Edit tour

Windows Analysis Report
securedoc_20241217T163143.html

Overview

General Information

Sample name:	securedoc_20241217T163143.html
Analysis ID:	1577722
MD5:	44fcfe09d78cdf841eae56b23bcd99bf
SHA1:	0cad20e6e8cc554e28eb290788326aae8f8ce892
SHA256:	922986ffeb8c29356384d327870b35949bc41c6de678cacf5c1ac78395861790
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

Suspicious Javascript code found in HTML file

Detected hidden input values containing email addresses (often used in phishing pages)

HTML page contains hidden javascript code

HTML title does not match URL

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241217T163143.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2788 --field-trial-handle=2324,i,13382261799345737028,12339842014919683157,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.9.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/securedoc_20241217... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The use of obfuscated code and the presence of a payload further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of a potential malicious attack.

Suspicious Javascript code found in HTML file

Source: securedoc_20241217T163143.html	HTTP Parser: document.write
Source: securedoc_20241217T163143.html	HTTP Parser: location.href
Source: securedoc_20241217T163143.html	HTTP Parser: .location
Source: securedoc_20241217T163143.html	HTTP Parser: .location

Source: securedoc_20241217T163143.html	HTTP Parser: "Vitug, Ivory" <ivory_vitug@uhc.com>
Source: securedoc_20241217T163143.html	HTTP Parser: Secure Message from ivory_vitug@uhc.com
Source: file:///C:/Users/user/Desktop/securedoc_20241217T163143.html	HTTP Parser: {'name':null,'msgID':'\|1__f7c9ffd700000193d6bfa156956fcd82f58cb999@mail10674.corpmailsvcs.com','keysize':24,'flags':3073,'rid':'ImNyaXNlbGRhLnBvcGFyZGFAZGlzaC5jb20iIDxjcmlzZWxkYS5wb3BhcmRhQGRpc2guY29tPg==','algnames':{'encryption':{'data':'AES'}},'algparams':{'encryption':{'data':{'IV':'xwra6T5w21Foe2SY2dyOYg=='}}},'keyserverhost':'res.cisco.com:443','securereplyhost':'res.cisco.com:443','openerhost':'res.cisco.com:443','toc':[['Body-1734474703193.txt',1,'','',3,[0,10145],'Body-1734474703193.txt','ISO-8859-1'],['MessageBar.html',4,'','',1,[10145,30693],'MessageBar.html','ISO-8859-1']],'salt':'XF4qSvYULsPOpMleLGGK1IxTN+o=','data':['','','']}

Source: securedoc_20241217T163143.html

HTTP Parser: Base64 decoded: Zeppelin rules!

Source: securedoc_20241217T163143.html

HTTP Parser: Title: Secure Registered Envelope:Secure Message from ivory_vitug@uhc.com does not match URL

Source: securedoc_20241217T163143.html

HTTP Parser: <input type="password" .../> found

Source: securedoc_20241217T163143.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/securedoc_20241217T163143.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/securedoc_20241217T163143.html	HTTP Parser: No favicon
Source: https://res.cisco.com/websafe/help?topic=AddrNotShown	HTTP Parser: No favicon

Source: securedoc_20241217T163143.html

HTTP Parser: No <meta name="author".. found

Source: global traffic

HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__f7c9ffd700000193d6bfa156956fcd82f58cb999%40mail10674%2Ecorpmailsvcs%2Ecom%27,%0D%0A%27keysize%27%3A24,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImNyaXNlbGRhLnBvcGFyZGFAZGlzaC5jb20iIDxjcmlzZWxkYS5wb3BhcmRhQGRpc2guY29tPg%3D%3D%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27xwra6T5w21Foe2SY2dyOYg%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1734474703193%2Etxt%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A3,%5B0,10145%5D,%27Body-1734474703193%2Etxt%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B10145,30693%5D,%27MessageBar%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%27XF4qSvYULsPOpMleLGGK1IxTN%2Bo%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27dETZtMRHd3BdyJ%2FldEp2SWGfrHUUH2%2F9tOwP%2FuQNq%2BPNNzjNEtG6UiZDAmwjZUq0JR2u%2FWcClMNPM%2BEjE8fpKMqMyG4ps2JTuRmjlOWIL3fMYyysk6vvXTGkgXFvu0nuw2BTNyJxQ8hBRydMFw6nOUHJjPPMk6d6CGHnJGsvMANJibzMIgqyfe6X4uaLdWED%2FqstEjQd75%2B04OPiq8R4ZMAid4th%2BZehGocnmzFOeWF9J5T3smAI0Ur0w62zz5M22cJuVMfXKci1btEIfsBdACYFeka%2FOcQTL3IbLVch5ySSmqRrzL4cOzGkyZPgSvh%2FQF0e%2BWqpXQyjQ0r9rLGxZCpYh3DIWZRbXXmD5STpZHwZ7EDdcEAgU0BiYcLTvQRLx00tHx%2F16yzCM9ysgnTomxZNTkOI55jZCpf1DoC2LF4twOn7pCAjP%2F1CwY%2FEHodV2vtxW%2FEZgFDWJtjD5gNMotnJOF0mDeq%2BJpr7pNrYJy5Kuf0Y9K%2B%2Bza98d2t5Yl5tYCBBcF7yAUIi2FbUFCMe9GlQk7NOnwVNYmMAEe9YI2FNn56dcjUdMtQSdXYaRNoN8eE%2BS%2FRk9VlNJ4PMzFtBXomJtEn%2F68y4AkhBG82h7oWZMVY9iPu%2FgvSNrBx0q0IV3kFc%2FyQy0RORs6unXOLBCZVXUqwwff48tGH37gJhOEG7xP6HTJIHUo3fDtK6xYSYlta9Zx3DI5ggeaNhWzoEeSquqCl7rmCuaEofK8GY70fRfnNB8V%2BNnpxeO3ZodsaRg1xTrZpI5C%2FMLtH0qAJHfbOuk8Jo3jf9t%2FWqmVlXZrzbEUWrPLDIF7k1vdWD3nARXdiWugwyzyGjLlx6Cp9NAiwTP5TBRAaHzQm8V1%2BBRZAXWEF5wcBJiS2IF%2BrlLOrh4AzC8x%2BLBKLc8gbOySshk5jcjyCjHLL0CYrYWIQ6q4I4%2B1yFnm4uGbAG6Uco7qTIECSxStD6VN2JS3cLSKnM2Y3nCCrcc0BtMPeV6qQ4Je14hCKpwZ2%2BKArl6WOr9mifwlBnCRYZCGyEWT4%2BKv75y15yE6XeMUomQzJtXNBjOcvHr3VaIXkp8v6Zhw7ecMFYpVZ6bzcAXba9VIqjbOBMD3%2BKcRr1BL1R%2FvFSSGfMMMT0wG4ngJt17pjCHB%2BU8W2xWZ3vKNWa2xtyBxx05TEc0r5x8%2BRug8deFYwUWx6NQX7TInXVYeowV9xuZ5so71c1weFhgOb%2FEK4E1TriEktyMFrv9WeXZbLqbQ5FyXCKpLRQqD8S8XOhsUpwZ5ynzzQJa5A2Csx0DXIAjqT1N3XaIXlrO5ekDDzUVYI2J6N00mk2ZMSrwVFFjKnQel1SjOmxdgYgFsSUFSL52F13tJXAGj%2Fv2A%2BuYgVIflchoH4KFTNNUe%2FSM2N2PBmaY7JchS4s%2FWRt46SjL3HKIJr1shqgVzYsCTcse0MPI9AsclJii9RFncCkl8ruKFlruiN3R9KjX3h9L%2BbMtgROkexGh9oMgDB4y9B8rbS2GZKpjpKrD8sCxuLchHQaF6FgOL6FkWI%2FovWUnbOnHqYuKmmDvluZ0rdOdfO56MD303uQus5kWmxz0KI5%2FcZC8LYdgUwg9hHm5trBHoIiyMKFzDbDH%2FxiZo0WjqLyXmO1sXwbEjLcdpU7LwA3qe%2FDCBKq1P1ryxWCubravgOkOoTaqPA01MIK7yGT

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207
Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /postx.css HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=FQjjn5l7J+TsPQX+5HQprOqilO3K89RllGTld+uyEJtx5sxCWZQNi7ybnlm0wPrReSVWwLJrtvuJc4U/bIhs9QSjYiUeq/hwyi5Y4v+5HY7k1pjGzcdZ4AAiUIPF
Source: global traffic	HTTP traffic detected: GET /websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/Dyr8CG6V4OFJ4KOR4CQsWIBmuNI?domain=cdnjs.cloudflare.com HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp
Source: global traffic	HTTP traffic detected: GET /r/NtUEtFSl14m3qyrLcWSDngM16eZS62f6pgINJvEmOtqpxNEEXH8QTcn17cYkkqUn-tzuYZc1iDUyy049vW7yw5GFJrua3m3NEX6kheFB8weYKRe0-LrIy35BJtzuNFH3Uvg4Dgp8IM2Wc5YYpKpZlEhxCo8DSqQVpZXBndS6hQUgS7YUrzUMpgHbZWoF1L-BqyqMaIuuo1RWf98BVggD4elifv85TINW-H7IrhU5ums4HJ_PGxJUsO_5SDTfv_SLuZ3YASY7tmD6dxTravNfN-g291deGjMO2kVVJGw7Zi2S0PauW5VN6jONNIfoDhpZ9uB1WqXhnFcs1SaOP9eE5LoE8kmG318e1sVxjfJKcOKmsnjuMnCNHsIhzBDwc9QfVS_rh1vkdDEdTx51FzORyIfG2uqNUY-PDNL1u-6z1sRvxu4xd7MsrTZVt4cPzzCjS4Jv225juSPnoVyd0x-tEkk_6b8QOPv_1WCgwjqFCa-GH-83bMXQTGqtSWHkCo2VaRYzbTNiVn4t2o0KWYhSO6dlEP-6zm1b063SYzzBfH6gBP4s_h7rmzaOCLkMW2u2_mH59LWUp_fSz_OKY5FuZOGYFRR32cfrrkyjM7iR7kpDNi3KM8XlMUIK3lrn-52cVjqL1B9iRU22tisGZseMawUZh9k2QTJt2WWqc8hhlWHe14Q_G1SvpD3XSVm-u_HjUqIleO5sxvUKLUBlRdXN-MoNhcAR5SRNx91QIOFsd81MG_loaxvUJ1uLfxjDArn5hN4KAs9sJtjvati1RwSo4lDprFp4zrvgQIWKaBo5KvEbqdS2TRWPLhWEjAzidQhSWBHzb1XeBa3DyE_9RafpNzGBqf6XzOCdt_8tcOa_bOjcEn-CQea0UzpErqFeK3xkOnsuUm3RgiSSTFWykziX6rJXZxVhLIpXzkGxM3-HBlOORm8SlbtpOaUKNH4SmmNUjOvv8QsBoB1Qb_XTp7f-c_XKLmG-HumCcSbNS0qsYftNw9_8XUtYW4uHriDHyNTRMnUT2CTVVOsf1xgL__If0fGNLBcLsPrpbc_aIyKbKgNGUiopLCtKx6hwC8MUCMwdjxggHjpr7duXscR8kiycJQNqocjBXfsIoA8SjSq7SdyzDTTwTtzUGqc5TMWY37cLmWjKvMdhSrfpWyM-N4mETV3F2b00p0_fyqJqiOrseetw0BKHSZkypN8ox4gb_9sE4OBgiZgwMvFqZtZ3ir3Dqll7D_LeiXDNgPAvsdtfrvSoiLkrWLMN70SvzEhxZTKsBKsjQoolgbw8WsW6eTyk9AoSVYqGcj4n8POXgt26r4N7WcL0i2JmLBcCkgEJguK783L41v114pRGxuNva7dmVxLyNXVnWksGyDr37Ogq2QN80KcpQptdpsx8Oj9ijY6HkUlFHSC4xBOQyejrV5wyrFz_OSOQxaSE-qwKaQBSun3eDpczSY9wgF1WZxFWcBppPCatQkEUU7P6zH-r-ByLagD_ujkKDLuYzhLnOdMT_3_28ulTLdoXPR7I6VOrKeLzv_emS4WJfHKOyeaWXqGWbIqlI7cxEBNsqw5z5PQwH7h4ezoGkbt39ylLz1owziXOzJ8d16bvIlofopZcJ2gMmIYUTpD0KmjXRrUU68Adn04k9o_Yvn7SECLPkrPIQ4WK7Rree9YFCUszdDvqlWm5e-yUwVnGRCeP2y03E6y3AAiyACuMQGAtb4s2A1KdAaLX3sgkrwu9VlTYp3zgX7Sg-HGmHMdflg81KHdhMA8WKuYPbXI2loMCUQdliacMpABd7FAJ5TXa-MVJgkNxJkBlk4tQtUYuuOlfwcfO3kMVouqXLMvlLv9rm0l5pPNA7S5FErciMDMpOzdt-O4o-KYnAxre184r-W2Jh5WcFxlb9YURmzbs8t-UsQHNzDRBcjGOo1Mvie74yJi5OqZWFAzHIXWWsRSoaXVEXg4dfcnr4Ijwp0ajy4zDBSHWAJ4alHrwYiUmvuCKvxDQYbJ8kfQdj4ffZD9cciuNpUL7LeMX2UzQgfcPYwVuJcrI2yYzbqpQ45zyzdYFYEYw6C4YkrGcn6ajn2w44wfbJZNy3UY5vdgtXt_vZEDTF61jEinxVNV0r3LoCxg5l7BeuwDAFvmIe8wUop-6jw321F3ALp_tQT4 HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/images/loginbg.gif HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=QVhQIkTyzOC+t2Ae183MWKOJOQmBgfFvcbm/OTryjhuqPljaIt9mN5Ej6bA+ufsEw6HYAf5W2fuCYbcR3F33RCRxB+zCj9ZRG3lpXY28BuivdcGyn4jD1/tBqMXC; AWSALBCORS=6OGT8f5NdyvLsILjnv1PE8NFcVmM05JzLSVfwAy9trP22EbDJ0pSs2+1kX56RR0WRMg7+PHF5RfgfapKcsqITiXtdTio4h2GRvccyZwZzS5SFz0V+6IxdYiwN87/
Source: global traffic	HTTP traffic detected: GET /s/rUAJCPNV4oT4X8NRXiQSjIxSrDi?domain=res.cisco.com?su=criselda.poparda%40dish.com&df=&tf=&lp=en&v=2&m=%7c1__f7c9ffd700000193d6bfa156956fcd82f58cb999%40mail10674.corpmailsvcs.com&s=1&f=0&d=1734539233104&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Light.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: static.cres-aws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cres-aws.com/postx.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CRES_login_bg.jpg HTTP/1.1Host: static.cres-aws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/YpOM7pCWvoiPsSICDZG1j71htAimSZkgBwJzwANTosdjyefv0w5zQtnpCMRVqwZvjRJ4dYAyqvAjBwzWlIsQapEYuqCQEoqKk8oAT0UUh_2NWHg-kogRYn59CB-BORxsgy2hZbuja15mdsZ5JmJBySzDGB0sOvRPgvx5b2QeG8wDrGdpX7RIFxmShKyflcltDQU2-WwpqqUQAl1UNjUEpP6dd_7oyBbZOOI8wJDhS-9k9y7N0QRWXBto2SIDJwhHUIZPjtzf1IByBno_8H6xMgPNqNYEbcukWPLwPHaWPrp716XRabjG8poabf3M6cCVfMIzQ1LFCWmvARNpAMZbjW9x3LpYWiYs5KWRmhSVF6kfpk8Fp-7o3ofa_lPh991Qg9bPfoBUapD1RSjNf_WpXJpIXIUrEDwKDKBcRaQvKFPjGzYkvidIq9zCFXK-HH_JNi9dRKhDB_nFZJvFXMjczzskyN4z1_ezQJCl6eu9gk4rMM3kORxQkxl_3LzE80eDlo0gnry4_E9Qrpxg1bLaIj0RUEQRmFIB_fiKngNUVmKR5DVBRJ9EeLm-CMDo6QmBolVtNaj8K7YaBH_AbB3u2adqxHZXi9Oh9q6LRoG0ad6RcNQ12CkkrMUQZ9It3MgkF-LXo-lZltNl2P6vfmeITo6OJuVXRuAuE4oy3JTpt_Ub9PIQi85OQbD3nVUdRgFYoEb5QyDRVjfGITrMe-hzE8D3Q9zYM-Ix9Cc0kgCL3tqbBBOo2Fg7hzAij5_DRA9nvh7z06QZW8CjfF-iHIqmVBx3mtVwwGoazUWw62WidTaB8Ur4bCIM8SRWAVFwQv0ssleNVFxkWZkc403y0vv_yqho05Ky0KZ9-Lkbb-lBTCveBUaYfhf7pH49TNgw5lOVp1SmAcWKkPy2ABx4AplUHJZgqjbOh7TKbPaU68UhWE10Ol_On_gCHQvn6PMmho-hlRGrjmaqfYEz_fKKynOrL5tKfzEOIZdiq99AwB0NKo202RzF7PGNx33AKqabkiBnU5s0-RsgAIV-kyASR8t0MHH35qdvdC3-MSUMM-ft7ahsas4XgJVfmwnbYSg8wnKnu2C1W5acRUlp3-CM6TVD0-4omQAQ1WKMdDIvlljrfeuPC7NODeYn6duaYFdX661XvQWCCnjoPOvD4ykpyt_T7K50U4XTEYFTYi8DXw4hkY4rH_5XRZikzqmwXpHv2ANM_xDCRZJAp9jIpQLA0EM6Tdk075TyN0BnCKINtXiG5tvVDHLZzOPK5JstxZMqJWR07RleAOLe6xxmfxB5lVzo3XmGJ5ou4YmqvgZABLWeAFttQTxE73sn5imVkqN6jNhrwbD0N5cE0IDL6PfH_XUSgojfrtu_vrokNtpsyl1d9AUsivkoj87s9yAYAMQ5XStkQZnKM8hBllesaW6_Q-ZIgqIXkvSfa7biw73oKd3Oh_WQQE_TLss9zEDAfPIfmnzbF3qNtJP6Xffoxwh4HbNeecYmulpftJGKdvJPk5qoVK2ktYQzi83mGaIkVT163YwJSP7f01dVBSiaVusKIVogcQoRQPQ6BVXR2TVWjd4ZL-XVedi6p_St1GRT60QFLOEI88kcRbU1DFKBX4j6NRN_FcuMaWNSdF-iqyuA5ncib_ZKQcke0RxNMJNYksgkzLY2zDVMP-1bX7BiUlxRe0wMjz1vdUUKX-LYDNaPxLk28rxwj_vhb-gKWB268HKO7zEtrZUynHVRTZpXVu6_efouSzqJU-LRzUcbz6HHb4x_fVMRnL1W0o3opPmWAHI6QPaSaMDVWjm-AAKuPX1Ks85coaXIVVaajTdiTV9ExrUZfHgh-9vKdPzy8fs7jk-Owvs14KUw7CEBlvIbj_CJhyEFiIFTlfFTHxNm73RASJycnrOhmrPa9QxoIGd1gY3iPa7Ugit3j7NcFfxdkKI5cp7iKtona-TYolnknAQKe5uvC_ICFIaZ9x65DgSrjB-ELmY9uOvdgIZjsGxioPNob9QmCeVp01E2sItMu3sIetyi8A_VJQfbOCSSmaxBbH1XACHsm5tn7gZMSmjAGBaxuxqIJwe6ev2haG7whbBdxKqDCsr2twjs67GjJ6GXSaPKF7z8 HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp?tkn=3.QPUhO4roRlgb7fpIU0_GeT7CX6WetwZlBUek-DVUkDpHhu0tVUOmZpMaqvNrFAvocCuBvJY4L31wcAWxMO_SGlq2cdXOIQSlZLGKfMNL-V86hZCxMzEVjiLXn88vFzUsZ_I2H6fqx2qVa7xA52os8YY7WbGj2g2DszdlYx5s16ky8UadYWXdwElykIYaDbWR.HoGJ2DYIaj1q7hallP8cAQ HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp?tkn=3.05NEOq_FZz8JG2UJ5NcRs7jv_0RGttkOMuqbwO-p3sZZuDAWSDuMFcTk3AJSo_8oS76qccDhATEDw9iVRPcP_X053DPXAWDS599zCK42xuxqk6JtRn3eoC0c3SvU2sARvFxDB16ej19TwXnB5tVpuAiOs9K26PBoYxA_ifnKQeM1WMm4aa5K8Nl1iIS5U7Ys.JHWqaHYtGzhcy1t8LjIwQw HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp?tkn=3.QPUhO4roRlgb7fpIU0_GeT7CX6WetwZlBUek-DVUkDpHhu0tVUOmZpMaqvNrFAvocCuBvJY4L31wcAWxMO_SGlq2cdXOIQSlZLGKfMNL-V86hZCxMzEVjiLXn88vFzUsZ_I2H6fqx2qVa7xA52os8YY7WbGj2g2DszdlYx5s16ky8UadYWXdwElykIYaDbWR.HoGJ2DYIaj1q7hallP8cAQ HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttpwp?tkn=3.05NEOq_FZz8JG2UJ5NcRs7jv_0RGttkOMuqbwO-p3sZZuDAWSDuMFcTk3AJSo_8oS76qccDhATEDw9iVRPcP_X053DPXAWDS599zCK42xuxqk6JtRn3eoC0c3SvU2sARvFxDB16ej19TwXnB5tVpuAiOs9K26PBoYxA_ifnKQeM1WMm4aa5K8Nl1iIS5U7Ys.JHWqaHYtGzhcy1t8LjIwQw HTTP/1.1Host: security-us.m.mimecastprotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/Uz_dCKrV4juqWzMNWhGuNI5ydF7?domain=res.cisco.com&localeUI=en HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/75nk7YcvaV5r09RrnlBuq7OyyESSVMPL-rZJJkww-odA-QRlRJhAHLsrOLtpqMk-GDejcSEMRxn0_Bz_dzSdBMEqZOpM4dyqfCu-ouzRuW0YF04IXQqMqwID-fmXQ_EkzcVkVN5qQEqRwiFD1M_bjRUK5CLZrsAsbl2yl8IgjUgDrGdpX7RIFxmShKyflcltDQU2-WwpqqUQAl1UNjUEpM9G--PtVFVWTXGAwDLlph8MpzPcJm6mYHt68eyg830Y5gMA_eFgBvXtRw13K-JStz6fk4PkohIW_csIQ3b3QqYJEsDyse1y3Xrw1JgZLGvWhWja88ULvCH5kvDgLQnR20jcVoy6y9t5jJOv2UVOK10JA_Y0w3mJTvG118GRm72pRtllFG83Z3izM89dYiMtq54hEC7h43MYXcRBggiuTpJot-bile0U5S4xZyueDjFslceLVoPjl4dSgt9M1rMsvGBY8lCQupftQhOJfqd7JxRMGvn1vSQUfSw7RQrBf-4wQM86XWLw8ZpYnmUJJ7D1LC1gPs7jzc3awQyEHYdZHeaDuhr3Llv_7xJs6VPBcb557mBYLjY6g7bRzg18qtawjVUvjwIYrkrMmc4Ws3qmza6RcNQ12CkkrMUQZ9It3MgkxHGqJcuKRO9lKWE6xuftdI6OJuVXRuAuE4oy3JTpt_Ub9PIQi85OQbD3nVUdRgFYg8jYnutXp2z84UrUcYnwvz6azFruaM2bNE9DmOimSDG2-_egbeier95CsqrGBdsbTxeRrDyJXjnNlNsmOJ9pWMmjEUMA6AZmYOOoAi_cFC7aJaroGmBOeVUS27udWQ2-xQmJOICfO8ubgEelmGppIA4caxp0z38-l-lcqU1UmPQoEpkS8y36hGdv3e_vH7EEpx_B-N65eNqToNK1jrAMeRF-RRVtHJ4bNdmkQExMxmqTl6jMWv_UkOtxj9Vma2FDaC8CfDA8ng-S8J5bB9oOCbebqTxvFkIBJ74DoEyrkL6nsLyADdSxdtnazWi4ideRRI-bJeAlZOllMrP33OfSQ8LAKt_QDQWmBm7bpm2Y1BWA-eryuNsaH7UQsHzbJkjYHqhdUSsQv5LoneUsA0z_0mN0TaaT4iyVg4F8OdktJY_mnWKIvsvOobEu0IWqTAJy-5zpBlzvaKMhDIcrthHdCw53PqxtV_ae39iZAePOIcfYKmQBNWGiMlluTaUGhOJUjxNab8wjnq-1bgCiAeb6jLvODTpA80MsuBMTG5aBsN6Qx0d_TGl44akLy-dFa7uVHd-xr0VQOQwVuNUSVDGsumpW62ikEr9EyNX9iatbmSDFS-7zTmWwluXjOD5dExHz0ZLICasFsmlE-0-sCedDGBIZDgKvCeYIEOKy-GncOLruDKmxW0Jle_7Na8xsTeL40knBDiLQBE3C6RogMfB3F_mP6fC9d5jXrt-pPWp0FeOQ6veJP_h1CFVUqtiMD812VpcuIMdncg7NIBSNclGf4_Ux4oB-deNQlG-TGSeTsVGBs9TCJMdxOhu46K3D_zmOd4BWjNpMJvMUdadD5o94gTY8Xphc-ywC8KwAlRxZGRCtWkYC4AAYc212SgVGMMzycbHspWEM6vivkjIedX-qsYZ1TDarkFEysB0IGfCth5ihdBhyC1CmZ0DtLcRtZ4NaUxPH0aK1u3_CPbaNYlvHim78cIrMDTJXgwhHHFTYzB4ou-72svgNump3dyUSN02XVpJH0rCePFl0hL7-yLzFgj5fTKAY7z7REEqG0irBjki7YvIYmbTXnSz7SKSlJENsYPXKiDT5H1-MyNpBn2ev-1lRxMQy-qjXXwX04o40Sa57w-vddc9iFNxMt_6es1LU5rcTJZtH0yo6VdUZ29P7dgs2r_Em067ZIZyy84jEkJIoUJ1o4_7QoJDmqc714Xx0YOY1ec13wS73_WLmTh3wmd2ncyy_Um3jTrmTgUMWzKNyKYx8y8S78wf6oKfLkiZ1MSi_nPgqN2qYN-6mbgLH2NclOHQWfnSch2LC36wIm0p5Rhp4K5-04CWbc7zMPxDqh7hCg5Jx5oITig_vMAWIwsgrdNR4V6kfHyjo2boD2WZ24M_GG6gBdXPQdWohM2stmJ6MZ05FhGjxVJ4srKzC4w HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=5la8OC7Myb7ikEVCyKujskatHmOTj3yT6Vt5IzP/SH4TGk1EZaSdcZ4RHsfgZ4sMLgZMm/9vuR7emr4kfF6+N5BFlW4GnXqyiwn0h59KQvXar5anaJQV3PhSX6X0
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=wr62FUSyhSABLBgmpxqyeDo4nNbhfR58VSTImvJQV0DKgBwdIzZTWBrt5i9+4u+era580x4iqEyLAUL459njcy4spNzPohXcMuRpy/mqBw+eU3DyLVKJTV40zjTU
Source: global traffic	HTTP traffic detected: GET /websafe/help?topic=AddrNotShown HTTP/1.1Host: res.cisco.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=8c+055AmocWj/fTI7swFU0tJ7XH3a4GHQn6e/79rPBxRxYpCt5oEmlx5CSefSzkHAC8jeRp+KsIYc/FblMxH2NP7m5PtzbQk3f5lfFaLAD3BvCY9Z2zSb0xiuCn6; AWSALBCORS=wr62FUSyhSABLBgmpxqyeDo4nNbhfR58VSTImvJQV0DKgBwdIzZTWBrt5i9+4u+era580x4iqEyLAUL459njcy4spNzPohXcMuRpy/mqBw+eU3DyLVKJTV40zjTU
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/postx.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/help?topic=AddrNotShownAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
Source: global traffic	HTTP traffic detected: GET /websafe/templates/css/customHelp.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/help?topic=AddrNotShownAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
Source: global traffic	HTTP traffic detected: GET /admin/cisco-fonts.min.css HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://res.cisco.com/websafe/help?topic=AddrNotShownAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
Source: global traffic	HTTP traffic detected: GET /websafe/templates/standard-scripts.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/help?topic=AddrNotShownAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
Source: global traffic	HTTP traffic detected: GET /websafe/templates/screen-reader.js HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/websafe/help?topic=AddrNotShownAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://res.cisco.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websafe/templates/screen-reader.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=hIEcpGg7nMkjgSZjBNd/P9876ajxJpPKamFTH77YWvNNE9Y+XBv1uaGUWbHF4sVMPe2sIrTwEs3UuNJpb3WzEUj4wsdHUu6nUF+8XWpAfuc9fYLHGz9+GPM4lsg7; AWSALBCORS=hIEcpGg7nMkjgSZjBNd/P9876ajxJpPKamFTH77YWvNNE9Y+XBv1uaGUWbHF4sVMPe2sIrTwEs3UuNJpb3WzEUj4wsdHUu6nUF+8XWpAfuc9fYLHGz9+GPM4lsg7
Source: global traffic	HTTP traffic detected: GET /websafe/templates/standard-scripts.js HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Regular.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA
Source: global traffic	HTTP traffic detected: GET /admin/fonts/SharpSans/SharpSans-Bold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA
Source: global traffic	HTTP traffic detected: GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://res.cisco.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://res.cisco.com/admin/cisco-fonts.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: res.cisco.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://res.cisco.com/websafe/help?topic=AddrNotShownAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rj6LTdRJZ6ePxKDAXLbjLPLlHgSxpIO/K3xVThVCcF4PSXc7mC+tHn/fWPzJouIJ0IG226hHQ0/dusdMv6VlvgPfWwkFhftihQvh0X3i/ummZb3RF52u4FuLCjem; AWSALBCORS=rj6LTdRJZ6ePxKDAXLbjLPLlHgSxpIO/K3xVThVCcF4PSXc7mC+tHn/fWPzJouIJ0IG226hHQ0/dusdMv6VlvgPfWwkFhftihQvh0X3i/ummZb3RF52u4FuLCjem
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=vRnIuk2tvqD9uXqa8qfubZ1Ai6HKiyye9sTDgKRxHiau4Hb7Eqpm2iYP+ej2WfAXI+Py+atScDJvgrxCkhtCNLeXTQb2D1TeVzbXzTw9Le/E+r9UTwTeCzCdZlkG; AWSALBCORS=vRnIuk2tvqD9uXqa8qfubZ1Ai6HKiyye9sTDgKRxHiau4Hb7Eqpm2iYP+ej2WfAXI+Py+atScDJvgrxCkhtCNLeXTQb2D1TeVzbXzTw9Le/E+r9UTwTeCzCdZlkG
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=6LJrja5MZEWjFU7Q+uwBEAUDz6crfr2+7AHi4Ue49+417p2ifxPnpH/leaeMs9X0aeK2fGXQ9dV5uZgtB+E0V3Zk8kM96lAnt/6Rg0g1REaDSqlwG2GaJrzobHNU; AWSALBCORS=KR0dO1xChQWXW3+blCLyb8sdSwOGwkn7Z/rAAV6OuCFge9KmjoXVxEUestO79QKR3BLcFf8vNpBO8xS6UTXW8bR+zJpOtw/0uO0QzcU1zFV7JgeB2dDGYWG/BIFB
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en&try=1 HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=6LJrja5MZEWjFU7Q+uwBEAUDz6crfr2+7AHi4Ue49+417p2ifxPnpH/leaeMs9X0aeK2fGXQ9dV5uZgtB+E0V3Zk8kM96lAnt/6Rg0g1REaDSqlwG2GaJrzobHNU; AWSALBCORS=sN1tYIgzWD7IW6vuNIsFtjs3rLqdWHqS+IT8ZTSgH204KBexVtZfYJf7PK91lVERHw5KhXOOb7O2AV8og3RX2BnanBBL/0b36vUPHbLAPrxrLNnd5QUqGmDHvE4Z
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__f7c9ffd700000193d6bfa156956fcd82f58cb999%40mail10674%2Ecorpmailsvcs%2Ecom%27,%0D%0A%27keysize%27%3A24,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImNyaXNlbGRhLnBvcGFyZGFAZGlzaC5jb20iIDxjcmlzZWxkYS5wb3BhcmRhQGRpc2guY29tPg%3D%3D%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27xwra6T5w21Foe2SY2dyOYg%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1734474703193%2Etxt%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A3,%5B0,10145%5D,%27Body-1734474703193%2Etxt%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27,%0D%0A%27%27,%0D%0A1,%5B10145,30693%5D,%27MessageBar%2Ehtml%27,%0D%0A%27ISO-8859-1%27%5D%0D%0A%5D,%0D%0A%27salt%27%3A%27XF4qSvYULsPOpMleLGGK1IxTN%2Bo%3D%27,%0D%0A%27data%27%3A%5B%0D%0A%27%27,%27dETZtMRHd3BdyJ%2FldEp2SWGfrHUUH2%2F9tOwP%2FuQNq%2BPNNzjNEtG6UiZDAmwjZUq0JR2u%2FWcClMNPM%2BEjE8fpKMqMyG4ps2JTuRmjlOWIL3fMYyysk6vvXTGkgXFvu0nuw2BTNyJxQ8hBRydMFw6nOUHJjPPMk6d6CGHnJGsvMANJibzMIgqyfe6X4uaLdWED%2FqstEjQd75%2B04OPiq8R4ZMAid4th%2BZehGocnmzFOeWF9J5T3smAI0Ur0w62zz5M22cJuVMfXKci1btEIfsBdACYFeka%2FOcQTL3IbLVch5ySSmqRrzL4cOzGkyZPgSvh%2FQF0e%2BWqpXQyjQ0r9rLGxZCpYh3DIWZRbXXmD5STpZHwZ7EDdcEAgU0BiYcLTvQRLx00tHx%2F16yzCM9ysgnTomxZNTkOI55jZCpf1DoC2LF4twOn7pCAjP%2F1CwY%2FEHodV2vtxW%2FEZgFDWJtjD5gNMotnJOF0mDeq%2BJpr7pNrYJy5Kuf0Y9K%2B%2Bza98d2t5Yl5tYCBBcF7yAUIi2FbUFCMe9GlQk7NOnwVNYmMAEe9YI2FNn56dcjUdMtQSdXYaRNoN8eE%2BS%2FRk9VlNJ4PMzFtBXomJtEn%2F68y4AkhBG82h7oWZMVY9iPu%2FgvSNrBx0q0IV3kFc%2FyQy0RORs6unXOLBCZVXUqwwff48tGH37gJhOEG7xP6HTJIHUo3fDtK6xYSYlta9Zx3DI5ggeaNhWzoEeSquqCl7rmCuaEofK8GY70fRfnNB8V%2BNnpxeO3ZodsaRg1xTrZpI5C%2FMLtH0qAJHfbOuk8Jo3jf9t%2FWqmVlXZrzbEUWrPLDIF7k1vdWD3nARXdiWugwyzyGjLlx6Cp9NAiwTP5TBRAaHzQm8V1%2BBRZAXWEF5wcBJiS2IF%2BrlLOrh4AzC8x%2BLBKLc8gbOySshk5jcjyCjHLL0CYrYWIQ6q4I4%2B1yFnm4uGbAG6Uco7qTIECSxStD6VN2JS3cLSKnM2Y3nCCrcc0BtMPeV6qQ4Je14hCKpwZ2%2BKArl6WOr9mifwlBnCRYZCGyEWT4%2BKv75y15yE6XeMUomQzJtXNBjOcvHr3VaIXkp8v6Zhw7ecMFYpVZ6bzcAXba9VIqjbOBMD3%2BKcRr1BL1R%2FvFSSGfMMMT0wG4ngJt17pjCHB%2BU8W2xWZ3vKNWa2xtyBxx05TEc0r5x8%2BRug8deFYwUWx6NQX7TInXVYeowV9xuZ5so71c1weFhgOb%2FEK4E1TriEktyMFrv9WeXZbLqbQ5FyXCKpLRQqD8S8XOhsUpwZ5ynzzQJa5A2Csx0DXIAjqT1N3XaIXlrO5ekDDzUVYI2J6N00mk2ZMSrwVFFjKnQel1SjOmxdgYgFsSUFSL52F13tJXAGj%2Fv2A%2BuYgVIflchoH4KFTNNUe%2FSM2N2PBmaY7JchS4s%2FWRt46SjL3HKIJr1shqgVzYsCTcse0MPI9AsclJii9RFncCkl8ruKFlruiN3R9KjX3h9L%2BbMtgROkexGh9oMgDB4y9B8rbS2GZKpjpKrD8sCxuLchHQaF6FgOL6FkWI%2FovWUnbOnHqYuKmmDvluZ0rdOdfO56MD303uQus5kWmxz0KI5%2FcZC8LYdgUwg9hHm5trBHoIiyMKFzDbDH%2FxiZo0WjqLyXmO1sXwbEjLcdpU7LwA3qe%2FDCBKq1P1ryxWCubravgOkOoTaqPA01MIK7yGT
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en HTTP/1.1Host: res.cisco.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: static.cres-aws.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: res.cisco.com
Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: security-us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com

Source: chromecache_144.2.dr, chromecache_137.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: securedoc_20241217T163143.html	String found in binary or memory: http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14
Source: chromecache_116.2.dr	String found in binary or memory: http://scripts.sil.org/OFLInterLightWeightSlant
Source: chromecache_147.2.dr	String found in binary or memory: http://scripts.sil.org/OFLInterSemiBoldWeightSlant
Source: chromecache_125.2.dr, chromecache_146.2.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlant
Source: chromecache_145.2.dr, chromecache_117.2.dr	String found in binary or memory: http://scripts.sil.org/OFLWeightSlantRegular
Source: chromecache_118.2.dr	String found in binary or memory: http://www.mimecast.com/
Source: chromecache_131.2.dr	String found in binary or memory: http://www.sharptype.co
Source: chromecache_131.2.dr	String found in binary or memory: http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w
Source: securedoc_20241217T163143.html	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: securedoc_20241217T163143.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Source: securedoc_20241217T163143.html	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Source: chromecache_118.2.dr	String found in binary or memory: https://community.mimecast.com/docs/DOC-241
Source: chromecache_138.2.dr, chromecache_114.2.dr, chromecache_119.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_147.2.dr, chromecache_116.2.dr	String found in binary or memory: https://github.com/rsms/inter)Inter
Source: chromecache_145.2.dr, chromecache_117.2.dr	String found in binary or memory: https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter
Source: chromecache_125.2.dr, chromecache_146.2.dr	String found in binary or memory: https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter
Source: chromecache_128.2.dr, chromecache_129.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_138.2.dr, chromecache_114.2.dr, chromecache_119.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_114.2.dr, chromecache_119.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com/websafe/custom.action?cmd=authFrame
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com/websafe/images/loginbg.gif
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgn
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com:443
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com:443/keyserver/keyserver
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=PPNotShown
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com:443/websafe/help?topic=RegEnvelope
Source: securedoc_20241217T163143.html	String found in binary or memory: https://res.cisco.com:443/websafe/pswdForgot.action
Source: securedoc_20241217T163143.html	String found in binary or memory: https://static.cres-aws.com/CRES_login_bg.jpg
Source: securedoc_20241217T163143.html	String found in binary or memory: https://static.cres-aws.com/postx.css
Source: securedoc_20241217T163143.html	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/-lIyCNk64mFN3DP83CyHBIyMZFZ?domain=res.cisco.com
Source: securedoc_20241217T163143.html	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/Dyr8CG6V4OFJ4KOR4CQsWIBmuNI?domain=cdnjs.cloudflare.com
Source: securedoc_20241217T163143.html	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/Hq3cCL9V4kuP9ywr9UrCmIyuoJb?domain=res.cisco.com
Source: securedoc_20241217T163143.html	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/ILaOCM8V4ls53Mk13cPFrI80FN0?domain=res.cisco.com
Source: securedoc_20241217T163143.html	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/Uz_dCKrV4juqWzMNWhGuNI5ydF7?domain=res.cisco.com
Source: securedoc_20241217T163143.html	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/gpsHCJ695gF8w3AvwhvtBIyjmB5?domain=res.cisco.com
Source: securedoc_20241217T163143.html	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/rUAJCPNV4oT4X8NRXiQSjIxSrDi?domain=res.cisco.com
Source: securedoc_20241217T163143.html	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/zmt6CERV4MsWxV02xupikI7agxN?domain=res.cisco.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: classification engine

Classification label: mal48.phis.winHTML@24/66@34/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241217T163143.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2788 --field-trial-handle=2324,i,13382261799345737028,12339842014919683157,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2788 --field-trial-handle=2324,i,13382261799345737028,12339842014919683157,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLWeightSlantRegular	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLWeightSlant	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLInterLightWeightSlant	0%	Avira URL Cloud	safe
http://scripts.sil.org/OFLInterSemiBoldWeightSlant	0%	Avira URL Cloud	safe
http://www.sharptype.co	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/securedoc_20241217T163143.html	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
res.cisco.com	54.161.144.184	true	false	high
url.us.m.mimecastprotect.com	205.139.111.12	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
security-us.m.mimecastprotect.com	170.10.128.87	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	142.250.181.132	true	false	high
d2qj7djftjbj85.cloudfront.net	18.66.161.47	true	false	unknown
static.cres-aws.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en	false		high
https://url.us.m.mimecastprotect.com/s/rUAJCPNV4oT4X8NRXiQSjIxSrDi?domain=res.cisco.com?su=criselda.poparda%40dish.com&df=&tf=&lp=en&v=2&m=%7c1__f7c9ffd700000193d6bfa156956fcd82f58cb999%40mail10674.corpmailsvcs.com&s=1&f=0&d=1734539233104&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36	false		high
https://res.cisco.com/websafe/help?topic=AddrNotShown	false		high
https://res.cisco.com/websafe/templates/standard-scripts.js	false		high
https://res.cisco.com/admin/fonts/Inter/Inter-Regular.ttf	false		high
https://res.cisco.com/websafe/images/loginbg.gif	false		high
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en&try=1	false		high
https://res.cisco.com/websafe/templates/css/postx.css	false		high
https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css	false		high
https://url.us.m.mimecastprotect.com/s/Dyr8CG6V4OFJ4KOR4CQsWIBmuNI?domain=cdnjs.cloudflare.com	false		high
https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.QPUhO4roRlgb7fpIU0_GeT7CX6WetwZlBUek-DVUkDpHhu0tVUOmZpMaqvNrFAvocCuBvJY4L31wcAWxMO_SGlq2cdXOIQSlZLGKfMNL-V86hZCxMzEVjiLXn88vFzUsZ_I2H6fqx2qVa7xA52os8YY7WbGj2g2DszdlYx5s16ky8UadYWXdwElykIYaDbWR.HoGJ2DYIaj1q7hallP8cAQ	false		high
https://static.cres-aws.com/postx.css	false		high
https://res.cisco.com/admin/cisco-fonts.min.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en&try=1	false		high
file:///C:/Users/user/Desktop/securedoc_20241217T163143.html	true	Avira URL Cloud: safe	unknown
https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf	false		high
https://res.cisco.com/favicon.ico	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en	false		high
https://res.cisco.com/admin/fonts/Inter/Inter-Bold.ttf	false		high
https://res.cisco.com/admin/fonts/SharpSans/SharpSans-Bold.ttf	false		high
https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.05NEOq_FZz8JG2UJ5NcRs7jv_0RGttkOMuqbwO-p3sZZuDAWSDuMFcTk3AJSo_8oS76qccDhATEDw9iVRPcP_X053DPXAWDS599zCK42xuxqk6JtRn3eoC0c3SvU2sARvFxDB16ej19TwXnB5tVpuAiOs9K26PBoYxA_ifnKQeM1WMm4aa5K8Nl1iIS5U7Ys.JHWqaHYtGzhcy1t8LjIwQw	false		high
https://res.cisco.com/websafe/templates/css/customHelp.css	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf	false		high
https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en	false		high
https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf	false		high
https://url.us.m.mimecastprotect.com/s/Uz_dCKrV4juqWzMNWhGuNI5ydF7?domain=res.cisco.com&localeUI=en	false		high
https://static.cres-aws.com/CRES_login_bg.jpg	false		high
https://res.cisco.com/websafe/templates/screen-reader.js	false		high
https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://url.us.m.mimecastprotect.com/s/Uz_dCKrV4juqWzMNWhGuNI5ydF7?domain=res.cisco.com	securedoc_20241217T163143.html	false		high
https://res.cisco.com/websafe/images/pullFeature/arrowDown.svg	securedoc_20241217T163143.html	false		high
https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgn	securedoc_20241217T163143.html	false		high
https://url.us.m.mimecastprotect.com/s/gpsHCJ695gF8w3AvwhvtBIyjmB5?domain=res.cisco.com	securedoc_20241217T163143.html	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_128.2.dr, chromecache_129.2.dr	false		high
https://github.com/rsms/inter)InterBold3.019;RSMS;Inter-BoldInter	chromecache_145.2.dr, chromecache_117.2.dr	false		high
https://github.com/rsms/inter)InterRegular3.019;RSMS;Inter-RegularInter	chromecache_125.2.dr, chromecache_146.2.dr	false		high
https://url.us.m.mimecastprotect.com/s/zmt6CERV4MsWxV02xupikI7agxN?domain=res.cisco.com	securedoc_20241217T163143.html	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_114.2.dr, chromecache_119.2.dr	false		high
https://res.cisco.com:443/envelopeopener/decrypt_envelope.jsp	securedoc_20241217T163143.html	false		high
https://url.us.m.mimecastprotect.com/s/-lIyCNk64mFN3DP83CyHBIyMZFZ?domain=res.cisco.com	securedoc_20241217T163143.html	false		high
https://res.cisco.com:443	securedoc_20241217T163143.html	false		high
https://res.cisco.com:443/keyserver/keyserver	securedoc_20241217T163143.html	false		high
http://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14	securedoc_20241217T163143.html	false		high
https://github.com/rsms/inter)Inter	chromecache_147.2.dr, chromecache_116.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_144.2.dr, chromecache_137.2.dr	false		high
https://community.mimecast.com/docs/DOC-241	chromecache_118.2.dr	false		high
https://url.us.m.mimecastprotect.com/s/rUAJCPNV4oT4X8NRXiQSjIxSrDi?domain=res.cisco.com	securedoc_20241217T163143.html	false		high
https://url.us.m.mimecastprotect.com/s/Hq3cCL9V4kuP9ywr9UrCmIyuoJb?domain=res.cisco.com	securedoc_20241217T163143.html	false		high
http://www.mimecast.com/	chromecache_118.2.dr	false		high
https://getbootstrap.com/)	chromecache_138.2.dr, chromecache_114.2.dr, chromecache_119.2.dr	false		high
https://res.cisco.com:443/websafe/help?topic=RegEnvelope	securedoc_20241217T163143.html	false		high
https://res.cisco.com/websafe/custom.action?cmd=authFrame	securedoc_20241217T163143.html	false		high
https://url.us.m.mimecastprotect.com/s/ILaOCM8V4ls53Mk13cPFrI80FN0?domain=res.cisco.com	securedoc_20241217T163143.html	false		high
http://scripts.sil.org/OFLWeightSlant	chromecache_125.2.dr, chromecache_146.2.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443/websafe/help?topic=PPNotShown	securedoc_20241217T163143.html	false		high
http://scripts.sil.org/OFLWeightSlantRegular	chromecache_145.2.dr, chromecache_117.2.dr	false	Avira URL Cloud: safe	unknown
https://res.cisco.com:443/websafe/pswdForgot.action	securedoc_20241217T163143.html	false		high
http://scripts.sil.org/OFLInterLightWeightSlant	chromecache_116.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_138.2.dr, chromecache_114.2.dr, chromecache_119.2.dr	false		high
http://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://www.sharptype.cohttp://w	chromecache_131.2.dr	false	Avira URL Cloud: safe	unknown
http://www.sharptype.co	chromecache_131.2.dr	false	Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFLInterSemiBoldWeightSlant	chromecache_147.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.1.46.41	unknown	United States	14618	AMAZON-AESUS	false
205.139.111.12	url.us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
54.161.144.184	res.cisco.com	United States	14618	AMAZON-AESUS	false
18.66.161.47	d2qj7djftjbj85.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
170.10.128.87	security-us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
18.66.161.34	unknown	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577722
Start date and time:	2024-12-18 17:26:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	securedoc_20241217T163143.html
Detection:	MAL
Classification:	mal48.phis.winHTML@24/66@34/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 142.250.181.106, 64.233.164.84, 172.217.17.46, 23.193.114.26, 192.229.221.95, 172.217.19.202, 172.217.19.170, 142.250.181.138, 172.217.19.10, 142.250.181.74, 216.58.208.234, 172.217.17.42, 172.217.17.74, 172.217.19.234, 172.217.17.35, 172.217.19.206, 13.107.246.63, 23.50.252.137, 172.202.163.200
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: securedoc_20241217T163143.html

Input	Output
URL: https://cisco.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://cisco.com
URL: file:///C:/Users/user/Desktop/securedoc_20241217... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates moderate-risk behaviors, including dynamic code execution, potential data exfiltration, and aggressive DOM manipulation. While the intent is not entirely clear, the use of obfuscated code and interactions with unknown domains raise concerns and require further investigation." }
if(am('ff_saved'))alert(er('SavedPage'));var p4;if(p4=am('ff_trash'))p4. innerHTML='\x3cspan id=ff_saved\x3e\x3c/span\x3e';fD('browserLoading', 'BrowserParsing');e5(true);window.onfocus=qT;//-->
URL: file:///C:/Users/user/Desktop/securedoc_20241217... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The use of obfuscated code and the presence of a payload further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of a potential malicious attack." }
ew('browserLoading','');if(typeof ag=='function')ag();window.onload=pv; window.onkeydown=pv;var ey=document.forms[0];ey.method='POST'; ey.onsubmit=function(){return qg(ey,payload)};ey.onkeyup= function(oj){ql(ey,oj)};p5();if(!fP){qt();setTimeout(function(){i9(0,'payloadValue','payloadImage', 'metaPayloadValue','metaPayloadImage',"qJ(0,'key1',payload,"+ '"https://url.us.m.mimecastprotect.com/s/rUAJCPNV4oT4X8NRXiQSjIxSrDi?domain=res.cisco.com")' ,{'progressFn':fq,'progressArgs':{'progressBar':{'bgColor':'#808080', 'borderColor':'#000000'}}})},125)}//-->
URL: file:///C:/Users/user/Desktop/securedoc_20241217... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns. It includes external data transmission, the use of legacy APIs, and some obfuscation techniques. While there are no clear indications of malicious intent, the overall complexity and lack of transparency in the code warrant further review." }
'$Serial: 6261 $ $Revision: 1.16 $'; 'Copyright (c) 2001-2019, Cisco Systems, Inc. All rights reserved.'; 'Protected by United States patent numbers 6,014,688, 6,304,897,'; '7,533,422, 7,694,297, 7,802,096, 7,814,317, 8,005,920 and others.'; '$Serial: 3328 $ $Revision: 1.7 $';'Version: 2.3'; '$Serial: 6248 $ $Revision: 1.15 $';var ad='EnvelopeTools51',db='PostXBPC', dd='PostXPreferences',dc='PostXCookieCheck',ac='PostXCarbon.',de= 'PostXSessionKey.',df='PostXUserKey.',dk=315360000000,dg='',di= 'Tue, 19-Jan-2038 03:14:07 GMT',dh=315360000000,dj=315360000000,dl= 315360000000; '$Serial: 0478 $ $Revision: 1.9 $';var ae='appletHolder',f0='appletHolder', fE='undefined',aG='object',dv='string';try{if(typeof Array.prototype.push== fE)Array.prototype.push=function(){for(var _=0;_<arguments.length;_++)this[ this.length]=arguments[_];return this.length}}catch(fx){}try{if(typeof String.prototype.trim==fE)String.prototype.trim=function(){return this. replace(/^\s+\|\s+$/g,'')}}catch(fx){} '$Serial: 3888 $ $Revision: 1.23 $';function _w(a8){var gS= /^\sfunction\s+([^(]+)/,cS;if((cS=gS.exec(a8)))return cS[1];return''} function mp(i){i=i.toString(16);if(i.length&1)i='0'+i;return'%'+i}function _N(c,mr){c+='';var au,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);if( au>='A'&&au<='Z'\|\|au>='a'&&au<='z'\|\|au>='0'&&au<='9'\|\|au=='.'\|\|au=='-'\|\|au== ''\|\|au=='_')aw+=au;else{au=au.charCodeAt(0);if(mr\|\|au<128){aw+=mp(au&255)} else if(au<2048){aw+=mp(192\|au>>>6);aw+=mp(128\|au&63)}else{aw+=mp(224\|au>>> 12);aw+=mp(128\|(au>>>6)&63);aw+=mp(128\|au&63)}}}return aw}function a_(c,mr){ c+='';var au,dE,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);switch(au ){default:aw+=au;break;case'+':aw+=' ';break;case'%':if(c.charAt(_+1)=='u'){ au=c.substr(_+2,4);_+=5;dE=parseInt(au,16)}else{au=c.substr(_+1,2);_+=2;dE= parseInt(au,16);if(mr\|\|dE<128){}else if(dE<224){if(d-_<4\|\|c.charAt(_+1)!='%' ){}else{au=c.substr(_+2,2);_+=3;dE=((dE&31)<<6)\|(parseInt(au,16)&63)}}else{ if(d-_<7\|\|c.charAt(_+1)!='%'\|\|c.charAt(_+4)!='%'){}else{au=c.substr(_+2,2);_ +=3;dE=((dE&15)<<6)\|(parseInt(au,16)&63);au=c.substr(_+2,2);_+=3;dE=(dE<<6)\| (parseInt(au,16)&63)}}}aw+=String.fromCharCode(dE);break}}return aw}function _Y(c){c+='';var au,_,d=c.length,aw='';for(_=0;_<d;_++){au=c.charAt(_);if(au< ' '\|\|au>'~'\|\|au=='\''\|\|au=='"')aw+='&#'+c.charCodeAt(_)+';';else aw+=au} return aw}function mv(my,mu){var k0=arguments.length,j=[],_;if(k0==3&& arguments[2].elements){var ey=arguments[2],eq;for(_=1;eq=ey['key'+_];_++)if( eq.value!='')j[j.length]=eq.value}else{for(_=2;_<k0;_++)if(arguments[_]!='') j[j.length]=arguments[_]}j=j.join(my);if(mu)j=j.toLowerCase();return j} function go(cN,mq){if(!mq)mq=72;var _,b,d=cN.length;if('\ '=='')return cN;var cS=new Array(Math.floor((d+mq-1)/mq));for(_=b=0;_<d;_+= mq+1,b++)cS[b]=cN.substr(_,mq);cS.length=b;return cS.join('')}var mt=0; function mw(ir){var c;if(fM)c=ir+new Date().getTime()+mt++;else do{c=ir+mt++ }while(document.getElementById(c));return c}function jy(hq){var mo='',_,d=hq .length;for(_=0;_<d;_++){var au=hq.charCodeAt(_);if(au<128)mo+=String. fromCharCode(au);else if(au<2048){mo+=String.fromCharCode(192\|(au>>>6));mo+= String.fromCharCode(128\|(au&63))}else{mo+=String.fromCharCode(224\|(au>>>12)) ;mo+=String.fromCharCode(128\|((au>>>6)&63));mo+=String.fromCharCode(128\|(au& 63))}}return mo}function mz(ge,gM){var iS=ge.indexOf('#');if(iS<0)iS=ge. length;var mn=ge.substring(0,iS),ms='&',mx=mn.indexOf('?');if(mx<0)ms='?'; for(var j in gM){mn+=ms;ms='&';mn+=_N(j);mn+='=';mn+=_N(gM[j])}mn+=ge. substring(iS);return mn}zw=formKey=mv;zj=fixMultilineString=go;zi=genId=mw; attrEsc=_Y; '$Serial: 0611 $ $Revision: 1.6 $';function du(_8){var e=new Date().getTime( );if(!_8)_8=dc;_9(_8,e,'','/');if((e=(al(_8)==e)))aj(_8,'/');return e} function al(_8){_8=_N(_8);var c=document.cookie,dr=c.indexOf(_8+'=');if(dr== -1)return null;var ds=dr+_8.length+1,dp=c.indexOf(';',ds);if(dp==-1)dp=c. length;return a_(c.substring(ds,dp))}function _9(_8,_H,dm,_S,dn,dt){var c=_N (_8)+'='+_N(_
URL: file:///C:/Users/user/Desktop/securedoc_20241217... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. It includes features for dynamic form manipulation, password recovery, and potential data transmission to external domains. While some of these behaviors may be legitimate in certain contexts, the overall lack of transparency and potential for abuse warrant further review." }
var registeration_url;window.addEventListener('message',function(event){if(document.getElementById ('forgotPasswordForm')!=null){document.getElementById('forgotPasswordForm'). remove()}var pj=event.data.email,ez=event.data.href,oR=event.data.titleText, _H=event.data.value,qc=document.getElementById('forgotPwdDiv');qc. appendChild(pb(pj,oR,ez,_H))});function pb(pj,oR,ez,_H){if(oR==null){oR= 'Click here to recover a lost password.'}if(_H==null){_H='Forgot password?'} var oA=document.createElement('input');oA.name='forgotPasswordSubmit';oA.id= 'forgotPwdSubmit';oA.title=oR;oA.type='submit';oA.value=_H;if(window. navigator.userAgent.indexOf('Firefox')!=-1){oA.style='margin-top: 10px;'}if( window.navigator.userAgent.indexOf('Edge')!=-1){oA.style='margin-top: 5px;'} var o6=document.createElement('input');o6.name='forgotPswdEmail';o6.value=pj ;o6.type='hidden';var ey=document.createElement('form');ey.action=ez;ey. method='POST';ey.name='forgotPassword';ey.id='forgotPasswordForm';ey. autocomplete='off';ey.appendChild(oA);ey.appendChild(o6);return ey} function pbnew(pj, oR, ez, _H) {if (oR == null) {oR = 'Click here to recover a lost password.'} if (_H == null) {_H = 'Forgot password?'}var afp = document.createElement('a'); afp.title = oR;afp.name = 'forgotPwd';afp.href = ez + '?forgotPswdEmail=' + pj; afp.innerHTML = _H;return afp} function qQ(_l,ey,qu){mm(_l,{'error':p7,'success':p7},{'form':ey,'signature':qu})} function p7(status,qP,eu){if(!eu)eu=gUserArg;if(eu){var f5=eu.signature;if( status==ib\|\|status==ic){e3(eu.form,0);if(f5)et(f5, '\x3cspan class="error mds-text mds-text-p3 mds-text-weight-regular mds-text-color-regular mds-notification-content mds-notification mds-notification-negative"\x3eBad '+(status==ib?'postmark':'signature')+ '\x3c/span\x3e')}else if(f5){var c=qP,b=-1;for(_=0;_<3;_++)if((b=c.indexOf( ' ',b+1))==-1)break;if(b!=-1)c=c.substring(0,b)+'<br>'+c.substring(b+1);et( f5,c)}}}function pE(_l,iY,la,iG,eu,qV){var c;if(iG==jn&&_l.userKey){fa(fw,eu );gB(_l.userkeyname);_l.userKey='';oM(_l,true)}else if(iG== RPC_STATUS_NO_RECORD_FOUND){c=er('RPCMessageKeyRemoved','',iG,_l.msgID)}else if(iG!=iZ)c=er('RPCError','',iG,_l.msgID);if(c)alert(c)}var js,ok='passMsg', ol='',oC='initMsg',pm='',po='';function pv(dq){ if(!dq)dq=window.event;if(dq){if(dq.type=='keydown')window.onkeydown='';else if(js&&dq.type=='load')return;js={'ctrlKey':dq.ctrlKey?1:0,'altKey':dq. altKey?1:0,'shiftKey':dq.shiftKey?1:0}}} function qt(){pR();fp('passwordRow1');fp ('forgotPasswordRow');pl();fD(oC,'RPCWaiting')}function qJ(ey,eC, _l,ge,oj){if(OSMacOS9&&(_l.flags&iF)&&!(_l.flags&iM)){fa(fv);return;}window. onkeydown='';_l.rpc={'url':ge};_l.form.index=ey;_l.form.focusField=eC;_l. secureReplyAlg='';if(!oj)oj=js\|\|window.event; if(c=am( 'timeStampLocation'))if(payload.signature)c.innerHTML= '\x3cspan class=timestamp id=signature\x3e'+'\x3ca href="javascript:'+"qQ"+ '('+"payload"+',\''+ey+'\',\'signature\')'+ '"\x3eVerify this envelope\x3c/a\x3e'+'\x3c/span\x3e';else c.innerHTML= '\x3cspan class=timestamp\x3e12/17/2024'+ '\x3cbr\x3e10:31:43 PM GMT\x3c/span\x3e';if(_l.sessionKey)document.forms[ey ].sessionkey.value=_h.encodeToString(_l.sessionKey);if((_l.userKey\|\|_l. sessionKey)&&(_l.flags&hP)&&(!oj\|\|!oj.altKey))oK(document.forms[ey],_l,'',oj );else if(_l.userKey\|\|_l.sessionKey\|\|_l.encryptedSessionKey){ ew(oC,'');if(_l.selectedID)o7(_l.selectedID);oM(_l)}else pi();} function eB(qv){var dq,c,_l=payload; if(oF&&am('authFrame')&&(c=eU('iframeLocation')))c .appendChild(oF);pR();if(c=am('emailTo')){if(dq=am('toSelect')){ _l.selectNode=dq;c.removeChild(dq)}if(qv&&_l.selectedID)ew(c,_l.selectedID); else ew(c,'\"criselda.poparda@dish.com\" <criselda.poparda@dish.com>')}ew(oC,'');fp('bccRow');fp('passwordRow1');fp( 'forgotPasswordRow');ew('openButtonLocation','');ew('saveButtonLocation','') ;oq(0);if(c=ew('checkboxesLocation',''))fp('checkboxRow', 'addressSentinelRow')}function oM(_l,pd){px(_l);pw(_l,pd);ov(oE); oq(oU\|or);py();e4(_l.form.index,_l.form .f
URL: file:///C:/Users/user/Desktop/securedoc_20241217T163143.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Email Encryption Service", "prominent_button_name": "unknown", "text_input_field_labels": [ "To" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241217T163143.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Secure Email Encryption Service", "prominent_button_name": "unknown", "text_input_field_labels": [ "To" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241217T163143.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://res.cisco.com/websafe/help?topic=AddrNotShown Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "If a Secure Message is password-protected and sent to multiple recipients, it will show a dropdown list with the email addresses of all the recipients. If you receive a message with multiple addresses, choose your email address from the dropdown list. If you have previously opened a Secure Message on your computer and selected the 'Remember Me' option, your email address is automatically selected.", "prominent_button_name": "Submit", "text_input_field_labels": [ "Your address" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/securedoc_20241217T163143.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://res.cisco.com/websafe/help?topic=AddrNotShown Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.11.207	http://googlle.com	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.1.0/fonts/fontawesome-webfont.woff?v=4.1.0
	https://city-of-goodyear.webnode.page/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap-theme.min.css
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
	http://185.67.82.114	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js
	SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
url.us.m.mimecastprotect.com	https://url.us.m.mimecastprotect.com/s/hI-dC2kAwJT85krqxhnf2I5Wy1H?domain=sign.zoho.com	Get hash	malicious	Unknown	Browse	207.211.31.106
	https://url.us.m.mimecastprotect.com/s/UyVCCG6XgXIKkoLLfKfWIBtddS	Get hash	malicious	HTMLPhisher	Browse	205.139.111.12
	https://url.us.m.mimecastprotect.com/s/tWC_CNkXmJcoqkvlsmfBIyQP6j?domain=assets-gbr.mkt.dynamics.com	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	207.211.31.64
	https://url.us.m.mimecastprotect.com/s/iH0JCBBjkgh79gq8TzfDI2ROoJ?domain=xdky4s69az24bmcp.blob.core.windows.net	Get hash	malicious	Unknown	Browse	205.139.111.117
	https://url.us.m.mimecastprotect.com/s/qfbjCOY674iMrZ7sEflHGWtli?domain=lp.05nissa.site	Get hash	malicious	HTMLPhisher	Browse	207.211.31.106
	https://clickproxy.retailrocket.net/?url=https%3A%2F%2Fpaydcosx.z13.web.core.windows.net	Get hash	malicious	Unknown	Browse	205.139.111.12
	https://url.us.m.mimecastprotect.com/s/cx8GCJ6Aj8C8mZ33UVfXHy0nVz?domain=canva.com	Get hash	malicious	Unknown	Browse	205.139.111.12
	https://url.uk.m.mimecastprotect.com/s/qCW9CoOQ8clw4LF1fOHpzLEI?domain=url.us.m.mimecastprotect.com	Get hash	malicious	Unknown	Browse	205.139.111.113
	https://url.us.m.mimecastprotect.com/s/7XsKCQWmqkh6El9PsPhEHGZMGK?domain=hbgone.docdroid.com	Get hash	malicious	Unknown	Browse	207.211.31.64
	FW Important Security Policy Update.msg	Get hash	malicious	KnowBe4	Browse	207.211.31.64
res.cisco.com	securedoc_20241216T121346.html	Get hash	malicious	Unknown	Browse	184.73.13.143
	securedoc_20241209T071703.html	Get hash	malicious	Unknown	Browse	54.208.49.75
	securedoc_20241104T081116.html	Get hash	malicious	Unknown	Browse	54.161.165.135
	securedoc_20241028T070148.html	Get hash	malicious	Unknown	Browse	34.235.221.210
	securedoc_20241008T101508.html	Get hash	malicious	Unknown	Browse	50.17.52.147
	https://07d6b6-35.myshopify.com/pages/enternal/#1aWdvYmVsaUBoaWxjb3JwLmNvbQ0=	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	35.168.85.253
	https://fb1f1d-d3.myshopify.com/pages/fb1f1d-d3-scanning#0YnJhbmRpLnRyeW9uQGFjYWRlbWljcGFydG5lcnNoaXBzLmNvbQ0=	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	54.243.162.14
	securedoc_20240805T101719.html	Get hash	malicious	Unknown	Browse	3.210.249.249
	securedoc_20240521T074217.html	Get hash	malicious	Unknown	Browse	54.88.189.149
	securedoc_20240509T112530.html	Get hash	malicious	Unknown	Browse	18.233.198.142
security-us.m.mimecastprotect.com	https://url.us.m.mimecastprotect.com/s/iH0JCBBjkgh79gq8TzfDI2ROoJ?domain=xdky4s69az24bmcp.blob.core.windows.net	Get hash	malicious	Unknown	Browse	170.10.132.87
	EXTERNAL Re 0282119 Approved Rosado Sons Inc. - 110524 A00001220503Receipt (2).msg	Get hash	malicious	Unknown	Browse	170.10.132.87
	https://url.us.m.mimecastprotect.com/s/ilkSCZ6mm3hDOA2KCjhRFBSqQQ?domain=google.ch	Get hash	malicious	Unknown	Browse	170.10.128.88
	EXTERNAL Gina Wren shared Inv-00811 With you.msg	Get hash	malicious	Unknown	Browse	170.10.128.87
	https://url.us.m.mimecastprotect.com/s/NhduCzpA73FDm0Yhgi0C9-qzu?domain=filemail.com	Get hash	malicious	Unknown	Browse	170.10.132.88
	https://url.us.m.mimecastprotect.com/s/mQJWCv2vBJHvJ2ZuQf8CQgCZ2?domain=email.friendbuy-mail.com	Get hash	malicious	Unknown	Browse	170.10.132.87
	https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.0JfxfH8ssmm4IH6cwCFt-D9qW8OfbSAI3GS_btQfQlhldgcwCnCLHOyJ29U3WB7DtC_DhQgg-MQmn_Q3nA6YAOMW_gWm7KyNL-ia48d-H6d4D5ATg5kL5M3JPWyG3CkSJb5TEl4olwCIO6QZGRmDfJp48aiZoORuXZ_tdiGfAoM.wnVN2YKcNuAslAQ06pDpdg#/enrollment?key=7aeab67f-ce32-30f5-9feb-9cd16579fa82	Get hash	malicious	Unknown	Browse	170.10.128.89
	https://url.us.m.mimecastprotect.com/s/Qm2mCJ6A6NTYMRpOiV9KIQ?domain=johndstephens-my.sharepoint.com	Get hash	malicious	Unknown	Browse	170.10.132.89
cdnjs.cloudflare.com	https://sites.google.com/kula.ai/rdps/home	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	Credit Card Authorization Form.pdf	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D	Get hash	malicious	Unknown	Browse	104.17.25.14
	Harrisassoc_Updated_Workplace_Policies_and_Compliance_Guidelines.pdf.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://drive.google.com/file/d/1t3oVTU9WVeXXW61-QBDfjBrcece1DEFY/view?usp=sharing	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.google.co.th/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=temadewelgFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%6D%6F%74%6C%65%79%2D%61%6D%65%6E%61%62%6C%65%2D%73%74%69%6E%67%2E%67%6C%69%74%63%68%2E%6D%65#Y2hhbmd5ZW9sLmNob2lAaHl1bmRhaWVsZXZhdG9yLmNvbQ==	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2#	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	https://1drv.ms/w/c/17cc1e7b64547fa0/ER4uyAUCto9GkfZ_Sw-4_NAB9TeJj_jWV9oRzb3kdQINFQ?e=4%3aaVtPRh&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	104.17.25.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	https://sites.google.com/kula.ai/rdps/home	Get hash	malicious	HTMLPhisher	Browse	104.21.56.29
	https://sites.google.com/kula.ai/rdps/home	Get hash	malicious	HTMLPhisher	Browse	172.67.134.110
	_Company.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	172.65.255.143
	https://shorturl.at/roHta	Get hash	malicious	HTMLPhisher	Browse	104.26.8.129
	https://www.grapevine.org/join/next-gen-giving-circle-dc	Get hash	malicious	Unknown	Browse	104.16.117.116
	https://www.google.com/url?q=https%3A%2F%2Fjollybos.es%2Fwills&sa=D&sntz=1&usg=AOvVaw1qWh2KPHS1VH9DwguQzCFr	Get hash	malicious	HTMLPhisher	Browse	172.67.187.179
	http://bluepeak-group.com/fc	Get hash	malicious	Unknown	Browse	172.67.68.137
	VKJITO.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	104.26.13.31
	VKJITO.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	104.26.12.31
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	https://sites.google.com/kula.ai/rdps/home	Get hash	malicious	HTMLPhisher	Browse	104.21.56.29
	https://sites.google.com/kula.ai/rdps/home	Get hash	malicious	HTMLPhisher	Browse	172.67.134.110
	_Company.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	172.65.255.143
	https://shorturl.at/roHta	Get hash	malicious	HTMLPhisher	Browse	104.26.8.129
	https://www.grapevine.org/join/next-gen-giving-circle-dc	Get hash	malicious	Unknown	Browse	104.16.117.116
	https://www.google.com/url?q=https%3A%2F%2Fjollybos.es%2Fwills&sa=D&sntz=1&usg=AOvVaw1qWh2KPHS1VH9DwguQzCFr	Get hash	malicious	HTMLPhisher	Browse	172.67.187.179
	http://bluepeak-group.com/fc	Get hash	malicious	Unknown	Browse	172.67.68.137
	VKJITO.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	104.26.13.31
	VKJITO.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	104.26.12.31
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	https://sites.google.com/kula.ai/rdps/home	Get hash	malicious	HTMLPhisher	Browse	104.21.56.29
	https://sites.google.com/kula.ai/rdps/home	Get hash	malicious	HTMLPhisher	Browse	172.67.134.110
	_Company.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	172.65.255.143
	https://shorturl.at/roHta	Get hash	malicious	HTMLPhisher	Browse	104.26.8.129
	https://www.grapevine.org/join/next-gen-giving-circle-dc	Get hash	malicious	Unknown	Browse	104.16.117.116
	https://www.google.com/url?q=https%3A%2F%2Fjollybos.es%2Fwills&sa=D&sntz=1&usg=AOvVaw1qWh2KPHS1VH9DwguQzCFr	Get hash	malicious	HTMLPhisher	Browse	172.67.187.179
	http://bluepeak-group.com/fc	Get hash	malicious	Unknown	Browse	172.67.68.137
	VKJITO.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	104.26.13.31
	VKJITO.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	104.26.12.31
AMAZON-AESUS	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.23.57.177
	sparc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.54.116.211
	http://bluepeak-group.com/fc	Get hash	malicious	Unknown	Browse	35.171.14.10
	arm7.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.87.242.166
	https://i.donotreply.biz/XWTZMVjBsbS9FS1Z2NzBoRzFZMy83RkoxVmlXaWlxaHo3VWFucmtuUGw1enh1ZWNEWVVSRmU5SURkU2psUnlGWUVLSzJtc3hJMVRZeXdZQTdKTVMwOTIySXc0dXRmSmkrKzVTSFFkRTlsZ0sycWdFdnhVY3BJNGx5ZnRmWTFhc0tuTTN1bVNUeUdFYkgrRW9rVllXdnIvNEE4aUgwNlR0R291UUxXUmY2L1JsVnZyNmMvbVpoUGJac04xckVKQlBXLS1PZFpzV3ByWmxpaEJybUhrLS1uMXVPRk5IWXlyNFBPNklpRkk0NTB3PT0=?cid=2330206445	Get hash	malicious	KnowBe4	Browse	3.209.102.171
	slehaYAu1z.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	7KAYnROp5y.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	LPtrVGfaJR.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	3a5Wrz0dWU.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	9y8P2kPsOq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 15:27:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9783621036320436
Encrypted:	false
SSDEEP:	48:8YdnT/rzH1idAKZdA19ehwiZUklqehVy+3:84vT2y
MD5:	F302DC1B48E67923ECD6DB854662B46C
SHA1:	4F4FAA39098B54E4BAD2FB3B665004F4CDEA6491
SHA-256:	0368DB6739B472CD98A100668B3EDB247A430BED6929B5E0F71FA6678FDC1946
SHA-512:	1F2C4B6C0C81B7BCC951E683FE73D4A7A780D26C3C502D248AC793A40EC1E87233FB967BA67E37A5DC4F74D0127A7762C3D3AF463AACF86E326BE08A0E84E9CE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......n.iQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............d.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 15:27:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9915469029071113
Encrypted:	false
SSDEEP:	48:8adnT/rzH1idAKZdA1weh/iZUkAQkqehmy+2:8avh9Qry
MD5:	297F8540983A454D4576A5EFFBC33D3A
SHA1:	17962C7968B3711C232745205DAD7860638DB85E
SHA-256:	C9DB9FAFA7F0B46BD53A216CFA86659C49E4376608F786C5031085FD55B85C16
SHA-512:	0DAFC9CD7ACFBCE39F64B2C9B8FC73CA9D7719974044DB67571E4201EADF55B835CF0903F9FF15246EFA2240DD327C011F185598B5EE1733EF431B4CB34EB3A0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....+.\.iQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............d.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0075698343275485
Encrypted:	false
SSDEEP:	48:8x0dnT/rsH1idAKZdA14tseh7sFiZUkmgqeh7sMy+BX:8xcvInyy
MD5:	4F9E32A227B6B8AC3A0E4B4EF7509107
SHA1:	C21B5AB4E60B67224ED051D624257FFDCD06A8C1
SHA-256:	57802B6D1F11BD54AAEB6A249EBB20D3C9011349769BD60808C7B3BC24B99D3F
SHA-512:	DD81DFFF5468FEB0C6DA6E712976E58517DFC5DFF4C0C8D6FC8FFC18E95C98ACA6229E2B21DF464F8371CCE23357106845047AC4490E6173F4C82209C5E3DED6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............d.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 15:27:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.994313953587452
Encrypted:	false
SSDEEP:	48:8KdnT/rzH1idAKZdA1vehDiZUkwqeh6y+R:8KvCUy
MD5:	C8C18ED072E0E9FC2DC293967DB3FC20
SHA1:	79DA5E25CCF94E812F5F1AA1C5BAD4CC68B46C6E
SHA-256:	5D33FD5E527A18E348D1AE4E45EC02E49E406468C57237E125B8CE97607AB953
SHA-512:	13EEC30F15DF98A9AE68AAC246FAD55731CC885A4CA5F7E53FF867E63EB7AEE1D06FE981F2615769C2819C886AA94CC70421DF68DB558E598B88034E4E876B22
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K.Q.iQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............d.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 15:27:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.980177609065997
Encrypted:	false
SSDEEP:	48:8VdnT/rzH1idAKZdA1hehBiZUk1W1qeh4y+C:8vvy9Yy
MD5:	FFB20FD6C173BF87CA3AC96534BDCA04
SHA1:	722862EA5A26680925CDFFA449A36FE90D91E835
SHA-256:	5C10B64E2B4E5DAA52536265C5A22619C7B002693308BC0F389279AE156FFD56
SHA-512:	148B8497D9150534692D473518F6E04E394FFA28AB9FAF922B03478484E1A3F7AD473932836A32AF2494A732D67A4C4134B7B77F2F7DD03CA4CD0C92562F8768
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......f.iQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............d.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 15:27:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.988545326892253
Encrypted:	false
SSDEEP:	48:8UdnT/rzH1idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbyy+yT+:88vsT/TbxWOvTbyy7T
MD5:	26C789EAFB863064FF9FCF00E4E40CB4
SHA1:	BD9FC452695D2843A910C8A9B3384282C344A55F
SHA-256:	FD52C2D7F79339CAA49641E38467CC586477E342DC0745FF66D98266E02623F7
SHA-512:	2672B87FED2C9AACF68E493E8883BD7658D34F0ED97B7EE536FCDFF666A130CEB462E820BF5BE077381C4B581E0130C3DB3C1C6843F3F29558356E632736381E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....aD.iQ..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............d.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	125394
Entropy (8bit):	5.069062799454485
Encrypted:	false
SSDEEP:	1536:ZrCMDD2MR/9fU2j2L292qgJYq1x2KLLn+mbkQ7ThzeSRwJWL0V8bK/FMGFOFlLn5:HDFfU2j2L292qgZxxv+mAQXhzeSRwzQ
MD5:	A0B4FF216E038470B000B63F5AA39816
SHA1:	319D6BB77F2115DA9F977569477AC010F87E6386
SHA-256:	7A61694ACF36F22050B90F751DBAFC330D5025471F83F5C08F663CD2633448F7
SHA-512:	A3B38E3CC9B204D809DBAEEB1417E878EFA9A2D8AAF9E311051FF6FEDD1C1F92F89901274EBD43A163F03D42567D6586063333A3ECDDC128A64773315BB1B094
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://static.cres-aws.com/postx.css
Preview:	/* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 800;. src: url("./fonts/Inter/Inter-ExtraBol

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2111
Entropy (8bit):	5.156495456552832
Encrypted:	false
SSDEEP:	48:vKs/UigMMiqdPXIU70U7kAAakASjKXigO2qXigAgDUYnx7c5MJqDaZbhqm1F:n8iMiS70GRzi7Ji4RoAqibIqF
MD5:	0EF5306CD54F1799C9FA23548762EC4A
SHA1:	6E56D085A9136CBE8EBEC45DA4F18BA0299C5F0C
SHA-256:	CD4EB96D517491FCBA4D0748AD53B58DA9A3644DB226BE8B55FD93473AD8ADDD
SHA-512:	9FAE934C7A32993AF7B88AB294EFC4CA8CAB8552A112697AFFD0F27E916A728F98983D241CAFC0CB25563317120D70B73A0B42BA61FCFECFF8492E654CDBE6A3
Malicious:	false
Preview:	..var screenReaderCalled = false;....function insertForScreenReader(text){...var warning = document.getElementById('timeoutMessage');...warning.innerHTML = text;...warning.style.display = "none";...warning.setAttribute("aria-live","assertive");...warning.setAttribute("role","alert");...warning.setAttribute("aria-invalid","true");...warning.style.display = "block";...warning.focus();..}....function notifyTimeout(){...var t = document.getElementById('sessionTimeout');...var m = document.getElementById('timeoutMessage');...if(t != null && m != null){....var timeout = t.value;....var message = m.innerHTML;....document.getElementById('timeoutMessage').innerHTML = "";....if(timeout != null && message != null && timeout > 60){.....setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',(timeout-60)/60));.....},601000);..........setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',1));.....},(timeout-60)1000);....}...}..}....function updateScree

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	dropped
Size (bytes):	58072
Entropy (8bit):	5.247960089226309
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
MD5:	E1D98D47689E00F8ECBC5D9F61BDB42E
SHA1:	6778FED3CF095A318141A31F455C8F4663885BDE
SHA-256:	0A34A87842C539C1F4FEEC56BBA982FD596B73500046A6E6FE38A22260C6577B
SHA-512:	021E615983F30EC5477FD8B611E8C5045AC6D9900F9A9BB8649B56E0C7D282965A727F8CF501C3B7E1DDFF02F5B44924D5481BCEA7A926BE8A9E166314A07ED0
Malicious:	false
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2111
Entropy (8bit):	5.156495456552832
Encrypted:	false
SSDEEP:	48:vKs/UigMMiqdPXIU70U7kAAakASjKXigO2qXigAgDUYnx7c5MJqDaZbhqm1F:n8iMiS70GRzi7Ji4RoAqibIqF
MD5:	0EF5306CD54F1799C9FA23548762EC4A
SHA1:	6E56D085A9136CBE8EBEC45DA4F18BA0299C5F0C
SHA-256:	CD4EB96D517491FCBA4D0748AD53B58DA9A3644DB226BE8B55FD93473AD8ADDD
SHA-512:	9FAE934C7A32993AF7B88AB294EFC4CA8CAB8552A112697AFFD0F27E916A728F98983D241CAFC0CB25563317120D70B73A0B42BA61FCFECFF8492E654CDBE6A3
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/screen-reader.js
Preview:	..var screenReaderCalled = false;....function insertForScreenReader(text){...var warning = document.getElementById('timeoutMessage');...warning.innerHTML = text;...warning.style.display = "none";...warning.setAttribute("aria-live","assertive");...warning.setAttribute("role","alert");...warning.setAttribute("aria-invalid","true");...warning.style.display = "block";...warning.focus();..}....function notifyTimeout(){...var t = document.getElementById('sessionTimeout');...var m = document.getElementById('timeoutMessage');...if(t != null && m != null){....var timeout = t.value;....var message = m.innerHTML;....document.getElementById('timeoutMessage').innerHTML = "";....if(timeout != null && message != null && timeout > 60){.....setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',(timeout-60)/60));.....},601000);..........setTimeout(function(){......insertForScreenReader(message.replace('[timeout]',1));.....},(timeout-60)1000);....}...}..}....function updateScree

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter LightRegular3.019;
Category:	downloaded
Size (bytes):	304092
Entropy (8bit):	6.319721866705066
Encrypted:	false
SSDEEP:	6144:C3jzGK0leqjmxgOqp888TQIPOer74S1/a9cckpRo/iOmL:C3jzGHAq+8IzrUm7o/OL
MD5:	60C8F64064078554B6469EEDA25944EB
SHA1:	732E278A85762A0EDFB4E077E44E3EB39D8AF92E
SHA-256:	7FB161BBEB1C03F21D9A80601400D803E7EA7DD6FC8EA164F2B2A073E7722953
SHA-512:	57F3E7EC496FCA463848AC63E5BD6EC0967A1CC461D0580868B0625DCA78ECEC14FC13391E4B8F1BA08A598DFAF3DD08D721AD2B5AD31C35B9CC9BFAB3CFA03F
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Light.ttf
Preview:	............GDEF1.1...;l....GPOSDT{6..?...!dGSUB..fx..`...B.OS/2"3nb..n....`STAT.M.?.......Dcmap/....n...e.gasp......;d....glyf...........qhead-.aF..Fp...6hhea......nt...$hmtx......F...'.loca.]........'.maxp........... name5.\.......8post..5r......d.preph..................................!...!...!...!...!...........................@.........................O............!#.3.#.#.!.!..........~...................O.............#..!#.3.#.#.!.!."&54632....!"&54632..............~........3MM37II..3MM37II...........M37II73MM37II73M...O...../.&.......l.4.....O.......&.......f.O.....O.......&.......d.......O.....P.&.......j.,.....O.............&..!#.3.#.#.!.!."&546632......'2654&#"..............~.........p.H{JKzHHzK@WW@@WW............pKzHHzKJ{HuY?@XY?@X...O.......&...............O...'...&.......v.......O.......&.......m.m.....O.......&.......n.4.....O...'...&.......v.......O.....a.&.......s.,.....O.......&...............O.......&...............O.......&.......{.L.....O.....g.&...............O

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4173)
Category:	dropped
Size (bytes):	5889
Entropy (8bit):	5.876019257696692
Encrypted:	false
SSDEEP:	96:TWCsd8Lat+nvllYCK3t+nvllYCKWWCsdgWCsdsDcPEYWCsdsWCsd5RWCsd5UlQ:T7cEoxEoY7/76EY757gR7g4Q
MD5:	2852D578008A9FB7624A7B24870E6893
SHA1:	57FF880D495AFB876C9C92D0B42E8EDCAC4F1F06
SHA-256:	F1F87BF0E37A492739070C6FB589DB2F0CE4A83155DF4D82DB505C17193FB2E0
SHA-512:	F97E65D88E960528706B02F694E6DEB07CEE4B82DB31908F3DB9F40BA01A6EFA47552050608264B794A5DC159CB2257BD2B8C92CCBF8D50D55E56DFB05E627C2
Malicious:	false
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1">. <title>Mimecast TTP Web Portal</title>. <meta name="apple-mobile-web-app-capable" content="yes">. [if lte IE 10]> <link rel="icon" href="/ttpwp/resources/images/favicon.ico" /> <![endif]-->. <link rel="shortcut icon" href="/ttpwp/resources/images/favicon.ico" />. <link rel="apple-touch-icon" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. . . <link rel="stylesheet" href="/branding/d6b05e46a80b0fa8f7f36cdf144f4e3d7164f809/style.css?tkn=3.05NEOq_FZz8JG2UJ5NcRs7jv_0RGttkOMuqbwO-p3sZZuDAWSDuMFcTk3AJSo_8oS76qccDhATEDw9iVRPcP_X053DPXAWDS599zCK42xuxqk6

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	downloaded
Size (bytes):	58072
Entropy (8bit):	5.247960089226309
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
MD5:	E1D98D47689E00F8ECBC5D9F61BDB42E
SHA1:	6778FED3CF095A318141A31F455C8F4663885BDE
SHA-256:	0A34A87842C539C1F4FEEC56BBA982FD596B73500046A6E6FE38A22260C6577B
SHA-512:	021E615983F30EC5477FD8B611E8C5045AC6D9900F9A9BB8649B56E0C7D282965A727F8CF501C3B7E1DDFF02F5B44924D5481BCEA7A926BE8A9E166314A07ED0
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1280 x 808
Category:	downloaded
Size (bytes):	10598
Entropy (8bit):	7.973575732670468
Encrypted:	false
SSDEEP:	192:0Dszh0YIrh919BR4ljLo1af3wHZY4laNGRO+1BMuq:NNohhn4lpfjkRT1BMp
MD5:	C22D6210FC87C4743002CEA8A581D766
SHA1:	F0050B25B3FCBF863695CFD025E611A98A353CC8
SHA-256:	A0DF8C2C2AAF954F3F45E88A82B2F15AB918BA9DA08EB7BE21569C6143BA5262
SHA-512:	2F22F7109C4F45D8760011CC7FD25A0740FA647D3148ABB3C493F9FF162E799B9FD9CE7294ED9730CAE6E6D825EFB5FA23BF127128B020FDE3C134BCFAD0AC5F
Malicious:	false
URL:	https://res.cisco.com/websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1
Preview:	GIF89a..(................!.......!..ImageMagick.gamma=0.454545.,......(....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:..]...6=.....R.;.;6l.d.FM;...s.....:.....E.....;..S.....N.z...ok..=..I...V...F.......C...OV...@.......s..GH....."x...1H.w.z.a..7`..\...yp.......x.X..#.h..r........o........m.....Y..j.i[.F..d.K..lO2.elS.Q%lJ^yJ..q)...m..(b.Vf.g..&).6.&.k..g(s.Y'.s.i.\|j...)h.....t"J..^..U8)%.V...Fr.Oh.#.......2.I.."..j......C.j. .........=.,........~..24.l..F[...h.+d....v......-.k.......'.+..k.;...~.."../........j...$...7....G1...Hl...g\.../.....+....\|r...1.....1......L.8..s....0.>......m

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	downloaded
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
URL:	https://res.cisco.com/websafe/images/loginbg.gif
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	18445
Entropy (8bit):	4.897847983137727
Encrypted:	false
SSDEEP:	384:GRERfnE7QxMqwvVvgJo1J6VoFkDtcgueiQXLFiR1I9H+PgpiztB7SxfFERycxK/Y:GSE7QWXxQo1J6ykDlueiQXLFm1I1+Pgc
MD5:	096CE0B8694339B10AA989E61521A9CA
SHA1:	4834282EA07AFF4A2D83684E9538F51475077297
SHA-256:	252FC0DEE0B0A65A653A09D20E388C3A9B2D201ACCEAE55FDB19B5ACDD5A75FE
SHA-512:	48E6B0F57746E131C077EE247BA0F481E88D97128DA229EFB0B521CE8AE9E60A3795D93625C3E6D7E9749A464353900F3EE19860C22A47C7FF9716A026C9D9D5
Malicious:	false
Preview:	function onLoadPage().{. // Hide and unhide some things. For now we assume everything that might. // need to be toggled is a div or a... toggleVisibility('div');. toggleVisibility('a');.. // Set the focus on the field identified in our XML. If no field. // was identified then look for the one named focusItem (which. // might not exist). If a field name was provided but is equal. // to 'nofocus' then don't try to focus on anything... var focusID = (typeof focusItemID == 'undefined') ? '' : focusItemID;. var focusElement = '';.. if (focusID). {..if (focusID != 'nofocus')..{. var focusIds = focusID.split(" ").. //break at firstMatch. for (let i = 0; i < focusIds.length; i++) {. focusElement = document.getElementById(focusIds[i]);. if (focusElement){. break;. }. }. if (!focusElement)... focusElement = document.getElementById('focusItem');. if (!focusElement).

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1280 x 808
Category:	dropped
Size (bytes):	10598
Entropy (8bit):	7.973575732670468
Encrypted:	false
SSDEEP:	192:0Dszh0YIrh919BR4ljLo1af3wHZY4laNGRO+1BMuq:NNohhn4lpfjkRT1BMp
MD5:	C22D6210FC87C4743002CEA8A581D766
SHA1:	F0050B25B3FCBF863695CFD025E611A98A353CC8
SHA-256:	A0DF8C2C2AAF954F3F45E88A82B2F15AB918BA9DA08EB7BE21569C6143BA5262
SHA-512:	2F22F7109C4F45D8760011CC7FD25A0740FA647D3148ABB3C493F9FF162E799B9FD9CE7294ED9730CAE6E6D825EFB5FA23BF127128B020FDE3C134BCFAD0AC5F
Malicious:	false
Preview:	GIF89a..(................!.......!..ImageMagick.gamma=0.454545.,......(....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:..]...6=.....R.;.;6l.d.FM;...s.....:.....E.....;..S.....N.z...ok..=..I...V...F.......C...OV...@.......s..GH....."x...1H.w.z.a..7`..\...yp.......x.X..#.h..r........o........m.....Y..j.i[.F..d.K..lO2.elS.Q%lJ^yJ..q)...m..(b.Vf.g..&).6.&.k..g(s.Y'.s.i.\|j...)h.....t"J..^..U8)%.V...Fr.Oh.#.......2.I.."..j......C.j. .........=.,........~..24.l..F[...h.+d....v......-.k.......'.+..k.;...~.."../........j...$...7....G1...Hl...g\.../.....+....\|r...1.....1......L.8..s....0.>......m

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3410
Entropy (8bit):	4.999641838889194
Encrypted:	false
SSDEEP:	96:lFyElOB4vB4IB4OOB4rO3OBXNOBjY0Zk4UwyKEOnKEOGKaOI:2nhB
MD5:	FFD024A5F355F3A7D58EE4A0989472F0
SHA1:	391284200A85AC7C1A91EED218F929E6625DF107
SHA-256:	8009FACCEF527042BDEF7373469CEFF25079ED17A5328FB0FF9EBF9F3A91D022
SHA-512:	54EAA0AD8D23004181F79EFD31620D1CB4ABF152ECB805DBE3C97AD37CD9BC168FFEC41543C6CF6024C8F88EFB4B511CCAC6A8D61CADEDD8A2C0F5504418BE84
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/customHelp.css
Preview:	.supportTableEntry {. color: #555555;. font-size: 13px;. font-weight: normal;. padding: 2px 15px 10px 8px;. font-size: 14px;. font-family: CiscoSans, CiscoSansTT;. color: #4a4a4d;.}..copyrightLinks a {. font-family: "Inter" !important;. font-style: normal !important;. font-weight: 700 !important;. font-size: 12px !important;. line-height: 18px !important;. color: #326cd1 !important;.}..h3 {. font-family: "SharpSans" !important;. font-style: normal !important;. font-weight: 700 !important;. font-size: 18px !important;. line-height: 24px !important;. color: #373c42 !important;. margin-top: 24px !important;.}.h4 {. font-family: "SharpSans" !important;. font-style: normal !important;. font-weight: 700 !important;. font-size: 16px !important;. line-height: 24px !important;. color: #373c42 !important;. margin-top: 24px !important;.}..copyrightLinks {. font-family: "Inter" !important;. font-style: normal !important;. font-weight: 700 !important;. font-size: 12px

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (532)
Category:	downloaded
Size (bytes):	122633
Entropy (8bit):	5.0561485054636455
Encrypted:	false
SSDEEP:	1536:Hy0/DEC/9Je2j2L292cghoO/BEKLLnMcbCQd7zWiRcZELcv0b4zZxMOXObVHndFp:BD1Je2j2L292cgRBPvMc2QpzWiRcDi
MD5:	327455C921FD609119557C0E6C125F1A
SHA1:	313B51FF43F674A6D3C912B5F7BE6D161382CA05
SHA-256:	ED17CD34424CD1231D8AEAF80F0DC27F604BE4AE9A8C61D82581B2984FD1E1AF
SHA-512:	069D3E086845BE2671E791A429D9E111058D1D0396F0770F426F6759FA200170CB33FC4A0DC17CDA7BFC67DF3FC88329A237140E7BBC2A267D47ADD057DB935F
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/css/postx.css
Preview:	/* General styles /./ $Id: postx.css,v 1.104 2016-03-10 11:36:12 igitskai Exp $ /.@media (forced-colors: active) and (prefers-color-scheme: light) {. .headericons {. filter: brightness(0) saturate(100%);. }. #localeUI {. filter: invert(1);. }. svg{. filter: brightness(0) saturate(100%);. }.}.html {. background-color: #f7f7f7;.}.body{. background-color: #f7f7f7;. background: #f7f7f7 !important;.}.input:not([disabled]):not(.mds-button):hover {. border-color:#7aa7f5!important;.}.input:not(.mds-button):focus {. border-color:#598ede !important;. box-shadow:0 0 0 2px #326cd133;. outline: none;.}.input:not(.mds-button):focus:hover {. border-color:#598ede !important;. }./to remove browser specific background color when inputs are auto filled */.input:-webkit-autofill . {. -webkit-box-shadow: inset 0 0 0px 9999px white;. }. input:-webkit-autofill:focus. {. -webkit-box-shadow: inset 0 0 0px 9999px white,0 0 0 2px #326cd133 !important;. }.textarea:hover {. border-

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	138842
Entropy (8bit):	7.935871073501787
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opBh:y2i/34ZIcB25tt+VA+LC40YsVlkkeh
MD5:	10DC4D8A6164837FE25C1A2057F953A9
SHA1:	4D55638678B8BFC9CC445F1039E673AFA0CDE7D0
SHA-256:	57D2EA7D05E0C34F4E5C3F2D6D43E0AE48F4891A90599BB1BEECEE2972741494
SHA-512:	0779778474E00E7C153DB2E454812B920E0303CC712BB96B3603A62F9446A95BD9C60724472F0E242A8BE3D1807A4C1579A98B54622EAE7E21522BEAC9C26A05
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	downloaded
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/js/select2.min.js
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64131)
Category:	dropped
Size (bytes):	70357
Entropy (8bit):	5.316512415217151
Encrypted:	false
SSDEEP:	768:8otqucnre3DeGGG8MinEAsBj0hGE5jGookOlxN07TWlOw7uZRgydnRR66cGK/Jw:X8hCBjAGvkOvxbyJvoGD
MD5:	7C909F6DD07BED69C9CDABC9DEE2C131
SHA1:	7EF0ABFDB5935CDC2D50953FC0CEE43ABB501C28
SHA-256:	C1F5534ED276A1EAA57B106C7DADCC994A01EFBC033513EA4F5435580D8C327E
SHA-512:	E7E16B1264A28E3C5102B25678B7022048284180205348126BD32034C37EB55492F8C3D9B0493D6BB3A43D9AFB0338CD2678352A5FAD5CE415B4972C53E031D3
Malicious:	false
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(u){var e=function(){if(u&&u.fn&&u.fn.select2&&u.fn.select2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(r=n.slice(0,u).join("/"),h)for(d=h.lengt

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 30 names, Macintosh
Category:	downloaded
Size (bytes):	10948
Entropy (8bit):	5.681032264103322
Encrypted:	false
SSDEEP:	192:mKTaaVor7cHBO9alshdQjZk1QN0g7PFcRI0cEiI/ibp:mKTa7cVqCkOTFcG0cEi5p
MD5:	FD6EC063F4FDB8130A0BB83B8BFEEF1B
SHA1:	1C58C28756170ED365D535C2A4667FA34BDAF2F6
SHA-256:	6D821BFA1C0E286427E0B31DA501B39333E2A3D791CEBF213B2E605393656D8A
SHA-512:	D6973E941027232BABFCD9CE40985C36D1DD246E83B48D36AB6A588E70CC08C6B163D9E6156788F55B294AB467008E29991107D79AB6F9303D4AF95C38E5415E
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/SharpSans/SharpSans-Bold.ttf
Preview:	...........pFFTM..~U.......GDEF.%.....t....GPOS3.$[........GSUB...........fOS/2g.....x...`cmapV..(.......bgasp.......l....glyf.".\........head.o'w.......6hhea...-...4...$hmtx...4........loca...L...L....maxp...4...X... name..".........postC..................~7&^_.<..........~................................................................D.....D.1.................@.........h.......................2..............................SHRP... .z.....;...2 ...M.......... .....@.....M.........)...3...&.S.$.M.....'.Q.#.{.3.6..k..n.+.......@.......@.c.@.L.@.>.....@...E.......@.J.@.F.@...@.G.....@.I.....@.}...y.-...>...................4.^.#...6.e.%...%.\|.%.......%.b.6...$.....Y.6...6...6.c.6...%...6...%...6.........c.5.E.......\...Q...-.)...$...................\...........@........... ...9.Z.z..... ...0.A.a.................................................................................................................. !"#$%&'(......)+,-./0123456789:;<=>?@AB...................................

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	155249
Entropy (8bit):	7.9359220373800605
Encrypted:	false
SSDEEP:	3072:y2ux/P/4+kIcB3DCN7tiOJ+9uCA2NAdMLJtNK1A50YsGKlk1042opB9iMVD:y2i/34ZIcB25tt+VA+LC40YsVlkkeMMt
MD5:	C3598F2D3BF6694DF3378AAFC792BFEE
SHA1:	BBCA95477B9B15A41E4EDC59784D76F621A27263
SHA-256:	A7842139A79734699FB6BD749733DA53E30B3634FB8C2695B57FD1A017DD1FE2
SHA-512:	5623BDBCD1FC446518E1DCE0817813E55938136D09375F35CFF3F828085C5B9A383DB43904565B7B5399B12919C72D56E0D4E00CB5582FE158E793CF41795425
Malicious:	false
URL:	https://static.cres-aws.com/CRES_login_bg.jpg
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3" xmpMM:InstanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E712D444FE6211E994A3CEA94946B049" stRef:documentID="xmp.did:E712D445FE6211E994A3CEA94946B049"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=sandra cifo. www.cifography.com. 2016], baseline, precision 8, 1440x960, components 3
Category:	dropped
Size (bytes):	51646
Entropy (8bit):	7.866024072803453
Encrypted:	false
SSDEEP:	768:bqshsTAgcyy0jzVq/2+wvBjBoPMob7I0i6NIwyAR/4Vw+jgfZZkQt2PhlQZZ:bqshuyuq/274NI0i6NJyAR/V+juZn
MD5:	E38D601F1F6EF6663954EC55183C5FDE
SHA1:	63D466158889D3043056ACDFBF330F16E55DA498
SHA-256:	9B8699D04D29EC9D28E06E4953C40AADE72619EF9813F25632E25DD5FFDBC89C
SHA-512:	18A6DC392E478161B8EED8C45D69E46E6CA12D0FF7D07FF2C310F31CD7818A34646FB4AB4A7E4EE95BED95AC69E685E799DBFCCCD42179B7C2907A0387C72E31
Malicious:	false
Preview:	.....JExif..II*...........&...........sandra cifo. www.cifography.com. 2016.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="336EC317CA114058096C1124050B0AA8" xmpMM:DocumentID="xmp.did:36715E7A1D7511EABBCCF15DA342EC86" xmpMM:InstanceID="xmp.iid:36715E791D7511EABBCCF15DA342EC86" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DAB4B4FD077711EAA675C9DC7313E7A3" stRef:documentID="xmp.did:DAB4B4FE077711EAA675C9DC7313E7A3"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	1.7491585968207541
Encrypted:	false
SSDEEP:	12:y0Cf8jAxh0yiK6xNXL0r8V8I55555555555555R:If//0TDy0X
MD5:	E19FDB47503248CA528DCCE82458B722
SHA1:	51CBCBF58B3A7DFF677E3551BC4A3EDBC5DFFC93
SHA-256:	62A8461E328D5BACE3780FF738D0B58F6502592C04AFA564E0A8A792583A7BFB
SHA-512:	543BA079358D7C66FC08F3F929E45AF64300CA6842D6BB283CE77B10151F081CD7FE057E94C38CEBD545BE185488725A1B6EC1D95656F7EB5E6A30BF94190EE7
Malicious:	false
Preview:	............ .h.......(....... ..... .............................................................................................................................................................................................................................................TT......................................................................................................................................................................................................TT...................................................................................................................f/......................f/......................f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/..............f/......f/......f/......f/......f/......f/..............................f/......................f/......................................f/......................f/...............................................................

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20831)
Category:	dropped
Size (bytes):	21004
Entropy (8bit):	5.2169391810760875
Encrypted:	false
SSDEEP:	384:kmQkLrwVOyzirVyKnxRsIB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdOgS:vLsgyziJp3Db5OxHOxvYD73Y5vQzyL9p
MD5:	56456DB9D72A4B380ED3CB63095E6022
SHA1:	6DBCE88AEE15B42F29083DF7A07513CF3B486BA0
SHA-256:	66F3A07E1FA9B64A686B66381E4458DBC8ABF3DBBFF954720C4EEC07B84411C2
SHA-512:	E56BD96B837B26ADD354D0A9E2B8DC04C95CEA94F7959EE05718ED23A224296FAE22D49AFAB160B45963BD99C2C501A3F12517E431EB68A13A327FF8B262B50A
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?pe:10===e?se:pe\|\|se}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent\|\|null;n===o&&e.nextElementSibling;)n

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	155758
Entropy (8bit):	5.06621719317054
Encrypted:	false
SSDEEP:	1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F
MD5:	A15C2AC3234AA8F6064EF9C1F7383C37
SHA1:	6E10354828454898FDA80F55F3DECB347FD9ED21
SHA-256:	60B19E5DA6A9234FF9220668A5EC1125C157A268513256188EE80F2D2C8D8D36
SHA-512:	B435CF71A9AE66C59677A3AC285C87EA702A87F32367FE5893CF13E68F9A31FCA0A8D14F6A7D692F23C5027751CE63961CA4FE8D20F35A926FF24AE3EB1D4B30
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	1.7491585968207541
Encrypted:	false
SSDEEP:	12:y0Cf8jAxh0yiK6xNXL0r8V8I55555555555555R:If//0TDy0X
MD5:	E19FDB47503248CA528DCCE82458B722
SHA1:	51CBCBF58B3A7DFF677E3551BC4A3EDBC5DFFC93
SHA-256:	62A8461E328D5BACE3780FF738D0B58F6502592C04AFA564E0A8A792583A7BFB
SHA-512:	543BA079358D7C66FC08F3F929E45AF64300CA6842D6BB283CE77B10151F081CD7FE057E94C38CEBD545BE185488725A1B6EC1D95656F7EB5E6A30BF94190EE7
Malicious:	false
URL:	https://res.cisco.com/favicon.ico
Preview:	............ .h.......(....... ..... .............................................................................................................................................................................................................................................TT......................................................................................................................................................................................................TT...................................................................................................................f/......................f/......................f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/......f/..............f/......f/......f/......f/......f/......f/..............................f/......................f/......................................f/......................f/...............................................................

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14965)
Category:	downloaded
Size (bytes):	14966
Entropy (8bit):	4.771466859662571
Encrypted:	false
SSDEEP:	192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF
MD5:	9F54E6414F87E0D14B9E966F19A174F9
SHA1:	AE5735562FAABD1A2D9803BBD7BF4C502B5E4F51
SHA-256:	15D6AD4DFDB43D0AFFAD683E70029F97A8F8FC8637A28845009EE0542DCCDF81
SHA-512:	9CC365A6E6833EBAA5125B37217FD0E7A1F7EAABC1012C1BDE2A6EA373317966EC401D7CF35A31D1C46FED43D380196B8AAA329EDDF92A313080651E51720F9F
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.12/css/select2.min.css
Preview:	.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--single .select2-selection__rendered{display:block;padding-left:8px;padding-right:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-container .select2-selection--multiple{box-sizing:border-box;cursor:pointer;display:block;min-height:32px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--multiple .select2-selection__rendered{display:inline-block;overflow:hidden;padding-left:8px;text-overflow:ellipsis;white-space:nowrap}.select2-cont

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2088)
Category:	dropped
Size (bytes):	3447
Entropy (8bit):	5.385539600942633
Encrypted:	false
SSDEEP:	48:08kjiKt+nPnlS2yYXyPXyBlt+nPnlS2yYXyPXybWIiMjLA:0t+nvlmYCK3t+nvlmYCKblQ
MD5:	C286C6FD6BFE7C3FAF59157B7AA0FD39
SHA1:	25D2FF78EB12EF3DB2A3907E8D2CE39C1C5505D9
SHA-256:	1062224668A272A46FF501E338702C675FF7EF413009FF3FA8E5D42BA37A90C4
SHA-512:	55F60ECBE7A0CDC251D8291F9EA40E55CE8B5C0845D1A49476926E1C711882CEF897414C860E95DE43E27282232CC57727203C8F6E5F029D4163BECACD81BB4F
Malicious:	false
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1">. <title>Mimecast TTP Web Portal</title>. <meta name="apple-mobile-web-app-capable" content="yes">. [if lte IE 10]> <link rel="icon" href="/ttpwp/resources/images/favicon.ico" /> <![endif]-->. <link rel="shortcut icon" href="/ttpwp/resources/images/favicon.ico" />. <link rel="apple-touch-icon" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. . . <script>window.mimecast = {"branding":{"defaultBranding":{"defaultConfiguration":{"knowledgeBase":{"href":"https://community.mimecast.com/docs/DOC-241","label":"LOGIN_HOME_LNK"},"home":{"href":"http://www.mimec

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18445
Entropy (8bit):	4.897847983137727
Encrypted:	false
SSDEEP:	384:GRERfnE7QxMqwvVvgJo1J6VoFkDtcgueiQXLFiR1I9H+PgpiztB7SxfFERycxK/Y:GSE7QWXxQo1J6ykDlueiQXLFm1I1+Pgc
MD5:	096CE0B8694339B10AA989E61521A9CA
SHA1:	4834282EA07AFF4A2D83684E9538F51475077297
SHA-256:	252FC0DEE0B0A65A653A09D20E388C3A9B2D201ACCEAE55FDB19B5ACDD5A75FE
SHA-512:	48E6B0F57746E131C077EE247BA0F481E88D97128DA229EFB0B521CE8AE9E60A3795D93625C3E6D7E9749A464353900F3EE19860C22A47C7FF9716A026C9D9D5
Malicious:	false
URL:	https://res.cisco.com/websafe/templates/standard-scripts.js
Preview:	function onLoadPage().{. // Hide and unhide some things. For now we assume everything that might. // need to be toggled is a div or a... toggleVisibility('div');. toggleVisibility('a');.. // Set the focus on the field identified in our XML. If no field. // was identified then look for the one named focusItem (which. // might not exist). If a field name was provided but is equal. // to 'nofocus' then don't try to focus on anything... var focusID = (typeof focusItemID == 'undefined') ? '' : focusItemID;. var focusElement = '';.. if (focusID). {..if (focusID != 'nofocus')..{. var focusIds = focusID.split(" ").. //break at firstMatch. for (let i = 0; i < focusIds.length; i++) {. focusElement = document.getElementById(focusIds[i]);. if (focusElement){. break;. }. }. if (!focusElement)... focusElement = document.getElementById('focusItem');. if (!focusElement).

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2143
Entropy (8bit):	4.907198882670554
Encrypted:	false
SSDEEP:	48:DS7oJrWUkLRg8xTSCQw6KMYS73WOL7VgLxT9C/w6a:DS7oJrWUkLRg8xTSCQw6KMYS73WOLpg/
MD5:	FB2ECA121A12D98402B53355D9EACF7E
SHA1:	4BD42A075D32E7631D6D378FDCB4135DB20BA191
SHA-256:	2E1C61EEC11CFDBC16A55D6433341F9CE2A5253BA94F01FADC2D4BA31A8719EB
SHA-512:	46262D3463C1EF5B93DCB5EEA848643D23A89E94BFE02C8481BB35683852A653C24B697A62153BAF92EF0C5A79D5DC33EE5F09445E7789C8223DF58CEFAB5A75
Malicious:	false
URL:	https://res.cisco.com/admin/cisco-fonts.min.css
Preview:	./* Inter Font Library */..@font-face {. font-family: "Inter";. font-weight: 100;. src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 200;. src: url("./fonts/Inter/Inter-ExtraLight.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 300;. src: url("./fonts/Inter/Inter-Light.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 400;. src: url("./fonts/Inter/Inter-Regular.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 500;. src: url("./fonts/Inter/Inter-Medium.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 600;. src: url("./fonts/Inter/Inter-SemiBold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 700;. src: url("./fonts/Inter/Inter-Bold.ttf") format("truetype");.}..@font-face {. font-family: "Inter";. font-weight: 800;. src: url("./fonts/Inter/Inter-ExtraBo

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20831)
Category:	downloaded
Size (bytes):	21004
Entropy (8bit):	5.2169391810760875
Encrypted:	false
SSDEEP:	384:kmQkLrwVOyzirVyKnxRsIB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdOgS:vLsgyziJp3Db5OxHOxvYD73Y5vQzyL9p
MD5:	56456DB9D72A4B380ED3CB63095E6022
SHA1:	6DBCE88AEE15B42F29083DF7A07513CF3B486BA0
SHA-256:	66F3A07E1FA9B64A686B66381E4458DBC8ABF3DBBFF954720C4EEC07B84411C2
SHA-512:	E56BD96B837B26ADD354D0A9E2B8DC04C95CEA94F7959EE05718ED23A224296FAE22D49AFAB160B45963BD99C2C501A3F12517E431EB68A13A327FF8B262B50A
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?pe:10===e?se:pe\|\|se}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent\|\|null;n===o&&e.nextElementSibling;)n

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte
Category:	downloaded
Size (bytes):	309772
Entropy (8bit):	6.315392152109917
Encrypted:	false
SSDEEP:	3072:voVlAvwEZEbPzW/Pl4Jl0Wkaco0KiY2T32Rrq41tIW+XMaf/F7oPHUGHYI9L31zP:gVl/PzJek8/P2RW1qa1WRRnQzS6m
MD5:	D17C0274915408CEE0308D5476DF9F45
SHA1:	444CDCA680F8CE64C16FE5A606DCFBE4B33E7925
SHA-256:	F9342F2D916AA89C924BC2ADCC1D3BFBB6EB54675E48953BACC49024FC768F76
SHA-512:	2C38DE878D1F6D254090555B9FDF517CCCC641457020A577DADB73056F04E25488328C27129E146C10456EAA97AE5E9077DFE5B88C1A1DF5015FD1DA5A289CEC
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-Bold.ttf
Preview:	............GDEF1.1...F.....GPOS..2/..J...,.GSUB..fx..w...B.OS/2#.nB..yP...`STAT...G.......Dcmap/....y...e.gasp......E.....glyf..5.......(+head-.aF..Q(...6hhea......y,...$hmtx7."...Q`..'.loca......)X..'.maxp......)8... name00T....D....post..5r...\..d.preph......<.......#...i................!...!...!...!...!..#.F...F...F...F...F.......@.........................C............!!.!.!.#.!.!...0.......0......H.......,.......C.....i.......#..!!.!.!.#.!.!."&54632....!"&54632.......0.......0......H...V\|\|VWyy..V\|\|VWyy.....,......ySUvvUSyySUvvUSy...C.....^.&.......l.v.....C.......&.......f.......C.......&.......d.n.....C.....~.&.......j.......C.............&..!!.!.!.#.!.!."&546632......'2654&#........0.......0......H...'..S.UU.SS.U8NN88ON.....,.......\|S.QQ.SS.Q.L76L.L66M...C.....?.&.........V.p...C.......&.......v.^.....C.......&.......m.......C.......&.......n.v.....C.......&.......v.^.....C.....~.&.......s.......C.......&...............C.......&...............C.......&.......{.......C.......&..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 11 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I
Category:	downloaded
Size (bytes):	303504
Entropy (8bit):	6.240980841374878
Encrypted:	false
SSDEEP:	6144:sgicNAygxZJ64wgVROEODznIw8SV17avLkh6w/yOjKf:sHcNAygxZJ6/gVROEODDI9SmvZw/Gf
MD5:	A4A7379505CD554EA9523594B7C28B2A
SHA1:	C2767D146C3C10FE6C9B8AC0F181EF907C111F19
SHA-256:	EEAB48280AACD4FC83C1C7E735681DF9EDD1B59588DDE23D0339BCF6552FB788
SHA-512:	469B0C4390DAEAC176EB9D5EF5B709E00D6957137A8EB61E1A82F70B8920CED5CCE7AD33FF94410E74F27D36CD33A7D73A97F7EEFF8CAA390195CEEEBFAB60AF
Malicious:	false
URL:	https://res.cisco.com/admin/fonts/Inter/Inter-Regular.ttf
Preview:	............GDEF1.1...;.....GPOS...X..?.....GSUB..fx..^...B.OS/2".nb..nL...`STAT.q.E...H...Hcmap/....n...e.gasp......:.....glyf..O4.......&head-.aF..F$...6hhea......n(...$hmtx..L...F\..'.loca.].4...T..'.maxp.......4... name0$Q@...@....post..5r...X..d.preph......8............................!...!...!...!...!...........................@.........................H...(........!!.!.!.#.!.!.L..........................d....H...(.@.......#..!!.!.!.#.!.!."&54632....!"&54632.....L....................?aa?E[[..?aa?E[[.......d...a?E[[E?aa?E[[E?a...H...(.H.&.......l.@.....H...(...&.......f.d.....H...(...&.......d.......H...(.h.&.......j.8.....H...(.........&..!!.!.!.#.!.!."&546632......'2654&#".....L.....................x.N.PP.NN.P>RR>>RR.......d..H.xP.NN.PP.N.U==UU==U...H...(...&...............H...@...&.......v.......H...(...&.......m.@.....H...(...&.......n.@.....H...@...&.......v.......H...(.h.&.......s.8.....H...(...&...............H...(...&...............H...(...&.......{.@.....H...(.t.&.......

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 14 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter SemiBoldRegular3.0
Category:	downloaded
Size (bytes):	309432
Entropy (8bit):	6.313238065412327
Encrypted:	false
SSDEEP:	3072:q2x3CNOVe9tnoIXXsm5IQcuM9xaR4ThDnIQvXPLUkOIvdmULUX/aZMOrwTrVxfN7:sTIQMc4ThYyba/PR41Pa/jtdc0
MD5:	1753A05196ABEEF95C32F10246BD6473
SHA1:	ACDA92ADC6CF8C67C89395C65F371A4D2B05A783
SHA-256:	F5595839DEBDB0D028116ED8A7579F31D1C2F712677A2E794459A5DCE6ECA929
SHA-512:	68AA83B7521EFDD53D810E5BC8A6AC0F211CBB989CBA9C317D5AD196FFA08D439CC096C823305D5316D5B0D17FB9D6ED6E39CD0A28E0B2478A2DCCE01D78B760
Malicious:	false
URL:	https://static.cres-aws.com/fonts/Inter/Inter-SemiBold.ttf
Preview:	............GDEF1.1...D.....GPOS...t..H...-.GSUB..fx..u...B.OS/2#_nb..w....`STAT.y.E...t...Dcmap/....x...e.gasp......D.....glyfj.........&.head-.aF..O....6hhea......w....$hmtx$5.9..O...'.loca..)...'...'.maxp......'.... name7\`.......Ppost..5r......d.preph.................C................!...!...!...!...!............................@.........................E............!!.!.!.#.!.!...t.......t......8.......\.......E.....[.......#..!!.!.!.#.!.!."&54632....!"&54632.......t.......t......8...OssOQoo..OssOQoo.....\......pLPmmPLppLPmmPLp...E.....V.&.......l.d.....E.......&.......f.......E.......&.......d.R.....E.....v.&.......j.......E.............&..!!.!.!.#.!.!."&546632......'6654&.".......t.......t......8....}.Q.ST.QQ.T:PO;:OO.....\.......{R.PP.RR.P..O88P.O88P...E.....).&.........B.....E.......&.......v.......E.......&.......m.......E.......&.......n.d.....E.......&.......v.......E.....v.&.......s.......E.......&.........N.....E.......&.........b.....E.......&.......{.......E.......&.

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (491), with CRLF, LF line terminators
Entropy (8bit):	5.905486771717318
TrID:	Scalable Vector Graphics (18501/1) 24.18% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (12001/1) 15.69% HyperText Markup Language (11501/1) 15.03% HyperText Markup Language (11501/1) 15.03%
File name:	securedoc_20241217T163143.html
File size:	143'361 bytes
MD5:	44fcfe09d78cdf841eae56b23bcd99bf
SHA1:	0cad20e6e8cc554e28eb290788326aae8f8ce892
SHA256:	922986ffeb8c29356384d327870b35949bc41c6de678cacf5c1ac78395861790
SHA512:	9d93f105cb6d6c1145d85d749b8fc5968857a503d59a2686e5ddfedf11d3a9b54f0ce490b6b166e1651490ff48ac5a861da427e0efde305d2a361881d1abd28f
SSDEEP:	3072:Lil/LQISQGjA4RPegaSIHYONOvQ2TVJ0p:q/LQIGBaSIHYONOvQ2T7E
TLSH:	DDE37C897212643202D718F7747B158A3A3194070509A9A0FBACC9ACBFB9DD6423FFDD
File Content Preview:	saved from url=(0025)<a href="https://url.us.m.mimecastprotect.com/s/zmt6CERV4MsWxV02xupikI7agxN?domain=res.cisco.com">https://res.cisco.com:443</a> -->..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN". "http://www.w3.org/TR/html4/loos

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 17:26:51.863446951 CET	49675	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:26:51.863446951 CET	49674	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:26:52.035490036 CET	49673	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:01.472892046 CET	49674	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:01.472907066 CET	49675	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:01.644833088 CET	49673	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:04.054491997 CET	443	49703	23.1.237.91	192.168.2.5
Dec 18, 2024 17:27:04.055074930 CET	49703	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:09.813605070 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:09.813647032 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:09.813702106 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:09.813807964 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:09.813843966 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:09.813899994 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:09.814237118 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:09.814253092 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:09.814909935 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:09.814924955 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:10.082191944 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:10.082312107 CET	49711	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:10.185682058 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:10.185781002 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:10.185863972 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:10.186209917 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:10.186249018 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:10.202033997 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.202119112 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:10.202198982 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.202275038 CET	49711	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:10.202562094 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:10.202805996 CET	49711	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:10.322212934 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.322458029 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.322534084 CET	49711	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:10.322654009 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.322717905 CET	49711	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:10.322825909 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.322839975 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.323246956 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.323474884 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.323487997 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.323501110 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.323513985 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.323528051 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.442141056 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.442303896 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.442471027 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:10.442639112 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.045068026 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.045500040 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.045520067 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.046289921 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.046525002 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.046539068 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.047699928 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.047765017 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.050069094 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.050152063 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.050175905 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.050250053 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.051086903 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.051171064 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.051480055 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.051486969 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.051547050 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.051553965 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.097942114 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.259361982 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.259460926 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.300678015 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.337713957 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.338242054 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.338305950 CET	49711	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.338823080 CET	49711	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.398577929 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.453238010 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.453346968 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.453399897 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.453438997 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.453461885 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.453530073 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.453795910 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.453834057 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.453988075 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:11.454022884 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.461086988 CET	80	49711	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:11.501400948 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.501528978 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.501792908 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.501805067 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.507054090 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.508230925 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.508240938 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.524626017 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.527046919 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.527055979 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.542730093 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.542882919 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.542891979 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.551815987 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.553064108 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.553071022 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.608546019 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.617419004 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.617465019 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.617500067 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.617525101 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.617584944 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.626594067 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.635571957 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.635658979 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.635668039 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.644514084 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.644582987 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.644591093 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.659527063 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.659610987 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.659624100 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.670768976 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.670799971 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.670861006 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.670888901 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.670905113 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.670919895 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.671139002 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.671226025 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.671319008 CET	49707	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.671335936 CET	443	49707	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.690974951 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.691502094 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.691521883 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.698698044 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.699161053 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.699176073 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.703912973 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.707571983 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.707587957 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.733169079 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.733222961 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.733345032 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.733354092 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.733433008 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.740803003 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.746673107 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:11.748529911 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.748579979 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.748640060 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.748650074 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.748752117 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.748984098 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:11.749006987 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:11.750572920 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:11.750684977 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:11.752610922 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:11.752717018 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:11.752897978 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:11.752907991 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:11.756232023 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.763983011 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.764050961 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.764059067 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.771739006 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.771862984 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.771872044 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.779377937 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.779509068 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.779515982 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.883208990 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.883302927 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.883332014 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.890624046 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.890695095 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.890713930 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.900953054 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.903178930 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.903199911 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.908948898 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.909101963 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.909113884 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.928699970 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.928714991 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.928965092 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.928977966 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.937223911 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.937357903 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.937381029 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.937454939 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.951519012 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.951529026 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.951595068 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.958709955 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.958723068 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.958767891 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:11.958841085 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:11.958870888 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:11.958920002 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:12.032104015 CET	49706	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:12.032126904 CET	443	49706	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:12.281287909 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:12.281332970 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:12.281461954 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:12.281646013 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:12.281661034 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:12.880386114 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.882021904 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.885536909 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.885572910 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.885833979 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.885848999 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.887011051 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.887079000 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.888930082 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.889003992 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.889153957 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.889228106 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.889239073 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.889246941 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.889631033 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.889709949 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.889859915 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.889867067 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:12.930308104 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:12.930393934 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.114918947 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.114969015 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.114984035 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.115015030 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.115034103 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.115044117 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.115046978 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.115084887 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.115107059 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.115144968 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.238079071 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.238159895 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.319127083 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.319228888 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.319500923 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.319948912 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.319968939 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.320024014 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.320033073 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.320079088 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.320135117 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.320149899 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.320166111 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.320166111 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.320166111 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.320189953 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.320971966 CET	49717	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.321001053 CET	443	49717	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.321970940 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.325715065 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.359992027 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.360061884 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.360141993 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.360158920 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.360169888 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.360193968 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.360224009 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.368042946 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.368649006 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.368729115 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.368752003 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.368818998 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.368881941 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.369738102 CET	49718	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.369769096 CET	443	49718	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.375026941 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.375041008 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.375133038 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.375155926 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.375178099 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.375205040 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.375231981 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.375257969 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.383928061 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.425551891 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.448240995 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.473638058 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:13.473669052 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:13.473748922 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:13.473954916 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.475100994 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:13.475119114 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:13.475120068 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:13.475225925 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:13.475347996 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:13.475564003 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:13.475600004 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:13.477042913 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.477063894 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.477133989 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.477154970 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.477166891 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.477227926 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.503928900 CET	80	49723	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.504086018 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.504283905 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.515472889 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.515763998 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:13.515789986 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.519335985 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.519437075 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:13.520041943 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:13.520127058 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.521153927 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:13.521173000 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.522845030 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.522869110 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.522910118 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.522932053 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.523013115 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.523013115 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.523050070 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.523113966 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.523647070 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.562375069 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.562464952 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.562469959 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.562514067 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.562558889 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.570194960 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:13.591207981 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.591286898 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.591336966 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.591371059 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.591419935 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.591442108 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.624556065 CET	80	49723	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.633153915 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.633169889 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.648900986 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.651657104 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.651668072 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.651763916 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.652097940 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.652110100 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.659672022 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.659704924 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.659754992 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.659764051 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.659795046 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.659826994 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.659837008 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.659853935 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.660010099 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.660095930 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.660366058 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.660371065 CET	443	49712	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.660415888 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.660429955 CET	49712	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.698733091 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.700879097 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.700916052 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.701019049 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.701893091 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.701905966 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.702189922 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.702550888 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:13.702569962 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:13.702857971 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:13.702872992 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:13.997034073 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.999191046 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.999229908 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.999337912 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:13.999351025 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:13.999497890 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.001564026 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.004978895 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.005047083 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.005053997 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.006093979 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:14.006165981 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:14.006267071 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:14.006643057 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:14.006675959 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:14.009646893 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:14.009696960 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:14.009788990 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:14.010044098 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:14.010075092 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:14.016145945 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.016277075 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.016285896 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.061139107 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.061148882 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.114134073 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.116980076 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.121150017 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.121238947 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.121247053 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.162455082 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.188956976 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.194520950 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.194602013 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.194617987 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.202805042 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.202898979 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.202905893 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.214653969 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.214751959 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.214760065 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.219127893 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.219233990 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.219239950 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.235337019 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.235420942 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.235429049 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.243798971 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.244426012 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.244499922 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.244508982 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.244554996 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.251559019 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.259578943 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.259641886 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.259664059 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.266633987 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.266715050 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.266724110 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.272937059 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.273294926 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.273320913 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.279237032 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.279310942 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.279333115 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.334481001 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.334501982 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.380194902 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.380211115 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.384932995 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.385018110 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.385025978 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.388664007 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.388768911 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.388775110 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.397900105 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.397970915 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.397979021 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.398030043 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.403379917 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.403400898 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.403465033 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.411597013 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.411633968 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.411689997 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.411704063 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.411891937 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.415659904 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.415811062 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.415838003 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.415927887 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.416054964 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.417083025 CET	49719	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:14.417103052 CET	443	49719	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:14.611217022 CET	80	49723	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:14.614172935 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:14.614281893 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:14.614408016 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:14.614689112 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:14.614722967 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:14.661964893 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:14.886823893 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.893286943 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.897599936 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.897640944 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.897797108 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.897852898 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.898688078 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.898776054 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.901029110 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.901138067 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.918838978 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.918947935 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.919231892 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.919445992 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.919481039 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.919481993 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.919482946 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.963360071 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:14.973920107 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.973923922 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:14.973951101 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.022675991 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:15.068099022 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.096905947 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:15.096952915 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.097400904 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.097943068 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:15.098023891 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.098098040 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:15.114609003 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.143336058 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.147391081 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:15.162916899 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:15.254125118 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:15.290916920 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:15.290930986 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.291172981 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:15.291181087 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:15.291508913 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.292526960 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:15.294126987 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:15.294218063 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.294600010 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:15.294785023 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:15.294789076 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:15.294915915 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:15.332289934 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.332473040 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.332556009 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:15.335328102 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:15.335350037 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:15.346216917 CET	49724	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:15.346250057 CET	443	49724	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.370800972 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.370867968 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.370888948 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.370923042 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.370942116 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.370943069 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:15.371002913 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.371038914 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:15.371135950 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.371285915 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:15.374178886 CET	49725	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:15.374216080 CET	443	49725	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:15.432801008 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.433085918 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.433152914 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.434959888 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.435164928 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.439439058 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.439600945 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.439614058 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.483361006 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.488872051 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.488938093 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.535407066 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.714082003 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:15.714495897 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:15.714565992 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:15.715643883 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:15.715724945 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:15.716851950 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:15.716931105 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:15.771807909 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:15.771821976 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:15.817842960 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:15.981959105 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.982049942 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.982115030 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.982151985 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.982208014 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.983202934 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.983241081 CET	443	49734	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.983268023 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.983305931 CET	49734	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.984697104 CET	49740	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.984731913 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:15.984798908 CET	49740	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.985019922 CET	49740	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:15.985032082 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:16.037719965 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.037967920 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.037986994 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.039053917 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.039120913 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.039452076 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.039521933 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.039599895 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.039608002 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.083158970 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.529541969 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.529567957 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.529637098 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.529684067 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.529681921 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.529752016 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.529872894 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.547204971 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.547256947 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.547298908 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.547393084 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.547415972 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.547466993 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.547547102 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.656193972 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.707247972 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.707282066 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.707350969 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.707412958 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.707458019 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.707521915 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.708515882 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.715025902 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.715100050 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.734961987 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.734992981 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.735038042 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.735075951 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.735079050 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.735094070 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.735107899 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.735708952 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.747144938 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.747567892 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.747591972 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.778425932 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.778493881 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.778544903 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.778568029 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.778600931 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.778625965 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.787461042 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.789999008 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.790074110 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.790102005 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.790133953 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.790215969 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.790996075 CET	49737	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:16.791033983 CET	443	49737	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:16.815468073 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:16.815515041 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:16.815843105 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.815898895 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.815937996 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:16.816261053 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:16.816262007 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:16.816281080 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:16.816282034 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:16.816315889 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.816437960 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:16.816447973 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:16.816483021 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:16.816766977 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:16.816777945 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:17.058413029 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.061173916 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.062277079 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.062355995 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.219144106 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.219156027 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.219192028 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.219227076 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.219240904 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.219276905 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.219631910 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.225924969 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.226070881 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.251548052 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.251595974 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.251640081 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.251651049 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.251681089 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.251748085 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.278911114 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.278934002 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.279428005 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.279438019 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.279592037 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.366081953 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.366106033 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.366213083 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.366225004 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.366298914 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.417434931 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.417454004 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.417632103 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.417644978 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.418751955 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.458411932 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.458427906 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.458801031 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.458808899 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.459136009 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.465173006 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.465240955 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.465248108 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.465266943 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.465596914 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.467081070 CET	49727	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.467097998 CET	443	49727	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.473989010 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:17.474606991 CET	49740	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:17.474617004 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:17.474977016 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:17.482851982 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.482892990 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.483000994 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.483637094 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.483727932 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.483824968 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.484045029 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.484137058 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.484211922 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.505031109 CET	49740	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:17.505203962 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:17.505918980 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.505985975 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.506433010 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.506515980 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.506529093 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:17.506606102 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:17.506745100 CET	49740	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:17.506779909 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:18.078428984 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:18.078476906 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:18.078535080 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:18.078746080 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:18.078758955 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:18.535051107 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:18.535151958 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:18.585877895 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:18.586051941 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:18.592175007 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:18.592180967 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:18.592310905 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:18.592324018 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:18.592717886 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:18.592811108 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:18.606437922 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:18.606595039 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:18.607300997 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:18.607423067 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:18.607436895 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:18.607528925 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:18.651343107 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:18.651352882 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:18.653264999 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:18.653621912 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:18.653666973 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:18.654747963 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:18.654818058 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:18.655273914 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:18.655355930 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:18.655801058 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:18.655822039 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:18.708918095 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.019828081 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.019855022 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.019864082 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.019886017 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.019912004 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.019922972 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.019969940 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.030965090 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.031251907 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.031356096 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.032304049 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.032377958 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.032771111 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.032838106 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.032989025 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.033010960 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.046252012 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.046492100 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.046555996 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.047710896 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.047964096 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.048032999 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.048070908 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.048146009 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.048521996 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.048615932 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.048682928 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.048698902 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.049500942 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.049570084 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.049839973 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.049935102 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.049968004 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.083560944 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.091362953 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.095787048 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:19.095858097 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:19.095876932 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:19.095980883 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:19.096066952 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:19.097249031 CET	49742	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:19.097265959 CET	443	49742	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:19.099080086 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:19.099147081 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:19.099221945 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:19.099492073 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:19.099508047 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:19.100445032 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.100486040 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.100505114 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.147391081 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.191374063 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.191380978 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.191406965 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.191437960 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.191495895 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.191502094 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.191706896 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.191932917 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.191989899 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.242568016 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.242644072 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.242655993 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.277007103 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.277045012 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.277074099 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.277086020 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.277134895 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.304840088 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.304924965 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.304933071 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.304951906 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.304975033 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.305007935 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.305427074 CET	49744	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:19.305437088 CET	443	49744	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:19.616146088 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:19.616430044 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:19.616462946 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:19.617471933 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:19.617541075 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:19.617892027 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:19.617954016 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:19.618148088 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:19.618161917 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:19.662681103 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:19.929487944 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.929521084 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.929527998 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.929555893 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.929594040 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.929642916 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:19.929672956 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:19.976387978 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.052314997 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.052325010 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.052360058 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.052386999 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.052400112 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.052447081 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.104753971 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:20.104830980 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:20.104891062 CET	49740	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:20.105897903 CET	49740	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:20.105912924 CET	443	49740	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:20.145415068 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.145422935 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.145458937 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.145468950 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.145490885 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.145513058 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.145545006 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.145589113 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.146003962 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.193666935 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.215235949 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.215245962 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.215280056 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.215346098 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.215361118 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.215382099 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.215410948 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.215431929 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.310363054 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.310405016 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.310445070 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.310475111 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.310506105 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.310530901 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.323256969 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.323292971 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.323303938 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.323324919 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.323349953 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.323358059 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.323369026 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.323388100 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.323388100 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.323422909 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.323424101 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.323457003 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.325833082 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.325891972 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.339566946 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.339586973 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.339593887 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.339637041 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.339668036 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.339679956 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.339745998 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.339787960 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.339787960 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.339823008 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.361289024 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.361310959 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.361375093 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.361392975 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.361423969 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.361447096 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.372319937 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.372353077 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.372361898 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.372391939 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.372406960 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.372411013 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.372416019 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.372438908 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.372447014 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.372473001 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.372494936 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.391288042 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.391305923 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.391375065 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.391393900 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.391453028 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.412655115 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:20.412692070 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:20.412930965 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:20.413208961 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:20.413223028 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:20.424514055 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.432961941 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.440134048 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.440150976 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.440212965 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.440244913 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.440270901 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.440346003 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.472446918 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.476552963 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.476697922 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.483339071 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.483418941 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.520996094 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.527682066 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.527721882 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.527760983 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.527777910 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.527810097 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.532977104 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.532990932 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.533015966 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.533025980 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.533062935 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.533070087 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.533088923 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.533129930 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.533130884 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.558799982 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.558811903 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.558857918 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.558878899 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.558937073 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.558981895 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.558983088 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.559001923 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.559093952 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.560260057 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:20.560679913 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:20.560702085 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:20.561816931 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:20.562175989 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:20.562331915 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:20.562382936 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:20.563847065 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.563863993 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.563913107 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.563931942 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.563960075 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.584136963 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.601566076 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.601582050 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.601658106 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.601681948 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.603709936 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.603782892 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.603797913 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.614590883 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:20.639235973 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.639266014 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.639308929 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.639344931 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.639409065 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.639426947 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.639458895 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.639512062 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.646696091 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.646737099 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.646753073 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.646780968 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.646815062 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.646861076 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.649506092 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.655674934 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.655688047 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.655723095 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.655750990 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.655757904 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.655803919 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.655838013 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.655879021 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.673476934 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.673501015 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.673583984 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.673636913 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.673676014 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.673697948 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.681092024 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.681107998 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.681130886 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.681188107 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.681216002 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.681246996 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.683651924 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.706744909 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.706799030 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.706840038 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.706840992 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.706940889 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.706945896 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.706970930 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.707025051 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.725431919 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.725541115 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.738506079 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.738609076 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.756364107 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.756372929 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.756413937 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.756427050 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.756460905 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.756479979 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.756524086 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.756547928 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.758820057 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.772941113 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.772970915 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.773061991 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.773086071 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.773144960 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.783255100 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.783268929 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.783293009 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.783349991 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.783371925 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.783396959 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.785680056 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.793689013 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.793699026 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.793750048 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.793783903 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.793812037 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.793848991 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.793873072 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.809103966 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.813724041 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.813734055 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.813762903 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.813776016 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.813939095 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.813962936 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.834681034 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.834713936 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.843029976 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.843038082 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.843050957 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.843070984 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.843127012 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.843147993 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.843183041 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.851140022 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.851167917 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.868554115 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.868562937 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.868582010 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.868588924 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.868642092 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.868668079 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.868695021 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.882606983 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.892827034 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.892837048 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.892857075 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.892914057 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.892930031 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.892972946 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.892996073 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.893021107 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.893043995 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.893058062 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.893094063 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.893111944 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.894510031 CET	49743	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.894541025 CET	443	49743	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.896698952 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.900506973 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.900518894 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.900548935 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.900559902 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.900598049 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.900605917 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.900621891 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.900654078 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.915695906 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.915707111 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.915747881 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.915777922 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.915781975 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.915829897 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.915853977 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.915884018 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.915884018 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.915884018 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.915927887 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.918304920 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.953495979 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.967017889 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.975686073 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.975724936 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.975768089 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:20.975792885 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:20.975850105 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.050904036 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.050916910 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.050966024 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.051008940 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.051023006 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.051062107 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.051098108 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.051131964 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.057219982 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.057234049 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.057265997 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.057276964 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.057326078 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.057388067 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.057420969 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.059900045 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.085339069 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.085405111 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.085454941 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.085475922 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.085506916 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.085527897 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.095590115 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.095613956 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.095621109 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.095659971 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.095694065 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.095726013 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.095746040 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.095793009 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.095820904 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.124440908 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.124459028 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.124511957 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.124542952 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.124548912 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.124553919 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.124587059 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.124623060 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.124623060 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.130342960 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.130351067 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.130397081 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.130445004 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.130496979 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.130527020 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.130553961 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.132463932 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.132531881 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.155461073 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.155488968 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.155523062 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.155555010 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.155580044 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.155607939 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.163079023 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.163104057 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.163167000 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.163217068 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.163244963 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.179639101 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.182137012 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.182153940 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.182238102 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.182272911 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.185014963 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.195521116 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.195563078 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.200058937 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.200110912 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.200154066 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.200169086 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.200210094 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.207751036 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.232929945 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.248601913 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.250895023 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.250916004 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.250956059 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.250976086 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.250982046 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.251039982 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.251060009 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.251130104 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.251143932 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.260768890 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.260824919 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.260859013 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.260885954 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.260915041 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.260935068 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.280093908 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.280169964 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.286355972 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.286380053 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.286422014 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.286473989 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.286474943 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.286525011 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.286555052 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.286577940 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.291306019 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.346373081 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.346385002 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.346424103 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.346466064 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.346483946 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.346522093 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.346544027 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.380784988 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.380814075 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.380867004 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.380883932 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.380896091 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.380903959 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.380933046 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.380948067 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.380973101 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.380995035 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.392270088 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.392330885 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.392359018 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.392374992 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.392404079 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.392424107 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.395622969 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.395689011 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.395708084 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.399374008 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.399431944 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.409409046 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.409429073 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.409490108 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.409544945 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.409579039 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.409604073 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.411087036 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.432663918 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.432712078 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.432755947 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.432777882 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.432804108 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.439554930 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.439588070 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.439630985 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.439644098 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.439675093 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.452419996 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.452469110 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.452497005 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.452517033 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.452548027 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.452570915 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.456233978 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.456315041 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.467394114 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.467483997 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.467504025 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.467529058 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.467550039 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.467587948 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.467612982 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.468944073 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.468976021 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.469018936 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.469042063 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.469055891 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.486924887 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.486978054 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.487026930 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.487049103 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.487076998 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.487097979 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.513674021 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.518795967 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.518843889 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.518878937 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.518906116 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.518932104 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.518954039 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.535792112 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.535815954 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.535862923 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.535873890 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.535909891 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.535923958 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.535950899 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.535988092 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.537286997 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.537306070 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.537360907 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.537368059 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.537401915 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.537441015 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.537441015 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.537458897 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.537516117 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.572364092 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.572386980 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.572429895 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.572448969 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.572489977 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.572511911 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.584517956 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.584602118 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.602761984 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.602771997 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.602804899 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.602834940 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.602844954 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.602881908 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.602924109 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.610006094 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.626434088 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.626488924 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.626519918 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.626562119 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.626614094 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.626614094 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.627787113 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.627804995 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.627856970 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.627891064 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.627974033 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.628015041 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.650290966 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.650310040 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.650373936 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.650382996 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.668195009 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.668307066 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.668313980 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.672069073 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.672091961 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.672158003 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.672173977 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.672208071 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.672228098 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.676029921 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.679101944 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.679125071 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.679187059 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.679213047 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.679241896 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.679264069 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.680336952 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.680418968 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.684725046 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.684739113 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.684772015 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.684803963 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.684840918 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.684871912 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.684892893 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.687479973 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.687562943 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.701904058 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.701956034 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.702008963 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.702033997 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.702063084 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.702085972 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.708527088 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.708607912 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.709639072 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.709669113 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.709726095 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.709769011 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.709801912 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.709824085 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.710592031 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.710927963 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.710944891 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.710999966 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.711010933 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.711045027 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.711072922 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.711072922 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.729399920 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.729448080 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.729480982 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.729496956 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.729525089 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.730995893 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.733125925 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.733150005 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.733206034 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.733226061 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.733253002 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.733274937 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.735728025 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.735753059 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.735788107 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.735804081 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.735805988 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.735850096 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.735867977 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.735894918 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.735938072 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.759974003 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.760061026 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.760128021 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.760169983 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.761141062 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.761173964 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.761221886 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.761240959 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.761271954 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.761292934 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.764909029 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.764971018 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.767291069 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.767330885 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.767369986 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.767388105 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.767415047 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.767416000 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.767462015 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.769104004 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.769181967 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.769184113 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.769236088 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.783024073 CET	49747	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.783070087 CET	443	49747	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.784816980 CET	49746	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.784863949 CET	443	49746	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.785561085 CET	49748	443	192.168.2.5	18.66.161.47
Dec 18, 2024 17:27:21.785577059 CET	443	49748	18.66.161.47	192.168.2.5
Dec 18, 2024 17:27:21.809642076 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:21.810832977 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:21.810899973 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:21.829155922 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.829171896 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.829204082 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.829226017 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.829236984 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.829245090 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.829271078 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.829298019 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.855210066 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.855226994 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.855262995 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.855290890 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.855299950 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.855326891 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.869947910 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.869978905 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.870034933 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.870073080 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.870096922 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.873322010 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.873369932 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.873377085 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.916155100 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.960381031 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.960403919 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.960455894 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.960462093 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.960490942 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.960516930 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.966870070 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.979310036 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.980321884 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.980374098 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:21.980405092 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:21.980457067 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:22.024909019 CET	49758	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:22.024965048 CET	443	49758	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:22.075546026 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.075654030 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.075757027 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.077219009 CET	49751	443	192.168.2.5	18.66.161.34
Dec 18, 2024 17:27:22.077243090 CET	443	49751	18.66.161.34	192.168.2.5
Dec 18, 2024 17:27:22.090399027 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.090440989 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.214423895 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.214708090 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.214740038 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.215801001 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.215858936 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.238496065 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.238763094 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.241878986 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.241913080 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.292017937 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.637310982 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.637334108 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.637341976 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.637402058 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.637430906 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.637445927 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.637448072 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.637470961 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.637511969 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.638572931 CET	49760	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.638588905 CET	443	49760	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.780801058 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.780885935 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:22.780977964 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.781198978 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:22.781234980 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:23.832887888 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:23.833745003 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:23.833765984 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:23.837383032 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:23.837467909 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:23.837879896 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:23.838069916 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:23.838114977 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:23.883335114 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:23.887295961 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:23.887322903 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:23.933217049 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.204313993 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.204336882 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.204396963 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.204415083 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.205126047 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.206165075 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.206187010 CET	443	49765	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.206199884 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.206229925 CET	49765	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.288729906 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.288780928 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.290170908 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.290638924 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.290652990 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.519500971 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.530895948 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.530939102 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.532036066 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.532102108 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.534509897 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.534570932 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.534668922 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.534676075 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.576740980 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.894654036 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.894706964 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.894766092 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.894784927 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.894855976 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:24.894896030 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.894925117 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.895602942 CET	49767	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:24.895617008 CET	443	49767	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:25.408773899 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:25.408865929 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:25.411156893 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:26.040499926 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.040822983 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.040860891 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.044677973 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.044744968 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.045186996 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.045356989 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.045358896 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.091330051 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.099062920 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.099082947 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.147667885 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.386821985 CET	49733	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:27:26.386861086 CET	443	49733	142.250.181.132	192.168.2.5
Dec 18, 2024 17:27:26.446048021 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.446110010 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.446146011 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.446166992 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.446202993 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.446214914 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.446243048 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.446306944 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:26.446356058 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.463006020 CET	49773	443	192.168.2.5	170.10.128.87
Dec 18, 2024 17:27:26.463037014 CET	443	49773	170.10.128.87	192.168.2.5
Dec 18, 2024 17:27:29.213562012 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:29.213610888 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:29.213916063 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:29.214324951 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:29.214349031 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:29.214409113 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:29.214575052 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:29.214600086 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:29.214807034 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:29.214818954 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.518332958 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.518444061 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.518548012 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.518827915 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.518827915 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.518848896 CET	443	49726	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.519067049 CET	49726	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.520901918 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.520950079 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.521019936 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.521240950 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.521260977 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.631228924 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.631488085 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.631501913 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.631977081 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.632426977 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.632462978 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.635241985 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.635337114 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.635390997 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.635452032 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.635524988 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.636362076 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.636421919 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.636653900 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.636846066 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.637203932 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.637212992 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.637624979 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.637809992 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.638217926 CET	49728	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.638231993 CET	443	49728	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.639813900 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.639861107 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.640074968 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.640317917 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:30.640332937 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:30.681647062 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.681665897 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:30.681694984 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:30.723334074 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:31.176470041 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:31.176534891 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:31.176544905 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:31.176670074 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:31.180023909 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:31.180041075 CET	443	49788	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:31.180052042 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:31.180084944 CET	49788	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:31.181701899 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:31.181840897 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:31.931263924 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:31.937253952 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:31.937280893 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:31.937875986 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:31.939635992 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:31.939783096 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:31.939790010 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:31.939882040 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:31.991564989 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:32.070352077 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:32.070714951 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:32.070770025 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:32.071121931 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:32.071419954 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:32.071494102 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:32.071553946 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:32.115348101 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:32.784713984 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:32.784799099 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:32.784977913 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:32.788943052 CET	49787	443	192.168.2.5	205.139.111.12
Dec 18, 2024 17:27:32.788964987 CET	443	49787	205.139.111.12	192.168.2.5
Dec 18, 2024 17:27:32.929336071 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:32.929373980 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:32.929440975 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:32.929683924 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:32.929698944 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.340778112 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.341110945 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.341135979 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.342580080 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.342649937 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.343153954 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.343244076 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.343477011 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.343492985 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.396414995 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.809575081 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.809608936 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.809619904 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.809673071 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.809721947 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.809751987 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.809778929 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.817593098 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.817673922 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.817682981 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.817707062 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.817758083 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.818187952 CET	49803	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.818203926 CET	443	49803	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.834462881 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.834496021 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.834572077 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.834781885 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.834799051 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.835266113 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.835393906 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.835469961 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.835736036 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.835747957 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.835803986 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.835963011 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.836000919 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.836132050 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.836148024 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.836590052 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.836613894 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.836679935 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.837033033 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.837106943 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.837167025 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.837236881 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.837261915 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.837385893 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:34.837410927 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:34.978786945 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:34.978887081 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:34.978961945 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:34.979120016 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:34.979167938 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:34.979221106 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:34.979289055 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:34.979317904 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:34.979370117 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:34.979655027 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:34.979666948 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:34.979804039 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:34.979841948 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:34.979964972 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:34.979979992 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.224920034 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.227901936 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.227921009 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.228429079 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.228782892 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.228791952 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.228914022 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.228979111 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.229290962 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.229361057 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.229484081 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.229499102 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.229758024 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.229819059 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.230734110 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.230798006 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.230942011 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.230961084 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.268814087 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.271372080 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.271473885 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.272130966 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.273158073 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.273329020 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.273611069 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.275710106 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.275727034 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.275849104 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.275896072 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.275922060 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.275930882 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.276098967 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.276113987 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.276215076 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.276221037 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.276417971 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.276501894 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.276798010 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.276890993 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.277079105 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.277146101 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.277156115 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.277204037 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.277205944 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.277259111 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.277373075 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.277409077 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.277666092 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.277669907 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.277725935 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.277730942 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.278013945 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.278074026 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.278301954 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.278398991 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.278410912 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.278419018 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.278517008 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.278525114 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.278625965 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.278642893 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.323328018 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.323335886 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.333560944 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.333617926 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.333673954 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.473326921 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.517854929 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.520709991 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.520721912 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.524514914 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.524595022 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.524912119 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.525065899 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.525094986 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.569551945 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.569588900 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.611968040 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.679056883 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.679198027 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.679291010 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.679302931 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.679979086 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.680063009 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.680072069 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.680845976 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.680910110 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.680917025 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.689810991 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.689867020 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.689874887 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.690515041 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.690562963 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.690610886 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.690640926 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.691298008 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.691355944 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.691371918 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.692838907 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.692862988 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.692903996 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.692919970 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.692972898 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.695511103 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.695580959 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.695589066 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.699268103 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.708225012 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.708300114 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.708314896 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.714253902 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.714272976 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.714329958 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.714361906 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.714396000 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.716156960 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.716207981 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.716274977 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.716293097 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.716375113 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.716433048 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.717722893 CET	49811	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.717746019 CET	443	49811	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.720184088 CET	49810	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.720201015 CET	443	49810	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.723275900 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.723355055 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.723416090 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.723447084 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.723499060 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.723512888 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.723563910 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.728543043 CET	49809	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.728559971 CET	443	49809	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.734669924 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.734711885 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.734745026 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.734766960 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.734776020 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.734803915 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.735349894 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.735367060 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.735423088 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.735661030 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.735673904 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.738770962 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.738851070 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.738871098 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.738924980 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.738936901 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.738977909 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.738997936 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.738997936 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.739542961 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.739550114 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.754792929 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.768181086 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.768227100 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.768349886 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.768368006 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.768441916 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.772068977 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.772124052 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.772175074 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.772209883 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.772265911 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.772281885 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.772355080 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.772401094 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.773009062 CET	49812	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.773041010 CET	443	49812	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.775937080 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.775983095 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.776051998 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.776274920 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.776288033 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.786477089 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.810628891 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.850466013 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.885030985 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.888883114 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.890377045 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.890470982 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.890485048 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.894033909 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.894095898 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.894150019 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.896749973 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.896835089 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.896842003 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.899894953 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.899981022 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.900002956 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.900026083 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.900075912 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.900470972 CET	49813	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.900501013 CET	443	49813	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.904548883 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.904597044 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.904597998 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.904685020 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.904902935 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.904910088 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.904911041 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:36.904936075 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:36.912659883 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.912724018 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.912731886 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.924400091 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.924516916 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.924526930 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.927809000 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.927881956 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.927890062 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.935671091 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.935755968 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.935762882 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.936724901 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.936845064 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.936901093 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.936918974 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.937438965 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.937522888 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.937530041 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.943438053 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.943521976 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.943528891 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.944375038 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.944427967 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.944433928 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.951128006 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.951185942 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.951194048 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.952653885 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.952704906 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.952712059 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.953418016 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.953459024 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.953509092 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.953517914 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.953562975 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.959214926 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.959268093 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.959278107 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.961683035 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.961728096 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:36.961735964 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:36.979906082 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.979931116 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:36.979975939 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.980012894 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:36.980025053 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.008882046 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.008883953 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.008897066 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.008908033 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.025021076 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.056391954 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.056394100 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.103612900 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.107106924 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.107161045 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.107172012 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.110402107 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.110438108 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.110472918 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.110487938 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.110507011 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.110508919 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.110539913 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.110539913 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.110557079 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.110577106 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.119546890 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.119600058 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.119613886 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.127784967 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.127835035 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.127844095 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.132065058 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.132117987 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.132127047 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.132800102 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.132867098 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.132883072 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.132919073 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.132937908 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.132960081 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.140178919 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.140243053 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.147495985 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.147517920 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.147555113 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.147564888 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.147600889 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.159951925 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.160006046 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.160031080 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.160068989 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.160084963 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.161127090 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.162811995 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.162832022 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.162877083 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.164783955 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.164838076 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.164855003 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.170387030 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.176004887 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.176054955 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.176063061 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.178370953 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.178428888 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.178440094 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.178474903 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.182974100 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.183028936 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.183052063 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.183073997 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.183114052 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.183638096 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.183679104 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.183684111 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.183690071 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.183727026 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.190809011 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.193701982 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.193721056 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.193763971 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.197613001 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.197670937 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.197694063 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.197726011 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.197746038 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.197771072 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.197797060 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.197961092 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.198012114 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.198453903 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.198472023 CET	443	49808	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:37.198487043 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.198517084 CET	49808	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:37.198537111 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.198580027 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.198586941 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.206259966 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.206309080 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.206315041 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.208698034 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.208717108 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.208755016 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.208781958 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.213886023 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.213941097 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.213946104 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.221620083 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.221667051 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.221673012 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.224380970 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.224441051 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.230943918 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.230994940 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.232986927 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.233037949 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.233042955 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.240652084 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.240709066 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.240715981 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.243638039 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.243736982 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.249078035 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.249119043 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.249160051 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.249176979 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.249227047 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.292340040 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.292414904 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.296255112 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.296322107 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.308526039 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.308583021 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.324022055 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.324088097 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.335336924 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.335412025 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.341135979 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.341202974 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.351569891 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.351632118 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.352735043 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.352801085 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.352844954 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.352864027 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.357660055 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.357712030 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.359859943 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.359915018 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.359925032 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.371241093 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.371342897 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.373653889 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.373720884 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.378427982 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.378443956 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.378524065 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.378531933 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.378551960 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.378631115 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.378822088 CET	49814	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.378833055 CET	443	49814	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.378909111 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.378962040 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.381251097 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.381320000 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.386388063 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.386466026 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.387361050 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.387422085 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.392362118 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.392448902 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.395129919 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.395241976 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.395251036 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.395433903 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.395484924 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.395623922 CET	49815	443	192.168.2.5	104.18.10.207
Dec 18, 2024 17:27:37.395634890 CET	443	49815	104.18.10.207	192.168.2.5
Dec 18, 2024 17:27:37.525203943 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:37.525275946 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:37.525368929 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:37.525593042 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:37.525603056 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:38.115943909 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.116564035 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.116601944 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.116949081 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.118057013 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.118136883 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.118422031 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.151290894 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.151695967 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.151705027 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.152180910 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.152517080 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.152595997 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.152843952 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.163336039 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.171020031 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.171122074 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.171812057 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.172348022 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.172399044 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.172450066 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.172938108 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.172955036 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.173187971 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.173221111 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.173609018 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.173693895 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.173906088 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.174118042 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.174154043 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.188726902 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.188967943 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.188988924 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.189495087 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.189801931 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.189925909 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.189953089 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.195364952 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.231349945 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.238970995 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.571547031 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.571588039 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.571651936 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.571722031 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.572247982 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.572309971 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.572329998 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.573815107 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.573900938 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.573915958 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.579458952 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.579520941 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.579538107 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.587979078 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.588046074 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.588067055 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.603665113 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.603730917 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.603785992 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.603815079 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.603904009 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.603966951 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.604933977 CET	49821	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.604954004 CET	443	49821	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.631259918 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.655004978 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.655039072 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.655081034 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.655086040 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.655102015 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.655126095 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.655149937 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.688489914 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.688544989 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.688565969 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.688584089 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.688606977 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.688621044 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.688651085 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.689054966 CET	49822	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:38.689070940 CET	443	49822	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:38.691319942 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.739217997 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.763722897 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.766211987 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.766274929 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.766313076 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.781747103 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.781795979 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.781816959 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.781908989 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.781956911 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.783088923 CET	49824	443	192.168.2.5	104.17.24.14
Dec 18, 2024 17:27:38.783117056 CET	443	49824	104.17.24.14	192.168.2.5
Dec 18, 2024 17:27:38.826153040 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:38.869976044 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:38.870006084 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:38.873800993 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:38.873928070 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:38.889771938 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:38.890022993 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:38.890485048 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:38.890496016 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:38.945807934 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.282970905 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.283109903 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.283160925 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.283190012 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.283524990 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.283566952 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.283575058 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.285015106 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.285059929 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.285069942 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.291125059 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.291184902 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.291198969 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.299580097 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.299623013 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.299635887 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.349384069 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.349421024 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.396294117 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.403027058 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.442220926 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.474703074 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.478665113 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.478718996 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.478739977 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.490753889 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.490808964 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.490819931 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.497136116 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.497185946 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.497200966 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.504971027 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.505021095 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.505029917 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.512820005 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.512883902 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.512892008 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.520569086 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.520623922 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.520632982 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.536015034 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.536066055 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.536075115 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.543807983 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.543858051 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.543867111 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.550851107 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.550899982 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.550908089 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.595455885 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.595751047 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.595798969 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.596905947 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.596977949 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.597137928 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.597152948 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.597454071 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.597585917 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.597779036 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.597798109 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.601511002 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.601597071 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.601768017 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.601810932 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.601929903 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.601939917 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.602328062 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.602416992 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.602643967 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.602739096 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.602771997 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.602977037 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.603060007 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.603080988 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.643335104 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.643351078 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:39.643996000 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.644020081 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.645404100 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.645653963 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:39.667057991 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.669284105 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.669347048 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.669382095 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.675786018 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.675867081 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.675895929 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.681166887 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.681251049 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.681262016 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.686219931 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.686291933 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.686302900 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.690700054 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.690768957 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.690778971 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.690859079 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.690860033 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.691050053 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:39.691059113 CET	443	49826	104.18.11.207	192.168.2.5
Dec 18, 2024 17:27:39.691072941 CET	49826	443	192.168.2.5	104.18.11.207
Dec 18, 2024 17:27:40.056078911 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.056107044 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.056114912 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.056174040 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.056220055 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.064980030 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.065010071 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.065020084 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.065079927 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.065126896 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.073003054 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.073076963 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.073098898 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.073168039 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.073241949 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.073427916 CET	49827	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.073460102 CET	443	49827	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.079547882 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.079606056 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.079626083 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.079658985 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.079699993 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.079720974 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.096470118 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.104935884 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.105007887 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.105082035 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.105109930 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.105153084 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.241142988 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.241158009 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.241223097 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.241254091 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.241261005 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.241321087 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.241380930 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.241380930 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.241518021 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.263401985 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.263436079 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.263478994 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.263529062 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.263555050 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.268739939 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.268790960 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.268821955 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.268831015 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.268892050 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.286071062 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.286113977 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.286149979 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.286156893 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.286195993 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.313396931 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.313427925 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.313487053 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.313534975 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.313568115 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.313620090 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.330503941 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.330529928 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.330569029 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.330570936 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.330600023 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.330600977 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.330621958 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.330627918 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.330919027 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.358138084 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.358208895 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.438260078 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.438401937 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.528170109 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.528348923 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.528373003 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.531101942 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.531121969 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.531189919 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.531229019 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.531260014 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.531754017 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.555875063 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.555952072 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.555984974 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.556010962 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.556042910 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.556058884 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.556071043 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.556137085 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.556137085 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.556186914 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.556240082 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.578409910 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.578442097 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.578485966 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.578511000 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.578526974 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.578557014 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.590150118 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.590240955 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.590249062 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.590285063 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.590306997 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.605535030 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.605551958 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.605643034 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.605669975 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.605746031 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.624067068 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.624103069 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.624142885 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.624164104 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.624191046 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.643093109 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.643110037 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.643225908 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.643249035 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.647175074 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.658567905 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.658617973 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.658663034 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.658691883 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.658724070 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.665369987 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.665400982 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.665463924 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.665493011 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.665518999 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.665540934 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.688056946 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.688129902 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.688158989 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.688169956 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.688179016 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.688191891 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.688220978 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.691191912 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.691221952 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.691282988 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.691308975 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.691348076 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.693814993 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.716330051 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.716367960 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.716433048 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.716449976 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.716485977 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.716509104 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.718373060 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.718394995 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.718453884 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.718471050 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.718492985 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.718521118 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.732477903 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.732501984 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.732573986 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.732595921 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.732628107 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.732649088 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.739300966 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.739336967 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.739392996 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.739418983 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.739464998 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.749641895 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.749675989 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.749767065 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.749784946 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.749813080 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.749874115 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.755362034 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.755384922 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.755465984 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.755491972 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.761653900 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.761674881 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.761765957 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.761782885 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.762504101 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.774785042 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.774812937 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.774887085 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.774898052 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.775389910 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.775873899 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.775899887 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.775911093 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.775938034 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.775949001 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.775976896 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.786569118 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.786590099 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.786613941 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.786659002 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.786665916 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.786704063 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.798068047 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.798120975 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.798152924 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.798165083 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.798216105 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.828339100 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.828423977 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.828453064 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.828517914 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.828551054 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.828936100 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.828975916 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.829031944 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.829123974 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.829180002 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.829180002 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.841581106 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.841604948 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.841701031 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.841722012 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.842387915 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.842447042 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.842473030 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.842513084 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.842513084 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.842536926 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.852413893 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.852441072 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.852539062 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.852555990 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.853017092 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.853115082 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.853125095 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.854096889 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.854142904 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.854183912 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.854192019 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.854204893 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.854232073 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.859651089 CET	49829	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.859688044 CET	443	49829	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.860685110 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.860734940 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.860771894 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.860786915 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.860811949 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.861187935 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.863267899 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.876060009 CET	49828	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.876081944 CET	443	49828	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.899436951 CET	49836	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.899480104 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:40.899589062 CET	49836	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.899853945 CET	49836	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:40.899869919 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.319972038 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.320260048 CET	49836	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:42.320288897 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.320785046 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.321405888 CET	49836	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:42.321496010 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.321702957 CET	49836	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:42.363378048 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.761513948 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.761707067 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.761771917 CET	49836	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:42.763406992 CET	49836	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:42.763417959 CET	443	49836	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.768776894 CET	49842	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:42.768810034 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.768865108 CET	49842	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:42.769105911 CET	49842	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:42.769119024 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:42.783117056 CET	49703	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:42.783214092 CET	49703	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:42.803591967 CET	49843	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:42.803636074 CET	443	49843	23.1.237.91	192.168.2.5
Dec 18, 2024 17:27:42.803792953 CET	49843	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:42.826421022 CET	49843	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:42.826447964 CET	443	49843	23.1.237.91	192.168.2.5
Dec 18, 2024 17:27:42.902811050 CET	443	49703	23.1.237.91	192.168.2.5
Dec 18, 2024 17:27:42.902848959 CET	443	49703	23.1.237.91	192.168.2.5
Dec 18, 2024 17:27:43.635407925 CET	49843	443	192.168.2.5	23.1.237.91
Dec 18, 2024 17:27:44.187338114 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:44.218761921 CET	49842	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:44.218779087 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:44.219517946 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:44.221370935 CET	49842	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:44.221484900 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:44.221854925 CET	49842	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:44.263364077 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:44.640861988 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:44.640980959 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:44.641036987 CET	49842	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:44.764906883 CET	49842	443	192.168.2.5	52.1.46.41
Dec 18, 2024 17:27:44.764935017 CET	443	49842	52.1.46.41	192.168.2.5
Dec 18, 2024 17:27:58.661149025 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:58.780754089 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:27:59.619390965 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:27:59.739511967 CET	80	49723	54.161.144.184	192.168.2.5
Dec 18, 2024 17:28:13.913213968 CET	49916	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:28:13.913283110 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:13.913461924 CET	49916	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:28:13.913614035 CET	49916	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:28:13.913621902 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:15.614440918 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:15.627696991 CET	49916	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:28:15.627717972 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:15.628900051 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:15.631019115 CET	49916	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:28:15.631206036 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:15.672682047 CET	49916	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:28:16.942838907 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:28:16.942902088 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:28:17.124416113 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:28:17.124465942 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:28:25.311394930 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:25.311456919 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:25.311549902 CET	49916	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:28:26.387756109 CET	49916	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:28:26.387778997 CET	443	49916	142.250.181.132	192.168.2.5
Dec 18, 2024 17:28:43.786050081 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:28:43.905833006 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:28:44.754426003 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:28:44.874102116 CET	80	49723	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:01.942936897 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:01.942975044 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:02.132499933 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:02.132549047 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:13.969150066 CET	50049	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:29:13.969219923 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:13.969321012 CET	50049	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:29:13.969801903 CET	50049	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:29:13.969831944 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:15.677206993 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:15.677958012 CET	50049	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:29:15.678035021 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:15.679838896 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:15.680197954 CET	50049	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:29:15.680402994 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:15.723403931 CET	50049	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:29:17.378881931 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.379422903 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.379504919 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.380314112 CET	49795	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.380347013 CET	443	49795	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.517206907 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.517503023 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.517672062 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.518232107 CET	49796	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.518251896 CET	443	49796	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.643474102 CET	50058	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.643564939 CET	443	50058	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.643570900 CET	50059	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.643656015 CET	443	50059	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.643668890 CET	50058	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.643727064 CET	50059	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.644021988 CET	50058	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.644062996 CET	443	50058	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:17.644223928 CET	50059	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:17.644258976 CET	443	50059	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.064975977 CET	443	50058	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.067409039 CET	443	50059	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.069222927 CET	50058	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:19.069257021 CET	443	50058	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.069418907 CET	50059	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:19.069482088 CET	443	50059	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.070416927 CET	443	50058	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.070455074 CET	443	50059	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.070863962 CET	50058	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:19.070995092 CET	443	50058	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.071269989 CET	50059	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:19.071379900 CET	443	50059	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.071489096 CET	50058	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:19.071738958 CET	50059	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:19.115360022 CET	443	50059	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:19.119326115 CET	443	50058	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:25.364223003 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:25.364383936 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:25.364475965 CET	50049	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:29:26.376246929 CET	50049	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:29:26.376332045 CET	443	50049	142.250.181.132	192.168.2.5
Dec 18, 2024 17:29:28.911427021 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:29.035273075 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:29:29.880697012 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:29:30.007159948 CET	80	49723	54.161.144.184	192.168.2.5
Dec 18, 2024 17:30:04.130049944 CET	50059	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:30:04.130052090 CET	50058	443	192.168.2.5	54.161.144.184
Dec 18, 2024 17:30:04.130070925 CET	443	50058	54.161.144.184	192.168.2.5
Dec 18, 2024 17:30:04.130074024 CET	443	50059	54.161.144.184	192.168.2.5
Dec 18, 2024 17:30:13.647910118 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:30:13.648098946 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:30:14.024068117 CET	49710	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:30:14.024326086 CET	50060	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:30:14.024430990 CET	443	50060	142.250.181.132	192.168.2.5
Dec 18, 2024 17:30:14.024547100 CET	50060	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:30:14.024828911 CET	50060	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:30:14.024863958 CET	443	50060	142.250.181.132	192.168.2.5
Dec 18, 2024 17:30:14.143948078 CET	80	49710	54.161.144.184	192.168.2.5
Dec 18, 2024 17:30:14.611639023 CET	80	49723	54.161.144.184	192.168.2.5
Dec 18, 2024 17:30:14.611928940 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:30:15.716805935 CET	443	50060	142.250.181.132	192.168.2.5
Dec 18, 2024 17:30:15.717356920 CET	50060	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:30:15.717375994 CET	443	50060	142.250.181.132	192.168.2.5
Dec 18, 2024 17:30:15.717823029 CET	443	50060	142.250.181.132	192.168.2.5
Dec 18, 2024 17:30:15.718105078 CET	50060	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:30:15.718175888 CET	443	50060	142.250.181.132	192.168.2.5
Dec 18, 2024 17:30:15.771007061 CET	50060	443	192.168.2.5	142.250.181.132
Dec 18, 2024 17:30:16.382447958 CET	49723	80	192.168.2.5	54.161.144.184
Dec 18, 2024 17:30:16.504333019 CET	80	49723	54.161.144.184	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 17:27:09.673336983 CET	62238	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:09.673547983 CET	52150	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:09.674282074 CET	56288	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:09.674427986 CET	61957	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:09.675208092 CET	64754	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:09.675410986 CET	59716	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:09.764765978 CET	53	54479	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:09.806372881 CET	53	49661	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:09.809915066 CET	53	54950	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:09.811453104 CET	53	56288	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:09.812532902 CET	53	61957	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:09.887633085 CET	53	59716	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:09.914658070 CET	53	64754	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:10.181555986 CET	53	52150	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:10.182337046 CET	53	62238	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:11.306540012 CET	50250	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:11.306740999 CET	64907	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:11.445838928 CET	53	64907	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:11.452516079 CET	53	50250	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:12.093444109 CET	53565	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:12.093790054 CET	64892	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:12.247364044 CET	53	64892	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:12.247404099 CET	53	53565	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:12.976610899 CET	53	59717	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:13.125793934 CET	53	61251	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:13.329227924 CET	64594	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:13.329421043 CET	64637	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:13.471347094 CET	53	64594	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:13.472840071 CET	53	64637	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:13.689374924 CET	50374	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:13.689826012 CET	63899	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:13.863581896 CET	52226	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:13.863928080 CET	63355	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:14.004652977 CET	53	52226	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:14.004663944 CET	53	63355	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:14.008764029 CET	53	50374	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:14.009022951 CET	53	63899	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:17.512031078 CET	64653	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:17.512299061 CET	60647	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:17.526536942 CET	53	53641	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:17.653934956 CET	53	60647	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:17.653948069 CET	53	64653	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:20.106945992 CET	63980	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:20.107064962 CET	63975	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:20.409035921 CET	53	63975	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:20.411566019 CET	53	63980	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:22.642518997 CET	61452	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:22.642767906 CET	61559	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:22.779476881 CET	53	61452	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:22.780354023 CET	53	61559	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:29.073376894 CET	56408	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:29.073586941 CET	61848	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:29.211096048 CET	53	61848	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:29.211221933 CET	53	56408	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:30.285528898 CET	53	60026	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:32.790126085 CET	52770	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:32.790299892 CET	51069	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:32.927001953 CET	53	52770	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:32.928705931 CET	53	51069	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:34.838025093 CET	54137	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:34.838145971 CET	51645	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:34.839179039 CET	51761	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:34.839339972 CET	54613	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:34.974983931 CET	53	54137	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:34.975213051 CET	53	51645	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:34.976147890 CET	53	54613	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:34.976284027 CET	53	61223	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:34.976910114 CET	53	51761	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:37.384386063 CET	59572	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:37.384617090 CET	60988	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:27:37.522258043 CET	53	59572	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:37.524559975 CET	53	60988	1.1.1.1	192.168.2.5
Dec 18, 2024 17:27:49.370280981 CET	53	56107	1.1.1.1	192.168.2.5
Dec 18, 2024 17:28:09.363993883 CET	53	49222	1.1.1.1	192.168.2.5
Dec 18, 2024 17:28:11.635678053 CET	53	61129	1.1.1.1	192.168.2.5
Dec 18, 2024 17:28:42.549077034 CET	53	52021	1.1.1.1	192.168.2.5
Dec 18, 2024 17:29:17.384231091 CET	55981	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:29:17.384394884 CET	54946	53	192.168.2.5	1.1.1.1
Dec 18, 2024 17:29:17.524415970 CET	53	54946	1.1.1.1	192.168.2.5
Dec 18, 2024 17:29:17.642810106 CET	53	55981	1.1.1.1	192.168.2.5
Dec 18, 2024 17:29:28.047797918 CET	53	49699	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 18, 2024 17:27:09.922523022 CET	192.168.2.5	1.1.1.1	c234	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 17:27:09.673336983 CET	192.168.2.5	1.1.1.1	0xa23f	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:09.673547983 CET	192.168.2.5	1.1.1.1	0xf071	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:09.674282074 CET	192.168.2.5	1.1.1.1	0x6a3f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:09.674427986 CET	192.168.2.5	1.1.1.1	0x486c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:09.675208092 CET	192.168.2.5	1.1.1.1	0xdd9a	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:09.675410986 CET	192.168.2.5	1.1.1.1	0x1fbf	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:11.306540012 CET	192.168.2.5	1.1.1.1	0xaaaf	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:11.306740999 CET	192.168.2.5	1.1.1.1	0xc66b	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:12.093444109 CET	192.168.2.5	1.1.1.1	0x4e10	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:12.093790054 CET	192.168.2.5	1.1.1.1	0x41c2	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:13.329227924 CET	192.168.2.5	1.1.1.1	0xa64f	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:13.329421043 CET	192.168.2.5	1.1.1.1	0xe8cb	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:13.689374924 CET	192.168.2.5	1.1.1.1	0xc39d	Standard query (0)	url.us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:13.689826012 CET	192.168.2.5	1.1.1.1	0x3169	Standard query (0)	url.us.m.mimecastprotect.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:13.863581896 CET	192.168.2.5	1.1.1.1	0xa25d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:13.863928080 CET	192.168.2.5	1.1.1.1	0xaa17	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:17.512031078 CET	192.168.2.5	1.1.1.1	0x9f7c	Standard query (0)	static.cres-aws.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:17.512299061 CET	192.168.2.5	1.1.1.1	0x9fd6	Standard query (0)	static.cres-aws.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:20.106945992 CET	192.168.2.5	1.1.1.1	0xc0a0	Standard query (0)	security-us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:20.107064962 CET	192.168.2.5	1.1.1.1	0x23b3	Standard query (0)	security-us.m.mimecastprotect.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:22.642518997 CET	192.168.2.5	1.1.1.1	0x3969	Standard query (0)	security-us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:22.642767906 CET	192.168.2.5	1.1.1.1	0xe785	Standard query (0)	security-us.m.mimecastprotect.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:29.073376894 CET	192.168.2.5	1.1.1.1	0xdd0f	Standard query (0)	url.us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:29.073586941 CET	192.168.2.5	1.1.1.1	0xc2da	Standard query (0)	url.us.m.mimecastprotect.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:32.790126085 CET	192.168.2.5	1.1.1.1	0x50e7	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:32.790299892 CET	192.168.2.5	1.1.1.1	0xe54e	Standard query (0)	res.cisco.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:34.838025093 CET	192.168.2.5	1.1.1.1	0x668a	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:34.838145971 CET	192.168.2.5	1.1.1.1	0x2fb9	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:34.839179039 CET	192.168.2.5	1.1.1.1	0xe3ec	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:34.839339972 CET	192.168.2.5	1.1.1.1	0x36c4	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 18, 2024 17:27:37.384386063 CET	192.168.2.5	1.1.1.1	0x9992	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:37.384617090 CET	192.168.2.5	1.1.1.1	0x3a03	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 18, 2024 17:29:17.384231091 CET	192.168.2.5	1.1.1.1	0xae1b	Standard query (0)	res.cisco.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:29:17.384394884 CET	192.168.2.5	1.1.1.1	0x8950	Standard query (0)	res.cisco.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 17:27:09.811453104 CET	1.1.1.1	192.168.2.5	0x6a3f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:09.811453104 CET	1.1.1.1	192.168.2.5	0x6a3f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:09.812532902 CET	1.1.1.1	192.168.2.5	0x486c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 18, 2024 17:27:09.914658070 CET	1.1.1.1	192.168.2.5	0xdd9a	No error (0)	res.cisco.com		54.161.144.184	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:09.914658070 CET	1.1.1.1	192.168.2.5	0xdd9a	No error (0)	res.cisco.com		52.1.46.41	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:09.914658070 CET	1.1.1.1	192.168.2.5	0xdd9a	No error (0)	res.cisco.com		54.156.202.168	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:10.181555986 CET	1.1.1.1	192.168.2.5	0xf071	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 17:27:10.182337046 CET	1.1.1.1	192.168.2.5	0xa23f	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 17:27:10.182337046 CET	1.1.1.1	192.168.2.5	0xa23f	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.47	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:10.182337046 CET	1.1.1.1	192.168.2.5	0xa23f	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.59	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:10.182337046 CET	1.1.1.1	192.168.2.5	0xa23f	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.126	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:10.182337046 CET	1.1.1.1	192.168.2.5	0xa23f	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.34	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:11.452516079 CET	1.1.1.1	192.168.2.5	0xaaaf	No error (0)	res.cisco.com		54.161.144.184	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:11.452516079 CET	1.1.1.1	192.168.2.5	0xaaaf	No error (0)	res.cisco.com		52.1.46.41	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:11.452516079 CET	1.1.1.1	192.168.2.5	0xaaaf	No error (0)	res.cisco.com		54.156.202.168	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:12.247364044 CET	1.1.1.1	192.168.2.5	0x41c2	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 18, 2024 17:27:12.247404099 CET	1.1.1.1	192.168.2.5	0x4e10	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:12.247404099 CET	1.1.1.1	192.168.2.5	0x4e10	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:13.471347094 CET	1.1.1.1	192.168.2.5	0xa64f	No error (0)	res.cisco.com		52.1.46.41	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:13.471347094 CET	1.1.1.1	192.168.2.5	0xa64f	No error (0)	res.cisco.com		54.161.144.184	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:13.471347094 CET	1.1.1.1	192.168.2.5	0xa64f	No error (0)	res.cisco.com		54.156.202.168	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:14.004652977 CET	1.1.1.1	192.168.2.5	0xa25d	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:14.004663944 CET	1.1.1.1	192.168.2.5	0xaa17	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 18, 2024 17:27:14.008764029 CET	1.1.1.1	192.168.2.5	0xc39d	No error (0)	url.us.m.mimecastprotect.com		205.139.111.12	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:14.008764029 CET	1.1.1.1	192.168.2.5	0xc39d	No error (0)	url.us.m.mimecastprotect.com		205.139.111.113	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:14.008764029 CET	1.1.1.1	192.168.2.5	0xc39d	No error (0)	url.us.m.mimecastprotect.com		205.139.111.117	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:14.008764029 CET	1.1.1.1	192.168.2.5	0xc39d	No error (0)	url.us.m.mimecastprotect.com		207.211.31.113	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:14.008764029 CET	1.1.1.1	192.168.2.5	0xc39d	No error (0)	url.us.m.mimecastprotect.com		207.211.31.106	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:14.008764029 CET	1.1.1.1	192.168.2.5	0xc39d	No error (0)	url.us.m.mimecastprotect.com		207.211.31.64	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:17.653934956 CET	1.1.1.1	192.168.2.5	0x9fd6	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 17:27:17.653948069 CET	1.1.1.1	192.168.2.5	0x9f7c	No error (0)	static.cres-aws.com	d2qj7djftjbj85.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 17:27:17.653948069 CET	1.1.1.1	192.168.2.5	0x9f7c	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.34	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:17.653948069 CET	1.1.1.1	192.168.2.5	0x9f7c	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.59	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:17.653948069 CET	1.1.1.1	192.168.2.5	0x9f7c	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.47	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:17.653948069 CET	1.1.1.1	192.168.2.5	0x9f7c	No error (0)	d2qj7djftjbj85.cloudfront.net		18.66.161.126	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:20.411566019 CET	1.1.1.1	192.168.2.5	0xc0a0	No error (0)	security-us.m.mimecastprotect.com		170.10.128.87	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:20.411566019 CET	1.1.1.1	192.168.2.5	0xc0a0	No error (0)	security-us.m.mimecastprotect.com		170.10.132.89	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:20.411566019 CET	1.1.1.1	192.168.2.5	0xc0a0	No error (0)	security-us.m.mimecastprotect.com		170.10.132.87	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:20.411566019 CET	1.1.1.1	192.168.2.5	0xc0a0	No error (0)	security-us.m.mimecastprotect.com		170.10.132.88	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:20.411566019 CET	1.1.1.1	192.168.2.5	0xc0a0	No error (0)	security-us.m.mimecastprotect.com		170.10.128.88	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:20.411566019 CET	1.1.1.1	192.168.2.5	0xc0a0	No error (0)	security-us.m.mimecastprotect.com		170.10.128.89	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:22.779476881 CET	1.1.1.1	192.168.2.5	0x3969	No error (0)	security-us.m.mimecastprotect.com		170.10.128.87	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:22.779476881 CET	1.1.1.1	192.168.2.5	0x3969	No error (0)	security-us.m.mimecastprotect.com		170.10.132.89	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:22.779476881 CET	1.1.1.1	192.168.2.5	0x3969	No error (0)	security-us.m.mimecastprotect.com		170.10.132.87	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:22.779476881 CET	1.1.1.1	192.168.2.5	0x3969	No error (0)	security-us.m.mimecastprotect.com		170.10.128.89	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:22.779476881 CET	1.1.1.1	192.168.2.5	0x3969	No error (0)	security-us.m.mimecastprotect.com		170.10.128.88	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:22.779476881 CET	1.1.1.1	192.168.2.5	0x3969	No error (0)	security-us.m.mimecastprotect.com		170.10.132.88	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:29.211221933 CET	1.1.1.1	192.168.2.5	0xdd0f	No error (0)	url.us.m.mimecastprotect.com		205.139.111.12	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:29.211221933 CET	1.1.1.1	192.168.2.5	0xdd0f	No error (0)	url.us.m.mimecastprotect.com		207.211.31.64	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:29.211221933 CET	1.1.1.1	192.168.2.5	0xdd0f	No error (0)	url.us.m.mimecastprotect.com		207.211.31.106	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:29.211221933 CET	1.1.1.1	192.168.2.5	0xdd0f	No error (0)	url.us.m.mimecastprotect.com		207.211.31.113	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:29.211221933 CET	1.1.1.1	192.168.2.5	0xdd0f	No error (0)	url.us.m.mimecastprotect.com		205.139.111.117	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:29.211221933 CET	1.1.1.1	192.168.2.5	0xdd0f	No error (0)	url.us.m.mimecastprotect.com		205.139.111.113	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:32.927001953 CET	1.1.1.1	192.168.2.5	0x50e7	No error (0)	res.cisco.com		52.1.46.41	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:32.927001953 CET	1.1.1.1	192.168.2.5	0x50e7	No error (0)	res.cisco.com		54.156.202.168	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:32.927001953 CET	1.1.1.1	192.168.2.5	0x50e7	No error (0)	res.cisco.com		54.161.144.184	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:34.974983931 CET	1.1.1.1	192.168.2.5	0x668a	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:34.974983931 CET	1.1.1.1	192.168.2.5	0x668a	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:34.975213051 CET	1.1.1.1	192.168.2.5	0x2fb9	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 18, 2024 17:27:34.976147890 CET	1.1.1.1	192.168.2.5	0x36c4	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 18, 2024 17:27:34.976910114 CET	1.1.1.1	192.168.2.5	0xe3ec	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:34.976910114 CET	1.1.1.1	192.168.2.5	0xe3ec	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:37.522258043 CET	1.1.1.1	192.168.2.5	0x9992	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:37.522258043 CET	1.1.1.1	192.168.2.5	0x9992	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:27:37.524559975 CET	1.1.1.1	192.168.2.5	0x3a03	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 18, 2024 17:29:17.642810106 CET	1.1.1.1	192.168.2.5	0xae1b	No error (0)	res.cisco.com		54.161.144.184	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:29:17.642810106 CET	1.1.1.1	192.168.2.5	0xae1b	No error (0)	res.cisco.com		52.1.46.41	A (IP address)	IN (0x0001)	false
Dec 18, 2024 17:29:17.642810106 CET	1.1.1.1	192.168.2.5	0xae1b	No error (0)	res.cisco.com		54.156.202.168	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

static.cres-aws.com

res.cisco.com

url.us.m.mimecastprotect.com

https:

maxcdn.bootstrapcdn.com

security-us.m.mimecastprotect.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	54.161.144.184	80	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 17:27:10.202562094 CET	477	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 18, 2024 17:27:11.300678015 CET	483	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 18 Dec 2024 16:27:11 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 18, 2024 17:27:13.325715065 CET	491	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 18, 2024 17:27:13.648900986 CET	497	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 18 Dec 2024 16:27:13 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 18, 2024 17:27:58.661149025 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 18, 2024 17:28:43.786050081 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 18, 2024 17:29:28.911427021 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	54.161.144.184	80	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 17:27:10.202805996 CET	12360	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?p=0&d=%7B%27name%27%3Anull,%0D%0A%27msgID%27%3A%27%7C1__f7c9ffd700000193d6bfa156956fcd82f58cb999%40mail10674%2Ecorpmailsvcs%2Ecom%27,%0D%0A%27keysize%27%3A24,%0D%0A%27flags%27%3A3073,%0D%0A%27rid%27%3A%27ImNyaXNlbGRhLnBvcGFyZGFAZGlzaC5jb20iIDxjcmlzZWxkYS5wb3BhcmRhQGRpc2guY29tPg%3D%3D%27,%0D%0A%27algnames%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%27AES%27%7D%7D,%0D%0A%27algparams%27%3A%7B%27encryption%27%3A%7B%27data%27%3A%7B%27IV%27%3A%27xwra6T5w21Foe2SY2dyOYg%3D%3D%27%7D%7D%7D,%0D%0A%27keyserverhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27securereplyhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27openerhost%27%3A%27res%2Ecisco%2Ecom%3A443%27,%0D%0A%27toc%27%3A%5B%0D%0A%5B%27Body-1734474703193%2Etxt%27,1,%0D%0A%27%27,%0D%0A%27%27,%0D%0A3,%5B0,10145%5D,%27Body-1734474703193%2Etxt%27,%0D%0A%27ISO-8859-1%27%5D,%0D%0A%5B%27MessageBar%2Ehtml%27,4,%0D%0A%27%27, [TRUNCATED] Data Raw: Data Ascii:
Dec 18, 2024 17:27:10.322534084 CET	2472	OUT	Data Raw: 64 6f 58 7a 69 4e 43 54 5a 33 64 57 6f 77 57 58 61 39 48 32 25 32 42 52 65 42 46 4b 41 51 39 65 4b 62 47 43 4e 41 42 32 35 69 66 50 45 78 34 38 73 5a 33 67 58 6e 41 66 35 5a 44 51 56 46 6f 4f 58 38 44 69 46 49 58 6d 6d 6b 63 41 34 37 34 25 32 46 Data Ascii: doXziNCTZ3dWowWXa9H2%2BReBFKAQ9eKbGCNAB25ifPEx48sZ3gXnAf5ZDQVFoOX8DiFIXmmkcA474%2FyPGadt0DZof4XRx4WLjr3QGeHijNQDpz2ontRwb5vEhnQFQCLA5rHWy3MIu1NObXrklmnt%2BCBzbgH2ZaiQH5f%2Bqw4p%2FW256DPSgBNPIq3k%2BfUdgWfKYBB2VxG%2FCfE0DVvtO7ktvNNeIt%2FeiJMyEzr
Dec 18, 2024 17:27:10.322717905 CET	2055	OUT	Data Raw: 7a 5a 50 38 70 35 7a 4a 48 57 50 45 55 6e 4e 79 66 25 32 46 6c 30 25 32 46 72 52 30 6b 76 25 32 46 47 67 55 51 71 6d 59 39 6e 71 4c 25 32 46 4f 4f 25 32 46 6e 6b 67 76 56 4a 70 6b 34 55 75 76 63 66 48 78 57 48 78 31 66 62 33 33 25 32 42 62 64 62 Data Ascii: zZP8p5zJHWPEUnNyf%2Fl0%2FrR0kv%2FGgUQqmY9nqL%2FOO%2FnkgvVJpk4UuvcfHxWHx1fb33%2BbdbMiM6zvmuW3TPyzTxyp7Vel8gJOAp9Z1kM3pvJLsQcLmkuLeDGju1Xj6PZncAYkx1Rj80m%2BEL1%2F0rcHxtxUTLt%2F%2FfNkTarM%2B3xwnAIcQVWOy1%2B0YBLC9SCgmL2bhXnlX3Oy2uAjHZ80%2BNCTb2WsC
Dec 18, 2024 17:27:11.337713957 CET	302	IN	HTTP/1.1 414 Request-URI Too Large Server: awselb/2.0 Date: Wed, 18 Dec 2024 16:27:11 GMT Content-Type: text/html Content-Length: 142 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 31 34 20 52 65 71 75 65 73 74 2d 55 52 49 20 54 6f 6f 20 4c 61 72 67 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 31 34 20 52 65 71 75 65 73 74 2d 55 52 49 20 54 6f 6f 20 4c 61 72 67 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>414 Request-URI Too Large</title></head><body><center><h1>414 Request-URI Too Large</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49723	54.161.144.184	80	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 17:27:13.504283905 CET	487	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 18, 2024 17:27:14.611217022 CET	493	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 18 Dec 2024 16:27:14 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://res.cisco.com:443/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 18, 2024 17:27:59.619390965 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 18, 2024 17:28:44.754426003 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 18, 2024 17:29:29.880697012 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	104.17.24.14	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:11 UTC	542	OUT	GET /ajax/libs/select2/4.0.12/css/select2.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:11 UTC	932	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:11 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-3a76" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Mon, 08 Dec 2025 16:27:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z7DuTrxfGM6M%2Fl7CyBRfB6x9gcM1lMHlngZHCo9zc8CndT5D0c1L0IxrksTDavU4s3QFx9tvEEU8nKpKIVaJVX16vM359WNPOTVXmutxp%2BFIGNTeoI7bV0AnoMlJ%2Fq1WNlhzZL8b"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f4084d3ba774345-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 16:27:11 UTC	437	IN	Data Raw: 33 61 37 36 0d 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 Data Ascii: 3a76.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 6c 65 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 Data Ascii: -space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-container .select2-s
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 20 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 64 6f 77 6e 2d 2d 62 65 6c 6f 77 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 73 65 61 72 63 68 2d 2d 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 34 70 78 7d 2e 73 65 6c 65 63 74 32 2d Data Ascii: {border-bottom:none;border-bottom-left-radius:0;border-bottom-right-radius:0}.select2-container--open .select2-dropdown--below{border-top:none;border-top-left-radius:0;border-top-right-radius:0}.select2-search--dropdown{display:block;padding:4px}.select2-
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 7b 68 65 69 67 68 74 3a 32 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d Data Ascii: elect2-container--default .select2-selection--single .select2-selection__placeholder{color:#999}.select2-container--default .select2-selection--single .select2-selection__arrow{height:26px;position:absolute;top:1px;right:1px;width:20px}.select2-container-
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 6c 65 Data Ascii: x-sizing:border-box;list-style:none;margin:0;padding:0 5px;width:100%}.select2-container--default .select2-selection--multiple .select2-selection__rendered li{list-style:none}.select2-container--default .select2-selection--multiple .select2-selection__cle
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 62 6c 61 63 6b 20 31 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 69 73 61 62 6c 65 64 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 Data Ascii: select2-selection--multiple{border:solid black 1px;outline:0}.select2-container--default.select2-container--disabled .select2-selection--multiple{background-color:#eee;cursor:default}.select2-container--default.select2-container--disabled .select2-selecti
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 74 72 75 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 20 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c Data Ascii: .select2-results__option[aria-selected=true]{background-color:#ddd}.select2-container--default .select2-results__option .select2-results__option{padding-left:1em}.select2-container--default .select2-results__option .select2-results__option .select2-resul
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 2d 72 65 73 75 6c 74 73 5f 5f 67 72 6f 75 70 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 35 30 25 2c 20 23 65 65 65 20 31 30 30 25 29 3b 62 Data Ascii: -results__group{cursor:default;display:block;padding:6px}.select2-container--classic .select2-selection--single{background-color:#f7f7f7;border:1px solid #aaa;border-radius:4px;outline:0;background-image:-webkit-linear-gradient(top, #fff 50%, #eee 100%);b
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 65 65 65 20 35 30 25 2c 20 23 63 63 63 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 45 45 45 45 45 45 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 43 43 43 43 43 43 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 Data Ascii: e:linear-gradient(to bottom, #eee 50%, #ccc 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#FFEEEEEE', endColorstr='#FFCCCCCC', GradientType=0)}.select2-container--classic .select2-selection--single .sele
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 66 66 20 30 25 2c 20 23 65 65 65 20 35 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 Data Ascii: order-top-right-radius:0;background-image:-webkit-linear-gradient(top, #fff 0%, #eee 50%);background-image:-o-linear-gradient(top, #fff 0%, #eee 50%);background-image:linear-gradient(to bottom, #fff 0%, #eee 50%);background-repeat:repeat-x;filter:progid:D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	104.17.24.14	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:11 UTC	526	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:11 UTC	965	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:11 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 180713 Expires: Mon, 08 Dec 2025 16:27:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kWu4Dyz%2Bh1EFL02x2NRcH0%2BgEuVIR4aWghqAq8IngmfZq2GAFPcOf%2Bx9r59uFf8XLvw%2Fqu4u%2F%2BfsctRFMMGAnVS6pLomWhArGPA27oJzcHxI3gQgM5VeHR6fA92AaIa2RMaPRY09"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f4084d3cc3d4349-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 16:27:11 UTC	404	IN	Data Raw: 33 39 37 37 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 3977/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 2e 61 6d 64 29 76 61 72 20 65 3d 75 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 5d 3d Data Ascii: .amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 5d 3b 72 65 74 75 72 6e 20 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 Data Ascii: ];return e=r[1],i&&(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e){v
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 20 45 72 72 6f 72 28 22 53 65 65 20 61 6c 6d 6f 6e 64 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 74 75 Data Ascii: Error("See almond README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;retu
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 6e 74 73 2c 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 Data Ascii: nts,t),n.apply(this,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listeners
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 6e 64 Data Ascii: ,">":">",'"':""","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.append
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 28 22 65 73 63 61 70 65 4d 61 72 6b 75 70 22 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 2c 74 Data Ascii: ("escapeMarkup");this.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message",t
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 2e 73 65 6c 65 63 74 65 64 7c 7c 6e 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 68 69 Data Ascii: lement.selected\|\|null==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searchi
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 6c 29 2c 73 2e 61 70 70 65 6e 64 28 61 29 2c 73 2e 61 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 65 73 Data Ascii: l),s.append(a),s.append(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClasses
2024-12-18 16:27:11 UTC	1369	IN	Data Raw: 29 3b 69 66 28 21 28 6e 3c 3d 30 29 29 7b 76 61 72 20 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: );if(!(n<=0)){var r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49712	18.66.161.47	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:11 UTC	506	OUT	GET /postx.css HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:13 UTC	714	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 125394 Connection: close Date: Wed, 18 Dec 2024 16:27:13 GMT Last-Modified: Sat, 08 Jun 2024 05:00:10 GMT ETag: "a0b4ff216e038470b000b63f5aa39816" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1bf6ea4837f8cd88590dc123580561e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: ieQgEYo3FqezYJyiQskZst_R93gjBplHNgGzjboDPAivjEnw5CWq_A== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-18 16:27:13 UTC	14588	IN	Data Raw: 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 45 78 74 72 61 4c 69 67 68 74 2e 74 74 66 22 29 20 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");}@font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inter-ExtraLight.ttf")
2024-12-18 16:27:13 UTC	2380	IN	Data Raw: 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 70 78 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 77 69 64 74 68 3a 20 31 31 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 20 69 64 3d 27 61 27 20 77 69 64 74 68 3d 27 31 35 27 20 68 65 69 67 68 74 3d 27 31 35 27 Data Ascii: und-color: transparent; color: white; border: 0; border: 0px; outline: 0px; text-align: left; width: 110px; background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16' id='a' width='15' height='15'
2024-12-18 16:27:13 UTC	16384	IN	Data Raw: 0a 2e 66 6f 72 6d 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 2c 0a 2e 66 6f 72 6d 49 6e 70 75 74 44 65 73 63 43 65 6c 6c 2c 0a 2e 66 6f 72 6d 49 6e 70 75 74 45 72 72 6f 72 43 65 6c 6c 2c 0a 2e 66 6f 72 6d 52 65 71 75 69 72 65 64 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 2c 0a 2e 61 74 74 46 6f 72 6d 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 2c 0a 2e 61 74 74 46 6f 72 6d 49 6e 70 75 74 44 65 73 63 43 65 6c 6c 2c 0a 2e 66 6f 72 6d 4c 61 62 65 6c 43 65 6c 6c 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 39 70 78 20 39 70 78 20 35 70 78 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 66 6f 6e 74 2d Data Ascii: .formInputLabelCell,.formInputDescCell,.formInputErrorCell,.formRequiredInputLabelCell,.attFormInputLabelCell,.attFormInputDescCell,.formLabelCell { padding: 9px 9px 9px 5px; vertical-align: middle; color: #555555; text-align: left; font-
2024-12-18 16:27:13 UTC	1024	IN	Data Raw: 74 65 64 20 61 73 20 57 69 6e 64 6f 77 73 20 63 6f 6e 74 72 6f 6c 73 2e 0a 49 45 20 68 61 6e 64 6c 65 73 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 20 70 61 67 65 2c 20 73 6f 20 69 74 20 6d 61 79 20 73 68 6f 77 20 75 70 20 63 6f 72 72 65 63 74 6c 79 20 28 62 65 63 61 75 73 65 20 49 45 20 74 72 69 65 73 0a 74 6f 20 70 69 63 6b 20 74 68 65 20 62 65 73 74 20 66 6f 6e 74 20 74 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 74 65 78 74 29 2c 20 62 75 74 20 74 68 65 20 64 72 6f 70 2d 64 6f 77 6e 73 20 73 68 6f 77 20 75 70 20 77 69 74 68 0a 62 6f 78 65 73 20 69 6e 73 74 65 61 64 20 6f 66 20 63 68 61 72 61 63 74 65 72 73 2c 20 62 65 63 61 75 73 65 20 57 69 6e 64 6f 77 73 20 64 6f 65 73 6e 27 74 20 74 72 79 20 74 6f 20 70 69 63 6b 20 74 68 65 20 6d 6f 73 74 0a 61 Data Ascii: ted as Windows controls.IE handles the rest of the page, so it may show up correctly (because IE triesto pick the best font to display the text), but the drop-downs show up withboxes instead of characters, because Windows doesn't try to pick the mosta
2024-12-18 16:27:13 UTC	16384	IN	Data Raw: 3b 0a 7d 0a 0a 2e 6a 73 48 69 64 65 2c 0a 2e 6a 73 53 68 6f 77 6e 20 7b 7d 0a 0a 2e 73 62 42 61 6e 6e 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 65 64 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 4d 6f 63 63 61 73 69 6e 3b 0a 7d 0a 0a 2e 73 62 42 61 6e 6e 65 72 54 65 78 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 35 70 78 20 32 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 70 74 32 30 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 7d 0a 0a 2e 70 6c 35 70 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 Data Ascii: ;}.jsHide,.jsShown {}.sbBanner { border-style: solid; border-color: red; border-width: 2px; background-color: Moccasin;}.sbBannerText { margin: 5px 5px 2px; text-align: left;}.pt20 { padding-top: 20px;}.pl5p { padding-left:
2024-12-18 16:27:13 UTC	1024	IN	Data Raw: 66 66 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 38 35 38 35 62 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 49 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 65 78 70 69 72 65 4c 6f 63 6b 54 61 62 6c 65 20 74 72 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 66 64 66 64 66 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 39 34 61 34 63 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 49 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 Data Ascii: ff; color: #58585b; font-family: Inter; font-size: 14px; line-height: 19px; border-right: none;}.expireLockTable tr td:first-child { border-left: 1px solid #dfdfdf; color: #494a4c; font-size: 13px; font-family: Inter; font-weight: 3
2024-12-18 16:27:13 UTC	10730	IN	Data Raw: 69 67 68 74 3a 20 31 38 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 36 39 63 63 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 74 69 74 6c 65 2c 0a 68 33 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 33 33 36 36 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 7d 0a 0a 70 2e 64 65 66 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a Data Ascii: ight: 18px; color: #1d69cc !important;}title,h3 { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 16px; font-weight: bold; color: #003366; line-height: 16px;}p.defp { font-family: Verdana, Arial, Helvetica, sans-serif;
2024-12-18 16:27:13 UTC	16384	IN	Data Raw: 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 64 65 73 74 72 75 63 74 69 76 65 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 68 6f 76 65 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 69 6e 74 65 72 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6d 65 64 69 75 6d 2d 64 65 73 74 72 75 63 74 69 76 65 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c Data Ascii: , 0); --color-interact-border-strong-destructive: rgba(0, 0, 0, 0); --color-interact-border-strong-hover: rgba(0, 0, 0, 0); --color-interact-border-strong: rgba(0, 0, 0, 0); --color-interact-background-medium-destructive: rgba(0, 0, 0, 0); --col
2024-12-18 16:27:13 UTC	1024	IN	Data Raw: 64 20 76 61 72 28 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 69 6e 74 65 72 61 63 74 2d 73 74 72 6f 6b 65 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 29 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 73 69 7a 65 2d 69 6e 74 65 72 61 63 74 2d 72 61 64 69 75 73 2d 62 6f 72 64 65 72 29 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 2c 20 30 2e 33 2c 20 30 2e 31 2c Data Ascii: d var(--mds-button-color-border); border: var(--size-interact-stroke) solid var(--mds-button-color-border); border-radius: 6px; border-radius: var(--size-interact-radius-border); box-shadow: none; transition: all 0.3s cubic-bezier(0.7, 0.3, 0.1,
2024-12-18 16:27:13 UTC	16384	IN	Data Raw: 74 74 6f 6e 2d 6c 6f 61 64 69 6e 67 2e 61 63 74 69 76 65 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 3a 64 69 73 61 62 6c 65 64 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 5b 64 69 73 61 62 6c 65 64 5d 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 2e 6d 64 73 2d 62 75 74 74 6f 6e 2d 6c 6f 61 64 69 6e 67 2e 68 6f 76 65 72 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 2e 68 6f 76 65 72 3a 64 69 73 61 62 6c 65 64 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 2e 68 6f 76 65 72 5b 64 69 73 61 62 6c 65 64 5d 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 2e 6d 64 73 2d 62 75 74 74 6f 6e 2d 6c 6f 61 64 69 6e 67 3a 61 63 74 69 76 65 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 5b Data Ascii: tton-loading.active,.mds-button.active:disabled,.mds-button.active[disabled],.mds-button.mds-button-loading.hover,.mds-button.hover:disabled,.mds-button.hover[disabled],.mds-button.mds-button-loading:active,.mds-button:disabled:active,.mds-button[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:12 UTC	557	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:13 UTC	742	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:13 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=FQjjn5l7J+TsPQX+5HQprOqilO3K89RllGTld+uyEJtx5sxCWZQNi7ybnlm0wPrReSVWwLJrtvuJc4U/bIhs9QSjYiUeq/hwyi5Y4v+5HY7k1pjGzcdZ4AAiUIPF; Expires=Wed, 25 Dec 2024 16:27:13 GMT; Path=/ Set-Cookie: AWSALBCORS=FQjjn5l7J+TsPQX+5HQprOqilO3K89RllGTld+uyEJtx5sxCWZQNi7ybnlm0wPrReSVWwLJrtvuJc4U/bIhs9QSjYiUeq/hwyi5Y4v+5HY7k1pjGzcdZ4AAiUIPF; Expires=Wed, 25 Dec 2024 16:27:13 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-18 16:27:13 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:12 UTC	653	OUT	GET /websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:13 UTC	971	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:13 GMT Content-Type: image/gif Content-Length: 10598 Connection: close Set-Cookie: AWSALB=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp; Expires=Wed, 25 Dec 2024 16:27:13 GMT; Path=/ Set-Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp; Expires=Wed, 25 Dec 2024 16:27:13 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=37835C4E472B9E79C993CE39C64D1C62; Path=/websafe; Secure; HttpOnly Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT ETag: "19373981518-2966" Server: unknown
2024-12-18 16:27:13 UTC	8459	IN	Data Raw: 47 49 46 38 39 61 00 05 28 03 f1 00 00 00 00 00 f6 f6 f6 f7 f7 f7 f8 f8 f8 21 f9 04 01 00 00 00 00 21 ff 0b 49 6d 61 67 65 4d 61 67 69 63 6b 0e 67 61 6d 6d 61 3d 30 2e 34 35 34 35 34 35 00 2c 00 00 00 00 00 05 28 03 00 02 ff 84 8f a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a6 ea ca b6 ee 0b c7 f2 4c d7 f6 8d e7 fa ce f7 fe 0f 0c 0a 87 c4 a2 f1 88 4c 2a 97 cc a6 f3 09 8d 4a a7 d4 aa f5 8a cd 6a b7 dc ae f7 0b 0e 8b c7 e4 b2 f9 8c 4e ab d7 ec b6 fb 0d 8f cb e7 f4 ba fd 8e cf eb f7 fc be ff 0f 18 28 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 08 19 29 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 09 1a 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa 0a 1b 2b 3b 4b 5b 6b 7b 8b 9b ab bb cb db eb fb 0b 1c 2c 3c 4c 5c 6c 7c 8c 9c ac bc cc dc ec fc 0c 1d 2d 3d 4d Data Ascii: GIF89a(!!ImageMagickgamma=0.454545,(HLLJjN(8HXhx)9IYiy:JZjz+;K[k{,<L\l\|-=M
2024-12-18 16:27:13 UTC	2139	IN	Data Raw: 90 f8 ba f0 1c c6 f0 00 db 90 ee f8 25 02 39 e0 0d 1f 21 0a 9f 2e 0d e5 0f 0f 67 90 09 e5 a0 03 97 ed 0a 2b a1 04 ff 90 0f dd d0 10 c9 b0 a1 c8 06 73 86 c0 09 c5 07 14 1c 11 6f 1a 4f 10 49 ff 10 11 c3 cf 0f 17 91 d9 1a d1 0e 99 6c 0d 01 ce 08 bb 21 dc 9e 0f 13 af a6 66 14 cc 12 5f 0b 15 3f 31 0c c5 50 15 79 0f 08 4b d1 5d 4e 91 12 bd d0 13 f5 4e 0f f7 90 16 13 b1 9e ea a5 5b 66 51 17 17 0f 18 13 d0 15 c5 41 14 d9 0e 16 2f cd 59 7e d1 16 dd 4f 07 a5 4d 18 63 90 13 e5 0e 19 93 2f 58 02 11 1a 3b 91 19 ed 0f 14 bd c1 d3 7e 90 14 b1 0c f4 7e 20 12 b3 a6 e9 70 71 15 59 b1 15 a5 b1 bb a8 b1 cf 2c 0d 0d cf 71 4f d6 71 1b d3 51 1d b1 11 04 15 f1 0e 11 cd ac e6 11 11 fa b1 f2 b4 31 1c bc d1 f6 4e 70 10 b0 ca 07 06 b2 08 03 d2 a7 48 84 0e a9 21 21 01 b0 1d b3 b1 b8 Data Ascii: %9!.g+soOIl!f_?1PyK]NN[fQA/Y~OMc/X;~~ pqY,qOqQ1NpH!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	104.17.24.14	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:13 UTC	386	OUT	GET /ajax/libs/select2/4.0.12/js/select2.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:13 UTC	967	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fcb-112d5" Last-Modified: Mon, 04 May 2020 16:16:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 180715 Expires: Mon, 08 Dec 2025 16:27:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oTrymMkoAabA4UGwMhBnbfCPXWRxPf1pqVmVuyyulWft2hglbWncHQMoxZ7hLjbkfGtQF2fwahoSQDKFXAjnTK%2BMZyC%2Bzb%2B8FpAEqLWcZgf%2BEO5fFyE4fmDRIB%2Fjvp%2F%2FouIjmvzV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f4084e36ca7443e-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 16:27:13 UTC	402	IN	Data Raw: 37 62 65 39 0d 0a 2f 2a 21 20 53 65 6c 65 63 74 32 20 34 2e 30 2e 31 32 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 65 6c 65 63 74 32 2f 73 65 6c 65 63 74 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 75 6e 64 Data Ascii: 7be9/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="und
2024-12-18 16:27:13 UTC	1369	IN	Data Raw: 74 32 2e 61 6d 64 29 76 61 72 20 65 3d 75 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 74 2c 6e 2c 72 2c 68 2c 6f 2c 73 2c 66 2c 67 2c 6d 2c 76 2c 79 2c 5f 2c 69 2c 61 2c 77 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 6c 2c 63 2c 75 2c 64 2c 70 2c 68 3d 74 26 26 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 66 3d 79 2e 6d 61 70 2c 67 3d 66 26 26 66 5b 22 2a 22 5d 7c 7c 7b 7d 3b 69 66 28 65 29 7b 66 6f 72 28 73 3d 28 65 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 2d 31 2c 79 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 77 2e 74 65 73 74 28 65 5b 73 5d 29 26 26 28 65 5b 73 Data Ascii: t2.amd)var e=u.fn.select2.amd;var t,n,r,h,o,s,f,g,m,v,y,_,i,a,w;function b(e,t){return i.call(e,t)}function l(e,t){var n,r,i,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s
2024-12-18 16:27:13 UTC	1369	IN	Data Raw: 5b 31 5d 3b 72 65 74 75 72 6e 20 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 3d 6c 28 69 2c 6f 29 29 29 2c 69 3f 65 3d 6e 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 3f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 7d 7d 28 6f 29 29 3a 6c 28 65 2c 6f 29 3a 28 69 3d 28 72 3d 63 28 65 3d 6c 28 65 2c 6f 29 29 29 5b 30 5d 2c 65 3d 72 5b 31 5d 2c 69 26 26 28 6e 3d 44 28 69 29 29 29 2c 7b 66 3a 69 3f 69 2b 22 21 22 2b 65 3a 65 2c 6e 3a 65 2c 70 72 3a 69 2c 70 3a 6e 7d 7d 2c 67 3d 7b 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 29 7d 2c 65 78 70 6f 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: [1];return e=r[1],i&&(n=D(i=l(i,o))),i?e=n&&n.normalize?n.normalize(e,function(t){return function(e){return l(e,t)}}(o)):l(e,o):(i=(r=c(e=l(e,o)))[0],e=r[1],i&&(n=D(i))),{f:i?i+"!"+e:e,n:e,pr:i,p:n}},g={require:function(e){return A(e)},exports:function(e)
2024-12-18 16:27:13 UTC	1369	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 22 53 65 65 20 61 6c 6d 6f 6e 64 20 52 45 41 44 4d 45 3a 20 69 6e 63 6f 72 72 65 63 74 20 6d 6f 64 75 6c 65 20 62 75 69 6c 64 2c 20 6e 6f 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 22 29 3b 74 2e 73 70 6c 69 63 65 7c 7c 28 6e 3d 74 2c 74 3d 5b 5d 29 2c 62 28 6d 2c 65 29 7c 7c 62 28 76 2c 65 29 7c 7c 28 76 5b 65 5d 3d 5b 65 2c 74 2c 6e 5d 29 7d 29 2e 61 6d 64 3d 7b 6a 51 75 65 72 79 3a 21 30 7d 2c 65 2e 72 65 71 75 69 72 65 6a 73 3d 74 2c 65 2e 72 65 71 75 69 72 65 3d 6e 2c 65 2e 64 65 66 69 6e 65 3d 72 29 2c 65 2e 64 65 66 69 6e 65 28 22 61 6c 6d 6f 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 65 2e 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 7c 7c 24 3b 72 65 Data Ascii: ew Error("See almond README: incorrect module build, no module name");t.splice\|\|(n=t,t=[]),b(m,e)\|\|b(v,e)\|\|(v[e]=[e,t,n])}).amd={jQuery:!0},e.requirejs=t,e.require=n,e.define=r),e.define("almond",function(){}),e.define("jquery",[],function(){var e=u\|\|$;re
2024-12-18 16:27:13 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2c 74 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 6c 5d 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3d 61 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 7b 7d 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 7c 7c 7b 7d 2c 65 20 69 6e 20 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 70 75 73 68 28 74 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 65 Data Ascii: ments,t),n.apply(this,arguments)}}for(var l=0;l<e.length;l++){var c=e[l];o.prototype[c]=a(c)}return o};function e(){this.listeners={}}e.prototype.on=function(e,t){this.listeners=this.listeners\|\|{},e in this.listeners?this.listeners[e].push(t):this.listene
2024-12-18 16:27:13 UTC	1369	IN	Data Raw: 3b 22 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 22 2f 22 3a 22 26 23 34 37 3b 22 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 65 3a 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 26 3c 3e 22 27 5c 2f 5c 5c 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 2c 69 2e 61 70 70 65 6e 64 4d 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 31 2e 37 22 3d 3d 3d 6f 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 28 30 2c 33 29 29 7b 76 61 72 20 6e 3d 6f 28 29 3b 6f 2e 6d 61 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 6e 2e 61 64 64 28 65 29 7d 29 2c 74 3d 6e 7d 65 2e 61 70 70 65 Data Ascii: ;",">":">",'"':""","'":"'","/":"/"};return"string"!=typeof e?e:String(e).replace(/[&<>"'\/\\]/g,function(e){return t[e]})},i.appendMany=function(e,t){if("1.7"===o.fn.jquery.substr(0,3)){var n=o();o.map(t,function(e){n=n.add(e)}),t=n}e.appe
2024-12-18 16:27:14 UTC	1369	IN	Data Raw: 65 74 28 22 65 73 63 61 70 65 4d 61 72 6b 75 70 22 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 6e 3d 68 28 27 3c 6c 69 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 22 3e 3c 2f 6c 69 3e 27 29 2c 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 65 2e 6d 65 73 73 61 67 65 29 3b 6e 2e 61 70 70 65 6e 64 28 74 28 72 28 65 2e 61 72 67 73 29 29 29 2c 6e 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 22 Data Ascii: et("escapeMarkup");this.clear(),this.hideLoading();var n=h('<li role="alert" aria-live="assertive" class="select2-results__option"></li>'),r=this.options.get("translations").get(e.message);n.append(t(r(e.args))),n[0].className+=" select2-results__message"
2024-12-18 16:27:14 UTC	1369	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 2e 73 65 6c 65 63 74 65 64 7c 7c 6e 75 6c 6c 3d 3d 74 2e 65 6c 65 6d 65 6e 74 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 6e 2c 72 29 3f 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 74 72 75 65 22 29 3a 65 2e 61 74 74 72 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3b 76 61 72 20 74 3d 7b 64 69 73 61 62 6c 65 64 3a 21 30 2c 6c 6f 61 64 69 6e 67 3a 21 30 2c 74 65 78 74 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 65 74 28 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 29 2e 67 65 74 28 22 73 65 61 72 63 Data Ascii: .element.selected\|\|null==t.element&&-1<h.inArray(n,r)?e.attr("aria-selected","true"):e.attr("aria-selected","false")})})},r.prototype.showLoading=function(e){this.hideLoading();var t={disabled:!0,loading:!0,text:this.options.get("translations").get("searc
2024-12-18 16:27:14 UTC	1369	IN	Data Raw: 64 28 6c 29 2c 73 2e 61 70 70 65 6e 64 28 61 29 2c 73 2e 61 70 70 65 6e 64 28 70 29 7d 65 6c 73 65 20 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 53 74 6f 72 65 44 61 74 61 28 74 2c 22 64 61 74 61 22 2c 65 29 2c 74 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6c 3d 74 68 69 73 2c 6e 3d 74 2e 69 64 2b 22 2d 72 65 73 75 6c 74 73 22 3b 74 68 69 73 2e 24 72 65 73 75 6c 74 73 2e 61 74 74 72 28 22 69 64 22 2c 6e 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 63 6c 65 61 72 28 29 2c 6c 2e 61 70 70 65 6e 64 28 65 2e 64 61 74 61 29 2c 74 2e 69 73 4f 70 65 6e 28 29 26 26 28 6c 2e 73 65 74 43 6c 61 73 73 Data Ascii: d(l),s.append(a),s.append(p)}else this.template(e,t);return f.StoreData(t,"data",e),t},r.prototype.bind=function(t,e){var l=this,n=t.id+"-results";this.$results.attr("id",n),t.on("results:all",function(e){l.clear(),l.append(e.data),t.isOpen()&&(l.setClass
2024-12-18 16:27:14 UTC	1369	IN	Data Raw: 28 65 29 3b 69 66 28 21 28 6e 3c 3d 30 29 29 7b 76 61 72 20 72 3d 6e 2d 31 3b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 72 3d 30 29 3b 76 61 72 20 69 3d 74 2e 65 71 28 72 29 3b 69 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 3b 76 61 72 20 6f 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 69 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 61 3d 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 73 2d 6f 29 3b 30 3d 3d 3d 72 3f 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3a 73 2d 6f 3c 30 26 26 6c 2e 24 72 65 73 75 6c 74 73 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 29 7d 7d 29 2c 74 2e 6f 6e 28 22 72 65 73 75 6c 74 73 3a 6e 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e);if(!(n<=0)){var r=n-1;0===e.length&&(r=0);var i=t.eq(r);i.trigger("mouseenter");var o=l.$results.offset().top,s=i.offset().top,a=l.$results.scrollTop()+(s-o);0===r?l.$results.scrollTop(0):s-o<0&&l.$results.scrollTop(a)}}),t.on("results:next",function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:14 UTC	632	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=FQjjn5l7J+TsPQX+5HQprOqilO3K89RllGTld+uyEJtx5sxCWZQNi7ybnlm0wPrReSVWwLJrtvuJc4U/bIhs9QSjYiUeq/hwyi5Y4v+5HY7k1pjGzcdZ4AAiUIPF
2024-12-18 16:27:15 UTC	742	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:15 GMT Content-Type: image/gif Content-Length: 49 Connection: close Set-Cookie: AWSALB=SwWHe7XS+oTSK2ml6WuFhaLRIrZuEVyBlzXesqBrQIP58fQpUwShUz+63WFL4WDuufFIdvo8RirvvSLc82x0xIMZRXtMBwbdRxpUY41kRB1ISmdjZ7WSkRg7cJvv; Expires=Wed, 25 Dec 2024 16:27:15 GMT; Path=/ Set-Cookie: AWSALBCORS=SwWHe7XS+oTSK2ml6WuFhaLRIrZuEVyBlzXesqBrQIP58fQpUwShUz+63WFL4WDuufFIdvo8RirvvSLc82x0xIMZRXtMBwbdRxpUY41kRB1ISmdjZ7WSkRg7cJvv; Expires=Wed, 25 Dec 2024 16:27:15 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-18 16:27:15 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49725	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:14 UTC	598	OUT	GET /websafe/logo/qWuRZDIlFFn0Z.ejbun830-rfiY7KGOHGT2q9s4Y9v3gB5g005b.rfoQ7ujVDdQgnEtQdA!!/branding/customer-logo.gif?f=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp
2024-12-18 16:27:15 UTC	971	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:15 GMT Content-Type: image/gif Content-Length: 10598 Connection: close Set-Cookie: AWSALB=QVhQIkTyzOC+t2Ae183MWKOJOQmBgfFvcbm/OTryjhuqPljaIt9mN5Ej6bA+ufsEw6HYAf5W2fuCYbcR3F33RCRxB+zCj9ZRG3lpXY28BuivdcGyn4jD1/tBqMXC; Expires=Wed, 25 Dec 2024 16:27:15 GMT; Path=/ Set-Cookie: AWSALBCORS=QVhQIkTyzOC+t2Ae183MWKOJOQmBgfFvcbm/OTryjhuqPljaIt9mN5Ej6bA+ufsEw6HYAf5W2fuCYbcR3F33RCRxB+zCj9ZRG3lpXY28BuivdcGyn4jD1/tBqMXC; Expires=Wed, 25 Dec 2024 16:27:15 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; Path=/websafe; Secure; HttpOnly Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT ETag: "19373981518-2966" Server: unknown
2024-12-18 16:27:15 UTC	10598	IN	Data Raw: 47 49 46 38 39 61 00 05 28 03 f1 00 00 00 00 00 f6 f6 f6 f7 f7 f7 f8 f8 f8 21 f9 04 01 00 00 00 00 21 ff 0b 49 6d 61 67 65 4d 61 67 69 63 6b 0e 67 61 6d 6d 61 3d 30 2e 34 35 34 35 34 35 00 2c 00 00 00 00 00 05 28 03 00 02 ff 84 8f a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a6 ea ca b6 ee 0b c7 f2 4c d7 f6 8d e7 fa ce f7 fe 0f 0c 0a 87 c4 a2 f1 88 4c 2a 97 cc a6 f3 09 8d 4a a7 d4 aa f5 8a cd 6a b7 dc ae f7 0b 0e 8b c7 e4 b2 f9 8c 4e ab d7 ec b6 fb 0d 8f cb e7 f4 ba fd 8e cf eb f7 fc be ff 0f 18 28 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 08 19 29 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 09 1a 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa 0a 1b 2b 3b 4b 5b 6b 7b 8b 9b ab bb cb db eb fb 0b 1c 2c 3c 4c 5c 6c 7c 8c 9c ac bc cc dc ec fc 0c 1d 2d 3d 4d Data Ascii: GIF89a(!!ImageMagickgamma=0.454545,(HLLJjN(8HXhx)9IYiy:JZjz+;K[k{,<L\l\|-=M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:15 UTC	716	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp
2024-12-18 16:27:30 UTC	805	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 18 Dec 2024 16:27:30 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=5la8OC7Myb7ikEVCyKujskatHmOTj3yT6Vt5IzP/SH4TGk1EZaSdcZ4RHsfgZ4sMLgZMm/9vuR7emr4kfF6+N5BFlW4GnXqyiwn0h59KQvXar5anaJQV3PhSX6X0; Expires=Wed, 25 Dec 2024 16:27:15 GMT; Path=/ Set-Cookie: AWSALBCORS=5la8OC7Myb7ikEVCyKujskatHmOTj3yT6Vt5IzP/SH4TGk1EZaSdcZ4RHsfgZ4sMLgZMm/9vuR7emr4kfF6+N5BFlW4GnXqyiwn0h59KQvXar5anaJQV3PhSX6X0; Expires=Wed, 25 Dec 2024 16:27:15 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49728	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:15 UTC	712	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp
2024-12-18 16:27:30 UTC	801	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 18 Dec 2024 16:27:30 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=wr62FUSyhSABLBgmpxqyeDo4nNbhfR58VSTImvJQV0DKgBwdIzZTWBrt5i9+4u+era580x4iqEyLAUL459njcy4spNzPohXcMuRpy/mqBw+eU3DyLVKJTV40zjTU; Expires=Wed, 25 Dec 2024 16:27:15 GMT; Path=/ Set-Cookie: AWSALBCORS=wr62FUSyhSABLBgmpxqyeDo4nNbhfR58VSTImvJQV0DKgBwdIzZTWBrt5i9+4u+era580x4iqEyLAUL459njcy4spNzPohXcMuRpy/mqBw+eU3DyLVKJTV40zjTU; Expires=Wed, 25 Dec 2024 16:27:15 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://res.cisco.com/envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en&try=1 Server: unknown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49727	18.66.161.47	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:15 UTC	560	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:16 UTC	716	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Wed, 18 Dec 2024 16:27:17 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f6cdebe4ad9c464f69da269c3379dd86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: ReAM-4tImvhO-SxFVbyWvmB3ERlgNtP8hZvkhnXbbb7HSUp-GTZvqw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-18 16:27:16 UTC	15668	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-18 16:27:16 UTC	1286	IN	Data Raw: 4a 84 02 66 66 ac c8 00 00 00 00 43 20 06 21 94 02 63 13 01 00 01 03 00 02 87 a0 af 55 65 b9 6a 52 52 27 48 d0 0c e9 79 2a d6 9d 35 07 45 65 2b 52 15 bb ea 41 b5 6c ec 54 49 95 25 e8 68 9c ea 50 e1 04 8c 20 04 63 1b af 9e 86 e6 75 f9 9b f8 01 70 38 00 00 00 00 02 5b e8 89 b5 fa 21 57 00 5a ac 0d f8 8b 2c 70 06 13 b5 e0 d1 5f 71 6e a9 99 d7 d2 e1 90 5e 42 3b 94 05 0a 10 c0 00 00 00 00 00 00 00 52 12 01 6d 08 e3 be e5 0f 52 c8 db b5 cc f9 80 95 d2 70 cd 26 4c f9 12 4a 47 6b 42 03 0e 46 d5 87 c7 ea 70 25 5d ee 0e 85 c7 54 44 52 49 00 c0 aa 40 30 00 00 14 80 c0 52 45 bd 5e 94 04 4b 9d c6 d2 88 d9 88 1d 12 80 2a 43 23 00 26 18 6d 28 97 68 f3 01 e1 13 2e da 68 1b 67 2c b0 25 55 22 80 52 03 26 da 04 83 4d 80 55 ca 45 19 d2 b8 2e 00 24 24 30 85 f0 00 76 39 dc b7 Data Ascii: JffC !cUejRR'Hy5Ee+RAlTI%hP cup8[!WZ,p_qn^B;RmRp&LJGkBFp%]TDRI@0RE^KC#&m(h.hg,%U"R&MUE.$$0v9
2024-12-18 16:27:16 UTC	16384	IN	Data Raw: 18 f1 b8 6c d6 7c 00 60 2c 86 40 66 74 f9 99 4d 36 67 5a fa 98 1a 8c 9d a1 b4 0a 14 8b 68 6d 40 2a b4 cb 22 b5 43 da 05 01 3b 41 28 02 89 a8 65 13 54 d2 03 41 42 14 b0 dc 03 da 82 05 b8 72 06 32 d9 a4 f7 21 26 de 0b dd 1a 80 42 63 86 09 a6 38 ec 02 96 0a c8 32 13 dc 0a 26 d5 91 42 e8 38 7d 00 95 66 b1 6f bc d0 87 2f 0c cd 37 4f 20 37 26 dd 81 59 3c 82 02 8c ef 49 ca d4 d0 00 ca b9 52 8a 96 4a f4 da 3a 33 50 27 70 d3 90 81 3a a0 28 08 da c2 5a 02 c0 9d c3 90 13 aa 67 3f 25 36 e5 1d 46 7c 8a 51 06 5c 6f 39 36 6d 3c 1c aa 53 86 75 52 1a 08 36 c6 81 94 54 0b 25 52 dd dc a4 d3 14 f7 14 20 2c 08 db d8 25 a0 2c 09 56 43 99 01 80 00 00 86 20 14 48 6c 4b 42 80 09 c8 6e 8d 4a 00 30 b3 cc a3 4a df 71 50 99 0f 8d 6a b0 06 80 65 b9 ac 32 f7 01 40 29 43 03 2e 55 84 5a Data Ascii: l\|`,@ftM6gZhm@*"C;A(eTABr2!&Bc82&B8}fo/7O 7&Y<IRJ:3P'p:(Zg?%6F\|Q\o96m<SuR6T%R ,%,VC HlKBnJ0JqPje2@)C.UZ
2024-12-18 16:27:16 UTC	16384	IN	Data Raw: 80 d6 9c ea f4 75 e7 78 98 56 ea bc fb 87 2d 3e 9d a7 5a ed c5 96 9a 1c 8f e4 7f ea 67 55 39 ad c7 67 57 9a 46 6a 06 6b 35 5e 66 cb 97 6b b2 b6 6b d8 56 e1 57 aa b7 0c da b3 95 d5 64 c1 b7 ea 0a e8 fa 6b 16 a6 6b f8 99 a8 85 1d c5 5b da b6 51 d8 da bc 75 e5 53 4f 4b 99 80 35 e0 ad ab 6d d1 87 f7 1d f5 b2 b6 3a 9c bc 7c ed 55 f1 bd 50 aa da 7e 20 77 4b ae ba 1c 1e eb d9 a7 eb e3 cf 7a ff 00 0f e0 75 d3 99 3c 5b 05 a6 d0 1f 3d 08 36 a3 d7 f7 3e d2 bc de ba 62 ff 00 9f 99 e3 d9 5a 8f 6b 50 d7 70 2b 6a 08 46 73 66 3a d2 dd c2 36 5c 70 a4 a5 6c 60 c2 ea c2 a7 0c f5 20 e8 4e 74 1d 56 e7 0b 52 38 b8 ab 39 93 a7 fb 6e 27 a5 80 5f 4d ac c0 2a f8 17 cb ed ef 45 35 bb 68 e4 ff 00 71 7e e0 3a 60 67 2c f2 77 91 2d f2 15 da a0 a4 73 27 68 25 72 59 30 3b 30 61 69 d0 3e Data Ascii: uxV->ZgU9gWFjk5^fkkVWdkk[QuSOK5m:\|UP~ wKzu<[=6>bZkPp+jFsf:6\pl` NtVR89n'_M*E5hq~:`g,w-s'h%rY0;0ai>
2024-12-18 16:27:17 UTC	2048	IN	Data Raw: df f2 55 5b 6d 93 f3 14 1e c2 d4 7c 8d 57 58 3d 47 a9 e6 fb 1e 4a db 91 d5 2c a5 a9 e8 f5 24 1c 9c bf f3 53 cd 9d a7 17 27 fc d4 f8 9d a5 80 00 19 40 00 00 03 42 29 01 16 12 1d b5 12 03 0f 73 cb f4 d2 6d 4c 97 31 54 67 ee b4 45 bf 94 88 48 aa ea 42 2e ba 81 63 08 02 87 d0 c6 72 6f d0 c7 a8 29 a7 0c 1b 44 db 52 42 3a 16 80 03 0d 04 73 d9 a9 3a 11 ca 94 5c 09 b7 3d 28 e2 c5 70 5f 8e d7 f4 6a 2e 78 dd 95 21 c0 d2 be 14 11 1d ac 82 d9 05 52 00 00 00 00 00 00 00 03 2f 71 ff 00 1d bc 8d 4c 7d c7 fc 76 f2 01 70 fc a8 ab e9 9d 09 e1 f9 50 f9 63 6b 92 0e 24 b8 6d ab ac 17 c7 c5 c3 5b 2d ad 37 d3 27 2f 1d 38 16 6c eb 8d 0e 8e 3a 70 26 b6 ed 99 47 16 de b8 ac 31 5b 43 bb 08 67 97 c7 c1 c7 be 77 2c 1e 9b 3c ce 5a 71 43 75 db bb 26 3d 77 1a 8f 4b eb 53 fa 90 7d 5a 77 Data Ascii: U[m\|WX=GJ,$S'@B)smL1TgEHB.cro)DRB:s:\=(p_j.x!R/qL}vpPck$m[-7'/8l:p&G1[Cgw,<ZqCu&=wKS}Zw
2024-12-18 16:27:17 UTC	1730	IN	Data Raw: 2d bd f1 e6 7b 54 d1 1b f2 95 64 d8 a2 6c 6d 19 9c 3e e5 c5 d1 dc 79 fe e1 4d f2 4a 3c ee 4a 6f 6c ef e3 f4 d7 3d 8c b6 56 74 36 49 24 4b ca cc 89 e3 87 c8 9f 88 bd d5 7f dc dd 3a 60 6a a9 39 5a a0 e4 ce 59 99 31 ab ea d6 77 52 b5 3b 78 2d 35 9e a6 11 35 d0 d3 8a ca 9e 97 a1 58 69 78 5e ae bd 8e 46 fa a5 07 5f 24 ac 2c a3 2b 55 b5 83 43 bb 81 cd 17 91 b1 8f 07 c8 bc 8d 4a 18 08 00 4c cc d1 b3 30 13 3c fb d1 6a fa 33 d0 38 1b 72 c8 25 56 8f d5 92 93 a2 c6 7e e2 95 e1 22 6f 76 f4 26 85 77 c5 6b 65 39 f2 17 1f d2 6e 6b 57 f7 15 56 d6 a4 27 78 f1 02 f9 1f 1c 7a aa da 9e dd 47 ed 9f 1b bf a2 ae af c4 c6 79 0e ce 39 6d 01 3c ea ad fa 94 c0 56 f5 8d 18 51 c3 6d 92 dc b2 7c aa f7 56 7e 51 aa d1 fe d3 06 dc 95 bc d2 34 56 af f4 7e 41 6b a5 a5 3f 23 15 77 dc 8b 5a Data Ascii: -{Tdlm>yMJ<Jol=Vt6I$K:`j9ZY1wR;x-55Xix^F_$,+UCJL0<j38r%V~"ov&wke9nkWV'xzGy9m<VQm\|V~Q4V~Ak?#wZ
2024-12-18 16:27:17 UTC	12792	IN	Data Raw: e4 68 63 ed fe 45 e4 6c 68 08 00 00 96 41 76 33 00 3c e6 e1 bf 33 d0 3c db d9 bb 47 89 06 cf 97 6f 44 2f ad 99 82 ff 00 b5 b5 92 72 8a 7e da cf aa 02 1f 33 4a 49 b7 3b 59 ec 6a fd ab 6b 50 bf b5 76 51 28 83 1a f3 ee 46 bc 36 6d a9 15 7d 9b af 53 6a 70 3a c6 74 03 9a 61 bf 31 37 93 a5 7b 78 72 d9 4f 82 5c 8c 1c 8d 4b 39 f6 cb 83 d1 fe df 3a 91 fd 9a 99 90 38 f6 6d cb 7d 48 ab 87 93 d1 fe de b5 59 67 9a aa a7 c4 0e a4 f2 55 96 a6 75 ae 51 b3 88 72 51 ca e8 03 76 51 04 e0 83 6e 15 0c e8 e7 f9 91 9d 15 54 35 a9 a7 3f cc 80 e4 ba 6e cf 27 3f 22 6d c1 d5 75 ea 67 35 e9 ea d4 0d 78 ea d2 c9 d7 5b 56 bd 0c 5a db 55 92 6e 9d 92 80 3b 37 ae c1 bb c0 e7 aa 70 54 33 1a d6 46 92 9d 91 dc 79 8d 35 6a b7 dc f4 cd c6 4c 04 33 41 32 4a 13 01 09 6a 02 5a 90 68 31 01 43 10 Data Ascii: hcElhAv3<3<GoD/r~3JI;YjkPvQ(F6m}Sjp:ta17{xrO\K9:8m}HYgUuQrQvQnT5?n'?"mug5x[VZUn;7pT3Fy5jL3A2JjZh1C
2024-12-18 16:27:17 UTC	2886	IN	Data Raw: 8e 2b 70 dd f6 7f 14 4b e6 6f 5a d1 ff 00 e2 84 ad 57 ad 29 f9 07 4c b1 db ec 7d bd 95 dd ac a2 14 7d e6 8e 8f 63 71 9e 4b b7 f0 e8 3e 05 5a 70 bb 2a c3 bf 44 df 5c 22 3d cd eb 45 b1 27 8f 42 c8 66 73 5c df 4a dc 96 98 71 e6 74 ae 08 d7 6f de 8c f8 d5 63 e5 af e2 6b bd 2f db 5f fd 25 5b a3 e8 be c9 fc 51 9b e0 b7 f4 8d de bd 6b 5f b8 8f a9 4e 95 8f 2b 34 09 29 7a ea e2 6d 54 6a b9 79 34 56 dc df 74 3f aa 92 f9 af 5f 38 b2 3a 38 16 ef f7 1b 56 ed e9 da 4b 71 2d fe 1b f1 d6 31 0b c4 cb 96 f5 b3 da d3 69 76 36 bb da a1 2c bf 13 9b e9 a6 e2 2c bf 14 49 3e 59 99 f2 55 af 1f cf 9c 38 49 f5 7d 02 dc 6d 27 5a d9 3b 37 ba ed f7 fe 0b a1 a4 57 54 e1 52 55 67 fa ba b3 3a f0 ab 3e 8d 7e e3 47 f2 38 7d bd a9 36 79 bd b0 bc 17 f5 79 8f 9d db 86 a9 71 a6 ec f1 5f 8f 56 Data Ascii: +pKoZW)L}}cqK>Zp*D\"=E'Bfs\Jqtock/_%[Qk_N+4)zmTjy4Vt?_8:8VKq-1iv6,,I>YU8I}m'Z;7WTRUg:>~G8}6yyq_V
2024-12-18 16:27:17 UTC	16384	IN	Data Raw: de c3 d3 5e 5e 5e d4 da bc ec 72 73 59 5b 45 07 a5 ed 78 a7 db 43 ff 00 f5 2f 3f 0a ff 00 32 c2 b2 d3 8d 10 ab b9 49 db fd b2 75 da 15 f6 aa ba 32 23 8f e9 f5 60 b8 fa 9d bf db 46 96 2a 9e da 75 65 47 06 c6 b2 74 7b 5a b5 74 fc cd 5f b7 d9 97 62 78 16 de 4c 39 40 7a 88 aa 90 8b 45 45 0c 43 41 50 f5 2d 19 b7 92 d3 03 c9 e4 56 df 67 2e 27 b9 2b 76 bb ad 1e 67 47 d1 b5 af 67 84 a4 bf ed 6d dd 04 61 57 69 d6 d1 e6 52 77 dd ab 8f 33 75 ed ae ba a0 fe da f3 32 80 cf 75 e6 77 31 be 4e 4e 96 70 6b f4 2f e0 37 c3 66 b0 97 de 15 cc f9 39 1e 77 38 1e fb ad 2c e0 e8 7c 16 78 49 2f 88 97 b7 b3 5a a8 03 25 cb c8 bf 76 07 f5 b9 35 9c 1a fd 0b ad 12 8f 30 7c 36 d1 55 47 98 19 7d 6e 4e f8 2b eb 72 74 7f 81 57 e2 b4 7a 6b 1f 11 be 2b 46 2b 9f 30 33 7c bc 8f 47 81 fd 5e 5e Data Ascii: ^^^rsY[ExC/?2Iu2#`F*ueGt{Zt_bxL9@zEECAP-Vg.'+vgGgmaWiRw3u2uw1NNpk/7f9w8,\|xI/Z%v50\|6UG}nN+rtWzk+F+03\|G^^
2024-12-18 16:27:17 UTC	16384	IN	Data Raw: a3 b2 5a c1 07 05 3d bb bf 91 d7 4e 05 40 fa ab a0 df 25 5e a1 57 6b d5 6a cc 9f 22 78 41 fe df 40 8a f4 02 69 75 47 9c 8a f7 56 78 14 26 46 d8 b0 15 22 d4 30 19 61 0b 6b 6c 15 21 be e1 45 eb 93 a7 8e d2 dc 81 ca db 3b f8 be 54 61 6e 4a 1d 3c 71 b5 46 81 4c 56 f9 58 d8 ac f0 ca 39 f8 7e 63 a8 e5 e1 d4 ea 24 09 90 cb 64 30 34 5a 00 2d 00 a2 5a 1a 10 d3 03 8f 97 e6 3a e9 a2 39 39 63 71 d7 4d 11 91 9d cc 8d ae 63 25 0e 60 ad dd c8 02 0d 13 4c 1f 1d 5b 98 39 af 84 1c 76 6b 46 51 7c 9c 2e 3d 3a 99 ba b5 e0 cd ab cd 3a a0 98 b4 bd 08 39 f9 5f a4 c6 87 75 ef 5f 3f 23 17 b5 e9 81 8b ad 68 71 72 f3 5f 82 f3 5d 19 d5 57 03 6a b6 d5 48 c4 d6 14 f7 17 e5 72 92 93 a3 8f 93 9e d8 69 57 cf f9 1a d5 ad 06 ec 96 a5 0e ae f1 ea 84 fc 0a 93 27 c8 bc c8 77 7d 80 de 49 b5 95 Data Ascii: Z=N@%^Wkj"xA@iuGVx&F"0akl!E;TanJ<qFLVX9~c$d04Z-Z:99cqMc%`L[9vkFQ\|.=::9_u_?#hqr_]WjHriW'w}I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49734	205.139.111.12	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:15 UTC	549	OUT	GET /s/Dyr8CG6V4OFJ4KOR4CQsWIBmuNI?domain=cdnjs.cloudflare.com HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:15 UTC	2392	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 18 Dec 2024 16:27:15 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/NtUEtFSl14m3qyrLcWSDngM16eZS62f6pgINJvEmOtqpxNEEXH8QTcn17cYkkqUn-tzuYZc1iDUyy049vW7yw5GFJrua3m3NEX6kheFB8weYKRe0-LrIy35BJtzuNFH3Uvg4Dgp8IM2Wc5YYpKpZlEhxCo8DSqQVpZXBndS6hQUgS7YUrzUMpgHbZWoF1L-BqyqMaIuuo1RWf98BVggD4elifv85TINW-H7IrhU5ums4HJ_PGxJUsO_5SDTfv_SLuZ3YASY7tmD6dxTravNfN-g291deGjMO2kVVJGw7Zi2S0PauW5VN6jONNIfoDhpZ9uB1WqXhnFcs1SaOP9eE5LoE8kmG318e1sVxjfJKcOKmsnjuMnCNHsIhzBDwc9QfVS_rh1vkdDEdTx51FzORyIfG2uqNUY-PDNL1u-6z1sRvxu4xd7MsrTZVt4cPzzCjS4Jv225juSPnoVyd0x-tEkk_6b8QOPv_1WCgwjqFCa-GH-83bMXQTGqtSWHkCo2VaRYzbTNiVn4t2o0KWYhSO6dlEP-6zm1b063SYzzBfH6gBP4s_h7rmzaOCLkMW2u2_mH59LWUp_fSz_OKY5FuZOGYFRR32cfrrkyjM7iR7kpDNi3KM8XlMUIK3lrn-52cVjqL1B9iRU22tisGZseMawUZh9k2QTJt2WWqc8hhlWHe14Q_G1SvpD3XSVm-u_HjUqIleO5sxvUKLUBlRdXN-MoNhcAR5SRNx91QIOFsd81MG_loaxvUJ1uLfxjDArn5hN4KAs9sJtjvati1RwSo4lDprFp4zrvgQIWKaBo5KvEbqdS2TRWPLhWEjAzidQhSWBHzb1XeBa3DyE_9RafpNzGBqf6XzOCdt_8tcOa_bOjcEn-CQea0UzpErqFeK3xkOnsuUm3RgiSSTFWykziX6rJXZxVhLIpXzkGxM3-HBlOORm8SlbtpOaUKNH4SmmNUjOvv8QsBoB1Qb_X [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49737	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:16 UTC	708	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=nTmL3G8jTtncDvlN5lwrTwSRhOh3s9eZwfHXt2RSgdP48tDHWpepEtIo6UkcVCw88cpddc7qp+rQ54UY8hBvSeMw36n5HiCOkGkNQ84zjf3f1Fmig0M6rzMymXFp
2024-12-18 16:27:16 UTC	971	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:16 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=6OGT8f5NdyvLsILjnv1PE8NFcVmM05JzLSVfwAy9trP22EbDJ0pSs2+1kX56RR0WRMg7+PHF5RfgfapKcsqITiXtdTio4h2GRvccyZwZzS5SFz0V+6IxdYiwN87/; Expires=Wed, 25 Dec 2024 16:27:16 GMT; Path=/ Set-Cookie: AWSALBCORS=6OGT8f5NdyvLsILjnv1PE8NFcVmM05JzLSVfwAy9trP22EbDJ0pSs2+1kX56RR0WRMg7+PHF5RfgfapKcsqITiXtdTio4h2GRvccyZwZzS5SFz0V+6IxdYiwN87/; Expires=Wed, 25 Dec 2024 16:27:16 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Set-Cookie: JSESSIONID=978EDBCBC5E76840F3C886BE2D8409E1; Path=/websafe; Secure; HttpOnly Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT ETag: "19373981518-c9be" Server: unknown
2024-12-18 16:27:16 UTC	8459	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-18 16:27:16 UTC	16384	IN	Data Raw: 01 0e 16 47 a6 50 d8 27 b0 02 c8 c5 a0 ac c0 16 72 1c ba 10 b2 5e 40 34 0d 47 03 01 43 04 86 4a 7b 01 40 20 01 8a 46 00 20 18 01 31 92 89 97 3e 43 01 88 02 00 94 c7 28 4a a3 e0 80 25 11 39 2f 82 25 55 4c 01 52 82 50 70 42 e0 80 a6 10 27 91 e4 00 03 21 20 4b f2 2b 22 4f 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 Data Ascii: GP'r^@4GCJ{@ F 1>C(J%9/%ULRPpB'! K+"O#` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl
2024-12-18 16:27:16 UTC	1616	IN	Data Raw: 90 61 58 fc 88 eb 30 e4 b9 a4 9b f3 37 28 68 cf d0 d1 12 dd 7a b0 22 76 2e a8 c5 77 93 b4 25 8e a6 c9 cc 90 51 87 79 4f d4 bf b4 dc 9f a7 39 28 cb b9 5e 55 f3 17 6e ad 34 b6 2a aa 26 0a ed d9 b6 11 a5 84 3b 08 29 14 9c 12 34 41 4f 0b 04 e5 e8 90 4e c1 5c a0 1f d5 d0 26 dd 09 e3 d5 b1 42 ea 03 72 f6 13 af 92 08 5d 45 1e 60 69 59 d0 a6 8c 92 5d 58 71 5a cb 28 ab 55 35 0f 70 a5 6d 55 1a a2 78 4e 8d 8b f1 cf dc d9 05 5b b5 57 d0 55 a4 35 d1 15 15 dc 2b 58 d1 81 a0 98 d0 32 88 67 9f de fb 99 e8 34 73 3e cd 6c e6 48 30 b7 fb 17 b1 b7 fa 8b 0d cf 90 bf eb d7 a9 5d 9e d7 16 d3 ca 7a 01 b7 35 2a ae 18 ad 4a 3d e1 9c 77 4f 9c 3d 8e 8e 2a d6 86 01 dc 5c 17 d5 94 f7 37 a3 c2 33 b7 69 5f 7c 9b 29 9d 70 51 40 00 00 4b 28 96 04 5b 46 73 6c 74 db 46 73 d6 bc b0 88 3a 69 Data Ascii: aX07(hz"v.w%QyO9(^Un4&;)4AON\&Br]E`iY]XqZ(U5pmUxN[WU5+X2g4s>lH0]z5J=wO=*\73i_\|)pQ@K([FsltFs:i
2024-12-18 16:27:16 UTC	9000	IN	Data Raw: f2 01 48 60 c6 d6 bd 37 27 f3 37 ac 01 b3 d4 9e 52 cc ab 6e 5a 9b 2a ad d0 0e ae 59 d3 db d4 e7 4a a8 df b5 69 61 17 74 71 d2 ce 62 4e db 9c 54 fb 98 56 bc 98 f9 04 02 41 0f 90 73 14 09 a0 38 21 b0 86 77 f6 ad 54 da ae 3c ca 7d d4 ba b2 ab 83 8b 6a 4e da e9 1e 41 f4 5d c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 Data Ascii: H`7'7RnZYJiatqbNTVAs8!wT<}jNA]_\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E
2024-12-18 16:27:16 UTC	16187	IN	Data Raw: c6 2d 04 03 32 ee 5a 32 5d ec aa b2 71 da ce ce 59 54 36 ec 35 66 88 45 20 36 4c de a7 3d 4e 9a e9 82 0d 96 80 4d ae a8 a6 c4 7e 6a ae a5 1a c0 ab ae 4a 90 c0 43 81 40 c1 39 d3 20 15 97 ec 2f 8f 99 09 b4 5a b0 52 6a 37 27 89 69 6e 34 04 f1 6f 71 f1 7d 4a 18 11 0c 72 ca 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b Data Ascii: -2Z2]qYT65fE 6L=NM~jJC@9 /ZRj7'in4oq}Jr\|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49740	205.139.111.12	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:17 UTC	2649	OUT	GET /r/NtUEtFSl14m3qyrLcWSDngM16eZS62f6pgINJvEmOtqpxNEEXH8QTcn17cYkkqUn-tzuYZc1iDUyy049vW7yw5GFJrua3m3NEX6kheFB8weYKRe0-LrIy35BJtzuNFH3Uvg4Dgp8IM2Wc5YYpKpZlEhxCo8DSqQVpZXBndS6hQUgS7YUrzUMpgHbZWoF1L-BqyqMaIuuo1RWf98BVggD4elifv85TINW-H7IrhU5ums4HJ_PGxJUsO_5SDTfv_SLuZ3YASY7tmD6dxTravNfN-g291deGjMO2kVVJGw7Zi2S0PauW5VN6jONNIfoDhpZ9uB1WqXhnFcs1SaOP9eE5LoE8kmG318e1sVxjfJKcOKmsnjuMnCNHsIhzBDwc9QfVS_rh1vkdDEdTx51FzORyIfG2uqNUY-PDNL1u-6z1sRvxu4xd7MsrTZVt4cPzzCjS4Jv225juSPnoVyd0x-tEkk_6b8QOPv_1WCgwjqFCa-GH-83bMXQTGqtSWHkCo2VaRYzbTNiVn4t2o0KWYhSO6dlEP-6zm1b063SYzzBfH6gBP4s_h7rmzaOCLkMW2u2_mH59LWUp_fSz_OKY5FuZOGYFRR32cfrrkyjM7iR7kpDNi3KM8XlMUIK3lrn-52cVjqL1B9iRU22tisGZseMawUZh9k2QTJt2WWqc8hhlWHe14Q_G1SvpD3XSVm-u_HjUqIleO5sxvUKLUBlRdXN-MoNhcAR5SRNx91QIOFsd81MG_loaxvUJ1uLfxjDArn5hN4KAs9sJtjvati1RwSo4lDprFp4zrvgQIWKaBo5KvEbqdS2TRWPLhWEjAzidQhSWBHzb1XeBa3DyE_9RafpNzGBqf6XzOCdt_8tcOa_bOjcEn-CQea0UzpErqFeK3xkOnsuUm3RgiSSTFWykziX6rJXZxVhLIpXzkGxM3-HBlOORm8SlbtpOaUKNH4SmmNUjOvv8QsBoB1Qb_XTp7f-c_XKLmG-HumCcSbNS0qsYftNw9_8XUtYW4uHr [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:20 UTC	683	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 18 Dec 2024 16:27:19 GMT Content-Length: 0 Connection: close Location: https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.QPUhO4roRlgb7fpIU0_GeT7CX6WetwZlBUek-DVUkDpHhu0tVUOmZpMaqvNrFAvocCuBvJY4L31wcAWxMO_SGlq2cdXOIQSlZLGKfMNL-V86hZCxMzEVjiLXn88vFzUsZ_I2H6fqx2qVa7xA52os8YY7WbGj2g2DszdlYx5s16ky8UadYWXdwElykIYaDbWR.HoGJ2DYIaj1q7hallP8cAQ#/checking?key=ncWhqPpsY5TW9oMYuzvbBf-yI5o-mBLx1FLyb2SljUOXQWQlCnmKxO_JWktR0MREHWHnLanIvMMubOu55Y7-0kTpxdMy3qApbuoLpiRzehyFmomL_fZmIooeIB5PSo0e Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49744	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:18 UTC	686	OUT	GET /websafe/images/loginbg.gif HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=QVhQIkTyzOC+t2Ae183MWKOJOQmBgfFvcbm/OTryjhuqPljaIt9mN5Ej6bA+ufsEw6HYAf5W2fuCYbcR3F33RCRxB+zCj9ZRG3lpXY28BuivdcGyn4jD1/tBqMXC; AWSALBCORS=6OGT8f5NdyvLsILjnv1PE8NFcVmM05JzLSVfwAy9trP22EbDJ0pSs2+1kX56RR0WRMg7+PHF5RfgfapKcsqITiXtdTio4h2GRvccyZwZzS5SFz0V+6IxdYiwN87/
2024-12-18 16:27:19 UTC	881	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:18 GMT Content-Type: image/gif Content-Length: 51646 Connection: close Set-Cookie: AWSALB=8c+055AmocWj/fTI7swFU0tJ7XH3a4GHQn6e/79rPBxRxYpCt5oEmlx5CSefSzkHAC8jeRp+KsIYc/FblMxH2NP7m5PtzbQk3f5lfFaLAD3BvCY9Z2zSb0xiuCn6; Expires=Wed, 25 Dec 2024 16:27:18 GMT; Path=/ Set-Cookie: AWSALBCORS=8c+055AmocWj/fTI7swFU0tJ7XH3a4GHQn6e/79rPBxRxYpCt5oEmlx5CSefSzkHAC8jeRp+KsIYc/FblMxH2NP7m5PtzbQk3f5lfFaLAD3BvCY9Z2zSb0xiuCn6; Expires=Wed, 25 Dec 2024 16:27:18 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT ETag: "19373981518-c9be" Server: unknown
2024-12-18 16:27:19 UTC	8549	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-18 16:27:19 UTC	16384	IN	Data Raw: 23 80 09 1c 88 00 60 20 c8 04 48 40 48 48 0b 23 91 80 0b 52 62 3d 0a 8e 82 ca 00 84 d0 93 d8 3c d0 9d b7 02 86 00 02 6c 13 08 28 04 86 28 00 33 78 66 89 c9 36 4d 8a ac 0b 80 81 80 0b 21 23 10 00 68 c2 04 d0 14 04 a6 54 80 08 60 02 80 18 00 a4 60 20 07 e4 45 9c a2 f5 22 ce 00 a9 84 2d 75 23 52 b8 01 72 80 49 40 e0 05 12 09 40 e3 cc 20 02 46 2e 21 00 30 25 a1 a0 08 01 88 00 91 88 0a 43 12 18 00 00 00 99 05 b2 40 43 89 d4 45 20 18 00 00 04 0a ce 06 9c 80 c0 52 39 00 00 92 64 0a 14 8a 49 6c 06 d9 2e c2 08 08 91 c0 c2 40 ba e8 24 3a 39 42 40 1c 82 64 20 cd f9 01 6d 23 37 00 e7 71 a4 f6 c0 13 0f 7d 01 26 f6 92 be 95 ff 00 26 56 58 18 42 73 ea 2e 2e 67 69 1c 67 da 35 86 41 9c 7c 87 3d 73 a1 a4 ce a2 e3 d3 a8 54 2a a7 b8 ff 00 1f 98 71 f9 0f 28 06 ab 1b 87 04 0a Data Ascii: #` H@HH#Rb=<l((3xf6M!#hT`` E"-u#RrI@@ F.!0%C@CE R9dIl.@$:9B@d m#7q}&&VXBs..gig5A\|=sT*q(
2024-12-18 16:27:19 UTC	1616	IN	Data Raw: dd 09 e3 d5 b1 42 ea 03 72 f6 13 af 92 08 5d 45 1e 60 69 59 d0 a6 8c 92 5d 58 71 5a cb 28 ab 55 35 0f 70 a5 6d 55 1a a2 78 4e 8d 8b f1 cf dc d9 05 5b b5 57 d0 55 a4 35 d1 15 15 dc 2b 58 d1 81 a0 98 d0 32 88 67 9f de fb 99 e8 34 73 3e cd 6c e6 48 30 b7 fb 17 b1 b7 fa 8b 0d cf 90 bf eb d7 a9 5d 9e d7 16 d3 ca 7a 01 b7 35 2a ae 18 ad 4a 3d e1 9c 77 4f 9c 3d 8e 8e 2a d6 86 01 dc 5c 17 d5 94 f7 37 a3 c2 33 b7 69 5f 7c 9b 29 9d 70 51 40 00 00 4b 28 96 04 5b 46 73 6c 74 db 46 73 d6 bc b0 88 3a 69 f6 a2 85 55 09 26 32 80 00 30 10 00 60 25 00 1c dd de f3 ed db 1a 41 d1 2b a9 87 76 8a d9 95 a1 15 5d be e7 35 2d 16 f8 ee 67 da 49 57 05 ec 04 fd 0c 4f b7 2b 06 6d 05 f4 1a 3a 52 8a c1 cd f8 9a d9 1d 2b ec 38 df 7e c9 b4 05 70 b6 c9 10 fb 6f a2 2d 7f b2 f7 45 d7 bf 57 Data Ascii: Br]E`iY]XqZ(U5pmUxN[WU5+X2g4s>lH0]z5J=wO=\73i_\|)pQ@K([FsltFs:iU&20`%A+v]5-gIWO+m:R+8~po-EW
2024-12-18 16:27:19 UTC	9000	IN	Data Raw: c3 5f 11 b7 5c c6 80 70 e7 a2 1a e5 5d 0d 9f 65 ce 16 0d 2b d8 ea 80 8a ff 00 b0 eb ae 4e 8a f7 d5 b5 33 fc 75 ae b0 1c e9 5d c8 8e 95 0f 46 37 9d 72 70 be ea 5a 17 4f f6 36 60 6f c1 2c a7 ec 29 fd 2b cc 1c eb b9 93 ab 6e 59 5a 91 2a 9c 9c e7 db 05 70 aa cb 26 d2 be d4 62 eb 67 a8 69 ad bb 89 a8 5a 7a 93 5a f2 71 fa 93 c1 f4 3a 3b 5d be 2a 5e ac 83 58 8c 04 72 f4 17 2a a7 1b 99 df b8 9d 67 39 fd 45 f8 87 7e ea aa 9a ef a1 85 bb 9b 67 de 3b 70 e4 ab 2f e9 c1 0f 83 7f 71 56 60 e7 3d 7e 07 45 31 55 e7 9d 0c 38 55 e1 58 e8 bc 25 ae 8a 01 71 93 b2 b5 8b e5 1d 7c 7b 08 a7 15 96 c6 ed 4e a0 f8 6e eb cf e0 2e 49 ff 00 4f d8 8f a5 e9 64 3f c6 f6 68 2f c6 94 4a cf 68 5d 0d ad d0 54 a7 15 06 4e 5b f5 24 45 2a ef be c1 0e 61 3f 1d 43 94 2f 97 ee 3a e9 9d ca 87 6b 71 Data Ascii: _\p]e+N3u]F7rpZO6`o,)+nYZp&bgiZzZq:;]^Xrg9E~g;p/qV`=~E1U8UX%q\|{Nn.IOd?h/Jh]TN[$Ea?C/:kq
2024-12-18 16:27:19 UTC	9000	IN	Data Raw: 10 0a 7c 85 cb c9 94 00 4f 21 c8 c0 05 23 00 80 09 26 41 c1 36 f2 00 4e 59 72 42 a8 43 5a 01 72 27 64 43 ab 29 24 02 96 c6 aa 8a 80 80 18 0a 03 8a 01 81 3c 50 f8 a0 18 0a 10 68 00 4a d4 a8 22 32 05 68 38 08 12 01 f1 42 e2 54 04 00 a1 86 42 06 04 cb e8 3e 48 60 02 94 31 71 42 e0 80 a1 0b 88 43 40 25 82 c8 72 09 b0 2c 09 9e a1 c8 0a 01 48 48 0c 09 90 90 28 09 e4 c2 58 14 04 cb 1c b0 1b 44 c8 e5 89 c8 14 04 4b 45 4b 02 80 9c 86 40 a0 24 60 04 5c b8 22 c0 43 d0 8f f5 f4 65 b7 82 3f d7 78 64 1b 36 d0 f2 16 1e 59 42 58 28 97 20 80 4f ee 2c 8d cb 00 89 22 20 a0 01 48 a8 36 89 ab 03 40 27 90 72 01 b4 2c a0 91 c8 0b 96 0c d3 8d 4d 19 8d b5 01 b6 4b 2a 05 80 24 ba e5 0a d0 99 55 78 64 15 45 0b 53 43 2e db 35 28 ce da 96 8c ed a9 a2 20 01 00 14 31 31 89 81 16 d0 28 Data Ascii: \|O!#&A6NYrBCZr'dC)$<PhJ"2h8BTB>H`1qBC@%r,HH(XDKEK@$`\"Ce?xd6YBX( O," H6@'r,MK*$UxdESC.5( 11(
2024-12-18 16:27:19 UTC	7097	IN	Data Raw: 82 ae 9e b9 f6 79 fb 40 6d 36 bf f2 d0 99 85 e5 af b5 e8 5c ae 5e 73 eb fd 0c f0 9b 5a 81 7a d9 ac ac 02 ce 35 c7 c9 8a b6 ca 5b 60 34 4d 2d 26 00 6b 32 ba 0a bf 2f 1e 3a 95 57 16 7d 5a d0 53 0a 3d 3d c0 2d 26 3d 70 26 d2 52 b0 5f 15 98 d1 8a b9 c3 c7 1f 87 8f 90 09 29 c3 59 42 56 4d cf f7 6f 1b f8 41 31 9d 85 30 bd 1f cc 02 21 cb 58 d3 f6 2f 1e c6 4b 5a cb c6 80 d4 ed e4 bd 40 76 87 ae 1c 47 90 28 df 5d 19 52 b3 ac 2d 88 7d 34 9f 18 03 44 bf ba 3d f8 33 aa 8f 28 cf bc ba e5 28 59 8f 98 9a 88 ce 50 0e 78 b9 d2 31 1e a4 be ab fb 77 f9 84 4c c7 c7 7f 1b 0e af e9 6d e8 06 7a e3 4f 1f 39 34 ac 35 89 9d ff 00 5c 91 30 bd 17 c3 d4 2a f3 d2 40 d1 6b 0f c6 fe c1 66 21 e7 4f 0b d1 0e ca 7d 11 2d ce 62 63 12 03 b5 63 1e 10 f8 b6 fa 78 cf b4 4b 2a 26 5f 8f e9 ea 09 Data Ascii: y@m6\^sZz5[`4M-&k2/:W}ZS==-&=p&R_)YBVMoA10!X/KZ@vG(]R-}4D=3((YPx1wLmzO945\0@kf!O}-bccxK&_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49742	205.139.111.12	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:18 UTC	1126	OUT	GET /s/rUAJCPNV4oT4X8NRXiQSjIxSrDi?domain=res.cisco.com?su=criselda.poparda%40dish.com&df=&tf=&lp=en&v=2&m=%7c1__f7c9ffd700000193d6bfa156956fcd82f58cb999%40mail10674.corpmailsvcs.com&s=1&f=0&d=1734539233104&action=open&j=1&jc=l_&jca=%22RPCRef%22%3apayload.rpc%2c%0a%22callback%22%3aqr&src=1&na=Netscape&nj=0&njs=1&nl=en-US&np=Win32&nu=Mozilla%2f5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36&nv=5.0%20%28Windows%20NT%2010.0%3b%20Win64%3b%20x64%29%20AppleWebKit%2f537.36%20%28KHTML%2c%20like%20Gecko%29%20Chrome%2f117.0.0.0%20Safari%2f537.36 HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:19 UTC	2349	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 18 Dec 2024 16:27:18 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/YpOM7pCWvoiPsSICDZG1j71htAimSZkgBwJzwANTosdjyefv0w5zQtnpCMRVqwZvjRJ4dYAyqvAjBwzWlIsQapEYuqCQEoqKk8oAT0UUh_2NWHg-kogRYn59CB-BORxsgy2hZbuja15mdsZ5JmJBySzDGB0sOvRPgvx5b2QeG8wDrGdpX7RIFxmShKyflcltDQU2-WwpqqUQAl1UNjUEpP6dd_7oyBbZOOI8wJDhS-9k9y7N0QRWXBto2SIDJwhHUIZPjtzf1IByBno_8H6xMgPNqNYEbcukWPLwPHaWPrp716XRabjG8poabf3M6cCVfMIzQ1LFCWmvARNpAMZbjW9x3LpYWiYs5KWRmhSVF6kfpk8Fp-7o3ofa_lPh991Qg9bPfoBUapD1RSjNf_WpXJpIXIUrEDwKDKBcRaQvKFPjGzYkvidIq9zCFXK-HH_JNi9dRKhDB_nFZJvFXMjczzskyN4z1_ezQJCl6eu9gk4rMM3kORxQkxl_3LzE80eDlo0gnry4_E9Qrpxg1bLaIj0RUEQRmFIB_fiKngNUVmKR5DVBRJ9EeLm-CMDo6QmBolVtNaj8K7YaBH_AbB3u2adqxHZXi9Oh9q6LRoG0ad6RcNQ12CkkrMUQZ9It3MgkF-LXo-lZltNl2P6vfmeITo6OJuVXRuAuE4oy3JTpt_Ub9PIQi85OQbD3nVUdRgFYoEb5QyDRVjfGITrMe-hzE8D3Q9zYM-Ix9Cc0kgCL3tqbBBOo2Fg7hzAij5_DRA9nvh7z06QZW8CjfF-iHIqmVBx3mtVwwGoazUWw62WidTaB8Ur4bCIM8SRWAVFwQv0ssleNVFxkWZkc403y0vv_yqho05Ky0KZ9-Lkbb-lBTCveBUaYfhf7pH49TNgw5lOVp1SmAcWKkPy2ABx4AplUHJZgqjbOh7TKbPaU68UhWE10Ol_On_gCHQvn6PMmho-hlRGrjmaqfYEz_fK [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49743	18.66.161.47	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:18 UTC	569	OUT	GET /fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:19 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 303504 Connection: close Date: Wed, 18 Dec 2024 16:27:20 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "a4a7379505cd554ea9523594b7c28b2a" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fbb8f7dd894f1d3e30b824f4c23d014e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: OJ5h4f5Ixcz1uv2THcCLMaHimbcv0KQMF4znWtQjqnOD7mYu6hEArA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-18 16:27:19 UTC	8192	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-12-18 16:27:20 UTC	8796	IN	Data Raw: 02 00 ff ff ff a0 00 00 03 48 0a 00 02 26 00 c5 00 00 00 07 06 6d fe fc 02 00 ff ff ff d8 00 00 03 14 0a 00 02 26 00 c5 00 00 00 07 06 6e fe fc 02 00 ff ff 00 18 fd a8 02 08 08 00 02 26 00 c5 00 00 00 06 06 76 98 00 ff ff 00 cc 00 00 02 1c 0a 40 02 26 00 c5 00 00 00 07 06 70 00 24 02 00 ff ff ff c4 00 00 03 24 0a 68 02 26 00 c5 00 00 00 07 06 73 fe f4 02 00 ff ff fe f4 00 00 02 b4 0a a0 02 26 00 c5 00 00 00 07 06 7b 03 fc 02 00 ff ff ff d4 00 00 03 10 0a 74 02 26 00 c5 00 00 00 07 06 7f 04 c6 02 a0 ff ff 00 f8 00 00 02 ac 0b 0c 02 26 00 c5 00 00 00 07 06 80 04 a4 02 24 ff ff 00 cc fe 04 02 1c 08 00 02 26 00 c5 00 00 00 07 06 8b 04 b4 00 00 ff ff 00 d8 ff f4 02 d8 08 00 02 06 02 e2 00 00 ff ff 00 f8 00 00 01 f0 08 00 02 06 00 c5 00 00 ff ff 00 10 00 00 02 Data Ascii: H&m&n&v@&p$$h&s&{t&&$&
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: 06 84 f8 00 06 60 f9 a0 ff ff 00 3c 00 00 0a 34 0a 68 02 26 01 c8 00 00 00 07 06 6a 02 b8 02 00 ff ff 00 3c 00 00 0a 34 0a a0 02 26 01 c8 00 00 00 07 06 66 01 e4 02 00 ff ff 00 3c 00 00 0a 34 0a a0 02 26 01 c8 00 00 00 07 06 64 02 9c 02 00 ff ff 00 3c 00 00 0a 34 0a 40 02 26 01 c8 00 00 00 07 06 69 01 f8 00 18 ff ff 00 3c 00 00 0a 34 0a 40 02 26 01 c8 00 00 00 07 06 70 03 e8 02 00 ff ff 00 3c fe 14 0a 34 08 00 02 26 01 c8 00 00 00 07 06 8b 08 78 00 10 00 01 00 4c 00 00 06 c4 08 00 00 0d 00 00 01 01 33 01 21 01 01 21 01 23 01 21 01 01 01 70 02 10 10 02 10 01 24 fd 7c 02 84 fe dc fd f0 10 fd f0 fe dc 02 94 fd 6c 08 00 fc ac 03 54 fc 00 fc 00 03 44 fc bc 04 00 04 00 ff ff 00 4c 00 00 06 c4 0a 40 02 26 01 cf 00 00 00 07 06 70 02 38 02 00 ff ff 00 4c 00 00 06 Data Ascii: `<4h&j<4&f<4&d<4@&i<4@&p<4&xL3!!#!p$\|lTDL@&p8L
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: 26 03 07 00 00 00 07 09 96 00 fc 00 b0 ff ff 00 90 ff e0 06 00 08 94 02 26 03 07 00 00 00 07 09 9d 01 5c 00 94 00 03 00 90 ff e0 06 00 06 14 00 03 00 13 00 23 00 00 01 15 21 35 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 27 32 36 12 35 34 02 26 23 22 06 02 15 14 12 16 05 62 fb cc 02 1a d0 fe c7 af af 01 39 d0 d0 01 39 af af fe c7 d0 9e cc 62 62 cc 9e 9e cc 62 62 cc 03 66 cc cc fc 7a c6 01 64 ee f0 01 66 c6 c6 fe 9a f0 ee fe 9c c6 d4 a2 01 08 9a 9a 01 0a a4 a4 fe f6 9a 9a fe f8 a2 ff ff 00 90 ff e0 06 00 06 14 02 06 03 35 00 00 ff ff 00 90 ff e0 06 00 06 14 02 06 03 07 00 00 ff ff 00 90 ff e0 06 00 08 40 02 06 03 08 00 00 ff ff 00 90 ff e0 0a 5c 06 14 00 26 03 07 00 00 00 07 02 64 04 84 00 00 ff ff 00 90 fd c0 0c 18 06 14 00 26 03 07 00 00 00 07 03 c3 Data Ascii: &&\#!5"$54$32'2654&#"b99bbbbfzdf5@\&d&
2024-12-18 16:27:20 UTC	15990	IN	Data Raw: 00 ac 01 03 91 99 fe fb a2 a4 fe f5 9d 95 01 09 00 04 00 90 fd c0 07 08 06 14 00 12 00 26 00 2d 00 3d 00 00 01 22 2e 02 35 35 33 15 14 16 16 33 32 36 37 15 06 06 01 22 24 02 35 34 12 24 33 32 1e 02 17 33 11 23 0e 02 05 23 11 13 03 11 33 01 32 36 12 35 34 02 26 23 22 06 02 15 14 12 16 06 80 54 91 6e 3d ec 3b 65 40 15 28 0f 1b 49 fc 78 c0 fe da a6 a6 01 28 c2 71 99 62 3d 13 74 74 1a 60 b2 02 2c ec 50 48 e4 fd 60 8e c4 66 64 c4 90 96 c7 63 65 c7 fd c0 36 6a 99 63 64 64 50 5b 25 05 03 c8 09 03 02 20 c3 01 65 f4 f2 01 64 c2 3a 57 59 1e fb e0 2a 7f 63 20 01 ac 01 84 01 f0 01 20 fa b4 95 01 09 ae ac 01 03 91 99 fe fb a2 a4 fe f5 9d 00 02 00 a8 fd c0 08 94 08 1c 00 24 00 34 00 00 01 11 14 16 33 32 36 37 15 06 06 23 22 2e 02 35 11 23 06 04 23 22 24 02 02 35 34 12 Data Ascii: &-=".5533267"$54$323##32654&#"Tn=;e@(Ix(qb=tt`,PH`fdce6jcddP[% ed:WY*c $43267#".5##"$54
2024-12-18 16:27:20 UTC	15990	IN	Data Raw: ff 00 d8 fd 58 05 98 08 b0 02 26 04 53 00 00 00 26 09 89 18 00 00 07 09 8f 01 28 00 b0 ff ff 00 d8 fd 58 05 98 08 b0 02 26 04 53 00 00 00 26 09 89 18 00 00 07 09 96 00 ec 00 b0 ff ff 00 d8 fd 58 05 98 09 bc 02 26 04 53 00 00 00 26 09 89 18 00 00 07 09 91 01 58 00 a8 ff ff 00 d8 fd 58 05 98 09 bc 02 26 04 53 00 00 00 26 09 89 18 00 00 07 09 98 01 34 00 a8 ff ff 00 d8 fd 58 05 98 08 94 02 26 04 53 00 00 00 26 09 89 18 00 00 07 09 9d 01 4c 00 94 ff ff 00 d8 fd 58 05 98 06 14 02 26 04 53 00 00 00 06 09 89 18 00 ff ff 00 d8 fd 58 05 98 08 94 02 26 04 53 00 00 00 26 09 89 18 00 00 07 09 9f 01 c0 00 00 ff ff 00 d8 fd c0 05 98 08 dc 02 26 04 53 00 00 00 07 09 8b 00 c0 00 00 ff ff 00 d8 fd 58 05 98 08 dc 02 26 04 53 00 00 00 26 09 89 18 00 00 07 09 8b 00 c0 00 00 Data Ascii: X&S&(X&S&X&S&XX&S&4X&S&LX&SX&S&&SX&S&
2024-12-18 16:27:20 UTC	2836	IN	Data Raw: 34 22 03 1c 6c da a6 a8 bc 4c 77 c5 74 80 e1 8b ff ff 01 2c ff 00 03 78 09 00 02 07 05 3b 00 00 00 a0 ff ff 00 84 ff 00 02 d0 09 00 02 07 05 3c 00 00 00 a0 ff ff 01 4c ff 00 03 9c 09 00 02 07 05 3d 00 00 00 a0 ff ff 00 60 ff 00 02 b0 09 00 02 07 05 3f 00 00 00 a0 ff ff 00 68 ff 00 03 9c 09 00 02 07 05 41 00 00 00 a0 ff ff 00 60 ff 00 03 94 09 00 02 07 05 42 00 00 00 a0 ff ff 00 88 ff 10 09 c4 08 e0 02 07 05 43 00 00 01 2c 00 04 00 30 00 00 06 c0 08 00 00 03 00 07 00 0b 00 0f 00 00 21 01 33 01 01 37 21 07 01 01 33 01 01 37 21 07 03 d4 01 50 c8 fe b0 fb 94 20 05 f8 20 fa dc 01 50 c8 fe b0 fe dc 20 05 f8 20 08 00 f8 00 02 38 c8 c8 fd c8 08 00 f8 00 05 00 c8 c8 00 06 00 a4 ff e4 07 50 06 bc 00 13 00 24 00 28 00 2c 00 30 00 34 00 00 05 22 24 26 02 35 34 12 36 Data Ascii: 4"lLwt,x;<L=`?hA`BC,0!37!37!P P 8P$(,04"$&546
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: 07 00 00 25 11 33 11 01 35 21 15 03 30 e0 fc fc 05 28 8c 05 28 fa d8 02 24 e0 e0 00 01 01 20 02 b0 06 20 03 90 00 03 00 00 01 15 21 35 06 20 fb 00 03 90 e0 e0 00 02 01 20 00 a0 06 20 05 a0 00 03 00 07 00 00 25 01 37 01 05 27 01 17 05 88 fb 98 98 04 68 fb 98 98 04 68 98 a0 04 68 98 fb 98 98 98 04 68 98 00 03 01 20 00 68 06 20 05 d8 00 03 00 0f 00 1c 00 00 01 15 21 35 01 22 26 35 34 36 33 32 16 15 14 06 03 22 26 26 35 34 36 33 32 16 15 14 06 06 20 fb 00 02 80 4b 69 69 4b 48 68 68 48 32 52 30 69 4b 48 68 68 03 90 e0 e0 fc d8 69 4b 48 68 68 48 4b 69 04 0c 30 52 32 48 68 68 48 4b 69 00 03 01 1c 00 60 06 24 06 00 00 03 00 07 00 0b 00 00 25 35 21 15 01 35 21 15 01 11 33 11 01 1c 05 08 fa f8 05 08 fd 0c e0 60 e0 e0 03 28 e0 e0 fe 68 04 10 fb f0 00 02 00 e6 00 f0 Data Ascii: %35!0(($ !5 %7'hhhh h !5"&54632"&&54632 KiiKHhhH2R0iKHhhiKHhhHKi0R2HhhHKi`$%5!5!3`(h
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: c0 08 0c 00 08 00 00 21 11 01 27 01 01 07 01 11 04 d2 fd 88 9c 03 82 03 80 98 fd 86 06 6c fd 86 9a 03 80 fc 80 9a 02 7a f9 94 00 01 01 c0 ff f4 08 c2 08 00 00 08 00 00 01 11 01 17 01 01 37 01 11 05 ae 02 78 9c fc 7e fc 80 98 02 7a 08 00 f9 94 02 7a 9a fc 80 03 80 9a fd 86 06 6c 00 01 01 c0 fd 9c 08 c0 09 40 00 0d 00 00 01 01 37 01 11 01 27 01 01 07 01 11 01 17 05 40 fc 80 9a 02 78 fd 88 9a 03 80 03 80 98 fd 86 02 7a 98 fd 9c 03 80 9a fd 86 08 64 fd 86 9a 03 80 fc 80 9a 02 7a f7 9c 02 7a 9a 00 02 01 16 00 00 0b 84 08 40 00 16 00 1c 00 00 01 35 21 32 36 36 35 34 26 26 23 23 35 33 32 04 12 15 14 0e 02 23 09 02 17 01 01 02 00 06 ee 7a c9 77 78 c8 7a 66 66 b7 01 2c b3 67 b6 f0 89 fb a8 fc 80 03 80 99 fd 18 02 e8 03 12 dc 78 ca 7a 7a c8 78 dc b3 fe d4 b7 89 f1 Data Ascii: !'lz7x~zzl@7'@xzdzz@5!26654&&##532#zwxzff,gxzzx
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: 3a 76 5c 68 78 b2 62 62 b2 78 ff ff 00 48 fd a8 07 74 06 14 02 26 04 eb 00 00 00 07 06 75 03 58 00 00 ff ff 00 d8 00 00 05 78 08 40 02 26 04 d7 00 00 00 06 06 68 e8 00 ff ff 00 d8 fe 08 05 78 06 04 02 26 04 d7 00 00 00 07 08 03 03 1c ff f8 00 02 00 34 06 bc 05 bc 09 18 00 06 00 0a 00 00 13 01 33 01 21 27 07 25 13 21 01 34 01 98 dc 01 98 fe e0 e4 e4 02 7c c4 01 24 fe e8 06 bc 01 6c fe 94 d4 d4 f4 01 68 fe 98 00 02 00 34 06 a0 05 bc 09 00 00 06 00 0a 00 00 01 01 21 27 07 21 01 25 13 23 01 04 24 01 98 fe e0 e4 e4 fe e0 01 94 fe 14 c0 cc fe e4 08 0c fe 94 d4 d4 01 6c f4 fe 94 01 6c 00 02 00 84 06 bc 05 6c 09 64 00 06 00 16 00 00 01 01 23 25 05 23 01 05 23 35 36 36 35 34 26 23 37 32 16 15 14 06 07 03 14 01 7c f8 fe f0 fe f4 f8 01 7c 02 b8 a8 54 50 6b 51 08 b4 Data Ascii: :v\hxbbxHt&uXx@&hx&43!'%!4\|$lh4!'!%#$llld#%##56654&#72\|\|TPkQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49746	18.66.161.47	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:19 UTC	567	OUT	GET /fonts/Inter/Inter-Light.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:20 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 304092 Connection: close Date: Wed, 18 Dec 2024 16:27:20 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "60c8f64064078554b6469eeda25944eb" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 91c765f98e441d70899402f8a830d8b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: 1ziVSVkhkwDFJJfrtHeqGYbysycoJsJ6EUG_HUZUd8jjlNZqTqrdLw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-18 16:27:20 UTC	15618	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 6c 00 00 04 12 47 50 4f 53 44 54 7b 36 00 03 3f 80 00 01 21 64 47 53 55 42 be 7f 66 78 00 04 60 e4 00 00 42 b4 4f 53 2f 32 22 33 6e 62 00 02 6e 98 00 00 00 60 53 54 41 54 ee 4d d9 3f 00 04 a3 98 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 6e f8 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3b 64 00 00 00 08 67 6c 79 66 97 e6 ea 0c 00 00 01 0c 00 02 1d 71 68 65 61 64 2d c3 61 46 00 02 46 70 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 74 00 00 00 24 68 6d 74 78 e5 18 e6 d0 00 02 46 a8 00 00 27 ca 6c 6f 63 61 09 5d 8d 80 00 02 1e a0 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 80 00 00 00 20 6e 61 6d 65 35 9c 5c a6 00 02 d4 8c 00 00 02 38 70 6f 73 74 a7 a8 35 72 00 02 d6 c4 00 00 64 9e 70 72 65 Data Ascii: GDEF11;lGPOSDT{6?!dGSUBfx`BOS/2"3nbn`STATM?Dcmap/.negasp;dglyfqhead-aFFp6hheant$hmtxF'loca]'maxp name5\8post5rdpre
2024-12-18 16:27:20 UTC	1370	IN	Data Raw: 02 26 01 99 00 00 00 07 08 62 06 bb 00 00 ff ff 00 94 fd d5 06 61 08 00 02 26 01 99 00 00 00 07 06 89 06 7b 00 00 00 01 00 94 00 00 06 ac 08 00 00 10 00 00 01 15 21 11 23 11 21 22 06 06 15 15 23 35 34 36 33 06 ac fd 77 bb fe 98 48 55 24 ab c1 aa 08 00 a8 f8 a8 07 58 3d 6c 46 3e 68 a6 c7 00 02 00 94 fd c1 06 61 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 15 23 22 2e 02 35 35 01 35 21 15 21 11 23 11 03 d8 84 63 48 72 4d 89 67 3b fd 77 05 cd fd 77 bb bb 7f 5d a8 32 62 90 5e bd 07 58 a8 a8 f8 a8 07 58 00 02 00 94 fe fc 06 61 09 04 00 03 00 0b 00 00 01 01 33 01 01 35 21 15 21 11 23 11 01 65 03 ab ad fc 55 fe 82 05 cd fd 77 bb fe fc 0a 08 f5 f8 08 5c a8 a8 f8 a8 07 58 ff ff 00 94 00 00 06 61 08 00 02 06 01 99 00 00 00 01 01 10 ff dd 07 20 08 00 00 15 00 00 01 33 Data Ascii: &ba&{!#!"#5463wHU$X=lF>ha!33#".555!!#cHrMg;ww]2b^XXa35!!#eUw\Xa 3
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: 06 e1 f8 00 06 c9 f9 37 ff ff 00 43 00 00 09 f8 0a 50 02 26 01 c8 00 00 00 07 06 6a 02 ad 02 00 ff ff 00 43 00 00 09 f8 0a 9b 02 26 01 c8 00 00 00 07 06 66 01 d0 02 00 ff ff 00 43 00 00 09 f8 0a 9b 02 26 01 c8 00 00 00 07 06 64 02 78 02 00 ff ff 00 43 00 00 09 f8 0a 08 02 26 01 c8 00 00 00 07 06 69 01 bd 00 25 ff ff 00 43 00 00 09 f8 0a 08 02 26 01 c8 00 00 00 07 06 70 03 e8 02 00 ff ff 00 43 fe 25 09 f8 08 00 02 26 01 c8 00 00 00 07 06 8b 08 48 00 10 00 01 00 53 00 00 06 88 08 00 00 0d 00 00 01 01 33 01 33 01 01 23 01 23 01 23 01 01 01 30 02 37 0d 02 37 dd fd 6d 02 93 dd fd c9 0d fd c9 dd 02 9d fd 63 08 00 fc 87 03 79 fc 00 fc 00 03 6f fc 91 04 00 04 00 ff ff 00 53 00 00 06 88 0a 08 02 26 01 cf 00 00 00 07 06 70 02 38 02 00 ff ff 00 53 00 00 06 88 0a 08 Data Ascii: 7CP&jC&fC&dxC&i%C&pC%&HS33###077mcyoS&p8S
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: 26 03 07 00 00 00 07 09 96 01 27 00 b0 ff ff 00 9c ff e0 05 e4 08 93 02 26 03 07 00 00 00 07 09 9d 01 75 00 90 00 03 00 9c ff e0 05 e4 06 15 00 03 00 13 00 23 00 00 01 15 21 35 01 22 24 02 35 34 12 24 33 32 04 12 15 14 02 04 27 32 36 12 35 34 02 26 23 22 06 02 15 14 12 16 05 6f fb a4 02 2d c7 fe cf ac ac 01 31 c7 c7 01 30 ad ac fe cf c7 a0 de 73 73 de a0 9f df 73 73 de 03 4f 9e 9e fc 91 ca 01 65 ea ec 01 67 c9 ca fe 9a ec ea fe 9b ca a3 ac 01 1e ac ac 01 20 ae ae fe e0 ac ac fe e2 ac ff ff 00 9c ff e0 05 e4 06 15 02 06 03 35 00 00 ff ff 00 9c ff e0 05 e4 06 15 02 06 03 07 00 00 ff ff 00 9c ff e0 05 e4 08 08 02 06 03 08 00 00 ff ff 00 9b ff e0 0a 5c 06 15 00 26 03 07 ff 00 00 07 02 64 04 95 00 00 ff ff 00 9c fd c0 0b d8 06 15 00 26 03 07 00 00 00 07 03 c3 Data Ascii: &'&u#!5"$54$32'2654&#"o-10ssssOeg 5\&d&
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: ff e4 05 5d 08 b3 02 26 04 44 00 00 00 07 09 8f 01 2d 00 b0 ff ff 00 9c ff e4 05 5d 08 b3 02 26 04 44 00 00 00 07 09 96 00 e3 00 b0 ff ff 00 9c ff e4 05 5d 08 93 02 26 04 44 00 00 00 07 09 9d 01 30 00 90 00 02 00 91 fd f5 05 01 08 00 00 21 00 25 00 00 01 33 15 01 0e 02 15 06 16 17 17 16 16 15 14 06 07 27 36 36 35 26 26 27 27 26 02 37 34 3e 02 37 01 21 15 21 04 ab 56 fe 1a 78 a2 52 01 85 80 a5 aa b6 73 67 6f 40 44 01 79 71 79 c7 d5 01 33 62 94 60 fe 14 04 38 fb c8 08 00 8f fd 97 98 e3 db 8d 82 ae 2b 35 38 95 5d 55 c4 5d 62 46 84 2f 30 52 25 26 3f 01 09 be 74 cc c4 cb 72 02 9c a8 00 01 00 eb fd c0 05 75 06 14 00 16 00 00 01 11 23 11 33 15 33 36 36 33 32 16 16 15 11 23 11 34 26 23 22 06 06 01 9d b2 ad 10 36 e5 a9 9b eb 83 b2 d2 b2 78 bd 6d 03 c0 fc 40 06 00 Data Ascii: ]&D-]&D]&D0!%3'665&&''&74>7!!VxRsgo@Dyqy3b`8+58]U]bF/0R%&?tru#336632#4&#"6xm@
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: ff ec 02 b0 06 00 00 0f 00 00 13 33 11 14 16 33 32 36 37 17 06 06 23 22 26 35 e5 b3 65 3e 24 42 0b 04 15 57 41 7c a2 06 00 fb 4d 65 4c 0c 04 ab 06 0f a7 ba ff ff ff 73 ff ec 03 05 08 e8 02 26 04 6c 00 00 00 07 06 74 fe 51 00 10 ff ff 00 e5 ff ec 02 b0 08 74 02 26 04 6c 00 00 00 06 08 cd 37 fb ff ff ff bd ff ec 02 bd 08 08 02 26 04 6c 00 00 00 07 06 68 fd dd 00 00 ff ff 00 c5 ff ec 02 b0 08 b0 02 26 04 6c 00 00 00 07 09 88 ff e1 00 a8 ff ff 00 bb ff ec 02 b0 08 b3 02 26 04 6c 00 00 00 07 09 a1 ff e3 00 b0 ff ff ff c5 ff ec 02 d7 08 b0 02 26 04 6c 00 00 00 07 09 8d fe f1 00 a8 ff ff ff c7 ff ec 02 b0 08 b3 02 26 04 6c 00 00 00 07 09 94 fe d4 00 b0 ff ff 00 39 ff ec 03 21 08 b3 02 26 04 6c 00 00 00 07 09 8f ff 6f 00 b0 ff ff ff e2 ff ec 02 e4 08 b3 02 26 04 Data Ascii: 33267#"&5e>$BWA\|MeLs&ltQt&l7&lh&l&l&l&l9!&lo&
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: 16 03 18 68 ac 67 67 ac 68 69 ab 67 67 ab 69 64 8c 8c 64 63 8d 8d 01 b5 67 ac 68 69 ab 67 67 ab 69 68 ac 67 8b 8d 63 64 8c 8c 64 63 8d 00 01 01 c8 02 dc 04 68 03 84 00 03 00 00 01 15 21 35 04 68 fd 60 03 84 a8 a8 00 01 02 0c 01 ab 04 8f 04 b5 00 02 00 00 01 11 01 02 0c 02 83 01 ab 03 0a fe 7b 00 02 01 05 00 fc 05 88 05 64 00 0e 00 12 00 00 25 22 24 26 35 34 36 24 33 21 15 21 11 21 15 23 11 33 11 03 67 bf fe ef 92 92 01 11 bf 02 21 fe 60 01 a0 bb bb fc 86 fd b1 b1 fd 86 a8 fc e8 a8 04 68 fb 98 00 02 01 15 00 fc 05 98 05 64 00 0e 00 12 00 00 25 35 21 11 21 35 21 32 04 16 15 14 06 04 23 21 11 33 11 01 15 01 a0 fe 60 02 22 bf 01 10 92 92 fe f0 bf fd de bb fc a8 03 18 a8 86 fd b1 b1 fd 86 04 68 fb 98 00 01 01 bb 01 db 04 65 04 85 00 03 00 00 01 21 11 21 01 bb Data Ascii: hgghiggiddcghiggihgcddch!5h`{d%"$&546$3!!!#3g!`hd%5!!5!2#!3`"he!!
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: cf fe 0c 02 13 01 18 00 0b 00 00 01 07 06 02 06 07 23 3e 02 37 37 02 13 12 11 3e 42 18 89 0d 29 2c 12 0e 01 18 6b 6c fe fc ea 47 44 d2 ff 87 70 00 01 00 e9 ff f1 02 09 01 11 00 0c 00 00 05 22 26 35 34 36 33 32 16 15 14 06 06 01 79 3b 55 55 3b 3c 54 27 41 0f 55 3b 3c 54 54 3c 27 42 27 ff ff 00 e5 ff f1 08 30 01 11 00 26 05 7c fc 00 00 27 05 7c 03 11 00 00 00 07 05 7c 06 27 00 00 ff ff 00 e5 ff f1 05 1b 01 11 00 26 05 7c fc 00 00 07 05 7c 03 11 00 00 00 02 00 e9 00 27 02 09 05 9b 00 0c 00 19 00 00 25 22 26 35 34 36 33 32 16 15 14 06 06 03 22 26 35 34 36 33 32 16 15 14 06 06 01 79 3b 55 55 3b 3c 54 27 41 28 3b 55 55 3b 3c 54 27 41 27 54 3c 3b 55 55 3b 28 41 27 04 54 54 3c 3b 55 55 3b 28 41 27 00 02 00 e9 01 33 02 09 06 62 00 0c 00 19 00 00 01 22 26 35 34 36 Data Ascii: #>77>B),klGDp"&54632y;UU;<T'AU;<TT<'B'0&\|'\|\|'&\|\|'%"&54632"&54632y;UU;<T'A(;UU;<T'A'T<;UU;(A'TT<;UU;(A'3b"&546
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: ab fd 31 04 f3 a7 04 f2 fb 0e 02 24 aa aa 00 01 01 29 02 cb 06 01 03 75 00 03 00 00 01 15 21 35 06 01 fb 28 03 75 aa aa 00 02 01 27 00 b2 06 04 05 8e 00 03 00 07 00 00 25 01 37 01 05 27 01 17 05 8f fb 98 75 04 68 fb 98 75 04 68 75 b2 04 68 74 fb 98 74 74 04 68 74 00 03 01 29 00 a0 06 01 05 a0 00 03 00 0f 00 1c 00 00 01 15 21 35 01 22 26 35 34 36 33 32 16 15 14 06 03 22 26 26 35 34 36 33 32 16 15 14 06 06 01 fb 28 02 6c 3c 54 54 3c 3a 54 54 3a 28 41 27 54 3c 3a 54 54 03 75 aa aa fd 2b 54 3c 3a 53 53 3a 3c 54 03 e3 26 42 28 3a 53 53 3a 3c 54 00 03 01 27 00 80 06 04 06 00 00 03 00 07 00 0b 00 00 25 35 21 15 01 35 21 15 01 11 33 11 01 27 04 dd fb 23 04 dd fd 3c ab 80 ab ab 03 1b aa aa fe 45 04 20 fb e0 00 02 00 f3 01 2b 06 38 05 16 00 1b 00 37 00 00 13 3e 02 Data Ascii: 1$)u!5(u'%7'uhuhuhtttht)!5"&54632"&&54632(l<TT<:TT:(A'T<:TTu+T<:SS:<T&B(:SS:<T'%5!5!3'#<E +87>
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: fc f5 01 d6 a8 a8 01 c2 a8 a8 00 01 01 be 00 00 08 c0 08 0c 00 08 00 00 21 11 01 27 01 01 07 01 11 04 ec fd 49 77 03 82 03 80 74 fd 48 06 ce fd 48 76 03 80 fc 80 76 02 b8 f9 32 00 01 01 c0 ff f4 08 c2 08 00 00 08 00 00 01 11 01 17 01 01 37 01 11 05 94 02 b7 77 fc 7e fc 80 74 02 b8 08 00 f9 32 02 b8 76 fc 80 03 80 76 fd 48 06 ce 00 01 01 c0 fd 9c 08 c0 09 40 00 0d 00 00 01 01 37 01 11 01 27 01 01 07 01 11 01 17 05 40 fc 80 76 02 b6 fd 4a 76 03 80 03 80 74 fd 48 02 b8 74 fd 9c 03 80 76 fd 48 09 28 fd 48 76 03 80 fc 80 76 02 b8 f6 d8 02 b8 76 00 02 01 16 00 00 0b 83 08 2b 00 16 00 1c 00 00 01 35 21 32 36 36 35 34 26 26 23 23 35 33 32 04 12 15 14 0e 02 23 09 02 17 01 01 01 c5 07 3f 82 d6 7f 80 d5 82 69 69 b1 01 21 ad 64 af e8 84 fb 92 fc 80 03 80 75 fc f5 03 Data Ascii: !'IwtHHvv27w~t2vvH@7'@vJvtHtvH(Hvvv+5!26654&&##532#?ii!du

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49748	18.66.161.47	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:19 UTC	570	OUT	GET /fonts/Inter/Inter-SemiBold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:20 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309432 Connection: close Date: Wed, 18 Dec 2024 16:27:20 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "1753a05196abeef95c32f10246bd6473" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8bf448c3d6913b8c3e613761e37de9f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: zQPDyyp4R_8i7AShgnbFbU-Cl0EyKQAjZZ6cGuiGkgqZbby0EEZPnA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-18 16:27:20 UTC	15618	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 44 98 00 00 04 12 47 50 4f 53 9b af 91 74 00 03 48 ac 00 01 2d 14 47 53 55 42 be 7f 66 78 00 04 75 c0 00 00 42 b4 4f 53 2f 32 23 5f 6e 62 00 02 77 ac 00 00 00 60 53 54 41 54 ef 79 d9 45 00 04 b8 74 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 78 0c 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 44 90 00 00 00 08 67 6c 79 66 6a 1b 9d 97 00 00 01 0c 00 02 26 86 68 65 61 64 2d c3 61 46 00 02 4f 84 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 77 88 00 00 00 24 68 6d 74 78 24 35 88 39 00 02 4f bc 00 00 27 ca 6c 6f 63 61 09 84 29 ed 00 02 27 b4 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 27 94 00 00 00 20 6e 61 6d 65 37 5c 60 0e 00 02 dd a0 00 00 02 50 70 6f 73 74 a7 a8 35 72 00 02 df f0 00 00 64 9e 70 72 65 Data Ascii: GDEF11DGPOStH-GSUBfxuBOS/2#_nbw`STATyEtDcmap/.xegaspDglyfj&head-aFO6hheaw$hmtx$59O'loca)''maxp' name7\`Ppost5rdpre
2024-12-18 16:27:20 UTC	1338	IN	Data Raw: 00 00 06 d2 0a 76 02 26 01 99 00 00 00 07 06 73 00 be 02 00 ff ff 00 70 fd 68 06 d2 08 00 02 26 01 99 00 00 00 07 06 77 02 20 00 00 ff ff 00 70 00 00 06 d2 0a 63 02 26 01 99 00 00 00 07 06 70 02 20 02 00 ff ff 00 70 fd d7 06 d2 08 00 02 26 01 99 00 00 00 07 06 8b 06 ba 00 00 ff ff 00 70 fe 25 06 d2 08 00 02 26 01 99 00 00 00 07 08 62 06 ed 00 00 ff ff 00 70 fd c2 06 d2 08 00 02 26 01 99 00 00 00 07 06 89 06 f3 00 00 00 01 00 70 00 00 07 38 08 00 00 10 00 00 01 11 21 11 21 11 23 22 06 06 15 15 21 35 34 00 33 07 38 fd 87 fe 90 e1 4e 55 21 fe c6 01 0a f4 08 00 fe c9 f9 37 06 c9 47 6f 3d 68 ab df 01 08 00 02 00 70 fd c0 06 d2 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 59 8b 56 53 b2 5e b3 8e 53 fd 87 06 62 fd 87 Data Ascii: v&sph&w pc&p p&p%&bp&p8!!#"!5438NU!7Go=hp!33#".55!!!YVS^Sb
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: 07 00 00 01 01 33 01 21 01 21 01 01 dc 02 15 15 02 14 01 98 fd 2e fe 36 fd 2f 08 00 f9 b4 06 4c f8 00 08 00 ff ff 00 45 00 00 07 b2 0a 47 02 26 01 c5 00 00 00 07 06 6b 01 3b 02 00 ff ff 00 45 fd d7 07 b2 08 00 02 26 01 c5 00 00 00 07 06 8b 07 15 00 00 00 01 00 37 00 00 0a dc 08 00 00 0f 00 00 21 01 21 01 33 01 21 01 33 01 21 01 21 01 23 01 02 79 fd be 01 8f 01 71 13 01 8a 01 6b 01 8b 12 01 71 01 8f fd be fe 92 fe 66 10 fe 65 08 00 fa 1f 05 e1 fa 1e 05 e2 f8 00 05 9d fa 63 ff ff 00 37 00 00 0a dc 0a 76 02 26 01 c8 00 00 00 07 06 6a 02 a6 02 00 ff ff 00 37 00 00 0a dc 0a 93 02 26 01 c8 00 00 00 07 06 66 02 37 02 00 ff ff 00 37 00 00 0a dc 0a 93 02 26 01 c8 00 00 00 07 06 64 02 e1 02 00 ff ff 00 37 00 00 0a dc 0a 5b 02 26 01 c8 00 00 00 07 06 69 02 7e 00 20 Data Ascii: 3!!.6/LEG&k;E&7!!3!3!!#yqkqfec7v&j7&f77&d7[&i~
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: b9 ff dd ff ff 00 78 ff e2 06 38 09 28 02 26 03 07 00 00 00 06 07 f3 34 d1 ff ff 00 78 fd d7 06 38 08 76 02 26 03 07 00 00 00 26 06 6a 75 00 00 07 06 8b 06 72 00 00 ff ff 00 78 ff e2 06 d4 08 93 02 26 03 0b 00 00 00 07 06 64 00 af 00 00 ff ff 00 78 ff e2 06 d4 08 93 02 26 03 0b 00 00 00 06 06 66 06 00 ff ff 00 78 ff e2 06 d4 09 09 02 26 03 0b 00 00 00 07 06 80 06 d8 00 12 ff ff 00 78 ff e2 06 d4 08 47 02 26 03 0b 00 00 00 07 06 6b 00 98 00 00 ff ff 00 78 fd d7 06 d4 06 62 02 26 03 0b 00 00 00 07 06 8b 06 72 00 00 ff ff 00 78 ff a2 06 38 08 92 02 26 03 0a 00 00 00 07 06 64 00 af ff fe ff ff 00 78 ff e2 06 38 06 14 02 06 03 07 00 00 ff ff 00 78 ff e2 06 38 08 98 02 26 03 07 00 00 00 07 08 cd 01 d5 00 0b ff ff 00 78 ff e2 06 38 08 b0 02 26 03 07 00 00 00 07 Data Ascii: x8(&4x8v&&jurx&dx&fx&xG&kxb&rx8&dx8x8&x8&
2024-12-18 16:27:20 UTC	630	IN	Data Raw: 33 15 03 24 be fe d5 ac 01 3b 83 de a3 b9 74 57 81 46 01 01 95 8b b5 bf 01 01 5c 68 be ff 00 f0 9a d2 7f 38 01 9f 01 1c bc 9c 01 03 bc 66 fe a4 01 5f ab 72 7e 83 01 01 81 86 74 1c 6d c9 88 4a 8a 6d 40 8e 34 5f 41 53 70 01 0d 01 0a ca fe ce cd 68 03 02 40 6a 83 43 8e c7 69 61 c0 fe e0 be ad d7 65 6e 50 4e 61 ab ff ff 00 78 ff e4 05 be 06 14 02 06 04 44 00 00 00 02 00 72 ff e4 05 b7 06 14 00 1b 00 35 00 00 01 32 1e 02 15 14 06 04 23 22 2e 02 27 21 16 16 33 32 36 37 2e 02 23 23 35 15 35 33 32 36 37 26 26 23 22 06 07 21 36 36 24 33 32 04 16 17 0e 03 23 03 64 a5 e5 8a 3f b4 fe ca c2 85 ec b5 6c 07 01 61 12 9a 97 96 a9 01 01 53 8d 56 ce ce 8a 93 01 01 96 8a 7e a0 0f fe 9b 0c aa 01 1b b3 bf 01 28 a7 01 01 3c 86 d8 9e 03 23 40 6d 8a 4a 88 c9 6d 3e 79 b1 71 60 61 Data Ascii: 3$;tWF\h8f_r~tmJm@4_ASph@jCiaenPNaxDr52#".'!3267.##553267&&#"!66$32#d?laSV~(<#@mJm>yq`a
2024-12-18 16:27:20 UTC	3148	IN	Data Raw: 32 91 3d ae 5e 4e 50 6e 5a 56 8f cb 6c 69 c7 8e 43 83 6a 40 ff ff 00 78 ff e4 05 be 08 b0 02 26 04 44 00 00 00 07 09 88 01 f9 00 a8 ff ff 00 78 ff e4 05 be 08 b0 02 26 04 44 00 00 00 07 09 a1 01 67 00 b0 ff ff 00 78 ff e4 05 be 08 b0 02 26 04 44 00 00 00 07 09 8d 00 77 00 a8 ff ff 00 78 ff e4 05 be 08 ae 02 26 04 44 00 00 00 07 09 94 00 8e 00 ae ff ff 00 78 ff e4 05 be 08 b0 02 26 04 44 00 00 00 07 09 8f 00 de 00 b0 ff ff 00 78 ff e4 05 be 08 ae 02 26 04 44 00 00 00 07 09 96 00 bd 00 ae ff ff 00 78 ff e4 05 be 08 94 02 26 04 44 00 00 00 07 09 9d 01 15 00 9c 00 02 00 75 fd ea 05 6b 08 00 00 21 00 25 00 00 01 33 15 01 0e 02 15 14 16 17 17 16 16 15 14 06 07 27 36 36 37 36 26 27 27 26 02 35 34 3e 02 37 01 21 11 21 04 96 d5 fe 0e 64 8d 4a 7a 70 86 c0 ce a0 92 Data Ascii: 2=^NPnZVliCj@x&Dx&Dgx&Dwx&Dx&Dx&Dx&Duk!%3'6676&''&54>7!!dJzp
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: fe a3 e4 9f fe dd e4 84 89 ef 01 33 aa a3 01 16 da 48 ca 43 9f be 71 98 fd 97 8a e9 8e 88 da 80 49 39 f9 52 00 03 00 8e fd c0 07 cf 08 20 00 11 00 15 00 27 00 00 05 26 24 02 27 36 12 24 37 21 16 04 12 07 16 02 04 07 01 11 21 11 03 3e 02 35 34 26 26 27 23 0e 02 15 14 16 16 17 03 96 f4 fe a5 b8 01 01 ba 01 5d f4 01 29 f5 01 5d ba 01 01 ba fe a4 f6 fe c1 01 55 2b 8b c8 6b 6b c8 8b fd 8b c9 6c 6c c9 8b 18 15 cf 01 56 de dc 01 53 ce 13 13 ce fe ad dc df fe a9 ce 14 fd d8 0a 60 f5 a0 03 1f 0f 94 ed 91 91 e9 91 0e 0e 91 e9 91 91 ed 94 0f 00 02 00 ba fd 70 08 26 06 00 00 1e 00 22 00 00 13 21 11 14 16 04 33 32 24 36 35 2e 03 27 21 1e 03 15 14 02 06 04 21 20 24 02 11 01 21 11 21 ba 01 5d 9c 01 09 a2 e0 01 11 7b 01 19 2b 38 22 01 4c 23 3f 31 1c 62 dd fe 91 fe f4 fe Data Ascii: 3HCqI9R '&$'6$7!!>54&&'#])]U+kkllVS`p&"!32$65.'!! $!!]{+8"L#?1b
2024-12-18 16:27:20 UTC	10024	IN	Data Raw: 00 00 ff ff 00 bc 02 a5 02 75 04 5b 02 07 05 7c 00 00 02 bb ff ff 00 bc 04 5e 02 75 06 14 02 07 05 7c 00 00 04 74 ff ff 00 ac fe 0c 02 9e 05 e9 00 06 05 82 05 00 00 02 00 ac 00 dc 03 86 05 a8 00 04 00 09 00 00 25 21 01 35 21 01 01 21 35 01 03 86 fe ba fe 6c 01 5a 01 80 fe 80 fe a6 01 94 dc 02 58 14 02 60 fd 94 14 02 58 00 02 00 9e 00 dc 03 78 05 a8 00 04 00 09 00 00 37 01 21 15 01 01 21 01 15 21 9e 01 80 01 5a fe 6c fe ba 01 46 01 94 fe a6 dc 02 6c 14 fd a8 04 cc fd a8 14 ff ff 00 ac 00 dc 05 e8 05 a8 00 26 05 8a 00 00 00 07 05 8a 02 62 00 00 ff ff 00 9e 00 dc 05 e0 05 a8 00 26 05 8b 00 00 00 07 05 8b 02 68 00 00 00 01 01 07 00 25 06 5f 06 35 00 09 00 00 01 11 01 11 01 37 15 27 01 11 01 07 05 58 fc 34 0b 0b 03 cc 02 9d 01 20 02 78 fe 9d fe 5f 13 2e 13 fe Data Ascii: u[\|^u\|t%!5!!5lZX`Xx7!!!ZlFl&b&h%_57'X4 x_.
2024-12-18 16:27:21 UTC	16384	IN	Data Raw: f9 01 09 e5 e6 01 09 fe f7 e6 6b 7d 7d 6b 6a 7f 7e 18 01 2b 01 0d 01 0a 01 26 fe da fe f6 fe f1 fe d7 d2 b1 b5 ad b1 af af b3 b3 00 01 00 58 00 00 02 65 04 40 00 07 00 00 21 11 23 05 35 25 33 11 01 68 08 fe f8 01 1b f2 03 48 aa ed b5 fb c0 00 01 00 61 00 00 03 d9 04 50 00 1a 00 00 33 35 01 36 36 35 34 26 23 22 06 15 23 34 36 33 32 16 15 14 06 06 07 07 15 21 15 73 01 b6 4f 5a 6f 51 53 6b f3 f5 c1 c4 e9 3f 86 69 b3 01 f6 b8 01 5d 40 63 3d 44 4d 53 4b a5 c3 c7 90 4d 83 81 4a 84 0a d0 00 01 00 5a ff f0 04 02 04 50 00 2d 00 00 05 22 26 26 27 21 16 16 33 32 36 35 34 26 23 23 35 33 32 36 35 34 26 23 22 06 07 23 3e 02 33 32 16 16 15 14 06 07 15 16 16 15 14 06 06 02 2c 8a d1 76 01 01 04 02 73 54 5a 77 7a 69 75 75 57 71 61 52 4d 72 02 f7 02 77 c7 7d 7e be 6b 80 67 Data Ascii: k}}kj~+&Xe@!#5%3hHaP356654&#"#4632!sOZoQSk?i]@c=DMSKMJZP-"&&'!32654&##532654&#"#>32,vsTZwziuuWqaRMrw}~kg
2024-12-18 16:27:21 UTC	16384	IN	Data Raw: fd ca 08 5b 08 00 02 26 04 06 00 00 00 07 08 02 06 15 ff 9c 00 02 00 a0 ff e4 06 9a 08 1c 00 1a 00 34 00 00 01 21 22 24 26 35 34 12 24 33 32 04 16 17 21 34 26 23 22 06 06 15 14 16 16 33 33 05 21 15 23 22 06 06 15 14 16 16 33 32 36 35 21 14 02 04 23 22 24 02 35 10 00 04 8d fe e1 c8 fe ca b0 bc 01 4f dc d3 01 47 bb 01 fe 7f b2 a4 76 9e 50 47 97 7b f2 fe e1 01 1f f2 7e a6 52 5f a7 6d c0 c0 01 82 cd fe a7 d3 de fe a5 c8 01 7c 03 d4 80 ea 9e b5 01 02 89 8c fe a9 73 88 44 7f 59 50 83 4e 5b cf 45 8a 66 6e 85 3d 9e 76 bf fe fb 84 80 01 04 c6 01 0b 01 13 ff ff 00 96 fd 82 07 a3 08 1c 02 26 00 49 00 00 00 07 06 75 02 5a ff fa ff ff 00 c3 00 00 06 68 07 ec 00 06 03 df f6 00 ff ff ff a2 00 00 07 62 08 00 02 06 00 5c 00 00 00 01 00 70 fd a1 07 0e 08 00 00 23 00 00 37 Data Ascii: [&4!"$&54$32!4&#"33!#"3265!#"$5OGvPG{~R_m\|sDYPN[Efn=v&IuZhb\p#7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49747	18.66.161.47	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:19 UTC	566	OUT	GET /fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cres-aws.com/postx.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:20 UTC	766	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 309772 Connection: close Date: Wed, 18 Dec 2024 16:27:20 GMT Last-Modified: Fri, 22 Sep 2023 08:10:20 GMT ETag: "d17c0274915408cee0308d5476df9f45" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 650b61bfbcbb6fbe678e90e9ad7e0d92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: Jo28GnoJEfvyCRGB0n-29SI-eLQ17WKaHTS6leDlZuqcaBP5LYa_aA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-12-18 16:27:20 UTC	15618	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-12-18 16:27:20 UTC	1370	IN	Data Raw: 7e 02 26 01 99 00 00 00 07 06 73 00 9a 02 00 ff ff 00 64 fd 70 06 f6 08 00 02 26 01 99 00 00 00 07 06 77 02 2c 00 00 ff ff 00 64 00 00 06 f6 0a 75 02 26 01 99 00 00 00 07 06 70 02 14 02 00 ff ff 00 64 fd c1 06 f6 08 00 02 26 01 99 00 00 00 07 06 8b 06 b2 00 00 ff ff 00 64 fe 19 06 f6 08 00 02 26 01 99 00 00 00 07 08 62 06 ff 00 00 ff ff 00 64 fd ba 06 f6 08 00 02 26 01 99 00 00 00 07 06 89 07 19 00 00 00 01 00 64 00 00 07 58 08 00 00 10 00 00 01 11 21 11 21 11 23 22 06 06 15 15 21 35 34 00 21 07 58 fd 8d fe 54 a3 53 58 21 fe 9a 01 21 01 11 08 00 fe 9b f9 65 06 9b 4a 72 3d 78 c5 f5 01 1c 00 02 00 64 fd c0 06 f6 08 00 00 0d 00 15 00 00 21 15 14 16 33 33 11 23 22 2e 02 35 35 01 11 21 11 21 11 21 11 04 83 88 53 55 c6 64 be 99 5b fd 8d 06 92 fd 8d fe 54 5e 5a Data Ascii: ~&sdp&w,du&pd&d&bd&dX!!#"!54!XTSX!!eJr=xd!33#".55!!!SUd[T^Z
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: 08 00 ff ff 00 43 00 00 07 f6 0a 51 02 26 01 c5 00 00 00 07 06 6b 01 5d 02 00 ff ff 00 43 fd c1 07 f6 08 00 02 26 01 c5 00 00 00 07 06 8b 07 23 00 00 00 01 00 35 00 00 0b 30 08 00 00 0f 00 00 21 01 21 01 33 01 21 01 33 01 21 01 21 01 23 01 02 7f fd b6 01 d9 01 53 11 01 76 01 95 01 75 12 01 53 01 d9 fd b6 fe 5a fe 7a 10 fe 7b 08 00 fa 71 05 8f fa 6e 05 92 f8 00 05 3b fa c5 ff ff 00 35 00 00 0b 30 0a 7e 02 26 01 c8 00 00 00 07 06 6a 02 9e 02 00 ff ff 00 35 00 00 0b 30 0a 8d 02 26 01 c8 00 00 00 07 06 66 02 61 02 00 ff ff 00 35 00 00 0b 30 0a 8d 02 26 01 c8 00 00 00 07 06 64 03 03 02 00 ff ff 00 35 00 00 0b 30 0a 69 02 26 01 c8 00 00 00 07 06 69 02 c2 00 24 ff ff 00 35 00 00 0b 30 0a 75 02 26 01 c8 00 00 00 07 06 70 04 18 02 00 ff ff 00 35 fd c7 0b 30 08 00 Data Ascii: CQ&k]C&#50!!3!3!!#SvuSZz{qn;50~&j50&fa50&d50i&i$50u&p50
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: 07 07 f1 ff 52 ff e0 ff ff 00 6c ff e2 06 70 09 1c 02 26 03 07 00 00 00 07 07 f2 00 b7 ff d7 ff ff 00 6c ff e2 06 54 09 20 02 26 03 07 00 00 00 06 07 f3 28 d3 ff ff 00 6c fd c1 06 54 08 7e 02 26 03 07 00 00 00 26 06 6a 4b 00 00 07 06 8b 06 66 00 00 ff ff 00 6c ff e2 06 f4 08 8d 02 26 03 0b 00 00 00 07 06 64 00 b1 00 00 ff ff 00 6c ff e2 06 f4 08 8d 02 26 03 0b 00 00 00 06 06 66 0e 00 ff ff 00 6c ff e2 06 f4 09 07 02 26 03 0b 00 00 00 07 06 80 07 08 00 0a ff ff 00 6c ff e2 06 f4 08 51 02 26 03 0b 00 00 00 07 06 6b 00 a0 00 00 ff ff 00 6c fd c1 06 f4 06 5a 02 26 03 0b 00 00 00 07 06 8b 06 66 00 00 ff ff 00 6c ff 9e 06 54 08 8a 02 26 03 0a 00 00 00 07 06 64 00 b1 ff fe ff ff 00 6c ff e2 06 54 06 14 02 06 03 07 00 00 ff ff 00 6c ff e2 06 54 08 a4 02 26 03 07 Data Ascii: Rlp&lT &(lT~&&jKfl&dl&fl&lQ&klZ&flT&dlTlT&
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: af 7c ad 6e 1d 0d 09 4c 90 67 68 90 4b 4a 90 69 68 8f 4c 06 00 d8 bf 10 08 fe e4 05 0e 01 01 3b f7 83 08 40 fe fe 3e 81 57 af fe a1 fe f8 fe ff fe 9f b5 52 7d 40 fc ca 05 40 89 cc 71 73 cd 86 85 ca 72 6e ca ff ff 00 aa fd c0 06 84 08 8d 02 26 03 3b 00 00 00 07 06 64 01 12 00 00 ff ff 00 aa fd c0 06 84 08 75 02 26 03 3b 00 00 00 07 06 70 02 27 00 00 ff ff 00 aa fd c0 06 84 06 14 02 06 03 3b 00 00 00 02 00 71 fd c0 06 4a 06 14 00 16 00 26 00 00 01 11 23 0e 02 23 22 24 02 11 10 12 24 33 32 16 16 17 33 11 21 11 01 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 04 a1 0d 1e 6d ad 7c af fe e5 a5 aa 01 1b a9 81 ad 6b 1c 12 01 a4 fd 1d 67 8f 4d 4c 90 67 69 90 4a 4b 8f fd c0 03 36 40 7d 52 b5 01 61 01 01 01 08 01 5f af 57 81 3e 01 02 f7 c0 03 7a 71 cc 89 89 ca 6e 72 Data Ascii: \|nLghKJihL;@>WR}@@qsrn&;du&;p';qJ&##"$$323!26654&&#"m\|kgMLgiJK6@}Ra_W>zqnr
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: 56 90 81 55 84 4a 03 78 fc 88 06 00 fe f1 87 9c 8c fe fe b4 f9 ee 05 c6 8d 9f 4a 8d ff ff 00 aa fd c0 06 32 08 a4 02 26 04 53 00 00 00 07 08 cd 01 c0 00 11 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 88 02 5e 00 a8 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 a1 01 9c 00 b0 ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 8d 00 b4 00 a8 ff ff 00 aa fd c0 06 32 08 ae 02 26 04 53 00 00 00 07 09 94 00 f1 00 ae ff ff 00 aa fd c0 06 32 08 b0 02 26 04 53 00 00 00 07 09 8f 01 1a 00 b0 ff ff 00 aa fd c0 06 32 08 ae 02 26 04 53 00 00 00 07 09 96 01 06 00 ae ff ff 00 aa fd c0 06 32 09 cd 02 26 04 53 00 00 00 07 09 91 01 81 00 a8 ff ff 00 aa fd c0 06 32 09 cd 02 26 04 53 00 00 00 07 09 98 01 34 00 a8 ff ff 00 aa fd c0 06 32 08 94 02 Data Ascii: VUJxJ2&S2&S^2&S2&S2&S2&S2&S2&S2&S42
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: 8a 9a dd b9 df 72 26 fe c2 3d 7f 61 fe dc 4c 89 69 3d fb 17 26 72 df b9 de 9a 8a c9 3d 69 89 4d fe dc 60 7f 3d 02 f3 01 80 fe 80 00 03 00 41 fe 43 04 29 08 26 00 14 00 29 00 2d 00 00 01 15 22 06 15 15 14 0e 02 23 11 32 36 36 35 11 34 36 36 24 01 32 1e 02 15 15 14 16 33 15 22 24 26 26 35 11 34 26 26 23 01 11 21 11 04 29 ac 87 67 b9 fd 98 76 7b 2c 38 98 01 1a fc f9 98 fd b9 67 87 ac e1 fe e6 98 38 2c 7b 76 03 e8 fe 99 03 3e c9 8a 9a de b9 df 72 26 01 3f 3d 7f 60 01 24 4d 89 69 3d 04 e8 26 72 df b9 dd 9a 8a c9 3d 69 89 4c 01 24 61 7f 3d fd 0d fe 80 01 80 00 02 00 aa fd b2 0a e5 07 f7 00 4e 00 5e 00 00 01 20 24 00 02 11 10 12 00 24 21 20 04 00 12 03 16 02 06 06 07 06 26 26 27 23 0e 02 27 2e 02 02 27 36 12 36 36 37 36 16 16 17 33 35 21 11 16 16 33 32 36 36 35 Data Ascii: r&=aLi=&r=iM`=AC)&)-"#2665466$23"$&&54&&#!)gv{,8g8,{v>r&?=`$Mi=&r=iL$a=N^ $$! &&'#'.'6667635!32665
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: 26 08 60 00 03 00 00 01 01 21 01 02 b7 fd 6c 01 6f 02 94 fe cc 09 94 f6 6c 00 01 00 c1 02 a0 04 67 03 f2 00 03 00 00 01 11 21 11 04 67 fc 5a 03 f2 fe ae 01 52 ff ff 00 c1 02 a0 04 67 03 f2 02 06 05 51 00 00 00 01 00 00 02 a0 05 80 03 f2 00 03 00 00 01 11 21 11 05 80 fa 80 03 f2 fe ae 01 52 00 01 00 00 02 a0 07 80 03 f2 00 03 00 00 01 11 21 11 07 80 f8 80 03 f2 fe ae 01 52 00 01 00 00 02 a0 0b 00 03 f2 00 03 00 00 01 11 21 11 0b 00 f5 00 03 f2 fe ae 01 52 ff ff 00 00 02 a0 0b 00 03 f2 02 06 05 55 00 00 00 01 00 d5 01 78 04 45 04 e8 00 0f 00 00 01 22 26 26 35 34 36 36 33 32 16 16 15 14 06 06 02 8d 79 c8 77 77 c8 79 7a c7 77 77 c7 01 78 77 c8 79 7a c7 77 77 c7 7a 79 c8 77 00 02 00 d5 01 78 04 45 04 e8 00 0f 00 1b 00 00 01 22 26 26 35 34 36 36 33 32 16 16 15 Data Ascii: &`!lolg!gZRgQ!R!R!RUxE"&&546632ywwyzwwxwyzwwzywxE"&&546632
2024-12-18 16:27:20 UTC	16384	IN	Data Raw: f9 00 ff ff 00 4e fe 29 02 0e 01 00 00 07 05 6a ff fe f9 00 00 01 00 a4 04 e6 02 6e 08 00 00 03 00 00 13 13 21 03 a4 48 01 82 a8 04 e6 03 1a fc e6 ff ff 00 a4 04 e6 04 be 08 00 00 26 05 72 00 00 00 07 05 72 02 50 00 00 ff ff 00 a4 04 e6 07 0e 08 00 00 26 05 72 00 00 00 27 05 72 02 50 00 00 00 07 05 72 04 a0 00 00 ff ff 00 a4 04 e6 09 5e 08 00 00 26 05 72 00 00 00 27 05 72 02 50 00 00 00 27 05 72 04 a0 00 00 00 07 05 72 06 f0 00 00 00 01 00 a4 04 e6 02 6e 08 00 00 03 00 00 01 21 03 21 02 6e fe de a8 01 82 04 e6 03 1a ff ff 00 a4 04 e6 04 be 08 00 00 26 05 76 00 00 00 07 05 76 02 50 00 00 ff ff 00 a4 04 e6 07 0e 08 00 00 26 05 76 00 00 00 27 05 76 02 50 00 00 00 07 05 76 04 a0 00 00 00 01 00 92 04 ad 02 30 08 00 00 03 00 00 13 03 21 03 f0 5e 01 9e 5c 04 ad Data Ascii: N)jn!H&rrP&r'rPr^&r'rP'rrn!!n&vvP&v'vPv0!^\
2024-12-18 16:27:20 UTC	1024	IN	Data Raw: a8 60 87 88 5e 60 87 87 02 6d 5f 87 87 5f 5f 87 87 fd c1 7e 59 59 7e 7e 59 59 7e 7e 59 59 7e 7e 59 59 7e ff ff fb 6f fe 0f fe 1a 00 a4 00 07 06 71 fa a9 f7 6a ff ff f9 eb fd ee ff 2c ff 31 00 07 05 a9 f9 ed ff 31 00 01 fa 6d fd db fe 83 ff 6f 00 17 00 00 01 27 34 36 33 32 1e 02 33 32 36 35 17 06 06 07 06 2e 02 23 22 06 fb 5a ed bd 88 46 65 51 4a 2b 3a 3d e9 02 bc 87 4b 65 4c 48 2d 34 3f fd db 03 bf cd 2d 3b 2d 55 45 06 be cc 01 01 2e 3b 2d 52 00 04 00 b2 00 00 0b 72 08 1b 00 0b 00 0f 00 21 00 2f 00 00 33 11 21 01 33 11 21 11 21 01 23 11 01 35 21 15 01 22 26 26 35 35 34 36 36 33 32 16 16 15 15 14 06 06 27 32 36 35 35 34 26 23 22 06 15 15 14 16 b2 01 61 03 36 11 01 65 fe a4 fc c7 11 05 b8 03 74 fe 45 97 dd 78 78 dc 96 98 db 77 75 db 98 5f 69 68 62 61 67 68 Data Ascii: `^`m___~YY~~YY~~YY~~YY~oqj,11mo'46323265.#"ZFeQJ+:=KeLH-4?-;-UE.;-Rr!/3!3!!#5!"&&5546632'26554&#"a6etExxwu_ihbagh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49751	18.66.161.34	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:19 UTC	360	OUT	GET /CRES_login_bg.jpg HTTP/1.1 Host: static.cres-aws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:21 UTC	716	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 155249 Connection: close Date: Wed, 18 Dec 2024 16:27:21 GMT Last-Modified: Wed, 20 Sep 2023 11:59:56 GMT ETag: "c3598f2d3bf6694df3378aafc792bfee" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e47955c447d3bc6630a9c0e1a8b8e666.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: RRXLfsy7-gN2SvKv60r1PO5Ki532YWKLc64LpFTkHKtAg0uV_P0SLw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-12-18 16:27:21 UTC	15668	IN	Data Raw: ff d8 ff e1 00 4a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 26 00 00 00 1a 00 00 00 00 00 00 00 73 61 6e 64 72 61 20 63 69 66 6f 2e 20 77 77 77 2e 63 69 66 6f 67 72 61 70 68 79 2e 63 6f 6d 2e 20 32 30 31 36 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 00 00 00 ff e1 04 13 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 Data Ascii: JExifII*&sandra cifo. www.cifography.com. 2016Duckyhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79
2024-12-18 16:27:21 UTC	1318	IN	Data Raw: 4a 84 02 66 66 ac c8 00 00 00 00 43 20 06 21 94 02 63 13 01 00 01 03 00 02 87 a0 af 55 65 b9 6a 52 52 27 48 d0 0c e9 79 2a d6 9d 35 07 45 65 2b 52 15 bb ea 41 b5 6c ec 54 49 95 25 e8 68 9c ea 50 e1 04 8c 20 04 63 1b af 9e 86 e6 75 f9 9b f8 01 70 38 00 00 00 00 02 5b e8 89 b5 fa 21 57 00 5a ac 0d f8 8b 2c 70 06 13 b5 e0 d1 5f 71 6e a9 99 d7 d2 e1 90 5e 42 3b 94 05 0a 10 c0 00 00 00 00 00 00 00 52 12 01 6d 08 e3 be e5 0f 52 c8 db b5 cc f9 80 95 d2 70 cd 26 4c f9 12 4a 47 6b 42 03 0e 46 d5 87 c7 ea 70 25 5d ee 0e 85 c7 54 44 52 49 00 c0 aa 40 30 00 00 14 80 c0 52 45 bd 5e 94 04 4b 9d c6 d2 88 d9 88 1d 12 80 2a 43 23 00 26 18 6d 28 97 68 f3 01 e1 13 2e da 68 1b 67 2c b0 25 55 22 80 52 03 26 da 04 83 4d 80 55 ca 45 19 d2 b8 2e 00 24 24 30 85 f0 00 76 39 dc b7 Data Ascii: JffC !cUejRR'Hy5Ee+RAlTI%hP cup8[!WZ,p_qn^B;RmRp&LJGkBFp%]TDRI@0RE^KC#&m(h.hg,%U"R&MUE.$$0v9
2024-12-18 16:27:21 UTC	12792	IN	Data Raw: 2a b4 cb 22 b5 43 da 05 01 3b 41 28 02 89 a8 65 13 54 d2 03 41 42 14 b0 dc 03 da 82 05 b8 72 06 32 d9 a4 f7 21 26 de 0b dd 1a 80 42 63 86 09 a6 38 ec 02 96 0a c8 32 13 dc 0a 26 d5 91 42 e8 38 7d 00 95 66 b1 6f bc d0 87 2f 0c cd 37 4f 20 37 26 dd 81 59 3c 82 02 8c ef 49 ca d4 d0 00 ca b9 52 8a 96 4a f4 da 3a 33 50 27 70 d3 90 81 3a a0 28 08 da c2 5a 02 c0 9d c3 90 13 aa 67 3f 25 36 e5 1d 46 7c 8a 51 06 5c 6f 39 36 6d 3c 1c aa 53 86 75 52 1a 08 36 c6 81 94 54 0b 25 52 dd dc a4 d3 14 f7 14 20 2c 08 db d8 25 a0 2c 09 56 43 99 01 80 00 00 86 20 14 48 6c 4b 42 80 09 c8 6e 8d 4a 00 30 b3 cc a3 4a df 71 50 99 0f 8d 6a b0 06 80 65 b9 ac 32 f7 01 40 29 43 03 2e 55 84 5a ac 13 cb f2 9a 20 14 30 43 00 25 d9 11 2a 4b 6d 23 3a d3 3b ac 41 6e b2 4b 6e d8 ae 9d c4 ff 00 Data Ascii: "C;A(eTABr2!&Bc82&B8}fo/7O 7&Y<IRJ:3P'p:(Zg?%6F\|Q\o96m<SuR6T%R ,%,VC HlKBnJ0JqPje2@)C.UZ 0C%Km#:;AnKn
2024-12-18 16:27:21 UTC	16384	IN	Data Raw: 1d 96 0e 9a 71 56 b9 48 c2 98 67 62 d0 05 03 08 02 86 02 09 01 81 0e ea ba b8 33 7c cb a4 b0 36 03 0d d7 b7 6a fe 23 fa 2e df 33 6c 0e 7a d9 bd cd f4 47 2f 1d 5a 6d be a8 df 4a d8 e5 f6 f7 8d c9 e6 b1 a1 05 a7 e8 6f c4 a4 dd 55 61 eb 00 d2 fa 6d d2 5a 97 f0 17 5a 2f 20 ad 5a 4e cd d7 58 d0 ca 7d 3f 11 a7 ea b3 5d bf 52 b7 2b d5 6e 70 d8 0f f7 1b 71 73 3a ce fc 99 69 77 3d 89 fd bf 10 3d 24 d3 49 f7 1d aa b9 16 db 9c 34 e4 75 b4 3d 0e ba 59 5d 6e 5a 01 c9 cb c7 6e 27 9d 3a 33 39 3d 39 95 0d 60 e3 e6 f6 ee 9e aa e6 bf 90 18 0c 85 61 c9 05 a1 91 25 48 15 00 21 c8 17 5e 4b 57 46 6d 5f 71 fd 48 e7 08 03 b5 5a 96 16 d4 b4 39 20 14 d7 46 07 64 d9 0f 7a eb 83 9e bc ed 7c c8 d5 72 52 e5 1a cc 8c cb 67 54 39 b2 03 41 12 af dc 73 25 11 72 11 57 25 10 6b b5 35 91 6d Data Ascii: qVHgb3\|6j#.3lzG/ZmJoUamZZ/ ZNX}?]R+npqs:iw==$I4u=Y]nZn':39=9`a%H!^KWFm_qHZ9 Fdz\|rRgT9As%rW%k5m
2024-12-18 16:27:21 UTC	1024	IN	Data Raw: 72 d6 dc 6d d6 ca 19 ed 73 fb 9e 4e 28 8e a7 91 cf c8 f9 af ba da 91 5e fd 7e 55 e4 8a 13 c6 06 69 93 29 12 52 20 6c 10 30 41 58 7b 84 9c 4e 4c 5d 2a fa 15 ee ed b6 0e 5f ab 38 5d c8 3a 76 57 b0 f6 57 48 33 b7 26 d7 00 b9 51 46 ab 8e 9d 88 fa 34 5a 0b ea 22 97 22 60 72 5f d8 cd a6 ae 24 ef f6 5c 2f 8a 8e af b9 1b ce ae 17 29 f9 80 9e a5 21 31 a2 86 00 00 07 2f ba e4 b7 1d 53 af 78 3a 8f 3f fe c6 ee b4 51 dc 83 af db bb 34 f7 6b 25 f5 39 7f eb b9 6d cb c6 ed 6d 77 3f c9 1d 3d 4a 28 e1 f7 7e e1 f0 de a9 29 dc 77 9e 37 fd 93 7f 52 b1 d0 83 b7 87 96 cf 97 65 94 7a 67 53 ae da 9e 4f fd 7f 25 b9 39 9d ae e5 ed fe 07 ab 6d 40 e4 e6 71 c9 4f 33 b0 e3 e6 ff 00 92 9e 67 60 80 00 02 80 60 00 03 a8 8a a8 13 62 4a b1 20 30 80 6e 01 dc 04 8a 23 71 6a c1 05 b5 24 76 79 Data Ascii: rmsN(^~Ui)R l0AX{NL]*_8]:vWWH3&QF4Z""`r_$\/)!1/Sx:?Q4k%9mmw?=J(~)w7RezgSO%9m@qO3g``bJ 0n#qj$vy
2024-12-18 16:27:21 UTC	16384	IN	Data Raw: b8 6c cf db 3c 35 5c 14 ef b5 cc ee b7 e0 11 c5 25 12 bc 4a 8f 12 29 8c 94 56 40 63 10 01 ad 79 1d 7c 51 d3 c7 ca 9e 87 16 46 07 a0 d2 b6 ba 8a 1a 72 f4 39 6b ca d6 b9 3a 2b c9 d8 a8 d2 af 08 a5 69 26 15 bc 19 2d 3a ea 51 cf c8 e5 b3 39 ca 3a 2d c2 9e 9a 98 39 ab 86 64 5c a3 a7 85 9c 8a c7 57 06 4a 3a 08 e5 58 2d 91 7d 0a 8e 5b 55 3d 4a 56 8c 74 15 b4 25 11 5d 3c 69 32 dd 2a 67 c4 68 ca 85 b1 07 d3 40 c4 03 d8 4b a3 e8 ca 21 b0 a3 65 bb b2 1d 6e 87 24 59 b2 08 8b f5 35 a2 66 4a cf b9 ad 2c e4 0e a5 57 07 3d f9 6e b1 07 53 d0 e2 7c b6 90 26 5f 54 75 70 5b d2 61 f5 1b 3a 78 3e 50 13 e6 4b 0c c3 74 b2 af 78 b4 40 ab 75 d8 0e 7e 76 f6 e0 e5 e1 a3 b5 92 6f a9 d5 ee 2f 2b 43 2f 69 57 bd 3f 30 3a bd cd e0 f2 79 79 5d 9e 89 9e a7 3b 49 67 53 c8 e4 79 c1 1a 8e 6b Data Ascii: l<5\%J)V@cy\|QFr9k:+i&-:Q9:-9d\WJ:X-}[U=JVt%]<i2*gh@K!en$Y5fJ,W=nS\|&_Tup[a:x>PKtx@u~vo/+C/iW?0:yy];IgSyk
2024-12-18 16:27:21 UTC	5640	IN	Data Raw: 9f 4e a2 fa 7e 20 78 75 b5 ab a6 0e be 3f 77 6a e2 d9 47 3c 0e 00 f6 78 f9 3e a2 9a b5 62 dc 3f 99 1e 22 c3 95 a9 d5 4f 79 7a 6b ea 5e 25 1e 82 ac 66 ae 0a de d7 cc 8e 7f ee 68 d4 c3 4d 9b ab 36 a4 0c ef ed f8 b9 b4 c3 f0 39 79 3d 95 ab 9a fa 91 dd 15 b7 98 7a ab a6 7c c0 f1 9d 61 c3 c3 08 3d 9b 3a df 1c 8b ef 30 bf b3 ab cd 1f f0 03 cd 80 68 ae 65 c9 c3 ad 2c d7 75 94 70 bf 78 de 95 20 d6 e7 3d 3f e4 42 bd f9 1e bf 81 bf 1f 1a 50 de a0 7b 1c 2b 01 ee dc 51 f9 15 c3 a1 1e ef e5 88 97 d8 41 e3 6e 7e 07 67 07 b1 b7 2b 9e 57 b6 af a2 d5 af d1 7e 26 fe d7 db 29 dd 74 9b 5f 72 f3 ee cd 3d c7 b9 6d ec e3 7f ea 65 59 1a be 2a d6 bb 28 b6 d7 f3 22 dc 55 f8 9c 37 e6 b2 fd ce 48 af 3f 2f 4b 31 95 d3 a7 7f d2 a1 97 f6 df 55 c2 c2 26 b6 e4 b6 5d b6 d5 19 72 fb 97 78 Data Ascii: N~ xu?wjG<x>b?"Oyzk^%fhM69y=z\|a=:0he,upx =?BP{+QAn~g+W~&)t_r=meY*("U7H?/K1U&]rx
2024-12-18 16:27:21 UTC	16384	IN	Data Raw: b2 d3 8d 10 ab b9 49 db fd b2 75 da 15 f6 aa ba 32 23 8f e9 f5 60 b8 fa 9d bf db 46 96 2a 9e da 75 65 47 06 c6 b2 74 7b 5a b5 74 fc cd 5f b7 d9 97 62 78 16 de 4c 39 40 7a 88 aa 90 8b 45 45 0c 43 41 50 f5 2d 19 b7 92 d3 03 c9 e4 56 df 67 2e 27 b9 2b 76 bb ad 1e 67 47 d1 b5 af 67 84 a4 bf ed 6d dd 04 61 57 69 d6 d1 e6 52 77 dd ab 8f 33 75 ed ae ba a0 fe da f3 32 80 cf 75 e6 77 31 be 4e 4e 96 70 6b f4 2f e0 37 c3 66 b0 97 de 15 cc f9 39 1e 77 38 1e fb ad 2c e0 e8 7c 16 78 49 2f 88 97 b7 b3 5a a8 03 25 cb c8 bf 76 07 f5 b9 35 9c 1a fd 0b ad 12 8f 30 7c 36 d1 55 47 98 19 7d 6e 4e f8 2b eb 72 74 7f 81 57 e2 b4 7a 6b 1f 11 be 2b 46 2b 9f 30 33 7c bc 8f 47 81 fd 5e 5e f8 f2 34 7c 56 8c 56 3e 22 fa 56 e9 5f c4 09 fa dc 93 ae 3c 86 f9 b9 27 5c 79 14 f8 9f 4a f9 e4 Data Ascii: Iu2#`F*ueGt{Zt_bxL9@zEECAP-Vg.'+vgGgmaWiRw3u2uw1NNpk/7f9w8,\|xI/Z%v50\|6UG}nN+rtWzk+F+03\|G^^4\|VV>"V_<'\yJ
2024-12-18 16:27:21 UTC	16384	IN	Data Raw: 40 8a f4 02 69 75 47 9c 8a f7 56 78 14 26 46 d8 b0 15 22 d4 30 19 61 0b 6b 6c 15 21 be e1 45 eb 93 a7 8e d2 dc 81 ca db 3b f8 be 54 61 6e 4a 1d 3c 71 b5 46 81 4c 56 f9 58 d8 ac f0 ca 39 f8 7e 63 a8 e5 e1 d4 ea 24 09 90 cb 64 30 34 5a 00 2d 00 a2 5a 1a 10 d3 03 8f 97 e6 3a e9 a2 39 39 63 71 d7 4d 11 91 9d cc 8d ae 63 25 0e 60 ad dd c8 02 0d 13 4c 1f 1d 5b 98 39 af 84 1c 76 6b 46 51 7c 9c 2e 3d 3a 99 ba b5 e0 cd ab cd 3a a0 98 b4 bd 08 39 f9 5f a4 c6 87 75 ef 5f 3f 23 17 b5 e9 81 8b ad 68 71 72 f3 5f 82 f3 5d 19 d5 57 03 6a b6 d5 48 c4 d6 14 f7 17 e5 72 92 93 a3 8f 93 9e d8 69 57 cf f9 1a d5 ad 06 ec 96 a5 0e ae f1 ea 84 fc 0a 93 27 c8 bc c8 77 7d 80 de 49 b5 95 75 c1 84 59 ea f0 42 e1 5b a6 00 d1 fb ae 3e 8f 74 76 33 af b9 fa 8a 6a be f1 ae 34 b4 51 21 f4 Data Ascii: @iuGVx&F"0akl!E;TanJ<qFLVX9~c$d04Z-Z:99cqMc%`L[9vkFQ\|.=::9_u_?#hqr_]WjHriW'w}IuYB[>tv3j4Q!
2024-12-18 16:27:21 UTC	1024	IN	Data Raw: c7 74 fd 17 d4 e5 e4 e1 dd c6 ea 9a 9e 2b 7f ed b1 99 c5 c6 d8 5e b4 4f 45 f7 95 4e 3a b7 88 f2 9f e2 16 f6 f6 75 4d 29 21 f1 da ba a8 34 de 3d ab 55 3a a5 95 3c 7f 94 1e 6f 2f 15 a6 69 9f f4 9d dc 56 76 a5 3b ed b2 fb 91 c1 cb c8 e5 4a 9f 1d 18 24 b8 9f a8 f4 e4 5b d7 f9 b5 fb cc df 0f 15 be 5b 6c 7d ac 74 fd 45 6c 37 3e 16 ff 00 f2 46 76 e2 af 8d 7e 12 be f2 a5 91 93 f6 57 59 ab 57 5e 06 7f da 73 7f 4b 37 5c 36 7f 27 e0 c3 e9 72 ff 00 9b ef 09 f5 73 ff 00 65 cd fd 2c f4 bd b7 1d d7 1a 4d 39 58 39 1f 17 2a fe af bc eb f6 9f 52 a9 d1 ca ea b2 73 f5 d2 63 5f 77 c1 7b 6d b5 6b e6 72 d7 da 72 3f 53 8a af 16 7a 17 ad b9 28 eb 39 5a 64 f3 b6 3e bf a9 b9 78 6f cf e1 de f8 a8 af 79 f5 3b d1 5a 3a 60 e7 56 b4 26 bd 29 34 e2 a6 f4 e5 ac d2 f6 7a 55 d6 c9 7e 7e 46 Data Ascii: t+^OEN:uM)!4=U:<o/iVv;J$[[l}tEl7>Fv~WYW^sK7\6'rse,M9X9*Rsc_w{mkrr?Sz(9Zd>xoy;Z:`V&)4zU~~F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49758	205.139.111.12	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:20 UTC	2606	OUT	GET /r/YpOM7pCWvoiPsSICDZG1j71htAimSZkgBwJzwANTosdjyefv0w5zQtnpCMRVqwZvjRJ4dYAyqvAjBwzWlIsQapEYuqCQEoqKk8oAT0UUh_2NWHg-kogRYn59CB-BORxsgy2hZbuja15mdsZ5JmJBySzDGB0sOvRPgvx5b2QeG8wDrGdpX7RIFxmShKyflcltDQU2-WwpqqUQAl1UNjUEpP6dd_7oyBbZOOI8wJDhS-9k9y7N0QRWXBto2SIDJwhHUIZPjtzf1IByBno_8H6xMgPNqNYEbcukWPLwPHaWPrp716XRabjG8poabf3M6cCVfMIzQ1LFCWmvARNpAMZbjW9x3LpYWiYs5KWRmhSVF6kfpk8Fp-7o3ofa_lPh991Qg9bPfoBUapD1RSjNf_WpXJpIXIUrEDwKDKBcRaQvKFPjGzYkvidIq9zCFXK-HH_JNi9dRKhDB_nFZJvFXMjczzskyN4z1_ezQJCl6eu9gk4rMM3kORxQkxl_3LzE80eDlo0gnry4_E9Qrpxg1bLaIj0RUEQRmFIB_fiKngNUVmKR5DVBRJ9EeLm-CMDo6QmBolVtNaj8K7YaBH_AbB3u2adqxHZXi9Oh9q6LRoG0ad6RcNQ12CkkrMUQZ9It3MgkF-LXo-lZltNl2P6vfmeITo6OJuVXRuAuE4oy3JTpt_Ub9PIQi85OQbD3nVUdRgFYoEb5QyDRVjfGITrMe-hzE8D3Q9zYM-Ix9Cc0kgCL3tqbBBOo2Fg7hzAij5_DRA9nvh7z06QZW8CjfF-iHIqmVBx3mtVwwGoazUWw62WidTaB8Ur4bCIM8SRWAVFwQv0ssleNVFxkWZkc403y0vv_yqho05Ky0KZ9-Lkbb-lBTCveBUaYfhf7pH49TNgw5lOVp1SmAcWKkPy2ABx4AplUHJZgqjbOh7TKbPaU68UhWE10Ol_On_gCHQvn6PMmho-hlRGrjmaqfYEz_fKKynOrL5tKfzEOIZdiq99AwB0NKo202RzF7PGNx33AK [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:21 UTC	683	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 18 Dec 2024 16:27:21 GMT Content-Length: 0 Connection: close Location: https://security-us.m.mimecastprotect.com/ttpwp?tkn=3.05NEOq_FZz8JG2UJ5NcRs7jv_0RGttkOMuqbwO-p3sZZuDAWSDuMFcTk3AJSo_8oS76qccDhATEDw9iVRPcP_X053DPXAWDS599zCK42xuxqk6JtRn3eoC0c3SvU2sARvFxDB16ej19TwXnB5tVpuAiOs9K26PBoYxA_ifnKQeM1WMm4aa5K8Nl1iIS5U7Ys.JHWqaHYtGzhcy1t8LjIwQw#/checking?key=ncWhqPpsY5TW9oMYuzvbBf-yI5o-mBLx1FLyb2SljUPw8ueU0XyUBCc2VMIcBJV-WHqFUEIoNibn6CiCJuTP2mcdoJ59cGMLjrRxBhG3C3GVBXdkTLW2OX2-tpbT4wn9 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49760	170.10.128.87	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:22 UTC	724	OUT	GET /ttpwp?tkn=3.QPUhO4roRlgb7fpIU0_GeT7CX6WetwZlBUek-DVUkDpHhu0tVUOmZpMaqvNrFAvocCuBvJY4L31wcAWxMO_SGlq2cdXOIQSlZLGKfMNL-V86hZCxMzEVjiLXn88vFzUsZ_I2H6fqx2qVa7xA52os8YY7WbGj2g2DszdlYx5s16ky8UadYWXdwElykIYaDbWR.HoGJ2DYIaj1q7hallP8cAQ HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:22 UTC	435	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5889 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"1701-2sDzinKqhyrkMh5qPZunsC7MUFw" Vary: Accept-Encoding
2024-12-18 16:27:22 UTC	5889	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49765	170.10.128.87	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:23 UTC	724	OUT	GET /ttpwp?tkn=3.05NEOq_FZz8JG2UJ5NcRs7jv_0RGttkOMuqbwO-p3sZZuDAWSDuMFcTk3AJSo_8oS76qccDhATEDw9iVRPcP_X053DPXAWDS599zCK42xuxqk6JtRn3eoC0c3SvU2sARvFxDB16ej19TwXnB5tVpuAiOs9K26PBoYxA_ifnKQeM1WMm4aa5K8Nl1iIS5U7Ys.JHWqaHYtGzhcy1t8LjIwQw HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:24 UTC	434	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"d77-JdL/eOsS7z2yo5B+jSzjnBxVBdk" Vary: Accept-Encoding
2024-12-18 16:27:24 UTC	3447	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49767	170.10.128.87	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:24 UTC	584	OUT	GET /ttpwp?tkn=3.QPUhO4roRlgb7fpIU0_GeT7CX6WetwZlBUek-DVUkDpHhu0tVUOmZpMaqvNrFAvocCuBvJY4L31wcAWxMO_SGlq2cdXOIQSlZLGKfMNL-V86hZCxMzEVjiLXn88vFzUsZ_I2H6fqx2qVa7xA52os8YY7WbGj2g2DszdlYx5s16ky8UadYWXdwElykIYaDbWR.HoGJ2DYIaj1q7hallP8cAQ HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:24 UTC	434	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"d77-JdL/eOsS7z2yo5B+jSzjnBxVBdk" Vary: Accept-Encoding
2024-12-18 16:27:24 UTC	3447	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49773	170.10.128.87	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:26 UTC	584	OUT	GET /ttpwp?tkn=3.05NEOq_FZz8JG2UJ5NcRs7jv_0RGttkOMuqbwO-p3sZZuDAWSDuMFcTk3AJSo_8oS76qccDhATEDw9iVRPcP_X053DPXAWDS599zCK42xuxqk6JtRn3eoC0c3SvU2sARvFxDB16ej19TwXnB5tVpuAiOs9K26PBoYxA_ifnKQeM1WMm4aa5K8Nl1iIS5U7Ys.JHWqaHYtGzhcy1t8LjIwQw HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:26 UTC	435	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5889 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"1701-V/+IDUla+4dsnJLQtC6O3KxPHwY" Vary: Accept-Encoding
2024-12-18 16:27:26 UTC	5889	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49788	205.139.111.12	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:30 UTC	739	OUT	GET /s/Uz_dCKrV4juqWzMNWhGuNI5ydF7?domain=res.cisco.com&localeUI=en HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:31 UTC	2371	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 18 Dec 2024 16:27:31 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/75nk7YcvaV5r09RrnlBuq7OyyESSVMPL-rZJJkww-odA-QRlRJhAHLsrOLtpqMk-GDejcSEMRxn0_Bz_dzSdBMEqZOpM4dyqfCu-ouzRuW0YF04IXQqMqwID-fmXQ_EkzcVkVN5qQEqRwiFD1M_bjRUK5CLZrsAsbl2yl8IgjUgDrGdpX7RIFxmShKyflcltDQU2-WwpqqUQAl1UNjUEpM9G--PtVFVWTXGAwDLlph8MpzPcJm6mYHt68eyg830Y5gMA_eFgBvXtRw13K-JStz6fk4PkohIW_csIQ3b3QqYJEsDyse1y3Xrw1JgZLGvWhWja88ULvCH5kvDgLQnR20jcVoy6y9t5jJOv2UVOK10JA_Y0w3mJTvG118GRm72pRtllFG83Z3izM89dYiMtq54hEC7h43MYXcRBggiuTpJot-bile0U5S4xZyueDjFslceLVoPjl4dSgt9M1rMsvGBY8lCQupftQhOJfqd7JxRMGvn1vSQUfSw7RQrBf-4wQM86XWLw8ZpYnmUJJ7D1LC1gPs7jzc3awQyEHYdZHeaDuhr3Llv_7xJs6VPBcb557mBYLjY6g7bRzg18qtawjVUvjwIYrkrMmc4Ws3qmza6RcNQ12CkkrMUQZ9It3MgkxHGqJcuKRO9lKWE6xuftdI6OJuVXRuAuE4oy3JTpt_Ub9PIQi85OQbD3nVUdRgFYg8jYnutXp2z84UrUcYnwvz6azFruaM2bNE9DmOimSDG2-_egbeier95CsqrGBdsbTxeRrDyJXjnNlNsmOJ9pWMmjEUMA6AZmYOOoAi_cFC7aJaroGmBOeVUS27udWQ2-xQmJOICfO8ubgEelmGppIA4caxp0z38-l-lcqU1UmPQoEpkS8y36hGdv3e_vH7EEpx_B-N65eNqToNK1jrAMeRF-RRVtHJ4bNdmkQExMxmqTl6jMWv_UkOtxj9Vma2FDaC8CfDA8ng-S8J5 [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49787	205.139.111.12	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:31 UTC	2813	OUT	GET /r/75nk7YcvaV5r09RrnlBuq7OyyESSVMPL-rZJJkww-odA-QRlRJhAHLsrOLtpqMk-GDejcSEMRxn0_Bz_dzSdBMEqZOpM4dyqfCu-ouzRuW0YF04IXQqMqwID-fmXQ_EkzcVkVN5qQEqRwiFD1M_bjRUK5CLZrsAsbl2yl8IgjUgDrGdpX7RIFxmShKyflcltDQU2-WwpqqUQAl1UNjUEpM9G--PtVFVWTXGAwDLlph8MpzPcJm6mYHt68eyg830Y5gMA_eFgBvXtRw13K-JStz6fk4PkohIW_csIQ3b3QqYJEsDyse1y3Xrw1JgZLGvWhWja88ULvCH5kvDgLQnR20jcVoy6y9t5jJOv2UVOK10JA_Y0w3mJTvG118GRm72pRtllFG83Z3izM89dYiMtq54hEC7h43MYXcRBggiuTpJot-bile0U5S4xZyueDjFslceLVoPjl4dSgt9M1rMsvGBY8lCQupftQhOJfqd7JxRMGvn1vSQUfSw7RQrBf-4wQM86XWLw8ZpYnmUJJ7D1LC1gPs7jzc3awQyEHYdZHeaDuhr3Llv_7xJs6VPBcb557mBYLjY6g7bRzg18qtawjVUvjwIYrkrMmc4Ws3qmza6RcNQ12CkkrMUQZ9It3MgkxHGqJcuKRO9lKWE6xuftdI6OJuVXRuAuE4oy3JTpt_Ub9PIQi85OQbD3nVUdRgFYg8jYnutXp2z84UrUcYnwvz6azFruaM2bNE9DmOimSDG2-_egbeier95CsqrGBdsbTxeRrDyJXjnNlNsmOJ9pWMmjEUMA6AZmYOOoAi_cFC7aJaroGmBOeVUS27udWQ2-xQmJOICfO8ubgEelmGppIA4caxp0z38-l-lcqU1UmPQoEpkS8y36hGdv3e_vH7EEpx_B-N65eNqToNK1jrAMeRF-RRVtHJ4bNdmkQExMxmqTl6jMWv_UkOtxj9Vma2FDaC8CfDA8ng-S8J5bB9oOCbebqTxvFkIBJ74DoEyrkL6nsLyADdSxdtnaz [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:32 UTC	328	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 18 Dec 2024 16:27:32 GMT Content-Length: 0 Connection: close Location: https://res.cisco.com:443/websafe/help?topic=AddrNotShown Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49795	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:31 UTC	722	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=5la8OC7Myb7ikEVCyKujskatHmOTj3yT6Vt5IzP/SH4TGk1EZaSdcZ4RHsfgZ4sMLgZMm/9vuR7emr4kfF6+N5BFlW4GnXqyiwn0h59KQvXar5anaJQV3PhSX6X0
2024-12-18 16:29:17 UTC	750	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:29:17 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=KR0dO1xChQWXW3+blCLyb8sdSwOGwkn7Z/rAAV6OuCFge9KmjoXVxEUestO79QKR3BLcFf8vNpBO8xS6UTXW8bR+zJpOtw/0uO0QzcU1zFV7JgeB2dDGYWG/BIFB; Expires=Wed, 25 Dec 2024 16:27:32 GMT; Path=/ Set-Cookie: AWSALBCORS=KR0dO1xChQWXW3+blCLyb8sdSwOGwkn7Z/rAAV6OuCFge9KmjoXVxEUestO79QKR3BLcFf8vNpBO8xS6UTXW8bR+zJpOtw/0uO0QzcU1zFV7JgeB2dDGYWG/BIFB; Expires=Wed, 25 Dec 2024 16:27:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-18 16:29:17 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-12-18 16:29:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49796	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:32 UTC	718	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=wr62FUSyhSABLBgmpxqyeDo4nNbhfR58VSTImvJQV0DKgBwdIzZTWBrt5i9+4u+era580x4iqEyLAUL459njcy4spNzPohXcMuRpy/mqBw+eU3DyLVKJTV40zjTU
2024-12-18 16:29:17 UTC	750	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:29:17 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=sN1tYIgzWD7IW6vuNIsFtjs3rLqdWHqS+IT8ZTSgH204KBexVtZfYJf7PK91lVERHw5KhXOOb7O2AV8og3RX2BnanBBL/0b36vUPHbLAPrxrLNnd5QUqGmDHvE4Z; Expires=Wed, 25 Dec 2024 16:27:32 GMT; Path=/ Set-Cookie: AWSALBCORS=sN1tYIgzWD7IW6vuNIsFtjs3rLqdWHqS+IT8ZTSgH204KBexVtZfYJf7PK91lVERHw5KhXOOb7O2AV8og3RX2BnanBBL/0b36vUPHbLAPrxrLNnd5QUqGmDHvE4Z; Expires=Wed, 25 Dec 2024 16:27:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Server: unknown
2024-12-18 16:29:17 UTC	205	IN	Data Raw: 63 37 0d 0a 47 49 46 38 39 61 82 00 1e 00 f0 00 00 00 81 bf ff ff ff 2c 00 00 00 00 82 00 1e 00 40 08 a6 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 17 06 08 50 70 e3 40 8f 02 41 8a e4 98 b1 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 95 20 3f 72 9c 39 33 e4 46 92 00 3c e2 7c c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 2f de bc 99 b4 a9 d2 a5 36 65 4a cd 49 32 a6 d3 a3 4b 75 e2 b4 0a 35 ea d5 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ed 50 ab 6e c1 c2 65 4a b5 aa 5d 9b 3b e3 9e 9c bb b5 af 57 b8 7a 4d f2 9d 4a f5 6f de c0 88 13 2b 5e cc b8 b1 e3 c7 90 cf 06 04 00 3b 0d 0a Data Ascii: c7GIF89a,@H*\#JHPp@A(S\ ?r93F<\|@JH/6eJI2Ku5`Kh]PneJ];WzMJo+^;
2024-12-18 16:29:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49803	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:34 UTC	1016	OUT	GET /websafe/help?topic=AddrNotShown HTTP/1.1 Host: res.cisco.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=8c+055AmocWj/fTI7swFU0tJ7XH3a4GHQn6e/79rPBxRxYpCt5oEmlx5CSefSzkHAC8jeRp+KsIYc/FblMxH2NP7m5PtzbQk3f5lfFaLAD3BvCY9Z2zSb0xiuCn6; AWSALBCORS=wr62FUSyhSABLBgmpxqyeDo4nNbhfR58VSTImvJQV0DKgBwdIzZTWBrt5i9+4u+era580x4iqEyLAUL459njcy4spNzPohXcMuRpy/mqBw+eU3DyLVKJTV40zjTU
2024-12-18 16:27:34 UTC	906	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:34 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 10496 Connection: close Set-Cookie: AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; Expires=Wed, 25 Dec 2024 16:27:34 GMT; Path=/ Set-Cookie: AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; Expires=Wed, 25 Dec 2024 16:27:34 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Language: en Server: unknown
2024-12-18 16:27:34 UTC	8524	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0a 20 20 20 20 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 0d 0a 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en"> <head> <title>Help</title> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> <
2024-12-18 16:27:34 UTC	1972	IN	Data Raw: 65 6e 64 20 79 6f 75 20 61 20 70 61 73 73 77 6f 72 64 2d 70 72 6f 74 65 63 74 65 64 20 73 65 63 75 72 65 20 6d 65 73 73 61 67 65 20 61 64 64 72 65 73 73 65 64 20 6f 6e 6c 79 20 74 6f 20 79 6f 75 2e 20 54 68 69 73 20 77 69 6c 6c 20 67 75 69 64 65 20 79 6f 75 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 20 41 66 74 65 72 20 79 6f 75 20 68 61 76 65 20 72 65 67 69 73 74 65 72 65 64 2c 20 79 6f 75 20 63 61 6e 20 6f 70 65 6e 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 6d 65 73 73 61 67 65 20 75 73 69 6e 67 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 0d 0a 20 20 20 20 3c 2f 70 3e 0d 0a 0d 0a 3c 2f 64 69 76 3e 0d 0a 0a 09 20 20 20 20 20 20 0a 0a 09 20 20 20 20 3c 2f 64 69 76 3e 0a 09 20 20 3c 2f 64 69 76 3e Data Ascii: end you a password-protected secure message addressed only to you. This will guide you through the registration process. After you have registered, you can open the original message using your password. </p></div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49813	104.17.24.14	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:36 UTC	561	OUT	GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:36 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-520c" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 492993 Expires: Mon, 08 Dec 2025 16:27:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gJ01xa8xd3SYmf37XLFVIfyvEFbNfV6scrBr6HcqIyx8IYron7qRV75zgi7VYtr0fF4D5ZOgVW9IzeCJbQhnRLIEDBQtUPTMmkQadVxp2G1dN1paj0Xs7cEYc0tz0FU0Y9tQ2Xwu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f4085712a2c4368-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 16:27:36 UTC	417	IN	Data Raw: 35 32 30 63 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 39 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 520c/* Copyright (C) Federico Zivolo 2019 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6e 3d 6f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6e 5b 74 5d 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 Data Ascii: ype)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocu
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 69 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 Data Ascii: d 0!==arguments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|i;return r[o]}return e[o]}function f(e,t){var o=2<arguments.length
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 64 2c 68 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 61 3b 69 66 28 66 7c 7c 68 29 7b 76 61 72 20 75 3d 74 28 65 29 3b 66 2d 3d 6d 28 75 2c 27 78 27 29 2c 68 2d 3d 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 29 2c 73 3d 27 48 54 4d 4c 27 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 75 28 65 29 2c 61 3d 75 28 6f 29 2c 6c 3d 6e 28 65 29 2c 6d 3d 74 28 6f 29 2c 68 3d 70 61 72 Data Ascii: e.offsetWidth-d,h=e.offsetHeight-a;if(f\|\|h){var u=t(e);f-=m(u,'x'),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTML'===o.nodeName,d=u(e),a=u(o),l=n(e),m=t(o),h=par
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 34 5d 2c 73 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 2c 64 3d 70 3f 45 28 65 29 3a 61 28 65 2c 74 29 3b 69 66 28 27 76 69 65 77 70 6f 72 74 27 3d 3d 3d 72 29 73 3d 77 28 64 2c 70 29 3b 65 6c 73 65 7b 76 61 72 20 6c 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 72 3f 28 6c 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 6f 77 27 3d 3d 3d 72 3f 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 6c 3d 72 3b 76 61 72 20 66 3d Data Ascii: h&&void 0!==arguments[4]&&arguments[4],s={top:0,left:0},d=p?E(e):a(e,t);if('viewport'===r)s=w(d,p);else{var l;'scrollParent'===r?(l=n(o(t)),'BODY'===l.nodeName&&(l=e.ownerDocument.documentElement)):'window'===r?l=e.ownerDocument.documentElement:l=r;var f=
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 64 65 66 61 75 6c 74 56 69 65 77 2c 6f 3d 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 54 6f 70 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 7c 7c 30 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 4c 65 66 74 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 52 69 67 68 74 7c 7c 30 29 2c 72 3d 7b 77 69 64 74 68 3a 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 69 2c 68 65 69 67 68 74 3a 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2b 6e 7d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 7b 6c 65 66 74 3a 27 72 69 67 68 74 27 2c 72 69 67 68 74 3a 27 6c Data Ascii: defaultView,o=t.getComputedStyle(e),n=parseFloat(o.marginTop\|\|0)+parseFloat(o.marginBottom\|\|0),i=parseFloat(o.marginLeft\|\|0)+parseFloat(o.marginRight\|\|0),r={width:e.offsetWidth+i,height:e.offsetHeight+n};return r}function T(e){var t={left:'right',right:'l
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 6e 74 3d 4f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 64 69 6e 67 29 2c 65 2e 6f 72 69 67 69 6e 61 6c 50 6c 61 63 65 6d 65 6e 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 44 28 74 68 69 Data Ascii: nt=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.padding),e.originalPlacement=e.placement,e.positionFixed=this.options.positionFixed,e.offsets.popper=D(thi
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 72 2c 27 73 63 72 6f 6c 6c 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 6f 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 29 2c 6f 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 72 2c 6f 2e 65 76 65 6e 74 73 45 6e 61 Data Ascii: ventListener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scroll',o.updateBound,o.scrollParents),o.scrollElement=r,o.eventsEna
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 74 74 6f 6d 3a 6d 28 6e 2e 62 6f 74 74 6f 6d 29 2c 72 69 67 68 74 3a 66 28 6e 2e 72 69 67 68 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 43 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 69 3d 21 21 6e 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 6e 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 69 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 Data Ascii: ttom:m(n.bottom),right:f(n.right)}}function K(e,t,o){var n=C(e,function(e){var o=e.name;return o===t}),i=!!n&&e.some(function(e){return e.name===o&&e.enabled&&e.order<n.order});if(!i){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+'
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 28 31 3d 3d 3d 6e 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 28 65 2c 69 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 Data Ascii: .map(function(e,n){var i=(1===n?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return _(e,i,t,o)})}),a.for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49815	104.18.10.207	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:36 UTC	571	OUT	GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:36 UTC	953	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:36 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"a15c2ac3234aa8f6064ef9c1f7383c37" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 20:56:12 CDN-EdgeStorageId: 1068 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: c36f8b66dc0fef70c80032c5e92e388d CDN-Cache: HIT CF-Cache-Status: HIT Age: 1665509 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f4085712efac3ff-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 16:27:36 UTC	416	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7bf9/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 Data Ascii: ray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 Data Ascii: ine dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e Data Ascii: :focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:n
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d Data Ascii: ry{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 65 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 Data Ascii: e-img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2r
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 Data Ascii: 10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-s
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 Data Ascii: s-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;ord
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c Data Ascii: dth:33.333333%}.col-sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;fl
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 73 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 Data Ascii: sm-7{margin-left:58.333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49808	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:36 UTC	910	OUT	GET /websafe/templates/css/postx.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/help?topic=AddrNotShown Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
2024-12-18 16:27:36 UTC	882	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:36 GMT Content-Type: text/css Content-Length: 122633 Connection: close Set-Cookie: AWSALB=4MD4qQMocF8UVXxVhwIuZDTVjbTRrkoofZJtUFR3TwVZ22I79kMBaCeSq90nl/HYJVTfKs4mEMSAPTrI5oeoGu7zx+KY58sykrNW0yj3kJ+sdTZiOBRlTarbowG5; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/ Set-Cookie: AWSALBCORS=4MD4qQMocF8UVXxVhwIuZDTVjbTRrkoofZJtUFR3TwVZ22I79kMBaCeSq90nl/HYJVTfKs4mEMSAPTrI5oeoGu7zx+KY58sykrNW0yj3kJ+sdTZiOBRlTarbowG5; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:09 GMT ETag: "19373981900-1df09" Server: unknown
2024-12-18 16:27:36 UTC	8548	IN	Data Raw: 2f 2a 20 47 65 6e 65 72 61 6c 20 73 74 79 6c 65 73 20 2a 2f 0a 2f 2a 20 24 49 64 3a 20 70 6f 73 74 78 2e 63 73 73 2c 76 20 31 2e 31 30 34 20 32 30 31 36 2d 30 33 2d 31 30 20 31 31 3a 33 36 3a 31 32 20 69 67 69 74 73 6b 61 69 20 45 78 70 20 24 20 2a 2f 0a 40 6d 65 64 69 61 20 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 20 61 63 74 69 76 65 29 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 6c 69 67 68 74 29 20 7b 0a 20 20 2e 68 65 61 64 65 72 69 63 6f 6e 73 20 7b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 62 72 69 67 68 74 6e 65 73 73 28 30 29 20 73 61 74 75 72 61 74 65 28 31 30 30 25 29 3b 0a 20 20 7d 0a 20 20 23 6c 6f 63 61 6c 65 55 49 20 7b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 69 6e 76 65 72 74 28 31 29 3b 0a 20 20 7d Data Ascii: /* General styles // $Id: postx.css,v 1.104 2016-03-10 11:36:12 igitskai Exp $ */@media (forced-colors: active) and (prefers-color-scheme: light) { .headericons { filter: brightness(0) saturate(100%); } #localeUI { filter: invert(1); }
2024-12-18 16:27:36 UTC	9000	IN	Data Raw: 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 65 73 20 72 65 6c 61 74 65 64 20 74 6f 20 74 68 65 20 73 65 63 75 72 65 20 72 65 70 6c 79 20 70 61 6e 65 6c 20 2a 2f 0a 0a 23 73 65 63 52 65 70 6c 79 50 61 6e 65 6c 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 37 25 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 23 73 65 63 52 65 70 6c 79 50 61 6e 65 6c 43 6f 6e 74 65 6e 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 36 37 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 Data Ascii: ;}/* Styles related to the secure reply panel */#secReplyPanelContainer { text-align: center; height: 77%; display: table; width: 100%;}#secReplyPanelContent { width: 670px; margin: auto; position: relative; border-left: 1px solid
2024-12-18 16:27:36 UTC	9000	IN	Data Raw: 66 61 75 6c 74 54 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 36 34 63 35 34 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 72 65 2e 64 65 66 61 75 6c 74 54 65 78 74 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 49 6e 74 65 72 3b 0a 7d 0a 0a 70 72 65 2e 77 72 61 70 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 70 72 65 2d 77 72 61 70 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 2d 6d 6f 7a 2d 70 72 65 2d 77 72 61 70 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 2d 70 72 65 2d 77 72 61 70 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 2d 6f 2d 70 72 65 2d 77 Data Ascii: faultText { color: #464c54; font-size: 14px; font-family: "Inter"; line-height: 20px;}pre.defaultText { font-family: Inter;}pre.wrap { white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-w
2024-12-18 16:27:36 UTC	9000	IN	Data Raw: 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 49 63 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 54 65 78 74 2c 0a 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 54 65 78 74 49 6d 70 6f 72 74 61 6e 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 33 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 74 3b 0a 7d 0a 0a 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 54 65 78 74 49 6d 70 6f 72 74 61 6e 74 20 7b 0a 20 Data Ascii: 55555; font-size: 9pt; font-weight: bold;}.messageHeaderIcon { text-align: center;}.messageHeaderText,.messageHeaderTextImportant { padding: 2px 3px; text-align: left; color: #555555; font-size: 9pt;}.messageHeaderTextImportant {
2024-12-18 16:27:36 UTC	9000	IN	Data Raw: 20 7d 0a 20 20 2e 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 20 2e 66 6f 72 6d 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 2c 0a 20 20 2e 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 20 2e 66 6f 72 6d 52 65 71 75 69 72 65 64 49 6e 70 75 74 4c 61 62 65 6c 43 65 6c 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 33 35 70 78 3b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 30 70 78 3b 0a 20 20 7d 0a 7d 0a 23 70 73 77 64 5f 64 65 73 63 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 37 66 37 66 38 36 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 7d 0a 2e 6d 6c 33 70 2e 6d 62 31 70 20 7b 0a 20 20 68 65 Data Ascii: } .changepassword .formInputLabelCell, .changepassword .formRequiredInputLabelCell { padding: 2px 35px; min-width: 100px; }}#pswd_desc { color: #7f7f86; font-family: "Inter"; font-size: 12px; line-height: 16px;}.ml3p.mb1p { he
2024-12-18 16:27:37 UTC	16384	IN	Data Raw: 0a 20 20 23 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 20 2e 66 6f 72 6d 49 6e 70 75 74 43 65 6c 6c 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 7d 0a 0a 20 20 23 63 75 72 72 65 6e 74 50 61 73 73 77 6f 72 64 54 61 62 6c 65 20 74 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 7d 0a 0a 20 20 74 61 62 6c 65 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 0a 20 20 23 65 64 69 74 51 75 65 73 74 69 6f 6e 73 54 61 62 6c 65 20 74 64 20 7b 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 7d 0a 0a 20 20 2e 63 61 6c 49 6d 67 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 25 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 Data Ascii: #changepassword .formInputCell { width: 90%; } #currentPasswordTable tr { display: block; } table { width: auto; } #editQuestionsTable td { white-space: normal; } .calImg { margin-left: 10%; }}@media screen
2024-12-18 16:27:37 UTC	16384	IN	Data Raw: 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 73 74 61 74 75 73 2d 77 61 72 6e 69 6e 67 2d 73 74 72 6f 6e 67 3a 20 72 67 62 61 28 31 37 33 2c 20 31 32 32 2c 20 33 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 73 74 61 74 75 73 2d 70 6f 73 69 74 69 76 65 2d 73 74 72 6f 6e 67 3a 20 72 67 62 61 28 35 35 2c 20 31 32 32 2c 20 32 35 2c 20 31 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 64 69 73 61 62 6c 65 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 68 6f 76 65 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 74 72 6f Data Ascii: --color-status-warning-strong: rgba(173, 122, 3, 1); --color-status-positive-strong: rgba(55, 122, 25, 1); --color-danger-border-strong-disabled: rgba(0, 0, 0, 0); --color-danger-border-strong-hover: rgba(0, 0, 0, 0); --color-danger-border-stro
2024-12-18 16:27:37 UTC	3232	IN	Data Raw: 6d 64 73 2d 62 75 74 74 6f 6e 2e 6d 64 73 2d 62 75 74 74 6f 6e 2d 6c 6f 61 64 69 6e 67 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 2c 0a 2e 6d 64 73 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 64 69 73 61 62 6c 65 64 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 73 61 62 6c 65 64 29 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 6f 72 Data Ascii: mds-button.mds-button-loading,.mds-button:disabled,.mds-button[disabled] { cursor: not-allowed; color: var(--mds-button-color-text-disabled); background-color: var(--mds-button-color-background-disabled); border-color: var(--mds-button-color-bor
2024-12-18 16:27:37 UTC	13152	IN	Data Raw: 65 64 3a 20 76 61 72 28 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 74 72 6f 6e 67 2d 64 69 73 61 62 6c 65 64 0a 20 20 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 6f 76 65 72 3a 20 76 61 72 28 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 74 72 6f 6e 67 2d 68 6f 76 65 72 0a 20 20 29 3b 0a 20 20 2d 2d 6d 64 73 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 73 Data Ascii: ed: var( --color-danger-border-strong-disabled ); --mds-button-color-background: var(--color-danger-background-strong); --mds-button-color-background-hover: var( --color-danger-background-strong-hover ); --mds-button-color-background-dis
2024-12-18 16:27:37 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 2d 61 64 6d 69 6e 0a 20 20 29 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 32 34 2c 20 38 38 2c 20 36 37 2c 20 31 29 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 73 74 61 74 75 73 2d 6e 65 67 61 74 69 76 65 29 3b 0a 7d 0a 2e 6d 64 73 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 6d 64 73 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 2e 6d 64 73 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 61 72 6e 69 6e 67 3a 6e 6f 74 28 0a 20 20 20 20 2e 6d 64 73 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 61 64 6d 69 6e 0a 20 20 29 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 31 37 2c 20 31 37 38 2c Data Ascii: ation-admin ) { border-left-color: rgba(224, 88, 67, 1); border-left-color: var(--color-status-negative);}.mds-notification.mds-notification-banner.mds-notification-warning:not( .mds-notification-admin ) { border-left-color: rgba(217, 178,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49809	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:36 UTC	915	OUT	GET /websafe/templates/css/customHelp.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/help?topic=AddrNotShown Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
2024-12-18 16:27:36 UTC	878	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:36 GMT Content-Type: text/css Content-Length: 3410 Connection: close Set-Cookie: AWSALB=hIEcpGg7nMkjgSZjBNd/P9876ajxJpPKamFTH77YWvNNE9Y+XBv1uaGUWbHF4sVMPe2sIrTwEs3UuNJpb3WzEUj4wsdHUu6nUF+8XWpAfuc9fYLHGz9+GPM4lsg7; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/ Set-Cookie: AWSALBCORS=hIEcpGg7nMkjgSZjBNd/P9876ajxJpPKamFTH77YWvNNE9Y+XBv1uaGUWbHF4sVMPe2sIrTwEs3UuNJpb3WzEUj4wsdHUu6nUF+8XWpAfuc9fYLHGz9+GPM4lsg7; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:09 GMT ETag: "19373981900-d52" Server: unknown
2024-12-18 16:27:36 UTC	3410	IN	Data Raw: 2e 73 75 70 70 6f 72 74 54 61 62 6c 65 45 6e 74 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 31 35 70 78 20 31 30 70 78 20 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 43 69 73 63 6f 53 61 6e 73 2c 20 43 69 73 63 6f 53 61 6e 73 54 54 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 61 34 61 34 64 3b 0a 7d 0a 2e 63 6f 70 79 72 69 67 68 74 4c 69 6e 6b 73 20 61 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c Data Ascii: .supportTableEntry { color: #555555; font-size: 13px; font-weight: normal; padding: 2px 15px 10px 8px; font-size: 14px; font-family: CiscoSans, CiscoSansTT; color: #4a4a4d;}.copyrightLinks a { font-family: "Inter" !important; font-styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49811	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:36 UTC	859	OUT	GET /admin/cisco-fonts.min.css HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://res.cisco.com/websafe/help?topic=AddrNotShown Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
2024-12-18 16:27:36 UTC	740	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:36 GMT Content-Type: text/css Content-Length: 2143 Connection: close Set-Cookie: AWSALB=gFMUX2mEXtXyrQsz59fsDoeWbVNb6Ha5vp6VuAVUxXfxvuhhrYrXkERXWsXbaobjD5teYBXyrCS7n8N+MCgxeiSJia2yO12JMNkh4oTWR0pl5i4SsttgnNjIU5if; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/ Set-Cookie: AWSALBCORS=gFMUX2mEXtXyrQsz59fsDoeWbVNb6Ha5vp6VuAVUxXfxvuhhrYrXkERXWsXbaobjD5teYBXyrCS7n8N+MCgxeiSJia2yO12JMNkh4oTWR0pl5i4SsttgnNjIU5if; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"2143-1732811168000" Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT Server: unknown
2024-12-18 16:27:36 UTC	2143	IN	Data Raw: 0a 2f 2a 20 49 6e 74 65 72 20 46 6f 6e 74 20 4c 69 62 72 61 72 79 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 54 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 49 6e 74 65 72 22 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2f 66 6f 6e 74 73 2f 49 6e 74 65 72 2f 49 6e 74 65 72 2d 45 78 74 72 61 4c 69 67 68 74 2e 74 74 66 22 29 Data Ascii: /* Inter Font Library */@font-face { font-family: "Inter"; font-weight: 100; src: url("./fonts/Inter/Inter-Thin.ttf") format("truetype");}@font-face { font-family: "Inter"; font-weight: 200; src: url("./fonts/Inter/Inter-ExtraLight.ttf")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49812	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:36 UTC	902	OUT	GET /websafe/templates/standard-scripts.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/help?topic=AddrNotShown Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
2024-12-18 16:27:36 UTC	894	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:36 GMT Content-Type: application/javascript Content-Length: 18445 Connection: close Set-Cookie: AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/ Set-Cookie: AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:09 GMT ETag: "19373981900-480d" Server: unknown
2024-12-18 16:27:36 UTC	8536	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 6e 4c 6f 61 64 50 61 67 65 28 29 0a 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 6e 64 20 75 6e 68 69 64 65 20 73 6f 6d 65 20 74 68 69 6e 67 73 2e 20 46 6f 72 20 6e 6f 77 20 77 65 20 61 73 73 75 6d 65 20 65 76 65 72 79 74 68 69 6e 67 20 74 68 61 74 20 6d 69 67 68 74 0a 20 20 20 20 2f 2f 20 6e 65 65 64 20 74 6f 20 62 65 20 74 6f 67 67 6c 65 64 20 69 73 20 61 20 64 69 76 20 6f 72 20 61 2e 0a 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 64 69 76 27 29 3b 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 61 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 20 53 65 74 20 74 68 65 20 66 6f 63 75 73 20 6f 6e 20 74 68 65 20 66 69 65 6c 64 20 69 64 65 6e 74 69 66 69 65 64 20 69 6e 20 6f 75 72 20 58 4d 4c Data Ascii: function onLoadPage(){ // Hide and unhide some things. For now we assume everything that might // need to be toggled is a div or a. toggleVisibility('div'); toggleVisibility('a'); // Set the focus on the field identified in our XML
2024-12-18 16:27:36 UTC	9000	IN	Data Raw: 6f 61 64 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 41 6e 79 4d 61 72 6b 65 64 43 6f 6e 74 72 6f 6c 43 68 61 6e 67 65 64 28 64 6f 63 75 6d 65 6e 74 2c 20 27 63 68 61 6e 67 65 61 62 6c 65 27 29 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 63 61 6c 65 55 49 27 29 2e 76 61 6c 75 65 20 3d 20 73 74 61 72 74 4c 61 6e 67 75 61 67 65 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 28 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 3b Data Ascii: oad) return; if (isAnyMarkedControlChanged(document, 'changeable')) { document.getElementById('localeUI').value = startLanguage; var e = (e \|\| window.event) if (e) e.returnValue = confirmationMessage;
2024-12-18 16:27:36 UTC	909	IN	Data Raw: 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 6e 63 6c 69 63 6b 4e 61 76 42 61 72 42 75 74 74 6f 6e 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 66 72 61 6d 65 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 63 72 6f 6c 6c 54 6f 54 6f 70 28 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 20 21 3d 20 30 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 20 21 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 42 79 28 30 2c 20 2d 31 30 29 3b 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 27 73 63 72 6f 6c 6c 54 6f 54 6f Data Ascii: () { onclickNavBarButton(); } document.body.appendChild(iframe);}function scrollToTop() { if (document.body.scrollTop != 0 \|\| document.documentElement.scrollTop != 0) { window.scrollBy(0, -10); setTimeout('scrollToTo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49810	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:36 UTC	899	OUT	GET /websafe/templates/screen-reader.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/websafe/help?topic=AddrNotShown Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs; AWSALBCORS=szUX26tcTADIYW/DlcHXbsOz94McK2hQu/4NM3VuJ7D+KcieKCUkMETHSBsr1UyFQKBWuudbuVN2FPR8wSR/T/fedFiLoGxmNHMEKpWZy/vgFnxSFFx3SlC/Y9gs
2024-12-18 16:27:36 UTC	892	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:36 GMT Content-Type: application/javascript Content-Length: 2111 Connection: close Set-Cookie: AWSALB=uHVPd6p0Wlrdw1Qmt7TZ6ojEjwTbjYgozpzxkEhTjclLgz3GD9/i2UOXjrv6cheibNNExyEg1JsiQKxDirrGjifJPH1CE+hxod0zQPeKaixRRAAAEJlWXkybubcB; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/ Set-Cookie: AWSALBCORS=uHVPd6p0Wlrdw1Qmt7TZ6ojEjwTbjYgozpzxkEhTjclLgz3GD9/i2UOXjrv6cheibNNExyEg1JsiQKxDirrGjifJPH1CE+hxod0zQPeKaixRRAAAEJlWXkybubcB; Expires=Wed, 25 Dec 2024 16:27:36 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:09 GMT ETag: "19373981900-83f" Server: unknown
2024-12-18 16:27:36 UTC	2111	IN	Data Raw: 0d 0a 76 61 72 20 73 63 72 65 65 6e 52 65 61 64 65 72 43 61 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 73 65 72 74 46 6f 72 53 63 72 65 65 6e 52 65 61 64 65 72 28 74 65 78 74 29 7b 0d 0a 09 76 61 72 20 77 61 72 6e 69 6e 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 27 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 65 78 74 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 61 73 73 65 72 74 69 76 65 22 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e Data Ascii: var screenReaderCalled = false;function insertForScreenReader(text){var warning = document.getElementById('timeoutMessage');warning.innerHTML = text;warning.style.display = "none";warning.setAttribute("aria-live","assertive");warning.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49814	104.18.10.207	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:36 UTC	555	OUT	GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://res.cisco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:36 UTC	967	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/07/2024 00:45:53 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: c3894d40efcdb6222b745da03d33f2ac CDN-Cache: HIT CF-Cache-Status: HIT Age: 1932545 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f408572cff1c47f-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 16:27:36 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 67 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c Data Ascii: efine(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 6e 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 22 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 3b 72 65 74 75 72 6e 20 69 7c 7c 6f 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e Data Ascii: TransitionDurationFromElement:function(t){if(!t)return 0;var e=g(t).css("transition-duration"),n=g(t).css("transition-delay"),i=parseFloat(e),o=parseFloat(n);return i\|\|o?(e=e.split(",")[0],n=n.split(",")[0],1e3*(parseFloat(e)+parseFloat(n))):0},reflow:fun
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d Data Ascii: =function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=this._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){g.removeData(this._elem
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 3d 67 2e 66 6e 5b 76 5d 2c 53 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 22 66 6f 63 75 73 22 2c 44 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 77 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 2c 41 3d 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 2c 4e 3d 22 2e 61 63 74 69 76 65 22 2c 4f 3d 22 2e 62 74 6e 22 2c 6b 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 45 2b 43 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 22 66 6f 63 75 73 22 2b 45 2b 43 2b 22 20 62 6c 75 72 22 2b 45 2b 43 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 Data Ascii: =g.fn[v],S="active",b="btn",I="focus",D='[data-toggle^="button"]',w='[data-toggle="buttons"]',A='input:not([type="hidden"])',N=".active",O=".btn",k={CLICK_DATA_API:"click"+E+C,FOCUS_BLUR_DATA_API:"focus"+E+C+" blur"+E+C},P=function(){function n(t){this._e
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 63 6c 6f 73 65 73 74 28 4f 29 5b 30 5d 3b 67 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 49 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 67 2e 66 6e 5b 76 5d 3d 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 67 2e 66 6e 5b 76 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 50 2c 67 2e 66 6e 5b 76 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 66 6e 5b 76 5d 3d 54 2c 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 4c 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6a 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 48 3d 22 2e 22 2b 6a 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 67 2e 66 6e 5b 4c 5d 2c 46 3d 7b 69 6e 74 65 72 76 61 Data Ascii: closest(O)[0];g(e).toggleClass(I,/^focus(in)?$/.test(t.type))}),g.fn[v]=P._jQueryInterface,g.fn[v].Constructor=P,g.fn[v].noConflict=function(){return g.fn[v]=T,P._jQueryInterface};var L="carousel",j="bs.carousel",H="."+j,R=".data-api",x=g.fn[L],F={interva
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 3d 30 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6f 74 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 Data Ascii: =0,this._config=this._getConfig(e),this._element=t,this._indicatorsElement=this._element.querySelector(ot),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MS
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 29 7b 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 48 29 2c 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6a 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 Data Ascii: ){g(this._element).off(H),g.removeData(this._element,j),this._items=null,this._config=null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},t._getConfig=function(t){retu
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 29 2e 6f 6e 28 51 2e 44 52 41 47 5f 53 54 41 52 54 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 55 50 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 4a 29 29 3a 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 Data Ascii: ).on(Q.DRAG_START,function(t){return t.preventDefault()}),this._pointerEvent?(g(this._element).on(Q.POINTERDOWN,function(t){return e(t)}),g(this._element).on(Q.POINTERUP,function(t){return i(t)}),this._element.classList.add(J)):(g(this._element).on(Q.TOUC
2024-12-18 16:27:36 UTC	1369	IN	Data Raw: 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 5a 29 29 3b 67 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 67 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 6f 2c 72 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: f(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(Z));g(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&g(n).addClass(V)}},t._slide=function(t,e){var n,i,o,r=this,s=this._element.que

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49824	104.17.24.14	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:38 UTC	388	OUT	GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:38 UTC	956	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-520c" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 492995 Expires: Mon, 08 Dec 2025 16:27:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HT6NoGPt1dmNfZv3sCKMOxSy%2FZzNkSqobyasOw3azCxMLTcnIeM2Ybwk9KPmKlVCmpkAWfTkSIDUstVedAMRFqHsQoFD7jnKZuk4V2RtywvFjQuHvvCdXVlin%2FMeCIyhFgsPeIYs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f40857cf884de9a-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 16:27:38 UTC	413	IN	Data Raw: 35 32 30 63 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 39 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 520c/* Copyright (C) Federico Zivolo 2019 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6e 3d 6f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6e 5b 74 5d 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 Data Ascii: odeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.owner
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 69 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: &void 0!==arguments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|i;return r[o]}return e[o]}function f(e,t){var o=2<arguments.le
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 70 2c 66 3d 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 64 2c 68 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 61 3b 69 66 28 66 7c 7c 68 29 7b 76 61 72 20 75 3d 74 28 65 29 3b 66 2d 3d 6d 28 75 2c 27 78 27 29 2c 68 2d 3d 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 29 2c 73 3d 27 48 54 4d 4c 27 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 75 28 65 29 2c 61 3d 75 28 6f 29 2c 6c 3d 6e 28 65 29 2c 6d 3d 74 28 6f 29 2c 68 Data Ascii: p,f=e.offsetWidth-d,h=e.offsetHeight-a;if(f\|\|h){var u=t(e);f-=m(u,'x'),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTML'===o.nodeName,d=u(e),a=u(o),l=n(e),m=t(o),h
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 34 5d 2c 73 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 2c 64 3d 70 3f 45 28 65 29 3a 61 28 65 2c 74 29 3b 69 66 28 27 76 69 65 77 70 6f 72 74 27 3d 3d 3d 72 29 73 3d 77 28 64 2c 70 29 3b 65 6c 73 65 7b 76 61 72 20 6c 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 72 3f 28 6c 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 6f 77 27 3d 3d 3d 72 3f 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 6c 3d 72 3b 76 61 Data Ascii: ength&&void 0!==arguments[4]&&arguments[4],s={top:0,left:0},d=p?E(e):a(e,t);if('viewport'===r)s=w(d,p);else{var l;'scrollParent'===r?(l=n(o(t)),'BODY'===l.nodeName&&(l=e.ownerDocument.documentElement)):'window'===r?l=e.ownerDocument.documentElement:l=r;va
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6f 3d 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 54 6f 70 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 7c 7c 30 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 4c 65 66 74 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 52 69 67 68 74 7c 7c 30 29 2c 72 3d 7b 77 69 64 74 68 3a 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 69 2c 68 65 69 67 68 74 3a 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2b 6e 7d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 7b 6c 65 66 74 3a 27 72 69 67 68 74 27 2c 72 69 67 68 Data Ascii: ent.defaultView,o=t.getComputedStyle(e),n=parseFloat(o.marginTop\|\|0)+parseFloat(o.marginBottom\|\|0),i=parseFloat(o.marginLeft\|\|0)+parseFloat(o.marginRight\|\|0),r={width:e.offsetWidth+i,height:e.offsetHeight+n};return r}function T(e){var t={left:'right',righ
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 63 65 6d 65 6e 74 3d 4f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 64 69 6e 67 29 2c 65 2e 6f 72 69 67 69 6e 61 6c 50 6c 61 63 65 6d 65 6e 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 44 Data Ascii: cement=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.padding),e.originalPlacement=e.placement,e.positionFixed=this.options.positionFixed,e.offsets.popper=D
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 72 2c 27 73 63 72 6f 6c 6c 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 6f 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 29 2c 6f 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 72 2c 6f 2e 65 76 65 6e 74 Data Ascii: addEventListener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scroll',o.updateBound,o.scrollParents),o.scrollElement=r,o.event
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 29 2c 62 6f 74 74 6f 6d 3a 6d 28 6e 2e 62 6f 74 74 6f 6d 29 2c 72 69 67 68 74 3a 66 28 6e 2e 72 69 67 68 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 43 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 69 3d 21 21 6e 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 6e 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 69 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b Data Ascii: ),bottom:m(n.bottom),right:f(n.right)}}function K(e,t,o){var n=C(e,function(e){var o=e.name;return o===t}),i=!!n&&e.some(function(e){return e.name===o&&e.enabled&&e.order<n.order});if(!i){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+
2024-12-18 16:27:38 UTC	1369	IN	Data Raw: 20 61 3d 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 28 31 3d 3d 3d 6e 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 28 65 2c 69 2c 74 2c 6f 29 7d 29 7d 29 2c 61 Data Ascii: a=a.map(function(e,n){var i=(1===n?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return _(e,i,t,o)})}),a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49821	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:38 UTC	694	OUT	GET /websafe/templates/screen-reader.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=hIEcpGg7nMkjgSZjBNd/P9876ajxJpPKamFTH77YWvNNE9Y+XBv1uaGUWbHF4sVMPe2sIrTwEs3UuNJpb3WzEUj4wsdHUu6nUF+8XWpAfuc9fYLHGz9+GPM4lsg7; AWSALBCORS=hIEcpGg7nMkjgSZjBNd/P9876ajxJpPKamFTH77YWvNNE9Y+XBv1uaGUWbHF4sVMPe2sIrTwEs3UuNJpb3WzEUj4wsdHUu6nUF+8XWpAfuc9fYLHGz9+GPM4lsg7
2024-12-18 16:27:38 UTC	892	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:38 GMT Content-Type: application/javascript Content-Length: 2111 Connection: close Set-Cookie: AWSALB=LGEhBpYMG6vCoxxQP+ONIQEEEpa9O2MiHaV+ZyZqdTi/T+G/uwxWTtIwVppNsZbvNb63DL+p6iwA20Pra9BqxUVy+lrYn2d/ZZgC5jlckVJdVwfUfhIkBIhW/bq7; Expires=Wed, 25 Dec 2024 16:27:38 GMT; Path=/ Set-Cookie: AWSALBCORS=LGEhBpYMG6vCoxxQP+ONIQEEEpa9O2MiHaV+ZyZqdTi/T+G/uwxWTtIwVppNsZbvNb63DL+p6iwA20Pra9BqxUVy+lrYn2d/ZZgC5jlckVJdVwfUfhIkBIhW/bq7; Expires=Wed, 25 Dec 2024 16:27:38 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:09 GMT ETag: "19373981900-83f" Server: unknown
2024-12-18 16:27:38 UTC	2111	IN	Data Raw: 0d 0a 76 61 72 20 73 63 72 65 65 6e 52 65 61 64 65 72 43 61 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 73 65 72 74 46 6f 72 53 63 72 65 65 6e 52 65 61 64 65 72 28 74 65 78 74 29 7b 0d 0a 09 76 61 72 20 77 61 72 6e 69 6e 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 27 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 65 78 74 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 61 73 73 65 72 74 69 76 65 22 29 3b 0d 0a 09 77 61 72 6e 69 6e 67 2e Data Ascii: var screenReaderCalled = false;function insertForScreenReader(text){var warning = document.getElementById('timeoutMessage');warning.innerHTML = text;warning.style.display = "none";warning.setAttribute("aria-live","assertive");warning.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49822	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:38 UTC	697	OUT	GET /websafe/templates/standard-scripts.js HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=197C94D003DDA233D59F68781E7CCB31; AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA
2024-12-18 16:27:38 UTC	894	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:38 GMT Content-Type: application/javascript Content-Length: 18445 Connection: close Set-Cookie: AWSALB=1yZA7i3njDG9tfpQhEsz0OI8E54rm+Cx1NUcI39tnp4420+mHNIk2FU6ZrddOIm2YFW+5gT0a66boLOjMN349WNCplvDNSWy64wOisHIBV5sM70jSLjfm9Dg06ra; Expires=Wed, 25 Dec 2024 16:27:38 GMT; Path=/ Set-Cookie: AWSALBCORS=1yZA7i3njDG9tfpQhEsz0OI8E54rm+Cx1NUcI39tnp4420+mHNIk2FU6ZrddOIm2YFW+5gT0a66boLOjMN349WNCplvDNSWy64wOisHIBV5sM70jSLjfm9Dg06ra; Expires=Wed, 25 Dec 2024 16:27:38 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: policyref=https://res.cisco.com/websafe/p3p/p3p.xml, CP="ALL CURa ADMa TAIa OUR BUS ONL UNI COM NAV INT" X-Frame-Options: DENY Cache-Control: must-revalidate,max-age=1 Pragma: no-cache Last-Modified: Thu, 28 Nov 2024 16:26:09 GMT ETag: "19373981900-480d" Server: unknown
2024-12-18 16:27:38 UTC	8536	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 6e 4c 6f 61 64 50 61 67 65 28 29 0a 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 6e 64 20 75 6e 68 69 64 65 20 73 6f 6d 65 20 74 68 69 6e 67 73 2e 20 46 6f 72 20 6e 6f 77 20 77 65 20 61 73 73 75 6d 65 20 65 76 65 72 79 74 68 69 6e 67 20 74 68 61 74 20 6d 69 67 68 74 0a 20 20 20 20 2f 2f 20 6e 65 65 64 20 74 6f 20 62 65 20 74 6f 67 67 6c 65 64 20 69 73 20 61 20 64 69 76 20 6f 72 20 61 2e 0a 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 64 69 76 27 29 3b 0a 20 20 20 20 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 27 61 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 20 53 65 74 20 74 68 65 20 66 6f 63 75 73 20 6f 6e 20 74 68 65 20 66 69 65 6c 64 20 69 64 65 6e 74 69 66 69 65 64 20 69 6e 20 6f 75 72 20 58 4d 4c Data Ascii: function onLoadPage(){ // Hide and unhide some things. For now we assume everything that might // need to be toggled is a div or a. toggleVisibility('div'); toggleVisibility('a'); // Set the focus on the field identified in our XML
2024-12-18 16:27:38 UTC	9909	IN	Data Raw: 6f 61 64 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 41 6e 79 4d 61 72 6b 65 64 43 6f 6e 74 72 6f 6c 43 68 61 6e 67 65 64 28 64 6f 63 75 6d 65 6e 74 2c 20 27 63 68 61 6e 67 65 61 62 6c 65 27 29 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 63 61 6c 65 55 49 27 29 2e 76 61 6c 75 65 20 3d 20 73 74 61 72 74 4c 61 6e 67 75 61 67 65 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 28 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 3b Data Ascii: oad) return; if (isAnyMarkedControlChanged(document, 'changeable')) { document.getElementById('localeUI').value = startLanguage; var e = (e \|\| window.event) if (e) e.returnValue = confirmationMessage;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49826	104.18.11.207	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:38 UTC	382	OUT	GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 16:27:39 UTC	967	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/07/2024 00:45:53 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: c3894d40efcdb6222b745da03d33f2ac CDN-Cache: HIT CF-Cache-Status: HIT Age: 1932548 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f40858178cd4263-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 16:27:39 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 67 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c Data Ascii: efine(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 6e 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 22 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 3b 72 65 74 75 72 6e 20 69 7c 7c 6f 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e Data Ascii: TransitionDurationFromElement:function(t){if(!t)return 0;var e=g(t).css("transition-duration"),n=g(t).css("transition-delay"),i=parseFloat(e),o=parseFloat(n);return i\|\|o?(e=e.split(",")[0],n=n.split(",")[0],1e3*(parseFloat(e)+parseFloat(n))):0},reflow:fun
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d Data Ascii: =function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=this._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){g.removeData(this._elem
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 3d 67 2e 66 6e 5b 76 5d 2c 53 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 22 66 6f 63 75 73 22 2c 44 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 77 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 2c 41 3d 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 2c 4e 3d 22 2e 61 63 74 69 76 65 22 2c 4f 3d 22 2e 62 74 6e 22 2c 6b 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 45 2b 43 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 22 66 6f 63 75 73 22 2b 45 2b 43 2b 22 20 62 6c 75 72 22 2b 45 2b 43 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 Data Ascii: =g.fn[v],S="active",b="btn",I="focus",D='[data-toggle^="button"]',w='[data-toggle="buttons"]',A='input:not([type="hidden"])',N=".active",O=".btn",k={CLICK_DATA_API:"click"+E+C,FOCUS_BLUR_DATA_API:"focus"+E+C+" blur"+E+C},P=function(){function n(t){this._e
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 63 6c 6f 73 65 73 74 28 4f 29 5b 30 5d 3b 67 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 49 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 67 2e 66 6e 5b 76 5d 3d 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 67 2e 66 6e 5b 76 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 50 2c 67 2e 66 6e 5b 76 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 66 6e 5b 76 5d 3d 54 2c 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 4c 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6a 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 48 3d 22 2e 22 2b 6a 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 67 2e 66 6e 5b 4c 5d 2c 46 3d 7b 69 6e 74 65 72 76 61 Data Ascii: closest(O)[0];g(e).toggleClass(I,/^focus(in)?$/.test(t.type))}),g.fn[v]=P._jQueryInterface,g.fn[v].Constructor=P,g.fn[v].noConflict=function(){return g.fn[v]=T,P._jQueryInterface};var L="carousel",j="bs.carousel",H="."+j,R=".data-api",x=g.fn[L],F={interva
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 3d 30 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6f 74 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 Data Ascii: =0,this._config=this._getConfig(e),this._element=t,this._indicatorsElement=this._element.querySelector(ot),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MS
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 29 7b 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 48 29 2c 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6a 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 Data Ascii: ){g(this._element).off(H),g.removeData(this._element,j),this._items=null,this._config=null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},t._getConfig=function(t){retu
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 29 2e 6f 6e 28 51 2e 44 52 41 47 5f 53 54 41 52 54 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 55 50 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 4a 29 29 3a 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 Data Ascii: ).on(Q.DRAG_START,function(t){return t.preventDefault()}),this._pointerEvent?(g(this._element).on(Q.POINTERDOWN,function(t){return e(t)}),g(this._element).on(Q.POINTERUP,function(t){return i(t)}),this._element.classList.add(J)):(g(this._element).on(Q.TOUC
2024-12-18 16:27:39 UTC	1369	IN	Data Raw: 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 5a 29 29 3b 67 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 67 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 6f 2c 72 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: f(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(Z));g(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&g(n).addClass(V)}},t._slide=function(t,e){var n,i,o,r=this,s=this._element.que

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49829	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:39 UTC	875	OUT	GET /admin/fonts/Inter/Inter-Regular.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA
2024-12-18 16:27:40 UTC	720	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:39 GMT Content-Length: 303504 Connection: close Set-Cookie: AWSALB=wtqx8mPrzDHKxw29PKNniWH9n5W0MTN/25faP3hkCIJWk3Bmwb66X6DWnhOwV+y6mzQA/s4UeucL+v1oUUEMA9gPfr/adNcCEx4pX9cualC+Zrg39YOVQp0OvTlk; Expires=Wed, 25 Dec 2024 16:27:39 GMT; Path=/ Set-Cookie: AWSALBCORS=wtqx8mPrzDHKxw29PKNniWH9n5W0MTN/25faP3hkCIJWk3Bmwb66X6DWnhOwV+y6mzQA/s4UeucL+v1oUUEMA9gPfr/adNcCEx4pX9cualC+Zrg39YOVQp0OvTlk; Expires=Wed, 25 Dec 2024 16:27:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"303504-1732811168000" Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT Server: unknown
2024-12-18 16:27:40 UTC	8710	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 3b 00 00 00 04 12 47 50 4f 53 bc af 92 58 00 03 3f 14 00 01 1f 80 47 53 55 42 be 7f 66 78 00 04 5e 94 00 00 42 b4 4f 53 2f 32 22 97 6e 62 00 02 6e 4c 00 00 00 60 53 54 41 54 f1 71 d9 45 00 04 a1 48 00 00 00 48 63 6d 61 70 2f 2e e9 9d 00 02 6e ac 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 3a f8 00 00 00 08 67 6c 79 66 8b bf 4f 34 00 00 01 0c 00 02 1d 26 68 65 61 64 2d c3 61 46 00 02 46 24 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 6e 28 00 00 00 24 68 6d 74 78 fd c3 4c d4 00 02 46 5c 00 00 27 ca 6c 6f 63 61 09 5d 06 34 00 02 1e 54 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 1e 34 00 00 00 20 6e 61 6d 65 30 24 51 40 00 02 d4 40 00 00 02 16 70 6f 73 74 a7 a8 35 72 00 02 d6 58 00 00 64 9e 70 72 65 Data Ascii: GDEF11;GPOSX?GSUBfx^BOS/2"nbnL`STATqEHHcmap/.negasp:glyfO4&head-aFF$6hhean($hmtxLF\'loca]4T'maxp4 name0$Q@@post5rXdpre
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: 00 00 00 07 06 6d fe fc 02 00 ff ff 00 c8 00 00 03 f4 08 00 00 27 00 c5 02 04 00 00 00 06 09 9e 2c 00 ff ff 01 58 00 00 03 a4 08 94 00 27 00 c5 01 b4 00 00 00 06 09 a0 2c 00 ff ff 00 f8 00 00 01 f0 08 00 02 06 00 c5 00 00 ff ff ff b4 00 00 03 34 0a 40 02 26 00 c5 00 00 00 07 06 68 fe 34 02 00 00 03 00 88 00 00 04 58 08 00 00 03 00 07 00 0b 00 00 13 35 21 15 01 35 21 15 01 11 23 11 88 03 d0 fc 30 03 d0 fe 94 f8 07 24 dc dc f8 dc dc dc 08 00 f8 00 08 00 ff ff 00 88 00 00 04 58 0a 40 02 26 00 e9 00 00 00 07 06 69 ff 30 00 18 ff ff 00 88 00 00 04 58 0b a0 02 26 00 e9 00 00 00 07 08 08 04 78 00 00 ff ff 00 88 00 00 04 58 08 00 02 26 00 e9 00 00 00 06 07 fe f8 40 ff ff 00 88 fe 04 04 ac 08 00 02 26 00 e9 00 00 00 07 06 90 05 d0 00 00 ff ff 00 88 00 00 04 58 0a Data Ascii: m',X',4@&h4X5!5!#0$X@&i0X&xX&@&X
2024-12-18 16:27:40 UTC	10616	IN	Data Raw: ff e0 05 d8 09 38 02 26 02 64 00 00 00 06 07 f3 3c cc ff ff 00 90 fe 04 05 d8 08 68 02 26 02 64 00 00 00 27 06 6a 00 b8 00 00 00 07 06 8b 06 78 00 00 ff ff 00 90 ff e0 05 d8 06 14 02 06 02 64 00 00 ff ff 00 90 ff e0 05 d8 08 a0 02 26 02 64 00 00 00 06 06 66 e4 00 ff ff 00 90 ff e0 05 d8 08 40 02 06 02 65 00 00 ff ff 00 90 ff e0 05 d8 08 00 02 26 02 64 00 00 00 07 06 6e 00 c0 00 00 00 01 00 90 ff ec 05 d8 06 20 00 26 00 00 01 32 04 12 15 14 02 04 23 22 26 26 02 35 35 21 15 21 14 16 16 33 32 36 36 35 35 34 26 26 23 22 06 06 07 27 3e 02 03 0c de 01 41 ad ad fe c9 d0 78 ea c0 72 04 a0 fc 50 67 bd 80 8e cc 6e 79 d8 8f 5c 98 6e 1e e4 24 aa fa 06 20 c5 fe 9d ec ec fe 97 cb 50 b3 01 27 d6 64 cc 82 cc 76 8b df 7e 88 af f0 7d 35 6b 50 40 74 af 61 00 01 01 40 00 00 Data Ascii: 8&d<h&d'jxd&df@e&dn &2#"&&55!!3266554&&#"'>AxrPgny\n$ P'dv~}5kP@ta@
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: 91 6e 3d ec 3b 65 40 15 28 0f 1b 49 fe 4c e4 10 29 dc 8b 40 60 24 50 19 43 2c 70 af 65 fd c0 36 6a 99 63 a4 a4 50 5b 25 05 03 c8 09 03 02 40 06 00 e8 72 8e 1e 1a c8 0d 0f 5e a2 68 fc 34 ff ff ff 98 00 00 04 20 06 18 02 26 03 56 00 00 00 07 07 fe fe d8 ff 00 00 02 00 d8 fd c0 04 20 06 18 00 03 00 17 00 00 13 11 33 11 03 11 33 15 33 36 36 33 32 16 17 07 26 26 23 22 06 06 15 11 d8 ec ec e4 10 29 dc 8b 40 60 24 50 19 43 2c 70 af 65 fd c0 02 40 fd c0 02 40 06 00 e8 72 8e 1e 1a c8 0d 0f 5e a2 68 fc 34 ff ff 00 d8 00 00 04 20 08 a0 02 26 03 56 00 00 00 06 06 64 a8 00 ff ff 00 62 fd 58 04 20 06 18 02 26 03 56 00 00 00 06 06 77 cc 00 ff ff 00 94 00 00 04 20 08 68 02 26 03 56 00 00 00 06 06 73 c4 00 ff ff ff c4 00 00 04 20 08 a0 02 26 03 56 00 00 00 07 06 7b 04 cc Data Ascii: n=;e@(IL)@`$PC,pe6jcP[%@r^h4 &V 3336632&&#")@`$PC,pe@@r^h4 &VdbX &Vw h&Vs &V{
2024-12-18 16:27:40 UTC	1616	IN	Data Raw: 33 11 14 16 16 33 32 36 37 17 06 06 23 22 26 35 05 08 fb 20 01 ec ec 31 47 20 24 43 15 40 45 7d 42 9c a0 06 00 dc dc fb 74 58 49 0f 1d 0f bc 33 1d be de 00 01 00 d8 ff e4 05 98 06 00 00 1b 00 00 13 33 11 14 16 16 33 32 36 12 35 26 02 02 27 33 16 16 12 15 14 02 06 06 23 22 00 11 d8 ec 59 8f 50 80 c5 6f 02 31 4f 2e f8 2a 49 2d 4c a0 fa ae f6 fe ca 06 00 fc 50 96 b1 4d 9e 01 0c a6 72 01 08 01 08 72 54 fc fe e2 86 9d fe dd e3 85 01 2c 01 44 ff ff 00 d8 ff e4 05 98 09 10 02 26 04 88 00 00 00 06 06 74 18 10 ff ff 00 d8 ff e4 05 98 08 40 02 26 04 88 00 00 00 06 06 68 d4 00 ff ff 00 d8 ff e4 05 98 08 80 02 26 04 88 00 00 00 07 08 cd 01 e4 00 00 ff ff 00 d8 ff e4 05 98 08 b0 02 26 04 88 00 00 00 07 09 88 01 cc 00 a8 ff ff 00 d8 ff e4 05 98 08 b0 02 26 04 88 00 00 Data Ascii: 33267#"&5 1G $C@E}BtXI333265&'3#"YPo1O.*I-LPMrrT,D&t@&h&&&
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: 02 26 04 9d 00 00 00 27 09 89 03 3c 00 00 00 07 09 9d 02 88 00 94 ff ff 00 94 fd 58 08 58 06 00 02 26 04 9d 00 00 00 07 09 89 03 3c 00 00 ff ff 00 94 fd 58 08 58 08 94 02 26 04 9d 00 00 00 27 09 89 03 3c 00 00 00 07 09 9f 02 fc 00 00 ff ff 00 94 ff e4 08 58 08 dc 02 26 04 9d 00 00 00 07 09 8b 01 fc 00 00 ff ff 00 94 fd 58 08 58 08 dc 02 26 04 9d 00 00 00 27 09 89 03 3c 00 00 00 07 09 8b 01 fc 00 00 00 01 00 60 fd a0 06 2c 06 00 00 1f 00 00 01 22 26 35 34 36 36 37 01 21 01 06 06 15 14 16 33 32 36 35 34 26 27 01 21 01 1e 02 15 14 06 03 44 ae ca 13 21 14 03 14 01 04 fd 50 4e 62 42 36 36 42 55 57 fd 50 01 04 03 18 18 18 08 c2 fd a0 ae a0 1f 4d 52 28 06 2c fa 80 a2 af 41 2e 3c 3f 2b 3e af b1 05 74 f9 d4 30 56 47 19 a0 ae 00 02 00 90 ff e0 05 ec 08 40 00 20 00 Data Ascii: &'<XX&<XX&'<X&XX&'<`,"&54667!32654&'!D!PNbB66BUWPMR(,A.<?+>t0VG@
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: 52 30 69 4b 48 68 68 04 70 e0 e0 fc d8 69 4b 48 68 68 48 4b 69 04 0c 30 52 32 48 68 68 48 4b 69 ff ff 01 1c 01 60 06 24 07 00 02 07 05 98 00 00 01 00 ff ff 00 e6 01 d0 06 5c 06 30 02 07 05 99 00 00 00 e0 ff ff 00 e5 02 fc 06 5b 05 00 02 07 05 9a 00 00 00 d4 00 02 00 bc 02 04 05 38 04 54 00 03 00 07 00 00 01 15 21 35 05 11 21 11 05 38 fb 84 04 7c fe ec 04 54 ec ec 6c fe 1c 01 e4 00 01 ff fc ff 24 04 fc 00 00 00 03 00 00 21 15 21 35 04 fc fb 00 dc dc 00 02 00 d0 00 00 06 20 08 00 00 03 00 07 00 00 01 11 23 11 01 15 21 35 03 e4 f8 03 34 fa b0 08 00 f8 00 08 00 fe 00 dc dc 00 03 00 50 fd c4 05 a0 07 d4 00 03 00 07 00 0b 00 00 01 11 21 11 01 15 21 35 01 15 21 35 03 7c fe f0 03 34 fa b0 05 50 fa b0 07 d4 f5 f0 0a 10 fd fc dc dc fb 0c dc dc 00 02 00 70 04 60 04 Data Ascii: R0iKHhhpiKHhhHKi0R2HhhHKi`$\0[8T!5!8\|Tl$!!5 #!54P!!5!5\|4Pp`
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: 01 01 08 ff 00 09 88 09 00 00 02 00 00 01 11 01 01 08 08 80 ff 00 0a 00 fb 00 00 02 00 8c ff 80 0a 8c 08 00 00 02 00 05 00 00 13 21 09 03 8c 0a 00 fb 00 fc 81 03 7f 03 7f 08 00 f7 80 07 a4 fa 0e 05 f2 00 02 00 8c 00 00 0a 8c 08 80 00 02 00 05 00 00 33 01 01 25 21 01 8c 05 00 05 00 f7 81 06 fe fc 81 08 80 f7 80 dc 05 f2 00 02 00 88 ff 00 09 08 09 00 00 02 00 05 00 00 09 02 03 11 01 09 08 f7 80 08 80 dc fa 0e ff 00 05 00 05 00 f7 81 06 fe fc 81 00 02 01 08 ff 00 09 88 09 00 00 02 00 05 00 00 01 11 09 03 01 08 08 80 f8 5c 05 f2 fa 0e ff 00 0a 00 fb 00 fc 81 03 7f 03 7f 00 03 00 40 00 00 0a d8 09 00 00 02 00 0e 00 12 00 00 33 09 02 32 36 35 34 26 23 22 06 15 14 16 03 33 13 21 40 05 4c 05 4c fa b4 4d 6d 6d 4d 4d 6d 6d 2d f4 12 fe e8 09 00 f7 00 01 02 6d 4d 4d Data Ascii: !3%!\@32654&#"3!@LLMmmMMmm-mMM
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: b1 96 9a aa 44 42 aa fe 7c 49 7d 4e 82 e2 8c cd 01 53 c8 02 a4 c6 01 53 cf 91 f5 96 81 bf 9d f1 7e fd 5c 80 f1 9b 00 01 00 4c fd a8 02 90 00 d8 00 0f 00 00 25 33 11 14 02 23 22 26 27 37 16 16 33 32 36 35 01 a4 ec da d2 2a 47 27 14 12 60 12 51 6f d8 fe ac d2 fe f6 08 0c e0 09 0b 84 78 00 01 00 48 fd c4 02 a8 00 60 00 14 00 00 21 37 16 16 15 14 06 23 22 26 27 37 16 16 33 32 36 36 35 34 26 01 08 80 99 87 be 8a 66 88 2a 30 18 56 36 3a 44 1e 6e 60 4b cd 60 90 94 27 15 b0 09 1b 1e 38 26 48 7a 00 01 00 ac fe 54 02 10 01 00 00 0b 00 00 01 15 0e 02 07 27 3e 02 35 35 02 10 02 22 44 34 c8 22 36 20 01 00 bc 58 a8 a2 4e 28 50 95 93 4c c0 00 01 00 84 fe 10 01 70 00 dc 00 03 00 00 25 11 23 11 01 70 ec dc fd 34 02 cc 00 01 fc 68 06 fc fd bc 08 b8 00 05 00 00 01 03 35 21 Data Ascii: DB\|I}NSS~\L%3#"&'73265G'`QoxH`!7#"&'7326654&f0V6:Dn`K`'8&HzT'>55"D4"6 XN(PLp%#p4h5!
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: fd 70 02 8c ff 84 00 03 00 07 00 00 01 11 33 11 21 35 21 15 01 bc d0 fd dc 02 24 fd 70 02 14 fd ec c0 c0 00 03 00 a4 fd 8c 04 4c ff 74 00 03 00 07 00 0b 00 00 01 15 21 35 13 11 23 11 21 11 23 11 03 90 fd cc 18 d0 03 a8 d0 fe 34 a8 a8 01 40 fe 18 01 e8 fe 18 01 e8 00 02 00 a4 fd 70 04 4c ff 84 00 03 00 07 00 00 01 15 21 35 13 11 23 11 04 4c fd 10 18 d0 fe 18 a8 a8 01 6c fd ec 02 14 00 03 00 64 fd a8 04 8c 00 e8 00 03 00 07 00 0b 00 00 05 15 21 35 13 33 01 27 01 23 01 37 04 8c fc 84 f4 f0 fd f4 84 02 90 f0 fe 60 8c 64 a8 a8 01 4c fd f4 6c fe 60 01 a0 64 00 03 fb 04 06 9c fe ac 08 ac 00 03 00 07 00 0b 00 00 01 11 33 11 03 35 21 15 03 11 33 11 fb 04 d0 1c 02 38 14 d0 06 9c 02 10 fd f0 01 68 a8 a8 fe 98 02 10 fd f0 ff ff fb fc fd 60 fe 4d ff 91 00 27 08 53 fb Data Ascii: p3!5!$pLt!5#!#4@pL!5#Lld!53'#7`dLl`d35!38h`M'S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49827	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:39 UTC	880	OUT	GET /admin/fonts/SharpSans/SharpSans-Bold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA
2024-12-18 16:27:40 UTC	718	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:39 GMT Content-Length: 10948 Connection: close Set-Cookie: AWSALB=+x3U2oXv8DWU9vdE417EcLFUCdFvp1roWePY3u3UbgA+THeVe9rzTiNZ9xcag+2U/++9Jebm/FE33WnHRU6Ka82o3wyhs0tf3FsHd3EyMtjAqjb14lsEiybcHNNe; Expires=Wed, 25 Dec 2024 16:27:39 GMT; Path=/ Set-Cookie: AWSALBCORS=+x3U2oXv8DWU9vdE417EcLFUCdFvp1roWePY3u3UbgA+THeVe9rzTiNZ9xcag+2U/++9Jebm/FE33WnHRU6Ka82o3wyhs0tf3FsHd3EyMtjAqjb14lsEiybcHNNe; Expires=Wed, 25 Dec 2024 16:27:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"10948-1732811168000" Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT Server: unknown
2024-12-18 16:27:40 UTC	8712	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 81 d5 7e 55 00 00 2a a8 00 00 00 1c 47 44 45 46 00 25 00 00 00 00 1c 74 00 00 00 18 47 50 4f 53 33 a6 24 5b 00 00 1c f4 00 00 0d b2 47 53 55 42 f0 80 0f 94 00 00 1c 8c 00 00 00 66 4f 53 2f 32 67 91 cf 8e 00 00 01 78 00 00 00 60 63 6d 61 70 56 c5 11 28 00 00 02 e8 00 00 01 62 67 61 73 70 ff ff 00 03 00 00 1c 6c 00 00 00 08 67 6c 79 66 c0 22 83 5c 00 00 04 d8 00 00 10 dc 68 65 61 64 0a 6f 27 77 00 00 00 fc 00 00 00 36 68 68 65 61 07 c0 03 2d 00 00 01 34 00 00 00 24 68 6d 74 78 9f 1b 0a 34 00 00 01 d8 00 00 01 10 6c 6f 63 61 90 00 8b 4c 00 00 04 4c 00 00 00 8a 6d 61 78 70 00 89 00 34 00 00 01 58 00 00 00 20 6e 61 6d 65 a7 b2 22 ab 00 00 15 b4 00 00 06 00 70 6f 73 74 43 c6 eb 8f 00 00 1b b4 00 00 00 b5 00 01 00 Data Ascii: pFFTM~U*GDEF%tGPOS3$[GSUBfOS/2gx`cmapV(bgasplglyf"\heado'w6hhea-4$hmtx4locaLLmaxp4X name"postC
2024-12-18 16:27:40 UTC	2236	IN	Data Raw: 00 01 00 00 00 00 ff fd ff fe ff fc ff fd ff f4 ff f3 ff d8 00 00 ff d0 ff c0 ff ff ff fd ff e4 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff fd ff f8 00 00 ff f6 ff f7 ff fb ff fd ff f9 ff fa ff fc ff fb ff f8 ff f5 ff f8 ff f4 ff f1 ff f8 00 00 00 03 00 00 ff fd ff fc ff f4 ff f3 00 00 ff ec ff e9 ff f1 00 11 ff e7 ff f4 ff f2 ff d8 ff ed ff ff ff f9 ff fd 00 00 ff ec ff f9 ff ff 00 00 ff f7 ff f0 ff f6 ff f8 ff f6 ff fd 00 00 ff ff ff eb ff db ff f8 ff fb ff ec 00 00 00 00 ff fd ff f9 00 08 ff fb ff fc ff fd ff f8 ff fc ff ff ff fb 00 00 00 00 ff f7 ff f9 ff ff 00 00 ff fd ff f5 ff fb ff f1 ff ea ff ff 00 00 00 02 00 00 ff fd ff ff ff ee ff f4 00 00 ff d1 ff ff ff ce ff f8 ff c0 ff f9 ff d1 ff b5 ff d8 ff f0 ff ff ff fd 00 00 ff fc 00 02 ff fe 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49828	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:39 UTC	872	OUT	GET /admin/fonts/Inter/Inter-Bold.ttf HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://res.cisco.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://res.cisco.com/admin/cisco-fonts.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA; AWSALBCORS=JVHAeR2bhvGbsBYRGh+wwShUpZ2BoOTkSu4/VjYyqmK8Fvgo9nstqJsIH0c7DfiX7e1mIAk8qgx4ZIQoZy6n1CtO5QiYIzeGrucjoZp+erPAOToyABRx8i4xAfwA
2024-12-18 16:27:40 UTC	720	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:39 GMT Content-Length: 309772 Connection: close Set-Cookie: AWSALB=rj6LTdRJZ6ePxKDAXLbjLPLlHgSxpIO/K3xVThVCcF4PSXc7mC+tHn/fWPzJouIJ0IG226hHQ0/dusdMv6VlvgPfWwkFhftihQvh0X3i/ummZb3RF52u4FuLCjem; Expires=Wed, 25 Dec 2024 16:27:39 GMT; Path=/ Set-Cookie: AWSALBCORS=rj6LTdRJZ6ePxKDAXLbjLPLlHgSxpIO/K3xVThVCcF4PSXc7mC+tHn/fWPzJouIJ0IG226hHQ0/dusdMv6VlvgPfWwkFhftihQvh0X3i/ummZb3RF52u4FuLCjem; Expires=Wed, 25 Dec 2024 16:27:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"309772-1732811168000" Last-Modified: Thu, 28 Nov 2024 16:26:08 GMT Server: unknown
2024-12-18 16:27:40 UTC	8710	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 44 45 46 31 cb 31 1c 00 03 46 04 00 00 04 12 47 50 4f 53 ab ef 32 2f 00 03 4a 18 00 01 2c fc 47 53 55 42 be 7f 66 78 00 04 77 14 00 00 42 b4 4f 53 2f 32 23 c3 6e 42 00 02 79 50 00 00 00 60 53 54 41 54 ef dd d9 47 00 04 b9 c8 00 00 00 44 63 6d 61 70 2f 2e e9 9d 00 02 79 b0 00 00 65 8a 67 61 73 70 00 00 00 10 00 03 45 fc 00 00 00 08 67 6c 79 66 05 f3 35 d8 00 00 01 0c 00 02 28 2b 68 65 61 64 2d c4 61 46 00 02 51 28 00 00 00 36 68 68 65 61 1e f5 19 bf 00 02 79 2c 00 00 00 24 68 6d 74 78 37 f0 22 d7 00 02 51 60 00 00 27 ca 6c 6f 63 61 09 88 86 18 00 02 29 58 00 00 27 d0 6d 61 78 70 0a 0c 01 06 00 02 29 38 00 00 00 20 6e 61 6d 65 30 30 54 df 00 02 df 44 00 00 02 18 70 6f 73 74 a7 a8 35 72 00 02 e1 5c 00 00 64 9e 70 72 65 Data Ascii: GDEF11FGPOS2/J,GSUBfxwBOS/2#nByP`STATGDcmap/.yegaspEglyf5(+head-aFQ(6hheay,$hmtx7"Q`'loca)X'maxp)8 name00TDpost5r\dpre
2024-12-18 16:27:40 UTC	9000	IN	Data Raw: 00 27 00 c5 02 ac 00 00 00 06 09 92 17 30 ff ff 00 a2 00 00 05 36 09 55 00 27 00 c5 02 d2 00 00 00 06 09 99 17 30 ff ff ff 9e 00 00 03 7b 0a 18 02 26 00 c5 00 00 00 07 06 6e fe e5 02 00 ff ff ff a5 00 00 03 73 0a 00 02 26 00 c5 00 00 00 07 06 6d fe 71 02 00 ff ff 00 a6 00 00 04 5b 08 00 00 27 00 c5 01 f8 00 00 00 06 09 9e da 00 ff ff 00 bc 00 00 04 3b 08 94 00 27 00 c5 01 d8 00 00 00 06 09 a0 92 00 ff ff 00 b2 00 00 02 63 08 00 02 06 00 c5 00 00 ff ff ff 89 00 00 03 8f 0a 69 02 26 00 c5 00 00 00 07 06 68 fe 9b 02 00 00 03 00 64 00 00 04 e3 08 00 00 03 00 07 00 0b 00 00 13 11 21 11 01 11 21 11 01 11 21 11 64 04 7f fb 81 04 7f fe 99 fe 4f 06 9b 01 65 fe 9b f9 65 01 65 fe 9b 08 00 f8 00 08 00 ff ff 00 64 00 00 04 e3 0a 69 02 26 00 e9 00 00 00 06 06 69 b4 24 Data Ascii: '06U'0{&ns&mq[';'ci&hd!!!dOeeedi&i$
2024-12-18 16:27:40 UTC	9000	IN	Data Raw: 53 55 76 76 55 53 79 79 53 55 76 76 55 53 79 ff ff 00 3a 00 00 07 be 0a 00 02 26 01 d5 00 00 00 07 06 6d 00 e1 02 00 ff ff 00 3a 00 00 07 be 0a 75 02 26 01 d5 00 00 00 07 06 70 02 62 02 00 ff ff 00 3a 00 00 07 be 0a 8d 02 26 01 d5 00 00 00 07 06 66 00 aa 02 00 ff ff 00 3a fd c1 07 be 08 00 02 26 01 d5 00 00 00 07 06 8b 07 02 00 00 ff ff 00 3a 00 00 07 be 0b 07 02 26 01 d5 00 00 00 07 06 80 07 a4 02 0a ff ff 00 3a 00 00 07 be 0a 51 02 26 01 d5 00 00 00 07 06 6b 01 3c 02 00 00 02 00 19 00 00 07 e2 08 00 00 03 00 0d 00 00 01 15 21 35 13 21 01 33 01 21 01 11 21 11 07 e2 f8 37 21 01 e5 01 d3 14 01 d3 01 e5 fd 15 fe 52 06 55 de de 01 ab fc 8e 03 72 fa d4 fd 2c 02 d4 ff ff 00 3a 00 00 07 be 08 00 02 06 01 d5 00 00 ff ff 00 22 00 00 09 f2 08 93 00 27 01 d5 02 34 Data Ascii: SUvvUSyySUvvUSy:&m:u&pb:&f:&:&:Q&k<!5!3!!7!RUr,:"'4
2024-12-18 16:27:40 UTC	9000	IN	Data Raw: c6 fe 56 01 9e 12 34 e8 af a0 ef 85 01 fe 56 01 91 82 57 85 4b fd 30 03 e5 5e 8d bb 6d 2d 09 05 01 45 03 05 3d 5a 03 d6 fc 88 08 00 fc f1 88 9b 8b fe fd b4 fc 2e 03 86 8e 9e 4a 8d 02 94 fb fb 00 02 00 aa 00 00 06 32 08 1c 00 12 00 29 00 00 01 21 35 34 3e 02 33 32 16 17 11 26 26 23 22 06 06 15 13 11 21 11 21 11 33 36 36 33 32 16 12 15 11 21 11 36 26 23 22 06 06 02 40 fe 6a 58 95 b9 62 4b 68 27 19 33 1d 36 69 44 14 fe 56 01 96 12 33 f0 ab a0 ee 84 fe 56 01 92 80 56 83 49 06 00 3d 95 bb 67 28 09 05 fe bb 03 05 19 40 3b fd 3b fc 88 06 00 fe f1 86 9d 8c fe fd b3 fc 2e 03 86 8d 9f 4a 8d 00 03 00 aa fd c0 06 32 08 1c 00 11 00 24 00 3b 00 00 21 21 15 14 0e 02 23 22 26 27 11 16 16 33 32 36 35 01 21 35 34 3e 02 33 32 16 17 11 26 26 23 22 06 06 15 13 11 21 11 21 11 Data Ascii: V4VWK0^m-E=Z.J2)!54>32&&#"!!36632!6&#"@jXbKh'36iDV3VVI=g(@;;.J2$;!!#"&'3265!54>32&&#"!!
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: 05 20 51 4b 00 02 00 aa fd c0 04 4e 06 16 00 03 00 17 00 00 13 11 21 11 01 11 21 11 33 36 36 33 32 16 17 11 26 26 23 22 06 06 15 11 aa 01 aa fe 56 01 9d 10 2a c6 81 20 4a 1c 1e 6a 2c 5e 93 55 fd c0 02 40 fd c0 02 40 06 00 fe f4 8f 93 08 07 fe 86 09 0e 51 90 5e fc 9b ff ff 00 aa 00 00 04 4e 08 8d 02 26 03 45 00 00 00 06 06 64 c7 00 ff ff 00 43 fd 70 04 4e 06 16 02 26 03 45 00 00 00 06 06 77 01 00 ff ff 00 42 00 00 04 aa 08 7e 02 26 03 45 00 00 00 07 06 73 ff 62 00 00 ff ff ff be 00 00 04 4e 08 8d 02 26 03 45 00 00 00 07 06 7b 05 70 00 00 ff ff 00 84 00 00 04 64 08 96 02 26 03 45 00 00 00 07 06 7f 05 dd 00 c2 ff ff 00 aa 00 00 04 4e 08 75 02 26 03 45 00 00 00 07 06 70 00 dc 00 00 ff ff 00 9a fd c1 04 4e 06 16 02 26 03 45 00 00 00 07 06 8b 04 87 00 00 ff ff Data Ascii: QKN!!36632&&#"V* Jj,^U@@Q^N&EdCpN&EwB~&EsbN&E{pd&ENu&EpN&E
2024-12-18 16:27:40 UTC	1616	IN	Data Raw: 14 45 01 d5 21 36 37 0b 18 08 26 1d 61 fa 5b 02 61 01 0b 7c fe c6 19 8c 88 02 e7 01 a4 90 55 51 08 1a 01 4a 13 15 c0 b6 fb 2e 58 4a 03 01 fe c7 0a 0d 1a 06 4e fd 44 fc 6e 00 02 00 9a fd e2 05 ba 08 1c 00 17 00 37 00 00 01 03 26 23 22 06 06 15 14 16 33 33 15 23 22 24 26 35 34 36 24 33 32 16 01 33 15 23 22 06 06 15 14 16 17 17 16 16 07 0e 02 07 27 36 36 35 34 26 27 27 24 26 35 10 00 05 67 40 ba 88 60 86 45 a0 99 d5 da f3 fe bd a2 aa 01 38 d5 6d cc fe f1 d1 c9 90 c8 67 a0 b2 a3 ce b7 01 02 57 95 5f d7 44 3e 4b 4e fc fe fd e5 01 b4 07 d3 fe bc 34 2c 56 3f 67 65 ee 64 cb 99 a1 eb 80 24 fc c8 e7 4b 93 6d 80 9e 28 24 2e ab 79 54 b4 a5 43 9f 43 75 29 30 44 15 55 49 fe d9 01 2e 01 32 00 03 00 b3 ff ee 07 85 06 00 00 03 00 07 00 18 00 00 01 11 21 11 21 11 21 11 21 Data Ascii: E!67&a[a\|UQJ.XJNDn7&#"33#"$&546$323#"'6654&''$&5g@`E8mgW_D>KN4,V?ged$Km($.yTCCu)0DUI.2!!!!
2024-12-18 16:27:40 UTC	9000	IN	Data Raw: dd e0 fe aa cd 15 fd d8 0a 60 f5 a0 03 35 0d 8b e4 8f 8e df 8a 0c 0c 8a df 8e 8f e4 8b 0d 00 02 00 aa fd 70 08 66 06 00 00 1e 00 22 00 00 13 21 11 14 16 04 33 32 24 36 35 2e 03 27 21 1e 03 15 14 02 06 04 21 20 24 02 11 01 21 11 21 aa 01 97 94 01 01 a4 dc 01 07 75 02 17 29 37 20 01 74 25 43 33 1e 66 e4 fe 84 fe e8 fe d6 fe 43 f7 03 10 01 94 fe 6c 06 00 fd 26 bb db 5d 86 eb 98 53 b5 ba b3 4f 3b 9d b8 ca 6a a8 fe cd f2 8b ad 01 72 01 27 02 d6 f7 70 00 02 00 eb ff e4 09 5f 06 00 00 18 00 32 00 00 01 21 06 02 06 15 14 16 33 32 36 35 11 21 11 14 02 06 23 22 24 02 13 36 12 25 21 16 12 17 12 02 04 23 22 26 02 35 11 21 11 14 16 33 32 36 36 35 34 26 02 01 da 01 8b 50 62 2d 78 70 61 78 01 37 7b f7 bd bc fe ed 95 02 01 7a 05 7e 01 8b 71 7a 02 01 95 fe ed bc bc f8 7a Data Ascii: `5pf"!32$65.'!! $!!u)7 t%C3fCl&]SO;jr'p_2!3265!#"$6%!#"&5!326654&Pb-xpax7{z~qzz
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: 20 00 17 11 21 11 26 26 23 21 11 21 21 11 21 11 21 32 36 35 11 21 11 14 00 21 c6 04 31 01 1a 01 07 01 fe 60 01 4e 68 fd a4 fe 60 02 59 01 a0 02 5d 5f 57 01 a0 fe f8 fe e7 06 00 fe f1 f1 fe 01 01 ff 5b 56 fb 4f 03 ff fd 50 4f 62 03 ee fc 12 f1 fe f1 00 02 00 b3 00 00 07 ba 06 00 00 15 00 19 00 00 21 21 35 34 02 26 23 22 06 02 15 15 21 35 10 12 24 21 20 04 12 13 01 11 21 11 07 ba fe 61 7c dc 8f 90 db 7a fe 64 e9 01 96 01 02 01 03 01 97 eb 01 fd 4c fe 60 e9 ce 01 1e 95 95 fe e2 ce e9 e4 01 2f 01 b8 ef ef fe 48 fe d1 05 1c fa 00 06 00 ff ff 00 b2 ff e2 0c 90 08 00 00 26 01 7e 00 00 00 07 03 63 06 c5 00 00 00 05 00 c2 00 00 07 a6 08 00 00 03 00 07 00 0b 00 25 00 29 00 00 01 23 11 33 01 23 11 33 01 11 21 11 25 20 24 02 35 10 12 24 21 20 04 12 11 21 36 26 26 23 Data Ascii: !&&#!!!!!265!!1`Nh`Y]_W[VOPOb!!54&#"!5$! !a\|zdL`/H&~c%)#3#3!% $5$! !6&&#
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: fe a0 01 a8 04 53 02 07 05 d1 00 00 fa a0 ff ff ff ce fd 20 01 a6 04 53 02 07 05 d2 00 00 fa a0 ff ff 00 6a fe a0 04 53 03 f4 02 07 05 d3 00 00 fa a0 ff ff 00 6a fe a0 01 99 03 f4 02 07 05 d4 00 00 fa a0 ff ff 00 6a fe a0 06 4f 02 ac 02 07 05 d5 00 00 fa a0 ff ff 00 6a fe a0 04 2a 02 ac 02 07 05 d6 00 00 fa a0 00 02 00 43 fe 8c 04 3f 02 ac 00 0f 00 1f 00 00 01 22 26 26 35 34 36 36 33 32 16 16 15 14 06 06 27 32 36 36 35 34 26 26 23 22 06 06 15 14 16 16 02 42 9e e5 7c 7c e5 9e 9e e4 7b 7b e4 9e 45 59 2c 2a 5a 46 47 5a 2b 2c 5a fe 8c 84 ee 9e 9e ee 84 84 ee 9e 9e ee 84 eb 4e 84 53 52 86 4e 4e 86 52 53 84 4e ff ff 00 6c fd 20 04 63 02 ac 02 07 05 d8 00 00 fa a0 ff ff 00 47 fd 20 04 3e 02 ac 02 07 05 d9 00 00 fa a0 ff ff 00 6a fe a0 03 18 02 ae 02 07 05 da 00 Data Ascii: S SjSjjOjC?"&&546632'26654&&#"B\|\|{{EY,ZFGZ+,ZNSRNNRSNl cG >j
2024-12-18 16:27:40 UTC	16384	IN	Data Raw: ff 00 64 fc c0 0e e4 0b 40 00 27 05 35 04 b3 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 4b 04 12 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 5e 05 10 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 9b 03 bf 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 9c 04 0f 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 9f 03 e7 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a1 03 e7 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a2 03 e7 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a3 03 e7 00 00 00 07 07 07 03 b7 00 00 ff ff 00 64 fc c0 0e e4 0b 40 00 27 05 a4 03 e7 00 00 00 07 07 07 Data Ascii: d@'5d@'Kd@'^d@'d@'d@'d@'d@'d@'d@'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49836	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:42 UTC	891	OUT	GET /favicon.ico HTTP/1.1 Host: res.cisco.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://res.cisco.com/websafe/help?topic=AddrNotShown Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rj6LTdRJZ6ePxKDAXLbjLPLlHgSxpIO/K3xVThVCcF4PSXc7mC+tHn/fWPzJouIJ0IG226hHQ0/dusdMv6VlvgPfWwkFhftihQvh0X3i/ummZb3RF52u4FuLCjem; AWSALBCORS=rj6LTdRJZ6ePxKDAXLbjLPLlHgSxpIO/K3xVThVCcF4PSXc7mC+tHn/fWPzJouIJ0IG226hHQ0/dusdMv6VlvgPfWwkFhftihQvh0X3i/ummZb3RF52u4FuLCjem
2024-12-18 16:27:42 UTC	687	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:42 GMT Content-Length: 1150 Connection: close Set-Cookie: AWSALB=vRnIuk2tvqD9uXqa8qfubZ1Ai6HKiyye9sTDgKRxHiau4Hb7Eqpm2iYP+ej2WfAXI+Py+atScDJvgrxCkhtCNLeXTQb2D1TeVzbXzTw9Le/E+r9UTwTeCzCdZlkG; Expires=Wed, 25 Dec 2024 16:27:42 GMT; Path=/ Set-Cookie: AWSALBCORS=vRnIuk2tvqD9uXqa8qfubZ1Ai6HKiyye9sTDgKRxHiau4Hb7Eqpm2iYP+ej2WfAXI+Py+atScDJvgrxCkhtCNLeXTQb2D1TeVzbXzTw9Le/E+r9UTwTeCzCdZlkG; Expires=Wed, 25 Dec 2024 16:27:42 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"1150-1732825374000" Last-Modified: Thu, 28 Nov 2024 20:22:54 GMT Server: unknown
2024-12-18 16:27:42 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a8 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49842	52.1.46.41	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:27:44 UTC	626	OUT	GET /favicon.ico HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=vRnIuk2tvqD9uXqa8qfubZ1Ai6HKiyye9sTDgKRxHiau4Hb7Eqpm2iYP+ej2WfAXI+Py+atScDJvgrxCkhtCNLeXTQb2D1TeVzbXzTw9Le/E+r9UTwTeCzCdZlkG; AWSALBCORS=vRnIuk2tvqD9uXqa8qfubZ1Ai6HKiyye9sTDgKRxHiau4Hb7Eqpm2iYP+ej2WfAXI+Py+atScDJvgrxCkhtCNLeXTQb2D1TeVzbXzTw9Le/E+r9UTwTeCzCdZlkG
2024-12-18 16:27:44 UTC	687	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 16:27:44 GMT Content-Length: 1150 Connection: close Set-Cookie: AWSALB=6LJrja5MZEWjFU7Q+uwBEAUDz6crfr2+7AHi4Ue49+417p2ifxPnpH/leaeMs9X0aeK2fGXQ9dV5uZgtB+E0V3Zk8kM96lAnt/6Rg0g1REaDSqlwG2GaJrzobHNU; Expires=Wed, 25 Dec 2024 16:27:44 GMT; Path=/ Set-Cookie: AWSALBCORS=6LJrja5MZEWjFU7Q+uwBEAUDz6crfr2+7AHi4Ue49+417p2ifxPnpH/leaeMs9X0aeK2fGXQ9dV5uZgtB+E0V3Zk8kM96lAnt/6Rg0g1REaDSqlwG2GaJrzobHNU; Expires=Wed, 25 Dec 2024 16:27:44 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"1150-1732825374000" Last-Modified: Thu, 28 Nov 2024 20:22:54 GMT Server: unknown
2024-12-18 16:27:44 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a8 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	50058	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:29:19 UTC	785	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=google&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6LJrja5MZEWjFU7Q+uwBEAUDz6crfr2+7AHi4Ue49+417p2ifxPnpH/leaeMs9X0aeK2fGXQ9dV5uZgtB+E0V3Zk8kM96lAnt/6Rg0g1REaDSqlwG2GaJrzobHNU; AWSALBCORS=KR0dO1xChQWXW3+blCLyb8sdSwOGwkn7Z/rAAV6OuCFge9KmjoXVxEUestO79QKR3BLcFf8vNpBO8xS6UTXW8bR+zJpOtw/0uO0QzcU1zFV7JgeB2dDGYWG/BIFB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	50059	54.161.144.184	443	6572	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 16:29:19 UTC	781	OUT	GET /envelopeopener/pf/ZGJAVG9rZW4zMzcxOjEzNTk2/JPtRSgzT29u6egjoYim1K1kOrPOg3i.wUY14OLNx2pxFcykbpQWPXsZrvf3cBhrTAcvWwLNvGPQHe36qMaTJ-bT256B.sHk28g!!/?button=ok&lp=en&try=1 HTTP/1.1 Host: res.cisco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6LJrja5MZEWjFU7Q+uwBEAUDz6crfr2+7AHi4Ue49+417p2ifxPnpH/leaeMs9X0aeK2fGXQ9dV5uZgtB+E0V3Zk8kM96lAnt/6Rg0g1REaDSqlwG2GaJrzobHNU; AWSALBCORS=sN1tYIgzWD7IW6vuNIsFtjs3rLqdWHqS+IT8ZTSgH204KBexVtZfYJf7PK91lVERHw5KhXOOb7O2AV8og3RX2BnanBBL/0b36vUPHbLAPrxrLNnd5QUqGmDHvE4Z

Target ID:	0
Start time:	11:27:04
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\securedoc_20241217T163143.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:27:08
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2788 --field-trial-handle=2324,i,13382261799345737028,12339842014919683157,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report securedoc_20241217T163143.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Windows Analysis Report
securedoc_20241217T163143.html