e 34 04 f1 6f 71 f1 7d 4a 18 11 0c 72 ca 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b Data Ascii: -2Z2]qYT65fE 6L=NM~jJC@9 /ZRj7'in4oq}Jr\|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd
2024-12-09 15:16:34 UTC	7187	IN	Data Raw: 95 64 9a 7e 3c 75 12 ca f2 ea 0b 29 27 88 c8 67 0f ca 40 76 5c 52 4b 5d 86 d4 66 72 36 de bd 13 9f 22 54 f2 d3 3d 7c 79 7c 40 2a a7 1b 60 a5 f5 42 78 59 15 57 f9 6d d3 c6 a2 51 10 b3 80 0b 37 ab f6 7b 42 65 43 1b fb 57 89 27 55 a6 20 0b ab 85 3e cc fe 9f a8 57 aa 0f 2e 82 ae 9e b9 f6 79 fb 40 6d 36 bf f2 d0 99 85 e5 af b5 e8 5c ae 5e 73 eb fd 0c f0 9b 5a 81 7a d9 ac ac 02 ce 35 c7 c9 8a b6 ca 5b 60 34 4d 2d 26 00 6b 32 ba 0a bf 2f 1e 3a 95 57 16 7d 5a d0 53 0a 3d 3d c0 2d 26 3d 70 26 d2 52 b0 5f 15 98 d1 8a b9 c3 c7 1f 87 8f 90 09 29 c3 59 42 56 4d cf f7 6f 1b f8 41 31 9d 85 30 bd 1f cc 02 21 cb 58 d3 f6 2f 1e c6 4b 5a cb c6 80 d4 ed e4 bd 40 76 87 ae 1c 47 90 28 df 5d 19 52 b3 ac 2d 88 7d 34 9f 18 03 44 bf ba 3d f8 33 aa 8f 28 cf bc ba e5 28 59 8f 98 9a Data Ascii: d~<u)'g@v\RK]fr6"T=\|y\|@*`BxYWmQ7{BeCW'U >W.y@m6\^sZz5[`4M-&k2/:W}ZS==-&=p&R_)YBVMoA10!X/KZ@vG(]R-}4D=3((Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49782	18.66.161.34	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:33 UTC	560	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:34 UTC	716	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Mon, 09 Dec 2024 15:16:35 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 24377ef75edd4e6b9442a3a00a398438.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: jp46I2z8GWn2fOv7HeoWu-bjwvTAbtXg-H3b0wyhbgvav1B6v-2RuQ== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-09 15:16:34 UTC	8192	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-09 15:16:35 UTC	8794	IN	Data Raw: ad a9 9e 78 f1 f3 57 b1 d9 6e 2e b5 32 02 b8 f9 77 28 f9 eb db f7 2f 2e ff 00 99 d3 4e 46 94 a7 be bf 8a 38 2d c7 d5 61 95 5e 57 57 ea f4 db fa 97 ea ba fe 61 1e a2 75 ba ee 8c 76 5b 8b e4 cd 7b 19 d2 e9 b9 f9 6c ff 00 f4 b3 a6 bc 93 8b 61 95 47 1f 2a be 86 8c ca fc 4a d9 58 b7 72 2b c8 ea f6 df 1e 3d 18 1d 12 02 4e 42 02 a8 04 30 01 0c 00 e7 bf 0c fa ab 86 4a e4 56 f4 f2 2c 9d 46 57 e3 57 59 08 cd a7 5f 9b e1 6f e2 69 5b f4 b7 df dc c1 5d f1 bd b6 ca 0b 42 d3 35 ec 07 5c 81 c5 4e 4b 57 47 35 f1 d5 1b ab 3b e8 06 d2 4b ba 27 63 7a 94 a8 90 10 f9 05 36 66 b0 30 32 d8 de a5 2e 34 59 0e e9 6a c2 a9 24 86 73 3e 7e 95 52 2d bc 97 d7 08 23 7b 72 56 ba 9c f6 e6 76 c5 4d 2b c1 55 ae 4d 95 52 d0 0e 55 c7 7b ea f0 69 5e 0a ad 72 6e 00 67 6e 25 65 07 23 4e 8e 19 de Data Ascii: xWn.2w(/.NF8-a^WWauv[{laG*JXr+=NB0JV,FWWY_oi[]B5\NKWG5;K'cz6f02.4Yj$s>~R-#{rVvM+UMRU{i^rngn%e#N
2024-12-09 15:16:35 UTC	16384	IN	Data Raw: 2a b4 cb 22 b5 43 da 05 01 3b 41 28 02 89 a8 65 13 54 d2 03 41 42 14 b0 dc 03 da 82 05 b8 72 06 32 d9 a4 f7 21 26 de 0b dd 1a 80 42 63 86 09 a6 38 ec 02 96 0a c8 32 13 dc 0a 26 d5 91 42 e8 38 7d 00 95 66 b1 6f bc d0 87 2f 0c cd 37 4f 20 37 26 dd 81 59 3c 82 02 8c ef 49 ca d4 d0 00 ca b9 52 8a 96 4a f4 da 3a 33 50 27 70 d3 90 81 3a a0 28 08 da c2 5a 02 c0 9d c3 90 13 aa 67 3f 25 36 e5 1d 46 7c 8a 51 06 5c 6f 39 36 6d 3c 1c aa 53 86 75 52 1a 08 36 c6 81 94 54 0b 25 52 dd dc a4 d3 14 f7 14 20 2c 08 db d8 25 a0 2c 09 56 43 99 01 80 00 00 86 20 14 48 6c 4b 42 80 09 c8 6e 8d 4a 00 30 b3 cc a3 4a df 71 50 99 0f 8d 6a b0 06 80 65 b9 ac 32 f7 01 40 29 43 03 2e 55 84 5a ac 13 cb f2 9a 20 14 30 43 00 25 d9 11 2a 4b 6d 23 3a d3 3b ac 41 6e b2 4b 6e d8 ae 9d c4 ff 00 Data Ascii: "C;A(eTABr2!&Bc82&B8}fo/7O 7&Y<IRJ:3P'p:(Zg?%6F\|Q\o96m<SuR6T%R ,%,VC HlKBnJ0JqPje2@)C.UZ 0C%Km#:;AnKn
2024-12-09 15:16:35 UTC	16384	IN	Data Raw: c7 67 57 9a 46 6a 06 6b 35 5e 66 cb 97 6b b2 b6 6b d8 56 e1 57 aa b7 0c da b3 95 d5 64 c1 b7 ea 0a e8 fa 6b 16 a6 6b f8 99 a8 85 1d c5 5b da b6 51 d8 da bc 75 e5 53 4f 4b 99 80 35 e0 ad ab 6d d1 87 f7 1d f5 b2 b6 3a 9c bc 7c ed 55 f1 bd 50 aa da 7e 20 77 4b ae ba 1c 1e eb d9 a7 eb e3 cf 7a ff 00 0f e0 75 d3 99 3c 5b 05 a6 d0 1f 3d 08 36 a3 d7 f7 3e d2 bc de ba 62 ff 00 9f 99 e3 d9 5a 8f 6b 50 d7 70 2b 6a 08 46 73 66 3a d2 dd c2 36 5c 70 a4 a5 6c 60 c2 ea c2 a7 0c f5 20 e8 4e 74 1d 56 e7 0b 52 38 b8 ab 39 93 a7 fb 6e 27 a5 80 5f 4d ac c0 2a f8 17 cb ed ef 45 35 bb 68 e4 ff 00 71 7e e0 3a 60 67 2c f2 77 91 2d f2 15 da a0 a4 73 27 68 25 72 59 30 3b 30 61 69 d0 3e a5 8b ad 9d 80 55 b3 2e b6 87 a0 ac dd 75 40 b9 10 17 28 d2 97 4b a9 92 69 e5 0f 05 1d 4b 91 14 Data Ascii: gWFjk5^fkkVWdkk[QuSOK5m:\|UP~ wKzu<[=6>bZkPp+jFsf:6\pl` NtVR89n'_M*E5hq~:`g,w-s'h%rY0;0ai>U.u@(KiK
2024-12-09 15:16:35 UTC	2048	IN	Data Raw: 9c bf f3 53 cd 9d a7 17 27 fc d4 f8 9d a5 80 00 19 40 00 00 03 42 29 01 16 12 1d b5 12 03 0f 73 cb f4 d2 6d 4c 97 31 54 67 ee b4 45 bf 94 88 48 aa ea 42 2e ba 81 63 08 02 87 d0 c6 72 6f d0 c7 a8 29 a7 0c 1b 44 db 52 42 3a 16 80 03 0d 04 73 d9 a9 3a 11 ca 94 5c 09 b7 3d 28 e2 c5 70 5f 8e d7 f4 6a 2e 78 dd 95 21 c0 d2 be 14 11 1d ac 82 d9 05 52 00 00 00 00 00 00 00 03 2f 71 ff 00 1d bc 8d 4c 7d c7 fc 76 f2 01 70 fc a8 ab e9 9d 09 e1 f9 50 f9 63 6b 92 0e 24 b8 6d ab ac 17 c7 c5 c3 5b 2d ad 37 d3 27 2f 1d 38 16 6c eb 8d 0e 8e 3a 70 26 b6 ed 99 47 16 de b8 ac 31 5b 43 bb 08 67 97 c7 c1 c7 be 77 2c 1e 9b 3c ce 5a 71 43 75 db bb 26 3d 77 1a 8f 4b eb 53 fa 90 7d 5a 77 5f 79 e0 7b 5a d5 b8 b4 44 1d 76 e0 e1 7d 6a 3e c6 3d 4f ab 4e e8 d8 f1 6d f4 eb 58 51 86 7b 28 Data Ascii: S'@B)smL1TgEHB.cro)DRB:s:\=(p_j.x!R/qL}vpPck$m[-7'/8l:p&G1[Cgw,<ZqCu&=wKS}Zw_y{ZDv}j>=ONmXQ{(
2024-12-09 15:16:35 UTC	16384	IN	Data Raw: 6c ef e3 f4 d7 3d 8c b6 56 74 36 49 24 4b ca cc 89 e3 87 c8 9f 88 bd d5 7f dc dd 3a 60 6a a9 39 5a a0 e4 ce 59 99 31 ab ea d6 77 52 b5 3b 78 2d 35 9e a6 11 35 d0 d3 8a ca 9e 97 a1 58 69 78 5e ae bd 8e 46 fa a5 07 5f 24 ac 2c a3 2b 55 b5 83 43 bb 81 cd 17 91 b1 8f 07 c8 bc 8d 4a 18 08 00 4c cc d1 b3 30 13 3c fb d1 6a fa 33 d0 38 1b 72 c8 25 56 8f d5 92 93 a2 c6 7e e2 95 e1 22 6f 76 f4 26 85 77 c5 6b 65 39 f2 17 1f d2 6e 6b 57 f7 15 56 d6 a4 27 78 f1 02 f9 1f 1c 7a aa da 9e dd 47 ed 9f 1b bf a2 ae af c4 c6 79 0e ce 39 6d 01 3c ea ad fa 94 c0 56 f5 8d 18 51 c3 6d 92 dc b2 7c aa f7 56 7e 51 aa d1 fe d3 06 dc 95 bc d2 34 56 af f4 7e 41 6b a5 a5 3f 23 15 77 dc 8b 5a d1 86 41 d7 5e 5c c6 d0 7c ae 61 57 06 14 99 c8 5a 65 94 68 fd c7 22 c2 e3 4f e2 2f ee 39 bf fd Data Ascii: l=Vt6I$K:`j9ZY1wR;x-55Xix^F_$,+UCJL0<j38r%V~"ov&wke9nkWV'xzGy9m<VQm\|V~Q4V~Ak?#wZA^\\|aWZeh"O/9
2024-12-09 15:16:35 UTC	1024	IN	Data Raw: 40 f1 29 cb 7a bc d9 fd e6 eb de 59 7e ef bc 0f 50 ce cd 27 12 70 af 7e fa c3 fc 0d 6b ef 2b 77 f2 b0 3a 78 69 c5 ed ef 29 bd da 44 4e a7 65 bd 39 b3 85 fe 9a 9e 35 17 a9 39 8c ea 74 f3 da b6 bc d5 bb 78 b8 fc 02 ba 9f 37 1e 8e df fb 11 8f f6 dc 3c de 9a bb 7c 11 cb 06 fc 10 9c b6 ea 11 d1 7e 25 4b 24 b5 f1 38 3d df 15 2d eb ae e7 6e b3 10 74 71 47 d4 6d 65 77 ea 15 e5 af 0d 37 5d 38 97 d0 0f 36 b4 ef f9 1d 94 f6 89 a9 86 53 ff 00 b1 a7 ed ab 66 76 ff 00 b0 bb f9 52 40 6e bd a2 5f b4 d6 be dd 2d 21 1e 6d bd df 33 eb 1e 48 c9 f2 de da d9 81 ec 5a b5 aa cb 47 3b e7 a5 3e 56 8f 2e 06 07 b3 c3 ef d3 c3 7f 79 db 5e 55 c8 bd 3f 7f 6e e7 cd aa bb 38 5a bc 1e f5 23 82 9b 2b 95 5c 79 db f8 2e a1 62 ed 65 55 0b 48 fc 3f 8b 39 36 bb 39 62 e5 f7 8d 38 c6 35 7e 27 2d Data Ascii: @)zY~P'p~k+w:xi)DNe959tx7<\|~%K$8=-ntqGmew7]86SfvR@n_-!m3HZG;>V.y^U?n8Z#+\y.beUH?969b85~'-
2024-12-09 15:16:35 UTC	16384	IN	Data Raw: b2 d3 8d 10 ab b9 49 db fd b2 75 da 15 f6 aa ba 32 23 8f e9 f5 60 b8 fa 9d bf db 46 96 2a 9e da 75 65 47 06 c6 b2 74 7b 5a b5 74 fc cd 5f b7 d9 97 62 78 16 de 4c 39 40 7a 88 aa 90 8b 45 45 0c 43 41 50 f5 2d 19 b7 92 d3 03 c9 e4 56 df 67 2e 27 b9 2b 76 bb ad 1e 67 47 d1 b5 af 67 84 a4 bf ed 6d dd 04 61 57 69 d6 d1 e6 52 77 dd ab 8f 33 75 ed ae ba a0 fe da f3 32 80 cf 75 e6 77 31 be 4e 4e 96 70 6b f4 2f e0 37 c3 66 b0 97 de 15 cc f9 39 1e 77 38 1e fb ad 2c e0 e8 7c 16 78 49 2f 88 97 b7 b3 5a a8 03 25 cb c8 bf 76 07 f5 b9 35 9c 1a fd 0b ad 12 8f 30 7c 36 d1 55 47 98 19 7d 6e 4e f8 2b eb 72 74 7f 81 57 e2 b4 7a 6b 1f 11 be 2b 46 2b 9f 30 33 7c bc 8f 47 81 fd 5e 5e f8 f2 34 7c 56 8c 56 3e 22 fa 56 e9 5f c4 09 fa dc 93 ae 3c 86 f9 b9 27 5c 79 14 f8 9f 4a f9 e4 Data Ascii: Iu2#`F*ueGt{Zt_bxL9@zEECAP-Vg.'+vgGgmaWiRw3u2uw1NNpk/7f9w8,\|xI/Z%v50\|6UG}nN+rtWzk+F+03\|G^^4\|VV>"V_<'\yJ
2024-12-09 15:16:35 UTC	16384	IN	Data Raw: 40 8a f4 02 69 75 47 9c 8a f7 56 78 14 26 46 d8 b0 15 22 d4 30 19 61 0b 6b 6c 15 21 be e1 45 eb 93 a7 8e d2 dc 81 ca db 3b f8 be 54 61 6e 4a 1d 3c 71 b5 46 81 4c 56 f9 58 d8 ac f0 ca 39 f8 7e 63 a8 e5 e1 d4 ea 24 09 90 cb 64 30 34 5a 00 2d 00 a2 5a 1a 10 d3 03 8f 97 e6 3a e9 a2 39 39 63 71 d7 4d 11 91 9d cc 8d ae 63 25 0e 60 ad dd c8 02 0d 13 4c 1f 1d 5b 98 39 af 84 1c 76 6b 46 51 7c 9c 2e 3d 3a 99 ba b5 e0 cd ab cd 3a a0 98 b4 bd 08 39 f9 5f a4 c6 87 75 ef 5f 3f 23 17 b5 e9 81 8b ad 68 71 72 f3 5f 82 f3 5d 19 d5 57 03 6a b6 d5 48 c4 d6 14 f7 17 e5 72 92 93 a3 8f 93 9e d8 69 57 cf f9 1a d5 ad 06 ec 96 a5 0e ae f1 ea 84 fc 0a 93 27 c8 bc c8 77 7d 80 de 49 b5 95 75 c1 84 59 ea f0 42 e1 5b a6 00 d1 fb ae 3e 8f 74 76 33 af b9 fa 8a 6a be f1 ae 34 b4 51 21 f4 Data Ascii: @iuGVx&F"0akl!E;TanJ<qFLVX9~c$d04Z-Z:99cqMc%`L[9vkFQ\|.=::9_u_?#hqr_]WjHriW'w}IuYB[>tv3j4Q!
2024-12-09 15:16:35 UTC	1024	IN	Data Raw: c7 74 fd 17 d4 e5 e4 e1 dd c6 ea 9a 9e 2b 7f ed b1 99 c5 c6 d8 5e b4 4f 45 f7 95 4e 3a b7 88 f2 9f e2 16 f6 f6 75 4d 29 21 f1 da ba a8 34 de 3d ab 55 3a a5 95 3c 7f 94 1e 6f 2f 15 a6 69 9f f4 9d dc 56 76 a5 3b ed b2 fb 91 c1 cb c8 e5 4a 9f 1d 18 24 b8 9f a8 f4 e4 5b d7 f9 b5 fb cc df 0f 15 be 5b 6c 7d ac 74 fd 45 6c 37 3e 16 ff 00 f2 46 76 e2 af 8d 7e 12 be f2 a5 91 93 f6 57 59 ab 57 5e 06 7f da 73 7f 4b 37 5c 36 7f 27 e0 c3 e9 72 ff 00 9b ef 09 f5 73 ff 00 65 cd fd 2c f4 bd b7 1d d7 1a 4d 39 58 39 1f 17 2a fe af bc eb f6 9f 52 a9 d1 ca ea b2 73 f5 d2 63 5f 77 c1 7b 6d b5 6b e6 72 d7 da 72 3f 53 8a af 16 7a 17 ad b9 28 eb 39 5a 64 f3 b6 3e bf a9 b9 78 6f cf e1 de f8 a8 af 79 f5 3b d1 5a 3a 60 e7 56 b4 26 bd 29 34 e2 a6 f4 e5 ac d2 f6 7a 55 d6 c9 7e 7e 46 Data Ascii: t+^OEN:uM)!4=U:<o/iVv;J$[[l}tEl7>Fv~WYW^sK7\6'rse,M9X9*Rsc_w{mkrr?Sz(9Zd>xoy;Z:`V&)4zU~~F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49798	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:35 UTC	1236	OUT	GET /keyserver/keyserver?su=brian.cummings%40ebizcharge.com&df=&tf=&lp=en&v=2&m=%7c1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt.servers.global.prv&s=1&f=0&d=1733757391016&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=HJhhEm14DkGevsHHvzFq+gzbySJx4CluXKQ+zTFGEGlTACUcMdD1S2h//85iWTeoYln5BygO4ozq+HrshawffLAT4pSpYiIMpFM0s9EMwqIS35dlh/W8zGvT7ZAG
2024-12-09 15:16:36 UTC	885	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:36 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 1407 Connection: close Set-Cookie: AWSALB=oh9LVNR9ucQpArZdSUBX7WQoWp3W+SveOd43EyETKU+b8xNr3cfEVyK77DVzoeN69DOcv51m6q+vKt1AdA+yGJzeUwd+qcJvjL4J0V/vRGL8JXwjxYN9yEnwkbR7; Expires=Mon, 16 Dec 2024 15:16:35 GMT; Path=/ Set-Cookie: AWSALBCORS=oh9LVNR9ucQpArZdSUBX7WQoWp3W+SveOd43EyETKU+b8xNr3cfEVyK77DVzoeN69DOcv51m6q+vKt1AdA+yGJzeUwd+qcJvjL4J0V/vRGL8JXwjxYN9yEnwkbR7; Expires=Mon, 16 Dec 2024 15:16:35 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Set-Cookie: JSESSIONID=B3923C4A05FB8D47B858F3B177E117E6; Path=/keyserver; Secure; HttpOnly Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-12-09 15:16:36 UTC	1407	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 72 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 31 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 50 6c 65 61 73 65 20 65 6e 72 6f 6c 6c 20 62 65 66 6f 72 65 20 6f 70 65 6e 69 6e 67 20 74 68 69 73 20 52 65 67 69 73 74 65 72 65 64 20 45 6e 76 65 6c 6f 70 65 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 31 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 33 33 37 35 37 33 39 31 30 31 36 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 31 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qr,'action':'open','status':11,'message':'Please enroll before opening this Registered Envelope.','state':1,'reqTime':1733757391016,'reqNumber':1,'recipientIdentified':false,'success':true,'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49801	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:35 UTC	686	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; AWSALB=SL5pyR09m4Kz4fFKFe/h7awybpYhl2L2juYqBL/l+a6XCG6NYjK4eztBxKpw8NaDCWwQn9CJAKnNfEYRPGVSMOi9wEBvL6k5o+F1H4V6RSKwidWQ1kiWbpsZYlE+; AWSALBCORS=HJhhEm14DkGevsHHvzFq+gzbySJx4CluXKQ+zTFGEGlTACUcMdD1S2h//85iWTeoYln5BygO4ozq+HrshawffLAT4pSpYiIMpFM0s9EMwqIS35dlh/W8zGvT7ZAG
2024-12-09 15:16:36 UTC	881	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:36 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=mettDyv3/kJ5l7HQjdgDpK7YTn8qJ0riTHt0Eu0bnyHl5WYfgD+8BFRB7fp2I6K5m/b4UG6ERRrGcyS4PKanTrRKxLyi6lNfU2rQsmcN2W7GEeXoS14493vSp6l9; Expires=Mon, 16 Dec 2024 15:16:36 GMT; Path=/ Set-Cookie: AWSALBCORS=mettDyv3/kJ5l7HQjdgDpK7YTn8qJ0riTHt0Eu0bnyHl5WYfgD+8BFRB7fp2I6K5m/b4UG6ERRrGcyS4PKanTrRKxLyi6lNfU2rQsmcN2W7GEeXoS14493vSp6l9; Expires=Mon, 16 Dec 2024 15:16:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-c9be" Server: unknown
2024-12-09 15:16:36 UTC	8549	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-09 15:16:36 UTC	9000	IN	Data Raw: 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 d9 2e c2 08 08 91 c0 c2 40 ba e8 24 3a 39 42 40 1c 82 64 20 cd f9 01 6d 23 37 00 e7 71 a4 f6 c0 13 0f 7d 01 26 f6 92 be 95 ff 00 26 56 58 18 42 73 ea 2e 2e 67 69 1c 67 da 35 86 41 9c 7c 87 3d 73 a1 a4 ce a2 e3 d3 a8 54 2a a7 b8 ff 00 1f 98 71 f9 0f 28 06 ab 1b 87 04 0a Data Ascii: #` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl.@$:9B@d m#7q}&&VXBs..gig5A\|=sT*q(
2024-12-09 15:16:36 UTC	9000	IN	Data Raw: 24 a6 48 19 f7 7e d3 9e bf 72 3b 22 45 f8 d1 05 80 01 40 12 20 08 60 20 00 28 91 c8 53 08 27 90 b9 a0 2e 04 67 cc 5c c0 d6 50 a4 ce d8 c9 1c c0 de 45 c8 c3 f2 12 fb a4 1d 1c 85 c8 e7 fc 81 cc 0e d1 88 65 08 45 09 81 2c a2 59 40 03 10 c0 42 63 13 02 44 31 10 4d f0 8c 97 09 c6 19 b3 52 27 55 13 b8 02 70 a0 e7 be a7 4a 4c c9 ce c0 2e da 72 6f 5a 41 9d 65 bc 8d 3c ea 02 75 f3 40 aa b7 62 7a 8d 01 aa 55 aa c1 0f 8e e1 55 91 35 ea 02 fa 07 35 da 03 87 a8 70 0a 96 ff 00 e4 97 b0 13 6f fb 85 6a 28 cb 40 92 ea 82 15 bd 76 34 5a 10 d5 7a ed d0 d2 b1 b4 80 aa db f4 15 ab cb 71 a7 90 b3 c7 40 27 8a 51 2e 42 c9 b5 12 92 81 63 e2 0e ba 4e 35 02 6b 48 ba 72 b4 35 b2 84 db c9 8f 25 ca a9 2d b5 7a 9a 5f 46 06 0a f0 6d 5b a7 83 9c 60 74 c7 40 4e 0c 6b 66 b5 36 56 90 2e 40 Data Ascii: $H~r;"E@ ` (S'.g\PEeE,Y@BcD1MR'UpJL.roZAe<u@bzUU55poj(@v4Zzq@'Q.BcN5kHr5%-z_Fm[`t@Nkf6V.@
2024-12-09 15:16:36 UTC	9000	IN	Data Raw: c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 31 55 e7 9d 0c 38 55 e1 58 e8 bc 25 ae 8a 01 71 93 b2 b5 8b e5 1d 7c 7b 08 a7 15 96 c6 ed 4e a0 f8 6e eb cf e0 2e 49 ff 00 4f d8 8f a5 e9 64 3f c6 f6 68 2f c6 94 4a cf 68 5d 0d ad d0 54 a7 15 06 4e 5b f5 24 45 2a ef be c1 0e 61 3f 1d 43 94 2f 97 ee 3a e9 9d ca 87 6b 71 Data Ascii: _\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E1U8UX%q\|{Nn.IOd?h/Jh]TN[$Ea?C/:kq
2024-12-09 15:16:36 UTC	9000	IN	Data Raw: 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b 36 d0 f2 16 1e 59 42 58 28 97 20 80 4f ee 2c 8d cb 00 89 22 20 a0 01 48 a8 36 89 ab 03 40 27 90 72 01 b4 2c a0 91 c8 0b 96 0c d3 8d 4d 19 8d b5 01 b6 4b 2a 05 80 24 ba e5 0a d0 99 55 78 64 15 45 0b 53 43 2e db 35 28 ce da 96 8c ed a9 a2 20 01 00 14 31 31 89 81 16 d0 28 Data Ascii: \|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd6YBX( O," H6@'r,MK*$UxdESC.5( 11(
2024-12-09 15:16:36 UTC	7097	IN	Data Raw: 82 ae 9e b9 f6 79 fb 40 6d 36 bf f2 d0 99 85 e5 af b5 e8 5c ae 5e 73 eb fd 0c f0 9b 5a 81 7a d9 ac ac 02 ce 35 c7 c9 8a b6 ca 5b 60 34 4d 2d 26 00 6b 32 ba 0a bf 2f 1e 3a 95 57 16 7d 5a d0 53 0a 3d 3d c0 2d 26 3d 70 26 d2 52 b0 5f 15 98 d1 8a b9 c3 c7 1f 87 8f 90 09 29 c3 59 42 56 4d cf f7 6f 1b f8 41 31 9d 85 30 bd 1f cc 02 21 cb 58 d3 f6 2f 1e c6 4b 5a cb c6 80 d4 ed e4 bd 40 76 87 ae 1c 47 90 28 df 5d 19 52 b3 ac 2d 88 7d 34 9f 18 03 44 bf ba 3d f8 33 aa 8f 28 cf bc ba e5 28 59 8f 98 9a 88 ce 50 0e 78 b9 d2 31 1e a4 be ab fb 77 f9 84 4c c7 c7 7f 1b 0e af e9 6d e8 06 7a e3 4f 1f 39 34 ac 35 89 9d ff 00 5c 91 30 bd 17 c3 d4 2a f3 d2 40 d1 6b 0f c6 fe c1 66 21 e7 4f 0b d1 0e ca 7d 11 2d ce 62 63 12 03 b5 63 1e 10 f8 b6 fa 78 cf b4 4b 2a 26 5f 8f e9 ea 09 Data Ascii: y@m6\^sZz5[`4M-&k2/:W}ZS==-&=p&R_)YBVMoA10!X/KZ@vG(]R-}4D=3((YPx1wLmzO945\0@kf!O}-bccxK&_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49799	18.66.161.34	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:35 UTC	569	OUT	GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:37 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 303504 Connection: close Date: Mon, 09 Dec 2024 15:16:37 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "a4a7379505cd554ea9523594b7c28b2a" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 92762e121ef0da0933d8eb51d753cf06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: PDj1zD971YXeuIaADjs7WO66XtaGouYolWLiV2-9TuTXkU_HcmPIDg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-12-09 15:16:37 UTC	604	IN	Data Raw: 07 30 0a f8 02 26 01 a5 00 00 00 07 08 0c 07 3c 02 38 ff ff 00 f8 ff dc 07 30 0a a0 02 26 01 a5 00 00 00 07 06 7b 06 9c 02 00 ff ff 00 f8 ff dc 07 30 0a 74 02 26 01 a5 00 00 00 07 06 7f 07 66 02 a0 ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 8d 07 c0 ff e4 ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 90 07 74 ff e4 ff ff 00 f8 fd b4 07 30 08 00 02 26 01 a5 00 00 00 07 06 89 07 34 ff e4 ff ff 00 f8 ff dc 07 30 0b a0 02 26 01 a5 00 00 00 07 08 bd 06 00 00 00 ff ff 00 f8 ff dc 07 30 0b 80 02 26 01 a5 00 00 00 07 08 5d 07 3c 02 8c ff ff 00 f8 fd e8 07 30 08 00 02 26 01 a5 00 00 00 07 06 8b 07 54 ff e4 ff ff 00 f8 ff dc 07 30 0b 0c 02 26 01 a5 00 00 00 07 06 80 07 44 02 24 ff ff 00 f8 ff dc 08 fc 0a a0 02 26 01 a6 00 00 00 07 06 64 01 Data Ascii: 0&<80&{0t&f0&0&t0&40&0&]<0&T0&D$&d
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 06 84 f8 00 06 60 f9 a0 ff ff 00 3c 00 00 0a 34 0a 68 02 26 01 c8 00 00 00 07 06 6a 02 b8 02 00 ff ff 00 3c 00 00 0a 34 0a a0 02 26 01 c8 00 00 00 07 06 66 01 e4 02 00 ff ff 00 3c 00 00 0a 34 0a a0 02 26 01 c8 00 00 00 07 06 64 02 9c 02 00 ff ff 00 3c 00 00 0a 34 0a 40 02 26 01 c8 00 00 00 07 06 69 01 f8 00 18 ff ff 00 3c 00 00 0a 34 0a 40 02 26 01 c8 00 00 00 07 06 70 03 e8 02 00 ff ff 00 3c fe 14 0a 34 08 00 02 26 01 c8 00 00 00 07 06 8b 08 78 00 10 00 01 00 4c 00 00 06 c4 08 00 00 0d 00 00 01 01 33 01 21 01 01 21 01 23 01 21 01 01 01 70 02 10 10 02 10 01 24 fd 7c 02 84 fe dc fd f0 10 fd f0 fe dc 02 94 fd 6c 08 00 fc ac 03 54 fc 00 fc 00 03 44 fc bc 04 00 04 00 ff ff 00 4c 00 00 06 c4 0a 40 02 26 01 cf 00 00 00 07 06 70 02 38 02 00 ff ff 00 4c 00 00 06 Data Ascii: `<4h&j<4&f<4&d<4@&i<4@&p<4&xL3!!#!p$\|lTDL@&p8L
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 26 03 07 00 00 00 07 09 96 00 fc 00 b0 ff ff 00 90 ff e0 06 00 08 94 02 26 03 07 00 00 00 07 09 9d 01 5c 00 94 00 03 00 90 ff e0 06 00 06 14 00 03 00 13 00 23 00 00 01 15 21 35 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 27 32 36 12 35 34 02 26 23 22 06 02 15 14 12 16 05 62 fb cc 02 1a d0 fe c7 af af 01 39 d0 d0 01 39 af af fe c7 d0 9e cc 62 62 cc 9e 9e cc 62 62 cc 03 66 cc cc fc 7a c6 01 64 ee f0 01 66 c6 c6 fe 9a f0 ee fe 9c c6 d4 a2 01 08 9a 9a 01 0a a4 a4 fe f6 9a 9a fe f8 a2 ff ff 00 90 ff e0 06 00 06 14 02 06 03 35 00 00 ff ff 00 90 ff e0 06 00 06 14 02 06 03 07 00 00 ff ff 00 90 ff e0 06 00 08 40 02 06 03 08 00 00 ff ff 00 90 ff e0 0a 5c 06 14 00 26 03 07 00 00 00 07 02 64 04 84 00 00 ff ff 00 90 fd c0 0c 18 06 14 00 26 03 07 00 00 00 07 03 c3 Data Ascii: &&\#!5"$54$32'2654&#"b99bbbbfzdf5@\&d&
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 00 90 ff e4 05 7c 08 b0 02 26 04 44 00 00 00 07 09 8f 00 f4 00 b0 ff ff 00 90 ff e4 05 7c 08 b0 02 26 04 44 00 00 00 07 09 96 00 b8 00 b0 ff ff 00 90 ff e4 05 7c 08 94 02 26 04 44 00 00 00 07 09 9d 01 18 00 94 00 02 00 88 fd f0 05 20 08 00 00 21 00 25 00 00 01 33 15 01 0e 02 15 14 16 17 17 16 16 15 14 06 07 27 36 36 35 34 26 27 27 26 02 35 34 3e 02 37 01 21 15 21 04 a8 78 fe 2c 70 a1 57 76 66 b8 aa c2 87 71 90 3c 44 6f 61 7c c4 e0 36 65 92 5b fe 14 04 44 fb bc 08 00 b0 fd 9c 92 d4 d8 9a 67 96 1f 38 34 a5 5f 60 d9 5f 7c 44 82 2e 26 4e 1c 24 39 01 0f b4 7f d8 c6 c4 6b 02 a4 dc 00 01 00 d8 fd c0 05 98 06 14 00 16 00 00 01 11 23 11 33 15 33 36 36 33 32 16 12 15 11 23 11 34 26 23 22 06 06 01 c4 ec e4 14 36 dc ae 9c ea 82 ec bb a5 70 b1 67 03 9c fc 64 06 00 f0 Data Ascii: \|&D\|&D\|&D !%3'6654&''&54>7!!x,pWvfq<Doa\|6e[Dg84_`_\|D.&N$9k#336632#4&#"6pgd
2024-12-09 15:16:37 UTC	3072	IN	Data Raw: 27 2e 03 35 34 3e 02 37 36 16 16 17 33 35 33 11 14 16 33 32 36 12 35 34 02 26 26 24 23 22 04 00 02 15 14 12 00 04 21 32 36 36 37 17 0e 02 03 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 05 74 fe ce fe 2a fe c0 a4 a7 01 3f 01 c9 01 21 01 19 01 a7 01 1d 8f 1c 5a bb 9f 46 a8 82 0c 0c 18 63 9f 72 82 c6 85 43 50 8f c1 70 64 a4 6a 0e 0c d4 5e 5a 66 6d 29 49 93 e0 fe d3 bf eb fe 8d fe fd 87 87 01 09 01 88 01 00 6e d6 a4 24 38 3e c7 e1 da 86 a6 4c 54 a4 78 72 a1 55 44 9a fd e4 a7 01 44 01 d6 01 2f 01 25 01 ce 01 43 aa b7 fe c9 fe 7c ce 91 fe d6 f9 98 2c 66 56 3a 68 3e 04 05 6b b9 f5 8e 87 e0 a8 65 0c 0a 25 49 2c 70 fc 78 54 80 8c 01 24 e4 86 01 05 e4 ae 63 91 fe eb fe 75 fb ff fe 74 fe f0 8d 2a 32 0c b8 1a 34 22 03 1c 6c da a6 a8 bc 4c 77 c5 74 80 e1 8b ff ff 01 Data Ascii: '.54>7635332654&&$#"!266726654&&#"t?!ZFcrCPpdj^Zfm)In$8>LTxrUDD/%C\|,fV:h>ke%I,pxT$cut24"lLwt
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 07 00 00 25 11 33 11 01 35 21 15 03 30 e0 fc fc 05 28 8c 05 28 fa d8 02 24 e0 e0 00 01 01 20 02 b0 06 20 03 90 00 03 00 00 01 15 21 35 06 20 fb 00 03 90 e0 e0 00 02 01 20 00 a0 06 20 05 a0 00 03 00 07 00 00 25 01 37 01 05 27 01 17 05 88 fb 98 98 04 68 fb 98 98 04 68 98 a0 04 68 98 fb 98 98 98 04 68 98 00 03 01 20 00 68 06 20 05 d8 00 03 00 0f 00 1c 00 00 01 15 21 35 01 22 26 35 34 36 33 32 16 15 14 06 03 22 26 26 35 34 36 33 32 16 15 14 06 06 20 fb 00 02 80 4b 69 69 4b 48 68 68 48 32 52 30 69 4b 48 68 68 03 90 e0 e0 fc d8 69 4b 48 68 68 48 4b 69 04 0c 30 52 32 48 68 68 48 4b 69 00 03 01 1c 00 60 06 24 06 00 00 03 00 07 00 0b 00 00 25 35 21 15 01 35 21 15 01 11 33 11 01 1c 05 08 fa f8 05 08 fd 0c e0 60 e0 e0 03 28 e0 e0 fe 68 04 10 fb f0 00 02 00 e6 00 f0 Data Ascii: %35!0(($ !5 %7'hhhh h !5"&54632"&&54632 KiiKHhhH2R0iKHhhiKHhhHKi0R2HhhHKi`$%5!5!3`(h
2024-12-09 15:16:37 UTC	1024	IN	Data Raw: c0 08 0c 00 08 00 00 21 11 01 27 01 01 07 01 11 04 d2 fd 88 9c 03 82 03 80 98 fd 86 06 6c fd 86 9a 03 80 fc 80 9a 02 7a f9 94 00 01 01 c0 ff f4 08 c2 08 00 00 08 00 00 01 11 01 17 01 01 37 01 11 05 ae 02 78 9c fc 7e fc 80 98 02 7a 08 00 f9 94 02 7a 9a fc 80 03 80 9a fd 86 06 6c 00 01 01 c0 fd 9c 08 c0 09 40 00 0d 00 00 01 01 37 01 11 01 27 01 01 07 01 11 01 17 05 40 fc 80 9a 02 78 fd 88 9a 03 80 03 80 98 fd 86 02 7a 98 fd 9c 03 80 9a fd 86 08 64 fd 86 9a 03 80 fc 80 9a 02 7a f7 9c 02 7a 9a 00 02 01 16 00 00 0b 84 08 40 00 16 00 1c 00 00 01 35 21 32 36 36 35 34 26 26 23 23 35 33 32 04 12 15 14 0e 02 23 09 02 17 01 01 02 00 06 ee 7a c9 77 78 c8 7a 66 66 b7 01 2c b3 67 b6 f0 89 fb a8 fc 80 03 80 99 fd 18 02 e8 03 12 dc 78 ca 7a 7a c8 78 dc b3 fe d4 b7 89 f1 Data Ascii: !'lz7x~zzl@7'@xzdzz@5!26654&&##532#zwxzff,gxzzx
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 00 f7 81 06 fe fc 81 00 02 01 08 ff 00 09 88 09 00 00 02 00 05 00 00 01 11 09 03 01 08 08 80 f8 5c 05 f2 fa 0e ff 00 0a 00 fb 00 fc 81 03 7f 03 7f 00 03 00 40 00 00 0a d8 09 00 00 02 00 0e 00 12 00 00 33 09 02 32 36 35 34 26 23 22 06 15 14 16 03 33 13 21 40 05 4c 05 4c fa b4 4d 6d 6d 4d 4d 6d 6d 2d f4 12 fe e8 09 00 f7 00 01 02 6d 4d 4d 6d 6d 4d 4d 6d 02 56 02 a8 00 01 00 e7 ff e0 09 29 08 20 00 13 00 00 05 22 24 00 02 37 36 12 00 24 33 32 04 00 12 17 16 02 00 04 05 08 da fe 81 fe dd a5 01 01 a5 01 22 01 7e da db 01 7f 01 21 a4 01 01 a4 fe de fe 80 20 a4 01 23 01 7e db db 01 7e 01 23 a4 a4 fe dd fe 82 db db fe 82 fe dd a4 00 02 00 e7 ff e0 09 29 08 20 00 13 00 27 00 00 05 22 24 00 02 37 36 12 00 24 33 32 04 00 12 17 16 02 00 04 27 32 24 36 12 27 26 02 26 Data Ascii: \@32654&#"3!@LLMmmMMmm-mMMmmMMmV) "$76$32"~! #~~#) '"$76$32'2$6'&&
2024-12-09 15:16:37 UTC	15990	IN	Data Raw: 56 36 3a 44 1e 6e 60 4b cd 60 90 94 27 15 b0 09 1b 1e 38 26 48 7a 00 01 00 ac fe 54 02 10 01 00 00 0b 00 00 01 15 0e 02 07 27 3e 02 35 35 02 10 02 22 44 34 c8 22 36 20 01 00 bc 58 a8 a2 4e 28 50 95 93 4c c0 00 01 00 84 fe 10 01 70 00 dc 00 03 00 00 25 11 23 11 01 70 ec dc fd 34 02 cc 00 01 fc 68 06 fc fd bc 08 b8 00 05 00 00 01 03 35 21 07 17 fd 4c e4 01 04 04 54 06 fc 01 14 a8 c0 a0 00 02 00 cc 05 4c 04 28 08 60 00 0a 00 15 00 00 01 15 14 06 06 07 27 36 36 35 11 21 15 14 06 06 07 27 36 36 35 11 02 60 39 6f 50 9c 42 42 02 d8 3b 71 50 9c 42 46 08 60 fc 58 c5 b7 44 6c 60 d0 78 01 00 fc 58 c5 b7 44 6c 60 d0 78 01 00 00 02 00 60 fd fc 05 94 06 14 00 21 00 35 00 00 01 21 35 21 2e 02 27 26 26 02 35 35 34 12 24 33 32 04 12 15 15 14 02 04 07 06 06 23 1e 03 17 03 Data Ascii: V6:Dn`K`'8&HzT'>55"D4"6 XN(PLp%#p4h5!LTL(`'665!'665`9oPBB;qPBF`XDl`xXDl`x`!5!5!.'&&554$32#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49800	18.66.161.34	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:35 UTC	567	OUT	GET /fonts/Inter/Inter-Light.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:37 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 304092 Connection: close Date: Mon, 09 Dec 2024 15:16:37 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "60c8f64064078554b6469eeda25944eb" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c443ab8cda6784955ce1010ec6018aa6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: 6uXdmd5fV0Z1yR-pfQEfosYRnCULh9twaCXWHmuVzUHzB6VEMYipzQ== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 6c 00 00 04 12 47 50 4f 53 44 54 7b 36 00 03 3f 80 00 01 21 64 47 53 55 42 be 7f 66 78 00 04 60 e4 00 00 42 b4 4f 53 2f 32 22 33 6e 62 00 02 6e 98 00 00 00 60 53 54 41 54 ee 4d d9 3f 00 04 a3 98 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 6e f8 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3b 64 00 00 00 08 67 6c 79 66 97 e6 ea 0c 00 00 01 0c 00 02 1d 71 68 65 61 64 2d c3 61 46 00 02 46 70 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 74 00 00 00 24 68 6d 74 78 e5 18 e6 d0 00 02 46 a8 00 00 27 ca 6c 6f 63 61 09 5d 8d 80 00 02 1e a0 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 80 00 00 00 20 6e 61 6d 65 35 9c 5c a6 00 02 d4 8c 00 00 02 38 70 6f 73 74 a7 a8 35 72 00 02 d6 c4 00 00 64 9e 70 72 65 Data Ascii: GDEF11;lGPOSDT{6?!dGSUBfx`BOS/2"3nbn`STATM?Dcmap/.negasp;dglyfqhead-aFFp6hheant$hmtxF'loca]'maxp name5\8post5rdpre
2024-12-09 15:16:37 UTC	604	IN	Data Raw: dd 07 20 0a d4 02 26 01 a5 00 00 00 07 08 0c 07 23 02 38 ff ff 01 10 ff dd 07 20 0a 9b 02 26 01 a5 00 00 00 07 06 7b 06 c8 02 00 ff ff 01 10 ff dd 07 20 0a 67 02 26 01 a5 00 00 00 07 06 7f 07 61 02 95 ff ff 01 10 fd f8 07 20 08 00 02 26 01 a5 00 00 00 07 06 8d 07 94 ff e3 ff ff 01 10 fe 11 07 20 08 00 02 26 01 a5 00 00 00 07 06 90 07 37 ff e3 ff ff 01 10 fd b8 07 20 08 00 02 26 01 a5 00 00 00 07 06 89 07 18 ff e3 ff ff 01 10 ff dd 07 20 0b 60 02 26 01 a5 00 00 00 07 08 bd 06 0b 00 00 ff ff 01 10 ff dd 07 20 0b 43 02 26 01 a5 00 00 00 07 08 5d 07 23 02 af ff ff 01 10 fd f8 07 20 08 00 02 26 01 a5 00 00 00 07 06 8b 07 43 ff e3 ff ff 01 10 ff dd 07 20 0b 0d 02 26 01 a5 00 00 00 07 06 80 07 1c 02 2c ff ff 01 10 ff dd 08 c2 0a 9b 02 26 01 a6 00 00 00 07 06 64 Data Ascii: &#8 &{ g&a & &7 & `& C&]# &C &,&d
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 06 e1 f8 00 06 c9 f9 37 ff ff 00 43 00 00 09 f8 0a 50 02 26 01 c8 00 00 00 07 06 6a 02 ad 02 00 ff ff 00 43 00 00 09 f8 0a 9b 02 26 01 c8 00 00 00 07 06 66 01 d0 02 00 ff ff 00 43 00 00 09 f8 0a 9b 02 26 01 c8 00 00 00 07 06 64 02 78 02 00 ff ff 00 43 00 00 09 f8 0a 08 02 26 01 c8 00 00 00 07 06 69 01 bd 00 25 ff ff 00 43 00 00 09 f8 0a 08 02 26 01 c8 00 00 00 07 06 70 03 e8 02 00 ff ff 00 43 fe 25 09 f8 08 00 02 26 01 c8 00 00 00 07 06 8b 08 48 00 10 00 01 00 53 00 00 06 88 08 00 00 0d 00 00 01 01 33 01 33 01 01 23 01 23 01 23 01 01 01 30 02 37 0d 02 37 dd fd 6d 02 93 dd fd c9 0d fd c9 dd 02 9d fd 63 08 00 fc 87 03 79 fc 00 fc 00 03 6f fc 91 04 00 04 00 ff ff 00 53 00 00 06 88 0a 08 02 26 01 cf 00 00 00 07 06 70 02 38 02 00 ff ff 00 53 00 00 06 88 0a 08 Data Ascii: 7CP&jC&fC&dxC&i%C&pC%&HS33###077mcyoS&p8S
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: 26 03 07 00 00 00 07 09 96 01 27 00 b0 ff ff 00 9c ff e0 05 e4 08 93 02 26 03 07 00 00 00 07 09 9d 01 75 00 90 00 03 00 9c ff e0 05 e4 06 15 00 03 00 13 00 23 00 00 01 15 21 35 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 27 32 36 12 35 34 02 26 23 22 06 02 15 14 12 16 05 6f fb a4 02 2d c7 fe cf ac ac 01 31 c7 c7 01 30 ad ac fe cf c7 a0 de 73 73 de a0 9f df 73 73 de 03 4f 9e 9e fc 91 ca 01 65 ea ec 01 67 c9 ca fe 9a ec ea fe 9b ca a3 ac 01 1e ac ac 01 20 ae ae fe e0 ac ac fe e2 ac ff ff 00 9c ff e0 05 e4 06 15 02 06 03 35 00 00 ff ff 00 9c ff e0 05 e4 06 15 02 06 03 07 00 00 ff ff 00 9c ff e0 05 e4 08 08 02 06 03 08 00 00 ff ff 00 9b ff e0 0a 5c 06 15 00 26 03 07 ff 00 00 07 02 64 04 95 00 00 ff ff 00 9c fd c0 0b d8 06 15 00 26 03 07 00 00 00 07 03 c3 Data Ascii: &'&u#!5"$54$32'2654&#"o-10ssssOeg 5\&d&
2024-12-09 15:16:37 UTC	1024	IN	Data Raw: ff e4 05 5d 08 b3 02 26 04 44 00 00 00 07 09 8f 01 2d 00 b0 ff ff 00 9c ff e4 05 5d 08 b3 02 26 04 44 00 00 00 07 09 96 00 e3 00 b0 ff ff 00 9c ff e4 05 5d 08 93 02 26 04 44 00 00 00 07 09 9d 01 30 00 90 00 02 00 91 fd f5 05 01 08 00 00 21 00 25 00 00 01 33 15 01 0e 02 15 06 16 17 17 16 16 15 14 06 07 27 36 36 35 26 26 27 27 26 02 37 34 3e 02 37 01 21 15 21 04 ab 56 fe 1a 78 a2 52 01 85 80 a5 aa b6 73 67 6f 40 44 01 79 71 79 c7 d5 01 33 62 94 60 fe 14 04 38 fb c8 08 00 8f fd 97 98 e3 db 8d 82 ae 2b 35 38 95 5d 55 c4 5d 62 46 84 2f 30 52 25 26 3f 01 09 be 74 cc c4 cb 72 02 9c a8 00 01 00 eb fd c0 05 75 06 14 00 16 00 00 01 11 23 11 33 15 33 36 36 33 32 16 16 15 11 23 11 34 26 23 22 06 06 01 9d b2 ad 10 36 e5 a9 9b eb 83 b2 d2 b2 78 bd 6d 03 c0 fc 40 06 00 Data Ascii: ]&D-]&D]&D0!%3'665&&''&74>7!!VxRsgo@Dyqy3b`8+58]U]bF/0R%&?tru#336632#4&#"6xm@
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: ff ec 02 b0 06 00 00 0f 00 00 13 33 11 14 16 33 32 36 37 17 06 06 23 22 26 35 e5 b3 65 3e 24 42 0b 04 15 57 41 7c a2 06 00 fb 4d 65 4c 0c 04 ab 06 0f a7 ba ff ff ff 73 ff ec 03 05 08 e8 02 26 04 6c 00 00 00 07 06 74 fe 51 00 10 ff ff 00 e5 ff ec 02 b0 08 74 02 26 04 6c 00 00 00 06 08 cd 37 fb ff ff ff bd ff ec 02 bd 08 08 02 26 04 6c 00 00 00 07 06 68 fd dd 00 00 ff ff 00 c5 ff ec 02 b0 08 b0 02 26 04 6c 00 00 00 07 09 88 ff e1 00 a8 ff ff 00 bb ff ec 02 b0 08 b3 02 26 04 6c 00 00 00 07 09 a1 ff e3 00 b0 ff ff ff c5 ff ec 02 d7 08 b0 02 26 04 6c 00 00 00 07 09 8d fe f1 00 a8 ff ff ff c7 ff ec 02 b0 08 b3 02 26 04 6c 00 00 00 07 09 94 fe d4 00 b0 ff ff 00 39 ff ec 03 21 08 b3 02 26 04 6c 00 00 00 07 09 8f ff 6f 00 b0 ff ff ff e2 ff ec 02 e4 08 b3 02 26 04 Data Ascii: 33267#"&5e>$BWA\|MeLs&ltQt&l7&lh&l&l&l&l9!&lo&
2024-12-09 15:16:37 UTC	1024	IN	Data Raw: 16 03 18 68 ac 67 67 ac 68 69 ab 67 67 ab 69 64 8c 8c 64 63 8d 8d 01 b5 67 ac 68 69 ab 67 67 ab 69 68 ac 67 8b 8d 63 64 8c 8c 64 63 8d 00 01 01 c8 02 dc 04 68 03 84 00 03 00 00 01 15 21 35 04 68 fd 60 03 84 a8 a8 00 01 02 0c 01 ab 04 8f 04 b5 00 02 00 00 01 11 01 02 0c 02 83 01 ab 03 0a fe 7b 00 02 01 05 00 fc 05 88 05 64 00 0e 00 12 00 00 25 22 24 26 35 34 36 24 33 21 15 21 11 21 15 23 11 33 11 03 67 bf fe ef 92 92 01 11 bf 02 21 fe 60 01 a0 bb bb fc 86 fd b1 b1 fd 86 a8 fc e8 a8 04 68 fb 98 00 02 01 15 00 fc 05 98 05 64 00 0e 00 12 00 00 25 35 21 11 21 35 21 32 04 16 15 14 06 04 23 21 11 33 11 01 15 01 a0 fe 60 02 22 bf 01 10 92 92 fe f0 bf fd de bb fc a8 03 18 a8 86 fd b1 b1 fd 86 04 68 fb 98 00 01 01 bb 01 db 04 65 04 85 00 03 00 00 01 21 11 21 01 bb Data Ascii: hgghiggiddcghiggihgcddch!5h`{d%"$&546$3!!!#3g!`hd%5!!5!2#!3`"he!!
2024-12-09 15:16:37 UTC	1024	IN	Data Raw: cf fe 0c 02 13 01 18 00 0b 00 00 01 07 06 02 06 07 23 3e 02 37 37 02 13 12 11 3e 42 18 89 0d 29 2c 12 0e 01 18 6b 6c fe fc ea 47 44 d2 ff 87 70 00 01 00 e9 ff f1 02 09 01 11 00 0c 00 00 05 22 26 35 34 36 33 32 16 15 14 06 06 01 79 3b 55 55 3b 3c 54 27 41 0f 55 3b 3c 54 54 3c 27 42 27 ff ff 00 e5 ff f1 08 30 01 11 00 26 05 7c fc 00 00 27 05 7c 03 11 00 00 00 07 05 7c 06 27 00 00 ff ff 00 e5 ff f1 05 1b 01 11 00 26 05 7c fc 00 00 07 05 7c 03 11 00 00 00 02 00 e9 00 27 02 09 05 9b 00 0c 00 19 00 00 25 22 26 35 34 36 33 32 16 15 14 06 06 03 22 26 35 34 36 33 32 16 15 14 06 06 01 79 3b 55 55 3b 3c 54 27 41 28 3b 55 55 3b 3c 54 27 41 27 54 3c 3b 55 55 3b 28 41 27 04 54 54 3c 3b 55 55 3b 28 41 27 00 02 00 e9 01 33 02 09 06 62 00 0c 00 19 00 00 01 22 26 35 34 36 Data Ascii: #>77>B),klGDp"&54632y;UU;<T'AU;<TT<'B'0&\|'\|\|'&\|\|'%"&54632"&54632y;UU;<T'A(;UU;<T'A'T<;UU;(A'TT<;UU;(A'3b"&546
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: ab fd 31 04 f3 a7 04 f2 fb 0e 02 24 aa aa 00 01 01 29 02 cb 06 01 03 75 00 03 00 00 01 15 21 35 06 01 fb 28 03 75 aa aa 00 02 01 27 00 b2 06 04 05 8e 00 03 00 07 00 00 25 01 37 01 05 27 01 17 05 8f fb 98 75 04 68 fb 98 75 04 68 75 b2 04 68 74 fb 98 74 74 04 68 74 00 03 01 29 00 a0 06 01 05 a0 00 03 00 0f 00 1c 00 00 01 15 21 35 01 22 26 35 34 36 33 32 16 15 14 06 03 22 26 26 35 34 36 33 32 16 15 14 06 06 01 fb 28 02 6c 3c 54 54 3c 3a 54 54 3a 28 41 27 54 3c 3a 54 54 03 75 aa aa fd 2b 54 3c 3a 53 53 3a 3c 54 03 e3 26 42 28 3a 53 53 3a 3c 54 00 03 01 27 00 80 06 04 06 00 00 03 00 07 00 0b 00 00 25 35 21 15 01 35 21 15 01 11 33 11 01 27 04 dd fb 23 04 dd fd 3c ab 80 ab ab 03 1b aa aa fe 45 04 20 fb e0 00 02 00 f3 01 2b 06 38 05 16 00 1b 00 37 00 00 13 3e 02 Data Ascii: 1$)u!5(u'%7'uhuhuhtttht)!5"&54632"&&54632(l<TT<:TT:(A'T<:TTu+T<:SS:<T&B(:SS:<T'%5!5!3'#<E +87>
2024-12-09 15:16:37 UTC	16384	IN	Data Raw: fc f5 01 d6 a8 a8 01 c2 a8 a8 00 01 01 be 00 00 08 c0 08 0c 00 08 00 00 21 11 01 27 01 01 07 01 11 04 ec fd 49 77 03 82 03 80 74 fd 48 06 ce fd 48 76 03 80 fc 80 76 02 b8 f9 32 00 01 01 c0 ff f4 08 c2 08 00 00 08 00 00 01 11 01 17 01 01 37 01 11 05 94 02 b7 77 fc 7e fc 80 74 02 b8 08 00 f9 32 02 b8 76 fc 80 03 80 76 fd 48 06 ce 00 01 01 c0 fd 9c 08 c0 09 40 00 0d 00 00 01 01 37 01 11 01 27 01 01 07 01 11 01 17 05 40 fc 80 76 02 b6 fd 4a 76 03 80 03 80 74 fd 48 02 b8 74 fd 9c 03 80 76 fd 48 09 28 fd 48 76 03 80 fc 80 76 02 b8 f6 d8 02 b8 76 00 02 01 16 00 00 0b 83 08 2b 00 16 00 1c 00 00 01 35 21 32 36 36 35 34 26 26 23 23 35 33 32 04 12 15 14 0e 02 23 09 02 17 01 01 01 c5 07 3f 82 d6 7f 80 d5 82 69 69 b1 01 21 ad 64 af e8 84 fb 92 fc 80 03 80 75 fc f5 03 Data Ascii: !'IwtHHvv27w~t2vvH@7'@vJvtHtvH(Hvvv+5!26654&&##532#?ii!du

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49805	18.66.161.34	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:37 UTC	570	OUT	GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:38 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309432 Connection: close Date: Mon, 09 Dec 2024 15:16:39 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "1753a05196abeef95c32f10246bd6473" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 05275a1a5434f15a35e2fc92c846659a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: lp-GIsE104kfoOC8y2yF_rbokAZZYtogrok-LhzPoY6GMLocpa1WUA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-09 15:16:38 UTC	15618	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 44 98 00 00 04 12 47 50 4f 53 9b af 91 74 00 03 48 ac 00 01 2d 14 47 53 55 42 be 7f 66 78 00 04 75 c0 00 00 42 b4 4f 53 2f 32 23 5f 6e 62 00 02 77 ac 00 00 00 60 53 54 41 54 ef 79 d9 45 00 04 b8 74 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 78 0c 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 44 90 00 00 00 08 67 6c 79 66 6a 1b 9d 97 00 00 01 0c 00 02 26 86 68 65 61 64 2d c3 61 46 00 02 4f 84 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 77 88 00 00 00 24 68 6d 74 78 24 35 88 39 00 02 4f bc 00 00 27 ca 6c 6f 63 61 09 84 29 ed 00 02 27 b4 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 27 94 00 00 00 20 6e 61 6d 65 37 5c 60 0e 00 02 dd a0 00 00 02 50 70 6f 73 74 a7 a8 35 72 00 02 df f0 00 00 64 9e 70 72 65 Data Ascii: GDEF11DGPOStH-GSUBfxuBOS/2#_nbw`STATyEtDcmap/.xegaspDglyfj&head-aFO6hheaw$hmtx$59O'loca)''maxp' name7\`Ppost5rdpre
2024-12-09 15:16:38 UTC	372	IN	Data Raw: 00 00 06 d2 0a 76 02 26 01 99 00 00 00 07 06 73 00 be 02 00 ff ff 00 70 fd 68 06 d2 08 00 02 26 01 99 00 00 00 07 06 77 02 20 00 00 ff ff 00 70 00 00 06 d2 0a 63 02 26 01 99 00 00 00 07 06 70 02 20 02 00 ff ff 00 70 fd d7 06 d2 08 00 02 26 01 99 00 00 00 07 06 8b 06 ba 00 00 ff ff 00 70 fe 25 06 d2 08 00 02 26 01 99 00 00 00 07 08 62 06 ed 00 00 ff ff 00 70 fd c2 06 d2 08 00 02 26 01 99 00 00 00 07 06 89 06 f3 00 00 00 01 00 70 00 00 07 38 08 00 00 10 00 00 01 11 21 11 21 11 23 22 06 06 15 15 21 35 34 00 33 07 38 fd 87 fe 90 e1 4e 55 21 fe c6 01 0a f4 08 00 fe c9 f9 37 06 c9 47 6f 3d 68 ab df 01 08 00 02 00 70 fd c0 06 d2 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 59 8b 56 53 b2 5e b3 8e 53 fd 87 06 62 fd 87 Data Ascii: v&sph&w pc&p p&p%&bp&p8!!#"!5438NU!7Go=hp!33#".55!!!YVS^Sb
2024-12-09 15:16:38 UTC	998	IN	Data Raw: 23 22 24 02 35 11 21 11 14 16 16 33 32 36 36 35 05 d5 01 73 cf fe 8a fa fb fe 8a ce 01 73 71 ce 8d 8d cf 70 08 00 fa c6 dc fe b2 bb bb 01 4e dc 05 3a fa e5 80 c8 71 71 c8 80 00 02 00 ca ff e1 09 1e 08 5a 00 09 00 1f 00 00 01 21 14 02 04 23 35 32 36 36 25 21 11 14 02 04 23 22 24 02 35 11 21 11 14 16 16 33 32 36 36 35 08 19 01 05 70 fe f8 e3 95 92 2f fd bc 01 73 cf fe 8a fa fb fe 8a ce 01 73 71 ce 8d 8d cf 70 08 5a c9 fe e6 95 d8 62 ba 2a fa c6 dc fe b2 bb bb 01 4e dc 05 3a fa e5 80 c8 71 71 c8 80 ff ff 00 ca ff e1 07 48 0a 93 02 26 01 a5 00 00 00 07 06 66 00 b6 02 00 ff ff 00 ca ff e1 07 48 0a 93 02 26 01 a5 00 00 00 07 06 64 01 60 02 00 ff ff 00 ca ff e1 07 48 0a 76 02 26 01 a5 00 00 00 07 06 6a 01 26 02 00 ff ff 00 ca ff e1 07 48 0a 5b 02 26 01 a5 00 00 Data Ascii: #"$5!32665ssqpN:qqZ!#5266%!#"$5!32665p/ssqpZb*N:qqH&fH&d`Hv&j&H[&
2024-12-09 15:16:38 UTC	12792	IN	Data Raw: f8 00 08 00 ff ff 00 45 00 00 07 b2 0a 47 02 26 01 c5 00 00 00 07 06 6b 01 3b 02 00 ff ff 00 45 fd d7 07 b2 08 00 02 26 01 c5 00 00 00 07 06 8b 07 15 00 00 00 01 00 37 00 00 0a dc 08 00 00 0f 00 00 21 01 21 01 33 01 21 01 33 01 21 01 21 01 23 01 02 79 fd be 01 8f 01 71 13 01 8a 01 6b 01 8b 12 01 71 01 8f fd be fe 92 fe 66 10 fe 65 08 00 fa 1f 05 e1 fa 1e 05 e2 f8 00 05 9d fa 63 ff ff 00 37 00 00 0a dc 0a 76 02 26 01 c8 00 00 00 07 06 6a 02 a6 02 00 ff ff 00 37 00 00 0a dc 0a 93 02 26 01 c8 00 00 00 07 06 66 02 37 02 00 ff ff 00 37 00 00 0a dc 0a 93 02 26 01 c8 00 00 00 07 06 64 02 e1 02 00 ff ff 00 37 00 00 0a dc 0a 5b 02 26 01 c8 00 00 00 07 06 69 02 7e 00 20 ff ff 00 37 00 00 0a dc 0a 63 02 26 01 c8 00 00 00 07 06 70 04 08 02 00 ff ff 00 37 fd e1 0a dc Data Ascii: EG&k;E&7!!3!3!!#yqkqfec7v&j7&f77&d7[&i~ 7c&p7
2024-12-09 15:16:38 UTC	16384	IN	Data Raw: 01 6a c3 86 6a bb 8e 51 01 01 6a fe 96 01 73 fd f4 46 5b 4c 35 30 48 6e 59 ff d4 e8 38 64 4d 2c 65 ad 6a 6b b5 6e 48 87 bf 75 08 3d f8 00 08 00 ff ff 00 c0 00 00 04 4c 08 00 00 26 02 d3 06 00 00 07 06 70 01 f9 fc cd ff ff 00 ba 00 00 03 25 0a 93 02 26 02 d3 00 00 00 07 06 64 fe c5 02 00 ff ff 00 4d fd 68 02 24 08 00 02 26 02 d3 00 00 00 06 06 77 ef 00 ff ff 00 ba 00 00 04 00 08 66 00 26 02 d3 00 00 00 07 07 f8 01 f1 00 00 ff ff 00 9d fd d7 02 40 08 00 02 26 02 d3 00 00 00 07 06 8b 04 88 00 00 ff ff ff 8d fd d7 03 4e 0a 00 02 26 02 d3 00 00 00 27 06 8b 04 88 00 00 00 07 06 6d fe 89 02 00 ff ff ff 8e fe 25 03 50 08 00 02 26 02 d3 00 00 00 07 08 62 04 bc 00 00 ff ff ff 67 fd c2 03 77 08 00 02 26 02 d3 00 00 00 07 06 89 04 c2 00 00 00 01 00 ba ff f0 03 2e 08 Data Ascii: jjQjsF[L50HnY8dM,ejknHu=L&p%&dMh$&wf&@&N&'m%P&bgw&.
2024-12-09 15:16:38 UTC	4616	IN	Data Raw: 00 00 02 00 70 00 00 08 87 08 00 00 03 00 1a 00 00 13 11 21 11 13 21 32 04 12 07 16 02 04 23 21 11 21 11 21 32 36 36 27 36 26 23 21 70 02 b4 6a 02 08 ec 01 51 b4 01 01 b4 fe af ec fd 02 01 73 01 8b 7d ac 59 01 01 c7 bb fd f8 06 d6 01 2a fe d6 fe 13 99 fe ea bc bd fe e1 a2 08 00 f9 30 5e 9a 5a 82 b7 00 02 00 ce 00 00 08 e2 08 00 00 16 00 1a 00 00 01 21 32 04 12 15 14 02 04 23 21 11 21 11 21 32 36 36 35 34 26 23 21 01 11 21 11 01 c5 02 08 eb 01 51 b4 b4 fe af eb fd 01 01 74 01 8b 7c ac 59 c7 ba fd f8 07 1d fe 8c 04 e9 99 fe ea bc bd fe e1 a2 08 00 f9 30 5e 9a 5a 82 b7 04 45 f8 00 08 00 00 01 00 ce 00 00 06 bd 08 00 00 16 00 00 01 21 32 04 12 15 14 02 04 23 21 11 21 11 21 32 36 36 35 34 26 23 21 01 c5 02 08 eb 01 51 b4 b4 fe af eb fd 01 01 74 01 8b 7c ac 59 Data Ascii: p!!2#!!!266'6&#!pjQs}Y*0^Z!2#!!!26654&#!!Qt\|Y0^ZE!2#!!!26654&#!Qt\|Y
2024-12-09 15:16:38 UTC	12792	IN	Data Raw: 08 b0 02 26 04 53 00 00 00 07 09 88 02 3a 00 a8 ff ff 00 ba fd c0 05 fe 08 b0 02 26 04 53 00 00 00 07 09 a1 01 a8 00 b0 ff ff 00 ba fd c0 05 fe 08 b0 02 26 04 53 00 00 00 07 09 8d 00 b8 00 a8 ff ff 00 ba fd c0 05 fe 08 ae 02 26 04 53 00 00 00 07 09 94 00 cf 00 ae ff ff 00 ba fd c0 05 fe 08 b0 02 26 04 53 00 00 00 07 09 8f 01 1e 00 b0 ff ff 00 ba fd c0 05 fe 08 ae 02 26 04 53 00 00 00 07 09 96 00 fe 00 ae ff ff 00 ba fd c0 05 fe 09 c7 02 26 04 53 00 00 00 07 09 91 01 73 00 a8 ff ff 00 ba fd c0 05 fe 09 c7 02 26 04 53 00 00 00 07 09 98 01 34 00 a8 ff ff 00 ba fd c0 05 fe 08 94 02 26 04 53 00 00 00 07 09 9d 01 56 00 9c ff ff 00 ba fd 58 05 fe 08 b0 02 26 04 53 00 00 00 26 09 89 22 00 00 07 09 88 02 3a 00 a8 ff ff 00 ba fd 58 05 fe 08 b0 02 26 04 53 00 00 00 Data Ascii: &S:&S&S&S&S&S&Ss&S4&SVX&S&":X&S
2024-12-09 15:16:38 UTC	6346	IN	Data Raw: c3 01 20 9e 9a fe f4 ac 73 de fe f2 c0 fe 99 0e fe ca ff ff 00 aa 00 00 06 80 08 1c 02 26 05 10 00 00 00 07 07 fe 02 08 00 2d 00 01 00 a6 ff e4 06 8a 08 1c 00 33 00 00 05 22 24 02 27 21 1e 02 33 32 36 36 27 36 26 26 23 23 11 33 32 36 36 27 36 26 26 23 22 06 06 07 21 36 12 24 33 32 04 12 15 16 06 07 15 16 12 07 14 02 04 03 95 d8 fe b1 c2 06 01 78 05 64 a6 67 6e aa 60 01 01 62 b9 82 b5 b5 6b a1 5c 01 01 4f 8f 60 5e a0 62 03 fe 9b 04 bf 01 40 c7 cd 01 2f a6 01 cd a6 d8 e7 01 c3 fe ab 1c 94 01 08 ad 53 7b 44 4d 8a 5a 5d 8e 50 01 1e 4a 87 59 57 81 48 44 7d 56 ac 01 05 93 99 fe fe 9c ad ea 24 10 1e fe fd c0 ac fe f1 9a 00 02 00 91 00 00 06 ca 08 00 00 09 00 0f 00 00 13 11 01 33 11 23 01 15 21 11 01 11 37 11 21 11 91 03 65 f6 96 fd b7 04 bd fd 98 04 01 5e 01 7c Data Ascii: s&-3"$'!3266'6&&##3266'6&&#"!6$32xdgn`bk\O`^b@/S{DMZ]PJYWHD}V$3#!7!e^\|
2024-12-09 15:16:38 UTC	1024	IN	Data Raw: 05 7c 00 00 04 74 ff ff 00 ac fe 0c 02 9e 05 e9 00 06 05 82 05 00 00 02 00 ac 00 dc 03 86 05 a8 00 04 00 09 00 00 25 21 01 35 21 01 01 21 35 01 03 86 fe ba fe 6c 01 5a 01 80 fe 80 fe a6 01 94 dc 02 58 14 02 60 fd 94 14 02 58 00 02 00 9e 00 dc 03 78 05 a8 00 04 00 09 00 00 37 01 21 15 01 01 21 01 15 21 9e 01 80 01 5a fe 6c fe ba 01 46 01 94 fe a6 dc 02 6c 14 fd a8 04 cc fd a8 14 ff ff 00 ac 00 dc 05 e8 05 a8 00 26 05 8a 00 00 00 07 05 8a 02 62 00 00 ff ff 00 9e 00 dc 05 e0 05 a8 00 26 05 8b 00 00 00 07 05 8b 02 68 00 00 00 01 01 07 00 25 06 5f 06 35 00 09 00 00 01 11 01 11 01 37 15 27 01 11 01 07 05 58 fc 34 0b 0b 03 cc 02 9d 01 20 02 78 fe 9d fe 5f 13 2e 13 fe 5f fe 9d 00 01 01 07 00 25 06 5f 06 35 00 09 00 00 01 01 11 01 07 35 17 01 11 01 06 5f fa a8 03 Data Ascii: \|t%!5!!5lZX`Xx7!!!ZlFl&b&h%_57'X4 x_._%_55_
2024-12-09 15:16:39 UTC	16384	IN	Data Raw: 34 49 61 02 02 3b b6 f2 79 51 61 36 36 75 77 b5 f2 79 54 5d 3a 32 6d 7f 00 01 01 07 00 e5 06 5f 06 f5 00 09 00 00 01 11 01 11 01 37 15 27 01 11 01 07 05 58 fc 34 0b 0b 03 cc 03 5d 01 20 02 78 fe 9d fe 5f 13 2e 13 fe 5f fe 9d 00 01 01 07 00 e5 06 5f 06 f5 00 09 00 00 01 01 11 01 07 35 17 01 11 01 06 5f fa a8 03 cc 0b 0b fc 34 05 58 03 5d fd 88 01 63 01 a1 13 2e 13 01 a1 01 63 fd 88 ff ff 01 07 01 05 06 5f 06 fa 02 07 05 90 00 00 00 b2 ff ff 01 07 01 05 06 5f 06 fa 02 07 05 91 00 00 00 b2 00 02 01 1a 02 26 06 4d 05 da 00 03 00 07 00 00 01 11 21 11 01 11 21 11 01 1a 05 33 fa cd 05 33 04 a6 01 34 fe cc fd 80 01 34 fe cc ff ff 01 1a 01 13 06 4d 06 ed 02 07 05 93 00 00 00 d3 00 02 00 ff 01 48 06 67 06 b0 00 03 00 07 00 00 01 11 21 11 01 11 21 11 03 16 01 3a fc Data Ascii: 4Ia;yQa66uwyT]:2m_7'X4] x_.__5_4X]c.c__&M!!3344MHg!!:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49806	18.66.161.34	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:37 UTC	566	OUT	GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:38 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309772 Connection: close Date: Mon, 09 Dec 2024 15:16:39 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "d17c0274915408cee0308d5476df9f45" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c3ae0fb6fa0fe401f27d2841c609ccee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: l58iIuDBOqdihspaTvmGv6RJ5A7lSffQMDXsoaU_ZmN3lx1E5wQ1KA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-09 15:16:38 UTC	15618	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-12-09 15:16:38 UTC	1370	IN	Data Raw: 7e 02 26 01 99 00 00 00 07 06 73 00 9a 02 00 ff ff 00 64 fd 70 06 f6 08 00 02 26 01 99 00 00 00 07 06 77 02 2c 00 00 ff ff 00 64 00 00 06 f6 0a 75 02 26 01 99 00 00 00 07 06 70 02 14 02 00 ff ff 00 64 fd c1 06 f6 08 00 02 26 01 99 00 00 00 07 06 8b 06 b2 00 00 ff ff 00 64 fe 19 06 f6 08 00 02 26 01 99 00 00 00 07 08 62 06 ff 00 00 ff ff 00 64 fd ba 06 f6 08 00 02 26 01 99 00 00 00 07 06 89 07 19 00 00 00 01 00 64 00 00 07 58 08 00 00 10 00 00 01 11 21 11 21 11 23 22 06 06 15 15 21 35 34 00 21 07 58 fd 8d fe 54 a3 53 58 21 fe 9a 01 21 01 11 08 00 fe 9b f9 65 06 9b 4a 72 3d 78 c5 f5 01 1c 00 02 00 64 fd c0 06 f6 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 83 88 53 55 c6 64 be 99 5b fd 8d 06 92 fd 8d fe 54 5e 5a Data Ascii: ~&sdp&w,du&pd&d&bd&dX!!#"!54!XTSX!!eJr=xd!33#".55!!!SUd[T^Z
2024-12-09 15:16:38 UTC	12792	IN	Data Raw: 08 00 ff ff 00 43 00 00 07 f6 0a 51 02 26 01 c5 00 00 00 07 06 6b 01 5d 02 00 ff ff 00 43 fd c1 07 f6 08 00 02 26 01 c5 00 00 00 07 06 8b 07 23 00 00 00 01 00 35 00 00 0b 30 08 00 00 0f 00 00 21 01 21 01 33 01 21 01 33 01 21 01 21 01 23 01 02 7f fd b6 01 d9 01 53 11 01 76 01 95 01 75 12 01 53 01 d9 fd b6 fe 5a fe 7a 10 fe 7b 08 00 fa 71 05 8f fa 6e 05 92 f8 00 05 3b fa c5 ff ff 00 35 00 00 0b 30 0a 7e 02 26 01 c8 00 00 00 07 06 6a 02 9e 02 00 ff ff 00 35 00 00 0b 30 0a 8d 02 26 01 c8 00 00 00 07 06 66 02 61 02 00 ff ff 00 35 00 00 0b 30 0a 8d 02 26 01 c8 00 00 00 07 06 64 03 03 02 00 ff ff 00 35 00 00 0b 30 0a 69 02 26 01 c8 00 00 00 07 06 69 02 c2 00 24 ff ff 00 35 00 00 0b 30 0a 75 02 26 01 c8 00 00 00 07 06 70 04 18 02 00 ff ff 00 35 fd c7 0b 30 08 00 Data Ascii: CQ&k]C&#50!!3!3!!#SvuSZz{qn;50~&j50&fa50&d50i&i$50u&p50
2024-12-09 15:16:38 UTC	16384	IN	Data Raw: 00 00 13 21 11 06 16 33 32 36 37 26 26 23 22 06 07 05 27 37 3e 03 33 32 16 16 15 14 06 06 23 22 2e 02 35 01 11 21 11 92 01 aa 01 47 46 2c 3c 01 01 3e 36 73 c7 81 fe e8 d2 df 54 bf c8 c0 55 7b bc 6a 6f ca 8b 65 c8 a3 61 01 aa fe 56 01 85 fd fc 47 58 45 2e 24 44 71 64 ed f0 bc 3c 70 5a 35 6a b0 6a 69 be 77 46 8c d0 8b 08 13 f8 00 08 00 ff ff 00 b4 00 00 04 a8 08 00 00 26 02 d3 0a 00 00 07 06 70 02 27 fc c7 ff ff 00 aa 00 00 03 43 0a 8d 02 26 02 d3 00 00 00 07 06 64 fe cf 02 00 ff ff 00 41 fd 70 02 54 08 00 02 26 02 d3 00 00 00 06 06 77 ff 00 ff ff 00 aa 00 00 04 42 08 6a 00 26 02 d3 00 00 00 07 07 f8 02 2d 00 00 ff ff 00 99 fd c1 02 66 08 00 02 26 02 d3 00 00 00 07 06 8b 04 86 00 00 ff ff ff 97 fd c1 03 66 0a 00 02 26 02 d3 00 00 00 27 06 8b 04 86 00 00 00 Data Ascii: !3267&&#"'7>32#".5!GF,<>6sTU{joeaVGXE.$Dqd<pZ5jjiwF&p'C&dApT&wBj&-f&f&'
2024-12-09 15:16:38 UTC	1024	IN	Data Raw: fe 1e 0b 63 08 00 00 05 00 11 00 00 01 03 21 11 23 11 01 21 11 21 11 21 11 21 11 21 11 21 0b 63 1c fe 77 a7 f7 ed 01 a7 02 4c 01 a5 02 45 01 a5 f6 7e 01 4f fc cf 01 e2 01 4f 06 b1 f9 5c 06 a4 f9 5c 06 a4 f8 00 00 02 00 64 00 00 08 9a 08 00 00 03 00 1a 00 00 13 11 21 11 13 21 32 04 12 15 14 02 04 23 21 11 21 11 21 32 36 36 35 34 26 23 21 64 02 e0 5a 01 e8 f3 01 61 c0 c0 fe 9f f3 fd 02 01 b1 01 4d 74 a0 53 b9 ae fe 18 06 ae 01 52 fe ae fe 5d 9d fe e2 c2 c1 fe d9 a6 08 00 f9 5c 55 8d 54 7a a9 00 02 00 ba 00 00 09 22 08 00 00 16 00 1a 00 00 01 21 32 04 12 07 16 02 04 23 21 11 21 11 21 32 36 36 27 36 26 23 21 01 11 21 11 01 cf 01 e8 f4 01 61 c0 01 01 c0 fe 9f f4 fd 03 01 b0 01 4d 75 a0 53 01 01 b9 af fe 18 07 53 fe 50 05 0b 9d fe e2 c2 c1 fe d9 a6 08 00 f9 5c Data Ascii: c!#!!!!!!cwLE~OO\\d!!2#!!!26654&#!dZaMtSR]\UTz"!2#!!!266'6&#!!aMuSSP\
2024-12-09 15:16:39 UTC	16384	IN	Data Raw: 01 26 7a 01 35 01 c8 fb ad fe bf df 72 a3 58 98 fe ec ba dc ad fe ff 8e 55 9f 6d d8 fe c6 a9 03 59 01 5c fe a4 00 01 00 a8 ff e4 08 c5 08 1e 00 3a 00 00 01 11 20 24 00 02 35 11 34 12 24 33 32 04 12 15 11 14 02 00 04 23 22 24 24 02 35 11 34 12 24 33 11 22 06 06 15 11 14 12 16 33 32 24 12 35 11 34 26 26 23 22 06 06 15 11 14 12 04 08 c5 fe e0 fe 28 fe ac b7 98 01 12 b8 c3 01 2a a6 98 fe e5 fe 7a ee e0 fe 90 fe f7 8f bd 01 51 e0 5a 89 4c 88 f8 a9 c1 01 1f 9e 39 64 43 42 65 39 d3 01 8c 01 3c fe b4 96 01 13 01 7b e4 01 30 d6 01 56 c8 d5 fe 89 f4 fe fc d7 fe 90 fe ed 9a 8e fe 01 53 c5 01 5c e8 01 77 db fe 93 79 d0 82 fe a2 a4 fe ff 94 ab 01 26 b8 01 3a 83 b9 63 60 ae 77 fe ca c5 fe c4 b9 00 02 00 96 ff e0 08 d6 08 1b 00 07 00 2b 00 00 13 21 14 16 33 11 20 00 01 Data Ascii: &z5rXUmY\: $54$32#"$$54$3"32$54&&#"(*zQZL9dCBe9<{0VS\wy&:c`w+!3
2024-12-09 15:16:39 UTC	1024	IN	Data Raw: da 01 80 01 41 00 01 00 92 00 00 06 5a 08 1c 00 1f 00 00 33 11 01 3e 02 35 34 26 26 23 22 06 06 15 21 34 12 24 33 32 04 12 15 14 06 02 07 01 15 21 11 a6 02 d9 5d 7f 42 52 8e 5a 5e 8c 4c fe 65 b6 01 48 d6 dc 01 47 b6 5b e8 d3 fe d5 03 5c 01 38 02 a3 5a 90 8b 51 5a 83 47 4c 8e 62 c9 01 28 a2 9b fe ee b1 74 e2 fe ed c0 fe db 0e fe 9e ff ff 00 92 00 00 06 a2 08 1c 02 26 05 10 00 00 00 07 07 fe 02 06 00 23 00 01 00 92 ff e4 06 b0 08 1c 00 33 00 00 05 22 24 02 27 21 1e 02 33 32 36 36 35 34 26 26 23 23 11 33 32 36 36 35 34 26 26 23 22 06 06 07 21 36 12 24 33 32 04 12 07 16 06 07 15 16 16 07 16 02 04 03 9b e0 fe a3 c9 03 01 b4 04 5b 98 5f 63 98 56 5b a9 74 bf bf 62 97 54 49 83 57 58 92 58 03 fe 61 03 c4 01 4d d2 d4 01 3e b1 01 01 d7 ac e2 ed 01 01 cb fe 9c 1c 9b Data Ascii: AZ3>54&&#"!4$32!]BRZ^LeHG[\8ZQZGLb(t&#3"$'!326654&&##326654&&#"!6$32[_cV[tbTIWXXaM>
2024-12-09 15:16:39 UTC	4616	IN	Data Raw: 46 7c 51 50 79 45 45 79 50 51 7c 46 00 02 00 8d ff e4 06 bd 08 1d 00 21 00 32 00 00 01 32 04 16 12 13 10 02 02 04 23 22 24 02 27 21 16 16 33 32 12 13 23 0e 02 23 22 24 02 35 26 12 24 13 22 06 06 17 14 16 16 33 32 3e 02 35 2e 02 03 8b 9e 01 25 e7 87 01 75 da fe cc be cd fe c6 bf 14 01 ab 19 a0 76 c8 d0 01 0e 2e 9c c9 71 b5 fe e4 a4 01 c0 01 59 e8 65 9d 5b 01 59 9b 64 4b 80 5f 36 01 5a 9e 08 1c 6a e8 fe 81 fe ea fe fb fe 67 fe e2 95 9f 01 13 ac 70 7b 01 5d 01 30 5a 81 46 aa 01 2a bf ce 01 42 b7 fe ab 60 a2 64 65 a1 5f 38 63 82 49 61 a2 62 00 03 00 8d ff d6 07 05 08 1e 00 03 00 13 00 21 00 00 01 17 01 27 01 20 24 02 13 10 12 24 21 20 04 12 03 10 02 04 01 32 12 03 34 02 26 23 22 02 03 14 12 16 04 f6 a4 fc fa 9c 01 d1 fe fe fe 8d c7 01 c7 01 73 01 01 01 01 01 Data Ascii: F\|QPyEEyPQ\|F!22#"$'!32##"$5&$"32>5.%uv.qYe[YdK_6Zjgp{]0ZF*B`de_8cIab!' $$! 24&#"s
2024-12-09 15:16:39 UTC	16384	IN	Data Raw: f9 00 ff ff 00 4e fe 29 02 0e 01 00 00 07 05 6a ff fe f9 00 00 01 00 a4 04 e6 02 6e 08 00 00 03 00 00 13 13 21 03 a4 48 01 82 a8 04 e6 03 1a fc e6 ff ff 00 a4 04 e6 04 be 08 00 00 26 05 72 00 00 00 07 05 72 02 50 00 00 ff ff 00 a4 04 e6 07 0e 08 00 00 26 05 72 00 00 00 27 05 72 02 50 00 00 00 07 05 72 04 a0 00 00 ff ff 00 a4 04 e6 09 5e 08 00 00 26 05 72 00 00 00 27 05 72 02 50 00 00 00 27 05 72 04 a0 00 00 00 07 05 72 06 f0 00 00 00 01 00 a4 04 e6 02 6e 08 00 00 03 00 00 01 21 03 21 02 6e fe de a8 01 82 04 e6 03 1a ff ff 00 a4 04 e6 04 be 08 00 00 26 05 76 00 00 00 07 05 76 02 50 00 00 ff ff 00 a4 04 e6 07 0e 08 00 00 26 05 76 00 00 00 27 05 76 02 50 00 00 00 07 05 76 04 a0 00 00 00 01 00 92 04 ad 02 30 08 00 00 03 00 00 13 03 21 03 f0 5e 01 9e 5c 04 ad Data Ascii: N)jn!H&rrP&r'rPr^&r'rP'rrn!!n&vvP&v'vPv0!^\
2024-12-09 15:16:39 UTC	16384	IN	Data Raw: a8 60 87 88 5e 60 87 87 02 6d 5f 87 87 5f 5f 87 87 fd c1 7e 59 59 7e 7e 59 59 7e 7e 59 59 7e 7e 59 59 7e ff ff fb 6f fe 0f fe 1a 00 a4 00 07 06 71 fa a9 f7 6a ff ff f9 eb fd ee ff 2c ff 31 00 07 05 a9 f9 ed ff 31 00 01 fa 6d fd db fe 83 ff 6f 00 17 00 00 01 27 34 36 33 32 1e 02 33 32 36 35 17 06 06 07 06 2e 02 23 22 06 fb 5a ed bd 88 46 65 51 4a 2b 3a 3d e9 02 bc 87 4b 65 4c 48 2d 34 3f fd db 03 bf cd 2d 3b 2d 55 45 06 be cc 01 01 2e 3b 2d 52 00 04 00 b2 00 00 0b 72 08 1b 00 0b 00 0f 00 21 00 2f 00 00 33 11 21 01 33 11 21 11 21 01 23 11 01 35 21 15 01 22 26 26 35 35 34 36 36 33 32 16 16 15 15 14 06 06 27 32 36 35 35 34 26 23 22 06 15 15 14 16 b2 01 61 03 36 11 01 65 fe a4 fc c7 11 05 b8 03 74 fe 45 97 dd 78 78 dc 96 98 db 77 75 db 98 5f 69 68 62 61 67 68 Data Ascii: `^`m___~YY~~YY~~YY~~YY~oqj,11mo'46323265.#"ZFeQJ+:=KeLH-4?-;-UE.;-Rr!/3!3!!#5!"&&5546632'26554&#"a6etExxwu_ihbagh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49808	18.66.161.47	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:37 UTC	360	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:38 UTC	716	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Mon, 09 Dec 2024 15:16:39 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 405eb3cbc6a9c461b49219fdd41090b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: aLCJb9iaT_-gLLHD8HNJOFke-Y2amtjR13lIV4veWpHVVOw6QwvRYA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-09 15:16:38 UTC	14588	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-09 15:16:38 UTC	2398	IN	Data Raw: b5 28 bc 21 48 f6 a1 85 2c 8b 6c ea 58 01 c7 6e 3d af 06 d4 7b b0 f5 2e d4 56 d4 87 c4 d6 8c 0b d0 a9 93 17 6b 57 55 28 aa f2 56 da 01 6f 42 0b 66 60 00 31 00 86 00 40 00 01 43 13 18 98 12 34 03 20 06 20 28 63 11 0a d9 03 64 e4 64 2c e8 52 60 30 00 00 00 92 77 01 46 5c ce 2a 5e 4c 79 32 d2 03 5a 38 48 7b 81 24 87 28 05 2d 84 00 c0 50 82 52 1e d0 80 39 f9 1c 39 45 d2 cd 8e ee 70 4e d7 40 8d 60 70 85 57 25 05 00 00 00 02 94 29 ec 05 01 39 08 01 c8 48 40 c0 59 26 d4 dd d4 b0 02 61 41 35 50 e0 bd 09 b2 ea 05 19 7f c6 ff 00 ca cd 53 92 6f 5d ca 00 b3 1b 34 ee 93 e8 2a 59 d7 0c ca ca 5c 90 6f 7e 48 c2 d4 2a 95 32 f5 39 d2 66 f5 af 70 2e 5d b4 c2 1a aa 41 90 82 8a 14 84 0c 05 2c 4d 36 b2 50 b2 06 74 ae 0b c2 33 ad 62 d9 35 4a 00 53 d8 32 50 01 30 38 18 a4 06 04 Data Ascii: (!H,lXn={.VkWU(VoBf`1@C4 (cdd,R`0wF\^Ly2Z8H{$(-PR99EpN@`pW%)9H@Y&aA5PSo]4Y\o~H*29fp.]A,M6Pt3b5JS2P08
2024-12-09 15:16:38 UTC	16384	IN	Data Raw: 2a b4 cb 22 b5 43 da 05 01 3b 41 28 02 89 a8 65 13 54 d2 03 41 42 14 b0 dc 03 da 82 05 b8 72 06 32 d9 a4 f7 21 26 de 0b dd 1a 80 42 63 86 09 a6 38 ec 02 96 0a c8 32 13 dc 0a 26 d5 91 42 e8 38 7d 00 95 66 b1 6f bc d0 87 2f 0c cd 37 4f 20 37 26 dd 81 59 3c 82 02 8c ef 49 ca d4 d0 00 ca b9 52 8a 96 4a f4 da 3a 33 50 27 70 d3 90 81 3a a0 28 08 da c2 5a 02 c0 9d c3 90 13 aa 67 3f 25 36 e5 1d 46 7c 8a 51 06 5c 6f 39 36 6d 3c 1c aa 53 86 75 52 1a 08 36 c6 81 94 54 0b 25 52 dd dc a4 d3 14 f7 14 20 2c 08 db d8 25 a0 2c 09 56 43 99 01 80 00 00 86 20 14 48 6c 4b 42 80 09 c8 6e 8d 4a 00 30 b3 cc a3 4a df 71 50 99 0f 8d 6a b0 06 80 65 b9 ac 32 f7 01 40 29 43 03 2e 55 84 5a ac 13 cb f2 9a 20 14 30 43 00 25 d9 11 2a 4b 6d 23 3a d3 3b ac 41 6e b2 4b 6e d8 ae 9d c4 ff 00 Data Ascii: "C;A(eTABr2!&Bc82&B8}fo/7O 7&Y<IRJ:3P'p:(Zg?%6F\|Q\o96m<SuR6T%R ,%,VC HlKBnJ0JqPje2@)C.UZ 0C%Km#:;AnKn
2024-12-09 15:16:38 UTC	1024	IN	Data Raw: c7 67 57 9a 46 6a 06 6b 35 5e 66 cb 97 6b b2 b6 6b d8 56 e1 57 aa b7 0c da b3 95 d5 64 c1 b7 ea 0a e8 fa 6b 16 a6 6b f8 99 a8 85 1d c5 5b da b6 51 d8 da bc 75 e5 53 4f 4b 99 80 35 e0 ad ab 6d d1 87 f7 1d f5 b2 b6 3a 9c bc 7c ed 55 f1 bd 50 aa da 7e 20 77 4b ae ba 1c 1e eb d9 a7 eb e3 cf 7a ff 00 0f e0 75 d3 99 3c 5b 05 a6 d0 1f 3d 08 36 a3 d7 f7 3e d2 bc de ba 62 ff 00 9f 99 e3 d9 5a 8f 6b 50 d7 70 2b 6a 08 46 73 66 3a d2 dd c2 36 5c 70 a4 a5 6c 60 c2 ea c2 a7 0c f5 20 e8 4e 74 1d 56 e7 0b 52 38 b8 ab 39 93 a7 fb 6e 27 a5 80 5f 4d ac c0 2a f8 17 cb ed ef 45 35 bb 68 e4 ff 00 71 7e e0 3a 60 67 2c f2 77 91 2d f2 15 da a0 a4 73 27 68 25 72 59 30 3b 30 61 69 d0 3e a5 8b ad 9d 80 55 b3 2e b6 87 a0 ac dd 75 40 b9 10 17 28 d2 97 4b a9 92 69 e5 0f 05 1d 4b 91 14 Data Ascii: gWFjk5^fkkVWdkk[QuSOK5m:\|UP~ wKzu<[=6>bZkPp+jFsf:6\pl` NtVR89n'_M*E5hq~:`g,w-s'h%rY0;0ai>U.u@(KiK
2024-12-09 15:16:38 UTC	15990	IN	Data Raw: 5e df d8 3e 6f 53 f4 d3 bb eb e4 7b 1c 74 a7 15 62 91 4a f7 ea c0 f2 3f ec a9 6b 42 4b 4e c7 25 94 70 d7 ed d4 f6 6f 67 29 ab 3a b4 4f 27 15 39 ea b7 42 7e 1a 01 e7 5b fe 7a f8 4f e4 3e 0e 67 c6 af 2b 75 25 4d 7e da 33 ae fe d9 ae 5d d9 d1 f8 9c 96 e1 b5 29 6c 6a ff 00 40 8d 2f c2 b9 2b 4b 70 a6 ea a3 d2 f5 59 21 3f 5d df f9 7f 50 55 b2 7c 7b 65 3c 68 74 57 6f 35 ac 9a d9 76 be 6f da f2 15 c6 ff 00 e2 5e 6f f3 3b 57 3a 77 7c 7c 8a 52 4e 2d fb 92 39 f9 38 2f c7 5a d6 cb 33 fa 8f 6b fa 96 71 d1 fe 60 1c dc 0f 8e 89 a6 ad 56 f5 42 6b d5 6f 2f d4 be 2b df 86 ab 6a 99 79 4f 4d 4d ad c7 5e 47 67 c7 f3 46 69 d7 e0 06 1c 4d d7 6b ab 87 f9 e4 e8 6a 9e e3 76 df 4f 27 e0 ce 75 4b 27 5c 31 6d 69 3f 30 1b a5 a9 78 b2 86 91 0a 54 47 73 b6 bc 8a de 8e 55 d3 16 ed e6 63 Data Ascii: ^>oS{tbJ?kBKN%pog):O'9B~[zO>g+u%M~3])lj@/+KpY!?]PU\|{e<htWo5vo^o;W:w\|\|RN-98/Z3kq`VBko/+jyOMM^GgFiMkjvO'uK'\1mi?0xTGsUc
2024-12-09 15:16:39 UTC	16384	IN	Data Raw: cd b6 a5 9b f1 59 a6 e5 19 bb 39 70 9f dc 2f 49 1c 0f db c5 9c 68 5d af c9 1b 51 d1 65 7b 3f 95 92 b8 ef 3f 2b 1f 07 cb 9d f0 59 a9 2a 9e d9 44 f5 3b 3d 6b 1b 59 14 e3 bd 7a 01 cd ed 5b af 32 a9 ef 1e 45 3d bd d7 2a bc 60 f5 d6 86 a2 18 08 0d 06 21 88 04 c4 86 c4 88 28 62 02 86 02 00 18 98 c4 c0 c9 88 6c 44 09 18 7b 9f 94 dc c7 dc 38 ae 92 07 9d bd 75 34 e3 74 6f 0c e6 7b 2d fe 56 0b 8f b0 1e bb 78 38 6f 57 26 f4 9d b9 39 ef 67 24 07 a9 68 6a a9 76 2a ba f5 2a 53 d0 0a 54 b8 3a 72 ad 19 2d 90 d0 1b d6 9c 9d 6c 69 b1 f7 fc 4e 5a 24 6e 80 2d c6 df 5f c4 cd f0 3e 96 4b e2 3b 98 81 ad 78 9f 5b cf c4 df e9 ae ff 00 89 c9 53 a9 01 5f 4a bd c7 f4 6a 24 59 51 3f 4a 81 f4 a8 54 84 94 4f d3 a7 d9 07 d3 af d9 0e 40 05 b2 a7 3d eb 54 e5 fd c7 49 c7 cb f3 11 4a dc 8d Data Ascii: Y9p/Ih]Qe{??+YD;=kYz[2E=`!(blD{8u4to{-Vx8oW&9g$hjv**ST:r-liNZ$n-_>K;x[S_Jj$YQ?JTO@=TIJ
2024-12-09 15:16:39 UTC	2442	IN	Data Raw: 57 4a 99 fd 4d 99 a2 da df ee 79 b3 f8 99 e5 b9 5a b0 d6 5b db a6 bc ad 62 ab 6f f9 b5 b3 f3 67 4f 15 b6 b9 67 3d 78 d5 52 b7 2b da bb 75 37 a7 2d 1f a6 b5 c1 59 b6 75 1b 5f 8e 6c dc c1 0f 85 3c b3 65 6d f5 56 40 47 26 5f 4b c4 3e 97 89 ac 00 19 fd 37 d1 87 d3 7d cd 40 0c 7e 9b ee 3f a6 fb 9a 00 56 7b 1f 71 3a 34 b5 35 33 e5 71 52 8c 64 72 48 04 5c b7 82 38 a2 f3 6f 11 cc 4b ec 1c 54 db 55 3d 11 9a b1 8f bb e4 fa 34 8a eb 63 c4 69 f2 5d 57 56 da 5f 79 d9 cf 77 c9 6d cd f9 13 ec 6b bf dc 55 f4 af ab ee 44 8b 5e 87 b9 73 76 96 95 8a fd c8 e3 db 36 6b c4 bb 5b 75 1d ba bb 36 57 b4 aa 77 df 6e 84 45 ba 2e 1c 5f a9 d7 c1 64 ea da d0 3d db a7 34 27 d0 38 55 28 9a 4f 05 47 93 7a d6 d6 7b 5e 64 db d9 a7 f5 33 d8 eb 5c 74 99 84 5d 2b 55 69 44 57 62 2e a4 a2 aa 69 Data Ascii: WJMyZ[bogOg=xR+u7-Yu_l<emV@G&_K>7}@~?V{q:453qRdrH\8oKTU=4ci]WV_ywmkUD^sv6k[u6WwnE._d=4'8U(OGz{^d3\t]+UiDWb.i
2024-12-09 15:16:39 UTC	16384	IN	Data Raw: b2 d3 8d 10 ab b9 49 db fd b2 75 da 15 f6 aa ba 32 23 8f e9 f5 60 b8 fa 9d bf db 46 96 2a 9e da 75 65 47 06 c6 b2 74 7b 5a b5 74 fc cd 5f b7 d9 97 62 78 16 de 4c 39 40 7a 88 aa 90 8b 45 45 0c 43 41 50 f5 2d 19 b7 92 d3 03 c9 e4 56 df 67 2e 27 b9 2b 76 bb ad 1e 67 47 d1 b5 af 67 84 a4 bf ed 6d dd 04 61 57 69 d6 d1 e6 52 77 dd ab 8f 33 75 ed ae ba a0 fe da f3 32 80 cf 75 e6 77 31 be 4e 4e 96 70 6b f4 2f e0 37 c3 66 b0 97 de 15 cc f9 39 1e 77 38 1e fb ad 2c e0 e8 7c 16 78 49 2f 88 97 b7 b3 5a a8 03 25 cb c8 bf 76 07 f5 b9 35 9c 1a fd 0b ad 12 8f 30 7c 36 d1 55 47 98 19 7d 6e 4e f8 2b eb 72 74 7f 81 57 e2 b4 7a 6b 1f 11 be 2b 46 2b 9f 30 33 7c bc 8f 47 81 fd 5e 5e f8 f2 34 7c 56 8c 56 3e 22 fa 56 e9 5f c4 09 fa dc 93 ae 3c 86 f9 b9 27 5c 79 14 f8 9f 4a f9 e4 Data Ascii: Iu2#`F*ueGt{Zt_bxL9@zEECAP-Vg.'+vgGgmaWiRw3u2uw1NNpk/7f9w8,\|xI/Z%v50\|6UG}nN+rtWzk+F+03\|G^^4\|VV>"V_<'\yJ
2024-12-09 15:16:39 UTC	1024	IN	Data Raw: 40 8a f4 02 69 75 47 9c 8a f7 56 78 14 26 46 d8 b0 15 22 d4 30 19 61 0b 6b 6c 15 21 be e1 45 eb 93 a7 8e d2 dc 81 ca db 3b f8 be 54 61 6e 4a 1d 3c 71 b5 46 81 4c 56 f9 58 d8 ac f0 ca 39 f8 7e 63 a8 e5 e1 d4 ea 24 09 90 cb 64 30 34 5a 00 2d 00 a2 5a 1a 10 d3 03 8f 97 e6 3a e9 a2 39 39 63 71 d7 4d 11 91 9d cc 8d ae 63 25 0e 60 ad dd c8 02 0d 13 4c 1f 1d 5b 98 39 af 84 1c 76 6b 46 51 7c 9c 2e 3d 3a 99 ba b5 e0 cd ab cd 3a a0 98 b4 bd 08 39 f9 5f a4 c6 87 75 ef 5f 3f 23 17 b5 e9 81 8b ad 68 71 72 f3 5f 82 f3 5d 19 d5 57 03 6a b6 d5 48 c4 d6 14 f7 17 e5 72 92 93 a3 8f 93 9e d8 69 57 cf f9 1a d5 ad 06 ec 96 a5 0e ae f1 ea 84 fc 0a 93 27 c8 bc c8 77 7d 80 de 49 b5 95 75 c1 84 59 ea f0 42 e1 5b a6 00 d1 fb ae 3e 8f 74 76 33 af b9 fa 8a 6a be f1 ae 34 b4 51 21 f4 Data Ascii: @iuGVx&F"0akl!E;TanJ<qFLVX9~c$d04Z-Z:99cqMc%`L[9vkFQ\|.=::9_u_?#hqr_]WjHriW'w}IuYB[>tv3j4Q!
2024-12-09 15:16:39 UTC	16384	IN	Data Raw: 34 df f2 34 bd 7e 9d 67 62 af 8f 25 b3 ff 00 a5 19 db 9e f1 13 0b b2 c1 c9 77 2c 8d d9 7e 6b d6 e3 b2 75 e1 6f d4 b7 44 bd 34 7a 23 8b 9d 46 e4 f5 4d 9d 9c 55 b5 bd bd 5e 8e b6 4f 3e 0c cf dd 5a 94 e4 b7 ee b3 cf 80 4f 36 4d 79 16 4d 29 3d fa 55 72 56 bc 8d c3 8a bf b8 f9 eb dd dd cb 3d 9e 76 b6 d2 17 ed 5f 70 63 cd af 51 d6 bb ec e7 58 31 dd c7 f5 2f 9c ec ca 2a 7f dc b4 76 af e4 71 f1 d1 ff 00 77 74 ff 00 75 1f e4 73 9f b5 67 e1 1c 5e e3 89 b8 a5 5b c7 52 3f bf b6 95 ad 51 8f b6 ac 5e 3c 19 9b 69 36 75 6a 4e 1d 0f dc f2 db ac 79 1d dc 56 77 f6 ee 5c b9 8f c5 1e 36 fe e7 ab c0 e3 db 6e ff 00 3a 7f fb 90 2c 5f 3d 5d dd fe da 1c 32 8e df 71 c9 b6 f6 47 96 ab cb 6c c6 da f7 b6 85 d6 b3 a5 da 79 2c b8 eb f1 3b 2d cd b2 ca 94 d1 1c d5 6b 89 35 5f 55 ad d4 d3 Data Ascii: 44~gb%w,~kuoD4z#FMU^O>ZO6MyM)=UrV=v_pcQX1/*vqwtusg^[R?Q^<i6ujNyVw\6n:,_=]2qGly,;-k5_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49811	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:37 UTC	722	OUT	GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=oh9LVNR9ucQpArZdSUBX7WQoWp3W+SveOd43EyETKU+b8xNr3cfEVyK77DVzoeN69DOcv51m6q+vKt1AdA+yGJzeUwd+qcJvjL4J0V/vRGL8JXwjxYN9yEnwkbR7
2024-12-09 15:16:38 UTC	972	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:37 GMT Content-Type: image/svg+xml Content-Length: 387 Connection: close Set-Cookie: AWSALB=0jBHMMQ1Tv4hXQNlp8XYbNaMWrhMJVZsKgO1nsP+Fii0fnbs4+vOS2OvgsrueG5Ru8gdB+f0GI9NaMrKnchhl+mDx+XhEEqw63SPXDnHSJDuvWiZIv8dCLqRXbNi; Expires=Mon, 16 Dec 2024 15:16:37 GMT; Path=/ Set-Cookie: AWSALBCORS=0jBHMMQ1Tv4hXQNlp8XYbNaMWrhMJVZsKgO1nsP+Fii0fnbs4+vOS2OvgsrueG5Ru8gdB+f0GI9NaMrKnchhl+mDx+XhEEqw63SPXDnHSJDuvWiZIv8dCLqRXbNi; Expires=Mon, 16 Dec 2024 15:16:37 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=1B7187CF27CA82CF61F21CF566461EAA; Path=/websafe; Secure; HttpOnly Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-183" Server: unknown
2024-12-09 15:16:38 UTC	387	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 0a 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 62 7b 66 69 6c 6c 3a 23 66 66 66 66 66 66 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 2e 38 38 31 2c 36 2e 31 33 31 63 2e 33 34 32 2d 2e 33 34 32 2c 2e 38 39 36 2d 2e 33 34 32 2c 31 2e 32 33 37 2c 30 6c 32 2e 38 38 31 2c 32 2e 38 38 31 2c 32 2e 38 38 31 2d 32 2e 38 38 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style></defs><path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49812	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:37 UTC	1229	OUT	GET /keyserver/keyserver?su=brian.cummings%40ebizcharge.com&df=&tf=&lp=en&v=2&m=%7c1__022ea7ce00000193ab5a02e70a67814293085d0d%40vmamnaj9c01dtt.servers.global.prv&s=1&f=0&d=1733757391016&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=mettDyv3/kJ5l7HQjdgDpK7YTn8qJ0riTHt0Eu0bnyHl5WYfgD+8BFRB7fp2I6K5m/b4UG6ERRrGcyS4PKanTrRKxLyi6lNfU2rQsmcN2W7GEeXoS14493vSp6l9; AWSALBCORS=oh9LVNR9ucQpArZdSUBX7WQoWp3W+SveOd43EyETKU+b8xNr3cfEVyK77DVzoeN69DOcv51m6q+vKt1AdA+yGJzeUwd+qcJvjL4J0V/vRGL8JXwjxYN9yEnwkbR7
2024-12-09 15:16:38 UTC	885	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:38 GMT Content-Type: text/javascript;charset=ISO-8859-1 Content-Length: 1399 Connection: close Set-Cookie: AWSALB=bHxTz77EwlOByBrMMShcKYXd2ihfKQJZh8WS3gFfvaqAZkP1bYeAoOo/8jIupuyQHfMWeBzq8y0kK7hhttB9RcF5fZpylu6u5YngMUoA6im1W5J6VGedOwnLsR8U; Expires=Mon, 16 Dec 2024 15:16:37 GMT; Path=/ Set-Cookie: AWSALBCORS=bHxTz77EwlOByBrMMShcKYXd2ihfKQJZh8WS3gFfvaqAZkP1bYeAoOo/8jIupuyQHfMWeBzq8y0kK7hhttB9RcF5fZpylu6u5YngMUoA6im1W5J6VGedOwnLsR8U; Expires=Mon, 16 Dec 2024 15:16:37 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" Set-Cookie: JSESSIONID=39E61E26EEB40535AD779556AFBBCF81; Path=/keyserver; Secure; HttpOnly Cache-Control: no-cache Pragma: no-cache Server: unknown
2024-12-09 15:16:38 UTC	1399	IN	Data Raw: 69 66 28 6c 5f 29 0d 0a 6c 5f 28 7b 0d 0a 22 52 50 43 52 65 66 22 3a 70 61 79 6c 6f 61 64 2e 72 70 63 2c 0a 22 63 61 6c 6c 62 61 63 6b 22 3a 71 72 0d 0a 2c 27 61 63 74 69 6f 6e 27 3a 27 6f 70 65 6e 27 0d 0a 2c 27 73 74 61 74 75 73 27 3a 31 31 0d 0a 2c 27 6d 65 73 73 61 67 65 27 3a 27 50 6c 65 61 73 65 20 65 6e 72 6f 6c 6c 20 62 65 66 6f 72 65 20 6f 70 65 6e 69 6e 67 20 74 68 69 73 20 52 65 67 69 73 74 65 72 65 64 20 45 6e 76 65 6c 6f 70 65 2e 27 0d 0a 2c 27 73 74 61 74 65 27 3a 31 0d 0a 2c 27 72 65 71 54 69 6d 65 27 3a 31 37 33 33 37 35 37 33 39 31 30 31 36 0d 0a 2c 27 72 65 71 4e 75 6d 62 65 72 27 3a 31 0d 0a 2c 27 72 65 63 69 70 69 65 6e 74 49 64 65 6e 74 69 66 69 65 64 27 3a 66 61 6c 73 65 0d 0a 2c 27 73 75 63 63 65 73 73 27 3a 74 72 75 65 0d 0a 2c 27 Data Ascii: if(l_)l_({"RPCRef":payload.rpc,"callback":qr,'action':'open','status':11,'message':'Please enroll before opening this Registered Envelope.','state':1,'reqTime':1733757391016,'reqNumber':1,'recipientIdentified':false,'success':true,'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49818	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:39 UTC	700	OUT	GET /websafe/images/pullFeature/arrowDown.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; AWSALB=mettDyv3/kJ5l7HQjdgDpK7YTn8qJ0riTHt0Eu0bnyHl5WYfgD+8BFRB7fp2I6K5m/b4UG6ERRrGcyS4PKanTrRKxLyi6lNfU2rQsmcN2W7GEeXoS14493vSp6l9; AWSALBCORS=0jBHMMQ1Tv4hXQNlp8XYbNaMWrhMJVZsKgO1nsP+Fii0fnbs4+vOS2OvgsrueG5Ru8gdB+f0GI9NaMrKnchhl+mDx+XhEEqw63SPXDnHSJDuvWiZIv8dCLqRXbNi
2024-12-09 15:16:40 UTC	882	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:39 GMT Content-Type: image/svg+xml Content-Length: 387 Connection: close Set-Cookie: AWSALB=5CyJxn8EnRdBQpowzFxqlSO7RkYGGUR3ibq4phfJxGDJwiKUp1p5k3BlnFiKSeEzmuE0u7+QktoODCENJEUskwmyjeozkau99shPkIq1LsEFsavFGV8b5irO4YUj; Expires=Mon, 16 Dec 2024 15:16:39 GMT; Path=/ Set-Cookie: AWSALBCORS=5CyJxn8EnRdBQpowzFxqlSO7RkYGGUR3ibq4phfJxGDJwiKUp1p5k3BlnFiKSeEzmuE0u7+QktoODCENJEUskwmyjeozkau99shPkIq1LsEFsavFGV8b5irO4YUj; Expires=Mon, 16 Dec 2024 15:16:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-183" Server: unknown
2024-12-09 15:16:40 UTC	387	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 0a 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 62 7b 66 69 6c 6c 3a 23 66 66 66 66 66 66 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 2e 38 38 31 2c 36 2e 31 33 31 63 2e 33 34 32 2d 2e 33 34 32 2c 2e 38 39 36 2d 2e 33 34 32 2c 31 2e 32 33 37 2c 30 6c 32 2e 38 38 31 2c 32 2e 38 38 31 2c 32 2e 38 38 31 2d 32 2e 38 38 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><defs><style>.b{fill:#ffffff;fill-rule:evenodd;}</style></defs><path class="b" d="M3.881,6.131c.342-.342,.896-.342,1.237,0l2.881,2.881,2.881-2.881

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49840	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:47 UTC	1059	OUT	GET /websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; AWSALB=5CyJxn8EnRdBQpowzFxqlSO7RkYGGUR3ibq4phfJxGDJwiKUp1p5k3BlnFiKSeEzmuE0u7+QktoODCENJEUskwmyjeozkau99shPkIq1LsEFsavFGV8b5irO4YUj; AWSALBCORS=5CyJxn8EnRdBQpowzFxqlSO7RkYGGUR3ibq4phfJxGDJwiKUp1p5k3BlnFiKSeEzmuE0u7+QktoODCENJEUskwmyjeozkau99shPkIq1LsEFsavFGV8b5irO4YUj
2024-12-09 15:16:48 UTC	1276	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:48 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 18351 Connection: close Set-Cookie: AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; Expires=Mon, 16 Dec 2024 15:16:48 GMT; Path=/ Set-Cookie: AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; Expires=Mon, 16 Dec 2024 15:16:48 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Pragma: no-cache Set-Cookie: WebSafe.current-locale=en; Version=1; Expires=Sat, 27 Dec 2092 18:30:55 GMT; Secure; HttpOnly Set-Cookie: WebSafe.current-locale-changed=true; Version=1; Expires=Sat, 27 Dec 2092 18:30:55 GMT; Secure; HttpOnly Set-Cookie: PostXAuth=""; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ Set-Cookie: EnablePSP=""; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Language: en Server: unknown
2024-12-09 15:16:48 UTC	8154	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0a 20 20 20 20 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4e 65 77 20 55 73 65 72 20 52 65 67 69 73 74 72 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en"> <head> <title>New User Registration</title> <meta content="text/html; charset=UTF-8" http-equiv="Content
2024-12-09 15:16:48 UTC	9000	IN	Data Raw: 73 74 20 4e 61 6d 65 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 73 74 65 72 69 73 6b 2d 72 65 71 75 69 72 65 64 22 3e 2a 3c 2f 73 70 61 6e 3e 3c 2f 6c 61 62 65 6c 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 49 6e 70 75 74 43 65 6c 6c 22 3e 0a 3c 69 6e 70 75 74 20 73 69 7a 65 3d 22 32 35 22 20 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 22 64 65 66 61 75 6c 74 45 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 49 64 22 20 69 64 3d 22 66 6f 63 75 73 49 74 65 6d 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 46 69 72 73 74 20 4e 61 6d 65 22 20 74 69 74 6c 65 3d 22 45 6e 74 65 72 20 79 6f 75 72 20 66 69 72 73 74 20 6e 61 6d 65 2e 22 20 76 61 6c 75 65 3d 22 22 20 63 6c 61 73 73 3d 22 6d 64 73 2d 69 6e 70 75 74 20 63 68 61 6e 67 65 61 Data Ascii: st Name<span class="asterisk-required">*</span></label></div><div class="formInputCell"><input size="25" aria-describedby="defaultErrorContainerId" id="focusItem" placeholder="First Name" title="Enter your first name." value="" class="mds-input changea
2024-12-09 15:16:48 UTC	1197	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 64 73 2d 62 75 74 74 6f 6e 20 6d 64 73 2d 62 75 74 74 6f 6e 2d 6b 69 6e 64 2d 74 65 72 74 69 61 72 79 20 6d 64 73 2d 62 75 74 74 6f 6e 2d 73 69 7a 65 2d 6d 64 22 20 68 72 65 66 3d 22 61 62 6f 75 74 22 20 74 69 74 6c 65 3d 22 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 73 65 72 76 69 63 65 2e 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 41 62 6f 75 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 Data Ascii: >     <a class="mds-button mds-button-kind-tertiary mds-button-size-md" href="about" title="Information about this service." target="_blank">About</a>     <a class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49841	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:48 UTC	1017	OUT	GET /websafe/templates/css/postx.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
2024-12-09 15:16:48 UTC	882	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:48 GMT Content-Type: text/css Content-Length: 122633 Connection: close Set-Cookie: AWSALB=dSbcP9xo5Yu2KjW1qJPeq0uU4HTG3JabM+LUBU6Ix4PUyIBxyvfbjV1NHhkIjm1SO2rJqp3HaFDA1V9G+86fnIhWTcIagVIIbCC23vcQtTs9NfDy9MmQl8DylPlx; Expires=Mon, 16 Dec 2024 15:16:48 GMT; Path=/ Set-Cookie: AWSALBCORS=dSbcP9xo5Yu2KjW1qJPeq0uU4HTG3JabM+LUBU6Ix4PUyIBxyvfbjV1NHhkIjm1SO2rJqp3HaFDA1V9G+86fnIhWTcIagVIIbCC23vcQtTs9NfDy9MmQl8DylPlx; Expires=Mon, 16 Dec 2024 15:16:48 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-1df09" Server: unknown
2024-12-09 15:16:48 UTC	8548	IN	Data Raw: 2f 2a 20 47 65 6e 65 72 61 6c 20 73 74 79 6c 65 73 20 2a 2f 0a 2f 2a 20 24 49 64 3a 20 70 6f 73 74 78 2e 63 73 73 2c 76 20 31 2e 31 30 34 20 32 30 31 36 2d 30 33 2d 31 30 20 31 31 3a 33 36 3a 31 32 20 69 67 69 74 73 6b 61 69 20 45 78 70 20 24 20 2a 2f 0a 40 6d 65 64 69 61 20 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 20 61 63 74 69 76 65 29 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 6c 69 67 68 74 29 20 7b 0a 20 20 2e 68 65 61 64 65 72 69 63 6f 6e 73 20 7b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 62 72 69 67 68 74 6e 65 73 73 28 30 29 20 73 61 74 75 72 61 74 65 28 31 30 30 25 29 3b 0a 20 20 7d 0a 20 20 23 6c 6f 63 61 6c 65 55 49 20 7b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 69 6e 76 65 72 74 28 31 29 3b 0a 20 20 7d Data Ascii: /* General styles // $Id: postx.css,v 1.104 2016-03-10 11:36:12 igitskai Exp $ */@media (forced-colors: active) and (prefers-color-scheme: light) { .headericons { filter: brightness(0) saturate(100%); } #localeUI { filter: invert(1); }
2024-12-09 15:16:48 UTC	9000	IN	Data Raw: 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 65 73 20 72 65 6c 61 74 65 64 20 74 6f 20 74 68 65 20 73 65 63 75 72 65 20 72 65 70 6c 79 20 70 61 6e 65 6c 20 2a 2f 0a 0a 23 73 65 63 52 65 70 6c 79 50 61 6e 65 6c 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 37 25 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 23 73 65 63 52 65 70 6c 79 50 61 6e 65 6c 43 6f 6e 74 65 6e 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 36 37 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 Data Ascii: ;}/* Styles related to the secure reply panel */#secReplyPanelContainer { text-align: center; height: 77%; display: table; width: 100%;}#secReplyPanelContent { width: 670px; margin: auto; position: relative; border-left: 1px solid
2024-12-09 15:16:48 UTC	9000	IN	Data Raw: 66 61 75 6c 74 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 36 34 63 35 34 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 72 65 2e 64 65 66 61 75 6c 74 54 65 78 74 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 49 6e 74 65 72 3b 0a 7d 0a 0a 70 72 65 2e 77 72 61 70 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 70 72 65 2d 77 72 61 70 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 2d 6d 6f 7a 2d 70 72 65 2d 77 72 61 70 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 2d 70 72 65 2d 77 72 61 70 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 2d 6f 2d 70 72 65 2d 77 Data Ascii: faultText { color: #464c54; font-size: 14px; font-family: "Inter"; line-height: 20px;}pre.defaultText { font-family: Inter;}pre.wrap { white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-w
2024-12-09 15:16:48 UTC	9000	IN	Data Raw: 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 49 63 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 54 65 78 74 2c 0a 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 54 65 78 74 49 6d 70 6f 72 74 61 6e 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 33 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 74 3b 0a 7d 0a 0a 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 54 65 78 74 49 6d 70 6f 72 74 61 6e 74 20 7b 0a 20 Data Ascii: 55555; font-size: 9pt; font-weight: bold;}.messageHeaderIcon { text-align: center;}.messageHeaderText,.messageHeaderTextImportant { padding: 2px 3px; text-align: left; color: #555555; font-size: 9pt;}.messageHeaderTextImportant {
2024-12-09 15:16:48 UTC	9000	IN	Data Raw: 20 7d 0a 20 20 2e 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 20 2e 66 6f 72 6d 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 2c 0a 20 20 2e 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 20 2e 66 6f 72 6d 52 65 71 75 69 72 65 64 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 33 35 70 78 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 30 70 78 3b 0a 20 20 7d 0a 7d 0a 23 70 73 77 64 5f 64 65 73 63 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 37 66 37 66 38 36 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6d 6c 33 70 2e 6d 62 31 70 20 7b 0a 20 20 68 65 Data Ascii: } .changepassword .formInputLabelCell, .changepassword .formRequiredInputLabelCell { padding: 2px 35px; min-width: 100px; }}#pswd_desc { color: #7f7f86; font-family: "Inter"; font-size: 12px; line-height: 16px;}.ml3p.mb1p { he
2024-12-09 15:16:49 UTC	9000	IN	Data Raw: 0a 20 20 23 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 20 2e 66 6f 72 6d 49 6e 70 75 74 43 65 6c 6c 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 7d 0a 0a 20 20 23 63 75 72 72 65 6e 74 50 61 73 73 77 6f 72 64 54 61 62 6c 65 20 74 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 7d 0a 0a 20 20 74 61 62 6c 65 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 0a 20 20 23 65 64 69 74 51 75 65 73 74 69 6f 6e 73 54 61 62 6c 65 20 74 64 20 7b 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 7d 0a 0a 20 20 2e 63 61 6c 49 6d 67 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 25 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 Data Ascii: #changepassword .formInputCell { width: 90%; } #currentPasswordTable tr { display: block; } table { width: auto; } #editQuestionsTable td { white-space: normal; } .calImg { margin-left: 10%; }}@media screen
2024-12-09 15:16:49 UTC	9000	IN	Data Raw: 46 6f 6c 64 65 72 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 33 33 36 36 3b 0a 7d 0a 0a 61 3a 68 6f 76 65 72 2e 66 6f 6c 64 65 72 41 6e 63 68 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 2e 66 6f 6c 64 65 72 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 Data Ascii: Folder { font-family: Arial, helvetica, sans-serif; font-size: 12pt; font-weight: normal; color: #003366;}a:hover.folderAnchor { color: #ffffff;}.folder { font-family: Arial, helvetica, sans-serif; font-size: 10pt; font-weight: norma
2024-12-09 15:16:49 UTC	9000	IN	Data Raw: 20 72 67 62 61 28 32 30 35 2c 20 32 33 36 2c 20 32 34 37 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 2d 31 30 3a 20 72 67 62 61 28 31 34 38 2c 20 39 35 2c 20 33 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 2d 39 3a 20 72 67 62 61 28 31 36 31 2c 20 31 30 38 2c 20 33 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 2d 38 3a 20 72 67 62 61 28 31 37 33 2c 20 31 32 32 2c 20 33 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 2d 37 3a 20 72 67 62 61 28 31 39 31 2c 20 31 34 30 2c 20 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 2d 36 3a 20 72 67 62 61 28 32 30 34 2c 20 31 35 36 2c 20 30 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 2d 35 3a 20 Data Ascii: rgba(205, 236, 247, 1); --color-yellow-10: rgba(148, 95, 3, 1); --color-yellow-9: rgba(161, 108, 3, 1); --color-yellow-8: rgba(173, 122, 3, 1); --color-yellow-7: rgba(191, 140, 0, 1); --color-yellow-6: rgba(204, 156, 0, 1); --color-yellow-5:
2024-12-09 15:16:49 UTC	9000	IN	Data Raw: 2d 72 65 64 2d 38 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 6d 65 64 69 75 6d 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 72 65 64 2d 38 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 61 69 6e 2d 69 6e 74 65 6e 73 69 74 79 2d 73 74 72 6f 6e 67 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 35 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 61 69 6e 2d 69 6e 74 65 6e 73 69 74 79 2d 6d 65 64 69 75 6d 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 34 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 61 69 6e 2d 69 6e 74 65 6e 73 69 74 79 2d 77 65 61 6b 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 32 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 61 69 6e 2d Data Ascii: -red-8); --color-danger-text-medium: var(--color-red-8); --color-contain-intensity-strong: var(--color-neutral-5); --color-contain-intensity-medium: var(--color-neutral-4); --color-contain-intensity-weak: var(--color-neutral-2); --color-contain-
2024-12-09 15:16:49 UTC	7384	IN	Data Raw: 65 64 3a 20 76 61 72 28 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 64 69 73 61 62 6c 65 64 0a 20 20 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 6f 76 65 72 3a 20 76 61 72 28 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 2d 68 6f 76 65 72 0a 20 20 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 73 Data Ascii: ed: var( --color-danger-border-strong-disabled ); --mds-button-color-background: var(--color-danger-background-strong); --mds-button-color-background-hover: var( --color-danger-background-strong-hover ); --mds-button-color-background-dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.9	49854	104.18.11.207	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:49 UTC	571	OUT	GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:50 UTC	952	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"a15c2ac3234aa8f6064ef9c1f7383c37" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 20:56:12 CDN-EdgeStorageId: 1068 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: c36f8b66dc0fef70c80032c5e92e388d CDN-Cache: HIT CF-Cache-Status: HIT Age: 883662 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ef5f564086d4402-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 15:16:50 UTC	417	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7bfa/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 Data Ascii: ay-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:12
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 Data Ascii: ne dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol u
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f Data Ascii: focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:no
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e Data Ascii: y{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 Data Ascii: -img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2re
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d Data Ascii: 0,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 Data Ascii: -flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;orde
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 Data Ascii: th:33.333333%}.col-sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;fle
2024-12-09 15:16:50 UTC	1369	IN	Data Raw: 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 Data Ascii: m-7{margin-left:58.333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positiv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.9	49849	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:49 UTC	1021	OUT	GET /websafe/templates/css/overrides.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
2024-12-09 15:16:50 UTC	875	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:49 GMT Content-Type: text/css Content-Length: 68 Connection: close Set-Cookie: AWSALB=DIZZTVsqg4SbLGiVETMaKU2CRjbfMsmloFEM9j0KxbZlcabQWFjOqYgWIbetJHLYNfNeGn7mZ7qNtGVOcS4um8wodqDzLpPT2NI85Tu4WKZnVlzcqCcosAbx1jGT; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/ Set-Cookie: AWSALBCORS=DIZZTVsqg4SbLGiVETMaKU2CRjbfMsmloFEM9j0KxbZlcabQWFjOqYgWIbetJHLYNfNeGn7mZ7qNtGVOcS4um8wodqDzLpPT2NI85Tu4WKZnVlzcqCcosAbx1jGT; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-44" Server: unknown
2024-12-09 15:16:50 UTC	68	IN	Data Raw: 2f 2a 20 41 6e 79 20 63 75 73 74 6f 6d 20 6f 72 20 6f 76 65 72 72 69 64 64 65 6e 20 73 74 79 6c 65 73 20 63 61 6e 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 20 2a 2f 0d 0a Data Ascii: /* Any custom or overridden styles can be included in this file */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.9	49850	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:49 UTC	1030	OUT	GET /websafe/templates/css/postx-registration.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
2024-12-09 15:16:50 UTC	879	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:49 GMT Content-Type: text/css Content-Length: 7929 Connection: close Set-Cookie: AWSALB=dw2ufggTjV/r4uZ8CIxQjbQNMUDJGzeGCUy5gO/JYYKEO1YsGHl+hdpzvhJo9EcgmD+XrCJ+NQTJ6J1TJ3xXuUNJCSnj0K33Nkokm0pbvZflJ2hQSGJceBsxLayh; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/ Set-Cookie: AWSALBCORS=dw2ufggTjV/r4uZ8CIxQjbQNMUDJGzeGCUy5gO/JYYKEO1YsGHl+hdpzvhJo9EcgmD+XrCJ+NQTJ6J1TJ3xXuUNJCSnj0K33Nkokm0pbvZflJ2hQSGJceBsxLayh; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-1ef9" Server: unknown
2024-12-09 15:16:50 UTC	7929	IN	Data Raw: 62 6f 64 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 7d 0d 0a 0d 0a 23 77 69 64 65 43 65 6e 74 65 72 65 64 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 69 6e 6c 69 6e 65 53 65 74 4c 6f 63 61 6c 65 52 6f 77 49 64 2c 64 69 76 3a 65 6d 70 74 79 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 0d 0a 2e 66 6f 72 6d 49 6e 70 75 74 52 6f 77 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 Data Ascii: body {margin: 0;padding: 0;min-width: 100%;}img {height: auto;}#wideCenteredContainer {width: 100%;margin: 0;}.inlineSetLocaleRowId,div:empty {display: none}.formInputRow {margin-top: 1px;margin-bottom:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49851	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:49 UTC	902	OUT	GET /admin/cisco-fonts.min.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
2024-12-09 15:16:50 UTC	740	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:49 GMT Content-Type: text/css Content-Length: 2143 Connection: close Set-Cookie: AWSALB=KlNrrlYyMNNcSQ+3KHzw7tXVCQSxqHSZEpxIos7sAexgT587c6TMbiSewYFYaAJo5duI5HiNVD9Pa3wdwp7gipFYrcxLQpgq8O2Ek5JW/CiGWEXLL3E3FKNLJSwi; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/ Set-Cookie: AWSALBCORS=KlNrrlYyMNNcSQ+3KHzw7tXVCQSxqHSZEpxIos7sAexgT587c6TMbiSewYFYaAJo5duI5HiNVD9Pa3wdwp7gipFYrcxLQpgq8O2Ek5JW/CiGWEXLL3E3FKNLJSwi; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"2143-1730286400000" Last-Modified: Wed, 30 Oct 2024 11:06:40 GMT Server: unknown
2024-12-09 15:16:50 UTC	2143	IN	Data Raw: 0a 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 45 78 74 72 61 4c 69 67 68 74 2e 74 74 66 22 29 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");}@font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inter-ExtraLight.ttf")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	49852	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:49 UTC	1009	OUT	GET /websafe/templates/standard-scripts.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
2024-12-09 15:16:50 UTC	894	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:49 GMT Content-Type: application/javascript Content-Length: 18445 Connection: close Set-Cookie: AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/ Set-Cookie: AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-480d" Server: unknown
2024-12-09 15:16:50 UTC	8536	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 6e 4c 6f 61 64 50 61 67 65 28 29 0a 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 6e 64 20 75 6e 68 69 64 65 20 73 6f 6d 65 20 74 68 69 6e 67 73 2e 20 46 6f 72 20 6e 6f 77 20 77 65 20 61 73 73 75 6d 65 20 65 76 65 72 79 74 68 69 6e 67 20 74 68 61 74 20 6d 69 67 68 74 0a 20 20 20 20 2f 2f 20 6e 65 65 64 20 74 6f 20 62 65 20 74 6f 67 67 6c 65 64 20 69 73 20 61 20 64 69 76 20 6f 72 20 61 2e 0a 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 64 69 76 27 29 3b 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 61 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 20 53 65 74 20 74 68 65 20 66 6f 63 75 73 20 6f 6e 20 74 68 65 20 66 69 65 6c 64 20 69 64 65 6e 74 69 66 69 65 64 20 69 6e 20 6f 75 72 20 58 4d 4c Data Ascii: function onLoadPage(){ // Hide and unhide some things. For now we assume everything that might // need to be toggled is a div or a. toggleVisibility('div'); toggleVisibility('a'); // Set the focus on the field identified in our XML
2024-12-09 15:16:50 UTC	9000	IN	Data Raw: 6f 61 64 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 41 6e 79 4d 61 72 6b 65 64 43 6f 6e 74 72 6f 6c 43 68 61 6e 67 65 64 28 64 6f 63 75 6d 65 6e 74 2c 20 27 63 68 61 6e 67 65 61 62 6c 65 27 29 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 63 61 6c 65 55 49 27 29 2e 76 61 6c 75 65 20 3d 20 73 74 61 72 74 4c 61 6e 67 75 61 67 65 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 28 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 3b Data Ascii: oad) return; if (isAnyMarkedControlChanged(document, 'changeable')) { document.getElementById('localeUI').value = startLanguage; var e = (e \|\| window.event) if (e) e.returnValue = confirmationMessage;
2024-12-09 15:16:50 UTC	909	IN	Data Raw: 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 6e 63 6c 69 63 6b 4e 61 76 42 61 72 42 75 74 74 6f 6e 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 66 72 61 6d 65 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 63 72 6f 6c 6c 54 6f 54 6f 70 28 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 20 21 3d 20 30 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 20 21 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 42 79 28 30 2c 20 2d 31 30 29 3b 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 27 73 63 72 6f 6c 6c 54 6f 54 6f Data Ascii: () { onclickNavBarButton(); } document.body.appendChild(iframe);}function scrollToTop() { if (document.body.scrollTop != 0 \|\| document.documentElement.scrollTop != 0) { window.scrollBy(0, -10); setTimeout('scrollToTo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49853	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:49 UTC	1006	OUT	GET /websafe/templates/screen-reader.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj; AWSALBCORS=EOCTac44thxbVpBOsuWlvfkzyDahDeNmjP4UuTyF0h1jsqNEQ2muAz1a0T931g3gpoWf7xhkCBe9u31m9qFTpQBtbBZc77iVO97KY9JWT/p2TkKlX9P5YRe4wjSj
2024-12-09 15:16:50 UTC	892	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:49 GMT Content-Type: application/javascript Content-Length: 2111 Connection: close Set-Cookie: AWSALB=D0EF4xJZdRXQUSgdn+HqDnOk65Q5oLyT4W8Pisdme/1xXugETZO2dq3ZOnh0MFgimpqNQGJaAlqWOvkYyOB+DmR0C+cXZnR93LCjZPd/CmJUNJcZcg3Y0D3wGkFP; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/ Set-Cookie: AWSALBCORS=D0EF4xJZdRXQUSgdn+HqDnOk65Q5oLyT4W8Pisdme/1xXugETZO2dq3ZOnh0MFgimpqNQGJaAlqWOvkYyOB+DmR0C+cXZnR93LCjZPd/CmJUNJcZcg3Y0D3wGkFP; Expires=Mon, 16 Dec 2024 15:16:49 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-83f" Server: unknown
2024-12-09 15:16:50 UTC	2111	IN	Data Raw: 0d 0a 76 61 72 20 73 63 72 65 65 6e 52 65 61 64 65 72 43 61 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 73 65 72 74 46 6f 72 53 63 72 65 65 6e 52 65 61 64 65 72 28 74 65 78 74 29 7b 0d 0a 09 76 61 72 20 77 61 72 6e 69 6e 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 27 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 65 78 74 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 61 73 73 65 72 74 69 76 65 22 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e Data Ascii: var screenReaderCalled = false;function insertForScreenReader(text){var warning = document.getElementById('timeoutMessage');warning.innerHTML = text;warning.style.display = "none";warning.setAttribute("aria-live","assertive");warning.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.9	49855	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:49 UTC	722	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=qOOB6mxmSGECKq2rafced9MwAiibX7oHf3+5Mn/M+m8/DbGqAo2J0E10Ekw1jFFIT0eTFbayXABooXyy+GKVOX223rSFsuWKYDHB7/R6L09hGaKxXloboeM0utLa
2024-12-09 15:18:35 UTC	750	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:18:35 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=7tZTw6km/XsOdYh8QxlK86DsTJsxKZudxB64G/642XROoIO5e70xqg3cBHgvF+fJvMbbQX4M6PbDS96AWoUAgsoNRuG4H595/gWSuRscf1q01VkH7L94KXZfuyFf; Expires=Mon, 16 Dec 2024 15:16:50 GMT; Path=/ Set-Cookie: AWSALBCORS=7tZTw6km/XsOdYh8QxlK86DsTJsxKZudxB64G/642XROoIO5e70xqg3cBHgvF+fJvMbbQX4M6PbDS96AWoUAgsoNRuG4H595/gWSuRscf1q01VkH7L94KXZfuyFf; Expires=Mon, 16 Dec 2024 15:16:50 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-09 15:18:35 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-12-09 15:18:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49856	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:49 UTC	718	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=VOFqE3O50+H3/XSRxrs7McgH/xtYNO3SPOE6O8/I5WjXZyBMGjOqBXf/0Cbfd7aX8goqjQTqP+T4hLZELYTUni/TOrRdgjckGYjtRUJduZFBVseSUw2R8vi7EvEU
2024-12-09 15:18:35 UTC	750	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:18:35 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=J+3t8QR8eRM7Nh9EdBVofBSXUmAaa7Fx9TMbTugz1OPni7+m4clPeyiljhd5arLwmWxw4MUs/kb7pDXjiAfCNZ/TxyO4cgnVJLOBwBBWRlXrepNMfLKFVMWVF1k/; Expires=Mon, 16 Dec 2024 15:16:50 GMT; Path=/ Set-Cookie: AWSALBCORS=J+3t8QR8eRM7Nh9EdBVofBSXUmAaa7Fx9TMbTugz1OPni7+m4clPeyiljhd5arLwmWxw4MUs/kb7pDXjiAfCNZ/TxyO4cgnVJLOBwBBWRlXrepNMfLKFVMWVF1k/; Expires=Mon, 16 Dec 2024 15:16:50 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-09 15:18:35 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-12-09 15:18:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.9	49865	104.18.11.207	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:51 UTC	577	OUT	GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 15:16:52 UTC	952	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:51 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"269550530cc127b6aa5a35925a7de6ce" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/06/2024 01:22:44 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 925ce50056c053a76028b17f3f524940 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1145403 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ef5f5709e4d4367-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 15:16:52 UTC	417	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 Data Ascii: '../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{displa
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 Data Ascii: %{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359d
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 74 61 63 6b 2d 31 78 2c 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 Data Ascii: tack-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f00
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 Data Ascii: ore{content:"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:befor
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 Data Ascii: fore{content:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{c
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 65 79 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 Data Ascii: }.fa-eye-slash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:b
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b Data Ascii: -phone:before{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 3a 22 5c 66 30 63 36 22 7d 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 Data Ascii: :"\f0c6"}.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:be
2024-12-09 15:16:52 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 Data Ascii: :before{content:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	49864	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:51 UTC	758	OUT	GET /websafe/templates/screen-reader.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
2024-12-09 15:16:52 UTC	892	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:52 GMT Content-Type: application/javascript Content-Length: 2111 Connection: close Set-Cookie: AWSALB=uE0Xb46aRzg8kaElCddUslbpciShv5GoduIMnQ8ZokEo6pLThvVZ6zZJMTuWXfhFrgbuZFmpLyXIDqj6SeAhdWWqmslFLOx9Oh8Uj3iJ8/aLSZB2rGuGfBo1YZjq; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/ Set-Cookie: AWSALBCORS=uE0Xb46aRzg8kaElCddUslbpciShv5GoduIMnQ8ZokEo6pLThvVZ6zZJMTuWXfhFrgbuZFmpLyXIDqj6SeAhdWWqmslFLOx9Oh8Uj3iJ8/aLSZB2rGuGfBo1YZjq; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-83f" Server: unknown
2024-12-09 15:16:52 UTC	2111	IN	Data Raw: 0d 0a 76 61 72 20 73 63 72 65 65 6e 52 65 61 64 65 72 43 61 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 73 65 72 74 46 6f 72 53 63 72 65 65 6e 52 65 61 64 65 72 28 74 65 78 74 29 7b 0d 0a 09 76 61 72 20 77 61 72 6e 69 6e 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 27 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 65 78 74 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 61 73 73 65 72 74 69 76 65 22 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e Data Ascii: var screenReaderCalled = false;function insertForScreenReader(text){var warning = document.getElementById('timeoutMessage');warning.innerHTML = text;warning.style.display = "none";warning.setAttribute("aria-live","assertive");warning.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.9	49863	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:51 UTC	1067	OUT	GET /websafe/images/pullFeature/Help.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
2024-12-09 15:16:52 UTC	883	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:52 GMT Content-Type: image/svg+xml Content-Length: 1265 Connection: close Set-Cookie: AWSALB=yf2DMJYnMfWs5kp2KQAAlqsn0ERytaneZuazoSelD6ijxJyO+nzMhGyZiID7HyvbudfKwG1VdJc8s1Hbrm6DmT0RHLjdLHFsMWA8Rz7rgOo/5EgoIkNTlTZamrEd; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/ Set-Cookie: AWSALBCORS=yf2DMJYnMfWs5kp2KQAAlqsn0ERytaneZuazoSelD6ijxJyO+nzMhGyZiID7HyvbudfKwG1VdJc8s1Hbrm6DmT0RHLjdLHFsMWA8Rz7rgOo/5EgoIkNTlTZamrEd; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-4f1" Server: unknown
2024-12-09 15:16:52 UTC	1265	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 69 64 3d 22 61 22 0a 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 37 2e 38 37 35 20 37 2e 38 37 35 20 32 30 2e 32 35 20 32 30 2e 32 35 22 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 2e 62 2c 2e 63 7b 66 69 6c 6c 3a 23 66 37 66 37 66 37 3b 7d 2e 63 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg height="20px" width="20px" id="a" xmlns="http://www.w3.org/2000/svg" viewBox="7.875 7.875 20.25 20.25"> <defs> <style>.b,.c{fill:#f7f7f7;}.c{fill-rule:evenodd;}</style> </defs> <path clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.9	49861	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:51 UTC	1009	OUT	GET /websafe/templates/jquery-3.7.1.min.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
2024-12-09 15:16:52 UTC	895	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:52 GMT Content-Type: application/javascript Content-Length: 87533 Connection: close Set-Cookie: AWSALB=qT/ly59hBqNm8Qe0xKGTWc6c49HE7VOqIOjFVm4bv68ru3i2W+EVOWLmGD2ZJ292hu71BwVEuiHX0a+WxW8OfzP1uX/aPpg1OyfAayAnXiod+yzoDj47h4cjPGMh; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/ Set-Cookie: AWSALBCORS=qT/ly59hBqNm8Qe0xKGTWc6c49HE7VOqIOjFVm4bv68ru3i2W+EVOWLmGD2ZJ292hu71BwVEuiHX0a+WxW8OfzP1uX/aPpg1OyfAayAnXiod+yzoDj47h4cjPGMh; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-155ed" Server: unknown
2024-12-09 15:16:52 UTC	8535	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 6e 63 74 69 6f 6e 20 56 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 79 65 3b 72 65 74 75 72 6e 20 6e 21 3d 54 26 26 39 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 72 3d 28 54 3d 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 43 3d 21 63 65 2e 69 73 58 4d 4c 44 6f 63 28 54 29 2c 69 3d 72 2e 6d 61 74 63 68 65 73 7c 7c 72 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 2c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 Data Ascii: nction V(e){var t,n=e?e.ownerDocument\|\|e:ye;return n!=T&&9===n.nodeType&&n.documentElement&&(r=(T=n).documentElement,C=!ce.isXMLDoc(T),i=r.matches\|\|r.webkitMatchesSelector\|\|r.msMatchesSelector,r.msMatchesSelector&&ye!=T&&(t=T.defaultView)&&t.top!==t&&t.ad
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 73 5d 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 63 29 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 21 31 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 5b 45 2c 66 5d 3b 69 66 28 6e 29 7b 77 68 69 6c 65 28 65 3d 65 5b 73 5d 29 69 66 28 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 63 29 26 26 61 28 65 2c 74 2c 6e 29 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 77 68 69 6c 65 28 65 3d 65 5b 73 5d 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 63 29 69 66 28 69 3d 65 5b 53 5d 7c 7c 28 65 5b 53 5d 3d 7b 7d 29 2c 75 26 26 66 65 28 65 2c 75 29 29 65 3d 65 5b 73 5d 7c 7c 65 3b 65 6c 73 65 7b 69 66 28 28 72 3d 69 5b 6c 5d 29 26 26 72 5b 30 5d 3d 3d 3d 45 26 26 72 5b 31 Data Ascii: s])if(1===e.nodeType\|\|c)return a(e,t,n);return!1}:function(e,t,n){var r,i,o=[E,f];if(n){while(e=e[s])if((1===e.nodeType\|\|c)&&a(e,t,n))return!0}else while(e=e[s])if(1===e.nodeType\|\|c)if(i=e[S]\|\|(e[S]={}),u&&fe(e,u))e=e[s]\|\|e;else{if((r=i[l])&&r[0]===E&&r[1
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 70 65 6e 64 69 6e 67 22 2c 61 3d 7b 73 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 61 6c 77 61 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 64 6f 6e 65 28 61 72 67 75 6d 65 6e 74 73 29 2e 66 61 69 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 7d 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 65 6e 28 6e 75 6c 6c 2c 65 29 7d 2c 70 69 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 63 65 2e 44 65 66 65 72 72 65 64 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 63 65 2e 65 61 63 68 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 76 28 69 5b 74 5b 34 5d 5d 29 26 26 69 5b 74 Data Ascii: pending",a={state:function(){return i},always:function(){return s.done(arguments).fail(arguments),this},"catch":function(e){return a.then(null,e)},pipe:function(){var i=arguments;return ce.Deferred(function(r){ce.each(o,function(e,t){var n=v(i[t[4]])&&i[t
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 74 61 62 6c 65 3e 3c 74 62 6f 64 79 3e 3c 74 72 3e 22 2c 22 3c 2f 74 72 3e 3c 2f 74 62 6f 64 79 3e 3c 2f 74 61 62 6c 65 3e 22 5d 2c 5f 64 65 66 61 75 6c 74 3a 5b 30 2c 22 22 2c 22 22 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 7c 7c 22 2a 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 3f 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 7c 7c 22 2a 22 29 3a 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 26 26 66 Data Ascii: table><tbody><tr>","</tr></tbody></table>"],_default:[0,"",""]};function Se(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t\|\|""):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t\|\|""):[],void 0===t\|\|t&&f
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 64 28 7b 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 4c 65 28 74 68 69 73 2c 65 2c 74 2c 6e 2c 72 29 7d 2c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 4c 65 28 74 68 69 73 2c 65 2c 74 2c 6e 2c 72 2c 31 29 7d 2c 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3b 69 66 28 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 68 61 6e 64 6c 65 4f 62 6a 29 72 65 74 75 72 6e 20 72 3d 65 2e 68 61 6e 64 6c 65 4f 62 6a 2c 63 65 28 65 2e 64 65 6c 65 67 61 74 65 54 61 72 67 65 74 29 2e 6f 66 66 28 72 2e 6e 61 6d 65 73 70 61 63 65 3f 72 2e 6f 72 69 67 54 79 70 65 2b 22 2e 22 2b 72 2e 6e 61 6d 65 73 70 61 63 65 3a 72 2e 6f 72 69 67 54 79 Data Ascii: d({on:function(e,t,n,r){return Le(this,e,t,n,r)},one:function(e,t,n,r){return Le(this,e,t,n,r,1)},off:function(e,t,n){var r,i;if(e&&e.preventDefault&&e.handleObj)return r=e.handleObj,ce(e.delegateTarget).off(r.namespace?r.origType+"."+r.namespace:r.origTy
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 72 6f 6b 65 4d 69 74 65 72 6c 69 6d 69 74 3a 21 30 2c 73 74 72 6f 6b 65 4f 70 61 63 69 74 79 3a 21 30 7d 2c 63 73 73 50 72 6f 70 73 3a 7b 7d 2c 73 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 65 26 26 33 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 38 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 74 79 6c 65 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 3d 46 28 74 29 2c 75 3d 7a 65 2e 74 65 73 74 28 74 29 2c 6c 3d 65 2e 73 74 79 6c 65 3b 69 66 28 75 7c 7c 28 74 3d 5a 65 28 73 29 29 2c 61 3d 63 65 2e 63 73 73 48 6f 6f 6b 73 5b 74 5d 7c 7c 63 65 2e 63 73 73 48 6f 6f 6b 73 5b 73 Data Ascii: ,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeMiterlimit:!0,strokeOpacity:!0},cssProps:{},style:function(e,t,n,r){if(e&&3!==e.nodeType&&8!==e.nodeType&&e.style){var i,o,a,s=F(t),u=ze.test(t),l=e.style;if(u\|\|(t=Ze(s)),a=ce.cssHooks[t]\|\|ce.cssHooks[s
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 73 29 3a 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 67 74 28 72 2c 21 30 29 2c 65 2c 74 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 73 6c 69 64 65 44 6f 77 6e 3a 67 74 28 22 73 68 6f 77 22 29 2c 73 6c 69 64 65 55 70 3a 67 74 28 22 68 69 64 65 22 29 2c 73 6c 69 64 65 54 6f 67 67 6c 65 3a 67 74 28 22 74 6f 67 67 6c 65 22 29 2c 66 61 64 65 49 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 7d 2c 66 61 64 65 4f 75 74 3a 7b 6f 70 61 63 69 74 79 3a 22 68 69 64 65 22 7d 2c 66 61 64 65 54 6f 67 67 6c 65 3a 7b 6f 70 61 63 69 74 79 3a 22 74 6f 67 67 6c 65 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 72 2c 65 2c 74 2c 6e Data Ascii: s):this.animate(gt(r,!0),e,t,n)}}),ce.each({slideDown:gt("show"),slideUp:gt("hide"),slideToggle:gt("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,r){ce.fn[e]=function(e,t,n){return this.animate(r,e,t,n
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 6e 5d 2c 74 2c 69 29 3b 72 65 74 75 72 6e 20 72 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 73 65 72 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 65 2e 70 61 72 61 6d 28 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 28 29 29 7d 2c 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 70 72 6f 70 28 74 68 69 73 2c 22 65 6c 65 6d 65 6e 74 73 22 29 3b 72 65 74 75 72 6e 20 65 3f 63 65 2e 6d 61 6b 65 41 72 72 61 79 28 65 29 3a 74 68 69 73 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 74 79 70 65 3b 72 65 Data Ascii: n],t,i);return r.join("&")},ce.fn.extend({serialize:function(){return ce.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var e=ce.prop(this,"elements");return e?ce.makeArray(e):this}).filter(function(){var e=this.type;re
2024-12-09 15:16:52 UTC	6998	IN	Data Raw: 6f 61 64 3d 6f 28 29 2c 61 3d 72 2e 6f 6e 65 72 72 6f 72 3d 72 2e 6f 6e 74 69 6d 65 6f 75 74 3d 6f 28 22 65 72 72 6f 72 22 29 2c 76 6f 69 64 20 30 21 3d 3d 72 2e 6f 6e 61 62 6f 72 74 3f 72 2e 6f 6e 61 62 6f 72 74 3d 61 3a 72 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 72 2e 72 65 61 64 79 53 74 61 74 65 26 26 69 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 61 28 29 7d 29 7d 2c 6f 3d 6f 28 22 61 62 6f 72 74 22 29 3b 74 72 79 7b 72 2e 73 65 6e 64 28 69 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 69 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 65 7d 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 Data Ascii: oad=o(),a=r.onerror=r.ontimeout=o("error"),void 0!==r.onabort?r.onabort=a:r.onreadystatechange=function(){4===r.readyState&&ie.setTimeout(function(){o&&a()})},o=o("abort");try{r.send(i.hasContent&&i.data\|\|null)}catch(e){if(o)throw e}},abort:function(){o&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.9	49866	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:52 UTC	761	OUT	GET /websafe/templates/standard-scripts.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
2024-12-09 15:16:52 UTC	894	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:52 GMT Content-Type: application/javascript Content-Length: 18445 Connection: close Set-Cookie: AWSALB=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/ Set-Cookie: AWSALBCORS=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-480d" Server: unknown
2024-12-09 15:16:52 UTC	8536	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 6e 4c 6f 61 64 50 61 67 65 28 29 0a 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 6e 64 20 75 6e 68 69 64 65 20 73 6f 6d 65 20 74 68 69 6e 67 73 2e 20 46 6f 72 20 6e 6f 77 20 77 65 20 61 73 73 75 6d 65 20 65 76 65 72 79 74 68 69 6e 67 20 74 68 61 74 20 6d 69 67 68 74 0a 20 20 20 20 2f 2f 20 6e 65 65 64 20 74 6f 20 62 65 20 74 6f 67 67 6c 65 64 20 69 73 20 61 20 64 69 76 20 6f 72 20 61 2e 0a 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 64 69 76 27 29 3b 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 61 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 20 53 65 74 20 74 68 65 20 66 6f 63 75 73 20 6f 6e 20 74 68 65 20 66 69 65 6c 64 20 69 64 65 6e 74 69 66 69 65 64 20 69 6e 20 6f 75 72 20 58 4d 4c Data Ascii: function onLoadPage(){ // Hide and unhide some things. For now we assume everything that might // need to be toggled is a div or a. toggleVisibility('div'); toggleVisibility('a'); // Set the focus on the field identified in our XML
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 6f 61 64 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 41 6e 79 4d 61 72 6b 65 64 43 6f 6e 74 72 6f 6c 43 68 61 6e 67 65 64 28 64 6f 63 75 6d 65 6e 74 2c 20 27 63 68 61 6e 67 65 61 62 6c 65 27 29 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 63 61 6c 65 55 49 27 29 2e 76 61 6c 75 65 20 3d 20 73 74 61 72 74 4c 61 6e 67 75 61 67 65 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 28 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 3b Data Ascii: oad) return; if (isAnyMarkedControlChanged(document, 'changeable')) { document.getElementById('localeUI').value = startLanguage; var e = (e \|\| window.event) if (e) e.returnValue = confirmationMessage;
2024-12-09 15:16:52 UTC	909	IN	Data Raw: 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 6e 63 6c 69 63 6b 4e 61 76 42 61 72 42 75 74 74 6f 6e 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 66 72 61 6d 65 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 63 72 6f 6c 6c 54 6f 54 6f 70 28 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 20 21 3d 20 30 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 20 21 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 42 79 28 30 2c 20 2d 31 30 29 3b 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 27 73 63 72 6f 6c 6c 54 6f 54 6f Data Ascii: () { onclickNavBarButton(); } document.body.appendChild(iframe);}function scrollToTop() { if (document.body.scrollTop != 0 \|\| document.documentElement.scrollTop != 0) { window.scrollBy(0, -10); setTimeout('scrollToTo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.9	49869	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:52 UTC	875	OUT	GET /admin/fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn; AWSALBCORS=luUODDVQrRiaSU/M1QoYMijcTohWgDh+wzvqGbXRTwoAojWAzoRwXMUl7QhCU7hN0QTeE1LfJS38MOcTtx6Xh4ffL+QRWM8klZTgH3pSAV0VMtOW7lQPRcFkHOQn
2024-12-09 15:16:52 UTC	720	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:52 GMT Content-Length: 303504 Connection: close Set-Cookie: AWSALB=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/ Set-Cookie: AWSALBCORS=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY; Expires=Mon, 16 Dec 2024 15:16:52 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"303504-1730286400000" Last-Modified: Wed, 30 Oct 2024 11:06:40 GMT Server: unknown
2024-12-09 15:16:52 UTC	8710	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 00 00 00 07 06 6d fe fc 02 00 ff ff 00 c8 00 00 03 f4 08 00 00 27 00 c5 02 04 00 00 00 06 09 9e 2c 00 ff ff 01 58 00 00 03 a4 08 94 00 27 00 c5 01 b4 00 00 00 06 09 a0 2c 00 ff ff 00 f8 00 00 01 f0 08 00 02 06 00 c5 00 00 ff ff ff b4 00 00 03 34 0a 40 02 26 00 c5 00 00 00 07 06 68 fe 34 02 00 00 03 00 88 00 00 04 58 08 00 00 03 00 07 00 0b 00 00 13 35 21 15 01 35 21 15 01 11 23 11 88 03 d0 fc 30 03 d0 fe 94 f8 07 24 dc dc f8 dc dc dc 08 00 f8 00 08 00 ff ff 00 88 00 00 04 58 0a 40 02 26 00 e9 00 00 00 07 06 69 ff 30 00 18 ff ff 00 88 00 00 04 58 0b a0 02 26 00 e9 00 00 00 07 08 08 04 78 00 00 ff ff 00 88 00 00 04 58 08 00 02 26 00 e9 00 00 00 06 07 fe f8 40 ff ff 00 88 fe 04 04 ac 08 00 02 26 00 e9 00 00 00 07 06 90 05 d0 00 00 ff ff 00 88 00 00 04 58 0a Data Ascii: m',X',4@&h4X5!5!#0$X@&i0X&xX&@&X
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 00 00 00 07 06 80 06 d8 02 24 ff ff 00 48 00 00 07 08 0a 34 02 26 01 d5 00 00 00 07 06 6b 00 e8 02 00 00 02 00 08 00 00 07 50 08 00 00 03 00 0d 00 00 01 15 21 35 13 21 01 33 01 21 01 11 23 11 07 50 f8 b8 40 01 1c 02 38 18 02 38 01 1c fd 1c f8 06 5c a4 a4 01 a4 fc 44 03 bc fb 4c fc b4 03 4c ff ff 00 48 00 00 07 08 08 00 02 06 01 d5 00 00 ff ff 00 48 00 00 08 ac 08 80 00 27 01 d5 01 a4 00 00 00 07 06 67 ff 68 00 00 ff ff 00 48 00 00 07 08 0a 40 02 06 01 d9 00 00 ff ff 00 4c 00 00 08 a8 08 00 00 27 01 d5 01 a0 00 00 00 06 09 a2 88 00 ff ff 00 4c 00 00 0a 54 08 00 00 27 01 d5 03 4c 00 00 00 07 09 95 ff 5c 00 00 ff ff 00 48 00 00 0a e8 08 00 00 27 01 d5 03 e0 00 00 00 07 09 97 ff 7c 00 00 ff ff 00 48 00 00 0a 24 09 44 00 27 01 d5 03 1c 00 00 00 06 09 99 cc 30 Data Ascii: $H4&kP!5!3!#P@88\DLLHH'ghH@L'LT'L\H'\|H$D'0
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 23 11 34 26 23 22 06 06 04 ac ec 3d 6e 91 54 24 49 1b 0f 28 15 60 80 fd 10 e4 3d 6e 91 54 24 49 1b 0f 28 15 40 69 3f 08 ec e4 14 36 dc ae 9c ea 82 ec bc a4 71 b1 66 a4 63 99 6a 36 03 09 c8 03 05 58 78 06 a4 80 63 99 6a 36 03 09 c8 03 05 25 5b 50 fd 1c fc 64 06 00 f0 75 8f 7f fe ff c4 fc 30 03 c0 b5 cb 62 bc 00 02 00 d8 ff e4 09 90 08 00 00 16 00 2c 00 00 33 11 33 11 33 36 36 33 32 16 12 15 15 23 35 34 26 23 22 06 06 15 11 05 22 26 02 35 35 33 15 14 16 16 33 32 36 12 11 35 33 15 10 02 00 d8 ec 14 36 d9 b5 9d ec 83 ec bd a7 74 b7 69 04 f8 8e e9 89 ec 60 89 3b 7d d7 84 ec c0 fe b8 08 00 fd 10 77 8d 7d fe ff c6 d0 c0 b7 c9 62 bc 86 fc 64 1c 85 01 1a dd a0 a0 b4 b8 40 dc 01 f8 01 a8 d0 d0 fe 20 fd aa fe ea 00 01 00 d8 fe 00 05 a8 06 00 00 16 00 00 01 11 33 11 Data Ascii: #4&#"=nT$I(`=nT$I(@i?6qfcj6Xxcj6%[Pdu0b,3336632#54&#""&553326536ti`;}w}bd@ 3
2024-12-09 15:16:52 UTC	9000	IN	Data Raw: 91 6e 3d ec 3b 65 40 15 28 0f 1b 49 fe 4c e4 10 29 dc 8b 40 60 24 50 19 43 2c 70 af 65 fd c0 36 6a 99 63 a4 a4 50 5b 25 05 03 c8 09 03 02 40 06 00 e8 72 8e 1e 1a c8 0d 0f 5e a2 68 fc 34 ff ff ff 98 00 00 04 20 06 18 02 26 03 56 00 00 00 07 07 fe fe d8 ff 00 00 02 00 d8 fd c0 04 20 06 18 00 03 00 17 00 00 13 11 33 11 03 11 33 15 33 36 36 33 32 16 17 07 26 26 23 22 06 06 15 11 d8 ec ec e4 10 29 dc 8b 40 60 24 50 19 43 2c 70 af 65 fd c0 02 40 fd c0 02 40 06 00 e8 72 8e 1e 1a c8 0d 0f 5e a2 68 fc 34 ff ff 00 d8 00 00 04 20 08 a0 02 26 03 56 00 00 00 06 06 64 a8 00 ff ff 00 62 fd 58 04 20 06 18 02 26 03 56 00 00 00 06 06 77 cc 00 ff ff 00 94 00 00 04 20 08 68 02 26 03 56 00 00 00 06 06 73 c4 00 ff ff ff c4 00 00 04 20 08 a0 02 26 03 56 00 00 00 07 06 7b 04 cc Data Ascii: n=;e@(IL)@`$PC,pe6jcP[%@r^h4 &V 3336632&&#")@`$PC,pe@@r^h4 &VdbX &Vw h&Vs &V{
2024-12-09 15:16:53 UTC	9000	IN	Data Raw: 01 21 01 0e 02 23 01 64 80 4a 65 43 16 20 fd 3c 01 0c 02 34 02 04 01 08 fd 3c 2a 6b b7 9c 1c e8 3a 5c 32 4c 06 20 fb 08 04 f8 f9 4c 60 a4 64 00 03 00 a8 ff ac 08 0c 08 24 00 11 00 23 00 27 00 00 01 21 32 04 12 15 14 02 04 23 21 22 24 02 35 34 12 24 17 22 06 02 15 14 12 16 33 21 32 36 12 35 34 02 26 23 03 11 23 11 03 b8 01 44 e4 01 62 ca ca fe 9e e4 fe bc e4 fe 9e ca ca 01 62 e4 ae ef 7b 7b ef ae 01 44 ae ef 7b 7b ef ae 24 f8 07 0c cc fe 94 f0 f0 fe 92 ce cc 01 6c f0 f0 01 6e ce dc 92 fe f6 b4 b2 fe f8 92 92 01 0a b4 b2 01 08 92 01 f4 f7 88 08 78 00 02 00 f8 fe 1c 07 c4 08 00 00 05 00 0d 00 00 25 03 21 11 23 35 05 11 33 11 21 11 33 11 07 c4 1c ff 00 90 fa e0 ec 04 20 ec ec fd 30 01 e4 ec ec 08 00 f8 e4 07 1c f8 00 00 03 00 88 fe 1c 09 6c 08 00 00 03 00 09 Data Ascii: !#dJeC <4<*k:\2L L`d$#'!2#!"$54$"3!2654&##Dbb{{D{{$lnx%!#53!3 0l
2024-12-09 15:16:53 UTC	9000	IN	Data Raw: 02 26 04 9d 00 00 00 27 09 89 03 3c 00 00 00 07 09 9d 02 88 00 94 ff ff 00 94 fd 58 08 58 06 00 02 26 04 9d 00 00 00 07 09 89 03 3c 00 00 ff ff 00 94 fd 58 08 58 08 94 02 26 04 9d 00 00 00 27 09 89 03 3c 00 00 00 07 09 9f 02 fc 00 00 ff ff 00 94 ff e4 08 58 08 dc 02 26 04 9d 00 00 00 07 09 8b 01 fc 00 00 ff ff 00 94 fd 58 08 58 08 dc 02 26 04 9d 00 00 00 27 09 89 03 3c 00 00 00 07 09 8b 01 fc 00 00 00 01 00 60 fd a0 06 2c 06 00 00 1f 00 00 01 22 26 35 34 36 36 37 01 21 01 06 06 15 14 16 33 32 36 35 34 26 27 01 21 01 1e 02 15 14 06 03 44 ae ca 13 21 14 03 14 01 04 fd 50 4e 62 42 36 36 42 55 57 fd 50 01 04 03 18 18 18 08 c2 fd a0 ae a0 1f 4d 52 28 06 2c fa 80 a2 af 41 2e 3c 3f 2b 3e af b1 05 74 f9 d4 30 56 47 19 a0 ae 00 02 00 90 ff e0 05 ec 08 40 00 20 00 Data Ascii: &'<XX&<XX&'<X&XX&'<`,"&54667!32654&'!D!PNbB66BUWPMR(,A.<?+>t0VG@
2024-12-09 15:16:53 UTC	9000	IN	Data Raw: fe f7 c3 a7 fe f7 98 00 02 00 a4 00 00 06 6c 08 00 00 09 00 0f 00 00 13 35 01 33 11 23 01 15 21 15 01 11 35 11 33 11 a4 03 84 94 64 fd 58 04 bc fd fc ec 01 a4 cc 05 90 fe c4 fb cc 10 dc fe 5c 01 e2 5f 05 bf f8 00 00 01 00 d8 ff e4 05 f8 08 00 00 24 00 00 05 22 24 26 27 33 16 16 33 32 36 36 35 34 26 26 27 26 06 07 27 13 21 15 21 03 33 36 36 33 32 04 12 15 14 02 04 03 54 b0 fe e6 aa 08 f0 0e e1 9d 7e c5 71 75 cc 83 5e c6 40 e8 7c 04 28 fc a8 48 0c 3f be 67 bc 01 27 a9 af fe ce 1c 8c f4 9c 8b b5 76 cf 83 86 d3 7a 01 01 3b 2e 1c 03 f0 dc fd a4 32 42 b3 fe ca c7 c4 fe cd b1 00 02 00 5c ff e4 05 f8 08 00 00 03 00 28 00 00 01 15 21 35 01 22 24 26 27 33 16 16 33 32 36 36 35 34 26 26 27 26 06 07 27 13 21 15 21 03 33 36 36 33 32 04 12 15 14 02 04 02 18 fe 44 02 f8 Data Ascii: l53#!53dX\_$"$&'3326654&&'&'!!36632T~qu^@\|(H?g'vz;.2B\(!5"$&'3326654&&'&'!!36632D
2024-12-09 15:16:53 UTC	9000	IN	Data Raw: 80 01 40 05 20 02 e0 70 fe 00 70 02 a0 fd 60 02 70 70 70 fe d0 70 70 fe c0 02 e0 fd 90 70 00 05 00 80 05 20 07 a0 08 00 00 09 00 10 00 14 00 18 00 1c 00 00 13 11 21 15 21 15 21 15 21 11 21 01 33 01 23 03 03 37 35 21 15 17 01 33 01 21 01 33 01 80 01 a8 fe d8 01 00 ff 00 01 22 01 2c 74 01 28 80 e4 e0 10 01 a0 c4 01 f4 8e fe 0a 01 6e fe 0a 8e 01 f4 05 20 02 e0 70 d8 70 fe d8 02 e0 fd 20 02 48 fd b8 ac 68 68 ac 02 e0 fd 20 02 e0 fd 20 00 05 00 80 05 20 06 48 08 00 00 06 00 0a 00 0e 00 12 00 28 00 00 01 01 33 13 13 33 01 21 11 33 11 21 11 33 11 33 11 33 11 23 35 33 32 36 35 35 34 26 23 23 35 33 32 16 16 15 15 14 06 06 23 01 de fe ba 84 e4 e4 84 fe ba fe 5e 80 02 00 80 80 80 48 d4 51 6b 6b 51 d8 d8 58 8f 55 55 8f 58 05 20 02 e0 fd e4 02 1c fd 20 02 e0 fd 20 02 Data Ascii: @ pp`pppppp !!!!!3#75!3!3",t(n pp Hhh H(33!3!333#5326554&##532#^HQkkQXUUX
2024-12-09 15:16:53 UTC	7384	IN	Data Raw: 00 00 26 06 3e 00 c0 00 07 06 25 06 86 00 00 ff ff 00 5c 00 00 07 e0 08 00 00 27 06 29 03 2c 00 00 00 06 06 3a fc c0 ff ff 00 48 ff f0 09 64 08 00 00 27 06 29 02 b0 00 00 00 26 06 40 00 c0 00 07 06 27 05 74 00 00 ff ff 00 60 ff f0 09 e4 08 00 00 27 06 29 03 30 00 00 00 26 06 3a 00 c0 00 07 06 27 05 f4 00 00 ff ff 00 74 ff f0 0a 94 08 00 00 27 06 29 03 e0 00 00 00 26 06 3e 00 c0 00 07 06 27 06 a4 00 00 ff ff 00 68 ff f0 0a 9c 08 10 00 27 06 29 03 e8 00 00 00 26 06 3c 00 c0 00 07 06 27 06 ac 00 00 00 05 00 ec ff e4 08 04 08 1c 00 11 00 1f 00 31 00 3f 00 43 00 00 01 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 01 35 34 36 36 33 32 16 16 15 15 14 06 06 23 22 26 26 37 15 14 16 33 32 36 35 35 34 26 23 22 06 03 01 Data Ascii: &>%\'),:Hd')&@'t`')0&:'t')&>'h')&<'1?C546632#"&&7326554&#"546632#"&&7326554&#"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.9	49873	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:53 UTC	872	OUT	GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=yf2DMJYnMfWs5kp2KQAAlqsn0ERytaneZuazoSelD6ijxJyO+nzMhGyZiID7HyvbudfKwG1VdJc8s1Hbrm6DmT0RHLjdLHFsMWA8Rz7rgOo/5EgoIkNTlTZamrEd; AWSALBCORS=yf2DMJYnMfWs5kp2KQAAlqsn0ERytaneZuazoSelD6ijxJyO+nzMhGyZiID7HyvbudfKwG1VdJc8s1Hbrm6DmT0RHLjdLHFsMWA8Rz7rgOo/5EgoIkNTlTZamrEd
2024-12-09 15:16:54 UTC	720	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:53 GMT Content-Length: 309772 Connection: close Set-Cookie: AWSALB=639NyQQqpa/19YDxCWwNO1KjNQdjPh3iDMHiOad50jK/BoWa+InoNaj/AV9+YvpGzHMMH3PQNeRLYpWCzF+uYL8R1gyReN2aQsShoSo10b2qJTqp501hnhfJ5WS8; Expires=Mon, 16 Dec 2024 15:16:53 GMT; Path=/ Set-Cookie: AWSALBCORS=639NyQQqpa/19YDxCWwNO1KjNQdjPh3iDMHiOad50jK/BoWa+InoNaj/AV9+YvpGzHMMH3PQNeRLYpWCzF+uYL8R1gyReN2aQsShoSo10b2qJTqp501hnhfJ5WS8; Expires=Mon, 16 Dec 2024 15:16:53 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"309772-1730286400000" Last-Modified: Wed, 30 Oct 2024 11:06:40 GMT Server: unknown
2024-12-09 15:16:54 UTC	8710	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 00 27 00 c5 02 ac 00 00 00 06 09 92 17 30 ff ff 00 a2 00 00 05 36 09 55 00 27 00 c5 02 d2 00 00 00 06 09 99 17 30 ff ff ff 9e 00 00 03 7b 0a 18 02 26 00 c5 00 00 00 07 06 6e fe e5 02 00 ff ff ff a5 00 00 03 73 0a 00 02 26 00 c5 00 00 00 07 06 6d fe 71 02 00 ff ff 00 a6 00 00 04 5b 08 00 00 27 00 c5 01 f8 00 00 00 06 09 9e da 00 ff ff 00 bc 00 00 04 3b 08 94 00 27 00 c5 01 d8 00 00 00 06 09 a0 92 00 ff ff 00 b2 00 00 02 63 08 00 02 06 00 c5 00 00 ff ff ff 89 00 00 03 8f 0a 69 02 26 00 c5 00 00 00 07 06 68 fe 9b 02 00 00 03 00 64 00 00 04 e3 08 00 00 03 00 07 00 0b 00 00 13 11 21 11 01 11 21 11 01 11 21 11 64 04 7f fb 81 04 7f fe 99 fe 4f 06 9b 01 65 fe 9b f9 65 01 65 fe 9b 08 00 f8 00 08 00 ff ff 00 64 00 00 04 e3 0a 69 02 26 00 e9 00 00 00 06 06 69 b4 24 Data Ascii: '06U'0{&ns&mq[';'ci&hd!!!dOeeedi&i$
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 53 55 76 76 55 53 79 79 53 55 76 76 55 53 79 ff ff 00 3a 00 00 07 be 0a 00 02 26 01 d5 00 00 00 07 06 6d 00 e1 02 00 ff ff 00 3a 00 00 07 be 0a 75 02 26 01 d5 00 00 00 07 06 70 02 62 02 00 ff ff 00 3a 00 00 07 be 0a 8d 02 26 01 d5 00 00 00 07 06 66 00 aa 02 00 ff ff 00 3a fd c1 07 be 08 00 02 26 01 d5 00 00 00 07 06 8b 07 02 00 00 ff ff 00 3a 00 00 07 be 0b 07 02 26 01 d5 00 00 00 07 06 80 07 a4 02 0a ff ff 00 3a 00 00 07 be 0a 51 02 26 01 d5 00 00 00 07 06 6b 01 3c 02 00 00 02 00 19 00 00 07 e2 08 00 00 03 00 0d 00 00 01 15 21 35 13 21 01 33 01 21 01 11 21 11 07 e2 f8 37 21 01 e5 01 d3 14 01 d3 01 e5 fd 15 fe 52 06 55 de de 01 ab fc 8e 03 72 fa d4 fd 2c 02 d4 ff ff 00 3a 00 00 07 be 08 00 02 06 01 d5 00 00 ff ff 00 22 00 00 09 f2 08 93 00 27 01 d5 02 34 Data Ascii: SUvvUSyySUvvUSy:&m:u&pb:&f:&:&:Q&k<!5!3!!7!RUr,:"'4
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: c6 fe 56 01 9e 12 34 e8 af a0 ef 85 01 fe 56 01 91 82 57 85 4b fd 30 03 e5 5e 8d bb 6d 2d 09 05 01 45 03 05 3d 5a 03 d6 fc 88 08 00 fc f1 88 9b 8b fe fd b4 fc 2e 03 86 8e 9e 4a 8d 02 94 fb fb 00 02 00 aa 00 00 06 32 08 1c 00 12 00 29 00 00 01 21 35 34 3e 02 33 32 16 17 11 26 26 23 22 06 06 15 13 11 21 11 21 11 33 36 36 33 32 16 12 15 11 21 11 36 26 23 22 06 06 02 40 fe 6a 58 95 b9 62 4b 68 27 19 33 1d 36 69 44 14 fe 56 01 96 12 33 f0 ab a0 ee 84 fe 56 01 92 80 56 83 49 06 00 3d 95 bb 67 28 09 05 fe bb 03 05 19 40 3b fd 3b fc 88 06 00 fe f1 86 9d 8c fe fd b3 fc 2e 03 86 8d 9f 4a 8d 00 03 00 aa fd c0 06 32 08 1c 00 11 00 24 00 3b 00 00 21 21 15 14 0e 02 23 22 26 27 11 16 16 33 32 36 35 01 21 35 34 3e 02 33 32 16 17 11 26 26 23 22 06 06 15 13 11 21 11 21 11 Data Ascii: V4VWK0^m-E=Z.J2)!54>32&&#"!!36632!6&#"@jXbKh'36iDV3VVI=g(@;;.J2$;!!#"&'3265!54>32&&#"!!
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 05 20 51 4b 00 02 00 aa fd c0 04 4e 06 16 00 03 00 17 00 00 13 11 21 11 01 11 21 11 33 36 36 33 32 16 17 11 26 26 23 22 06 06 15 11 aa 01 aa fe 56 01 9d 10 2a c6 81 20 4a 1c 1e 6a 2c 5e 93 55 fd c0 02 40 fd c0 02 40 06 00 fe f4 8f 93 08 07 fe 86 09 0e 51 90 5e fc 9b ff ff 00 aa 00 00 04 4e 08 8d 02 26 03 45 00 00 00 06 06 64 c7 00 ff ff 00 43 fd 70 04 4e 06 16 02 26 03 45 00 00 00 06 06 77 01 00 ff ff 00 42 00 00 04 aa 08 7e 02 26 03 45 00 00 00 07 06 73 ff 62 00 00 ff ff ff be 00 00 04 4e 08 8d 02 26 03 45 00 00 00 07 06 7b 05 70 00 00 ff ff 00 84 00 00 04 64 08 96 02 26 03 45 00 00 00 07 06 7f 05 dd 00 c2 ff ff 00 aa 00 00 04 4e 08 75 02 26 03 45 00 00 00 07 06 70 00 dc 00 00 ff ff 00 9a fd c1 04 4e 06 16 02 26 03 45 00 00 00 07 06 8b 04 87 00 00 ff ff Data Ascii: QKN!!36632&&#"V* Jj,^U@@Q^N&EdCpN&EwB~&EsbN&E{pd&ENu&EpN&E
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 35 34 26 26 23 22 06 06 07 21 36 12 24 33 32 04 12 07 16 06 07 15 16 16 07 16 02 04 03 9b e0 fe a3 c9 03 01 b4 04 5b 98 5f 63 98 56 5b a9 74 bf bf 62 97 54 49 83 57 58 92 58 03 fe 61 03 c4 01 4d d2 d4 01 3e b1 01 01 d7 ac e2 ed 01 01 cb fe 9c 1c 9b 01 11 b3 4b 71 3e 46 7c 51 52 7f 48 01 3e 44 79 51 4d 75 42 3f 74 4e b1 01 0e 99 9a fe fb a2 ac e6 1f 10 1d ff bf af fe f0 9c 00 01 00 b2 00 00 07 a2 08 00 00 0c 00 00 21 01 23 11 21 11 21 11 33 01 21 01 01 05 89 fd 6e 94 fe 4f 01 b1 57 02 a8 02 1b fc e1 03 44 03 69 fc 97 08 00 fc ce 03 32 fc 4a fb b6 00 02 00 b2 00 00 07 ad 08 00 00 03 00 10 00 00 01 33 11 23 01 11 21 11 21 01 21 01 01 21 01 21 11 02 d9 ef ef fd d9 01 ac 01 98 01 85 01 fd fd e9 02 4c fd f9 fe 70 fe 48 06 16 fb d5 fe 15 08 00 fc b5 03 4b fc 3a Data Ascii: 54&&#"!6$32[_cV[tbTIWXXaM>Kq>F\|QRH>DyQMuB?tN!#!!3!nOWDi2J3#!!!!!LpHK:
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: dd e0 fe aa cd 15 fd d8 0a 60 f5 a0 03 35 0d 8b e4 8f 8e df 8a 0c 0c 8a df 8e 8f e4 8b 0d 00 02 00 aa fd 70 08 66 06 00 00 1e 00 22 00 00 13 21 11 14 16 04 33 32 24 36 35 2e 03 27 21 1e 03 15 14 02 06 04 21 20 24 02 11 01 21 11 21 aa 01 97 94 01 01 a4 dc 01 07 75 02 17 29 37 20 01 74 25 43 33 1e 66 e4 fe 84 fe e8 fe d6 fe 43 f7 03 10 01 94 fe 6c 06 00 fd 26 bb db 5d 86 eb 98 53 b5 ba b3 4f 3b 9d b8 ca 6a a8 fe cd f2 8b ad 01 72 01 27 02 d6 f7 70 00 02 00 eb ff e4 09 5f 06 00 00 18 00 32 00 00 01 21 06 02 06 15 14 16 33 32 36 35 11 21 11 14 02 06 23 22 24 02 13 36 12 25 21 16 12 17 12 02 04 23 22 26 02 35 11 21 11 14 16 33 32 36 36 35 34 26 02 01 da 01 8b 50 62 2d 78 70 61 78 01 37 7b f7 bd bc fe ed 95 02 01 7a 05 7e 01 8b 71 7a 02 01 95 fe ed bc bc f8 7a Data Ascii: `5pf"!32$65.'!! $!!u)7 t%C3fCl&]SO;jr'p_2!3265!#"$6%!#"&5!326654&Pb-xpax7{z~qzz
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 20 00 17 11 21 11 26 26 23 21 11 21 21 11 21 11 21 32 36 35 11 21 11 14 00 21 c6 04 31 01 1a 01 07 01 fe 60 01 4e 68 fd a4 fe 60 02 59 01 a0 02 5d 5f 57 01 a0 fe f8 fe e7 06 00 fe f1 f1 fe 01 01 ff 5b 56 fb 4f 03 ff fd 50 4f 62 03 ee fc 12 f1 fe f1 00 02 00 b3 00 00 07 ba 06 00 00 15 00 19 00 00 21 21 35 34 02 26 23 22 06 02 15 15 21 35 10 12 24 21 20 04 12 13 01 11 21 11 07 ba fe 61 7c dc 8f 90 db 7a fe 64 e9 01 96 01 02 01 03 01 97 eb 01 fd 4c fe 60 e9 ce 01 1e 95 95 fe e2 ce e9 e4 01 2f 01 b8 ef ef fe 48 fe d1 05 1c fa 00 06 00 ff ff 00 b2 ff e2 0c 90 08 00 00 26 01 7e 00 00 00 07 03 63 06 c5 00 00 00 05 00 c2 00 00 07 a6 08 00 00 03 00 07 00 0b 00 25 00 29 00 00 01 23 11 33 01 23 11 33 01 11 21 11 25 20 24 02 35 10 12 24 21 20 04 12 11 21 36 26 26 23 Data Ascii: !&&#!!!!!265!!1`Nh`Y]_W[VOPOb!!54&#"!5$! !a\|zdL`/H&~c%)#3#3!% $5$! !6&&#
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 04 60 05 00 07 d3 00 03 00 0b 00 00 01 33 15 23 01 01 21 01 21 01 33 01 02 8a 48 48 fd d3 01 a5 01 58 01 a6 fe be fe e7 13 fe e9 07 22 6d fd ab 03 73 fc 8d 02 7d fd 83 00 01 00 e4 03 80 05 52 08 00 00 11 00 00 01 13 05 27 25 25 37 05 03 21 03 25 17 05 05 07 25 13 02 95 19 fe bc 86 01 5d fe a3 86 01 44 19 01 0d 1a 01 44 86 fe a4 01 5c 86 fe bc 1a 03 80 01 83 d9 ec aa aa ec d9 01 83 fe 7d d9 ec aa aa ec d9 fe 7d ff ff 00 e4 01 c0 05 52 06 40 02 07 05 ad 00 00 fe 40 00 04 00 86 01 dc 06 c6 08 1c 00 15 00 19 00 2d 00 3d 00 00 01 11 21 32 16 16 15 14 06 06 23 23 35 33 32 36 35 34 26 23 23 11 01 13 23 03 13 22 24 26 02 35 34 12 36 24 33 32 04 16 12 15 14 02 06 04 27 32 24 12 35 34 02 24 23 22 04 02 15 14 12 04 02 85 01 69 46 75 45 48 78 49 f7 cf 2a 3d 3d 29 79 Data Ascii: `3#!!3HHX"ms}R'%%7!%%]DD\}}R@@-=!2##532654&###"$&546$32'2$54$#"iFuEHxI*==)y
2024-12-09 15:16:54 UTC	7384	IN	Data Raw: 36 36 35 34 26 23 22 06 06 15 14 16 13 32 36 35 34 26 23 22 06 15 14 16 02 32 8e da 7c 96 6e 63 73 70 c6 80 7d c4 70 74 61 6e 96 7c d9 8b 3b 56 2d 6d 51 38 58 33 66 5d 46 5c 5a 48 4c 57 59 10 51 8d 5b 67 94 0e 08 10 87 55 56 86 4e 4e 86 56 55 87 10 08 0f 94 66 5b 8d 51 d0 1f 38 27 3d 4c 22 3e 29 3a 44 01 d3 3f 35 36 41 41 36 35 3f 00 02 00 4f ff f0 04 1e 04 54 00 1e 00 2c 00 00 01 32 1e 02 15 14 02 06 23 22 26 27 21 16 16 33 32 36 35 23 06 06 23 22 26 26 35 34 36 36 17 22 06 06 15 14 16 33 32 36 36 37 36 26 02 28 5d b3 90 56 85 e9 95 bc f3 14 01 16 11 5d 3f 74 7f 0b 2f a0 62 6e af 66 76 d5 8e 38 5b 37 6e 56 3e 5a 34 05 07 76 04 54 35 7c d0 9c c5 fe fd 7f c0 88 2c 2c 99 7d 45 4b 5d a2 68 73 b0 64 dc 2b 4b 2f 42 5f 2f 47 26 3d 6d 00 01 fe 3d 00 00 04 c2 08 Data Ascii: 6654&#"2654&#"2\|ncsp}ptan\|;V-mQ8X3f]F\ZHLWYQ[gUVNNVUf[Q8'=L">):D?56AA65?OT,2#"&'!3265##"&&5466"326676&(]V]?t/bnfv8[7nV>Z4vT5\|,,}EK]hsd+K/B_/G&=m=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.9	49874	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:53 UTC	759	OUT	GET /websafe/images/pullFeature/Help.svg HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve; AWSALBCORS=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve
2024-12-09 15:16:54 UTC	883	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:54 GMT Content-Type: image/svg+xml Content-Length: 1265 Connection: close Set-Cookie: AWSALB=/vgPpjBCNQWrHcZWfCv4gnOWn/ludMJHl+cTurHa4EMnw1BfJlN5ehHiBhsjK6Z3tw9lF+sadN0G7LG/OgrhQBklGPhvyR3F807NDnmj+7rlO2Qw5DhMH6SGwtms; Expires=Mon, 16 Dec 2024 15:16:54 GMT; Path=/ Set-Cookie: AWSALBCORS=/vgPpjBCNQWrHcZWfCv4gnOWn/ludMJHl+cTurHa4EMnw1BfJlN5ehHiBhsjK6Z3tw9lF+sadN0G7LG/OgrhQBklGPhvyR3F807NDnmj+7rlO2Qw5DhMH6SGwtms; Expires=Mon, 16 Dec 2024 15:16:54 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-4f1" Server: unknown
2024-12-09 15:16:54 UTC	1265	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 69 64 3d 22 61 22 0a 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 37 2e 38 37 35 20 37 2e 38 37 35 20 32 30 2e 32 35 20 32 30 2e 32 35 22 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 2e 62 2c 2e 63 7b 66 69 6c 6c 3a 23 66 37 66 37 66 37 3b 7d 2e 63 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 64 65 66 73 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg height="20px" width="20px" id="a" xmlns="http://www.w3.org/2000/svg" viewBox="7.875 7.875 20.25 20.25"> <defs> <style>.b,.c{fill:#f7f7f7;}.c{fill-rule:evenodd;}</style> </defs> <path clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.9	49876	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:54 UTC	761	OUT	GET /websafe/templates/jquery-3.7.1.min.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=A74EBA37AE7A16B4E4D372F85BC20CCB; WebSafe.current-locale=en; WebSafe.current-locale-changed=true; AWSALB=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve; AWSALBCORS=dTZVJX+v2APXRRHH5D116KKF7nG+azPQrt99COvoFWeW45ycaO8ZOEXn3CjW4aJnlH6ZMvP2c+E2x6tppz8BR+R2/3FZ3x9g2Jcfnwcrkn8oL+439DmYL1/bP4Ve
2024-12-09 15:16:54 UTC	895	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:54 GMT Content-Type: application/javascript Content-Length: 87533 Connection: close Set-Cookie: AWSALB=7+gAEK4UyBtr3V7JQJz2hly8zUb6keVfF8EauuBXb9okogZLVLOTw7KOdkbv0u9rXT/IbbY846iCAsWswD1i/xJ29RizVFQcX/ULbopbW6u3zBynTN/GWUgtqSez; Expires=Mon, 16 Dec 2024 15:16:54 GMT; Path=/ Set-Cookie: AWSALBCORS=7+gAEK4UyBtr3V7JQJz2hly8zUb6keVfF8EauuBXb9okogZLVLOTw7KOdkbv0u9rXT/IbbY846iCAsWswD1i/xJ29RizVFQcX/ULbopbW6u3zBynTN/GWUgtqSez; Expires=Mon, 16 Dec 2024 15:16:54 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Wed, 30 Oct 2024 11:06:41 GMT ETag: "192dd1b3200-155ed" Server: unknown
2024-12-09 15:16:54 UTC	8535	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 6e 63 74 69 6f 6e 20 56 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 79 65 3b 72 65 74 75 72 6e 20 6e 21 3d 54 26 26 39 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 72 3d 28 54 3d 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 43 3d 21 63 65 2e 69 73 58 4d 4c 44 6f 63 28 54 29 2c 69 3d 72 2e 6d 61 74 63 68 65 73 7c 7c 72 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 2c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 Data Ascii: nction V(e){var t,n=e?e.ownerDocument\|\|e:ye;return n!=T&&9===n.nodeType&&n.documentElement&&(r=(T=n).documentElement,C=!ce.isXMLDoc(T),i=r.matches\|\|r.webkitMatchesSelector\|\|r.msMatchesSelector,r.msMatchesSelector&&ye!=T&&(t=T.defaultView)&&t.top!==t&&t.ad
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 73 5d 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 63 29 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 21 31 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 5b 45 2c 66 5d 3b 69 66 28 6e 29 7b 77 68 69 6c 65 28 65 3d 65 5b 73 5d 29 69 66 28 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 63 29 26 26 61 28 65 2c 74 2c 6e 29 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 77 68 69 6c 65 28 65 3d 65 5b 73 5d 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 63 29 69 66 28 69 3d 65 5b 53 5d 7c 7c 28 65 5b 53 5d 3d 7b 7d 29 2c 75 26 26 66 65 28 65 2c 75 29 29 65 3d 65 5b 73 5d 7c 7c 65 3b 65 6c 73 65 7b 69 66 28 28 72 3d 69 5b 6c 5d 29 26 26 72 5b 30 5d 3d 3d 3d 45 26 26 72 5b 31 Data Ascii: s])if(1===e.nodeType\|\|c)return a(e,t,n);return!1}:function(e,t,n){var r,i,o=[E,f];if(n){while(e=e[s])if((1===e.nodeType\|\|c)&&a(e,t,n))return!0}else while(e=e[s])if(1===e.nodeType\|\|c)if(i=e[S]\|\|(e[S]={}),u&&fe(e,u))e=e[s]\|\|e;else{if((r=i[l])&&r[0]===E&&r[1
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 70 65 6e 64 69 6e 67 22 2c 61 3d 7b 73 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 61 6c 77 61 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 64 6f 6e 65 28 61 72 67 75 6d 65 6e 74 73 29 2e 66 61 69 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 7d 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 65 6e 28 6e 75 6c 6c 2c 65 29 7d 2c 70 69 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 63 65 2e 44 65 66 65 72 72 65 64 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 63 65 2e 65 61 63 68 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 76 28 69 5b 74 5b 34 5d 5d 29 26 26 69 5b 74 Data Ascii: pending",a={state:function(){return i},always:function(){return s.done(arguments).fail(arguments),this},"catch":function(e){return a.then(null,e)},pipe:function(){var i=arguments;return ce.Deferred(function(r){ce.each(o,function(e,t){var n=v(i[t[4]])&&i[t
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 74 61 62 6c 65 3e 3c 74 62 6f 64 79 3e 3c 74 72 3e 22 2c 22 3c 2f 74 72 3e 3c 2f 74 62 6f 64 79 3e 3c 2f 74 61 62 6c 65 3e 22 5d 2c 5f 64 65 66 61 75 6c 74 3a 5b 30 2c 22 22 2c 22 22 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 7c 7c 22 2a 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 3f 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 7c 7c 22 2a 22 29 3a 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 26 26 66 Data Ascii: table><tbody><tr>","</tr></tbody></table>"],_default:[0,"",""]};function Se(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t\|\|""):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t\|\|""):[],void 0===t\|\|t&&f
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 64 28 7b 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 4c 65 28 74 68 69 73 2c 65 2c 74 2c 6e 2c 72 29 7d 2c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 4c 65 28 74 68 69 73 2c 65 2c 74 2c 6e 2c 72 2c 31 29 7d 2c 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3b 69 66 28 65 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 68 61 6e 64 6c 65 4f 62 6a 29 72 65 74 75 72 6e 20 72 3d 65 2e 68 61 6e 64 6c 65 4f 62 6a 2c 63 65 28 65 2e 64 65 6c 65 67 61 74 65 54 61 72 67 65 74 29 2e 6f 66 66 28 72 2e 6e 61 6d 65 73 70 61 63 65 3f 72 2e 6f 72 69 67 54 79 70 65 2b 22 2e 22 2b 72 2e 6e 61 6d 65 73 70 61 63 65 3a 72 2e 6f 72 69 67 54 79 Data Ascii: d({on:function(e,t,n,r){return Le(this,e,t,n,r)},one:function(e,t,n,r){return Le(this,e,t,n,r,1)},off:function(e,t,n){var r,i;if(e&&e.preventDefault&&e.handleObj)return r=e.handleObj,ce(e.delegateTarget).off(r.namespace?r.origType+"."+r.namespace:r.origTy
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 6f 6f 64 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 6f 70 4f 70 61 63 69 74 79 3a 21 30 2c 73 74 72 6f 6b 65 4d 69 74 65 72 6c 69 6d 69 74 3a 21 30 2c 73 74 72 6f 6b 65 4f 70 61 63 69 74 79 3a 21 30 7d 2c 63 73 73 50 72 6f 70 73 3a 7b 7d 2c 73 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 65 26 26 33 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 38 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 74 79 6c 65 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 3d 46 28 74 29 2c 75 3d 7a 65 2e 74 65 73 74 28 74 29 2c 6c 3d 65 2e 73 74 79 6c 65 3b 69 66 28 75 7c 7c 28 74 3d 5a 65 28 73 29 29 2c 61 3d 63 65 2e 63 73 73 48 6f 6f 6b 73 5b 74 5d 7c 7c 63 65 2e 63 73 73 48 6f 6f 6b 73 5b 73 Data Ascii: ,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeMiterlimit:!0,strokeOpacity:!0},cssProps:{},style:function(e,t,n,r){if(e&&3!==e.nodeType&&8!==e.nodeType&&e.style){var i,o,a,s=F(t),u=ze.test(t),l=e.style;if(u\|\|(t=Ze(s)),a=ce.cssHooks[t]\|\|ce.cssHooks[s
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 73 29 3a 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 67 74 28 72 2c 21 30 29 2c 65 2c 74 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 73 6c 69 64 65 44 6f 77 6e 3a 67 74 28 22 73 68 6f 77 22 29 2c 73 6c 69 64 65 55 70 3a 67 74 28 22 68 69 64 65 22 29 2c 73 6c 69 64 65 54 6f 67 67 6c 65 3a 67 74 28 22 74 6f 67 67 6c 65 22 29 2c 66 61 64 65 49 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 7d 2c 66 61 64 65 4f 75 74 3a 7b 6f 70 61 63 69 74 79 3a 22 68 69 64 65 22 7d 2c 66 61 64 65 54 6f 67 67 6c 65 3a 7b 6f 70 61 63 69 74 79 3a 22 74 6f 67 67 6c 65 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 72 2c 65 2c 74 2c 6e Data Ascii: s):this.animate(gt(r,!0),e,t,n)}}),ce.each({slideDown:gt("show"),slideUp:gt("hide"),slideToggle:gt("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,r){ce.fn[e]=function(e,t,n){return this.animate(r,e,t,n
2024-12-09 15:16:54 UTC	9000	IN	Data Raw: 6e 5d 2c 74 2c 69 29 3b 72 65 74 75 72 6e 20 72 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 73 65 72 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 65 2e 70 61 72 61 6d 28 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 28 29 29 7d 2c 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 63 65 2e 70 72 6f 70 28 74 68 69 73 2c 22 65 6c 65 6d 65 6e 74 73 22 29 3b 72 65 74 75 72 6e 20 65 3f 63 65 2e 6d 61 6b 65 41 72 72 61 79 28 65 29 3a 74 68 69 73 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 74 79 70 65 3b 72 65 Data Ascii: n],t,i);return r.join("&")},ce.fn.extend({serialize:function(){return ce.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var e=ce.prop(this,"elements");return e?ce.makeArray(e):this}).filter(function(){var e=this.type;re
2024-12-09 15:16:54 UTC	6998	IN	Data Raw: 6f 61 64 3d 6f 28 29 2c 61 3d 72 2e 6f 6e 65 72 72 6f 72 3d 72 2e 6f 6e 74 69 6d 65 6f 75 74 3d 6f 28 22 65 72 72 6f 72 22 29 2c 76 6f 69 64 20 30 21 3d 3d 72 2e 6f 6e 61 62 6f 72 74 3f 72 2e 6f 6e 61 62 6f 72 74 3d 61 3a 72 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 72 2e 72 65 61 64 79 53 74 61 74 65 26 26 69 65 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 61 28 29 7d 29 7d 2c 6f 3d 6f 28 22 61 62 6f 72 74 22 29 3b 74 72 79 7b 72 2e 73 65 6e 64 28 69 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 69 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 65 7d 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 Data Ascii: oad=o(),a=r.onerror=r.ontimeout=o("error"),void 0!==r.onabort?r.onabort=a:r.onreadystatechange=function(){4===r.readyState&&ie.setTimeout(function(){o&&a()})},o=o("abort");try{r.send(i.hasContent&&i.data\|\|null)}catch(e){if(o)throw e}},abort:function(){o&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.9	49879	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:54 UTC	880	OUT	GET /admin/fonts/SharpSans/SharpSans-Bold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY; AWSALBCORS=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY
2024-12-09 15:16:54 UTC	718	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:54 GMT Content-Length: 10948 Connection: close Set-Cookie: AWSALB=7EzTs6C9LaVPKIs4KAzw6QNh8ls7m2Pbda6+xJJ4hqtVI5YwyIiU2YYdFlJ3aq98HazR6wsxvw1X5apd6J7WemG25vP0VdHj0nbX2Sb3xZy81C1iHKLJ813lcZM3; Expires=Mon, 16 Dec 2024 15:16:54 GMT; Path=/ Set-Cookie: AWSALBCORS=7EzTs6C9LaVPKIs4KAzw6QNh8ls7m2Pbda6+xJJ4hqtVI5YwyIiU2YYdFlJ3aq98HazR6wsxvw1X5apd6J7WemG25vP0VdHj0nbX2Sb3xZy81C1iHKLJ813lcZM3; Expires=Mon, 16 Dec 2024 15:16:54 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"10948-1730286400000" Last-Modified: Wed, 30 Oct 2024 11:06:40 GMT Server: unknown
2024-12-09 15:16:54 UTC	8712	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 81 d5 7e 55 00 00 2a a8 00 00 00 1c 47 44 45 46 00 25 00 00 00 00 1c 74 00 00 00 18 47 50 4f 53 33 a6 24 5b 00 00 1c f4 00 00 0d b2 47 53 55 42 f0 80 0f 94 00 00 1c 8c 00 00 00 66 4f 53 2f 32 67 91 cf 8e 00 00 01 78 00 00 00 60 63 6d 61 70 56 c5 11 28 00 00 02 e8 00 00 01 62 67 61 73 70 ff ff 00 03 00 00 1c 6c 00 00 00 08 67 6c 79 66 c0 22 83 5c 00 00 04 d8 00 00 10 dc 68 65 61 64 0a 6f 27 77 00 00 00 fc 00 00 00 36 68 68 65 61 07 c0 03 2d 00 00 01 34 00 00 00 24 68 6d 74 78 9f 1b 0a 34 00 00 01 d8 00 00 01 10 6c 6f 63 61 90 00 8b 4c 00 00 04 4c 00 00 00 8a 6d 61 78 70 00 89 00 34 00 00 01 58 00 00 00 20 6e 61 6d 65 a7 b2 22 ab 00 00 15 b4 00 00 06 00 70 6f 73 74 43 c6 eb 8f 00 00 1b b4 00 00 00 b5 00 01 00 Data Ascii: pFFTM~U*GDEF%tGPOS3$[GSUBfOS/2gx`cmapV(bgasplglyf"\heado'w6hhea-4$hmtx4locaLLmaxp4X name"postC
2024-12-09 15:16:55 UTC	2236	IN	Data Raw: 00 01 00 00 00 00 ff fd ff fe ff fc ff fd ff f4 ff f3 ff d8 00 00 ff d0 ff c0 ff ff ff fd ff e4 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff fd ff f8 00 00 ff f6 ff f7 ff fb ff fd ff f9 ff fa ff fc ff fb ff f8 ff f5 ff f8 ff f4 ff f1 ff f8 00 00 00 03 00 00 ff fd ff fc ff f4 ff f3 00 00 ff ec ff e9 ff f1 00 11 ff e7 ff f4 ff f2 ff d8 ff ed ff ff ff f9 ff fd 00 00 ff ec ff f9 ff ff 00 00 ff f7 ff f0 ff f6 ff f8 ff f6 ff fd 00 00 ff ff ff eb ff db ff f8 ff fb ff ec 00 00 00 00 ff fd ff f9 00 08 ff fb ff fc ff fd ff f8 ff fc ff ff ff fb 00 00 00 00 ff f7 ff f9 ff ff 00 00 ff fd ff f5 ff fb ff f1 ff ea ff ff 00 00 00 02 00 00 ff fd ff ff ff ee ff f4 00 00 ff d1 ff ff ff ce ff f8 ff c0 ff f9 ff d1 ff b5 ff d8 ff f0 ff ff ff fd 00 00 ff fc 00 02 ff fe 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.9	49878	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:54 UTC	876	OUT	GET /admin/fonts/Inter/Inter-SemiBold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY; AWSALBCORS=D6tsfRmfBz9huLoeQ9yKTKqV2RH7ojleAbKE02w9erxuBhZeoqG8YJXGE+Th+SWeYblXdb+o14lRRz7QZqX0f69NylbEwqJELMu4OmX64046fCW/dkwFWQrE2aYY
2024-12-09 15:16:55 UTC	720	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:54 GMT Content-Length: 309432 Connection: close Set-Cookie: AWSALB=ic1Og2s4jbk9DIMfceRCmVhCClU2XEDIYjZXB5gYRmQ0ZeorwBs5kBlqjcVCHaAUx8l4SkTJC+x94Rc3YMlRlIrLp61wOnaQeJ4w2w9xm8iRfUMso730i/66+woY; Expires=Mon, 16 Dec 2024 15:16:54 GMT; Path=/ Set-Cookie: AWSALBCORS=ic1Og2s4jbk9DIMfceRCmVhCClU2XEDIYjZXB5gYRmQ0ZeorwBs5kBlqjcVCHaAUx8l4SkTJC+x94Rc3YMlRlIrLp61wOnaQeJ4w2w9xm8iRfUMso730i/66+woY; Expires=Mon, 16 Dec 2024 15:16:54 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"309432-1730286400000" Last-Modified: Wed, 30 Oct 2024 11:06:40 GMT Server: unknown
2024-12-09 15:16:55 UTC	8710	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 44 98 00 00 04 12 47 50 4f 53 9b af 91 74 00 03 48 ac 00 01 2d 14 47 53 55 42 be 7f 66 78 00 04 75 c0 00 00 42 b4 4f 53 2f 32 23 5f 6e 62 00 02 77 ac 00 00 00 60 53 54 41 54 ef 79 d9 45 00 04 b8 74 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 78 0c 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 44 90 00 00 00 08 67 6c 79 66 6a 1b 9d 97 00 00 01 0c 00 02 26 86 68 65 61 64 2d c3 61 46 00 02 4f 84 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 77 88 00 00 00 24 68 6d 74 78 24 35 88 39 00 02 4f bc 00 00 27 ca 6c 6f 63 61 09 84 29 ed 00 02 27 b4 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 27 94 00 00 00 20 6e 61 6d 65 37 5c 60 0e 00 02 dd a0 00 00 02 50 70 6f 73 74 a7 a8 35 72 00 02 df f0 00 00 64 9e 70 72 65 Data Ascii: GDEF11DGPOStH-GSUBfxuBOS/2#_nbw`STATyEtDcmap/.xegaspDglyfj&head-aFO6hheaw$hmtx$59O'loca)''maxp' name7\`Ppost5rdpre
2024-12-09 15:16:55 UTC	9000	IN	Data Raw: 00 00 06 09 92 29 30 ff ff 00 ae 00 00 04 fe 09 4f 00 27 00 c5 02 c2 00 00 00 06 09 99 29 30 ff ff ff b1 00 00 03 59 0a 10 02 26 00 c5 00 00 00 07 06 6e fe ed 02 00 ff ff ff a3 00 00 03 65 0a 00 02 26 00 c5 00 00 00 07 06 6d fe 9f 02 00 ff ff 00 b2 00 00 04 39 08 00 00 27 00 c5 01 fc 00 00 00 06 09 9e f6 00 ff ff 00 f0 00 00 04 09 08 94 00 27 00 c5 01 cc 00 00 00 06 09 a0 c6 00 ff ff 00 ca 00 00 02 3d 08 00 02 06 00 c5 00 00 ff ff ff 97 00 00 03 71 0a 5b 02 26 00 c5 00 00 00 07 06 68 fe 79 02 00 00 03 00 70 00 00 04 b5 08 00 00 03 00 07 00 0b 00 00 13 11 21 11 01 11 21 11 01 11 21 11 70 04 45 fb bb 04 45 fe 97 fe 8d 06 c9 01 37 fe c9 f9 37 01 37 fe c9 08 00 f8 00 08 00 ff ff 00 70 00 00 04 b5 0a 5b 02 26 00 e9 00 00 00 06 06 69 88 20 ff ff 00 70 00 00 04 Data Ascii: )0O')0Y&ne&m9''=q[&hyp!!!pEE777p[&i p
2024-12-09 15:16:55 UTC	9000	IN	Data Raw: 4c 50 6d 6d 50 4c 70 70 4c 50 6d 6d 50 4c 70 ff ff 00 3e 00 00 07 82 0a 00 02 26 01 d5 00 00 00 07 06 6d 00 fb 02 00 ff ff 00 3e 00 00 07 82 0a 63 02 26 01 d5 00 00 00 07 06 70 02 5e 02 00 ff ff 00 3e 00 00 07 82 0a 93 02 26 01 d5 00 00 00 07 06 66 00 8e 02 00 ff ff 00 3e fd d7 07 82 08 00 02 26 01 d5 00 00 00 07 06 8b 06 fa 00 00 ff ff 00 3e 00 00 07 82 0b 09 02 26 01 d5 00 00 00 07 06 80 07 60 02 12 ff ff 00 3e 00 00 07 82 0a 47 02 26 01 d5 00 00 00 07 06 6b 01 20 02 00 00 02 00 13 00 00 07 b2 08 00 00 03 00 0d 00 00 01 15 21 35 13 21 01 33 01 21 01 11 21 11 07 b2 f8 61 2b 01 a3 01 f5 14 01 f5 01 a3 fd 17 fe 8e 06 57 ca ca 01 a9 fc 76 03 8a fa fc fd 04 02 fc ff ff 00 3e 00 00 07 82 08 00 02 06 01 d5 00 00 ff ff 00 2e 00 00 09 86 08 8d 00 27 01 d5 02 04 Data Ascii: LPmmPLppLPmmPLp>&m>c&p^>&f>&>&`>G&k !5!3!!a+Wv>.'
2024-12-09 15:16:55 UTC	9000	IN	Data Raw: 2e 03 9a 9b ad 53 9c 02 8e e5 e5 00 02 00 ba 00 00 05 ff 08 1c 00 12 00 29 00 00 01 21 35 34 3e 02 33 32 16 17 11 26 26 23 22 06 06 15 13 11 21 11 21 11 33 36 36 33 32 16 12 07 11 21 11 34 26 23 22 06 06 02 14 fe a6 4e 88 ac 5e 3d 5e 23 16 2f 1a 39 69 43 10 fe 96 01 5a 12 35 e9 ac 9f ed 83 01 fe 96 9f 8c 5f 93 53 06 00 53 84 b1 68 2c 07 07 fe e5 03 05 1c 49 43 fd 31 fc 7c 06 00 fe fb 81 98 88 fe fe b8 fc 2e 03 9a 9a ae 53 9c 00 03 00 ba fd c0 05 ff 08 1c 00 11 00 24 00 3b 00 00 21 21 15 14 0e 02 23 22 26 27 11 16 16 33 32 36 35 01 21 35 34 3e 02 33 32 16 17 11 26 26 23 22 06 06 15 13 11 21 11 21 11 33 36 36 33 32 16 12 07 11 21 11 34 26 23 22 06 06 04 94 01 6a 4b 85 b0 64 3e 5e 23 16 2f 1a 56 84 fd 80 fe a6 4e 88 ac 5e 3d 5e 23 16 2f 1a 39 69 43 10 fe 96 Data Ascii: .S)!54>32&&#"!!36632!4&#"N^=^#/9iCZ5_SSh,IC1\|.S$;!!#"&'3265!54>32&&#"!!36632!4&#"jKd>^#/VN^=^#/9iC
2024-12-09 15:16:55 UTC	9000	IN	Data Raw: 00 ff 00 85 91 05 05 fe b3 08 0d 55 96 62 fc 79 ff ff 00 ba 00 00 04 26 08 93 02 26 03 45 00 00 00 06 06 64 bd 00 ff ff 00 4d fd 68 04 26 06 16 02 26 03 45 00 00 00 06 06 77 ef 00 ff ff 00 5e 00 00 04 6e 08 76 02 26 03 45 00 00 00 06 06 73 82 00 ff ff ff c0 00 00 04 26 08 93 02 26 03 45 00 00 00 07 06 7b 05 3a 00 00 ff ff 00 8f 00 00 04 38 08 8a 02 26 03 45 00 00 00 07 06 7f 05 c5 00 b6 ff ff 00 ba 00 00 04 26 08 63 02 26 03 45 00 00 00 07 06 70 00 e4 00 00 ff ff 00 9e fd d7 04 26 06 16 02 26 03 45 00 00 00 07 06 8b 04 89 00 00 ff ff 00 85 fd d7 04 46 08 00 02 26 03 45 00 00 00 27 06 8b 04 89 00 00 00 06 06 6d 81 00 ff ff ff 8e fe 25 04 26 06 16 02 26 03 45 00 00 00 07 08 62 04 bc 00 00 00 01 00 ba 00 00 04 72 06 16 00 13 00 00 33 11 21 11 33 36 36 33 32 Data Ascii: Uby&&EdMh&&Ew^nv&Es&&E{:8&E&c&Ep&&EF&E'm%&&Ebr3!36632
2024-12-09 15:16:55 UTC	9000	IN	Data Raw: e7 01 c3 fe ab 1c 94 01 08 ad 53 7b 44 4d 8a 5a 5d 8e 50 01 1e 4a 87 59 57 81 48 44 7d 56 ac 01 05 93 99 fe fe 9c ad ea 24 10 1e fe fd c0 ac fe f1 9a 00 01 00 ca 00 00 07 5e 08 00 00 0c 00 00 21 01 23 11 21 11 21 11 33 01 21 01 01 05 95 fd 5e b6 fe 8d 01 73 5d 02 d8 01 c9 fc d7 03 4c 03 7f fc 81 08 00 fc b6 03 4a fc 5a fb a6 00 02 00 ca 00 00 07 6f 08 00 00 03 00 10 00 00 01 33 11 23 01 11 21 11 21 01 21 01 01 21 01 21 11 02 c3 e9 e9 fe 07 01 70 01 b0 01 a3 01 b3 fd e7 02 48 fe 4b fe 4c fe 34 05 fa fc 0b fd fb 08 00 fc 9b 03 65 fc 26 fb da 03 3f fc c1 00 02 00 ca fe 32 07 0b 08 00 00 11 00 1b 00 00 01 11 21 20 04 12 17 14 02 04 23 03 32 12 37 36 00 23 01 11 21 11 33 01 21 01 21 11 02 9e 01 1c 01 07 01 7b cc 01 b3 fe b1 e9 03 b3 ce 02 02 fe fd e3 fd 10 01 Data Ascii: S{DMZ]PJYWHD}V$^!#!!3!^s]LJZo3#!!!!!pHKL4e&?2! #276#!3!!{
2024-12-09 15:16:55 UTC	9000	IN	Data Raw: 27 21 1e 03 15 14 02 06 04 21 20 24 02 11 01 21 11 21 ba 01 5d 9c 01 09 a2 e0 01 11 7b 01 19 2b 38 22 01 4c 23 3f 31 1c 62 dd fe 91 fe f4 fe e2 fe 56 ea 03 04 01 5c fe a4 06 00 fd 2a c9 ed 67 94 f7 94 56 ba bd b6 51 3d a0 bc cf 6c a5 fe d2 ec 89 af 01 74 01 27 02 d2 f7 70 00 02 00 ce ff e4 09 08 06 00 00 18 00 32 00 00 01 21 06 02 06 15 14 12 33 32 36 35 11 21 11 14 02 06 23 22 24 02 13 36 12 25 21 16 12 15 12 02 04 23 22 26 02 35 11 21 11 14 16 33 32 36 36 35 34 26 02 01 b4 01 61 55 64 2a 8a 7c 6d 84 01 0d 77 f0 b2 b7 fe f7 8f 01 01 75 05 7b 01 61 70 75 02 8f fe f7 b7 b2 f0 78 01 0e 85 6c 53 74 3e 2a 63 06 00 9b fe f9 ed 77 e6 fe fa cd c3 02 04 fe 18 e0 fe ba b0 b6 01 62 01 04 d3 01 83 aa aa fe 7d d3 fe fc fe 9e b6 b0 01 46 e0 01 e8 fd fc c3 cd 76 dc 9a Data Ascii: '!! $!!]{+8"L#?1bV\gVQ=lt'p2!3265!#"$6%!#"&5!326654&aUd\|mwu{apuxlSt>*cwb}Fv
2024-12-09 15:16:55 UTC	9000	IN	Data Raw: 06 00 00 15 00 19 00 00 21 21 35 26 02 26 23 22 06 02 17 15 21 35 02 12 24 33 32 04 12 11 01 11 21 11 07 86 fe 9b 01 82 e6 98 95 e7 84 01 fe 9c 01 e1 01 88 fb fe 01 88 e0 fd 50 fe 98 ef da 01 2c 99 99 fe d4 da ef ec 01 2f 01 b7 ec ec fe 49 fe d1 05 14 fa 00 06 00 ff ff 00 ca ff e2 0c 48 08 00 00 26 01 7e 00 00 00 07 03 63 06 af 00 00 00 05 00 c6 00 00 07 7b 08 00 00 03 00 07 00 0b 00 25 00 29 00 00 01 23 11 33 01 23 11 33 01 11 21 11 25 20 24 02 27 12 12 24 33 32 04 12 03 21 34 02 26 23 22 06 02 07 16 12 16 33 21 37 33 07 05 5c e6 e6 fe 6f e5 e5 fd 00 06 a3 fc bc fe ec fe 7c cb 01 01 da 01 82 fd fd 01 83 db 01 fe 9f 7c e3 9a 96 e2 7d 01 01 79 fb c5 fd 5e 08 2d 03 03 a9 04 57 fb a9 04 57 f8 00 01 2a fe d6 5d e4 01 8d fc 01 0d 01 89 d6 dc fe 69 fe e6 d4 01 Data Ascii: !!5&&#"!5$32!P,/IH&~c{%)#3#3!% $'$32!4&#"3!73\o\|\|}y^-WW*]i
2024-12-09 15:16:55 UTC	9000	IN	Data Raw: fe 95 7a 01 54 17 f3 16 01 54 7a fe 94 01 6c 7a fe ac 16 03 80 01 95 df d4 b6 b6 d4 df 01 95 fe 6b df d4 b6 b6 d4 df fe 6b ff ff 00 cc 01 c0 05 2e 06 40 02 07 05 ad 00 00 fe 40 00 04 00 8a 01 dc 06 ca 08 1c 00 15 00 19 00 2d 00 3d 00 00 01 11 21 32 16 16 15 14 06 06 23 23 35 33 32 36 35 34 26 23 23 11 01 13 23 03 13 22 24 26 02 35 34 12 36 24 33 32 04 16 12 15 14 02 06 04 27 32 24 12 35 34 02 24 23 22 04 02 15 14 12 04 02 8b 01 6d 3e 71 47 4a 75 40 ff d3 27 42 42 24 85 01 19 ae c8 a5 0f a6 fe de dc 7c 7c dc 01 22 a6 a6 01 22 dc 7c 7c dc fe de a6 a4 01 0e a1 a1 fe f2 a4 a5 fe f2 a1 a1 01 0e 03 94 02 e2 37 6c 4f 4f 6f 3a 85 3a 39 3c 30 fd a4 01 57 fe a9 01 57 fc f1 7c dc 01 22 a6 a6 01 22 dc 7c 7c dc fe de a6 a6 fe de dc 7c cd a0 01 0f a4 a4 01 0f a0 a0 fe Data Ascii: zTTzlzkk.@@-=!2##532654&###"$&546$32'2$54$#"m>qGJu@'BB$\|\|""\|\|7lOOo::9<0WW\|""\|\|\|
2024-12-09 15:16:55 UTC	7384	IN	Data Raw: 00 1e 00 2c 00 00 01 32 1e 02 15 14 02 06 23 22 26 27 33 16 16 33 32 36 35 23 06 06 23 22 26 26 35 34 36 36 17 22 06 06 15 14 16 33 32 36 36 37 36 26 02 20 5d af 8c 52 7d e1 97 b8 ea 13 fe 10 62 45 79 80 09 2b a4 64 6e ac 63 72 cf 8a 3a 60 38 75 5b 40 60 36 01 02 79 04 54 38 7e cf 96 bb fe fb 89 bf 89 34 38 ad 91 48 50 5b a0 66 71 ae 62 c8 30 50 33 48 67 34 50 28 47 6f 00 01 fe 43 00 00 04 be 08 00 00 03 00 00 21 01 33 01 fe 43 05 80 fb fa 80 08 00 f8 00 ff ff 00 54 fe 95 04 31 02 fd 02 07 06 1f 00 00 fe ad ff ff 00 58 fe ad 02 65 02 ed 02 07 06 20 00 00 fe ad ff ff 00 61 fe ad 03 d9 02 fd 02 07 06 21 00 00 fe ad ff ff 00 5a fe 9d 04 02 02 fd 02 07 06 22 00 00 fe ad ff ff 00 51 fe ad 04 2f 02 ed 02 07 06 23 00 00 fe ad ff ff 00 69 fe 9d 03 ee 02 ed 02 07 Data Ascii: ,2#"&'33265##"&&5466"326676& ]R}bEy+dncr:`8u[@`6yT8~48HP[fqb0P3Hg4P(GoC!3CT1Xe a!Z"Q/#i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.9	49886	54.208.49.75	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:57 UTC	934	OUT	GET /favicon.ico HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/websafe/register?uuid=31fb2ff900000193abfe6483ac2b6421fc261705&localeUI=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=ic1Og2s4jbk9DIMfceRCmVhCClU2XEDIYjZXB5gYRmQ0ZeorwBs5kBlqjcVCHaAUx8l4SkTJC+x94Rc3YMlRlIrLp61wOnaQeJ4w2w9xm8iRfUMso730i/66+woY; AWSALBCORS=ic1Og2s4jbk9DIMfceRCmVhCClU2XEDIYjZXB5gYRmQ0ZeorwBs5kBlqjcVCHaAUx8l4SkTJC+x94Rc3YMlRlIrLp61wOnaQeJ4w2w9xm8iRfUMso730i/66+woY
2024-12-09 15:16:57 UTC	687	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:57 GMT Content-Length: 1150 Connection: close Set-Cookie: AWSALB=W9GtwmoyPdYAVqkmqIHhbnUBS6xy7xLf+rWdnGHKg97njbhzpe8/JzxyEClfn3EQWVbdfYaKvs7dHbVaJeyUuITpMLxLAkaPQIvHAT0I/cZzlAuudiSHPQGNsY9u; Expires=Mon, 16 Dec 2024 15:16:57 GMT; Path=/ Set-Cookie: AWSALBCORS=W9GtwmoyPdYAVqkmqIHhbnUBS6xy7xLf+rWdnGHKg97njbhzpe8/JzxyEClfn3EQWVbdfYaKvs7dHbVaJeyUuITpMLxLAkaPQIvHAT0I/cZzlAuudiSHPQGNsY9u; Expires=Mon, 16 Dec 2024 15:16:57 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"1150-1730300470000" Last-Modified: Wed, 30 Oct 2024 15:01:10 GMT Server: unknown
2024-12-09 15:16:57 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a8 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.9	49892	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:16:59 UTC	626	OUT	GET /favicon.ico HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=W9GtwmoyPdYAVqkmqIHhbnUBS6xy7xLf+rWdnGHKg97njbhzpe8/JzxyEClfn3EQWVbdfYaKvs7dHbVaJeyUuITpMLxLAkaPQIvHAT0I/cZzlAuudiSHPQGNsY9u; AWSALBCORS=W9GtwmoyPdYAVqkmqIHhbnUBS6xy7xLf+rWdnGHKg97njbhzpe8/JzxyEClfn3EQWVbdfYaKvs7dHbVaJeyUuITpMLxLAkaPQIvHAT0I/cZzlAuudiSHPQGNsY9u
2024-12-09 15:16:59 UTC	687	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 15:16:59 GMT Content-Length: 1150 Connection: close Set-Cookie: AWSALB=Mzve+mETWspS7MNq1Z0Ju3SL78+TjaEy9SMoBXA+zvrkO9WLSZbrmGnmEZJwZE+L0TosLHsfsgCVds4irfhjGD0ttD6tPasYMYjWP5csCZIBkTlHFisZS0h+DTUu; Expires=Mon, 16 Dec 2024 15:16:59 GMT; Path=/ Set-Cookie: AWSALBCORS=Mzve+mETWspS7MNq1Z0Ju3SL78+TjaEy9SMoBXA+zvrkO9WLSZbrmGnmEZJwZE+L0TosLHsfsgCVds4irfhjGD0ttD6tPasYMYjWP5csCZIBkTlHFisZS0h+DTUu; Expires=Mon, 16 Dec 2024 15:16:59 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"1150-1730300470000" Last-Modified: Wed, 30 Oct 2024 15:01:10 GMT Server: unknown
2024-12-09 15:16:59 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a8 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.9	50057	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:18:37 UTC	785	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Mzve+mETWspS7MNq1Z0Ju3SL78+TjaEy9SMoBXA+zvrkO9WLSZbrmGnmEZJwZE+L0TosLHsfsgCVds4irfhjGD0ttD6tPasYMYjWP5csCZIBkTlHFisZS0h+DTUu; AWSALBCORS=J+3t8QR8eRM7Nh9EdBVofBSXUmAaa7Fx9TMbTugz1OPni7+m4clPeyiljhd5arLwmWxw4MUs/kb7pDXjiAfCNZ/TxyO4cgnVJLOBwBBWRlXrepNMfLKFVMWVF1k/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.9	50056	34.196.63.232	443	1620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 15:18:37 UTC	781	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4xNzA3OjExOTMy/.AgeOpRcZbtMEDzFwNLlpo.VF6p-rIHlM8wIMhfs6AkjT0EIP5I111JCVsS41YWVL5.AnVK9IcQL95vT3vYuW-M59zjZS2ytmA!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Mzve+mETWspS7MNq1Z0Ju3SL78+TjaEy9SMoBXA+zvrkO9WLSZbrmGnmEZJwZE+L0TosLHsfsgCVds4irfhjGD0ttD6tPasYMYjWP5csCZIBkTlHFisZS0h+DTUu; AWSALBCORS=J+3t8QR8eRM7Nh9EdBVofBSXUmAaa7Fx9TMbTugz1OPni7+m4clPeyiljhd5arLwmWxw4MUs/kb7pDXjiAfCNZ/TxyO4cgnVJLOBwBBWRlXrepNMfLKFVMWVF1k/

Target ID:	1
Start time:	10:16:20
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241209T071703.html"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	10:16:24
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1836,i,12948313699533765524,5541752893857998931,262144 /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report securedoc_20241209T071703.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Windows Analysis Report
securedoc_20241209T071703.html